<?xml version="1.0" encoding="UTF-8"?>
<oval_definitions xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux hpux-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#linux linux-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#windows windows-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#independent independent-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris solaris-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#unix unix-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#ios ios-definitions-schema.xsd" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5">
  <generator>
    <oval:product_name>The OVAL Repository</oval:product_name>
    <oval:schema_version>5.3</oval:schema_version>
    <oval:timestamp>2015-09-03T06:21:40.371-04:00</oval:timestamp>
  </generator>
  <definitions>
    <definition id="oval:org.mitre.oval:def:9999" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to improper interaction with ksm.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0436"/>
        <description>Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to improper interaction with ksm.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:35.831-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:27.675-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:36.709-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9999 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:23.622-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:24:01.633-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdebase is earlier than 6:3.3.1-13.el4_8.1" test_ref="oval:org.mitre.oval:tst:39507"/>
            <criterion comment="kdebase-devel is earlier than 6:3.3.1-13.el4_8.1" test_ref="oval:org.mitre.oval:tst:40464"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdebase is earlier than 6:3.5.4-21.el5_5.1" test_ref="oval:org.mitre.oval:tst:40335"/>
            <criterion comment="kdebase-devel is earlier than 6:3.5.4-21.el5_5.1" test_ref="oval:org.mitre.oval:tst:40374"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9998" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a compressed GIF file, related to gifcodec.cpp and gifimage.cpp.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4245" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4245"/>
        <description>Heap-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a compressed GIF file, related to gifcodec.cpp and gifimage.cpp.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:38.878-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:27.493-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:36.516-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9998 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:42.696-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:24:01.342-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="HelixPlayer is earlier than 1:1.0.6-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39912"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9997" version="5" class="vulnerability">
      <metadata>
        <title>The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0718" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0718"/>
        <description>The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:21.181-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:27.199-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:36.215-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9997 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:50.342-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:24:00.946-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mozilla-js-debugger is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30799"/>
          <criterion comment="mozilla is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30278"/>
          <criterion comment="mozilla-chat is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30755"/>
          <criterion comment="mozilla-mail is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30570"/>
          <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30230"/>
          <criterion comment="mozilla-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30288"/>
          <criterion comment="mozilla-nss is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30323"/>
          <criterion comment="mozilla-nss-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30339"/>
          <criterion comment="mozilla-nspr is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30813"/>
          <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30660"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9996" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute arbitrary code via a crafted request to rename a principal.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2798" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2798"/>
        <description>Stack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute arbitrary code via a crafted request to rename a principal.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:10.334-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:26.770-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:35.766-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9996 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:02.908-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:24:00.367-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.2.7-66" test_ref="oval:org.mitre.oval:tst:33627"/>
            <criterion comment="krb5 is earlier than 0:1.2.7-66" test_ref="oval:org.mitre.oval:tst:34238"/>
            <criterion comment="krb5-libs is earlier than 0:1.2.7-66" test_ref="oval:org.mitre.oval:tst:34171"/>
            <criterion comment="krb5-server is earlier than 0:1.2.7-66" test_ref="oval:org.mitre.oval:tst:33767"/>
            <criterion comment="krb5-devel is earlier than 0:1.2.7-66" test_ref="oval:org.mitre.oval:tst:34147"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.3.4-49" test_ref="oval:org.mitre.oval:tst:34640"/>
            <criterion comment="krb5 is earlier than 0:1.3.4-49" test_ref="oval:org.mitre.oval:tst:34202"/>
            <criterion comment="krb5-libs is earlier than 0:1.3.4-49" test_ref="oval:org.mitre.oval:tst:34749"/>
            <criterion comment="krb5-server is earlier than 0:1.3.4-49" test_ref="oval:org.mitre.oval:tst:34767"/>
            <criterion comment="krb5-devel is earlier than 0:1.3.4-49" test_ref="oval:org.mitre.oval:tst:34660"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.5-26" test_ref="oval:org.mitre.oval:tst:34728"/>
            <criterion comment="krb5 is earlier than 0:1.5-26" test_ref="oval:org.mitre.oval:tst:34350"/>
            <criterion comment="krb5-libs is earlier than 0:1.5-26" test_ref="oval:org.mitre.oval:tst:34575"/>
            <criterion comment="krb5-server is earlier than 0:1.5-26" test_ref="oval:org.mitre.oval:tst:34729"/>
            <criterion comment="krb5-devel is earlier than 0:1.5-26" test_ref="oval:org.mitre.oval:tst:34195"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9995" version="5" class="vulnerability">
      <metadata>
        <title>The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 and other 7th and 8th generation AuthenticAMD processors, only save/restore the FOP, FIP, and FDP x87 registers in FXSAVE/FXRSTOR when an exception is pending, which allows one process to determine portions of the state of floating point instructions of other processes, which can be leveraged to obtain sensitive information such as cryptographic keys.  NOTE: this is the documented behavior of AMD64 processors, but it is inconsistent with Intel processers in a security-relevant fashion that was not addressed by the kernels.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1056" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1056"/>
        <description>The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 and other 7th and 8th generation AuthenticAMD processors, only save/restore the FOP, FIP, and FDP x87 registers in FXSAVE/FXRSTOR when an exception is pending, which allows one process to determine portions of the state of floating point instructions of other processes, which can be leveraged to obtain sensitive information such as cryptographic keys.  NOTE: this is the documented behavior of AMD64 processors, but it is inconsistent with Intel processers in a security-relevant fashion that was not addressed by the kernels.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:05.980-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:26.348-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:35.189-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9995 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:25.620-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:59.785-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32158"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32589"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32704"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32562"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32078"/>
            <criterion comment="kernel is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32513"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32231"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32097"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32708"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32335"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32833"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32825"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32836"/>
            <criterion comment="kernel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32736"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:31931"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32361"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32793"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32795"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9994" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a multipart/alternative e-mail message containing a text/enhanced part that triggers access to an incorrect object type.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2210" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2210"/>
        <description>Mozilla Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a multipart/alternative e-mail message containing a text/enhanced part that triggers access to an incorrect object type.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:16.910-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:25.828-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:34.694-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9994 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:07.247-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:59.144-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.39.el3" test_ref="oval:org.mitre.oval:tst:38621"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.39.el3" test_ref="oval:org.mitre.oval:tst:38710"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.39.el3" test_ref="oval:org.mitre.oval:tst:38897"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.39.el3" test_ref="oval:org.mitre.oval:tst:38330"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.39.el3" test_ref="oval:org.mitre.oval:tst:38382"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.39.el3" test_ref="oval:org.mitre.oval:tst:38913"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.39.el3" test_ref="oval:org.mitre.oval:tst:38781"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.39.el3" test_ref="oval:org.mitre.oval:tst:38614"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.39.el3" test_ref="oval:org.mitre.oval:tst:38727"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.39.el3" test_ref="oval:org.mitre.oval:tst:38447"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-44.el4_8" test_ref="oval:org.mitre.oval:tst:38465"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-44.el4_8" test_ref="oval:org.mitre.oval:tst:38839"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-23.el4" test_ref="oval:org.mitre.oval:tst:38562"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-44.el4_8" test_ref="oval:org.mitre.oval:tst:38248"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-44.el4_8" test_ref="oval:org.mitre.oval:tst:38879"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-44.el4_8" test_ref="oval:org.mitre.oval:tst:38157"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-44.el4_8" test_ref="oval:org.mitre.oval:tst:38757"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="thunderbird is earlier than 0:2.0.0.22-2.el5_3" test_ref="oval:org.mitre.oval:tst:38801"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9993" version="5" class="vulnerability">
      <metadata>
        <title>pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2672" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2672"/>
        <description>pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:27.771-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:25.632-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:34.487-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9993 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:36:10.379-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:58.813-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="lm_sensors-devel is earlier than 0:2.8.7-2.40.3" test_ref="oval:org.mitre.oval:tst:31850"/>
          <criterion comment="lm_sensors is earlier than 0:2.8.7-2.40.3" test_ref="oval:org.mitre.oval:tst:32360"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9992" version="5" class="vulnerability">
      <metadata>
        <title>Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3626"/>
        <description>Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:48.624-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:25.147-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:33.964-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9992 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:00.441-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:58.162-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32436"/>
            <criterion comment="tetex-dvips is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32311"/>
            <criterion comment="tetex-fonts is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32279"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.36" test_ref="oval:org.mitre.oval:tst:32437"/>
            <criterion comment="tetex is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32507"/>
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.36" test_ref="oval:org.mitre.oval:tst:32206"/>
            <criterion comment="tetex-afm is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32377"/>
            <criterion comment="xpdf is earlier than 1:2.02-9.8" test_ref="oval:org.mitre.oval:tst:31474"/>
            <criterion comment="tetex-xdvi is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:31613"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.36" test_ref="oval:org.mitre.oval:tst:31553"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32260"/>
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-3.6" test_ref="oval:org.mitre.oval:tst:32395"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32095"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-3.6" test_ref="oval:org.mitre.oval:tst:31805"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32489"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.10" test_ref="oval:org.mitre.oval:tst:32284"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32199"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-7.4" test_ref="oval:org.mitre.oval:tst:32545"/>
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.10" test_ref="oval:org.mitre.oval:tst:32254"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32308"/>
            <criterion comment="xpdf is earlier than 1:3.00-11.10" test_ref="oval:org.mitre.oval:tst:32152"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32333"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32317"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.10" test_ref="oval:org.mitre.oval:tst:32499"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9991" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of unspecified data structures.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6102" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6102"/>
        <description>Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of unspecified data structures.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:44.536-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:24.308-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:33.178-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9991 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:27.363-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:57.195-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33279"/>
            <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33033"/>
            <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33135"/>
            <criterion comment="XFree86-libs is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:32975"/>
            <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33134"/>
            <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:32756"/>
            <criterion comment="XFree86-twm is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33026"/>
            <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33238"/>
            <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33343"/>
            <criterion comment="XFree86-doc is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:32868"/>
            <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:32574"/>
            <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33217"/>
            <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33260"/>
            <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33106"/>
            <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33262"/>
            <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33329"/>
            <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:32993"/>
            <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33159"/>
            <criterion comment="XFree86-xdm is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33053"/>
            <criterion comment="XFree86-sdk is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33163"/>
            <criterion comment="XFree86 is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33308"/>
            <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:32484"/>
            <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33294"/>
            <criterion comment="XFree86-xfs is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33176"/>
            <criterion comment="XFree86-tools is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:32802"/>
            <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:32909"/>
            <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33270"/>
            <criterion comment="XFree86-xauth is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33234"/>
            <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33180"/>
            <criterion comment="XFree86-devel is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:32796"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33158"/>
            <criterion comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33322"/>
            <criterion comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33297"/>
            <criterion comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33211"/>
            <criterion comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33206"/>
            <criterion comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33346"/>
            <criterion comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33222"/>
            <criterion comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33340"/>
            <criterion comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33228"/>
            <criterion comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33187"/>
            <criterion comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33289"/>
            <criterion comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33242"/>
            <criterion comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33068"/>
            <criterion comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33283"/>
            <criterion comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33337"/>
            <criterion comment="xorg-x11 is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:32984"/>
            <criterion comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33352"/>
            <criterion comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33122"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9990" version="5" class="vulnerability">
      <metadata>
        <title>The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomic_open is available, does not check execute (aka EXEC or MAY_EXEC) permission bits, which allows local users to bypass permissions and execute files, as demonstrated by files on an NFSv4 fileserver.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1630" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1630"/>
        <description>The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomic_open is available, does not check execute (aka EXEC or MAY_EXEC) permission bits, which allows local users to bypass permissions and execute files, as demonstrated by files on an NFSv4 fileserver.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:18.827-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:23.779-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:32.649-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9990 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:26.346-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:56.504-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38892"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38222"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:37924"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38847"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38834"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38158"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38513"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38317"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38277"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38667"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38814"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:37971"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38820"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38641"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38838"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38699"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38813"/>
            <criterion comment="kernel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38840"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38890"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38529"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38350"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38066"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38388"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9989" version="5" class="vulnerability">
      <metadata>
        <title>The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a RADIUS attribute with a large length value.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0055" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0055"/>
        <description>The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a RADIUS attribute with a large length value.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:59.777-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:23.584-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:32.436-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9989 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:28.764-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:56.229-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="libpcap is earlier than 14:0.7.2-7.E3.1" test_ref="oval:org.mitre.oval:tst:30562"/>
          <criterion comment="tcpdump is earlier than 14:3.7.2-7.E3.1" test_ref="oval:org.mitre.oval:tst:30488"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9988" version="5" class="vulnerability">
      <metadata>
        <title>Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.9 allow remote attackers to inject arbitrary web script or HTML via the (1) mailto parameter in (a) webmail.php, the (2) session and (3) delete_draft parameters in (b) compose.php, and (4) unspecified vectors involving "a shortcoming in the magicHTML filter."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6142" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6142"/>
        <description>Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.9 allow remote attackers to inject arbitrary web script or HTML via the (1) mailto parameter in (a) webmail.php, the (2) session and (3) delete_draft parameters in (b) compose.php, and (4) unspecified vectors involving "a shortcoming in the magicHTML filter."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:40.683-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:23.364-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:32.209-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9988 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:17.179-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:55.853-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-4.el3" test_ref="oval:org.mitre.oval:tst:32449"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-4.el4" test_ref="oval:org.mitre.oval:tst:33384"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9987" version="5" class="vulnerability">
      <metadata>
        <title>The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5081" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5081"/>
        <description>The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:07.476-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:23.001-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:31.832-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9987 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:11.415-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:55.086-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="avahi-devel is earlier than 0:0.6.16-1.el5_2.1" test_ref="oval:org.mitre.oval:tst:37798"/>
          <criterion comment="avahi-qt3 is earlier than 0:0.6.16-1.el5_2.1" test_ref="oval:org.mitre.oval:tst:38120"/>
          <criterion comment="avahi-tools is earlier than 0:0.6.16-1.el5_2.1" test_ref="oval:org.mitre.oval:tst:37859"/>
          <criterion comment="avahi-glib is earlier than 0:0.6.16-1.el5_2.1" test_ref="oval:org.mitre.oval:tst:37982"/>
          <criterion comment="avahi-qt3-devel is earlier than 0:0.6.16-1.el5_2.1" test_ref="oval:org.mitre.oval:tst:38067"/>
          <criterion comment="avahi-compat-howl-devel is earlier than 0:0.6.16-1.el5_2.1" test_ref="oval:org.mitre.oval:tst:38123"/>
          <criterion comment="avahi-compat-libdns_sd-devel is earlier than 0:0.6.16-1.el5_2.1" test_ref="oval:org.mitre.oval:tst:38074"/>
          <criterion comment="avahi is earlier than 0:0.6.16-1.el5_2.1" test_ref="oval:org.mitre.oval:tst:37900"/>
          <criterion comment="avahi-compat-libdns_sd is earlier than 0:0.6.16-1.el5_2.1" test_ref="oval:org.mitre.oval:tst:38051"/>
          <criterion comment="avahi-glib-devel is earlier than 0:0.6.16-1.el5_2.1" test_ref="oval:org.mitre.oval:tst:38229"/>
          <criterion comment="avahi-compat-howl is earlier than 0:0.6.16-1.el5_2.1" test_ref="oval:org.mitre.oval:tst:38201"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9986" version="5" class="vulnerability">
      <metadata>
        <title>Net-SNMP 5.0.x before 5.0.10.2, 5.2.x before 5.2.1.2, and 5.1.3, when net-snmp is using stream sockets such as TCP, allows remote attackers to cause a denial of service (daemon hang and CPU consumption) via a TCP packet of length 1, which triggers an infinite loop.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2177" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2177"/>
        <description>Net-SNMP 5.0.x before 5.0.10.2, 5.2.x before 5.2.1.2, and 5.1.3, when net-snmp is using stream sockets such as TCP, allows remote attackers to cause a denial of service (daemon hang and CPU consumption) via a TCP packet of length 1, which triggers an infinite loop.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:35.807-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:22.617-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:31.507-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9986 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:18.285-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:54.593-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="net-snmp-utils is earlier than 0:5.0.9-2.30E.19" test_ref="oval:org.mitre.oval:tst:31395"/>
            <criterion comment="net-snmp is earlier than 0:5.0.9-2.30E.19" test_ref="oval:org.mitre.oval:tst:30763"/>
            <criterion comment="net-snmp-libs is earlier than 0:5.0.9-2.30E.19" test_ref="oval:org.mitre.oval:tst:31684"/>
            <criterion comment="net-snmp-perl is earlier than 0:5.0.9-2.30E.19" test_ref="oval:org.mitre.oval:tst:31547"/>
            <criterion comment="net-snmp-devel is earlier than 0:5.0.9-2.30E.19" test_ref="oval:org.mitre.oval:tst:31390"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="net-snmp-utils is earlier than 0:5.1.2-11.EL4.6" test_ref="oval:org.mitre.oval:tst:31408"/>
            <criterion comment="net-snmp is earlier than 0:5.1.2-11.EL4.6" test_ref="oval:org.mitre.oval:tst:30993"/>
            <criterion comment="net-snmp-libs is earlier than 0:5.1.2-11.EL4.6" test_ref="oval:org.mitre.oval:tst:31414"/>
            <criterion comment="net-snmp-perl is earlier than 0:5.1.2-11.EL4.6" test_ref="oval:org.mitre.oval:tst:31691"/>
            <criterion comment="net-snmp-devel is earlier than 0:5.1.2-11.EL4.6" test_ref="oval:org.mitre.oval:tst:31766"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9985" version="5" class="vulnerability">
      <metadata>
        <title>RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1) disable RIPv1 or (2) require plaintext or MD5 authentication, which allows remote attackers to obtain sensitive information (routing state) via REQUEST packets such as SEND UPDATE.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2223" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2223"/>
        <description>RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1) disable RIPv1 or (2) require plaintext or MD5 authentication, which allows remote attackers to obtain sensitive information (routing state) via REQUEST packets such as SEND UPDATE.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:42.350-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:22.376-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:31.248-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9985 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:53.367-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:54.226-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="quagga is earlier than 0:0.96.2-11.3E" test_ref="oval:org.mitre.oval:tst:32541"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="quagga-devel is earlier than 0:0.98.3-2.4E" test_ref="oval:org.mitre.oval:tst:32744"/>
            <criterion comment="quagga is earlier than 0:0.98.3-2.4E" test_ref="oval:org.mitre.oval:tst:32471"/>
            <criterion comment="quagga-contrib is earlier than 0:0.98.3-2.4E" test_ref="oval:org.mitre.oval:tst:32544"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9984" version="5" class="vulnerability">
      <metadata>
        <title>The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA private keys.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3108" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3108"/>
        <description>The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA private keys.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:59.428-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:21.994-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:30.859-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9984 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:57.379-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:53.657-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.7a-33.24" test_ref="oval:org.mitre.oval:tst:35001"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.7a-33.24" test_ref="oval:org.mitre.oval:tst:34962"/>
            <criterion comment="openssl is earlier than 0:0.9.7a-33.24" test_ref="oval:org.mitre.oval:tst:34324"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.7a-43.17.el4_6.1" test_ref="oval:org.mitre.oval:tst:35545"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.7a-43.17.el4_6.1" test_ref="oval:org.mitre.oval:tst:35457"/>
            <criterion comment="openssl is earlier than 0:0.9.7a-43.17.el4_6.1" test_ref="oval:org.mitre.oval:tst:35580"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.8b-8.3.el5_0.2" test_ref="oval:org.mitre.oval:tst:35181"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.8b-8.3.el5_0.2" test_ref="oval:org.mitre.oval:tst:35460"/>
            <criterion comment="openssl is earlier than 0:0.9.8b-8.3.el5_0.2" test_ref="oval:org.mitre.oval:tst:35053"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9983" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe level" checks via unspecified vectors involving (1) the alias function and (2) "directory operations".</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3694" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3694"/>
        <description>Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe level" checks via unspecified vectors involving (1) the alias function and (2) "directory operations".</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:34.640-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:21.628-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:30.476-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9983 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:29:56.841-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:53.165-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.6.8-9.EL3.6" test_ref="oval:org.mitre.oval:tst:32443"/>
            <criterion comment="ruby-docs is earlier than 0:1.6.8-9.EL3.6" test_ref="oval:org.mitre.oval:tst:32730"/>
            <criterion comment="ruby-devel is earlier than 0:1.6.8-9.EL3.6" test_ref="oval:org.mitre.oval:tst:32800"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.6.8-9.EL3.6" test_ref="oval:org.mitre.oval:tst:32566"/>
            <criterion comment="ruby is earlier than 0:1.6.8-9.EL3.6" test_ref="oval:org.mitre.oval:tst:32264"/>
            <criterion comment="irb is earlier than 0:1.6.8-9.EL3.6" test_ref="oval:org.mitre.oval:tst:32482"/>
            <criterion comment="ruby-libs is earlier than 0:1.6.8-9.EL3.6" test_ref="oval:org.mitre.oval:tst:32617"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.8.1-7.EL4.6" test_ref="oval:org.mitre.oval:tst:32600"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.1-7.EL4.6" test_ref="oval:org.mitre.oval:tst:32723"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.1-7.EL4.6" test_ref="oval:org.mitre.oval:tst:32881"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.1-7.EL4.6" test_ref="oval:org.mitre.oval:tst:32751"/>
            <criterion comment="ruby is earlier than 0:1.8.1-7.EL4.6" test_ref="oval:org.mitre.oval:tst:32913"/>
            <criterion comment="irb is earlier than 0:1.8.1-7.EL4.6" test_ref="oval:org.mitre.oval:tst:32117"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.1-7.EL4.6" test_ref="oval:org.mitre.oval:tst:32804"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9982" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and attack vectors related to "missing sanity checks around exif processing."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3292" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3292"/>
        <description>Unspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and attack vectors related to "missing sanity checks around exif processing."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:28.890-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:20.856-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:29.709-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9982 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:49.081-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:52.117-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39717"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39629"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39915"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39741"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:40003"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39901"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39326"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39580"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:40010"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39927"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39619"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39111"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39417"/>
            <criterion comment="php is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39899"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39642"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39821"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39461"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39627"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39886"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39848"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39908"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39883"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39544"/>
            <criterion comment="php-common is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39804"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39875"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39748"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39802"/>
            <criterion comment="php is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39053"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39854"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39980"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39581"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39954"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39018"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39463"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39634"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39436"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39969"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39664"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39913"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39765"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9981" version="6" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the extract_one function from lhext.c in LHA may allow attackers to execute arbitrary code via a long w (working directory) command line option, a different issue than CVE-2004-0769. NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise used across security boundaries.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0694" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0694"/>
        <description>Buffer overflow in LHA 1.14 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to "command line processing," a different vulnerability than CVE-2004-0771.  NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise used across security boundaries.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:20.278-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:20.668-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:29.511-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9981 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:14.740-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:51.808-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="lha is earlier than 0:1.14i-10.4" test_ref="oval:org.mitre.oval:tst:29793"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9980" version="5" class="vulnerability">
      <metadata>
        <title>The generic_file_splice_write function in fs/splice.c in the Linux kernel before 2.6.19 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by splicing into an inode in order to create an executable file in a setgid directory, a different vulnerability than CVE-2008-4210.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3833" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3833"/>
        <description>The generic_file_splice_write function in fs/splice.c in the Linux kernel before 2.6.19 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by splicing into an inode in order to create an executable file in a setgid directory, a different vulnerability than CVE-2008-4210.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:45.387-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:20.249-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:29.188-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9980 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:59.733-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:51.396-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37778"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37855"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37870"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37881"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37504"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37738"/>
          <criterion comment="kernel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37774"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37247"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37715"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37954"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37668"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37947"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:998" version="1" class="vulnerability">
      <metadata>
        <title>Solaris Xorg Privilege Escalation via Pixmaps Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
          <product>X</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2495" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2495"/>
        <description>Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers to execute arbitrary code via a crafted pixmap image.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-02-12T01:16:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-03-09T12:19:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-04-06T06:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="OR">
          <criteria operator="AND" comment="Solaris 9 (x86,Xorg) meets Sun Alert ID 101926 criteria.">
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
            <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
            <criterion comment="Patch 118908-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1337"/>
            <criterion comment="File Xorg exists" negate="false" test_ref="oval:org.mitre.oval:tst:1336"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (x86,Xorg) meets Sun Alert ID 101926 criteria.">
            <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:2459"/>
            <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
            <criterion comment="Patch 118966-09 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1335"/>
            <criterion comment="File Xorg exists" negate="false" test_ref="oval:org.mitre.oval:tst:1336"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="The Xorg X server is running" negate="false" test_ref="oval:org.mitre.oval:tst:1334"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9979" version="5" class="vulnerability">
      <metadata>
        <title>Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruption and execute arbitrary code via a crafted PDF file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4352" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4352"/>
        <description>Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruption and execute arbitrary code via a crafted PDF file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:15.192-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:19.616-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:28.532-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9979 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:46.216-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:50.604-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="xpdf is earlier than 0:2.02-11.el3" test_ref="oval:org.mitre.oval:tst:35634"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.10" test_ref="oval:org.mitre.oval:tst:34998"/>
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-6.el4_5" test_ref="oval:org.mitre.oval:tst:35446"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.10" test_ref="oval:org.mitre.oval:tst:35156"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-6.el4_5" test_ref="oval:org.mitre.oval:tst:35404"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.10" test_ref="oval:org.mitre.oval:tst:35455"/>
            <criterion comment="cups-libs is earlier than 0:1.1.22-0.rc1.9.20.2.el4_5.2" test_ref="oval:org.mitre.oval:tst:35415"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.0.1.EL4.10" test_ref="oval:org.mitre.oval:tst:35178"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-7.7.1" test_ref="oval:org.mitre.oval:tst:35574"/>
            <criterion comment="cups-devel is earlier than 0:1.1.22-0.rc1.9.20.2.el4_5.2" test_ref="oval:org.mitre.oval:tst:34735"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.10" test_ref="oval:org.mitre.oval:tst:35585"/>
            <criterion comment="xpdf is earlier than 1:3.00-14.el4" test_ref="oval:org.mitre.oval:tst:35315"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.10" test_ref="oval:org.mitre.oval:tst:35591"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.10" test_ref="oval:org.mitre.oval:tst:35283"/>
            <criterion comment="cups is earlier than 0:1.1.22-0.rc1.9.20.2.el4_5.2" test_ref="oval:org.mitre.oval:tst:35537"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:3.0-33.2.el5_1.2" test_ref="oval:org.mitre.oval:tst:35498"/>
            <criterion comment="cups-lpd is earlier than 0:1.2.4-11.14.el5_1.3" test_ref="oval:org.mitre.oval:tst:35274"/>
            <criterion comment="tetex-dvips is earlier than 0:3.0-33.2.el5_1.2" test_ref="oval:org.mitre.oval:tst:35509"/>
            <criterion comment="poppler-utils is earlier than 0:0.5.4-4.3.el5_1" test_ref="oval:org.mitre.oval:tst:35147"/>
            <criterion comment="poppler is earlier than 0:0.5.4-4.3.el5_1" test_ref="oval:org.mitre.oval:tst:35549"/>
            <criterion comment="tetex-fonts is earlier than 0:3.0-33.2.el5_1.2" test_ref="oval:org.mitre.oval:tst:35527"/>
            <criterion comment="cups-libs is earlier than 0:1.2.4-11.14.el5_1.3" test_ref="oval:org.mitre.oval:tst:35427"/>
            <criterion comment="tetex is earlier than 0:3.0-33.2.el5_1.2" test_ref="oval:org.mitre.oval:tst:35459"/>
            <criterion comment="cups-devel is earlier than 0:1.2.4-11.14.el5_1.3" test_ref="oval:org.mitre.oval:tst:35508"/>
            <criterion comment="tetex-afm is earlier than 0:3.0-33.2.el5_1.2" test_ref="oval:org.mitre.oval:tst:35407"/>
            <criterion comment="tetex-xdvi is earlier than 0:3.0-33.2.el5_1.2" test_ref="oval:org.mitre.oval:tst:34618"/>
            <criterion comment="tetex-doc is earlier than 0:3.0-33.2.el5_1.2" test_ref="oval:org.mitre.oval:tst:34727"/>
            <criterion comment="poppler-devel is earlier than 0:0.5.4-4.3.el5_1" test_ref="oval:org.mitre.oval:tst:35496"/>
            <criterion comment="cups is earlier than 0:1.2.4-11.14.el5_1.3" test_ref="oval:org.mitre.oval:tst:35530"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9978" version="5" class="vulnerability">
      <metadata>
        <title>Linux kernel 2.4.x and 2.6.x up to 2.6.16 allows local users to bypass IPC permissions and modify a readonly attachment of shared memory by using mprotect to give write permission to the attachment.  NOTE: some original raw sources combined this issue with CVE-2006-1524, but they are different bugs.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2071" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2071"/>
        <description>Linux kernel 2.4.x and 2.6.x up to 2.6.16 allows local users to bypass IPC permissions and modify a readonly attachment of shared memory by using mprotect to give write permission to the attachment.  NOTE: some original raw sources combined this issue with CVE-2006-1524, but they are different bugs.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:57.150-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:19.204-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:28.103-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9978 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:27.461-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:50.053-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33074"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:32633"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33103"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33001"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:32937"/>
            <criterion comment="kernel is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:32280"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33127"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:32855"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33021"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32678"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32900"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:33014"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32947"/>
            <criterion comment="kernel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32944"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32956"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32602"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:33081"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32892"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9977" version="5" class="vulnerability">
      <metadata>
        <title>Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows local users to perform unauthorized named commands, such as causing a denial of service by stopping named.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6283" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6283"/>
        <description>Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows local users to perform unauthorized named commands, such as causing a denial of service by stopping named.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:39.267-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:18.885-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:27.771-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9977 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:55.612-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:49.653-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="bind-utils is earlier than 0:9.3.4-6.P1.el5" test_ref="oval:org.mitre.oval:tst:35853"/>
          <criterion comment="bind-libbind-devel is earlier than 0:9.3.4-6.P1.el5" test_ref="oval:org.mitre.oval:tst:36573"/>
          <criterion comment="bind-devel is earlier than 0:9.3.4-6.P1.el5" test_ref="oval:org.mitre.oval:tst:36695"/>
          <criterion comment="bind-chroot is earlier than 0:9.3.4-6.P1.el5" test_ref="oval:org.mitre.oval:tst:36618"/>
          <criterion comment="caching-nameserver is earlier than 0:9.3.4-6.P1.el5" test_ref="oval:org.mitre.oval:tst:36833"/>
          <criterion comment="bind-sdb is earlier than 0:9.3.4-6.P1.el5" test_ref="oval:org.mitre.oval:tst:36572"/>
          <criterion comment="bind is earlier than 0:9.3.4-6.P1.el5" test_ref="oval:org.mitre.oval:tst:36755"/>
          <criterion comment="bind-libs is earlier than 0:9.3.4-6.P1.el5" test_ref="oval:org.mitre.oval:tst:36364"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9976" version="5" class="vulnerability">
      <metadata>
        <title>Squid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does not prevent IP spoofing, allows remote attackers to spoof DNS lookups.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1519" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1519"/>
        <description>Squid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does not prevent IP spoofing, allows remote attackers to spoof DNS lookups.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:57.423-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:18.667-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:27.542-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9976 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:00.766-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:49.312-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE3-6.3E.13" test_ref="oval:org.mitre.oval:tst:31246"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE6-3.4E.9" test_ref="oval:org.mitre.oval:tst:31854"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9975" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2475"/>
        <description>Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:39.402-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:18.451-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:27.314-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9975 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:56.442-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:48.927-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="unzip is earlier than 0:5.50-35.EL3" test_ref="oval:org.mitre.oval:tst:30464"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="unzip is earlier than 0:5.51-9.EL4.5" test_ref="oval:org.mitre.oval:tst:33619"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9974" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the March 2010 CPU.  Oracle has not commented on claims from a reliable researcher that this is related to improper checks when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka "Trusted Methods Chaining Remote Code Execution Vulnerability."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0840" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0840"/>
        <description>Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the March 2010 CPU.  Oracle has not commented on claims from a reliable researcher that this is related to improper checks when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka "Trusted Methods Chaining Remote Code Execution Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:36.838-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:18.223-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:27.066-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9974 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:58.946-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:48.590-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39831"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39445"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40225"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40023"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40307"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9973" version="5" class="vulnerability">
      <metadata>
        <title>src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3.34 versions, does not validate string length fields in SDP packets, which allows remote SDP servers to cause a denial of service or possibly have unspecified other impact via a crafted length field that triggers excessive memory allocation or a buffer over-read.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2374" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2374"/>
        <description>src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3.34 versions, does not validate string length fields in SDP packets, which allows remote SDP servers to cause a denial of service or possibly have unspecified other impact via a crafted length field that triggers excessive memory allocation or a buffer over-read.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:11.733-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:17.888-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:26.715-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9973 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:24.563-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:48.149-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="bluez-libs is earlier than 0:2.10-3" test_ref="oval:org.mitre.oval:tst:37371"/>
            <criterion comment="bluez-utils-cups is earlier than 0:2.10-2.4" test_ref="oval:org.mitre.oval:tst:37307"/>
            <criterion comment="bluez-utils is earlier than 0:2.10-2.4" test_ref="oval:org.mitre.oval:tst:36921"/>
            <criterion comment="bluez-libs-devel is earlier than 0:2.10-3" test_ref="oval:org.mitre.oval:tst:37129"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="bluez-libs is earlier than 0:3.7-1.1" test_ref="oval:org.mitre.oval:tst:37391"/>
            <criterion comment="bluez-utils-cups is earlier than 0:3.7-2.2" test_ref="oval:org.mitre.oval:tst:37349"/>
            <criterion comment="bluez-utils is earlier than 0:3.7-2.2" test_ref="oval:org.mitre.oval:tst:37379"/>
            <criterion comment="bluez-libs-devel is earlier than 0:3.7-1.1" test_ref="oval:org.mitre.oval:tst:36988"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9972" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to cause a denial of service via a plain .txt file with a "Content-Disposition: attachment" and an invalid "Content-Type: plain/text," which prevents Firefox from rendering future plain text files within the browser.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0592" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0592"/>
        <description>Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to cause a denial of service via a plain .txt file with a "Content-Disposition: attachment" and an invalid "Content-Type: plain/text," which prevents Firefox from rendering future plain text files within the browser.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:01.426-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:17.359-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:26.170-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9972 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:24.332-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:47.293-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36256"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36236"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:35996"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36279"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36046"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36052"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36034"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36284"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:35748"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:35994"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36164"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36050"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-8.el4" test_ref="oval:org.mitre.oval:tst:36202"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36193"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36093"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36053"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.10.el4" test_ref="oval:org.mitre.oval:tst:35919"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:35600"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36141"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:35397"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:35684"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36203"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-9.el5" test_ref="oval:org.mitre.oval:tst:36281"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-9.el5" test_ref="oval:org.mitre.oval:tst:35480"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-8.el5" test_ref="oval:org.mitre.oval:tst:35675"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9971" version="5" class="vulnerability">
      <metadata>
        <title>TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with a large number of SPI's, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0183" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0183"/>
        <description>TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with a large number of SPI's, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:17.472-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:17.165-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:25.906-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9971 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:29:52.319-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:46.985-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="libpcap is earlier than 14:0.7.2-7.E3.2" test_ref="oval:org.mitre.oval:tst:30722"/>
          <criterion comment="tcpdump is earlier than 14:3.7.2-7.E3.2" test_ref="oval:org.mitre.oval:tst:29722"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9970" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unknown dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (assert error) via an invalid protocol tree item length.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1460" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1460"/>
        <description>Multiple unknown dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (assert error) via an invalid protocol tree item length.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:29.604-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:16.878-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:25.648-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9970 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:05.931-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:46.615-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31458"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31546"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31674"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31865"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:997" version="4" class="vulnerability">
      <metadata>
        <title>Red Hat Enterprise Linux 3 Kernel Serial Link Information Disclosure Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0461"/>
        <description>/proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial links, which could allow local users to obtain potentially sensitive information such as the length of passwords.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-12T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-07-12T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:45.280-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:12.394-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:927 - Removed unneeded negate=&quot;false&quot; and added &quot;xsi:nil='true'&quot; to filenames to indicate directory is the file object, not the files in the directory." date="2012-04-04T14:37:00.449-04:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2012-04-04T14:40:09.247-04:00">INTERIM</status_change>
            <status_change date="2012-04-23T04:00:24.894-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="kernel version is less than 2.4.21-15.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1342"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/proc/tty/driver/serial is world-readable" negate="false" test_ref="oval:org.mitre.oval:tst:1341"/>
          <criterion comment="/proc/tty/driver/ is world-executable" negate="false" test_ref="oval:org.mitre.oval:tst:1340"/>
          <criterion comment="/proc/tty/ is world-executable" negate="false" test_ref="oval:org.mitre.oval:tst:1339"/>
          <criterion comment="/proc/ is world-executable" negate="false" test_ref="oval:org.mitre.oval:tst:1338"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9969" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute arbitrary code via a TRANSACT2_QFILEPATHINFO request with a small "maximum data bytes" value.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0882" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0882"/>
        <description>Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute arbitrary code via a TRANSACT2_QFILEPATHINFO request with a small "maximum data bytes" value.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:23.576-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:16.660-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:25.410-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9969 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:50.318-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:46.319-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="samba-common is earlier than 0:3.0.7-1.3E.1" test_ref="oval:org.mitre.oval:tst:30820"/>
          <criterion comment="samba-swat is earlier than 0:3.0.7-1.3E.1" test_ref="oval:org.mitre.oval:tst:31128"/>
          <criterion comment="samba-client is earlier than 0:3.0.7-1.3E.1" test_ref="oval:org.mitre.oval:tst:31144"/>
          <criterion comment="samba is earlier than 0:3.0.7-1.3E.1" test_ref="oval:org.mitre.oval:tst:31136"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9968" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the WriteProlog function in texttops in CUPS 1.1.17 on Red Hat Enterprise Linux (RHEL) 3 allows remote attackers to execute arbitrary code via a crafted PostScript file that triggers a heap-based buffer overflow.  NOTE: this issue exists because of an incorrect fix for CVE-2008-3640.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0577" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0577"/>
        <description>Integer overflow in the WriteProlog function in texttops in CUPS 1.1.17 on Red Hat Enterprise Linux (RHEL) 3 allows remote attackers to execute arbitrary code via a crafted PostScript file that triggers a heap-based buffer overflow.  NOTE: this issue exists because of an incorrect fix for CVE-2008-3640.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:23.235-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:16.457-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:25.062-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9968 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:12.213-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:45.983-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.56" test_ref="oval:org.mitre.oval:tst:37836"/>
          <criterion comment="cups is earlier than 1:1.1.17-13.3.56" test_ref="oval:org.mitre.oval:tst:38122"/>
          <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.56" test_ref="oval:org.mitre.oval:tst:38220"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9967" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of memory, resulting in a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2834" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2834"/>
        <description>Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of memory, resulting in a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:04.925-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:14.306-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:22.938-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9967 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:08.581-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:43.715-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-40.2.0.EL3" test_ref="oval:org.mitre.oval:tst:34967"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.2-40.2.0.EL3" test_ref="oval:org.mitre.oval:tst:34907"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-40.2.0.EL3" test_ref="oval:org.mitre.oval:tst:34663"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34624"/>
            <criterion comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34985"/>
            <criterion comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34600"/>
            <criterion comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:35058"/>
            <criterion comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34840"/>
            <criterion comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34776"/>
            <criterion comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34590"/>
            <criterion comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:35090"/>
            <criterion comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:35105"/>
            <criterion comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34685"/>
            <criterion comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34233"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.5-10.6.0.2.EL4" test_ref="oval:org.mitre.oval:tst:34999"/>
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.2.EL4" test_ref="oval:org.mitre.oval:tst:34898"/>
            <criterion comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:35138"/>
            <criterion comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34744"/>
            <criterion comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34838"/>
            <criterion comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34903"/>
            <criterion comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34783"/>
            <criterion comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:35127"/>
            <criterion comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:35036"/>
            <criterion comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:35135"/>
            <criterion comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:35130"/>
            <criterion comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34854"/>
            <criterion comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34867"/>
            <criterion comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:35190"/>
            <criterion comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34239"/>
            <criterion comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34269"/>
            <criterion comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:35163"/>
            <criterion comment="openoffice.org2 is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34429"/>
            <criterion comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34318"/>
            <criterion comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34522"/>
            <criterion comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34715"/>
            <criterion comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34987"/>
            <criterion comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:35152"/>
            <criterion comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34733"/>
            <criterion comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34947"/>
            <criterion comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34830"/>
            <criterion comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:35107"/>
            <criterion comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34895"/>
            <criterion comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34353"/>
            <criterion comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:35096"/>
            <criterion comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34629"/>
            <criterion comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:35089"/>
            <criterion comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34887"/>
            <criterion comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34939"/>
            <criterion comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34988"/>
            <criterion comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34591"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.2.EL4" test_ref="oval:org.mitre.oval:tst:34737"/>
            <criterion comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34412"/>
            <criterion comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34871"/>
            <criterion comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34717"/>
            <criterion comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.2.EL4" test_ref="oval:org.mitre.oval:tst:34942"/>
            <criterion comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:35019"/>
            <criterion comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34969"/>
            <criterion comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:35129"/>
            <criterion comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34980"/>
            <criterion comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34548"/>
            <criterion comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:35098"/>
            <criterion comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34983"/>
            <criterion comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34904"/>
            <criterion comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:35206"/>
            <criterion comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:34571"/>
            <criterion comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:org.mitre.oval:tst:35205"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-langpack-sk_SK is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35157"/>
            <criterion comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35006"/>
            <criterion comment="openoffice.org-langpack-pa_IN is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34919"/>
            <criterion comment="openoffice.org-langpack-hi_IN is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35196"/>
            <criterion comment="openoffice.org-langpack-et_EE is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35104"/>
            <criterion comment="openoffice.org-langpack-kn_IN is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34449"/>
            <criterion comment="openoffice.org is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34768"/>
            <criterion comment="openoffice.org-langpack-zh_TW is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35222"/>
            <criterion comment="openoffice.org-writer is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35111"/>
            <criterion comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35231"/>
            <criterion comment="openoffice.org-langpack-ga_IE is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35237"/>
            <criterion comment="openoffice.org-langpack-ta_IN is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34488"/>
            <criterion comment="openoffice.org-langpack-ko_KR is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34457"/>
            <criterion comment="openoffice.org-langpack-or_IN is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35232"/>
            <criterion comment="openoffice.org-langpack-da_DK is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35235"/>
            <criterion comment="openoffice.org-langpack-sr_CS is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35194"/>
            <criterion comment="openoffice.org-langpack-pl_PL is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34862"/>
            <criterion comment="openoffice.org-langpack-fr is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34938"/>
            <criterion comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34706"/>
            <criterion comment="openoffice.org-javafilter is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34766"/>
            <criterion comment="openoffice.org-langpack-as_IN is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35172"/>
            <criterion comment="openoffice.org-testtools is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34709"/>
            <criterion comment="openoffice.org-langpack-hr_HR is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35079"/>
            <criterion comment="openoffice.org-langpack-de is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35080"/>
            <criterion comment="openoffice.org-emailmerge is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34726"/>
            <criterion comment="openoffice.org-xsltfilter is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34972"/>
            <criterion comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35101"/>
            <criterion comment="openoffice.org-langpack-te_IN is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34674"/>
            <criterion comment="openoffice.org-langpack-sv is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35094"/>
            <criterion comment="openoffice.org-base is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35137"/>
            <criterion comment="openoffice.org-langpack-ca_ES is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34909"/>
            <criterion comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35201"/>
            <criterion comment="openoffice.org-core is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34989"/>
            <criterion comment="openoffice.org-langpack-nl is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35225"/>
            <criterion comment="openoffice.org-langpack-ur is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34978"/>
            <criterion comment="openoffice.org-langpack-nn_NO is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35038"/>
            <criterion comment="openoffice.org-langpack-ar is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35198"/>
            <criterion comment="openoffice.org-langpack-ja_JP is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34866"/>
            <criterion comment="openoffice.org-langpack-gu_IN is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34918"/>
            <criterion comment="openoffice.org-langpack-tr_TR is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34874"/>
            <criterion comment="openoffice.org-langpack-eu_ES is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35203"/>
            <criterion comment="openoffice.org-langpack-fi_FI is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35211"/>
            <criterion comment="openoffice.org-graphicfilter is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34963"/>
            <criterion comment="openoffice.org-pyuno is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34932"/>
            <criterion comment="openoffice.org-langpack-ml_IN is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35151"/>
            <criterion comment="openoffice.org-langpack-gl_ES is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34242"/>
            <criterion comment="openoffice.org-langpack-zh_CN is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35217"/>
            <criterion comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35027"/>
            <criterion comment="openoffice.org-langpack-it is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34687"/>
            <criterion comment="openoffice.org-langpack-es is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34666"/>
            <criterion comment="openoffice.org-langpack-nb_NO is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34639"/>
            <criterion comment="openoffice.org-langpack-sl_SI is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34834"/>
            <criterion comment="openoffice.org-draw is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35238"/>
            <criterion comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35072"/>
            <criterion comment="openoffice.org-langpack-ms_MY is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35082"/>
            <criterion comment="openoffice.org-langpack-el_GR is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34878"/>
            <criterion comment="openoffice.org-langpack-hu_HU is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34330"/>
            <criterion comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35063"/>
            <criterion comment="openoffice.org-langpack-bn is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34592"/>
            <criterion comment="openoffice.org-langpack-he_IL is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35109"/>
            <criterion comment="openoffice.org-langpack-pt_PT is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34705"/>
            <criterion comment="openoffice.org-langpack-lt_LT is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34515"/>
            <criterion comment="openoffice.org-langpack-af_ZA is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34792"/>
            <criterion comment="openoffice.org-langpack-bg_BG is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35068"/>
            <criterion comment="openoffice.org-calc is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35132"/>
            <criterion comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35188"/>
            <criterion comment="openoffice.org-langpack-cy_GB is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35128"/>
            <criterion comment="openoffice.org-langpack-mr_IN is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34875"/>
            <criterion comment="openoffice.org-langpack-th_TH is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34788"/>
            <criterion comment="openoffice.org-langpack-pt_BR is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35158"/>
            <criterion comment="openoffice.org-langpack-ru is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34970"/>
            <criterion comment="openoffice.org-math is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34996"/>
            <criterion comment="openoffice.org-impress is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:34349"/>
            <criterion comment="openoffice.org-langpack-st_ZA is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:org.mitre.oval:tst:35193"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9966" version="5" class="vulnerability">
      <metadata>
        <title>HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4, when used with certain proxy servers, allows remote attackers to cause Firefox to interpret certain responses as if they were responses from two different sites via (1) invalid HTTP response headers with spaces between the header name and the colon, which might not be ignored in some cases, or (2) HTTP 1.1 headers through an HTTP 1.0 proxy, which are ignored by the proxy but processed by the client.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2786" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2786"/>
        <description>HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4, when used with certain proxy servers, allows remote attackers to cause Firefox to interpret certain responses as if they were responses from two different sites via (1) invalid HTTP response headers with spaces between the header name and the colon, which might not be ignored in some cases, or (2) HTTP 1.1 headers through an HTTP 1.0 proxy, which are ignored by the proxy but processed by the client.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:22.234-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:13.731-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:22.390-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9966 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:04.477-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:42.997-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32575"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32674"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32918"/>
            <criterion comment="seamonkey is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32919"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32864"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32659"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32859"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32511"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32902"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32837"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32873"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32693"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32886"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32810"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32418"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32496"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32929"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32777"/>
            <criterion comment="firefox is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32896"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32722"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32906"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32905"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32925"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32624"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9965" version="5" class="vulnerability">
      <metadata>
        <title>Linux kernel does not properly convert 64-bit file offset pointers to 32 bits, which allows local users to access portions of kernel memory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0415" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0415"/>
        <description>Linux kernel does not properly convert 64-bit file offset pointers to 32 bits, which allows local users to access portions of kernel memory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:55.371-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:13.448-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:22.093-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9965 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:36.637-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:42.638-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30827"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30622"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30627"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30676"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30823"/>
          <criterion comment="kernel is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30750"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30596"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30833"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30830"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9964" version="5" class="vulnerability">
      <metadata>
        <title>Wireshark before 0.99.6 allows remote attackers to cause a denial of service (crash) via a crafted chunked encoding in an HTTP response, possibly related to a zero-length payload.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3389" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3389"/>
        <description>Wireshark before 0.99.6 allows remote attackers to cause a denial of service (crash) via a crafted chunked encoding in an HTTP response, possibly related to a zero-length payload.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:24.387-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:13.136-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:21.723-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9964 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:32.583-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:41.933-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-EL3.1" test_ref="oval:org.mitre.oval:tst:36111"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-EL3.1" test_ref="oval:org.mitre.oval:tst:36043"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-3.el3" test_ref="oval:org.mitre.oval:tst:35411"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-3.el3" test_ref="oval:org.mitre.oval:tst:36140"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.6-EL4.1" test_ref="oval:org.mitre.oval:tst:34755"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.6-EL4.1" test_ref="oval:org.mitre.oval:tst:34881"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.6-1.el5" test_ref="oval:org.mitre.oval:tst:34336"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.6-1.el5" test_ref="oval:org.mitre.oval:tst:34784"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9963" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in ImageMagick before 6.3.5-9 allow context-dependent attackers to execute arbitrary code via a crafted (1) .dcm, (2) .dib, (3) .xbm, (4) .xcf, or (5) .xwd image file, which triggers a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4986" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4986"/>
        <description>Multiple integer overflows in ImageMagick before 6.3.5-9 allow context-dependent attackers to execute arbitrary code via a crafted (1) .dcm, (2) .dib, (3) .xbm, (4) .xcf, or (5) .xwd image file, which triggers a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:14.834-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:12.686-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:21.299-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9963 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:13.686-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:41.345-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36023"/>
            <criterion comment="ImageMagick is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36184"/>
            <criterion comment="ImageMagick-perl is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36260"/>
            <criterion comment="ImageMagick-devel is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36208"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36056"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:36311"/>
            <criterion comment="ImageMagick is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:36459"/>
            <criterion comment="ImageMagick-perl is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:36349"/>
            <criterion comment="ImageMagick-devel is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:35927"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:36106"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36419"/>
            <criterion comment="ImageMagick is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36360"/>
            <criterion comment="ImageMagick-perl is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36388"/>
            <criterion comment="ImageMagick-devel is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:35921"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36133"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9962" version="5" class="vulnerability">
      <metadata>
        <title>scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0225" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0225"/>
        <description>scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:20.355-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:12.374-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:20.913-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9962 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:20.268-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:40.838-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssh is earlier than 0:3.6.1p2-33.30.9" test_ref="oval:org.mitre.oval:tst:32634"/>
            <criterion comment="openssh-askpass is earlier than 0:3.6.1p2-33.30.9" test_ref="oval:org.mitre.oval:tst:32130"/>
            <criterion comment="openssh-server is earlier than 0:3.6.1p2-33.30.9" test_ref="oval:org.mitre.oval:tst:32453"/>
            <criterion comment="openssh-clients is earlier than 0:3.6.1p2-33.30.9" test_ref="oval:org.mitre.oval:tst:32516"/>
            <criterion comment="openssh-askpass-gnome is earlier than 0:3.6.1p2-33.30.9" test_ref="oval:org.mitre.oval:tst:32587"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssh is earlier than 0:3.9p1-8.RHEL4.12" test_ref="oval:org.mitre.oval:tst:32475"/>
            <criterion comment="openssh-askpass is earlier than 0:3.9p1-8.RHEL4.12" test_ref="oval:org.mitre.oval:tst:32414"/>
            <criterion comment="openssh-server is earlier than 0:3.9p1-8.RHEL4.12" test_ref="oval:org.mitre.oval:tst:32296"/>
            <criterion comment="openssh-clients is earlier than 0:3.9p1-8.RHEL4.12" test_ref="oval:org.mitre.oval:tst:32306"/>
            <criterion comment="openssh-askpass-gnome is earlier than 0:3.9p1-8.RHEL4.12" test_ref="oval:org.mitre.oval:tst:32251"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9961" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to replace existing search plugins with malicious ones using sidebar.addSearchEngine and the same filename as the target engine, which may not be displayed in the GUI, which could then be used to execute malicious script, aka "Firesearching 2."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1157" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1157"/>
        <description>Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to replace existing search plugins with malicious ones using sidebar.addSearchEngine and the same filename as the target engine, which may not be displayed in the GUI, which could then be used to execute malicious script, aka "Firesearching 2."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:17.084-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:11.827-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:20.344-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9961 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:17.007-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:40.226-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31283"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31520"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31645"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31516"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31569"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31143"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31512"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31785"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31695"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31626"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31478"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.4" test_ref="oval:org.mitre.oval:tst:31488"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31751"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31647"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:30850"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31749"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.4" test_ref="oval:org.mitre.oval:tst:31658"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31636"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31780"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:30828"/>
            <criterion comment="firefox is earlier than 0:1.0.3-1.4.1" test_ref="oval:org.mitre.oval:tst:31646"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31716"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31758"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9960" version="5" class="vulnerability">
      <metadata>
        <title>The random number feature in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, (1) does not properly seed pools when there is no entropy, or (2) uses an incorrect cast when extracting entropy, which might cause the random number generator to provide the same values after reboots on systems without an entropy source.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2453" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2453"/>
        <description>The random number feature in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, (1) does not properly seed pools when there is no entropy, or (2) uses an incorrect cast when extracting entropy, which might cause the random number generator to provide the same values after reboots on systems without an entropy source.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:35.164-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:11.512-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:19.974-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9960 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:47:07.913-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:39.725-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34290"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34311"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34023"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34185"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34210"/>
          <criterion comment="kernel is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34306"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34033"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34168"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34261"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34155"/>
          <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34278"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:996" version="2" class="vulnerability">
      <metadata>
        <title>Microsoft Share Level Password Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <product>File and Print Sharing</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2000-0979" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0979"/>
        <description>File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka the "Share Level Password" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-18T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:32:00.000-04:00" comment="modified wft-337 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 98 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:1345"/>
        <criterion comment="File %windir%\system\vserver.vxd version is less than 4.10.2001.0" negate="false" test_ref="oval:org.mitre.oval:tst:1344"/>
        <criterion comment="Patch 273991USA8.EXE Installed" negate="true" test_ref="oval:org.mitre.oval:tst:1343"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9959" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2; and (2) the rb_ary_replace function in 1.6.x allows context-dependent attackers to trigger memory corruption, aka the "beg + rlen" issue.  NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. The CVE description should be regarded as authoritative, although it is likely to change.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2726" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2726"/>
        <description>Integer overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2; and (2) the rb_ary_replace function in 1.6.x allows context-dependent attackers to trigger memory corruption, aka the "beg + rlen" issue.  NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. The CVE description should be regarded as authoritative, although it is likely to change.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:56.212-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:10.933-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:19.416-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9959 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:24.426-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:38.991-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:36968"/>
            <criterion comment="ruby-docs is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37000"/>
            <criterion comment="ruby-devel is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:36747"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37140"/>
            <criterion comment="ruby is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37342"/>
            <criterion comment="irb is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37252"/>
            <criterion comment="ruby-libs is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37305"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:37171"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:37242"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:36569"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:37296"/>
            <criterion comment="ruby is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:36468"/>
            <criterion comment="irb is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:36808"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:37219"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-ri is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37199"/>
            <criterion comment="ruby-mode is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:36604"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:36516"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:36870"/>
            <criterion comment="ruby is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:36738"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37119"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37289"/>
            <criterion comment="ruby-irb is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37148"/>
            <criterion comment="ruby-rdoc is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37203"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9958" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows.  NOTE: some of these details are obtained from third party information.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2412" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2412"/>
        <description>Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows.  NOTE: some of these details are obtained from third party information.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:27.599-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:10.553-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:18.965-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9958 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:46.310-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:38.426-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-devel is earlier than 0:2.0.46-75.ent" test_ref="oval:org.mitre.oval:tst:39033"/>
            <criterion comment="mod_ssl is earlier than 0:2.0.46-75.ent" test_ref="oval:org.mitre.oval:tst:38392"/>
            <criterion comment="httpd is earlier than 0:2.0.46-75.ent" test_ref="oval:org.mitre.oval:tst:39071"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="apr-devel is earlier than 0:0.9.4-24.9.el4_8.2" test_ref="oval:org.mitre.oval:tst:38759"/>
            <criterion comment="apr-util-devel is earlier than 0:0.9.4-22.el4_8.2" test_ref="oval:org.mitre.oval:tst:39047"/>
            <criterion comment="apr is earlier than 0:0.9.4-24.9.el4_8.2" test_ref="oval:org.mitre.oval:tst:39098"/>
            <criterion comment="apr-util is earlier than 0:0.9.4-22.el4_8.2" test_ref="oval:org.mitre.oval:tst:38182"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="apr-docs is earlier than 0:1.2.7-11.el5_3.1" test_ref="oval:org.mitre.oval:tst:38932"/>
            <criterion comment="apr-devel is earlier than 0:1.2.7-11.el5_3.1" test_ref="oval:org.mitre.oval:tst:39149"/>
            <criterion comment="apr-util-docs is earlier than 0:1.2.7-7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38625"/>
            <criterion comment="apr-util-devel is earlier than 0:1.2.7-7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38971"/>
            <criterion comment="apr is earlier than 0:1.2.7-11.el5_3.1" test_ref="oval:org.mitre.oval:tst:39108"/>
            <criterion comment="apr-util is earlier than 0:1.2.7-7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38986"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9957" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.10.6, as used in GPdf and kdegraphics KPDF, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1188" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1188"/>
        <description>Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in SplashBitmap.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.10.6, as used in GPdf and kdegraphics KPDF, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:10.245-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:10.238-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:18.645-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9957 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:15.930-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:37.889-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-15.el4_8.2" test_ref="oval:org.mitre.oval:tst:39438"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-7.7.2.el4_8.5" test_ref="oval:org.mitre.oval:tst:39221"/>
            <criterion comment="xpdf is earlier than 1:3.00-22.el4_8.1" test_ref="oval:org.mitre.oval:tst:38963"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-15.el4_8.2" test_ref="oval:org.mitre.oval:tst:39094"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.5.4-15.el5_4.2" test_ref="oval:org.mitre.oval:tst:39062"/>
            <criterion comment="poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38512"/>
            <criterion comment="poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38500"/>
            <criterion comment="kdegraphics is earlier than 7:3.5.4-15.el5_4.2" test_ref="oval:org.mitre.oval:tst:39529"/>
            <criterion comment="poppler is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38760"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9956" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files or execute arbitrary code via a crafted GIF image, aka CR 6804998.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1098" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1098"/>
        <description>Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files or execute arbitrary code via a crafted GIF image, aka CR 6804998.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:38.745-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:09.879-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:18.380-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9956 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:04.827-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:37.556-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:38276"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37661"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37652"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37769"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:38561"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9955" version="5" class="vulnerability">
      <metadata>
        <title>ACPI Event Daemon (acpid) before 1.0.10 allows remote attackers to cause a denial of service (CPU consumption and connectivity loss) by opening a large number of UNIX sockets without closing them, which triggers an infinite loop.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0798" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0798"/>
        <description>ACPI Event Daemon (acpid) before 1.0.10 allows remote attackers to cause a denial of service (CPU consumption and connectivity loss) by opening a large number of UNIX sockets without closing them, which triggers an infinite loop.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:07.606-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:09.628-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:18.107-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9955 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:45.300-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:37.116-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="acpid is earlier than 0:1.0.2-4" test_ref="oval:org.mitre.oval:tst:38604"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="acpid is earlier than 0:1.0.3-2.el4_7.1" test_ref="oval:org.mitre.oval:tst:38456"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="acpid is earlier than 0:1.0.4-7.el5_3.1" test_ref="oval:org.mitre.oval:tst:38613"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9954" version="8" class="vulnerability">
      <metadata>
        <title>Memory leak in the seq_file implementation in the SCSI procfs interface (sg.c) in Linux kernel 2.6.13 and earlier allows local users to cause a denial of service (memory consumption) via certain repeated reads from the /proc/scsi/sg/devices file, which is not properly handled when the next() iterator returns NULL or an error.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2800" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2800"/>
        <description>Memory leak in the seq_file implemenetation in the SCSI procfs interface (sg.c) in Linux kernel 2.6.13 and earlier allows local users to cause a denial of service (memory consumption) via certain repeated reads from the /proc/scsi/sg/devices file, which is not properly handled when the next() iterator returns NULL or an error.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:02.009-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:09.374-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:17.786-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9954 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:17.989-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:36.704-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9954 - Fixed typo in title and description of def:9954" date="2014-05-22T10:52:00.994-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-05-22T10:54:21.347-04:00">INTERIM</status_change>
            <status_change date="2014-06-09T04:01:50.615-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32415"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32137"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32528"/>
          <criterion comment="kernel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32205"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:31866"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32446"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32450"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9953" version="5" class="vulnerability">
      <metadata>
        <title>The CIFS filesystem in the Linux kernel before 2.6.22, when Unix extension support is enabled, does not honor the umask of a process, which allows local users to gain privileges.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3740" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3740"/>
        <description>The CIFS filesystem in the Linux kernel before 2.6.22, when Unix extension support is enabled, does not honor the umask of a process, which allows local users to gain privileges.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:36.571-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:08.852-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:17.310-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9953 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:12.405-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:36.089-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34864"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35017"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35145"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34442"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35258"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35254"/>
            <criterion comment="kernel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35373"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34480"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34911"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34923"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35327"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34804"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34557"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34837"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34795"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34562"/>
            <criterion comment="kernel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34357"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34379"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34873"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34870"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34374"/>
            <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34337"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9952" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function, a different set of vulnerabilities than CVE-2004-0941.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0990" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0990"/>
        <description>Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function, a different set of vulnerabilities than CVE-2004-0941.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:40.553-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:08.647-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:17.085-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9952 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:20.355-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:35.760-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="gd is earlier than 0:1.8.4-12.3.1" test_ref="oval:org.mitre.oval:tst:31045"/>
          <criterion comment="gd-devel is earlier than 0:1.8.4-12.3.1" test_ref="oval:org.mitre.oval:tst:31109"/>
          <criterion comment="gd-progs is earlier than 0:1.8.4-12.3.1" test_ref="oval:org.mitre.oval:tst:31083"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9951" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the match_rule_equal function in bus/signals.c in D-Bus before 1.0.2 allows local applications to remove match rules for other applications and cause a denial of service (lost process messages).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6107" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6107"/>
        <description>Unspecified vulnerability in the match_rule_equal function in bus/signals.c in D-Bus before 1.0.2 allows local applications to remove match rules for other applications and cause a denial of service (lost process messages).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:02.643-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:08.408-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:16.794-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9951 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:41.195-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:35.425-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="dbus-glib is earlier than 0:0.22-12.EL.8" test_ref="oval:org.mitre.oval:tst:32768"/>
          <criterion comment="dbus-devel is earlier than 0:0.22-12.EL.8" test_ref="oval:org.mitre.oval:tst:33345"/>
          <criterion comment="dbus-x11 is earlier than 0:0.22-12.EL.8" test_ref="oval:org.mitre.oval:tst:33280"/>
          <criterion comment="dbus-python is earlier than 0:0.22-12.EL.8" test_ref="oval:org.mitre.oval:tst:32745"/>
          <criterion comment="dbus is earlier than 0:0.22-12.EL.8" test_ref="oval:org.mitre.oval:tst:33276"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9950" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, and SeaMonkey before 1.1.12, allow user-assisted remote attackers to move a window during a mouse click, and possibly force a file download or unspecified other drag-and-drop action, via a crafted onmousedown action that calls window.moveBy, a variant of CVE-2003-0823.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3837" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3837"/>
        <description>Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, and SeaMonkey before 1.1.12, allow user-assisted remote attackers to move a window during a mouse click, and possibly force a file download or unspecified other drag-and-drop action, via a crafted onmousedown action that calls window.moveBy, a variant of CVE-2003-0823.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:29.260-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:07.762-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:16.188-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9950 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:48.603-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:34.613-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37411"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36691"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37031"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37528"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36726"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37435"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37680"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36725"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37449"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37356"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.10.el4" test_ref="oval:org.mitre.oval:tst:37564"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:36913"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37609"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.10.el4" test_ref="oval:org.mitre.oval:tst:37306"/>
            <criterion comment="firefox is earlier than 0:3.0.2-3.el4" test_ref="oval:org.mitre.oval:tst:37195"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37499"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37444"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37543"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37552"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-19.el5" test_ref="oval:org.mitre.oval:tst:37248"/>
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37486"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37495"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37044"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37578"/>
            <criterion comment="yelp is earlier than 0:2.16.0-21.el5" test_ref="oval:org.mitre.oval:tst:37584"/>
            <criterion comment="devhelp is earlier than 0:0.12-19.el5" test_ref="oval:org.mitre.oval:tst:37353"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37406"/>
            <criterion comment="firefox is earlier than 0:3.0.2-3.el5" test_ref="oval:org.mitre.oval:tst:37225"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:36664"/>
            <criterion comment="nss-tools is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37664"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:995" version="1" class="vulnerability">
      <metadata>
        <title>Windows 2000 COM Internet Services/RPC over HTTP Proxy Component Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>COM Internet Services</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0807" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0807"/>
        <description>Buffer overflow in the COM Internet Services and in the RPC over HTTP Proxy components for Microsoft Windows NT Server 4.0, NT 4.0 Terminal Server Edition, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service via a crafted request.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-25T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-06-18T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-07-02T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="the version of rpcproxy.dll is less than 5.0.2195.6904" negate="false" test_ref="oval:org.mitre.oval:tst:1346"/>
          <criterion comment="the patch kb828741 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1499"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="COM Internet Services are enabled" negate="false" test_ref="oval:org.mitre.oval:tst:1383"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9949" version="5" class="vulnerability">
      <metadata>
        <title>Linux kernel 2.6.x up to 2.6.18 and possibly other versions, when SELinux hooks are enabled, allows local users to cause a denial of service (crash) via a malformed file stream that triggers a NULL pointer dereference in the superblock_doinit function, as demonstrated using an HFS filesystem image.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6056" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6056"/>
        <description>Linux kernel 2.6.x up to 2.6.18 and possibly other versions, when SELinux hooks are enabled, allows local users to cause a denial of service (crash) via a malformed file stream that triggers a NULL pointer dereference in the superblock_doinit function, as demonstrated using an HFS filesystem image.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:45.646-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:07.485-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:15.848-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9949 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:24.311-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:34.229-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33204"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33278"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33306"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32378"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33145"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33107"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32620"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32645"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33057"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9948" version="5" class="vulnerability">
      <metadata>
        <title>The Vicam USB driver in Linux before 2.4.25 does not use the copy_from_user function when copying data from userspace to kernel space, which crosses security boundaries and allows local users to cause a denial of service.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0075" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0075"/>
        <description>The Vicam USB driver in Linux before 2.4.25 does not use the copy_from_user function when copying data from userspace to kernel space, which crosses security boundaries and allows local users to cause a denial of service.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:06.895-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:07.206-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:15.542-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9948 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:28.440-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:33.796-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31148"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31473"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31178"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31282"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31565"/>
          <criterion comment="kernel is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31562"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31582"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:30730"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31534"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9947" version="5" class="vulnerability">
      <metadata>
        <title>PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications that use multibyte encodings that allow the "\" (backslash) byte 0x5c to be the trailing byte of a multibyte character, such as SJIS, BIG5, GBK, GB18030, and UHC, which cannot be handled correctly by a client that does not understand multibyte encodings, aka a second variant of "Encoding-Based SQL Injection." NOTE: it could be argued that this is a class of issue related to interaction errors between the client and PostgreSQL, but a CVE has been assigned since PostgreSQL is treating this as a preventative measure against this class of problem.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2314" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2314"/>
        <description>PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications that use multibyte encodings that allow the "\" (backslash) byte 0x5c to be the trailing byte of a multibyte character, such as SJIS, BIG5, GBK, GB18030, and UHC, which cannot be handled correctly by a client that does not understand multibyte encodings, aka a second variant of "Encoding-Based SQL Injection." NOTE: it could be argued that this is a class of issue related to interaction errors between the client and PostgreSQL, but a CVE has been assigned since PostgreSQL is treating this as a preventative measure against this class of problem.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:08.780-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:06.674-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:14.907-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9947 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:36.218-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:33.201-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="rh-postgresql-devel is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32465"/>
            <criterion comment="rh-postgresql-server is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32618"/>
            <criterion comment="rh-postgresql-python is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32497"/>
            <criterion comment="rh-postgresql-libs is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32527"/>
            <criterion comment="rh-postgresql-docs is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32392"/>
            <criterion comment="rh-postgresql-test is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32719"/>
            <criterion comment="rh-postgresql-pl is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32621"/>
            <criterion comment="rh-postgresql-tcl is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32195"/>
            <criterion comment="rh-postgresql is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32628"/>
            <criterion comment="rh-postgresql-contrib is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32601"/>
            <criterion comment="rh-postgresql-jdbc is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:31936"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32101"/>
            <criterion comment="postgresql-docs is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31976"/>
            <criterion comment="postgresql-pl is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32564"/>
            <criterion comment="postgresql-tcl is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32038"/>
            <criterion comment="postgresql-libs is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32648"/>
            <criterion comment="postgresql-contrib is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31768"/>
            <criterion comment="postgresql-python is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32626"/>
            <criterion comment="postgresql-test is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31950"/>
            <criterion comment="postgresql-jdbc is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32604"/>
            <criterion comment="postgresql-server is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32472"/>
            <criterion comment="postgresql-devel is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32278"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9946" version="5" class="vulnerability">
      <metadata>
        <title>The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving "/../" sequences with a leading "/".</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1918" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1918"/>
        <description>The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving "/../" sequences with a leading "/".</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:37.137-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:06.478-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:14.706-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9946 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:50.109-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:32.875-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="tar is earlier than 0:1.13.25-14.RHEL3" test_ref="oval:org.mitre.oval:tst:31888"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9945" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in wiretap/erf.c in Wireshark before 1.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted erf file, related to an "unsigned integer wrap vulnerability."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3829" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3829"/>
        <description>Integer overflow in wiretap/erf.c in Wireshark before 1.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted erf file, related to an "unsigned integer wrap vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:03.438-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:06.192-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:14.403-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9945 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:19.338-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:32.395-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.11-EL3.6" test_ref="oval:org.mitre.oval:tst:39600"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.11-EL3.6" test_ref="oval:org.mitre.oval:tst:40430"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.11-1.el4_8.5" test_ref="oval:org.mitre.oval:tst:40437"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.11-1.el4_8.5" test_ref="oval:org.mitre.oval:tst:39877"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.11-1.el5_5.5" test_ref="oval:org.mitre.oval:tst:40351"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.11-1.el5_5.5" test_ref="oval:org.mitre.oval:tst:40208"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9944" version="5" class="vulnerability">
      <metadata>
        <title>smbd in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8, and 3.4 before 3.4.2 allows remote authenticated users to cause a denial of service (infinite loop) via an unanticipated oplock break notification reply packet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2906" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2906"/>
        <description>smbd in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8, and 3.4 before 3.4.2 allows remote authenticated users to cause a denial of service (infinite loop) via an unanticipated oplock break notification reply packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:02.322-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:05.773-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:13.964-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9944 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:33.158-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:31.679-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.9-1.3E.16" test_ref="oval:org.mitre.oval:tst:39355"/>
            <criterion comment="samba-swat is earlier than 0:3.0.9-1.3E.16" test_ref="oval:org.mitre.oval:tst:39369"/>
            <criterion comment="samba-client is earlier than 0:3.0.9-1.3E.16" test_ref="oval:org.mitre.oval:tst:39545"/>
            <criterion comment="samba is earlier than 0:3.0.9-1.3E.16" test_ref="oval:org.mitre.oval:tst:39475"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.33-0.18.el4_8" test_ref="oval:org.mitre.oval:tst:39162"/>
            <criterion comment="samba-swat is earlier than 0:3.0.33-0.18.el4_8" test_ref="oval:org.mitre.oval:tst:39589"/>
            <criterion comment="samba-client is earlier than 0:3.0.33-0.18.el4_8" test_ref="oval:org.mitre.oval:tst:39603"/>
            <criterion comment="samba is earlier than 0:3.0.33-0.18.el4_8" test_ref="oval:org.mitre.oval:tst:39658"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.33-3.15.el5_4" test_ref="oval:org.mitre.oval:tst:39633"/>
            <criterion comment="samba-swat is earlier than 0:3.0.33-3.15.el5_4" test_ref="oval:org.mitre.oval:tst:39222"/>
            <criterion comment="samba-client is earlier than 0:3.0.33-3.15.el5_4" test_ref="oval:org.mitre.oval:tst:39493"/>
            <criterion comment="samba is earlier than 0:3.0.33-3.15.el5_4" test_ref="oval:org.mitre.oval:tst:39205"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9943" version="5" class="vulnerability">
      <metadata>
        <title>Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3) directory traversal, (4) shell metacharacter, (5) endless loops, and (6) memory leaks, which could allow remote attackers to obtain sensitive information, cause a denial of service (application crash), or execute arbitrary code via a certain XPM image file. NOTE: it is highly likely that this candidate will be SPLIT into other candidates in the future, per CVE's content decisions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0914" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0914"/>
        <description>Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3) directory traversal, (4) shell metacharacter, (5) endless loops, and (6) memory leaks, which could allow remote attackers to obtain sensitive information, cause a denial of service (application crash), or execute arbitrary code via a certain XPM image file. NOTE: it is highly likely that this candidate will be SPLIT into other candidates in the future, per CVE's content decisions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:21.628-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:05.198-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:13.375-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9943 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:38.482-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:30.970-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:30653"/>
          <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:30795"/>
          <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:31038"/>
          <criterion comment="XFree86-libs is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:30973"/>
          <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:30713"/>
          <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:30995"/>
          <criterion comment="XFree86-twm is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:31069"/>
          <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:30155"/>
          <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:31142"/>
          <criterion comment="XFree86-doc is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:31107"/>
          <criterion comment="openmotif21 is earlier than 0:2.1.30-9.RHEL3.4" test_ref="oval:org.mitre.oval:tst:30867"/>
          <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:30816"/>
          <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:30980"/>
          <criterion comment="openmotif is earlier than 0:2.2.3-4.RHEL3.4" test_ref="oval:org.mitre.oval:tst:31105"/>
          <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:30942"/>
          <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:30994"/>
          <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:30972"/>
          <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:30197"/>
          <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:30720"/>
          <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:30777"/>
          <criterion comment="XFree86-xdm is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:30811"/>
          <criterion comment="XFree86-sdk is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:30529"/>
          <criterion comment="XFree86 is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:31025"/>
          <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:30781"/>
          <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:30607"/>
          <criterion comment="XFree86-xfs is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:30885"/>
          <criterion comment="XFree86-tools is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:30637"/>
          <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:31060"/>
          <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:30699"/>
          <criterion comment="openmotif-devel is earlier than 0:2.2.3-4.RHEL3.4" test_ref="oval:org.mitre.oval:tst:30744"/>
          <criterion comment="XFree86-xauth is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:30991"/>
          <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:30327"/>
          <criterion comment="XFree86-devel is earlier than 0:4.3.0-78.EL" test_ref="oval:org.mitre.oval:tst:30499"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9942" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11, and GStreamer Plug-ins (aka gstreamer-plugins) 0.8.5, might allow remote attackers to execute arbitrary code via crafted Time-to-sample (aka stts) atom data in a malformed QuickTime media .mov file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0397" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0397"/>
        <description>Heap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11, and GStreamer Plug-ins (aka gstreamer-plugins) 0.8.5, might allow remote attackers to execute arbitrary code via crafted Time-to-sample (aka stts) atom data in a malformed QuickTime media .mov file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:11.244-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:04.911-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:13.114-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9942 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:43.952-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:30.567-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gstreamer-plugins-devel is earlier than 0:0.8.5-1.EL.2" test_ref="oval:org.mitre.oval:tst:38235"/>
            <criterion comment="gstreamer-plugins is earlier than 0:0.8.5-1.EL.2" test_ref="oval:org.mitre.oval:tst:37467"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gstreamer-plugins-good-devel is earlier than 0:0.10.9-1.el5_3.1" test_ref="oval:org.mitre.oval:tst:38180"/>
            <criterion comment="gstreamer-plugins-good is earlier than 0:0.10.9-1.el5_3.1" test_ref="oval:org.mitre.oval:tst:38318"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9941" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2Stream::readSymbolDictSeg, (2) JBIG2Stream::readSymbolDictSeg, and (3) JBIG2Stream::readGenericBitmap.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0147" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0147"/>
        <description>Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2Stream::readSymbolDictSeg, (2) JBIG2Stream::readSymbolDictSeg, and (3) JBIG2Stream::readGenericBitmap.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:46.519-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:04.319-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:12.464-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9941 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:17.397-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:29.292-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="xpdf is earlier than 1:2.02-14.el3" test_ref="oval:org.mitre.oval:tst:38322"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40095"/>
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-13.el4" test_ref="oval:org.mitre.oval:tst:38126"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:39528"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-13.el4" test_ref="oval:org.mitre.oval:tst:38230"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40473"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38481"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40316"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-7.7.2.el4_7.4" test_ref="oval:org.mitre.oval:tst:38436"/>
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38145"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40209"/>
            <criterion comment="xpdf is earlier than 1:3.00-20.el4" test_ref="oval:org.mitre.oval:tst:38649"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40364"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40077"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38607"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.5.4-12.el5_3" test_ref="oval:org.mitre.oval:tst:38618"/>
            <criterion comment="cups-lpd is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38471"/>
            <criterion comment="tetex-dvips is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40312"/>
            <criterion comment="kdegraphics is earlier than 7:3.5.4-12.el5_3" test_ref="oval:org.mitre.oval:tst:38271"/>
            <criterion comment="poppler is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38760"/>
            <criterion comment="tetex-fonts is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40122"/>
            <criterion comment="cups-libs is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38541"/>
            <criterion comment="tetex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40413"/>
            <criterion comment="tetex-doc is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40398"/>
            <criterion comment="poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38500"/>
            <criterion comment="tetex-latex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40444"/>
            <criterion comment="poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38512"/>
            <criterion comment="cups-devel is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:37935"/>
            <criterion comment="tetex-afm is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40008"/>
            <criterion comment="tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:39920"/>
            <criterion comment="cups is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38334"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9940" version="5" class="vulnerability">
      <metadata>
        <title>CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-2154" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2154"/>
        <description>CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:31.002-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:04.112-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:12.245-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9940 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:35.341-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:28.966-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.29" test_ref="oval:org.mitre.oval:tst:31955"/>
          <criterion comment="cups is earlier than 1:1.1.17-13.3.29" test_ref="oval:org.mitre.oval:tst:31393"/>
          <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.29" test_ref="oval:org.mitre.oval:tst:31828"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:994" version="1" class="vulnerability">
      <metadata>
        <title>CVS error_prog_name Double-free Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>CVS</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0416" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0416"/>
        <description>Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-06-29T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-07-21T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-08-04T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Software section">
          <criterion comment="Red Hat Enterprise 3 is installed" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="cvs rpm version prior to 1.11.2-24 is installed" test_ref="oval:org.mitre.oval:tst:1347"/>
        </criteria>
        <criteria operator="AND" comment="Configuration section">
          <criteria operator="OR" comment="/usr/bin/cvs is executable">
            <criterion comment="/usr/bin/cvs is executable" test_ref="oval:org.mitre.oval:tst:1381"/>
            <criterion comment="/usr/bin/cvs is executable" test_ref="oval:org.mitre.oval:tst:1380"/>
            <criterion comment="/usr/bin/cvs is executable" test_ref="oval:org.mitre.oval:tst:1379"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9939" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the read_special_escape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e (aka special escapes processing) option is enabled, allows user-assisted remote attackers to execute arbitrary code via a crafted ASCII file, related to the setfilename command.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3863" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3863"/>
        <description>Stack-based buffer overflow in the read_special_escape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e (aka special escapes processing) option is enabled, allows user-assisted remote attackers to execute arbitrary code via a crafted ASCII file, related to the setfilename command.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:58.147-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:03.812-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:11.909-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9939 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:05.798-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:28.537-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="enscript is earlier than 0:1.6.1-24.7" test_ref="oval:org.mitre.oval:tst:37704"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="enscript is earlier than 0:1.6.1-33.el4_7.1" test_ref="oval:org.mitre.oval:tst:37804"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="enscript is earlier than 0:1.6.4-4.1.1.el5_2" test_ref="oval:org.mitre.oval:tst:38101"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9938" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permissions for the world, which allows local users to delete arbitrary files and directories, and possibly read files and directories, via a symlink attack.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0452" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0452"/>
        <description>Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permissions for the world, which allows local users to delete arbitrary files and directories, and possibly read files and directories, via a symlink attack.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:14.746-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:03.537-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:11.615-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9938 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:04.938-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:28.128-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="perl-suidperl is earlier than 2:5.8.0-89.10" test_ref="oval:org.mitre.oval:tst:31361"/>
            <criterion comment="perl is earlier than 2:5.8.0-89.10" test_ref="oval:org.mitre.oval:tst:30931"/>
            <criterion comment="perl-CPAN is earlier than 2:1.61-89.10" test_ref="oval:org.mitre.oval:tst:30901"/>
            <criterion comment="perl-CGI is earlier than 2:2.81-89.10" test_ref="oval:org.mitre.oval:tst:31227"/>
            <criterion comment="perl-DB_File is earlier than 2:1.804-89.10" test_ref="oval:org.mitre.oval:tst:30945"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="perl-suidperl is earlier than 3:5.8.5-12.1.1" test_ref="oval:org.mitre.oval:tst:31049"/>
            <criterion comment="perl is earlier than 3:5.8.5-12.1" test_ref="oval:org.mitre.oval:tst:31120"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9937" version="5" class="vulnerability">
      <metadata>
        <title>verify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle excess data in the digestAlgorithm.parameters field when generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents GnuTLS from correctly verifying X.509 and other certificates that use PKCS, a variant of CVE-2006-4339.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4790" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4790"/>
        <description>verify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle excess data in the digestAlgorithm.parameters field when generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents GnuTLS from correctly verifying X.509 and other certificates that use PKCS, a variant of CVE-2006-4339.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:04.969-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:03.306-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:11.404-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9937 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:46.269-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:27.748-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="gnutls is earlier than 0:1.0.20-3.2.3" test_ref="oval:org.mitre.oval:tst:32934"/>
          <criterion comment="gnutls-devel is earlier than 0:1.0.20-3.2.3" test_ref="oval:org.mitre.oval:tst:32930"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9936" version="5" class="vulnerability">
      <metadata>
        <title>The signal handling in the Linux kernel before 2.6.22, including 2.6.2, when running on PowerPC systems using HTX, allows local users to cause a denial of service via unspecified vectors involving floating point corruption and concurrency, related to clearing of MSR bits.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3107" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3107"/>
        <description>The signal handling in the Linux kernel before 2.6.22, including 2.6.2, when running on PowerPC systems using HTX, allows local users to cause a denial of service via unspecified vectors involving floating point corruption and concurrency, related to clearing of MSR bits.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:38.481-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:02.973-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:11.087-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9936 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:42.855-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:27.341-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.8.el5" test_ref="oval:org.mitre.oval:tst:34750"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.8.el5" test_ref="oval:org.mitre.oval:tst:34474"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.8.el5" test_ref="oval:org.mitre.oval:tst:34411"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.8.el5" test_ref="oval:org.mitre.oval:tst:34408"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.8.el5" test_ref="oval:org.mitre.oval:tst:34451"/>
          <criterion comment="kernel is earlier than 0:2.6.18-8.1.8.el5" test_ref="oval:org.mitre.oval:tst:34756"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.8.el5" test_ref="oval:org.mitre.oval:tst:34502"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.8.el5" test_ref="oval:org.mitre.oval:tst:34532"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.8.el5" test_ref="oval:org.mitre.oval:tst:34633"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.8.el5" test_ref="oval:org.mitre.oval:tst:34714"/>
          <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.8.el5" test_ref="oval:org.mitre.oval:tst:34272"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9935" version="5" class="vulnerability">
      <metadata>
        <title>The ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in the Apache HTTP Server 2.2.x before 2.2.15 does not properly handle certain situations in which a client sends no request body, which allows remote attackers to cause a denial of service (backend server outage) via a crafted request, related to use of a 500 error code instead of the appropriate 400 error code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0408" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0408"/>
        <description>The ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in the Apache HTTP Server 2.2.x before 2.2.15 does not properly handle certain situations in which a client sends no request body, which allows remote attackers to cause a denial of service (backend server outage) via a crafted request, related to use of a 500 error code instead of the appropriate 400 error code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:21.005-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:02.754-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:10.820-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9935 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:54.796-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:26.979-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="httpd-manual is earlier than 0:2.2.3-31.el5_4.4" test_ref="oval:org.mitre.oval:tst:40344"/>
          <criterion comment="httpd-devel is earlier than 0:2.2.3-31.el5_4.4" test_ref="oval:org.mitre.oval:tst:39553"/>
          <criterion comment="mod_ssl is earlier than 0:2.2.3-31.el5_4.4" test_ref="oval:org.mitre.oval:tst:40118"/>
          <criterion comment="httpd is earlier than 0:2.2.3-31.el5_4.4" test_ref="oval:org.mitre.oval:tst:40311"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9934" version="5" class="vulnerability">
      <metadata>
        <title>Multiple vulnerabilities in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Javascript that leads to memory corruption, including (1) nsListControlFrame::FireMenuItemActiveEvent, (2) buffer overflows in the string class in out-of-memory conditions, (3) table row and column groups, (4) "anonymous box selectors outside of UA stylesheets," (5) stale references to "removed nodes," and (6) running the crypto.generateCRMFRequest callback on deleted context.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3811" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3811"/>
        <description>Multiple vulnerabilities in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Javascript that leads to memory corruption, including (1) nsListControlFrame::FireMenuItemActiveEvent, (2) buffer overflows in the string class in out-of-memory conditions, (3) table row and column groups, (4) "anonymous box selectors outside of UA stylesheets," (5) stale references to "removed nodes," and (6) running the crypto.generateCRMFRequest callback on deleted context.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:21.415-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:02.264-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:10.308-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9934 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:14:10.292-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:26.360-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32342"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32877"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:31982"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32816"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32080"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32904"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32915"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32924"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32822"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32555"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32873"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32693"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32886"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32810"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32418"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32496"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32929"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32777"/>
            <criterion comment="firefox is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32896"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32722"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32906"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32905"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32925"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32624"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9933" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a denial of service (crash) via a malformed packet, as demonstrated using a stack-based buffer overflow to the dissect_getaddrsbyname_request function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0304" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0304"/>
        <description>Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a denial of service (crash) via a malformed packet, as demonstrated using a stack-based buffer overflow to the dissect_getaddrsbyname_request function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:24.618-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:01.902-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:09.964-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9933 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:11.168-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:25.852-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.11-EL3.6" test_ref="oval:org.mitre.oval:tst:39600"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.11-EL3.6" test_ref="oval:org.mitre.oval:tst:40430"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.11-1.el4_8.5" test_ref="oval:org.mitre.oval:tst:40437"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.11-1.el4_8.5" test_ref="oval:org.mitre.oval:tst:39877"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.11-1.el5_5.5" test_ref="oval:org.mitre.oval:tst:40351"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.11-1.el5_5.5" test_ref="oval:org.mitre.oval:tst:40208"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9932" version="5" class="vulnerability">
      <metadata>
        <title>The Linux Kernel before 2.6.15.5 allows local users to cause a denial of service (NFS client panic) via unknown attack vectors related to the use of O_DIRECT (direct I/O).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0555"/>
        <description>The Linux Kernel before 2.6.15.5 allows local users to cause a denial of service (NFS client panic) via unknown attack vectors related to the use of O_DIRECT (direct I/O).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:06.862-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:01.619-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:09.674-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9932 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:41.945-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:25.458-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32235"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32371"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32703"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32314"/>
          <criterion comment="kernel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32614"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32295"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32310"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32611"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32305"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9931" version="5" class="vulnerability">
      <metadata>
        <title>The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service (process abort) via an integer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0633" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0633"/>
        <description>The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service (process abort) via an integer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:35.841-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:01.427-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:09.463-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9931 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:06.479-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:25.177-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="ethereal-gnome is earlier than 0:0.10.5-0.30E.2" test_ref="oval:org.mitre.oval:tst:29799"/>
          <criterion comment="ethereal is earlier than 0:0.10.5-0.30E.2" test_ref="oval:org.mitre.oval:tst:30522"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9930" version="5" class="vulnerability">
      <metadata>
        <title>The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service (crash) via a crafted IF clause that results in a divide-by-zero error and a NULL pointer dereference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2583" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2583"/>
        <description>The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service (crash) via a crafted IF clause that results in a divide-by-zero error and a NULL pointer dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:12.276-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:01.198-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:09.223-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9930 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:28.902-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:24.805-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mysql is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36197"/>
          <criterion comment="mysql-devel is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36749"/>
          <criterion comment="mysql-test is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36750"/>
          <criterion comment="mysql-bench is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36831"/>
          <criterion comment="mysql-server is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36646"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:993" version="1" class="vulnerability">
      <metadata>
        <title>CVS Improper Handling of Malformed Entry Lines</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>CVS</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0414" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0414"/>
        <description>CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being used and may lead to a denial of service (crash), modification of critical program data, or arbitrary code execution.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-06-29T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-07-21T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-08-04T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="cvs rpm version prior to 1.11.2-24 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1347"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/bin/cvs is executable">
            <criterion comment="/usr/bin/cvs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1381"/>
            <criterion comment="/usr/bin/cvs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1380"/>
            <criterion comment="/usr/bin/cvs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1379"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9929" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the X render (Xrender) extension in X.org X server 6.8.0 up to allows attackers to cause a denial of service (crash), as demonstrated by the (1) XRenderCompositeTriStrip and (2) XRenderCompositeTriFan requests in the rendertest from XCB xcb/xcb-demo, which leads to an incorrect memory allocation due to a typo in an expression that uses a "" instead of a "*" operator. NOTE: the subject line of the original announcement used an incorrect CVE number for this issue.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1526" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1526"/>
        <description>Buffer overflow in the X render (Xrender) extension in X.org X server 6.8.0 up to allows attackers to cause a denial of service (crash), as demonstrated by the (1) XRenderCompositeTriStrip and (2) XRenderCompositeTriFan requests in the rendertest from XCB xcb/xcb-demo, which leads to an incorrect memory allocation due to a typo in an expression that uses a "&amp;" instead of a "*" operator. NOTE: the subject line of the original announcement used an incorrect CVE number for this issue.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:13.621-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:00.756-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:08.776-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9929 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:41:16.983-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:24.304-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.13.25.1" test_ref="oval:org.mitre.oval:tst:31792"/>
          <criterion comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.13.25.1" test_ref="oval:org.mitre.oval:tst:32571"/>
          <criterion comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.13.25.1" test_ref="oval:org.mitre.oval:tst:32223"/>
          <criterion comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.13.25.1" test_ref="oval:org.mitre.oval:tst:32554"/>
          <criterion comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.13.25.1" test_ref="oval:org.mitre.oval:tst:32521"/>
          <criterion comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.13.25.1" test_ref="oval:org.mitre.oval:tst:32568"/>
          <criterion comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.13.25.1" test_ref="oval:org.mitre.oval:tst:32369"/>
          <criterion comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.13.25.1" test_ref="oval:org.mitre.oval:tst:31728"/>
          <criterion comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.13.25.1" test_ref="oval:org.mitre.oval:tst:32424"/>
          <criterion comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.13.25.1" test_ref="oval:org.mitre.oval:tst:32510"/>
          <criterion comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.13.25.1" test_ref="oval:org.mitre.oval:tst:32532"/>
          <criterion comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.13.25.1" test_ref="oval:org.mitre.oval:tst:32174"/>
          <criterion comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.13.25.1" test_ref="oval:org.mitre.oval:tst:32670"/>
          <criterion comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.13.25.1" test_ref="oval:org.mitre.oval:tst:32705"/>
          <criterion comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.13.25.1" test_ref="oval:org.mitre.oval:tst:32274"/>
          <criterion comment="xorg-x11 is earlier than 0:6.8.2-1.EL.13.25.1" test_ref="oval:org.mitre.oval:tst:32683"/>
          <criterion comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.13.25.1" test_ref="oval:org.mitre.oval:tst:32330"/>
          <criterion comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.13.25.1" test_ref="oval:org.mitre.oval:tst:32692"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9928" version="3" class="vulnerability">
      <metadata>
        <title>Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via a crafted PDF file that calls an insecure JavaScript method in the EScript.api plug-in.  NOTE: this issue might be subsumed by CVE-2008-0655.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5663" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5663"/>
        <description>Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via a crafted PDF file that calls an insecure JavaScript method in the EScript.api plug-in.  NOTE: this issue might be subsumed by CVE-2008-0655.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:19.094-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:00.477-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:08.486-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criteria operator="OR">
            <criterion comment="acroread-plugin is earlier than 0:8.1.2-1.el3.6" test_ref="oval:org.mitre.oval:tst:36324"/>
            <criterion comment="acroread is earlier than 0:8.1.2-1.el3.6" test_ref="oval:org.mitre.oval:tst:36153"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="acroread-plugin is earlier than 0:8.1.2-1.el4.2" test_ref="oval:org.mitre.oval:tst:36156"/>
            <criterion comment="acroread is earlier than 0:8.1.2-1.el4.2" test_ref="oval:org.mitre.oval:tst:36293"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="acroread-plugin is earlier than 0:8.1.2-1.el5.3" test_ref="oval:org.mitre.oval:tst:35792"/>
            <criterion comment="acroread is earlier than 0:8.1.2-1.el5.3" test_ref="oval:org.mitre.oval:tst:35912"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9927" version="5" class="vulnerability">
      <metadata>
        <title>Certain modifications to the Linux kernel 2.6.16 and earlier do not add the appropriate Linux Security Modules (LSM) file_permission hooks to the (1) readv and (2) writev functions, which might allow attackers to bypass intended access restrictions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1856" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1856"/>
        <description>Certain modifications to the Linux kernel 2.6.16 and earlier do not add the appropriate Linux Security Modules (LSM) file_permission hooks to the (1) readv and (2) writev functions, which might allow attackers to bypass intended access restrictions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:25.870-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:15:00.202-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:08.196-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9927 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:09.055-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:23.842-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32235"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32371"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32703"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32314"/>
          <criterion comment="kernel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32614"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32295"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32310"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32611"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32305"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9926" version="5" class="vulnerability">
      <metadata>
        <title>The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a free of invalid data.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1180" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1180"/>
        <description>The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a free of invalid data.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:48.604-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:59.474-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:07.543-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9926 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:18.008-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:22.733-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="xpdf is earlier than 1:2.02-14.el3" test_ref="oval:org.mitre.oval:tst:38322"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40095"/>
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-13.el4" test_ref="oval:org.mitre.oval:tst:38126"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:39528"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-13.el4" test_ref="oval:org.mitre.oval:tst:38230"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40473"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38481"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40316"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-7.7.2.el4_7.4" test_ref="oval:org.mitre.oval:tst:38436"/>
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38145"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40209"/>
            <criterion comment="xpdf is earlier than 1:3.00-20.el4" test_ref="oval:org.mitre.oval:tst:38649"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40364"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40077"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38607"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.5.4-12.el5_3" test_ref="oval:org.mitre.oval:tst:38618"/>
            <criterion comment="cups-lpd is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38471"/>
            <criterion comment="tetex-dvips is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40312"/>
            <criterion comment="kdegraphics is earlier than 7:3.5.4-12.el5_3" test_ref="oval:org.mitre.oval:tst:38271"/>
            <criterion comment="poppler is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38760"/>
            <criterion comment="tetex-fonts is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40122"/>
            <criterion comment="cups-libs is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38541"/>
            <criterion comment="tetex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40413"/>
            <criterion comment="tetex-doc is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40398"/>
            <criterion comment="poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38500"/>
            <criterion comment="tetex-latex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40444"/>
            <criterion comment="poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38512"/>
            <criterion comment="cups-devel is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:37935"/>
            <criterion comment="tetex-afm is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40008"/>
            <criterion comment="tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:39920"/>
            <criterion comment="cups is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38334"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9925" version="5" class="vulnerability">
      <metadata>
        <title>Double free vulnerability in the Adobe Acrobat Reader Plugin before 8.0.0, as used in Mozilla Firefox 1.5.0.7, allows remote attackers to execute arbitrary code by causing an error via a javascript: URI call to document.write in the (1) FDF, (2) XML, or (3) XFDF AJAX request parameters.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0005" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0005"/>
        <description>Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions allows remote attackers to execute arbitrary code via a .PSD image file with a large number of layers.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:56.373-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:59.151-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:07.212-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9925 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:39.777-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:22.259-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30471"/>
            <criterion comment="ImageMagick is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30355"/>
            <criterion comment="ImageMagick-perl is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30877"/>
            <criterion comment="ImageMagick-devel is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30918"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30938"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-6" test_ref="oval:org.mitre.oval:tst:30872"/>
            <criterion comment="ImageMagick is earlier than 0:6.0.7.1-6" test_ref="oval:org.mitre.oval:tst:31137"/>
            <criterion comment="ImageMagick-perl is earlier than 0:6.0.7.1-6" test_ref="oval:org.mitre.oval:tst:31139"/>
            <criterion comment="ImageMagick-devel is earlier than 0:6.0.7.1-6" test_ref="oval:org.mitre.oval:tst:31140"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:6.0.7.1-6" test_ref="oval:org.mitre.oval:tst:31337"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9924" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0.1 and Mozilla before 1.7.6 truncates long sub-domains or paths for display, which may allow remote malicious web sites to spoof legitimate sites and facilitate phishing attacks.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0585" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0585"/>
        <description>Firefox before 1.0.1 and Mozilla before 1.7.6 truncates long sub-domains or paths for display, which may allow remote malicious web sites to spoof legitimate sites and facilitate phishing attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:26.737-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:58.772-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:06.821-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9924 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:21.439-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:21.690-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31283"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31520"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31645"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31516"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31569"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31143"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31512"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31785"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31695"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31626"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:1.0.1-1.4.3" test_ref="oval:org.mitre.oval:tst:31118"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9923" version="5" class="vulnerability">
      <metadata>
        <title>Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via .. (dot dot) sequences in filenames returned from a LIST command.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0372" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0372"/>
        <description>Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via .. (dot dot) sequences in filenames returned from a LIST command.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:07.106-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:58.549-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:06.592-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9923 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:35.821-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:21.321-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gftp is earlier than 1:2.0.14-4" test_ref="oval:org.mitre.oval:tst:31807"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gftp is earlier than 1:2.0.17-5" test_ref="oval:org.mitre.oval:tst:31775"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9922" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 3.0.6 and SeaMonkey do not block links to the (1) about:plugins and (2) about:config URIs from .desktop files, which allows user-assisted remote attackers to bypass the Same Origin Policy and execute arbitrary code with chrome privileges via vectors involving the URL field in a Desktop Entry section of a .desktop file, related to representation of about: URIs as jar:file:// URIs.  NOTE: this issue exists because of an incomplete fix for CVE-2008-4582.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0356" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0356"/>
        <description>Mozilla Firefox before 3.0.6 and SeaMonkey do not block links to the (1) about:plugins and (2) about:config URIs from .desktop files, which allows user-assisted remote attackers to bypass the Same Origin Policy and execute arbitrary code with chrome privileges via vectors involving the URL field in a Desktop Entry section of a .desktop file, related to representation of about: URIs as jar:file:// URIs.  NOTE: this issue exists because of an incomplete fix for CVE-2008-4582.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:19.288-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:58.214-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:06.246-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9922 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:42.919-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:20.787-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-3.el4" test_ref="oval:org.mitre.oval:tst:37923"/>
            <criterion comment="firefox is earlier than 0:3.0.6-1.el4" test_ref="oval:org.mitre.oval:tst:37823"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-3.el4" test_ref="oval:org.mitre.oval:tst:38343"/>
            <criterion comment="nss-tools is earlier than 0:3.12.2.0-3.el4" test_ref="oval:org.mitre.oval:tst:38172"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.2.0-4.el5" test_ref="oval:org.mitre.oval:tst:37933"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.6-1.el5" test_ref="oval:org.mitre.oval:tst:37808"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-4.el5" test_ref="oval:org.mitre.oval:tst:37350"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.6-1.el5" test_ref="oval:org.mitre.oval:tst:37835"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.6-1.el5" test_ref="oval:org.mitre.oval:tst:37556"/>
            <criterion comment="firefox is earlier than 0:3.0.6-1.el5" test_ref="oval:org.mitre.oval:tst:38272"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-4.el5" test_ref="oval:org.mitre.oval:tst:38040"/>
            <criterion comment="nss-tools is earlier than 0:3.12.2.0-4.el5" test_ref="oval:org.mitre.oval:tst:37867"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9921" version="5" class="vulnerability">
      <metadata>
        <title>net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system hang) by creating an abstract-namespace AF_UNIX listening socket, performing a shutdown operation on this socket, and then performing a series of connect operations to this socket.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3621" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3621"/>
        <description>net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system hang) by creating an abstract-namespace AF_UNIX listening socket, performing a shutdown operation on this socket, and then performing a series of connect operations to this socket.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:02.374-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:57.700-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:05.730-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9921 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:41:10.871-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:20.154-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39504"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39362"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39704"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39759"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39722"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39734"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39394"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39578"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39019"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39604"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39609"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39674"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39635"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39630"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39766"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39742"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39295"/>
            <criterion comment="kernel is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:38900"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39772"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39784"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39625"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39731"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39509"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9920" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Wireshark (formerly Ethereal) 0.99.6 through 1.0.2 allows attackers to cause a denial of service (crash) via a crafted Tektronix .rf5 file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3934" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3934"/>
        <description>Unspecified vulnerability in Wireshark (formerly Ethereal) 0.99.6 through 1.0.2 allows attackers to cause a denial of service (crash) via a crafted Tektronix .rf5 file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:56.398-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:57.409-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:05.422-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9920 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:04.112-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:19.604-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-EL3.3" test_ref="oval:org.mitre.oval:tst:37624"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-EL3.3" test_ref="oval:org.mitre.oval:tst:37207"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-3.el4_7" test_ref="oval:org.mitre.oval:tst:37249"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-3.el4_7" test_ref="oval:org.mitre.oval:tst:37725"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37542"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37460"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9919" version="5" class="vulnerability">
      <metadata>
        <title>The rad_decode function in FreeRADIUS before 1.1.8 allows remote attackers to cause a denial of service (radiusd crash) via zero-length Tunnel-Password attributes, as demonstrated by a certain module in VulnDisco Pack Professional 7.6 through 8.11.  NOTE: this is a regression error related to CVE-2003-0967.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3111" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3111"/>
        <description>The rad_decode function in FreeRADIUS before 1.1.8 allows remote attackers to cause a denial of service (radiusd crash) via zero-length Tunnel-Password attributes, as demonstrated by a certain module in VulnDisco Pack Professional 7.6 through 8.11.  NOTE: this is a regression error related to CVE-2003-0967.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:26.493-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:57.192-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:05.192-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9919 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:16.490-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:19.277-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="freeradius-mysql is earlier than 0:1.1.3-1.5.el5_4" test_ref="oval:org.mitre.oval:tst:39467"/>
          <criterion comment="freeradius-unixODBC is earlier than 0:1.1.3-1.5.el5_4" test_ref="oval:org.mitre.oval:tst:38652"/>
          <criterion comment="freeradius is earlier than 0:1.1.3-1.5.el5_4" test_ref="oval:org.mitre.oval:tst:39117"/>
          <criterion comment="freeradius-postgresql is earlier than 0:1.1.3-1.5.el5_4" test_ref="oval:org.mitre.oval:tst:39124"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9918" version="5" class="vulnerability">
      <metadata>
        <title>The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to read portions of memory via a username without a trailing null byte, which causes a buffer over-read.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1516" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1516"/>
        <description>The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to read portions of memory via a username without a trailing null byte, which causes a buffer over-read.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:00.621-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:56.902-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:04.911-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9918 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:36:15.812-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:18.906-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mysql is earlier than 0:4.1.20-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32252"/>
          <criterion comment="mysql-devel is earlier than 0:4.1.20-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32551"/>
          <criterion comment="mysql-bench is earlier than 0:4.1.20-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32245"/>
          <criterion comment="mysql-server is earlier than 0:4.1.20-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32560"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9917" version="5" class="vulnerability">
      <metadata>
        <title>The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly handle a failed call to the mmap function, which causes an incorrect mapped image and may allow local users to execute arbitrary code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1071" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1071"/>
        <description>The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly handle a failed call to the mmap function, which causes an incorrect mapped image and may allow local users to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:56.632-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:56.627-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:04.460-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9917 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:08.981-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:18.540-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30934"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30708"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30577"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30874"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30794"/>
          <criterion comment="kernel is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30892"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30873"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:31080"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30866"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9916" version="5" class="vulnerability">
      <metadata>
        <title>The do_gfs2_set_flags function in fs/gfs2/file.c in the Linux kernel before 2.6.34-git10 does not verify the ownership of a file, which allows local users to bypass intended access restrictions via a SETFLAGS ioctl request.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1641" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1641"/>
        <description>The do_gfs2_set_flags function in fs/gfs2/file.c in the Linux kernel before 2.6.34-git10 does not verify the ownership of a file, which allows local users to bypass intended access restrictions via a SETFLAGS ioctl request.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:59.000-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:56.309-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:04.135-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9916 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:29.646-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:18.121-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40501"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40283"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40807"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40842"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40793"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40732"/>
          <criterion comment="kernel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40830"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40349"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:39978"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:39896"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40791"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40580"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9915" version="5" class="vulnerability">
      <metadata>
        <title>MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_real_query function.  NOTE: this issue was originally reported for the mysql_query function, but the vendor states that since mysql_query expects a null character, this is not an issue for mysql_query.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0903" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0903"/>
        <description>MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_real_query function.  NOTE: this issue was originally reported for the mysql_query function, but the vendor states that since mysql_query expects a null character, this is not an issue for mysql_query.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:59.900-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:55.967-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:03.786-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9915 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:41.759-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:17.621-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mysql is earlier than 0:4.1.20-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32252"/>
            <criterion comment="mysql-devel is earlier than 0:4.1.20-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32551"/>
            <criterion comment="mysql-bench is earlier than 0:4.1.20-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32245"/>
            <criterion comment="mysql-server is earlier than 0:4.1.20-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32560"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mysql is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36197"/>
            <criterion comment="mysql-devel is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36749"/>
            <criterion comment="mysql-test is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36750"/>
            <criterion comment="mysql-bench is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36831"/>
            <criterion comment="mysql-server is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36646"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9914" version="3" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to gain privileges via an untrusted application, a different issue than CVE-2008-1191, aka the "fourth" issue.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1190" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1190"/>
        <description>Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to gain privileges via an untrusted application, a different issue than CVE-2008-1191, aka the "fourth" issue.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:45.873-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:55.358-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:03.175-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36548"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36455"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36422"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36295"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36406"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36334"/>
            <criterion comment="java-1.5.0-ibm is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36155"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36267"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35708"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35618"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36613"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36614"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36509"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36558"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36485"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35872"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36582"/>
            <criterion comment="java-1.6.0-ibm-accessibility is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36555"/>
            <criterion comment="java-1.6.0-ibm-jdbc is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36414"/>
            <criterion comment="java-1.6.0-ibm-src is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36622"/>
            <criterion comment="java-1.6.0-ibm-javacomm is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36688"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36265"/>
            <criterion comment="java-1.6.0-ibm is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36319"/>
            <criterion comment="java-1.6.0-ibm-plugin is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36706"/>
            <criterion comment="java-1.6.0-ibm-devel is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36205"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36535"/>
            <criterion comment="java-1.6.0-ibm-demo is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36515"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36523"/>
            <criterion comment="java-1.5.0-ibm-accessibility is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36323"/>
            <criterion comment="java-1.5.0-ibm is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35890"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35698"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35719"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36340"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36068"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36568"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9913" version="5" class="vulnerability">
      <metadata>
        <title>(1) xenbaked and (2) xenmon.py in Xen 3.1 and earlier allow local users to truncate arbitrary files via a symlink attack on /tmp/xenq-shm.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3919" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3919"/>
        <description>(1) xenbaked and (2) xenmon.py in Xen 3.1 and earlier allow local users to truncate arbitrary files via a symlink attack on /tmp/xenq-shm.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:34.598-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:55.138-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:02.897-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9913 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:08.214-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:17.306-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="xen-libs is earlier than 0:3.0.3-41.el5_1.5" test_ref="oval:org.mitre.oval:tst:36530"/>
          <criterion comment="xen is earlier than 0:3.0.3-41.el5_1.5" test_ref="oval:org.mitre.oval:tst:36543"/>
          <criterion comment="xen-devel is earlier than 0:3.0.3-41.el5_1.5" test_ref="oval:org.mitre.oval:tst:35758"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9912" version="5" class="vulnerability">
      <metadata>
        <title>Mailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified vectors involving "standards-breaking RFC 2231 formatted headers".</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2941" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2941"/>
        <description>Mailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified vectors involving "standards-breaking RFC 2231 formatted headers".</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:01.286-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:54.841-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:02.664-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9912 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:57.499-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:16.916-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="mailman is earlier than 3:2.1.5.1-25.rhel3.7" test_ref="oval:org.mitre.oval:tst:32470"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="mailman is earlier than 3:2.1.5.1-34.rhel4.5" test_ref="oval:org.mitre.oval:tst:32787"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9911" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to associate spoofed content with an invalid URL by setting document.location to this URL, and then writing arbitrary web script or HTML to the associated blank document, a related issue to CVE-2009-2654.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3985" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3985"/>
        <description>Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to associate spoofed content with an invalid URL by setting document.location to this URL, and then writing arbitrary web script or HTML to the associated blank document, a related issue to CVE-2009-2654.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:30.778-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:54.584-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:02.400-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9911 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:47.631-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:16.492-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.16-4.el4" test_ref="oval:org.mitre.oval:tst:39002"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.16-2.el5_4" test_ref="oval:org.mitre.oval:tst:39838"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.16-2.el5_4" test_ref="oval:org.mitre.oval:tst:39032"/>
            <criterion comment="firefox is earlier than 0:3.0.16-1.el5_4" test_ref="oval:org.mitre.oval:tst:39721"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.16-2.el5_4" test_ref="oval:org.mitre.oval:tst:39558"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9910" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the PixarLog decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3461"/>
        <description>Heap-based buffer overflow in the PixarLog decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:11.203-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:54.313-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:02.117-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9910 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:24.863-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:16.079-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.1.3-3.10" test_ref="oval:org.mitre.oval:tst:32819"/>
            <criterion comment="libtiff is earlier than 0:3.5.7-25.el3.4" test_ref="oval:org.mitre.oval:tst:32069"/>
            <criterion comment="kdegraphics is earlier than 7:3.1.3-3.10" test_ref="oval:org.mitre.oval:tst:33012"/>
            <criterion comment="libtiff-devel is earlier than 0:3.5.7-25.el3.4" test_ref="oval:org.mitre.oval:tst:32843"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libtiff is earlier than 0:3.6.1-12" test_ref="oval:org.mitre.oval:tst:32922"/>
            <criterion comment="libtiff-devel is earlier than 0:3.6.1-12" test_ref="oval:org.mitre.oval:tst:32413"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:991" version="4" class="vulnerability">
      <metadata>
        <title>Multiple BO Vulnerabilities in MIT Kerberos 5</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>MIT Kerberos 5 (krb5)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0523" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0523"/>
        <description>Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-06-29T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-07-21T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-08-04T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:53.979-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:12.209-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:991 - Typo Corrections" date="2014-05-22T11:01:00.943-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-05-22T11:03:38.761-04:00">INTERIM</status_change>
            <status_change date="2014-06-09T04:01:50.447-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="Red Hat Enterprise 3 is installed" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criterion comment="krb5-libs rpm version prior to 1.2.7-24 is installed" test_ref="oval:org.mitre.oval:tst:1351"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9909" version="5" class="vulnerability">
      <metadata>
        <title>The strnlen_user function in Linux kernel before 2.6.16 on IBM S/390 can return an incorrect value, which allows local users to cause a denial of service via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0456"/>
        <description>The strnlen_user function in Linux kernel before 2.6.16 on IBM S/390 can return an incorrect value, which allows local users to cause a denial of service via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:17.573-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:53.991-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:01.775-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9909 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:27.127-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:15.646-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32335"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32833"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32825"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32836"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32736"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:31931"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32361"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32793"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32795"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9908" version="5" class="vulnerability">
      <metadata>
        <title>Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the protection mechanism for codebase principals and execute arbitrary script via the -moz-binding CSS property in a signed JAR file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5023" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5023"/>
        <description>Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the protection mechanism for codebase principals and execute arbitrary script via the -moz-binding CSS property in a signed JAR file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:26.352-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:53.413-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:01.182-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9908 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:04.221-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:14.815-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37159"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37875"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37293"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37934"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37671"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37932"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37970"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37357"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37852"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37844"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37232"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-3.el4" test_ref="oval:org.mitre.oval:tst:38065"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37914"/>
            <criterion comment="firefox is earlier than 0:3.0.4-1.el4" test_ref="oval:org.mitre.oval:tst:37904"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-3.el4" test_ref="oval:org.mitre.oval:tst:37840"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37991"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37955"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37777"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:38009"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-20.el5" test_ref="oval:org.mitre.oval:tst:37773"/>
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37531"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37899"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37454"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:38021"/>
            <criterion comment="yelp is earlier than 0:2.16.0-22.el5" test_ref="oval:org.mitre.oval:tst:37645"/>
            <criterion comment="devhelp is earlier than 0:0.12-20.el5" test_ref="oval:org.mitre.oval:tst:37958"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37388"/>
            <criterion comment="firefox is earlier than 0:3.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37066"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37648"/>
            <criterion comment="nss-tools is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37936"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9907" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service (crash or memory corruption) via TIFF images that lead to incorrect malloc calls.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0886" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0886"/>
        <description>Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service (crash or memory corruption) via TIFF images that lead to incorrect malloc calls.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:45.995-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:53.120-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:00.831-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9907 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:09.711-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:14.435-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="tetex-latex is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31559"/>
          <criterion comment="kdegraphics-devel is earlier than 7:3.1.3-3.7" test_ref="oval:org.mitre.oval:tst:30890"/>
          <criterion comment="libtiff is earlier than 0:3.5.7-20.1" test_ref="oval:org.mitre.oval:tst:31042"/>
          <criterion comment="tetex-dvips is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31693"/>
          <criterion comment="kdegraphics is earlier than 7:3.1.3-3.7" test_ref="oval:org.mitre.oval:tst:31096"/>
          <criterion comment="tetex-fonts is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31615"/>
          <criterion comment="tetex is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31603"/>
          <criterion comment="libtiff-devel is earlier than 0:3.5.7-20.1" test_ref="oval:org.mitre.oval:tst:31022"/>
          <criterion comment="tetex-afm is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31685"/>
          <criterion comment="tetex-xdvi is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31747"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9906" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG protocol handlers in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0007"/>
        <description>Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG protocol handlers in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:14.903-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:52.896-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:00.639-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9906 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:44.361-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:14.171-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="gaim is earlier than 1:0.75-3.2.0" test_ref="oval:org.mitre.oval:tst:30440"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9905" version="5" class="vulnerability">
      <metadata>
        <title>QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on the host OS by using the diskformat: parameter in the -usbdevice option to modify the disk-image header to identify a different format, a related issue to CVE-2008-2004.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1945" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1945"/>
        <description>QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on the host OS by using the diskformat: parameter in the -usbdevice option to modify the disk-image header to identify a different format, a related issue to CVE-2008-2004.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:51.925-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:52.692-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:00.422-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9905 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:34.272-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:13.821-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="xen-libs is earlier than 0:3.0.3-64.el5_2.3" test_ref="oval:org.mitre.oval:tst:37651"/>
          <criterion comment="xen is earlier than 0:3.0.3-64.el5_2.3" test_ref="oval:org.mitre.oval:tst:37731"/>
          <criterion comment="xen-devel is earlier than 0:3.0.3-64.el5_2.3" test_ref="oval:org.mitre.oval:tst:37638"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9904" version="5" class="vulnerability">
      <metadata>
        <title>Header.pm in Net::DNS before 0.60, a Perl module, (1) generates predictable sequence IDs with a fixed increment and (2) can use the same starting ID for all child processes of a forking server, which allows remote attackers to spoof DNS responses, as originally reported for qpsmtp and spamassassin.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3377" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3377"/>
        <description>Header.pm in Net::DNS before 0.60, a Perl module, (1) generates predictable sequence IDs with a fixed increment and (2) can use the same starting ID for all child processes of a forking server, which allows remote attackers to spoof DNS responses, as originally reported for qpsmtp and spamassassin.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:26.189-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:52.436-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:16:00.153-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9904 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:51.281-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:13.385-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="perl-Net-DNS is earlier than 0:0.31-4.el3" test_ref="oval:org.mitre.oval:tst:34732"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="perl-Net-DNS is earlier than 0:0.48-2.el4" test_ref="oval:org.mitre.oval:tst:34581"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="perl-Net-DNS is earlier than 0:0.59-3.el5" test_ref="oval:org.mitre.oval:tst:34803"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9903" version="5" class="vulnerability">
      <metadata>
        <title>The IPv6 flow label handling code (ip6_flowlabel.c) in Linux kernels 2.4 up to 2.4.32 and 2.6 before 2.6.14 modifies the wrong variable in certain circumstances, which allows local users to corrupt kernel memory or cause a denial of service (crash) by triggering a free of non-allocated memory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3806" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3806"/>
        <description>The IPv6 flow label handling code (ip6_flowlabel.c) in Linux kernels 2.4 up to 2.4.32 and 2.6 before 2.6.14 modifies the wrong variable in certain circumstances, which allows local users to corrupt kernel memory or cause a denial of service (crash) by triggering a free of non-allocated memory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:54.626-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:51.984-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:59.686-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9903 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:37.341-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:12.754-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32525"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32366"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32381"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32215"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32464"/>
            <criterion comment="kernel is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32288"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:31978"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32438"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32070"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32415"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32137"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32528"/>
            <criterion comment="kernel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32205"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:31866"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32446"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32450"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9902" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the Key Distribution Center (KDC) in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to cause a denial of service (apllication crash) and possibly execute arbitrary code via a certain valid TCP or UDP request.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1175" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1175"/>
        <description>Heap-based buffer overflow in the Key Distribution Center (KDC) in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to cause a denial of service (apllication crash) and possibly execute arbitrary code via a certain valid TCP or UDP request.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:54.396-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:51.653-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:59.362-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9902 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:35.444-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:12.197-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.2.7-47" test_ref="oval:org.mitre.oval:tst:31712"/>
            <criterion comment="krb5 is earlier than 0:1.2.7-47" test_ref="oval:org.mitre.oval:tst:31065"/>
            <criterion comment="krb5-libs is earlier than 0:1.2.7-47" test_ref="oval:org.mitre.oval:tst:31933"/>
            <criterion comment="krb5-server is earlier than 0:1.2.7-47" test_ref="oval:org.mitre.oval:tst:31927"/>
            <criterion comment="krb5-devel is earlier than 0:1.2.7-47" test_ref="oval:org.mitre.oval:tst:31772"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.3.4-17" test_ref="oval:org.mitre.oval:tst:31800"/>
            <criterion comment="krb5 is earlier than 0:1.3.4-17" test_ref="oval:org.mitre.oval:tst:31846"/>
            <criterion comment="krb5-libs is earlier than 0:1.3.4-17" test_ref="oval:org.mitre.oval:tst:31172"/>
            <criterion comment="krb5-server is earlier than 0:1.3.4-17" test_ref="oval:org.mitre.oval:tst:31706"/>
            <criterion comment="krb5-devel is earlier than 0:1.3.4-17" test_ref="oval:org.mitre.oval:tst:31781"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9901" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in CIFS VFS in Linux kernel 2.6.23 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SMB responses that trigger the overflows in the SendReceive function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5904" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5904"/>
        <description>Multiple buffer overflows in CIFS VFS in Linux kernel 2.6.23 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SMB responses that trigger the overflows in the SendReceive function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:15.902-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:51.155-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:58.817-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9901 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:50.219-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:11.329-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-67.0.7.EL" test_ref="oval:org.mitre.oval:tst:36188"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-67.0.7.EL" test_ref="oval:org.mitre.oval:tst:36478"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-67.0.7.EL" test_ref="oval:org.mitre.oval:tst:36125"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-67.0.7.EL" test_ref="oval:org.mitre.oval:tst:36428"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-67.0.7.EL" test_ref="oval:org.mitre.oval:tst:35983"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-67.0.7.EL" test_ref="oval:org.mitre.oval:tst:36049"/>
            <criterion comment="kernel is earlier than 0:2.6.9-67.0.7.EL" test_ref="oval:org.mitre.oval:tst:36310"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-67.0.7.EL" test_ref="oval:org.mitre.oval:tst:36246"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-67.0.7.EL" test_ref="oval:org.mitre.oval:tst:36377"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-67.0.7.EL" test_ref="oval:org.mitre.oval:tst:35967"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-67.0.7.EL" test_ref="oval:org.mitre.oval:tst:36113"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36030"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:35766"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36138"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36062"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:35611"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:35990"/>
            <criterion comment="kernel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:35969"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36085"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36026"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36084"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36097"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36035"/>
            <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:35648"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9900" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 2.0.0.16 and 3.x before 3.0.1, Thunderbird before 2.0.0.16, and SeaMonkey before 1.1.11 use an incorrect integer data type as a CSS object reference counter in the CSSValue array (aka nsCSSValue:Array) data structure, which allows remote attackers to execute arbitrary code via a large number of references to a common CSS object, leading to a counter overflow and a free of in-use memory, aka ZDI-CAN-349.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2785" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2785"/>
        <description>Mozilla Firefox before 2.0.0.16 and 3.x before 3.0.1, Thunderbird before 2.0.0.16, and SeaMonkey before 1.1.11 use an incorrect integer data type as a CSS object reference counter in the CSSValue array (aka nsCSSValue:Array) data structure, which allows remote attackers to execute arbitrary code via a large number of references to a common CSS object, leading to a counter overflow and a free of in-use memory, aka ZDI-CAN-349.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:45.937-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:50.451-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:58.182-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9900 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:49.325-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:10.449-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.22.el3" test_ref="oval:org.mitre.oval:tst:37358"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.22.el3" test_ref="oval:org.mitre.oval:tst:37417"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.22.el3" test_ref="oval:org.mitre.oval:tst:37346"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.22.el3" test_ref="oval:org.mitre.oval:tst:36845"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.22.el3" test_ref="oval:org.mitre.oval:tst:37059"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.22.el3" test_ref="oval:org.mitre.oval:tst:37083"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.22.el3" test_ref="oval:org.mitre.oval:tst:36603"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.22.el3" test_ref="oval:org.mitre.oval:tst:37300"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.22.el3" test_ref="oval:org.mitre.oval:tst:37075"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.22.el3" test_ref="oval:org.mitre.oval:tst:37472"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.8.1.el4" test_ref="oval:org.mitre.oval:tst:36782"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-16.4.el4_6" test_ref="oval:org.mitre.oval:tst:37402"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-16.4.el4_6" test_ref="oval:org.mitre.oval:tst:37430"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-14.el4" test_ref="oval:org.mitre.oval:tst:36999"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-16.4.el4_6" test_ref="oval:org.mitre.oval:tst:37439"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-16.4.el4_6" test_ref="oval:org.mitre.oval:tst:37337"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-16.4.el4_6" test_ref="oval:org.mitre.oval:tst:36865"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.8.1.el4" test_ref="oval:org.mitre.oval:tst:36898"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.21.el4" test_ref="oval:org.mitre.oval:tst:36910"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-16.4.el4_6" test_ref="oval:org.mitre.oval:tst:37455"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-16.4.el4_6" test_ref="oval:org.mitre.oval:tst:36525"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-16.4.el4_6" test_ref="oval:org.mitre.oval:tst:37362"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-16.4.el4_6" test_ref="oval:org.mitre.oval:tst:36596"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-16.4.el4_6" test_ref="oval:org.mitre.oval:tst:37517"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-18.el5" test_ref="oval:org.mitre.oval:tst:37176"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.1-1.el5" test_ref="oval:org.mitre.oval:tst:37474"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.16-1.el5" test_ref="oval:org.mitre.oval:tst:37363"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.1-1.el5" test_ref="oval:org.mitre.oval:tst:37409"/>
            <criterion comment="devhelp is earlier than 0:0.12-18.el5" test_ref="oval:org.mitre.oval:tst:37522"/>
            <criterion comment="yelp is earlier than 0:2.16.0-20.el5" test_ref="oval:org.mitre.oval:tst:37008"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.1-1.el5" test_ref="oval:org.mitre.oval:tst:37414"/>
            <criterion comment="firefox is earlier than 0:3.0.1-1.el5" test_ref="oval:org.mitre.oval:tst:37297"/>
            <criterion comment="nspluginwrapper is earlier than 0:0.9.91.5-22.el5" test_ref="oval:org.mitre.oval:tst:37422"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:990" version="4" class="vulnerability">
      <metadata>
        <title>Microsoft Outlook Express v6.0 MHTML URL Processing Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Outlook Express</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0380"/>
        <description>The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help (CHM) file that references the InfoTech Storage (ITS) protocol handlers such as (1) ms-its, (2) ms-itss, (3) its, or (4) mk:@MSITStore, aka the "MHTML URL Processing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:990 - Modified vulnerabilities - a lot of fixes" date="2015-07-22T13:29:00.390-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-07-22T13:32:10.993-04:00">INTERIM</status_change>
            <status_change date="2015-08-10T04:01:13.091-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Outlook Express 6.0 for Windows XP/2003 is installed" definition_ref="oval:org.mitre.oval:def:208"/>
        <criterion comment="the version of inetcomm.dll is less than 6.00.2739.300" test_ref="oval:org.mitre.oval:tst:1352"/>
        <criterion negate="true" comment="the patch kb837009 is installed (installed components key)" test_ref="oval:org.mitre.oval:tst:1512"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:208" version="8" class="inventory">
      <metadata>
        <title>Microsoft Outlook Express 6.0 for Windows XP/2003 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Outlook Express 6.0</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:outlook_express:6.0"/>
        <description>Microsoft Outlook Express 6.0 for Windows XP/2003 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-03T12:32:22">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2007-07-03T14:04:49.139-04:00">DRAFT</status_change>
            <status_change date="2007-07-18T15:57:53.037-04:00">INTERIM</status_change>
            <status_change date="2007-08-02T14:47:15.591-04:00">ACCEPTED</status_change>
            <modified date="2009-06-15T04:44:54" comment="Added CPE">
              <contributor organization="The MITRE Corporation">Brendan Miles</contributor>
            </modified>
            <status_change date="2009-06-22T04:00:51.618-04:00">INTERIM</status_change>
            <status_change date="2009-07-13T04:00:31.131-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:1485 - Correction to pattern match in ste:1485." date="2010-12-27T19:49:00.448-05:00">
              <contributor organization="National Institute of Standards and Technology">Tim Harrison</contributor>
            </modified>
            <status_change date="2010-12-27T19:58:09.275-05:00">INTERIM</status_change>
            <status_change date="2011-01-17T04:00:19.196-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:208 - Modifications vary from minor OVAL title/description changes to suggesting an alternative CPE name to use." date="2011-09-28T11:29:00.976-04:00">
              <contributor organization="The MITRE Corporation">David Rothenberg</contributor>
            </modified>
            <status_change date="2011-09-28T11:33:18.675-04:00">INTERIM</status_change>
            <status_change date="2011-10-17T04:00:15.525-04:00">ACCEPTED</status_change>
            <status_change date="2012-03-05T14:24:06.259-05:00">INTERIM</status_change>
            <modified comment="Added Windows Server 2008 R2 platform" date="2012-03-05T14:24:06.259-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2012-03-26T04:02:59.974-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows XP is installed" test_ref="oval:org.mitre.oval:tst:2838"/>
        <criterion comment="Microsoft Outlook Express 6 for Windows XP/2003 is installed" test_ref="oval:org.mitre.oval:tst:1633"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:99" version="10" class="vulnerability">
      <metadata>
        <title>IE v6.0 Content Disposition/Type Arbitrary Code Execution</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0193" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0193"/>
        <description>Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error message, aka the first variant of the "Content Disposition" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-27T05:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2005-03-07T05:00:00.000-04:00" comment="modified wrt-222 - changed pattern match">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-03-09T05:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-29T05:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="Changed IE registry test to wrt-18">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-07-03T12:56:00.000-04:00" comment="Added negate=true attribute to criteria sub-block to fix conversion error from OVAL 4.2 to OVAL 5.0">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-07-03T12:56:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:41.221-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2878" date="2010-11-29T16:13:00.904-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:04.414-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:01:44.339-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:58.502-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:39.939-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:59.421-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:29.049-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="the version of mshtml.dll is less than 6.0.2716.2200" negate="false" test_ref="oval:org.mitre.oval:tst:3086"/>
        <criterion comment="the patch q321232 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3119"/>
        <criterion comment="the patch q323759 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3118"/>
        <criterion comment="the patch q328970 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3117"/>
        <criterion comment="the patch q324929 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3116"/>
        <criterion comment="the patch q810847 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3115"/>
        <criterion comment="the patch q813489 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3114"/>
        <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed" negate="true">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="SP4 or later Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3073"/>
        </criteria>
        <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9899" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0848" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0848"/>
        <description>Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:14.325-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:50.210-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:57.864-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9899 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:18.493-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:10.101-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39831"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39445"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40225"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40023"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40307"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9898" version="3" class="vulnerability">
      <metadata>
        <title>The Java Virtual Machine (JVM) in Sun Java Runtime Environment (JRE) in SDK and JRE 1.3.x through 1.3.1_20 and 1.4.x through 1.4.2_15, and JDK and JRE 5.x through 5.0 Update 12 and 6.x through 6 Update 2, allows remote attackers to execute arbitrary programs, or read or modify arbitrary files, via applets that grant privileges to themselves.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5689" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5689"/>
        <description>The Java Virtual Machine (JVM) in Sun Java Runtime Environment (JRE) in SDK and JRE 1.3.x through 1.3.1_20 and 1.4.x through 1.4.2_15, and JDK and JRE 5.x through 5.0 Update 12 and 6.x through 6 Update 2, allows remote attackers to execute arbitrary programs, or read or modify arbitrary files, via applets that grant privileges to themselves.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:39.463-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:49.838-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:57.522-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35191"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35272"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35384"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35413"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:34849"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35057"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35437"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34760"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35256"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35392"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35317"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34772"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9897" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to execute script outside of the sandbox and conduct cross-site scripting (XSS) attacks via multiple vectors including the XMLDocument.load function, aka "JavaScript privilege escalation bugs."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0415" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0415"/>
        <description>Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to execute script outside of the sandbox and conduct cross-site scripting (XSS) attacks via multiple vectors including the XMLDocument.load function, aka "JavaScript privilege escalation bugs."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:31.823-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:49.161-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:56.950-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9897 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:59:06.410-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:09.330-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36256"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36236"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:35996"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36279"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36046"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36052"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36034"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36284"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:35748"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:35994"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36164"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36050"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-8.el4" test_ref="oval:org.mitre.oval:tst:36202"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36193"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36093"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36053"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.10.el4" test_ref="oval:org.mitre.oval:tst:35919"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:35600"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36141"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:35397"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:35684"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36203"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-9.el5" test_ref="oval:org.mitre.oval:tst:36281"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-9.el5" test_ref="oval:org.mitre.oval:tst:35480"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-8.el5" test_ref="oval:org.mitre.oval:tst:35675"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9896" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0845" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0845"/>
        <description>Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:49.459-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:48.867-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:56.705-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9896 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:48.873-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:08.918-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39831"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39445"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40225"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40023"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40307"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9895" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in ImageMagick before 6.2.9 allow user-assisted attackers to execute arbitrary code via crafted XCF images.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3743" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3743"/>
        <description>Multiple buffer overflows in ImageMagick before 6.2.9 allow user-assisted attackers to execute arbitrary code via crafted XCF images.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:04.556-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:48.550-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:56.382-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9895 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:25.810-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:08.472-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:5.5.6-20" test_ref="oval:org.mitre.oval:tst:32037"/>
            <criterion comment="ImageMagick is earlier than 0:5.5.6-20" test_ref="oval:org.mitre.oval:tst:32699"/>
            <criterion comment="ImageMagick-perl is earlier than 0:5.5.6-20" test_ref="oval:org.mitre.oval:tst:32588"/>
            <criterion comment="ImageMagick-devel is earlier than 0:5.5.6-20" test_ref="oval:org.mitre.oval:tst:32852"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:5.5.6-20" test_ref="oval:org.mitre.oval:tst:32735"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-16" test_ref="oval:org.mitre.oval:tst:32383"/>
            <criterion comment="ImageMagick is earlier than 0:6.0.7.1-16" test_ref="oval:org.mitre.oval:tst:32971"/>
            <criterion comment="ImageMagick-perl is earlier than 0:6.0.7.1-16" test_ref="oval:org.mitre.oval:tst:32748"/>
            <criterion comment="ImageMagick-devel is earlier than 0:6.0.7.1-16" test_ref="oval:org.mitre.oval:tst:32946"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:6.0.7.1-16" test_ref="oval:org.mitre.oval:tst:32537"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9894" version="5" class="vulnerability">
      <metadata>
        <title>OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass "from=" and "user@host" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0386" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0386"/>
        <description>OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass "from=" and "user@host" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:11.376-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:48.314-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:56.140-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9894 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:41.374-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:08.150-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="openssh is earlier than 0:3.6.1p2-33.30.9" test_ref="oval:org.mitre.oval:tst:32634"/>
          <criterion comment="openssh-askpass is earlier than 0:3.6.1p2-33.30.9" test_ref="oval:org.mitre.oval:tst:32130"/>
          <criterion comment="openssh-server is earlier than 0:3.6.1p2-33.30.9" test_ref="oval:org.mitre.oval:tst:32453"/>
          <criterion comment="openssh-clients is earlier than 0:3.6.1p2-33.30.9" test_ref="oval:org.mitre.oval:tst:32516"/>
          <criterion comment="openssh-askpass-gnome is earlier than 0:3.6.1p2-33.30.9" test_ref="oval:org.mitre.oval:tst:32587"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9893" version="5" class="vulnerability">
      <metadata>
        <title>Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in (1) the TIFFFetchAnyArray function in (a) tif_dirread.c; (2) certain "codec cleanup methods" in (b) tif_lzw.c, (c) tif_pixarlog.c, and (d) tif_zip.c; (3) and improper restoration of setfield and getfield methods in cleanup functions within (e) tif_jpeg.c, tif_pixarlog.c, (f) tif_fax3.c, and tif_zip.c.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2024" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2024"/>
        <description>Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in (1) the TIFFFetchAnyArray function in (a) tif_dirread.c; (2) certain "codec cleanup methods" in (b) tif_lzw.c, (c) tif_pixarlog.c, and (d) tif_zip.c; (3) and improper restoration of setfield and getfield methods in cleanup functions within (e) tif_jpeg.c, tif_pixarlog.c, (f) tif_fax3.c, and tif_zip.c.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:49.067-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:48.008-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:55.834-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9893 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:33.443-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:07.724-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libtiff is earlier than 0:3.5.7-25.el3.1" test_ref="oval:org.mitre.oval:tst:32689"/>
            <criterion comment="libtiff-devel is earlier than 0:3.5.7-25.el3.1" test_ref="oval:org.mitre.oval:tst:32435"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libtiff is earlier than 0:3.6.1-10" test_ref="oval:org.mitre.oval:tst:32329"/>
            <criterion comment="libtiff-devel is earlier than 0:3.6.1-10" test_ref="oval:org.mitre.oval:tst:32637"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9892" version="5" class="vulnerability">
      <metadata>
        <title>The handle_dr function in arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 2.6.31.1 does not properly verify the Current Privilege Level (CPL) before accessing a debug register, which allows guest OS users to cause a denial of service (trap) on the host OS via a crafted application.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3722" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3722"/>
        <description>The handle_dr function in arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 2.6.31.1 does not properly verify the Current Privilege Level (CPL) before accessing a debug register, which allows guest OS users to cause a denial of service (trap) on the host OS via a crafted application.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:35.775-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:47.788-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:55.600-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9892 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:07.868-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:07.396-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kmod-kvm is earlier than 0:83-105.el5_4.27" test_ref="oval:org.mitre.oval:tst:40222"/>
          <criterion comment="kvm-qemu-img is earlier than 0:83-105.el5_4.27" test_ref="oval:org.mitre.oval:tst:40287"/>
          <criterion comment="kvm-tools is earlier than 0:83-105.el5_4.27" test_ref="oval:org.mitre.oval:tst:39931"/>
          <criterion comment="kvm is earlier than 0:83-105.el5_4.27" test_ref="oval:org.mitre.oval:tst:39956"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9891" version="5" class="vulnerability">
      <metadata>
        <title>The ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command Engine (CCE) state initialization, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly gain privileges via unspecified ioctl calls.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3620" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3620"/>
        <description>The ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command Engine (CCE) state initialization, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly gain privileges via unspecified ioctl calls.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:39.465-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:47.311-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:55.113-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9891 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:28.143-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:06.718-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39504"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39362"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39704"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39759"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39722"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39734"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39394"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39578"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39019"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39604"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39609"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39674"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39635"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39630"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39766"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39742"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39295"/>
            <criterion comment="kernel is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:38900"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39772"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39784"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39625"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39731"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39509"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9890" version="5" class="vulnerability">
      <metadata>
        <title>Linux kernel 2.4.x and 2.6.x allows local users to cause a denial of service (CPU and memory consumption) and bypass RLIM_MEMLOCK limits via the mlockall call.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0179"/>
        <description>Linux kernel 2.4.x and 2.6.x allows local users to cause a denial of service (CPU and memory consumption) and bypass RLIM_MEMLOCK limits via the mlockall call.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:15.752-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:46.859-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:54.671-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9890 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:56.000-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:06.185-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31411"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31953"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31879"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31990"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31485"/>
            <criterion comment="kernel is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32093"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31968"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32148"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31741"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30633"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:31009"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30369"/>
            <criterion comment="kernel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:31205"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30421"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30594"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30616"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:989" version="3" class="vulnerability">
      <metadata>
        <title>Microsoft Outlook Express 6,SP1 News Reading Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Outlook Express</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1213" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1213"/>
        <description>Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP servers to execute arbitrary code via a LIST response with a long second field.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2005-08-19T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:989 - Modified vulnerabilities - a lot of fixes" date="2015-07-22T13:29:00.390-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-07-22T13:32:16.524-04:00">INTERIM</status_change>
            <status_change date="2015-08-10T04:01:12.929-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Outlook Express 6 SP1 is installed." definition_ref="oval:org.mitre.oval:def:488"/>
        <criterion comment="the version of inetcomm.dll is less than 6.0.2800.1506" test_ref="oval:org.mitre.oval:tst:1354"/>
        <criterion negate="true" comment="Patch KB897715 Installed" test_ref="oval:org.mitre.oval:tst:2853"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:488" version="3" class="inventory">
      <metadata>
        <title>Microsoft Outlook Express 6 SP1 is installed.</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Outlook Express 6</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:outlook_express:6.00.2800.1106"/>
        <description>Microsoft Outlook Express 6 SP1 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-12-13T08:17:04">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-12-14T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-01-03T13:53:58.863-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:38.525-05:00">ACCEPTED</status_change>
            <status_change date="2012-03-05T14:24:06.259-05:00">INTERIM</status_change>
            <modified comment="Added Windows Server 2008 R2 platform" date="2012-03-05T14:24:06.259-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2012-03-26T04:03:03.141-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Microsoft Outlook Express 6 SP1 is installed" test_ref="oval:org.mitre.oval:tst:1355"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9889" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9, when generating the HTTP Referer header, does not list the entire URL when it contains Basic Authentication credentials without a username, which makes it easier for remote attackers to bypass application protection mechanisms that rely on Referer headers, such as with some Cross-Site Request Forgery (CSRF) mechanisms.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1238"/>
        <description>Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9, when generating the HTTP Referer header, does not list the entire URL when it contains Basic Authentication credentials without a username, which makes it easier for remote attackers to bypass application protection mechanisms that rely on Referer headers, such as with some Cross-Site Request Forgery (CSRF) mechanisms.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:02.547-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:46.338-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:53.955-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9889 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:59:07.827-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:05.410-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36547"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36570"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36574"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:35661"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36605"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:35672"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:35874"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36533"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36355"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36379"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36587"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:35752"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-10.el4" test_ref="oval:org.mitre.oval:tst:36259"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36586"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36333"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36500"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.14.el4" test_ref="oval:org.mitre.oval:tst:35884"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36540"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36602"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36557"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36511"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36221"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-14.el5_1" test_ref="oval:org.mitre.oval:tst:36566"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-14.el5_1" test_ref="oval:org.mitre.oval:tst:36305"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-11.el5_1" test_ref="oval:org.mitre.oval:tst:36619"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9888" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a large XML document.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4226" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4226"/>
        <description>Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a large XML document.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:57.587-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:45.969-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:53.605-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9888 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:16.855-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:04.825-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libxml2-devel is earlier than 0:2.5.10-14" test_ref="oval:org.mitre.oval:tst:37860"/>
            <criterion comment="libxml2-python is earlier than 0:2.5.10-14" test_ref="oval:org.mitre.oval:tst:37771"/>
            <criterion comment="libxml2 is earlier than 0:2.5.10-14" test_ref="oval:org.mitre.oval:tst:38036"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libxml2-devel is earlier than 0:2.6.16-12.6" test_ref="oval:org.mitre.oval:tst:37841"/>
            <criterion comment="libxml2-python is earlier than 0:2.6.16-12.6" test_ref="oval:org.mitre.oval:tst:37839"/>
            <criterion comment="libxml2 is earlier than 0:2.6.16-12.6" test_ref="oval:org.mitre.oval:tst:37940"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libxml2-devel is earlier than 0:2.6.26-2.1.2.7" test_ref="oval:org.mitre.oval:tst:38044"/>
            <criterion comment="libxml2-python is earlier than 0:2.6.26-2.1.2.7" test_ref="oval:org.mitre.oval:tst:37640"/>
            <criterion comment="libxml2 is earlier than 0:2.6.26-2.1.2.7" test_ref="oval:org.mitre.oval:tst:37694"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9887" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0.5 allows remote attackers to steal sensitive information by opening a malicious link in the Firefox sidebar using the _search target, then injecting script into other pages via a data: URL.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2264" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2264"/>
        <description>Firefox before 1.0.5 allows remote attackers to steal sensitive information by opening a malicious link in the Firefox sidebar using the _search target, then injecting script into other pages via a data: URL.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:35.727-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:45.787-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:53.405-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9887 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:05.361-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:04.530-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="firefox is earlier than 0:1.0.6-1.4.1" test_ref="oval:org.mitre.oval:tst:32167"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9886" version="5" class="vulnerability">
      <metadata>
        <title>Array index error in the gst_qtp_trak_handler function in gst/qtdemux/qtdemux.c in GStreamer Plug-ins (aka gstreamer-plugins) 0.6.0 allows remote attackers to have an unknown impact via a crafted QuickTime media file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0398" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0398"/>
        <description>Array index error in the gst_qtp_trak_handler function in gst/qtdemux/qtdemux.c in GStreamer Plug-ins (aka gstreamer-plugins) 0.6.0 allows remote attackers to have an unknown impact via a crafted QuickTime media file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:18.984-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:45.596-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:53.189-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9886 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:59:11.841-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:04.248-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="gstreamer-plugins-devel is earlier than 0:0.6.0-19" test_ref="oval:org.mitre.oval:tst:38088"/>
          <criterion comment="gstreamer-plugins is earlier than 0:0.6.0-19" test_ref="oval:org.mitre.oval:tst:38287"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9885" version="5" class="vulnerability">
      <metadata>
        <title>The copy_from_user function in the uaccess code in Linux kernel 2.6 before 2.6.19-rc1, when running on s390, does not properly clear a kernel buffer, which allows local user space programs to read portions of kernel memory by "appending to a file from a bad address," which triggers a fault that prevents the unused memory from being cleared in the kernel buffer.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5174"/>
        <description>The copy_from_user function in the uaccess code in Linux kernel 2.6 before 2.6.19-rc1, when running on s390, does not properly clear a kernel buffer, which allows local user space programs to read portions of kernel memory by "appending to a file from a bad address," which triggers a fault that prevents the unused memory from being cleared in the kernel buffer.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:06.557-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:45.177-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:52.707-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9885 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:10.946-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:03.660-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33074"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:32633"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33103"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33001"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:32937"/>
            <criterion comment="kernel is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:32280"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33127"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:32855"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33021"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33204"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33278"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33306"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32378"/>
            <criterion comment="kernel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33145"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33107"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32620"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32645"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33057"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9884" version="5" class="vulnerability">
      <metadata>
        <title>browser.js in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 uses the requesting URI to identify child windows, which allows remote attackers to conduct cross-site scripting (XSS) attacks by opening a blocked popup originating from a javascript: URI in combination with multiple frames having the same data: URI.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0780" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0780"/>
        <description>browser.js in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 uses the requesting URI to identify child windows, which allows remote attackers to conduct cross-site scripting (XSS) attacks by opening a blocked popup originating from a javascript: URI in combination with multiple frames having the same data: URI.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:19.280-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:44.545-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:52.104-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9884 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:57:32.650-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:02.824-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33391"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33688"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33675"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33724"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33510"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33409"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33467"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33658"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33649"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33381"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:32760"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33554"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33648"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.10-0.1.el4" test_ref="oval:org.mitre.oval:tst:32765"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33712"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33705"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33379"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:33400"/>
            <criterion comment="firefox is earlier than 0:1.5.0.10-0.1.el4" test_ref="oval:org.mitre.oval:tst:33759"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33678"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33695"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33697"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33244"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33645"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.10-2.el5" test_ref="oval:org.mitre.oval:tst:33461"/>
            <criterion comment="yelp is earlier than 0:2.16.0-14.0.1.el5" test_ref="oval:org.mitre.oval:tst:33761"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-10.0.1.el5" test_ref="oval:org.mitre.oval:tst:33744"/>
            <criterion comment="devhelp is earlier than 0:0.12-10.0.1.el5" test_ref="oval:org.mitre.oval:tst:33415"/>
            <criterion comment="firefox is earlier than 0:1.5.0.10-2.el5" test_ref="oval:org.mitre.oval:tst:33616"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.10-1.el5" test_ref="oval:org.mitre.oval:tst:33493"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9883" version="5" class="vulnerability">
      <metadata>
        <title>The lcd_write function in drivers/usb/misc/usblcd.c in the Linux kernel before 2.6.22-rc7 does not limit the amount of memory used by a caller, which allows local users to cause a denial of service (memory consumption).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3513"/>
        <description>The lcd_write function in drivers/usb/misc/usblcd.c in the Linux kernel before 2.6.22-rc7 does not limit the amount of memory used by a caller, which allows local users to cause a denial of service (memory consumption).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:56.196-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:44.243-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:51.730-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9883 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:08.570-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:02.402-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35330"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35339"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35337"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35227"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35043"/>
          <criterion comment="kernel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35276"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:34448"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35366"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35208"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35326"/>
          <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35345"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9882" version="5" class="vulnerability">
      <metadata>
        <title>The Linux kernel before 2.6.31-rc7 does not properly prevent mmap operations that target page zero and other low memory addresses, which allows local users to gain privileges by exploiting NULL pointer dereference vulnerabilities, related to (1) the default configuration of the allow_unconfined_mmap_low boolean in SELinux on Red Hat Enterprise Linux (RHEL) 5, (2) an error that causes allow_unconfined_mmap_low to be ignored in the unconfined_t domain, (3) lack of a requirement for the CAP_SYS_RAWIO capability for these mmap operations, and (4) interaction between the mmap_min_addr protection mechanism and certain application programs.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2695" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2695"/>
        <description>The Linux kernel before 2.6.31-rc7 does not properly prevent mmap operations that target page zero and other low memory addresses, which allows local users to gain privileges by exploiting NULL pointer dereference vulnerabilities, related to (1) the default configuration of the allow_unconfined_mmap_low boolean in SELinux on Red Hat Enterprise Linux (RHEL) 5, (2) an error that causes allow_unconfined_mmap_low to be ignored in the unconfined_t domain, (3) lack of a requirement for the CAP_SYS_RAWIO capability for these mmap operations, and (4) interaction between the mmap_min_addr protection mechanism and certain application programs.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:21.179-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:43.871-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:51.399-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9882 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:28.061-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:01.928-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39665"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39142"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39538"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39699"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39518"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39350"/>
          <criterion comment="kernel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39738"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39663"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39536"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39189"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39141"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39179"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9881" version="5" class="vulnerability">
      <metadata>
        <title>Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testing or extracting the archive.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0234" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0234"/>
        <description>Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testing or extracting the archive.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:04.542-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:43.690-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:51.202-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9881 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:59:08.788-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:01.664-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="lha is earlier than 0:1.14i-10.2" test_ref="oval:org.mitre.oval:tst:30332"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9880" version="5" class="vulnerability">
      <metadata>
        <title>The DCP ETSI dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (long loop and resource consumption) via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6119" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6119"/>
        <description>The DCP ETSI dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (long loop and resource consumption) via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:52.977-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:43.402-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:50.850-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9880 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:23.719-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:01.107-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:36051"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:35980"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35669"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35941"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:35709"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:36120"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35712"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35801"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:988" version="1" class="vulnerability">
      <metadata>
        <title>Ethereal MMSE Dissector Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0507"/>
        <description>Buffer overflow in the MMSE dissector for Ethereal 0.10.1 to 0.10.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-06-10T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-06-30T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-07-12T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criteria operator="OR" comment="Vulnerable Config">
            <criterion comment="ethereal version is less than 0.10.3-0.30E.2" negate="false" test_ref="oval:org.mitre.oval:tst:1359"/>
            <criterion comment="ethereal-gnome version is less than 0.10.3-0.30E.2" negate="false" test_ref="oval:org.mitre.oval:tst:1358"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="Vulnerable Config">
            <criteria operator="OR" comment="/usr/bin/ethereal is executable">
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1529"/>
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1528"/>
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1527"/>
            </criteria>
            <criteria operator="OR" comment="/usr/sbin/ethereal is executable">
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1526"/>
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1525"/>
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1524"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/tethereal is executable">
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1523"/>
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1522"/>
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1521"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9879" version="5" class="vulnerability">
      <metadata>
        <title>KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4224" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4224"/>
        <description>KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:28.753-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:43.102-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:50.529-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9879 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:30:26.551-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:23:00.583-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdebase is earlier than 0:3.3.1-6.el4" test_ref="oval:org.mitre.oval:tst:34380"/>
            <criterion comment="kdebase-devel is earlier than 0:3.3.1-6.el4" test_ref="oval:org.mitre.oval:tst:35343"/>
            <criterion comment="kdelibs is earlier than 6:3.3.1-9.el4" test_ref="oval:org.mitre.oval:tst:35165"/>
            <criterion comment="kdelibs-devel is earlier than 6:3.3.1-9.el4" test_ref="oval:org.mitre.oval:tst:35252"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdebase is earlier than 0:3.5.4-15.el5" test_ref="oval:org.mitre.oval:tst:34844"/>
            <criterion comment="kdebase-devel is earlier than 0:3.5.4-15.el5" test_ref="oval:org.mitre.oval:tst:35321"/>
            <criterion comment="kdelibs-apidocs is earlier than 6:3.5.4-13.el5" test_ref="oval:org.mitre.oval:tst:35316"/>
            <criterion comment="kdelibs is earlier than 6:3.5.4-13.el5" test_ref="oval:org.mitre.oval:tst:35293"/>
            <criterion comment="kdelibs-devel is earlier than 6:3.5.4-13.el5" test_ref="oval:org.mitre.oval:tst:34994"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9878" version="6" class="vulnerability">
      <metadata>
        <title>Use-after-free vulnerability in net/ipv4/tcp_input.c in the Linux kernel 2.6 before 2.6.20, when IPV6_RECVPKTINFO is set on a listening socket, allows remote attackers to cause a denial of service (kernel panic) via a SYN packet while the socket is in a listening (TCP_LISTEN) state, which is not properly handled causes the skb structure to be freed.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1188" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1188"/>
        <description>Use-after-free vulnerability in net/ipv4/tcp_input.c in the Linux kernel 2.6 before 2.6.20, when IPV6_RECVPKTINFO is set on a listening socket, allows remote attackers to cause a denial of service (kernel panic) via a SYN packet while the socket is in a listening (TCP_LISTEN) state, which is not properly handled and causes the skb structure to be freed.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:54.662-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:42.572-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:50.003-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9878 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:15.967-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:59.900-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40272"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40483"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40310"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40062"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40096"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:39895"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40165"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40131"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40380"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:39955"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40115"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:39718"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:40363"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:40151"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:40182"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:40070"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:40313"/>
            <criterion comment="kernel is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:40302"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:39440"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:39472"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:40090"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:39519"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:39840"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9877" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0093" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0093"/>
        <description>Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:42.802-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:42.338-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:49.755-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9877 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:47.480-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:59.555-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39831"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39445"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40225"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40023"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40307"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9876" version="5" class="vulnerability">
      <metadata>
        <title>The sandbox for vim allows dangerous functions such as (1) writefile, (2) feedkeys, and (3) system, which might allow user-assisted attackers to execute shell commands and write files via modelines.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2438" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2438"/>
        <description>The sandbox for vim allows dangerous functions such as (1) writefile, (2) feedkeys, and (3) system, which might allow user-assisted attackers to execute shell commands and write files via modelines.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:31.682-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:42.109-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:49.509-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9876 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:30.599-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:59.219-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="vim-minimal is earlier than 2:7.0.109-3.el5.3" test_ref="oval:org.mitre.oval:tst:34144"/>
          <criterion comment="vim-enhanced is earlier than 2:7.0.109-3.el5.3" test_ref="oval:org.mitre.oval:tst:33597"/>
          <criterion comment="vim is earlier than 2:7.0.109-3.el5.3" test_ref="oval:org.mitre.oval:tst:33798"/>
          <criterion comment="vim-X11 is earlier than 2:7.0.109-3.el5.3" test_ref="oval:org.mitre.oval:tst:34124"/>
          <criterion comment="vim-common is earlier than 2:7.0.109-3.el5.3" test_ref="oval:org.mitre.oval:tst:33253"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9875" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.5 allow remote attackers to execute arbitrary code via a crafted XPCNativeWrapper.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3738" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3738"/>
        <description>Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.5 allow remote attackers to execute arbitrary code via a crafted XPCNativeWrapper.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:42.973-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:41.545-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:48.915-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9875 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:54.928-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:58.436-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:33986"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34827"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34839"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34762"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34814"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34694"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34925"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34684"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34723"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34747"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34968"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34971"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-0.3.el4" test_ref="oval:org.mitre.oval:tst:34888"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34868"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34492"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34775"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.3.el4" test_ref="oval:org.mitre.oval:tst:34828"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34981"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34335"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34957"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34550"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34608"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-3.el5" test_ref="oval:org.mitre.oval:tst:34810"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-3.el5" test_ref="oval:org.mitre.oval:tst:34667"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-3.el5" test_ref="oval:org.mitre.oval:tst:34869"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9874" version="5" class="vulnerability">
      <metadata>
        <title>The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 2.6.32-git6 allows user-assisted remote attackers to cause a denial of service (divide-by-zero error and panic) via a malformed ext4 filesystem containing a super block with a large FLEX_BG group size (aka s_log_groups_per_flex value).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4307" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4307"/>
        <description>The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 2.6.32-git6 allows user-assisted remote attackers to cause a denial of service (divide-by-zero error and panic) via a malformed ext4 filesystem containing a super block with a large FLEX_BG group size (aka s_log_groups_per_flex value).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:32.997-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:41.160-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:48.579-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9874 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:49.612-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:57.963-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:39718"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:40363"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:40151"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:40182"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:40070"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:40313"/>
          <criterion comment="kernel is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:40302"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:39440"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:39472"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:40090"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:39519"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:39840"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9873" version="5" class="vulnerability">
      <metadata>
        <title>The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have the same origin as the inner URL, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a jar: URI.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5947" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5947"/>
        <description>The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have the same origin as the inner URL, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a jar: URI.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:56.724-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:40.559-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:48.006-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9873 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:20.196-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:57.256-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35246"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35338"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35812"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35754"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35763"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35809"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35651"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35146"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35423"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35775"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:35664"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:35628"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-7.el4" test_ref="oval:org.mitre.oval:tst:35520"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:35267"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:35702"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:35858"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.8.el4" test_ref="oval:org.mitre.oval:tst:34811"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:35499"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:35523"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:35602"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:35697"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:34917"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-7.el5" test_ref="oval:org.mitre.oval:tst:35421"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-7.el5" test_ref="oval:org.mitre.oval:tst:35528"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-7.el5" test_ref="oval:org.mitre.oval:tst:35742"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9872" version="5" class="vulnerability">
      <metadata>
        <title>The JavaScript engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via vectors related to "insufficient class checking" in the Date class.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5018" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5018"/>
        <description>The JavaScript engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via vectors related to "insufficient class checking" in the Date class.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:32.387-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:39.910-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:47.381-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9872 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:02.598-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:56.397-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37159"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37875"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37293"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37934"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37671"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37932"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37970"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37357"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37852"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37844"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37232"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-3.el4" test_ref="oval:org.mitre.oval:tst:38065"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-17.el4" test_ref="oval:org.mitre.oval:tst:37872"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37914"/>
            <criterion comment="firefox is earlier than 0:3.0.4-1.el4" test_ref="oval:org.mitre.oval:tst:37904"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-3.el4" test_ref="oval:org.mitre.oval:tst:37840"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37991"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37955"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37777"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:38009"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-20.el5" test_ref="oval:org.mitre.oval:tst:37773"/>
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37531"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37899"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37454"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.18-1.el5" test_ref="oval:org.mitre.oval:tst:38015"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:38021"/>
            <criterion comment="yelp is earlier than 0:2.16.0-22.el5" test_ref="oval:org.mitre.oval:tst:37645"/>
            <criterion comment="devhelp is earlier than 0:0.12-20.el5" test_ref="oval:org.mitre.oval:tst:37958"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37388"/>
            <criterion comment="firefox is earlier than 0:3.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37066"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37648"/>
            <criterion comment="nss-tools is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37936"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9871" version="5" class="vulnerability">
      <metadata>
        <title>The ricci daemon in Red Hat Conga 0.10.0 allows remote attackers to cause a denial of service (loss of new connections) by repeatedly sending data or attempting connections.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4136" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4136"/>
        <description>The ricci daemon in Red Hat Conga 0.10.0 allows remote attackers to cause a denial of service (loss of new connections) by repeatedly sending data or attempting connections.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:03.417-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:39.702-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:47.158-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9871 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:21.647-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:56.073-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="luci is earlier than 0:0.10.0-6.el5" test_ref="oval:org.mitre.oval:tst:34653"/>
          <criterion comment="conga is earlier than 0:0.10.0-6.el5" test_ref="oval:org.mitre.oval:tst:34332"/>
          <criterion comment="ricci is earlier than 0:0.10.0-6.el5" test_ref="oval:org.mitre.oval:tst:34712"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9870" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0736" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0736"/>
        <description>Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:15.376-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:39.212-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:46.691-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9870 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:18.940-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:55.510-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31148"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31473"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31178"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31282"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31565"/>
            <criterion comment="kernel is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31562"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31582"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:30730"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31534"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31545"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31539"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31661"/>
            <criterion comment="kernel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31482"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31112"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31605"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31330"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:987" version="1" class="vulnerability">
      <metadata>
        <title>Ethereal SPNEGO Dissector Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0506" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0506"/>
        <description>The SPNEGO dissector in Ethereal 0.9.8 to 0.10.3 allows remote attackers to cause a denial of service (crash) via unknown attack vectors that cause a null pointer dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-06-10T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-06-30T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-07-12T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criteria operator="OR" comment="Vulnerable Config">
            <criterion comment="ethereal version is less than 0.10.3-0.30E.2" negate="false" test_ref="oval:org.mitre.oval:tst:1359"/>
            <criterion comment="ethereal-gnome version is less than 0.10.3-0.30E.2" negate="false" test_ref="oval:org.mitre.oval:tst:1358"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="Vulnerable Config">
            <criteria operator="OR" comment="/usr/bin/ethereal is executable">
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1529"/>
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1528"/>
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1527"/>
            </criteria>
            <criteria operator="OR" comment="/usr/sbin/ethereal is executable">
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1526"/>
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1525"/>
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1524"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/tethereal is executable">
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1523"/>
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1522"/>
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1521"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9869" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the SCSI dissector in Wireshark (formerly Ethereal) 0.99.2 allows remote attackers to cause a denial of service (crash) via unspecified vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4330" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4330"/>
        <description>Unspecified vulnerability in the SCSI dissector in Wireshark (formerly Ethereal) 0.99.2 allows remote attackers to cause a denial of service (crash) via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:26.391-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:38.933-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:46.432-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9869 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:26.730-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:55.137-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.3-EL3.2" test_ref="oval:org.mitre.oval:tst:33011"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.3-EL3.2" test_ref="oval:org.mitre.oval:tst:32323"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.3-EL4.2" test_ref="oval:org.mitre.oval:tst:33025"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.3-EL4.2" test_ref="oval:org.mitre.oval:tst:32974"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9868" version="5" class="vulnerability">
      <metadata>
        <title>The wait_task_stopped function in the Linux kernel before 2.6.23.8 checks a TASK_TRACED bit instead of an exit_state value, which allows local users to cause a denial of service (machine crash) via unspecified vectors.  NOTE: some of these details are obtained from third party information.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5500" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5500"/>
        <description>The wait_task_stopped function in the Linux kernel before 2.6.23.8 checks a TASK_TRACED bit instead of an exit_state value, which allows local users to cause a denial of service (machine crash) via unspecified vectors.  NOTE: some of these details are obtained from third party information.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:17.346-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:38.632-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:46.113-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9868 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:30:23.345-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:54.677-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-xenU is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:36090"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35525"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35832"/>
          <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35126"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35901"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:36007"/>
          <criterion comment="kernel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35982"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:36072"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:36041"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35364"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35662"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9867" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0497"/>
        <description>Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:06.252-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:38.351-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:45.708-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9867 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:00.216-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:54.311-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-15.0.3.EL" test_ref="oval:org.mitre.oval:tst:30726"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-15.0.3.EL" test_ref="oval:org.mitre.oval:tst:29909"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-15.0.3.EL" test_ref="oval:org.mitre.oval:tst:30725"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-15.0.3.EL" test_ref="oval:org.mitre.oval:tst:30253"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-15.0.3.EL" test_ref="oval:org.mitre.oval:tst:30583"/>
          <criterion comment="kernel is earlier than 0:2.4.21-15.0.3.EL" test_ref="oval:org.mitre.oval:tst:29798"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-15.0.3.EL" test_ref="oval:org.mitre.oval:tst:30668"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-15.0.3.EL" test_ref="oval:org.mitre.oval:tst:30738"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-15.0.3.EL" test_ref="oval:org.mitre.oval:tst:30652"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9866" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in the sFlow dissector in Ethereal 0.9.14 through 0.10.9 allows remote attackers to cause a denial of service (application crash).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0766" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0766"/>
        <description>Unknown vulnerability in the sFlow dissector in Ethereal 0.9.14 through 0.10.9 allows remote attackers to cause a denial of service (application crash).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:24.462-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:38.111-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:45.452-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9866 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:09.242-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:53.861-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.10-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31514"/>
            <criterion comment="ethereal is earlier than 0:0.10.10-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31448"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.10-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31593"/>
            <criterion comment="ethereal is earlier than 0:0.10.10-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31548"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9865" version="5" class="vulnerability">
      <metadata>
        <title>The block reflow implementation in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an image whose display requires more pixels than nscoord_MAX, related to nsBlockFrame::DrainOverflowLines.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2811" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2811"/>
        <description>The block reflow implementation in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an image whose display requires more pixels than nscoord_MAX, related to nsBlockFrame::DrainOverflowLines.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:10.662-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:37.447-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:44.825-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9865 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:51:56.667-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:53.101-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37286"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37033"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37126"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37105"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37271"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37279"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37060"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37189"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:36476"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:36916"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37236"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37192"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-14.el4" test_ref="oval:org.mitre.oval:tst:36999"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36886"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37331"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36365"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.19.el4" test_ref="oval:org.mitre.oval:tst:37174"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37226"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36766"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37320"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36826"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37274"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-17.el5" test_ref="oval:org.mitre.oval:tst:37107"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:37351"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.16-1.el5" test_ref="oval:org.mitre.oval:tst:37363"/>
            <criterion comment="xulrunner is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:36984"/>
            <criterion comment="devhelp is earlier than 0:0.12-17.el5" test_ref="oval:org.mitre.oval:tst:37234"/>
            <criterion comment="yelp is earlier than 0:2.16.0-19.el5" test_ref="oval:org.mitre.oval:tst:37291"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:36436"/>
            <criterion comment="firefox is earlier than 0:3.0-2.el5" test_ref="oval:org.mitre.oval:tst:36814"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9864" version="5" class="vulnerability">
      <metadata>
        <title>The NFSv4 ID mapper (nfsidmap) before 0.17 does not properly handle return values from the getpwnam_r function when performing a username lookup, which can cause it to report a file as being owned by "root" instead of "nobody" if the file exists on the server but not on the client.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4135" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4135"/>
        <description>The NFSv4 ID mapper (nfsidmap) before 0.17 does not properly handle return values from the getpwnam_r function when performing a username lookup, which can cause it to report a file as being owned by "root" instead of "nobody" if the file exists on the server but not on the client.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:17.002-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:37.256-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:44.611-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9864 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:32.902-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:52.738-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="nfs-utils-lib-devel is earlier than 0:1.0.8-7.2.z2" test_ref="oval:org.mitre.oval:tst:35168"/>
          <criterion comment="nfs-utils-lib is earlier than 0:1.0.8-7.2.z2" test_ref="oval:org.mitre.oval:tst:35408"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9863" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the rb_ary_fill function in array.c in Ruby before revision 17756 allows context-dependent attackers to cause a denial of service (crash) or possibly have unspecified other impact via a call to the Array#fill method with a start (aka beg) argument greater than ARY_MAX_SIZE.  NOTE: this issue exists because of an incomplete fix for other closely related integer overflows.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2376" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2376"/>
        <description>Integer overflow in the rb_ary_fill function in array.c in Ruby before revision 17756 allows context-dependent attackers to cause a denial of service (crash) or possibly have unspecified other impact via a call to the Array#fill method with a start (aka beg) argument greater than ARY_MAX_SIZE.  NOTE: this issue exists because of an incomplete fix for other closely related integer overflows.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:51.866-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:36.715-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:43.945-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9863 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:21.391-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:51.987-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:36968"/>
            <criterion comment="ruby-docs is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37000"/>
            <criterion comment="ruby-devel is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:36747"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37140"/>
            <criterion comment="ruby is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37342"/>
            <criterion comment="irb is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37252"/>
            <criterion comment="ruby-libs is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37305"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:37171"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:37242"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:36569"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:37296"/>
            <criterion comment="ruby is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:36468"/>
            <criterion comment="irb is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:36808"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:37219"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-ri is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37199"/>
            <criterion comment="ruby-mode is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:36604"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:36516"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:36870"/>
            <criterion comment="ruby is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:36738"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37119"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37289"/>
            <criterion comment="ruby-irb is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37148"/>
            <criterion comment="ruby-rdoc is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37203"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9862" version="5" class="vulnerability">
      <metadata>
        <title>A certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in OpenSSH 4.3 in Red Hat Enterprise Linux (RHEL) 5.4 and Fedora 11, allows local users to gain privileges via hard links to setuid programs that use configuration files within the chroot directory, related to requirements for directory ownership.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2904" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2904"/>
        <description>A certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in OpenSSH 4.3 in Red Hat Enterprise Linux (RHEL) 5.4 and Fedora 11, allows local users to gain privileges via hard links to setuid programs that use configuration files within the chroot directory, related to requirements for directory ownership.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:37.822-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:36.494-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:43.707-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9862 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:54.471-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:51.644-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="openssh is earlier than 0:4.3p2-36.el5_4.2" test_ref="oval:org.mitre.oval:tst:39187"/>
          <criterion comment="openssh-askpass is earlier than 0:4.3p2-36.el5_4.2" test_ref="oval:org.mitre.oval:tst:39240"/>
          <criterion comment="openssh-server is earlier than 0:4.3p2-36.el5_4.2" test_ref="oval:org.mitre.oval:tst:38797"/>
          <criterion comment="openssh-clients is earlier than 0:4.3p2-36.el5_4.2" test_ref="oval:org.mitre.oval:tst:39487"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9861" version="5" class="vulnerability">
      <metadata>
        <title>digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service (segmentation fault) via malformed inputs in DIGEST-MD5 negotiation.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1721"/>
        <description>digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service (segmentation fault) via malformed inputs in DIGEST-MD5 negotiation.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:32.582-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:36.135-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:43.344-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9861 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:38.936-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:50.999-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cyrus-sasl-plain is earlier than 0:2.1.15-15" test_ref="oval:org.mitre.oval:tst:35185"/>
            <criterion comment="cyrus-sasl-md5 is earlier than 0:2.1.15-15" test_ref="oval:org.mitre.oval:tst:35067"/>
            <criterion comment="cyrus-sasl-gssapi is earlier than 0:2.1.15-15" test_ref="oval:org.mitre.oval:tst:35028"/>
            <criterion comment="cyrus-sasl-devel is earlier than 0:2.1.15-15" test_ref="oval:org.mitre.oval:tst:34649"/>
            <criterion comment="cyrus-sasl is earlier than 0:2.1.15-15" test_ref="oval:org.mitre.oval:tst:35113"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cyrus-sasl-ntlm is earlier than 0:2.1.19-14" test_ref="oval:org.mitre.oval:tst:35092"/>
            <criterion comment="cyrus-sasl-sql is earlier than 0:2.1.19-14" test_ref="oval:org.mitre.oval:tst:35100"/>
            <criterion comment="cyrus-sasl-plain is earlier than 0:2.1.19-14" test_ref="oval:org.mitre.oval:tst:34748"/>
            <criterion comment="cyrus-sasl-md5 is earlier than 0:2.1.19-14" test_ref="oval:org.mitre.oval:tst:34948"/>
            <criterion comment="cyrus-sasl-gssapi is earlier than 0:2.1.19-14" test_ref="oval:org.mitre.oval:tst:35102"/>
            <criterion comment="cyrus-sasl-devel is earlier than 0:2.1.19-14" test_ref="oval:org.mitre.oval:tst:34645"/>
            <criterion comment="cyrus-sasl is earlier than 0:2.1.19-14" test_ref="oval:org.mitre.oval:tst:34338"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9860" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the netsnmp_create_subtree_cache function in agent/snmp_agent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and 5.2 before 5.2.5.1 allows remote attackers to cause a denial of service (crash) via a crafted SNMP GETBULK request, which triggers a heap-based buffer overflow,  related to the number of responses or repeats.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4309" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4309"/>
        <description>Integer overflow in the netsnmp_create_subtree_cache function in agent/snmp_agent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and 5.2 before 5.2.5.1 allows remote attackers to cause a denial of service (crash) via a crafted SNMP GETBULK request, which triggers a heap-based buffer overflow,  related to the number of responses or repeats.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:35.483-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:35.676-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:42.889-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9860 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:23.820-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:50.422-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="net-snmp-utils is earlier than 0:5.0.9-2.30E.25" test_ref="oval:org.mitre.oval:tst:37666"/>
            <criterion comment="net-snmp is earlier than 0:5.0.9-2.30E.25" test_ref="oval:org.mitre.oval:tst:37742"/>
            <criterion comment="net-snmp-libs is earlier than 0:5.0.9-2.30E.25" test_ref="oval:org.mitre.oval:tst:37538"/>
            <criterion comment="net-snmp-perl is earlier than 0:5.0.9-2.30E.25" test_ref="oval:org.mitre.oval:tst:37806"/>
            <criterion comment="net-snmp-devel is earlier than 0:5.0.9-2.30E.25" test_ref="oval:org.mitre.oval:tst:37593"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="net-snmp-utils is earlier than 0:5.1.2-13.el4_7.2" test_ref="oval:org.mitre.oval:tst:37167"/>
            <criterion comment="net-snmp is earlier than 0:5.1.2-13.el4_7.2" test_ref="oval:org.mitre.oval:tst:37819"/>
            <criterion comment="net-snmp-libs is earlier than 0:5.1.2-13.el4_7.2" test_ref="oval:org.mitre.oval:tst:37707"/>
            <criterion comment="net-snmp-perl is earlier than 0:5.1.2-13.el4_7.2" test_ref="oval:org.mitre.oval:tst:37868"/>
            <criterion comment="net-snmp-devel is earlier than 0:5.1.2-13.el4_7.2" test_ref="oval:org.mitre.oval:tst:37115"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="net-snmp-utils is earlier than 1:5.3.1-24.el5_2.2" test_ref="oval:org.mitre.oval:tst:36966"/>
            <criterion comment="net-snmp is earlier than 1:5.3.1-24.el5_2.2" test_ref="oval:org.mitre.oval:tst:37758"/>
            <criterion comment="net-snmp-libs is earlier than 1:5.3.1-24.el5_2.2" test_ref="oval:org.mitre.oval:tst:37686"/>
            <criterion comment="net-snmp-perl is earlier than 1:5.3.1-24.el5_2.2" test_ref="oval:org.mitre.oval:tst:37927"/>
            <criterion comment="net-snmp-devel is earlier than 1:5.3.1-24.el5_2.2" test_ref="oval:org.mitre.oval:tst:37801"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:986" version="1" class="vulnerability">
      <metadata>
        <title>Ethereal AIM Dissector Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0505"/>
        <description>The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service (assert error) via unknown attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-06-10T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-06-30T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-07-12T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criteria operator="OR" comment="Vulnerable Config">
            <criterion comment="ethereal version is less than 0.10.3-0.30E.2" negate="false" test_ref="oval:org.mitre.oval:tst:1359"/>
            <criterion comment="ethereal-gnome version is less than 0.10.3-0.30E.2" negate="false" test_ref="oval:org.mitre.oval:tst:1358"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="Vulnerable Config">
            <criteria operator="OR" comment="/usr/bin/ethereal is executable">
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1529"/>
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1528"/>
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1527"/>
            </criteria>
            <criteria operator="OR" comment="/usr/sbin/ethereal is executable">
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1526"/>
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1525"/>
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1524"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/tethereal is executable">
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1523"/>
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1522"/>
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1521"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9859" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted field in a packet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-2063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2063"/>
        <description>Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted field in a packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:17.627-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:35.122-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:42.322-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9859 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:47.992-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:49.617-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.9-1.3E.17" test_ref="oval:org.mitre.oval:tst:40725"/>
            <criterion comment="samba-swat is earlier than 0:3.0.9-1.3E.17" test_ref="oval:org.mitre.oval:tst:40543"/>
            <criterion comment="samba-client is earlier than 0:3.0.9-1.3E.17" test_ref="oval:org.mitre.oval:tst:40781"/>
            <criterion comment="samba is earlier than 0:3.0.9-1.3E.17" test_ref="oval:org.mitre.oval:tst:40546"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.33-0.19.el4_8.1" test_ref="oval:org.mitre.oval:tst:40212"/>
            <criterion comment="samba-swat is earlier than 0:3.0.33-0.19.el4_8.1" test_ref="oval:org.mitre.oval:tst:40761"/>
            <criterion comment="samba-client is earlier than 0:3.0.33-0.19.el4_8.1" test_ref="oval:org.mitre.oval:tst:40021"/>
            <criterion comment="samba is earlier than 0:3.0.33-0.19.el4_8.1" test_ref="oval:org.mitre.oval:tst:40520"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tdb-tools is earlier than 0:3.3.8-0.52.el5_5" test_ref="oval:org.mitre.oval:tst:40785"/>
            <criterion comment="libtdb-devel is earlier than 0:3.3.8-0.52.el5_5" test_ref="oval:org.mitre.oval:tst:39928"/>
            <criterion comment="samba3x-winbind-devel is earlier than 0:3.3.8-0.52.el5_5" test_ref="oval:org.mitre.oval:tst:40808"/>
            <criterion comment="samba3x-common is earlier than 0:3.3.8-0.52.el5_5" test_ref="oval:org.mitre.oval:tst:40403"/>
            <criterion comment="libsmbclient is earlier than 0:3.0.33-3.29.el5_5" test_ref="oval:org.mitre.oval:tst:40124"/>
            <criterion comment="samba3x-doc is earlier than 0:3.3.8-0.52.el5_5" test_ref="oval:org.mitre.oval:tst:40792"/>
            <criterion comment="samba3x-domainjoin-gui is earlier than 0:3.3.8-0.52.el5_5" test_ref="oval:org.mitre.oval:tst:40636"/>
            <criterion comment="libtalloc-devel is earlier than 0:3.3.8-0.52.el5_5" test_ref="oval:org.mitre.oval:tst:40508"/>
            <criterion comment="libtdb is earlier than 0:3.3.8-0.52.el5_5" test_ref="oval:org.mitre.oval:tst:40589"/>
            <criterion comment="libsmbclient-devel is earlier than 0:3.0.33-3.29.el5_5" test_ref="oval:org.mitre.oval:tst:40500"/>
            <criterion comment="samba3x-client is earlier than 0:3.3.8-0.52.el5_5" test_ref="oval:org.mitre.oval:tst:40646"/>
            <criterion comment="samba3x is earlier than 0:3.3.8-0.52.el5_5" test_ref="oval:org.mitre.oval:tst:40660"/>
            <criterion comment="libtalloc is earlier than 0:3.3.8-0.52.el5_5" test_ref="oval:org.mitre.oval:tst:40439"/>
            <criterion comment="samba3x-swat is earlier than 0:3.3.8-0.52.el5_5" test_ref="oval:org.mitre.oval:tst:40724"/>
            <criterion comment="samba-common is earlier than 0:3.0.33-3.29.el5_5" test_ref="oval:org.mitre.oval:tst:40663"/>
            <criterion comment="samba-swat is earlier than 0:3.0.33-3.29.el5_5" test_ref="oval:org.mitre.oval:tst:40822"/>
            <criterion comment="samba-client is earlier than 0:3.0.33-3.29.el5_5" test_ref="oval:org.mitre.oval:tst:40799"/>
            <criterion comment="samba3x-winbind is earlier than 0:3.3.8-0.52.el5_5" test_ref="oval:org.mitre.oval:tst:40481"/>
            <criterion comment="samba is earlier than 0:3.0.33-3.29.el5_5" test_ref="oval:org.mitre.oval:tst:39867"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9858" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote (") character without a closing quote, which causes bytes after the double-quote to be copied into a buffer indefinitely.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2933" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2933"/>
        <description>Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote (") character without a closing quote, which causes bytes after the double-quote to be copied into a buffer indefinitely.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:13.577-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:34.202-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:41.736-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9858 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:40.490-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:48.928-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-mysql is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32711"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32166"/>
            <criterion comment="imap is earlier than 1:2002d-12" test_ref="oval:org.mitre.oval:tst:31804"/>
            <criterion comment="imap-devel is earlier than 1:2002d-12" test_ref="oval:org.mitre.oval:tst:32091"/>
            <criterion comment="php is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32579"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32613"/>
            <criterion comment="imap-utils is earlier than 1:2002d-12" test_ref="oval:org.mitre.oval:tst:32441"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32425"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32107"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32695"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:31742"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32509"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32606"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32503"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32185"/>
            <criterion comment="libc-client is earlier than 0:2002e-14" test_ref="oval:org.mitre.oval:tst:32375"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32639"/>
            <criterion comment="php is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32546"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32577"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32236"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32578"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32591"/>
            <criterion comment="libc-client-devel is earlier than 0:2002e-14" test_ref="oval:org.mitre.oval:tst:32344"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32707"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32547"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:31727"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9857" version="5" class="vulnerability">
      <metadata>
        <title>The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec-tools before 0.6.3, when running in aggressive mode, allows remote attackers to cause a denial of service (null dereference and crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3732" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3732"/>
        <description>The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec-tools before 0.6.3, when running in aggressive mode, allows remote attackers to cause a denial of service (null dereference and crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:39.780-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:33.922-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:41.492-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9857 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:47.575-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:48.577-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="ipsec-tools is earlier than 0:0.2.5-0.7.rhel3.3" test_ref="oval:org.mitre.oval:tst:32025"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="ipsec-tools is earlier than 0:0.3.3-6.rhel4.1" test_ref="oval:org.mitre.oval:tst:32632"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9856" version="5" class="vulnerability">
      <metadata>
        <title>The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, does not check a certain return value, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via SSL cipher negotiation, as demonstrated by a chroot installation of Dovecot or stunnel without Kerberos configuration files inside the chroot.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0433" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0433"/>
        <description>The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, does not check a certain return value, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via SSL cipher negotiation, as demonstrated by a chroot installation of Dovecot or stunnel without Kerberos configuration files inside the chroot.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:26.254-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:33.724-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:41.269-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9856 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:08.280-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:48.269-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="openssl-perl is earlier than 0:0.9.8e-12.el5_4.6" test_ref="oval:org.mitre.oval:tst:39952"/>
          <criterion comment="openssl-devel is earlier than 0:0.9.8e-12.el5_4.6" test_ref="oval:org.mitre.oval:tst:40361"/>
          <criterion comment="openssl is earlier than 0:0.9.8e-12.el5_4.6" test_ref="oval:org.mitre.oval:tst:40102"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9855" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0091" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0091"/>
        <description>Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:46.228-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:33.496-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:40.993-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9855 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:41:04.411-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:47.897-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39831"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39445"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40225"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40023"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40307"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9854" version="5" class="vulnerability">
      <metadata>
        <title>Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote attackers to perform certain unauthorized actions via a gnome-vfs URI.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0494"/>
        <description>Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote attackers to perform certain unauthorized actions via a gnome-vfs URI.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:02.913-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:33.309-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:40.758-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9854 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:57.291-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:47.620-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="gnome-vfs2-devel is earlier than 0:2.2.5-2E.1" test_ref="oval:org.mitre.oval:tst:30568"/>
          <criterion comment="gnome-vfs2 is earlier than 0:2.2.5-2E.1" test_ref="oval:org.mitre.oval:tst:30787"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9853" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in the (1) SIP, (2) CMIP, (3) CMP, (4) CMS, (5) CRMF, (6) ESS, (7) OCSP, (8) X.509, (9) ISIS, (10) DISTCC, (11) FCELS, (12) Q.931, (13) NCP, (14) TCAP, (15) ISUP, (16) MEGACO, (17) PKIX1Explitit, (18) PKIX_Qualified, (19) Presentation dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1461"/>
        <description>Multiple buffer overflows in the (1) SIP, (2) CMIP, (3) CMP, (4) CMS, (5) CRMF, (6) ESS, (7) OCSP, (8) X.509, (9) ISIS, (10) DISTCC, (11) FCELS, (12) Q.931, (13) NCP, (14) TCAP, (15) ISUP, (16) MEGACO, (17) PKIX1Explitit, (18) PKIX_Qualified, (19) Presentation dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:12.258-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:33.072-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:40.507-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9853 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:24.939-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:47.233-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31458"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31546"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31674"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31865"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9852" version="5" class="vulnerability">
      <metadata>
        <title>Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.4 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in (1) the URL or (2) an e-mail message.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1769" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1769"/>
        <description>Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.4 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in (1) the URL or (2) an e-mail message.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:17.382-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:32.818-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:40.279-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9852 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:54.383-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:46.801-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.3a-11.EL3" test_ref="oval:org.mitre.oval:tst:31585"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.3a-12.EL4" test_ref="oval:org.mitre.oval:tst:31556"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9851" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in a certain quantvals and quantlist calculation in Xiph.org libvorbis 1.2.0 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted OGG file with a large virtual space for its codebook, which triggers a heap overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1423" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1423"/>
        <description>Integer overflow in a certain quantvals and quantlist calculation in Xiph.org libvorbis 1.2.0 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted OGG file with a large virtual space for its codebook, which triggers a heap overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:32.959-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:32.531-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:39.925-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9851 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:43.147-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:46.327-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libvorbis-devel is earlier than 1:1.0-10.el3" test_ref="oval:org.mitre.oval:tst:36659"/>
            <criterion comment="libvorbis is earlier than 1:1.0-10.el3" test_ref="oval:org.mitre.oval:tst:36699"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libvorbis-devel is earlier than 0:1.1.0-3.el4_6.1" test_ref="oval:org.mitre.oval:tst:36519"/>
            <criterion comment="libvorbis is earlier than 0:1.1.0-3.el4_6.1" test_ref="oval:org.mitre.oval:tst:36387"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libvorbis-devel is earlier than 0:1.1.2-3.el5_1.2" test_ref="oval:org.mitre.oval:tst:36439"/>
            <criterion comment="libvorbis is earlier than 0:1.1.2-3.el5_1.2" test_ref="oval:org.mitre.oval:tst:36710"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9850" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in Ethereal 0.8.x up to 0.10.14 allow remote attackers to cause a denial of service (crash from null dereference) via the (1) Sniffer capture or (2) SMB PIPE dissector.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1938" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1938"/>
        <description>Multiple unspecified vulnerabilities in Ethereal 0.8.x up to 0.10.14 allow remote attackers to cause a denial of service (crash from null dereference) via the (1) Sniffer capture or (2) SMB PIPE dissector.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:28.542-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:32.289-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:39.672-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9850 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:02.526-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:45.905-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.99.0-EL3.2" test_ref="oval:org.mitre.oval:tst:32590"/>
            <criterion comment="ethereal is earlier than 0:0.99.0-EL3.2" test_ref="oval:org.mitre.oval:tst:32631"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.99.0-EL4.2" test_ref="oval:org.mitre.oval:tst:32299"/>
            <criterion comment="ethereal is earlier than 0:0.99.0-EL4.2" test_ref="oval:org.mitre.oval:tst:32238"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9849" version="5" class="vulnerability">
      <metadata>
        <title>Certain privileged UI code in Mozilla Firefox and Thunderbird before 1.5.0.4 calls content-defined setters on an object prototype, which allows remote attackers to execute code at a higher privilege than intended.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2776" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2776"/>
        <description>Certain privileged UI code in Mozilla Firefox and Thunderbird before 1.5.0.4 calls content-defined setters on an object prototype, which allows remote attackers to execute code at a higher privilege than intended.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:02.200-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:31.726-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:39.158-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9849 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:45.820-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:45.288-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32575"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32674"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32918"/>
            <criterion comment="seamonkey is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32919"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32864"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32659"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32859"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32511"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32902"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32837"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32873"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32693"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32886"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32810"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32418"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32496"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32929"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32777"/>
            <criterion comment="firefox is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32896"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32722"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32906"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32905"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32925"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32624"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9848" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1010" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1010"/>
        <description>Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:22.001-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:31.544-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:38.914-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9848 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:41.403-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:44.965-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="zip is earlier than 0:2.3-16.1" test_ref="oval:org.mitre.oval:tst:31068"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9847" version="3" class="vulnerability">
      <metadata>
        <title>The XML parsing code in Sun Java Runtime Environment JDK and JRE 6 Update 3 and earlier processes external entity references even when the "external general entities" property is false, which allows remote attackers to conduct XML external entity (XXE) attacks and cause a denial of service or access restricted resources.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0628" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0628"/>
        <description>The XML parsing code in Sun Java Runtime Environment JDK and JRE 6 Update 3 and earlier processes external entity references even when the "external general entities" property is false, which allows remote attackers to conduct XML external entity (XXE) attacks and cause a denial of service or access restricted resources.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:35.622-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:31.316-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:38.674-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
        <criteria operator="OR">
          <criterion comment="java-1.6.0-bea-demo is earlier than 1:1.6.0.03-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36331"/>
          <criterion comment="java-1.6.0-bea-devel is earlier than 1:1.6.0.03-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36423"/>
          <criterion comment="java-1.6.0-bea is earlier than 1:1.6.0.03-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36195"/>
          <criterion comment="java-1.6.0-bea-src is earlier than 1:1.6.0.03-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36590"/>
          <criterion comment="java-1.6.0-bea-missioncontrol is earlier than 1:1.6.0.03-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36683"/>
          <criterion comment="java-1.6.0-bea-jdbc is earlier than 1:1.6.0.03-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36658"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9846" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unknown impact via a crafted argument to the isdn_ioctl function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6063"/>
        <description>Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unknown impact via a crafted argument to the isdn_ioctl function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:29.687-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:30.659-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:38.052-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9846 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:28.362-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:44.181-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37931"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37846"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37817"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37663"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37799"/>
            <criterion comment="kernel is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37028"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37885"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37981"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37117"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:36090"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35525"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35832"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35126"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35901"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:36007"/>
            <criterion comment="kernel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35982"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:36072"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:36041"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35364"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35662"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36192"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36176"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36335"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36430"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:35944"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36215"/>
            <criterion comment="kernel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36409"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:35484"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:35974"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:35791"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36150"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36251"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9845" version="5" class="vulnerability">
      <metadata>
        <title>Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a bin file with format string specifiers in the filename.  NOTE: while this issue is triggered on the command line by the gedit user, it has been reported that web browsers and email clients could be configured to provide a file name as an argument to gedit, so there is a valid attack that crosses security boundaries.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1686" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1686"/>
        <description>Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a bin file with format string specifiers in the filename.  NOTE: while this issue is triggered on the command line by the gedit user, it has been reported that web browsers and email clients could be configured to provide a file name as an argument to gedit, so there is a valid attack that crosses security boundaries.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:01.759-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:30.427-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:37.774-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9845 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:56.618-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:43.772-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gedit is earlier than 1:2.2.2-4.rhel3" test_ref="oval:org.mitre.oval:tst:31476"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gedit is earlier than 1:2.8.1-4" test_ref="oval:org.mitre.oval:tst:31796"/>
            <criterion comment="gedit-devel is earlier than 1:2.8.1-4" test_ref="oval:org.mitre.oval:tst:31886"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9844" version="5" class="vulnerability">
      <metadata>
        <title>KDE Display Manager (KDM) in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via a symlink attack related to the session type for login.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2449" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2449"/>
        <description>KDE Display Manager (KDM) in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via a symlink attack related to the session type for login.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:45.232-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:30.235-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:37.569-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9844 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:56.081-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:43.477-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kdebase is earlier than 6:3.3.1-5.12" test_ref="oval:org.mitre.oval:tst:32706"/>
          <criterion comment="kdebase-devel is earlier than 6:3.3.1-5.12" test_ref="oval:org.mitre.oval:tst:32662"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9843" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 1.5.0.7 and SeaMonkey before 1.0.5 allows remote attackers to bypass the security model and inject content into the sub-frame of another site via targetWindow.frames[n].document.open(), which facilitates spoofing and other attacks.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4568" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4568"/>
        <description>Mozilla Firefox before 1.5.0.7 and SeaMonkey before 1.0.5 allows remote attackers to bypass the security model and inject content into the sub-frame of another site via targetWindow.frames[n].document.open(), which facilitates spoofing and other attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:02.251-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:29.685-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:37.007-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9843 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:26.610-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:42.819-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32759"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32989"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32809"/>
            <criterion comment="seamonkey is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32779"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32954"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32668"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:33010"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32811"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32981"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:33061"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.4.el4" test_ref="oval:org.mitre.oval:tst:32072"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:33120"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32842"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32677"/>
            <criterion comment="seamonkey is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32933"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32243"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.4.el4" test_ref="oval:org.mitre.oval:tst:33062"/>
            <criterion comment="firefox is earlier than 0:1.5.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:32951"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32978"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:33072"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:33079"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32121"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:33077"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9842" version="5" class="vulnerability">
      <metadata>
        <title>gtkimhtml.c in Pidgin before 2.6.6 allows remote attackers to cause a denial of service (CPU consumption and application hang) by sending many smileys in a (1) IM or (2) chat.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0423" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0423"/>
        <description>gtkimhtml.c in Pidgin before 2.6.6 allows remote attackers to cause a denial of service (CPU consumption and application hang) by sending many smileys in a (1) IM or (2) chat.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:45.283-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:29.269-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:36.580-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9842 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:28:43.258-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:42.255-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.6.6-1.el4" test_ref="oval:org.mitre.oval:tst:39911"/>
            <criterion comment="libpurple is earlier than 0:2.6.6-1.el4" test_ref="oval:org.mitre.oval:tst:40093"/>
            <criterion comment="libpurple-perl is earlier than 0:2.6.6-1.el4" test_ref="oval:org.mitre.oval:tst:40218"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.6.6-1.el4" test_ref="oval:org.mitre.oval:tst:40181"/>
            <criterion comment="pidgin-devel is earlier than 0:2.6.6-1.el4" test_ref="oval:org.mitre.oval:tst:40052"/>
            <criterion comment="libpurple-devel is earlier than 0:2.6.6-1.el4" test_ref="oval:org.mitre.oval:tst:39983"/>
            <criterion comment="finch is earlier than 0:2.6.6-1.el4" test_ref="oval:org.mitre.oval:tst:39933"/>
            <criterion comment="pidgin-perl is earlier than 0:2.6.6-1.el4" test_ref="oval:org.mitre.oval:tst:40004"/>
            <criterion comment="pidgin is earlier than 0:2.6.6-1.el4" test_ref="oval:org.mitre.oval:tst:40214"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.6.6-1.el5" test_ref="oval:org.mitre.oval:tst:39974"/>
            <criterion comment="libpurple is earlier than 0:2.6.6-1.el5" test_ref="oval:org.mitre.oval:tst:40080"/>
            <criterion comment="libpurple-perl is earlier than 0:2.6.6-1.el5" test_ref="oval:org.mitre.oval:tst:40176"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.6.6-1.el5" test_ref="oval:org.mitre.oval:tst:40248"/>
            <criterion comment="pidgin-devel is earlier than 0:2.6.6-1.el5" test_ref="oval:org.mitre.oval:tst:40202"/>
            <criterion comment="libpurple-devel is earlier than 0:2.6.6-1.el5" test_ref="oval:org.mitre.oval:tst:40141"/>
            <criterion comment="finch is earlier than 0:2.6.6-1.el5" test_ref="oval:org.mitre.oval:tst:39917"/>
            <criterion comment="pidgin-perl is earlier than 0:2.6.6-1.el5" test_ref="oval:org.mitre.oval:tst:40306"/>
            <criterion comment="pidgin is earlier than 0:2.6.6-1.el5" test_ref="oval:org.mitre.oval:tst:39993"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9841" version="5" class="vulnerability">
      <metadata>
        <title>Integer signedness error in the DNP3 dissector in Wireshark (formerly Ethereal) 0.10.12 to 0.99.6 allows remote attackers to cause a denial of service (long loop) via a malformed DNP3 packet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6113" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6113"/>
        <description>Integer signedness error in the DNP3 dissector in Wireshark (formerly Ethereal) 0.10.12 to 0.99.6 allows remote attackers to cause a denial of service (long loop) via a malformed DNP3 packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:20.400-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:28.758-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:36.202-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9841 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:33.180-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:41.661-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-EL3.1" test_ref="oval:org.mitre.oval:tst:36111"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-EL3.1" test_ref="oval:org.mitre.oval:tst:36043"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-3.el3" test_ref="oval:org.mitre.oval:tst:35411"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-3.el3" test_ref="oval:org.mitre.oval:tst:36140"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:36051"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:35980"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35669"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35941"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:35709"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:36120"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35712"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35801"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9840" version="5" class="vulnerability">
      <metadata>
        <title>The copy_to_user function in the PAL emulation functionality for Xen 3.1.2 and earlier, when running on ia64 systems, allows HVM guest users to access arbitrary physical memory by triggering certain mapping operations.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6416" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6416"/>
        <description>The copy_to_user function in the PAL emulation functionality for Xen 3.1.2 and earlier, when running on ia64 systems, allows HVM guest users to access arbitrary physical memory by triggering certain mapping operations.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:06.592-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:28.433-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:35.804-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9840 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:19.226-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:41.198-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36030"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:35766"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36138"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36062"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:35611"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:35990"/>
          <criterion comment="kernel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:35969"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36085"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36026"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36084"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36097"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36035"/>
          <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:35648"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:984" version="4" class="vulnerability">
      <metadata>
        <title>Racoon Denial of Service via Large Length Field</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0403" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0403"/>
        <description>Racoon before 20040408a allows remote attackers to cause a denial of service (memory consumption) via an ISAKMP packet with a large length field.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-12T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:52.316-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:12.021-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.756-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:54:36.823-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:48.066-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="ipsec-tools version is less than 0.2.5-0.4" negate="false" test_ref="oval:org.mitre.oval:tst:1430"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="racoon is listening on the network" negate="false" test_ref="oval:org.mitre.oval:tst:1429"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9839" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5393" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5393"/>
        <description>Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:25.655-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:27.692-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:35.083-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9839 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:50.300-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:40.015-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:1.0.7-67.11" test_ref="oval:org.mitre.oval:tst:35542"/>
            <criterion comment="tetex-dvips is earlier than 0:1.0.7-67.11" test_ref="oval:org.mitre.oval:tst:35314"/>
            <criterion comment="tetex-fonts is earlier than 0:1.0.7-67.11" test_ref="oval:org.mitre.oval:tst:35233"/>
            <criterion comment="cups-libs is earlier than 0:1.1.17-13.3.46" test_ref="oval:org.mitre.oval:tst:35218"/>
            <criterion comment="tetex is earlier than 0:1.0.7-67.11" test_ref="oval:org.mitre.oval:tst:35248"/>
            <criterion comment="cups-devel is earlier than 0:1.1.17-13.3.46" test_ref="oval:org.mitre.oval:tst:35491"/>
            <criterion comment="tetex-afm is earlier than 0:1.0.7-67.11" test_ref="oval:org.mitre.oval:tst:34644"/>
            <criterion comment="xpdf is earlier than 0:2.02-11.el3" test_ref="oval:org.mitre.oval:tst:35634"/>
            <criterion comment="tetex-xdvi is earlier than 0:1.0.7-67.11" test_ref="oval:org.mitre.oval:tst:35275"/>
            <criterion comment="cups is earlier than 0:1.1.17-13.3.46" test_ref="oval:org.mitre.oval:tst:35533"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.10" test_ref="oval:org.mitre.oval:tst:34998"/>
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-6.el4_5" test_ref="oval:org.mitre.oval:tst:35446"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.10" test_ref="oval:org.mitre.oval:tst:35156"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-6.el4_5" test_ref="oval:org.mitre.oval:tst:35404"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.10" test_ref="oval:org.mitre.oval:tst:35455"/>
            <criterion comment="cups-libs is earlier than 0:1.1.22-0.rc1.9.20.2.el4_5.2" test_ref="oval:org.mitre.oval:tst:35415"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.0.1.EL4.10" test_ref="oval:org.mitre.oval:tst:35178"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-7.7.1" test_ref="oval:org.mitre.oval:tst:35574"/>
            <criterion comment="cups-devel is earlier than 0:1.1.22-0.rc1.9.20.2.el4_5.2" test_ref="oval:org.mitre.oval:tst:34735"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.10" test_ref="oval:org.mitre.oval:tst:35585"/>
            <criterion comment="xpdf is earlier than 1:3.00-14.el4" test_ref="oval:org.mitre.oval:tst:35315"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.10" test_ref="oval:org.mitre.oval:tst:35591"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.10" test_ref="oval:org.mitre.oval:tst:35283"/>
            <criterion comment="cups is earlier than 0:1.1.22-0.rc1.9.20.2.el4_5.2" test_ref="oval:org.mitre.oval:tst:35537"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.5.4-5.el5_1" test_ref="oval:org.mitre.oval:tst:35714"/>
            <criterion comment="cups-lpd is earlier than 0:1.2.4-11.14.el5_1.3" test_ref="oval:org.mitre.oval:tst:35274"/>
            <criterion comment="tetex-dvips is earlier than 0:3.0-33.2.el5_1.2" test_ref="oval:org.mitre.oval:tst:35509"/>
            <criterion comment="kdegraphics is earlier than 7:3.5.4-5.el5_1" test_ref="oval:org.mitre.oval:tst:35722"/>
            <criterion comment="poppler is earlier than 0:0.5.4-4.3.el5_1" test_ref="oval:org.mitre.oval:tst:35549"/>
            <criterion comment="tetex-fonts is earlier than 0:3.0-33.2.el5_1.2" test_ref="oval:org.mitre.oval:tst:35527"/>
            <criterion comment="cups-libs is earlier than 0:1.2.4-11.14.el5_1.3" test_ref="oval:org.mitre.oval:tst:35427"/>
            <criterion comment="tetex is earlier than 0:3.0-33.2.el5_1.2" test_ref="oval:org.mitre.oval:tst:35459"/>
            <criterion comment="tetex-doc is earlier than 0:3.0-33.2.el5_1.2" test_ref="oval:org.mitre.oval:tst:34727"/>
            <criterion comment="poppler-devel is earlier than 0:0.5.4-4.3.el5_1" test_ref="oval:org.mitre.oval:tst:35496"/>
            <criterion comment="tetex-latex is earlier than 0:3.0-33.2.el5_1.2" test_ref="oval:org.mitre.oval:tst:35498"/>
            <criterion comment="poppler-utils is earlier than 0:0.5.4-4.3.el5_1" test_ref="oval:org.mitre.oval:tst:35147"/>
            <criterion comment="cups-devel is earlier than 0:1.2.4-11.14.el5_1.3" test_ref="oval:org.mitre.oval:tst:35508"/>
            <criterion comment="tetex-afm is earlier than 0:3.0-33.2.el5_1.2" test_ref="oval:org.mitre.oval:tst:35407"/>
            <criterion comment="tetex-xdvi is earlier than 0:3.0-33.2.el5_1.2" test_ref="oval:org.mitre.oval:tst:34618"/>
            <criterion comment="cups is earlier than 0:1.2.4-11.14.el5_1.3" test_ref="oval:org.mitre.oval:tst:35530"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9838" version="5" class="vulnerability">
      <metadata>
        <title>The ipt_recent kernel module (ipt_recent.c) in Linux kernel 2.6.12 and earlier does not properly perform certain time tests when the jiffies value is greater than LONG_MAX, which can cause ipt_recent netfilter rules to block too early, a different vulnerability than CVE-2005-2872.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2873" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2873"/>
        <description>The ipt_recent kernel module (ipt_recent.c) in Linux kernel 2.6.12 and earlier does not properly perform certain time tests when the jiffies value is greater than LONG_MAX, which can cause ipt_recent netfilter rules to block too early, a different vulnerability than CVE-2005-2872.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:39.562-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:27.383-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:34.705-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9838 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:14.728-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:39.576-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-xenU is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30189"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30542"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30504"/>
          <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30169"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:29589"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30432"/>
          <criterion comment="kernel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:29669"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30424"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30299"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30268"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30561"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9837" version="5" class="vulnerability">
      <metadata>
        <title>Multiple stack-based buffer overflows in the putstring function in find.c in Cscope before 15.6 allow user-assisted remote attackers to execute arbitrary code via a long (1) function name or (2) symbol in a source-code file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1577" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1577"/>
        <description>Multiple stack-based buffer overflows in the putstring function in find.c in Cscope before 15.6 allow user-assisted remote attackers to execute arbitrary code via a long (1) function name or (2) symbol in a source-code file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:55.117-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:27.162-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:34.470-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9837 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:48.413-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:39.227-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="cscope is earlier than 0:15.5-16.RHEL3" test_ref="oval:org.mitre.oval:tst:38743"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="cscope is earlier than 0:15.5-10.RHEL4.3" test_ref="oval:org.mitre.oval:tst:38662"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9836" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in Ethereal 0.10.12 and earlier might allow remote attackers to execute arbitrary code via unknown vectors in the (1) SLIMP3 and (2) AgentX dissector.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3243" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3243"/>
        <description>Multiple buffer overflows in Ethereal 0.10.12 and earlier might allow remote attackers to execute arbitrary code via unknown vectors in the (1) SLIMP3 and (2) AgentX dissector.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:11.872-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:26.876-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:34.146-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9836 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:32.790-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:38.789-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.13-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32189"/>
            <criterion comment="ethereal is earlier than 0:0.10.13-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32138"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.13-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32341"/>
            <criterion comment="ethereal is earlier than 0:0.10.13-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32202"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9835" version="5" class="vulnerability">
      <metadata>
        <title>The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via vectors related to (1) layout/generic/nsBlockFrame.cpp and (2) the _evaluate function in modules/plugin/base/src/nsNPAPIPlugin.cpp.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0167" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0167"/>
        <description>The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via vectors related to (1) layout/generic/nsBlockFrame.cpp and (2) the _evaluate function in modules/plugin/base/src/nsNPAPIPlugin.cpp.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:00.189-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:26.620-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:33.827-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9835 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:28:37.709-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:38.364-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.18-1.el4" test_ref="oval:org.mitre.oval:tst:39897"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:39323"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:40174"/>
            <criterion comment="firefox is earlier than 0:3.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:40301"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:39533"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9834" version="5" class="vulnerability">
      <metadata>
        <title>Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0175" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0175"/>
        <description>Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:58.954-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:26.140-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:33.343-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9834 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:56.555-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:37.671-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:40246"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:39934"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:40184"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:40133"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:39775"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:40360"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:40059"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:39946"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:40114"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:39403"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox is earlier than 0:3.0.19-1.el4" test_ref="oval:org.mitre.oval:tst:40284"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-54.el4_8" test_ref="oval:org.mitre.oval:tst:40081"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-54.el4_8" test_ref="oval:org.mitre.oval:tst:40250"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-54.el4_8" test_ref="oval:org.mitre.oval:tst:40304"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-54.el4_8" test_ref="oval:org.mitre.oval:tst:40345"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-54.el4_8" test_ref="oval:org.mitre.oval:tst:40183"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-54.el4_8" test_ref="oval:org.mitre.oval:tst:39945"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.19-1.el5_5" test_ref="oval:org.mitre.oval:tst:40265"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.19-1.el5_5" test_ref="oval:org.mitre.oval:tst:39621"/>
            <criterion comment="firefox is earlier than 0:3.0.19-1.el5_5" test_ref="oval:org.mitre.oval:tst:40064"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.19-1.el5_5" test_ref="oval:org.mitre.oval:tst:40164"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9833" version="5" class="vulnerability">
      <metadata>
        <title>Argument injection vulnerability in login (login-utils/login.c) in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1926"/>
        <description>Argument injection vulnerability in login (login-utils/login.c) in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:38.580-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:25.908-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:33.147-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9833 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:06.706-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:37.269-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="util-linux is earlier than 0:2.12a-24.el4" test_ref="oval:org.mitre.oval:tst:38784"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9832" version="5" class="vulnerability">
      <metadata>
        <title>The Transparent Inter-Process Communication (TIPC) functionality in Linux kernel 2.6.16-rc1 through 2.6.33, and possibly other versions, allows local users to cause a denial of service (kernel OOPS) by sending datagrams through AF_TIPC before entering network mode, which triggers a NULL pointer dereference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1187" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1187"/>
        <description>The Transparent Inter-Process Communication (TIPC) functionality in Linux kernel 2.6.16-rc1 through 2.6.33, and possibly other versions, allows local users to cause a denial of service (kernel OOPS) by sending datagrams through AF_TIPC before entering network mode, which triggers a NULL pointer dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:57.277-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:25.585-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:32.416-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9832 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:58.742-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:36.807-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40501"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40283"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40807"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40842"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40793"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40732"/>
          <criterion comment="kernel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40830"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40349"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:39978"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:39896"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40791"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40580"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9831" version="5" class="vulnerability">
      <metadata>
        <title>nfnetlink_log in netfilter in the Linux kernel before 2.6.20.3 allows attackers to cause a denial of service (crash) via unspecified vectors involving the (1) nfulnl_recv_config function, (2) using "multiple packets per netlink message", and (3) bridged packets, which trigger a NULL pointer dereference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1496" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1496"/>
        <description>nfnetlink_log in netfilter in the Linux kernel before 2.6.20.3 allows attackers to cause a denial of service (crash) via unspecified vectors involving the (1) nfulnl_recv_config function, (2) using "multiple packets per netlink message", and (3) bridged packets, which trigger a NULL pointer dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:20.253-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:25.278-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:32.091-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9831 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:57.156-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:36.404-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34146"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34219"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34205"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:33862"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34224"/>
          <criterion comment="kernel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:33837"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34231"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34073"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:33861"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:33594"/>
          <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34059"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9830" version="5" class="vulnerability">
      <metadata>
        <title>Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being downloaded.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-2014" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2014"/>
        <description>Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being downloaded.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:25.497-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:25.002-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:31.815-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9830 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:42.262-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:35.984-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="wget is earlier than 0:1.10.1-1.30E.1" test_ref="oval:org.mitre.oval:tst:31680"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="wget is earlier than 0:1.10.1-2.4E.1" test_ref="oval:org.mitre.oval:tst:31717"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:983" version="2" class="vulnerability">
      <metadata>
        <title>Windows XP IIS Out of Process Privilege Elevation Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0869" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0869"/>
        <description>Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote attackers to gain privileges by executing an out of process application that acquires LocalSystem privileges, aka "Out of Process Privilege Elevation."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-19T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Changed tst:1356 to use obj:496 was introduced to properly look for w3svc.dll in System32/inetsrv." date="2007-07-18T12:59:00.316-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-07-18T13:02:43.455-04:00">INTERIM</status_change>
            <status_change date="2007-08-02T14:47:16.863-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="IIS major version equals 5" negate="false" test_ref="oval:org.mitre.oval:tst:3081"/>
        <criterion comment="IIS 5.1 Minor Version" negate="false" test_ref="oval:org.mitre.oval:tst:1357"/>
        <criterion comment="File %windir%\System32\w3svc.dll is less than 5.1.2600.1125" negate="false" test_ref="oval:org.mitre.oval:tst:1356"/>
        <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
        <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9829" version="5" class="vulnerability">
      <metadata>
        <title>The key serial number collision avoidance code in the key_alloc_serial function in Linux kernel 2.6.9 up to 2.6.20 allows local users to cause a denial of service (crash) via vectors that trigger a null dereference, as originally reported as "spinlock CPU recursion."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0006" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0006"/>
        <description>The key serial number collision avoidance code in the key_alloc_serial function in Linux kernel 2.6.9 up to 2.6.20 allows local users to cause a denial of service (crash) via vectors that trigger a null dereference, as originally reported as "spinlock CPU recursion."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:42.131-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:24.559-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:31.372-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9829 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:48.237-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:35.392-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.10.EL" test_ref="oval:org.mitre.oval:tst:33775"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.10.EL" test_ref="oval:org.mitre.oval:tst:33751"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.10.EL" test_ref="oval:org.mitre.oval:tst:33264"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.10.EL" test_ref="oval:org.mitre.oval:tst:33777"/>
            <criterion comment="kernel is earlier than 0:2.6.9-42.0.10.EL" test_ref="oval:org.mitre.oval:tst:33668"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.10.EL" test_ref="oval:org.mitre.oval:tst:33639"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.10.EL" test_ref="oval:org.mitre.oval:tst:33564"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.10.EL" test_ref="oval:org.mitre.oval:tst:33538"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.10.EL" test_ref="oval:org.mitre.oval:tst:33494"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33717"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33839"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33412"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33730"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33902"/>
            <criterion comment="kernel is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33740"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33736"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33914"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33489"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33621"/>
            <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33879"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9828" version="3" class="vulnerability">
      <metadata>
        <title>Multiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player allow remote attackers to inject arbitrary web script or HTML via a crafted SWF file, related to "pre-generated SWF files" and Adobe Dreamweaver CS3 or Adobe Acrobat Connect.  NOTE: the asfunction: vector is already covered by CVE-2007-6244.1.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6637" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6637"/>
        <description>Multiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player allow remote attackers to inject arbitrary web script or HTML via a crafted SWF file, related to "pre-generated SWF files" and Adobe Dreamweaver CS3 or Adobe Acrobat Connect.  NOTE: the asfunction: vector is already covered by CVE-2007-6244.1.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:13.337-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:24.312-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:31.119-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criterion comment="flash-plugin is earlier than 0:9.0.124.0-1.el3.with.oss" test_ref="oval:org.mitre.oval:tst:36002"/>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criterion comment="flash-plugin is earlier than 0:9.0.124.0-1.el4" test_ref="oval:org.mitre.oval:tst:36397"/>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criterion comment="flash-plugin is earlier than 0:9.0.124.0-1.el5" test_ref="oval:org.mitre.oval:tst:36022"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9827" version="5" class="vulnerability">
      <metadata>
        <title>Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service (crash) via a format string instead of a date as the first parameter to the date_format function, which is later used in a formatted print call to display the error message.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3469" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3469"/>
        <description>Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service (crash) via a format string instead of a date as the first parameter to the date_format function, which is later used in a formatted print call to display the error message.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:39.932-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:24.090-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:30.859-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9827 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:30.561-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:35.064-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mysql is earlier than 0:4.1.22-2.el4" test_ref="oval:org.mitre.oval:tst:37045"/>
          <criterion comment="mysql-devel is earlier than 0:4.1.22-2.el4" test_ref="oval:org.mitre.oval:tst:37456"/>
          <criterion comment="mysql-bench is earlier than 0:4.1.22-2.el4" test_ref="oval:org.mitre.oval:tst:36967"/>
          <criterion comment="mysql-server is earlier than 0:4.1.22-2.el4" test_ref="oval:org.mitre.oval:tst:37224"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9826" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Mozilla to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0594" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0594"/>
        <description>Mozilla allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Mozilla to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:40.916-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:23.741-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:30.560-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9826 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:08:43.850-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:34.679-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mozilla-js-debugger is earlier than 37:1.4.2-3.0.2" test_ref="oval:org.mitre.oval:tst:30703"/>
          <criterion comment="mozilla is earlier than 37:1.4.2-3.0.2" test_ref="oval:org.mitre.oval:tst:30682"/>
          <criterion comment="mozilla-chat is earlier than 37:1.4.2-3.0.2" test_ref="oval:org.mitre.oval:tst:29813"/>
          <criterion comment="mozilla-mail is earlier than 37:1.4.2-3.0.2" test_ref="oval:org.mitre.oval:tst:29961"/>
          <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.2-3.0.2" test_ref="oval:org.mitre.oval:tst:30646"/>
          <criterion comment="mozilla-nss is earlier than 37:1.4.2-3.0.2" test_ref="oval:org.mitre.oval:tst:30390"/>
          <criterion comment="mozilla-nss-devel is earlier than 37:1.4.2-3.0.2" test_ref="oval:org.mitre.oval:tst:30528"/>
          <criterion comment="mozilla-nspr is earlier than 37:1.4.2-3.0.2" test_ref="oval:org.mitre.oval:tst:30482"/>
          <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.2-3.0.2" test_ref="oval:org.mitre.oval:tst:30659"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9825" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unknown vulnerabilities in the (1) AIM, (2) LDAP, (3) FibreChannel, (4) GSM_MAP, (5) SRVLOC, and (6) NTLMSSP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1457" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1457"/>
        <description>Multiple unknown vulnerabilities in the (1) AIM, (2) LDAP, (3) FibreChannel, (4) GSM_MAP, (5) SRVLOC, and (6) NTLMSSP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:01.294-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:23.494-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:30.308-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9825 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:41.586-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:34.309-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31458"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31546"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31674"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31865"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9824" version="5" class="vulnerability">
      <metadata>
        <title>cache_util.c in the mod_cache module in Apache HTTP Server (httpd), when caching is enabled and a threaded Multi-Processing Module (MPM) is used, allows remote attackers to cause a denial of service (child processing handler crash) via a request with the (1) s-maxage, (2) max-age, (3) min-fresh, or (4) max-stale Cache-Control headers without a value.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1863" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1863"/>
        <description>cache_util.c in the mod_cache module in Apache HTTP Server (httpd), when caching is enabled and a threaded Multi-Processing Module (MPM) is used, allows remote attackers to cause a denial of service (child processing handler crash) via a request with the (1) s-maxage, (2) max-age, (3) min-fresh, or (4) max-stale Cache-Control headers without a value.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:19.575-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:23.126-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:29.870-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9824 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:10:06.406-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:33.675-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-devel is earlier than 0:2.0.46-67.ent" test_ref="oval:org.mitre.oval:tst:34223"/>
            <criterion comment="mod_ssl is earlier than 1:2.0.46-67.ent" test_ref="oval:org.mitre.oval:tst:34500"/>
            <criterion comment="httpd is earlier than 0:2.0.46-67.ent" test_ref="oval:org.mitre.oval:tst:34481"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-suexec is earlier than 0:2.0.52-32.2.ent" test_ref="oval:org.mitre.oval:tst:34166"/>
            <criterion comment="httpd-manual is earlier than 0:2.0.52-32.2.ent" test_ref="oval:org.mitre.oval:tst:34468"/>
            <criterion comment="httpd-devel is earlier than 0:2.0.52-32.2.ent" test_ref="oval:org.mitre.oval:tst:34603"/>
            <criterion comment="mod_ssl is earlier than 1:2.0.52-32.2.ent" test_ref="oval:org.mitre.oval:tst:34461"/>
            <criterion comment="httpd is earlier than 0:2.0.52-32.2.ent" test_ref="oval:org.mitre.oval:tst:34632"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-manual is earlier than 0:2.2.3-7.el5" test_ref="oval:org.mitre.oval:tst:34730"/>
            <criterion comment="httpd-devel is earlier than 0:2.2.3-7.el5" test_ref="oval:org.mitre.oval:tst:34677"/>
            <criterion comment="mod_ssl is earlier than 1:2.2.3-7.el5" test_ref="oval:org.mitre.oval:tst:34399"/>
            <criterion comment="httpd is earlier than 0:2.2.3-7.el5" test_ref="oval:org.mitre.oval:tst:34605"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9823" version="5" class="vulnerability">
      <metadata>
        <title>Off-by-one error in the OID printing routine in Ethereal 0.10.x up to 0.10.14 has unknown impact and remote attack vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1932" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1932"/>
        <description>Off-by-one error in the OID printing routine in Ethereal 0.10.x up to 0.10.14 has unknown impact and remote attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:21.198-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:22.833-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:29.611-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9823 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:52.980-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:33.294-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.99.0-EL3.2" test_ref="oval:org.mitre.oval:tst:32590"/>
            <criterion comment="ethereal is earlier than 0:0.99.0-EL3.2" test_ref="oval:org.mitre.oval:tst:32631"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.99.0-EL4.2" test_ref="oval:org.mitre.oval:tst:32299"/>
            <criterion comment="ethereal is earlier than 0:0.99.0-EL4.2" test_ref="oval:org.mitre.oval:tst:32238"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9822" version="5" class="vulnerability">
      <metadata>
        <title>sctp in Linux kernel before 2.6.25.18 allows remote attackers to cause a denial of service (OOPS) via an INIT-ACK that states the peer does not support AUTH, which causes the sctp_process_init function to clean up active transports and triggers the OOPS when the T1-Init timer expires.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4576" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4576"/>
        <description>sctp in Linux kernel before 2.6.25.18 allows remote attackers to cause a denial of service (OOPS) via an INIT-ACK that states the peer does not support AUTH, which causes the sctp_process_init function to clean up active transports and triggers the OOPS when the T1-Init timer expires.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:38.095-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:22.515-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:29.281-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9822 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:29.941-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:32.831-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:37458"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:38105"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:38024"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:38100"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:37636"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:38034"/>
          <criterion comment="kernel is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:37781"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:38076"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:37945"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:38013"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:37261"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:37532"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9821" version="5" class="vulnerability">
      <metadata>
        <title>The dissect_btacl function in packet-bthci_acl.c in the Bluetooth ACL dissector in Wireshark 0.99.2 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via a packet with an invalid length, related to an erroneous tvb_memcpy call.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4683" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4683"/>
        <description>The dissect_btacl function in packet-bthci_acl.c in the Bluetooth ACL dissector in Wireshark 0.99.2 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via a packet with an invalid length, related to an erroneous tvb_memcpy call.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:21.139-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:22.218-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:28.933-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9821 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:46.040-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:32.359-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-EL3.3" test_ref="oval:org.mitre.oval:tst:38023"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-EL3.3" test_ref="oval:org.mitre.oval:tst:38321"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-2.el4_7" test_ref="oval:org.mitre.oval:tst:38000"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-2.el4_7" test_ref="oval:org.mitre.oval:tst:38041"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-2.el5_3" test_ref="oval:org.mitre.oval:tst:38236"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-2.el5_3" test_ref="oval:org.mitre.oval:tst:38085"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9820" version="5" class="vulnerability">
      <metadata>
        <title>The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsDOMClassInfo.cpp, (2) JS_HashTableRawLookup, and (3) MirrorWrappedNativeParent and js_LockGCThingRT.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2466" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2466"/>
        <description>The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsDOMClassInfo.cpp, (2) JS_HashTableRawLookup, and (3) MirrorWrappedNativeParent and js_LockGCThingRT.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:30.780-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:21.658-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:28.429-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9820 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:59.508-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:31.641-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38881"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38851"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38690"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38366"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38475"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38924"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38923"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38918"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38811"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38644"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-45.el4_8" test_ref="oval:org.mitre.oval:tst:38772"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-25.el4" test_ref="oval:org.mitre.oval:tst:40299"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-45.el4_8" test_ref="oval:org.mitre.oval:tst:37948"/>
            <criterion comment="firefox is earlier than 0:3.0.12-1.el4" test_ref="oval:org.mitre.oval:tst:38809"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-45.el4_8" test_ref="oval:org.mitre.oval:tst:38947"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-45.el4_8" test_ref="oval:org.mitre.oval:tst:38194"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-45.el4_8" test_ref="oval:org.mitre.oval:tst:38876"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-45.el4_8" test_ref="oval:org.mitre.oval:tst:38504"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38249"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38575"/>
            <criterion comment="firefox is earlier than 0:3.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38853"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.24-2.el5_4" test_ref="oval:org.mitre.oval:tst:40249"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38563"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:982" version="1" class="vulnerability">
      <metadata>
        <title>Ethereal Denial of Service via SIP Messages</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0504" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0504"/>
        <description>Ethereal 0.10.3 allows remote attackers to cause a denial of service (crash) via certain SIP messages between Hotsip servers and clients.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-06-10T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-06-30T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-07-12T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criteria operator="OR" comment="Vulnerable Config">
            <criterion comment="ethereal version is less than 0.10.3-0.30E.2" negate="false" test_ref="oval:org.mitre.oval:tst:1359"/>
            <criterion comment="ethereal-gnome version is less than 0.10.3-0.30E.2" negate="false" test_ref="oval:org.mitre.oval:tst:1358"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="Vulnerable Config">
            <criteria operator="OR" comment="/usr/bin/ethereal is executable">
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1529"/>
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1528"/>
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1527"/>
            </criteria>
            <criteria operator="OR" comment="/usr/sbin/ethereal is executable">
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1526"/>
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1525"/>
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1524"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/tethereal is executable">
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1523"/>
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1522"/>
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1521"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9819" version="5" class="vulnerability">
      <metadata>
        <title>Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1689" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1689"/>
        <description>Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:44.542-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:21.337-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:28.103-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9819 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:53.520-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:31.186-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.2.7-47" test_ref="oval:org.mitre.oval:tst:31712"/>
            <criterion comment="krb5 is earlier than 0:1.2.7-47" test_ref="oval:org.mitre.oval:tst:31065"/>
            <criterion comment="krb5-libs is earlier than 0:1.2.7-47" test_ref="oval:org.mitre.oval:tst:31933"/>
            <criterion comment="krb5-server is earlier than 0:1.2.7-47" test_ref="oval:org.mitre.oval:tst:31927"/>
            <criterion comment="krb5-devel is earlier than 0:1.2.7-47" test_ref="oval:org.mitre.oval:tst:31772"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.3.4-17" test_ref="oval:org.mitre.oval:tst:31800"/>
            <criterion comment="krb5 is earlier than 0:1.3.4-17" test_ref="oval:org.mitre.oval:tst:31846"/>
            <criterion comment="krb5-libs is earlier than 0:1.3.4-17" test_ref="oval:org.mitre.oval:tst:31172"/>
            <criterion comment="krb5-server is earlier than 0:1.3.4-17" test_ref="oval:org.mitre.oval:tst:31706"/>
            <criterion comment="krb5-devel is earlier than 0:1.3.4-17" test_ref="oval:org.mitre.oval:tst:31781"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9818" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header. NOTE: it was later reported that Firefox 3.6 a1 pre and Mozilla 1.7.x and earlier are also affected.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1312" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1312"/>
        <description>Mozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header. NOTE: it was later reported that Firefox 3.6 a1 pre and Mozilla 1.7.x and earlier are also affected.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:59.412-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:20.808-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:27.568-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9818 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:02.938-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:30.469-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38597"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38375"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38403"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38521"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38542"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:37726"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38677"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38096"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38577"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38540"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox is earlier than 0:3.0.9-1.el4" test_ref="oval:org.mitre.oval:tst:38379"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38716"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38634"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38190"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38596"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38685"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38697"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38308"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38633"/>
            <criterion comment="firefox is earlier than 0:3.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38370"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38462"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9817" version="5" class="vulnerability">
      <metadata>
        <title>The CSS border-rendering code in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain Cascading Style Sheets (CSS) that causes an out-of-bounds array write and buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1739" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1739"/>
        <description>The CSS border-rendering code in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain Cascading Style Sheets (CSS) that causes an out-of-bounds array write and buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:40.844-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:20.317-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:27.070-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9817 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:26.577-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:29.679-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32663"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32326"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31987"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32451"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32697"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32558"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32427"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32671"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32666"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32561"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32593"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32679"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32133"/>
            <criterion comment="thunderbird is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32204"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32701"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32428"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32557"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32229"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32349"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32644"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32440"/>
            <criterion comment="firefox is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32219"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32598"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32717"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9816" version="5" class="vulnerability">
      <metadata>
        <title>The tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a TFTP read (aka RRQ) request with a malformed blksize option.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2958" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2958"/>
        <description>The tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a TFTP read (aka RRQ) request with a malformed blksize option.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:55.106-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:20.129-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:26.828-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9816 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:46.674-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:29.394-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="dnsmasq is earlier than 0:2.45-1.1.el5_3" test_ref="oval:org.mitre.oval:tst:38956"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9815" version="5" class="vulnerability">
      <metadata>
        <title>js/src/xpconnect/src/xpcwrappedjsclass.cpp in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to execute arbitrary web script with the privileges of a chrome object, as demonstrated by the browser sidebar and the FeedWriter.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1841" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1841"/>
        <description>js/src/xpconnect/src/xpcwrappedjsclass.cpp in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to execute arbitrary web script with the privileges of a chrome object, as demonstrated by the browser sidebar and the FeedWriter.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:17.588-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:19.589-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:26.339-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9815 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:22.619-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:28.697-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38336"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38452"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38736"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38742"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38069"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38264"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38724"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38791"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38432"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:37902"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox is earlier than 0:3.0.11-4.el4" test_ref="oval:org.mitre.oval:tst:38689"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38280"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38793"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38531"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38655"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38828"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38213"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38771"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38371"/>
            <criterion comment="firefox is earlier than 0:3.0.11-2.el5_3" test_ref="oval:org.mitre.oval:tst:38682"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38718"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9814" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allow remote attackers to run arbitrary JavaScript with chrome privileges via unknown vectors in which "page content can pollute XPCNativeWrappers."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5512"/>
        <description>Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allow remote attackers to run arbitrary JavaScript with chrome privileges via unknown vectors in which "page content can pollute XPCNativeWrappers."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:59.318-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:18.500-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:25.657-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9814 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:12.276-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:27.854-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38137"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37886"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37999"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37907"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37709"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38092"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37745"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38039"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38062"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38073"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nspr is earlier than 0:4.7.3-1.el4" test_ref="oval:org.mitre.oval:tst:37574"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:38071"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-1.el4" test_ref="oval:org.mitre.oval:tst:37857"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-18.el4" test_ref="oval:org.mitre.oval:tst:37200"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.3-1.el4" test_ref="oval:org.mitre.oval:tst:37918"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37812"/>
            <criterion comment="firefox is earlier than 0:3.0.5-1.el4" test_ref="oval:org.mitre.oval:tst:38080"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-1.el4" test_ref="oval:org.mitre.oval:tst:37139"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37869"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37789"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37395"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:38118"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:38072"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38037"/>
            <criterion comment="nspr is earlier than 0:4.7.3-2.el5" test_ref="oval:org.mitre.oval:tst:37420"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37854"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.19-1.el5_2" test_ref="oval:org.mitre.oval:tst:38053"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.3-2.el5" test_ref="oval:org.mitre.oval:tst:37419"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38083"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:37631"/>
            <criterion comment="firefox is earlier than 0:3.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38114"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37737"/>
            <criterion comment="nss-tools is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37403"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9813" version="3" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods.  NOTE: this issue might be subsumed by CVE-2008-0655.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5659" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5659"/>
        <description>Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods.  NOTE: this issue might be subsumed by CVE-2008-0655.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:46.267-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:18.213-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:25.365-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criteria operator="OR">
            <criterion comment="acroread-plugin is earlier than 0:8.1.2-1.el3.6" test_ref="oval:org.mitre.oval:tst:36324"/>
            <criterion comment="acroread is earlier than 0:8.1.2-1.el3.6" test_ref="oval:org.mitre.oval:tst:36153"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="acroread-plugin is earlier than 0:8.1.2-1.el4.2" test_ref="oval:org.mitre.oval:tst:36156"/>
            <criterion comment="acroread is earlier than 0:8.1.2-1.el4.2" test_ref="oval:org.mitre.oval:tst:36293"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="acroread-plugin is earlier than 0:8.1.2-1.el5.3" test_ref="oval:org.mitre.oval:tst:35792"/>
            <criterion comment="acroread is earlier than 0:8.1.2-1.el5.3" test_ref="oval:org.mitre.oval:tst:35912"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9812" version="5" class="vulnerability">
      <metadata>
        <title>libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3281" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3281"/>
        <description>libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:20.837-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:17.819-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:24.968-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9812 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:01.796-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:27.333-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libxml2-devel is earlier than 0:2.5.10-11" test_ref="oval:org.mitre.oval:tst:37109"/>
            <criterion comment="libxml2-python is earlier than 0:2.5.10-11" test_ref="oval:org.mitre.oval:tst:37627"/>
            <criterion comment="libxml2 is earlier than 0:2.5.10-11" test_ref="oval:org.mitre.oval:tst:37621"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libxml2-devel is earlier than 0:2.6.16-12.3" test_ref="oval:org.mitre.oval:tst:36654"/>
            <criterion comment="libxml2-python is earlier than 0:2.6.16-12.3" test_ref="oval:org.mitre.oval:tst:37135"/>
            <criterion comment="libxml2 is earlier than 0:2.6.16-12.3" test_ref="oval:org.mitre.oval:tst:37610"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libxml2-devel is earlier than 0:2.6.26-2.1.2.4" test_ref="oval:org.mitre.oval:tst:37604"/>
            <criterion comment="libxml2-python is earlier than 0:2.6.26-2.1.2.4" test_ref="oval:org.mitre.oval:tst:37085"/>
            <criterion comment="libxml2 is earlier than 0:2.6.26-2.1.2.4" test_ref="oval:org.mitre.oval:tst:37551"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9811" version="5" class="vulnerability">
      <metadata>
        <title>Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during the recursive mime8to7 function for performing 8-bit to 7-bit conversion, which prevents Sendmail from delivering queued messages and might lead to disk consumption by core dump files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0089" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0089"/>
        <description>The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register an object without a _dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:14.550-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:17.516-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:24.650-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9811 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:52.661-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:26.447-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.2.3-6.1" test_ref="oval:org.mitre.oval:tst:31354"/>
            <criterion comment="tkinter is earlier than 0:2.2.3-6.1" test_ref="oval:org.mitre.oval:tst:31195"/>
            <criterion comment="python-tools is earlier than 0:2.2.3-6.1" test_ref="oval:org.mitre.oval:tst:31366"/>
            <criterion comment="python is earlier than 0:2.2.3-6.1" test_ref="oval:org.mitre.oval:tst:31351"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.3.4-14.1" test_ref="oval:org.mitre.oval:tst:30896"/>
            <criterion comment="tkinter is earlier than 0:2.3.4-14.1" test_ref="oval:org.mitre.oval:tst:31368"/>
            <criterion comment="python-tools is earlier than 0:2.3.4-14.1" test_ref="oval:org.mitre.oval:tst:30806"/>
            <criterion comment="python is earlier than 0:2.3.4-14.1" test_ref="oval:org.mitre.oval:tst:31194"/>
            <criterion comment="python-docs is earlier than 0:2.3.4-14.1" test_ref="oval:org.mitre.oval:tst:30393"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9810" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote servers to execute arbitrary code via a long NTLM username.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3185" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3185"/>
        <description>Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote servers to execute arbitrary code via a long NTLM username.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:16.557-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:17.233-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:24.374-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9810 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:38.777-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:26.009-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wget is earlier than 0:1.10.2-0.30E" test_ref="oval:org.mitre.oval:tst:32350"/>
            <criterion comment="curl-devel is earlier than 0:7.10.6-7.rhel3" test_ref="oval:org.mitre.oval:tst:32411"/>
            <criterion comment="curl is earlier than 0:7.10.6-7.rhel3" test_ref="oval:org.mitre.oval:tst:32351"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wget is earlier than 0:1.10.2-0.40E" test_ref="oval:org.mitre.oval:tst:32340"/>
            <criterion comment="curl-devel is earlier than 0:7.12.1-6.rhel4" test_ref="oval:org.mitre.oval:tst:32364"/>
            <criterion comment="curl is earlier than 0:7.12.1-6.rhel4" test_ref="oval:org.mitre.oval:tst:32423"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9809" version="5" class="vulnerability">
      <metadata>
        <title>Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service (file system panic) via a crafted UDP packet with a V2 lookup procedure that specifies a bad file handle (inode number), which triggers an error and causes an exported directory to be remounted read-only.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3468" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3468"/>
        <description>Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service (file system panic) via a crafted UDP packet with a V2 lookup procedure that specifies a bad file handle (inode number), which triggers an error and causes an exported directory to be remounted read-only.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:01.927-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:16.896-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:23.977-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9809 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:28:34.172-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:25.612-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32576"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32814"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32958"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32801"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32865"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32880"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32747"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32200"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32838"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9808" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in MSG_UnEscapeSearchUrl in nsNNTPProtocol.cpp for Mozilla 1.7.3 and earlier allows remote attackers to cause a denial of service (application crash) via an NNTP URL (news:) with a trailing '\' (backslash) character, which prevents a string from being NULL terminated.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1316" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1316"/>
        <description>Heap-based buffer overflow in MSG_UnEscapeSearchUrl in nsNNTPProtocol.cpp for Mozilla 1.7.3 and earlier allows remote attackers to cause a denial of service (application crash) via an NNTP URL (news:) with a trailing '\' (backslash) character, which prevents a string from being NULL terminated.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:51.836-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:16.602-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:23.672-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9808 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:10:02.927-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:25.227-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mozilla-js-debugger is earlier than 37:1.4.3-3.0.7" test_ref="oval:org.mitre.oval:tst:31052"/>
          <criterion comment="mozilla is earlier than 37:1.4.3-3.0.7" test_ref="oval:org.mitre.oval:tst:31079"/>
          <criterion comment="mozilla-chat is earlier than 37:1.4.3-3.0.7" test_ref="oval:org.mitre.oval:tst:31147"/>
          <criterion comment="mozilla-mail is earlier than 37:1.4.3-3.0.7" test_ref="oval:org.mitre.oval:tst:30749"/>
          <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.3-3.0.7" test_ref="oval:org.mitre.oval:tst:31309"/>
          <criterion comment="mozilla-devel is earlier than 37:1.4.3-3.0.7" test_ref="oval:org.mitre.oval:tst:31267"/>
          <criterion comment="mozilla-nss is earlier than 37:1.4.3-3.0.7" test_ref="oval:org.mitre.oval:tst:30958"/>
          <criterion comment="mozilla-nss-devel is earlier than 37:1.4.3-3.0.7" test_ref="oval:org.mitre.oval:tst:30815"/>
          <criterion comment="mozilla-nspr is earlier than 37:1.4.3-3.0.7" test_ref="oval:org.mitre.oval:tst:31304"/>
          <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.3-3.0.7" test_ref="oval:org.mitre.oval:tst:31266"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9807" version="5" class="vulnerability">
      <metadata>
        <title>The Safe (aka Safe.pm) module before 2.25 for Perl allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving implicitly called methods and implicitly blessed objects, as demonstrated by the (a) DESTROY and (b) AUTOLOAD methods, related to "automagic methods."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1168" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1168"/>
        <description>The Safe (aka Safe.pm) module before 2.25 for Perl allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving implicitly called methods and implicitly blessed objects, as demonstrated by the (a) DESTROY and (b) AUTOLOAD methods, related to "automagic methods."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:48.714-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:16.272-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:23.333-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9807 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:31.882-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:24.689-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="perl-suidperl is earlier than 2:5.8.0-101.EL3" test_ref="oval:org.mitre.oval:tst:40554"/>
            <criterion comment="perl is earlier than 2:5.8.0-101.EL3" test_ref="oval:org.mitre.oval:tst:40615"/>
            <criterion comment="perl-CPAN is earlier than 2:5.8.0-101.EL3" test_ref="oval:org.mitre.oval:tst:39713"/>
            <criterion comment="perl-CGI is earlier than 2:5.8.0-101.EL3" test_ref="oval:org.mitre.oval:tst:40065"/>
            <criterion comment="perl-DB_File is earlier than 2:5.8.0-101.EL3" test_ref="oval:org.mitre.oval:tst:40367"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="perl-suidperl is earlier than 3:5.8.5-53.el4" test_ref="oval:org.mitre.oval:tst:40654"/>
            <criterion comment="perl is earlier than 3:5.8.5-53.el4" test_ref="oval:org.mitre.oval:tst:40417"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="perl-suidperl is earlier than 4:5.8.8-32.el5_5.1" test_ref="oval:org.mitre.oval:tst:40657"/>
            <criterion comment="perl is earlier than 4:5.8.8-32.el5_5.1" test_ref="oval:org.mitre.oval:tst:39926"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9806" version="5" class="vulnerability">
      <metadata>
        <title>The js_watch_set function in js/src/jsdbgapi.cpp in the JavaScript engine in Mozilla Firefox before 3.0.12 allows remote attackers to cause a denial of service (assertion failure and application exit) or possibly execute arbitrary code via a crafted .js file, related to a "memory safety bug." NOTE: this was originally reported as affecting versions before 3.0.13.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2664" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2664"/>
        <description>The js_watch_set function in js/src/jsdbgapi.cpp in the JavaScript engine in Mozilla Firefox before 3.0.12 allows remote attackers to cause a denial of service (assertion failure and application exit) or possibly execute arbitrary code via a crafted .js file, related to a "memory safety bug." NOTE: this was originally reported as affecting versions before 3.0.13.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:16.762-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:15.967-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:23.051-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9806 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:17.359-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:24.273-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.12-1.el4" test_ref="oval:org.mitre.oval:tst:38809"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38249"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38575"/>
            <criterion comment="firefox is earlier than 0:3.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38853"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38563"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9805" version="5" class="vulnerability">
      <metadata>
        <title>cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before executing a program specified in the RSH environment variable, which allows local users to gain privileges.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0806" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0806"/>
        <description>cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before executing a program specified in the RSH environment variable, which allows local users to gain privileges.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:11.466-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:15.744-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:22.779-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9805 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:08:40.186-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:23.934-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mkisofs is earlier than 8:2.01.0.a32-0.EL3.2" test_ref="oval:org.mitre.oval:tst:30433"/>
          <criterion comment="cdrecord is earlier than 8:2.01.0.a32-0.EL3.2" test_ref="oval:org.mitre.oval:tst:30490"/>
          <criterion comment="cdrtools is earlier than 8:2.01.0.a32-0.EL3.2" test_ref="oval:org.mitre.oval:tst:30552"/>
          <criterion comment="cdrecord-devel is earlier than 8:2.01.0.a32-0.EL3.2" test_ref="oval:org.mitre.oval:tst:30505"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9804" version="5" class="vulnerability">
      <metadata>
        <title>The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (backend crash) via an out-of-bounds backref number.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4769" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4769"/>
        <description>The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (backend crash) via an out-of-bounds backref number.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:32.588-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:15.294-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:22.316-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9804 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:28:44.458-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:23.332-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35948"/>
            <criterion comment="postgresql-docs is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35993"/>
            <criterion comment="postgresql-pl is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36045"/>
            <criterion comment="postgresql-tcl is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35949"/>
            <criterion comment="postgresql-libs is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36098"/>
            <criterion comment="postgresql-contrib is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36066"/>
            <criterion comment="postgresql-python is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35942"/>
            <criterion comment="postgresql-test is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36105"/>
            <criterion comment="postgresql-jdbc is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35835"/>
            <criterion comment="postgresql-server is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35597"/>
            <criterion comment="postgresql-devel is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36094"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35261"/>
            <criterion comment="postgresql-docs is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35907"/>
            <criterion comment="postgresql-pl is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35319"/>
            <criterion comment="postgresql-tcl is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35123"/>
            <criterion comment="postgresql-libs is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35894"/>
            <criterion comment="postgresql-contrib is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35781"/>
            <criterion comment="postgresql-python is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:36109"/>
            <criterion comment="postgresql-test is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35308"/>
            <criterion comment="postgresql-server is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35856"/>
            <criterion comment="postgresql-devel is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:36044"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9803" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 associate local documents with external domain names located after the file:// substring in a URL, which allows user-assisted remote attackers to read arbitrary cookies via a crafted HTML document, as demonstrated by a URL with file://example.com/C:/ at the beginning.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1835" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1835"/>
        <description>Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 associate local documents with external domain names located after the file:// substring in a URL, which allows user-assisted remote attackers to read arbitrary cookies via a crafted HTML document, as demonstrated by a URL with file://example.com/C:/ at the beginning.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:18.299-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:14.731-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:21.767-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9803 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:00.481-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:22.636-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38336"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38452"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38736"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38742"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38069"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38264"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38724"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38791"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38432"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:37902"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox is earlier than 0:3.0.11-4.el4" test_ref="oval:org.mitre.oval:tst:38689"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38280"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38793"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38531"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38655"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38828"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38213"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38771"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38371"/>
            <criterion comment="firefox is earlier than 0:3.0.11-2.el5_3" test_ref="oval:org.mitre.oval:tst:38682"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38718"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9802" version="5" class="vulnerability">
      <metadata>
        <title>Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0935" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0935"/>
        <description>Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:55.937-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:14.524-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:21.535-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9802 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:10:16.267-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:22.348-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="net-snmp-utils is earlier than 0:5.0.9-2.30E.1" test_ref="oval:org.mitre.oval:tst:30617"/>
          <criterion comment="net-snmp is earlier than 0:5.0.9-2.30E.1" test_ref="oval:org.mitre.oval:tst:30534"/>
          <criterion comment="net-snmp-devel is earlier than 0:5.0.9-2.30E.1" test_ref="oval:org.mitre.oval:tst:30077"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9801" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in JBIG2Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via unknown attack vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0557"/>
        <description>Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:03.371-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:14.332-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:21.331-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9801 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:10:11.571-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:22.072-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="sox is earlier than 0:12.17.4-4.3" test_ref="oval:org.mitre.oval:tst:30502"/>
          <criterion comment="sox-devel is earlier than 0:12.17.4-4.3" test_ref="oval:org.mitre.oval:tst:30810"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9800" version="5" class="vulnerability">
      <metadata>
        <title>Integer signedness error in the xrealloc function (rdesktop.c) in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknown parameters that trigger a heap-based overflow.  NOTE: the role of the channel_process function was not specified by the original researcher.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1803" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1803"/>
        <description>Integer signedness error in the xrealloc function (rdesktop.c) in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknown parameters that trigger a heap-based overflow.  NOTE: the role of the channel_process function was not specified by the original researcher.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:19.983-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:14.156-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:21.139-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9800 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:52.699-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:21.742-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="rdesktop is earlier than 0:1.4.1-6" test_ref="oval:org.mitre.oval:tst:37100"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:980" version="3" class="vulnerability">
      <metadata>
        <title>NTLM Authentication BO in Squid Web Proxy Cache</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0541" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0541"/>
        <description>Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handlers enabled, allows remote attackers to execute arbitrary code via a long password ("pass" variable).</description>
        <oval_repository>
          <dates>
            <submitted date="2004-06-10T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-06-30T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-07-12T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected the local_port entity for a linux-def:inetlisteningservers_object.  Local_port was given a datatype of 'int'." date="2010-09-03T10:43:00.355-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-03T10:47:03.463-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:47.787-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="squid version is less than 2.5.STABLE3-6.3E" negate="false" test_ref="oval:org.mitre.oval:tst:1361"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="squid is listening on the network" negate="false" test_ref="oval:org.mitre.oval:tst:1360"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:98" version="3" class="vulnerability">
      <metadata>
        <title>Gopher Client Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0371" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0371"/>
        <description>Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attackers to execute arbitrary code via a gopher:// URL that redirects the user to a real or simulated gopher server that sends a long response.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T05:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="Changed IE registry test to wrt-18">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:59.278-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:28.963-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="File %windir%\system32\mshtml.dll version is less than 6.0.2719.2200" negate="false" test_ref="oval:org.mitre.oval:tst:2945"/>
          <criterion comment="the patch q323759 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3118"/>
          <criterion comment="the patch q328970 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3117"/>
          <criterion comment="the patch q324929 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3116"/>
          <criterion comment="the patch q810847 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3115"/>
          <criterion comment="the patch q813489 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3114"/>
          <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
          <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
          <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
          <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="Gopher Enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2944"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9799" version="5" class="vulnerability">
      <metadata>
        <title>The Firebird/Interbase dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (infinite loop or crash) via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6116" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6116"/>
        <description>The Firebird/Interbase dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (infinite loop or crash) via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:19.181-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:13.793-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:20.781-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9799 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:16.167-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:21.302-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:36051"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:35980"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35669"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35941"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:35709"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:36120"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35712"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35801"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9798" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in ALLOCATE_LOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server (xserver) 7.1-1.1.0, and other versions before 20070403, allows remote authenticated users to execute arbitrary code via a large expression, which results in memory corruption.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1003" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1003"/>
        <description>Integer overflow in ALLOCATE_LOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server (xserver) 7.1-1.1.0, and other versions before 20070403, allows remote authenticated users to execute arbitrary code via a large expression, which results in memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:38.799-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:12.831-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:19.840-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9798 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:04.189-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:20.005-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33447"/>
            <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33884"/>
            <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33550"/>
            <criterion comment="XFree86-libs is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33984"/>
            <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33936"/>
            <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33976"/>
            <criterion comment="XFree86-twm is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33799"/>
            <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33867"/>
            <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33958"/>
            <criterion comment="XFree86-doc is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33791"/>
            <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33929"/>
            <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33764"/>
            <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33070"/>
            <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33716"/>
            <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33788"/>
            <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33928"/>
            <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33930"/>
            <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33951"/>
            <criterion comment="XFree86-xdm is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33950"/>
            <criterion comment="XFree86-sdk is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33932"/>
            <criterion comment="XFree86 is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33656"/>
            <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33963"/>
            <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33466"/>
            <criterion comment="XFree86-xfs is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33846"/>
            <criterion comment="XFree86-tools is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33660"/>
            <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33687"/>
            <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33689"/>
            <criterion comment="XFree86-xauth is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33499"/>
            <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33719"/>
            <criterion comment="XFree86-devel is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33696"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33811"/>
            <criterion comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33258"/>
            <criterion comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33567"/>
            <criterion comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33738"/>
            <criterion comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33938"/>
            <criterion comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33663"/>
            <criterion comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33066"/>
            <criterion comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33875"/>
            <criterion comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33789"/>
            <criterion comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33829"/>
            <criterion comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33434"/>
            <criterion comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33704"/>
            <criterion comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33790"/>
            <criterion comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33886"/>
            <criterion comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33982"/>
            <criterion comment="xorg-x11 is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33715"/>
            <criterion comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33856"/>
            <criterion comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33815"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-server-sdk is earlier than 0:1.1.1-48.13.0.1.el5" test_ref="oval:org.mitre.oval:tst:33470"/>
            <criterion comment="xorg-x11-server-Xnest is earlier than 0:1.1.1-48.13.0.1.el5" test_ref="oval:org.mitre.oval:tst:33864"/>
            <criterion comment="xorg-x11-server-Xvfb is earlier than 0:1.1.1-48.13.0.1.el5" test_ref="oval:org.mitre.oval:tst:33546"/>
            <criterion comment="xorg-x11-server-Xdmx is earlier than 0:1.1.1-48.13.0.1.el5" test_ref="oval:org.mitre.oval:tst:33718"/>
            <criterion comment="xorg-x11-server-Xephyr is earlier than 0:1.1.1-48.13.0.1.el5" test_ref="oval:org.mitre.oval:tst:33954"/>
            <criterion comment="xorg-x11-server is earlier than 0:1.1.1-48.13.0.1.el5" test_ref="oval:org.mitre.oval:tst:33629"/>
            <criterion comment="xorg-x11-server-Xorg is earlier than 0:1.1.1-48.13.0.1.el5" test_ref="oval:org.mitre.oval:tst:33876"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9797" version="5" class="vulnerability">
      <metadata>
        <title>zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0758" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0758"/>
        <description>zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:03.149-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:12.526-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:19.525-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9797 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:26.391-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:19.557-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="bzip2-devel is earlier than 0:1.0.2-11.EL3.4" test_ref="oval:org.mitre.oval:tst:31970"/>
            <criterion comment="bzip2 is earlier than 0:1.0.2-11.EL3.4" test_ref="oval:org.mitre.oval:tst:31944"/>
            <criterion comment="gzip is earlier than 0:1.3.3-12.rhel3" test_ref="oval:org.mitre.oval:tst:30880"/>
            <criterion comment="bzip2-libs is earlier than 0:1.0.2-11.EL3.4" test_ref="oval:org.mitre.oval:tst:31594"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="bzip2-devel is earlier than 0:1.0.2-13.EL4.3" test_ref="oval:org.mitre.oval:tst:31440"/>
            <criterion comment="bzip2 is earlier than 0:1.0.2-13.EL4.3" test_ref="oval:org.mitre.oval:tst:31845"/>
            <criterion comment="gzip is earlier than 0:1.3.3-15.rhel4" test_ref="oval:org.mitre.oval:tst:31566"/>
            <criterion comment="bzip2-libs is earlier than 0:1.0.2-13.EL4.3" test_ref="oval:org.mitre.oval:tst:30992"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9796" version="5" class="vulnerability">
      <metadata>
        <title>Cross-domain vulnerability in js/src/jsobj.cpp in Mozilla Firefox 3.x before 3.0.6 allows remote attackers to bypass the Same Origin Policy, and access the properties of an arbitrary window and conduct cross-site scripting (XSS) attacks, via vectors involving a chrome XBL method and the window.eval function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0354" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0354"/>
        <description>Cross-domain vulnerability in js/src/jsobj.cpp in Mozilla Firefox 3.x before 3.0.6 allows remote attackers to bypass the Same Origin Policy, and access the properties of an arbitrary window and conduct cross-site scripting (XSS) attacks, via vectors involving a chrome XBL method and the window.eval function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:26.576-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:12.189-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:19.172-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9796 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:51.321-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:19.066-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-3.el4" test_ref="oval:org.mitre.oval:tst:37923"/>
            <criterion comment="firefox is earlier than 0:3.0.6-1.el4" test_ref="oval:org.mitre.oval:tst:37823"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-3.el4" test_ref="oval:org.mitre.oval:tst:38343"/>
            <criterion comment="nss-tools is earlier than 0:3.12.2.0-3.el4" test_ref="oval:org.mitre.oval:tst:38172"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.2.0-4.el5" test_ref="oval:org.mitre.oval:tst:37933"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.6-1.el5" test_ref="oval:org.mitre.oval:tst:37808"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-4.el5" test_ref="oval:org.mitre.oval:tst:37350"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.6-1.el5" test_ref="oval:org.mitre.oval:tst:37835"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.6-1.el5" test_ref="oval:org.mitre.oval:tst:37556"/>
            <criterion comment="firefox is earlier than 0:3.0.6-1.el5" test_ref="oval:org.mitre.oval:tst:38272"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-4.el5" test_ref="oval:org.mitre.oval:tst:38040"/>
            <criterion comment="nss-tools is earlier than 0:3.12.2.0-4.el5" test_ref="oval:org.mitre.oval:tst:37867"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9795" version="5" class="vulnerability">
      <metadata>
        <title>Direct Rendering Manager (DRM) driver in Linux kernel 2.6 does not properly check the DMA lock, which could allow remote attackers or local users to cause a denial of service (X Server crash) and possibly modify the video output.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1056" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1056"/>
        <description>Direct Rendering Manager (DRM) driver in Linux kernel 2.6 does not properly check the DMA lock, which could allow remote attackers or local users to cause a denial of service (X Server crash) and possibly modify the video output.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:14.919-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:11.764-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:18.717-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9795 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:01.552-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:18.496-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31411"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31953"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31879"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31990"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31485"/>
            <criterion comment="kernel is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32093"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31968"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32148"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31741"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30633"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:31009"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30369"/>
            <criterion comment="kernel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:31205"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30421"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30594"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30616"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9794" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 sets the Referer header to the window or frame in which script is running, instead of the address of the content that initiated the script, which allows remote attackers to spoof HTTP Referer headers and bypass Referer-based CSRF protection schemes by setting window.location and using a modal alert dialog that causes the wrong Referer to be sent.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5960" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5960"/>
        <description>Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 sets the Referer header to the window or frame in which script is running, instead of the address of the content that initiated the script, which allows remote attackers to spoof HTTP Referer headers and bypass Referer-based CSRF protection schemes by setting window.location and using a modal alert dialog that causes the wrong Referer to be sent.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:26.912-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:11.231-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:18.167-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9794 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:19.554-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:17.760-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35246"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35338"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35812"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35754"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35763"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35809"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35651"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35146"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35423"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35775"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:35664"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:35628"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-7.el4" test_ref="oval:org.mitre.oval:tst:35520"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:35267"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:35702"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:35858"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.8.el4" test_ref="oval:org.mitre.oval:tst:34811"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:35499"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:35523"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:35602"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:35697"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:34917"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-7.el5" test_ref="oval:org.mitre.oval:tst:35421"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-7.el5" test_ref="oval:org.mitre.oval:tst:35528"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-7.el5" test_ref="oval:org.mitre.oval:tst:35742"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9793" version="5" class="vulnerability">
      <metadata>
        <title>The dl module in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does not check "taintness" of inputs, which allows context-dependent attackers to bypass safe levels and execute dangerous functions by accessing a library using DL.dlopen.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3657" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3657"/>
        <description>The dl module in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does not check "taintness" of inputs, which allows context-dependent attackers to bypass safe levels and execute dangerous functions by accessing a library using DL.dlopen.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:08.720-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:10.772-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:17.698-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9793 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:16:58.703-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:17.210-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37462"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37630"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:36810"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:36902"/>
            <criterion comment="ruby is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37678"/>
            <criterion comment="irb is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37674"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37720"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-ri is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37735"/>
            <criterion comment="ruby-mode is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37344"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37697"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37273"/>
            <criterion comment="ruby is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37563"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37438"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37757"/>
            <criterion comment="ruby-irb is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37463"/>
            <criterion comment="ruby-rdoc is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37172"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9792" version="5" class="vulnerability">
      <metadata>
        <title>The session_start function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert arbitrary attributes into the session cookie via special characters in a cookie that is obtained from (1) PATH_INFO, (2) the session_id function, and (3) the session_start function, which are not encoded or filtered when the new session cookie is generated, a related issue to CVE-2006-0207.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3799" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3799"/>
        <description>The session_start function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert arbitrary attributes into the session cookie via special characters in a cookie that is obtained from (1) PATH_INFO, (2) the session_id function, and (3) the session_start function, which are not encoded or filtered when the new session cookie is generated, a related issue to CVE-2006-0207.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:08.940-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:10.000-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:16.944-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9792 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:29:42.907-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:16.284-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35216"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35012"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:34787"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35164"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:34818"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35171"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:34820"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35008"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:34796"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35363"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35010"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35249"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:34683"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:34365"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:34976"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35087"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35298"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35289"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35309"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35263"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35044"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35279"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34964"/>
            <criterion comment="php-common is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34896"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35084"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35078"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34802"/>
            <criterion comment="php is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35270"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35361"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34769"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35108"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35037"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34943"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34689"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35221"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35077"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34934"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35170"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34376"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34764"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9791" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to spoof an SSL indicator for an http URL or a file URL by setting document.location to an https URL corresponding to a site that responds with a No Content (aka 204) status code and an empty body.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3984" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3984"/>
        <description>Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to spoof an SSL indicator for an http URL or a file URL by setting document.location to an https URL corresponding to a site that responds with a No Content (aka 204) status code and an empty body.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:18.312-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:09.523-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:16.447-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9791 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:09.990-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:15.561-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:39610"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:39451"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:39678"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:39628"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:39624"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:39524"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:39588"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:39651"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:38845"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:39752"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox is earlier than 0:3.0.16-4.el4" test_ref="oval:org.mitre.oval:tst:39002"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-51.el4_8" test_ref="oval:org.mitre.oval:tst:39832"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-51.el4_8" test_ref="oval:org.mitre.oval:tst:39735"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-51.el4_8" test_ref="oval:org.mitre.oval:tst:39283"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-51.el4_8" test_ref="oval:org.mitre.oval:tst:39646"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-51.el4_8" test_ref="oval:org.mitre.oval:tst:39176"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-51.el4_8" test_ref="oval:org.mitre.oval:tst:39656"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.16-2.el5_4" test_ref="oval:org.mitre.oval:tst:39838"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.16-2.el5_4" test_ref="oval:org.mitre.oval:tst:39032"/>
            <criterion comment="firefox is earlier than 0:3.0.16-1.el5_4" test_ref="oval:org.mitre.oval:tst:39721"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.16-2.el5_4" test_ref="oval:org.mitre.oval:tst:39558"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9790" version="5" class="vulnerability">
      <metadata>
        <title>OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3245" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3245"/>
        <description>OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:04.249-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:09.245-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:16.153-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9790 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:29:45.093-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:15.097-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="openssl096b is earlier than 0:0.9.6b-16.50" test_ref="oval:org.mitre.oval:tst:40235"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="openssl096b is earlier than 0:0.9.6b-22.46.el4_8.1" test_ref="oval:org.mitre.oval:tst:40149"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.8e-12.el5_4.6" test_ref="oval:org.mitre.oval:tst:39952"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.8e-12.el5_4.6" test_ref="oval:org.mitre.oval:tst:40361"/>
            <criterion comment="openssl is earlier than 0:0.9.8e-12.el5_4.6" test_ref="oval:org.mitre.oval:tst:40102"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:979" version="1" class="vulnerability">
      <metadata>
        <title>Utempter Directory Traversal Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0233" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0233"/>
        <description>Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-06-10T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-06-30T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-07-12T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="utempter version is less than 0.5.5-1.3EL.0" negate="false" test_ref="oval:org.mitre.oval:tst:1366"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="/usr/sbin/utempter is executable">
            <criterion comment="/usr/sbin/utempter is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1365"/>
            <criteria operator="OR" comment="/usr/sbin/utempter is executable">
              <criterion comment="/usr/sbin/utempter is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1364"/>
              <criterion comment="/usr/sbin/utempter is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1363"/>
              <criterion comment="/usr/sbin/utempter is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1362"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9789" version="5" class="vulnerability">
      <metadata>
        <title>The XPCVariant::VariantDataToJS function in the XPCOM implementation in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 does not enforce intended restrictions on interaction between chrome privileged code and objects obtained from remote web sites, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via unspecified method calls, related to "doubly-wrapped objects."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3374" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3374"/>
        <description>The XPCVariant::VariantDataToJS function in the XPCOM implementation in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 does not enforce intended restrictions on interaction between chrome privileged code and objects obtained from remote web sites, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via unspecified method calls, related to "doubly-wrapped objects."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:59.938-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:08.914-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:15.744-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9789 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:42.447-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:14.588-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nspr is earlier than 0:4.7.6-1.el4_8" test_ref="oval:org.mitre.oval:tst:39525"/>
            <criterion comment="firefox is earlier than 0:3.0.15-3.el4" test_ref="oval:org.mitre.oval:tst:39710"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.6-1.el4_8" test_ref="oval:org.mitre.oval:tst:38755"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39602"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39541"/>
            <criterion comment="nspr is earlier than 0:4.7.6-1.el5_4" test_ref="oval:org.mitre.oval:tst:39168"/>
            <criterion comment="firefox is earlier than 0:3.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39294"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.6-1.el5_4" test_ref="oval:org.mitre.oval:tst:39579"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39636"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9788" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the t2p_write_pdf_string function in tiff2pdf in libtiff 3.8.2 and earlier allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a TIFF file with a DocumentName tag that contains UTF-8 characters, which triggers the overflow when a character is sign extended to an integer that produces more digits than expected in an sprintf call.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2193" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2193"/>
        <description>Buffer overflow in the t2p_write_pdf_string function in tiff2pdf in libtiff 3.8.2 and earlier allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a TIFF file with a DocumentName tag that contains UTF-8 characters, which triggers the overflow when a character is sign extended to an integer that produces more digits than expected in an sprintf call.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:12.247-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:08.547-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:15.536-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9788 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:44.255-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:14.282-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="libtiff is earlier than 0:3.6.1-12.el4_7.2" test_ref="oval:org.mitre.oval:tst:37555"/>
          <criterion comment="libtiff-devel is earlier than 0:3.6.1-12.el4_7.2" test_ref="oval:org.mitre.oval:tst:37573"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9787" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in OpenOffice.org (OOo) 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2152" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2152"/>
        <description>Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in OpenOffice.org (OOo) 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:00.696-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:06.466-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:13.342-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9787 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:21.546-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:11.956-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-42.2.0.EL3" test_ref="oval:org.mitre.oval:tst:37041"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.2-42.2.0.EL3" test_ref="oval:org.mitre.oval:tst:37101"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-42.2.0.EL3" test_ref="oval:org.mitre.oval:tst:37231"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org2-langpack-lt_LT is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:37131"/>
            <criterion comment="openoffice.org2-langpack-nn_NO is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36855"/>
            <criterion comment="openoffice.org2-langpack-ga_IE is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:37023"/>
            <criterion comment="openoffice.org2-langpack-zh_CN is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:37014"/>
            <criterion comment="openoffice.org2-javafilter is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36137"/>
            <criterion comment="openoffice.org2-langpack-he_IL is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36217"/>
            <criterion comment="openoffice.org2-draw is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:37001"/>
            <criterion comment="openoffice.org2-langpack-ko_KR is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36763"/>
            <criterion comment="openoffice.org2-langpack-ca_ES is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36900"/>
            <criterion comment="openoffice.org2-base is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36904"/>
            <criterion comment="openoffice.org2-langpack-fr is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:37102"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.5-10.6.0.5.EL4" test_ref="oval:org.mitre.oval:tst:37327"/>
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.5.EL4" test_ref="oval:org.mitre.oval:tst:37258"/>
            <criterion comment="openoffice.org2-langpack-pa_IN is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36971"/>
            <criterion comment="openoffice.org2-langpack-da_DK is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36698"/>
            <criterion comment="openoffice.org2-emailmerge is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:37065"/>
            <criterion comment="openoffice.org2-langpack-pt_PT is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36143"/>
            <criterion comment="openoffice.org2-langpack-es is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:37128"/>
            <criterion comment="openoffice.org2-langpack-sv is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:37134"/>
            <criterion comment="openoffice.org2-langpack-ms_MY is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:37093"/>
            <criterion comment="openoffice.org2-langpack-cs_CZ is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36815"/>
            <criterion comment="openoffice.org2-xsltfilter is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36342"/>
            <criterion comment="openoffice.org2-langpack-ja_JP is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:37034"/>
            <criterion comment="openoffice.org2-langpack-hu_HU is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36655"/>
            <criterion comment="openoffice.org2-langpack-zh_TW is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36942"/>
            <criterion comment="openoffice.org2-langpack-sl_SI is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36897"/>
            <criterion comment="openoffice.org2-langpack-de is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:37055"/>
            <criterion comment="openoffice.org2-pyuno is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:37040"/>
            <criterion comment="openoffice.org2 is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:37021"/>
            <criterion comment="openoffice.org2-langpack-tr_TR is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:37103"/>
            <criterion comment="openoffice.org2-impress is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36121"/>
            <criterion comment="openoffice.org2-langpack-bn is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36947"/>
            <criterion comment="openoffice.org2-langpack-ar is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:37015"/>
            <criterion comment="openoffice.org2-langpack-pt_BR is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:37052"/>
            <criterion comment="openoffice.org2-langpack-af_ZA is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:37077"/>
            <criterion comment="openoffice.org2-langpack-pl_PL is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36551"/>
            <criterion comment="openoffice.org2-calc is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:37078"/>
            <criterion comment="openoffice.org2-langpack-zu_ZA is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36165"/>
            <criterion comment="openoffice.org2-langpack-fi_FI is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36997"/>
            <criterion comment="openoffice.org2-langpack-sk_SK is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:37121"/>
            <criterion comment="openoffice.org2-langpack-hi_IN is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36911"/>
            <criterion comment="openoffice.org2-langpack-nb_NO is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36682"/>
            <criterion comment="openoffice.org2-langpack-th_TH is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36825"/>
            <criterion comment="openoffice.org2-langpack-et_EE is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36739"/>
            <criterion comment="openoffice.org2-langpack-gl_ES is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:37097"/>
            <criterion comment="openoffice.org2-langpack-it is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36848"/>
            <criterion comment="openoffice.org2-langpack-hr_HR is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36841"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.5.EL4" test_ref="oval:org.mitre.oval:tst:37002"/>
            <criterion comment="openoffice.org2-langpack-ta_IN is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:37142"/>
            <criterion comment="openoffice.org2-langpack-gu_IN is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36872"/>
            <criterion comment="openoffice.org2-testtools is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:37122"/>
            <criterion comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.5.EL4" test_ref="oval:org.mitre.oval:tst:36748"/>
            <criterion comment="openoffice.org2-langpack-eu_ES is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:37004"/>
            <criterion comment="openoffice.org2-langpack-el_GR is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36830"/>
            <criterion comment="openoffice.org2-core is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36693"/>
            <criterion comment="openoffice.org2-langpack-ru is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36923"/>
            <criterion comment="openoffice.org2-langpack-bg_BG is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36982"/>
            <criterion comment="openoffice.org2-langpack-nl is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:37080"/>
            <criterion comment="openoffice.org2-langpack-sr_CS is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:36346"/>
            <criterion comment="openoffice.org2-langpack-cy_GB is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:37019"/>
            <criterion comment="openoffice.org2-math is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:37076"/>
            <criterion comment="openoffice.org2-graphicfilter is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:37072"/>
            <criterion comment="openoffice.org2-writer is earlier than 0:2.0.4-5.7.0.5.0" test_ref="oval:org.mitre.oval:tst:37088"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-langpack-sk_SK is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37166"/>
            <criterion comment="openoffice.org-langpack-zu_ZA is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37187"/>
            <criterion comment="openoffice.org-langpack-pa_IN is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37170"/>
            <criterion comment="openoffice.org-langpack-hi_IN is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37123"/>
            <criterion comment="openoffice.org-langpack-et_EE is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37214"/>
            <criterion comment="openoffice.org-langpack-kn_IN is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37151"/>
            <criterion comment="openoffice.org is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37303"/>
            <criterion comment="openoffice.org-langpack-zh_TW is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37161"/>
            <criterion comment="openoffice.org-writer is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37011"/>
            <criterion comment="openoffice.org-langpack-ve_ZA is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:36920"/>
            <criterion comment="openoffice.org-langpack-ga_IE is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37334"/>
            <criterion comment="openoffice.org-langpack-ta_IN is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37136"/>
            <criterion comment="openoffice.org-langpack-ko_KR is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37183"/>
            <criterion comment="openoffice.org-langpack-or_IN is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:36862"/>
            <criterion comment="openoffice.org-langpack-da_DK is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:36809"/>
            <criterion comment="openoffice.org-langpack-sr_CS is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37264"/>
            <criterion comment="openoffice.org-langpack-pl_PL is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37095"/>
            <criterion comment="openoffice.org-langpack-fr is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37090"/>
            <criterion comment="openoffice.org-langpack-ts_ZA is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37053"/>
            <criterion comment="openoffice.org-javafilter is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37308"/>
            <criterion comment="openoffice.org-langpack-as_IN is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37009"/>
            <criterion comment="openoffice.org-testtools is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:36832"/>
            <criterion comment="openoffice.org-langpack-hr_HR is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:36882"/>
            <criterion comment="openoffice.org-langpack-de is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:36676"/>
            <criterion comment="openoffice.org-emailmerge is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37216"/>
            <criterion comment="openoffice.org-xsltfilter is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37256"/>
            <criterion comment="openoffice.org-langpack-tn_ZA is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37150"/>
            <criterion comment="openoffice.org-langpack-te_IN is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37062"/>
            <criterion comment="openoffice.org-langpack-sv is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37025"/>
            <criterion comment="openoffice.org-base is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37325"/>
            <criterion comment="openoffice.org-langpack-ca_ES is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:36746"/>
            <criterion comment="openoffice.org-langpack-nr_ZA is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:36993"/>
            <criterion comment="openoffice.org-core is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:36901"/>
            <criterion comment="openoffice.org-langpack-nl is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37311"/>
            <criterion comment="openoffice.org-langpack-ur is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:36621"/>
            <criterion comment="openoffice.org-langpack-nn_NO is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37298"/>
            <criterion comment="openoffice.org-langpack-ar is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37339"/>
            <criterion comment="openoffice.org-langpack-ja_JP is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37184"/>
            <criterion comment="openoffice.org-langpack-gu_IN is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37220"/>
            <criterion comment="openoffice.org-langpack-tr_TR is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:36497"/>
            <criterion comment="openoffice.org-langpack-eu_ES is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37147"/>
            <criterion comment="openoffice.org-langpack-fi_FI is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37270"/>
            <criterion comment="openoffice.org-graphicfilter is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37099"/>
            <criterion comment="openoffice.org-pyuno is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37278"/>
            <criterion comment="openoffice.org-langpack-ml_IN is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37241"/>
            <criterion comment="openoffice.org-langpack-gl_ES is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37169"/>
            <criterion comment="openoffice.org-sdk-doc is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37338"/>
            <criterion comment="openoffice.org-langpack-zh_CN is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:36994"/>
            <criterion comment="openoffice.org-langpack-xh_ZA is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37310"/>
            <criterion comment="openoffice.org-langpack-it is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37137"/>
            <criterion comment="openoffice.org-sdk is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37110"/>
            <criterion comment="openoffice.org-langpack-es is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37194"/>
            <criterion comment="openoffice.org-langpack-nb_NO is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37221"/>
            <criterion comment="openoffice.org-langpack-sl_SI is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37030"/>
            <criterion comment="openoffice.org-draw is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37210"/>
            <criterion comment="openoffice.org-langpack-nso_ZA is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37130"/>
            <criterion comment="openoffice.org-langpack-ms_MY is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37324"/>
            <criterion comment="openoffice.org-langpack-el_GR is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37244"/>
            <criterion comment="openoffice.org-langpack-hu_HU is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37277"/>
            <criterion comment="openoffice.org-langpack-ss_ZA is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37175"/>
            <criterion comment="openoffice.org-langpack-bn is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:36987"/>
            <criterion comment="openoffice.org-langpack-he_IL is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:36625"/>
            <criterion comment="openoffice.org-langpack-pt_PT is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:36795"/>
            <criterion comment="openoffice.org-langpack-lt_LT is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37168"/>
            <criterion comment="openoffice.org-langpack-af_ZA is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37329"/>
            <criterion comment="openoffice.org-langpack-bg_BG is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37177"/>
            <criterion comment="openoffice.org-calc is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37006"/>
            <criterion comment="openoffice.org-langpack-cs_CZ is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37132"/>
            <criterion comment="openoffice.org-langpack-cy_GB is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37116"/>
            <criterion comment="openoffice.org-langpack-mr_IN is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:36675"/>
            <criterion comment="openoffice.org-headless is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37212"/>
            <criterion comment="openoffice.org-langpack-th_TH is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37235"/>
            <criterion comment="openoffice.org-langpack-pt_BR is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37042"/>
            <criterion comment="openoffice.org-langpack-ru is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37211"/>
            <criterion comment="openoffice.org-math is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37290"/>
            <criterion comment="openoffice.org-impress is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:36953"/>
            <criterion comment="openoffice.org-langpack-st_ZA is earlier than 0:2.3.0-6.5.1.el5_2" test_ref="oval:org.mitre.oval:tst:37186"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9786" version="5" class="vulnerability">
      <metadata>
        <title>Multiple "overflows" in the io_edgeport driver for Linux kernel 2.4.x have unknown impact and unknown attack vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1017"/>
        <description>Multiple "overflows" in the io_edgeport driver for Linux kernel 2.4.x have unknown impact and unknown attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:58.694-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:06.084-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:12.947-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9786 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:35.424-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:11.550-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:31101"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30944"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30205"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30752"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30999"/>
          <criterion comment="kernel is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30940"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:31177"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30903"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30786"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9785" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XSL style sheet file with a long XSLT "transformation match" condition that triggers a large number of steps.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1767" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1767"/>
        <description>Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XSL style sheet file with a long XSLT "transformation match" condition that triggers a large number of steps.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:44.759-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:05.731-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:12.611-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9785 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:36.607-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:11.015-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libxslt-devel is earlier than 0:1.0.33-6" test_ref="oval:org.mitre.oval:tst:36611"/>
            <criterion comment="libxslt is earlier than 0:1.0.33-6" test_ref="oval:org.mitre.oval:tst:36656"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libxslt-devel is earlier than 0:1.1.11-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36213"/>
            <criterion comment="libxslt-python is earlier than 0:1.1.11-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36777"/>
            <criterion comment="libxslt is earlier than 0:1.1.11-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36639"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libxslt-devel is earlier than 0:1.1.17-2.el5_1.1" test_ref="oval:org.mitre.oval:tst:36716"/>
            <criterion comment="libxslt-python is earlier than 0:1.1.17-2.el5_1.1" test_ref="oval:org.mitre.oval:tst:36669"/>
            <criterion comment="libxslt is earlier than 0:1.1.17-2.el5_1.1" test_ref="oval:org.mitre.oval:tst:36648"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9784" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spoof DOM objects via an XBL control that implements an internal XPCOM interface.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2704" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2704"/>
        <description>Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spoof DOM objects via an XBL control that implements an internal XPCOM interface.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:54.727-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:05.238-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:12.107-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9784 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:40.755-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:10.386-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32169"/>
            <criterion comment="mozilla is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:31729"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32242"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32151"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32014"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32144"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32068"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32248"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32293"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32044"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32244"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.7" test_ref="oval:org.mitre.oval:tst:32012"/>
            <criterion comment="mozilla is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:31897"/>
            <criterion comment="thunderbird is earlier than 0:1.0.7-1.4.1" test_ref="oval:org.mitre.oval:tst:31477"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32300"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32226"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32289"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.7" test_ref="oval:org.mitre.oval:tst:32170"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32150"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32302"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32090"/>
            <criterion comment="firefox is earlier than 0:1.0.7-1.4.1" test_ref="oval:org.mitre.oval:tst:32147"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32209"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32088"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9783" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cpio after the decompression is complete.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1111" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1111"/>
        <description>Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cpio after the decompression is complete.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:18.907-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:04.980-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:11.812-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9783 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:29:52.866-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:09.996-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="cpio is earlier than 0:2.5-4.RHEL3" test_ref="oval:org.mitre.oval:tst:31643"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="cpio is earlier than 0:2.5-8.RHEL4" test_ref="oval:org.mitre.oval:tst:30793"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9782" version="5" class="vulnerability">
      <metadata>
        <title>The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle (MITM) attacks that use crafted message IDs and MD5 collisions.  NOTE: this design-level issue potentially affects all products that use APOP, including (1) Thunderbird 1.x before 1.5.0.12 and 2.x before 2.0.0.4, (2) Evolution, (3) mutt, (4) fetchmail before 6.3.8, (5) SeaMonkey 1.0.x before 1.0.9 and 1.1.x before 1.1.2, (6) Balsa 2.3.16 and earlier, (7) Mailfilter before 0.8.2, and possibly other products.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1558" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1558"/>
        <description>The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle (MITM) attacks that use crafted message IDs and MD5 collisions.  NOTE: this design-level issue potentially affects all products that use APOP, including (1) Thunderbird 1.x before 1.5.0.12 and 2.x before 2.0.0.4, (2) Evolution, (3) mutt, (4) fetchmail before 6.3.8, (5) SeaMonkey 1.0.x before 1.0.9 and 1.1.x before 1.1.2, (6) Balsa 2.3.16 and earlier, (7) Mailfilter before 0.8.2, and possibly other products.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:09.833-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:04.090-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:10.847-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9782 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:51.507-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:08.786-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34409"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34257"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34432"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33988"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33721"/>
            <criterion comment="evolution is earlier than 0:1.4.5-20.el3" test_ref="oval:org.mitre.oval:tst:34258"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33693"/>
            <criterion comment="fetchmail is earlier than 0:6.2.0-3.el3.4" test_ref="oval:org.mitre.oval:tst:34132"/>
            <criterion comment="mutt is earlier than 5:1.4.1-5.el3" test_ref="oval:org.mitre.oval:tst:34296"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34313"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34228"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34281"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33894"/>
            <criterion comment="evolution-devel is earlier than 0:1.4.5-20.el3" test_ref="oval:org.mitre.oval:tst:33933"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:33844"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34334"/>
            <criterion comment="irb is earlier than 0:1.8.1-7.el4_8.3" test_ref="oval:org.mitre.oval:tst:38549"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34366"/>
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.8.el4" test_ref="oval:org.mitre.oval:tst:33625"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.1-7.el4_8.3" test_ref="oval:org.mitre.oval:tst:38591"/>
            <criterion comment="ruby-mode is earlier than 0:1.8.1-7.el4_8.3" test_ref="oval:org.mitre.oval:tst:38694"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:33931"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.1-7.el4_8.3" test_ref="oval:org.mitre.oval:tst:38715"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-0.1.el4" test_ref="oval:org.mitre.oval:tst:34331"/>
            <criterion comment="ruby is earlier than 0:1.8.1-7.el4_8.3" test_ref="oval:org.mitre.oval:tst:38864"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.1-7.el4_8.3" test_ref="oval:org.mitre.oval:tst:38837"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34021"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34249"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.8.el4" test_ref="oval:org.mitre.oval:tst:34293"/>
            <criterion comment="evolution is earlier than 0:2.0.2-35.0.2.el4" test_ref="oval:org.mitre.oval:tst:34046"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34446"/>
            <criterion comment="mutt is earlier than 5:1.4.1-12.0.3.el4" test_ref="oval:org.mitre.oval:tst:34260"/>
            <criterion comment="fetchmail is earlier than 0:6.2.5-6.0.1.el4" test_ref="oval:org.mitre.oval:tst:33955"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.1-7.el4_8.3" test_ref="oval:org.mitre.oval:tst:38523"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34262"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:33994"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34322"/>
            <criterion comment="evolution-devel is earlier than 0:2.0.2-35.0.2.el4" test_ref="oval:org.mitre.oval:tst:34116"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-ri is earlier than 0:1.8.5-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:38178"/>
            <criterion comment="ruby-mode is earlier than 0:1.8.5-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:38751"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.5-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:38045"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.5-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:38362"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-1.el5" test_ref="oval:org.mitre.oval:tst:33979"/>
            <criterion comment="ruby is earlier than 0:1.8.5-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:38133"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.5-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:38911"/>
            <criterion comment="evolution-data-server-devel is earlier than 0:1.8.0-15.0.3.el5" test_ref="oval:org.mitre.oval:tst:33399"/>
            <criterion comment="evolution-data-server is earlier than 0:1.8.0-15.0.3.el5" test_ref="oval:org.mitre.oval:tst:34181"/>
            <criterion comment="fetchmail is earlier than 0:6.3.6-1.0.1.el5" test_ref="oval:org.mitre.oval:tst:34122"/>
            <criterion comment="mutt is earlier than 5:1.4.2.2-3.0.2.el5" test_ref="oval:org.mitre.oval:tst:34241"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.5-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:38738"/>
            <criterion comment="ruby-rdoc is earlier than 0:1.8.5-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:38762"/>
            <criterion comment="ruby-irb is earlier than 0:1.8.5-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:38574"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9781" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Ethereal 0.10.4 up to 0.10.14 allows remote attackers to cause a denial of service (abort) via the SNDCP dissector.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1940" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1940"/>
        <description>Unspecified vulnerability in Ethereal 0.10.4 up to 0.10.14 allows remote attackers to cause a denial of service (abort) via the SNDCP dissector.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:46.501-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:03.782-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:10.189-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9781 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:08.739-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:08.398-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.99.0-EL3.2" test_ref="oval:org.mitre.oval:tst:32590"/>
            <criterion comment="ethereal is earlier than 0:0.99.0-EL3.2" test_ref="oval:org.mitre.oval:tst:32631"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.99.0-EL4.2" test_ref="oval:org.mitre.oval:tst:32299"/>
            <criterion comment="ethereal is earlier than 0:0.99.0-EL4.2" test_ref="oval:org.mitre.oval:tst:32238"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9780" version="5" class="vulnerability">
      <metadata>
        <title>The BigDecimal library in Ruby 1.8.6 before p369 and 1.8.7 before p173 allows context-dependent attackers to cause a denial of service (application crash) via a string argument that represents a large number, as demonstrated by an attempted conversion to the Float data type.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1904" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1904"/>
        <description>The BigDecimal library in Ruby 1.8.6 before p369 and 1.8.7 before p173 allows context-dependent attackers to cause a denial of service (application crash) via a string argument that represents a large number, as demonstrated by an attempted conversion to the Float data type.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:43.418-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:03.393-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:09.726-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9780 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:16.734-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:07.774-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.8.1-7.el4_8.3" test_ref="oval:org.mitre.oval:tst:38694"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.1-7.el4_8.3" test_ref="oval:org.mitre.oval:tst:38591"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.1-7.el4_8.3" test_ref="oval:org.mitre.oval:tst:38715"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.1-7.el4_8.3" test_ref="oval:org.mitre.oval:tst:38523"/>
            <criterion comment="ruby is earlier than 0:1.8.1-7.el4_8.3" test_ref="oval:org.mitre.oval:tst:38864"/>
            <criterion comment="irb is earlier than 0:1.8.1-7.el4_8.3" test_ref="oval:org.mitre.oval:tst:38549"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.1-7.el4_8.3" test_ref="oval:org.mitre.oval:tst:38837"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-ri is earlier than 0:1.8.5-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:38178"/>
            <criterion comment="ruby-mode is earlier than 0:1.8.5-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:38751"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.5-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:38045"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.5-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:38362"/>
            <criterion comment="ruby is earlier than 0:1.8.5-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:38133"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.5-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:38911"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.5-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:38738"/>
            <criterion comment="ruby-irb is earlier than 0:1.8.5-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:38574"/>
            <criterion comment="ruby-rdoc is earlier than 0:1.8.5-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:38762"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:978" version="1" class="vulnerability">
      <metadata>
        <title>Multiple Directory Traversal Vulnerabilities in LHA</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0235" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0235"/>
        <description>Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute pathnames with double leading slashes ("//absolute/path").</description>
        <oval_repository>
          <dates>
            <submitted date="2004-06-10T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-06-30T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-07-12T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="lha version is less than 1.14i-10.2" negate="false" test_ref="oval:org.mitre.oval:tst:1370"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/bin/lha is executable">
            <criterion comment="/usr/bin/lha is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1369"/>
            <criterion comment="/usr/bin/lha is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1368"/>
            <criterion comment="/usr/bin/lha is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1367"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9779" version="5" class="vulnerability">
      <metadata>
        <title>The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0079"/>
        <description>The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:36.944-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:03.133-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:09.462-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9779 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:29.579-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:07.383-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.7a-33.4" test_ref="oval:org.mitre.oval:tst:30638"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.7a-33.4" test_ref="oval:org.mitre.oval:tst:30381"/>
            <criterion comment="openssl is earlier than 0:0.9.7a-33.4" test_ref="oval:org.mitre.oval:tst:30673"/>
            <criterion comment="openssl096b is earlier than 0:0.9.6b-16.42" test_ref="oval:org.mitre.oval:tst:32442"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="openssl096b is earlier than 0:0.9.6b-22.42" test_ref="oval:org.mitre.oval:tst:32297"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9778" version="5" class="vulnerability">
      <metadata>
        <title>The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a free of uninitialized memory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0166" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0166"/>
        <description>The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a free of uninitialized memory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:26.782-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:02.500-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:08.764-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9778 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:52.541-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:06.554-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="xpdf is earlier than 1:2.02-14.el3" test_ref="oval:org.mitre.oval:tst:38322"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40095"/>
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-13.el4" test_ref="oval:org.mitre.oval:tst:38126"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:39528"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-13.el4" test_ref="oval:org.mitre.oval:tst:38230"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40473"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38481"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40316"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-7.7.2.el4_7.4" test_ref="oval:org.mitre.oval:tst:38436"/>
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38145"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40209"/>
            <criterion comment="xpdf is earlier than 1:3.00-20.el4" test_ref="oval:org.mitre.oval:tst:38649"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40364"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40077"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38607"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.5.4-12.el5_3" test_ref="oval:org.mitre.oval:tst:38618"/>
            <criterion comment="cups-lpd is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38471"/>
            <criterion comment="tetex-dvips is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40312"/>
            <criterion comment="kdegraphics is earlier than 7:3.5.4-12.el5_3" test_ref="oval:org.mitre.oval:tst:38271"/>
            <criterion comment="poppler is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38760"/>
            <criterion comment="tetex-fonts is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40122"/>
            <criterion comment="cups-libs is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38541"/>
            <criterion comment="tetex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40413"/>
            <criterion comment="tetex-doc is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40398"/>
            <criterion comment="poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38500"/>
            <criterion comment="tetex-latex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40444"/>
            <criterion comment="poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38512"/>
            <criterion comment="cups-devel is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:37935"/>
            <criterion comment="tetex-afm is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40008"/>
            <criterion comment="tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:39920"/>
            <criterion comment="cups is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38334"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9777" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM node names within the context of their namespaces, which allows remote attackers to modify certain tag properties, possibly leading to execution of arbitrary script or code, as demonstrated using an XHTML document with IMG tags with custom properties ("XHTML node spoofing").</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2269" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2269"/>
        <description>Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM node names within the context of their namespaces, which allows remote attackers to modify certain tag properties, possibly leading to execution of arbitrary script or code, as demonstrated using an XHTML document with IMG tags with custom properties ("XHTML node spoofing").</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:26.747-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:01.957-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:08.263-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9777 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:13.283-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:05.870-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32142"/>
            <criterion comment="mozilla is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32131"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32154"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32001"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32171"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32162"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31782"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32041"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32004"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31353"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32120"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.6" test_ref="oval:org.mitre.oval:tst:31633"/>
            <criterion comment="mozilla is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31837"/>
            <criterion comment="thunderbird is earlier than 0:1.0.6-1.4.1" test_ref="oval:org.mitre.oval:tst:32113"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32100"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31821"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31904"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.6" test_ref="oval:org.mitre.oval:tst:31814"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31951"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31554"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32149"/>
            <criterion comment="firefox is earlier than 0:1.0.6-1.4.1" test_ref="oval:org.mitre.oval:tst:32167"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31998"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32061"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9776" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in (1) the XGetPixel function in ImUtil.c in X.Org libx11 before 1.0.3, and (2) XInitImage function in xwd.c for ImageMagick, allow user-assisted remote attackers to cause a denial of service (crash) or obtain sensitive information via crafted images with large or negative values that trigger a buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1667" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1667"/>
        <description>Multiple integer overflows in (1) the XGetPixel function in ImUtil.c in X.Org libx11 before 1.0.3, and (2) XInitImage function in xwd.c for ImageMagick, allow user-assisted remote attackers to cause a denial of service (crash) or obtain sensitive information via crafted images with large or negative values that trigger a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:33.447-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:00.716-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:07.360-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9776 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:22.930-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:04.731-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33447"/>
            <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33884"/>
            <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33550"/>
            <criterion comment="XFree86-libs is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33984"/>
            <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33936"/>
            <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33976"/>
            <criterion comment="XFree86-twm is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33799"/>
            <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33867"/>
            <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33958"/>
            <criterion comment="XFree86-doc is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33791"/>
            <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33929"/>
            <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33764"/>
            <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33070"/>
            <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33716"/>
            <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33788"/>
            <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33928"/>
            <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33930"/>
            <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33951"/>
            <criterion comment="XFree86-xdm is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33950"/>
            <criterion comment="XFree86-sdk is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33932"/>
            <criterion comment="XFree86 is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33656"/>
            <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33963"/>
            <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33466"/>
            <criterion comment="XFree86-xfs is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33846"/>
            <criterion comment="XFree86-tools is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33660"/>
            <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33687"/>
            <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33689"/>
            <criterion comment="XFree86-xauth is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33499"/>
            <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33719"/>
            <criterion comment="XFree86-devel is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33696"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33811"/>
            <criterion comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33258"/>
            <criterion comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33567"/>
            <criterion comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33738"/>
            <criterion comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33938"/>
            <criterion comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33663"/>
            <criterion comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33066"/>
            <criterion comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33875"/>
            <criterion comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33789"/>
            <criterion comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33829"/>
            <criterion comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33434"/>
            <criterion comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33704"/>
            <criterion comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33790"/>
            <criterion comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33886"/>
            <criterion comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33982"/>
            <criterion comment="xorg-x11 is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33715"/>
            <criterion comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33856"/>
            <criterion comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33815"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libX11-devel is earlier than 0:1.0.3-8.0.1.el5" test_ref="oval:org.mitre.oval:tst:33685"/>
            <criterion comment="libX11 is earlier than 0:1.0.3-8.0.1.el5" test_ref="oval:org.mitre.oval:tst:33774"/>
            <criterion comment="xorg-x11-apps is earlier than 0:7.1-4.0.1.el5" test_ref="oval:org.mitre.oval:tst:33082"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9775" version="5" class="vulnerability">
      <metadata>
        <title>The Unidirectional Lightweight Encapsulation (ULE) decapsulation component in dvb-core/dvb_net.c in the dvb driver in the Linux kernel 2.6.17.8 allows remote attackers to cause a denial of service (crash) via an SNDU length of 0 in a ULE packet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4623" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4623"/>
        <description>The Unidirectional Lightweight Encapsulation (ULE) decapsulation component in dvb-core/dvb_net.c in the dvb driver in the Linux kernel 2.6.17.8 allows remote attackers to cause a denial of service (crash) via an SNDU length of 0 in a ULE packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:11.650-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:00.430-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:06.963-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9775 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:37.386-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:03.848-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32678"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32900"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:33014"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32947"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32944"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32956"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32602"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:33081"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32892"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9774" version="5" class="vulnerability">
      <metadata>
        <title>The is_path_absolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote attackers to cause a denial of service (CPU consumption by tight loop) via a "..\.." URL in an HTTP request.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2874" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2874"/>
        <description>The is_path_absolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote attackers to cause a denial of service (CPU consumption by tight loop) via a "..\.." URL in an HTTP request.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:32.581-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:14:00.224-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:06.740-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9774 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:45.009-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:03.529-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.8" test_ref="oval:org.mitre.oval:tst:31989"/>
          <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.8" test_ref="oval:org.mitre.oval:tst:31269"/>
          <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.8" test_ref="oval:org.mitre.oval:tst:31920"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9773" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the ubsec_keysetup function for Linux Broadcom 5820 cryptonet driver allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a negative add_dsa_buf_bytes variable, which leads to a buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0619" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0619"/>
        <description>Integer overflow in the ubsec_keysetup function for Linux Broadcom 5820 cryptonet driver allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a negative add_dsa_buf_bytes variable, which leads to a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:03.655-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:59.908-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:06.446-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9773 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:12.790-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:03.166-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30934"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30708"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30577"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30874"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30794"/>
          <criterion comment="kernel is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30892"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30873"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:31080"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30866"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9772" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the PPP dissector Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6112"/>
        <description>Buffer overflow in the PPP dissector Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:53.239-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:59.620-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:06.146-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9772 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:18.357-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:02.657-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:36051"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:35980"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35669"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35941"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:35709"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:36120"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35712"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35801"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9771" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3798" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3798"/>
        <description>Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:02.322-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:59.337-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:05.786-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9771 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:12.545-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:02.123-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="arpwatch is earlier than 14:2.1a13-12.el4" test_ref="oval:org.mitre.oval:tst:34426"/>
            <criterion comment="libpcap is earlier than 14:0.8.3-12.el4" test_ref="oval:org.mitre.oval:tst:34317"/>
            <criterion comment="tcpdump is earlier than 14:3.8.2-12.el4" test_ref="oval:org.mitre.oval:tst:33439"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="arpwatch is earlier than 14:2.1a13-18.el5" test_ref="oval:org.mitre.oval:tst:34286"/>
            <criterion comment="libpcap-devel is earlier than 14:0.9.4-11.el5" test_ref="oval:org.mitre.oval:tst:34191"/>
            <criterion comment="libpcap is earlier than 14:0.9.4-11.el5" test_ref="oval:org.mitre.oval:tst:34045"/>
            <criterion comment="tcpdump is earlier than 14:3.9.4-11.el5" test_ref="oval:org.mitre.oval:tst:33937"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9770" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the MoxaDriverIoctl function for the moxa serial driver (moxa.c) in Linux 2.2.x, 2.4.x, and 2.6.x before 2.6.22 allows local users to execute arbitrary code via a certain modified length value.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0504" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0504"/>
        <description>Buffer overflow in the MoxaDriverIoctl function for the moxa serial driver (moxa.c) in Linux 2.2.x, 2.4.x, and 2.6.x before 2.6.22 allows local users to execute arbitrary code via a certain modified length value.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:08.343-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:58.859-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:05.343-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9770 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:31.525-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:01.502-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31411"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31953"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31879"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31990"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31485"/>
            <criterion comment="kernel is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32093"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31968"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32148"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31741"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36201"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36534"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36373"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36702"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36615"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36490"/>
            <criterion comment="kernel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36370"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:35738"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36249"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36731"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:35733"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:977" version="1" class="vulnerability">
      <metadata>
        <title>Multiple BO Vulnerabilities in LHA get_header Function</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0234" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0234"/>
        <description>Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testing or extracting the archive.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-06-10T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-06-30T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-07-12T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="lha version is less than 1.14i-10.2" negate="false" test_ref="oval:org.mitre.oval:tst:1370"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/bin/lha is executable">
            <criterion comment="/usr/bin/lha is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1369"/>
            <criterion comment="/usr/bin/lha is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1368"/>
            <criterion comment="/usr/bin/lha is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1367"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9769" version="5" class="vulnerability">
      <metadata>
        <title>Ethereal 0.10.3 allows remote attackers to cause a denial of service (crash) via certain SIP messages between Hotsip servers and clients.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0504" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0504"/>
        <description>Ethereal 0.10.3 allows remote attackers to cause a denial of service (crash) via certain SIP messages between Hotsip servers and clients.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:23.486-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:58.610-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:05.136-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9769 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:40.217-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:01.222-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="ethereal-gnome is earlier than 0:0.10.3-0.30E.2" test_ref="oval:org.mitre.oval:tst:30484"/>
          <criterion comment="ethereal is earlier than 0:0.10.3-0.30E.2" test_ref="oval:org.mitre.oval:tst:30678"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9768" version="5" class="vulnerability">
      <metadata>
        <title>The PLUGINSPAGE functionality in Mozilla Firefox before 1.5.0.4 allows remote user-assisted attackers to execute privileged code by tricking a user into installing missing plugins and selecting the "Manual Install" button, then using nested javascript: URLs.  NOTE: the manual install button is used for downloading software from a remote web site, so this issue would not cross privilege boundaries if the user progresses to the point of installing malicious software from the attacker-controlled site.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2784" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2784"/>
        <description>The PLUGINSPAGE functionality in Mozilla Firefox before 1.5.0.4 allows remote user-assisted attackers to execute privileged code by tricking a user into installing missing plugins and selecting the "Manual Install" button, then using nested javascript: URLs.  NOTE: the manual install button is used for downloading software from a remote web site, so this issue would not cross privilege boundaries if the user progresses to the point of installing malicious software from the attacker-controlled site.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:05.382-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:57.991-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:04.586-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9768 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:42.335-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:00.550-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32575"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32674"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32918"/>
            <criterion comment="seamonkey is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32919"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32864"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32659"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32859"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32511"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32902"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32837"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32873"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32693"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32886"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32810"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32418"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32496"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32929"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32777"/>
            <criterion comment="firefox is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32896"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32722"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32906"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32905"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32925"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32624"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9767" version="5" class="vulnerability">
      <metadata>
        <title>FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via an invalid "number of axes" field in a Printer Font Binary (PFB) file, which triggers a free of arbitrary memory locations, leading to memory corruption.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1807" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1807"/>
        <description>FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via an invalid "number of axes" field in a Printer Font Binary (PFB) file, which triggers a free of arbitrary memory locations, leading to memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:05.197-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:57.656-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:04.237-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9767 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:35.880-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:22:00.010-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="freetype is earlier than 0:2.1.4-10.el3" test_ref="oval:org.mitre.oval:tst:36608"/>
            <criterion comment="freetype-devel is earlier than 0:2.1.4-10.el3" test_ref="oval:org.mitre.oval:tst:36928"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="freetype is earlier than 0:2.1.9-8.el4.6" test_ref="oval:org.mitre.oval:tst:36978"/>
            <criterion comment="freetype-demos is earlier than 0:2.1.9-8.el4.6" test_ref="oval:org.mitre.oval:tst:37295"/>
            <criterion comment="freetype-utils is earlier than 0:2.1.9-8.el4.6" test_ref="oval:org.mitre.oval:tst:36877"/>
            <criterion comment="freetype-devel is earlier than 0:2.1.9-8.el4.6" test_ref="oval:org.mitre.oval:tst:37292"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="freetype is earlier than 0:2.2.1-20.el5_2" test_ref="oval:org.mitre.oval:tst:37321"/>
            <criterion comment="freetype-demos is earlier than 0:2.2.1-20.el5_2" test_ref="oval:org.mitre.oval:tst:37312"/>
            <criterion comment="freetype-devel is earlier than 0:2.2.1-20.el5_2" test_ref="oval:org.mitre.oval:tst:37160"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9766" version="5" class="vulnerability">
      <metadata>
        <title>The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current-clear_child_tid pointer, which allows local users to cause a denial of service (memory corruption) or possibly gain privileges via a clone system call with CLONE_CHILD_SETTID or CLONE_CHILD_CLEARTID enabled, which is not properly handled during thread creation and exit.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2848" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2848"/>
        <description>The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current->clear_child_tid pointer, which allows local users to cause a denial of service (memory corruption) or possibly gain privileges via a clone system call with CLONE_CHILD_SETTID or CLONE_CHILD_CLEARTID enabled, which is not properly handled during thread creation and exit.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:30.668-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:56.967-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:03.458-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9766 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:29.189-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:58.978-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39591"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39396"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39586"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39171"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39299"/>
            <criterion comment="kernel is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39151"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39468"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39460"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:38810"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39101"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39357"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:38568"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39331"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39316"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39054"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39274"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39407"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39435"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39442"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:38473"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38255"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38332"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39122"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39058"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39247"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39145"/>
            <criterion comment="kernel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38795"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38831"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38585"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39130"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38567"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39245"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9765" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user-assisted attackers to cause a denial of service and possibly execute arbitrary code via (1) a DCM image that is not properly handled by the ReadDCMImage function in coders/dcm.c, or (2) a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5456"/>
        <description>Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user-assisted attackers to cause a denial of service and possibly execute arbitrary code via (1) a DCM image that is not properly handled by the ReadDCMImage function in coders/dcm.c, or (2) a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:25.674-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:56.647-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:03.132-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9765 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:32.791-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:58.509-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:5.5.6-24" test_ref="oval:org.mitre.oval:tst:33189"/>
            <criterion comment="ImageMagick is earlier than 0:5.5.6-24" test_ref="oval:org.mitre.oval:tst:33318"/>
            <criterion comment="ImageMagick-perl is earlier than 0:5.5.6-24" test_ref="oval:org.mitre.oval:tst:33102"/>
            <criterion comment="ImageMagick-devel is earlier than 0:5.5.6-24" test_ref="oval:org.mitre.oval:tst:33080"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:5.5.6-24" test_ref="oval:org.mitre.oval:tst:33315"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-16.0.3" test_ref="oval:org.mitre.oval:tst:33269"/>
            <criterion comment="ImageMagick is earlier than 0:6.0.7.1-16.0.3" test_ref="oval:org.mitre.oval:tst:33326"/>
            <criterion comment="ImageMagick-perl is earlier than 0:6.0.7.1-16.0.3" test_ref="oval:org.mitre.oval:tst:32926"/>
            <criterion comment="ImageMagick-devel is earlier than 0:6.0.7.1-16.0.3" test_ref="oval:org.mitre.oval:tst:32622"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:6.0.7.1-16.0.3" test_ref="oval:org.mitre.oval:tst:33361"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9764" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in SquirrelMail before 1.4.17 allows remote attackers to inject arbitrary web script or HTML via a crafted hyperlink in an HTML part of an e-mail message.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2379" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2379"/>
        <description>Cross-site scripting (XSS) vulnerability in SquirrelMail before 1.4.17 allows remote attackers to inject arbitrary web script or HTML via a crafted hyperlink in an HTML part of an e-mail message.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:46.986-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:56.387-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:02.813-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9764 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:30.413-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:58.061-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-8.el3" test_ref="oval:org.mitre.oval:tst:38111"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-5.el4_7.2" test_ref="oval:org.mitre.oval:tst:37956"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-5.el5_2.2" test_ref="oval:org.mitre.oval:tst:37617"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9763" version="5" class="vulnerability">
      <metadata>
        <title>The focus handling for the onkeydown event in Mozilla Firefox 1.5.0.12, 2.0.0.4 and other versions before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to change field focus and copy keystrokes via the "for" attribute in a label, which bypasses the focus prevention, as demonstrated by changing focus from a textarea to a file upload field.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3511"/>
        <description>The focus handling for the onkeydown event in Mozilla Firefox 1.5.0.12, 2.0.0.4 and other versions before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to change field focus and copy keystrokes via the "for" attribute in a label, which bypasses the focus prevention, as demonstrated by changing focus from a textarea to a file upload field.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:36.301-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:55.813-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:02.280-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9763 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:27.518-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:57.318-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35512"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35540"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35394"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35541"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35241"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35553"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35552"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:34924"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35155"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35441"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35489"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35324"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-0.5.el4" test_ref="oval:org.mitre.oval:tst:35240"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35182"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35311"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35454"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.7.el4" test_ref="oval:org.mitre.oval:tst:35398"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35351"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35482"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:34790"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35291"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:34577"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-6.el5" test_ref="oval:org.mitre.oval:tst:35262"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-6.el5" test_ref="oval:org.mitre.oval:tst:35202"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-5.el5" test_ref="oval:org.mitre.oval:tst:35177"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9762" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox and Thunderbird before 1.5.0.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) nested option tags in a select tag, (2) a DOMNodeRemoved mutation event, (3) "Content-implemented tree views," (4) BoxObjects, (5) the XBL implementation, (6) an iframe that attempts to remove itself, which leads to memory corruption.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2779" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2779"/>
        <description>Mozilla Firefox and Thunderbird before 1.5.0.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) nested &lt;option> tags in a select tag, (2) a DOMNodeRemoved mutation event, (3) "Content-implemented tree views," (4) BoxObjects, (5) the XBL implementation, (6) an iframe that attempts to remove itself, which leads to memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:18.092-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:55.326-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:01.673-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9762 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:45.580-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:56.655-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32575"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32674"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32918"/>
            <criterion comment="seamonkey is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32919"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32864"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32659"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32859"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32511"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32902"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32837"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32873"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32693"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32886"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32810"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32418"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32496"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32929"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32777"/>
            <criterion comment="firefox is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32896"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32722"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32906"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32905"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32925"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32624"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9761" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules.  NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2315" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2315"/>
        <description>Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules.  NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:07.718-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:54.865-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:01.270-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9761 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:14.460-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:56.073-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38704"/>
            <criterion comment="tkinter is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38695"/>
            <criterion comment="python-tools is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38872"/>
            <criterion comment="python is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38617"/>
            <criterion comment="python-docs is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:37965"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38916"/>
            <criterion comment="tkinter is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38703"/>
            <criterion comment="python-tools is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38787"/>
            <criterion comment="python is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38939"/>
            <criterion comment="python-docs is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38081"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38889"/>
            <criterion comment="tkinter is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38958"/>
            <criterion comment="python-tools is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38827"/>
            <criterion comment="python is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38282"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9760" version="5" class="vulnerability">
      <metadata>
        <title>Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream parsing code (Stream.cc) in xpdf 3.01 and earlier, as used in products such as (a) Poppler, (b) teTeX, (c) KDE kpdf, (d) pdftohtml, (e) KOffice KWord, (f) CUPS, and (g) libextractor allow user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with an out-of-range number of components (numComps), which is used as an array index.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3191" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3191"/>
        <description>Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream parsing code (Stream.cc) in xpdf 3.01 and earlier, as used in products such as (a) Poppler, (b) teTeX, (c) KDE kpdf, (d) pdftohtml, (e) KOffice KWord, (f) CUPS, and (g) libextractor allow user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with an out-of-range number of components (numComps), which is used as an array index.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:01.428-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:54.378-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:00.723-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9760 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:00.098-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:55.400-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32436"/>
            <criterion comment="tetex-dvips is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32311"/>
            <criterion comment="tetex-fonts is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32279"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.34" test_ref="oval:org.mitre.oval:tst:32490"/>
            <criterion comment="tetex is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32507"/>
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.34" test_ref="oval:org.mitre.oval:tst:32463"/>
            <criterion comment="tetex-afm is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32377"/>
            <criterion comment="xpdf is earlier than 1:2.02-9.8" test_ref="oval:org.mitre.oval:tst:31474"/>
            <criterion comment="tetex-xdvi is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:31613"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.34" test_ref="oval:org.mitre.oval:tst:31538"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32260"/>
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-3.6" test_ref="oval:org.mitre.oval:tst:32395"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32095"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-3.6" test_ref="oval:org.mitre.oval:tst:31805"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32489"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.9" test_ref="oval:org.mitre.oval:tst:31551"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32199"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-7.3" test_ref="oval:org.mitre.oval:tst:32230"/>
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.9" test_ref="oval:org.mitre.oval:tst:32368"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32308"/>
            <criterion comment="xpdf is earlier than 1:3.00-11.10" test_ref="oval:org.mitre.oval:tst:32152"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32333"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32317"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.9" test_ref="oval:org.mitre.oval:tst:32431"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:976" version="1" class="vulnerability">
      <metadata>
        <title>tcpdump Identification Payload in ISAKMP Packets Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0184" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0184"/>
        <description>Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length that becomes less than 8 during byte order conversion, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-06-10T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-06-30T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-07-12T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2483"/>
          <criterion comment="tcpdump version is less than 3.7.2-7.E3.2" negate="false" test_ref="oval:org.mitre.oval:tst:1374"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/sbin/tcpdump is executable">
            <criterion comment="/usr/sbin/tcpdump is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1373"/>
            <criterion comment="/usr/sbin/tcpdump is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1372"/>
            <criterion comment="/usr/sbin/tcpdump is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1371"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9759" version="5" class="vulnerability">
      <metadata>
        <title>The gnutls_x509_crt_get_serial function in the GnuTLS library before 1.2.1, when running on big-endian, 64-bit platforms, calls the asn1_read_value with a pointer to the wrong data type and the wrong length value, which allows remote attackers to bypass the certificate revocation list (CRL) check and cause a stack-based buffer overflow via a crafted X.509 certificate, related to extraction of a serial number.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0731" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0731"/>
        <description>The gnutls_x509_crt_get_serial function in the GnuTLS library before 1.2.1, when running on big-endian, 64-bit platforms, calls the asn1_read_value with a pointer to the wrong data type and the wrong length value, which allows remote attackers to bypass the certificate revocation list (CRL) check and cause a stack-based buffer overflow via a crafted X.509 certificate, related to extraction of a serial number.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:21.585-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:54.175-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:00.516-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9759 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:00.174-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:55.098-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="gnutls is earlier than 0:1.0.20-4.el4_8.7" test_ref="oval:org.mitre.oval:tst:39971"/>
          <criterion comment="gnutls-devel is earlier than 0:1.0.20-4.el4_8.7" test_ref="oval:org.mitre.oval:tst:40233"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9758" version="5" class="vulnerability">
      <metadata>
        <title>smbd in Samba 3.0.6 through 3.0.23d allows remote authenticated users to cause a denial of service (memory and CPU exhaustion) by renaming a file in a way that prevents a request from being removed from the deferred open queue, which triggers an infinite loop.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0452" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0452"/>
        <description>smbd in Samba 3.0.6 through 3.0.23d allows remote authenticated users to cause a denial of service (memory and CPU exhaustion) by renaming a file in a way that prevents a request from being removed from the deferred open queue, which triggers an infinite loop.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:19.184-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:53.784-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:15:00.098-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9758 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:22.985-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:54.520-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.9-1.3E.12" test_ref="oval:org.mitre.oval:tst:33498"/>
            <criterion comment="samba-swat is earlier than 0:3.0.9-1.3E.12" test_ref="oval:org.mitre.oval:tst:32942"/>
            <criterion comment="samba-client is earlier than 0:3.0.9-1.3E.12" test_ref="oval:org.mitre.oval:tst:33319"/>
            <criterion comment="samba is earlier than 0:3.0.9-1.3E.12" test_ref="oval:org.mitre.oval:tst:33433"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.10-1.4E.11" test_ref="oval:org.mitre.oval:tst:32739"/>
            <criterion comment="samba-swat is earlier than 0:3.0.10-1.4E.11" test_ref="oval:org.mitre.oval:tst:33281"/>
            <criterion comment="samba-client is earlier than 0:3.0.10-1.4E.11" test_ref="oval:org.mitre.oval:tst:33449"/>
            <criterion comment="samba is earlier than 0:3.0.10-1.4E.11" test_ref="oval:org.mitre.oval:tst:33469"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.23c-2.el5.2" test_ref="oval:org.mitre.oval:tst:33413"/>
            <criterion comment="samba-swat is earlier than 0:3.0.23c-2.el5.2" test_ref="oval:org.mitre.oval:tst:33148"/>
            <criterion comment="samba-client is earlier than 0:3.0.23c-2.el5.2" test_ref="oval:org.mitre.oval:tst:33443"/>
            <criterion comment="samba is earlier than 0:3.0.23c-2.el5.2" test_ref="oval:org.mitre.oval:tst:33362"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9757" version="5" class="vulnerability">
      <metadata>
        <title>NFSv4 in the Linux kernel 2.6.18, and possibly other versions, does not properly clean up an inode when an O_EXCL create fails, which causes files to be created with insecure settings such as setuid bits, and possibly allows local users to gain privileges, related to the execution of the do_open_permission function even when a create fails.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3286" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3286"/>
        <description>NFSv4 in the Linux kernel 2.6.18, and possibly other versions, does not properly clean up an inode when an O_EXCL create fails, which causes files to be created with insecure settings such as setuid bits, and possibly allows local users to gain privileges, related to the execution of the do_open_permission function even when a create fails.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:02.115-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:53.470-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:59.710-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9757 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:22.846-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:54.084-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39665"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39142"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39538"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39699"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39518"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39350"/>
          <criterion comment="kernel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39738"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39663"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39536"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39189"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39141"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39179"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9756" version="5" class="vulnerability">
      <metadata>
        <title>CRLF injection vulnerability in Utils.py in Mailman before 2.1.9rc1 allows remote attackers to spoof messages in the error log and possibly trick the administrator into visiting malicious URLs via CRLF sequences in the URI.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4624"/>
        <description>CRLF injection vulnerability in Utils.py in Mailman before 2.1.9rc1 allows remote attackers to spoof messages in the error log and possibly trick the administrator into visiting malicious URLs via CRLF sequences in the URI.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:45.170-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:53.293-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:59.515-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9756 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:25.598-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:53.750-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="mailman is earlier than 3:2.1.5.1-34.rhel4.6" test_ref="oval:org.mitre.oval:tst:34946"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9755" version="3" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent attackers to obtain sensitive information (the cache location) via an untrusted application, aka CR 6704074.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3114" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3114"/>
        <description>Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent attackers to obtain sensitive information (the cache location) via an untrusted application, aka CR 6704074.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:21.914-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:52.840-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:59.098-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37481"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36778"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37475"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37445"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37487"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37483"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.6.0-sun-devel is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36649"/>
            <criterion comment="java-1.6.0-sun is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37229"/>
            <criterion comment="java-1.6.0-sun-demo is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37509"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37426"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37368"/>
            <criterion comment="java-1.6.0-sun-src is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37035"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37181"/>
            <criterion comment="java-1.6.0-sun-plugin is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37441"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37315"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37359"/>
            <criterion comment="java-1.6.0-sun-jdbc is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37490"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37461"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9754" version="5" class="vulnerability">
      <metadata>
        <title>Memory leak in the zlib_stateful_init function in crypto/comp/c_zlib.c in libssl in OpenSSL 0.9.8f through 0.9.8h allows remote attackers to cause a denial of service (memory consumption) via multiple calls, as demonstrated by initial SSL client handshakes to the Apache HTTP Server mod_ssl that specify a compression algorithm.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1678" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1678"/>
        <description>Memory leak in the zlib_stateful_init function in crypto/comp/c_zlib.c in libssl in OpenSSL 0.9.8f through 0.9.8h allows remote attackers to cause a denial of service (memory consumption) via multiple calls, as demonstrated by initial SSL client handshakes to the Apache HTTP Server mod_ssl that specify a compression algorithm.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:47.822-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:52.623-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:58.827-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9754 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:47:06.484-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:53.124-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="httpd-manual is earlier than 0:2.2.3-22.el5_3.1" test_ref="oval:org.mitre.oval:tst:38708"/>
          <criterion comment="httpd-devel is earlier than 0:2.2.3-22.el5_3.1" test_ref="oval:org.mitre.oval:tst:38006"/>
          <criterion comment="mod_ssl is earlier than 0:2.2.3-22.el5_3.1" test_ref="oval:org.mitre.oval:tst:38104"/>
          <criterion comment="httpd is earlier than 0:2.2.3-22.el5_3.1" test_ref="oval:org.mitre.oval:tst:38358"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9753" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows scripts with the UniversalBrowserRead privilege to gain UniversalXPConnect privileges and possibly execute code or obtain sensitive data by reading into a privileged context.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3809" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3809"/>
        <description>Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows scripts with the UniversalBrowserRead privilege to gain UniversalXPConnect privileges and possibly execute code or obtain sensitive data by reading into a privileged context.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:19.804-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:52.136-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:58.334-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9753 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:41.076-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:52.444-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32342"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32877"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:31982"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32816"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32080"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32904"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32915"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32924"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32822"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32555"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32873"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32693"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32886"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32810"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32418"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32496"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32929"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32777"/>
            <criterion comment="firefox is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32896"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32722"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32906"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32905"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32925"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32624"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9752" version="5" class="vulnerability">
      <metadata>
        <title>Multiple scripts in the perl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0976" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0976"/>
        <description>Multiple scripts in the perl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:20.928-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:51.854-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:58.088-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9752 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:08.292-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:52.119-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="perl-suidperl is earlier than 2:5.8.0-90.4" test_ref="oval:org.mitre.oval:tst:32422"/>
          <criterion comment="perl is earlier than 2:5.8.0-90.4" test_ref="oval:org.mitre.oval:tst:32487"/>
          <criterion comment="perl-CPAN is earlier than 2:1.61-90.4" test_ref="oval:org.mitre.oval:tst:32255"/>
          <criterion comment="perl-CGI is earlier than 2:2.89-90.4" test_ref="oval:org.mitre.oval:tst:32543"/>
          <criterion comment="perl-DB_File is earlier than 2:1.806-90.4" test_ref="oval:org.mitre.oval:tst:32488"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9751" version="5" class="vulnerability">
      <metadata>
        <title>The binfmt functionality in the Linux kernel, when "memory overcommit" is enabled, allows local users to cause a denial of service (kernel oops) via a malformed a.out binary.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1074" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1074"/>
        <description>The binfmt functionality in the Linux kernel, when "memory overcommit" is enabled, allows local users to cause a denial of service (kernel oops) via a malformed a.out binary.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:21.515-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:51.578-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:57.738-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9751 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:37.399-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:51.717-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31090"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31317"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31165"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31297"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31259"/>
          <criterion comment="kernel is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:30906"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31029"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31014"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:30920"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9750" version="5" class="vulnerability">
      <metadata>
        <title>wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote malicious web servers to inject terminal escape sequences and execute arbitrary code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1488" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1488"/>
        <description>wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote malicious web servers to inject terminal escape sequences and execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:41.780-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:51.361-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:57.506-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9750 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:05.438-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:51.364-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="wget is earlier than 0:1.10.1-1.30E.1" test_ref="oval:org.mitre.oval:tst:31680"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="wget is earlier than 0:1.10.1-2.4E.1" test_ref="oval:org.mitre.oval:tst:31717"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:975" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat OpenSSL do_change_cipher_spec Function Denial of Service</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>OpenSSL</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0079"/>
        <description>The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:24.326-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:11.788-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="openssl version is less than 0.9.7a-20" negate="false" test_ref="oval:org.mitre.oval:tst:1484"/>
        <criterion comment="openssl-devel version is less than 0.9.7a-20" negate="false" test_ref="oval:org.mitre.oval:tst:1483"/>
        <criterion comment="openssl-perl version is less than 0.9.7a-20" negate="false" test_ref="oval:org.mitre.oval:tst:1482"/>
        <criterion comment="openssl096 version is less than 0.9.6-25.9" negate="false" test_ref="oval:org.mitre.oval:tst:1481"/>
        <criterion comment="openssl096b version is less than 0.9.6b-15" negate="false" test_ref="oval:org.mitre.oval:tst:1480"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9749" version="5" class="vulnerability">
      <metadata>
        <title>A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8, allows remote attackers to execute arbitrary JavaScript as the user via an HTML mail message with a javascript: URI in an (1) img, (2) link, or (3) style tag, which bypasses the access checks and executes code with chrome privileges.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0994" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0994"/>
        <description>A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8, allows remote attackers to execute arbitrary JavaScript as the user via an HTML mail message with a javascript: URI in an (1) img, (2) link, or (3) style tag, which bypasses the access checks and executes code with chrome privileges.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:21.470-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:50.758-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:56.896-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9749 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:24.543-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:50.545-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33391"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33688"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33675"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33724"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33510"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33409"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33467"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33658"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33649"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33381"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:32760"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33554"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33648"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33712"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33705"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33379"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:33400"/>
            <criterion comment="firefox is earlier than 0:1.5.0.10-0.1.el4" test_ref="oval:org.mitre.oval:tst:33759"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33678"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33695"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33697"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33244"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33645"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.10-2.el5" test_ref="oval:org.mitre.oval:tst:33461"/>
            <criterion comment="yelp is earlier than 0:2.16.0-14.0.1.el5" test_ref="oval:org.mitre.oval:tst:33761"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-10.0.1.el5" test_ref="oval:org.mitre.oval:tst:33744"/>
            <criterion comment="devhelp is earlier than 0:0.12-10.0.1.el5" test_ref="oval:org.mitre.oval:tst:33415"/>
            <criterion comment="firefox is earlier than 0:1.5.0.10-2.el5" test_ref="oval:org.mitre.oval:tst:33616"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9748" version="5" class="vulnerability">
      <metadata>
        <title>The sys_get_thread_area function in process.c in Linux 2.6 before 2.6.12.4 and 2.6.13 does not clear a data structure before copying it to userspace, which might allow a user process to obtain sensitive information.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3276" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3276"/>
        <description>The sys_get_thread_area function in process.c in Linux 2.6 before 2.6.12.4 and 2.6.13 does not clear a data structure before copying it to userspace, which might allow a user process to obtain sensitive information.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:10.717-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:50.364-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:56.491-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9748 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:29.513-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:49.951-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:32345"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:32444"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:32109"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:32476"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:32343"/>
            <criterion comment="kernel is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:31877"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:32362"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:32190"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:31899"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32415"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32137"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32528"/>
            <criterion comment="kernel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32205"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:31866"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32446"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32450"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9747" version="5" class="vulnerability">
      <metadata>
        <title>Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic keys, via a timing attack on memory cache misses.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0109" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0109"/>
        <description>Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic keys, via a timing attack on memory cache misses.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:12.987-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:50.003-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:56.183-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9747 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:53:01.374-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:49.525-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.7a-33.17" test_ref="oval:org.mitre.oval:tst:32376"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.7a-33.17" test_ref="oval:org.mitre.oval:tst:32370"/>
            <criterion comment="openssl is earlier than 0:0.9.7a-33.17" test_ref="oval:org.mitre.oval:tst:32357"/>
            <criterion comment="openssl096b is earlier than 0:0.9.6b-16.22.4" test_ref="oval:org.mitre.oval:tst:32193"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.7a-43.4" test_ref="oval:org.mitre.oval:tst:31576"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.7a-43.4" test_ref="oval:org.mitre.oval:tst:31826"/>
            <criterion comment="openssl is earlier than 0:0.9.7a-43.4" test_ref="oval:org.mitre.oval:tst:32196"/>
            <criterion comment="openssl096b is earlier than 0:0.9.6b-22.4" test_ref="oval:org.mitre.oval:tst:32241"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9746" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to gain privileges and install malicious code via the watch Javascript function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6501" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6501"/>
        <description>Unspecified vulnerability in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to gain privileges and install malicious code via the watch Javascript function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:14.895-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:49.515-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:55.625-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9746 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:06.247-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:48.711-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:32785"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33227"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33266"/>
            <criterion comment="seamonkey is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33146"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:32352"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33183"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33095"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33300"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:32996"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33263"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.6.el4" test_ref="oval:org.mitre.oval:tst:33195"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33236"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33229"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.9-0.1.el4" test_ref="oval:org.mitre.oval:tst:32844"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33273"/>
            <criterion comment="seamonkey is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33259"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33239"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.6.el4" test_ref="oval:org.mitre.oval:tst:33284"/>
            <criterion comment="firefox is earlier than 0:1.5.0.9-0.1.el4" test_ref="oval:org.mitre.oval:tst:32815"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33153"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33015"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33251"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33336"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:32408"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9745" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows untrusted Javascript code to read and write to the clipboard, and possibly obtain sensitive information, via script-generated events such as Ctrl-Ins.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0908" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0908"/>
        <description>Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows untrusted Javascript code to read and write to the clipboard, and possibly obtain sensitive information, via script-generated events such as Ctrl-Ins.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:59.722-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:49.223-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:55.319-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9745 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:48.780-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:48.334-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mozilla-js-debugger is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30915"/>
          <criterion comment="mozilla is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30964"/>
          <criterion comment="mozilla-chat is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30905"/>
          <criterion comment="mozilla-mail is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30635"/>
          <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:31000"/>
          <criterion comment="mozilla-devel is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30111"/>
          <criterion comment="mozilla-nss is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30762"/>
          <criterion comment="mozilla-nss-devel is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:31048"/>
          <criterion comment="mozilla-nspr is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30856"/>
          <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30834"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9744" version="5" class="vulnerability">
      <metadata>
        <title>Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service (openssl s_client crash) and possibly have unspecified other impact via a DTLS packet, as demonstrated by a packet from a server that uses a crafted server certificate.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1379" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1379"/>
        <description>Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service (openssl s_client crash) and possibly have unspecified other impact via a DTLS packet, as demonstrated by a packet from a server that uses a crafted server certificate.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:59.468-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:48.972-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:55.095-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9744 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:53.390-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:47.986-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="openssl-perl is earlier than 0:0.9.8e-12.el5" test_ref="oval:org.mitre.oval:tst:39059"/>
          <criterion comment="openssl-devel is earlier than 0:0.9.8e-12.el5" test_ref="oval:org.mitre.oval:tst:38295"/>
          <criterion comment="openssl is earlier than 0:0.9.8e-12.el5" test_ref="oval:org.mitre.oval:tst:38660"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9743" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted TIFF file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1183" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1183"/>
        <description>Integer overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted TIFF file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:57.439-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:48.723-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:54.788-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9743 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:01.351-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:47.616-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libtiff is earlier than 0:3.5.7-22.el3" test_ref="oval:org.mitre.oval:tst:31219"/>
            <criterion comment="libtiff-devel is earlier than 0:3.5.7-22.el3" test_ref="oval:org.mitre.oval:tst:30876"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libtiff is earlier than 0:3.6.1-8" test_ref="oval:org.mitre.oval:tst:31174"/>
            <criterion comment="libtiff-devel is earlier than 0:3.6.1-8" test_ref="oval:org.mitre.oval:tst:30884"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9742" version="5" class="vulnerability">
      <metadata>
        <title>Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file associated with a large integer value for the (1) input or (2) output channel, related to the ReadLUT_A2B and ReadLUT_B2A functions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0733" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0733"/>
        <description>Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file associated with a large integer value for the (1) input or (2) output channel, related to the ReadLUT_A2B and ReadLUT_B2A functions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:58.476-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:48.456-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:54.508-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9742 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:15.253-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:47.239-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="python-lcms is earlier than 0:1.18-0.1.beta1.el5_3.2" test_ref="oval:org.mitre.oval:tst:38555"/>
          <criterion comment="lcms-devel is earlier than 0:1.18-0.1.beta1.el5_3.2" test_ref="oval:org.mitre.oval:tst:37972"/>
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:38276"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37661"/>
          <criterion comment="lcms is earlier than 0:1.18-0.1.beta1.el5_3.2" test_ref="oval:org.mitre.oval:tst:38260"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37652"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37769"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:38561"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9741" version="5" class="vulnerability">
      <metadata>
        <title>Untrusted search path vulnerability in the add_filename_to_string function in intl/gettext/loadmsgcat.c for Elinks 0.11.1 allows local users to cause Elinks to use an untrusted gettext message catalog (.po file) in a "../po" directory, which can be leveraged to conduct format string attacks.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2027"/>
        <description>Untrusted search path vulnerability in the add_filename_to_string function in intl/gettext/loadmsgcat.c for Elinks 0.11.1 allows local users to cause Elinks to use an untrusted gettext message catalog (.po file) in a "../po" directory, which can be leveraged to conduct format string attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:41.854-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:48.236-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:54.271-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9741 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:45.868-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:46.799-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="elinks is earlier than 0:0.9.2-4.el4_8.1" test_ref="oval:org.mitre.oval:tst:39356"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="elinks is earlier than 0:0.11.1-6.el5_4.1" test_ref="oval:org.mitre.oval:tst:39490"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9740" version="5" class="vulnerability">
      <metadata>
        <title>Off-by-one error in the MIME Multipart dissector in Wireshark (formerly Ethereal) 0.10.1 through 0.99.3 allows remote attackers to cause a denial of service (crash) via certain vectors that tragger an assertion error related to unexpected length values.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4574" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4574"/>
        <description>Off-by-one error in the MIME Multipart dissector in Wireshark (formerly Ethereal) 0.10.1 through 0.99.3 allows remote attackers to cause a denial of service (crash) via certain vectors that tragger an assertion error related to unexpected length values.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:03.865-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:47.739-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:53.974-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9740 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:49.858-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:46.422-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.4-EL3.1" test_ref="oval:org.mitre.oval:tst:33205"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.4-EL3.1" test_ref="oval:org.mitre.oval:tst:33170"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.4-EL4.1" test_ref="oval:org.mitre.oval:tst:32550"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.4-EL4.1" test_ref="oval:org.mitre.oval:tst:33152"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:974" version="5" class="vulnerability">
      <metadata>
        <title>IE Frame Domain Verification Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0027"/>
        <description>Internet Explorer 5.5 and 6.0 allows remote attackers to read certain files and spoof the URL in the address bar by using the Document.open function to pass information between two frames from different domains, a new variant of the "Frame Domain Verification" vulnerability described in MS:MS01-058/CAN-2001-0874.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-29T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-05-25T04:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T04:00:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2004-09-22T04:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-09-22T04:01:00.000-04:00" comment="Replaced IE cumulative patch IDs to correspond to the original IDs">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2004-10-06T04:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="Changed IE registry test to wrt-18">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2005-09-20T04:04:00.000-04:00" comment="Changed IE registry test to wrt-18">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:974 - extra operators were removed." date="2014-01-14T17:12:00.581-05:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2014-01-14T17:14:13.246-05:00">INTERIM</status_change>
            <status_change date="2014-02-03T04:04:55.244-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 6 is installed" definition_ref="oval:org.mitre.oval:def:563"/>
        <criterion comment="File %windir%\system32\mshtml.dll version is less than 6.0.2713.1100" test_ref="oval:org.mitre.oval:tst:1451"/>
        <criterion negate="true" comment="Patch Q316059.exe Installed" test_ref="oval:org.mitre.oval:tst:1458"/>
        <criterion negate="true" comment="Patch Q319282 Installed" test_ref="oval:org.mitre.oval:tst:1457"/>
        <criterion negate="true" comment="the patch q321232 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3119"/>
        <criterion negate="true" comment="the patch q323759 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3118"/>
        <criterion negate="true" comment="the patch q328970 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3117"/>
        <criterion negate="true" comment="the patch q324929 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3116"/>
        <criterion negate="true" comment="the patch q810847 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3115"/>
        <criterion negate="true" comment="the patch q813489 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3114"/>
        <criterion negate="true" comment="the patch q818529 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion negate="true" comment="the patch q822925 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion negate="true" comment="the patch q828750 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion negate="true" comment="the patch q824145 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3110"/>
        <criterion negate="true" comment="the patch q832894 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:2588"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9739" version="5" class="vulnerability">
      <metadata>
        <title>PostgreSQL 7.3 before 7.3.13, 7.4 before 7.4.16, 8.0 before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 allows attackers to disable certain checks for the data types of SQL function arguments, which allows remote authenticated users to cause a denial of service (server crash) and possibly access database content.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0555"/>
        <description>PostgreSQL 7.3 before 7.3.13, 7.4 before 7.4.16, 8.0 before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 allows attackers to disable certain checks for the data types of SQL function arguments, which allows remote authenticated users to cause a denial of service (server crash) and possibly access database content.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:22.918-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:47.130-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:52.923-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9739 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:48.712-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:45.588-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="rh-postgresql-devel is earlier than 0:7.3.18-1" test_ref="oval:org.mitre.oval:tst:33558"/>
            <criterion comment="rh-postgresql-server is earlier than 0:7.3.18-1" test_ref="oval:org.mitre.oval:tst:33220"/>
            <criterion comment="rh-postgresql-python is earlier than 0:7.3.18-1" test_ref="oval:org.mitre.oval:tst:33285"/>
            <criterion comment="rh-postgresql-libs is earlier than 0:7.3.18-1" test_ref="oval:org.mitre.oval:tst:33432"/>
            <criterion comment="rh-postgresql-docs is earlier than 0:7.3.18-1" test_ref="oval:org.mitre.oval:tst:33464"/>
            <criterion comment="rh-postgresql-test is earlier than 0:7.3.18-1" test_ref="oval:org.mitre.oval:tst:33104"/>
            <criterion comment="rh-postgresql-pl is earlier than 0:7.3.18-1" test_ref="oval:org.mitre.oval:tst:33317"/>
            <criterion comment="rh-postgresql-tcl is earlier than 0:7.3.18-1" test_ref="oval:org.mitre.oval:tst:33537"/>
            <criterion comment="rh-postgresql is earlier than 0:7.3.18-1" test_ref="oval:org.mitre.oval:tst:33539"/>
            <criterion comment="rh-postgresql-contrib is earlier than 0:7.3.18-1" test_ref="oval:org.mitre.oval:tst:33243"/>
            <criterion comment="rh-postgresql-jdbc is earlier than 0:7.3.18-1" test_ref="oval:org.mitre.oval:tst:33246"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33442"/>
            <criterion comment="postgresql-docs is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33531"/>
            <criterion comment="postgresql-pl is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33065"/>
            <criterion comment="postgresql-tcl is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32982"/>
            <criterion comment="postgresql-libs is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33144"/>
            <criterion comment="postgresql-contrib is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33007"/>
            <criterion comment="postgresql-python is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33534"/>
            <criterion comment="postgresql-test is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33427"/>
            <criterion comment="postgresql-jdbc is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33173"/>
            <criterion comment="postgresql-server is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33069"/>
            <criterion comment="postgresql-devel is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33496"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33181"/>
            <criterion comment="postgresql-docs is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33488"/>
            <criterion comment="postgresql-pl is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33593"/>
            <criterion comment="postgresql-tcl is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33121"/>
            <criterion comment="postgresql-libs is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33568"/>
            <criterion comment="postgresql-contrib is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33396"/>
            <criterion comment="postgresql-python is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33603"/>
            <criterion comment="postgresql-test is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:32610"/>
            <criterion comment="postgresql-server is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:32997"/>
            <criterion comment="postgresql-devel is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33536"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9738" version="5" class="vulnerability">
      <metadata>
        <title>A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when N_Port ID Virtualization (NPIV) hardware is used, sets world-writable permissions for the (1) vport_create and (2) vport_delete files under /sys/class/scsi_host/, which allows local users to make arbitrary changes to SCSI host attributes by modifying these files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3556"/>
        <description>A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when N_Port ID Virtualization (NPIV) hardware is used, sets world-writable permissions for the (1) vport_create and (2) vport_delete files under /sys/class/scsi_host/, which allows local users to make arbitrary changes to SCSI host attributes by modifying these files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:25.665-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:46.778-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:52.590-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9738 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:41.314-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:45.148-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40050"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39464"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39090"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40063"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39443"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39703"/>
          <criterion comment="kernel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39080"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39862"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40057"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40029"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39849"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40039"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9737" version="5" class="vulnerability">
      <metadata>
        <title>KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete certificates via (1) a certain delete message that is not properly handled in isakmp.c or isakmp_inf.c, or (2) a certain INITIAL-CONTACT message that is not properly handled in isakmp_inf.c.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0164" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0164"/>
        <description>KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete certificates via (1) a certain delete message that is not properly handled in isakmp.c or isakmp_inf.c, or (2) a certain INITIAL-CONTACT message that is not properly handled in isakmp_inf.c.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:26.406-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:46.573-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:52.396-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9737 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:39.224-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:44.817-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="ipsec-tools is earlier than 0:0.2.5-0.4" test_ref="oval:org.mitre.oval:tst:30611"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9736" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the SGI parser in ImageMagick before 6.0 allows remote attackers to execute arbitrary code via a crafted SGI image file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0762" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0762"/>
        <description>Heap-based buffer overflow in the SGI parser in ImageMagick before 6.0 allows remote attackers to execute arbitrary code via a crafted SGI image file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:30.604-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:46.345-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:52.156-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9736 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:26.567-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:44.505-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="ImageMagick-c++-devel is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30471"/>
          <criterion comment="ImageMagick is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30355"/>
          <criterion comment="ImageMagick-perl is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30877"/>
          <criterion comment="ImageMagick-devel is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30918"/>
          <criterion comment="ImageMagick-c++ is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30938"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9735" version="5" class="vulnerability">
      <metadata>
        <title>The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x86_64 architecture, does not zero extend the eax register after the 32bit entry path to ptrace is used, which might allow local users to gain privileges by triggering an out-of-bounds access to the system call table using the %RAX register.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4573" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4573"/>
        <description>The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x86_64 architecture, does not zero extend the eax register after the 32bit entry path to ptrace is used, which might allow local users to gain privileges by triggering an out-of-bounds access to the system call table using the %RAX register.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:46.151-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:45.691-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:51.467-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9735 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:32.084-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:43.668-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-52.EL" test_ref="oval:org.mitre.oval:tst:34612"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-52.EL" test_ref="oval:org.mitre.oval:tst:35360"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-52.EL" test_ref="oval:org.mitre.oval:tst:35290"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-52.EL" test_ref="oval:org.mitre.oval:tst:35242"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-52.EL" test_ref="oval:org.mitre.oval:tst:35278"/>
            <criterion comment="kernel is earlier than 0:2.4.21-52.EL" test_ref="oval:org.mitre.oval:tst:35340"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-52.EL" test_ref="oval:org.mitre.oval:tst:34986"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-52.EL" test_ref="oval:org.mitre.oval:tst:35236"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-52.EL" test_ref="oval:org.mitre.oval:tst:35318"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-55.0.9.EL" test_ref="oval:org.mitre.oval:tst:35329"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-55.0.9.EL" test_ref="oval:org.mitre.oval:tst:35328"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.0.9.EL" test_ref="oval:org.mitre.oval:tst:35371"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-55.0.9.EL" test_ref="oval:org.mitre.oval:tst:35052"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-55.0.9.EL" test_ref="oval:org.mitre.oval:tst:34704"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.0.9.EL" test_ref="oval:org.mitre.oval:tst:35333"/>
            <criterion comment="kernel is earlier than 0:2.6.9-55.0.9.EL" test_ref="oval:org.mitre.oval:tst:35379"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-55.0.9.EL" test_ref="oval:org.mitre.oval:tst:34761"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-55.0.9.EL" test_ref="oval:org.mitre.oval:tst:35277"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-55.0.9.EL" test_ref="oval:org.mitre.oval:tst:35265"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-55.0.9.EL" test_ref="oval:org.mitre.oval:tst:35040"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.14.el5" test_ref="oval:org.mitre.oval:tst:35220"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.14.el5" test_ref="oval:org.mitre.oval:tst:35380"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.14.el5" test_ref="oval:org.mitre.oval:tst:34544"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.14.el5" test_ref="oval:org.mitre.oval:tst:35347"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.14.el5" test_ref="oval:org.mitre.oval:tst:35287"/>
            <criterion comment="kernel is earlier than 0:2.6.18-8.1.14.el5" test_ref="oval:org.mitre.oval:tst:34472"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.14.el5" test_ref="oval:org.mitre.oval:tst:35307"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.14.el5" test_ref="oval:org.mitre.oval:tst:34914"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.14.el5" test_ref="oval:org.mitre.oval:tst:35213"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.14.el5" test_ref="oval:org.mitre.oval:tst:34797"/>
            <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.14.el5" test_ref="oval:org.mitre.oval:tst:35297"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9734" version="5" class="vulnerability">
      <metadata>
        <title>The nfs4_proc_lock function in fs/nfs/nfs4proc.c in the NFSv4 client in the Linux kernel before 2.6.31-rc4 allows remote NFS servers to cause a denial of service (NULL pointer dereference and panic) by sending a certain response containing incorrect file attributes, which trigger attempted use of an open file that lacks NFSv4 state.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3726" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3726"/>
        <description>The nfs4_proc_lock function in fs/nfs/nfs4proc.c in the NFSv4 client in the Linux kernel before 2.6.31-rc4 allows remote NFS servers to cause a denial of service (NULL pointer dereference and panic) by sending a certain response containing incorrect file attributes, which trigger attempted use of an open file that lacks NFSv4 state.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:40.562-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:45.206-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:50.917-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9734 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:23.267-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:42.954-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40810"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40798"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40737"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40705"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40784"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40711"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40801"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40491"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40523"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40665"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40648"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39674"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39635"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39630"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39766"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39742"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39295"/>
            <criterion comment="kernel is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:38900"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39772"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39784"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39625"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39731"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39509"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9733" version="5" class="vulnerability">
      <metadata>
        <title>The NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0888" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0888"/>
        <description>The NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:22.441-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:44.963-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:50.720-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9733 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:53:10.955-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:42.685-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="unzip is earlier than 0:5.50-36.EL3" test_ref="oval:org.mitre.oval:tst:36585"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9732" version="5" class="vulnerability">
      <metadata>
        <title>Linux kernel before 2.6.16.5 does not properly handle uncanonical return addresses on Intel EM64T CPUs, which reports an exception in the SYSRET instead of the next instruction, which causes the kernel exception handler to run on the user stack with the wrong GS.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0744" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0744"/>
        <description>Linux kernel before 2.6.16.5 does not properly handle uncanonical return addresses on Intel EM64T CPUs, which reports an exception in the SYSRET instead of the next instruction, which causes the kernel exception handler to run on the user stack with the wrong GS.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:20.574-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:44.552-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:50.295-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9732 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:43.565-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:42.130-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32158"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32589"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32704"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32562"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32078"/>
            <criterion comment="kernel is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32513"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32231"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32097"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32708"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32235"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32371"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32703"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32314"/>
            <criterion comment="kernel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32614"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32295"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32310"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32611"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32305"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9731" version="3" class="vulnerability">
      <metadata>
        <title>The DOC.print function in the Adobe JavaScript API, as used by Adobe Acrobat and Reader before 8.1.2, allows remote attackers to configure silent non-interactive printing, and trigger the printing of an arbitrary number of copies of a document.  NOTE: this issue might be subsumed by CVE-2008-0655.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0667" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0667"/>
        <description>The DOC.print function in the Adobe JavaScript API, as used by Adobe Acrobat and Reader before 8.1.2, allows remote attackers to configure silent non-interactive printing, and trigger the printing of an arbitrary number of copies of a document.  NOTE: this issue might be subsumed by CVE-2008-0655.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:47.374-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:44.267-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:49.970-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criteria operator="OR">
            <criterion comment="acroread-plugin is earlier than 0:8.1.2-1.el3.6" test_ref="oval:org.mitre.oval:tst:36324"/>
            <criterion comment="acroread is earlier than 0:8.1.2-1.el3.6" test_ref="oval:org.mitre.oval:tst:36153"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="acroread-plugin is earlier than 0:8.1.2-1.el4.2" test_ref="oval:org.mitre.oval:tst:36156"/>
            <criterion comment="acroread is earlier than 0:8.1.2-1.el4.2" test_ref="oval:org.mitre.oval:tst:36293"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="acroread-plugin is earlier than 0:8.1.2-1.el5.3" test_ref="oval:org.mitre.oval:tst:35792"/>
            <criterion comment="acroread is earlier than 0:8.1.2-1.el5.3" test_ref="oval:org.mitre.oval:tst:35912"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9730" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla based browsers, including Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8, allow remote attackers to bypass the same origin policy, steal cookies, and conduct other attacks by writing a URI with a null byte to the hostname (location.hostname) DOM property, due to interactions with DNS resolver code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0981" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0981"/>
        <description>Mozilla based browsers, including Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8, allow remote attackers to bypass the same origin policy, steal cookies, and conduct other attacks by writing a URI with a null byte to the hostname (location.hostname) DOM property, due to interactions with DNS resolver code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:27.304-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:43.616-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:49.381-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9730 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:38.157-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:41.312-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33391"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33688"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33675"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33724"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33510"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33409"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33467"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33658"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33649"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33381"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:32760"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33554"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33648"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.10-0.1.el4" test_ref="oval:org.mitre.oval:tst:32765"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33712"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33705"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33379"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:33400"/>
            <criterion comment="firefox is earlier than 0:1.5.0.10-0.1.el4" test_ref="oval:org.mitre.oval:tst:33759"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33678"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33695"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33697"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33244"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33645"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.10-2.el5" test_ref="oval:org.mitre.oval:tst:33461"/>
            <criterion comment="yelp is earlier than 0:2.16.0-14.0.1.el5" test_ref="oval:org.mitre.oval:tst:33761"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-10.0.1.el5" test_ref="oval:org.mitre.oval:tst:33744"/>
            <criterion comment="devhelp is earlier than 0:0.12-10.0.1.el5" test_ref="oval:org.mitre.oval:tst:33415"/>
            <criterion comment="firefox is earlier than 0:1.5.0.10-2.el5" test_ref="oval:org.mitre.oval:tst:33616"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.10-1.el5" test_ref="oval:org.mitre.oval:tst:33493"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9729" version="3" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 6 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, and SDK and JRE 1.3.1_18 and earlier allows attackers to use untrusted applets to "access data in other applets," aka "The second issue."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6736" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6736"/>
        <description>Unspecified vulnerability in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 6 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, and SDK and JRE 1.3.1_18 and earlier allows attackers to use untrusted applets to "access data in other applets," aka "The second issue."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:31.770-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:43.187-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:48.889-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criteria operator="OR">
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33298"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33521"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33376"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33428"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33515"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33417"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:32803"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33585"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33064"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33481"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33563"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33479"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33472"/>
            <criterion comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:32903"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33667"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33199"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33754"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33366"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33073"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33547"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9728" version="5" class="vulnerability">
      <metadata>
        <title>The GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via a GIF image that has no global color map.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3475"/>
        <description>The GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via a GIF image that has no global color map.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:04.145-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:42.867-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:48.609-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9728 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:46.340-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:40.841-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gd is earlier than 0:2.0.28-5.4E.el4_6.1" test_ref="oval:org.mitre.oval:tst:36386"/>
            <criterion comment="gd-devel is earlier than 0:2.0.28-5.4E.el4_6.1" test_ref="oval:org.mitre.oval:tst:36408"/>
            <criterion comment="gd-progs is earlier than 0:2.0.28-5.4E.el4_6.1" test_ref="oval:org.mitre.oval:tst:35731"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gd is earlier than 0:2.0.33-9.4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36297"/>
            <criterion comment="gd-devel is earlier than 0:2.0.33-9.4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36448"/>
            <criterion comment="gd-progs is earlier than 0:2.0.33-9.4.el5_1.1" test_ref="oval:org.mitre.oval:tst:35759"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9727" version="5" class="vulnerability">
      <metadata>
        <title>The time_out_leases function in locks.c for Linux kernel before 2.6.15-rc3 allows local users to cause a denial of service (kernel log message consumption) by causing a large number of broken leases, which is recorded to the log using the printk function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3857" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3857"/>
        <description>The time_out_leases function in locks.c for Linux kernel before 2.6.15-rc3 allows local users to cause a denial of service (kernel log message consumption) by causing a large number of broken leases, which is recorded to the log using the printk function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:13.802-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:42.478-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:48.199-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9727 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:02:01.558-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:40.320-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32525"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32366"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32381"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32215"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32464"/>
            <criterion comment="kernel is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32288"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:31978"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32438"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32070"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32415"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32137"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32528"/>
            <criterion comment="kernel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32205"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:31866"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32446"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32450"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9726" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the ANSI MAP dissector for Wireshark (formerly Ethereal) 0.99.5 to 0.99.6, when running on unspecified platforms, allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6115" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6115"/>
        <description>Buffer overflow in the ANSI MAP dissector for Wireshark (formerly Ethereal) 0.99.5 to 0.99.6, when running on unspecified platforms, allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:43.583-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:42.112-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:47.777-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9726 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:35.429-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:39.714-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-EL3.1" test_ref="oval:org.mitre.oval:tst:36111"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-EL3.1" test_ref="oval:org.mitre.oval:tst:36043"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-3.el3" test_ref="oval:org.mitre.oval:tst:35411"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-3.el3" test_ref="oval:org.mitre.oval:tst:36140"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:36051"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:35980"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35669"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35941"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:35709"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:36120"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35712"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35801"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9725" version="5" class="vulnerability">
      <metadata>
        <title>Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via regex patterns containing unmatched "\Q\E" sequences with orphan "\E" codes.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1659" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1659"/>
        <description>Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via regex patterns containing unmatched "\Q\E" sequences with orphan "\E" codes.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:22.361-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:41.834-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:47.524-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9725 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:28.461-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:39.300-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="pcre-devel is earlier than 0:4.5-4.el4_6.6" test_ref="oval:org.mitre.oval:tst:35615"/>
            <criterion comment="pcre is earlier than 0:4.5-4.el4_6.6" test_ref="oval:org.mitre.oval:tst:35501"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="pcre-devel is earlier than 0:6.6-2.el5_0.1" test_ref="oval:org.mitre.oval:tst:35420"/>
            <criterion comment="pcre is earlier than 0:6.6-2.el5_0.1" test_ref="oval:org.mitre.oval:tst:35187"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9724" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the imageloadfont function in ext/gd/gd.c in PHP 4.4.x before 4.4.9 and PHP 5.2 before 5.2.6-r6 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3658"/>
        <description>Buffer overflow in the imageloadfont function in ext/gd/gd.c in PHP 4.4.x before 4.4.9 and PHP 5.2 before 5.2.6-r6 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:05.665-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:41.136-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:46.762-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9724 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:46.798-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:38.176-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:38010"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37683"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37468"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37994"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37569"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37746"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37938"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38324"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38288"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38029"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:37974"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38154"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38499"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38401"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38018"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38505"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38494"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38075"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38387"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38058"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38202"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38147"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38305"/>
            <criterion comment="php-common is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38268"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38298"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:37882"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:37952"/>
            <criterion comment="php is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38099"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38415"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38511"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38115"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38367"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38569"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38440"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38536"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38507"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38316"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38493"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:37667"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38421"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9723" version="6" class="vulnerability">
      <metadata>
        <title>The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % (percent) character without two subsequent hex characters, which allows context-dependent attackers to obtain sensitive information from cupsd process memory via a crafted request, as demonstated by the (1) /admin?OP=redirectURL=% and (2) /admin?URL=/admin/OP=% URIs.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1748" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1748"/>
        <description>The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % (percent) character without two subsequent hex characters, which allows context-dependent attackers to obtain sensitive information from cupsd process memory via a crafted request, as demonstrated by the (1) /admin?OP=redirect&amp;URL=% and (2) /admin?URL=/admin/&amp;OP=% URIs.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:34.305-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:40.724-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:46.408-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9723 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:55.637-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:37.596-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.65" test_ref="oval:org.mitre.oval:tst:40547"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.65" test_ref="oval:org.mitre.oval:tst:40758"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.65" test_ref="oval:org.mitre.oval:tst:40348"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.32.el4_8.6" test_ref="oval:org.mitre.oval:tst:40606"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.32.el4_8.6" test_ref="oval:org.mitre.oval:tst:40609"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.32.el4_8.6" test_ref="oval:org.mitre.oval:tst:40697"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-lpd is earlier than 1:1.3.7-18.el5_5.4" test_ref="oval:org.mitre.oval:tst:40805"/>
            <criterion comment="cups-devel is earlier than 1:1.3.7-18.el5_5.4" test_ref="oval:org.mitre.oval:tst:40819"/>
            <criterion comment="cups is earlier than 1:1.3.7-18.el5_5.4" test_ref="oval:org.mitre.oval:tst:40803"/>
            <criterion comment="cups-libs is earlier than 1:1.3.7-18.el5_5.4" test_ref="oval:org.mitre.oval:tst:40393"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9722" version="5" class="vulnerability">
      <metadata>
        <title>Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to (1) all of the *print functions on 64-bit systems, and (2) the odbc_result_all function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0909" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0909"/>
        <description>Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to (1) all of the *print functions on 64-bit systems, and (2) the odbc_result_all function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:01.285-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:39.971-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:45.626-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9722 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:20.800-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:36.622-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33459"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33371"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33748"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33090"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33419"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33665"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33475"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33282"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33636"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33548"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33156"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33407"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33562"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33500"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33725"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33105"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33501"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33691"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33662"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33087"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33640"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:32784"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33240"/>
            <criterion comment="php-common is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33527"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33617"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33561"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33385"/>
            <criterion comment="php is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33615"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33526"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33747"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33735"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33403"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33686"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33502"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33666"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33508"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33652"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33676"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33784"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33706"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9721" version="5" class="vulnerability">
      <metadata>
        <title>The SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of service (process crash) via a (1) malformed or (2) missing community string, which causes an out-of-bounds read.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0635" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0635"/>
        <description>The SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of service (process crash) via a (1) malformed or (2) missing community string, which causes an out-of-bounds read.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:44.142-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:39.766-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:45.419-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9721 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:42.487-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:36.335-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="ethereal-gnome is earlier than 0:0.10.5-0.30E.2" test_ref="oval:org.mitre.oval:tst:29799"/>
          <criterion comment="ethereal is earlier than 0:0.10.5-0.30E.2" test_ref="oval:org.mitre.oval:tst:30522"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9720" version="5" class="vulnerability">
      <metadata>
        <title>The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticated users to cause a denial of service (daemon crash) or have unspecified other impact via vectors involving a negative integer in the third argument, as demonstrated by a SELECT statement that contains a call to the substring function for a bit string, related to an "overflow."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0442" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0442"/>
        <description>The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticated users to cause a denial of service (daemon crash) or have unspecified other impact via vectors involving a negative integer in the third argument, as demonstrated by a SELECT statement that contains a call to the substring function for a bit string, related to an "overflow."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:29.228-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:39.164-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:44.765-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9720 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:59.782-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:35.507-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="rh-postgresql-devel is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40180"/>
            <criterion comment="rh-postgresql-server is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40440"/>
            <criterion comment="rh-postgresql-python is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40426"/>
            <criterion comment="rh-postgresql-libs is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40220"/>
            <criterion comment="rh-postgresql-docs is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:39618"/>
            <criterion comment="rh-postgresql-test is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40140"/>
            <criterion comment="rh-postgresql-pl is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40502"/>
            <criterion comment="rh-postgresql-tcl is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:39925"/>
            <criterion comment="rh-postgresql is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40137"/>
            <criterion comment="rh-postgresql-contrib is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40551"/>
            <criterion comment="rh-postgresql-jdbc is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40106"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40486"/>
            <criterion comment="postgresql-docs is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40521"/>
            <criterion comment="postgresql-pl is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40292"/>
            <criterion comment="postgresql-tcl is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40516"/>
            <criterion comment="postgresql-libs is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40066"/>
            <criterion comment="postgresql-contrib is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40399"/>
            <criterion comment="postgresql-python is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40512"/>
            <criterion comment="postgresql-test is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40314"/>
            <criterion comment="postgresql-jdbc is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40428"/>
            <criterion comment="postgresql-server is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40366"/>
            <criterion comment="postgresql-devel is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40465"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40401"/>
            <criterion comment="postgresql-docs is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40402"/>
            <criterion comment="postgresql-pl is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40538"/>
            <criterion comment="postgresql-tcl is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:39839"/>
            <criterion comment="postgresql-libs is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40515"/>
            <criterion comment="postgresql-contrib is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40505"/>
            <criterion comment="postgresql-python is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40251"/>
            <criterion comment="postgresql-test is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40253"/>
            <criterion comment="postgresql-server is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40509"/>
            <criterion comment="postgresql-devel is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40309"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:972" version="1" class="vulnerability">
      <metadata>
        <title>tcpdump Delete Payload in ISAKMP Packets Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0183" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0183"/>
        <description>TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with a large number of SPI's, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-06-10T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-06-30T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-07-12T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2483"/>
          <criterion comment="tcpdump version is less than 3.7.2-7.E3.2" negate="false" test_ref="oval:org.mitre.oval:tst:1374"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/sbin/tcpdump is executable">
            <criterion comment="/usr/sbin/tcpdump is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1373"/>
            <criterion comment="/usr/sbin/tcpdump is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1372"/>
            <criterion comment="/usr/sbin/tcpdump is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1371"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9719" version="5" class="vulnerability">
      <metadata>
        <title>Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious (1) .mailcap and (2) mime.types files in the current working directory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-7234" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-7234"/>
        <description>Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious (1) .mailcap and (2) mime.types files in the current working directory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:11.863-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:38.830-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:44.499-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9719 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:48.421-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:34.999-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="lynx is earlier than 0:2.8.5-11.3" test_ref="oval:org.mitre.oval:tst:37424"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="lynx is earlier than 0:2.8.5-18.2.el4_7.1" test_ref="oval:org.mitre.oval:tst:37925"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="lynx is earlier than 0:2.8.5-28.1.el5_2.1" test_ref="oval:org.mitre.oval:tst:37898"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9718" version="5" class="vulnerability">
      <metadata>
        <title>Multiple array index errors in set.c in dvipng 1.11 and 1.12, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed DVI file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0829" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0829"/>
        <description>Multiple array index errors in set.c in dvipng 1.11 and 1.12, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed DVI file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:03.523-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:38.572-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:44.233-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9718 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:17.140-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:34.641-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="tetex-latex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40444"/>
          <criterion comment="tetex-afm is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40008"/>
          <criterion comment="tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:39920"/>
          <criterion comment="tetex-dvips is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40312"/>
          <criterion comment="tetex-doc is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40398"/>
          <criterion comment="tetex-fonts is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40122"/>
          <criterion comment="tetex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40413"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9717" version="5" class="vulnerability">
      <metadata>
        <title>sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods, which could cause those credentials to be exposed to untrusted users or hosts.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2798" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2798"/>
        <description>sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods, which could cause those credentials to be exposed to untrusted users or hosts.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:54.951-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:38.343-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:43.943-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9717 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:48.765-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:34.298-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="openssh is earlier than 0:3.9p1-8.RHEL4.9" test_ref="oval:org.mitre.oval:tst:31991"/>
          <criterion comment="openssh-askpass is earlier than 0:3.9p1-8.RHEL4.9" test_ref="oval:org.mitre.oval:tst:31339"/>
          <criterion comment="openssh-server is earlier than 0:3.9p1-8.RHEL4.9" test_ref="oval:org.mitre.oval:tst:31258"/>
          <criterion comment="openssh-clients is earlier than 0:3.9p1-8.RHEL4.9" test_ref="oval:org.mitre.oval:tst:32054"/>
          <criterion comment="openssh-askpass-gnome is earlier than 0:3.9p1-8.RHEL4.9" test_ref="oval:org.mitre.oval:tst:31494"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9716" version="5" class="vulnerability">
      <metadata>
        <title>agent/snmp_agent.c in snmpd in net-snmp 5.0.9 in Red Hat Enterprise Linux (RHEL) 3 allows remote attackers to cause a denial of service (daemon crash) via a crafted SNMP GETBULK request that triggers a divide-by-zero error.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-4309.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1887" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1887"/>
        <description>agent/snmp_agent.c in snmpd in net-snmp 5.0.9 in Red Hat Enterprise Linux (RHEL) 3 allows remote attackers to cause a denial of service (daemon crash) via a crafted SNMP GETBULK request that triggers a divide-by-zero error.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-4309.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:17.666-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:38.104-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:43.698-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9716 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:24.480-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:33.956-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="net-snmp-utils is earlier than 0:5.0.9-2.30E.28" test_ref="oval:org.mitre.oval:tst:38756"/>
          <criterion comment="net-snmp is earlier than 0:5.0.9-2.30E.28" test_ref="oval:org.mitre.oval:tst:38263"/>
          <criterion comment="net-snmp-libs is earlier than 0:5.0.9-2.30E.28" test_ref="oval:org.mitre.oval:tst:38869"/>
          <criterion comment="net-snmp-perl is earlier than 0:5.0.9-2.30E.28" test_ref="oval:org.mitre.oval:tst:38866"/>
          <criterion comment="net-snmp-devel is earlier than 0:5.0.9-2.30E.28" test_ref="oval:org.mitre.oval:tst:38753"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9715" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in the find_keyring_by_name function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlier allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via keyctl session commands that trigger access to a dead keyring that is undergoing deletion by the key_cleanup function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1437" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1437"/>
        <description>Race condition in the find_keyring_by_name function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlier allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via keyctl session commands that trigger access to a dead keyring that is undergoing deletion by the key_cleanup function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:31.740-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:37.468-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:43.062-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9715 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:01.969-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:33.324-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40810"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40798"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40737"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40705"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40784"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40711"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40801"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40491"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40523"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40665"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40648"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40501"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40283"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40807"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40842"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40793"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40732"/>
            <criterion comment="kernel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40830"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40349"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:39978"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:39896"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40791"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40580"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9714" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0888" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0888"/>
        <description>Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:38.808-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:37.126-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:42.676-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9714 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:02:10.645-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:32.792-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31559"/>
            <criterion comment="tetex-dvips is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31693"/>
            <criterion comment="tetex-fonts is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31615"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.16" test_ref="oval:org.mitre.oval:tst:30852"/>
            <criterion comment="tetex is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31603"/>
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.16" test_ref="oval:org.mitre.oval:tst:31062"/>
            <criterion comment="tetex-afm is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31685"/>
            <criterion comment="xpdf is earlier than 1:2.02-9.3" test_ref="oval:org.mitre.oval:tst:31089"/>
            <criterion comment="tetex-xdvi is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31747"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.16" test_ref="oval:org.mitre.oval:tst:30949"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-3.3" test_ref="oval:org.mitre.oval:tst:31263"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-3.3" test_ref="oval:org.mitre.oval:tst:31323"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9713" version="5" class="vulnerability">
      <metadata>
        <title>Double free vulnerability in the ICEP dissector in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1462" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1462"/>
        <description>Double free vulnerability in the ICEP dissector in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:39.744-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:36.823-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:42.423-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9713 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:19.469-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:32.415-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31458"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31546"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31674"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31865"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9712" version="5" class="vulnerability">
      <metadata>
        <title>Lynx 2.8.5, and other versions before 2.8.6dev.15, allows remote attackers to execute arbitrary commands via (1) lynxcgi:, (2) lynxexec, and (3) lynxprog links, which are not properly restricted in the default configuration in some environments.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2929" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2929"/>
        <description>Lynx 2.8.5, and other versions before 2.8.6dev.15, allows remote attackers to execute arbitrary commands via (1) lynxcgi:, (2) lynxexec, and (3) lynxprog links, which are not properly restricted in the default configuration in some environments.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:17.736-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:36.606-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:42.195-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9712 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:50.785-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:32.013-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="lynx is earlier than 0:2.8.5-11.2" test_ref="oval:org.mitre.oval:tst:32358"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="lynx is earlier than 0:2.8.5-18.2" test_ref="oval:org.mitre.oval:tst:32237"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9711" version="5" class="vulnerability">
      <metadata>
        <title>Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-2479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2479"/>
        <description>Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:33.643-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:36.391-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:41.919-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9711 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:52.444-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:31.665-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE3-6.3E.14" test_ref="oval:org.mitre.oval:tst:32129"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE6-3.4E.11" test_ref="oval:org.mitre.oval:tst:32053"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9710" version="5" class="vulnerability">
      <metadata>
        <title>Double free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote attackers to cause a denial of service (crash) via a crafted BMP image.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0891" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0891"/>
        <description>Double free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote attackers to cause a denial of service (crash) via a crafted BMP image.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:45.459-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:36.080-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:41.609-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9710 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:26.457-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:31.220-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gdk-pixbuf-devel is earlier than 1:0.22.0-12.el3" test_ref="oval:org.mitre.oval:tst:31425"/>
            <criterion comment="gtk2 is earlier than 0:2.2.4-15" test_ref="oval:org.mitre.oval:tst:31683"/>
            <criterion comment="gdk-pixbuf-gnome is earlier than 1:0.22.0-12.el3" test_ref="oval:org.mitre.oval:tst:31384"/>
            <criterion comment="gdk-pixbuf is earlier than 1:0.22.0-12.el3" test_ref="oval:org.mitre.oval:tst:31449"/>
            <criterion comment="gtk2-devel is earlier than 0:2.2.4-15" test_ref="oval:org.mitre.oval:tst:31230"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gdk-pixbuf-devel is earlier than 1:0.22.0-16.el4" test_ref="oval:org.mitre.oval:tst:31640"/>
            <criterion comment="gtk2 is earlier than 0:2.4.13-14" test_ref="oval:org.mitre.oval:tst:31176"/>
            <criterion comment="gdk-pixbuf is earlier than 1:0.22.0-16.el4" test_ref="oval:org.mitre.oval:tst:31509"/>
            <criterion comment="gtk2-devel is earlier than 0:2.4.13-14" test_ref="oval:org.mitre.oval:tst:31725"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:971" version="2" class="vulnerability">
      <metadata>
        <title>libpng Malformed PNG Image Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0421" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0421"/>
        <description>The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:34.590-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:11.593-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criteria operator="OR" comment="libpng/libpng-devel is less than 1.2.2-21 or libpng10/libpng-devel less than 1.0.13 is installed">
          <criterion comment="libpng version is less than 1.2.2-21" negate="false" test_ref="oval:org.mitre.oval:tst:1378"/>
          <criterion comment="libpng-devel version is less than 1.2.2-21" negate="false" test_ref="oval:org.mitre.oval:tst:1377"/>
          <criterion comment="libpng10 version is less than 1.0.13-12" negate="false" test_ref="oval:org.mitre.oval:tst:1376"/>
          <criterion comment="libpng10-devel version is less than 1.0.13-12" negate="false" test_ref="oval:org.mitre.oval:tst:1375"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9709" version="5" class="vulnerability">
      <metadata>
        <title>VFS in the Linux kernel before 2.6.22.16, and 2.6.23.x before 2.6.23.14, performs tests of access mode by using the flag variable instead of the acc_mode variable, which might allow local users to bypass intended permissions and remove directories.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0001" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0001"/>
        <description>VFS in the Linux kernel before 2.6.22.16, and 2.6.23.x before 2.6.23.14, performs tests of access mode by using the flag variable instead of the acc_mode variable, which might allow local users to bypass intended permissions and remove directories.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:01.857-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:35.534-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:41.103-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9709 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:32.989-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:30.531-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:36090"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35525"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35832"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35126"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35901"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:36007"/>
            <criterion comment="kernel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35982"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:36072"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:36041"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35364"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35662"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36030"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:35766"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36138"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36062"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:35611"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:35990"/>
            <criterion comment="kernel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:35969"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36085"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36026"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36084"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36097"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36035"/>
            <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:35648"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9708" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the slc_add_reply function in various BSD-based Telnet clients, when handling LINEMODE suboptions, allows remote attackers to execute arbitrary code via a reply with a large number of Set Local Character (SLC) commands.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0469" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0469"/>
        <description>Buffer overflow in the slc_add_reply function in various BSD-based Telnet clients, when handling LINEMODE suboptions, allows remote attackers to execute arbitrary code via a reply with a large number of Set Local Character (SLC) commands.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:10.721-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:35.173-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:40.689-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9708 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:27.634-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:29.965-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.2.7-42" test_ref="oval:org.mitre.oval:tst:31573"/>
            <criterion comment="krb5 is earlier than 0:1.2.7-42" test_ref="oval:org.mitre.oval:tst:31050"/>
            <criterion comment="krb5-libs is earlier than 0:1.2.7-42" test_ref="oval:org.mitre.oval:tst:31373"/>
            <criterion comment="telnet is earlier than 1:0.17-26.EL3.2" test_ref="oval:org.mitre.oval:tst:31054"/>
            <criterion comment="krb5-server is earlier than 0:1.2.7-42" test_ref="oval:org.mitre.oval:tst:31472"/>
            <criterion comment="telnet-server is earlier than 1:0.17-26.EL3.2" test_ref="oval:org.mitre.oval:tst:31463"/>
            <criterion comment="krb5-devel is earlier than 0:1.2.7-42" test_ref="oval:org.mitre.oval:tst:31015"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.3.4-12" test_ref="oval:org.mitre.oval:tst:31409"/>
            <criterion comment="krb5 is earlier than 0:1.3.4-12" test_ref="oval:org.mitre.oval:tst:30952"/>
            <criterion comment="krb5-libs is earlier than 0:1.3.4-12" test_ref="oval:org.mitre.oval:tst:31575"/>
            <criterion comment="telnet is earlier than 1:0.17-31.EL4.2" test_ref="oval:org.mitre.oval:tst:31498"/>
            <criterion comment="krb5-server is earlier than 0:1.3.4-12" test_ref="oval:org.mitre.oval:tst:31481"/>
            <criterion comment="telnet-server is earlier than 1:0.17-31.EL4.2" test_ref="oval:org.mitre.oval:tst:31275"/>
            <criterion comment="krb5-devel is earlier than 0:1.3.4-12" test_ref="oval:org.mitre.oval:tst:31526"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9707" version="5" class="vulnerability">
      <metadata>
        <title>Various routines for the ppc64 architecture on Linux kernel 2.6 prior to 2.6.2 and 2.4 prior to 2.4.24 do not use the copy_from_user function when copying data from userspace to kernelspace, which crosses security boundaries and allows local users to cause a denial of service.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0986" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0986"/>
        <description>Various routines for the ppc64 architecture on Linux kernel 2.6 prior to 2.6.2 and 2.4 prior to 2.4.24 do not use the copy_from_user function when copying data from userspace to kernelspace, which crosses security boundaries and allows local users to cause a denial of service.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:58.326-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:34.853-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:40.400-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9707 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:47.733-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:29.602-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-9.EL" test_ref="oval:org.mitre.oval:tst:30492"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-9.EL" test_ref="oval:org.mitre.oval:tst:30319"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-9.EL" test_ref="oval:org.mitre.oval:tst:30091"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-9.EL" test_ref="oval:org.mitre.oval:tst:30430"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-9.EL" test_ref="oval:org.mitre.oval:tst:30603"/>
          <criterion comment="kernel is earlier than 0:2.4.21-9.EL" test_ref="oval:org.mitre.oval:tst:30486"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-9.EL" test_ref="oval:org.mitre.oval:tst:30341"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-9.EL" test_ref="oval:org.mitre.oval:tst:30477"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-9.EL" test_ref="oval:org.mitre.oval:tst:30442"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9706" version="5" class="vulnerability">
      <metadata>
        <title>Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges to access arbitrary memory and escape the virtual machine.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0928" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0928"/>
        <description>Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges to access arbitrary memory and escape the virtual machine.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:30.294-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:34.648-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:40.182-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9706 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:10.436-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:29.296-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="xen-libs is earlier than 0:3.0.3-41.el5_1.5" test_ref="oval:org.mitre.oval:tst:36530"/>
          <criterion comment="xen is earlier than 0:3.0.3-41.el5_1.5" test_ref="oval:org.mitre.oval:tst:36543"/>
          <criterion comment="xen-devel is earlier than 0:3.0.3-41.el5_1.5" test_ref="oval:org.mitre.oval:tst:35758"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9705" version="5" class="vulnerability">
      <metadata>
        <title>sealert in setroubleshoot 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the sealert.log temporary file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5495" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5495"/>
        <description>sealert in setroubleshoot 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the sealert.log temporary file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:20.428-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:34.444-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:39.912-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9705 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:21.613-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:28.948-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="setroubleshoot-plugins is earlier than 0:2.0.4-2.el5" test_ref="oval:org.mitre.oval:tst:35813"/>
          <criterion comment="setroubleshoot-server is earlier than 0:2.0.5-3.el5" test_ref="oval:org.mitre.oval:tst:36096"/>
          <criterion comment="setroubleshoot is earlier than 0:2.0.5-3.el5" test_ref="oval:org.mitre.oval:tst:35777"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9704" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document that is not properly handled by (1) Calc, (2) Draw, (3) Impress, (4) Math, or (5) Writer, aka "File Format / Buffer Overflow Vulnerability."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3117" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3117"/>
        <description>Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document that is not properly handled by (1) Calc, (2) Draw, (3) Impress, (4) Math, or (5) Writer, aka "File Format / Buffer Overflow Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:37.580-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:34.169-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:39.624-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9704 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:56.365-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:27.994-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-34.2.0.EL3" test_ref="oval:org.mitre.oval:tst:32211"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.2-34.2.0.EL3" test_ref="oval:org.mitre.oval:tst:32773"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-34.2.0.EL3" test_ref="oval:org.mitre.oval:tst:31834"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-34.6.0.EL4" test_ref="oval:org.mitre.oval:tst:32763"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.2-34.6.0.EL4" test_ref="oval:org.mitre.oval:tst:32657"/>
            <criterion comment="openoffice.org-kde is earlier than 0:1.1.2-34.6.0.EL4" test_ref="oval:org.mitre.oval:tst:32835"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-34.6.0.EL4" test_ref="oval:org.mitre.oval:tst:32791"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9703" version="5" class="vulnerability">
      <metadata>
        <title>The crypto.signText function in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to execute arbitrary code via certain optional Certificate Authority name arguments, which causes an invalid array index and triggers a buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2778" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2778"/>
        <description>The crypto.signText function in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to execute arbitrary code via certain optional Certificate Authority name arguments, which causes an invalid array index and triggers a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:36.150-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:33.618-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:39.127-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9703 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:02:20.812-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:27.294-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32575"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32674"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32918"/>
            <criterion comment="seamonkey is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32919"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32864"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32659"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32859"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32511"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32902"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32837"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32873"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32693"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32886"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32810"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32418"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32496"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32929"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32777"/>
            <criterion comment="firefox is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32896"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32722"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32906"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32905"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32925"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32624"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9702" version="5" class="vulnerability">
      <metadata>
        <title>drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to CVE-2009-4537.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4538"/>
        <description>drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to CVE-2009-4537.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:21.466-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:33.137-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:38.577-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9702 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:11.436-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:26.628-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39702"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39797"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39763"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39709"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39503"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39617"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39773"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39516"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39093"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39662"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39657"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39645"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39650"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39813"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39095"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39770"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39099"/>
            <criterion comment="kernel is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39700"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39408"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39590"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39719"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39789"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:38905"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9700" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unknown vulnerabilities in the (1) DHCP and (2) Telnet dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (abort).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1456"/>
        <description>Multiple unknown vulnerabilities in the (1) DHCP and (2) Telnet dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (abort).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:54.326-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:32.619-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:38.068-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9700 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:40.455-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:26.252-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31458"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31546"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31674"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31865"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:970" version="2" class="vulnerability">
      <metadata>
        <title>CVS pserver BO</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0396" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0396"/>
        <description>Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:47.770-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:11.394-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="cvs version is less than 1.11.2-22" negate="false" test_ref="oval:org.mitre.oval:tst:1382"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/bin/cvs is executable">
            <criterion comment="/usr/bin/cvs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1381"/>
            <criterion comment="/usr/bin/cvs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1380"/>
            <criterion comment="/usr/bin/cvs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1379"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:97" version="4" class="vulnerability">
      <metadata>
        <title>Solaris cachefsd Buffer Overrun Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>cachefsd</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0084" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0084"/>
        <description>Buffer overflow in the fscache_setup function of cachefsd in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long mount argument.</description>
        <oval_repository>
          <dates>
            <submitted date="2002-09-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified date="2005-01-27T12:00:00.000-04:00" comment="Updated to add patch test">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </modified>
            <modified date="2005-01-28T12:00:00.000-04:00" comment="Added Solaris 9 and Solaris 9 patch test to the definition">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </modified>
            <status_change date="2005-02-01T08:28:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="fixed the service_name entity used in the inetd_object" date="2007-04-10T15:17:00.350-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-04-10T15:17:45.666-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:11.147-04:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:54.266-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:47.360-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="File cachefsd exists" negate="false" test_ref="oval:org.mitre.oval:tst:3053"/>
          <criteria operator="OR" comment="Solaris 8 or 9 installed">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          </criteria>
          <criterion comment="Patch 110896-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:2946"/>
          <criterion comment="Patch 114008-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3050"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="inetd.conf contains cachefsd" negate="false" test_ref="oval:org.mitre.oval:tst:3049"/>
          <criterion comment="inetd running" negate="false" test_ref="oval:org.mitre.oval:tst:3135"/>
          <criteria operator="OR" comment="File cachefsd executable">
            <criterion comment="File cachefsd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3048"/>
            <criterion comment="File cachefsd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3047"/>
            <criterion comment="File cachefsd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3046"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9699" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in the rmtree function in File::Path 1.08 (lib/File/Path.pm) in Perl 5.8.8 allows local users to allows local users to delete arbitrary files via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error related to CVE-2005-0448.  It is different from CVE-2008-5302 due to affected versions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5303" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5303"/>
        <description>Race condition in the rmtree function in File::Path 1.08 (lib/File/Path.pm) in Perl 5.8.8 allows local users to allows local users to delete arbitrary files via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error related to CVE-2005-0448.  It is different from CVE-2008-5302 due to affected versions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:35.613-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:32.427-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:37.833-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9699 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:47:16.326-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:25.896-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="perl-suidperl is earlier than 4:5.8.8-32.el5_5.1" test_ref="oval:org.mitre.oval:tst:40657"/>
          <criterion comment="perl is earlier than 4:5.8.8-32.el5_5.1" test_ref="oval:org.mitre.oval:tst:39926"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9698" version="5" class="vulnerability">
      <metadata>
        <title>The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CAN-2004-0107.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0108" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0108"/>
        <description>The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CAN-2004-0107.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:26.007-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:32.240-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:37.642-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9698 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:38.440-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:25.638-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="sysstat is earlier than 0:4.0.7-4.EL3.2" test_ref="oval:org.mitre.oval:tst:30549"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9697" version="5" class="vulnerability">
      <metadata>
        <title>io-xpm.c in the gdk-pixbuf XPM image rendering library in GTK+ before 2.8.7 allows attackers to cause a denial of service (infinite loop) via a crafted XPM image with a large number of colors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2975" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2975"/>
        <description>io-xpm.c in the gdk-pixbuf XPM image rendering library in GTK+ before 2.8.7 allows attackers to cause a denial of service (infinite loop) via a crafted XPM image with a large number of colors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:48.780-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:31.892-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:37.330-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9697 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:28.518-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:25.202-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gdk-pixbuf-devel is earlier than 1:0.22.0-13.el3.3" test_ref="oval:org.mitre.oval:tst:32203"/>
            <criterion comment="gtk2 is earlier than 0:2.2.4-19" test_ref="oval:org.mitre.oval:tst:32214"/>
            <criterion comment="gdk-pixbuf-gnome is earlier than 1:0.22.0-13.el3.3" test_ref="oval:org.mitre.oval:tst:32393"/>
            <criterion comment="gdk-pixbuf is earlier than 1:0.22.0-13.el3.3" test_ref="oval:org.mitre.oval:tst:32388"/>
            <criterion comment="gtk2-devel is earlier than 0:2.2.4-19" test_ref="oval:org.mitre.oval:tst:32156"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gdk-pixbuf-devel is earlier than 1:0.22.0-17.el4.3" test_ref="oval:org.mitre.oval:tst:32239"/>
            <criterion comment="gtk2 is earlier than 0:2.4.13-18" test_ref="oval:org.mitre.oval:tst:32313"/>
            <criterion comment="gdk-pixbuf is earlier than 1:0.22.0-17.el4.3" test_ref="oval:org.mitre.oval:tst:32331"/>
            <criterion comment="gtk2-devel is earlier than 0:2.4.13-18" test_ref="oval:org.mitre.oval:tst:32250"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9696" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the wordwrap function in string.c in PHP 4.4.2 and 5.1.2 might allow context-dependent attackers to execute arbitrary code via certain long arguments that cause a small buffer to be allocated, which triggers a heap-based buffer overflow in a memcpy function call, a different vulnerability than CVE-2002-1396.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1990" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1990"/>
        <description>Integer overflow in the wordwrap function in string.c in PHP 4.4.2 and 5.1.2 might allow context-dependent attackers to execute arbitrary code via certain long arguments that cause a small buffer to be allocated, which triggers a heap-based buffer overflow in a memcpy function call, a different vulnerability than CVE-2002-1396.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:24.929-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:31.439-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:36.816-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9696 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:26.280-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:24.583-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-33.ent" test_ref="oval:org.mitre.oval:tst:32694"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-33.ent" test_ref="oval:org.mitre.oval:tst:32635"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-33.ent" test_ref="oval:org.mitre.oval:tst:32094"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-33.ent" test_ref="oval:org.mitre.oval:tst:32734"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-33.ent" test_ref="oval:org.mitre.oval:tst:32506"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-33.ent" test_ref="oval:org.mitre.oval:tst:32594"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-33.ent" test_ref="oval:org.mitre.oval:tst:32698"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32619"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32609"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:31938"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:31791"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32729"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32676"/>
            <criterion comment="php is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32607"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32412"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32084"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32271"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32269"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32783"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32718"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32732"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9695" version="5" class="vulnerability">
      <metadata>
        <title>The SPNEGO dissector in Ethereal 0.9.8 to 0.10.3 allows remote attackers to cause a denial of service (crash) via unknown attack vectors that cause a null pointer dereference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0506" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0506"/>
        <description>The SPNEGO dissector in Ethereal 0.9.8 to 0.10.3 allows remote attackers to cause a denial of service (crash) via unknown attack vectors that cause a null pointer dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:22.750-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:31.141-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:36.603-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9695 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:29.845-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:24.309-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="ethereal-gnome is earlier than 0:0.10.3-0.30E.2" test_ref="oval:org.mitre.oval:tst:30484"/>
          <criterion comment="ethereal is earlier than 0:0.10.3-0.30E.2" test_ref="oval:org.mitre.oval:tst:30678"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9694" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the gst_vorbis_tag_add_coverart function (gst-libs/gst/tag/gstvorbistag.c) in vorbistag in gst-plugins-base (aka gstreamer-plugins-base) before 0.10.23 in GStreamer allows context-dependent attackers to execute arbitrary code via a crafted COVERART tag that is converted from a base64 representation, which triggers a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0586" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0586"/>
        <description>Integer overflow in the gst_vorbis_tag_add_coverart function (gst-libs/gst/tag/gstvorbistag.c) in vorbistag in gst-plugins-base (aka gstreamer-plugins-base) before 0.10.23 in GStreamer allows context-dependent attackers to execute arbitrary code via a crafted COVERART tag that is converted from a base64 representation, which triggers a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:47.874-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:30.882-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:36.399-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9694 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:23.741-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:23.981-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="gstreamer-plugins-base-devel is earlier than 0:0.10.20-3.0.1.el5_3" test_ref="oval:org.mitre.oval:tst:37960"/>
          <criterion comment="gstreamer-plugins-base is earlier than 0:0.10.20-3.0.1.el5_3" test_ref="oval:org.mitre.oval:tst:38544"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9693" version="3" class="vulnerability">
      <metadata>
        <title>Multiple cross-site scripting (XSS) vulnerabilities in Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, for Mozilla Firefox, Microsoft Internet Explorer 6 SP1, Google Chrome, Opera 8.5.4 build 770, and Opera 9.10.8679 on Windows allow remote attackers to inject arbitrary JavaScript and conduct other attacks via a .pdf URL with a javascript: or res: URI with (1) FDF, (2) XML, and (3) XFDF AJAX parameters, or (4) an arbitrarily named name=URI anchor identifier, aka "Universal XSS (UXSS)."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0045" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0045"/>
        <description>Multiple cross-site scripting (XSS) vulnerabilities in Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, for Mozilla Firefox, Microsoft Internet Explorer 6 SP1, Google Chrome, Opera 8.5.4 build 770, and Opera 9.10.8679 on Windows allow remote attackers to inject arbitrary JavaScript and conduct other attacks via a .pdf URL with a javascript: or res: URI with (1) FDF, (2) XML, and (3) XFDF AJAX parameters, or (4) an arbitrarily named name=URI anchor identifier, aka "Universal XSS (UXSS)."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:09.924-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:30.592-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:36.098-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criteria operator="OR">
            <criterion comment="acroread-libs-atk is earlier than 0:1.8.0-1.el3" test_ref="oval:org.mitre.oval:tst:32952"/>
            <criterion comment="acroread-plugin is earlier than 0:7.0.9-1.1.1.EL3" test_ref="oval:org.mitre.oval:tst:33372"/>
            <criterion comment="acroread-libs-glib2 is earlier than 0:2.4.7-1" test_ref="oval:org.mitre.oval:tst:33249"/>
            <criterion comment="acroread-libs-gtk2 is earlier than 0:2.4.13-1.el3" test_ref="oval:org.mitre.oval:tst:33161"/>
            <criterion comment="acroread-libs-pango is earlier than 0:1.6.0-1.el3" test_ref="oval:org.mitre.oval:tst:33353"/>
            <criterion comment="acroread-libs-gtk2-engines is earlier than 0:2.2.0-1.el3" test_ref="oval:org.mitre.oval:tst:32853"/>
            <criterion comment="acroread is earlier than 0:7.0.9-1.1.1.EL3" test_ref="oval:org.mitre.oval:tst:32959"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="acroread-plugin is earlier than 0:7.0.9-1.2.0.EL4" test_ref="oval:org.mitre.oval:tst:33267"/>
            <criterion comment="acroread is earlier than 0:7.0.9-1.2.0.EL4" test_ref="oval:org.mitre.oval:tst:32938"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9692" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed GTP MSISDN string.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0925" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0925"/>
        <description>Buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed GTP MSISDN string.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:19.414-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:30.394-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:35.785-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9692 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:17.751-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:23.703-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="ethereal-gnome is earlier than 0:0.9.16-0.30E.1" test_ref="oval:org.mitre.oval:tst:30378"/>
          <criterion comment="ethereal is earlier than 0:0.9.16-0.30E.1" test_ref="oval:org.mitre.oval:tst:29663"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9691" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the SOCKS dissector.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0927" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0927"/>
        <description>Heap-based buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the SOCKS dissector.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:09.998-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:30.198-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:35.581-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9691 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:08.788-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:23.427-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="ethereal-gnome is earlier than 0:0.9.16-0.30E.1" test_ref="oval:org.mitre.oval:tst:30378"/>
          <criterion comment="ethereal is earlier than 0:0.9.16-0.30E.1" test_ref="oval:org.mitre.oval:tst:29663"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9690" version="5" class="vulnerability">
      <metadata>
        <title>Multiple format string vulnerabilities in (1) qtextedit.cpp, (2) qdatatable.cpp, (3) qsqldatabase.cpp, (4) qsqlindex.cpp, (5) qsqlrecord.cpp, (6) qglobal.cpp, and (7) qsvgdevice.cpp in QTextEdit in Trolltech Qt 3 before 3.3.8 20070727 allow remote attackers to execute arbitrary code via format string specifiers in text used to compose an error message.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3388" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3388"/>
        <description>Multiple format string vulnerabilities in (1) qtextedit.cpp, (2) qdatatable.cpp, (3) qsqldatabase.cpp, (4) qsqlindex.cpp, (5) qsqlrecord.cpp, (6) qglobal.cpp, and (7) qsvgdevice.cpp in QTextEdit in Trolltech Qt 3 before 3.3.8 20070727 allow remote attackers to execute arbitrary code via format string specifiers in text used to compose an error message.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:26.464-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:29.680-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:35.090-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9690 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:42.573-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:22.685-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="qt-config is earlier than 1:3.1.2-16.RHEL3" test_ref="oval:org.mitre.oval:tst:34378"/>
            <criterion comment="qt is earlier than 1:3.1.2-16.RHEL3" test_ref="oval:org.mitre.oval:tst:34752"/>
            <criterion comment="qt-devel is earlier than 1:3.1.2-16.RHEL3" test_ref="oval:org.mitre.oval:tst:34863"/>
            <criterion comment="qt-MySQL is earlier than 1:3.1.2-16.RHEL3" test_ref="oval:org.mitre.oval:tst:34860"/>
            <criterion comment="qt-ODBC is earlier than 1:3.1.2-16.RHEL3" test_ref="oval:org.mitre.oval:tst:34610"/>
            <criterion comment="qt-designer is earlier than 1:3.1.2-16.RHEL3" test_ref="oval:org.mitre.oval:tst:34657"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="qt-config is earlier than 1:3.3.3-11.RHEL4" test_ref="oval:org.mitre.oval:tst:34716"/>
            <criterion comment="qt is earlier than 1:3.3.3-11.RHEL4" test_ref="oval:org.mitre.oval:tst:34773"/>
            <criterion comment="qt-devel is earlier than 1:3.3.3-11.RHEL4" test_ref="oval:org.mitre.oval:tst:34824"/>
            <criterion comment="qt-PostgreSQL is earlier than 1:3.3.3-11.RHEL4" test_ref="oval:org.mitre.oval:tst:34273"/>
            <criterion comment="qt-MySQL is earlier than 1:3.3.3-11.RHEL4" test_ref="oval:org.mitre.oval:tst:34815"/>
            <criterion comment="qt-ODBC is earlier than 1:3.3.3-11.RHEL4" test_ref="oval:org.mitre.oval:tst:33935"/>
            <criterion comment="qt-designer is earlier than 1:3.3.3-11.RHEL4" test_ref="oval:org.mitre.oval:tst:34901"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="qt-config is earlier than 1:3.3.6-21.el5" test_ref="oval:org.mitre.oval:tst:34546"/>
            <criterion comment="qt is earlier than 1:3.3.6-21.el5" test_ref="oval:org.mitre.oval:tst:34540"/>
            <criterion comment="qt-MySQL is earlier than 1:3.3.6-21.el5" test_ref="oval:org.mitre.oval:tst:34891"/>
            <criterion comment="qt-ODBC is earlier than 1:3.3.6-21.el5" test_ref="oval:org.mitre.oval:tst:34751"/>
            <criterion comment="qt-designer is earlier than 1:3.3.6-21.el5" test_ref="oval:org.mitre.oval:tst:34786"/>
            <criterion comment="qt-devel is earlier than 1:3.3.6-21.el5" test_ref="oval:org.mitre.oval:tst:34503"/>
            <criterion comment="qt-PostgreSQL is earlier than 1:3.3.6-21.el5" test_ref="oval:org.mitre.oval:tst:34497"/>
            <criterion comment="qt-devel-docs is earlier than 1:3.3.6-21.el5" test_ref="oval:org.mitre.oval:tst:34823"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9689" version="5" class="vulnerability">
      <metadata>
        <title>login in util-linux-2.12a skips pam_acct_mgmt and chauth_tok when authentication is skipped, such as when a Kerberos krlogin session has been established, which might allow users to bypass intended access policies that would be enforced by pam_acct_mgmt and chauth_tok.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-7108" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-7108"/>
        <description>login in util-linux-2.12a skips pam_acct_mgmt and chauth_tok when authentication is skipped, such as when a Kerberos krlogin session has been established, which might allow users to bypass intended access policies that would be enforced by pam_acct_mgmt and chauth_tok.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:33.355-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:29.498-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:34.818-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9689 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:47.286-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:22.358-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="util-linux is earlier than 0:2.12a-16.EL4.25" test_ref="oval:org.mitre.oval:tst:34034"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9688" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0753" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0753"/>
        <description>Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:11.791-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:29.279-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:34.585-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9688 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:22.145-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:21.941-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="cvs is earlier than 0:1.11.2-27" test_ref="oval:org.mitre.oval:tst:31763"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="cvs is earlier than 0:1.11.17-7.RHEL4" test_ref="oval:org.mitre.oval:tst:31635"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9687" version="5" class="vulnerability">
      <metadata>
        <title>The IAPP dissector (packet-iapp.c) for Ethereal 0.9.1 to 0.10.9 does not properly use certain routines for formatting strings, which could leave it vulnerable to buffer overflows, as demonstrated using modified length values that are not properly handled by the dissect_pdus and pduval_to_str functions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0739" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0739"/>
        <description>The IAPP dissector (packet-iapp.c) for Ethereal 0.9.1 to 0.10.9 does not properly use certain routines for formatting strings, which could leave it vulnerable to buffer overflows, as demonstrated using modified length values that are not properly handled by the dissect_pdus and pduval_to_str functions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:59.277-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:28.974-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:34.333-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9687 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:24.517-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:21.568-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.10-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31514"/>
            <criterion comment="ethereal is earlier than 0:0.10.10-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31448"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.10-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31593"/>
            <criterion comment="ethereal is earlier than 0:0.10.10-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31548"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9686" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 3.0.13, and 3.5.x before 3.5.2, allows remote attackers to spoof the address bar, and possibly conduct phishing attacks, via a crafted web page that calls window.open with an invalid character in the URL, makes document.write calls to the resulting object, and then calls the stop method during the loading of the error page.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2654" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2654"/>
        <description>Mozilla Firefox before 3.0.13, and 3.5.x before 3.5.2, allows remote attackers to spoof the address bar, and possibly conduct phishing attacks, via a crafted web page that calls window.open with an invalid character in the URL, makes document.write calls to the resulting object, and then calls the stop method during the loading of the error page.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:12.365-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:28.445-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:33.753-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9686 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:11.611-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:20.773-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39378"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39359"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39036"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39270"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39397"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39118"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:38444"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39284"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:38466"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39389"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nspr is earlier than 0:4.7.5-1.el4_8" test_ref="oval:org.mitre.oval:tst:39088"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:39081"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.5-1.el4_8" test_ref="oval:org.mitre.oval:tst:39351"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:38976"/>
            <criterion comment="firefox is earlier than 0:3.0.14-1.el4" test_ref="oval:org.mitre.oval:tst:39195"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:39181"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:39320"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:39364"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:39293"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39208"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39001"/>
            <criterion comment="nspr is earlier than 0:4.7.5-1.el5_4" test_ref="oval:org.mitre.oval:tst:39223"/>
            <criterion comment="firefox is earlier than 0:3.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39097"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.5-1.el5_4" test_ref="oval:org.mitre.oval:tst:39150"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39206"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9685" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the CIP dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger allocation of large amounts of memory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6451" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6451"/>
        <description>Unspecified vulnerability in the CIP dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger allocation of large amounts of memory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:39.866-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:28.073-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:33.379-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9685 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:17.088-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:20.220-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-EL3.1" test_ref="oval:org.mitre.oval:tst:36111"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-EL3.1" test_ref="oval:org.mitre.oval:tst:36043"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-3.el3" test_ref="oval:org.mitre.oval:tst:35411"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-3.el3" test_ref="oval:org.mitre.oval:tst:36140"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:36051"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:35980"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35669"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35941"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:35709"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:36120"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35712"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35801"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9684" version="3" class="vulnerability">
      <metadata>
        <title>Double free vulnerability in the Adobe Acrobat Reader Plugin before 8.0.0, as used in Mozilla Firefox 1.5.0.7, allows remote attackers to execute arbitrary code by causing an error via a javascript: URI call to document.write in the (1) FDF, (2) XML, or (3) XFDF AJAX request parameters.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0046" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0046"/>
        <description>Double free vulnerability in the Adobe Acrobat Reader Plugin before 8.0.0, as used in Mozilla Firefox 1.5.0.7, allows remote attackers to execute arbitrary code by causing an error via a javascript: URI call to document.write in the (1) FDF, (2) XML, or (3) XFDF AJAX request parameters.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:54.379-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:27.741-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:32.947-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criteria operator="OR">
            <criterion comment="acroread-libs-atk is earlier than 0:1.8.0-1.el3" test_ref="oval:org.mitre.oval:tst:32952"/>
            <criterion comment="acroread-plugin is earlier than 0:7.0.9-1.1.1.EL3" test_ref="oval:org.mitre.oval:tst:33372"/>
            <criterion comment="acroread-libs-glib2 is earlier than 0:2.4.7-1" test_ref="oval:org.mitre.oval:tst:33249"/>
            <criterion comment="acroread-libs-gtk2 is earlier than 0:2.4.13-1.el3" test_ref="oval:org.mitre.oval:tst:33161"/>
            <criterion comment="acroread-libs-pango is earlier than 0:1.6.0-1.el3" test_ref="oval:org.mitre.oval:tst:33353"/>
            <criterion comment="acroread-libs-gtk2-engines is earlier than 0:2.2.0-1.el3" test_ref="oval:org.mitre.oval:tst:32853"/>
            <criterion comment="acroread is earlier than 0:7.0.9-1.1.1.EL3" test_ref="oval:org.mitre.oval:tst:32959"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="acroread-plugin is earlier than 0:7.0.9-1.2.0.EL4" test_ref="oval:org.mitre.oval:tst:33267"/>
            <criterion comment="acroread is earlier than 0:7.0.9-1.2.0.EL4" test_ref="oval:org.mitre.oval:tst:32938"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9683" version="5" class="vulnerability">
      <metadata>
        <title>The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a NULL pointer dereference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1181" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1181"/>
        <description>The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a NULL pointer dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:48.539-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:26.928-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:32.319-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9683 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:34.932-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:19.399-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="xpdf is earlier than 1:2.02-14.el3" test_ref="oval:org.mitre.oval:tst:38322"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40095"/>
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-13.el4" test_ref="oval:org.mitre.oval:tst:38126"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:39528"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-13.el4" test_ref="oval:org.mitre.oval:tst:38230"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40473"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38481"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40316"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-7.7.2.el4_7.4" test_ref="oval:org.mitre.oval:tst:38436"/>
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38145"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40209"/>
            <criterion comment="xpdf is earlier than 1:3.00-20.el4" test_ref="oval:org.mitre.oval:tst:38649"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40364"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40077"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38607"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.5.4-12.el5_3" test_ref="oval:org.mitre.oval:tst:38618"/>
            <criterion comment="cups-lpd is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38471"/>
            <criterion comment="tetex-dvips is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40312"/>
            <criterion comment="kdegraphics is earlier than 7:3.5.4-12.el5_3" test_ref="oval:org.mitre.oval:tst:38271"/>
            <criterion comment="poppler is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38760"/>
            <criterion comment="tetex-fonts is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40122"/>
            <criterion comment="cups-libs is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38541"/>
            <criterion comment="tetex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40413"/>
            <criterion comment="tetex-doc is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40398"/>
            <criterion comment="poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38500"/>
            <criterion comment="tetex-latex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40444"/>
            <criterion comment="poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38512"/>
            <criterion comment="cups-devel is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:37935"/>
            <criterion comment="tetex-afm is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40008"/>
            <criterion comment="tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:39920"/>
            <criterion comment="cups is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38334"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9682" version="5" class="vulnerability">
      <metadata>
        <title>Algorithmic complexity vulnerability in the WEBrick::HTTPUtils.split_header_value function in WEBrick::HTTP::DefaultFileHandler in WEBrick in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted HTTP request that is processed by a backtracking regular expression.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3656" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3656"/>
        <description>Algorithmic complexity vulnerability in the WEBrick::HTTPUtils.split_header_value function in WEBrick::HTTP::DefaultFileHandler in WEBrick in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted HTTP request that is processed by a backtracking regular expression.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:24.344-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:26.534-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:31.848-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9682 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:14:09.087-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:18.758-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37462"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37630"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:36810"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:36902"/>
            <criterion comment="ruby is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37678"/>
            <criterion comment="irb is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37674"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37720"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-ri is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37735"/>
            <criterion comment="ruby-mode is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37344"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37697"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37273"/>
            <criterion comment="ruby is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37563"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37438"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37757"/>
            <criterion comment="ruby-irb is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37463"/>
            <criterion comment="ruby-rdoc is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37172"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9681" version="5" class="vulnerability">
      <metadata>
        <title>Double free vulnerability in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to execute arbitrary code via "cloned XUL DOM elements which were linked as a parent and child," which are not properly handled during garbage collection.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0775" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0775"/>
        <description>Double free vulnerability in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to execute arbitrary code via "cloned XUL DOM elements which were linked as a parent and child," which are not properly handled during garbage collection.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:29.793-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:25.977-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:31.332-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9681 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:02.799-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:17.908-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38413"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38419"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38110"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38217"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:37995"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:37833"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38347"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38410"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:37953"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38386"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:37842"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-19.el4" test_ref="oval:org.mitre.oval:tst:38238"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:38355"/>
            <criterion comment="firefox is earlier than 0:3.0.7-1.el4" test_ref="oval:org.mitre.oval:tst:38405"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:38148"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:38132"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:38204"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:38364"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:38168"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:37685"/>
            <criterion comment="firefox is earlier than 0:3.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:38372"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.21-1.el5" test_ref="oval:org.mitre.oval:tst:37944"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:38365"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9680" version="5" class="vulnerability">
      <metadata>
        <title>Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service (memory consumption) by fetching data with BYTEA columns.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1341" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1341"/>
        <description>Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service (memory consumption) by fetching data with BYTEA columns.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:52.345-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:25.795-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:31.137-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9680 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:50.788-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:17.619-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="perl-DBD-Pg is earlier than 0:1.49-2.el5_3.1" test_ref="oval:org.mitre.oval:tst:38484"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9679" version="5" class="vulnerability">
      <metadata>
        <title>The XPConnect component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to "pollute XPCNativeWrappers" and execute arbitrary code with chrome privileges via vectors related to (1) chrome XBL and (2) chrome JS.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4058" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4058"/>
        <description>The XPConnect component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to "pollute XPCNativeWrappers" and execute arbitrary code with chrome privileges via vectors related to (1) chrome XBL and (2) chrome JS.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:10.182-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:25.190-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:30.480-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9679 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:10.432-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:16.789-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37411"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36691"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37031"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37528"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36726"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37435"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37680"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36725"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37449"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37356"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.10.el4" test_ref="oval:org.mitre.oval:tst:37564"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:36913"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-16.el4" test_ref="oval:org.mitre.oval:tst:37634"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37609"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.10.el4" test_ref="oval:org.mitre.oval:tst:37306"/>
            <criterion comment="firefox is earlier than 0:3.0.2-3.el4" test_ref="oval:org.mitre.oval:tst:37195"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37499"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37444"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37543"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37552"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-19.el5" test_ref="oval:org.mitre.oval:tst:37248"/>
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37486"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37495"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37044"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.17-1.el5" test_ref="oval:org.mitre.oval:tst:37230"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37578"/>
            <criterion comment="yelp is earlier than 0:2.16.0-21.el5" test_ref="oval:org.mitre.oval:tst:37584"/>
            <criterion comment="devhelp is earlier than 0:0.12-19.el5" test_ref="oval:org.mitre.oval:tst:37353"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37406"/>
            <criterion comment="firefox is earlier than 0:3.0.2-3.el5" test_ref="oval:org.mitre.oval:tst:37225"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:36664"/>
            <criterion comment="nss-tools is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37664"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9678" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the GTP dissector for Ethereal 0.9.1 to 0.10.13 allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-4585" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4585"/>
        <description>Unspecified vulnerability in the GTP dissector for Ethereal 0.9.1 to 0.10.13 allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:30.846-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:24.897-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:30.217-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9678 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:00.352-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:16.395-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.14-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32303"/>
            <criterion comment="ethereal is earlier than 0:0.10.14-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32466"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.14-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32538"/>
            <criterion comment="ethereal is earlier than 0:0.10.14-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32039"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9677" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in wiretap/netscreen.c in Wireshark 0.99.7 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed NetScreen snoop file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0599" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0599"/>
        <description>Buffer overflow in wiretap/netscreen.c in Wireshark 0.99.7 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed NetScreen snoop file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:28.592-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:24.609-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:29.839-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9677 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:13.623-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:15.886-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-EL3.3" test_ref="oval:org.mitre.oval:tst:38023"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-EL3.3" test_ref="oval:org.mitre.oval:tst:38321"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-2.el4_7" test_ref="oval:org.mitre.oval:tst:38000"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-2.el4_7" test_ref="oval:org.mitre.oval:tst:38041"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-2.el5_3" test_ref="oval:org.mitre.oval:tst:38236"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-2.el5_3" test_ref="oval:org.mitre.oval:tst:38085"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9676" version="5" class="vulnerability">
      <metadata>
        <title>Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service (memory consumption) via plain HTTP requests to the SSL port of an SSL-enabled server.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0113" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0113"/>
        <description>Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service (memory consumption) via plain HTTP requests to the SSL port of an SSL-enabled server.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:23.689-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:24.404-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:29.609-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9676 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:18.191-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:15.594-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="httpd-devel is earlier than 0:2.0.46-32.ent" test_ref="oval:org.mitre.oval:tst:30592"/>
          <criterion comment="mod_ssl is earlier than 1:2.0.46-32.ent" test_ref="oval:org.mitre.oval:tst:30715"/>
          <criterion comment="httpd is earlier than 0:2.0.46-32.ent" test_ref="oval:org.mitre.oval:tst:30621"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9675" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer signedness errors in the (1) __get_argv and (2) __get_compat_argv functions in tapset/aux_syscalls.stp in SystemTap 1.1 allow local users to cause a denial of service (script crash, or system crash or hang) via a process with a large number of arguments, leading to a buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0411" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0411"/>
        <description>Multiple integer signedness errors in the (1) __get_argv and (2) __get_compat_argv functions in tapset/aux_syscalls.stp in SystemTap 1.1 allow local users to cause a denial of service (script crash, or system crash or hang) via a process with a large number of arguments, leading to a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:46.188-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:24.084-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:29.276-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9675 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:40.678-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:15.130-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="systemtap-runtime is earlier than 0:0.6.2-2.el4_8.1" test_ref="oval:org.mitre.oval:tst:40200"/>
            <criterion comment="systemtap-testsuite is earlier than 0:0.6.2-2.el4_8.1" test_ref="oval:org.mitre.oval:tst:40276"/>
            <criterion comment="systemtap is earlier than 0:0.6.2-2.el4_8.1" test_ref="oval:org.mitre.oval:tst:40274"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="systemtap-initscript is earlier than 0:0.9.7-5.el5_4.3" test_ref="oval:org.mitre.oval:tst:39973"/>
            <criterion comment="systemtap-runtime is earlier than 0:0.9.7-5.el5_4.3" test_ref="oval:org.mitre.oval:tst:39856"/>
            <criterion comment="systemtap-testsuite is earlier than 0:0.9.7-5.el5_4.3" test_ref="oval:org.mitre.oval:tst:40046"/>
            <criterion comment="systemtap-client is earlier than 0:0.9.7-5.el5_4.3" test_ref="oval:org.mitre.oval:tst:40146"/>
            <criterion comment="systemtap-sdt-devel is earlier than 0:0.9.7-5.el5_4.3" test_ref="oval:org.mitre.oval:tst:39433"/>
            <criterion comment="systemtap is earlier than 0:0.9.7-5.el5_4.3" test_ref="oval:org.mitre.oval:tst:39868"/>
            <criterion comment="systemtap-server is earlier than 0:0.9.7-5.el5_4.3" test_ref="oval:org.mitre.oval:tst:39484"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9674" version="5" class="vulnerability">
      <metadata>
        <title>sys_mbind in mempolicy.c in Linux kernel 2.6.16 and earlier does not sanity check the maxnod variable before making certain computations for the get_nodes function, which has unknown impact and attack vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0557"/>
        <description>sys_mbind in mempolicy.c in Linux kernel 2.6.16 and earlier does not sanity check the maxnod variable before making certain computations for the get_nodes function, which has unknown impact and attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:19.826-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:23.723-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:28.919-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9674 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:12:53.514-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:14.688-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-xenU is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30189"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30542"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30504"/>
          <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30169"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:29589"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30432"/>
          <criterion comment="kernel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:29669"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30424"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30299"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30268"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30561"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9673" version="5" class="vulnerability">
      <metadata>
        <title>rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0154" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0154"/>
        <description>rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:18.385-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:23.539-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:28.723-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9673 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:35.649-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:14.429-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="nfs-utils is earlier than 0:1.0.6-7.EL" test_ref="oval:org.mitre.oval:tst:30663"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9672" version="3" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment (JRE) and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to gain privileges via an untrusted application or applet, a different issue than CVE-2008-1186, aka "the first issue."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1185" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1185"/>
        <description>Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment (JRE) and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to gain privileges via an untrusted application or applet, a different issue than CVE-2008-1186, aka "the first issue."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:41.325-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:23.211-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:28.381-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36267"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36295"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35708"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35618"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36334"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36509"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35698"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35872"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35719"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36068"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36582"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36568"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9671" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.  NOTE: some of these details are obtained from third party information.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1188.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3603" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3603"/>
        <description>Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.  NOTE: some of these details are obtained from third party information.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1188.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:41.607-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:22.950-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:28.156-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9671 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:26.115-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:14.118-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="poppler-utils is earlier than 0:0.5.4-4.4.el5_4.11" test_ref="oval:org.mitre.oval:tst:39383"/>
          <criterion comment="poppler-devel is earlier than 0:0.5.4-4.4.el5_4.11" test_ref="oval:org.mitre.oval:tst:39346"/>
          <criterion comment="poppler is earlier than 0:0.5.4-4.4.el5_4.11" test_ref="oval:org.mitre.oval:tst:39290"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9670" version="5" class="vulnerability">
      <metadata>
        <title>The Linux kernel before 2.6.23-rc1 checks the wrong global variable for the CIFS sec mount option, which might allow remote attackers to spoof CIFS network traffic that the client configured for security signatures, as demonstrated by lack of signing despite sec=ntlmv2i in a SetupAndX request.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3843" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3843"/>
        <description>The Linux kernel before 2.6.23-rc1 checks the wrong global variable for the CIFS sec mount option, which might allow remote attackers to spoof CIFS network traffic that the client configured for security signatures, as demonstrated by lack of signing despite sec=ntlmv2i in a SetupAndX request.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:59.672-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:22.494-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:27.654-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9670 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:54.102-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:13.460-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34864"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35017"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35145"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34442"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35258"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35254"/>
            <criterion comment="kernel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35373"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34480"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34911"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34923"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35327"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34804"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34557"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34837"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34795"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34562"/>
            <criterion comment="kernel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34357"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34379"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34873"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34870"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34374"/>
            <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34337"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:967" version="2" class="vulnerability">
      <metadata>
        <title>rsync Path Sanitation Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0426" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0426"/>
        <description>rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, which allows remote attackers to write files outside of the module's path.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-19T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:48.553-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:10.957-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="rsync version is less than 2.5.7-4.3E" negate="false" test_ref="oval:org.mitre.oval:tst:1389"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9669" version="5" class="vulnerability">
      <metadata>
        <title>The xntpd ntp (ntpd) daemon before 4.2.0b, when run with the -u option and using a string to specify the group, uses the group ID of the user instead of the group, which causes xntpd to run with different privileges than intended.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2496" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2496"/>
        <description>The xntpd ntp (ntpd) daemon before 4.2.0b, when run with the -u option and using a string to specify the group, uses the group ID of the user instead of the group, which causes xntpd to run with different privileges than intended.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:24.524-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:22.313-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:27.453-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9669 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:16:44.898-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:13.175-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="ntp is earlier than 0:4.2.0.a.20040617-4.EL4.1" test_ref="oval:org.mitre.oval:tst:32391"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9668" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly escape HTML in file:// URLs in directory listings, which allows remote attackers to conduct cross-site scripting (XSS) attacks or have unspecified other impact via a crafted filename.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2808" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2808"/>
        <description>Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly escape HTML in file:// URLs in directory listings, which allows remote attackers to conduct cross-site scripting (XSS) attacks or have unspecified other impact via a crafted filename.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:55.758-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:21.688-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:26.787-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9668 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:04.977-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:12.382-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37286"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37033"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37126"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37105"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37271"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37279"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37060"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37189"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:36476"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:36916"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37236"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37192"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-14.el4" test_ref="oval:org.mitre.oval:tst:36999"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36886"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37331"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36365"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.19.el4" test_ref="oval:org.mitre.oval:tst:37174"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37226"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36766"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37320"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36826"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37274"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-17.el5" test_ref="oval:org.mitre.oval:tst:37107"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:37351"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.16-1.el5" test_ref="oval:org.mitre.oval:tst:37363"/>
            <criterion comment="xulrunner is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:36984"/>
            <criterion comment="devhelp is earlier than 0:0.12-17.el5" test_ref="oval:org.mitre.oval:tst:37234"/>
            <criterion comment="yelp is earlier than 0:2.16.0-19.el5" test_ref="oval:org.mitre.oval:tst:37291"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:36436"/>
            <criterion comment="firefox is earlier than 0:3.0-2.el5" test_ref="oval:org.mitre.oval:tst:36814"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9667" version="5" class="vulnerability">
      <metadata>
        <title>Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498"/>
        <description>Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:47.545-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:20.943-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:25.995-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9667 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:16.534-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:11.432-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:38010"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37683"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37468"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37994"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37569"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37746"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37938"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38324"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38288"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38029"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:37974"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38154"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38499"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38401"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38018"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38505"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38494"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38075"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38387"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38058"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38202"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38147"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38305"/>
            <criterion comment="php-common is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38268"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38298"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:37882"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:37952"/>
            <criterion comment="php is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38099"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38415"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38511"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38115"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38367"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38569"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38440"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38536"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38507"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38316"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38493"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:37667"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38421"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9666" version="5" class="vulnerability">
      <metadata>
        <title>The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via crafted pen width and pen color opcodes that overwrite arbitrary memory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3641" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3641"/>
        <description>The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via crafted pen width and pen color opcodes that overwrite arbitrary memory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:34.316-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:20.603-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:25.629-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9666 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:07.539-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:10.865-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.54" test_ref="oval:org.mitre.oval:tst:37294"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.54" test_ref="oval:org.mitre.oval:tst:37772"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.54" test_ref="oval:org.mitre.oval:tst:37394"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.1" test_ref="oval:org.mitre.oval:tst:37546"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.1" test_ref="oval:org.mitre.oval:tst:37714"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.1" test_ref="oval:org.mitre.oval:tst:37699"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-lpd is earlier than 1:1.2.4-11.18.el5_2.2" test_ref="oval:org.mitre.oval:tst:37215"/>
            <criterion comment="cups-devel is earlier than 1:1.2.4-11.18.el5_2.2" test_ref="oval:org.mitre.oval:tst:37378"/>
            <criterion comment="cups is earlier than 1:1.2.4-11.18.el5_2.2" test_ref="oval:org.mitre.oval:tst:37794"/>
            <criterion comment="cups-libs is earlier than 1:1.2.4-11.18.el5_2.2" test_ref="oval:org.mitre.oval:tst:37702"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9665" version="5" class="vulnerability">
      <metadata>
        <title>The BER dissector in Ethereal 0.10.3 to 0.10.12 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3244"/>
        <description>The BER dissector in Ethereal 0.10.3 to 0.10.12 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:40.827-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:20.362-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:25.369-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9665 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:12.804-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:10.492-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.13-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32189"/>
            <criterion comment="ethereal is earlier than 0:0.10.13-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32138"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.13-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32341"/>
            <criterion comment="ethereal is earlier than 0:0.10.13-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32202"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9664" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in textbox.c in newt 0.51.5, 0.51.6, and 0.52.2 allows local users to cause a denial of service (application crash) or possibly execute arbitrary code via a request to display a crafted text dialog box.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2905" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2905"/>
        <description>Heap-based buffer overflow in textbox.c in newt 0.51.5, 0.51.6, and 0.52.2 allows local users to cause a denial of service (application crash) or possibly execute arbitrary code via a request to display a crafted text dialog box.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:35.218-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:20.074-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:25.053-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9664 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:04.811-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:09.989-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="newt-devel is earlier than 0:0.51.5-2.el3" test_ref="oval:org.mitre.oval:tst:39137"/>
            <criterion comment="newt is earlier than 0:0.51.5-2.el3" test_ref="oval:org.mitre.oval:tst:39439"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="newt-devel is earlier than 0:0.51.6-10.el4_8.1" test_ref="oval:org.mitre.oval:tst:39340"/>
            <criterion comment="newt is earlier than 0:0.51.6-10.el4_8.1" test_ref="oval:org.mitre.oval:tst:39343"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="newt-devel is earlier than 0:0.52.2-12.el5_4.1" test_ref="oval:org.mitre.oval:tst:39387"/>
            <criterion comment="newt is earlier than 0:0.52.2-12.el5_4.1" test_ref="oval:org.mitre.oval:tst:38962"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9663" version="5" class="vulnerability">
      <metadata>
        <title>The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of "future epoch" DTLS records that are buffered in a queue, aka "DTLS record buffer limitation bug."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1377" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1377"/>
        <description>The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of "future epoch" DTLS records that are buffered in a queue, aka "DTLS record buffer limitation bug."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:40.143-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:19.814-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:24.788-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9663 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:05.909-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:09.678-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="openssl-perl is earlier than 0:0.9.8e-12.el5" test_ref="oval:org.mitre.oval:tst:39059"/>
          <criterion comment="openssl-devel is earlier than 0:0.9.8e-12.el5" test_ref="oval:org.mitre.oval:tst:38295"/>
          <criterion comment="openssl is earlier than 0:0.9.8e-12.el5" test_ref="oval:org.mitre.oval:tst:38660"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9662" version="5" class="vulnerability">
      <metadata>
        <title>The CSS parser in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 ignores the '\0' escaped null character, which might allow remote attackers to bypass protection mechanisms such as sanitization routines.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5510"/>
        <description>The CSS parser in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 ignores the '\0' escaped null character, which might allow remote attackers to bypass protection mechanisms such as sanitization routines.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:43.646-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:19.436-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:24.394-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9662 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:27.567-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:09.142-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-1.el4" test_ref="oval:org.mitre.oval:tst:37139"/>
            <criterion comment="nspr is earlier than 0:4.7.3-1.el4" test_ref="oval:org.mitre.oval:tst:37574"/>
            <criterion comment="firefox is earlier than 0:3.0.5-1.el4" test_ref="oval:org.mitre.oval:tst:38080"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-1.el4" test_ref="oval:org.mitre.oval:tst:37857"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.3-1.el4" test_ref="oval:org.mitre.oval:tst:37918"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:38072"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38037"/>
            <criterion comment="nspr is earlier than 0:4.7.3-2.el5" test_ref="oval:org.mitre.oval:tst:37420"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37854"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.3-2.el5" test_ref="oval:org.mitre.oval:tst:37419"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38083"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:37631"/>
            <criterion comment="firefox is earlier than 0:3.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38114"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37737"/>
            <criterion comment="nss-tools is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37403"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9661" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pathname that is not properly handled during file list parsing, (2) long pathnames that result from path variable expansion such as tilde expansion for the HOME environment variable, and (3) a long -f (aka reffile) command line argument.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4262" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4262"/>
        <description>Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pathname that is not properly handled during file list parsing, (2) long pathnames that result from path variable expansion such as tilde expansion for the HOME environment variable, and (3) a long -f (aka reffile) command line argument.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:21.720-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:19.213-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:24.162-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9661 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:35.114-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:08.754-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="cscope is earlier than 0:15.5-16.RHEL3" test_ref="oval:org.mitre.oval:tst:38743"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="cscope is earlier than 0:15.5-10.RHEL4.3" test_ref="oval:org.mitre.oval:tst:38662"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9660" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 2.x before 2.0.0.18 and SeaMonkey 1.x before 1.1.13 do not properly check when the Flash module has been dynamically unloaded properly, which allows remote attackers to execute arbitrary code via a crafted SWF file that "dynamically unloads itself from an outside JavaScript function," which triggers an access of an expired memory address.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5013" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5013"/>
        <description>Mozilla Firefox 2.x before 2.0.0.18 and SeaMonkey 1.x before 1.1.13 do not properly check when the Flash module has been dynamically unloaded properly, which allows remote attackers to execute arbitrary code via a crafted SWF file that "dynamically unloads itself from an outside JavaScript function," which triggers an access of an expired memory address.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:29.645-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:18.788-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:23.715-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9660 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:08.551-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:08.233-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37159"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37875"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37293"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37934"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37671"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37932"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37970"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37357"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37852"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37844"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37991"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37232"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37955"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:38009"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37777"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37914"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:966" version="1" class="vulnerability">
      <metadata>
        <title>Windows NT Media Services ISAPI Logging Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0227" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0227"/>
        <description>The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Services in Microsoft Windows NT 4.0 and 2000, nsiislog.dll, allows remote attackers to cause a denial of service in Internet Information Server (IIS) and execute arbitrary code via a certain network request.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-18T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="IIS 4.0 Major Version" negate="false" test_ref="oval:org.mitre.oval:tst:3099"/>
        <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
        <criterion comment="File %windir%\System32\nsiislog.dll is less than 4.1.0.3861" negate="false" test_ref="oval:org.mitre.oval:tst:1390"/>
        <criterion comment="Patch KB817772 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:1439"/>
        <criterion comment="Patch KB822343 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:1438"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9659" version="5" class="vulnerability">
      <metadata>
        <title>fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denial of service (application crash) by sending messages without headers from upstream mail servers.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-4348" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4348"/>
        <description>fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denial of service (application crash) by sending messages without headers from upstream mail servers.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:40.544-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:18.572-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:23.480-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9659 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:10.193-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:07.736-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="fetchmail is earlier than 0:6.2.0-3.el3.3" test_ref="oval:org.mitre.oval:tst:33046"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="fetchmail is earlier than 0:6.2.5-6.el4.5" test_ref="oval:org.mitre.oval:tst:33350"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9658" version="5" class="vulnerability">
      <metadata>
        <title>The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1184" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1184"/>
        <description>The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:18.437-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:18.349-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:23.245-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9658 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:46.788-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:07.373-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="enscript is earlier than 0:1.6.1-24.4" test_ref="oval:org.mitre.oval:tst:30796"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="enscript is earlier than 0:1.6.1-28.3" test_ref="oval:org.mitre.oval:tst:31274"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9657" version="5" class="vulnerability">
      <metadata>
        <title>Gaim 1.2.0 allows remote attackers to cause a denial of service (application crash) via a malformed file transfer request to a Jabber user, which leads to an out-of-bounds read.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0967" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0967"/>
        <description>Gaim 1.2.0 allows remote attackers to cause a denial of service (application crash) via a malformed file transfer request to a Jabber user, which leads to an out-of-bounds read.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:58.882-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:18.132-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:22.969-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9657 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:50.647-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:06.881-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gaim is earlier than 1:1.2.1-4.el3" test_ref="oval:org.mitre.oval:tst:31686"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gaim is earlier than 1:1.2.1-4.el4" test_ref="oval:org.mitre.oval:tst:31403"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9656" version="5" class="vulnerability">
      <metadata>
        <title>Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted width value in an image file, which triggers an integer overflow and a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4988"/>
        <description>Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted width value in an image file, which triggers an integer overflow and a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:23.974-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:17.676-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:22.353-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9656 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:53.345-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:06.302-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36023"/>
            <criterion comment="ImageMagick is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36184"/>
            <criterion comment="ImageMagick-perl is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36260"/>
            <criterion comment="ImageMagick-devel is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36208"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36056"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:36311"/>
            <criterion comment="ImageMagick is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:36459"/>
            <criterion comment="ImageMagick-perl is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:36349"/>
            <criterion comment="ImageMagick-devel is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:35927"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:36106"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36419"/>
            <criterion comment="ImageMagick is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36360"/>
            <criterion comment="ImageMagick-perl is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36388"/>
            <criterion comment="ImageMagick-devel is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:35921"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36133"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9655" version="5" class="vulnerability">
      <metadata>
        <title>The wake_futex_pi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly handle certain unlock operations for a Priority Inheritance (PI) futex, which allows local users to cause a denial of service (OOPS) and possibly have unspecified other impact via vectors involving modification of the futex value from user space.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0622" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0622"/>
        <description>The wake_futex_pi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly handle certain unlock operations for a Priority Inheritance (PI) futex, which allows local users to cause a denial of service (OOPS) and possibly have unspecified other impact via vectors involving modification of the futex value from user space.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:00.784-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:17.345-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:21.977-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9655 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:25.839-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:05.853-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40501"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40283"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40807"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40842"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40793"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40732"/>
          <criterion comment="kernel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40830"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40349"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:39978"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:39896"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40791"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40580"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9654" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in the NDPS dissector in Ethereal before 0.10.11 allows remote attackers to cause a denial of service (memory exhaustion) via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1467" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1467"/>
        <description>Unknown vulnerability in the NDPS dissector in Ethereal before 0.10.11 allows remote attackers to cause a denial of service (memory exhaustion) via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:39.939-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:16.840-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:21.722-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9654 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:37.931-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:05.487-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31458"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31546"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31674"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31865"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9653" version="5" class="vulnerability">
      <metadata>
        <title>The HTBoundary_put_block function in HTBound.c for W3C libwww (w3c-libwww) allows remote servers to cause a denial of service (segmentation fault) via a crafted multipart/byteranges MIME message that triggers an out-of-bounds read.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3183" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3183"/>
        <description>The HTBoundary_put_block function in HTBound.c for W3C libwww (w3c-libwww) allows remote servers to cause a denial of service (segmentation fault) via a crafted multipart/byteranges MIME message that triggers an out-of-bounds read.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:13.552-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:16.636-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:21.503-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9653 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:58.745-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:05.180-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="w3c-libwww-devel is earlier than 0:5.4.0-10.1.RHEL4.2" test_ref="oval:org.mitre.oval:tst:33967"/>
          <criterion comment="w3c-libwww is earlier than 0:5.4.0-10.1.RHEL4.2" test_ref="oval:org.mitre.oval:tst:34049"/>
          <criterion comment="w3c-libwww-apps is earlier than 0:5.4.0-10.1.RHEL4.2" test_ref="oval:org.mitre.oval:tst:34020"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9652" version="5" class="vulnerability">
      <metadata>
        <title>pam_krb5 2.2.14 through 2.3.4, as used in Red Hat Enterprise Linux (RHEL) 5, generates different password prompts depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1384" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1384"/>
        <description>pam_krb5 2.2.14 through 2.3.4, as used in Red Hat Enterprise Linux (RHEL) 5, generates different password prompts depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:00.760-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:16.455-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:21.307-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9652 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:41:06.388-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:04.825-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="pam_krb5 is earlier than 0:2.2.14-15" test_ref="oval:org.mitre.oval:tst:40172"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9651" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to the JavaScript engine.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1237"/>
        <description>Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to the JavaScript engine.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:55.698-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:15.889-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:20.726-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9651 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:22.592-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:04.116-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36547"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36570"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36574"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:35661"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36605"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:35672"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:35874"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36533"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36355"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36379"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36587"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:35752"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-10.el4" test_ref="oval:org.mitre.oval:tst:36259"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36586"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36333"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36500"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.14.el4" test_ref="oval:org.mitre.oval:tst:35884"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36540"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36602"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36557"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36511"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36221"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-14.el5_1" test_ref="oval:org.mitre.oval:tst:36566"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-14.el5_1" test_ref="oval:org.mitre.oval:tst:36305"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-11.el5_1" test_ref="oval:org.mitre.oval:tst:36619"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9650" version="5" class="vulnerability">
      <metadata>
        <title>The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0401" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0401"/>
        <description>FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hijacking drag and drop events, which allows remote attackers to execute arbitrary XUL code by tricking a user into dragging a scrollbar, a variant of CVE-2005-0527, aka "Firescrolling 2."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:22.001-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:15.384-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:20.211-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9650 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:45.764-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:03.459-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31283"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31520"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31645"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31516"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31569"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31143"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31512"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31785"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31695"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31626"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:30665"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.3" test_ref="oval:org.mitre.oval:tst:31499"/>
            <criterion comment="mozilla is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31604"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31381"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31622"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:30651"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.3" test_ref="oval:org.mitre.oval:tst:31560"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31110"/>
            <criterion comment="evolution is earlier than 0:2.0.2-14" test_ref="oval:org.mitre.oval:tst:31003"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31404"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31375"/>
            <criterion comment="firefox is earlier than 0:1.0.2-1.4.1" test_ref="oval:org.mitre.oval:tst:31302"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31106"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31418"/>
            <criterion comment="evolution-devel is earlier than 0:2.0.2-14" test_ref="oval:org.mitre.oval:tst:31558"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9649" version="5" class="vulnerability">
      <metadata>
        <title>The kernel in Red Hat Enterprise Linux 3, when running on SMP systems, allows local users to cause a denial of service (deadlock) by running the shmat function on an shm at the same time that shmctl is removing that shm (IPC_RMID), which prevents a spinlock from being unlocked.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4342"/>
        <description>The kernel in Red Hat Enterprise Linux 3, when running on SMP systems, allows local users to cause a denial of service (deadlock) by running the shmat function on an shm at the same time that shmctl is removing that shm (IPC_RMID), which prevents a spinlock from being unlocked.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:35.508-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:15.104-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:19.865-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9649 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:38.372-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:03.096-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33074"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:32633"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33103"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33001"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:32937"/>
          <criterion comment="kernel is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:32280"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33127"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:32855"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33021"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9648" version="5" class="vulnerability">
      <metadata>
        <title>The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4814"/>
        <description>The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:22.505-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:14.645-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:19.433-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9648 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:07.524-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:02.479-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:35915"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:35794"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36513"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36264"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36161"/>
            <criterion comment="kernel is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36518"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36597"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36612"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36171"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33204"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33278"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33306"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32378"/>
            <criterion comment="kernel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33145"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33107"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32620"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32645"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33057"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9647" version="5" class="vulnerability">
      <metadata>
        <title>The find_target function in ptrace32.c in the Linux kernel 2.4.x before 2.4.29 does not properly handle a NULL return value from another function, which allows local users to cause a denial of service (kernel crash/oops) by running a 32-bit ltrace program with the -i option on a 64-bit executable program.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2553" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2553"/>
        <description>The find_target function in ptrace32.c in the Linux kernel 2.4.x before 2.4.29 does not properly handle a NULL return value from another function, which allows local users to cause a denial of service (kernel crash/oops) by running a 32-bit ltrace program with the -i option on a 64-bit executable program.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:16.353-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:14.360-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:19.138-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9647 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:14.004-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:02.105-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31411"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31953"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31879"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31990"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31485"/>
          <criterion comment="kernel is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32093"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31968"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32148"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31741"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9646" version="5" class="vulnerability">
      <metadata>
        <title>The rb_str_format function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2 allows context-dependent attackers to trigger memory corruption via unspecified vectors related to alloca, a different issue than CVE-2008-2662, CVE-2008-2663, and CVE-2008-2725.  NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. The CVE description should be regarded as authoritative, although it is likely to change.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2664" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2664"/>
        <description>The rb_str_format function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2 allows context-dependent attackers to trigger memory corruption via unspecified vectors related to alloca, a different issue than CVE-2008-2662, CVE-2008-2663, and CVE-2008-2725.  NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. The CVE description should be regarded as authoritative, although it is likely to change.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:29.319-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:13.814-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:18.590-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9646 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:37.324-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:01.366-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:36968"/>
            <criterion comment="ruby-docs is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37000"/>
            <criterion comment="ruby-devel is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:36747"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37140"/>
            <criterion comment="ruby is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37342"/>
            <criterion comment="irb is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37252"/>
            <criterion comment="ruby-libs is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37305"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:37171"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:37242"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:36569"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:37296"/>
            <criterion comment="ruby is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:36468"/>
            <criterion comment="irb is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:36808"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:37219"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-ri is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37199"/>
            <criterion comment="ruby-mode is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:36604"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:36516"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:36870"/>
            <criterion comment="ruby is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:36738"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37119"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37289"/>
            <criterion comment="ruby-irb is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37148"/>
            <criterion comment="ruby-rdoc is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37203"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9645" version="5" class="vulnerability">
      <metadata>
        <title>Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1165" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1165"/>
        <description>Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:33.502-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:13.548-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:18.310-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9645 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:31.530-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:00.881-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdebase is earlier than 6:3.1.3-5.8" test_ref="oval:org.mitre.oval:tst:31113"/>
            <criterion comment="kdebase-devel is earlier than 6:3.1.3-5.8" test_ref="oval:org.mitre.oval:tst:31092"/>
            <criterion comment="kdelibs is earlier than 6:3.1.3-6.9" test_ref="oval:org.mitre.oval:tst:30244"/>
            <criterion comment="kdelibs-devel is earlier than 6:3.1.3-6.9" test_ref="oval:org.mitre.oval:tst:30826"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdelibs is earlier than 6:3.3.1-3.3" test_ref="oval:org.mitre.oval:tst:31221"/>
            <criterion comment="kdelibs-devel is earlier than 6:3.3.1-3.3" test_ref="oval:org.mitre.oval:tst:30975"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9644" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the dccp_feat_change function in net/dccp/feat.c in the Datagram Congestion Control Protocol (DCCP) subsystem in the Linux kernel 2.6.18, and 2.6.17 through 2.6.20, allows local users to gain privileges via an invalid feature length, which leads to a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2358" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2358"/>
        <description>Integer overflow in the dccp_feat_change function in net/dccp/feat.c in the Datagram Congestion Control Protocol (DCCP) subsystem in the Linux kernel 2.6.18, and 2.6.17 through 2.6.20, allows local users to gain privileges via an invalid feature length, which leads to a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:17.061-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:13.236-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:17.926-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9644 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:00.946-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:21:00.460-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:36992"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:37039"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:36460"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:36799"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:37005"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:37063"/>
          <criterion comment="kernel is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:36981"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:36704"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:36937"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:36703"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:36996"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:36869"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9643" version="5" class="vulnerability">
      <metadata>
        <title>The nsXMLDocument::OnChannelRedirect function in Mozilla Firefox before 2.0.0.17, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3835" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3835"/>
        <description>The nsXMLDocument::OnChannelRedirect function in Mozilla Firefox before 2.0.0.17, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:58.351-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:12.714-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:17.442-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9643 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:23.890-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:59.773-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37411"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36691"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37031"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37528"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36726"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37435"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37680"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36725"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37449"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37356"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.10.el4" test_ref="oval:org.mitre.oval:tst:37564"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:36913"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-16.el4" test_ref="oval:org.mitre.oval:tst:37634"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37609"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.10.el4" test_ref="oval:org.mitre.oval:tst:37306"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37499"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37444"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37543"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37552"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="thunderbird is earlier than 0:2.0.0.17-1.el5" test_ref="oval:org.mitre.oval:tst:37230"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9642" version="5" class="vulnerability">
      <metadata>
        <title>nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying properties of a file input element while it is still being initialized, then using the blur method to access uninitialized memory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5021" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5021"/>
        <description>nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying properties of a file input element while it is still being initialized, then using the blur method to access uninitialized memory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:55.209-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:12.109-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:16.777-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9642 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:22.254-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:58.939-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37159"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37875"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37293"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37934"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37671"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37932"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37970"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37357"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37852"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37844"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37232"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-3.el4" test_ref="oval:org.mitre.oval:tst:38065"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-17.el4" test_ref="oval:org.mitre.oval:tst:37872"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37914"/>
            <criterion comment="firefox is earlier than 0:3.0.4-1.el4" test_ref="oval:org.mitre.oval:tst:37904"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-3.el4" test_ref="oval:org.mitre.oval:tst:37840"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37991"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37955"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37777"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:38009"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-20.el5" test_ref="oval:org.mitre.oval:tst:37773"/>
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37531"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37899"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37454"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.18-1.el5" test_ref="oval:org.mitre.oval:tst:38015"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:38021"/>
            <criterion comment="yelp is earlier than 0:2.16.0-22.el5" test_ref="oval:org.mitre.oval:tst:37645"/>
            <criterion comment="devhelp is earlier than 0:0.12-20.el5" test_ref="oval:org.mitre.oval:tst:37958"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37388"/>
            <criterion comment="firefox is earlier than 0:3.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37066"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37648"/>
            <criterion comment="nss-tools is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37936"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9641" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp location before the download occurs, related to the Download Manager component. NOTE: some of these details are obtained from third party information.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3274" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3274"/>
        <description>Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp location before the download occurs, related to the Download Manager component. NOTE: some of these details are obtained from third party information.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:58.227-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:11.501-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:16.210-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9641 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:12.067-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:58.197-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39570"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39466"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39720"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39691"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39583"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39280"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39727"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39550"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39575"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39724"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nspr is earlier than 0:4.7.6-1.el4_8" test_ref="oval:org.mitre.oval:tst:39525"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39481"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-25.el4" test_ref="oval:org.mitre.oval:tst:40299"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.6-1.el4_8" test_ref="oval:org.mitre.oval:tst:38755"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39675"/>
            <criterion comment="firefox is earlier than 0:3.0.15-3.el4" test_ref="oval:org.mitre.oval:tst:39710"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39683"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39031"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39547"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39753"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39602"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39541"/>
            <criterion comment="nspr is earlier than 0:4.7.6-1.el5_4" test_ref="oval:org.mitre.oval:tst:39168"/>
            <criterion comment="firefox is earlier than 0:3.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39294"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.24-2.el5_4" test_ref="oval:org.mitre.oval:tst:40249"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.6-1.el5_4" test_ref="oval:org.mitre.oval:tst:39579"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39636"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9640" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet clients allows remote attackers to execute arbitrary code via responses that contain a large number of characters that require escaping, which consumers more memory than allocated.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0468" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0468"/>
        <description>Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet clients allows remote attackers to execute arbitrary code via responses that contain a large number of characters that require escaping, which consumers more memory than allocated.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:52.520-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:11.141-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:15.765-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9640 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:34.936-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:57.484-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.2.7-42" test_ref="oval:org.mitre.oval:tst:31573"/>
            <criterion comment="krb5 is earlier than 0:1.2.7-42" test_ref="oval:org.mitre.oval:tst:31050"/>
            <criterion comment="krb5-libs is earlier than 0:1.2.7-42" test_ref="oval:org.mitre.oval:tst:31373"/>
            <criterion comment="telnet is earlier than 1:0.17-26.EL3.2" test_ref="oval:org.mitre.oval:tst:31054"/>
            <criterion comment="krb5-server is earlier than 0:1.2.7-42" test_ref="oval:org.mitre.oval:tst:31472"/>
            <criterion comment="telnet-server is earlier than 1:0.17-26.EL3.2" test_ref="oval:org.mitre.oval:tst:31463"/>
            <criterion comment="krb5-devel is earlier than 0:1.2.7-42" test_ref="oval:org.mitre.oval:tst:31015"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.3.4-12" test_ref="oval:org.mitre.oval:tst:31409"/>
            <criterion comment="krb5 is earlier than 0:1.3.4-12" test_ref="oval:org.mitre.oval:tst:30952"/>
            <criterion comment="krb5-libs is earlier than 0:1.3.4-12" test_ref="oval:org.mitre.oval:tst:31575"/>
            <criterion comment="telnet is earlier than 1:0.17-31.EL4.2" test_ref="oval:org.mitre.oval:tst:31498"/>
            <criterion comment="krb5-server is earlier than 0:1.3.4-12" test_ref="oval:org.mitre.oval:tst:31481"/>
            <criterion comment="telnet-server is earlier than 1:0.17-31.EL4.2" test_ref="oval:org.mitre.oval:tst:31275"/>
            <criterion comment="krb5-devel is earlier than 0:1.3.4-12" test_ref="oval:org.mitre.oval:tst:31526"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9639" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in shtool 2.0.1 and earlier allows local users to create or modify arbitrary files via a symlink attack on the .shtool.$$ temporary file, a different vulnerability than CVE-2005-1759.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1751" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1751"/>
        <description>Race condition in shtool 2.0.1 and earlier allows local users to create or modify arbitrary files via a symlink attack on the .shtool.$$ temporary file, a different vulnerability than CVE-2005-1759.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:12.818-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:10.629-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:15.296-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9639 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:47.453-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:56.852-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-24.ent" test_ref="oval:org.mitre.oval:tst:31903"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-24.ent" test_ref="oval:org.mitre.oval:tst:31997"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-24.ent" test_ref="oval:org.mitre.oval:tst:32058"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-24.ent" test_ref="oval:org.mitre.oval:tst:32011"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-24.ent" test_ref="oval:org.mitre.oval:tst:31769"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-24.ent" test_ref="oval:org.mitre.oval:tst:31610"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-24.ent" test_ref="oval:org.mitre.oval:tst:32022"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.7" test_ref="oval:org.mitre.oval:tst:31993"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.7" test_ref="oval:org.mitre.oval:tst:31996"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.7" test_ref="oval:org.mitre.oval:tst:32047"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.7" test_ref="oval:org.mitre.oval:tst:31303"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.7" test_ref="oval:org.mitre.oval:tst:31718"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.7" test_ref="oval:org.mitre.oval:tst:31829"/>
            <criterion comment="php is earlier than 0:4.3.9-3.7" test_ref="oval:org.mitre.oval:tst:31181"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.7" test_ref="oval:org.mitre.oval:tst:32064"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.7" test_ref="oval:org.mitre.oval:tst:31623"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.7" test_ref="oval:org.mitre.oval:tst:31882"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.7" test_ref="oval:org.mitre.oval:tst:31988"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.7" test_ref="oval:org.mitre.oval:tst:32010"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.7" test_ref="oval:org.mitre.oval:tst:31662"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.7" test_ref="oval:org.mitre.oval:tst:31873"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9638" version="5" class="vulnerability">
      <metadata>
        <title>The KEYCTL_JOIN_SESSION_KEYRING operation in the Linux kernel before 2.6.12.5 contains an error path that does not properly release the session management semaphore, which allows local users or remote attackers to cause a denial of service (semaphore hang) via a new session keyring (1) with an empty name string, (2) with a long name string, (3) with the key quota reached, or (4) ENOMEM.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2098" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2098"/>
        <description>The KEYCTL_JOIN_SESSION_KEYRING operation in the Linux kernel before 2.6.12.5 contains an error path that does not properly release the session management semaphore, which allows local users or remote attackers to cause a denial of service (semaphore hang) via a new session keyring (1) with an empty name string, (2) with a long name string, (3) with the key quota reached, or (4) ENOMEM.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:06.868-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:10.370-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:14.983-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9638 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:33.919-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:56.490-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31896"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31885"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31861"/>
          <criterion comment="kernel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31550"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31914"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31924"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:32023"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9637" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) via a malformed JavaScript regular expression that ends with a backslash in an unterminated character set ("[\\"), which leads to a buffer over-read.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4566" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4566"/>
        <description>Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) via a malformed JavaScript regular expression that ends with a backslash in an unterminated character set ("[\\"), which leads to a buffer over-read.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:17.073-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:09.831-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:14.486-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9637 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:59:15.289-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:55.807-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32759"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32989"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32809"/>
            <criterion comment="seamonkey is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32779"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32954"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32668"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:33010"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32811"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32981"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:33061"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.4.el4" test_ref="oval:org.mitre.oval:tst:32072"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:33120"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32842"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:32910"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32677"/>
            <criterion comment="seamonkey is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32933"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32243"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.4.el4" test_ref="oval:org.mitre.oval:tst:33062"/>
            <criterion comment="firefox is earlier than 0:1.5.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:32951"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32978"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:33072"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:33079"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32121"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:33077"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9636" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in pdftops filter in CUPS in Red Hat Enterprise Linux 3 and 4, when running on 64-bit platforms, allows remote attackers to execute arbitrary code via a crafted PDF file.  NOTE: this issue is due to an incomplete fix for CVE-2004-0888.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1374" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1374"/>
        <description>Integer overflow in pdftops filter in CUPS in Red Hat Enterprise Linux 3 and 4, when running on 64-bit platforms, allows remote attackers to execute arbitrary code via a crafted PDF file.  NOTE: this issue is due to an incomplete fix for CVE-2004-0888.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:28.387-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:09.568-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:14.202-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9636 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:58.347-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:55.408-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.52" test_ref="oval:org.mitre.oval:tst:36146"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.52" test_ref="oval:org.mitre.oval:tst:36214"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.52" test_ref="oval:org.mitre.oval:tst:36403"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.6" test_ref="oval:org.mitre.oval:tst:36474"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.6" test_ref="oval:org.mitre.oval:tst:35913"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.6" test_ref="oval:org.mitre.oval:tst:36036"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9635" version="5" class="vulnerability">
      <metadata>
        <title>Untrusted search path vulnerability in a certain Red Hat build script for Standards Based Linux Instrumentation for Manageability (sblim) libraries before 1-13a.el4_6.1 in Red Hat Enterprise Linux (RHEL) 4, and before 1-31.el5_2.1 in RHEL 5, allows local users to gain privileges via a malicious library in a certain subdirectory of /var/tmp, related to an incorrect RPATH setting, as demonstrated by a malicious libc.so library for tog-pegasus.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1951" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1951"/>
        <description>Untrusted search path vulnerability in a certain Red Hat build script for Standards Based Linux Instrumentation for Manageability (sblim) libraries before 1-13a.el4_6.1 in Red Hat Enterprise Linux (RHEL) 4, and before 1-31.el5_2.1 in RHEL 5, allows local users to gain privileges via a malicious library in a certain subdirectory of /var/tmp, related to an incorrect RPATH setting, as demonstrated by a malicious libc.so library for tog-pegasus.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:25.732-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:08.533-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:13.150-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9635 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:29.302-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:54.200-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="sblim-cmpi-nfsv3-test is earlier than 0:1.0.13-13a.el4_6.1" test_ref="oval:org.mitre.oval:tst:36852"/>
            <criterion comment="sblim-cmpi-params is earlier than 0:1.2.4-13a.el4_6.1" test_ref="oval:org.mitre.oval:tst:36779"/>
            <criterion comment="sblim-cmpi-nfsv3 is earlier than 0:1.0.13-13a.el4_6.1" test_ref="oval:org.mitre.oval:tst:36564"/>
            <criterion comment="sblim-cmpi-devel is earlier than 0:1.0.4-13a.el4_6.1" test_ref="oval:org.mitre.oval:tst:36536"/>
            <criterion comment="sblim-wbemcli is earlier than 0:1.5.1-13a.el4_6.1" test_ref="oval:org.mitre.oval:tst:36791"/>
            <criterion comment="sblim-cmpi-nfsv4 is earlier than 0:1.0.11-13a.el4_6.1" test_ref="oval:org.mitre.oval:tst:36824"/>
            <criterion comment="sblim-cmpi-fsvol-test is earlier than 0:1.4.3-13a.el4_6.1" test_ref="oval:org.mitre.oval:tst:36765"/>
            <criterion comment="sblim-cmpi-network is earlier than 0:1.3.7-13a.el4_6.1" test_ref="oval:org.mitre.oval:tst:36588"/>
            <criterion comment="sblim-cmpi-syslog is earlier than 0:0.7.9-13a.el4_6.1" test_ref="oval:org.mitre.oval:tst:36247"/>
            <criterion comment="sblim-cmpi-syslog-test is earlier than 0:0.7.9-13a.el4_6.1" test_ref="oval:org.mitre.oval:tst:36076"/>
            <criterion comment="sblim-cmpi-fsvol is earlier than 0:1.4.3-13a.el4_6.1" test_ref="oval:org.mitre.oval:tst:36660"/>
            <criterion comment="sblim-gather-devel is earlier than 0:2.1.1-13a.el4_6.1" test_ref="oval:org.mitre.oval:tst:36712"/>
            <criterion comment="sblim-cmpi-network-test is earlier than 0:1.3.7-13a.el4_6.1" test_ref="oval:org.mitre.oval:tst:36650"/>
            <criterion comment="sblim-cmpi-fsvol-devel is earlier than 0:1.4.3-13a.el4_6.1" test_ref="oval:org.mitre.oval:tst:36717"/>
            <criterion comment="sblim-cmpi-network-devel is earlier than 0:1.3.7-13a.el4_6.1" test_ref="oval:org.mitre.oval:tst:36209"/>
            <criterion comment="sblim-gather-test is earlier than 0:2.1.1-13a.el4_6.1" test_ref="oval:org.mitre.oval:tst:36775"/>
            <criterion comment="sblim-cmpi-base is earlier than 0:1.5.4-13a.el4_6.1" test_ref="oval:org.mitre.oval:tst:36759"/>
            <criterion comment="sblim-gather-provider is earlier than 0:2.1.1-13a.el4_6.1" test_ref="oval:org.mitre.oval:tst:36250"/>
            <criterion comment="sblim-cmpi-params-test is earlier than 0:1.2.4-13a.el4_6.1" test_ref="oval:org.mitre.oval:tst:36849"/>
            <criterion comment="sblim-cmpi-nfsv4-test is earlier than 0:1.0.11-13a.el4_6.1" test_ref="oval:org.mitre.oval:tst:36095"/>
            <criterion comment="sblim-cmpi-sysfs is earlier than 0:1.1.8-13a.el4_6.1" test_ref="oval:org.mitre.oval:tst:36718"/>
            <criterion comment="sblim-cmpi-base-test is earlier than 0:1.5.4-13a.el4_6.1" test_ref="oval:org.mitre.oval:tst:36724"/>
            <criterion comment="sblim-cmpi-base-devel is earlier than 0:1.5.4-13a.el4_6.1" test_ref="oval:org.mitre.oval:tst:36680"/>
            <criterion comment="sblim is earlier than 0:1-13a.el4_6.1" test_ref="oval:org.mitre.oval:tst:36800"/>
            <criterion comment="sblim-testsuite is earlier than 0:1.2.4-13a.el4_6.1" test_ref="oval:org.mitre.oval:tst:36753"/>
            <criterion comment="sblim-gather is earlier than 0:2.1.1-13a.el4_6.1" test_ref="oval:org.mitre.oval:tst:36780"/>
            <criterion comment="sblim-cmpi-sysfs-test is earlier than 0:1.1.8-13a.el4_6.1" test_ref="oval:org.mitre.oval:tst:36842"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="sblim-cim-client-javadoc is earlier than 0:1-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36701"/>
            <criterion comment="sblim-wbemcli is earlier than 0:1.5.1-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36793"/>
            <criterion comment="sblim-cmpi-samba-test is earlier than 0:1-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36850"/>
            <criterion comment="sblim-cmpi-nfsv4 is earlier than 0:1.0.12-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36447"/>
            <criterion comment="sblim-cmpi-fsvol-test is earlier than 0:1.4.4-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36689"/>
            <criterion comment="sblim-cmpi-syslog is earlier than 0:0.7.11-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36783"/>
            <criterion comment="sblim-cmpi-fsvol is earlier than 0:1.4.4-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36787"/>
            <criterion comment="sblim-cmpi-fsvol-devel is earlier than 0:1.4.4-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36899"/>
            <criterion comment="sblim-gather-test is earlier than 0:2.1.2-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:35986"/>
            <criterion comment="sblim-gather-provider is earlier than 0:2.1.2-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36687"/>
            <criterion comment="sblim-cmpi-params-test is earlier than 0:1.2.6-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36673"/>
            <criterion comment="sblim-cmpi-dns is earlier than 0:0.5.2-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36001"/>
            <criterion comment="sblim-cmpi-dns-test is earlier than 0:1-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36196"/>
            <criterion comment="sblim-cmpi-samba-devel is earlier than 0:1-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36797"/>
            <criterion comment="sblim-cmpi-dns-devel is earlier than 0:1-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36692"/>
            <criterion comment="sblim-testsuite is earlier than 0:1.2.4-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36633"/>
            <criterion comment="sblim-gather is earlier than 0:2.1.2-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36802"/>
            <criterion comment="sblim-tools-libra is earlier than 0:0.2.3-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36489"/>
            <criterion comment="sblim-cmpi-nfsv3-test is earlier than 0:1.0.14-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36714"/>
            <criterion comment="sblim-cmpi-devel is earlier than 0:1.0.4-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36888"/>
            <criterion comment="sblim-cmpi-nfsv3 is earlier than 0:1.0.14-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36479"/>
            <criterion comment="sblim-cmpi-params is earlier than 0:1.2.6-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36857"/>
            <criterion comment="sblim-tools-libra-devel is earlier than 0:0.2.3-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36970"/>
            <criterion comment="sblim-cmpi-network is earlier than 0:1.3.8-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36578"/>
            <criterion comment="sblim-cmpi-syslog-test is earlier than 0:0.7.11-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:35968"/>
            <criterion comment="sblim-cmpi-network-test is earlier than 0:1.3.8-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36896"/>
            <criterion comment="sblim-gather-devel is earlier than 0:2.1.2-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36721"/>
            <criterion comment="sblim-cmpi-network-devel is earlier than 0:1.3.8-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36890"/>
            <criterion comment="sblim-cmpi-base is earlier than 0:1.5.5-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36892"/>
            <criterion comment="sblim-cim-client is earlier than 0:1.3.3-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36709"/>
            <criterion comment="sblim-cmpi-nfsv4-test is earlier than 0:1.0.12-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36856"/>
            <criterion comment="sblim-cim-client-manual is earlier than 0:1-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36889"/>
            <criterion comment="sblim-cmpi-sysfs is earlier than 0:1.1.9-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:35937"/>
            <criterion comment="sblim-cmpi-base-test is earlier than 0:1.5.5-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36354"/>
            <criterion comment="sblim-cmpi-samba is earlier than 0:0.5.2-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:35992"/>
            <criterion comment="sblim is earlier than 0:1-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36245"/>
            <criterion comment="sblim-cmpi-base-devel is earlier than 0:1.5.5-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36624"/>
            <criterion comment="sblim-cmpi-sysfs-test is earlier than 0:1.1.9-31.el5_2.1" test_ref="oval:org.mitre.oval:tst:36863"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9634" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0159"/>
        <description>Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:50.551-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:08.263-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:12.825-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9634 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:38.616-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:53.699-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="ntp is earlier than 0:4.1.2-6.el3" test_ref="oval:org.mitre.oval:tst:39300"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="ntp is earlier than 0:4.2.0.a.20040617-8.el4_7.2" test_ref="oval:org.mitre.oval:tst:38589"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="ntp is earlier than 0:4.2.2p1-9.el5_3.2" test_ref="oval:org.mitre.oval:tst:38719"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9633" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as (1) source-code tokens and (2) pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0148" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0148"/>
        <description>Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as (1) source-code tokens and (2) pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:48.722-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:07.962-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:12.554-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9633 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:30.994-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:53.267-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="cscope is earlier than 0:15.5-16.RHEL3" test_ref="oval:org.mitre.oval:tst:38743"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="cscope is earlier than 0:15.5-10.RHEL4.3" test_ref="oval:org.mitre.oval:tst:38662"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="cscope is earlier than 0:15.5-15.1.el5_3.1" test_ref="oval:org.mitre.oval:tst:38706"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9632" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2SymbolDict::setBitmap and (2) JBIG2Stream::readSymbolDictSeg.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0146" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0146"/>
        <description>Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2SymbolDict::setBitmap and (2) JBIG2Stream::readSymbolDictSeg.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:58.393-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:07.366-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:11.756-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9632 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:15.795-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:52.340-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="xpdf is earlier than 1:2.02-14.el3" test_ref="oval:org.mitre.oval:tst:38322"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40095"/>
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-13.el4" test_ref="oval:org.mitre.oval:tst:38126"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:39528"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-13.el4" test_ref="oval:org.mitre.oval:tst:38230"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40473"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38481"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40316"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-7.7.2.el4_7.4" test_ref="oval:org.mitre.oval:tst:38436"/>
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38145"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40209"/>
            <criterion comment="xpdf is earlier than 1:3.00-20.el4" test_ref="oval:org.mitre.oval:tst:38649"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40364"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40077"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38607"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.5.4-12.el5_3" test_ref="oval:org.mitre.oval:tst:38618"/>
            <criterion comment="cups-lpd is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38471"/>
            <criterion comment="tetex-dvips is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40312"/>
            <criterion comment="kdegraphics is earlier than 7:3.5.4-12.el5_3" test_ref="oval:org.mitre.oval:tst:38271"/>
            <criterion comment="poppler is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38760"/>
            <criterion comment="tetex-fonts is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40122"/>
            <criterion comment="cups-libs is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38541"/>
            <criterion comment="tetex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40413"/>
            <criterion comment="tetex-doc is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40398"/>
            <criterion comment="poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38500"/>
            <criterion comment="tetex-latex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40444"/>
            <criterion comment="poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38512"/>
            <criterion comment="cups-devel is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:37935"/>
            <criterion comment="tetex-afm is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40008"/>
            <criterion comment="tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:39920"/>
            <criterion comment="cups is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38334"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9631" version="5" class="vulnerability">
      <metadata>
        <title>The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a scheduler request with two consecutive IPP_TAG_UNSUPPORTED tags.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0949" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0949"/>
        <description>The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a scheduler request with two consecutive IPP_TAG_UNSUPPORTED tags.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:10.975-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:06.986-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:11.407-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9631 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:49.651-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:51.784-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.62" test_ref="oval:org.mitre.oval:tst:38765"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.62" test_ref="oval:org.mitre.oval:tst:37797"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.62" test_ref="oval:org.mitre.oval:tst:38735"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3" test_ref="oval:org.mitre.oval:tst:38351"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3" test_ref="oval:org.mitre.oval:tst:38503"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3" test_ref="oval:org.mitre.oval:tst:38748"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-lpd is earlier than 1:1.3.7-8.el5_3.6" test_ref="oval:org.mitre.oval:tst:38713"/>
            <criterion comment="cups-devel is earlier than 1:1.3.7-8.el5_3.6" test_ref="oval:org.mitre.oval:tst:38764"/>
            <criterion comment="cups is earlier than 1:1.3.7-8.el5_3.6" test_ref="oval:org.mitre.oval:tst:38681"/>
            <criterion comment="cups-libs is earlier than 1:1.3.7-8.el5_3.6" test_ref="oval:org.mitre.oval:tst:38653"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9630" version="5" class="vulnerability">
      <metadata>
        <title>net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure arbitrary network-traffic filtering via a modified ebtables application.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0007"/>
        <description>net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure arbitrary network-traffic filtering via a modified ebtables application.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:12.864-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:06.379-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:10.854-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9630 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:16:47.681-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:51.155-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40241"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40097"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40139"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40308"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40210"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40082"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40354"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40326"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:39940"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:39363"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:39805"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40228"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40098"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40231"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:39918"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:39938"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40088"/>
            <criterion comment="kernel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40237"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:39997"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40240"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40352"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:39930"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40055"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:963" version="4" class="vulnerability">
      <metadata>
        <title>IE File Upload Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0114" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0114"/>
        <description>The file upload control in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to automatically upload files from the local system via a web page containing a script to upload the files.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2004-09-22T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-09-22T11:10:00.000-04:00" comment="Replaced IE cumulative patch IDs to correspond to the original IDs">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2004-10-06T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:56.449-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:28.786-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
        <criterion comment="the version of mshtml.dll is less than 5.50.4926.2500" negate="false" test_ref="oval:org.mitre.oval:tst:1454"/>
        <criterion comment="the patch q813489 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3114"/>
        <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        <criterion comment="the patch q832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2588"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9629" version="5" class="vulnerability">
      <metadata>
        <title>The WLCCP dissector in Wireshark 0.99.7 through 1.0.4 allows remote attackers to cause a denial of service (infinite loop) via unspecified vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-6472" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6472"/>
        <description>The WLCCP dissector in Wireshark 0.99.7 through 1.0.4 allows remote attackers to cause a denial of service (infinite loop) via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:57.215-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:06.089-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:10.553-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9629 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:54.445-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:50.613-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-EL3.3" test_ref="oval:org.mitre.oval:tst:38023"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-EL3.3" test_ref="oval:org.mitre.oval:tst:38321"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-2.el4_7" test_ref="oval:org.mitre.oval:tst:38000"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-2.el4_7" test_ref="oval:org.mitre.oval:tst:38041"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-2.el5_3" test_ref="oval:org.mitre.oval:tst:38236"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-2.el5_3" test_ref="oval:org.mitre.oval:tst:38085"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9628" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla 1.7.8, Firefox 1.0.4, Camino 0.8.4, Netscape 8.0.2, and K-Meleon 0.9, and possibly other products that use the Gecko engine, allow remote attackers to cause a denial of service (application crash) via JavaScript that repeatedly calls an empty function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2114" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2114"/>
        <description>Mozilla 1.7.8, Firefox 1.0.4, Camino 0.8.4, Netscape 8.0.2, and K-Meleon 0.9, and possibly other products that use the Gecko engine, allow remote attackers to cause a denial of service (application crash) via JavaScript that repeatedly calls an empty function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:45.537-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:05.549-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:10.068-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9628 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:17.225-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:49.964-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32142"/>
            <criterion comment="mozilla is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32131"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32154"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32001"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32171"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32162"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31782"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32041"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32004"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31353"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32120"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.6" test_ref="oval:org.mitre.oval:tst:31633"/>
            <criterion comment="mozilla is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31837"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32100"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31821"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31904"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.6" test_ref="oval:org.mitre.oval:tst:31814"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31951"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31554"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32149"/>
            <criterion comment="firefox is earlier than 0:1.0.6-1.4.1" test_ref="oval:org.mitre.oval:tst:32167"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31998"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32061"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9627" version="5" class="vulnerability">
      <metadata>
        <title>The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses in-bailiwick referrals to conduct cache poisoning against recursive resolvers, related to insufficient randomness of DNS transaction IDs and source ports, aka "DNS Insufficient Socket Entropy Vulnerability" or "the Kaminsky bug."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1447" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1447"/>
        <description>The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses in-bailiwick referrals to conduct cache poisoning against recursive resolvers, related to insufficient randomness of DNS transaction IDs and source ports, aka "DNS Insufficient Socket Entropy Vulnerability" or "the Kaminsky bug."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:23.903-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:04.970-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:09.484-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9627 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:41.687-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:49.236-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="bind-utils is earlier than 20:9.2.4-22.el3" test_ref="oval:org.mitre.oval:tst:37016"/>
            <criterion comment="bind-devel is earlier than 20:9.2.4-22.el3" test_ref="oval:org.mitre.oval:tst:37047"/>
            <criterion comment="bind-chroot is earlier than 20:9.2.4-22.el3" test_ref="oval:org.mitre.oval:tst:36733"/>
            <criterion comment="bind is earlier than 20:9.2.4-22.el3" test_ref="oval:org.mitre.oval:tst:36959"/>
            <criterion comment="bind-libs is earlier than 20:9.2.4-22.el3" test_ref="oval:org.mitre.oval:tst:37048"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="bind-utils is earlier than 20:9.2.4-28.0.1.el4" test_ref="oval:org.mitre.oval:tst:36719"/>
            <criterion comment="bind-devel is earlier than 20:9.2.4-28.0.1.el4" test_ref="oval:org.mitre.oval:tst:36575"/>
            <criterion comment="bind-chroot is earlier than 20:9.2.4-28.0.1.el4" test_ref="oval:org.mitre.oval:tst:37082"/>
            <criterion comment="selinux-policy-targeted is earlier than 0:1.17.30-2.150.el4" test_ref="oval:org.mitre.oval:tst:36876"/>
            <criterion comment="selinux-policy-targeted-sources is earlier than 0:1.17.30-2.150.el4" test_ref="oval:org.mitre.oval:tst:37007"/>
            <criterion comment="bind is earlier than 20:9.2.4-28.0.1.el4" test_ref="oval:org.mitre.oval:tst:36100"/>
            <criterion comment="bind-libs is earlier than 20:9.2.4-28.0.1.el4" test_ref="oval:org.mitre.oval:tst:36925"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="bind-libbind-devel is earlier than 30:9.3.4-6.0.2.P1.el5_2" test_ref="oval:org.mitre.oval:tst:37003"/>
            <criterion comment="bind-devel is earlier than 30:9.3.4-6.0.2.P1.el5_2" test_ref="oval:org.mitre.oval:tst:37017"/>
            <criterion comment="bind-chroot is earlier than 30:9.3.4-6.0.2.P1.el5_2" test_ref="oval:org.mitre.oval:tst:36924"/>
            <criterion comment="selinux-policy-targeted is earlier than 0:2.4.6-137.1.el5_2" test_ref="oval:org.mitre.oval:tst:37069"/>
            <criterion comment="dnsmasq is earlier than 0:2.45-1.el5_2.1" test_ref="oval:org.mitre.oval:tst:37588"/>
            <criterion comment="bind-sdb is earlier than 30:9.3.4-6.0.2.P1.el5_2" test_ref="oval:org.mitre.oval:tst:36601"/>
            <criterion comment="bind is earlier than 30:9.3.4-6.0.2.P1.el5_2" test_ref="oval:org.mitre.oval:tst:36960"/>
            <criterion comment="bind-utils is earlier than 30:9.3.4-6.0.2.P1.el5_2" test_ref="oval:org.mitre.oval:tst:36962"/>
            <criterion comment="selinux-policy-devel is earlier than 0:2.4.6-137.1.el5_2" test_ref="oval:org.mitre.oval:tst:36667"/>
            <criterion comment="caching-nameserver is earlier than 30:9.3.4-6.0.2.P1.el5_2" test_ref="oval:org.mitre.oval:tst:36806"/>
            <criterion comment="selinux-policy is earlier than 0:2.4.6-137.1.el5_2" test_ref="oval:org.mitre.oval:tst:36092"/>
            <criterion comment="bind-libs is earlier than 30:9.3.4-6.0.2.P1.el5_2" test_ref="oval:org.mitre.oval:tst:37038"/>
            <criterion comment="selinux-policy-strict is earlier than 0:2.4.6-137.1.el5_2" test_ref="oval:org.mitre.oval:tst:36853"/>
            <criterion comment="selinux-policy-mls is earlier than 0:2.4.6-137.1.el5_2" test_ref="oval:org.mitre.oval:tst:36790"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9626" version="5" class="vulnerability">
      <metadata>
        <title>Use-after-free vulnerability in the LiveConnect bridge code for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to cause a denial of service (crash) via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6502" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6502"/>
        <description>Use-after-free vulnerability in the LiveConnect bridge code for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to cause a denial of service (crash) via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:40.379-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:04.480-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:08.922-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9626 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:02.219-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:48.096-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:32785"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33227"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33266"/>
            <criterion comment="seamonkey is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33146"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:32352"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33183"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33095"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33300"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:32996"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33263"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.6.el4" test_ref="oval:org.mitre.oval:tst:33195"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33236"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33229"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.9-0.1.el4" test_ref="oval:org.mitre.oval:tst:32844"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33273"/>
            <criterion comment="seamonkey is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33259"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33239"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.6.el4" test_ref="oval:org.mitre.oval:tst:33284"/>
            <criterion comment="firefox is earlier than 0:1.5.0.9-0.1.el4" test_ref="oval:org.mitre.oval:tst:32815"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33153"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33015"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33251"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33336"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:32408"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9625" version="5" class="vulnerability">
      <metadata>
        <title>Double free vulnerability in the process_browse_data function in CUPS 1.3.5 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via crafted UDP Browse packets to the cupsd port (631/udp), related to an unspecified manipulation of a remote printer.  NOTE: some of these details are obtained from third party information.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0882" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0882"/>
        <description>Double free vulnerability in the process_browse_data function in CUPS 1.3.5 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via crafted UDP Browse packets to the cupsd port (631/udp), related to an unspecified manipulation of a remote printer.  NOTE: some of these details are obtained from third party information.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:25.707-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:04.262-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:08.691-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9625 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:27.364-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:47.719-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="cups-lpd is earlier than 0:1.2.4-11.14.el5_1.4" test_ref="oval:org.mitre.oval:tst:36112"/>
          <criterion comment="cups-devel is earlier than 0:1.2.4-11.14.el5_1.4" test_ref="oval:org.mitre.oval:tst:36033"/>
          <criterion comment="cups is earlier than 0:1.2.4-11.14.el5_1.4" test_ref="oval:org.mitre.oval:tst:36231"/>
          <criterion comment="cups-libs is earlier than 0:1.2.4-11.14.el5_1.4" test_ref="oval:org.mitre.oval:tst:36453"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9624" version="5" class="vulnerability">
      <metadata>
        <title>racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service (crash) via crafted fragmented packets without a payload, which triggers a NULL pointer dereference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1574" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1574"/>
        <description>racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service (crash) via crafted fragmented packets without a payload, which triggers a NULL pointer dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:18.798-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:04.081-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:08.493-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9624 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:15.647-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:47.430-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="ipsec-tools is earlier than 0:0.6.5-13.el5_3.1" test_ref="oval:org.mitre.oval:tst:38789"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9623" version="5" class="vulnerability">
      <metadata>
        <title>BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via a flood of recursive queries, which cause an INSIST failure when the response is received after the recursion queue is empty.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4096" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4096"/>
        <description>BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via a flood of recursive queries, which cause an INSIST failure when the response is received after the recursion queue is empty.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:55.413-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:03.723-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:08.164-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9623 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:09.956-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:46.822-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="bind-utils is earlier than 20:9.2.4-14_EL3" test_ref="oval:org.mitre.oval:tst:30151"/>
            <criterion comment="bind-devel is earlier than 20:9.2.4-14_EL3" test_ref="oval:org.mitre.oval:tst:30374"/>
            <criterion comment="bind-chroot is earlier than 20:9.2.4-14_EL3" test_ref="oval:org.mitre.oval:tst:30138"/>
            <criterion comment="bind is earlier than 20:9.2.4-14_EL3" test_ref="oval:org.mitre.oval:tst:29802"/>
            <criterion comment="bind-libs is earlier than 20:9.2.4-14_EL3" test_ref="oval:org.mitre.oval:tst:30540"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="bind-utils is earlier than 20:9.2.4-16.EL4" test_ref="oval:org.mitre.oval:tst:30310"/>
            <criterion comment="bind-devel is earlier than 20:9.2.4-16.EL4" test_ref="oval:org.mitre.oval:tst:30454"/>
            <criterion comment="bind-chroot is earlier than 20:9.2.4-16.EL4" test_ref="oval:org.mitre.oval:tst:30510"/>
            <criterion comment="bind is earlier than 20:9.2.4-16.EL4" test_ref="oval:org.mitre.oval:tst:30416"/>
            <criterion comment="bind-libs is earlier than 20:9.2.4-16.EL4" test_ref="oval:org.mitre.oval:tst:30409"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9622" version="5" class="vulnerability">
      <metadata>
        <title>Multiple vulnerabilities in the Javascript engine in Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and SeaMonkey before 1.1.5 allow remote attackers to cause a denial of service (crash) via crafted HTML that triggers memory corruption.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5340" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5340"/>
        <description>Multiple vulnerabilities in the Javascript engine in Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and SeaMonkey before 1.1.5 allow remote attackers to cause a denial of service (crash) via crafted HTML that triggers memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:56.515-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:03.196-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:07.599-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9622 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:37.498-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:46.115-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35512"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35540"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35394"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35541"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35241"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35553"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35552"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:34924"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35155"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35441"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35489"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35324"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-0.5.el4" test_ref="oval:org.mitre.oval:tst:35240"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35182"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35311"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35454"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.7.el4" test_ref="oval:org.mitre.oval:tst:35398"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35351"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35482"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:34790"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35291"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:34577"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-6.el5" test_ref="oval:org.mitre.oval:tst:35262"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-6.el5" test_ref="oval:org.mitre.oval:tst:35202"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-5.el5" test_ref="oval:org.mitre.oval:tst:35177"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9621" version="3" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, and Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, allow attackers to develop Java applets or applications that are able to gain privileges, related to serialization in JRE.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6745" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6745"/>
        <description>Multiple unspecified vulnerabilities in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, and Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, allow attackers to develop Java applets or applications that are able to gain privileges, related to serialization in JRE.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:09.707-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:02.725-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:07.166-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criteria operator="OR">
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33298"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33521"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33376"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33428"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33515"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33417"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:32803"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33585"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33064"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33481"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33563"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33479"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33472"/>
            <criterion comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:32903"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33667"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33199"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33754"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33366"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33073"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33547"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9620" version="5" class="vulnerability">
      <metadata>
        <title>Wireshark (formerly Ethereal) 0.10.14 through 1.0.2 allows attackers to cause a denial of service (crash) via a packet with crafted zlib-compressed data that triggers an invalid read in the tvb_uncompress function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3933" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3933"/>
        <description>Wireshark (formerly Ethereal) 0.10.14 through 1.0.2 allows attackers to cause a denial of service (crash) via a packet with crafted zlib-compressed data that triggers an invalid read in the tvb_uncompress function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:51.000-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:02.435-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:06.806-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9620 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:00.406-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:45.592-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-EL3.3" test_ref="oval:org.mitre.oval:tst:37624"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-EL3.3" test_ref="oval:org.mitre.oval:tst:37207"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-3.el4_7" test_ref="oval:org.mitre.oval:tst:37249"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-3.el4_7" test_ref="oval:org.mitre.oval:tst:37725"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37542"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37460"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:962" version="1" class="vulnerability" deprecated="true">
      <metadata>
        <title>Microsoft Data Access Components SQL-DMO Buffer Overflow (Test 2)</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Data Access Components 2.6</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0353"/>
        <description>Buffer overflow in a component of SQL-DMO for Microsoft Data Access Components (MDAC) 2.5 through 2.7 allows remote attackers to execute arbitrary code via a long response to a broadcast request to UDP port 1434.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-04T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Deprecating duplicate definition for CVE-2003-0353" date="2010-05-05T12:00:00.000-05:00">
              <contributor organization="Symantec Corporation">Josh Turpin</contributor>
            </modified>
            <status_change date="2010-05-05T12:00:00.000-05:00">DEPRECATED</status_change>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Microsoft Data Access Components 2.6 is installed" test_ref="oval:org.mitre.oval:tst:1394"/>
        <criterion comment="File %windir%\System32\odbcbcp.dll is less than 2000.80.746.0" test_ref="oval:org.mitre.oval:tst:1393"/>
        <criterion comment="Patch Q823718 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:1395"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9619" version="5" class="vulnerability">
      <metadata>
        <title>Evolution 2.22.3.1 checks S/MIME signatures against a copy of the e-mail text within a signed-data blob, not the copy of the e-mail text displayed to the user, which allows remote attackers to spoof a signature by modifying the latter copy, a different vulnerability than CVE-2008-5077.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0547"/>
        <description>Evolution 2.22.3.1 checks S/MIME signatures against a copy of the e-mail text within a signed-data blob, not the copy of the e-mail text displayed to the user, which allows remote attackers to spoof a signature by modifying the latter copy, a different vulnerability than CVE-2008-5077.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:31.976-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:01.676-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:06.494-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9619 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:37.893-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:45.134-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="evolution28-evolution-data-server-devel is earlier than 0:1.8.0-37.el4_7.2" test_ref="oval:org.mitre.oval:tst:38140"/>
            <criterion comment="evolution-data-server-devel is earlier than 0:1.0.2-14.el4_7.1" test_ref="oval:org.mitre.oval:tst:38464"/>
            <criterion comment="evolution-data-server is earlier than 0:1.0.2-14.el4_7.1" test_ref="oval:org.mitre.oval:tst:38477"/>
            <criterion comment="evolution is earlier than 0:2.0.2-41.el4_7.2" test_ref="oval:org.mitre.oval:tst:38489"/>
            <criterion comment="evolution28-evolution-data-server is earlier than 0:1.8.0-37.el4_7.2" test_ref="oval:org.mitre.oval:tst:38193"/>
            <criterion comment="evolution-devel is earlier than 0:2.0.2-41.el4_7.2" test_ref="oval:org.mitre.oval:tst:38059"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="evolution-data-server-devel is earlier than 0:1.12.3-10.el5_3.3" test_ref="oval:org.mitre.oval:tst:38514"/>
            <criterion comment="evolution-data-server is earlier than 0:1.12.3-10.el5_3.3" test_ref="oval:org.mitre.oval:tst:37983"/>
            <criterion comment="evolution-data-server-doc is earlier than 0:1.12.3-10.el5_3.3" test_ref="oval:org.mitre.oval:tst:37891"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9618" version="5" class="vulnerability">
      <metadata>
        <title>slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List (ACL) privileges to modify arbitrary Distinguished Names (DN).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4600" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4600"/>
        <description>slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List (ACL) privileges to modify arbitrary Distinguished Names (DN).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:53.371-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:01.349-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:06.164-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9618 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:57.699-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:44.642-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openldap-devel is earlier than 0:2.0.27-23" test_ref="oval:org.mitre.oval:tst:34514"/>
            <criterion comment="openldap-clients is earlier than 0:2.0.27-23" test_ref="oval:org.mitre.oval:tst:34458"/>
            <criterion comment="openldap is earlier than 0:2.0.27-23" test_ref="oval:org.mitre.oval:tst:34561"/>
            <criterion comment="openldap-servers is earlier than 0:2.0.27-23" test_ref="oval:org.mitre.oval:tst:33949"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="compat-openldap is earlier than 0:2.1.30-7.4E" test_ref="oval:org.mitre.oval:tst:33968"/>
            <criterion comment="openldap-devel is earlier than 0:2.2.13-7.4E" test_ref="oval:org.mitre.oval:tst:34054"/>
            <criterion comment="openldap-clients is earlier than 0:2.2.13-7.4E" test_ref="oval:org.mitre.oval:tst:34115"/>
            <criterion comment="openldap is earlier than 0:2.2.13-7.4E" test_ref="oval:org.mitre.oval:tst:34114"/>
            <criterion comment="openldap-servers-sql is earlier than 0:2.2.13-7.4E" test_ref="oval:org.mitre.oval:tst:34101"/>
            <criterion comment="openldap-servers is earlier than 0:2.2.13-7.4E" test_ref="oval:org.mitre.oval:tst:33882"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9617" version="5" class="vulnerability">
      <metadata>
        <title>Directory traversal vulnerability in FastJar 0.93, as used in Gnu GCC 4.1.1 and earlier, and 3.4.6 and earlier, allows user-assisted attackers to overwrite arbitrary files via a .jar file containing filenames with "../" sequences.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3619" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3619"/>
        <description>Directory traversal vulnerability in FastJar 0.93, as used in Gnu GCC 4.1.1 and earlier, and 3.4.6 and earlier, allows user-assisted attackers to overwrite arbitrary files via a .jar file containing filenames with "../" sequences.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:09.813-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:00.682-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:05.480-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9617 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:57:50.705-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:43.827-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gcc-ppc32 is earlier than 0:3.2.3-59" test_ref="oval:org.mitre.oval:tst:34573"/>
            <criterion comment="gcc-java is earlier than 0:3.2.3-59" test_ref="oval:org.mitre.oval:tst:34533"/>
            <criterion comment="gcc-g77 is earlier than 0:3.2.3-59" test_ref="oval:org.mitre.oval:tst:34680"/>
            <criterion comment="libgcj is earlier than 0:3.2.3-59" test_ref="oval:org.mitre.oval:tst:34364"/>
            <criterion comment="gcc-c++ is earlier than 0:3.2.3-59" test_ref="oval:org.mitre.oval:tst:34558"/>
            <criterion comment="libobjc is earlier than 0:3.2.3-59" test_ref="oval:org.mitre.oval:tst:34188"/>
            <criterion comment="libstdc++ is earlier than 0:3.2.3-59" test_ref="oval:org.mitre.oval:tst:34631"/>
            <criterion comment="libf2c is earlier than 0:3.2.3-59" test_ref="oval:org.mitre.oval:tst:34315"/>
            <criterion comment="gcc-c++-ppc32 is earlier than 0:3.2.3-59" test_ref="oval:org.mitre.oval:tst:34518"/>
            <criterion comment="gcc-objc is earlier than 0:3.2.3-59" test_ref="oval:org.mitre.oval:tst:34287"/>
            <criterion comment="libgnat is earlier than 0:3.2.3-59" test_ref="oval:org.mitre.oval:tst:34120"/>
            <criterion comment="libstdc++-devel is earlier than 0:3.2.3-59" test_ref="oval:org.mitre.oval:tst:34471"/>
            <criterion comment="gcc-gnat is earlier than 0:3.2.3-59" test_ref="oval:org.mitre.oval:tst:34329"/>
            <criterion comment="cpp is earlier than 0:3.2.3-59" test_ref="oval:org.mitre.oval:tst:34617"/>
            <criterion comment="libgcj-devel is earlier than 0:3.2.3-59" test_ref="oval:org.mitre.oval:tst:33808"/>
            <criterion comment="gcc is earlier than 0:3.2.3-59" test_ref="oval:org.mitre.oval:tst:34691"/>
            <criterion comment="libgcc is earlier than 0:3.2.3-59" test_ref="oval:org.mitre.oval:tst:33732"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gcc-ppc32 is earlier than 0:3.4.6-8" test_ref="oval:org.mitre.oval:tst:33781"/>
            <criterion comment="gcc-java is earlier than 0:3.4.6-8" test_ref="oval:org.mitre.oval:tst:33255"/>
            <criterion comment="gcc-g77 is earlier than 0:3.4.6-8" test_ref="oval:org.mitre.oval:tst:33431"/>
            <criterion comment="libgcj is earlier than 0:3.4.6-8" test_ref="oval:org.mitre.oval:tst:33641"/>
            <criterion comment="gcc-c++ is earlier than 0:3.4.6-8" test_ref="oval:org.mitre.oval:tst:33545"/>
            <criterion comment="libobjc is earlier than 0:3.4.6-8" test_ref="oval:org.mitre.oval:tst:33752"/>
            <criterion comment="libstdc++ is earlier than 0:3.4.6-8" test_ref="oval:org.mitre.oval:tst:34001"/>
            <criterion comment="libf2c is earlier than 0:3.4.6-8" test_ref="oval:org.mitre.oval:tst:33787"/>
            <criterion comment="gcc-c++-ppc32 is earlier than 0:3.4.6-8" test_ref="oval:org.mitre.oval:tst:34089"/>
            <criterion comment="gcc-objc is earlier than 0:3.4.6-8" test_ref="oval:org.mitre.oval:tst:33916"/>
            <criterion comment="libgnat is earlier than 0:3.4.6-8" test_ref="oval:org.mitre.oval:tst:33942"/>
            <criterion comment="libstdc++-devel is earlier than 0:3.4.6-8" test_ref="oval:org.mitre.oval:tst:33437"/>
            <criterion comment="gcc-gnat is earlier than 0:3.4.6-8" test_ref="oval:org.mitre.oval:tst:34105"/>
            <criterion comment="cpp is earlier than 0:3.4.6-8" test_ref="oval:org.mitre.oval:tst:34086"/>
            <criterion comment="libgcj-devel is earlier than 0:3.4.6-8" test_ref="oval:org.mitre.oval:tst:34100"/>
            <criterion comment="gcc is earlier than 0:3.4.6-8" test_ref="oval:org.mitre.oval:tst:34111"/>
            <criterion comment="libgcc is earlier than 0:3.4.6-8" test_ref="oval:org.mitre.oval:tst:34014"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9616" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which leads to a zero byte memory allocation and a buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0102" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0102"/>
        <description>Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which leads to a zero byte memory allocation and a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:08.344-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:13:00.432-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:05.220-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9616 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:56.892-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:43.443-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="evolution is earlier than 0:1.4.5-14" test_ref="oval:org.mitre.oval:tst:31420"/>
            <criterion comment="evolution-devel is earlier than 0:1.4.5-14" test_ref="oval:org.mitre.oval:tst:30692"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="evolution is earlier than 0:2.0.2-16" test_ref="oval:org.mitre.oval:tst:31620"/>
            <criterion comment="evolution-devel is earlier than 0:2.0.2-16" test_ref="oval:org.mitre.oval:tst:31842"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9615" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers to execute arbitrary code via a crafted pixmap image.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2495" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2495"/>
        <description>Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers to execute arbitrary code via a crafted pixmap image.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:49.534-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:59.608-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:04.403-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9615 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:15.413-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:42.488-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:31985"/>
            <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:31627"/>
            <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:31972"/>
            <criterion comment="XFree86-libs is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:31705"/>
            <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:31773"/>
            <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:31675"/>
            <criterion comment="XFree86-twm is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:32017"/>
            <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:31942"/>
            <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:31963"/>
            <criterion comment="XFree86-doc is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:31156"/>
            <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:31574"/>
            <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:31905"/>
            <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:31784"/>
            <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:31310"/>
            <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:31908"/>
            <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:31949"/>
            <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:31827"/>
            <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:31806"/>
            <criterion comment="XFree86-xdm is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:31649"/>
            <criterion comment="XFree86-sdk is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:31020"/>
            <criterion comment="XFree86 is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:31743"/>
            <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:31721"/>
            <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:31883"/>
            <criterion comment="XFree86-xfs is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:31764"/>
            <criterion comment="XFree86-tools is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:31959"/>
            <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:31843"/>
            <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:31616"/>
            <criterion comment="XFree86-xauth is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:31732"/>
            <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:31371"/>
            <criterion comment="XFree86-devel is earlier than 0:4.3.0-95.EL" test_ref="oval:org.mitre.oval:tst:31803"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.13.16" test_ref="oval:org.mitre.oval:tst:31419"/>
            <criterion comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.13.16" test_ref="oval:org.mitre.oval:tst:31188"/>
            <criterion comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.13.16" test_ref="oval:org.mitre.oval:tst:31835"/>
            <criterion comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.13.16" test_ref="oval:org.mitre.oval:tst:31397"/>
            <criterion comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.13.16" test_ref="oval:org.mitre.oval:tst:30870"/>
            <criterion comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.13.16" test_ref="oval:org.mitre.oval:tst:31767"/>
            <criterion comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.13.16" test_ref="oval:org.mitre.oval:tst:31614"/>
            <criterion comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.13.16" test_ref="oval:org.mitre.oval:tst:31663"/>
            <criterion comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.13.16" test_ref="oval:org.mitre.oval:tst:31651"/>
            <criterion comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.13.16" test_ref="oval:org.mitre.oval:tst:31689"/>
            <criterion comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.13.16" test_ref="oval:org.mitre.oval:tst:31765"/>
            <criterion comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.13.16" test_ref="oval:org.mitre.oval:tst:31036"/>
            <criterion comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.13.16" test_ref="oval:org.mitre.oval:tst:30807"/>
            <criterion comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.13.16" test_ref="oval:org.mitre.oval:tst:31179"/>
            <criterion comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.13.16" test_ref="oval:org.mitre.oval:tst:31491"/>
            <criterion comment="xorg-x11 is earlier than 0:6.8.2-1.EL.13.16" test_ref="oval:org.mitre.oval:tst:31427"/>
            <criterion comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.13.16" test_ref="oval:org.mitre.oval:tst:31761"/>
            <criterion comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.13.16" test_ref="oval:org.mitre.oval:tst:31667"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9614" version="5" class="vulnerability">
      <metadata>
        <title>Use-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause a denial of service (named daemon crash) via unspecified vectors that cause named to "dereference a freed fetch context."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0493"/>
        <description>Use-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause a denial of service (named daemon crash) via unspecified vectors that cause named to "dereference a freed fetch context."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:09.379-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:59.323-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:04.114-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9614 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:05.309-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:42.086-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="bind-utils is earlier than 30:9.3.3-8.el5" test_ref="oval:org.mitre.oval:tst:33237"/>
          <criterion comment="bind-libbind-devel is earlier than 30:9.3.3-8.el5" test_ref="oval:org.mitre.oval:tst:32565"/>
          <criterion comment="bind-devel is earlier than 30:9.3.3-8.el5" test_ref="oval:org.mitre.oval:tst:33314"/>
          <criterion comment="bind-chroot is earlier than 30:9.3.3-8.el5" test_ref="oval:org.mitre.oval:tst:32936"/>
          <criterion comment="caching-nameserver is earlier than 30:9.3.3-8.el5" test_ref="oval:org.mitre.oval:tst:33164"/>
          <criterion comment="bind-sdb is earlier than 30:9.3.3-8.el5" test_ref="oval:org.mitre.oval:tst:33109"/>
          <criterion comment="bind is earlier than 30:9.3.3-8.el5" test_ref="oval:org.mitre.oval:tst:33115"/>
          <criterion comment="bind-libs is earlier than 30:9.3.3-8.el5" test_ref="oval:org.mitre.oval:tst:33331"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9613" version="5" class="vulnerability">
      <metadata>
        <title>unshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0990" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0990"/>
        <description>unshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:22.778-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:59.101-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:03.826-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9613 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:59:19.894-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:41.672-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="sharutils is earlier than 0:4.2.1-16.2" test_ref="oval:org.mitre.oval:tst:31587"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="sharutils is earlier than 0:4.2.1-22.2" test_ref="oval:org.mitre.oval:tst:31528"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9612" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a font alias file (font.alias) with a long token, a different vulnerability than CVE-2004-0084 and CVE-2004-0106.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0083"/>
        <description>Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a font alias file (font.alias) with a long token, a different vulnerability than CVE-2004-0084 and CVE-2004-0106.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:37.688-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:58.510-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:03.293-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9612 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:01.474-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:41.055-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30567"/>
          <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30064"/>
          <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30460"/>
          <criterion comment="XFree86-libs is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:29952"/>
          <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30100"/>
          <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30258"/>
          <criterion comment="XFree86-twm is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30560"/>
          <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30714"/>
          <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30316"/>
          <criterion comment="XFree86-doc is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30669"/>
          <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:29808"/>
          <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:29998"/>
          <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30273"/>
          <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30537"/>
          <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:29649"/>
          <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30610"/>
          <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30489"/>
          <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30530"/>
          <criterion comment="XFree86-xdm is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30518"/>
          <criterion comment="XFree86 is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30588"/>
          <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30206"/>
          <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30113"/>
          <criterion comment="XFree86-xfs is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30525"/>
          <criterion comment="XFree86-tools is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30631"/>
          <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30636"/>
          <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30500"/>
          <criterion comment="XFree86-xauth is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30123"/>
          <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30593"/>
          <criterion comment="XFree86-devel is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30503"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9611" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to hijack native DOM methods from objects in another domain and conduct cross-site scripting (XSS) attacks using DOM methods of the top-level object.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3802" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3802"/>
        <description>Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to hijack native DOM methods from objects in another domain and conduct cross-site scripting (XSS) attacks using DOM methods of the top-level object.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:41.250-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:57.979-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:02.759-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9611 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:40.461-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:40.399-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32342"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32877"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:31982"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32816"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32080"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32904"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32915"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32924"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32822"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32555"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32873"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32693"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32886"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32810"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32418"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32496"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32929"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32777"/>
            <criterion comment="firefox is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32896"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32722"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32906"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32905"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32925"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32624"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9610" version="5" class="vulnerability">
      <metadata>
        <title>SQL injection vulnerability in the radius_xlat function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via (1) group_membership_query, (2) simul_count_query, or (3) simul_verify_query configuration entries.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1454" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1454"/>
        <description>SQL injection vulnerability in the radius_xlat function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via (1) group_membership_query, (2) simul_count_query, or (3) simul_verify_query configuration entries.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:11.283-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:57.719-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:02.495-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9610 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:19.612-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:39.941-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="freeradius is earlier than 0:1.0.1-1.1.RHEL3" test_ref="oval:org.mitre.oval:tst:31698"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="freeradius-mysql is earlier than 0:1.0.1-3.RHEL4" test_ref="oval:org.mitre.oval:tst:32002"/>
            <criterion comment="freeradius-unixODBC is earlier than 0:1.0.1-3.RHEL4" test_ref="oval:org.mitre.oval:tst:31962"/>
            <criterion comment="freeradius is earlier than 0:1.0.1-3.RHEL4" test_ref="oval:org.mitre.oval:tst:31992"/>
            <criterion comment="freeradius-postgresql is earlier than 0:1.0.1-3.RHEL4" test_ref="oval:org.mitre.oval:tst:31999"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:961" version="2" class="vulnerability" deprecated="true">
      <metadata>
        <title>Microsoft Data Access Components SQL-DMO Buffer Overflow (Test 1)</title>
        <affected family="windows">
          <platform>Microsoft Windows 95</platform>
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Data Access Components 2.5</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0353"/>
        <description>Buffer overflow in a component of SQL-DMO for Microsoft Data Access Components (MDAC) 2.5 through 2.7 allows remote attackers to execute arbitrary code via a long response to a broadcast request to UDP port 1434.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-04T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-02-28T12:00:00.000-04:00" comment="split out the MDAC and file version tests from the compound test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-03-02T08:52:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-23T08:09:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Deprecating duplicate definition for CVE-2003-0353" date="2010-05-05T12:00:00.000-05:00">
              <contributor organization="Symantec Corporation">Josh Turpin</contributor>
            </modified>
            <status_change date="2010-05-05T12:00:00.000-05:00">DEPRECATED</status_change>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Microsoft Data Access Components 2.5 is installed" test_ref="oval:org.mitre.oval:tst:2576"/>
        <criterion comment="File %windir%\System32\odbcbcp.dll is less than 3.70.11.40" test_ref="oval:org.mitre.oval:tst:1396"/>
        <criterion comment="Patch Q823718 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:1395"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9609" version="5" class="vulnerability">
      <metadata>
        <title>The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to nsCSSStyleSheet::GetOwnerNode, events, and garbage collection, which triggers memory corruption.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0772" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0772"/>
        <description>The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to nsCSSStyleSheet::GetOwnerNode, events, and garbage collection, which triggers memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:20.634-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:57.190-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:01.571-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9609 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:57:56.765-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:39.261-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38413"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38419"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38110"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38217"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:37995"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:37833"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38347"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38410"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:37953"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38386"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:37842"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-19.el4" test_ref="oval:org.mitre.oval:tst:38238"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:38355"/>
            <criterion comment="firefox is earlier than 0:3.0.7-1.el4" test_ref="oval:org.mitre.oval:tst:38405"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:38148"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:38132"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:38204"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:38364"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:38168"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:37685"/>
            <criterion comment="firefox is earlier than 0:3.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:38372"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.21-1.el5" test_ref="oval:org.mitre.oval:tst:37944"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:38365"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9608" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6 and earlier, and Netscape 8.0.3.3 and 7.2, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a hostname with all "soft" hyphens (character 0xAD), which is not properly handled by the NormalizeIDN call in nsStandardURL::BuildNormalizedSpec.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2871" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2871"/>
        <description>Buffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6 and earlier, and Netscape 8.0.3.3 and 7.2, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a hostname with all "soft" hyphens (character 0xAD), which is not properly handled by the NormalizeIDN call in nsStandardURL::BuildNormalizedSpec.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:03.463-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:56.553-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:01.088-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9608 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:57:55.287-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:38.577-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.10-1.1.3.2" test_ref="oval:org.mitre.oval:tst:31744"/>
            <criterion comment="mozilla is earlier than 37:1.7.10-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32124"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.10-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32082"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.10-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32187"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.10-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32043"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.10-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32006"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.10-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32183"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.10-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32139"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.10-1.1.3.2" test_ref="oval:org.mitre.oval:tst:31801"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.10-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32194"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.10-1.4.2" test_ref="oval:org.mitre.oval:tst:32134"/>
            <criterion comment="mozilla is earlier than 37:1.7.10-1.4.2" test_ref="oval:org.mitre.oval:tst:32161"/>
            <criterion comment="thunderbird is earlier than 0:1.0.7-1.4.1" test_ref="oval:org.mitre.oval:tst:31477"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.10-1.4.2" test_ref="oval:org.mitre.oval:tst:32155"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.10-1.4.2" test_ref="oval:org.mitre.oval:tst:32024"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.10-1.4.2" test_ref="oval:org.mitre.oval:tst:31724"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.10-1.4.2" test_ref="oval:org.mitre.oval:tst:32126"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.10-1.4.2" test_ref="oval:org.mitre.oval:tst:31884"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.10-1.4.2" test_ref="oval:org.mitre.oval:tst:32021"/>
            <criterion comment="firefox is earlier than 0:1.0.6-1.4.2" test_ref="oval:org.mitre.oval:tst:32145"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.10-1.4.2" test_ref="oval:org.mitre.oval:tst:31660"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.10-1.4.2" test_ref="oval:org.mitre.oval:tst:32157"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9607" version="5" class="vulnerability">
      <metadata>
        <title>The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5188" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5188"/>
        <description>The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:10.713-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:56.340-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:00.738-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9607 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:53.282-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:38.255-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="ecryptfs-utils-devel is earlier than 0:75-5.el5" test_ref="oval:org.mitre.oval:tst:38822"/>
          <criterion comment="ecryptfs-utils-gui is earlier than 0:75-5.el5" test_ref="oval:org.mitre.oval:tst:39084"/>
          <criterion comment="ecryptfs-utils is earlier than 0:75-5.el5" test_ref="oval:org.mitre.oval:tst:39213"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9606" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, and 1.8.7 before 1.8.7-p22; and (2) the rb_ary_replace function in 1.6.x allows context-dependent attackers to trigger memory corruption via unspecified vectors, aka the "REALLOC_N" variant, a different issue than CVE-2008-2662, CVE-2008-2663, and CVE-2008-2664.  NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. The CVE description should be regarded as authoritative, although it is likely to change.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2725" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2725"/>
        <description>Integer overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, and 1.8.7 before 1.8.7-p22; and (2) the rb_ary_replace function in 1.6.x allows context-dependent attackers to trigger memory corruption via unspecified vectors, aka the "REALLOC_N" variant, a different issue than CVE-2008-2662, CVE-2008-2663, and CVE-2008-2664.  NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. The CVE description should be regarded as authoritative, although it is likely to change.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:21.744-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:55.744-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:14:00.236-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9606 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:06.662-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:37.531-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:36968"/>
            <criterion comment="ruby-docs is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37000"/>
            <criterion comment="ruby-devel is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:36747"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37140"/>
            <criterion comment="ruby is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37342"/>
            <criterion comment="irb is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37252"/>
            <criterion comment="ruby-libs is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37305"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:37171"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:37242"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:36569"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:37296"/>
            <criterion comment="ruby is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:36468"/>
            <criterion comment="irb is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:36808"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:37219"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-ri is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37199"/>
            <criterion comment="ruby-mode is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:36604"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:36516"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:36870"/>
            <criterion comment="ruby is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:36738"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37119"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37289"/>
            <criterion comment="ruby-irb is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37148"/>
            <criterion comment="ruby-rdoc is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37203"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9605" version="5" class="vulnerability">
      <metadata>
        <title>packet-usb.c in the USB dissector in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via a malformed USB Request Block (URB).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4680" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4680"/>
        <description>packet-usb.c in the USB dissector in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via a malformed USB Request Block (URB).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:09.474-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:55.446-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:59.893-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9605 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:59:13.502-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:36.826-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-EL3.3" test_ref="oval:org.mitre.oval:tst:38023"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-EL3.3" test_ref="oval:org.mitre.oval:tst:38321"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-2.el4_7" test_ref="oval:org.mitre.oval:tst:38000"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-2.el4_7" test_ref="oval:org.mitre.oval:tst:38041"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-2.el5_3" test_ref="oval:org.mitre.oval:tst:38236"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-2.el5_3" test_ref="oval:org.mitre.oval:tst:38085"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9604" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 returns the Object class prototype instead of the global window object when (1) .valueOf.call or (2) .valueOf.apply are called without any arguments, which allows remote attackers to conduct cross-site scripting (XSS) attacks.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1731" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1731"/>
        <description>Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 returns the Object class prototype instead of the global window object when (1) .valueOf.call or (2) .valueOf.apply are called without any arguments, which allows remote attackers to conduct cross-site scripting (XSS) attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:26.455-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:54.903-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:59.390-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9604 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:08.087-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:36.196-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32663"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32326"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31987"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32451"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32697"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32558"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32427"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32671"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32666"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32561"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32593"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32679"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32133"/>
            <criterion comment="thunderbird is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32204"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32701"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32428"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32557"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32229"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32349"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32644"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32440"/>
            <criterion comment="firefox is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32219"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32598"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32717"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9603" version="5" class="vulnerability">
      <metadata>
        <title>JDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, grants full privileges to instances of unspecified object types, which allows context-dependent attackers to bypass intended access restrictions via an untrusted (1) applet or (2) application.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2689" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2689"/>
        <description>JDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, grants full privileges to instances of unspecified object types, which allows context-dependent attackers to bypass intended access restrictions via an untrusted (1) applet or (2) application.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:25.496-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:54.670-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:59.146-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9603 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:41.292-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:35.795-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38942"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38825"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38972"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38267"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:39037"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9602" version="5" class="vulnerability">
      <metadata>
        <title>The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, related to a "quantization problem," aka Bug Id 6862968.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3873" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3873"/>
        <description>The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, related to a "quantization problem," aka Bug Id 6862968.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:16.494-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:54.436-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:58.840-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9602 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:24.713-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:35.458-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:38878"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39616"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39115"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39531"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39655"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9601" version="5" class="vulnerability">
      <metadata>
        <title>tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP packet, which is not properly handled by RT_ROUTING_INFO, or (2) LDP packet, which is not properly handled by the ldp_print function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1279" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1279"/>
        <description>tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP packet, which is not properly handled by RT_ROUTING_INFO, or (2) LDP packet, which is not properly handled by the ldp_print function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:01.848-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:54.175-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:58.577-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9601 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:20.339-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:34.728-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libpcap is earlier than 14:0.7.2-7.E3.5" test_ref="oval:org.mitre.oval:tst:31652"/>
            <criterion comment="tcpdump is earlier than 14:3.7.2-7.E3.5" test_ref="oval:org.mitre.oval:tst:31836"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="arpwatch is earlier than 14:2.1a13-9.RHEL4" test_ref="oval:org.mitre.oval:tst:31864"/>
            <criterion comment="libpcap is earlier than 14:0.8.3-9.RHEL4" test_ref="oval:org.mitre.oval:tst:30922"/>
            <criterion comment="tcpdump is earlier than 14:3.8.2-9.RHEL4" test_ref="oval:org.mitre.oval:tst:31788"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9600" version="5" class="vulnerability">
      <metadata>
        <title>The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0834" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0834"/>
        <description>The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:09.524-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:53.633-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:58.095-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9600 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:18:04.409-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:34.094-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38437"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38348"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:37805"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38116"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38721"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38384"/>
            <criterion comment="kernel is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38346"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38490"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38262"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38289"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38302"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38663"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38680"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38674"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38654"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38700"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38368"/>
            <criterion comment="kernel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38726"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38390"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38547"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38412"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38701"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38129"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:960" version="1" class="vulnerability">
      <metadata>
        <title>Magick XWD Decoder DoS</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>ImageMagick</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1739" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1739"/>
        <description>The XWD Decoder in ImageMagick before 6.2.2.3, and GraphicsMagick before 1.1.6-r1, allows remote attackers to cause a denial of service (infinite loop) via an image with a zero color mask.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-07-11T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-07-27T10:36:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criterion comment="ImageMagick RPM earlier than 0:5.5.6-15" negate="false" test_ref="oval:org.mitre.oval:tst:1397"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:96" version="4" class="vulnerability">
      <metadata>
        <title>IE Cookie-based Script Execution</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0078" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0078"/>
        <description>The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to run scripts in the Local Computer zone by embedding the script in a cookie, aka the "Cookie-based Script Execution" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T05:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-03-04T05:00:00.000-04:00" comment="Added the configuration check to see if cookies are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T05:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T05:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="modified wrt-18 - Changed value element to include pattern match">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:59.093-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:28.687-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2715.400" negate="false" test_ref="oval:org.mitre.oval:tst:2952"/>
          <criterion comment="the patch q319282 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3120"/>
          <criterion comment="the patch q321232 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3119"/>
          <criterion comment="the patch q323759 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3118"/>
          <criterion comment="the patch q328970 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3117"/>
          <criterion comment="the patch q324929 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3116"/>
          <criterion comment="the patch q810847 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3115"/>
          <criterion comment="the patch q813489 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3114"/>
          <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
          <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
          <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="cookies are enabled">
            <criteria operator="AND" comment="current user settings are being used and cookies are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="persistent cookies that are stored on your computer are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2950"/>
              <criterion comment="persistent cookies that are stored on your computer are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2949"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and cookies are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="per-session cookies (not stored) are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2948"/>
              <criterion comment="per-session cookies (not stored) are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2947"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9599" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the soup_base64_encode function in soup-misc.c in libsoup 2.x.x before 2.2.x, and 2.x before 2.24, allows context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0585" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0585"/>
        <description>Integer overflow in the soup_base64_encode function in soup-misc.c in libsoup 2.x.x before 2.2.x, and 2.x before 2.24, allows context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:43.432-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:53.363-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:57.773-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9599 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:12.920-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:33.613-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libsoup is earlier than 0:2.2.1-4.el4.1" test_ref="oval:org.mitre.oval:tst:38290"/>
            <criterion comment="evolution28-libsoup-devel is earlier than 0:2.2.98-5.el4.1" test_ref="oval:org.mitre.oval:tst:38001"/>
            <criterion comment="evolution28-libsoup is earlier than 0:2.2.98-5.el4.1" test_ref="oval:org.mitre.oval:tst:38097"/>
            <criterion comment="libsoup-devel is earlier than 0:2.2.1-4.el4.1" test_ref="oval:org.mitre.oval:tst:38304"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libsoup is earlier than 0:2.2.98-2.el5_3.1" test_ref="oval:org.mitre.oval:tst:38189"/>
            <criterion comment="libsoup-devel is earlier than 0:2.2.98-2.el5_3.1" test_ref="oval:org.mitre.oval:tst:38136"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9598" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in the GSM dissector in Ethereal before 0.10.11 allows remote attackers to cause the dissector to access an invalid pointer.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1469" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1469"/>
        <description>Unknown vulnerability in the GSM dissector in Ethereal before 0.10.11 allows remote attackers to cause the dissector to access an invalid pointer.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:11.437-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:53.117-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:57.517-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9598 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:52.826-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:33.238-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31458"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31546"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31674"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31865"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9597" version="5" class="vulnerability">
      <metadata>
        <title>PHP 4.4.x before 4.4.9, and 5.x through 5.2.6, when used as a FastCGI module, allows remote attackers to cause a denial of service (crash) via a request with multiple dots preceding the extension, as demonstrated using foo..php.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3660" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3660"/>
        <description>PHP 4.4.x before 4.4.9, and 5.x through 5.2.6, when used as a FastCGI module, allows remote attackers to cause a denial of service (crash) via a request with multiple dots preceding the extension, as demonstrated using foo..php.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:20.548-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:52.368-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:56.743-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9597 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:02.456-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:32.305-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:38010"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37683"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37468"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37994"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37569"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37746"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37938"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38324"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38288"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38029"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:37974"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38154"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38499"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38401"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38018"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38505"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38494"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38075"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38387"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38058"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38202"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38147"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38305"/>
            <criterion comment="php-common is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38268"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38298"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:37882"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:37952"/>
            <criterion comment="php is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38099"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38415"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38511"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38115"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38367"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38569"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38440"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38536"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38507"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38316"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38493"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:37667"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38421"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9596" version="5" class="vulnerability">
      <metadata>
        <title>zend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zend_hash_del to delete the wrong element, which prevents a variable from being unset even when the PHP unset function is called, which might cause the variable's value to be used in security-relevant operations.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0205" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0205"/>
        <description>KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged file descriptor for a domain socket, which allows local users to read and write to /etc/hosts and /etc/resolv.conf and gain control over DNS name resolution by opening a number of file descriptors before executing kppp.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:02.551-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:52.167-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:56.528-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9596 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:25.628-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:31.920-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kdenetwork-devel is earlier than 7:3.1.3-1.8" test_ref="oval:org.mitre.oval:tst:31423"/>
          <criterion comment="kdenetwork is earlier than 7:3.1.3-1.8" test_ref="oval:org.mitre.oval:tst:31376"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9595" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the extract_one function from lhext.c in LHA may allow attackers to execute arbitrary code via a long w (working directory) command line option, a different issue than CVE-2004-0769. NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise used across security boundaries.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0771" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0771"/>
        <description>Buffer overflow in the extract_one function from lhext.c in LHA may allow attackers to execute arbitrary code via a long w (working directory) command line option, a different issue than CVE-2004-0769. NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise used across security boundaries.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:32.334-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:51.903-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:56.336-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9595 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:43.422-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:31.659-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="lha is earlier than 0:1.14i-10.4" test_ref="oval:org.mitre.oval:tst:29793"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9594" version="5" class="vulnerability">
      <metadata>
        <title>The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to loading multiple RDF files in a XUL tree element.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2464" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2464"/>
        <description>The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to loading multiple RDF files in a XUL tree element.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:25.300-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:51.649-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:56.070-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9594 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:12:40.389-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:31.242-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.12-1.el4" test_ref="oval:org.mitre.oval:tst:38809"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38249"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38575"/>
            <criterion comment="firefox is earlier than 0:3.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38853"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38563"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9593" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly identify the context of Windows shortcut files, which allows user-assisted remote attackers to bypass the Same Origin Policy via a crafted web site for which the user has previously saved a shortcut.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2810" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2810"/>
        <description>Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly identify the context of Windows shortcut files, which allows user-assisted remote attackers to bypass the Same Origin Policy via a crafted web site for which the user has previously saved a shortcut.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:35.710-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:51.001-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:55.415-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9593 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:30.638-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:30.447-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37286"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37033"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37126"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37105"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37271"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37279"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37060"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37189"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:36476"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:36916"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37236"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37192"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-14.el4" test_ref="oval:org.mitre.oval:tst:36999"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36886"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37331"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36365"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.19.el4" test_ref="oval:org.mitre.oval:tst:37174"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37226"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36766"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37320"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36826"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37274"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-17.el5" test_ref="oval:org.mitre.oval:tst:37107"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:37351"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.16-1.el5" test_ref="oval:org.mitre.oval:tst:37363"/>
            <criterion comment="xulrunner is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:36984"/>
            <criterion comment="devhelp is earlier than 0:0.12-17.el5" test_ref="oval:org.mitre.oval:tst:37234"/>
            <criterion comment="yelp is earlier than 0:2.16.0-19.el5" test_ref="oval:org.mitre.oval:tst:37291"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:36436"/>
            <criterion comment="firefox is earlier than 0:3.0-2.el5" test_ref="oval:org.mitre.oval:tst:36814"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9592" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in the decoding of encoded text in certain headers in mime.php for SquirrelMail 1.4.3a and earlier, and 1.5.1-cvs before 23rd October 2004, allows remote attackers to execute arbitrary web script or HTML.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1036" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1036"/>
        <description>Cross-site scripting (XSS) vulnerability in the decoding of encoded text in certain headers in mime.php for SquirrelMail 1.4.3a and earlier, and 1.5.1-cvs before 23rd October 2004, allows remote attackers to execute arbitrary web script or HTML.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:50.850-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:50.814-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:55.221-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9592 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:40.352-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:30.176-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="squirrelmail is earlier than 0:1.4.3a-7.EL3" test_ref="oval:org.mitre.oval:tst:30184"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9591" version="5" class="vulnerability">
      <metadata>
        <title>MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0711" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0711"/>
        <description>MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:49.680-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:50.196-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:54.880-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9591 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:06.049-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:29.679-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mysql is earlier than 0:3.23.58-15.RHEL3.1" test_ref="oval:org.mitre.oval:tst:31367"/>
            <criterion comment="mysql-devel is earlier than 0:3.23.58-15.RHEL3.1" test_ref="oval:org.mitre.oval:tst:31299"/>
            <criterion comment="mysql-bench is earlier than 0:3.23.58-15.RHEL3.1" test_ref="oval:org.mitre.oval:tst:31391"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mysql is earlier than 0:4.1.10a-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:30977"/>
            <criterion comment="mysql-devel is earlier than 0:4.1.10a-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31612"/>
            <criterion comment="mysql-bench is earlier than 0:4.1.10a-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31452"/>
            <criterion comment="mysql-server is earlier than 0:4.1.10a-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31294"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9590" version="5" class="vulnerability">
      <metadata>
        <title>The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0159"/>
        <description>The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:17.168-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:49.635-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:54.363-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9590 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:08.452-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:28.950-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:39910"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:40282"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:40001"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:40160"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:39327"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:39963"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:39749"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:40277"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:39865"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:40145"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-52.el4_8" test_ref="oval:org.mitre.oval:tst:40087"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-25.el4" test_ref="oval:org.mitre.oval:tst:40299"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-52.el4_8" test_ref="oval:org.mitre.oval:tst:40185"/>
            <criterion comment="firefox is earlier than 0:3.0.18-1.el4" test_ref="oval:org.mitre.oval:tst:39897"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-52.el4_8" test_ref="oval:org.mitre.oval:tst:40258"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-52.el4_8" test_ref="oval:org.mitre.oval:tst:40130"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-52.el4_8" test_ref="oval:org.mitre.oval:tst:40147"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-52.el4_8" test_ref="oval:org.mitre.oval:tst:40264"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:39323"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:40174"/>
            <criterion comment="firefox is earlier than 0:3.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:40301"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.24-2.el5_4" test_ref="oval:org.mitre.oval:tst:40249"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:39533"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:959" version="1" class="vulnerability">
      <metadata>
        <title>Windows 2000 WMF/EMF Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Enhanced Metafile (EMF)</product>
          <product>Windows Metafile (WMF)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0906" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0906"/>
        <description>Buffer overflow in the rendering for (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1 allows remote attackers to execute arbitrary code via a malformed WMF or EMF image.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="the version of mf3216.dll is less than 5.0.2195.6898" negate="false" test_ref="oval:org.mitre.oval:tst:1398"/>
        <criterion comment="the patch kb835732 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1510"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9589" version="5" class="vulnerability">
      <metadata>
        <title>Off-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache, when configured to use a CRL, allows remote attackers to cause a denial of service (child process crash) via a CRL that causes a buffer overflow of one null byte.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1268"/>
        <description>Off-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache, when configured to use a CRL, allows remote attackers to cause a denial of service (child process crash) via a CRL that causes a buffer overflow of one null byte.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:18.301-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:49.339-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:54.047-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9589 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:49.121-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:28.525-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-devel is earlier than 0:2.0.46-46.2.ent" test_ref="oval:org.mitre.oval:tst:31786"/>
            <criterion comment="mod_ssl is earlier than 1:2.0.46-46.2.ent" test_ref="oval:org.mitre.oval:tst:31975"/>
            <criterion comment="httpd is earlier than 0:2.0.46-46.2.ent" test_ref="oval:org.mitre.oval:tst:31650"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-suexec is earlier than 0:2.0.52-12.1.ent" test_ref="oval:org.mitre.oval:tst:31790"/>
            <criterion comment="httpd-manual is earlier than 0:2.0.52-12.1.ent" test_ref="oval:org.mitre.oval:tst:31890"/>
            <criterion comment="httpd-devel is earlier than 0:2.0.52-12.1.ent" test_ref="oval:org.mitre.oval:tst:31948"/>
            <criterion comment="mod_ssl is earlier than 1:2.0.52-12.1.ent" test_ref="oval:org.mitre.oval:tst:31906"/>
            <criterion comment="httpd is earlier than 0:2.0.52-12.1.ent" test_ref="oval:org.mitre.oval:tst:32146"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9588" version="5" class="vulnerability">
      <metadata>
        <title>The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain sequence of LOCK requests for a location that allows WebDAV authoring access.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0809" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0809"/>
        <description>The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain sequence of LOCK requests for a location that allows WebDAV authoring access.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:32.057-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:49.134-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:53.796-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9588 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:24.962-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:28.229-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="httpd-devel is earlier than 0:2.0.46-40.ent" test_ref="oval:org.mitre.oval:tst:30894"/>
          <criterion comment="mod_ssl is earlier than 1:2.0.46-40.ent" test_ref="oval:org.mitre.oval:tst:30928"/>
          <criterion comment="httpd is earlier than 0:2.0.46-40.ent" test_ref="oval:org.mitre.oval:tst:30979"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9587" version="5" class="vulnerability">
      <metadata>
        <title>prefs.php in SquirrelMail before 1.4.4, with register_globals enabled, allows remote attackers to inject local code into the SquirrelMail code via custom preference handlers.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0075" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0075"/>
        <description>prefs.php in SquirrelMail before 1.4.4, with register_globals enabled, allows remote attackers to inject local code into the SquirrelMail code via custom preference handlers.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:34.569-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:48.876-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:53.562-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9587 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:37.565-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:27.805-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.3a-9.EL3" test_ref="oval:org.mitre.oval:tst:30441"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.3a-9.EL4" test_ref="oval:org.mitre.oval:tst:30956"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9586" version="5" class="vulnerability">
      <metadata>
        <title>The Red Hat build script for the GNOME Display Manager (GDM) before 2.16.0-56 on Red Hat Enterprise Linux (RHEL) 5 omits TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions via XDMCP connections, a different vulnerability than CVE-2007-5079.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2697" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2697"/>
        <description>The Red Hat build script for the GNOME Display Manager (GDM) before 2.16.0-56 on Red Hat Enterprise Linux (RHEL) 5 omits TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions via XDMCP connections, a different vulnerability than CVE-2007-5079.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:18.677-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:48.677-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:53.350-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9586 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:44.156-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:27.491-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="gdm-docs is earlier than 1:2.16.0-56.el5" test_ref="oval:org.mitre.oval:tst:39109"/>
          <criterion comment="gdm is earlier than 1:2.16.0-56.el5" test_ref="oval:org.mitre.oval:tst:38314"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9585" version="3" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment (JRE) and JDK 5.0 Update 13 and earlier, and SDK/JRE 1.4.2_16 and earlier, allows remote attackers to gain privileges via an untrusted application or applet, a different issue than CVE-2008-1185, aka "the second issue."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1186" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1186"/>
        <description>Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment (JRE) and JDK 5.0 Update 13 and earlier, and SDK/JRE 1.4.2_16 and earlier, allows remote attackers to gain privileges via an untrusted application or applet, a different issue than CVE-2008-1185, aka "the second issue."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:21.230-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:48.355-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:52.955-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36267"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36295"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35708"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35618"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36334"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36509"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35698"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35872"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35719"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36068"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36582"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36568"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9584" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0.3 and Mozilla Suite before 1.7.7, when blocking a popup, allows remote attackers to execute arbitrary code via a javascript: URL that is executed when the user selects the "Show javascript" option.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1153" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1153"/>
        <description>Firefox before 1.0.3 and Mozilla Suite before 1.7.7, when blocking a popup, allows remote attackers to execute arbitrary code via a javascript: URL that is executed when the user selects the "Show javascript" option.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:31.405-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:47.790-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:52.467-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9584 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:54.928-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:26.732-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31283"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31520"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31645"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31516"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31569"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31143"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31512"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31785"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31695"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31626"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31478"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.4" test_ref="oval:org.mitre.oval:tst:31488"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31751"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31647"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:30850"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31749"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.4" test_ref="oval:org.mitre.oval:tst:31658"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31636"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31780"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:30828"/>
            <criterion comment="firefox is earlier than 0:1.0.3-1.4.1" test_ref="oval:org.mitre.oval:tst:31646"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31716"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31758"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9583" version="5" class="vulnerability">
      <metadata>
        <title>Off-by-one buffer overflow in pnmtopng before 2.39, when using the -alpha command line option (Alphas_Of_Color), allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNM file with exactly 256 colors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3662" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3662"/>
        <description>Off-by-one buffer overflow in pnmtopng before 2.39, when using the -alpha command line option (Alphas_Of_Color), allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNM file with exactly 256 colors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:20.145-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:47.584-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:52.240-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9583 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:38.160-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:26.391-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="netpbm is earlier than 0:9.24-11.30.4" test_ref="oval:org.mitre.oval:tst:32233"/>
          <criterion comment="netpbm-progs is earlier than 0:9.24-11.30.4" test_ref="oval:org.mitre.oval:tst:32304"/>
          <criterion comment="netpbm-devel is earlier than 0:9.24-11.30.4" test_ref="oval:org.mitre.oval:tst:32108"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9582" version="3" class="vulnerability">
      <metadata>
        <title>Buffer overflow in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to execute arbitrary code via unknown vectors, a different issue than CVE-2008-1188, aka the "third" issue.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1189" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1189"/>
        <description>Buffer overflow in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to execute arbitrary code via unknown vectors, a different issue than CVE-2008-1188, aka the "third" issue.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:22.184-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:46.909-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:51.428-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36548"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36455"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36422"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36295"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36406"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36334"/>
            <criterion comment="java-1.5.0-ibm is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36155"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36267"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35708"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35618"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36613"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36614"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36509"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36558"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36485"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35872"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36582"/>
            <criterion comment="java-1.6.0-ibm-accessibility is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36555"/>
            <criterion comment="java-1.6.0-ibm-jdbc is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36414"/>
            <criterion comment="java-1.6.0-ibm-src is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36622"/>
            <criterion comment="java-1.6.0-ibm-javacomm is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36688"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36265"/>
            <criterion comment="java-1.6.0-ibm is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36319"/>
            <criterion comment="java-1.6.0-ibm-plugin is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36706"/>
            <criterion comment="java-1.6.0-ibm-devel is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36205"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36535"/>
            <criterion comment="java-1.6.0-ibm-demo is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36515"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36523"/>
            <criterion comment="java-1.5.0-ibm-accessibility is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36323"/>
            <criterion comment="java-1.5.0-ibm is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35890"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35698"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35719"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36340"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36068"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36568"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9581" version="5" class="vulnerability">
      <metadata>
        <title>Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length that becomes less than 8 during byte order conversion, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0184" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0184"/>
        <description>Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length that becomes less than 8 during byte order conversion, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:30.749-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:46.713-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:51.203-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9581 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:53.427-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:26.117-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="libpcap is earlier than 14:0.7.2-7.E3.2" test_ref="oval:org.mitre.oval:tst:30722"/>
          <criterion comment="tcpdump is earlier than 14:3.7.2-7.E3.2" test_ref="oval:org.mitre.oval:tst:29722"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9580" version="5" class="vulnerability">
      <metadata>
        <title>The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0112"/>
        <description>The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:42.370-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:46.500-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:50.918-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9580 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:40.839-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:25.766-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="openssl-perl is earlier than 0:0.9.7a-33.4" test_ref="oval:org.mitre.oval:tst:30638"/>
          <criterion comment="openssl-devel is earlier than 0:0.9.7a-33.4" test_ref="oval:org.mitre.oval:tst:30381"/>
          <criterion comment="openssl is earlier than 0:0.9.7a-33.4" test_ref="oval:org.mitre.oval:tst:30673"/>
          <criterion comment="openssl096b is earlier than 0:0.9.6b-16" test_ref="oval:org.mitre.oval:tst:30479"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9579" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the sql_escape_func function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote attackers to cause a denial of service (crash).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1455" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1455"/>
        <description>Buffer overflow in the sql_escape_func function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote attackers to cause a denial of service (crash).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:40.137-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:46.138-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:50.652-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9579 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:47.620-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:25.380-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="freeradius is earlier than 0:1.0.1-1.1.RHEL3" test_ref="oval:org.mitre.oval:tst:31698"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="freeradius-mysql is earlier than 0:1.0.1-3.RHEL4" test_ref="oval:org.mitre.oval:tst:32002"/>
            <criterion comment="freeradius-unixODBC is earlier than 0:1.0.1-3.RHEL4" test_ref="oval:org.mitre.oval:tst:31962"/>
            <criterion comment="freeradius is earlier than 0:1.0.1-3.RHEL4" test_ref="oval:org.mitre.oval:tst:31992"/>
            <criterion comment="freeradius-postgresql is earlier than 0:1.0.1-3.RHEL4" test_ref="oval:org.mitre.oval:tst:31999"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9578" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla allows remote attackers to cause a denial of service (application crash from null dereference or infinite loop) via a web page that contains a (1) TEXTAREA, (2) INPUT, (3) FRAMESET or (4) IMG tag followed by a null character and some trailing characters, as demonstrated by mangleme.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0147" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0147"/>
        <description>Firefox before 1.0 and Mozilla before 1.7.5, when configured to use a proxy, respond to 407 proxy auth requests from arbitrary servers, which allows remote attackers to steal NTLM or SPNEGO credentials.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:27.948-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:45.798-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:50.345-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9578 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:59.259-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:24.918-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mozilla-js-debugger is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:30819"/>
          <criterion comment="mozilla is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31515"/>
          <criterion comment="mozilla-chat is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31278"/>
          <criterion comment="mozilla-mail is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31465"/>
          <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31606"/>
          <criterion comment="mozilla-devel is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31480"/>
          <criterion comment="mozilla-nss is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31417"/>
          <criterion comment="mozilla-nss-devel is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31313"/>
          <criterion comment="mozilla-nspr is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31469"/>
          <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31598"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9577" version="5" class="vulnerability">
      <metadata>
        <title>The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP servers to cause a denial of service (memory consumption) via a large number of interim responses.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2364" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2364"/>
        <description>The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP servers to cause a denial of service (memory consumption) via a large number of interim responses.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:05.981-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:45.435-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:49.913-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9577 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:58.410-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:24.353-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-devel is earlier than 0:2.0.46-71.ent" test_ref="oval:org.mitre.oval:tst:37941"/>
            <criterion comment="mod_ssl is earlier than 0:2.0.46-71.ent" test_ref="oval:org.mitre.oval:tst:37561"/>
            <criterion comment="httpd is earlier than 0:2.0.46-71.ent" test_ref="oval:org.mitre.oval:tst:37595"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-suexec is earlier than 0:2.0.52-41.ent.2" test_ref="oval:org.mitre.oval:tst:37897"/>
            <criterion comment="httpd-manual is earlier than 0:2.0.52-41.ent.2" test_ref="oval:org.mitre.oval:tst:37670"/>
            <criterion comment="httpd-devel is earlier than 0:2.0.52-41.ent.2" test_ref="oval:org.mitre.oval:tst:37862"/>
            <criterion comment="mod_ssl is earlier than 0:2.0.52-41.ent.2" test_ref="oval:org.mitre.oval:tst:37679"/>
            <criterion comment="httpd is earlier than 0:2.0.52-41.ent.2" test_ref="oval:org.mitre.oval:tst:37575"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-manual is earlier than 0:2.2.3-11.el5_2.4" test_ref="oval:org.mitre.oval:tst:37895"/>
            <criterion comment="httpd-devel is earlier than 0:2.2.3-11.el5_2.4" test_ref="oval:org.mitre.oval:tst:37730"/>
            <criterion comment="mod_ssl is earlier than 0:2.2.3-11.el5_2.4" test_ref="oval:org.mitre.oval:tst:36990"/>
            <criterion comment="httpd is earlier than 0:2.2.3-11.el5_2.4" test_ref="oval:org.mitre.oval:tst:37803"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9576" version="5" class="vulnerability">
      <metadata>
        <title>qemu-dm.debug in Xen 3.2.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/args temporary file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4993" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4993"/>
        <description>qemu-dm.debug in Xen 3.2.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/args temporary file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:30.004-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:45.223-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:49.693-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9576 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:10.953-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:23.992-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="xen-libs is earlier than 0:3.0.3-64.el5_2.9" test_ref="oval:org.mitre.oval:tst:38117"/>
          <criterion comment="xen is earlier than 0:3.0.3-64.el5_2.9" test_ref="oval:org.mitre.oval:tst:37962"/>
          <criterion comment="xen-devel is earlier than 0:3.0.3-64.el5_2.9" test_ref="oval:org.mitre.oval:tst:38017"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9575" version="5" class="vulnerability">
      <metadata>
        <title>Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3625"/>
        <description>Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:39.436-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:44.686-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:49.193-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9575 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:52.294-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:23.365-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32436"/>
            <criterion comment="tetex-dvips is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32311"/>
            <criterion comment="tetex-fonts is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32279"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.36" test_ref="oval:org.mitre.oval:tst:32437"/>
            <criterion comment="tetex is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32507"/>
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.36" test_ref="oval:org.mitre.oval:tst:32206"/>
            <criterion comment="tetex-afm is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32377"/>
            <criterion comment="xpdf is earlier than 1:2.02-9.8" test_ref="oval:org.mitre.oval:tst:31474"/>
            <criterion comment="tetex-xdvi is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:31613"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.36" test_ref="oval:org.mitre.oval:tst:31553"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32260"/>
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-3.6" test_ref="oval:org.mitre.oval:tst:32395"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32095"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-3.6" test_ref="oval:org.mitre.oval:tst:31805"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32489"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.10" test_ref="oval:org.mitre.oval:tst:32284"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32199"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-7.4" test_ref="oval:org.mitre.oval:tst:32545"/>
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.10" test_ref="oval:org.mitre.oval:tst:32254"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32308"/>
            <criterion comment="xpdf is earlier than 1:3.00-11.10" test_ref="oval:org.mitre.oval:tst:32152"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32333"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32317"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.10" test_ref="oval:org.mitre.oval:tst:32499"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9574" version="5" class="vulnerability">
      <metadata>
        <title>The IPv6 protocol allows remote attackers to cause a denial of service via crafted IPv6 type 0 route headers (IPV6_RTHDR_TYPE_0) that create network amplification between two routers.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2242" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2242"/>
        <description>The IPv6 protocol allows remote attackers to cause a denial of service via crafted IPv6 type 0 route headers (IPV6_RTHDR_TYPE_0) that create network amplification between two routers.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:02.198-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:44.371-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:48.843-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9574 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:54.308-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:22.851-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34146"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34219"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34205"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:33862"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34224"/>
          <criterion comment="kernel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:33837"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34231"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34073"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:33861"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:33594"/>
          <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34059"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9573" version="5" class="vulnerability">
      <metadata>
        <title>Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0211"/>
        <description>Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:54.309-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:44.153-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:48.601-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9573 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:33.641-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:22.498-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE3-6.3E.7" test_ref="oval:org.mitre.oval:tst:30954"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE6-3.4E.3" test_ref="oval:org.mitre.oval:tst:31281"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9572" version="5" class="vulnerability">
      <metadata>
        <title>The TIFFToRGB function in libtiff before 3.8.1 allows remote attackers to cause a denial of service (crash) via a crafted TIFF image with Yr/Yg/Yb values that exceed the YCR/YCG/YCB values, which triggers an out-of-bounds read.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2120" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2120"/>
        <description>The TIFFToRGB function in libtiff before 3.8.1 allows remote attackers to cause a denial of service (crash) via a crafted TIFF image with Yr/Yg/Yb values that exceed the YCR/YCG/YCB values, which triggers an out-of-bounds read.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:30.281-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:43.884-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:48.350-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9572 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:43.980-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:22.110-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libtiff is earlier than 0:3.5.7-25.el3.1" test_ref="oval:org.mitre.oval:tst:32689"/>
            <criterion comment="libtiff-devel is earlier than 0:3.5.7-25.el3.1" test_ref="oval:org.mitre.oval:tst:32435"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libtiff is earlier than 0:3.6.1-10" test_ref="oval:org.mitre.oval:tst:32329"/>
            <criterion comment="libtiff-devel is earlier than 0:3.6.1-10" test_ref="oval:org.mitre.oval:tst:32637"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9571" version="5" class="vulnerability">
      <metadata>
        <title>VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as (1) termcap, (2) printdevice, (3) titleold, (4) filetype, (5) syntax, (6) backupext, (7) keymap, (8) patchmode, or (9) langmenu.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1138" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1138"/>
        <description>VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as (1) termcap, (2) printdevice, (3) titleold, (4) filetype, (5) syntax, (6) backupext, (7) keymap, (8) patchmode, or (9) langmenu.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:07.405-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:43.574-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:47.978-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9571 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:25.659-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:21.620-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="vim-minimal is earlier than 1:6.3.046-0.30E.1" test_ref="oval:org.mitre.oval:tst:30321"/>
            <criterion comment="vim-enhanced is earlier than 1:6.3.046-0.30E.1" test_ref="oval:org.mitre.oval:tst:31244"/>
            <criterion comment="vim is earlier than 1:6.3.046-0.30E.1" test_ref="oval:org.mitre.oval:tst:30519"/>
            <criterion comment="vim-X11 is earlier than 1:6.3.046-0.30E.1" test_ref="oval:org.mitre.oval:tst:30858"/>
            <criterion comment="vim-common is earlier than 1:6.3.046-0.30E.1" test_ref="oval:org.mitre.oval:tst:31167"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="vim-minimal is earlier than 1:6.3.046-0.40E.4" test_ref="oval:org.mitre.oval:tst:31180"/>
            <criterion comment="vim-enhanced is earlier than 1:6.3.046-0.40E.4" test_ref="oval:org.mitre.oval:tst:31161"/>
            <criterion comment="vim is earlier than 1:6.3.046-0.40E.4" test_ref="oval:org.mitre.oval:tst:31316"/>
            <criterion comment="vim-X11 is earlier than 1:6.3.046-0.40E.4" test_ref="oval:org.mitre.oval:tst:31312"/>
            <criterion comment="vim-common is earlier than 1:6.3.046-0.40E.4" test_ref="oval:org.mitre.oval:tst:31163"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9570" version="5" class="vulnerability">
      <metadata>
        <title>The regular expression engine (regex.c) in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows remote attackers to cause a denial of service (infinite loop and crash) via multiple long requests to a Ruby socket, related to memory allocation failure, and as demonstrated against Webrick.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3443" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3443"/>
        <description>The regular expression engine (regex.c) in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows remote attackers to cause a denial of service (infinite loop and crash) via multiple long requests to a Ruby socket, related to memory allocation failure, and as demonstrated against Webrick.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:01.689-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:43.069-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:47.463-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9570 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:04.805-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:20.886-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.6.8-13.el3" test_ref="oval:org.mitre.oval:tst:37606"/>
            <criterion comment="ruby-docs is earlier than 0:1.6.8-13.el3" test_ref="oval:org.mitre.oval:tst:37736"/>
            <criterion comment="ruby-devel is earlier than 0:1.6.8-13.el3" test_ref="oval:org.mitre.oval:tst:37427"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.6.8-13.el3" test_ref="oval:org.mitre.oval:tst:37760"/>
            <criterion comment="ruby is earlier than 0:1.6.8-13.el3" test_ref="oval:org.mitre.oval:tst:37497"/>
            <criterion comment="irb is earlier than 0:1.6.8-13.el3" test_ref="oval:org.mitre.oval:tst:37751"/>
            <criterion comment="ruby-libs is earlier than 0:1.6.8-13.el3" test_ref="oval:org.mitre.oval:tst:36770"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37462"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37630"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:36810"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:36902"/>
            <criterion comment="ruby is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37678"/>
            <criterion comment="irb is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37674"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37720"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-ri is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37735"/>
            <criterion comment="ruby-mode is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37344"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37697"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37273"/>
            <criterion comment="ruby is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37563"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37438"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37757"/>
            <criterion comment="ruby-irb is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37463"/>
            <criterion comment="ruby-rdoc is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37172"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9569" version="5" class="vulnerability">
      <metadata>
        <title>Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in multiple products including (1) Drupal, (2) phpAdsNew, (3) phpPgAds, and (4) phpgroupware, allows remote attackers to execute arbitrary PHP code via certain nested XML tags in a PHP document that should not be nested, which are injected into an eval function call, a different vulnerability than CVE-2005-1921.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2498"/>
        <description>Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in multiple products including (1) Drupal, (2) phpAdsNew, (3) phpPgAds, and (4) phpgroupware, allows remote attackers to execute arbitrary PHP code via certain nested XML tags in a PHP document that should not be nested, which are injected into an eval function call, a different vulnerability than CVE-2005-1921.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:49.732-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:42.575-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:46.934-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9569 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:29.809-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:20.282-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-25.ent" test_ref="oval:org.mitre.oval:tst:31517"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-25.ent" test_ref="oval:org.mitre.oval:tst:32191"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-25.ent" test_ref="oval:org.mitre.oval:tst:32009"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-25.ent" test_ref="oval:org.mitre.oval:tst:31823"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-25.ent" test_ref="oval:org.mitre.oval:tst:31971"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-25.ent" test_ref="oval:org.mitre.oval:tst:32008"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-25.ent" test_ref="oval:org.mitre.oval:tst:31197"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.8" test_ref="oval:org.mitre.oval:tst:32052"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.8" test_ref="oval:org.mitre.oval:tst:31200"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.8" test_ref="oval:org.mitre.oval:tst:31503"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.8" test_ref="oval:org.mitre.oval:tst:32192"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.8" test_ref="oval:org.mitre.oval:tst:31957"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.8" test_ref="oval:org.mitre.oval:tst:31771"/>
            <criterion comment="php is earlier than 0:4.3.9-3.8" test_ref="oval:org.mitre.oval:tst:31974"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.8" test_ref="oval:org.mitre.oval:tst:31734"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.8" test_ref="oval:org.mitre.oval:tst:32178"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.8" test_ref="oval:org.mitre.oval:tst:31386"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.8" test_ref="oval:org.mitre.oval:tst:32029"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.8" test_ref="oval:org.mitre.oval:tst:31677"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.8" test_ref="oval:org.mitre.oval:tst:32000"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.8" test_ref="oval:org.mitre.oval:tst:32062"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9568" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and attack vectors, related to failure to clone arrays that are returned by the getConfigurations function, aka Bug Id 6822057.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3879" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3879"/>
        <description>Multiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and attack vectors, related to failure to clone arrays that are returned by the getConfigurations function, aka Bug Id 6822057.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:45.816-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:42.339-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:46.687-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9568 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:24.353-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:19.900-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:38878"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39616"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39115"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39531"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39655"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9567" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute arbitrary code by manipulating the VMA descriptor.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1235" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1235"/>
        <description>Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute arbitrary code by manipulating the VMA descriptor.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:47.444-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:41.914-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:46.279-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9567 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:18.946-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:19.373-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31090"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31317"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31165"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31297"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31259"/>
            <criterion comment="kernel is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:30906"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31029"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31014"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:30920"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30633"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:31009"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30369"/>
            <criterion comment="kernel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:31205"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30421"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30594"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30616"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9566" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in the (1) add_key, (2) request_key, and (3) keyctl functions in Linux kernel 2.6.x allows local users to cause a denial of service (crash) or read sensitive kernel memory by modifying the length of a string argument between the time that the kernel calculates the length and when it copies the data into kernel memory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0457" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0457"/>
        <description>Race condition in the (1) add_key, (2) request_key, and (3) keyctl functions in Linux kernel 2.6.x allows local users to cause a denial of service (crash) or read sensitive kernel memory by modifying the length of a string argument between the time that the kernel calculates the length and when it copies the data into kernel memory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:19.941-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:41.637-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:45.941-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9566 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:34.487-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:18.933-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32335"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32833"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32825"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32836"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32736"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:31931"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32361"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32793"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32795"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9565" version="3" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, SDK and JRE 1.4.x before 1.4.2_18, and SDK and JRE 1.3.x before 1.3.1_23 allow remote attackers to violate the security model for an applet's outbound connections by connecting to localhost services running on the machine that loaded the applet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3104" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3104"/>
        <description>Multiple unspecified vulnerabilities in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, SDK and JRE 1.4.x before 1.4.2_18, and SDK and JRE 1.3.x before 1.3.1_23 allow remote attackers to violate the security model for an applet's outbound connections by connecting to localhost services running on the machine that loaded the applet.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:51.594-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:41.242-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:45.534-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37481"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36778"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37475"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37445"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37487"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37483"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.6.0-sun-devel is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36649"/>
            <criterion comment="java-1.6.0-sun is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37229"/>
            <criterion comment="java-1.6.0-sun-demo is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37509"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37426"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37368"/>
            <criterion comment="java-1.6.0-sun-src is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37035"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37181"/>
            <criterion comment="java-1.6.0-sun-plugin is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37441"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37315"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37359"/>
            <criterion comment="java-1.6.0-sun-jdbc is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37490"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37461"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9564" version="5" class="vulnerability">
      <metadata>
        <title>The (1) SMB and (2) SMB2 dissectors in Wireshark 0.9.0 through 1.2.4 allow remote attackers to cause a denial of service (crash) via a crafted packet that triggers a NULL pointer dereference, as demonstrated by fuzz-2009-12-07-11141.pcap.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4377" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4377"/>
        <description>The (1) SMB and (2) SMB2 dissectors in Wireshark 0.9.0 through 1.2.4 allow remote attackers to cause a denial of service (crash) via a crafted packet that triggers a NULL pointer dereference, as demonstrated by fuzz-2009-12-07-11141.pcap.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:01.901-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:40.893-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:45.228-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9564 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:54.068-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:18.464-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.11-EL3.6" test_ref="oval:org.mitre.oval:tst:39600"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.11-EL3.6" test_ref="oval:org.mitre.oval:tst:40430"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.11-1.el4_8.5" test_ref="oval:org.mitre.oval:tst:40437"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.11-1.el4_8.5" test_ref="oval:org.mitre.oval:tst:39877"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.11-1.el5_5.5" test_ref="oval:org.mitre.oval:tst:40351"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.11-1.el5_5.5" test_ref="oval:org.mitre.oval:tst:40208"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9563" version="5" class="vulnerability">
      <metadata>
        <title>Linux kernel 2.6.18, and possibly other versions, when running on AMD64 architectures, allows local users to cause a denial of service (crash) via certain ptrace calls.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1615" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1615"/>
        <description>Linux kernel 2.6.18, and possibly other versions, when running on AMD64 architectures, allows local users to cause a denial of service (crash) via certain ptrace calls.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:38.739-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:40.408-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:44.670-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9563 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:14:14.697-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:17.741-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36201"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36534"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36373"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36702"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36615"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36490"/>
            <criterion comment="kernel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36370"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:35738"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36249"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36731"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:35733"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36697"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36610"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36727"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:35799"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:35977"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36772"/>
            <criterion comment="kernel is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36502"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36670"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36665"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:35765"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36539"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36637"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9562" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in the PPP driver for the Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) via a pppd client.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0384" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0384"/>
        <description>Unknown vulnerability in the PPP driver for the Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) via a pppd client.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:47.619-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:39.963-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:44.268-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9562 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:44.513-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:17.100-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31148"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31473"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31178"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31282"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31565"/>
            <criterion comment="kernel is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31562"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31582"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:30730"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31534"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31545"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31539"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31661"/>
            <criterion comment="kernel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31482"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31112"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31605"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31330"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9561" version="5" class="vulnerability">
      <metadata>
        <title>Multiple vulnerabilities in Linux kernel before 2.6.13.2 allow local users to cause a denial of service (kernel OOPS from null dereference) via (1) fput in a 32-bit ioctl on 64-bit x86 systems or (2) sockfd_put in the 32-bit routing_ioctl function on 64-bit systems.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3044" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3044"/>
        <description>Multiple vulnerabilities in Linux kernel before 2.6.13.2 allow local users to cause a denial of service (kernel OOPS from null dereference) via (1) fput in a 32-bit ioctl on 64-bit x86 systems or (2) sockfd_put in the 32-bit routing_ioctl function on 64-bit systems.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:59.818-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:39.578-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:43.834-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9561 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:27.712-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:16.521-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32525"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32366"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32381"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32215"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32464"/>
            <criterion comment="kernel is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32288"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:31978"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32438"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32070"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32415"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32137"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32528"/>
            <criterion comment="kernel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32205"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:31866"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32446"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32450"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9560" version="5" class="vulnerability">
      <metadata>
        <title>The file watch implementation in the audit subsystem (auditctl -w) in the Red Hat Enterprise Linux (RHEL) 4 kernel 2.6.9 allows local users to cause a denial of service (kernel panic) by replacing a watched file, which does not cause the watch on the old inode to be dropped.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0001" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0001"/>
        <description>The file watch implementation in the audit subsystem (auditctl -w) in the Red Hat Enterprise Linux (RHEL) 4 kernel 2.6.9 allows local users to cause a denial of service (kernel panic) by replacing a watched file, which does not cause the watch on the old inode to be dropped.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:16.128-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:39.301-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:43.545-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9560 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:41:13.741-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:15.973-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.10.EL" test_ref="oval:org.mitre.oval:tst:33775"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.10.EL" test_ref="oval:org.mitre.oval:tst:33751"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.10.EL" test_ref="oval:org.mitre.oval:tst:33264"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.10.EL" test_ref="oval:org.mitre.oval:tst:33777"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.0.10.EL" test_ref="oval:org.mitre.oval:tst:33668"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.10.EL" test_ref="oval:org.mitre.oval:tst:33639"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.10.EL" test_ref="oval:org.mitre.oval:tst:33564"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.10.EL" test_ref="oval:org.mitre.oval:tst:33538"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.10.EL" test_ref="oval:org.mitre.oval:tst:33494"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9559" version="5" class="vulnerability">
      <metadata>
        <title>MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE statements, which allows remote authenticated users to rename arbitrary tables.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2691" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2691"/>
        <description>MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE statements, which allows remote authenticated users to rename arbitrary tables.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:14.656-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:38.952-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:43.233-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9559 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:21.778-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:15.505-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mysql is earlier than 0:4.1.22-2.el4" test_ref="oval:org.mitre.oval:tst:37045"/>
            <criterion comment="mysql-devel is earlier than 0:4.1.22-2.el4" test_ref="oval:org.mitre.oval:tst:37456"/>
            <criterion comment="mysql-bench is earlier than 0:4.1.22-2.el4" test_ref="oval:org.mitre.oval:tst:36967"/>
            <criterion comment="mysql-server is earlier than 0:4.1.22-2.el4" test_ref="oval:org.mitre.oval:tst:37224"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mysql is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36197"/>
            <criterion comment="mysql-devel is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36749"/>
            <criterion comment="mysql-test is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36750"/>
            <criterion comment="mysql-bench is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36831"/>
            <criterion comment="mysql-server is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36646"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9558" version="5" class="vulnerability">
      <metadata>
        <title>The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an SCM_RIGHTS message through a UNIX domain socket and closing file descriptors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5029" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5029"/>
        <description>The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an SCM_RIGHTS message through a UNIX domain socket and closing file descriptors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:30.060-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:38.331-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:42.544-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9558 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:13.538-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:14.631-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39591"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39396"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39586"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39171"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39299"/>
            <criterion comment="kernel is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39151"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39468"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39460"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:38810"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37830"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37968"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37984"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37633"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37352"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:38043"/>
            <criterion comment="kernel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37989"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37908"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37748"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37825"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:38002"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38161"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:37996"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38259"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:37366"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:37939"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38003"/>
            <criterion comment="kernel is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38294"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38054"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:37318"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38086"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38226"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38094"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9557" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0411" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0411"/>
        <description>Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:43.242-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:37.939-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:42.206-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9557 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:24.577-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:14.110-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="hpijs is earlier than 0:1.3-32.1.13" test_ref="oval:org.mitre.oval:tst:36464"/>
            <criterion comment="ghostscript-devel is earlier than 0:7.05-32.1.13" test_ref="oval:org.mitre.oval:tst:36326"/>
            <criterion comment="ghostscript is earlier than 0:7.05-32.1.13" test_ref="oval:org.mitre.oval:tst:36149"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ghostscript-devel is earlier than 0:7.07-33.2.el4_6.1" test_ref="oval:org.mitre.oval:tst:36082"/>
            <criterion comment="ghostscript is earlier than 0:7.07-33.2.el4_6.1" test_ref="oval:org.mitre.oval:tst:35551"/>
            <criterion comment="ghostscript-gtk is earlier than 0:7.07-33.2.el4_6.1" test_ref="oval:org.mitre.oval:tst:36061"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ghostscript-devel is earlier than 0:8.15.2-9.1.el5_1.1" test_ref="oval:org.mitre.oval:tst:36325"/>
            <criterion comment="ghostscript is earlier than 0:8.15.2-9.1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35805"/>
            <criterion comment="ghostscript-gtk is earlier than 0:8.15.2-9.1.el5_1.1" test_ref="oval:org.mitre.oval:tst:36363"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9556" version="5" class="vulnerability">
      <metadata>
        <title>A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4313" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4313"/>
        <description>A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:45.429-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:37.738-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:41.964-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9556 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:11.955-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:13.775-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="tog-pegasus is earlier than 2:2.7.0-2.el5_2.1" test_ref="oval:org.mitre.oval:tst:38022"/>
          <criterion comment="tog-pegasus-devel is earlier than 2:2.7.0-2.el5_2.1" test_ref="oval:org.mitre.oval:tst:38089"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9555" version="5" class="vulnerability">
      <metadata>
        <title>arch/s390/kernel/ptrace.c in Linux kernel 2.6.9, and other versions before 2.6.27-rc6, on s390 platforms allows local users to cause a denial of service (kernel panic) via the user-area-padding test from the ptrace testsuite in 31-bit mode, which triggers an invalid dereference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1514"/>
        <description>arch/s390/kernel/ptrace.c in Linux kernel 2.6.9, and other versions before 2.6.27-rc6, on s390 platforms allows local users to cause a denial of service (kernel panic) via the user-area-padding test from the ptrace testsuite in 31-bit mode, which triggers an invalid dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:08.201-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:37.427-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:41.604-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9555 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:31.900-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:13.372-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-xenU is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37470"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37734"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37826"/>
          <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37656"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37782"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37432"/>
          <criterion comment="kernel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37747"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37811"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37951"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37485"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37662"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9554" version="5" class="vulnerability">
      <metadata>
        <title>Linux kernel before 2.6.18, when running on x86_64 systems, does not properly save or restore EFLAGS during a context switch, which allows local users to cause a denial of service (crash) by causing SYSENTER to set an NT flag, which can trigger a crash on the IRET of the next task.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5755" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5755"/>
        <description>Linux kernel before 2.6.18, when running on x86_64 systems, does not properly save or restore EFLAGS during a context switch, which allows local users to cause a denial of service (crash) by causing SYSENTER to set an NT flag, which can trigger a crash on the IRET of the next task.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:09.838-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:37.115-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:41.171-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9554 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:54.093-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:12.904-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37778"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37855"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37870"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37881"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37504"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37738"/>
          <criterion comment="kernel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37774"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37247"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37715"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37954"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37668"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37947"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9553" version="5" class="vulnerability">
      <metadata>
        <title>Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) full vCard data, (2) contact data from remote LDAP servers, or (3) task list data from remote servers.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2549" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2549"/>
        <description>Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) full vCard data, (2) contact data from remote LDAP servers, or (3) task list data from remote servers.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:47.863-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:36.838-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:40.846-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9553 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:03.212-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:12.531-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="evolution is earlier than 0:1.4.5-16" test_ref="oval:org.mitre.oval:tst:31035"/>
            <criterion comment="evolution-devel is earlier than 0:1.4.5-16" test_ref="oval:org.mitre.oval:tst:31372"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="evolution is earlier than 0:2.0.2-16.3" test_ref="oval:org.mitre.oval:tst:31247"/>
            <criterion comment="evolution-devel is earlier than 0:2.0.2-16.3" test_ref="oval:org.mitre.oval:tst:31492"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9552" version="5" class="vulnerability">
      <metadata>
        <title>The rose_rt_ioctl function in rose_route.c for Radionet Open Source Environment (ROSE) in Linux 2.6 kernels before 2.6.12, and 2.4 before 2.4.29, does not properly verify the ndigis argument for a new route, which allows attackers to trigger array out-of-bounds errors with a large number of digipeats.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3273" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3273"/>
        <description>The rose_rt_ioctl function in rose_route.c for Radionet Open Source Environment (ROSE) in Linux 2.6 kernels before 2.6.12, and 2.4 before 2.4.29, does not properly verify the ndigis argument for a new route, which allows attackers to trigger array out-of-bounds errors with a large number of digipeats.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:07.150-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:36.562-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:40.554-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9552 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:09:03.505-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:12.163-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31411"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31953"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31879"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31990"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31485"/>
          <criterion comment="kernel is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32093"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31968"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32148"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31741"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9551" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to inject arbitrary web script or HTML via event handlers, aka "Universal XSS using event handlers."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1234" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1234"/>
        <description>Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to inject arbitrary web script or HTML via event handlers, aka "Universal XSS using event handlers."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:45.945-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:35.820-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:39.654-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9551 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:17.482-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:11.414-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36547"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36570"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36574"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:35661"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36605"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:35672"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:35874"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36533"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36355"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36379"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36587"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:35752"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-10.el4" test_ref="oval:org.mitre.oval:tst:36259"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36586"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36333"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36500"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.14.el4" test_ref="oval:org.mitre.oval:tst:35884"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36540"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36602"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36557"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36511"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36221"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-14.el5_1" test_ref="oval:org.mitre.oval:tst:36566"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-14.el5_1" test_ref="oval:org.mitre.oval:tst:36305"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-11.el5_1" test_ref="oval:org.mitre.oval:tst:36619"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9550" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix Player 10.0.0 allows remote attackers to execute arbitrary code via an .rm movie file with a large value in the length field of the first data packet, which leads to a stack-based buffer overflow, a different vulnerability than CVE-2004-1481.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2629" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2629"/>
        <description>Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix Player 10.0.0 allows remote attackers to execute arbitrary code via an .rm movie file with a large value in the length field of the first data packet, which leads to a stack-based buffer overflow, a different vulnerability than CVE-2004-1481.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:34.078-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:35.629-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:39.458-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9550 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:34.968-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:11.126-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="HelixPlayer is earlier than 1:1.0.6-0.EL4.1" test_ref="oval:org.mitre.oval:tst:31952"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:955" version="6" class="vulnerability">
      <metadata>
        <title>Windows 2000 RPCSS Service DCOM Activation Denial of Service</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Remote Procedure Call (RPC)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0116" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0116"/>
        <description>An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers to cause a denial of service (memory consumption) via an activation request with a large length field.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-20T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2884" date="2010-11-29T16:14:00.692-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:39.871-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:01:43.660-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:46.591-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:37.564-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="the version of rpcss.dll is less than 5.0.2195.6906" negate="false" test_ref="oval:org.mitre.oval:tst:1407"/>
          <criterion comment="the patch kb828741 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1499"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="DCOM is enabled on systems with SP3 or later">
            <criterion comment="Win2K/XP/2003 service pack 3 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3079"/>
            <criterion comment="DCOM is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2913"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9549" version="5" class="vulnerability">
      <metadata>
        <title>Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3385" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3385"/>
        <description>Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:04.737-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:35.324-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:39.147-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9549 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:26.229-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:10.665-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:35173"/>
          <criterion comment="tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:35009"/>
          <criterion comment="tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:34829"/>
          <criterion comment="tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:34843"/>
          <criterion comment="tomcat5-webapps is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:35076"/>
          <criterion comment="tomcat5 is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:34950"/>
          <criterion comment="tomcat5-jasper is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:35160"/>
          <criterion comment="tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:34831"/>
          <criterion comment="tomcat5-server-lib is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:35047"/>
          <criterion comment="tomcat5-common-lib is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:34953"/>
          <criterion comment="tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:35000"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9548" version="5" class="vulnerability">
      <metadata>
        <title>Interpretation conflict in the MagicHTML filter in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via style sheet specifiers with invalid (1) "/*" and "*/" comments, or (2) a newline in a "url" specifier, which is processed by certain web browsers including Internet Explorer.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0195" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0195"/>
        <description>Interpretation conflict in the MagicHTML filter in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via style sheet specifiers with invalid (1) "/*" and "*/" comments, or (2) a newline in a "url" specifier, which is processed by certain web browsers including Internet Explorer.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:36.246-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:35.106-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:38.852-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9548 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:18.503-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:10.315-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.6-5.el3" test_ref="oval:org.mitre.oval:tst:32265"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.6-5.el4" test_ref="oval:org.mitre.oval:tst:32721"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9547" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to bypass the same-origin policy and conduct cross-site scripting (XSS) and other attacks by using the addEventListener method to add an event listener for a site, which is executed in the context of that site.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2870" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2870"/>
        <description>Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to bypass the same-origin policy and conduct cross-site scripting (XSS) and other attacks by using the addEventListener method to add an event listener for a site, which is executed in the context of that site.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:43.525-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:34.479-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:38.279-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9547 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:37.382-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:09.540-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34409"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34257"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34432"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33988"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33721"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33693"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34313"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34281"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33894"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34228"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.8.el4" test_ref="oval:org.mitre.oval:tst:33625"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:33931"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:33844"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34334"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34021"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34249"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.8.el4" test_ref="oval:org.mitre.oval:tst:34293"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.1.el4" test_ref="oval:org.mitre.oval:tst:34371"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34446"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34262"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34366"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:33994"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34322"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-1.el5" test_ref="oval:org.mitre.oval:tst:34445"/>
            <criterion comment="yelp is earlier than 0:2.16.0-15.el5" test_ref="oval:org.mitre.oval:tst:33445"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-11.el5" test_ref="oval:org.mitre.oval:tst:34323"/>
            <criterion comment="devhelp is earlier than 0:0.12-11.el5" test_ref="oval:org.mitre.oval:tst:34204"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-1.el5" test_ref="oval:org.mitre.oval:tst:34162"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9546" version="3" class="vulnerability">
      <metadata>
        <title>Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 allows remote attackers to modify HTTP headers for client requests and conduct HTTP Request Splitting attacks.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6245" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6245"/>
        <description>Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 allows remote attackers to modify HTTP headers for client requests and conduct HTTP Request Splitting attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:21.229-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:34.236-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:37.975-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criterion comment="flash-plugin is earlier than 0:9.0.115.0-1.el3.with.oss" test_ref="oval:org.mitre.oval:tst:35926"/>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criterion comment="flash-plugin is earlier than 0:9.0.115.0-1.el4" test_ref="oval:org.mitre.oval:tst:35400"/>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criterion comment="flash-plugin is earlier than 0:9.0.115.0-1.el5" test_ref="oval:org.mitre.oval:tst:35776"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9545" version="5" class="vulnerability">
      <metadata>
        <title>lppasswd in CUPS 1.1.22 does not remove the passwd.new file if it encounters a file-size resource limit while writing to passwd.new, which causes subsequent invocations of lppasswd to fail.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1269" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1269"/>
        <description>lppasswd in CUPS 1.1.22 does not remove the passwd.new file if it encounters a file-size resource limit while writing to passwd.new, which causes subsequent invocations of lppasswd to fail.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:18.233-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:33.926-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:37.699-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9545 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:25.465-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:09.137-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.22" test_ref="oval:org.mitre.oval:tst:30882"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.22" test_ref="oval:org.mitre.oval:tst:31108"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.22" test_ref="oval:org.mitre.oval:tst:31170"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.6" test_ref="oval:org.mitre.oval:tst:30919"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.6" test_ref="oval:org.mitre.oval:tst:31056"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.6" test_ref="oval:org.mitre.oval:tst:31093"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9544" version="5" class="vulnerability">
      <metadata>
        <title>Gaim before 1.3.1 allows remote attackers to cause a denial of service (application crash) via a Yahoo! message with non-ASCII characters in a file name.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1269" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1269"/>
        <description>Gaim before 1.3.1 allows remote attackers to cause a denial of service (application crash) via a Yahoo! message with non-ASCII characters in a file name.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:35.089-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:33.706-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:37.471-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9544 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:53.391-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:08.736-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gaim is earlier than 1:1.3.1-0.el3" test_ref="oval:org.mitre.oval:tst:31762"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gaim is earlier than 1:1.3.1-0.el4" test_ref="oval:org.mitre.oval:tst:31939"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9543" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla before 1.7.6, and Firefox before 1.0.1, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0142" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0142"/>
        <description>Firefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save temporary files with world-readable permissions, which allows local users to read certain web content or attachments that belong to other users, e.g. content that is managed by helper applications such as PDF.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:26.755-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:33.212-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:36.927-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9543 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:56.986-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:08.116-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31283"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31520"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31645"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31516"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31569"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31143"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31512"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31785"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31695"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31626"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:30665"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.3" test_ref="oval:org.mitre.oval:tst:31499"/>
            <criterion comment="mozilla is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31604"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31381"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31622"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:30651"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.3" test_ref="oval:org.mitre.oval:tst:31560"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31110"/>
            <criterion comment="evolution is earlier than 0:2.0.2-14" test_ref="oval:org.mitre.oval:tst:31003"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31404"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31375"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31106"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31418"/>
            <criterion comment="evolution-devel is earlier than 0:2.0.2-14" test_ref="oval:org.mitre.oval:tst:31558"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9542" version="3" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in the color management library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allows remote attackers to cause a denial of service (crash) via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1194" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1194"/>
        <description>Multiple unspecified vulnerabilities in the color management library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allows remote attackers to cause a denial of service (crash) via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:06.995-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:32.348-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:36.099-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36548"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36455"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36295"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36334"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36614"/>
            <criterion comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.14-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36678"/>
            <criterion comment="java-1.5.0-bea is earlier than 0:1.5.0.14-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36732"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36422"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36406"/>
            <criterion comment="java-1.5.0-bea-src is earlier than 0:1.5.0.14-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36696"/>
            <criterion comment="java-1.5.0-ibm is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36155"/>
            <criterion comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.14-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36210"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36267"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35708"/>
            <criterion comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.14-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36565"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36613"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35618"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36509"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36558"/>
            <criterion comment="java-1.6.0-bea-src is earlier than 1:1.6.0.03-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36590"/>
            <criterion comment="java-1.6.0-ibm-accessibility is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36555"/>
            <criterion comment="java-1.6.0-ibm-jdbc is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36414"/>
            <criterion comment="java-1.6.0-ibm-src is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36622"/>
            <criterion comment="java-1.6.0-ibm is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36319"/>
            <criterion comment="java-1.5.0-bea is earlier than 0:1.5.0.14-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36686"/>
            <criterion comment="java-1.6.0-bea-devel is earlier than 1:1.6.0.03-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36423"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36535"/>
            <criterion comment="java-1.6.0-ibm-demo is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36515"/>
            <criterion comment="java-1.6.0-bea-missioncontrol is earlier than 1:1.6.0.03-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36683"/>
            <criterion comment="java-1.6.0-bea-demo is earlier than 1:1.6.0.03-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36331"/>
            <criterion comment="java-1.5.0-ibm-accessibility is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36323"/>
            <criterion comment="java-1.5.0-ibm is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35890"/>
            <criterion comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.14-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36343"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35719"/>
            <criterion comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.14-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36079"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36340"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36485"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35872"/>
            <criterion comment="java-1.6.0-bea is earlier than 1:1.6.0.03-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36195"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36582"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36265"/>
            <criterion comment="java-1.6.0-ibm-javacomm is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36688"/>
            <criterion comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.14-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36494"/>
            <criterion comment="java-1.6.0-ibm-plugin is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36706"/>
            <criterion comment="java-1.6.0-ibm-devel is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36205"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36523"/>
            <criterion comment="java-1.5.0-bea-src is earlier than 0:1.5.0.14-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36580"/>
            <criterion comment="java-1.5.0-bea-missioncontrol is earlier than 0:1.5.0.14-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36047"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35698"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36068"/>
            <criterion comment="java-1.6.0-bea-jdbc is earlier than 1:1.6.0.03-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36658"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36568"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9541" version="5" class="vulnerability">
      <metadata>
        <title>Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0689" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0689"/>
        <description>Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:25.089-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:32.057-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:35.730-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9541 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:41:03.422-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:07.632-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-25.el4" test_ref="oval:org.mitre.oval:tst:40299"/>
            <criterion comment="kdelibs is earlier than 6:3.3.1-17.el4_8.1" test_ref="oval:org.mitre.oval:tst:39402"/>
            <criterion comment="kdelibs-devel is earlier than 6:3.3.1-17.el4_8.1" test_ref="oval:org.mitre.oval:tst:39743"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdelibs-apidocs is earlier than 6:3.5.4-25.el5_4.1" test_ref="oval:org.mitre.oval:tst:39677"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.24-2.el5_4" test_ref="oval:org.mitre.oval:tst:40249"/>
            <criterion comment="kdelibs is earlier than 6:3.5.4-25.el5_4.1" test_ref="oval:org.mitre.oval:tst:38993"/>
            <criterion comment="kdelibs-devel is earlier than 6:3.5.4-25.el5_4.1" test_ref="oval:org.mitre.oval:tst:39605"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9540" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl (Tcl/Tk) 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first.  NOTE: this issue is due to an incorrect patch for CVE-2007-5378.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5137" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5137"/>
        <description>Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl (Tcl/Tk) 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first.  NOTE: this issue is due to an incorrect patch for CVE-2007-5378.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:50.476-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:31.822-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:35.524-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9540 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:40.619-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:07.336-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="tk-devel is earlier than 0:8.4.13-5.el5_1.1" test_ref="oval:org.mitre.oval:tst:36375"/>
          <criterion comment="tk is earlier than 0:8.4.13-5.el5_1.1" test_ref="oval:org.mitre.oval:tst:35860"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:954" version="2" class="vulnerability">
      <metadata>
        <title>Konqueror URI Handler "-" Filter Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0411" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0411"/>
        <description>The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter "-" characters that begin a hostname in a (1) telnet, (2) rlogin, (3) ssh, or (4) mailto URI, which allows remote attackers to manipulate the options that are passed to the associated programs, possibly to read arbitrary files or execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-19T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:54.899-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:10.684-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="kdelibs version is less than 3.1.3-6.4" negate="false" test_ref="oval:org.mitre.oval:tst:1426"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="telnet, rlogin, ssh or kmail is executable">
            <criteria operator="OR" comment="/usr/bin/telnet is executable">
              <criterion comment="/usr/bin/telnet is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1425"/>
              <criterion comment="/usr/bin/telnet is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1424"/>
              <criterion comment="/usr/bin/telnet is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1423"/>
            </criteria>
            <criteria operator="OR" comment="/usr/kerberos/bin/telnet is executable">
              <criterion comment="/usr/kerberos/bin/telnet is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1422"/>
              <criterion comment="/usr/kerberos/bin/telnet is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1421"/>
              <criterion comment="/usr/kerberos/bin/telnet is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1420"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/rlogin is executable">
              <criterion comment="/usr/bin/rlogin is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1419"/>
              <criterion comment="/usr/bin/rlogin is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1418"/>
              <criterion comment="/usr/bin/rlogin is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1417"/>
            </criteria>
            <criteria operator="OR" comment="/usr/kerberos/bin/rlogin is executable">
              <criterion comment="/usr/kerberos/bin/rlogin is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1416"/>
              <criterion comment="/usr/kerberos/bin/rlogin is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1415"/>
              <criterion comment="/usr/kerberos/bin/rlogin is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1414"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ssh is executable">
              <criterion comment="/usr/bin/ssh is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1413"/>
              <criterion comment="/usr/bin/ssh is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1412"/>
              <criterion comment="/usr/bin/ssh is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1411"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/kmail is executable">
              <criterion comment="/usr/bin/kmail is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1410"/>
              <criterion comment="/usr/bin/kmail is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1409"/>
              <criterion comment="/usr/bin/kmail is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1408"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9539" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the (2) mod_imagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5000" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5000"/>
        <description>Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the (2) mod_imagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:15.632-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:31.458-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:35.154-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9539 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:50.570-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:06.763-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-devel is earlier than 0:2.0.46-70.ent" test_ref="oval:org.mitre.oval:tst:35773"/>
            <criterion comment="mod_ssl is earlier than 0:2.0.46-70.ent" test_ref="oval:org.mitre.oval:tst:36016"/>
            <criterion comment="httpd is earlier than 0:2.0.46-70.ent" test_ref="oval:org.mitre.oval:tst:35281"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-suexec is earlier than 0:2.0.52-38.ent.2" test_ref="oval:org.mitre.oval:tst:35606"/>
            <criterion comment="httpd-manual is earlier than 0:2.0.52-38.ent.2" test_ref="oval:org.mitre.oval:tst:35973"/>
            <criterion comment="httpd-devel is earlier than 0:2.0.52-38.ent.2" test_ref="oval:org.mitre.oval:tst:35916"/>
            <criterion comment="mod_ssl is earlier than 0:2.0.52-38.ent.2" test_ref="oval:org.mitre.oval:tst:35852"/>
            <criterion comment="httpd is earlier than 0:2.0.52-38.ent.2" test_ref="oval:org.mitre.oval:tst:35768"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-manual is earlier than 0:2.2.3-11.el5_1.3" test_ref="oval:org.mitre.oval:tst:35953"/>
            <criterion comment="httpd-devel is earlier than 0:2.2.3-11.el5_1.3" test_ref="oval:org.mitre.oval:tst:35668"/>
            <criterion comment="mod_ssl is earlier than 0:2.2.3-11.el5_1.3" test_ref="oval:org.mitre.oval:tst:35991"/>
            <criterion comment="httpd is earlier than 0:2.2.3-11.el5_1.3" test_ref="oval:org.mitre.oval:tst:35696"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9538" version="5" class="vulnerability">
      <metadata>
        <title>slocate before 2.7 does not properly process very long paths, which allows local users to cause a denial of service (updatedb exit and incomplete slocate database) via a certain crafted directory structure.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2499" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2499"/>
        <description>slocate before 2.7 does not properly process very long paths, which allows local users to cause a denial of service (updatedb exit and incomplete slocate database) via a certain crafted directory structure.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:06.098-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:31.237-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:34.882-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9538 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:14:00.149-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:06.406-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="slocate is earlier than 0:2.7-3.RHEL3.6" test_ref="oval:org.mitre.oval:tst:31533"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="slocate is earlier than 0:2.7-13.el4.6" test_ref="oval:org.mitre.oval:tst:31470"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9537" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the WBXML dissector in Wireshark (formerly Ethereal) 0.10.11 through 0.99.3 allows remote attackers to cause a denial of service (crash) via certain vectors that trigger a null dereference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5469" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5469"/>
        <description>Unspecified vulnerability in the WBXML dissector in Wireshark (formerly Ethereal) 0.10.11 through 0.99.3 allows remote attackers to cause a denial of service (crash) via certain vectors that trigger a null dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:11.323-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:30.958-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:34.630-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9537 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:12:58.000-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:05.809-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.4-EL3.1" test_ref="oval:org.mitre.oval:tst:33205"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.4-EL3.1" test_ref="oval:org.mitre.oval:tst:33170"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.4-EL4.1" test_ref="oval:org.mitre.oval:tst:32550"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.4-EL4.1" test_ref="oval:org.mitre.oval:tst:33152"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9536" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3608" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3608"/>
        <description>Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:42.153-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:30.515-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:34.181-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9536 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:38.769-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:05.213-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-15.el4_8.2" test_ref="oval:org.mitre.oval:tst:39438"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-7.7.2.el4_8.5" test_ref="oval:org.mitre.oval:tst:39221"/>
            <criterion comment="xpdf is earlier than 1:3.00-22.el4_8.1" test_ref="oval:org.mitre.oval:tst:38963"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-15.el4_8.2" test_ref="oval:org.mitre.oval:tst:39094"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.5.4-15.el5_4.2" test_ref="oval:org.mitre.oval:tst:39062"/>
            <criterion comment="cups-lpd is earlier than 1:1.3.7-11.el5_4.3" test_ref="oval:org.mitre.oval:tst:39430"/>
            <criterion comment="tetex-dvips is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40312"/>
            <criterion comment="kdegraphics is earlier than 7:3.5.4-15.el5_4.2" test_ref="oval:org.mitre.oval:tst:39529"/>
            <criterion comment="poppler is earlier than 0:0.5.4-4.4.el5_4.11" test_ref="oval:org.mitre.oval:tst:39290"/>
            <criterion comment="tetex-fonts is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40122"/>
            <criterion comment="cups-libs is earlier than 1:1.3.7-11.el5_4.3" test_ref="oval:org.mitre.oval:tst:38854"/>
            <criterion comment="tetex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40413"/>
            <criterion comment="tetex-doc is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40398"/>
            <criterion comment="poppler-devel is earlier than 0:0.5.4-4.4.el5_4.11" test_ref="oval:org.mitre.oval:tst:39346"/>
            <criterion comment="tetex-latex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40444"/>
            <criterion comment="poppler-utils is earlier than 0:0.5.4-4.4.el5_4.11" test_ref="oval:org.mitre.oval:tst:39383"/>
            <criterion comment="cups-devel is earlier than 1:1.3.7-11.el5_4.3" test_ref="oval:org.mitre.oval:tst:38836"/>
            <criterion comment="tetex-afm is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40008"/>
            <criterion comment="tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:39920"/>
            <criterion comment="cups is earlier than 1:1.3.7-11.el5_4.3" test_ref="oval:org.mitre.oval:tst:39511"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9535" version="5" class="vulnerability">
      <metadata>
        <title>The JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving (1) js_FindPropertyHelper, related to the definitions of Math and Date; and (2) js_CheckRedeclaration.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1304" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1304"/>
        <description>The JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving (1) js_FindPropertyHelper, related to the definitions of Math and Date; and (2) js_CheckRedeclaration.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:57.773-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:30.260-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:33.861-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9535 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:45.867-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:04.698-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.9-1.el4" test_ref="oval:org.mitre.oval:tst:38379"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38308"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38633"/>
            <criterion comment="firefox is earlier than 0:3.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38370"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38462"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9534" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unknown vulnerabilities in the (1) KINK, (2) L2TP, (3) MGCP, (4) EIGRP, (5) DLSw, (6) MEGACO, (7) LMP, and (8) RSVP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (infinite loop).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1464" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1464"/>
        <description>Multiple unknown vulnerabilities in the (1) KINK, (2) L2TP, (3) MGCP, (4) EIGRP, (5) DLSw, (6) MEGACO, (7) LMP, and (8) RSVP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (infinite loop).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:29.313-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:29.978-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:33.609-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9534 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:12:55.829-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:04.330-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31458"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31546"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31674"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31865"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9533" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote attackers to spoof the SSL "secure site" lock icon via (1) a web site that does not finish loading, which shows the lock of the previous site, (2) a non-HTTP server that uses SSL, which causes the lock to be displayed when the SSL handshake is completed, or (3) a URL that generates an HTTP 204 error, which updates the icon and location information but does not change the display of the original site.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0593" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0593"/>
        <description>Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote attackers to spoof the SSL "secure site" lock icon via (1) a web site that does not finish loading, which shows the lock of the previous site, (2) a non-HTTP server that uses SSL, which causes the lock to be displayed when the SSL handshake is completed, or (3) a URL that generates an HTTP 204 error, which updates the icon and location information but does not change the display of the original site.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:32.456-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:29.655-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:33.267-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9533 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:38.233-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:03.820-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31283"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31520"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31645"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31516"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31569"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31143"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31512"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31785"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31695"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31626"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:1.0.1-1.4.3" test_ref="oval:org.mitre.oval:tst:31118"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9532" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an incoming message.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1852" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1852"/>
        <description>Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an incoming message.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:24.195-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:29.448-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:33.041-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9532 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:41:15.881-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:03.505-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kdenetwork-nowlistening is earlier than 7:3.3.1-2.3" test_ref="oval:org.mitre.oval:tst:32125"/>
          <criterion comment="kdenetwork-devel is earlier than 7:3.3.1-2.3" test_ref="oval:org.mitre.oval:tst:32141"/>
          <criterion comment="kdenetwork is earlier than 7:3.3.1-2.3" test_ref="oval:org.mitre.oval:tst:31965"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9531" version="5" class="vulnerability">
      <metadata>
        <title>Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (infinite recursion and crash) via a packet that contains two or more DATA fragments, which causes an skb pointer to refer back to itself when the full message is reassembled, leading to infinite recursion in the sctp_skb_pull function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2274" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2274"/>
        <description>Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (infinite recursion and crash) via a packet that contains two or more DATA fragments, which causes an skb pointer to refer back to itself when the full message is reassembled, leading to infinite recursion in the sctp_skb_pull function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:59.601-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:29.170-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:32.726-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9531 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:57.455-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:03.122-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32235"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32371"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32703"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32314"/>
          <criterion comment="kernel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32614"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32295"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32310"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32611"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32305"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9530" version="5" class="vulnerability">
      <metadata>
        <title>MySQL 5.x before 5.0.36 allows local users to cause a denial of service (database crash) by performing information_schema table subselects and using ORDER BY to sort a single-row result, which prevents certain structure elements from being initialized and triggers a NULL dereference in the filesort function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1420"/>
        <description>MySQL 5.x before 5.0.36 allows local users to cause a denial of service (database crash) by performing information_schema table subselects and using ORDER BY to sort a single-row result, which prevents certain structure elements from being initialized and triggers a NULL dereference in the filesort function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:09.893-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:28.887-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:32.486-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9530 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:12.569-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:02.738-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mysql is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36197"/>
          <criterion comment="mysql-devel is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36749"/>
          <criterion comment="mysql-test is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36750"/>
          <criterion comment="mysql-bench is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36831"/>
          <criterion comment="mysql-server is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36646"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9529" version="5" class="vulnerability">
      <metadata>
        <title>The XPConnect component in Mozilla Firefox before 2.0.0.17 allows remote attackers to "pollute XPCNativeWrappers" and execute arbitrary code with chrome privileges via vectors related to a SCRIPT element.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4059" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4059"/>
        <description>The XPConnect component in Mozilla Firefox before 2.0.0.17 allows remote attackers to "pollute XPCNativeWrappers" and execute arbitrary code with chrome privileges via vectors related to a SCRIPT element.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:59.233-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:28.415-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:31.967-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9529 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:51.964-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:02.102-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37411"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36691"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37031"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37528"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36726"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37435"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37680"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36725"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37449"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37356"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.10.el4" test_ref="oval:org.mitre.oval:tst:37564"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:36913"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-16.el4" test_ref="oval:org.mitre.oval:tst:37634"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37609"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.10.el4" test_ref="oval:org.mitre.oval:tst:37306"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37499"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37444"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37543"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37552"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="thunderbird is earlier than 0:2.0.0.17-1.el5" test_ref="oval:org.mitre.oval:tst:37230"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9528" version="5" class="vulnerability">
      <metadata>
        <title>Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple Javascript timed events that load a deeply nested XML file, followed by redirecting the browser to another page, which leads to a concurrency failure that causes structures to be freed incorrectly, as demonstrated by (1) ffoxdie and (2) ffoxdie3.  NOTE: it has been reported that Netscape 8.1 and K-Meleon 1.0.1 are also affected by ffoxdie.  Mozilla confirmed to CVE that ffoxdie and ffoxdie3 trigger the same underlying vulnerability.  NOTE: it was later reported that Firefox 2.0 RC2 and 1.5.0.7 are also affected.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4253" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4253"/>
        <description>Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple Javascript timed events that load a deeply nested XML file, followed by redirecting the browser to another page, which leads to a concurrency failure that causes structures to be freed incorrectly, as demonstrated by (1) ffoxdie and (2) ffoxdie3.  NOTE: it has been reported that Netscape 8.1 and K-Meleon 1.0.1 are also affected by ffoxdie.  Mozilla confirmed to CVE that ffoxdie and ffoxdie3 trigger the same underlying vulnerability.  NOTE: it was later reported that Firefox 2.0 RC2 and 1.5.0.7 are also affected.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:19.553-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:27.878-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:31.461-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9528 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:01.521-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:01.438-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32759"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32989"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32809"/>
            <criterion comment="seamonkey is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32779"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32954"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32668"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:33010"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32811"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32981"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:33061"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.4.el4" test_ref="oval:org.mitre.oval:tst:32072"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:33120"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32842"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:32910"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32677"/>
            <criterion comment="seamonkey is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32933"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32243"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.4.el4" test_ref="oval:org.mitre.oval:tst:33062"/>
            <criterion comment="firefox is earlier than 0:1.5.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:32951"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32978"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:33072"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:33079"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32121"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:33077"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9527" version="5" class="vulnerability">
      <metadata>
        <title>drivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when packet-per-buffer mode is used, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unknown other impact via an unspecified ioctl associated with receiving an ISO packet that contains zero in the payload-length field.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4138" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4138"/>
        <description>drivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when packet-per-buffer mode is used, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unknown other impact via an unspecified ioctl associated with receiving an ISO packet that contains zero in the payload-length field.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:26.880-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:27.564-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:31.088-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9527 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:17.848-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:00.924-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40050"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39464"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39090"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40063"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39443"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39703"/>
          <criterion comment="kernel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39080"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39862"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40057"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40029"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39849"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40039"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9526" version="5" class="vulnerability">
      <metadata>
        <title>Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attackers to execute arbitrary code via a PN-DCP packet with format string specifiers in the station name.  NOTE: some of these details are obtained from third party information.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1210" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1210"/>
        <description>Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attackers to execute arbitrary code via a PN-DCP packet with format string specifiers in the station name.  NOTE: some of these details are obtained from third party information.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:36.890-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:27.268-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:30.654-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9526 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:12:58.883-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:20:00.447-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.8-EL3.1" test_ref="oval:org.mitre.oval:tst:38258"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.8-EL3.1" test_ref="oval:org.mitre.oval:tst:38534"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.8-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:38635"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.8-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:38709"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.8-1.el5_3.1" test_ref="oval:org.mitre.oval:tst:38670"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.8-1.el5_3.1" test_ref="oval:org.mitre.oval:tst:38619"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9525" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service (memory corruption) and possibly have unspecified other impact via (1) a malformed Unicode string, related to Unicode string area alignment in fs/cifs/sess.c; or (2) long Unicode characters, related to fs/cifs/cifssmb.c and the cifs_readdir function in fs/cifs/readdir.c.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1633" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1633"/>
        <description>Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service (memory corruption) and possibly have unspecified other impact via (1) a malformed Unicode string, related to Unicode string area alignment in fs/cifs/sess.c; or (2) long Unicode characters, related to fs/cifs/cifssmb.c and the cifs_readdir function in fs/cifs/readdir.c.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:13.439-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:26.737-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:30.174-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9525 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:41:07.731-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:59.780-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:38877"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:38938"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:39012"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:39048"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:38799"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:39160"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:39030"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:38637"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:38231"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:39133"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:38985"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:37971"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38820"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38641"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38838"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38699"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38813"/>
            <criterion comment="kernel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38840"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38890"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38529"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38350"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38066"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38388"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9524" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in cluster/cman/daemon/daemon.c in cman (redhat-cluster-suite) before 20070622 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via long client messages.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3374" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3374"/>
        <description>Buffer overflow in cluster/cman/daemon/daemon.c in cman (redhat-cluster-suite) before 20070622 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via long client messages.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:13.948-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:26.538-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:29.927-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9524 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:50.705-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:59.475-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="cman-devel is earlier than 0:2.0.64-1.0.1.el5" test_ref="oval:org.mitre.oval:tst:34743"/>
          <criterion comment="cman is earlier than 0:2.0.64-1.0.1.el5" test_ref="oval:org.mitre.oval:tst:34252"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9523" version="5" class="vulnerability">
      <metadata>
        <title>The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a symlink attack on temporary files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0968" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0968"/>
        <description>The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a symlink attack on temporary files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:43.499-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:26.269-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:29.651-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9523 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:14:15.719-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:59.134-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="glibc is earlier than 0:2.3.2-95.30" test_ref="oval:org.mitre.oval:tst:30926"/>
          <criterion comment="glibc-utils is earlier than 0:2.3.2-95.30" test_ref="oval:org.mitre.oval:tst:30313"/>
          <criterion comment="glibc-devel is earlier than 0:2.3.2-95.30" test_ref="oval:org.mitre.oval:tst:31018"/>
          <criterion comment="nptl-devel is earlier than 0:2.3.2-95.30" test_ref="oval:org.mitre.oval:tst:31055"/>
          <criterion comment="nscd is earlier than 0:2.3.2-95.30" test_ref="oval:org.mitre.oval:tst:30469"/>
          <criterion comment="glibc-profile is earlier than 0:2.3.2-95.30" test_ref="oval:org.mitre.oval:tst:31102"/>
          <criterion comment="glibc-common is earlier than 0:2.3.2-95.30" test_ref="oval:org.mitre.oval:tst:30967"/>
          <criterion comment="glibc-headers is earlier than 0:2.3.2-95.30" test_ref="oval:org.mitre.oval:tst:31074"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9522" version="5" class="vulnerability">
      <metadata>
        <title>sysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the password for a proxy server in plaintext and allows local users to gain privileges.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1760" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1760"/>
        <description>sysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the password for a proxy server in plaintext and allows local users to gain privileges.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:19.772-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:26.010-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:29.425-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9522 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:12:56.532-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:58.756-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="sysreport is earlier than 0:1.3.7.2-6" test_ref="oval:org.mitre.oval:tst:31795"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="sysreport is earlier than 0:1.3.15-2" test_ref="oval:org.mitre.oval:tst:31426"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9521" version="5" class="vulnerability">
      <metadata>
        <title>Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed SMB packet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0010" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0010"/>
        <description>Unknown vulnerability in the MMSE dissector in Ethereal 0.10.4 through 0.10.8 allows remote attackers to cause a denial of service by triggering a free of statically allocated memory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:25.192-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:25.685-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:29.169-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9521 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:32.845-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:57.870-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.9-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31265"/>
            <criterion comment="ethereal is earlier than 0:0.10.9-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31218"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.9-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31097"/>
            <criterion comment="ethereal is earlier than 0:0.10.9-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31103"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9520" version="5" class="vulnerability">
      <metadata>
        <title>Off-by-one buffer overflow in the parse_elements function in the 802.11 printer code (print-802_11.c) for tcpdump 3.9.5 and earlier allows remote attackers to cause a denial of service (crash) via a crafted 802.11 frame.  NOTE: this was originally referred to as heap-based, but it might be stack-based.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1218"/>
        <description>Off-by-one buffer overflow in the parse_elements function in the 802.11 printer code (print-802_11.c) for tcpdump 3.9.5 and earlier allows remote attackers to cause a denial of service (crash) via a crafted 802.11 frame.  NOTE: this was originally referred to as heap-based, but it might be stack-based.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:12.310-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:25.408-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:28.833-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9520 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:26.881-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:57.436-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="arpwatch is earlier than 14:2.1a13-12.el4" test_ref="oval:org.mitre.oval:tst:34426"/>
            <criterion comment="libpcap is earlier than 14:0.8.3-12.el4" test_ref="oval:org.mitre.oval:tst:34317"/>
            <criterion comment="tcpdump is earlier than 14:3.8.2-12.el4" test_ref="oval:org.mitre.oval:tst:33439"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="arpwatch is earlier than 14:2.1a13-18.el5" test_ref="oval:org.mitre.oval:tst:34286"/>
            <criterion comment="libpcap-devel is earlier than 14:0.9.4-11.el5" test_ref="oval:org.mitre.oval:tst:34191"/>
            <criterion comment="libpcap is earlier than 14:0.9.4-11.el5" test_ref="oval:org.mitre.oval:tst:34045"/>
            <criterion comment="tcpdump is earlier than 14:3.9.4-11.el5" test_ref="oval:org.mitre.oval:tst:33937"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9519" version="5" class="vulnerability">
      <metadata>
        <title>The _gnutls_recv_client_kx_message function in lib/gnutls_kx.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 continues to process Client Hello messages within a TLS message after one has already been processed, which allows remote attackers to cause a denial of service (NULL dereference and crash) via a TLS message containing multiple Client Hello messages, aka GNUTLS-SA-2008-1-2.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1949" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1949"/>
        <description>The _gnutls_recv_client_kx_message function in lib/gnutls_kx.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 continues to process Client Hello messages within a TLS message after one has already been processed, which allows remote attackers to cause a denial of service (NULL dereference and crash) via a TLS message containing multiple Client Hello messages, aka GNUTLS-SA-2008-1-2.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:57.771-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:24.801-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:28.570-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9519 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:43.243-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:56.991-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gnutls is earlier than 0:1.0.20-4.el4_6" test_ref="oval:org.mitre.oval:tst:36194"/>
            <criterion comment="gnutls-devel is earlier than 0:1.0.20-4.el4_6" test_ref="oval:org.mitre.oval:tst:36609"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gnutls is earlier than 0:1.4.1-3.el5_1" test_ref="oval:org.mitre.oval:tst:36294"/>
            <criterion comment="gnutls-devel is earlier than 0:1.4.1-3.el5_1" test_ref="oval:org.mitre.oval:tst:35940"/>
            <criterion comment="gnutls-utils is earlier than 0:1.4.1-3.el5_1" test_ref="oval:org.mitre.oval:tst:36811"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9516" version="5" class="vulnerability">
      <metadata>
        <title>mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service (crash) via a NULL second argument to the str_to_date function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3081" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3081"/>
        <description>mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service (crash) via a NULL second argument to the str_to_date function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:20.992-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:24.580-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:28.340-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9516 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:59.958-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:56.665-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mysql is earlier than 0:4.1.20-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32252"/>
          <criterion comment="mysql-devel is earlier than 0:4.1.20-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32551"/>
          <criterion comment="mysql-bench is earlier than 0:4.1.20-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32245"/>
          <criterion comment="mysql-server is earlier than 0:4.1.20-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32560"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9515" version="5" class="vulnerability">
      <metadata>
        <title>The (1) krshd and (2) v4rcp applications in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, when running on Linux and AIX, and (b) Heimdal 0.7.2 and earlier, do not check return codes for setuid calls, which allows local users to gain privileges by causing setuid to fail to drop privileges using attacks such as resource exhaustion.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3083"/>
        <description>The (1) krshd and (2) v4rcp applications in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, when running on Linux and AIX, and (b) Heimdal 0.7.2 and earlier, do not check return codes for setuid calls, which allows local users to gain privileges by causing setuid to fail to drop privileges using attacks such as resource exhaustion.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:09.828-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:24.339-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:28.098-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9515 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:47.326-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:56.329-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="krb5-workstation is earlier than 0:1.3.4-33" test_ref="oval:org.mitre.oval:tst:32665"/>
          <criterion comment="krb5 is earlier than 0:1.3.4-33" test_ref="oval:org.mitre.oval:tst:32887"/>
          <criterion comment="krb5-libs is earlier than 0:1.3.4-33" test_ref="oval:org.mitre.oval:tst:32980"/>
          <criterion comment="krb5-server is earlier than 0:1.3.4-33" test_ref="oval:org.mitre.oval:tst:32772"/>
          <criterion comment="krb5-devel is earlier than 0:1.3.4-33" test_ref="oval:org.mitre.oval:tst:32806"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9514" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecified vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0910" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0910"/>
        <description>Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:55.962-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:23.592-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:27.345-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9514 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:50.992-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:55.296-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33459"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33371"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33748"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33090"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33419"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33665"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33475"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33282"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33636"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33548"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33156"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33407"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33562"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33500"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33725"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33105"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33501"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33691"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33662"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33087"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33640"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:32784"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33240"/>
            <criterion comment="php-common is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33527"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33617"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33561"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33385"/>
            <criterion comment="php is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33615"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33526"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33747"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33735"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33403"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33686"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33502"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33666"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33508"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33652"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33676"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33784"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33706"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9513" version="5" class="vulnerability">
      <metadata>
        <title>The z90crypt_unlocked_ioctl function in the z90crypt driver in the Linux kernel 2.6.9 does not perform a capability check for the Z90QUIESCE operation, which allows local users to leverage euid 0 privileges to force a driver outage.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1883" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1883"/>
        <description>The z90crypt_unlocked_ioctl function in the z90crypt driver in the Linux kernel 2.6.9 does not perform a capability check for the Z90QUIESCE operation, which allows local users to leverage euid 0 privileges to force a driver outage.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:50.899-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:23.283-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:26.954-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9513 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:59.557-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:54.820-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39101"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39357"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:38568"/>
          <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39331"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39316"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39054"/>
          <criterion comment="kernel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39274"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39407"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39435"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39442"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:38473"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9512" version="5" class="vulnerability">
      <metadata>
        <title>The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for overlapping VMA (virtual memory address) allocations, which allows local users to cause a denial of service (system crash) or execute arbitrary code via a crafted ELF or a.out file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0003" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0003"/>
        <description>The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for overlapping VMA (virtual memory address) allocations, which allows local users to cause a denial of service (system crash) or execute arbitrary code via a crafted ELF or a.out file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:50.777-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:22.959-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:26.660-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9512 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:05.481-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:54.460-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31090"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31317"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31165"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31297"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31259"/>
          <criterion comment="kernel is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:30906"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31029"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31014"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:30920"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9511" version="5" class="vulnerability">
      <metadata>
        <title>fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable file in a setgid directory through the (1) truncate or (2) ftruncate function in conjunction with memory-mapped I/O.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4210" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4210"/>
        <description>fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable file in a setgid directory through the (1) truncate or (2) ftruncate function in conjunction with memory-mapped I/O.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:28.578-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:22.355-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:25.996-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9511 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:02:05.196-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:53.631-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37931"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37846"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37817"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37663"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37799"/>
            <criterion comment="kernel is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37028"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37885"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37981"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37117"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37470"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37734"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37826"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37656"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37782"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37432"/>
            <criterion comment="kernel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37747"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37811"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37951"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37485"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37662"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37778"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37855"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37870"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37881"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37504"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37738"/>
            <criterion comment="kernel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37774"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37247"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37715"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37954"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37668"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37947"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9510" version="5" class="vulnerability">
      <metadata>
        <title>SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a chunk length that is inconsistent with the actual length of provided parameters.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1858" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1858"/>
        <description>SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a chunk length that is inconsistent with the actual length of provided parameters.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:18.520-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:21.998-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:25.599-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9510 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:40.120-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:53.234-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32576"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32814"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32958"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32801"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32865"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32880"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32747"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32200"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32838"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:951" version="2" class="vulnerability">
      <metadata>
        <title>Windows 2000 SSL PCT Handshake Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Private Communications Transport (PCT)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0719" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0719"/>
        <description>Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via PCT 1.0 handshake packets.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected to use a forward slash as the separator in the key." date="2007-05-07T15:59:00.528-04:00">
              <contributor organization="Secure Elements, Inc.">Glenn Strickland</contributor>
            </modified>
            <status_change date="2007-05-07T16:06:47.903-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:55.915-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="the version of schannel.dll is less than 5.1.2195.6899" negate="false" test_ref="oval:org.mitre.oval:tst:1501"/>
          <criterion comment="the patch kb835732 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1510"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="SSL is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:1508"/>
          <criterion comment="PCT support is disabled" negate="true" test_ref="oval:org.mitre.oval:tst:1503"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9509" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in rtffplin.cpp in RealPlayer 10.5 6.0.12.1056 on Windows, and 10, 10.0.1.436, and other versions before 10.0.5 on Linux, allows remote attackers to execute arbitrary code via a RealMedia file with a long RealText string, such as an SMIL file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1766" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1766"/>
        <description>Heap-based buffer overflow in rtffplin.cpp in RealPlayer 10.5 6.0.12.1056 on Windows, and 10, 10.0.1.436, and other versions before 10.0.5 on Linux, allows remote attackers to execute arbitrary code via a RealMedia file with a long RealText string, such as an SMIL file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:14.265-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:21.815-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:25.400-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9509 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:30.134-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:52.916-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="HelixPlayer is earlier than 1:1.0.5-0.EL4.1" test_ref="oval:org.mitre.oval:tst:31840"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9508" version="5" class="vulnerability">
      <metadata>
        <title>Integer underflow in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a font file with an odd number of blue values, which causes the underflow when decrementing by 2 in a context that assumes an even number of values.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0747" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0747"/>
        <description>Integer underflow in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a font file with an odd number of blue values, which causes the underflow when decrementing by 2 in a context that assumes an even number of values.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:09:34.261-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:21.548-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:25.124-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9508 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:13.977-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:52.527-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="freetype is earlier than 0:2.1.4-4.0.rhel3.2" test_ref="oval:org.mitre.oval:tst:32599"/>
            <criterion comment="freetype-devel is earlier than 0:2.1.4-4.0.rhel3.2" test_ref="oval:org.mitre.oval:tst:32616"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="freetype is earlier than 0:2.1.9-1.rhel4.4" test_ref="oval:org.mitre.oval:tst:32106"/>
            <criterion comment="freetype-demos is earlier than 0:2.1.9-1.rhel4.4" test_ref="oval:org.mitre.oval:tst:32605"/>
            <criterion comment="freetype-utils is earlier than 0:2.1.9-1.rhel4.4" test_ref="oval:org.mitre.oval:tst:32417"/>
            <criterion comment="freetype-devel is earlier than 0:2.1.9-1.rhel4.4" test_ref="oval:org.mitre.oval:tst:32653"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9507" version="5" class="vulnerability">
      <metadata>
        <title>The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cf_decode_2d function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6725" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6725"/>
        <description>The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cf_decode_2d function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:32.649-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:21.152-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:24.739-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9507 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:15.502-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:51.983-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="hpijs is earlier than 0:7.05-32.1.20" test_ref="oval:org.mitre.oval:tst:38025"/>
            <criterion comment="ghostscript-devel is earlier than 0:7.05-32.1.20" test_ref="oval:org.mitre.oval:tst:38598"/>
            <criterion comment="ghostscript is earlier than 0:7.05-32.1.20" test_ref="oval:org.mitre.oval:tst:38506"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ghostscript-devel is earlier than 0:7.07-33.2.el4_7.8" test_ref="oval:org.mitre.oval:tst:38482"/>
            <criterion comment="ghostscript is earlier than 0:7.07-33.2.el4_7.8" test_ref="oval:org.mitre.oval:tst:38656"/>
            <criterion comment="ghostscript-gtk is earlier than 0:7.07-33.2.el4_7.8" test_ref="oval:org.mitre.oval:tst:38408"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ghostscript-devel is earlier than 0:8.15.2-9.4.el5_3.7" test_ref="oval:org.mitre.oval:tst:38588"/>
            <criterion comment="ghostscript is earlier than 0:8.15.2-9.4.el5_3.7" test_ref="oval:org.mitre.oval:tst:38629"/>
            <criterion comment="ghostscript-gtk is earlier than 0:8.15.2-9.4.el5_3.7" test_ref="oval:org.mitre.oval:tst:38457"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9506" version="5" class="vulnerability">
      <metadata>
        <title>libvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 and other products, allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .ogg file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2663" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2663"/>
        <description>libvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 and other products, allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .ogg file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:24.099-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:20.810-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:24.423-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9506 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:06.388-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:51.508-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libvorbis-devel is earlier than 1:1.0-11.el3" test_ref="oval:org.mitre.oval:tst:39170"/>
            <criterion comment="libvorbis is earlier than 1:1.0-11.el3" test_ref="oval:org.mitre.oval:tst:38631"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libvorbis-devel is earlier than 1:1.1.0-3.el4_8.2" test_ref="oval:org.mitre.oval:tst:38645"/>
            <criterion comment="libvorbis is earlier than 1:1.1.0-3.el4_8.2" test_ref="oval:org.mitre.oval:tst:38909"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libvorbis-devel is earlier than 1:1.1.2-3.el5_3.3" test_ref="oval:org.mitre.oval:tst:39192"/>
            <criterion comment="libvorbis is earlier than 1:1.1.2-3.el5_3.3" test_ref="oval:org.mitre.oval:tst:39166"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9504" version="5" class="vulnerability">
      <metadata>
        <title>mysql_install_db in MySQL 4.1.x before 4.1.12 and 5.x up to 5.0.4 creates the mysql_install_db.X file with a predictable filename and insecure permissions, which allows local users to execute arbitrary SQL commands by modifying the file's contents.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1636" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1636"/>
        <description>mysql_install_db in MySQL 4.1.x before 4.1.12 and 5.x up to 5.0.4 creates the mysql_install_db.X file with a predictable filename and insecure permissions, which allows local users to execute arbitrary SQL commands by modifying the file's contents.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:59.395-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:20.585-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:24.187-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9504 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:50.644-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:51.181-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mysql is earlier than 0:4.1.12-3.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32079"/>
          <criterion comment="mysql-devel is earlier than 0:4.1.12-3.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31928"/>
          <criterion comment="mysql-bench is earlier than 0:4.1.12-3.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31694"/>
          <criterion comment="mysql-server is earlier than 0:4.1.12-3.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32027"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9503" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the GTK+ gdk-pixbuf XPM image rendering library in GTK+ 2.4.0 allows attackers to execute arbitrary code via an XPM file with a number of colors that causes insufficient memory to be allocated, which leads to a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3186" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3186"/>
        <description>Integer overflow in the GTK+ gdk-pixbuf XPM image rendering library in GTK+ 2.4.0 allows attackers to execute arbitrary code via an XPM file with a number of colors that causes insufficient memory to be allocated, which leads to a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:47.594-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:20.287-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:23.834-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9503 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:54.942-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:50.690-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gdk-pixbuf-devel is earlier than 1:0.22.0-13.el3.3" test_ref="oval:org.mitre.oval:tst:32203"/>
            <criterion comment="gtk2 is earlier than 0:2.2.4-19" test_ref="oval:org.mitre.oval:tst:32214"/>
            <criterion comment="gdk-pixbuf-gnome is earlier than 1:0.22.0-13.el3.3" test_ref="oval:org.mitre.oval:tst:32393"/>
            <criterion comment="gdk-pixbuf is earlier than 1:0.22.0-13.el3.3" test_ref="oval:org.mitre.oval:tst:32388"/>
            <criterion comment="gtk2-devel is earlier than 0:2.2.4-19" test_ref="oval:org.mitre.oval:tst:32156"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gdk-pixbuf-devel is earlier than 1:0.22.0-17.el4.3" test_ref="oval:org.mitre.oval:tst:32239"/>
            <criterion comment="gtk2 is earlier than 0:2.4.13-18" test_ref="oval:org.mitre.oval:tst:32313"/>
            <criterion comment="gdk-pixbuf is earlier than 1:0.22.0-17.el4.3" test_ref="oval:org.mitre.oval:tst:32331"/>
            <criterion comment="gtk2-devel is earlier than 0:2.4.13-18" test_ref="oval:org.mitre.oval:tst:32250"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9502" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0174"/>
        <description>Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:10.285-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:19.747-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:22.915-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9502 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:17.964-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:49.996-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:40246"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:39934"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:40184"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:40133"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:39775"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:40360"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:40059"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:39946"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:40114"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:39403"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox is earlier than 0:3.0.19-1.el4" test_ref="oval:org.mitre.oval:tst:40284"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-54.el4_8" test_ref="oval:org.mitre.oval:tst:40081"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-54.el4_8" test_ref="oval:org.mitre.oval:tst:40250"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-54.el4_8" test_ref="oval:org.mitre.oval:tst:40304"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-54.el4_8" test_ref="oval:org.mitre.oval:tst:40345"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-54.el4_8" test_ref="oval:org.mitre.oval:tst:40183"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-54.el4_8" test_ref="oval:org.mitre.oval:tst:39945"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.19-1.el5_5" test_ref="oval:org.mitre.oval:tst:40265"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.19-1.el5_5" test_ref="oval:org.mitre.oval:tst:39621"/>
            <criterion comment="firefox is earlier than 0:3.0.19-1.el5_5" test_ref="oval:org.mitre.oval:tst:40064"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.19-1.el5_5" test_ref="oval:org.mitre.oval:tst:40164"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9501" version="5" class="vulnerability">
      <metadata>
        <title>The browser engine in Mozilla Firefox 3 before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsEventStateManager::GetContentState and nsNativeTheme::CheckBooleanAttr; (2) UnhookTextRunFromFrames and ClearAllTextRunReferences; (3) nsTextFrame::ClearTextRun; (4) IsPercentageAware; (5) PL_DHashTableFinish; (6) nsListBoxBodyFrame::GetNextItemBox; (7) AtomTableClearEntry, related to the atom table, DOM mutation events, and Unicode surrogates; (8) nsHTMLEditor::HideResizers; and (9) nsWindow::SetCursor, related to changing the cursor; and other vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1392" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1392"/>
        <description>The browser engine in Mozilla Firefox 3 before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsEventStateManager::GetContentState and nsNativeTheme::CheckBooleanAttr; (2) UnhookTextRunFromFrames and ClearAllTextRunReferences; (3) nsTextFrame::ClearTextRun; (4) IsPercentageAware; (5) PL_DHashTableFinish; (6) nsListBoxBodyFrame::GetNextItemBox; (7) AtomTableClearEntry, related to the atom table, DOM mutation events, and Unicode surrogates; (8) nsHTMLEditor::HideResizers; and (9) nsWindow::SetCursor, related to changing the cursor; and other vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:04.877-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:19.237-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:22.404-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9501 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:49.536-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:49.305-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38336"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38452"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38736"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38742"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38069"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38264"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38724"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38791"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38432"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:37902"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38793"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-23.el4" test_ref="oval:org.mitre.oval:tst:38562"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38213"/>
            <criterion comment="firefox is earlier than 0:3.0.11-4.el4" test_ref="oval:org.mitre.oval:tst:38689"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38280"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38531"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38828"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38655"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38771"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38371"/>
            <criterion comment="firefox is earlier than 0:3.0.11-2.el5_3" test_ref="oval:org.mitre.oval:tst:38682"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.22-2.el5_3" test_ref="oval:org.mitre.oval:tst:38801"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38718"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9500" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in residue partition value (aka partvals) evaluation in Xiph.org libvorbis 1.2.0 and earlier allows remote attackers to execute arbitrary code via a crafted OGG file, which triggers a heap overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1420"/>
        <description>Integer overflow in residue partition value (aka partvals) evaluation in Xiph.org libvorbis 1.2.0 and earlier allows remote attackers to execute arbitrary code via a crafted OGG file, which triggers a heap overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:24.692-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:18.881-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:22.091-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9500 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:20.632-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:48.775-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libvorbis-devel is earlier than 1:1.0-10.el3" test_ref="oval:org.mitre.oval:tst:36659"/>
            <criterion comment="libvorbis is earlier than 1:1.0-10.el3" test_ref="oval:org.mitre.oval:tst:36699"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libvorbis-devel is earlier than 0:1.1.0-3.el4_6.1" test_ref="oval:org.mitre.oval:tst:36519"/>
            <criterion comment="libvorbis is earlier than 0:1.1.0-3.el4_6.1" test_ref="oval:org.mitre.oval:tst:36387"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libvorbis-devel is earlier than 0:1.1.2-3.el5_1.2" test_ref="oval:org.mitre.oval:tst:36439"/>
            <criterion comment="libvorbis is earlier than 0:1.1.2-3.el5_1.2" test_ref="oval:org.mitre.oval:tst:36710"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:95" version="7" class="vulnerability" deprecated="true">
      <metadata>
        <title>DEPRECATED: Windows 2000 IIS ASP Server-Side Include Function Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0149" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0149"/>
        <description>Buffer overflow in ASP Server-Side Include Function in IIS 4.0, 5.0 and 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via long file names.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-14T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected to use a forward slash as the separator in the key." date="2007-05-07T15:59:00.430-04:00">
              <contributor organization="Secure Elements, Inc.">Glenn Strickland</contributor>
            </modified>
            <status_change date="2007-05-07T16:06:11.689-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:55.660-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2884" date="2010-11-29T16:14:00.692-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:39.392-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:01:42.893-05:00">ACCEPTED</status_change>
            <modified comment="Use def:12407 instead" date="2011-01-20T10:08:21.606-05:00">
              <contributor organization="Symantec Corporation">Josh Turpin</contributor>
            </modified>
            <status_change date="2011-01-20T10:08:21.606-05:00">DEPRECATED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="IIS major version equals 5" negate="false" test_ref="oval:org.mitre.oval:tst:3081"/>
          <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
          <criterion comment="the version of w3svc.dll is less than 5.0.2195.5269" negate="false" test_ref="oval:org.mitre.oval:tst:3080"/>
          <criterion comment="Patch Q319733 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3095"/>
          <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
          <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
          <criterion comment="Win2K/XP/2003 service pack 3 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:3079"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="asp.dll mapping exists" negate="false" test_ref="oval:org.mitre.oval:tst:3092"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9499" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module 1.49 for Perl might allow context-dependent attackers to execute arbitrary code via unspecified input to an application that uses the getline and pg_getline functions to read database rows.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0663" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0663"/>
        <description>Heap-based buffer overflow in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module 1.49 for Perl might allow context-dependent attackers to execute arbitrary code via unspecified input to an application that uses the getline and pg_getline functions to read database rows.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:16.764-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:18.692-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:21.856-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9499 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:45.364-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:48.489-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="perl-DBD-Pg is earlier than 0:1.49-2.el5_3.1" test_ref="oval:org.mitre.oval:tst:38484"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9497" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 3.0.12 does not always use XPCCrossOriginWrapper when required during object construction, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted document, related to a "cross origin wrapper bypass."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2472" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2472"/>
        <description>Mozilla Firefox before 3.0.12 does not always use XPCCrossOriginWrapper when required during object construction, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted document, related to a "cross origin wrapper bypass."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:18.902-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:18.435-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:21.593-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9497 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:56.590-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:48.085-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.12-1.el4" test_ref="oval:org.mitre.oval:tst:38809"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38249"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38575"/>
            <criterion comment="firefox is earlier than 0:3.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38853"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38563"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9496" version="5" class="vulnerability">
      <metadata>
        <title>KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0062" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0062"/>
        <description>KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:21.128-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:17.980-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:21.180-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9496 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:20.416-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:47.436-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.2.7-68" test_ref="oval:org.mitre.oval:tst:36272"/>
            <criterion comment="krb5 is earlier than 0:1.2.7-68" test_ref="oval:org.mitre.oval:tst:36493"/>
            <criterion comment="krb5-libs is earlier than 0:1.2.7-68" test_ref="oval:org.mitre.oval:tst:36531"/>
            <criterion comment="krb5-server is earlier than 0:1.2.7-68" test_ref="oval:org.mitre.oval:tst:36304"/>
            <criterion comment="krb5-devel is earlier than 0:1.2.7-68" test_ref="oval:org.mitre.oval:tst:36522"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.3.4-54.el4_6.1" test_ref="oval:org.mitre.oval:tst:36541"/>
            <criterion comment="krb5 is earlier than 0:1.3.4-54.el4_6.1" test_ref="oval:org.mitre.oval:tst:36418"/>
            <criterion comment="krb5-libs is earlier than 0:1.3.4-54.el4_6.1" test_ref="oval:org.mitre.oval:tst:36371"/>
            <criterion comment="krb5-server is earlier than 0:1.3.4-54.el4_6.1" test_ref="oval:org.mitre.oval:tst:36482"/>
            <criterion comment="krb5-devel is earlier than 0:1.3.4-54.el4_6.1" test_ref="oval:org.mitre.oval:tst:36207"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.6.1-17.el5_1.1" test_ref="oval:org.mitre.oval:tst:36318"/>
            <criterion comment="krb5 is earlier than 0:1.6.1-17.el5_1.1" test_ref="oval:org.mitre.oval:tst:36285"/>
            <criterion comment="krb5-libs is earlier than 0:1.6.1-17.el5_1.1" test_ref="oval:org.mitre.oval:tst:36069"/>
            <criterion comment="krb5-server is earlier than 0:1.6.1-17.el5_1.1" test_ref="oval:org.mitre.oval:tst:36233"/>
            <criterion comment="krb5-devel is earlier than 0:1.6.1-17.el5_1.1" test_ref="oval:org.mitre.oval:tst:36199"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9495" version="5" class="vulnerability">
      <metadata>
        <title>rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, which allows remote attackers to write files outside of the module's path.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0426" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0426"/>
        <description>rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, which allows remote attackers to write files outside of the module's path.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:01.941-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:17.798-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:20.959-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9495 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:30.307-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:47.173-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="rsync is earlier than 0:2.5.7-4.3E" test_ref="oval:org.mitre.oval:tst:30539"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9494" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest, involving a mismatch for a document's principal, and (2) XPCNativeWrapper.toString, involving an incorrect __proto__ scope, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via a crafted document.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1309" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1309"/>
        <description>Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest, involving a mismatch for a document's principal, and (2) XPCNativeWrapper.toString, involving an incorrect __proto__ scope, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via a crafted document.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:18.740-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:17.298-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:20.316-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9494 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:22.323-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:46.453-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38597"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38375"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38403"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38521"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38542"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:37726"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38677"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38096"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38577"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38540"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38634"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-23.el4" test_ref="oval:org.mitre.oval:tst:38562"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38697"/>
            <criterion comment="firefox is earlier than 0:3.0.9-1.el4" test_ref="oval:org.mitre.oval:tst:38379"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38716"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38190"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38685"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38596"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38308"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38633"/>
            <criterion comment="firefox is earlier than 0:3.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38370"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.22-2.el5_3" test_ref="oval:org.mitre.oval:tst:38801"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38462"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9493" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduct cross-site scripting (XSS) attacks with chrome privileges via an addon that inserts a (1) javascript: or (2) data: link into an about:blank document loaded by chrome via (a) the window.open function or (b) a content.location assignment, aka "Cross Context Scripting." NOTE: this issue is caused by a CVE-2007-3089 regression.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3844" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3844"/>
        <description>Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduct cross-site scripting (XSS) attacks with chrome privileges via an addon that inserts a (1) javascript: or (2) data: link into an about:blank document loaded by chrome via (a) the window.open function or (b) a content.location assignment, aka "Cross Context Scripting." NOTE: this issue is caused by a CVE-2007-3089 regression.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:31.463-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:16.726-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:19.710-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9493 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:38.382-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:45.581-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35512"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35540"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35394"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35541"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35241"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35553"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35552"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:34924"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35155"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35441"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35489"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35324"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-0.5.el4" test_ref="oval:org.mitre.oval:tst:35240"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35182"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35311"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35454"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.7.el4" test_ref="oval:org.mitre.oval:tst:35398"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35351"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35482"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:34790"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35291"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:34577"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-6.el5" test_ref="oval:org.mitre.oval:tst:35262"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-6.el5" test_ref="oval:org.mitre.oval:tst:35202"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-5.el5" test_ref="oval:org.mitre.oval:tst:35177"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9492" version="5" class="vulnerability">
      <metadata>
        <title>Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service (crash) via crafted IPP packets.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0597" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0597"/>
        <description>Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service (crash) via crafted IPP packets.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:18.085-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:16.459-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:19.429-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9492 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:41.664-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:45.174-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 0:1.1.17-13.3.51" test_ref="oval:org.mitre.oval:tst:36392"/>
            <criterion comment="cups is earlier than 0:1.1.17-13.3.51" test_ref="oval:org.mitre.oval:tst:36393"/>
            <criterion comment="cups-libs is earlier than 0:1.1.17-13.3.51" test_ref="oval:org.mitre.oval:tst:36450"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.5" test_ref="oval:org.mitre.oval:tst:35932"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.5" test_ref="oval:org.mitre.oval:tst:36243"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.5" test_ref="oval:org.mitre.oval:tst:36438"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9491" version="5" class="vulnerability">
      <metadata>
        <title>EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges via javascript that calls the valueOf method on objects that were created outside of the sandbox.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2787"/>
        <description>EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges via javascript that calls the valueOf method on objects that were created outside of the sandbox.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:21.461-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:15.930-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:18.885-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9491 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:35.760-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:44.515-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32575"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32674"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32918"/>
            <criterion comment="seamonkey is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32919"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32864"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32659"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32859"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32511"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32902"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32837"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32873"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32693"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32886"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32810"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32418"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32496"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32929"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32777"/>
            <criterion comment="firefox is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32896"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32722"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32906"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32905"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32925"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32624"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9490" version="5" class="vulnerability">
      <metadata>
        <title>MySQL before 5.1.46 allows local users to delete the data and index files of another user's MyISAM table via a symlink attack in conjunction with the DROP TABLE command, a different vulnerability than CVE-2008-4098 and CVE-2008-7247.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1626"/>
        <description>MySQL before 5.1.46 allows local users to delete the data and index files of another user's MyISAM table via a symlink attack in conjunction with the DROP TABLE command, a different vulnerability than CVE-2008-4098 and CVE-2008-7247.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:30.870-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:15.539-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:18.642-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9490 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:48.428-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:44.183-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mysql is earlier than 0:5.0.77-4.el5_5.3" test_ref="oval:org.mitre.oval:tst:40529"/>
          <criterion comment="mysql-devel is earlier than 0:5.0.77-4.el5_5.3" test_ref="oval:org.mitre.oval:tst:40467"/>
          <criterion comment="mysql-test is earlier than 0:5.0.77-4.el5_5.3" test_ref="oval:org.mitre.oval:tst:40387"/>
          <criterion comment="mysql-bench is earlier than 0:5.0.77-4.el5_5.3" test_ref="oval:org.mitre.oval:tst:40525"/>
          <criterion comment="mysql-server is earlier than 0:5.0.77-4.el5_5.3" test_ref="oval:org.mitre.oval:tst:39669"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9489" version="5" class="vulnerability">
      <metadata>
        <title>Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service (daemon crash) via a request from a kadmin client that sends an invalid API version number.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0629" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0629"/>
        <description>Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service (daemon crash) via a request from a kadmin client that sends an invalid API version number.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:31.390-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:15.311-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:18.403-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9489 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:42.151-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:43.822-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="krb5-workstation is earlier than 0:1.6.1-36.el5_5.2" test_ref="oval:org.mitre.oval:tst:40333"/>
          <criterion comment="krb5 is earlier than 0:1.6.1-36.el5_5.2" test_ref="oval:org.mitre.oval:tst:40224"/>
          <criterion comment="krb5-libs is earlier than 0:1.6.1-36.el5_5.2" test_ref="oval:org.mitre.oval:tst:40289"/>
          <criterion comment="krb5-server is earlier than 0:1.6.1-36.el5_5.2" test_ref="oval:org.mitre.oval:tst:40134"/>
          <criterion comment="krb5-devel is earlier than 0:1.6.1-36.el5_5.2" test_ref="oval:org.mitre.oval:tst:39948"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9488" version="5" class="vulnerability">
      <metadata>
        <title>The Bluetooth SDP dissector Wireshark (formerly Ethereal) 0.99.2 to 0.99.6 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6120" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6120"/>
        <description>The Bluetooth SDP dissector Wireshark (formerly Ethereal) 0.99.2 to 0.99.6 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:36.652-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:14.892-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:17.959-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9488 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:17.716-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:43.279-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-EL3.1" test_ref="oval:org.mitre.oval:tst:36111"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-EL3.1" test_ref="oval:org.mitre.oval:tst:36043"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-3.el3" test_ref="oval:org.mitre.oval:tst:35411"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-3.el3" test_ref="oval:org.mitre.oval:tst:36140"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:36051"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:35980"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35669"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35941"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:35709"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:36120"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35712"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35801"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9487" version="5" class="vulnerability">
      <metadata>
        <title>The fib_seq_start function in fib_hash.c in Linux kernel allows local users to cause a denial of service (system crash) via /proc/net/route.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1041" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1041"/>
        <description>The fib_seq_start function in fib_hash.c in Linux kernel allows local users to cause a denial of service (system crash) via /proc/net/route.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:51.290-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:14.633-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:17.686-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9487 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:49.588-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:42.878-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31545"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31539"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31661"/>
          <criterion comment="kernel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31482"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31112"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31605"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31330"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9486" version="3" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Sun JDK and Java Runtime Environment (JRE) 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to access arbitrary network services on the local host via unspecified vectors related to JavaScript and Java APIs.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1195" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1195"/>
        <description>Unspecified vulnerability in Sun JDK and Java Runtime Environment (JRE) 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to access arbitrary network services on the local host via unspecified vectors related to JavaScript and Java APIs.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:18.677-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:13.962-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:17.012-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36548"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36455"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36422"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36295"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36406"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36334"/>
            <criterion comment="java-1.5.0-ibm is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36155"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36267"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35708"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35618"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36613"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36614"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36509"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36558"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36485"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35872"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36582"/>
            <criterion comment="java-1.6.0-ibm-accessibility is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36555"/>
            <criterion comment="java-1.6.0-ibm-jdbc is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36414"/>
            <criterion comment="java-1.6.0-ibm-src is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36622"/>
            <criterion comment="java-1.6.0-ibm-javacomm is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36688"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36265"/>
            <criterion comment="java-1.6.0-ibm is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36319"/>
            <criterion comment="java-1.6.0-ibm-plugin is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36706"/>
            <criterion comment="java-1.6.0-ibm-devel is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36205"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36535"/>
            <criterion comment="java-1.6.0-ibm-demo is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36515"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36523"/>
            <criterion comment="java-1.5.0-ibm-accessibility is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36323"/>
            <criterion comment="java-1.5.0-ibm is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35890"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35698"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35719"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36340"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36068"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36568"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9485" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the BMP image format parser for the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0691" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0691"/>
        <description>Heap-based buffer overflow in the BMP image format parser for the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:08.746-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:13.732-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:16.768-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9485 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:37.994-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:42.398-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="qt-config is earlier than 1:3.1.2-13.4" test_ref="oval:org.mitre.oval:tst:30825"/>
          <criterion comment="qt is earlier than 1:3.1.2-13.4" test_ref="oval:org.mitre.oval:tst:30487"/>
          <criterion comment="qt-devel is earlier than 1:3.1.2-13.4" test_ref="oval:org.mitre.oval:tst:30732"/>
          <criterion comment="qt-MySQL is earlier than 1:3.1.2-13.4" test_ref="oval:org.mitre.oval:tst:30758"/>
          <criterion comment="qt-designer is earlier than 1:3.1.2-13.4" test_ref="oval:org.mitre.oval:tst:30345"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9484" version="5" class="vulnerability">
      <metadata>
        <title>WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not initialize a pointer during handling of a Cascading Style Sheets (CSS) attr function call with a large numerical argument, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1698"/>
        <description>WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not initialize a pointer during handling of a Cascading Style Sheets (CSS) attr function call with a large numerical argument, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:24.152-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:13.426-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:16.458-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9484 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:30.909-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:41.867-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdelibs is earlier than 6:3.1.3-6.13" test_ref="oval:org.mitre.oval:tst:38767"/>
            <criterion comment="kdelibs-devel is earlier than 6:3.1.3-6.13" test_ref="oval:org.mitre.oval:tst:38487"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdelibs is earlier than 6:3.3.1-14.el4" test_ref="oval:org.mitre.oval:tst:37977"/>
            <criterion comment="kdelibs-devel is earlier than 6:3.3.1-14.el4" test_ref="oval:org.mitre.oval:tst:38299"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdelibs-apidocs is earlier than 6:3.5.4-22.el5_3" test_ref="oval:org.mitre.oval:tst:38102"/>
            <criterion comment="kdelibs is earlier than 6:3.5.4-22.el5_3" test_ref="oval:org.mitre.oval:tst:38389"/>
            <criterion comment="kdelibs-devel is earlier than 6:3.5.4-22.el5_3" test_ref="oval:org.mitre.oval:tst:38720"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9483" version="5" class="vulnerability">
      <metadata>
        <title>BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1058" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1058"/>
        <description>BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:14.161-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:13.232-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:16.253-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9483 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:55.487-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:41.563-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="busybox-anaconda is earlier than 0:1.00.rc1-7.el4" test_ref="oval:org.mitre.oval:tst:33230"/>
          <criterion comment="busybox is earlier than 0:1.00.rc1-7.el4" test_ref="oval:org.mitre.oval:tst:33750"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9482" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the LDAP dissector in Wireshark (formerly Ethereal) 0.99.3 allows remote attackers to cause a denial of service (crash) via a crafted LDAP packet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5740" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5740"/>
        <description>Unspecified vulnerability in the LDAP dissector in Wireshark (formerly Ethereal) 0.99.3 allows remote attackers to cause a denial of service (crash) via a crafted LDAP packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:09.293-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:12.944-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:15.922-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9482 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:57.587-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:41.187-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.4-EL3.1" test_ref="oval:org.mitre.oval:tst:33205"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.4-EL3.1" test_ref="oval:org.mitre.oval:tst:33170"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.4-EL4.1" test_ref="oval:org.mitre.oval:tst:32550"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.4-EL4.1" test_ref="oval:org.mitre.oval:tst:33152"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9481" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the libMagick componet of ImageMagick 6.0.6.2 might allow attackers to execute arbitrary code via an image index array that triggers the overflow during filename glob expansion by the ExpandFilenames function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2440" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2440"/>
        <description>Heap-based buffer overflow in the libMagick componet of ImageMagick 6.0.6.2 might allow attackers to execute arbitrary code via an image index array that triggers the overflow during filename glob expansion by the ExpandFilenames function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:19.462-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:12.626-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:15.598-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9481 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:10:22.562-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:40.696-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:5.5.6-24" test_ref="oval:org.mitre.oval:tst:33189"/>
            <criterion comment="ImageMagick is earlier than 0:5.5.6-24" test_ref="oval:org.mitre.oval:tst:33318"/>
            <criterion comment="ImageMagick-perl is earlier than 0:5.5.6-24" test_ref="oval:org.mitre.oval:tst:33102"/>
            <criterion comment="ImageMagick-devel is earlier than 0:5.5.6-24" test_ref="oval:org.mitre.oval:tst:33080"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:5.5.6-24" test_ref="oval:org.mitre.oval:tst:33315"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-16.0.3" test_ref="oval:org.mitre.oval:tst:33269"/>
            <criterion comment="ImageMagick is earlier than 0:6.0.7.1-16.0.3" test_ref="oval:org.mitre.oval:tst:33326"/>
            <criterion comment="ImageMagick-perl is earlier than 0:6.0.7.1-16.0.3" test_ref="oval:org.mitre.oval:tst:32926"/>
            <criterion comment="ImageMagick-devel is earlier than 0:6.0.7.1-16.0.3" test_ref="oval:org.mitre.oval:tst:32622"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:6.0.7.1-16.0.3" test_ref="oval:org.mitre.oval:tst:33361"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9480" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the FileReadGIF function in tkImgGIF.c for Tk Toolkit 8.4.12 and earlier, and 8.3.5 and earlier, allows user-assisted attackers to cause a denial of service (segmentation fault) via an animated GIF in which the first subimage is smaller than a subsequent subimage, which triggers the overflow in the ReadImage function, a different vulnerability than CVE-2007-5137.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5378" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5378"/>
        <description>Buffer overflow in the FileReadGIF function in tkImgGIF.c for Tk Toolkit 8.4.12 and earlier, and 8.3.5 and earlier, allows user-assisted attackers to cause a denial of service (segmentation fault) via an animated GIF in which the first subimage is smaller than a subsequent subimage, which triggers the overflow in the ReadImage function, a different vulnerability than CVE-2007-5137.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:23.200-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:12.285-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:15.244-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9480 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:10:15.516-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:40.221-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tix is earlier than 0:8.1.4-92.8" test_ref="oval:org.mitre.oval:tst:36200"/>
            <criterion comment="tclx is earlier than 0:8.3-92.8" test_ref="oval:org.mitre.oval:tst:35800"/>
            <criterion comment="tcl-devel is earlier than 0:8.3.5-92.8" test_ref="oval:org.mitre.oval:tst:35961"/>
            <criterion comment="expect-devel is earlier than 0:5.38.0-92.8" test_ref="oval:org.mitre.oval:tst:36175"/>
            <criterion comment="tcltk is earlier than 0:8.3.5-92.8" test_ref="oval:org.mitre.oval:tst:36169"/>
            <criterion comment="itcl is earlier than 0:3.2-92.8" test_ref="oval:org.mitre.oval:tst:35879"/>
            <criterion comment="tcl is earlier than 0:8.3.5-92.8" test_ref="oval:org.mitre.oval:tst:36313"/>
            <criterion comment="expect is earlier than 0:5.38.0-92.8" test_ref="oval:org.mitre.oval:tst:35369"/>
            <criterion comment="tk-devel is earlier than 0:8.3.5-92.8" test_ref="oval:org.mitre.oval:tst:36316"/>
            <criterion comment="tk is earlier than 0:8.3.5-92.8" test_ref="oval:org.mitre.oval:tst:36018"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tk-devel is earlier than 0:8.4.7-3.el4_6.1" test_ref="oval:org.mitre.oval:tst:36356"/>
            <criterion comment="tk is earlier than 0:8.4.7-3.el4_6.1" test_ref="oval:org.mitre.oval:tst:36225"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:948" version="4" class="vulnerability">
      <metadata>
        <title>IE File Download Dialog Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0309" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0309"/>
        <description>Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to bypass security zone restrictions and execute arbitrary programs via a web document with a large number of duplicate file:// or other requests that point to the program and open multiple file download dialogs, which eventually cause Internet Explorer to execute the program, as demonstrated using a large number of FRAME or IFRAME tags, aka the "File Download Dialog Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-29T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2004-09-22T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-09-22T11:10:00.000-04:00" comment="Replaced IE cumulative patch IDs to correspond to the original IDs">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2004-10-06T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:51.242-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:28.466-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
        <criterion comment="the version of mshtml.dll is less than 5.50.4926.2500" negate="false" test_ref="oval:org.mitre.oval:tst:1454"/>
        <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        <criterion comment="the patch q832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2588"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9475" version="5" class="vulnerability">
      <metadata>
        <title>The attachment scrubber (Scrubber.py) in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to cause a denial of service (mailing list delivery failure) via a multipart MIME message with a single part that has two blank lines between the first boundary and the end boundary.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0052" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0052"/>
        <description>The attachment scrubber (Scrubber.py) in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to cause a denial of service (mailing list delivery failure) via a multipart MIME message with a single part that has two blank lines between the first boundary and the end boundary.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:02.110-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:12.068-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:14.943-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9475 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:10:12.831-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:39.835-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="mailman is earlier than 3:2.1.5.1-25.rhel3.5" test_ref="oval:org.mitre.oval:tst:32725"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="mailman is earlier than 3:2.1.5.1-34.rhel4.3" test_ref="oval:org.mitre.oval:tst:32480"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9474" version="5" class="vulnerability">
      <metadata>
        <title>The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a denial of service (daemon crash) and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0844" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0844"/>
        <description>The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a denial of service (daemon crash) and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:09:34.981-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:11.802-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:14.702-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9474 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:00.273-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:39.503-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="krb5-workstation is earlier than 0:1.6.1-31.el5_3.3" test_ref="oval:org.mitre.oval:tst:38425"/>
          <criterion comment="krb5 is earlier than 0:1.6.1-31.el5_3.3" test_ref="oval:org.mitre.oval:tst:38479"/>
          <criterion comment="krb5-libs is earlier than 0:1.6.1-31.el5_3.3" test_ref="oval:org.mitre.oval:tst:37893"/>
          <criterion comment="krb5-server is earlier than 0:1.6.1-31.el5_3.3" test_ref="oval:org.mitre.oval:tst:38211"/>
          <criterion comment="krb5-devel is earlier than 0:1.6.1-31.el5_3.3" test_ref="oval:org.mitre.oval:tst:38553"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9473" version="5" class="vulnerability">
      <metadata>
        <title>The HTTP dissector in Ethereal 0.10.1 through 0.10.7 allows remote attackers to cause a denial of service (application crash) via a certain packet that causes the dissector to access previously-freed memory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1141" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1141"/>
        <description>The HTTP dissector in Ethereal 0.10.1 through 0.10.7 allows remote attackers to cause a denial of service (application crash) via a certain packet that causes the dissector to access previously-freed memory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:12.964-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:11.563-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:14.451-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9473 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:38.712-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:39.132-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.9-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31265"/>
            <criterion comment="ethereal is earlier than 0:0.10.9-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31218"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.9-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31097"/>
            <criterion comment="ethereal is earlier than 0:0.10.9-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31103"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9472" version="5" class="vulnerability">
      <metadata>
        <title>Linux kernel 2.6.8 to 2.6.14-rc2 allows local users to cause a denial of service (kernel OOPS) via a userspace process that issues a USB Request Block (URB) to a USB device and terminates before the URB is finished, which leads to a stale pointer reference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3055" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3055"/>
        <description>Linux kernel 2.6.8 to 2.6.14-rc2 allows local users to cause a denial of service (kernel OOPS) via a userspace process that issues a USB Request Block (URB) to a USB device and terminates before the URB is finished, which leads to a stale pointer reference.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:14.540-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:11.156-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:13.978-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9472 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:54.579-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:38.551-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32158"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32589"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32704"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32562"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32078"/>
            <criterion comment="kernel is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32513"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32231"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32097"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32708"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32335"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32833"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32825"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32836"/>
            <criterion comment="kernel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32736"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:31931"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32361"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32793"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32795"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9471" version="5" class="vulnerability">
      <metadata>
        <title>Xen 3.x, possibly before 3.1.2, when running on IA64 systems, does not check the RID value for mov_to_rr, which allows a VTi domain to read memory of other domains.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6207"/>
        <description>Xen 3.x, possibly before 3.1.2, when running on IA64 systems, does not check the RID value for mov_to_rr, which allows a VTi domain to read memory of other domains.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:53.228-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:10.770-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:13.651-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9471 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:26.815-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:38.119-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36192"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36176"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36335"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36430"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:35944"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36215"/>
          <criterion comment="kernel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36409"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:35484"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:35974"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:35791"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36150"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36251"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9470" version="5" class="vulnerability">
      <metadata>
        <title>slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service (daemon crash) via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION) control, a related issue to CVE-2007-6698.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0658"/>
        <description>slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service (daemon crash) via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION) control, a related issue to CVE-2007-6698.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:15.462-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:10.434-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:13.297-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9470 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:57.943-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:37.578-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="compat-openldap is earlier than 0:2.1.30-8.el4_6.4" test_ref="oval:org.mitre.oval:tst:36122"/>
            <criterion comment="openldap-devel is earlier than 0:2.2.13-8.el4_6.4" test_ref="oval:org.mitre.oval:tst:36157"/>
            <criterion comment="openldap-clients is earlier than 0:2.2.13-8.el4_6.4" test_ref="oval:org.mitre.oval:tst:35412"/>
            <criterion comment="openldap is earlier than 0:2.2.13-8.el4_6.4" test_ref="oval:org.mitre.oval:tst:36270"/>
            <criterion comment="openldap-servers-sql is earlier than 0:2.2.13-8.el4_6.4" test_ref="oval:org.mitre.oval:tst:36239"/>
            <criterion comment="openldap-servers is earlier than 0:2.2.13-8.el4_6.4" test_ref="oval:org.mitre.oval:tst:35877"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="compat-openldap is earlier than 0:2.3.27_2.2.29-8.el5_1.3" test_ref="oval:org.mitre.oval:tst:35700"/>
            <criterion comment="openldap-devel is earlier than 0:2.3.27-8.el5_1.3" test_ref="oval:org.mitre.oval:tst:35900"/>
            <criterion comment="openldap-clients is earlier than 0:2.3.27-8.el5_1.3" test_ref="oval:org.mitre.oval:tst:36273"/>
            <criterion comment="openldap is earlier than 0:2.3.27-8.el5_1.3" test_ref="oval:org.mitre.oval:tst:36158"/>
            <criterion comment="openldap-servers-sql is earlier than 0:2.3.27-8.el5_1.3" test_ref="oval:org.mitre.oval:tst:36065"/>
            <criterion comment="openldap-servers is earlier than 0:2.3.27-8.el5_1.3" test_ref="oval:org.mitre.oval:tst:35300"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:947" version="4" class="vulnerability">
      <metadata>
        <title>KAME IKE Daemon Improper Hash Value Handling</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0164" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0164"/>
        <description>KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete certificates via (1) a certain delete message that is not properly handled in isakmp.c or isakmp_inf.c, or (2) a certain INITIAL-CONTACT message that is not properly handled in isakmp_inf.c.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-12T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:42:05.590-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:10.481-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.756-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:54:36.771-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:47.070-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="ipsec-tools version is less than 0.2.5-0.4" negate="false" test_ref="oval:org.mitre.oval:tst:1430"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="racoon is listening on the network" negate="false" test_ref="oval:org.mitre.oval:tst:1429"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9469" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0008" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0008"/>
        <description>Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:32.733-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:10.246-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:13.103-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9469 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:33.435-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:37.316-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="gaim is earlier than 1:0.75-3.2.0" test_ref="oval:org.mitre.oval:tst:30440"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9468" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in Wireshark (aka Ethereal) 0.8.16 to 0.99.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the NFS dissector.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3632" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3632"/>
        <description>Buffer overflow in Wireshark (aka Ethereal) 0.8.16 to 0.99.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the NFS dissector.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:10.759-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:09.965-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:12.799-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9468 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:10.632-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:36.893-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.2-EL3.1" test_ref="oval:org.mitre.oval:tst:32882"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.2-EL3.1" test_ref="oval:org.mitre.oval:tst:32738"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.2-EL4.1" test_ref="oval:org.mitre.oval:tst:32917"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.2-EL4.1" test_ref="oval:org.mitre.oval:tst:32447"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9467" version="5" class="vulnerability">
      <metadata>
        <title>The audit system in Linux kernel 2.6.6, and other versions before 2.6.13.4, when CONFIG_AUDITSYSCALL is enabled, uses an incorrect function to free names_cache memory, which prevents the memory from being tracked by AUDITSYSCALL code and leads to a memory leak that allows attackers to cause a denial of service (memory consumption).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3181" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3181"/>
        <description>The audit system in Linux kernel 2.6.6, and other versions before 2.6.13.4, when CONFIG_AUDITSYSCALL is enabled, uses an incorrect function to free names_cache memory, which prevents the memory from being tracked by AUDITSYSCALL code and leads to a memory leak that allows attackers to cause a denial of service (memory consumption).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:09:46.155-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:09.713-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:12.533-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9467 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:36:18.812-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:36.536-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32382"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32096"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32404"/>
          <criterion comment="kernel is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32387"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32210"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32355"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32373"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9466" version="5" class="vulnerability">
      <metadata>
        <title>The pyGrub boot loader in Xen 3.0.3, 3.3.0, and Xen-3.3.1 does not support the password option in grub.conf for para-virtualized guests, which allows attackers with access to the para-virtualized guest console to boot the guest or modify the guest's kernel boot parameters without providing the expected password.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3525" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3525"/>
        <description>The pyGrub boot loader in Xen 3.0.3, 3.3.0, and Xen-3.3.1 does not support the password option in grub.conf for para-virtualized guests, which allows attackers with access to the para-virtualized guest console to boot the guest or modify the guest's kernel boot parameters without providing the expected password.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:19.393-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:09.509-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:12.317-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9466 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:51.376-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:36.230-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="xen-libs is earlier than 0:3.0.3-94.el5_4.1" test_ref="oval:org.mitre.oval:tst:39479"/>
          <criterion comment="xen is earlier than 0:3.0.3-94.el5_4.1" test_ref="oval:org.mitre.oval:tst:38860"/>
          <criterion comment="xen-devel is earlier than 0:3.0.3-94.el5_4.1" test_ref="oval:org.mitre.oval:tst:39042"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9463" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3380"/>
        <description>Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:19.986-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:08.911-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:11.727-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9463 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:27.084-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:35.282-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39570"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39466"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39720"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39691"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39583"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39280"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39727"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39550"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39575"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39724"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nspr is earlier than 0:4.7.6-1.el4_8" test_ref="oval:org.mitre.oval:tst:39525"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39481"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-25.el4" test_ref="oval:org.mitre.oval:tst:40299"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.6-1.el4_8" test_ref="oval:org.mitre.oval:tst:38755"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39675"/>
            <criterion comment="firefox is earlier than 0:3.0.15-3.el4" test_ref="oval:org.mitre.oval:tst:39710"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39683"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39031"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39547"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39753"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39602"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39541"/>
            <criterion comment="nspr is earlier than 0:4.7.6-1.el5_4" test_ref="oval:org.mitre.oval:tst:39168"/>
            <criterion comment="firefox is earlier than 0:3.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39294"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.24-2.el5_4" test_ref="oval:org.mitre.oval:tst:40249"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.6-1.el5_4" test_ref="oval:org.mitre.oval:tst:39579"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39636"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9462" version="5" class="vulnerability">
      <metadata>
        <title>The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates, a different vulnerability than CVE-2004-0405.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0180" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0180"/>
        <description>The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates, a different vulnerability than CVE-2004-0405.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:58.113-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:08.727-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:11.529-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9462 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:10:02.375-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:34.954-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="cvs is earlier than 0:1.11.2-18" test_ref="oval:org.mitre.oval:tst:30704"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9461" version="5" class="vulnerability">
      <metadata>
        <title>neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2473" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2473"/>
        <description>neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:43.398-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:08.488-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:11.278-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9461 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:31.582-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:34.560-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="neon is earlier than 0:0.24.7-4.el4_8.2" test_ref="oval:org.mitre.oval:tst:38525"/>
            <criterion comment="neon-devel is earlier than 0:0.24.7-4.el4_8.2" test_ref="oval:org.mitre.oval:tst:38882"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="neon is earlier than 0:0.25.5-10.el5_4.1" test_ref="oval:org.mitre.oval:tst:39020"/>
            <criterion comment="neon-devel is earlier than 0:0.25.5-10.el5_4.1" test_ref="oval:org.mitre.oval:tst:39410"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9460" version="5" class="vulnerability">
      <metadata>
        <title>Linux kernel 2.6 before 2.6.11 does not restrict access to the N_MOUSE line discipline for a TTY, which allows local users to gain privileges by injecting mouse or keyboard events into other user sessions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0839" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0839"/>
        <description>Linux kernel 2.6 before 2.6.11 does not restrict access to the N_MOUSE line discipline for a TTY, which allows local users to gain privileges by injecting mouse or keyboard events into other user sessions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:47.573-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:08.228-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:10.948-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9460 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:28.098-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:34.194-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31545"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31539"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31661"/>
          <criterion comment="kernel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31482"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31112"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31605"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31330"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9459" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly protection mechanism.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0357" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0357"/>
        <description>Mozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly protection mechanism.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:42.242-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:07.602-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:10.290-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9459 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:10:20.171-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:33.401-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38173"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38181"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38221"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38323"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38241"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38337"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:37355"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38135"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38326"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38186"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-35.el4" test_ref="oval:org.mitre.oval:tst:38184"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-3.el4" test_ref="oval:org.mitre.oval:tst:38343"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-35.el4" test_ref="oval:org.mitre.oval:tst:38228"/>
            <criterion comment="firefox is earlier than 0:3.0.6-1.el4" test_ref="oval:org.mitre.oval:tst:37823"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-3.el4" test_ref="oval:org.mitre.oval:tst:37923"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-35.el4" test_ref="oval:org.mitre.oval:tst:37943"/>
            <criterion comment="nss-tools is earlier than 0:3.12.2.0-3.el4" test_ref="oval:org.mitre.oval:tst:38172"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-35.el4" test_ref="oval:org.mitre.oval:tst:37433"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-35.el4" test_ref="oval:org.mitre.oval:tst:38309"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-35.el4" test_ref="oval:org.mitre.oval:tst:38278"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.2.0-4.el5" test_ref="oval:org.mitre.oval:tst:37933"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.6-1.el5" test_ref="oval:org.mitre.oval:tst:37808"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-4.el5" test_ref="oval:org.mitre.oval:tst:37350"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.6-1.el5" test_ref="oval:org.mitre.oval:tst:37835"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.6-1.el5" test_ref="oval:org.mitre.oval:tst:37556"/>
            <criterion comment="firefox is earlier than 0:3.0.6-1.el5" test_ref="oval:org.mitre.oval:tst:38272"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-4.el5" test_ref="oval:org.mitre.oval:tst:38040"/>
            <criterion comment="nss-tools is earlier than 0:3.12.2.0-4.el5" test_ref="oval:org.mitre.oval:tst:37867"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9458" version="5" class="vulnerability">
      <metadata>
        <title>Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9 captures.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0542" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0542"/>
        <description>Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9 captures.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:25.123-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:07.394-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:10.070-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9458 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:02.114-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:33.111-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="httpd-devel is earlier than 0:2.0.46-26.ent" test_ref="oval:org.mitre.oval:tst:30072"/>
          <criterion comment="mod_ssl is earlier than 1:2.0.46-26.ent" test_ref="oval:org.mitre.oval:tst:30465"/>
          <criterion comment="httpd is earlier than 0:2.0.46-26.ent" test_ref="oval:org.mitre.oval:tst:30309"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9456" version="5" class="vulnerability">
      <metadata>
        <title>A regression error in the Perl package for Red Hat Enterprise Linux 4 omits the patch for CVE-2005-0155, which allows local users to overwrite arbitrary files with debugging information.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3813" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3813"/>
        <description>A regression error in the Perl package for Red Hat Enterprise Linux 4 omits the patch for CVE-2005-0155, which allows local users to overwrite arbitrary files with debugging information.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:54.663-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:07.201-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:09.830-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9456 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:03.332-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:32.770-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="perl-suidperl is earlier than 3:5.8.5-36.RHEL4" test_ref="oval:org.mitre.oval:tst:32691"/>
          <criterion comment="perl is earlier than 3:5.8.5-36.RHEL4" test_ref="oval:org.mitre.oval:tst:32640"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9455" version="5" class="vulnerability">
      <metadata>
        <title>The browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to nsSVGElement::BindToTree.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1303" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1303"/>
        <description>The browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to nsSVGElement::BindToTree.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:50.725-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:06.661-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:09.324-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9455 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:08:42.824-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:32.096-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38597"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38375"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38403"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38521"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38542"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:37726"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38677"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38096"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38577"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38540"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38634"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-23.el4" test_ref="oval:org.mitre.oval:tst:38562"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38697"/>
            <criterion comment="firefox is earlier than 0:3.0.9-1.el4" test_ref="oval:org.mitre.oval:tst:38379"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38716"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38190"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38685"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38596"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38308"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38633"/>
            <criterion comment="firefox is earlier than 0:3.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38370"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.22-2.el5_3" test_ref="oval:org.mitre.oval:tst:38801"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38462"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9454" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the scan_cidfont function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted (1) CMap and (2) CIDFont font data with modified item counts in the (a) begincodespacerange, (b) cidrange, and (c) notdefrange sections.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3740" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3740"/>
        <description>Integer overflow in the scan_cidfont function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted (1) CMap and (2) CIDFont font data with modified item counts in the (a) begincodespacerange, (b) cidrange, and (c) notdefrange sections.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:28.193-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:05.836-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:08.476-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9454 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:10:14.116-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:31.133-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32914"/>
            <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32731"/>
            <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32743"/>
            <criterion comment="XFree86-libs is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:33049"/>
            <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:33018"/>
            <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32923"/>
            <criterion comment="XFree86-twm is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:33030"/>
            <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32967"/>
            <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32863"/>
            <criterion comment="XFree86-doc is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32067"/>
            <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32995"/>
            <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32642"/>
            <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32901"/>
            <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32927"/>
            <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32766"/>
            <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32821"/>
            <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32286"/>
            <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32798"/>
            <criterion comment="XFree86-xdm is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32943"/>
            <criterion comment="XFree86-sdk is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32071"/>
            <criterion comment="XFree86 is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32966"/>
            <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32931"/>
            <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32847"/>
            <criterion comment="XFree86-xfs is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32849"/>
            <criterion comment="XFree86-tools is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32945"/>
            <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32827"/>
            <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32897"/>
            <criterion comment="XFree86-xauth is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:33027"/>
            <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32324"/>
            <criterion comment="XFree86-devel is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32850"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32455"/>
            <criterion comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32518"/>
            <criterion comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32775"/>
            <criterion comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32899"/>
            <criterion comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32949"/>
            <criterion comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32941"/>
            <criterion comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:33005"/>
            <criterion comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32769"/>
            <criterion comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32227"/>
            <criterion comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:33008"/>
            <criterion comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32830"/>
            <criterion comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32907"/>
            <criterion comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:33034"/>
            <criterion comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32741"/>
            <criterion comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32935"/>
            <criterion comment="xorg-x11 is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32792"/>
            <criterion comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32908"/>
            <criterion comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32709"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9453" version="5" class="vulnerability">
      <metadata>
        <title>The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PER_CLEAR_ON_SETID setting that does not clear the ADDR_COMPAT_LAYOUT and MMAP_PAGE_ZERO flags when executing a setuid or setgid program, which makes it easier for local users to leverage the details of memory usage to (1) conduct NULL pointer dereference attacks, (2) bypass the mmap_min_addr protection mechanism, or (3) defeat address space layout randomization (ASLR).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1895" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1895"/>
        <description>The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PER_CLEAR_ON_SETID setting that does not clear the ADDR_COMPAT_LAYOUT and MMAP_PAGE_ZERO flags when executing a setuid or setgid program, which makes it easier for local users to leverage the details of memory usage to (1) conduct NULL pointer dereference attacks, (2) bypass the mmap_min_addr protection mechanism, or (3) defeat address space layout randomization (ASLR).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:22.749-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:05.111-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:07.811-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9453 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:10:17.289-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:30.270-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39591"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39396"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39586"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39171"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39299"/>
            <criterion comment="kernel is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39151"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39468"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39460"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:38810"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39101"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39357"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:38568"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39331"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39316"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39054"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39274"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39407"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39435"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39442"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:38473"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38128"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38668"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38883"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38948"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38732"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38969"/>
            <criterion comment="kernel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38991"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:39056"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38817"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:39009"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38672"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38983"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9452" version="5" class="vulnerability">
      <metadata>
        <title>The Xen hypervisor block backend driver for Linux kernel 2.6.18, when running on a 64-bit host with a 32-bit paravirtualized guest, allows local privileged users in the guest OS to cause a denial of service (host OS crash) via a request that specifies a large number of blocks.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5498"/>
        <description>The Xen hypervisor block backend driver for Linux kernel 2.6.18, when running on a 64-bit host with a 32-bit paravirtualized guest, allows local privileged users in the guest OS to cause a denial of service (host OS crash) via a request that specifies a large number of blocks.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:09:40.940-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:04.746-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:07.470-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9452 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:16.374-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:29.790-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36107"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36600"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36529"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36526"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36442"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36238"/>
          <criterion comment="kernel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36463"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36480"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:35876"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36532"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36278"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:35724"/>
          <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36560"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9450" version="5" class="vulnerability">
      <metadata>
        <title>The load_elf_binary function in the binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly check return values from calls to the kernel_read function, which may allow local users to modify sensitive memory in a setuid program and execute arbitrary code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1070" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1070"/>
        <description>The load_elf_binary function in the binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly check return values from calls to the kernel_read function, which may allow local users to modify sensitive memory in a setuid program and execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:17.298-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:04.469-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:07.182-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9450 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:23.113-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:29.429-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30934"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30708"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30577"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30874"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30794"/>
          <criterion comment="kernel is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30892"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30873"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:31080"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30866"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:945" version="4" class="vulnerability">
      <metadata>
        <title>Racoon IKE Daemon Unauthorized X.509 Certificate Connection Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0155" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0155"/>
        <description>The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, which allows remote attackers to establish unauthorized IP connections or conduct man-in-the-middle attacks using a valid, trusted X.509 certificate.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-12T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:22.509-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:10.312-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.756-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:54:36.869-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:46.730-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="ipsec-tools version is less than 0.2.5-0.4" negate="false" test_ref="oval:org.mitre.oval:tst:1430"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="racoon is listening on the network" negate="false" test_ref="oval:org.mitre.oval:tst:1429"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9449" version="5" class="vulnerability">
      <metadata>
        <title>The AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger memory corruption, as demonstrated by e4x/extensions/regress-410192.js.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5052" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5052"/>
        <description>The AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger memory corruption, as demonstrated by e4x/extensions/regress-410192.js.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:01.420-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:04.254-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:06.875-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9449 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:36:11.230-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:28.986-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="thunderbird is earlier than 0:1.5.0.12-17.el4" test_ref="oval:org.mitre.oval:tst:37872"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="thunderbird is earlier than 0:2.0.0.18-1.el5" test_ref="oval:org.mitre.oval:tst:38015"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9448" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 3.0.11, Thunderbird, and SeaMonkey do not check content policy before loading a script file into a XUL document, which allows remote attackers to bypass intended access restrictions via a crafted HTML document, as demonstrated by a "web bug" in an e-mail message, or web script or an advertisement in a web page.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1840" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1840"/>
        <description>Mozilla Firefox before 3.0.11, Thunderbird, and SeaMonkey do not check content policy before loading a script file into a XUL document, which allows remote attackers to bypass intended access restrictions via a crafted HTML document, as demonstrated by a "web bug" in an e-mail message, or web script or an advertisement in a web page.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:51.305-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:03.957-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:06.611-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9448 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:29.294-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:28.566-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.11-4.el4" test_ref="oval:org.mitre.oval:tst:38689"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38771"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38371"/>
            <criterion comment="firefox is earlier than 0:3.0.11-2.el5_3" test_ref="oval:org.mitre.oval:tst:38682"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38718"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9447" version="5" class="vulnerability">
      <metadata>
        <title>The utrace support in Linux kernel 2.6.18, and other versions, allows local users to cause a denial of service (system hang) related to "MT exec + utrace_attach spin failure mode," as demonstrated by ptrace-thrash.c.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0771" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0771"/>
        <description>The utrace support in Linux kernel 2.6.18, and other versions, allows local users to cause a denial of service (system hang) related to "MT exec + utrace_attach spin failure mode," as demonstrated by ptrace-thrash.c.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:51.975-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:03.656-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:06.281-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9447 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:11.148-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:28.152-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:33503"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:34071"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:33478"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:33985"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:34055"/>
          <criterion comment="kernel is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:34011"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:33805"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:33899"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:33709"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:34058"/>
          <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:34043"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9446" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute arbitrary JavaScript via a crafted HTTP response.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0179"/>
        <description>Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute arbitrary JavaScript via a crafted HTTP response.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:46.891-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:03.404-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:05.974-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9446 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:59.471-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:27.698-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.19-1.el4" test_ref="oval:org.mitre.oval:tst:40284"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.19-1.el5_5" test_ref="oval:org.mitre.oval:tst:40265"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.19-1.el5_5" test_ref="oval:org.mitre.oval:tst:39621"/>
            <criterion comment="firefox is earlier than 0:3.0.19-1.el5_5" test_ref="oval:org.mitre.oval:tst:40064"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.19-1.el5_5" test_ref="oval:org.mitre.oval:tst:40164"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9445" version="5" class="vulnerability">
      <metadata>
        <title>pam_ldap and nss_ldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the client is referred to a master, which may cause a password to be sent in cleartext and allows remote attackers to sniff the password.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2069" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2069"/>
        <description>pam_ldap and nss_ldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the client is referred to a master, which may cause a password to be sent in cleartext and allows remote attackers to sniff the password.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:09:33.275-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:03.002-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:05.627-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9445 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:29.982-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:27.229-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openldap-devel is earlier than 0:2.0.27-20" test_ref="oval:org.mitre.oval:tst:32018"/>
            <criterion comment="openldap-clients is earlier than 0:2.0.27-20" test_ref="oval:org.mitre.oval:tst:31815"/>
            <criterion comment="nss_ldap is earlier than 0:207-17" test_ref="oval:org.mitre.oval:tst:32179"/>
            <criterion comment="openldap is earlier than 0:2.0.27-20" test_ref="oval:org.mitre.oval:tst:32086"/>
            <criterion comment="openldap-servers is earlier than 0:2.0.27-20" test_ref="oval:org.mitre.oval:tst:31961"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="compat-openldap is earlier than 0:2.1.30-4" test_ref="oval:org.mitre.oval:tst:32065"/>
            <criterion comment="openldap-devel is earlier than 0:2.2.13-4" test_ref="oval:org.mitre.oval:tst:32089"/>
            <criterion comment="openldap-clients is earlier than 0:2.2.13-4" test_ref="oval:org.mitre.oval:tst:31874"/>
            <criterion comment="nss_ldap is earlier than 0:226-10" test_ref="oval:org.mitre.oval:tst:31977"/>
            <criterion comment="openldap is earlier than 0:2.2.13-4" test_ref="oval:org.mitre.oval:tst:31301"/>
            <criterion comment="openldap-servers-sql is earlier than 0:2.2.13-4" test_ref="oval:org.mitre.oval:tst:32188"/>
            <criterion comment="openldap-servers is earlier than 0:2.2.13-4" test_ref="oval:org.mitre.oval:tst:32059"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9444" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the JavaScript engine in Mozilla Firefox before 3.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3074" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3074"/>
        <description>Unspecified vulnerability in the JavaScript engine in Mozilla Firefox before 3.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:10.861-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:02.701-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:05.313-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9444 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:26.994-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:26.726-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nspr is earlier than 0:4.7.5-1.el4_8" test_ref="oval:org.mitre.oval:tst:39088"/>
            <criterion comment="firefox is earlier than 0:3.0.14-1.el4" test_ref="oval:org.mitre.oval:tst:39195"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.5-1.el4_8" test_ref="oval:org.mitre.oval:tst:39351"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39208"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39001"/>
            <criterion comment="nspr is earlier than 0:4.7.5-1.el5_4" test_ref="oval:org.mitre.oval:tst:39223"/>
            <criterion comment="firefox is earlier than 0:3.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39097"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.5-1.el5_4" test_ref="oval:org.mitre.oval:tst:39150"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39206"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9443" version="5" class="vulnerability">
      <metadata>
        <title>The encoder in Sun Java SE 6 before Update 15, and OpenJDK, grants read access to private variables with unspecified names, which allows context-dependent attackers to obtain sensitive information via an untrusted (1) applet or (2) application.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2690" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2690"/>
        <description>The encoder in Sun Java SE 6 before Update 15, and OpenJDK, grants read access to private variables with unspecified names, which allows context-dependent attackers to obtain sensitive information via an untrusted (1) applet or (2) application.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:10.539-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:02.472-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:05.073-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9443 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:15.106-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:26.380-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38942"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38825"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38972"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38267"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:39037"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9442" version="5" class="vulnerability">
      <metadata>
        <title>snmp_api.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in master agentx mode, allows remote attackers to cause a denial of service (crash) by causing a particular TCP disconnect, which triggers a free of an incorrect variable, a different vulnerability than CVE-2005-2177.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-4837" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4837"/>
        <description>snmp_api.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in master agentx mode, allows remote attackers to cause a denial of service (crash) by causing a particular TCP disconnect, which triggers a free of an incorrect variable, a different vulnerability than CVE-2005-2177.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:09:42.892-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:02.154-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:04.707-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9442 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:08:58.168-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:25.889-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="net-snmp-utils is earlier than 0:5.0.9-2.30E.19" test_ref="oval:org.mitre.oval:tst:31395"/>
            <criterion comment="net-snmp is earlier than 0:5.0.9-2.30E.19" test_ref="oval:org.mitre.oval:tst:30763"/>
            <criterion comment="net-snmp-libs is earlier than 0:5.0.9-2.30E.19" test_ref="oval:org.mitre.oval:tst:31684"/>
            <criterion comment="net-snmp-perl is earlier than 0:5.0.9-2.30E.19" test_ref="oval:org.mitre.oval:tst:31547"/>
            <criterion comment="net-snmp-devel is earlier than 0:5.0.9-2.30E.19" test_ref="oval:org.mitre.oval:tst:31390"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="net-snmp-utils is earlier than 0:5.1.2-11.EL4.6" test_ref="oval:org.mitre.oval:tst:31408"/>
            <criterion comment="net-snmp is earlier than 0:5.1.2-11.EL4.6" test_ref="oval:org.mitre.oval:tst:30993"/>
            <criterion comment="net-snmp-libs is earlier than 0:5.1.2-11.EL4.6" test_ref="oval:org.mitre.oval:tst:31414"/>
            <criterion comment="net-snmp-perl is earlier than 0:5.1.2-11.EL4.6" test_ref="oval:org.mitre.oval:tst:31691"/>
            <criterion comment="net-snmp-devel is earlier than 0:5.1.2-11.EL4.6" test_ref="oval:org.mitre.oval:tst:31766"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:944" version="2" class="vulnerability">
      <metadata>
        <title>Windows NT IIS Cross-site Scripting Vulnerabilities</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1181" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1181"/>
        <description>Multiple cross-site scripting (XSS) vulnerabilities in the administrative web pages for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allow remote attackers to execute HTML script as other users through (1) a certain ASP file in the IISHELP virtual directory, or (2) possibly other unknown attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Changed tst:1448 to use obj:496 was introduced to properly look for w3svc.dll in System32/inetsrv." date="2007-07-18T12:59:00.571-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-07-18T13:02:21.706-04:00">INTERIM</status_change>
            <status_change date="2007-08-02T14:47:16.767-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="IIS 4.0 Major Version" negate="false" test_ref="oval:org.mitre.oval:tst:3099"/>
        <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
        <criterion comment="File %windir%\System32\w3svc.dll is less than 4.2.780.1" negate="false" test_ref="oval:org.mitre.oval:tst:1448"/>
        <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
        <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9439" version="5" class="vulnerability">
      <metadata>
        <title>drivers/net/r8169.c in the r8169 driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to (1) cause a denial of service (temporary network outage) via a packet with a crafted size, in conjunction with certain packets containing A characters and certain packets containing E characters; or (2) cause a denial of service (system crash) via a packet with a crafted size, in conjunction with certain packets containing '\0' characters, related to the value of the status register and erroneous behavior associated with the RxMaxSize register.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1389.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4537" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4537"/>
        <description>drivers/net/r8169.c in the r8169 driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to (1) cause a denial of service (temporary network outage) via a packet with a crafted size, in conjunction with certain packets containing A characters and certain packets containing E characters; or (2) cause a denial of service (system crash) via a packet with a crafted size, in conjunction with certain packets containing '\0' characters, related to the value of the status register and erroneous behavior associated with the RxMaxSize register.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1389.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:58.267-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:01.632-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:04.223-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9439 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:36:20.428-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:25.254-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39702"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39797"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39763"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39709"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39503"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39617"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39773"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39516"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39093"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39662"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39657"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39645"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39650"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39813"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39095"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39770"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39099"/>
            <criterion comment="kernel is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39700"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39408"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39590"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39719"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39789"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:38905"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9437" version="5" class="vulnerability">
      <metadata>
        <title>The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3624"/>
        <description>The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:09:25.836-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:01.149-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:03.663-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9437 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:24.591-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:24.440-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32436"/>
            <criterion comment="tetex-dvips is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32311"/>
            <criterion comment="tetex-fonts is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32279"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.36" test_ref="oval:org.mitre.oval:tst:32437"/>
            <criterion comment="tetex is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32507"/>
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.36" test_ref="oval:org.mitre.oval:tst:32206"/>
            <criterion comment="tetex-afm is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32377"/>
            <criterion comment="xpdf is earlier than 1:2.02-9.8" test_ref="oval:org.mitre.oval:tst:31474"/>
            <criterion comment="tetex-xdvi is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:31613"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.36" test_ref="oval:org.mitre.oval:tst:31553"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32260"/>
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-3.6" test_ref="oval:org.mitre.oval:tst:32395"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32095"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-3.6" test_ref="oval:org.mitre.oval:tst:31805"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32489"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.10" test_ref="oval:org.mitre.oval:tst:32284"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32199"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-7.4" test_ref="oval:org.mitre.oval:tst:32545"/>
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.10" test_ref="oval:org.mitre.oval:tst:32254"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32308"/>
            <criterion comment="xpdf is earlier than 1:3.00-11.10" test_ref="oval:org.mitre.oval:tst:32152"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32333"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32317"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.10" test_ref="oval:org.mitre.oval:tst:32499"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9436" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 0.9.1 and 0.9.2 allows remote web sites to spoof certificates of trusted web sites via redirects and Javascript that uses the "onunload" method.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0763" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0763"/>
        <description>Mozilla Firefox 0.9.1 and 0.9.2 allows remote web sites to spoof certificates of trusted web sites via redirects and Javascript that uses the "onunload" method.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:47.229-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:00.800-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:03.362-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9436 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:42.911-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:24.012-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mozilla-js-debugger is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30799"/>
          <criterion comment="mozilla is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30278"/>
          <criterion comment="mozilla-chat is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30755"/>
          <criterion comment="mozilla-mail is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30570"/>
          <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30230"/>
          <criterion comment="mozilla-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30288"/>
          <criterion comment="mozilla-nss is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30323"/>
          <criterion comment="mozilla-nss-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30339"/>
          <criterion comment="mozilla-nspr is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30813"/>
          <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30660"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9435" version="5" class="vulnerability">
      <metadata>
        <title>init_dev in tty_io.c in the Red Hat backport of NPTL to Red Hat Enterprise Linux 3 does not properly clear controlling tty's in multi-threaded applications, which allows local users to cause a denial of service (crash) and possibly gain tty access via unknown attack vectors that trigger an access of a pointer to a freed structure.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0403" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0403"/>
        <description>init_dev in tty_io.c in the Red Hat backport of NPTL to Red Hat Enterprise Linux 3 does not properly clear controlling tty's in multi-threaded applications, which allows local users to cause a denial of service (crash) and possibly gain tty access via unknown attack vectors that trigger an access of a pointer to a freed structure.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:44.891-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:00.517-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:03.073-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9435 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:08.332-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:23.649-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31148"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31473"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31178"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31282"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31565"/>
          <criterion comment="kernel is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31562"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31582"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:30730"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31534"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9434" version="5" class="vulnerability">
      <metadata>
        <title>The (1) Kate and (2) Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the backup file as were set on the original file, which could allow local users and possibly remote attackers to obtain sensitive information.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1920" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1920"/>
        <description>The (1) Kate and (2) Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the backup file as were set on the original file, which could allow local users and possibly remote attackers to obtain sensitive information.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:34.816-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:00.324-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:02.832-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9434 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:03.168-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:23.350-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kdelibs is earlier than 6:3.3.1-3.11" test_ref="oval:org.mitre.oval:tst:31875"/>
          <criterion comment="kdelibs-devel is earlier than 6:3.3.1-3.11" test_ref="oval:org.mitre.oval:tst:31922"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9433" version="5" class="vulnerability">
      <metadata>
        <title>The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service (assert error) via unknown attack vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0505"/>
        <description>The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service (assert error) via unknown attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:26.948-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:12:00.135-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:02.628-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9433 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:10:03.557-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:23.074-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="ethereal-gnome is earlier than 0:0.10.3-0.30E.2" test_ref="oval:org.mitre.oval:tst:30484"/>
          <criterion comment="ethereal is earlier than 0:0.10.3-0.30E.2" test_ref="oval:org.mitre.oval:tst:30678"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9432" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly handle an invalid .properties file for an add-on, which allows remote attackers to read uninitialized memory, as demonstrated by use of ISO 8859 encoding instead of UTF-8 encoding in a French .properties file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2807" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2807"/>
        <description>Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly handle an invalid .properties file for an add-on, which allows remote attackers to read uninitialized memory, as demonstrated by use of ISO 8859 encoding instead of UTF-8 encoding in a French .properties file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:35.473-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:59.492-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:01.987-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9432 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:09.431-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:22.270-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37286"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37033"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37126"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37105"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37271"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37279"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37060"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37189"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:36476"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:36916"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37236"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37192"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-14.el4" test_ref="oval:org.mitre.oval:tst:36999"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36886"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37331"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36365"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.19.el4" test_ref="oval:org.mitre.oval:tst:37174"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37226"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36766"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37320"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36826"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37274"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-17.el5" test_ref="oval:org.mitre.oval:tst:37107"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:37351"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.16-1.el5" test_ref="oval:org.mitre.oval:tst:37363"/>
            <criterion comment="xulrunner is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:36984"/>
            <criterion comment="devhelp is earlier than 0:0.12-17.el5" test_ref="oval:org.mitre.oval:tst:37234"/>
            <criterion comment="yelp is earlier than 0:2.16.0-19.el5" test_ref="oval:org.mitre.oval:tst:37291"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:36436"/>
            <criterion comment="firefox is earlier than 0:3.0-2.el5" test_ref="oval:org.mitre.oval:tst:36814"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9431" version="5" class="vulnerability">
      <metadata>
        <title>tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux (RHEL) 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4315" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4315"/>
        <description>tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux (RHEL) 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:09:52.891-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:59.294-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:01.778-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9431 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:46.163-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:21.914-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="tog-pegasus is earlier than 2:2.7.0-2.el5_2.1" test_ref="oval:org.mitre.oval:tst:38022"/>
          <criterion comment="tog-pegasus-devel is earlier than 2:2.7.0-2.el5_2.1" test_ref="oval:org.mitre.oval:tst:38089"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:943" version="2" class="vulnerability">
      <metadata>
        <title>Solaris Xsun and Xprt Unspecified Local Privilege Escalation</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
          <product>Xsun</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3099" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3099"/>
        <description>Unspecified vulnerability in the (1) Xsun and (2) Xprt commands in Solaris 7, 8, 9, and 10 allows local users to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:52:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:54.666-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:16:01.243-04:00">ACCEPTED</status_change>
            <modified comment="Corrected CVE reference and title. Implemented by Jon Baker of The MITRE Corporation." date="2007-02-13T14:00:00.106-05:00">
              <contributor organization="Security-Database">Nabil Ouchn</contributor>
            </modified>
            <status_change date="2007-02-13T14:01:36.132-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:28.569-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="OR">
          <criterion comment="Solaris 7 is installed." negate="false" test_ref="oval:org.mitre.oval:tst:3576"/>
          <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert ID 101800 criteria." negate="false">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3437"/>
            <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
            <criterion comment="Patch 108652-93 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3400"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert ID 101800 criteria." negate="false">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3437"/>
            <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
            <criterion comment="Patch 108653-82 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3355"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert ID 101800 criteria." negate="false">
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3172"/>
            <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
            <criterion comment="Patch 112785-50 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:4130"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert ID 101800 criteria." negate="false">
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3172"/>
            <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
            <criterion comment="Patch 112786-39 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3404"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert ID 101800 criteria." negate="false">
            <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3680"/>
            <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
            <criterion comment="Patch 119059-05 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3997"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert ID 101800 criteria." negate="false">
            <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3680"/>
            <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
            <criterion comment="Patch 119060-05 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3529"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="OR">
          <criteria operator="AND" comment="File Xsun is SUID|SGID AND Executable" negate="false">
            <criteria operator="OR" comment="File Xsun SUID|SGID" negate="false">
              <criterion comment="File Xsun SUID" negate="false" test_ref="oval:org.mitre.oval:tst:3963"/>
              <criterion comment="File Xprt SUID" negate="false" test_ref="oval:org.mitre.oval:tst:3558"/>
            </criteria>
            <criterion comment="File Xsun SGID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:3178"/>
          </criteria>
          <criteria operator="AND" comment="File Xprt is SUID|SGID AND Executable" negate="false">
            <criteria operator="OR" comment="File Xprt SUID|SGID" negate="false">
              <criterion comment="File Xsun SUID" negate="false" test_ref="oval:org.mitre.oval:tst:3963"/>
              <criterion comment="File Xprt SUID" negate="false" test_ref="oval:org.mitre.oval:tst:3558"/>
            </criteria>
            <criterion comment="File Xsun SGID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:3178"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9429" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the MSN protocol plugins (1) object.c and (2) slp.c for Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via MSNSLP protocol messages that are not properly handled in a strncpy call.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0500" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0500"/>
        <description>Buffer overflow in the MSN protocol plugins (1) object.c and (2) slp.c for Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via MSNSLP protocol messages that are not properly handled in a strncpy call.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:09:53.449-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:59.117-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:01.580-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9429 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:02.588-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:21.639-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="gaim is earlier than 1:0.82.1-0.RHEL3" test_ref="oval:org.mitre.oval:tst:30434"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9427" version="5" class="vulnerability">
      <metadata>
        <title>The OSS code for the Sound Blaster (sb16) driver in Linux 2.4.x before 2.4.26, when operating in 16 bit mode, does not properly handle certain sample sizes, which allows local users to cause a denial of service (crash) via a sample with an odd number of bytes.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0178"/>
        <description>The OSS code for the Sound Blaster (sb16) driver in Linux 2.4.x before 2.4.26, when operating in 16 bit mode, does not properly handle certain sample sizes, which allows local users to cause a denial of service (crash) via a sample with an odd number of bytes.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:05.363-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:58.787-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:01.281-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9427 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:20.216-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:21.277-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30827"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30622"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30627"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30676"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30823"/>
          <criterion comment="kernel is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30750"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30596"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30833"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30830"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9426" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memory, as found by the Sparse source code checking tool.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0554" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0554"/>
        <description>Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and frstor instructions, as originally demonstrated using a "crash.c" program.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:34.123-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:58.500-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:00.953-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9426 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:08:36.883-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:20.509-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-15.0.2.EL" test_ref="oval:org.mitre.oval:tst:30449"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-15.0.2.EL" test_ref="oval:org.mitre.oval:tst:30739"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-15.0.2.EL" test_ref="oval:org.mitre.oval:tst:30418"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-15.0.2.EL" test_ref="oval:org.mitre.oval:tst:30721"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-15.0.2.EL" test_ref="oval:org.mitre.oval:tst:30772"/>
          <criterion comment="kernel is earlier than 0:2.4.21-15.0.2.EL" test_ref="oval:org.mitre.oval:tst:30655"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-15.0.2.EL" test_ref="oval:org.mitre.oval:tst:30574"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-15.0.2.EL" test_ref="oval:org.mitre.oval:tst:30681"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-15.0.2.EL" test_ref="oval:org.mitre.oval:tst:30207"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9424" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in the chunk_split function in PHP 5 before 5.2.3 and PHP 4 before 4.4.8 allow remote attackers to cause a denial of service (crash) or execute arbitrary code via the (1) chunks, (2) srclen, and (3) chunklen arguments.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2872" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2872"/>
        <description>Multiple integer overflows in the chunk_split function in PHP 5 before 5.2.3 and PHP 4 before 4.4.8 allow remote attackers to cause a denial of service (crash) or execute arbitrary code via the (1) chunks, (2) srclen, and (3) chunklen arguments.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:35.882-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:57.755-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:13:00.128-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9424 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:08:45.125-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:19.563-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35216"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35012"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:34787"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35164"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:34818"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35171"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:34820"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35008"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:34796"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35363"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35010"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35249"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:34683"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:34365"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:34976"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35087"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35298"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35289"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35309"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35263"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35044"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35279"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34964"/>
            <criterion comment="php-common is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34896"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35084"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35078"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34802"/>
            <criterion comment="php is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35270"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35361"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34769"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35108"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35037"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34943"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34689"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35221"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35077"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34934"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35170"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34376"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34764"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9423" version="5" class="vulnerability">
      <metadata>
        <title>kmod in the Linux kernel does not set its uid, suid, gid, or sgid to 0, which allows local users to cause a denial of service (crash) by sending certain signals to kmod.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1040" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1040"/>
        <description>kmod in the Linux kernel does not set its uid, suid, gid, or sgid to 0, which allows local users to cause a denial of service (crash) by sending certain signals to kmod.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:30.259-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:57.474-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:59.788-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9423 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:25.887-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:19.190-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30346"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30006"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30702"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30513"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30280"/>
          <criterion comment="kernel is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30056"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30508"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30654"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30307"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9421" version="5" class="vulnerability">
      <metadata>
        <title>slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.6, including 2.6.4, and Adium 1.3.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed MSNSLP INVITE request in an SLP message, a different issue than CVE-2010-0013.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0277" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0277"/>
        <description>slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.6, including 2.6.4, and Adium 1.3.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed MSNSLP INVITE request in an SLP message, a different issue than CVE-2010-0013.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:21.380-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:57.001-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:59.350-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9421 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:30:43.684-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:18.591-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.6.6-1.el4" test_ref="oval:org.mitre.oval:tst:39911"/>
            <criterion comment="libpurple is earlier than 0:2.6.6-1.el4" test_ref="oval:org.mitre.oval:tst:40093"/>
            <criterion comment="libpurple-perl is earlier than 0:2.6.6-1.el4" test_ref="oval:org.mitre.oval:tst:40218"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.6.6-1.el4" test_ref="oval:org.mitre.oval:tst:40181"/>
            <criterion comment="pidgin-devel is earlier than 0:2.6.6-1.el4" test_ref="oval:org.mitre.oval:tst:40052"/>
            <criterion comment="libpurple-devel is earlier than 0:2.6.6-1.el4" test_ref="oval:org.mitre.oval:tst:39983"/>
            <criterion comment="finch is earlier than 0:2.6.6-1.el4" test_ref="oval:org.mitre.oval:tst:39933"/>
            <criterion comment="pidgin-perl is earlier than 0:2.6.6-1.el4" test_ref="oval:org.mitre.oval:tst:40004"/>
            <criterion comment="pidgin is earlier than 0:2.6.6-1.el4" test_ref="oval:org.mitre.oval:tst:40214"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.6.6-1.el5" test_ref="oval:org.mitre.oval:tst:39974"/>
            <criterion comment="libpurple is earlier than 0:2.6.6-1.el5" test_ref="oval:org.mitre.oval:tst:40080"/>
            <criterion comment="libpurple-perl is earlier than 0:2.6.6-1.el5" test_ref="oval:org.mitre.oval:tst:40176"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.6.6-1.el5" test_ref="oval:org.mitre.oval:tst:40248"/>
            <criterion comment="pidgin-devel is earlier than 0:2.6.6-1.el5" test_ref="oval:org.mitre.oval:tst:40202"/>
            <criterion comment="libpurple-devel is earlier than 0:2.6.6-1.el5" test_ref="oval:org.mitre.oval:tst:40141"/>
            <criterion comment="finch is earlier than 0:2.6.6-1.el5" test_ref="oval:org.mitre.oval:tst:39917"/>
            <criterion comment="pidgin-perl is earlier than 0:2.6.6-1.el5" test_ref="oval:org.mitre.oval:tst:40306"/>
            <criterion comment="pidgin is earlier than 0:2.6.6-1.el5" test_ref="oval:org.mitre.oval:tst:39993"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9420" version="5" class="vulnerability">
      <metadata>
        <title>libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an image file with crafted EXIF tags, possibly involving the exif_loader_write function in exif_loader.c.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6351" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6351"/>
        <description>libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an image file with crafted EXIF tags, possibly involving the exif_loader_write function in exif_loader.c.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:42.219-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:56.806-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:59.138-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9420 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:24.154-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:17.963-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="libexif-devel is earlier than 0:0.6.13-4.0.2.el5_1.1" test_ref="oval:org.mitre.oval:tst:35024"/>
          <criterion comment="libexif is earlier than 0:0.6.13-4.0.2.el5_1.1" test_ref="oval:org.mitre.oval:tst:35823"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:942" version="2" class="vulnerability">
      <metadata>
        <title>Windows 2000 IIS Cross-site Scripting Vulnerabilities</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1181" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1181"/>
        <description>Multiple cross-site scripting (XSS) vulnerabilities in the administrative web pages for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allow remote attackers to execute HTML script as other users through (1) a certain ASP file in the IISHELP virtual directory, or (2) possibly other unknown attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-01-11T12:00:00.000-04:00" comment="modified wft-330 - changed the version of msw3prt.dll to test against from 5.5.2195.58075 to 5.0.2195.5807">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-01-20T01:13:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="IIS major version equals 5" negate="false" test_ref="oval:org.mitre.oval:tst:3081"/>
        <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
        <criterion comment="File %windir%\System32\msw3prt.dll is less than 5.0.2195.5807" negate="false" test_ref="oval:org.mitre.oval:tst:1447"/>
        <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
        <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9419" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to hijack the user interface via the "chrome" flag and XML User Interface Language (XUL) files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0764" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0764"/>
        <description>Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to hijack the user interface via the "chrome" flag and XML User Interface Language (XUL) files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:14.920-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:56.519-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:58.782-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9419 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:24.571-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:17.575-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mozilla-js-debugger is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30799"/>
          <criterion comment="mozilla is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30278"/>
          <criterion comment="mozilla-chat is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30755"/>
          <criterion comment="mozilla-mail is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30570"/>
          <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30230"/>
          <criterion comment="mozilla-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30288"/>
          <criterion comment="mozilla-nss is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30323"/>
          <criterion comment="mozilla-nss-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30339"/>
          <criterion comment="mozilla-nspr is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30813"/>
          <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30660"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9417" version="5" class="vulnerability">
      <metadata>
        <title>Array index error in the hb_ot_layout_build_glyph_classes function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service (application crash) via a crafted font file, related to building a synthetic Glyph Definition (aka GDEF) table by using this font's charmap and the Unicode property database.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0421" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0421"/>
        <description>Array index error in the hb_ot_layout_build_glyph_classes function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service (application crash) via a crafted font file, related to building a synthetic Glyph Definition (aka GDEF) table by using this font's charmap and the Unicode property database.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:09.987-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:56.197-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:58.449-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9417 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:21.761-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:17.012-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="pango-devel is earlier than 0:1.2.5-10" test_ref="oval:org.mitre.oval:tst:40152"/>
            <criterion comment="pango is earlier than 0:1.2.5-10" test_ref="oval:org.mitre.oval:tst:39329"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="pango-devel is earlier than 0:1.6.0-16.el4_8" test_ref="oval:org.mitre.oval:tst:39573"/>
            <criterion comment="evolution28-pango-devel is earlier than 0:1.14.9-13.el4_8" test_ref="oval:org.mitre.oval:tst:40323"/>
            <criterion comment="pango is earlier than 0:1.6.0-16.el4_8" test_ref="oval:org.mitre.oval:tst:39891"/>
            <criterion comment="evolution28-pango is earlier than 0:1.14.9-13.el4_8" test_ref="oval:org.mitre.oval:tst:39360"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="pango-devel is earlier than 0:1.14.9-8.el5" test_ref="oval:org.mitre.oval:tst:40132"/>
            <criterion comment="pango is earlier than 0:1.14.9-8.el5" test_ref="oval:org.mitre.oval:tst:40189"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9415" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0962" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0962"/>
        <description>Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:03.486-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:55.965-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:58.249-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9415 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:57.194-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:16.743-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="rsync is earlier than 0:2.5.7-1" test_ref="oval:org.mitre.oval:tst:30221"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9414" version="5" class="vulnerability">
      <metadata>
        <title>The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service (application crash) via crafted contact-list data for (1) ICQ and possibly (2) AIM, as demonstrated by the SIM IM client.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3615" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3615"/>
        <description>The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service (application crash) via crafted contact-list data for (1) ICQ and possibly (2) AIM, as demonstrated by the SIM IM client.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:09:49.763-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:55.517-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:57.734-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9414 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:08.899-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:16.114-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="pidgin is earlier than 0:1.5.1-6.el3" test_ref="oval:org.mitre.oval:tst:39353"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.6.3-2.el4" test_ref="oval:org.mitre.oval:tst:39708"/>
            <criterion comment="libpurple is earlier than 0:2.6.3-2.el4" test_ref="oval:org.mitre.oval:tst:39368"/>
            <criterion comment="libpurple-perl is earlier than 0:2.6.3-2.el4" test_ref="oval:org.mitre.oval:tst:39729"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.6.3-2.el4" test_ref="oval:org.mitre.oval:tst:39606"/>
            <criterion comment="pidgin-devel is earlier than 0:2.6.3-2.el4" test_ref="oval:org.mitre.oval:tst:39458"/>
            <criterion comment="libpurple-devel is earlier than 0:2.6.3-2.el4" test_ref="oval:org.mitre.oval:tst:39406"/>
            <criterion comment="finch is earlier than 0:2.6.3-2.el4" test_ref="oval:org.mitre.oval:tst:39382"/>
            <criterion comment="pidgin-perl is earlier than 0:2.6.3-2.el4" test_ref="oval:org.mitre.oval:tst:39309"/>
            <criterion comment="pidgin is earlier than 0:2.6.3-2.el4" test_ref="oval:org.mitre.oval:tst:39454"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.6.3-2.el5" test_ref="oval:org.mitre.oval:tst:39342"/>
            <criterion comment="libpurple is earlier than 0:2.6.3-2.el5" test_ref="oval:org.mitre.oval:tst:39335"/>
            <criterion comment="libpurple-perl is earlier than 0:2.6.3-2.el5" test_ref="oval:org.mitre.oval:tst:39751"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.6.3-2.el5" test_ref="oval:org.mitre.oval:tst:39174"/>
            <criterion comment="pidgin-devel is earlier than 0:2.6.3-2.el5" test_ref="oval:org.mitre.oval:tst:39298"/>
            <criterion comment="libpurple-devel is earlier than 0:2.6.3-2.el5" test_ref="oval:org.mitre.oval:tst:39584"/>
            <criterion comment="finch is earlier than 0:2.6.3-2.el5" test_ref="oval:org.mitre.oval:tst:39392"/>
            <criterion comment="pidgin-perl is earlier than 0:2.6.3-2.el5" test_ref="oval:org.mitre.oval:tst:39508"/>
            <criterion comment="pidgin is earlier than 0:2.6.3-2.el5" test_ref="oval:org.mitre.oval:tst:39728"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9413" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the ole_info_read_metabat function in Gnome Structured File library (libgsf) 1.14.0, and other versions before 1.14.2, allows context-dependent attackers to execute arbitrary code via a large num_metabat value in an OLE document, which causes the ole_init_info function to allocate insufficient memory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4514"/>
        <description>Heap-based buffer overflow in the ole_info_read_metabat function in Gnome Structured File library (libgsf) 1.14.0, and other versions before 1.14.2, allows context-dependent attackers to execute arbitrary code via a large num_metabat value in an OLE document, which causes the ole_init_info function to allocate insufficient memory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:29.075-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:55.275-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:57.476-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9413 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:56.540-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:15.688-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libgsf is earlier than 0:1.6.0-7" test_ref="oval:org.mitre.oval:tst:33304"/>
            <criterion comment="libgsf-devel is earlier than 0:1.6.0-7" test_ref="oval:org.mitre.oval:tst:32479"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libgsf is earlier than 0:1.10.1-2" test_ref="oval:org.mitre.oval:tst:33333"/>
            <criterion comment="libgsf-devel is earlier than 0:1.10.1-2" test_ref="oval:org.mitre.oval:tst:33257"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9412" version="5" class="vulnerability">
      <metadata>
        <title>Linux kernel before 2.6.22.17, when using certain drivers that register a fault handler that does not perform range checks, allows local users to access kernel memory via an out-of-range offset.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0007"/>
        <description>Linux kernel before 2.6.22.17, when using certain drivers that register a fault handler that does not perform range checks, allows local users to access kernel memory via an out-of-range offset.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:09:59.884-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:54.451-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:56.800-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9412 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:23.076-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:14.843-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:35915"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:35794"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36513"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36264"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36161"/>
            <criterion comment="kernel is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36518"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36597"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36612"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36171"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36201"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36534"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36373"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36702"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36615"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36490"/>
            <criterion comment="kernel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36370"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:35738"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36249"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36731"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:35733"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36107"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36600"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36529"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36526"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36442"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36238"/>
            <criterion comment="kernel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36463"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36480"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:35876"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36532"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36278"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:35724"/>
            <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36560"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9411" version="5" class="vulnerability">
      <metadata>
        <title>sysreport before 1.3.7 allows local users to obtain sensitive information via a symlink attack on a temporary directory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2104" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2104"/>
        <description>sysreport before 1.3.7 allows local users to obtain sensitive information via a symlink attack on a temporary directory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:49.875-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:54.230-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:56.560-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9411 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:55.250-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:14.315-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="sysreport is earlier than 0:1.3.7.2-9" test_ref="oval:org.mitre.oval:tst:31930"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="sysreport is earlier than 0:1.3.15-5" test_ref="oval:org.mitre.oval:tst:31910"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:941" version="4" class="vulnerability">
      <metadata>
        <title>Red Hat Enterprise 3 Squid ACL Bypass Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0189" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0189"/>
        <description>The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a URL with a NULL ("%00") characterm, which causes Squid to use only a portion of the requested URL when comparing it against the access control lists.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-10T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:32.635-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:10.144-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.366-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T21:00:44.025-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:46.445-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="squid version is less than 2.5.STABLE3-5.3E" negate="false" test_ref="oval:org.mitre.oval:tst:1431"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="squid is listening on the network" negate="false" test_ref="oval:org.mitre.oval:tst:1532"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9409" version="5" class="vulnerability">
      <metadata>
        <title>The tc_fill_tclass function in net/sched/sch_api.c in the tc subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.31-rc9 does not initialize certain (1) tcm__pad1 and (2) tcm__pad2 structure members, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3228" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3228"/>
        <description>The tc_fill_tclass function in net/sched/sch_api.c in the tc subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.31-rc9 does not initialize certain (1) tcm__pad1 and (2) tcm__pad2 structure members, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:28.297-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:53.704-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:56.070-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9409 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:19.184-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:13.613-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:39477"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:38676"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:39556"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:39526"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:38895"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:39250"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:39485"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:39492"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:39608"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:39456"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:39277"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39665"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39142"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39538"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39699"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39518"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39350"/>
            <criterion comment="kernel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39738"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39663"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39536"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39189"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39141"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39179"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9408" version="5" class="vulnerability">
      <metadata>
        <title>Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0100" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0100"/>
        <description>Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:47.264-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:53.313-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:55.622-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9408 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:02:57.349-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:13.074-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xemacs-el is earlier than 0:21.4.13-8.ent.1" test_ref="oval:org.mitre.oval:tst:31334"/>
            <criterion comment="xemacs is earlier than 0:21.4.13-8.ent.1" test_ref="oval:org.mitre.oval:tst:31358"/>
            <criterion comment="xemacs-info is earlier than 0:21.4.13-8.ent.1" test_ref="oval:org.mitre.oval:tst:31061"/>
            <criterion comment="emacs-el is earlier than 0:21.3-4.1" test_ref="oval:org.mitre.oval:tst:31186"/>
            <criterion comment="emacs-leim is earlier than 0:21.3-4.1" test_ref="oval:org.mitre.oval:tst:30740"/>
            <criterion comment="emacs is earlier than 0:21.3-4.1" test_ref="oval:org.mitre.oval:tst:31379"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xemacs-nox is earlier than 0:21.4.15-10.EL.1" test_ref="oval:org.mitre.oval:tst:30840"/>
            <criterion comment="emacs-nox is earlier than 0:21.3-19.EL.1" test_ref="oval:org.mitre.oval:tst:31124"/>
            <criterion comment="xemacs-el is earlier than 0:21.4.15-10.EL.1" test_ref="oval:org.mitre.oval:tst:31326"/>
            <criterion comment="emacs-el is earlier than 0:21.3-19.EL.1" test_ref="oval:org.mitre.oval:tst:30860"/>
            <criterion comment="emacs-leim is earlier than 0:21.3-19.EL.1" test_ref="oval:org.mitre.oval:tst:31288"/>
            <criterion comment="emacs is earlier than 0:21.3-19.EL.1" test_ref="oval:org.mitre.oval:tst:31389"/>
            <criterion comment="emacs-common is earlier than 0:21.3-19.EL.1" test_ref="oval:org.mitre.oval:tst:31328"/>
            <criterion comment="xemacs is earlier than 0:21.4.15-10.EL.1" test_ref="oval:org.mitre.oval:tst:31171"/>
            <criterion comment="xemacs-info is earlier than 0:21.4.15-10.EL.1" test_ref="oval:org.mitre.oval:tst:30965"/>
            <criterion comment="xemacs-common is earlier than 0:21.4.15-10.EL.1" test_ref="oval:org.mitre.oval:tst:31034"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9407" version="5" class="vulnerability">
      <metadata>
        <title>Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1721"/>
        <description>Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:13.536-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:52.964-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:55.295-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9407 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:02.286-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:12.524-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38916"/>
            <criterion comment="tkinter is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38703"/>
            <criterion comment="python-tools is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38787"/>
            <criterion comment="python is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38939"/>
            <criterion comment="python-docs is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38081"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38889"/>
            <criterion comment="tkinter is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38958"/>
            <criterion comment="python-tools is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38827"/>
            <criterion comment="python is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38282"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9406" version="5" class="vulnerability">
      <metadata>
        <title>Real time clock (RTC) routines in Linux kernel 2.4.23 and earlier do not properly initialize their structures, which could leak kernel data to user space.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0984" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0984"/>
        <description>Real time clock (RTC) routines in Linux kernel 2.4.23 and earlier do not properly initialize their structures, which could leak kernel data to user space.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:10.680-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:52.687-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:54.943-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9406 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:37.614-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:12.136-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30346"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30006"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30702"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30513"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30280"/>
          <criterion comment="kernel is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30056"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30508"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30654"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30307"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9405" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) by changing the (1) -moz-grid and (2) -moz-grid-group display styles.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1738" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1738"/>
        <description>Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) by changing the (1) -moz-grid and (2) -moz-grid-group display styles.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:42.534-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:52.201-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:54.433-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9405 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:09.273-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:11.464-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32663"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32326"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31987"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32451"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32697"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32558"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32427"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32671"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32666"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32561"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32593"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32679"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32133"/>
            <criterion comment="thunderbird is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32204"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32701"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32428"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32557"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32229"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32349"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32644"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32440"/>
            <criterion comment="firefox is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32219"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32598"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32717"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9403" version="5" class="vulnerability">
      <metadata>
        <title>The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length value, which allows remote attackers to cause a denial of service (CPU consumption) via crafted requests.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1890" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1890"/>
        <description>The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length value, which allows remote attackers to cause a denial of service (CPU consumption) via crafted requests.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:17.503-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:51.928-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:54.192-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9403 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:04.090-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:11.136-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="httpd-manual is earlier than 0:2.2.3-22.el5_3.2" test_ref="oval:org.mitre.oval:tst:38846"/>
          <criterion comment="httpd-devel is earlier than 0:2.2.3-22.el5_3.2" test_ref="oval:org.mitre.oval:tst:38761"/>
          <criterion comment="mod_ssl is earlier than 0:2.2.3-22.el5_3.2" test_ref="oval:org.mitre.oval:tst:38385"/>
          <criterion comment="httpd is earlier than 0:2.2.3-22.el5_3.2" test_ref="oval:org.mitre.oval:tst:38816"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9402" version="5" class="vulnerability">
      <metadata>
        <title>The (1) tcltags or (2) vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a symlink attack on temporary files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0069" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0069"/>
        <description>The (1) tcltags or (2) vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a symlink attack on temporary files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:06.609-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:51.611-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:53.825-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9402 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:10.954-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:10.653-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="vim-minimal is earlier than 1:6.3.046-0.30E.3" test_ref="oval:org.mitre.oval:tst:31098"/>
            <criterion comment="vim-enhanced is earlier than 1:6.3.046-0.30E.3" test_ref="oval:org.mitre.oval:tst:30910"/>
            <criterion comment="vim is earlier than 1:6.3.046-0.30E.3" test_ref="oval:org.mitre.oval:tst:31254"/>
            <criterion comment="vim-X11 is earlier than 1:6.3.046-0.30E.3" test_ref="oval:org.mitre.oval:tst:30835"/>
            <criterion comment="vim-common is earlier than 1:6.3.046-0.30E.3" test_ref="oval:org.mitre.oval:tst:30437"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="vim-minimal is earlier than 1:6.3.046-0.40E.4" test_ref="oval:org.mitre.oval:tst:31180"/>
            <criterion comment="vim-enhanced is earlier than 1:6.3.046-0.40E.4" test_ref="oval:org.mitre.oval:tst:31161"/>
            <criterion comment="vim is earlier than 1:6.3.046-0.40E.4" test_ref="oval:org.mitre.oval:tst:31316"/>
            <criterion comment="vim-X11 is earlier than 1:6.3.046-0.40E.4" test_ref="oval:org.mitre.oval:tst:31312"/>
            <criterion comment="vim-common is earlier than 1:6.3.046-0.40E.4" test_ref="oval:org.mitre.oval:tst:31163"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:940" version="2" class="vulnerability">
      <metadata>
        <title>Linux Kernel ISO9660 File System Component BO</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0109" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0109"/>
        <description>Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-10T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:31.517-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:09.969-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criteria operator="OR" comment="kernel versions">
            <criterion comment="kernel version is less than 2.4.21-9.0.3.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1436"/>
            <criterion comment="kernel-smp version is less than 2.4.21-9.0.3.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1435"/>
            <criterion comment="kernel-hugemem version is less than 2.4.21-9.0.3.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1434"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="/bin/mount is world-executable AND Set-UID">
            <criterion comment="/bin/mount is world-executable AND Set-UID" negate="false" test_ref="oval:org.mitre.oval:tst:1433"/>
            <criterion comment="/bin/mount is world-executable AND Set-UID" negate="false" test_ref="oval:org.mitre.oval:tst:1432"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:94" version="1" class="vulnerability">
      <metadata>
        <title>Solaris 8 mibiisa Remote Buffer Overflow Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>mibiisa</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0797" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0797"/>
        <description>Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root privileges.</description>
        <oval_repository>
          <dates>
            <submitted date="2002-09-25T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="File mibiisa exists" negate="false" test_ref="oval:org.mitre.oval:tst:2995"/>
          <criterion comment="Patch 108869-16 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3125"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="mibiisa running" negate="false" test_ref="oval:org.mitre.oval:tst:2993"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9399" version="5" class="vulnerability">
      <metadata>
        <title>The do_pages_move function in mm/migrate.c in the Linux kernel before 2.6.33-rc7 does not validate node values, which allows local users to read arbitrary kernel memory locations, cause a denial of service (OOPS), and possibly have unspecified other impact by specifying a node that is not part of the kernel's node set.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0415" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0415"/>
        <description>The do_pages_move function in mm/migrate.c in the Linux kernel before 2.6.33-rc7 does not validate node values, which allows local users to read arbitrary kernel memory locations, cause a denial of service (OOPS), and possibly have unspecified other impact by specifying a node that is not part of the kernel's node set.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:14.880-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:51.292-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:53.496-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9399 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:00.679-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:10.227-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40228"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40098"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40231"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:39918"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:39938"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40088"/>
          <criterion comment="kernel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40237"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:39997"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40240"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40352"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:39930"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40055"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9398" version="5" class="vulnerability">
      <metadata>
        <title>Insecure permissions for the /proc/scsi/qla2300/HbaApiNode file in Linux allows local users to cause a denial of service.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0587" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0587"/>
        <description>Insecure permissions for the /proc/scsi/qla2300/HbaApiNode file in Linux allows local users to cause a denial of service.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:22.284-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:50.968-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:53.206-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9398 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:13.190-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:09.815-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30827"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30622"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30627"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30676"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30823"/>
          <criterion comment="kernel is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30750"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30596"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30833"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30830"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9397" version="5" class="vulnerability">
      <metadata>
        <title>The jpc_qcx_getcompparms function in jpc/jpc_cs.c for the JasPer JPEG-2000 library (libjasper) before 1.900 allows remote user-assisted attackers to cause a denial of service (crash) and possibly corrupt the heap via malformed image files, as originally demonstrated using imagemagick convert.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2721"/>
        <description>The jpc_qcx_getcompparms function in jpc/jpc_cs.c for the JasPer JPEG-2000 library (libjasper) before 1.900 allows remote user-assisted attackers to cause a denial of service (crash) and possibly corrupt the heap via malformed image files, as originally demonstrated using imagemagick convert.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:00.671-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:50.704-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:52.883-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9397 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:10.317-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:09.382-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="netpbm is earlier than 0:10.25-2.1.el4_7.4" test_ref="oval:org.mitre.oval:tst:37861"/>
            <criterion comment="netpbm-progs is earlier than 0:10.25-2.1.el4_7.4" test_ref="oval:org.mitre.oval:tst:38005"/>
            <criterion comment="netpbm-devel is earlier than 0:10.25-2.1.el4_7.4" test_ref="oval:org.mitre.oval:tst:38171"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="netpbm is earlier than 0:10.35-6.1.el5_3.1" test_ref="oval:org.mitre.oval:tst:37534"/>
            <criterion comment="netpbm-progs is earlier than 0:10.35-6.1.el5_3.1" test_ref="oval:org.mitre.oval:tst:37722"/>
            <criterion comment="netpbm-devel is earlier than 0:10.35-6.1.el5_3.1" test_ref="oval:org.mitre.oval:tst:37227"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9396" version="5" class="vulnerability">
      <metadata>
        <title>Memory leak in the ip6_input_finish function in ip6_input.c in Linux kernel 2.6.12 and earlier might allow attackers to cause a denial of service via malformed IPv6 packets with unspecified parameter problems, which prevents the SKB from being freed.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3858" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3858"/>
        <description>Memory leak in the ip6_input_finish function in ip6_input.c in Linux kernel 2.6.12 and earlier might allow attackers to cause a denial of service via malformed IPv6 packets with unspecified parameter problems, which prevents the SKB from being freed.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:09:57.736-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:50.315-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:52.483-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9396 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:13.301-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:08.817-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32525"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32366"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32381"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32215"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32464"/>
            <criterion comment="kernel is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32288"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:31978"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32438"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32070"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32415"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32137"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32528"/>
            <criterion comment="kernel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32205"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:31866"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32446"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32450"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9393" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in libUil (libUil.so) in OpenMotif 2.2.3, and possibly other versions, allows attackers to execute arbitrary code via the (1) diag_issue_diagnostic function in UilDiags.c and (2) open_source_file function in UilSrcSrc.c.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3964" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3964"/>
        <description>Multiple buffer overflows in libUil (libUil.so) in OpenMotif 2.2.3, and possibly other versions, allows attackers to execute arbitrary code via the (1) diag_issue_diagnostic function in UilDiags.c and (2) open_source_file function in UilSrcSrc.c.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:32.388-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:49.961-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:52.189-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9393 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:25.066-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:08.417-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openmotif21 is earlier than 0:2.1.30-9.RHEL3.7" test_ref="oval:org.mitre.oval:tst:32680"/>
            <criterion comment="openmotif-devel is earlier than 0:2.2.3-5.RHEL3.3" test_ref="oval:org.mitre.oval:tst:32681"/>
            <criterion comment="openmotif is earlier than 0:2.2.3-5.RHEL3.3" test_ref="oval:org.mitre.oval:tst:32716"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openmotif21 is earlier than 0:2.1.30-11.RHEL4.5" test_ref="oval:org.mitre.oval:tst:32013"/>
            <criterion comment="openmotif-devel is earlier than 0:2.2.3-10.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32468"/>
            <criterion comment="openmotif is earlier than 0:2.2.3-10.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32612"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9392" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in (1) tif_dirread.c and (2) tif_fax3.c for libtiff 3.5.7 and 3.7.0 allows remote attackers to execute arbitrary code via a TIFF file containing a TIFF_ASCII or TIFF_UNDEFINED directory entry with a -1 entry count, which leads to a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1308" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1308"/>
        <description>Integer overflow in (1) tif_dirread.c and (2) tif_fax3.c for libtiff 3.5.7 and 3.7.0 allows remote attackers to execute arbitrary code via a TIFF file containing a TIFF_ASCII or TIFF_UNDEFINED directory entry with a -1 entry count, which leads to a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:41.137-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:49.719-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:51.886-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9392 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:43.369-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:07.964-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libtiff is earlier than 0:3.5.7-22.el3" test_ref="oval:org.mitre.oval:tst:31219"/>
            <criterion comment="libtiff-devel is earlier than 0:3.5.7-22.el3" test_ref="oval:org.mitre.oval:tst:30876"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libtiff is earlier than 0:3.6.1-8" test_ref="oval:org.mitre.oval:tst:31174"/>
            <criterion comment="libtiff-devel is earlier than 0:3.6.1-8" test_ref="oval:org.mitre.oval:tst:30884"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9390" version="5" class="vulnerability">
      <metadata>
        <title>The virtual memory implementation in Linux kernel 2.6.x allows local users to cause a denial of service (panic) by running lsof a large number of times in a way that produces a heavy system load.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1862" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1862"/>
        <description>The virtual memory implementation in Linux kernel 2.6.x allows local users to cause a denial of service (panic) by running lsof a large number of times in a way that produces a heavy system load.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:37.254-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:49.442-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:51.598-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9390 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:11.351-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:07.566-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32235"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32371"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32703"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32314"/>
          <criterion comment="kernel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32614"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32295"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32310"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32611"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32305"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:939" version="2" class="vulnerability">
      <metadata>
        <title>Linux Kernel ip_setsockopt Integer Overflow</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0424" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0424"/>
        <description>Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket option.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-10T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:59.136-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:09.758-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criteria operator="OR" comment="kernel versions">
          <criterion comment="kernel version is less than 2.4.21-9.0.3.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1436"/>
          <criterion comment="kernel-smp version is less than 2.4.21-9.0.3.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1435"/>
          <criterion comment="kernel-hugemem version is less than 2.4.21-9.0.3.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1434"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9388" version="5" class="vulnerability">
      <metadata>
        <title>kcheckpass in KDE 3.2.0 up to 3.4.2 allows local users to gain root access via a symlink attack on lock files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2494"/>
        <description>kcheckpass in KDE 3.2.0 up to 3.4.2 allows local users to gain root access via a symlink attack on lock files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:14.333-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:49.243-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:51.392-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9388 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:00.302-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:07.188-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kdebase is earlier than 6:3.3.1-5.13" test_ref="oval:org.mitre.oval:tst:32841"/>
          <criterion comment="kdebase-devel is earlier than 6:3.3.1-5.13" test_ref="oval:org.mitre.oval:tst:32807"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9386" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via vectors involving (1) an event handler attached to an outer window, (2) a SCRIPT element in an unloaded document, or (3) the onreadystatechange handler in conjunction with an XMLHttpRequest.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2800" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2800"/>
        <description>Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via vectors involving (1) an event handler attached to an outer window, (2) a SCRIPT element in an unloaded document, or (3) the onreadystatechange handler in conjunction with an XMLHttpRequest.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:21.390-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:48.607-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:50.664-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9386 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:27.340-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:06.367-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37286"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37033"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37126"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37105"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37271"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37279"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37060"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37189"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:36476"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:36916"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37236"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37192"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-14.el4" test_ref="oval:org.mitre.oval:tst:36999"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36886"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37331"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36365"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.19.el4" test_ref="oval:org.mitre.oval:tst:37174"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37226"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36766"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37320"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36826"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37274"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-17.el5" test_ref="oval:org.mitre.oval:tst:37107"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:37351"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.16-1.el5" test_ref="oval:org.mitre.oval:tst:37363"/>
            <criterion comment="xulrunner is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:36984"/>
            <criterion comment="devhelp is earlier than 0:0.12-17.el5" test_ref="oval:org.mitre.oval:tst:37234"/>
            <criterion comment="yelp is earlier than 0:2.16.0-19.el5" test_ref="oval:org.mitre.oval:tst:37291"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:36436"/>
            <criterion comment="firefox is earlier than 0:3.0-2.el5" test_ref="oval:org.mitre.oval:tst:36814"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9385" version="5" class="vulnerability">
      <metadata>
        <title>The __qdisc_run function in net/sched/sch_generic.c in the Linux kernel before 2.6.25 on SMP machines allows local users to cause a denial of service (soft lockup) by sending a large amount of network traffic, as demonstrated by multiple simultaneous invocations of the Netperf benchmark application in UDP_STREAM mode.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5713" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5713"/>
        <description>The __qdisc_run function in net/sched/sch_generic.c in the Linux kernel before 2.6.25 on SMP machines allows local users to cause a denial of service (soft lockup) by sending a large amount of network traffic, as demonstrated by multiple simultaneous invocations of the Netperf benchmark application in UDP_STREAM mode.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:11.185-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:48.289-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:50.336-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9385 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:36.920-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:05.903-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:37732"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38060"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38354"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38313"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38198"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:37887"/>
          <criterion comment="kernel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38174"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38191"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38124"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38417"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:37779"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38257"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9384" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via crafted dialogArguments values.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3988"/>
        <description>Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via crafted dialogArguments values.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:09.517-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:47.977-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:49.866-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9384 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:23.149-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:04.935-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.18-1.el4" test_ref="oval:org.mitre.oval:tst:39897"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:39323"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:40174"/>
            <criterion comment="firefox is earlier than 0:3.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:40301"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:39533"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9383" version="5" class="vulnerability">
      <metadata>
        <title>The Linux kernel 2.6.24 and 2.6.25 before 2.6.25.9 allows local users to cause a denial of service (memory consumption) via a large number of calls to the get_user_pages function, which lacks a ZERO_PAGE optimization and results in allocation of "useless newly zeroed pages."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2372" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2372"/>
        <description>The Linux kernel 2.6.24 and 2.6.25 before 2.6.25.9 allows local users to cause a denial of service (memory consumption) via a large number of calls to the get_user_pages function, which lacks a ZERO_PAGE optimization and results in allocation of "useless newly zeroed pages."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:20.300-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:47.666-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:49.535-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9383 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:41:01.410-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:04.426-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37778"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37855"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37870"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37881"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37504"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37738"/>
          <criterion comment="kernel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37774"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37247"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37715"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37954"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37668"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37947"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9382" version="5" class="vulnerability">
      <metadata>
        <title>The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1163" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1163"/>
        <description>The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:41.877-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:47.483-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:49.337-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9382 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:28.973-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:04.076-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="sudo is earlier than 0:1.7.2p1-6.el5_5" test_ref="oval:org.mitre.oval:tst:40014"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:938" version="1" class="vulnerability">
      <metadata>
        <title>IIS5.0 Windows Media Services Large POST Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0349" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0349"/>
        <description>Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll), as installed in IIS 5.0, allows remote attackers to execute arbitrary code via a large POST request to nsiislog.dll.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-18T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="IIS major version equals 5" negate="false" test_ref="oval:org.mitre.oval:tst:3081"/>
        <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
        <criterion comment="File %windir%\System32\nsiislog.dll is less than 4.1.0.3932" negate="false" test_ref="oval:org.mitre.oval:tst:1437"/>
        <criterion comment="Patch KB822343 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:1438"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9379" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the svcauth_gss_validate function in lib/rpc/svc_auth_gss.c in the RPCSEC_GSS RPC library (librpcsecgss) in MIT Kerberos 5 (krb5) 1.4 through 1.6.2, as used by the Kerberos administration daemon (kadmind) and some third-party applications that use krb5, allows remote attackers to cause a denial of service (daemon crash) and probably execute arbitrary code via a long string in an RPC message.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3999" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3999"/>
        <description>Stack-based buffer overflow in the svcauth_gss_validate function in lib/rpc/svc_auth_gss.c in the RPCSEC_GSS RPC library (librpcsecgss) in MIT Kerberos 5 (krb5) 1.4 through 1.6.2, as used by the Kerberos administration daemon (kadmind) and some third-party applications that use krb5, allows remote attackers to cause a denial of service (daemon crash) and probably execute arbitrary code via a long string in an RPC message.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:01.163-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:47.184-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:48.967-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9379 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:29.519-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:03.572-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nfs-utils-lib-devel is earlier than 0:1.0.6-8.z1" test_ref="oval:org.mitre.oval:tst:34626"/>
            <criterion comment="nfs-utils-lib is earlier than 0:1.0.6-8.z1" test_ref="oval:org.mitre.oval:tst:35367"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nfs-utils-lib-devel is earlier than 0:1.0.8-7.2.z2" test_ref="oval:org.mitre.oval:tst:35168"/>
            <criterion comment="nfs-utils-lib is earlier than 0:1.0.8-7.2.z2" test_ref="oval:org.mitre.oval:tst:35408"/>
            <criterion comment="krb5-workstation is earlier than 0:1.5-29" test_ref="oval:org.mitre.oval:tst:34835"/>
            <criterion comment="krb5 is earlier than 0:1.5-29" test_ref="oval:org.mitre.oval:tst:35134"/>
            <criterion comment="krb5-libs is earlier than 0:1.5-29" test_ref="oval:org.mitre.oval:tst:34559"/>
            <criterion comment="krb5-server is earlier than 0:1.5-29" test_ref="oval:org.mitre.oval:tst:35091"/>
            <criterion comment="krb5-devel is earlier than 0:1.5-29" test_ref="oval:org.mitre.oval:tst:34927"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9378" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the SOAPParameter object constructor in (1) Netscape version 7.0 and 7.1 and (2) Mozilla 1.6, and possibly earlier versions, allows remote attackers to execute arbitrary code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0722" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0722"/>
        <description>Integer overflow in the SOAPParameter object constructor in (1) Netscape version 7.0 and 7.1 and (2) Mozilla 1.6, and possibly earlier versions, allows remote attackers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:09:31.789-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:46.824-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:48.666-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9378 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:21.104-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:03.190-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mozilla-js-debugger is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30799"/>
          <criterion comment="mozilla is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30278"/>
          <criterion comment="mozilla-chat is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30755"/>
          <criterion comment="mozilla-mail is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30570"/>
          <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30230"/>
          <criterion comment="mozilla-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30288"/>
          <criterion comment="mozilla-nss is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30323"/>
          <criterion comment="mozilla-nss-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30339"/>
          <criterion comment="mozilla-nspr is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30813"/>
          <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30660"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9376" version="6" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy and access portions of data from another domain via a JavaScript URL that redirects to the target resource, which generates an error if the target data does not have JavaScript syntax, which can be accessed using the window.onerror DOM API.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5507"/>
        <description>Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allow remote attackers to bypass the same origin policy and access portions of data from another domain via a JavaScript URL that redirects to the target resource, which generates an error if the target data does not have JavaScript syntax, which can be accessed using the window.onerror DOM API.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:41.611-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:46.143-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:47.971-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9376 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:44.607-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:02.322-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38137"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37886"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37999"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37907"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37709"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38092"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37745"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38039"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38062"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38073"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nspr is earlier than 0:4.7.3-1.el4" test_ref="oval:org.mitre.oval:tst:37574"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:38071"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-1.el4" test_ref="oval:org.mitre.oval:tst:37857"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-18.el4" test_ref="oval:org.mitre.oval:tst:37200"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.3-1.el4" test_ref="oval:org.mitre.oval:tst:37918"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37812"/>
            <criterion comment="firefox is earlier than 0:3.0.5-1.el4" test_ref="oval:org.mitre.oval:tst:38080"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-1.el4" test_ref="oval:org.mitre.oval:tst:37139"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37869"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37789"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37395"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:38118"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:38072"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38037"/>
            <criterion comment="nspr is earlier than 0:4.7.3-2.el5" test_ref="oval:org.mitre.oval:tst:37420"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37854"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.19-1.el5_2" test_ref="oval:org.mitre.oval:tst:38053"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.3-2.el5" test_ref="oval:org.mitre.oval:tst:37419"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38083"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:37631"/>
            <criterion comment="firefox is earlier than 0:3.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38114"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37737"/>
            <criterion comment="nss-tools is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37403"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9375" version="5" class="vulnerability">
      <metadata>
        <title>The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended access restrictions via crafted content.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0182"/>
        <description>The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended access restrictions via crafted content.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:13.424-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:45.707-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:47.563-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9375 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:15.596-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:01.686-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.6.4-8.el4" test_ref="oval:org.mitre.oval:tst:40755"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gnome-python2-extras is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40435"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-21.el5" test_ref="oval:org.mitre.oval:tst:40552"/>
            <criterion comment="gnome-python2-libegg is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40721"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.2.4-10.el5" test_ref="oval:org.mitre.oval:tst:40480"/>
            <criterion comment="gnome-python2-gtkhtml2 is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40813"/>
            <criterion comment="totem is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40749"/>
            <criterion comment="xulrunner is earlier than 0:1.9.2.4-10.el5" test_ref="oval:org.mitre.oval:tst:40221"/>
            <criterion comment="gnome-python2-gtkspell is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40385"/>
            <criterion comment="yelp is earlier than 0:2.16.0-26.el5" test_ref="oval:org.mitre.oval:tst:40828"/>
            <criterion comment="devhelp is earlier than 0:0.12-21.el5" test_ref="oval:org.mitre.oval:tst:40814"/>
            <criterion comment="firefox is earlier than 0:3.6.4-8.el5" test_ref="oval:org.mitre.oval:tst:40524"/>
            <criterion comment="totem-mozplugin is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40620"/>
            <criterion comment="gnome-python2-gtkmozembed is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40722"/>
            <criterion comment="esc is earlier than 0:1.1.0-12.el5" test_ref="oval:org.mitre.oval:tst:40273"/>
            <criterion comment="totem-devel is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40637"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9373" version="5" class="vulnerability">
      <metadata>
        <title>The decompress function in compress42.c in (1) ncompress 4.2.4 and (2) liblzw allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code, via crafted data that leads to a buffer underflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1168" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1168"/>
        <description>The decompress function in compress42.c in (1) ncompress 4.2.4 and (2) liblzw allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code, via crafted data that leads to a buffer underflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:42.556-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:45.490-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:47.326-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9373 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:36.486-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:01.332-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="ncompress is earlier than 0:4.2.4-39.rhel3" test_ref="oval:org.mitre.oval:tst:32891"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="ncompress is earlier than 0:4.2.4-43.rhel4" test_ref="oval:org.mitre.oval:tst:32529"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9371" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the listxattr system call in Linux kernel, when a "bad inode" is present, allows local users to cause a denial of service (data corruption) and possibly gain privileges via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5753" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5753"/>
        <description>Unspecified vulnerability in the listxattr system call in Linux kernel, when a "bad inode" is present, allows local users to cause a denial of service (data corruption) and possibly gain privileges via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:01.617-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:45.214-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:46.653-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9371 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:31.838-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:00.887-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33204"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33278"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33306"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32378"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33145"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33107"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32620"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32645"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33057"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9370" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3738" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3738"/>
        <description>Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:56.422-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:44.766-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:46.354-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9370 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:18:53.800-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:00.454-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.7a-33.21" test_ref="oval:org.mitre.oval:tst:32990"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.7a-33.21" test_ref="oval:org.mitre.oval:tst:32592"/>
            <criterion comment="openssl is earlier than 0:0.9.7a-33.21" test_ref="oval:org.mitre.oval:tst:32812"/>
            <criterion comment="openssl096b is earlier than 0:0.9.6b-16.46" test_ref="oval:org.mitre.oval:tst:32771"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.7a-43.14" test_ref="oval:org.mitre.oval:tst:32875"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.7a-43.14" test_ref="oval:org.mitre.oval:tst:33058"/>
            <criterion comment="openssl is earlier than 0:0.9.7a-43.14" test_ref="oval:org.mitre.oval:tst:33093"/>
            <criterion comment="openssl096b is earlier than 0:0.9.6b-22.46" test_ref="oval:org.mitre.oval:tst:32789"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:937" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Enterprise 3 Mozilla Zombie Document Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0191" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0191"/>
        <description>Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page (zombie document) and enable cross-domain and cross-site scripting (XSS) attacks, as demonstrated using onmousemove events.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-08T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-11T12:00:00.000-04:00" comment="Corrected pattern used in rrt-206">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:32.073-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:09.540-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="mozilla-nss version is less than 1.4.2-3.0.2" negate="false" test_ref="oval:org.mitre.oval:tst:1468"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9369" version="5" class="vulnerability">
      <metadata>
        <title>SUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9 do not properly check commands sent to CD devices that have been opened read-only, which could allow local users to conduct unauthorized write activities to modify the firmware of associated SCSI devices.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1190" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1190"/>
        <description>SUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9 do not properly check commands sent to CD devices that have been opened read-only, which could allow local users to conduct unauthorized write activities to modify the firmware of associated SCSI devices.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:52.203-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:44.505-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:46.089-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9369 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:44.183-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:19:00.093-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32415"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32137"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32528"/>
          <criterion comment="kernel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32205"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:31866"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32446"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32450"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9367" version="5" class="vulnerability">
      <metadata>
        <title>The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to "encoding type."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4770" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4770"/>
        <description>The CMsgReader::readRect function in the VNC Viewer component in RealVNC VNC Free Edition 4.0 through 4.1.2, Enterprise Edition E4.0 through E4.4.2, and Personal Edition P4.0 through P4.4.2 allows remote VNC servers to execute arbitrary code via crafted RFB protocol data, related to "encoding type."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:58.120-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:44.212-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:45.699-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9367 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:40.958-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:59.580-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="vnc-server is earlier than 0:4.0-0.beta4.1.8" test_ref="oval:org.mitre.oval:tst:38057"/>
            <criterion comment="vnc is earlier than 0:4.0-0.beta4.1.8" test_ref="oval:org.mitre.oval:tst:38376"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="vnc-server is earlier than 0:4.0-12.el4_7.1" test_ref="oval:org.mitre.oval:tst:38179"/>
            <criterion comment="vnc is earlier than 0:4.0-12.el4_7.1" test_ref="oval:org.mitre.oval:tst:38424"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="vnc-server is earlier than 0:4.1.2-14.el5_3.1" test_ref="oval:org.mitre.oval:tst:38345"/>
            <criterion comment="vnc is earlier than 0:4.1.2-14.el5_3.1" test_ref="oval:org.mitre.oval:tst:38082"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9364" version="5" class="vulnerability">
      <metadata>
        <title>The sbni_ioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for the CAP_NET_ADMIN capability before processing a (1) SIOCDEVRESINSTATS, (2) SIOCDEVSHWSTATE, (3) SIOCDEVENSLAVE, or (4) SIOCDEVEMANSIPATE ioctl request, which allows local users to bypass intended capability restrictions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3525" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3525"/>
        <description>The sbni_ioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for the CAP_NET_ADMIN capability before processing a (1) SIOCDEVRESINSTATS, (2) SIOCDEVSHWSTATE, (3) SIOCDEVENSLAVE, or (4) SIOCDEVEMANSIPATE ioctl request, which allows local users to bypass intended capability restrictions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:01.405-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:43.904-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:45.404-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9364 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:58.584-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:58.657-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37931"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37846"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37817"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37663"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37799"/>
          <criterion comment="kernel is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37028"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37885"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37981"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37117"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9363" version="5" class="vulnerability">
      <metadata>
        <title>The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3095" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3095"/>
        <description>The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:30.129-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:43.544-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:44.985-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9363 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:51.358-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:58.109-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-devel is earlier than 0:2.0.46-77.ent" test_ref="oval:org.mitre.oval:tst:39637"/>
            <criterion comment="mod_ssl is earlier than 0:2.0.46-77.ent" test_ref="oval:org.mitre.oval:tst:39671"/>
            <criterion comment="httpd is earlier than 0:2.0.46-77.ent" test_ref="oval:org.mitre.oval:tst:39611"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-suexec is earlier than 0:2.0.52-41.ent.6" test_ref="oval:org.mitre.oval:tst:39448"/>
            <criterion comment="httpd-manual is earlier than 0:2.0.52-41.ent.6" test_ref="oval:org.mitre.oval:tst:39501"/>
            <criterion comment="httpd-devel is earlier than 0:2.0.52-41.ent.6" test_ref="oval:org.mitre.oval:tst:38802"/>
            <criterion comment="mod_ssl is earlier than 0:2.0.52-41.ent.6" test_ref="oval:org.mitre.oval:tst:39716"/>
            <criterion comment="httpd is earlier than 0:2.0.52-41.ent.6" test_ref="oval:org.mitre.oval:tst:39551"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-manual is earlier than 0:2.2.3-31.el5_4.2" test_ref="oval:org.mitre.oval:tst:39267"/>
            <criterion comment="httpd-devel is earlier than 0:2.2.3-31.el5_4.2" test_ref="oval:org.mitre.oval:tst:39640"/>
            <criterion comment="mod_ssl is earlier than 0:2.2.3-31.el5_4.2" test_ref="oval:org.mitre.oval:tst:39613"/>
            <criterion comment="httpd is earlier than 0:2.2.3-31.el5_4.2" test_ref="oval:org.mitre.oval:tst:39756"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9360" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the setBytePixels function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via crafted arguments, aka Bug Id 6872358.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3871" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3871"/>
        <description>Heap-based buffer overflow in the setBytePixels function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via crafted arguments, aka Bug Id 6872358.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:06.392-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:43.315-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:44.743-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9360 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:19.730-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:57.715-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:38878"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39616"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39115"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39531"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39655"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:936" version="1" class="vulnerability">
      <metadata>
        <title>Windows 2000 Media Services ISAPI Logging Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0227" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0227"/>
        <description>The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Services in Microsoft Windows NT 4.0 and 2000, nsiislog.dll, allows remote attackers to cause a denial of service in Internet Information Server (IIS) and execute arbitrary code via a certain network request.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-18T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="IIS major version equals 5" negate="false" test_ref="oval:org.mitre.oval:tst:3081"/>
        <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
        <criterion comment="File %windir%\System32\nsiislog.dll is less than 4.1.0.3931" negate="false" test_ref="oval:org.mitre.oval:tst:1440"/>
        <criterion comment="Patch KB817772 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:1439"/>
        <criterion comment="Patch KB822343 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:1438"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9359" version="5" class="vulnerability">
      <metadata>
        <title>The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to browser cookies by untrusted (1) applets and (2) Java Web Start applications, which allows remote attackers to hijack web sessions via unspecified vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2672" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2672"/>
        <description>The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to browser cookies by untrusted (1) applets and (2) Java Web Start applications, which allows remote attackers to hijack web sessions via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:51.502-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:43.087-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:44.502-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9359 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:41:17.992-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:57.368-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38942"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38825"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38972"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38267"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:39037"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9358" version="5" class="vulnerability">
      <metadata>
        <title>PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not properly manage session-local state during execution of an index function by a database superuser, which allows remote authenticated users to gain privileges via a table with crafted index functions, as demonstrated by functions that modify (1) search_path or (2) a prepared statement, a related issue to CVE-2007-6600 and CVE-2009-3230.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4136" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4136"/>
        <description>PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not properly manage session-local state during execution of an index function by a database superuser, which allows remote authenticated users to gain privileges via a table with crafted index functions, as demonstrated by functions that modify (1) search_path or (2) a prepared statement, a related issue to CVE-2007-6600 and CVE-2009-3230.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:37.084-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:42.412-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:43.815-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9358 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:18:55.956-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:56.517-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="rh-postgresql-devel is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40180"/>
            <criterion comment="rh-postgresql-server is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40440"/>
            <criterion comment="rh-postgresql-python is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40426"/>
            <criterion comment="rh-postgresql-libs is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40220"/>
            <criterion comment="rh-postgresql-docs is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:39618"/>
            <criterion comment="rh-postgresql-test is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40140"/>
            <criterion comment="rh-postgresql-pl is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40502"/>
            <criterion comment="rh-postgresql-tcl is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:39925"/>
            <criterion comment="rh-postgresql is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40137"/>
            <criterion comment="rh-postgresql-contrib is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40551"/>
            <criterion comment="rh-postgresql-jdbc is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40106"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40486"/>
            <criterion comment="postgresql-docs is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40521"/>
            <criterion comment="postgresql-pl is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40292"/>
            <criterion comment="postgresql-tcl is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40516"/>
            <criterion comment="postgresql-libs is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40066"/>
            <criterion comment="postgresql-contrib is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40399"/>
            <criterion comment="postgresql-python is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40512"/>
            <criterion comment="postgresql-test is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40314"/>
            <criterion comment="postgresql-jdbc is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40428"/>
            <criterion comment="postgresql-server is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40366"/>
            <criterion comment="postgresql-devel is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40465"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40401"/>
            <criterion comment="postgresql-docs is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40402"/>
            <criterion comment="postgresql-pl is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40538"/>
            <criterion comment="postgresql-tcl is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:39839"/>
            <criterion comment="postgresql-libs is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40515"/>
            <criterion comment="postgresql-contrib is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40505"/>
            <criterion comment="postgresql-python is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40251"/>
            <criterion comment="postgresql-test is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40253"/>
            <criterion comment="postgresql-server is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40509"/>
            <criterion comment="postgresql-devel is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40309"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9357" version="5" class="vulnerability">
      <metadata>
        <title>ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC (1) NSEC and (2) NSEC3 records, which allows remote attackers to add the Authenticated Data (AD) flag to a forged NXDOMAIN response for an existing domain.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0097" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0097"/>
        <description>ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC (1) NSEC and (2) NSEC3 records, which allows remote attackers to add the Authenticated Data (AD) flag to a forged NXDOMAIN response for an existing domain.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:31.561-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:42.138-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:43.535-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9357 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:53.264-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:56.119-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="bind-utils is earlier than 30:9.3.6-4.P1.el5_4.2" test_ref="oval:org.mitre.oval:tst:40044"/>
          <criterion comment="bind-libbind-devel is earlier than 30:9.3.6-4.P1.el5_4.2" test_ref="oval:org.mitre.oval:tst:39542"/>
          <criterion comment="bind-devel is earlier than 30:9.3.6-4.P1.el5_4.2" test_ref="oval:org.mitre.oval:tst:39904"/>
          <criterion comment="bind-chroot is earlier than 30:9.3.6-4.P1.el5_4.2" test_ref="oval:org.mitre.oval:tst:39693"/>
          <criterion comment="caching-nameserver is earlier than 30:9.3.6-4.P1.el5_4.2" test_ref="oval:org.mitre.oval:tst:39892"/>
          <criterion comment="bind-sdb is earlier than 30:9.3.6-4.P1.el5_4.2" test_ref="oval:org.mitre.oval:tst:40054"/>
          <criterion comment="bind is earlier than 30:9.3.6-4.P1.el5_4.2" test_ref="oval:org.mitre.oval:tst:39489"/>
          <criterion comment="bind-libs is earlier than 30:9.3.6-4.P1.el5_4.2" test_ref="oval:org.mitre.oval:tst:39885"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9356" version="5" class="vulnerability">
      <metadata>
        <title>XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2625"/>
        <description>XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:03.440-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:41.778-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:43.206-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9356 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:09.980-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:55.655-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="xerces-j2-demo is earlier than 0:2.7.1-7jpp.2.el5_4.2" test_ref="oval:org.mitre.oval:tst:39659"/>
          <criterion comment="xerces-j2 is earlier than 0:2.7.1-7jpp.2.el5_4.2" test_ref="oval:org.mitre.oval:tst:38778"/>
          <criterion comment="xerces-j2-scripts is earlier than 0:2.7.1-7jpp.2.el5_4.2" test_ref="oval:org.mitre.oval:tst:39482"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38267"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:39037"/>
          <criterion comment="xerces-j2-javadoc-other is earlier than 0:2.7.1-7jpp.2.el5_4.2" test_ref="oval:org.mitre.oval:tst:39592"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38825"/>
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38942"/>
          <criterion comment="xerces-j2-javadoc-apis is earlier than 0:2.7.1-7jpp.2.el5_4.2" test_ref="oval:org.mitre.oval:tst:39411"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38972"/>
          <criterion comment="xerces-j2-javadoc-xni is earlier than 0:2.7.1-7jpp.2.el5_4.2" test_ref="oval:org.mitre.oval:tst:39706"/>
          <criterion comment="xerces-j2-javadoc-impl is earlier than 0:2.7.1-7jpp.2.el5_4.2" test_ref="oval:org.mitre.oval:tst:39495"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9353" version="5" class="vulnerability">
      <metadata>
        <title>dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes in allow directives in the security policy only for fully qualified method calls, which allows local users to bypass intended access restrictions via a method call with a NULL interface.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0595" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0595"/>
        <description>dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes in allow directives in the security policy only for fully qualified method calls, which allows local users to bypass intended access restrictions via a method call with a NULL interface.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:04.388-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:41.573-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:42.934-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9353 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:29.747-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:55.341-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="dbus-devel is earlier than 0:1.0.0-6.3.el5_1" test_ref="oval:org.mitre.oval:tst:35564"/>
          <criterion comment="dbus-x11 is earlier than 0:1.0.0-6.3.el5_1" test_ref="oval:org.mitre.oval:tst:36228"/>
          <criterion comment="dbus is earlier than 0:1.0.0-6.3.el5_1" test_ref="oval:org.mitre.oval:tst:36008"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:935" version="4" class="vulnerability">
      <metadata>
        <title>HP-UX PMTUD Remote DoS (B.11.23)</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1192" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1192"/>
        <description>Unknown vulnerability in HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23, when running TCP/IP on IPv4, allows remote attackers to cause a denial of service via certain packets, related to the PMTU, a different vulnerability than CVE-2004-1060.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-02-01T11:45:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-03-09T12:19:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-04-06T06:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:31.649-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:13.897-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:935 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:25.156-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:49.198-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.23">
          <criteria operator="AND" comment="700 Series OS Release 11.23">
            <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:2515"/>
            <criterion comment="HP Release B.11.23" test_ref="oval:org.mitre.oval:tst:2511"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 11.23">
            <criterion comment="800-series HP" test_ref="oval:org.mitre.oval:tst:2513"/>
            <criterion comment="HP Release B.11.23" test_ref="oval:org.mitre.oval:tst:2511"/>
          </criteria>
        </criteria>
        <criterion comment="Networking.NET2-KRN is installed" test_ref="oval:org.mitre.oval:tst:1442"/>
        <criterion negate="true" comment="Patch PHNE_32606 is installed" test_ref="oval:org.mitre.oval:tst:1441"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9349" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the exif_data_load_data_entry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4168" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4168"/>
        <description>Integer overflow in the exif_data_load_data_entry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:32.480-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:41.334-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:42.676-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9349 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:43.399-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:54.906-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libexif-devel is earlier than 0:0.5.12-5.1.0.2" test_ref="oval:org.mitre.oval:tst:34690"/>
            <criterion comment="libexif is earlier than 0:0.5.12-5.1.0.2" test_ref="oval:org.mitre.oval:tst:34611"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libexif-devel is earlier than 0:0.6.13-4.0.2.el5" test_ref="oval:org.mitre.oval:tst:34381"/>
            <criterion comment="libexif is earlier than 0:0.6.13-4.0.2.el5" test_ref="oval:org.mitre.oval:tst:34026"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9348" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in xpm_extract_color (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, may allow remote attackers to execute arbitrary code via a certain color string.  NOTE: this identifier is ONLY for gtk+.  It was incorrectly referenced in an advisory for a different issue (CVE-2004-0688).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0783" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0783"/>
        <description>Stack-based buffer overflow in xpm_extract_color (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, may allow remote attackers to execute arbitrary code via a certain color string.  NOTE: this identifier is ONLY for gtk+.  It was incorrectly referenced in an advisory for a different issue (CVE-2004-0688).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:24.303-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:41.093-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:42.435-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9348 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:18:57.097-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:54.575-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="gdk-pixbuf-devel is earlier than 1:0.22.0-11.3.3" test_ref="oval:org.mitre.oval:tst:30887"/>
          <criterion comment="gtk2 is earlier than 0:2.2.4-8.1" test_ref="oval:org.mitre.oval:tst:30146"/>
          <criterion comment="gdk-pixbuf-gnome is earlier than 1:0.22.0-11.3.3" test_ref="oval:org.mitre.oval:tst:30822"/>
          <criterion comment="gdk-pixbuf is earlier than 1:0.22.0-11.3.3" test_ref="oval:org.mitre.oval:tst:30571"/>
          <criterion comment="gtk2-devel is earlier than 0:2.2.4-8.1" test_ref="oval:org.mitre.oval:tst:30817"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9345" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0247" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0247"/>
        <description>Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via (1) a large number of variables in a SQL statement being handled by the read_sql_construct function, (2) a large number of INTO variables in a SELECT statement being handled by the make_select_stmt function, (3) a large number of arbitrary variables in a SELECT statement being handled by the make_select_stmt function, and (4) a large number of INTO variables in a FETCH statement being handled by the make_fetch_stmt function, a different set of vulnerabilities than CVE-2005-0245.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:08.972-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:40.585-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:41.928-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9345 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:50.234-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:53.747-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="rh-postgresql-devel is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:30936"/>
            <criterion comment="rh-postgresql-server is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:30803"/>
            <criterion comment="rh-postgresql-python is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31436"/>
            <criterion comment="rh-postgresql-libs is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31064"/>
            <criterion comment="rh-postgresql-docs is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:30591"/>
            <criterion comment="rh-postgresql-test is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31342"/>
            <criterion comment="rh-postgresql-pl is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31217"/>
            <criterion comment="rh-postgresql-tcl is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31199"/>
            <criterion comment="rh-postgresql is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31415"/>
            <criterion comment="rh-postgresql-contrib is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31005"/>
            <criterion comment="rh-postgresql-jdbc is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31233"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31336"/>
            <criterion comment="postgresql-docs is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31398"/>
            <criterion comment="postgresql-pl is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31229"/>
            <criterion comment="postgresql-tcl is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:30946"/>
            <criterion comment="postgresql-libs is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31215"/>
            <criterion comment="postgresql-contrib is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:30784"/>
            <criterion comment="postgresql-python is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31126"/>
            <criterion comment="postgresql-test is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31318"/>
            <criterion comment="postgresql-jdbc is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31273"/>
            <criterion comment="postgresql-server is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31424"/>
            <criterion comment="postgresql-devel is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31325"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9343" version="5" class="vulnerability">
      <metadata>
        <title>The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, (3) snb_ru_init, (4) spell_init, and (5) syn_init functions as "internal" even when they do not take an internal argument, which allows attackers to cause a denial of service (application crash) and possibly have other impacts via SQL commands that call other functions that accept internal arguments.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1410"/>
        <description>The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, (3) snb_ru_init, (4) spell_init, and (5) syn_init functions as "internal" even when they do not take an internal argument, which allows attackers to cause a denial of service (application crash) and possibly have other impacts via SQL commands that call other functions that accept internal arguments.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:51.394-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:40.121-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:41.453-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9343 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:18:45.620-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:53.144-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="rh-postgresql-devel is earlier than 0:7.3.10-1" test_ref="oval:org.mitre.oval:tst:31824"/>
            <criterion comment="rh-postgresql-server is earlier than 0:7.3.10-1" test_ref="oval:org.mitre.oval:tst:31255"/>
            <criterion comment="rh-postgresql-python is earlier than 0:7.3.10-1" test_ref="oval:org.mitre.oval:tst:31711"/>
            <criterion comment="rh-postgresql-libs is earlier than 0:7.3.10-1" test_ref="oval:org.mitre.oval:tst:31608"/>
            <criterion comment="rh-postgresql-docs is earlier than 0:7.3.10-1" test_ref="oval:org.mitre.oval:tst:31726"/>
            <criterion comment="rh-postgresql-test is earlier than 0:7.3.10-1" test_ref="oval:org.mitre.oval:tst:31681"/>
            <criterion comment="rh-postgresql-pl is earlier than 0:7.3.10-1" test_ref="oval:org.mitre.oval:tst:31497"/>
            <criterion comment="rh-postgresql-tcl is earlier than 0:7.3.10-1" test_ref="oval:org.mitre.oval:tst:31715"/>
            <criterion comment="rh-postgresql is earlier than 0:7.3.10-1" test_ref="oval:org.mitre.oval:tst:31510"/>
            <criterion comment="rh-postgresql-contrib is earlier than 0:7.3.10-1" test_ref="oval:org.mitre.oval:tst:31754"/>
            <criterion comment="rh-postgresql-jdbc is earlier than 0:7.3.10-1" test_ref="oval:org.mitre.oval:tst:31507"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:7.4.8-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31832"/>
            <criterion comment="postgresql-docs is earlier than 0:7.4.8-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31880"/>
            <criterion comment="postgresql-pl is earlier than 0:7.4.8-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31527"/>
            <criterion comment="postgresql-tcl is earlier than 0:7.4.8-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31669"/>
            <criterion comment="postgresql-libs is earlier than 0:7.4.8-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31129"/>
            <criterion comment="postgresql-contrib is earlier than 0:7.4.8-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31756"/>
            <criterion comment="postgresql-python is earlier than 0:7.4.8-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31799"/>
            <criterion comment="postgresql-test is earlier than 0:7.4.8-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31798"/>
            <criterion comment="postgresql-jdbc is earlier than 0:7.4.8-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31618"/>
            <criterion comment="postgresql-server is earlier than 0:7.4.8-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31468"/>
            <criterion comment="postgresql-devel is earlier than 0:7.4.8-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31708"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9337" version="5" class="vulnerability">
      <metadata>
        <title>The Distributed Lock Manager (DLM) in the cluster manager for Linux kernel 2.6.15 allows remote attackers to cause a denial of service (loss of lock services) by connecting to the DLM port, which probably prevents other processes from accessing the service.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3380"/>
        <description>The Distributed Lock Manager (DLM) in the cluster manager for Linux kernel 2.6.15 allows remote attackers to cause a denial of service (loss of lock services) by connecting to the DLM port, which probably prevents other processes from accessing the service.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:00.376-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:39.754-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:41.137-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9337 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:38.619-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:52.688-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35330"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35339"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35337"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35227"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35043"/>
          <criterion comment="kernel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35276"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:34448"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35366"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35208"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35326"/>
          <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35345"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9336" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4476" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4476"/>
        <description>Buffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:10.748-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:39.517-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:40.843-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9336 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:41.541-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:52.299-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="tar is earlier than 0:1.14-13.el4_8.1" test_ref="oval:org.mitre.oval:tst:40247"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tar is earlier than 2:1.15.1-23.0.1.el5_4.2" test_ref="oval:org.mitre.oval:tst:39957"/>
            <criterion comment="cpio is earlier than 0:2.6-23.el5_4.1" test_ref="oval:org.mitre.oval:tst:40260"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9334" version="5" class="vulnerability">
      <metadata>
        <title>KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow local users to create or truncate arbitrary files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0689" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0689"/>
        <description>KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow local users to create or truncate arbitrary files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:03.458-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:38.869-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:40.614-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9334 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:26.641-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:51.932-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kdebase is earlier than 6:3.1.3-5.4" test_ref="oval:org.mitre.oval:tst:30731"/>
          <criterion comment="kdebase-devel is earlier than 6:3.1.3-5.4" test_ref="oval:org.mitre.oval:tst:29837"/>
          <criterion comment="kdelibs is earlier than 6:3.1.3-6.6" test_ref="oval:org.mitre.oval:tst:30063"/>
          <criterion comment="kdelibs-devel is earlier than 6:3.1.3-6.6" test_ref="oval:org.mitre.oval:tst:30768"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9332" version="5" class="vulnerability">
      <metadata>
        <title>Adobe Macromedia Flash Player 7 and 9, when used with Opera before 9.20 or Konqueror before 20070613, allows remote attackers to obtain sensitive information (browser keystrokes), which are leaked to the Flash Player applet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2022" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2022"/>
        <description>Adobe Macromedia Flash Player 7 and 9, when used with Opera before 9.20 or Konqueror before 20070613, allows remote attackers to obtain sensitive information (browser keystrokes), which are leaked to the Flash Player applet.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:26.745-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:38.571-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:40.317-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9332 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:30.615-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:51.455-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdebase is earlier than 6:3.1.3-5.16" test_ref="oval:org.mitre.oval:tst:34248"/>
            <criterion comment="kdebase-devel is earlier than 6:3.1.3-5.16" test_ref="oval:org.mitre.oval:tst:34656"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdebase is earlier than 6:3.3.1-5.19.rhel4" test_ref="oval:org.mitre.oval:tst:34288"/>
            <criterion comment="kdebase-devel is earlier than 6:3.3.1-5.19.rhel4" test_ref="oval:org.mitre.oval:tst:34025"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdebase is earlier than 6:3.5.4-13.6.el5" test_ref="oval:org.mitre.oval:tst:34519"/>
            <criterion comment="kdebase-devel is earlier than 6:3.5.4-13.6.el5" test_ref="oval:org.mitre.oval:tst:34351"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9331" version="3" class="vulnerability">
      <metadata>
        <title>Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when applet caching is enabled, allows remote attackers to violate the security model for an applet's outbound connections via a DNS rebinding attack.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5232" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5232"/>
        <description>Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when applet caching is enabled, allows remote attackers to violate the security model for an applet's outbound connections via a DNS rebinding attack.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:49.716-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:37.464-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:39.096-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criteria operator="OR">
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:35438"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:36312"/>
            <criterion comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:36020"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:36170"/>
            <criterion comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:36131"/>
            <criterion comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:35578"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:35718"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:36338"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:35439"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35617"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34688"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35272"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35892"/>
            <criterion comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35850"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:34849"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36357"/>
            <criterion comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36067"/>
            <criterion comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35854"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35532"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35673"/>
            <criterion comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.14-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36263"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36219"/>
            <criterion comment="java-1.5.0-bea is earlier than 0:1.5.0.14-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36444"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35110"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35478"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35875"/>
            <criterion comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35815"/>
            <criterion comment="java-1.5.0-bea-src is earlier than 0:1.5.0.14-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36470"/>
            <criterion comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.14-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36435"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34668"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35191"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35384"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35413"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35465"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36292"/>
            <criterion comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.14-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36151"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35057"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35644"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36198"/>
            <criterion comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35192"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36227"/>
            <criterion comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36087"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36003"/>
            <criterion comment="java-1.5.0-bea is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36374"/>
            <criterion comment="java-1.4.2-bea-demo is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36127"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35624"/>
            <criterion comment="java-1.5.0-ibm-accessibility is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35633"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35280"/>
            <criterion comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36290"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35256"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35453"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35822"/>
            <criterion comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36337"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35584"/>
            <criterion comment="java-1.4.2-bea-missioncontrol is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35296"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34760"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35317"/>
            <criterion comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35972"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35429"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36350"/>
            <criterion comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36261"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35144"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35886"/>
            <criterion comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36301"/>
            <criterion comment="java-1.5.0-bea-missioncontrol is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36452"/>
            <criterion comment="java-1.5.0-bea-src is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36372"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35437"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35392"/>
            <criterion comment="java-1.4.2-bea-src is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36128"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34772"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9330" version="5" class="vulnerability">
      <metadata>
        <title>/proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial links, which could allow local users to obtain potentially sensitive information such as the length of passwords.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0461"/>
        <description>/proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial links, which could allow local users to obtain potentially sensitive information such as the length of passwords.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:30.369-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:37.172-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:38.737-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9330 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:33.115-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:51.078-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30346"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30006"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30702"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30513"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30280"/>
          <criterion comment="kernel is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30056"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30508"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30654"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30307"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:933" version="3" class="vulnerability">
      <metadata>
        <title>IIS WebDAV Request Denial of Service</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0226" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0226"/>
        <description>Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a denial of service via a long WebDAV request with a (1) PROPFIND or (2) SEARCH method, which generates an error condition that is not properly handled.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-27T10:43:00.000-04:00" comment="modified wft-332 - Changed test to match comment">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Changed tst:1444 to use obj:496 was introduced to properly look for w3svc.dll in System32/inetsrv." date="2007-07-18T12:59:00.963-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-07-18T13:02:05.118-04:00">INTERIM</status_change>
            <status_change date="2007-08-02T14:47:16.660-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="IIS major version equals 5" negate="false" test_ref="oval:org.mitre.oval:tst:3081"/>
        <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
        <criterion comment="File %windir%\System32\w3svc.dll is less than 5.0.2195.6672" negate="false" test_ref="oval:org.mitre.oval:tst:1444"/>
        <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:1443"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9329" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the AllocateGlyph function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to execute arbitrary code via unspecified request fields that are used to calculate a heap buffer size, which triggers a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2360" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2360"/>
        <description>Integer overflow in the AllocateGlyph function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to execute arbitrary code via unspecified request fields that are used to calculate a heap buffer size, which triggers a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:56.990-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:36.210-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:37.782-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9329 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:18:41.079-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:49.923-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36946"/>
            <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36579"/>
            <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36881"/>
            <criterion comment="XFree86-libs is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36895"/>
            <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36542"/>
            <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36866"/>
            <criterion comment="XFree86-twm is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36934"/>
            <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36951"/>
            <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36973"/>
            <criterion comment="XFree86-doc is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36756"/>
            <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36632"/>
            <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36469"/>
            <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36368"/>
            <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36851"/>
            <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36740"/>
            <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36985"/>
            <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36805"/>
            <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36754"/>
            <criterion comment="XFree86-xdm is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36734"/>
            <criterion comment="XFree86-sdk is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36918"/>
            <criterion comment="XFree86 is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36499"/>
            <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36402"/>
            <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36931"/>
            <criterion comment="XFree86-xfs is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36752"/>
            <criterion comment="XFree86-tools is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36976"/>
            <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36867"/>
            <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36115"/>
            <criterion comment="XFree86-xauth is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36794"/>
            <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36943"/>
            <criterion comment="XFree86-devel is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36905"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36908"/>
            <criterion comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36685"/>
            <criterion comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36662"/>
            <criterion comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36309"/>
            <criterion comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36944"/>
            <criterion comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36641"/>
            <criterion comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36607"/>
            <criterion comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36651"/>
            <criterion comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36977"/>
            <criterion comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36939"/>
            <criterion comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36385"/>
            <criterion comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36979"/>
            <criterion comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36933"/>
            <criterion comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36742"/>
            <criterion comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36873"/>
            <criterion comment="xorg-x11 is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36932"/>
            <criterion comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:35995"/>
            <criterion comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36941"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-server-randr-source is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:37018"/>
            <criterion comment="xorg-x11-server-Xnest is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36836"/>
            <criterion comment="xorg-x11-server-Xvfb is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36063"/>
            <criterion comment="xorg-x11-server-Xdmx is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36029"/>
            <criterion comment="xorg-x11-server is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36986"/>
            <criterion comment="xorg-x11-server-sdk is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36380"/>
            <criterion comment="xorg-x11-server-Xephyr is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36055"/>
            <criterion comment="xorg-x11-server-Xorg is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36359"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9327" version="5" class="vulnerability">
      <metadata>
        <title>Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system crash) or gain privileges by attempting to open an anonymous pipe via a /proc/*/fd/ pathname.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3547"/>
        <description>Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system crash) or gain privileges by attempting to open an anonymous pipe via a /proc/*/fd/ pathname.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:09:30.003-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:35.536-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:37.152-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9327 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:01.298-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:49.109-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39591"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39396"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39586"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39171"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39299"/>
            <criterion comment="kernel is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39151"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39468"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39460"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:38810"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.16.EL" test_ref="oval:org.mitre.oval:tst:39593"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.16.EL" test_ref="oval:org.mitre.oval:tst:39549"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.16.EL" test_ref="oval:org.mitre.oval:tst:39548"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.16.EL" test_ref="oval:org.mitre.oval:tst:39554"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.16.EL" test_ref="oval:org.mitre.oval:tst:39686"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.16.EL" test_ref="oval:org.mitre.oval:tst:39415"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.16.EL" test_ref="oval:org.mitre.oval:tst:39557"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.16.EL" test_ref="oval:org.mitre.oval:tst:39560"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.16.EL" test_ref="oval:org.mitre.oval:tst:39587"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.16.EL" test_ref="oval:org.mitre.oval:tst:39607"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.16.EL" test_ref="oval:org.mitre.oval:tst:38910"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39665"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39142"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39538"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39699"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39518"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39350"/>
            <criterion comment="kernel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39738"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39663"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39536"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39189"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39141"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39179"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9325" version="5" class="vulnerability">
      <metadata>
        <title>The sys_add_key function in the keyring code in Linux kernel 2.6.16.1 and 2.6.17-rc1, and possibly earlier versions, allows local users to cause a denial of service (OOPS) via keyctl requests that add a key to a user key instead of a keyring key, which causes an invalid dereference in the __keyring_search_one function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1522" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1522"/>
        <description>The sys_add_key function in the keyring code in Linux kernel 2.6.16.1 and 2.6.17-rc1, and possibly earlier versions, allows local users to cause a denial of service (OOPS) via keyctl requests that add a key to a user key instead of a keyring key, which causes an invalid dereference in the __keyring_search_one function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:08.618-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:35.249-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:36.801-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9325 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:39.181-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:48.665-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32235"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32371"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32703"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32314"/>
          <criterion comment="kernel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32614"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32295"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32310"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32611"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32305"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9323" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to execute arbitrary code via an XBM image file that ends in a large number of spaces instead of the expected end tag.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2701" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2701"/>
        <description>Heap-based buffer overflow in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to execute arbitrary code via an XBM image file that ends in a large number of spaces instead of the expected end tag.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:36.592-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:34.736-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:36.316-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9323 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:18:52.604-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:48.055-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32169"/>
            <criterion comment="mozilla is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:31729"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32242"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32151"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32014"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32144"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32068"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32248"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32293"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32044"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32244"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.7" test_ref="oval:org.mitre.oval:tst:32012"/>
            <criterion comment="mozilla is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:31897"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32300"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32226"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32289"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.7" test_ref="oval:org.mitre.oval:tst:32170"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32150"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32302"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32090"/>
            <criterion comment="firefox is earlier than 0:1.0.7-1.4.1" test_ref="oval:org.mitre.oval:tst:32147"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32209"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32088"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9321" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in FreeType2 before 2.3.6 allows context-dependent attackers to execute arbitrary code via a crafted set of 16-bit length values within the Private dictionary table in a Printer Font Binary (PFB) file, which triggers a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1806" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1806"/>
        <description>Integer overflow in FreeType2 before 2.3.6 allows context-dependent attackers to execute arbitrary code via a crafted set of 16-bit length values within the Private dictionary table in a Printer Font Binary (PFB) file, which triggers a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:09.584-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:34.314-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:35.937-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9321 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:23.944-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:47.515-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="freetype is earlier than 0:2.1.4-10.el3" test_ref="oval:org.mitre.oval:tst:36608"/>
            <criterion comment="freetype-devel is earlier than 0:2.1.4-10.el3" test_ref="oval:org.mitre.oval:tst:36928"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="freetype is earlier than 0:2.1.9-8.el4.6" test_ref="oval:org.mitre.oval:tst:36978"/>
            <criterion comment="freetype-demos is earlier than 0:2.1.9-8.el4.6" test_ref="oval:org.mitre.oval:tst:37295"/>
            <criterion comment="freetype-utils is earlier than 0:2.1.9-8.el4.6" test_ref="oval:org.mitre.oval:tst:36877"/>
            <criterion comment="freetype-devel is earlier than 0:2.1.9-8.el4.6" test_ref="oval:org.mitre.oval:tst:37292"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="freetype is earlier than 0:2.2.1-20.el5_2" test_ref="oval:org.mitre.oval:tst:37321"/>
            <criterion comment="freetype-demos is earlier than 0:2.2.1-20.el5_2" test_ref="oval:org.mitre.oval:tst:37312"/>
            <criterion comment="freetype-devel is earlier than 0:2.2.1-20.el5_2" test_ref="oval:org.mitre.oval:tst:37160"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:932" version="1" class="vulnerability">
      <metadata>
        <title>IIS showcode.asp Sample File Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-1999-0736" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0736"/>
        <description>The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="IIS 4.0 Major Version" negate="false" test_ref="oval:org.mitre.oval:tst:3099"/>
        <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
        <criterion comment="File %windir%\System32\code.asp is less than 4.0.1381.279" negate="false" test_ref="oval:org.mitre.oval:tst:1446"/>
        <criterion comment="Patch Q232449 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:1445"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9318" version="5" class="vulnerability">
      <metadata>
        <title>The LDAP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.8 allows remote attackers to cause a denial of service (application crash) via a malformed packet, a different vulnerability than CVE-2006-5740.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1562" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1562"/>
        <description>The LDAP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.8 allows remote attackers to cause a denial of service (application crash) via a malformed packet, a different vulnerability than CVE-2006-5740.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:56.860-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:33.959-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:35.636-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9318 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:19.364-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:47.009-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-EL3.3" test_ref="oval:org.mitre.oval:tst:37624"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-EL3.3" test_ref="oval:org.mitre.oval:tst:37207"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-3.el4_7" test_ref="oval:org.mitre.oval:tst:37249"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-3.el4_7" test_ref="oval:org.mitre.oval:tst:37725"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37542"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37460"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9317" version="5" class="vulnerability">
      <metadata>
        <title>CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2383" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2383"/>
        <description>CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:23.221-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:33.701-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:35.354-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9317 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:30.527-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:46.553-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="xterm is earlier than 0:179-11.EL3" test_ref="oval:org.mitre.oval:tst:38121"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="xterm is earlier than 0:192-8.el4_7.2" test_ref="oval:org.mitre.oval:tst:37919"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="xterm is earlier than 0:215-5.el5_2.2" test_ref="oval:org.mitre.oval:tst:38031"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9315" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) 0.99.5 through 0.99.8 allow remote attackers to cause a denial of service (application crash) via a malformed packet to the (1) X.509sat or (2) Roofnet dissectors.  NOTE: Vector 2 might also lead to a hang.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1561" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1561"/>
        <description>Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) 0.99.5 through 0.99.8 allow remote attackers to cause a denial of service (application crash) via a malformed packet to the (1) X.509sat or (2) Roofnet dissectors.  NOTE: Vector 2 might also lead to a hang.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:05.445-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:33.407-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:35.007-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9315 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:40.386-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:46.007-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-EL3.3" test_ref="oval:org.mitre.oval:tst:37624"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-EL3.3" test_ref="oval:org.mitre.oval:tst:37207"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-3.el4_7" test_ref="oval:org.mitre.oval:tst:37249"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-3.el4_7" test_ref="oval:org.mitre.oval:tst:37725"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37542"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37460"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9314" version="5" class="vulnerability">
      <metadata>
        <title>libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary code via a crafted GIF file that leads to an out-of-bounds write.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3350" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3350"/>
        <description>libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary code via a crafted GIF file that leads to an out-of-bounds write.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:49.373-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:33.079-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:34.681-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9314 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:09:04.344-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:45.468-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libungif is earlier than 0:4.1.0-15.el3.3" test_ref="oval:org.mitre.oval:tst:32066"/>
            <criterion comment="libungif-devel is earlier than 0:4.1.0-15.el3.3" test_ref="oval:org.mitre.oval:tst:31940"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libungif is earlier than 0:4.1.3-1.el4.2" test_ref="oval:org.mitre.oval:tst:31956"/>
            <criterion comment="libungif-progs is earlier than 0:4.1.3-1.el4.2" test_ref="oval:org.mitre.oval:tst:32398"/>
            <criterion comment="libungif-devel is earlier than 0:4.1.3-1.el4.2" test_ref="oval:org.mitre.oval:tst:31871"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="giflib-devel is earlier than 0:4.1.3-7.1.el5_3.1" test_ref="oval:org.mitre.oval:tst:38143"/>
            <criterion comment="giflib-utils is earlier than 0:4.1.3-7.1.el5_3.1" test_ref="oval:org.mitre.oval:tst:38622"/>
            <criterion comment="giflib is earlier than 0:4.1.3-7.1.el5_3.1" test_ref="oval:org.mitre.oval:tst:38639"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9313" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the WSP dissector in Ethereal 0.10.1 to 0.10.12 allows remote attackers to cause a denial of service or corrupt memory via unknown vectors that cause Ethereal to free an invalid pointer.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3249" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3249"/>
        <description>Unspecified vulnerability in the WSP dissector in Ethereal 0.10.1 to 0.10.12 allows remote attackers to cause a denial of service or corrupt memory via unknown vectors that cause Ethereal to free an invalid pointer.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:09:39.635-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:32.788-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:34.429-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9313 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:54.081-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:45.073-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.13-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32189"/>
            <criterion comment="ethereal is earlier than 0:0.10.13-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32138"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.13-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32341"/>
            <criterion comment="ethereal is earlier than 0:0.10.13-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32202"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9311" version="5" class="vulnerability">
      <metadata>
        <title>The seqfile handling (ip6fl_get_n function in ip6_flowlabel.c) in Linux kernel 2.6 up to 2.6.18-stable allows local users to cause a denial of service (hang or oops) via unspecified manipulations that trigger an infinite loop while searching for flowlabels.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5619" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5619"/>
        <description>The seqfile handling (ip6fl_get_n function in ip6_flowlabel.c) in Linux kernel 2.6 up to 2.6.18-stable allows local users to cause a denial of service (hang or oops) via unspecified manipulations that trigger an infinite loop while searching for flowlabels.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:04.377-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:32.505-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:34.139-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9311 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:22.132-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:44.646-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33204"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33278"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33306"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32378"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33145"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33107"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32620"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32645"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33057"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9310" version="5" class="vulnerability">
      <metadata>
        <title>The php_handle_iff function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP function, allows remote attackers to cause a denial of service (infinite loop) via a -8 size value.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0524" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0524"/>
        <description>The php_handle_iff function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP function, allows remote attackers to cause a denial of service (infinite loop) via a -8 size value.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:09:55.618-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:32.053-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:33.621-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9310 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:23.526-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:43.940-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31759"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:30948"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31858"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31704"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31679"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31505"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31819"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31329"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31673"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31737"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31787"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31830"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31383"/>
            <criterion comment="php is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31557"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31541"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31697"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31847"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31523"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31779"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31261"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31733"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:931" version="2" class="vulnerability">
      <metadata>
        <title>IIS5.0 Script Source Access Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1180" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1180"/>
        <description>A typographical error in the script source access permissions for Internet Information Server (IIS) 5.0 does not properly exclude .COM files, which allows attackers with only write permissions to upload malicious .COM files, aka "Script Source Access Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-01-11T12:00:00.000-04:00" comment="modified wft-330 - changed the version of msw3prt.dll to test against from 5.5.2195.58075 to 5.0.2195.5807">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-01-20T01:08:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="IIS major version equals 5" negate="false" test_ref="oval:org.mitre.oval:tst:3081"/>
        <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
        <criterion comment="File %windir%\System32\msw3prt.dll is less than 5.0.2195.5807" negate="false" test_ref="oval:org.mitre.oval:tst:1447"/>
        <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
        <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9307" version="5" class="vulnerability">
      <metadata>
        <title>Multiple "range checking flaws" in the ISO9660 filesystem handler in Linux 2.6.11 and earlier may allow attackers to cause a denial of service or corrupt memory via a crafted filesystem.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0815" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0815"/>
        <description>Multiple "range checking flaws" in the ISO9660 filesystem handler in Linux 2.6.11 and earlier may allow attackers to cause a denial of service or corrupt memory via a crafted filesystem.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:36.138-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:31.629-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:33.218-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9307 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:02:12.811-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:43.362-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31411"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31953"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31879"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31990"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31485"/>
            <criterion comment="kernel is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32093"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31968"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32148"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31741"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31545"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31539"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31661"/>
            <criterion comment="kernel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31482"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31112"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31605"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31330"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9306" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1) pkcs11.addmodule and (2) pkcs11.deletemodule operations, which makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3076" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3076"/>
        <description>Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1) pkcs11.addmodule and (2) pkcs11.deletemodule operations, which makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:57.303-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:31.009-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:32.613-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9306 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:22.710-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:42.596-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39378"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39359"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39036"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39270"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39397"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39118"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:38444"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39284"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:38466"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39389"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nspr is earlier than 0:4.7.5-1.el4_8" test_ref="oval:org.mitre.oval:tst:39088"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:39081"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-25.el4" test_ref="oval:org.mitre.oval:tst:40299"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.5-1.el4_8" test_ref="oval:org.mitre.oval:tst:39351"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:38976"/>
            <criterion comment="firefox is earlier than 0:3.0.14-1.el4" test_ref="oval:org.mitre.oval:tst:39195"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:39181"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:39320"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:39364"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:39293"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39208"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39001"/>
            <criterion comment="nspr is earlier than 0:4.7.5-1.el5_4" test_ref="oval:org.mitre.oval:tst:39223"/>
            <criterion comment="firefox is earlier than 0:3.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39097"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.24-2.el5_4" test_ref="oval:org.mitre.oval:tst:40249"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.5-1.el5_4" test_ref="oval:org.mitre.oval:tst:39150"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39206"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9304" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in the layout engine in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allow remote attackers to cause a denial of service (crash) via unspecified vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5464" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5464"/>
        <description>Multiple unspecified vulnerabilities in the layout engine in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allow remote attackers to cause a denial of service (crash) via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:09:38.770-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:30.506-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:32.106-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9304 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:02:07.945-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:41.885-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:32940"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:33113"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:32275"/>
            <criterion comment="seamonkey is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:33128"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:32259"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:32596"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:33188"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:32780"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:33131"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:33022"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.5.el4" test_ref="oval:org.mitre.oval:tst:33198"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33241"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33268"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.8-0.1.el4" test_ref="oval:org.mitre.oval:tst:33216"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:32752"/>
            <criterion comment="seamonkey is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:32536"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:32857"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.5.el4" test_ref="oval:org.mitre.oval:tst:33185"/>
            <criterion comment="firefox is earlier than 0:1.5.0.8-0.1.el4" test_ref="oval:org.mitre.oval:tst:33140"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33088"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33118"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33171"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:32856"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33214"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9303" version="5" class="vulnerability">
      <metadata>
        <title>The CUPS service, as used in SUSE Linux before 20070720 and other Linux distributions, allows remote attackers to cause a denial of service via unspecified vectors related to an incomplete fix for CVE-2007-0720 that introduced a different denial of service problem in SSL negotiation.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4045" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4045"/>
        <description>The CUPS service, as used in SUSE Linux before 20070720 and other Linux distributions, allows remote attackers to cause a denial of service via unspecified vectors related to an incomplete fix for CVE-2007-0720 that introduced a different denial of service problem in SSL negotiation.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:15.342-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:30.237-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:31.766-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9303 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:23.669-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:41.482-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 0:1.1.17-13.3.46" test_ref="oval:org.mitre.oval:tst:35491"/>
            <criterion comment="cups is earlier than 0:1.1.17-13.3.46" test_ref="oval:org.mitre.oval:tst:35533"/>
            <criterion comment="cups-libs is earlier than 0:1.1.17-13.3.46" test_ref="oval:org.mitre.oval:tst:35218"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 0:1.1.22-0.rc1.9.20.2.el4_5.2" test_ref="oval:org.mitre.oval:tst:34735"/>
            <criterion comment="cups is earlier than 0:1.1.22-0.rc1.9.20.2.el4_5.2" test_ref="oval:org.mitre.oval:tst:35537"/>
            <criterion comment="cups-libs is earlier than 0:1.1.22-0.rc1.9.20.2.el4_5.2" test_ref="oval:org.mitre.oval:tst:35415"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9302" version="5" class="vulnerability">
      <metadata>
        <title>Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness error. NOTE: this identifier was inadvertently used by some sources to cover multiple issues that were labeled "NE2000 network driver and the socket code," but separate identifiers have been created for the individual vulnerabilities since there are sometimes different fixes; see CVE-2007-5729 and CVE-2007-5730.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1321" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1321"/>
        <description>Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness error. NOTE: this identifier was inadvertently used by some sources to cover multiple issues that were labeled "NE2000 network driver and the socket code," but separate identifiers have been created for the individual vulnerabilities since there are sometimes different fixes; see CVE-2007-5729 and CVE-2007-5730.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:01.697-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:29.954-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:31.537-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9302 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:00.261-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:41.172-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="xen-libs is earlier than 0:3.0.3-25.0.4.el5" test_ref="oval:org.mitre.oval:tst:34182"/>
          <criterion comment="xen is earlier than 0:3.0.3-25.0.4.el5" test_ref="oval:org.mitre.oval:tst:33194"/>
          <criterion comment="xen-devel is earlier than 0:3.0.3-25.0.4.el5" test_ref="oval:org.mitre.oval:tst:34003"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:930" version="2" class="vulnerability">
      <metadata>
        <title>Windows 2000 IIS Out of Process Privilege Elevation Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0869" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0869"/>
        <description>Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote attackers to gain privileges by executing an out of process application that acquires LocalSystem privileges, aka "Out of Process Privilege Elevation."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-01-11T12:00:00.000-04:00" comment="modified wft-330 - changed the version of msw3prt.dll to test against from 5.5.2195.58075 to 5.0.2195.5807">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-01-20T01:08:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="IIS major version equals 5" negate="false" test_ref="oval:org.mitre.oval:tst:3081"/>
        <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
        <criterion comment="File %windir%\System32\msw3prt.dll is less than 5.0.2195.5807" negate="false" test_ref="oval:org.mitre.oval:tst:1447"/>
        <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
        <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9295" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0300" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0300"/>
        <description>Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:06.558-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:29.768-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:31.333-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9295 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:56.654-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:40.860-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="tar is earlier than 0:1.14-9.RHEL4" test_ref="oval:org.mitre.oval:tst:32074"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9291" version="5" class="vulnerability">
      <metadata>
        <title>The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, which allows remote attackers to establish unauthorized IP connections or conduct man-in-the-middle attacks using a valid, trusted X.509 certificate.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0155" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0155"/>
        <description>The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, which allows remote attackers to establish unauthorized IP connections or conduct man-in-the-middle attacks using a valid, trusted X.509 certificate.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:09:53.215-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:29.588-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:31.138-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9291 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:18.262-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:40.601-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="ipsec-tools is earlier than 0:0.2.5-0.4" test_ref="oval:org.mitre.oval:tst:30611"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:929" version="2" class="vulnerability">
      <metadata>
        <title>Windows NT IIS Out of Process Privilege Elevation Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0869" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0869"/>
        <description>Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote attackers to gain privileges by executing an out of process application that acquires LocalSystem privileges, aka "Out of Process Privilege Elevation."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Changed tst:1448 to use obj:496 was introduced to properly look for w3svc.dll in System32/inetsrv." date="2007-07-18T12:59:00.571-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-07-18T13:02:21.945-04:00">INTERIM</status_change>
            <status_change date="2007-08-02T14:47:16.571-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="IIS 4.0 Major Version" negate="false" test_ref="oval:org.mitre.oval:tst:3099"/>
        <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
        <criterion comment="File %windir%\System32\w3svc.dll is less than 4.2.780.1" negate="false" test_ref="oval:org.mitre.oval:tst:1448"/>
        <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
        <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9283" version="5" class="vulnerability">
      <metadata>
        <title>The AIM/ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) via a filename that contains invalid UTF-8 characters.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2102" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2102"/>
        <description>The AIM/ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) via a filename that contains invalid UTF-8 characters.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:40.438-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:29.369-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:30.872-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9283 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:10:07.306-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:40.255-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gaim is earlier than 1:1.3.1-0.el3.3" test_ref="oval:org.mitre.oval:tst:32063"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gaim is earlier than 1:1.3.1-0.el4.3" test_ref="oval:org.mitre.oval:tst:31738"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9280" version="5" class="vulnerability">
      <metadata>
        <title>Firefox 1.0.6 allows attackers to cause a denial of service (crash) via a Proxy Auto-Config (PAC) script that uses an eval statement. NOTE: it is not clear whether an untrusted party has any role in triggering this issue, so it might not be a vulnerability.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3089" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3089"/>
        <description>Firefox 1.0.6 allows attackers to cause a denial of service (crash) via a Proxy Auto-Config (PAC) script that uses an eval statement. NOTE: it is not clear whether an untrusted party has any role in triggering this issue, so it might not be a vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:09:52.146-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:28.836-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:30.372-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9280 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:10:04.417-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:39.614-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32169"/>
            <criterion comment="mozilla is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:31729"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32242"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32151"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32014"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32144"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32068"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32248"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32293"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32044"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32244"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.7" test_ref="oval:org.mitre.oval:tst:32012"/>
            <criterion comment="mozilla is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:31897"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32300"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32226"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32289"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.7" test_ref="oval:org.mitre.oval:tst:32170"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32150"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32302"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32090"/>
            <criterion comment="firefox is earlier than 0:1.0.7-1.4.1" test_ref="oval:org.mitre.oval:tst:32147"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32209"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32088"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:928" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Enterprise 3 OpenSSL Kerberos Handshake Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>OpenSSL</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0112"/>
        <description>The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:59.729-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:09.352-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="openssl version is less than 0.9.7a-33.4" negate="false" test_ref="oval:org.mitre.oval:tst:1543"/>
        <criterion comment="openssl-devel version is less than 0.9.7a-33.4" negate="false" test_ref="oval:org.mitre.oval:tst:1542"/>
        <criterion comment="openssl-perl version is less than 0.9.7a-33.4" negate="false" test_ref="oval:org.mitre.oval:tst:1541"/>
        <criterion comment="openssl096b version is less than 0.9.6b-16" negate="false" test_ref="oval:org.mitre.oval:tst:1540"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9279" version="5" class="vulnerability">
      <metadata>
        <title>PHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read arbitrary files via a file: URL argument to the curl_init function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1392" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1392"/>
        <description>PHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read arbitrary files via a file: URL argument to the curl_init function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:35.170-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:28.378-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:29.877-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9279 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:43.842-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:38.998-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31759"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:30948"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31858"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31704"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31679"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31505"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31819"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31329"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31673"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31737"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31787"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31830"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31383"/>
            <criterion comment="php is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31557"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31541"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31697"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31847"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31523"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31779"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31261"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31733"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9278" version="5" class="vulnerability">
      <metadata>
        <title>The kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos administration daemon (kadmind) in MIT Kerberos 5 (krb5) 1.5 through 1.6.2 does not properly check return values when the policy does not exist, which might allow remote authenticated users with the "modify policy" privilege to execute arbitrary code via unspecified vectors that trigger a write to an uninitialized pointer.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4000" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4000"/>
        <description>The kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos administration daemon (kadmind) in MIT Kerberos 5 (krb5) 1.5 through 1.6.2 does not properly check return values when the policy does not exist, which might allow remote authenticated users with the "modify policy" privilege to execute arbitrary code via unspecified vectors that trigger a write to an uninitialized pointer.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:55.413-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:28.143-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:29.571-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9278 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:43.546-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:38.662-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="krb5-workstation is earlier than 0:1.5-29" test_ref="oval:org.mitre.oval:tst:34835"/>
          <criterion comment="krb5 is earlier than 0:1.5-29" test_ref="oval:org.mitre.oval:tst:35134"/>
          <criterion comment="krb5-libs is earlier than 0:1.5-29" test_ref="oval:org.mitre.oval:tst:34559"/>
          <criterion comment="krb5-server is earlier than 0:1.5-29" test_ref="oval:org.mitre.oval:tst:35091"/>
          <criterion comment="krb5-devel is earlier than 0:1.5-29" test_ref="oval:org.mitre.oval:tst:34927"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9270" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the PCNFSD dissector in Wireshark 0.8.20 through 1.0.7 allows remote attackers to cause a denial of service (crash) via crafted PCNFSD packets.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1829" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1829"/>
        <description>Unspecified vulnerability in the PCNFSD dissector in Wireshark 0.8.20 through 1.0.7 allows remote attackers to cause a denial of service (crash) via crafted PCNFSD packets.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:32.952-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:27.814-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:29.169-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9270 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:10:10.157-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:38.197-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.8-EL3.1" test_ref="oval:org.mitre.oval:tst:38258"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.8-EL3.1" test_ref="oval:org.mitre.oval:tst:38534"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.8-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:38635"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.8-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:38709"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.8-1.el5_3.1" test_ref="oval:org.mitre.oval:tst:38670"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.8-1.el5_3.1" test_ref="oval:org.mitre.oval:tst:38619"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9262" version="5" class="vulnerability">
      <metadata>
        <title>Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow context-dependent attackers to cause a denial of service (application crash) via crafted (1) Notation or (2) Enumeration attribute types in an XML file, as demonstrated by the Codenomicon XML fuzzing framework.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2416" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2416"/>
        <description>Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow context-dependent attackers to cause a denial of service (application crash) via crafted (1) Notation or (2) Enumeration attribute types in an XML file, as demonstrated by the Codenomicon XML fuzzing framework.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:38.791-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:27.463-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:28.752-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9262 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:10:09.191-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:37.597-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libxml2-devel is earlier than 0:2.5.10-15" test_ref="oval:org.mitre.oval:tst:39096"/>
            <criterion comment="libxml2-python is earlier than 0:2.5.10-15" test_ref="oval:org.mitre.oval:tst:39077"/>
            <criterion comment="libxml-devel is earlier than 1:1.8.17-9.3" test_ref="oval:org.mitre.oval:tst:38476"/>
            <criterion comment="libxml is earlier than 1:1.8.17-9.3" test_ref="oval:org.mitre.oval:tst:38526"/>
            <criterion comment="libxml2 is earlier than 0:2.5.10-15" test_ref="oval:org.mitre.oval:tst:39158"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libxml2-devel is earlier than 0:2.6.16-12.7" test_ref="oval:org.mitre.oval:tst:39083"/>
            <criterion comment="libxml2-python is earlier than 0:2.6.16-12.7" test_ref="oval:org.mitre.oval:tst:38887"/>
            <criterion comment="libxml2 is earlier than 0:2.6.16-12.7" test_ref="oval:org.mitre.oval:tst:39128"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libxml2-devel is earlier than 0:2.6.26-2.1.2.8" test_ref="oval:org.mitre.oval:tst:39183"/>
            <criterion comment="libxml2-python is earlier than 0:2.6.26-2.1.2.8" test_ref="oval:org.mitre.oval:tst:38679"/>
            <criterion comment="libxml2 is earlier than 0:2.6.26-2.1.2.8" test_ref="oval:org.mitre.oval:tst:39178"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9260" version="5" class="vulnerability">
      <metadata>
        <title>Konqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window or tab whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0078" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0078"/>
        <description>The KDE screen saver in KDE before 3.0.5 does not properly check the return value from a certain function call, which allows attackers with physical access to cause a crash and access the desktop session.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:55.973-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:27.246-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:28.516-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9260 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:23.701-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:37.274-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kdebase is earlier than 6:3.1.3-5.8" test_ref="oval:org.mitre.oval:tst:31113"/>
          <criterion comment="kdebase-devel is earlier than 6:3.1.3-5.8" test_ref="oval:org.mitre.oval:tst:31092"/>
          <criterion comment="kdelibs is earlier than 6:3.1.3-6.9" test_ref="oval:org.mitre.oval:tst:30244"/>
          <criterion comment="kdelibs-devel is earlier than 6:3.1.3-6.9" test_ref="oval:org.mitre.oval:tst:30826"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:926" version="4" class="vulnerability">
      <metadata>
        <title>IE URLMON Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0113" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0113"/>
        <description>Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via an HTTP response containing long values in (1) Content-type and (2) Content-encoding fields.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2004-09-22T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-09-22T11:10:00.000-04:00" comment="Replaced IE cumulative patch IDs to correspond to the original IDs">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2004-10-06T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:46.767-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:28.315-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
        <criterion comment="the version of mshtml.dll is less than 5.50.4926.2500" negate="false" test_ref="oval:org.mitre.oval:tst:1454"/>
        <criterion comment="File %windir%\system32\urlmon.dll version is less than 5.50.4927.2100" negate="false" test_ref="oval:org.mitre.oval:tst:1449"/>
        <criterion comment="the patch q813489 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3114"/>
        <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        <criterion comment="the patch q832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2588"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9257" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3120" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3120"/>
        <description>Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:51.725-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:26.983-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:28.282-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9257 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:34.879-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:36.892-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="lynx is earlier than 0:2.8.5-11.1" test_ref="oval:org.mitre.oval:tst:31818"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="lynx is earlier than 0:2.8.5-18.1" test_ref="oval:org.mitre.oval:tst:32386"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9256" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 3 before 3.0.11 associates an incorrect principal with a file: URL loaded through the location bar, which allows user-assisted remote attackers to bypass intended access restrictions and read files via a crafted HTML document, aka a "file-URL-to-file-URL scripting" attack.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1839" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1839"/>
        <description>Mozilla Firefox 3 before 3.0.11 associates an incorrect principal with a file: URL loaded through the location bar, which allows user-assisted remote attackers to bypass intended access restrictions and read files via a crafted HTML document, aka a "file-URL-to-file-URL scripting" attack.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:31.549-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:26.732-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:27.970-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9256 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:02.715-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:36.484-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.11-4.el4" test_ref="oval:org.mitre.oval:tst:38689"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38771"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38371"/>
            <criterion comment="firefox is earlier than 0:3.0.11-2.el5_3" test_ref="oval:org.mitre.oval:tst:38682"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38718"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9254" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote attackers to execute arbitrary code via (1) a crafted DCM image, which results in a heap-based overflow in the ReadDCMImage function, or (2) the (a) colors or (b) comments field in a crafted XWD image, which results in a heap-based overflow in the ReadXWDImage function, different issues than CVE-2007-1667.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1797" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1797"/>
        <description>Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote attackers to execute arbitrary code via (1) a crafted DCM image, which results in a heap-based overflow in the ReadDCMImage function, or (2) the (a) colors or (b) comments field in a crafted XWD image, which results in a heap-based overflow in the ReadXWDImage function, different issues than CVE-2007-1667.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:35.750-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:26.330-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:27.557-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9254 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:08:40.980-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:35.837-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36023"/>
            <criterion comment="ImageMagick is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36184"/>
            <criterion comment="ImageMagick-perl is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36260"/>
            <criterion comment="ImageMagick-devel is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36208"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36056"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:36311"/>
            <criterion comment="ImageMagick is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:36459"/>
            <criterion comment="ImageMagick-perl is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:36349"/>
            <criterion comment="ImageMagick-devel is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:35927"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:36106"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36419"/>
            <criterion comment="ImageMagick is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36360"/>
            <criterion comment="ImageMagick-perl is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36388"/>
            <criterion comment="ImageMagick-devel is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:35921"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36133"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9251" version="5" class="vulnerability">
      <metadata>
        <title>Integer underflow in the cpuset_tasks_read function in the Linux kernel before 2.6.20.13, and 2.6.21.x before 2.6.21.4, when the cpuset filesystem is mounted, allows local users to obtain kernel memory contents by using a large offset when reading the /dev/cpuset/tasks file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2875" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2875"/>
        <description>Integer underflow in the cpuset_tasks_read function in the Linux kernel before 2.6.20.13, and 2.6.21.x before 2.6.21.4, when the cpuset filesystem is mounted, allows local users to obtain kernel memory contents by using a large offset when reading the /dev/cpuset/tasks file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:50.971-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:25.944-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:27.238-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9251 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:42.188-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:35.425-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34804"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34557"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34837"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34795"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34562"/>
          <criterion comment="kernel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34357"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34379"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34873"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34870"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34374"/>
          <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34337"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:925" version="5" class="vulnerability">
      <metadata>
        <title>MS IE HTML Directive Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0022" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0022"/>
        <description>Buffer overflow in the implementation of an HTML directive in mshtml.dll in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via a web page that specifies embedded ActiveX controls in a way that causes 2 Unicode strings to be concatenated.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-29T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-05-25T04:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T04:00:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2004-09-22T04:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-09-22T04:01:00.000-04:00" comment="Replaced IE cumulative patch IDs to correspond to the original IDs">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2004-10-06T04:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="Changed IE registry test to wrt-18">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:925 - extra operators were removed." date="2014-01-14T17:12:00.581-05:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2014-01-14T17:14:13.577-05:00">INTERIM</status_change>
            <status_change date="2014-02-03T04:04:55.111-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft Internet Explorer 6 is installed" definition_ref="oval:org.mitre.oval:def:563"/>
        <criterion comment="File %windir%\system32\mshtml.dll version is less than 6.0.2713.1100" test_ref="oval:org.mitre.oval:tst:1451"/>
        <criterion negate="true" comment="Patch Q316059.exe Installed" test_ref="oval:org.mitre.oval:tst:1458"/>
        <criterion negate="true" comment="Patch Q319282 Installed" test_ref="oval:org.mitre.oval:tst:1457"/>
        <criterion negate="true" comment="the patch q321232 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3119"/>
        <criterion negate="true" comment="the patch q323759 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3118"/>
        <criterion negate="true" comment="the patch q328970 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3117"/>
        <criterion negate="true" comment="the patch q324929 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3116"/>
        <criterion negate="true" comment="the patch q810847 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3115"/>
        <criterion negate="true" comment="the patch q813489 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3114"/>
        <criterion negate="true" comment="the patch q818529 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion negate="true" comment="the patch q822925 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion negate="true" comment="the patch q828750 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion negate="true" comment="the patch q824145 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3110"/>
        <criterion negate="true" comment="the patch q832894 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:2588"/>
        <criterion comment="Use Machine Settings" test_ref="oval:org.mitre.oval:tst:1456"/>
        <criterion comment="Run ActiveX Controls and Plugins Allowed In At Least One Zone" test_ref="oval:org.mitre.oval:tst:1450"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9248" version="5" class="vulnerability">
      <metadata>
        <title>The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service (CPU consumption).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1891" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1891"/>
        <description>The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service (CPU consumption).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:48.147-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:25.344-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:26.272-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9248 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:39.622-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:34.829-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-devel is earlier than 0:2.0.46-75.ent" test_ref="oval:org.mitre.oval:tst:39033"/>
            <criterion comment="mod_ssl is earlier than 0:2.0.46-75.ent" test_ref="oval:org.mitre.oval:tst:38392"/>
            <criterion comment="httpd is earlier than 0:2.0.46-75.ent" test_ref="oval:org.mitre.oval:tst:39071"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-suexec is earlier than 0:2.0.52-41.ent.6" test_ref="oval:org.mitre.oval:tst:39448"/>
            <criterion comment="httpd-manual is earlier than 0:2.0.52-41.ent.6" test_ref="oval:org.mitre.oval:tst:39501"/>
            <criterion comment="httpd-devel is earlier than 0:2.0.52-41.ent.6" test_ref="oval:org.mitre.oval:tst:38802"/>
            <criterion comment="mod_ssl is earlier than 0:2.0.52-41.ent.6" test_ref="oval:org.mitre.oval:tst:39716"/>
            <criterion comment="httpd is earlier than 0:2.0.52-41.ent.6" test_ref="oval:org.mitre.oval:tst:39551"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-manual is earlier than 0:2.2.3-22.el5_3.2" test_ref="oval:org.mitre.oval:tst:38846"/>
            <criterion comment="httpd-devel is earlier than 0:2.2.3-22.el5_3.2" test_ref="oval:org.mitre.oval:tst:38761"/>
            <criterion comment="mod_ssl is earlier than 0:2.2.3-22.el5_3.2" test_ref="oval:org.mitre.oval:tst:38385"/>
            <criterion comment="httpd is earlier than 0:2.2.3-22.el5_3.2" test_ref="oval:org.mitre.oval:tst:38816"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9241" version="5" class="vulnerability">
      <metadata>
        <title>nsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to bypass the same-origin policy and read XML data from another domain via a cross-domain redirect.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0776" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0776"/>
        <description>nsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to bypass the same-origin policy and read XML data from another domain via a cross-domain redirect.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:06.871-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:24.802-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:25.723-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9241 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:47.218-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:34.140-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38413"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38419"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38110"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38217"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:37995"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:37833"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38347"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38410"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:37953"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38386"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:37842"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-19.el4" test_ref="oval:org.mitre.oval:tst:38238"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:38355"/>
            <criterion comment="firefox is earlier than 0:3.0.7-1.el4" test_ref="oval:org.mitre.oval:tst:38405"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:38148"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:38132"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:38204"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:38364"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:38168"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:37685"/>
            <criterion comment="firefox is earlier than 0:3.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:38372"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.21-1.el5" test_ref="oval:org.mitre.oval:tst:37944"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:38365"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9240" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote attackers to use certain redirect sequences to spoof the security lock icon that makes a web page appear to be encrypted.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0761" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0761"/>
        <description>Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote attackers to use certain redirect sequences to spoof the security lock icon that makes a web page appear to be encrypted.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:24.383-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:24.322-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:25.415-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9240 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:58.477-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:33.617-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mozilla-js-debugger is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30799"/>
          <criterion comment="mozilla is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30278"/>
          <criterion comment="mozilla-chat is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30755"/>
          <criterion comment="mozilla-mail is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30570"/>
          <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30230"/>
          <criterion comment="mozilla-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30288"/>
          <criterion comment="mozilla-nss is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30323"/>
          <criterion comment="mozilla-nss-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30339"/>
          <criterion comment="mozilla-nspr is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30813"/>
          <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30660"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:924" version="1" class="vulnerability">
      <metadata>
        <title>Windows Server 2003 ASN.1 Library Double-free Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft ASN.1 Library</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0123" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0123"/>
        <description>Double free vulnerability in the ASN.1 library as used in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service and possibly execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Software section">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="the version of msasn1.dll is less than 5.2.3790.139" test_ref="oval:org.mitre.oval:tst:1452"/>
        <criterion negate="true" comment="the patch kb835732 is installed" test_ref="oval:org.mitre.oval:tst:1510"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9238" version="5" class="vulnerability">
      <metadata>
        <title>The "record packet parsing" in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 allows remote attackers to cause a denial of service, possibly related to padding bytes in gnutils_cipher.c.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1431" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1431"/>
        <description>The "record packet parsing" in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 allows remote attackers to cause a denial of service, possibly related to padding bytes in gnutils_cipher.c.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:27.164-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:24.129-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:25.207-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9238 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:16:57.140-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:33.315-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="gnutls is earlier than 0:1.0.20-3.2.1" test_ref="oval:org.mitre.oval:tst:31862"/>
          <criterion comment="gnutls-devel is earlier than 0:1.0.20-3.2.1" test_ref="oval:org.mitre.oval:tst:31682"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9233" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in the do_setlk function in fs/nfs/file.c in the Linux kernel before 2.6.26 allows local users to cause a denial of service (crash) via vectors resulting in an interrupted RPC call that leads to a stray FL_POSIX lock, related to improper handling of a race between fcntl and close in the EINTR case.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4307" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4307"/>
        <description>Race condition in the do_setlk function in fs/nfs/file.c in the Linux kernel before 2.6.26 allows local users to cause a denial of service (crash) via vectors resulting in an interrupted RPC call that leads to a stray FL_POSIX lock, related to improper handling of a race between fcntl and close in the EINTR case.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:10.304-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:23.592-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:24.666-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9233 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:38.991-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:32.642-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38437"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38348"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:37805"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38116"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38721"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38384"/>
            <criterion comment="kernel is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38346"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38490"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38262"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38289"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38302"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38663"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38680"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38674"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38654"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38700"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38368"/>
            <criterion comment="kernel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38726"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38390"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38547"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38412"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38701"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38129"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9232" version="5" class="vulnerability">
      <metadata>
        <title>yum-rhn-plugin in Red Hat Network Client Tools (aka rhn-client-tools) on Red Hat Enterprise Linux (RHEL) 5 and Fedora uses world-readable permissions for the /var/spool/up2date/loginAuth.pkl file, which allows local users to access the Red Hat Network profile, and possibly prevent future security updates, by leveraging authentication data from this file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1439" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1439"/>
        <description>yum-rhn-plugin in Red Hat Network Client Tools (aka rhn-client-tools) on Red Hat Enterprise Linux (RHEL) 5 and Fedora uses world-readable permissions for the /var/spool/up2date/loginAuth.pkl file, which allows local users to access the Red Hat Network profile, and possibly prevent future security updates, by leveraging authentication data from this file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:01.362-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:23.372-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:24.424-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9232 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:47:12.010-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:32.199-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="rhn-check is earlier than 0:0.4.20-33.el5_5.2" test_ref="oval:org.mitre.oval:tst:40577"/>
          <criterion comment="rhn-setup is earlier than 0:0.4.20-33.el5_5.2" test_ref="oval:org.mitre.oval:tst:40438"/>
          <criterion comment="rhn-client-tools is earlier than 0:0.4.20-33.el5_5.2" test_ref="oval:org.mitre.oval:tst:39919"/>
          <criterion comment="rhn-setup-gnome is earlier than 0:0.4.20-33.el5_5.2" test_ref="oval:org.mitre.oval:tst:40563"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9231" version="5" class="vulnerability">
      <metadata>
        <title>The install function in Firefox 1.0.3 allows remote web sites on the browser's whitelist, such as update.mozilla.org or addon.mozilla.org, to execute arbitrary Javascript with chrome privileges, leading to arbitrary code execution on the system when combined with vulnerabilities such as CVE-2005-1476, as demonstrated using a javascript: URL as the package icon and a cross-site scripting (XSS) attack on a vulnerable whitelist site.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1477" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1477"/>
        <description>The install function in Firefox 1.0.3 allows remote web sites on the browser's whitelist, such as update.mozilla.org or addon.mozilla.org, to execute arbitrary Javascript with chrome privileges, leading to arbitrary code execution on the system when combined with vulnerabilities such as CVE-2005-1476, as demonstrated using a javascript: URL as the package icon and a cross-site scripting (XSS) attack on a vulnerable whitelist site.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:29.236-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:22.827-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:23.898-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9231 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:56.997-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:31.566-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31531"/>
            <criterion comment="mozilla is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31619"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31225"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31917"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31644"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31625"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31435"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31816"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31450"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31901"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31590"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.5" test_ref="oval:org.mitre.oval:tst:31571"/>
            <criterion comment="mozilla is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31860"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31894"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31245"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31913"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.5" test_ref="oval:org.mitre.oval:tst:31692"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31986"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31365"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31868"/>
            <criterion comment="firefox is earlier than 0:1.0.4-1.4.1" test_ref="oval:org.mitre.oval:tst:31311"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:30985"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31723"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:923" version="5" class="vulnerability">
      <metadata>
        <title>Zone Spoofing through Malformed Web Page Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0190" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0190"/>
        <description>Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code under fewer security restrictions via a malformed web page that requires NetBIOS connectivity, aka "Zone Spoofing through Malformed Web Page" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-30T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-05-25T04:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T04:00:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2004-09-22T04:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-09-22T04:01:00.000-04:00" comment="Replaced IE cumulative patch IDs to correspond to the original IDs">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2004-10-06T04:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="Changed IE registry test to wrt-18">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:923 - extra operators were removed." date="2014-01-14T17:12:00.581-05:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2014-01-14T17:14:13.411-05:00">INTERIM</status_change>
            <status_change date="2014-02-03T04:04:54.970-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="File %windir%\system32\mshtml.dll version is less than 6.0.2716.2200" test_ref="oval:org.mitre.oval:tst:1453"/>
        <criterion negate="true" comment="the patch q321232 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3119"/>
        <criterion negate="true" comment="the patch q323759 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3118"/>
        <criterion negate="true" comment="the patch q328970 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3117"/>
        <criterion negate="true" comment="the patch q324929 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3116"/>
        <criterion negate="true" comment="the patch q810847 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3115"/>
        <criterion negate="true" comment="the patch q813489 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3114"/>
        <criterion negate="true" comment="the patch q818529 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion negate="true" comment="the patch q822925 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion negate="true" comment="the patch q828750 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion negate="true" comment="the patch q824145 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3110"/>
        <criterion negate="true" comment="the patch q832894 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:2588"/>
        <extend_definition comment="Microsoft Internet Explorer 6 is installed" definition_ref="oval:org.mitre.oval:def:563"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:922" version="4" class="vulnerability">
      <metadata>
        <title>IE Slash Characters in Type Property Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0344" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0344"/>
        <description>Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via / (slash) characters in the Type property of an Object tag in a web page.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-29T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2004-09-22T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-09-22T11:10:00.000-04:00" comment="Replaced IE cumulative patch IDs to correspond to the original IDs">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2004-10-06T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:46.507-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:28.218-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
        <criterion comment="the version of mshtml.dll is less than 5.50.4926.2500" negate="false" test_ref="oval:org.mitre.oval:tst:1454"/>
        <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        <criterion comment="the patch q832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2588"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9214" version="5" class="vulnerability">
      <metadata>
        <title>The Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as used in SUSE openSUSE, SUSE Linux Enterprise Server (SLES), Fedora, and possibly other operating systems, uses world-writable permissions for the socket file (aka /var/run/multipathd.sock), which allows local users to send arbitrary commands to the multipath daemon.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0115" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0115"/>
        <description>The Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as used in SUSE openSUSE, SUSE Linux Enterprise Server (SLES), Fedora, and possibly other operating systems, uses world-writable permissions for the socket file (aka /var/run/multipathd.sock), which allows local users to send arbitrary commands to the multipath daemon.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:06.750-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:22.592-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:23.648-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9214 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:46.094-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:31.179-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="device-mapper-multipath is earlier than 0:0.4.5-31.el4_7.1" test_ref="oval:org.mitre.oval:tst:38584"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kpartx is earlier than 0:0.4.7-23.el5_3.2" test_ref="oval:org.mitre.oval:tst:38470"/>
            <criterion comment="device-mapper-multipath is earlier than 0:0.4.7-23.el5_3.2" test_ref="oval:org.mitre.oval:tst:38587"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9210" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the hrtimer_forward function (hrtimer.c) in Linux kernel 2.6.21-rc4, when running on 64-bit systems, allows local users to cause a denial of service (infinite loop) via a timer with a large expiry value, which causes the timer to always be expired.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6712"/>
        <description>Integer overflow in the hrtimer_forward function (hrtimer.c) in Linux kernel 2.6.21-rc4, when running on 64-bit systems, allows local users to cause a denial of service (infinite loop) via a timer with a large expiry value, which causes the timer to always be expired.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:40.072-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:22.280-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:23.318-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9210 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:47:18.319-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:30.733-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36697"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36610"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36727"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:35799"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:35977"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36772"/>
          <criterion comment="kernel is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36502"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36670"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36665"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:35765"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36539"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36637"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:921" version="5" class="vulnerability">
      <metadata>
        <title>IE File Execution User-prompt Bypass Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0727" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0727"/>
        <description>Internet Explorer 6.0 allows remote attackers to execute arbitrary code by modifying the Content-Disposition and Content-Type header fields in a way that causes Internet Explorer to believe that the file is safe to open without prompting the user, aka the "File Execution Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-29T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-05-25T04:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T04:00:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2004-09-22T04:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-09-22T04:01:00.000-04:00" comment="Replaced IE cumulative patch IDs to correspond to the original IDs">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2004-10-06T04:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="Changed IE registry test to wrt-18">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:921 - extra operators were removed." date="2014-01-14T17:12:00.581-05:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2014-01-14T17:14:13.076-05:00">INTERIM</status_change>
            <status_change date="2014-02-03T04:04:54.738-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 6 is installed" definition_ref="oval:org.mitre.oval:def:563"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.2712.0300" test_ref="oval:org.mitre.oval:tst:1460"/>
        <criterion negate="true" comment="Patch Q313675 Installed" test_ref="oval:org.mitre.oval:tst:1459"/>
        <criterion negate="true" comment="Patch Q316059.exe Installed" test_ref="oval:org.mitre.oval:tst:1458"/>
        <criterion negate="true" comment="Patch Q319282 Installed" test_ref="oval:org.mitre.oval:tst:1457"/>
        <criterion negate="true" comment="the patch q321232 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3119"/>
        <criterion negate="true" comment="the patch q323759 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3118"/>
        <criterion negate="true" comment="the patch q328970 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3117"/>
        <criterion negate="true" comment="the patch q324929 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3116"/>
        <criterion negate="true" comment="the patch q810847 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3115"/>
        <criterion negate="true" comment="the patch q813489 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3114"/>
        <criterion negate="true" comment="the patch q818529 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion negate="true" comment="the patch q822925 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion negate="true" comment="the patch q828750 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion negate="true" comment="the patch q824145 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:3110"/>
        <criterion negate="true" comment="the patch q832894 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:2588"/>
        <criterion comment="Use Machine Settings" test_ref="oval:org.mitre.oval:tst:1456"/>
        <criterion comment="File Downloads Allowed In At Least One Zone" test_ref="oval:org.mitre.oval:tst:1455"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9209" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the RPC library (lib/rpc/rpc_dtablesize.c) used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.2.2, and probably other versions before 1.3, when running on systems whose unistd.h does not define the FD_SETSIZE macro, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering a large number of open file descriptors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0948" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0948"/>
        <description>Buffer overflow in the RPC library (lib/rpc/rpc_dtablesize.c) used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.2.2, and probably other versions before 1.3, when running on systems whose unistd.h does not define the FD_SETSIZE macro, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering a large number of open file descriptors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:15.007-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:21.990-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:23.011-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9209 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:59.777-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:30.425-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="krb5-workstation is earlier than 0:1.2.7-68" test_ref="oval:org.mitre.oval:tst:36272"/>
          <criterion comment="krb5 is earlier than 0:1.2.7-68" test_ref="oval:org.mitre.oval:tst:36493"/>
          <criterion comment="krb5-libs is earlier than 0:1.2.7-68" test_ref="oval:org.mitre.oval:tst:36531"/>
          <criterion comment="krb5-server is earlier than 0:1.2.7-68" test_ref="oval:org.mitre.oval:tst:36304"/>
          <criterion comment="krb5-devel is earlier than 0:1.2.7-68" test_ref="oval:org.mitre.oval:tst:36522"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9204" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in Linux kernel before 2.4.22 allows local users to gain privileges, related to "R128 DRI limits checking."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0003" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0003"/>
        <description>Unknown vulnerability in Linux kernel before 2.4.22 allows local users to gain privileges, related to "R128 DRI limits checking."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:05.187-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:21.715-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:22.711-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9204 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:06.392-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:30.060-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30346"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30006"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30702"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30513"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30280"/>
          <criterion comment="kernel is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30056"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30508"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30654"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30307"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9202" version="5" class="vulnerability">
      <metadata>
        <title>Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5461"/>
        <description>Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:53.985-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:21.409-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:22.387-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9202 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:47:10.562-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:29.628-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" test_ref="oval:org.mitre.oval:tst:35985"/>
          <criterion comment="tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" test_ref="oval:org.mitre.oval:tst:35572"/>
          <criterion comment="tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" test_ref="oval:org.mitre.oval:tst:35569"/>
          <criterion comment="tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" test_ref="oval:org.mitre.oval:tst:35862"/>
          <criterion comment="tomcat5-webapps is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" test_ref="oval:org.mitre.oval:tst:35936"/>
          <criterion comment="tomcat5 is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" test_ref="oval:org.mitre.oval:tst:35526"/>
          <criterion comment="tomcat5-jasper is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" test_ref="oval:org.mitre.oval:tst:36099"/>
          <criterion comment="tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" test_ref="oval:org.mitre.oval:tst:35716"/>
          <criterion comment="tomcat5-server-lib is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" test_ref="oval:org.mitre.oval:tst:35676"/>
          <criterion comment="tomcat5-common-lib is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" test_ref="oval:org.mitre.oval:tst:35522"/>
          <criterion comment="tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" test_ref="oval:org.mitre.oval:tst:36027"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9201" version="5" class="vulnerability">
      <metadata>
        <title>Use-after-free vulnerability in the fasync_helper function in fs/fcntl.c in the Linux kernel before 2.6.33-rc4-git1 allows local users to gain privileges via vectors that include enabling O_ASYNC (aka FASYNC or FIOASYNC) on a locked file, and then closing this file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4141" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4141"/>
        <description>Use-after-free vulnerability in the fasync_helper function in fs/fcntl.c in the Linux kernel before 2.6.33-rc4-git1 allows local users to gain privileges via vectors that include enabling O_ASYNC (aka FASYNC or FIOASYNC) on a locked file, and then closing this file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:17.944-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:21.069-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:22.002-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9201 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:21.422-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:28.710-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40050"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39464"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39090"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40063"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39443"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39703"/>
          <criterion comment="kernel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39080"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39862"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40057"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40029"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39849"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40039"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9200" version="5" class="vulnerability">
      <metadata>
        <title>The ext4_isize function in fs/ext4/ext4.h in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 uses the i_size_high structure member during operations on arbitrary types of files, which allows local users to cause a denial of service (CPU consumption and error-message flood) by attempting to mount a crafted ext4 filesystem.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0747" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0747"/>
        <description>The ext4_isize function in fs/ext4/ext4.h in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 uses the i_size_high structure member during operations on arbitrary types of files, which allows local users to cause a denial of service (CPU consumption and error-message flood) by attempting to mount a crafted ext4 filesystem.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:03.324-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:20.388-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:21.678-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9200 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:27.566-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:28.295-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38255"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38332"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39122"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39058"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39247"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39145"/>
          <criterion comment="kernel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38795"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38831"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38585"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39130"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38567"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39245"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:920" version="3" class="vulnerability">
      <metadata>
        <title>IE Cached Content Command Execution Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0002" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0002"/>
        <description>Internet Explorer 5.5 and earlier allows remote attackers to obtain the physical location of cached content and open the content in the Local Computer Zone, then use compiled HTML help (.chm) files to execute arbitrary programs.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-29T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:47.240-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:28.132-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Internet Explorer 5.5 Installed">
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:1466"/>
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:1465"/>
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:1464"/>
        </criteria>
        <criterion comment="File %windir%\system32\mshtml.dll version is less than 5.50.4613.1700" negate="false" test_ref="oval:org.mitre.oval:tst:1463"/>
        <criterion comment="Patch Q286045 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:1462"/>
        <criterion comment="Patch Q295106 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:1461"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:92" version="6" class="vulnerability" deprecated="true">
      <metadata>
        <title>DEPRECATED: Windows 2000 IIS HTTP Error Page Cross-site Scripting</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0148" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0148"/>
        <description>Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other users via an HTTP error page.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2884" date="2010-11-29T16:14:00.692-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:39.293-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:01:42.201-05:00">ACCEPTED</status_change>
            <modified comment="Use def:12008 instead" date="2011-01-20T10:16:30.798-05:00">
              <contributor organization="Symantec Corporation">Josh Turpin</contributor>
            </modified>
            <status_change date="2011-01-20T10:16:30.798-05:00">DEPRECATED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="IIS major version equals 5" negate="false" test_ref="oval:org.mitre.oval:tst:3081"/>
        <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
        <criterion comment="the version of w3svc.dll is less than 5.0.2195.5269" negate="false" test_ref="oval:org.mitre.oval:tst:3080"/>
        <criterion comment="Patch Q319733 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3095"/>
        <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
        <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
        <criterion comment="Win2K/XP/2003 service pack 3 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:3079"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9196" version="5" class="vulnerability">
      <metadata>
        <title>The dissect_attribute_value_pairs function in packet-radius.c for Ethereal 0.8.13 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a malformed RADIUS packet that triggers a null dereference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0365" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0365"/>
        <description>The dissect_attribute_value_pairs function in packet-radius.c for Ethereal 0.8.13 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a malformed RADIUS packet that triggers a null dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:42.692-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:20.200-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:21.467-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9196 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:59.893-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:27.981-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="ethereal-gnome is earlier than 0:0.10.3-0.30E.1" test_ref="oval:org.mitre.oval:tst:29720"/>
          <criterion comment="ethereal is earlier than 0:0.10.3-0.30E.1" test_ref="oval:org.mitre.oval:tst:30448"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9195" version="5" class="vulnerability">
      <metadata>
        <title>MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to obtain sensitive information such as the table structure.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3781" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3781"/>
        <description>MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to obtain sensitive information such as the table structure.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:49.264-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:19.913-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:21.226-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9195 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:33.996-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:27.646-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mysql is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36197"/>
          <criterion comment="mysql-devel is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36749"/>
          <criterion comment="mysql-test is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36750"/>
          <criterion comment="mysql-bench is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36831"/>
          <criterion comment="mysql-server is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36646"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9191" version="5" class="vulnerability">
      <metadata>
        <title>Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2813" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2813"/>
        <description>Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:53.942-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:19.625-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:20.885-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9191 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:10.096-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:27.204-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.33-0.18.el4_8" test_ref="oval:org.mitre.oval:tst:39162"/>
            <criterion comment="samba-swat is earlier than 0:3.0.33-0.18.el4_8" test_ref="oval:org.mitre.oval:tst:39589"/>
            <criterion comment="samba-client is earlier than 0:3.0.33-0.18.el4_8" test_ref="oval:org.mitre.oval:tst:39603"/>
            <criterion comment="samba is earlier than 0:3.0.33-0.18.el4_8" test_ref="oval:org.mitre.oval:tst:39658"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.33-3.15.el5_4" test_ref="oval:org.mitre.oval:tst:39633"/>
            <criterion comment="samba-swat is earlier than 0:3.0.33-3.15.el5_4" test_ref="oval:org.mitre.oval:tst:39222"/>
            <criterion comment="samba-client is earlier than 0:3.0.33-3.15.el5_4" test_ref="oval:org.mitre.oval:tst:39493"/>
            <criterion comment="samba is earlier than 0:3.0.33-3.15.el5_4" test_ref="oval:org.mitre.oval:tst:39205"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9188" version="3" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Adobe Flash Player 9.0.48.0 and earlier might allow remote attackers to execute arbitrary code via unknown vectors, related to "input validation errors."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6242" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6242"/>
        <description>Unspecified vulnerability in Adobe Flash Player 9.0.48.0 and earlier might allow remote attackers to execute arbitrary code via unknown vectors, related to "input validation errors."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:10.337-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:19.383-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:20.601-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criterion comment="flash-plugin is earlier than 0:9.0.115.0-1.el3.with.oss" test_ref="oval:org.mitre.oval:tst:35926"/>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criterion comment="flash-plugin is earlier than 0:9.0.115.0-1.el4" test_ref="oval:org.mitre.oval:tst:35400"/>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criterion comment="flash-plugin is earlier than 0:9.0.115.0-1.el5" test_ref="oval:org.mitre.oval:tst:35776"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9187" version="5" class="vulnerability">
      <metadata>
        <title>Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm before 6.8.1 allow remote attackers to execute arbitrary code via a malformed XPM image file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0687" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0687"/>
        <description>Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm before 6.8.1 allow remote attackers to execute arbitrary code via a malformed XPM image file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:19.825-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:18.492-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:19.967-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9187 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:23.802-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:26.525-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30914"/>
          <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30029"/>
          <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30748"/>
          <criterion comment="XFree86-libs is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30779"/>
          <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30003"/>
          <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30783"/>
          <criterion comment="XFree86-twm is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30052"/>
          <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30925"/>
          <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:31001"/>
          <criterion comment="XFree86-doc is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30889"/>
          <criterion comment="openmotif21 is earlier than 0:2.1.30-9.RHEL3.4" test_ref="oval:org.mitre.oval:tst:30867"/>
          <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30841"/>
          <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30838"/>
          <criterion comment="openmotif is earlier than 0:2.2.3-4.RHEL3.4" test_ref="oval:org.mitre.oval:tst:31105"/>
          <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30875"/>
          <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30347"/>
          <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30599"/>
          <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30544"/>
          <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30612"/>
          <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30933"/>
          <criterion comment="XFree86-xdm is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30902"/>
          <criterion comment="XFree86-sdk is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30619"/>
          <criterion comment="XFree86 is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30899"/>
          <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30943"/>
          <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30747"/>
          <criterion comment="XFree86-xfs is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30145"/>
          <criterion comment="XFree86-tools is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30701"/>
          <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30805"/>
          <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30951"/>
          <criterion comment="openmotif-devel is earlier than 0:2.2.3-4.RHEL3.4" test_ref="oval:org.mitre.oval:tst:30744"/>
          <criterion comment="XFree86-xauth is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30843"/>
          <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30963"/>
          <criterion comment="XFree86-devel is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30677"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9185" version="5" class="vulnerability">
      <metadata>
        <title>The IRC protocol plugin in Gaim 1.2.0, and possibly earlier versions, allows (1) remote attackers to inject arbitrary Gaim markup via irc_msg_kick, irc_msg_mode, irc_msg_part, irc_msg_quit, (2) remote attackers to inject arbitrary Pango markup and pop up empty dialog boxes via irc_msg_invite, or (3) malicious IRC servers to cause a denial of service (application crash) by injecting certain Pango markup into irc_msg_badmode, irc_msg_banned, irc_msg_unknown, irc_msg_nochan functions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0966" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0966"/>
        <description>The IRC protocol plugin in Gaim 1.2.0, and possibly earlier versions, allows (1) remote attackers to inject arbitrary Gaim markup via irc_msg_kick, irc_msg_mode, irc_msg_part, irc_msg_quit, (2) remote attackers to inject arbitrary Pango markup and pop up empty dialog boxes via irc_msg_invite, or (3) malicious IRC servers to cause a denial of service (application crash) by injecting certain Pango markup into irc_msg_badmode, irc_msg_banned, irc_msg_unknown, irc_msg_nochan functions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:20.128-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:18.273-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:19.736-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9185 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:46.414-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:26.176-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gaim is earlier than 1:1.2.1-4.el3" test_ref="oval:org.mitre.oval:tst:31686"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gaim is earlier than 1:1.2.1-4.el4" test_ref="oval:org.mitre.oval:tst:31403"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9184" version="5" class="vulnerability">
      <metadata>
        <title>SpamAssassin before 3.1.3, when running with vpopmail and the paranoid (-P) switch, allows remote attackers to execute arbitrary commands via a crafted message that is not properly handled when invoking spamd with the virtual pop username.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2447" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2447"/>
        <description>SpamAssassin before 3.1.3, when running with vpopmail and the paranoid (-P) switch, allows remote attackers to execute arbitrary commands via a crafted message that is not properly handled when invoking spamd with the virtual pop username.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:39.893-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:18.098-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:19.538-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9184 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:48.479-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:25.849-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="spamassassin is earlier than 0:3.0.6-1.el4" test_ref="oval:org.mitre.oval:tst:32046"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9175" version="5" class="vulnerability">
      <metadata>
        <title>Multiple format string vulnerabilities in Wireshark (aka Ethereal) 0.10.x to 0.99.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) ANSI MAP, (2) Checkpoint FW-1, (3) MQ, (4) XML, and (5) NTP dissectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3628" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3628"/>
        <description>Multiple format string vulnerabilities in Wireshark (aka Ethereal) 0.10.x to 0.99.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) ANSI MAP, (2) Checkpoint FW-1, (3) MQ, (4) XML, and (5) NTP dissectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:09:41.723-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:17.770-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:19.160-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9175 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:53.256-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:25.479-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.2-EL3.1" test_ref="oval:org.mitre.oval:tst:32882"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.2-EL3.1" test_ref="oval:org.mitre.oval:tst:32738"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.2-EL4.1" test_ref="oval:org.mitre.oval:tst:32917"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.2-EL4.1" test_ref="oval:org.mitre.oval:tst:32447"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9173" version="5" class="vulnerability">
      <metadata>
        <title>lib/vorbisfile.c in libvorbisfile in Xiph.Org libvorbis before 1.2.0 allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted OGG file, aka trac Changeset 13217.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4065" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4065"/>
        <description>lib/vorbisfile.c in libvorbisfile in Xiph.Org libvorbis before 1.2.0 allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted OGG file, aka trac Changeset 13217.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:37.943-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:17.481-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:18.806-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9173 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:42.696-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:24.984-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libvorbis-devel is earlier than 1:1.0-8.el3" test_ref="oval:org.mitre.oval:tst:35005"/>
            <criterion comment="libvorbis is earlier than 1:1.0-8.el3" test_ref="oval:org.mitre.oval:tst:35016"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libvorbis-devel is earlier than 1:1.1.0-2.el4.5" test_ref="oval:org.mitre.oval:tst:34951"/>
            <criterion comment="libvorbis is earlier than 1:1.1.0-2.el4.5" test_ref="oval:org.mitre.oval:tst:34625"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libvorbis-devel is earlier than 1:1.1.2-3.el5.0" test_ref="oval:org.mitre.oval:tst:35046"/>
            <criterion comment="libvorbis is earlier than 1:1.1.2-3.el5.0" test_ref="oval:org.mitre.oval:tst:34551"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:917" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Enterprise 3 Mozilla Bypass Cookie Access Restrictions Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0594" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0594"/>
        <description>Mozilla allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Mozilla to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-08T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-11T12:00:00.000-04:00" comment="Corrected pattern used in rrt-206">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:42:04.843-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:09.181-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="mozilla-nss version is less than 1.4.2-3.0.2" negate="false" test_ref="oval:org.mitre.oval:tst:1468"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9167" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to inject arbitrary Javascript into other sites by (1) "using a modal alert to suspend an event handler while a new page is being loaded", (2) using eval(), and using certain variants involving (3) "new Script;" and (4) using window.__proto__ to extend eval, aka "cross-site JavaScript injection".</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1741" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1741"/>
        <description>Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to inject arbitrary Javascript into other sites by (1) "using a modal alert to suspend an event handler while a new page is being loaded", (2) using eval(), and using certain variants involving (3) "new Script;" and (4) using window.__proto__ to extend eval, aka "cross-site JavaScript injection".</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:36.424-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:16.930-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:18.309-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9167 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:22.574-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:24.370-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32663"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32326"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31987"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32451"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32697"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32558"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32427"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32671"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32666"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32561"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32593"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32679"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32133"/>
            <criterion comment="thunderbird is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32204"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32701"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32428"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32557"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32229"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32349"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32644"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32440"/>
            <criterion comment="firefox is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32219"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32598"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32717"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9166" version="5" class="vulnerability">
      <metadata>
        <title>The mysql_change_db function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::db_access privileges when returning from SQL SECURITY INVOKER stored routines, which allows remote authenticated users to gain privileges.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2692" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2692"/>
        <description>The mysql_change_db function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::db_access privileges when returning from SQL SECURITY INVOKER stored routines, which allows remote authenticated users to gain privileges.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:02.684-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:16.702-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:18.057-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9166 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:52.861-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:24.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mysql is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36197"/>
          <criterion comment="mysql-devel is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36749"/>
          <criterion comment="mysql-test is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36750"/>
          <criterion comment="mysql-bench is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36831"/>
          <criterion comment="mysql-server is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36646"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9165" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerabilities in the KSSL Kernel Module May Lead to a System Panic</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3470" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3470"/>
        <description>Multiple unspecified vulnerabilities in the KSSL kernel module in Sun Solaris 10, when configured with the KSSL proxy, allow remote attackers to cause a denial of service (kernel panic) via unspecified vectors related to "memory buffers" of Secure Socket Layer (SSL) records.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-03T10:36:57.000-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </submitted>
            <status_change date="2007-08-03T16:51:06.630-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:46.053-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:39.334-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="Software Section">
          <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102918" negate="false">
            <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
            <criterion comment="Patch 125100-10 or later installed" test_ref="oval:org.mitre.oval:tst:4665" negate="true"/>
            <criterion comment="Patch 121474-01 or later installed" test_ref="oval:org.mitre.oval:tst:4207" negate="false"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102918" negate="false">
            <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
            <criterion comment="Patch 125101-10 or later installed" test_ref="oval:org.mitre.oval:tst:4966" negate="true"/>
            <criterion comment="Patch 121475-01 or later installed" test_ref="oval:org.mitre.oval:tst:4240" negate="false"/>
          </criteria>
        </criteria>
        <criterion comment="kssl running" negate="false" test_ref="oval:org.mitre.oval:tst:4861"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9163" version="5" class="vulnerability">
      <metadata>
        <title>The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0607" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0607"/>
        <description>The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:52.072-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:16.519-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:17.820-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9163 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:38.962-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:23.741-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="ipsec-tools is earlier than 0:0.2.5-0.5" test_ref="oval:org.mitre.oval:tst:30435"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9161" version="5" class="vulnerability">
      <metadata>
        <title>components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type="file" during tab restoration, which allows user-assisted remote attackers to read arbitrary files on a client machine via a crafted INPUT element.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0355" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0355"/>
        <description>components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type="file" during tab restoration, which allows user-assisted remote attackers to read arbitrary files on a client machine via a crafted INPUT element.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:54.410-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:15.899-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:17.212-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9161 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:38.636-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:22.776-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38173"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38181"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38221"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38323"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38241"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38337"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:37355"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38135"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38326"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38186"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-35.el4" test_ref="oval:org.mitre.oval:tst:38184"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-3.el4" test_ref="oval:org.mitre.oval:tst:38343"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-19.el4" test_ref="oval:org.mitre.oval:tst:38238"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-35.el4" test_ref="oval:org.mitre.oval:tst:38228"/>
            <criterion comment="firefox is earlier than 0:3.0.6-1.el4" test_ref="oval:org.mitre.oval:tst:37823"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-3.el4" test_ref="oval:org.mitre.oval:tst:37923"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-35.el4" test_ref="oval:org.mitre.oval:tst:37943"/>
            <criterion comment="nss-tools is earlier than 0:3.12.2.0-3.el4" test_ref="oval:org.mitre.oval:tst:38172"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-35.el4" test_ref="oval:org.mitre.oval:tst:37433"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-35.el4" test_ref="oval:org.mitre.oval:tst:38309"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-35.el4" test_ref="oval:org.mitre.oval:tst:38278"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.2.0-4.el5" test_ref="oval:org.mitre.oval:tst:37933"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.6-1.el5" test_ref="oval:org.mitre.oval:tst:37808"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-4.el5" test_ref="oval:org.mitre.oval:tst:37350"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.21-1.el5" test_ref="oval:org.mitre.oval:tst:37944"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.6-1.el5" test_ref="oval:org.mitre.oval:tst:37835"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.6-1.el5" test_ref="oval:org.mitre.oval:tst:37556"/>
            <criterion comment="firefox is earlier than 0:3.0.6-1.el5" test_ref="oval:org.mitre.oval:tst:38272"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-4.el5" test_ref="oval:org.mitre.oval:tst:38040"/>
            <criterion comment="nss-tools is earlier than 0:3.12.2.0-4.el5" test_ref="oval:org.mitre.oval:tst:37867"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9157" version="5" class="vulnerability">
      <metadata>
        <title>jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying the window.__proto__.__proto__ object in a way that causes a lock on a non-native object, which triggers an assertion failure related to the OBJ_IS_NATIVE function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5014" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5014"/>
        <description>jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying the window.__proto__.__proto__ object in a way that causes a lock on a non-native object, which triggers an assertion failure related to the OBJ_IS_NATIVE function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:56.691-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:15.291-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:16.558-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9157 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:55.846-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:21.933-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37159"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37875"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37293"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37934"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37671"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37932"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37970"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37357"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37852"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37844"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37232"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-3.el4" test_ref="oval:org.mitre.oval:tst:38065"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-17.el4" test_ref="oval:org.mitre.oval:tst:37872"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37914"/>
            <criterion comment="firefox is earlier than 0:3.0.4-1.el4" test_ref="oval:org.mitre.oval:tst:37904"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-3.el4" test_ref="oval:org.mitre.oval:tst:37840"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37991"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37955"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37777"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:38009"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-20.el5" test_ref="oval:org.mitre.oval:tst:37773"/>
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37531"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37899"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37454"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.18-1.el5" test_ref="oval:org.mitre.oval:tst:38015"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:38021"/>
            <criterion comment="yelp is earlier than 0:2.16.0-22.el5" test_ref="oval:org.mitre.oval:tst:37645"/>
            <criterion comment="devhelp is earlier than 0:0.12-20.el5" test_ref="oval:org.mitre.oval:tst:37958"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37388"/>
            <criterion comment="firefox is earlier than 0:3.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37066"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37648"/>
            <criterion comment="nss-tools is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37936"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9155" version="5" class="vulnerability">
      <metadata>
        <title>OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5077" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5077"/>
        <description>OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:49.407-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:14.877-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:16.177-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9155 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:18:42.971-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:21.379-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.7a-33.25" test_ref="oval:org.mitre.oval:tst:38011"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.7a-33.25" test_ref="oval:org.mitre.oval:tst:37149"/>
            <criterion comment="openssl is earlier than 0:0.9.7a-33.25" test_ref="oval:org.mitre.oval:tst:37990"/>
            <criterion comment="openssl096b is earlier than 0:0.9.6b-16.49" test_ref="oval:org.mitre.oval:tst:38150"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.7a-43.17.el4_7.2" test_ref="oval:org.mitre.oval:tst:37921"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.7a-43.17.el4_7.2" test_ref="oval:org.mitre.oval:tst:38056"/>
            <criterion comment="openssl is earlier than 0:0.9.7a-43.17.el4_7.2" test_ref="oval:org.mitre.oval:tst:37985"/>
            <criterion comment="openssl096b is earlier than 0:0.9.6b-22.46.el4_7" test_ref="oval:org.mitre.oval:tst:37743"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl097a is earlier than 0:0.9.7a-9.el5_2.1" test_ref="oval:org.mitre.oval:tst:37259"/>
            <criterion comment="openssl-perl is earlier than 0:0.9.8b-10.el5_2.1" test_ref="oval:org.mitre.oval:tst:37599"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.8b-10.el5_2.1" test_ref="oval:org.mitre.oval:tst:37285"/>
            <criterion comment="openssl is earlier than 0:0.9.8b-10.el5_2.1" test_ref="oval:org.mitre.oval:tst:37906"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9153" version="5" class="vulnerability">
      <metadata>
        <title>The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product's web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2820" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2820"/>
        <description>The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product's web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:34.178-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:14.651-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:15.754-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9153 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:23.201-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:21.008-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="cups-lpd is earlier than 1:1.3.7-11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39673"/>
          <criterion comment="cups-devel is earlier than 1:1.3.7-11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39211"/>
          <criterion comment="cups is earlier than 1:1.3.7-11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39680"/>
          <criterion comment="cups-libs is earlier than 1:1.3.7-11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39517"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9151" version="5" class="vulnerability">
      <metadata>
        <title>The page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 can generate hash collisions that cause page data to be appended to the wrong page cache, which allows remote attackers to obtain sensitive information or enable further attack vectors when the target page is reloaded from the cache.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0778" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0778"/>
        <description>The page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 can generate hash collisions that cause page data to be appended to the wrong page cache, which allows remote attackers to obtain sensitive information or enable further attack vectors when the target page is reloaded from the cache.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:53.508-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:13.905-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:15.151-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9151 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:07.473-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:20.247-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33391"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33688"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33675"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33724"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33510"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33409"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33467"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33658"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33649"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33381"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:32760"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33554"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33648"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.10-0.1.el4" test_ref="oval:org.mitre.oval:tst:32765"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33712"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33705"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33379"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:33400"/>
            <criterion comment="firefox is earlier than 0:1.5.0.10-0.1.el4" test_ref="oval:org.mitre.oval:tst:33759"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33678"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33695"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33697"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33244"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33645"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.10-2.el5" test_ref="oval:org.mitre.oval:tst:33461"/>
            <criterion comment="yelp is earlier than 0:2.16.0-14.0.1.el5" test_ref="oval:org.mitre.oval:tst:33761"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-10.0.1.el5" test_ref="oval:org.mitre.oval:tst:33744"/>
            <criterion comment="devhelp is earlier than 0:0.12-10.0.1.el5" test_ref="oval:org.mitre.oval:tst:33415"/>
            <criterion comment="firefox is earlier than 0:1.5.0.10-2.el5" test_ref="oval:org.mitre.oval:tst:33616"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.10-1.el5" test_ref="oval:org.mitre.oval:tst:33493"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:915" version="7" class="vulnerability">
      <metadata>
        <title>IIS4.0 Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-1999-0874" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0874"/>
        <description>Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-04T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Changed tst:1470 to use obj:496 which was introduced to properly look for w3svc.dll in System32/inetsrv." date="2007-07-18T13:08:00.040-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-07-18T13:09:22.266-04:00">INTERIM</status_change>
            <status_change date="2007-08-02T14:47:16.479-04:00">ACCEPTED</status_change>
            <modified comment="Corrected and tightened regular expression in ste:1327" date="2010-12-02T11:45:00.337-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-12-02T11:46:52.134-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:01:41.876-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:37.904-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:36.471-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="IIS 4.0 Major Version" negate="false" test_ref="oval:org.mitre.oval:tst:3099"/>
        <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
        <criterion comment="File %windir%\System32\w3svc.dll is less than 4.0.1381.164" negate="false" test_ref="oval:org.mitre.oval:tst:1470"/>
        <criterion comment="Win2K/XP/2003 service pack 6 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1469"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9145" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in OpenOffice.org (OOo) 2.0.4 and earlier, and possibly other versions before 2.1.0; and StarOffice 6 through 8; allow user-assisted remote attackers to execute arbitrary code via a crafted (a) WMF or (b) EMF file that triggers heap-based buffer overflows in (1) wmf/winwmf.cxx, during processing of META_ESCAPE records; and wmf/enhwmf.cxx, during processing of (2) EMR_POLYPOLYGON and (3) EMR_POLYPOLYGON16 records.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5870" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5870"/>
        <description>Multiple integer overflows in OpenOffice.org (OOo) 2.0.4 and earlier, and possibly other versions before 2.1.0; and StarOffice 6 through 8; allow user-assisted remote attackers to execute arbitrary code via a crafted (a) WMF or (b) EMF file that triggers heap-based buffer overflows in (1) wmf/winwmf.cxx, during processing of META_ESCAPE records; and wmf/enhwmf.cxx, during processing of (2) EMR_POLYPOLYGON and (3) EMR_POLYPOLYGON16 records.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:06.177-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:13.619-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:14.770-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9145 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:52.306-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:19.805-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-35.2.0.EL3" test_ref="oval:org.mitre.oval:tst:33108"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.2-35.2.0.EL3" test_ref="oval:org.mitre.oval:tst:32394"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-35.2.0.EL3" test_ref="oval:org.mitre.oval:tst:33055"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.5-6.6.0.EL4" test_ref="oval:org.mitre.oval:tst:33223"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.5-6.6.0.EL4" test_ref="oval:org.mitre.oval:tst:33235"/>
            <criterion comment="openoffice.org-kde is earlier than 0:1.1.5-6.6.0.EL4" test_ref="oval:org.mitre.oval:tst:33295"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.5-6.6.0.EL4" test_ref="oval:org.mitre.oval:tst:32781"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9142" version="5" class="vulnerability">
      <metadata>
        <title>The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2698"/>
        <description>The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:38.799-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:12.949-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:14.154-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9142 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:25.612-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:18.955-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-60.EL" test_ref="oval:org.mitre.oval:tst:39011"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-60.EL" test_ref="oval:org.mitre.oval:tst:38739"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-60.EL" test_ref="oval:org.mitre.oval:tst:38992"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-60.EL" test_ref="oval:org.mitre.oval:tst:38800"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-60.EL" test_ref="oval:org.mitre.oval:tst:39114"/>
            <criterion comment="kernel is earlier than 0:2.4.21-60.EL" test_ref="oval:org.mitre.oval:tst:39044"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-60.EL" test_ref="oval:org.mitre.oval:tst:39194"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-60.EL" test_ref="oval:org.mitre.oval:tst:38832"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-60.EL" test_ref="oval:org.mitre.oval:tst:38859"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.9.EL" test_ref="oval:org.mitre.oval:tst:39007"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.9.EL" test_ref="oval:org.mitre.oval:tst:38642"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.9.EL" test_ref="oval:org.mitre.oval:tst:38673"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.9.EL" test_ref="oval:org.mitre.oval:tst:39035"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.9.EL" test_ref="oval:org.mitre.oval:tst:38510"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.9.EL" test_ref="oval:org.mitre.oval:tst:38920"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.9.EL" test_ref="oval:org.mitre.oval:tst:39188"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.9.EL" test_ref="oval:org.mitre.oval:tst:39065"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.9.EL" test_ref="oval:org.mitre.oval:tst:39182"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.9.EL" test_ref="oval:org.mitre.oval:tst:39164"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.9.EL" test_ref="oval:org.mitre.oval:tst:38624"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.7.1.el5" test_ref="oval:org.mitre.oval:tst:39175"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-128.7.1.el5" test_ref="oval:org.mitre.oval:tst:38848"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-128.7.1.el5" test_ref="oval:org.mitre.oval:tst:39017"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-128.7.1.el5" test_ref="oval:org.mitre.oval:tst:38949"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.7.1.el5" test_ref="oval:org.mitre.oval:tst:39066"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.7.1.el5" test_ref="oval:org.mitre.oval:tst:38199"/>
            <criterion comment="kernel is earlier than 0:2.6.18-128.7.1.el5" test_ref="oval:org.mitre.oval:tst:39057"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.7.1.el5" test_ref="oval:org.mitre.oval:tst:39072"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-128.7.1.el5" test_ref="oval:org.mitre.oval:tst:38868"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.7.1.el5" test_ref="oval:org.mitre.oval:tst:39155"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.7.1.el5" test_ref="oval:org.mitre.oval:tst:38973"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-128.7.1.el5" test_ref="oval:org.mitre.oval:tst:38459"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9140" version="5" class="vulnerability">
      <metadata>
        <title>Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed SMB packet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0084" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0084"/>
        <description>Buffer overflow in the X11 dissector in Ethereal 0.8.10 through 0.10.8 allows remote attackers to execute arbitrary code via a crafted packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:16.367-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:12.678-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:13.850-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9140 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:00.002-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:18.558-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.9-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31265"/>
            <criterion comment="ethereal is earlier than 0:0.10.9-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31218"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.9-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31097"/>
            <criterion comment="ethereal is earlier than 0:0.10.9-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31103"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:914" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Enterprise 3 S/MIME Protocol Denial of Service Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0564" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0564"/>
        <description>Multiple vulnerabilities in multiple vendor implementations of the Secure/Multipurpose Internet Mail Extensions (S/MIME) protocol allow remote attackers to cause a denial of service and possibly execute arbitrary code via an S/MIME email message containing certain unexpected ASN.1 constructs, as demonstrated using the NISSC test suite.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-08T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-11T12:00:00.000-04:00" comment="Corrected pattern used in rrt-206">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:51.518-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:09.016-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="mozilla-nss version is less than 1.4.2-3.0.2" negate="false" test_ref="oval:org.mitre.oval:tst:1468"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:913" version="7" class="vulnerability">
      <metadata>
        <title>IIS ASP Source Code Access Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-1999-0278" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0278"/>
        <description>In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-04T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Changed tst:1470 to use obj:496 which was introduced to properly look for w3svc.dll in System32/inetsrv." date="2007-07-18T13:08:00.040-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-07-18T13:09:22.473-04:00">INTERIM</status_change>
            <status_change date="2007-08-02T14:47:16.388-04:00">ACCEPTED</status_change>
            <modified comment="Corrected and tightened regular expression in ste:1327" date="2010-12-02T11:45:00.337-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-12-02T11:46:51.978-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:01:41.580-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:37.593-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:36.138-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="IIS 4.0 Major Version" negate="false" test_ref="oval:org.mitre.oval:tst:3099"/>
        <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
        <criterion comment="File %windir%\System32\w3svc.dll is less than 4.0.1381.164" negate="false" test_ref="oval:org.mitre.oval:tst:1470"/>
        <criterion comment="Win2K/XP/2003 service pack 6 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1469"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9127" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the IP Implementation for Solaris 8 and 9 May Allow a Denial of Service</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2045" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2045"/>
        <description>Unspecified vulnerability in the IP implementation in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (CPU consumption) via crafted IP packets, probably related to fragmented packets with duplicate or missing fragments.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-06T11:39:14.000-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </submitted>
            <status_change date="2007-08-08T21:33:23.689-04:00">DRAFT</status_change>
            <status_change date="2007-08-23T14:55:20.078-04:00">INTERIM</status_change>
            <status_change date="2007-09-10T14:45:27.505-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102866" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 116965-26 or later installed" test_ref="oval:org.mitre.oval:tst:4585" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102866" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 114344-25 or later installed" test_ref="oval:org.mitre.oval:tst:4736" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102866" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 116966-25 or later installed" test_ref="oval:org.mitre.oval:tst:4659" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102866" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 119435-15 or later installed" test_ref="oval:org.mitre.oval:tst:4750" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9124" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in FreeType before 2.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to (1) bdf/bdflib.c, (2) sfnt/ttcmap.c, (3) cff/cffgload.c, and (4) the read_lwfn function and a crafted LWFN file in base/ftmac.c.  NOTE: item 4 was originally identified by CVE-2006-2493.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1861" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1861"/>
        <description>Multiple integer overflows in FreeType before 2.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to (1) bdf/bdflib.c, (2) sfnt/ttcmap.c, (3) cff/cffgload.c, and (4) the read_lwfn function and a crafted LWFN file in base/ftmac.c.  NOTE: item 4 was originally identified by CVE-2006-2493.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:04.611-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:12.380-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:13.550-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9124 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:25.873-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:18.121-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="freetype is earlier than 0:2.1.4-12.el3" test_ref="oval:org.mitre.oval:tst:37450"/>
            <criterion comment="freetype-devel is earlier than 0:2.1.4-12.el3" test_ref="oval:org.mitre.oval:tst:38245"/>
            <criterion comment="freetype-demos is earlier than 0:2.1.4-12.el3" test_ref="oval:org.mitre.oval:tst:38284"/>
            <criterion comment="freetype-utils is earlier than 0:2.1.4-12.el3" test_ref="oval:org.mitre.oval:tst:38008"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="freetype is earlier than 0:2.1.9-10.el4.7" test_ref="oval:org.mitre.oval:tst:38414"/>
            <criterion comment="freetype-demos is earlier than 0:2.1.9-10.el4.7" test_ref="oval:org.mitre.oval:tst:38395"/>
            <criterion comment="freetype-utils is earlier than 0:2.1.9-10.el4.7" test_ref="oval:org.mitre.oval:tst:38234"/>
            <criterion comment="freetype-devel is earlier than 0:2.1.9-10.el4.7" test_ref="oval:org.mitre.oval:tst:38442"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:912" version="2" class="vulnerability">
      <metadata>
        <title>Windows 2000 IIS System File Listing Privilege Elevation Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0507"/>
        <description>IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges via a Trojan horse file, aka the "System file listing privilege elevation" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-04T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-01-11T12:00:00.000-04:00" comment="modified wft-305 - changed the version of msw3prt.dll to test against from 5.5.2195.3649 to 5.0.2195.3649">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-01-20T01:05:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="IIS major version equals 5" negate="false" test_ref="oval:org.mitre.oval:tst:3081"/>
        <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
        <criterion comment="File %windir%\System32\Msw3prt.dll is less than 5.0.2195.3649" negate="false" test_ref="oval:org.mitre.oval:tst:1471"/>
        <criterion comment="Patch Q301625 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3037"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9118" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in the SMB dissector in Ethereal 0.9.0 through 0.10.11 allows remote attackers to cause a buffer overflow or a denial of service (memory consumption) via unknown attack vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2365" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2365"/>
        <description>Unknown vulnerability in the SMB dissector in Ethereal 0.9.0 through 0.10.11 allows remote attackers to cause a buffer overflow or a denial of service (memory consumption) via unknown attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:27.474-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:12.134-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:13.297-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9118 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:09.449-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:17.669-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.12-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31966"/>
            <criterion comment="ethereal is earlier than 0:0.10.12-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32076"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.12-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32122"/>
            <criterion comment="ethereal is earlier than 0:0.10.12-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32035"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9117" version="5" class="vulnerability">
      <metadata>
        <title>Race condition between the kfree_skb and __skb_unlink functions in the socket buffer handling in Linux kernel 2.6.9, and possibly other versions, allows remote attackers to cause a denial of service (crash), as demonstrated using the TCP stress tests from the LTP test suite.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2446" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2446"/>
        <description>Race condition between the kfree_skb and __skb_unlink functions in the socket buffer handling in Linux kernel 2.6.9, and possibly other versions, allows remote attackers to cause a denial of service (crash), as demonstrated using the TCP stress tests from the LTP test suite.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:52.196-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:11.828-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:12.961-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9117 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:12:52.742-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:17.249-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32335"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32833"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32825"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32836"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32736"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:31931"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32361"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32793"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32795"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9111" version="5" class="vulnerability">
      <metadata>
        <title>The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files, aka Bug Id 6824265.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0255" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0255"/>
        <description>String handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as the nsTSubstring_CharT::Replace function, do not properly check the return values of other functions that resize the string, which allows remote attackers to cause a denial of service and possibly execute arbitrary code by forcing an out-of-memory state that causes a reallocation to fail and return a pointer to a fixed address, which leads to heap corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:09:36.244-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:11.514-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:12.631-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9111 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:12:46.394-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:16.793-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mozilla-js-debugger is earlier than 37:1.7.3-19.EL4" test_ref="oval:org.mitre.oval:tst:31580"/>
          <criterion comment="mozilla is earlier than 37:1.7.3-19.EL4" test_ref="oval:org.mitre.oval:tst:31555"/>
          <criterion comment="thunderbird is earlier than 0:1.0.2-1.4.1" test_ref="oval:org.mitre.oval:tst:31382"/>
          <criterion comment="mozilla-chat is earlier than 37:1.7.3-19.EL4" test_ref="oval:org.mitre.oval:tst:31589"/>
          <criterion comment="mozilla-mail is earlier than 37:1.7.3-19.EL4" test_ref="oval:org.mitre.oval:tst:31583"/>
          <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.3-19.EL4" test_ref="oval:org.mitre.oval:tst:31421"/>
          <criterion comment="mozilla-nss is earlier than 37:1.7.3-19.EL4" test_ref="oval:org.mitre.oval:tst:31222"/>
          <criterion comment="mozilla-devel is earlier than 37:1.7.3-19.EL4" test_ref="oval:org.mitre.oval:tst:31447"/>
          <criterion comment="mozilla-nss-devel is earlier than 37:1.7.3-19.EL4" test_ref="oval:org.mitre.oval:tst:31579"/>
          <criterion comment="firefox is earlier than 0:1.0.1-1.4.3" test_ref="oval:org.mitre.oval:tst:31118"/>
          <criterion comment="mozilla-nspr is earlier than 37:1.7.3-19.EL4" test_ref="oval:org.mitre.oval:tst:31131"/>
          <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.3-19.EL4" test_ref="oval:org.mitre.oval:tst:31380"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9108" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in Linux 2.6, when threads are sharing memory mapping via CLONE_VM (such as linuxthreads and vfork), might allow local users to cause a denial of service (deadlock) by triggering a core dump while waiting for a thread that has just performed an exec.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3106" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3106"/>
        <description>Race condition in Linux 2.6, when threads are sharing memory mapping via CLONE_VM (such as linuxthreads and vfork), might allow local users to cause a denial of service (deadlock) by triggering a core dump while waiting for a thread that has just performed an exec.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:02.087-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:11.257-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:12.365-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9108 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:08.145-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:16.431-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32415"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32137"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32528"/>
          <criterion comment="kernel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32205"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:31866"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32446"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32450"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9106" version="5" class="vulnerability">
      <metadata>
        <title>The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but process memory using 32 bit values, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a DOC document with certain length values, which leads to a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0941" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0941"/>
        <description>The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but process memory using 32 bit values, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a DOC document with certain length values, which leads to a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:38.519-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:10.851-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:12.079-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9106 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:31.734-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:15.991-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-24.2.0.EL3" test_ref="oval:org.mitre.oval:tst:31752"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.2-24.2.0.EL3" test_ref="oval:org.mitre.oval:tst:31453"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-24.2.0.EL3" test_ref="oval:org.mitre.oval:tst:31739"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-24.6.0.EL4" test_ref="oval:org.mitre.oval:tst:31617"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.2-24.6.0.EL4" test_ref="oval:org.mitre.oval:tst:31671"/>
            <criterion comment="openoffice.org-kde is earlier than 0:1.1.2-24.6.0.EL4" test_ref="oval:org.mitre.oval:tst:31138"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-24.6.0.EL4" test_ref="oval:org.mitre.oval:tst:31736"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9105" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not perform a security zone check when processing a wyciwyg URI, which allows remote attackers to obtain sensitive information, poison the browser cache, and possibly enable further attack vectors via (1) HTTP 302 redirect controls, (2) XMLHttpRequest, or (3) view-source URIs.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3656" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3656"/>
        <description>Mozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not perform a security zone check when processing a wyciwyg URI, which allows remote attackers to obtain sensitive information, poison the browser cache, and possibly enable further attack vectors via (1) HTTP 302 redirect controls, (2) XMLHttpRequest, or (3) view-source URIs.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:09:45.122-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:10.352-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:11.534-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9105 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:18:58.154-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:15.313-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:33986"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34827"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34839"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34762"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34814"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34694"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34925"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34684"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34723"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34747"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34968"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34971"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34868"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34492"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34775"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.3.el4" test_ref="oval:org.mitre.oval:tst:34828"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34981"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34335"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34957"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34550"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34608"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-3.el5" test_ref="oval:org.mitre.oval:tst:34810"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-3.el5" test_ref="oval:org.mitre.oval:tst:34667"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9101" version="5" class="vulnerability">
      <metadata>
        <title>Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0580" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0580"/>
        <description>Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:12.134-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:09.973-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:11.218-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9101 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:30.654-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:14.858-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38108"/>
          <criterion comment="tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:37963"/>
          <criterion comment="tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38333"/>
          <criterion comment="tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38944"/>
          <criterion comment="tomcat5-webapps is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38805"/>
          <criterion comment="tomcat5 is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38688"/>
          <criterion comment="tomcat5-jasper is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38891"/>
          <criterion comment="tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38239"/>
          <criterion comment="tomcat5-server-lib is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38824"/>
          <criterion comment="tomcat5-common-lib is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38955"/>
          <criterion comment="tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38428"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9100" version="3" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealPlayer Enterprise allows remote attackers to execute arbitrary code via a RAM (.ra or .ram) file with a large size value in the RA header.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2264" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2264"/>
        <description>Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealPlayer Enterprise allows remote attackers to execute arbitrary code via a RAM (.ra or .ram) file with a large size value in the RA header.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:29.465-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:09.726-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:10.918-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criterion comment="realplayer is earlier than 0:10.0.9-0.rhel3.4" test_ref="oval:org.mitre.oval:tst:34710"/>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criterion comment="RealPlayer is earlier than 0:10.0.9-2" test_ref="oval:org.mitre.oval:tst:34808"/>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criterion comment="RealPlayer is earlier than 0:10.0.9-3.el5" test_ref="oval:org.mitre.oval:tst:35065"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:91" version="3" class="vulnerability">
      <metadata>
        <title>Solaris 7 CDE ToolTalk Database Null Write Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>Common Desktop Environment</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0677" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0677"/>
        <description>CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is used as a table index by the _TT_ISCLOSE procedure.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-01-31T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified comment="fixed the service_name entity used in the inetd_object" date="2007-04-10T15:17:00.627-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-04-10T15:17:28.035-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:08.816-04:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:53.948-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:46.125-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="File rpc.ttdbserverd exists" negate="false" test_ref="oval:org.mitre.oval:tst:3105"/>
          <criterion comment="Patch 107893-19 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:2969"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="inetd.conf contains rpc.ttdbserverd" negate="false" test_ref="oval:org.mitre.oval:tst:3103"/>
          <criterion comment="inetd running" negate="false" test_ref="oval:org.mitre.oval:tst:3135"/>
          <criteria operator="OR" comment="File rpc.ttdbserverd executable">
            <criterion comment="File rpc.ttdbserverd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3102"/>
            <criterion comment="File rpc.ttdbserverd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3101"/>
            <criterion comment="File rpc.ttdbserverd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3100"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:909" version="2" class="vulnerability">
      <metadata>
        <title>Windows NT IIS System File Listing Privilege Elevation Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0507"/>
        <description>IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges via a Trojan horse file, aka the "System file listing privilege elevation" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-04T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Changed tst:1474 to use obj:496 which was introduced to properly look for w3svc.dll in System32/inetsrv." date="2007-07-18T13:08:00.398-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-07-18T13:10:09.547-04:00">INTERIM</status_change>
            <status_change date="2007-08-02T14:47:16.301-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="IIS 4.0 Major Version" negate="false" test_ref="oval:org.mitre.oval:tst:3099"/>
        <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
        <criterion comment="File %windir%\System32\w3svc.dll is less than 4.2.769.1" negate="false" test_ref="oval:org.mitre.oval:tst:1474"/>
        <criterion comment="Patch Q301625 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3037"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9080" version="5" class="vulnerability">
      <metadata>
        <title>The auto-reap of child processes in Linux kernel 2.6 before 2.6.15 includes processes with ptrace attached, which leads to a dangling ptrace reference and allows local users to cause a denial of service (crash) and gain root privileges.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3784" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3784"/>
        <description>The auto-reap of child processes in Linux kernel 2.6 before 2.6.15 includes processes with ptrace attached, which leads to a dangling ptrace reference and allows local users to cause a denial of service (crash) and gain root privileges.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:36.965-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:09.474-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:10.623-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9080 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:36:12.473-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:14.504-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32415"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32137"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32528"/>
          <criterion comment="kernel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32205"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:31866"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32446"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32450"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9079" version="5" class="vulnerability">
      <metadata>
        <title>The Linux kernel before 2.6.12.5 does not properly destroy a keyring that is not instantiated properly, which allows local users or remote attackers to cause a denial of service (kernel oops) via a keyring with a payload that is not empty, which causes the creation to fail, leading to a null dereference in the keyring destructor.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2099" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2099"/>
        <description>The Linux kernel before 2.6.12.5 does not properly destroy a keyring that is not instantiated properly, which allows local users or remote attackers to cause a denial of service (kernel oops) via a keyring with a payload that is not empty, which causes the creation to fail, leading to a null dereference in the keyring destructor.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:48.408-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:09.219-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:10.353-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9079 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:59.421-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:14.137-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31896"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31885"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31861"/>
          <criterion comment="kernel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31550"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31914"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31924"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:32023"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9076" version="5" class="vulnerability">
      <metadata>
        <title>The UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to trigger the download of arbitrary files and cause a denial of service (memory or disk consumption) via a UDP packet that specifies an arbitrary URL.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2957" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2957"/>
        <description>The UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to trigger the download of arbitrary files and cause a denial of service (memory or disk consumption) via a UDP packet that specifies an arbitrary URL.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:00.998-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:08.737-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:09.881-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9076 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:29.130-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:13.504-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.5.2-6.el4" test_ref="oval:org.mitre.oval:tst:37980"/>
            <criterion comment="libpurple is earlier than 0:2.5.2-6.el4" test_ref="oval:org.mitre.oval:tst:37625"/>
            <criterion comment="libpurple-perl is earlier than 0:2.5.2-6.el4" test_ref="oval:org.mitre.oval:tst:37827"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.5.2-6.el4" test_ref="oval:org.mitre.oval:tst:37120"/>
            <criterion comment="pidgin-devel is earlier than 0:2.5.2-6.el4" test_ref="oval:org.mitre.oval:tst:37969"/>
            <criterion comment="libpurple-devel is earlier than 0:2.5.2-6.el4" test_ref="oval:org.mitre.oval:tst:38038"/>
            <criterion comment="finch is earlier than 0:2.5.2-6.el4" test_ref="oval:org.mitre.oval:tst:37822"/>
            <criterion comment="pidgin-perl is earlier than 0:2.5.2-6.el4" test_ref="oval:org.mitre.oval:tst:38119"/>
            <criterion comment="pidgin is earlier than 0:2.5.2-6.el4" test_ref="oval:org.mitre.oval:tst:38052"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:38103"/>
            <criterion comment="libpurple is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:38090"/>
            <criterion comment="libpurple-perl is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:37997"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:38020"/>
            <criterion comment="pidgin-devel is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:37865"/>
            <criterion comment="libpurple-devel is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:37809"/>
            <criterion comment="finch is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:37973"/>
            <criterion comment="pidgin-perl is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:38050"/>
            <criterion comment="pidgin-docs is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:37775"/>
            <criterion comment="pidgin is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:37838"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9071" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils, elfutils, and possibly other packages, allows user-assisted attackers to execute arbitrary code via a crafted object file that specifies a large number of section headers, leading to a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1704" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1704"/>
        <description>Integer overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils, elfutils, and possibly other packages, allows user-assisted attackers to execute arbitrary code via a crafted object file that specifies a large number of section headers, leading to a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:13.252-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:08.389-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:09.527-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9071 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:25.607-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:12.848-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="elfutils-libelf-devel is earlier than 0:0.94.1-2" test_ref="oval:org.mitre.oval:tst:32457"/>
            <criterion comment="binutils is earlier than 0:2.14.90.0.4-39" test_ref="oval:org.mitre.oval:tst:31731"/>
            <criterion comment="elfutils-libelf is earlier than 0:0.94.1-2" test_ref="oval:org.mitre.oval:tst:32656"/>
            <criterion comment="elfutils-devel is earlier than 0:0.94.1-2" test_ref="oval:org.mitre.oval:tst:32533"/>
            <criterion comment="elfutils is earlier than 0:0.94.1-2" test_ref="oval:org.mitre.oval:tst:32396"/>
            <criterion comment="gdb is earlier than 0:6.3.0.0-1.62" test_ref="oval:org.mitre.oval:tst:29887"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="elfutils-libelf-devel is earlier than 0:0.97.1-3" test_ref="oval:org.mitre.oval:tst:32684"/>
            <criterion comment="binutils is earlier than 0:2.15.92.0.2-15" test_ref="oval:org.mitre.oval:tst:31192"/>
            <criterion comment="elfutils-libelf is earlier than 0:0.97.1-3" test_ref="oval:org.mitre.oval:tst:31848"/>
            <criterion comment="elfutils-devel is earlier than 0:0.97.1-3" test_ref="oval:org.mitre.oval:tst:32660"/>
            <criterion comment="elfutils is earlier than 0:0.97.1-3" test_ref="oval:org.mitre.oval:tst:32629"/>
            <criterion comment="gdb is earlier than 0:6.3.0.0-1.63" test_ref="oval:org.mitre.oval:tst:32136"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:907" version="1" class="vulnerability">
      <metadata>
        <title>Windows 2000 H.323 Protocol Remote Code Execution Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>H.323</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0117" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0117"/>
        <description>Unknown vulnerability in the H.323 protocol implementation in Windows 98, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="the version of h323.tsp is less than 5.0.2195.6901" negate="false" test_ref="oval:org.mitre.oval:tst:1475"/>
        <criterion comment="the patch kb835732 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1510"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9067" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the custom tag support for the TIFF library (libtiff) before 3.8.2 allows remote attackers to cause a denial of service (instability or crash) and execute arbitrary code via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3465" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3465"/>
        <description>Unspecified vulnerability in the custom tag support for the TIFF library (libtiff) before 3.8.2 allows remote attackers to cause a denial of service (instability or crash) and execute arbitrary code via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:00.520-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:08.120-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:09.249-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9067 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:13.834-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:12.426-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.1.3-3.10" test_ref="oval:org.mitre.oval:tst:32819"/>
            <criterion comment="libtiff is earlier than 0:3.5.7-25.el3.4" test_ref="oval:org.mitre.oval:tst:32069"/>
            <criterion comment="kdegraphics is earlier than 7:3.1.3-3.10" test_ref="oval:org.mitre.oval:tst:33012"/>
            <criterion comment="libtiff-devel is earlier than 0:3.5.7-25.el3.4" test_ref="oval:org.mitre.oval:tst:32843"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libtiff is earlier than 0:3.6.1-12" test_ref="oval:org.mitre.oval:tst:32922"/>
            <criterion comment="libtiff-devel is earlier than 0:3.6.1-12" test_ref="oval:org.mitre.oval:tst:32413"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9063" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly escape quote characters used for XML processing, which allows remote attackers to conduct XML injection attacks via the default namespace in an E4X document.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5024" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5024"/>
        <description>Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly escape quote characters used for XML processing, which allows remote attackers to conduct XML injection attacks via the default namespace in an E4X document.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:08.912-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:07.409-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:08.374-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9063 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:29:58.999-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:11.578-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37159"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37875"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37293"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37934"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37671"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37932"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37970"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37357"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37852"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37844"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37232"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-3.el4" test_ref="oval:org.mitre.oval:tst:38065"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-17.el4" test_ref="oval:org.mitre.oval:tst:37872"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37914"/>
            <criterion comment="firefox is earlier than 0:3.0.4-1.el4" test_ref="oval:org.mitre.oval:tst:37904"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-3.el4" test_ref="oval:org.mitre.oval:tst:37840"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37991"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37955"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37777"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:38009"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-20.el5" test_ref="oval:org.mitre.oval:tst:37773"/>
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37531"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37899"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37454"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.18-1.el5" test_ref="oval:org.mitre.oval:tst:38015"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:38021"/>
            <criterion comment="yelp is earlier than 0:2.16.0-22.el5" test_ref="oval:org.mitre.oval:tst:37645"/>
            <criterion comment="devhelp is earlier than 0:0.12-20.el5" test_ref="oval:org.mitre.oval:tst:37958"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37388"/>
            <criterion comment="firefox is earlier than 0:3.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37066"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37648"/>
            <criterion comment="nss-tools is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37936"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9058" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0396" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0396"/>
        <description>Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:05.504-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:07.219-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:08.179-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9058 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:47.705-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:11.312-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="cvs is earlier than 0:1.11.2-22" test_ref="oval:org.mitre.oval:tst:30644"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9053" version="5" class="vulnerability">
      <metadata>
        <title>The snd_mem_proc_read function in sound/core/memalloc.c in the Advanced Linux Sound Architecture (ALSA) in the Linux kernel before 2.6.22.8 does not return the correct write size, which allows local users to obtain sensitive information (kernel memory contents) via a small count argument, as demonstrated by multiple reads of /proc/driver/snd-page-alloc.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4571" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4571"/>
        <description>The snd_mem_proc_read function in sound/core/memalloc.c in the Advanced Linux Sound Architecture (ALSA) in the Linux kernel before 2.6.22.8 does not return the correct write size, which allows local users to obtain sensitive information (kernel memory contents) via a small count argument, as demonstrated by multiple reads of /proc/driver/snd-page-alloc.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:14.491-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:06.665-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:07.641-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9053 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:39.340-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:10.641-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34864"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35017"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35145"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34442"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35258"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35254"/>
            <criterion comment="kernel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35373"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34480"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34911"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34923"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35327"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35219"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35593"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35357"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35021"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35284"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35088"/>
            <criterion comment="kernel is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:34595"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35139"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35215"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35555"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35511"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35474"/>
            <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35543"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:905" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Enterprise 3 Ethereal Denial of Service via 0-Length Presentation Protocol Selector</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0367" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0367"/>
        <description>Ethereal 0.10.1 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a zero-length Presentation protocol selector.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-08T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <modified date="2004-05-11T12:00:00.000-04:00" comment="Corrected pattern used in rrt-206">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:32.816-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:08.565-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criteria operator="OR" comment="Vulnerable Config">
            <criterion comment="ethereal version is less than 0.10.3-0.30E.1" negate="false" test_ref="oval:org.mitre.oval:tst:1505"/>
            <criterion comment="ethereal-gnome version is less than 0.10.3-0.30E.1" negate="false" test_ref="oval:org.mitre.oval:tst:1504"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="Vulnerable Config">
            <criteria operator="OR" comment="/usr/bin/ethereal is executable">
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1529"/>
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1528"/>
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1527"/>
            </criteria>
            <criteria operator="OR" comment="/usr/sbin/ethereal is executable">
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1526"/>
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1525"/>
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1524"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/tethereal is executable">
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1523"/>
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1522"/>
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1521"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9048" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) allow remote attackers to cause a denial of service (crash) via (1) a crafted MP3 file or (2) unspecified vectors to the NCP dissector.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6111" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6111"/>
        <description>Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) allow remote attackers to cause a denial of service (crash) via (1) a crafted MP3 file or (2) unspecified vectors to the NCP dissector.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:04.609-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:06.367-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:07.339-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9048 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:36:23.826-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:10.193-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:36051"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:35980"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35669"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35941"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:35709"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:36120"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35712"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35801"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9040" version="5" class="vulnerability">
      <metadata>
        <title>The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by using the interpreter (PT_INTERP) functionality.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0135" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0135"/>
        <description>The unw_unwind_to_user function in unwind.c on Itanium (ia64) architectures in Linux kernel 2.6 allows local users to cause a denial of service (system crash).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:09:47.652-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:05.902-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:06.894-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9040 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:14:07.964-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:09.628-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31148"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31473"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31178"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31282"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31565"/>
            <criterion comment="kernel is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31562"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31582"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:30730"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31534"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31545"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31539"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31661"/>
            <criterion comment="kernel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31482"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31112"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31605"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31330"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:904" version="2" class="vulnerability">
      <metadata>
        <title>Windows Server 2003 Help Center Command Insertion Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Help and Support Center (HSC)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0907" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0907"/>
        <description>Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code via quotation marks in an hcp:// URL, which are not quoted when constructing the argument list to HelpCtr.exe.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-14T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <modified date="2004-05-12T12:00:00.000-04:00" comment="Added a criterion to the configuration section to see if the HCP protocol is registered.">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-08-28T12:00:00.000-04:00" comment="modified obj 1001 to use xsi:nil instead of a .* pattern match">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-08-28T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:40.350-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
          <criterion comment="the version of helpctr.exe is less than 5.2.3790.125" negate="false" test_ref="oval:org.mitre.oval:tst:1478"/>
          <criterion comment="the patch kb835732 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1510"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="the HCP Protocol is registered" negate="true" test_ref="oval:org.mitre.oval:tst:1477"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9039" version="1" class="vulnerability">
      <metadata>
        <title>Solaris 10 Systems May Panic or Hang When Running Certain DTrace D Programs</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4126" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4126"/>
        <description>Unspecified vulnerability in the dynamic tracing framework (DTrace) on Sun Solaris 10 before 20070730 allows local users with PRIV_DTRACE_USER privileges to cause a denial of service (panic or hang) via unspecified use of certain DTrace programs.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-02T11:47:26.000-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </submitted>
            <status_change date="2007-08-03T16:50:57.753-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:45.800-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:39.047-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 103021" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 125100-10 or later installed" test_ref="oval:org.mitre.oval:tst:4221" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 103021" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 125101-10 or later installed" test_ref="oval:org.mitre.oval:tst:4704" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9020" version="5" class="vulnerability">
      <metadata>
        <title>The fragment_add_work function in epan/reassemble.c in Wireshark 0.8.19 through 1.0.1 allows remote attackers to cause a denial of service (crash) via a series of fragmented packets with non-sequential fragmentation offset values, which lead to a buffer over-read.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3145" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3145"/>
        <description>The fragment_add_work function in epan/reassemble.c in Wireshark 0.8.19 through 1.0.1 allows remote attackers to cause a denial of service (crash) via a series of fragmented packets with non-sequential fragmentation offset values, which lead to a buffer over-read.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:47.309-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:05.610-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:06.232-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9020 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:14.859-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:09.149-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-EL3.3" test_ref="oval:org.mitre.oval:tst:37624"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-EL3.3" test_ref="oval:org.mitre.oval:tst:37207"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-3.el4_7" test_ref="oval:org.mitre.oval:tst:37249"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-3.el4_7" test_ref="oval:org.mitre.oval:tst:37725"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37542"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37460"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:902" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat OpenSSL Improper Unknown Message Handling Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>OpenSSL</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0081" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0081"/>
        <description>OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:35.007-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:08.302-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="openssl version is less than 0.9.7a-20" negate="false" test_ref="oval:org.mitre.oval:tst:1484"/>
        <criterion comment="openssl-devel version is less than 0.9.7a-20" negate="false" test_ref="oval:org.mitre.oval:tst:1483"/>
        <criterion comment="openssl-perl version is less than 0.9.7a-20" negate="false" test_ref="oval:org.mitre.oval:tst:1482"/>
        <criterion comment="openssl096 version is less than 0.9.6-25.9" negate="false" test_ref="oval:org.mitre.oval:tst:1481"/>
        <criterion comment="openssl096b version is less than 0.9.6b-15" negate="false" test_ref="oval:org.mitre.oval:tst:1480"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9005" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin (formerly Gaim) before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer.  NOTE: some of these details are obtained from third party information.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1373" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1373"/>
        <description>Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin (formerly Gaim) before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer.  NOTE: some of these details are obtained from third party information.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:52.754-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:05.140-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:05.736-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9005 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:29.401-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:08.466-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="pidgin is earlier than 0:1.5.1-3.el3" test_ref="oval:org.mitre.oval:tst:38766"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38580"/>
            <criterion comment="libpurple is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38729"/>
            <criterion comment="libpurple-perl is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38659"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38675"/>
            <criterion comment="pidgin-devel is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38361"/>
            <criterion comment="libpurple-devel is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38431"/>
            <criterion comment="finch is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38593"/>
            <criterion comment="pidgin-perl is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38640"/>
            <criterion comment="pidgin is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38775"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38564"/>
            <criterion comment="libpurple is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38579"/>
            <criterion comment="libpurple-perl is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38686"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38687"/>
            <criterion comment="pidgin-devel is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38223"/>
            <criterion comment="libpurple-devel is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38606"/>
            <criterion comment="finch is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38749"/>
            <criterion comment="pidgin-perl is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38576"/>
            <criterion comment="pidgin is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38730"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9004" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP before 5.1.5 allows remote attackers to have an unknown impact via a GIF file with input_code_size greater than MAX_LWZ_BITS, which triggers an overflow when initializing the table array.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4484"/>
        <description>Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP before 5.1.5 allows remote attackers to have an unknown impact via a GIF file with input_code_size greater than MAX_LWZ_BITS, which triggers an overflow when initializing the table array.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:38.944-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:04.556-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:05.178-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:9004 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:15.824-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:07.650-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32928"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32870"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32829"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32485"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32258"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32491"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32860"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32175"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32788"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:33059"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32876"/>
            <criterion comment="php is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32754"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:33047"/>
            <criterion comment="gd-progs is earlier than 0:2.0.28-5.4E.el4_6.1" test_ref="oval:org.mitre.oval:tst:35731"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:33052"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32964"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32700"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32272"/>
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32985"/>
            <criterion comment="gd-devel is earlier than 0:2.0.28-5.4E.el4_6.1" test_ref="oval:org.mitre.oval:tst:36408"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32808"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32962"/>
            <criterion comment="gd is earlier than 0:2.0.28-5.4E.el4_6.1" test_ref="oval:org.mitre.oval:tst:36386"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32483"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gd is earlier than 0:2.0.33-9.4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36297"/>
            <criterion comment="gd-devel is earlier than 0:2.0.33-9.4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36448"/>
            <criterion comment="gd-progs is earlier than 0:2.0.33-9.4.el5_1.1" test_ref="oval:org.mitre.oval:tst:35759"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9" version="4" class="vulnerability">
      <metadata>
        <title>Solaris 8 RPC xdr_array Buffer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>libnsl</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0391" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0391"/>
        <description>Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-01-28T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified date="2006-07-03T12:56:00.000-04:00" comment="Added negate=true attribute to criteria sub-block to fix conversion error from OVAL 4.2 to OVAL 5.0">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-07-03T12:56:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:40.134-04:00">ACCEPTED</status_change>
            <modified comment="fixed the service_name entity used in the inetd_object" date="2007-04-10T15:14:00.967-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-04-10T15:14:45.096-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:08.069-04:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:53.086-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:45.613-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criteria operator="OR" comment="rpc.cmsd or dmispd exist">
            <criterion comment="File rpc.cmsd exists" negate="false" test_ref="oval:org.mitre.oval:tst:3140"/>
            <criterion comment="File dmispd exists" negate="false" test_ref="oval:org.mitre.oval:tst:3139"/>
          </criteria>
          <criteria operator="AND" comment="Patches 108827-30 and 108901-06" negate="true">
            <criterion comment="Patch 108827-30 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:3138"/>
            <criterion comment="Patch 108901-06 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:3137"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="rpc.cmsd enabled OR dmispd running">
            <criteria operator="AND" comment="rpc.cmsd enabled">
              <criterion comment="inetd.conf contains rpc.cmsd" negate="false" test_ref="oval:org.mitre.oval:tst:3136"/>
              <criterion comment="inetd running" negate="false" test_ref="oval:org.mitre.oval:tst:3135"/>
              <criteria operator="OR" comment="File rpc.cmsd executable">
                <criterion comment="File rpc.cmsd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3134"/>
                <criterion comment="File rpc.cmsd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3133"/>
                <criterion comment="File rpc.cmsd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3132"/>
              </criteria>
            </criteria>
            <criterion comment="dmispd running" negate="false" test_ref="oval:org.mitre.oval:tst:3131"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8996" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via vectors related to (1) Include/pymem.h; (2) _csv.c, (3) _struct.c, (4) arraymodule.c, (5) audioop.c, (6) binascii.c, (7) cPickle.c, (8) cStringIO.c, (9) cjkcodecs/multibytecodec.c, (10) datetimemodule.c, (11) md5.c, (12) rgbimgmodule.c, and (13) stropmodule.c in Modules/; (14) bufferobject.c, (15) listobject.c, and (16) obmalloc.c in Objects/; (17) Parser/node.c; and (18) asdl.c, (19) ast.c, (20) bltinmodule.c, and (21) compile.c in Python/, as addressed by "checks for integer overflows, contributed by Google."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3143" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3143"/>
        <description>Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via vectors related to (1) Include/pymem.h; (2) _csv.c, (3) _struct.c, (4) arraymodule.c, (5) audioop.c, (6) binascii.c, (7) cPickle.c, (8) cStringIO.c, (9) cjkcodecs/multibytecodec.c, (10) datetimemodule.c, (11) md5.c, (12) rgbimgmodule.c, and (13) stropmodule.c in Modules/; (14) bufferobject.c, (15) listobject.c, and (16) obmalloc.c in Objects/; (17) Parser/node.c; and (18) asdl.c, (19) ast.c, (20) bltinmodule.c, and (21) compile.c in Python/, as addressed by "checks for integer overflows, contributed by Google."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:06.152-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:04.157-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:04.710-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:8996 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:15.932-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:07.005-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38704"/>
            <criterion comment="tkinter is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38695"/>
            <criterion comment="python-tools is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38872"/>
            <criterion comment="python is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38617"/>
            <criterion comment="python-docs is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:37965"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38916"/>
            <criterion comment="tkinter is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38703"/>
            <criterion comment="python-tools is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38787"/>
            <criterion comment="python is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38939"/>
            <criterion comment="python-docs is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38081"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38889"/>
            <criterion comment="tkinter is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38958"/>
            <criterion comment="python-tools is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38827"/>
            <criterion comment="python is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38282"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8994" version="5" class="vulnerability">
      <metadata>
        <title>Linux kernel 2.6.10 and 2.6.11rc1-bk6 uses different size types for offset arguments to the proc_file_read and locks_read_proc functions, which leads to a heap-based buffer overflow when a signed comparison causes negative integers to be used in a positive context.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0529" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0529"/>
        <description>Linux kernel 2.6.10 and 2.6.11rc1-bk6 uses different size types for offset arguments to the proc_file_read and locks_read_proc functions, which leads to a heap-based buffer overflow when a signed comparison causes negative integers to be used in a positive context.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:20.926-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:03.719-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:04.441-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:8994 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:53.366-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:06.635-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31545"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31539"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31661"/>
          <criterion comment="kernel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31482"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31112"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31605"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31330"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8992" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors in the (1) session, (2) zip, (3) imap, and (4) sqlite extensions; (5) stream filters; and the (6) str_replace, (7) mail, (8) ibase_delete_user, (9) ibase_add_user, and (10) ibase_modify_user functions.  NOTE: vector 6 might actually be an integer overflow (CVE-2007-1885).  NOTE: as of 20070411, vector (3) might involve the imap_mail_compose function (CVE-2007-1825).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0906" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0906"/>
        <description>Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors in the (1) session, (2) zip, (3) imap, and (4) sqlite extensions; (5) stream filters; and the (6) str_replace, (7) mail, (8) ibase_delete_user, (9) ibase_add_user, and (10) ibase_modify_user functions.  NOTE: vector 6 might actually be an integer overflow (CVE-2007-1885).  NOTE: as of 20070411, vector (3) might involve the imap_mail_compose function (CVE-2007-1825).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:16:30.268-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:02.968-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:03.653-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:8992 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:43.245-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:05.722-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33459"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33371"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33748"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33090"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33419"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33665"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33475"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33282"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33636"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33548"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33156"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33407"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33562"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33500"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33725"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33105"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33501"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33691"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33662"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33087"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33640"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:32784"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33240"/>
            <criterion comment="php-common is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33527"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33617"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33561"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33385"/>
            <criterion comment="php is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33615"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33526"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33747"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33735"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33403"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33686"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33502"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33666"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33508"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33652"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33676"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33784"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33706"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:899" version="6" class="vulnerability">
      <metadata>
        <title>HP-UX 11.04 Path MTU Discovery Attack Vulnerability</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1060" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1060"/>
        <description>Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:48:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:54.417-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:16:01.065-04:00">ACCEPTED</status_change>
            <modified comment="Added title." date="2007-02-22T17:23:00.955-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-02-22T17:23:41.998-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:28.351-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:31.562-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:13.792-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:899 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:04:58.073-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:48.788-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.04">
          <criteria operator="AND" comment="700 Series OS Release 11.04">
            <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:3443"/>
            <criterion comment="HP Release B.11.04" test_ref="oval:org.mitre.oval:tst:3294"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 11.04">
            <criterion comment="800-series HP" test_ref="oval:org.mitre.oval:tst:4124"/>
            <criterion comment="HP Release B.11.04" test_ref="oval:org.mitre.oval:tst:3294"/>
          </criteria>
        </criteria>
        <criterion negate="true" comment="Patch PHNE_33427 is installed" test_ref="oval:org.mitre.oval:tst:3468"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8978" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the ProcRenderCreateCursor function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to cause a denial of service (daemon crash) via unspecified request fields that are used to calculate a glyph buffer size, which triggers a dereference of unmapped memory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2361" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2361"/>
        <description>Integer overflow in the ProcRenderCreateCursor function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to cause a denial of service (daemon crash) via unspecified request fields that are used to calculate a glyph buffer size, which triggers a dereference of unmapped memory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:45.717-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:01.661-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:02.694-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:8978 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:13.119-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:04.559-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36946"/>
            <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36579"/>
            <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36881"/>
            <criterion comment="XFree86-libs is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36895"/>
            <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36542"/>
            <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36866"/>
            <criterion comment="XFree86-twm is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36934"/>
            <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36951"/>
            <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36973"/>
            <criterion comment="XFree86-doc is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36756"/>
            <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36632"/>
            <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36469"/>
            <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36368"/>
            <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36851"/>
            <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36740"/>
            <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36985"/>
            <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36805"/>
            <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36754"/>
            <criterion comment="XFree86-xdm is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36734"/>
            <criterion comment="XFree86-sdk is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36918"/>
            <criterion comment="XFree86 is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36499"/>
            <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36402"/>
            <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36931"/>
            <criterion comment="XFree86-xfs is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36752"/>
            <criterion comment="XFree86-tools is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36976"/>
            <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36867"/>
            <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36115"/>
            <criterion comment="XFree86-xauth is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36794"/>
            <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36943"/>
            <criterion comment="XFree86-devel is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36905"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36908"/>
            <criterion comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36685"/>
            <criterion comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36662"/>
            <criterion comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36309"/>
            <criterion comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36944"/>
            <criterion comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36641"/>
            <criterion comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36607"/>
            <criterion comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36651"/>
            <criterion comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36977"/>
            <criterion comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36939"/>
            <criterion comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36385"/>
            <criterion comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36979"/>
            <criterion comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36933"/>
            <criterion comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36742"/>
            <criterion comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36873"/>
            <criterion comment="xorg-x11 is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36932"/>
            <criterion comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:35995"/>
            <criterion comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36941"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-server-randr-source is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:37018"/>
            <criterion comment="xorg-x11-server-Xnest is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36836"/>
            <criterion comment="xorg-x11-server-Xvfb is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36063"/>
            <criterion comment="xorg-x11-server-Xdmx is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36029"/>
            <criterion comment="xorg-x11-server is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36986"/>
            <criterion comment="xorg-x11-server-sdk is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36380"/>
            <criterion comment="xorg-x11-server-Xephyr is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36055"/>
            <criterion comment="xorg-x11-server-Xorg is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36359"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8969" version="5" class="vulnerability">
      <metadata>
        <title>Multiple untrusted search path vulnerabilities in dstat before 0.7.0 allow local users to gain privileges via a Trojan horse Python module in (1) the current working directory or (2) a certain subdirectory of the current working directory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3894" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3894"/>
        <description>Multiple untrusted search path vulnerabilities in dstat before 0.7.0 allow local users to gain privileges via a Trojan horse Python module in (1) the current working directory or (2) a certain subdirectory of the current working directory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:09:56.239-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:01.464-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:02.494-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:8969 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:29.963-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:04.244-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="dstat is earlier than 0:0.6.6-3.el5_4.1" test_ref="oval:org.mitre.oval:tst:39568"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8968" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in filter\starcalc\scflt.cxx in the StarCalc parser in OpenOffice.org (OOo) Office Suite before 2.2, and 1.x before 1.1.5 Patch, allows user-assisted remote attackers to execute arbitrary code via a document with a long Note.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0238"/>
        <description>Stack-based buffer overflow in filter\starcalc\scflt.cxx in the StarCalc parser in OpenOffice.org (OOo) Office Suite before 2.2, and 1.x before 1.1.5 Patch, allows user-assisted remote attackers to execute arbitrary code via a document with a long Note.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:45.986-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:11:00.206-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:01.225-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:8968 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:08:51.318-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:02.630-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-38.2.0.EL3" test_ref="oval:org.mitre.oval:tst:33440"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.2-38.2.0.EL3" test_ref="oval:org.mitre.oval:tst:33125"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-38.2.0.EL3" test_ref="oval:org.mitre.oval:tst:33421"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.EL4" test_ref="oval:org.mitre.oval:tst:33334"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.5-10.6.0.EL4" test_ref="oval:org.mitre.oval:tst:33202"/>
            <criterion comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.EL4" test_ref="oval:org.mitre.oval:tst:33265"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.EL4" test_ref="oval:org.mitre.oval:tst:33436"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-langpack-sk_SK is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33388"/>
            <criterion comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33424"/>
            <criterion comment="openoffice.org-langpack-pa_IN is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33485"/>
            <criterion comment="openoffice.org-langpack-hi_IN is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33323"/>
            <criterion comment="openoffice.org-langpack-et_EE is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33367"/>
            <criterion comment="openoffice.org-langpack-kn_IN is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33452"/>
            <criterion comment="openoffice.org is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33446"/>
            <criterion comment="openoffice.org-langpack-zh_TW is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33301"/>
            <criterion comment="openoffice.org-writer is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33679"/>
            <criterion comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33157"/>
            <criterion comment="openoffice.org-langpack-ga_IE is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33463"/>
            <criterion comment="openoffice.org-langpack-ta_IN is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33142"/>
            <criterion comment="openoffice.org-langpack-ko_KR is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33606"/>
            <criterion comment="openoffice.org-langpack-or_IN is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33009"/>
            <criterion comment="openoffice.org-langpack-da_DK is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33302"/>
            <criterion comment="openoffice.org-langpack-sr_CS is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33387"/>
            <criterion comment="openoffice.org-langpack-pl_PL is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33013"/>
            <criterion comment="openoffice.org-langpack-fr is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33611"/>
            <criterion comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33638"/>
            <criterion comment="openoffice.org-javafilter is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33048"/>
            <criterion comment="openoffice.org-langpack-as_IN is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33513"/>
            <criterion comment="openoffice.org-testtools is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33756"/>
            <criterion comment="openoffice.org-langpack-hr_HR is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33355"/>
            <criterion comment="openoffice.org-langpack-de is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33147"/>
            <criterion comment="openoffice.org-emailmerge is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33448"/>
            <criterion comment="openoffice.org-xsltfilter is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33749"/>
            <criterion comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33529"/>
            <criterion comment="openoffice.org-langpack-te_IN is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33254"/>
            <criterion comment="openoffice.org-langpack-sv is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33659"/>
            <criterion comment="openoffice.org-base is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33060"/>
            <criterion comment="openoffice.org-langpack-ca_ES is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33039"/>
            <criterion comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33271"/>
            <criterion comment="openoffice.org-core is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33389"/>
            <criterion comment="openoffice.org-langpack-nl is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33476"/>
            <criterion comment="openoffice.org-langpack-ur is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33477"/>
            <criterion comment="openoffice.org-langpack-nn_NO is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33051"/>
            <criterion comment="openoffice.org-langpack-ar is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33313"/>
            <criterion comment="openoffice.org-langpack-ja_JP is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33511"/>
            <criterion comment="openoffice.org-langpack-gu_IN is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:32740"/>
            <criterion comment="openoffice.org-langpack-tr_TR is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33552"/>
            <criterion comment="openoffice.org-langpack-eu_ES is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33490"/>
            <criterion comment="openoffice.org-langpack-fi_FI is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33514"/>
            <criterion comment="openoffice.org-graphicfilter is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33365"/>
            <criterion comment="openoffice.org-pyuno is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33599"/>
            <criterion comment="openoffice.org-langpack-ml_IN is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33533"/>
            <criterion comment="openoffice.org-langpack-gl_ES is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33023"/>
            <criterion comment="openoffice.org-langpack-zh_CN is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33160"/>
            <criterion comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33553"/>
            <criterion comment="openoffice.org-langpack-it is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33401"/>
            <criterion comment="openoffice.org-langpack-es is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33480"/>
            <criterion comment="openoffice.org-langpack-nb_NO is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33168"/>
            <criterion comment="openoffice.org-langpack-sl_SI is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33643"/>
            <criterion comment="openoffice.org-draw is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33451"/>
            <criterion comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33201"/>
            <criterion comment="openoffice.org-langpack-ms_MY is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33486"/>
            <criterion comment="openoffice.org-langpack-el_GR is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:32762"/>
            <criterion comment="openoffice.org-langpack-hu_HU is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33450"/>
            <criterion comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33579"/>
            <criterion comment="openoffice.org-langpack-bn is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33544"/>
            <criterion comment="openoffice.org-langpack-he_IL is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33358"/>
            <criterion comment="openoffice.org-langpack-pt_PT is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33604"/>
            <criterion comment="openoffice.org-langpack-lt_LT is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33212"/>
            <criterion comment="openoffice.org-langpack-af_ZA is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33377"/>
            <criterion comment="openoffice.org-langpack-bg_BG is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33364"/>
            <criterion comment="openoffice.org-calc is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33111"/>
            <criterion comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33324"/>
            <criterion comment="openoffice.org-langpack-cy_GB is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33471"/>
            <criterion comment="openoffice.org-langpack-mr_IN is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33420"/>
            <criterion comment="openoffice.org-langpack-th_TH is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33670"/>
            <criterion comment="openoffice.org-langpack-pt_BR is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:32682"/>
            <criterion comment="openoffice.org-langpack-ru is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33543"/>
            <criterion comment="openoffice.org-math is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33517"/>
            <criterion comment="openoffice.org-impress is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33393"/>
            <criterion comment="openoffice.org-langpack-st_ZA is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33484"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8966" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the fbShmPutImage function in the MIT-SHM extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to read arbitrary process memory via crafted values for a Pixmap width and height.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1379" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1379"/>
        <description>Integer overflow in the fbShmPutImage function in the MIT-SHM extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to read arbitrary process memory via crafted values for a Pixmap width and height.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:16.195-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:59.257-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:12:00.268-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:8966 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:08:48.747-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:00.918-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36946"/>
            <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36579"/>
            <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36881"/>
            <criterion comment="XFree86-libs is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36895"/>
            <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36542"/>
            <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36866"/>
            <criterion comment="XFree86-twm is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36934"/>
            <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36951"/>
            <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36973"/>
            <criterion comment="XFree86-doc is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36756"/>
            <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36632"/>
            <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36469"/>
            <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36368"/>
            <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36851"/>
            <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36740"/>
            <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36985"/>
            <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36805"/>
            <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36754"/>
            <criterion comment="XFree86-xdm is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36734"/>
            <criterion comment="XFree86-sdk is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36918"/>
            <criterion comment="XFree86 is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36499"/>
            <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36402"/>
            <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36931"/>
            <criterion comment="XFree86-xfs is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36752"/>
            <criterion comment="XFree86-tools is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36976"/>
            <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36867"/>
            <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36115"/>
            <criterion comment="XFree86-xauth is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36794"/>
            <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36943"/>
            <criterion comment="XFree86-devel is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36905"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36908"/>
            <criterion comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36685"/>
            <criterion comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36662"/>
            <criterion comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36309"/>
            <criterion comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36944"/>
            <criterion comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36641"/>
            <criterion comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36607"/>
            <criterion comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36651"/>
            <criterion comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36977"/>
            <criterion comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36939"/>
            <criterion comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36385"/>
            <criterion comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36979"/>
            <criterion comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36933"/>
            <criterion comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36742"/>
            <criterion comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36873"/>
            <criterion comment="xorg-x11 is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36932"/>
            <criterion comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:35995"/>
            <criterion comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36941"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-server-randr-source is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:37018"/>
            <criterion comment="xorg-x11-server-Xnest is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36836"/>
            <criterion comment="xorg-x11-server-Xvfb is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36063"/>
            <criterion comment="xorg-x11-server-Xdmx is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36029"/>
            <criterion comment="xorg-x11-server is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36986"/>
            <criterion comment="xorg-x11-server-sdk is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36380"/>
            <criterion comment="xorg-x11-server-Xephyr is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36055"/>
            <criterion comment="xorg-x11-server-Xorg is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36359"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8944" version="5" class="vulnerability">
      <metadata>
        <title>fs/ecryptfs/inode.c in the eCryptfs subsystem in the Linux kernel before 2.6.28.1 allows local users to cause a denial of service (fault or memory corruption), or possibly have unspecified other impact, via a readlink call that results in an error, leading to use of a -1 return value as an array index.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0269" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0269"/>
        <description>fs/ecryptfs/inode.c in the eCryptfs subsystem in the Linux kernel before 2.6.28.1 allows local users to cause a denial of service (fault or memory corruption), or possibly have unspecified other impact, via a readlink call that results in an error, leading to use of a -1 return value as an array index.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:15.884-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:58.875-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:59.877-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:8944 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:53.540-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:00.476-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38113"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38107"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38167"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38064"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38380"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:37672"/>
          <criterion comment="kernel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38093"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38127"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38109"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38430"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:37764"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38397"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8931" version="5" class="vulnerability">
      <metadata>
        <title>GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecified vectors related to org.freedesktop.NetworkManagerUserSettings and at_console.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0578" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0578"/>
        <description>GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecified vectors related to org.freedesktop.NetworkManagerUserSettings and at_console.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:55.796-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:58.639-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:59.636-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:8931 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:49.858-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:18:00.135-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="NetworkManager-gnome is earlier than 1:0.7.0-4.el5_3" test_ref="oval:org.mitre.oval:tst:38177"/>
          <criterion comment="NetworkManager-glib-devel is earlier than 1:0.7.0-4.el5_3" test_ref="oval:org.mitre.oval:tst:38557"/>
          <criterion comment="NetworkManager-glib is earlier than 1:0.7.0-4.el5_3" test_ref="oval:org.mitre.oval:tst:38175"/>
          <criterion comment="NetworkManager-devel is earlier than 1:0.7.0-4.el5_3" test_ref="oval:org.mitre.oval:tst:38098"/>
          <criterion comment="NetworkManager is earlier than 1:0.7.0-4.el5_3" test_ref="oval:org.mitre.oval:tst:38451"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:893" version="1" class="vulnerability">
      <metadata>
        <title>Windows 2000 RPCSS DCOM Buffer Overflow (Blaster, Test 3)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Remote Procedure Call (RPC)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0813" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0813"/>
        <description>A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (crash or reboot) by causing two threads to process the same RPC request, which causes one thread to use memory after it has been freed, a different vulnerability than CVE-2003-0352 (Blaster/Nachi), CVE-2003-0715, and CVE-2003-0528, and as demonstrated by certain exploits against those vulnerabilities.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-20T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="the version of rpcrt4.dll is less than 5.0.2195.6904" negate="false" test_ref="oval:org.mitre.oval:tst:1500"/>
        <criterion comment="the patch kb828741 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1499"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8920" version="5" class="vulnerability">
      <metadata>
        <title>The shmem_getpage function (mm/shmem.c) in Linux kernel 2.6.11 through 2.6.23 does not properly clear allocated memory in some rare circumstances related to tmpfs, which might allow local users to read sensitive kernel data or cause a denial of service (crash).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6417" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6417"/>
        <description>The shmem_getpage function (mm/shmem.c) in Linux kernel 2.6.11 through 2.6.23 does not properly clear allocated memory in some rare circumstances related to tmpfs, which might allow local users to read sensitive kernel data or cause a denial of service (crash).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:08.667-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:58.321-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:59.299-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:8920 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:34.211-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:17:59.667-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37589"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37288"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37600"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37692"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37104"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37681"/>
          <criterion comment="kernel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37688"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37710"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37698"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37703"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37665"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37649"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:892" version="2" class="vulnerability">
      <metadata>
        <title>Windows 2000 SSL Library Denial of Service</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Secure Sockets Layer (SSL)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0120" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0120"/>
        <description>The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service via malformed SSL messages.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected to use a forward slash as the separator in the key." date="2007-05-07T15:59:00.528-04:00">
              <contributor organization="Secure Elements, Inc.">Glenn Strickland</contributor>
            </modified>
            <status_change date="2007-05-07T16:06:48.669-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:54.714-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="the version of schannel.dll is less than 5.1.2195.6899" negate="false" test_ref="oval:org.mitre.oval:tst:1501"/>
          <criterion comment="the patch kb835732 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1510"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="SSL is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:1508"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8916" version="5" class="vulnerability">
      <metadata>
        <title>The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka "Uninitialized stack values."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0063"/>
        <description>The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka "Uninitialized stack values."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:11:11.357-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:57.885-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:58.850-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:8916 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:45.662-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:17:59.083-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.2.7-68" test_ref="oval:org.mitre.oval:tst:36272"/>
            <criterion comment="krb5 is earlier than 0:1.2.7-68" test_ref="oval:org.mitre.oval:tst:36493"/>
            <criterion comment="krb5-libs is earlier than 0:1.2.7-68" test_ref="oval:org.mitre.oval:tst:36531"/>
            <criterion comment="krb5-server is earlier than 0:1.2.7-68" test_ref="oval:org.mitre.oval:tst:36304"/>
            <criterion comment="krb5-devel is earlier than 0:1.2.7-68" test_ref="oval:org.mitre.oval:tst:36522"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.3.4-54.el4_6.1" test_ref="oval:org.mitre.oval:tst:36541"/>
            <criterion comment="krb5 is earlier than 0:1.3.4-54.el4_6.1" test_ref="oval:org.mitre.oval:tst:36418"/>
            <criterion comment="krb5-libs is earlier than 0:1.3.4-54.el4_6.1" test_ref="oval:org.mitre.oval:tst:36371"/>
            <criterion comment="krb5-server is earlier than 0:1.3.4-54.el4_6.1" test_ref="oval:org.mitre.oval:tst:36482"/>
            <criterion comment="krb5-devel is earlier than 0:1.3.4-54.el4_6.1" test_ref="oval:org.mitre.oval:tst:36207"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.6.1-17.el5_1.1" test_ref="oval:org.mitre.oval:tst:36318"/>
            <criterion comment="krb5 is earlier than 0:1.6.1-17.el5_1.1" test_ref="oval:org.mitre.oval:tst:36285"/>
            <criterion comment="krb5-libs is earlier than 0:1.6.1-17.el5_1.1" test_ref="oval:org.mitre.oval:tst:36069"/>
            <criterion comment="krb5-server is earlier than 0:1.6.1-17.el5_1.1" test_ref="oval:org.mitre.oval:tst:36233"/>
            <criterion comment="krb5-devel is earlier than 0:1.6.1-17.el5_1.1" test_ref="oval:org.mitre.oval:tst:36199"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:891" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Enterprise 3 Ethereal Denial of Service via Malformed RADIUS Packet</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0365" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0365"/>
        <description>The dissect_attribute_value_pairs function in packet-radius.c for Ethereal 0.8.13 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a malformed RADIUS packet that triggers a null dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-08T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <modified date="2004-05-11T12:00:00.000-04:00" comment="Corrected pattern used in rrt-206">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:20.992-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:07.785-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criteria operator="OR" comment="Vulnerable Config">
            <criterion comment="ethereal version is less than 0.10.3-0.30E.1" negate="false" test_ref="oval:org.mitre.oval:tst:1505"/>
            <criterion comment="ethereal-gnome version is less than 0.10.3-0.30E.1" negate="false" test_ref="oval:org.mitre.oval:tst:1504"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="Vulnerable Config">
            <criteria operator="OR" comment="/usr/bin/ethereal is executable">
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1529"/>
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1528"/>
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1527"/>
            </criteria>
            <criteria operator="OR" comment="/usr/sbin/ethereal is executable">
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1526"/>
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1525"/>
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1524"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/tethereal is executable">
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1523"/>
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1522"/>
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1521"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:890" version="1" class="vulnerability">
      <metadata>
        <title>Windows 2000 Local Descriptor Table Kernel Access Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Local Descriptor Table (LDT)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0910" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0910"/>
        <description>The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows local attackers to gain access to kernel memory and execute arbitrary code via an expand-down data segment descriptor descriptor that points to protected memory.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="the version of wintrust.dll is less than 5.131.2195.6824" negate="false" test_ref="oval:org.mitre.oval:tst:1502"/>
        <criterion comment="the patch kb835732 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1510"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:89" version="6" class="vulnerability">
      <metadata>
        <title>Windows 2000 MUP UNC Request Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Multiple UNC Provider (MUP)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0151" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0151"/>
        <description>Buffer overflow in Multiple UNC Provider (MUP) in Microsoft Windows operating systems allows local users to cause a denial of service or possibly gain SYSTEM privileges via a long UNC request.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-05-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2884" date="2010-11-29T16:14:00.692-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:38.663-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:01:40.909-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:50.245-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:33.870-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="File %windir%\system32\drivers\mup.sys version is less than 5.0.2195.5080" negate="false" test_ref="oval:org.mitre.oval:tst:2957"/>
        <criterion comment="Patch Q311967 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2956"/>
        <criterion comment="Win2K/XP/2003 service pack 3 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:3079"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8896" version="5" class="vulnerability">
      <metadata>
        <title>Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0803" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0803"/>
        <description>Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:03.181-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:57.571-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:58.425-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:8896 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:34.296-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:17:58.649-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="tetex-latex is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31559"/>
          <criterion comment="kdegraphics-devel is earlier than 7:3.1.3-3.7" test_ref="oval:org.mitre.oval:tst:30890"/>
          <criterion comment="libtiff is earlier than 0:3.5.7-20.1" test_ref="oval:org.mitre.oval:tst:31042"/>
          <criterion comment="tetex-dvips is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31693"/>
          <criterion comment="kdegraphics is earlier than 7:3.1.3-3.7" test_ref="oval:org.mitre.oval:tst:31096"/>
          <criterion comment="tetex-fonts is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31615"/>
          <criterion comment="tetex is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31603"/>
          <criterion comment="libtiff-devel is earlier than 0:3.5.7-20.1" test_ref="oval:org.mitre.oval:tst:31022"/>
          <criterion comment="tetex-afm is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31685"/>
          <criterion comment="tetex-xdvi is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31747"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8888" version="5" class="vulnerability">
      <metadata>
        <title>** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-0689.  Reason: This candidate is a duplicate of CVE-2009-0689.  Certain codebase relationships were not originally clear.  Notes: All CVE users should reference CVE-2009-0689 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1563" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1563"/>
        <description>** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-0689.  Reason: This candidate is a duplicate of CVE-2009-0689.  Certain codebase relationships were not originally clear.  Notes: All CVE users should reference CVE-2009-0689 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:34.973-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:56.979-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:57.837-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:8888 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:18:44.345-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:17:57.864-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39570"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39466"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39720"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39691"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39583"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39280"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39727"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39550"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39575"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39724"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nspr is earlier than 0:4.7.6-1.el4_8" test_ref="oval:org.mitre.oval:tst:39525"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39481"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.6-1.el4_8" test_ref="oval:org.mitre.oval:tst:38755"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39675"/>
            <criterion comment="firefox is earlier than 0:3.0.15-3.el4" test_ref="oval:org.mitre.oval:tst:39710"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39683"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39031"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39547"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39753"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39602"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39541"/>
            <criterion comment="nspr is earlier than 0:4.7.6-1.el5_4" test_ref="oval:org.mitre.oval:tst:39168"/>
            <criterion comment="firefox is earlier than 0:3.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39294"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.6-1.el5_4" test_ref="oval:org.mitre.oval:tst:39579"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39636"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8884" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains (1) CNAME or (2) DNAME records, which do not have the intended validation before caching, aka Bug 20737.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4022.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0290" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0290"/>
        <description>Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains (1) CNAME or (2) DNAME records, which do not have the intended validation before caching, aka Bug 20737.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4022.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:51.664-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:56.706-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:57.555-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:8884 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:14.969-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:17:57.373-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="bind-utils is earlier than 30:9.3.6-4.P1.el5_4.2" test_ref="oval:org.mitre.oval:tst:40044"/>
          <criterion comment="bind-libbind-devel is earlier than 30:9.3.6-4.P1.el5_4.2" test_ref="oval:org.mitre.oval:tst:39542"/>
          <criterion comment="bind-devel is earlier than 30:9.3.6-4.P1.el5_4.2" test_ref="oval:org.mitre.oval:tst:39904"/>
          <criterion comment="bind-chroot is earlier than 30:9.3.6-4.P1.el5_4.2" test_ref="oval:org.mitre.oval:tst:39693"/>
          <criterion comment="caching-nameserver is earlier than 30:9.3.6-4.P1.el5_4.2" test_ref="oval:org.mitre.oval:tst:39892"/>
          <criterion comment="bind-sdb is earlier than 30:9.3.6-4.P1.el5_4.2" test_ref="oval:org.mitre.oval:tst:40054"/>
          <criterion comment="bind is earlier than 30:9.3.6-4.P1.el5_4.2" test_ref="oval:org.mitre.oval:tst:39489"/>
          <criterion comment="bind-libs is earlier than 30:9.3.6-4.P1.el5_4.2" test_ref="oval:org.mitre.oval:tst:39885"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8880" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 2.0.0.14, and other versions before 2.0.0.17, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via HTML-escaped low surrogate characters that are ignored by the HTML parser, as demonstrated by a "javascript" sequence, aka "HTML escaped low surrogates bug."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4066" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4066"/>
        <description>Mozilla Firefox 2.0.0.14, and other versions before 2.0.0.17, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via HTML-escaped low surrogate characters that are ignored by the HTML parser, as demonstrated by a "jav&amp;#56325ascript" sequence, aka "HTML escaped low surrogates bug."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:22.936-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:56.240-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:57.063-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:8880 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:24.188-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:17:56.690-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37411"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36691"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37031"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37528"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36726"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37435"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37680"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36725"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37449"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37356"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.10.el4" test_ref="oval:org.mitre.oval:tst:37564"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:36913"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-16.el4" test_ref="oval:org.mitre.oval:tst:37634"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37609"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.10.el4" test_ref="oval:org.mitre.oval:tst:37306"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37499"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37444"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37543"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37552"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="thunderbird is earlier than 0:2.0.0.17-1.el5" test_ref="oval:org.mitre.oval:tst:37230"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:888" version="5" class="vulnerability">
      <metadata>
        <title>IE5.01,SP4 Web Folder Behaviors Cross-Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1989" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1989"/>
        <description>Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to obtain information and possibly execute code when browsing from a web site to a web folder view using WebDAV, aka "Web Folder Behaviors Cross-Domain Vulnerability".</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-23T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-08-25T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed reference to patch kb896727 from criteria.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:44.943-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:41:01.509-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:36.936-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:28.047-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3831.1800" negate="false" test_ref="oval:org.mitre.oval:tst:2664"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8872" version="5" class="vulnerability">
      <metadata>
        <title>The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4308" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4308"/>
        <description>The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:46.912-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:55.587-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:56.417-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:8872 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:02.975-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:17:55.841-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35660"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35620"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35663"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35627"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35653"/>
            <criterion comment="kernel is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35769"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35035"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35699"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:34809"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34864"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35017"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35145"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34442"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35258"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35254"/>
            <criterion comment="kernel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35373"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34480"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34911"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34923"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35327"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35330"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35339"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35337"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35227"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35043"/>
            <criterion comment="kernel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35276"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:34448"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35366"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35208"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35326"/>
            <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35345"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:887" version="2" class="vulnerability">
      <metadata>
        <title>Multiple BO Vulnerabilities in Red Hat Enterprise 3 Ethereal</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0176"/>
        <description>Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-08T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <modified date="2004-05-11T12:00:00.000-04:00" comment="Corrected pattern used in rrt-206">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:37.108-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:07.514-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criteria operator="OR" comment="Vulnerable Config">
            <criterion comment="ethereal version is less than 0.10.3-0.30E.1" negate="false" test_ref="oval:org.mitre.oval:tst:1505"/>
            <criterion comment="ethereal-gnome version is less than 0.10.3-0.30E.1" negate="false" test_ref="oval:org.mitre.oval:tst:1504"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="Vulnerable Config">
            <criteria operator="OR" comment="/usr/bin/ethereal is executable">
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1529"/>
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1528"/>
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1527"/>
            </criteria>
            <criteria operator="OR" comment="/usr/sbin/ethereal is executable">
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1526"/>
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1525"/>
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1524"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/tethereal is executable">
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1523"/>
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1522"/>
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1521"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8850" version="5" class="vulnerability">
      <metadata>
        <title>Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL) 5 and Fedora 6 through 8, and on Foresight Linux and rPath appliances, allows remote attackers to cause a denial of service (memory consumption) via a large number of CWD commands, as demonstrated by an attack on a daemon with the deny_file configuration option.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5962" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5962"/>
        <description>Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL) 5 and Fedora 6 through 8, and on Foresight Linux and rPath appliances, allows remote attackers to cause a denial of service (memory consumption) via a large number of CWD commands, as demonstrated by an attack on a daemon with the deny_file configuration option.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:32.364-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:55.401-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:56.222-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:8850 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:54.367-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:17:55.546-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="vsftpd is earlier than 0:2.0.5-12.el5" test_ref="oval:org.mitre.oval:tst:36561"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8844" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1096" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1096"/>
        <description>Buffer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:13.253-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:55.174-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:55.934-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:8844 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:41.675-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:17:55.198-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:38276"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37661"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37652"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37769"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:38561"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8843" version="5" class="vulnerability">
      <metadata>
        <title>Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0817" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0817"/>
        <description>Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:45.674-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:54.909-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:55.731-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:8843 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:16.851-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:17:54.870-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="imlib is earlier than 1:1.9.13-13.3" test_ref="oval:org.mitre.oval:tst:30862"/>
          <criterion comment="imlib-devel is earlier than 1:1.9.13-13.3" test_ref="oval:org.mitre.oval:tst:30970"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8841" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to "information leaks in mutable variables," aka Bug Id 6657026.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3882" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3882"/>
        <description>Multiple unspecified vulnerabilities in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to "information leaks in mutable variables," aka Bug Id 6657026.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:54.796-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:54.684-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:55.490-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:8841 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:30.622-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:17:54.534-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:38878"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39616"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39115"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39531"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39655"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8833" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service and possibly execute arbitrary code via long UIDL responses.  NOTE: a typo in an advisory accidentally used the wrong CVE identifier for the Fetchmail issue. This is the correct identifier.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2335" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2335"/>
        <description>Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service and possibly execute arbitrary code via long UIDL responses.  NOTE: a typo in an advisory accidentally used the wrong CVE identifier for the Fetchmail issue. This is the correct identifier.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:15:01.150-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:54.466-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:55.259-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:8833 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:30.953-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:17:54.184-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="fetchmail is earlier than 0:6.2.0-3.el3.2" test_ref="oval:org.mitre.oval:tst:31634"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="fetchmail is earlier than 0:6.2.5-6.el4.2" test_ref="oval:org.mitre.oval:tst:32163"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:883" version="1" class="vulnerability">
      <metadata>
        <title>Windows 2000 LSASS Buffer Overflow (Sasser Worm Vulnerability)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Local Security Authority Subsystem Service (LSASS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0533" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0533"/>
        <description>Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via a packet that causes the DsRolerUpgradeDownlevelServer function to create long debug entries for the DCPROMO.LOG log file, as exploited by the Sasser worm.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="the version of lsasrv.dll is less than 5.0.2195.6902" negate="false" test_ref="oval:org.mitre.oval:tst:1511"/>
        <criterion comment="the patch kb835732 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1510"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:882" version="1" class="vulnerability">
      <metadata>
        <title>Microsoft Outlook Express v5.5,SP2 MHTML URL Processing Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Outlook Express</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0380"/>
        <description>The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help (CHM) file that references the InfoTech Storage (ITS) protocol handlers such as (1) ms-its, (2) ms-itss, (3) its, or (4) mk:@MSITStore, aka the "MHTML URL Processing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Microsoft Outlook Express 5.5 SP2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1514"/>
        <criterion comment="the version of inetcomm.dll is less than 5.50.4939.300" negate="false" test_ref="oval:org.mitre.oval:tst:1513"/>
        <criterion comment="the patch kb837009 is installed (installed components key)" negate="true" test_ref="oval:org.mitre.oval:tst:1512"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:881" version="2" class="vulnerability">
      <metadata>
        <title>Bourne Shell Local-DoS Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1780" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1780"/>
        <description>The Bourne shell (sh) in Solaris 8, 9, and 10 allows local users to cause a denial of service (sh crash) via an unspecified attack vector that causes sh processes to crash during creation of temporary files.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-04-14T06:41:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-04-19T10:08:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-10T08:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Changed criterion to check for the patch or later being installed instead of simply checking if the patch is installed." date="2009-07-17T11:04:00.601-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </modified>
            <status_change date="2009-07-17T11:07:21.610-04:00">INTERIM</status_change>
            <status_change date="2009-08-03T04:00:04.542-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert ID 102282 criteria.">
          <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="sparc architecture" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Patch 109324-09 or later is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1520"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert ID 102282 criteria.">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="sparc architecture" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Patch 118535-03 or later is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1519"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert ID 102282 criteria.">
          <criterion comment="Solaris 10 Installed" test_ref="oval:org.mitre.oval:tst:2459"/>
          <criterion comment="sparc architecture" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Patch 121004-01 or later is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1518"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert ID 102282 criteria.">
          <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Patch 109325-09 or later is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1517"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert ID 102282 criteria.">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Patch 118536-03 or later is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1516"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert ID 102282 criteria.">
          <criterion comment="Solaris 10 Installed" test_ref="oval:org.mitre.oval:tst:2459"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Patch 121005-01 or later is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1515"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:880" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Ethereal Denial of Service via 0-Length Presentation Protocol Selector</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0367" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0367"/>
        <description>Ethereal 0.10.1 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a zero-length Presentation protocol selector.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-07T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:24.508-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:07.190-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criteria operator="OR" comment="Vulnerable Config">
            <criterion comment="ethereal version is less than 0.10.3-0.90.1" negate="false" test_ref="oval:org.mitre.oval:tst:1531"/>
            <criterion comment="ethereal-gnome version is less than 0.10.3-0.90.1" negate="false" test_ref="oval:org.mitre.oval:tst:1530"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="Vulnerable Config">
            <criteria operator="OR" comment="/usr/bin/ethereal is executable">
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1529"/>
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1528"/>
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1527"/>
            </criteria>
            <criteria operator="OR" comment="/usr/sbin/ethereal is executable">
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1526"/>
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1525"/>
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1524"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/tethereal is executable">
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1523"/>
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1522"/>
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1521"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:88" version="4" class="vulnerability">
      <metadata>
        <title>Ethereal SPNEGO Dissector Denial of Service Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Ethereal</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0430" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0430"/>
        <description>The SPNEGO dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service (crash) via an invalid ASN.1 value.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-29T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:35.658-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:06.986-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:88 - Typo Corrections" date="2014-05-22T11:01:00.943-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-05-22T11:03:38.946-04:00">INTERIM</status_change>
            <status_change date="2014-06-09T04:01:50.295-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Red Hat 9 is installed" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criteria operator="OR" comment="Vulnerable Config">
          <criterion comment="ethereal version is less than 0.9.13-1.90.1" test_ref="oval:org.mitre.oval:tst:2985"/>
          <criterion comment="ethereal-gnome version is less than 0.9.13-1.90.1" test_ref="oval:org.mitre.oval:tst:2984"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:879" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Ethereal Denial of Service via Malformed RADIUS Packet</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0365" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0365"/>
        <description>The dissect_attribute_value_pairs function in packet-radius.c for Ethereal 0.8.13 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a malformed RADIUS packet that triggers a null dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-07T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:45.657-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:06.701-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criteria operator="OR" comment="Vulnerable Config">
            <criterion comment="ethereal version is less than 0.10.3-0.90.1" negate="false" test_ref="oval:org.mitre.oval:tst:1531"/>
            <criterion comment="ethereal-gnome version is less than 0.10.3-0.90.1" negate="false" test_ref="oval:org.mitre.oval:tst:1530"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="Vulnerable Config">
            <criteria operator="OR" comment="/usr/bin/ethereal is executable">
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1529"/>
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1528"/>
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1527"/>
            </criteria>
            <criteria operator="OR" comment="/usr/sbin/ethereal is executable">
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1526"/>
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1525"/>
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1524"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/tethereal is executable">
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1523"/>
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1522"/>
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1521"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:878" version="2" class="vulnerability">
      <metadata>
        <title>Multiple BO Vulnerabilities in Red Hat Ethereal</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0176"/>
        <description>Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-07T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:37.429-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:06.459-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criteria operator="OR" comment="Vulnerable Config">
            <criterion comment="ethereal version is less than 0.10.3-0.90.1" negate="false" test_ref="oval:org.mitre.oval:tst:1531"/>
            <criterion comment="ethereal-gnome version is less than 0.10.3-0.90.1" negate="false" test_ref="oval:org.mitre.oval:tst:1530"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="Vulnerable Config">
            <criteria operator="OR" comment="/usr/bin/ethereal is executable">
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1529"/>
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1528"/>
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1527"/>
            </criteria>
            <criteria operator="OR" comment="/usr/sbin/ethereal is executable">
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1526"/>
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1525"/>
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1524"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/tethereal is executable">
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1523"/>
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1522"/>
              <criterion comment="/usr/bin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1521"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8778" version="5" class="vulnerability">
      <metadata>
        <title>The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could cause sensitive memory to be swapped to disk, which could allow it to be read by other users once it has been released.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0176"/>
        <description>The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could cause sensitive memory to be swapped to disk, which could allow it to be read by other users once it has been released.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:14:29.507-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:54.071-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:54.809-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:8778 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:58.932-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:17:53.609-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-32.0.1.EL" test_ref="oval:org.mitre.oval:tst:31870"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-32.0.1.EL" test_ref="oval:org.mitre.oval:tst:31657"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-32.0.1.EL" test_ref="oval:org.mitre.oval:tst:31642"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-32.0.1.EL" test_ref="oval:org.mitre.oval:tst:31984"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-32.0.1.EL" test_ref="oval:org.mitre.oval:tst:31213"/>
            <criterion comment="kernel is earlier than 0:2.4.21-32.0.1.EL" test_ref="oval:org.mitre.oval:tst:31839"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-32.0.1.EL" test_ref="oval:org.mitre.oval:tst:31941"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-32.0.1.EL" test_ref="oval:org.mitre.oval:tst:31760"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-32.0.1.EL" test_ref="oval:org.mitre.oval:tst:31960"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30633"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:31009"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30369"/>
            <criterion comment="kernel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:31205"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30421"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30594"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30616"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:877" version="4" class="vulnerability">
      <metadata>
        <title>Red Hat Squid ACL Bypass Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0189" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0189"/>
        <description>The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a URL with a NULL ("%00") characterm, which causes Squid to use only a portion of the requested URL when comparing it against the access control lists.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-07T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:22.363-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:06.268-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.366-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T21:00:44.076-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:45.311-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="squid version is less than 2.5STABLE1-3.9" negate="false" test_ref="oval:org.mitre.oval:tst:1533"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="squid is listening on the network" negate="false" test_ref="oval:org.mitre.oval:tst:1532"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8768" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in (1) filter/image-png.c and (2) filter/image-zoom.c in CUPS 1.3 allow attackers to cause a denial of service (crash) and trigger memory corruption, as demonstrated via a crafted PNG image.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1722" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1722"/>
        <description>Multiple integer overflows in (1) filter/image-png.c and (2) filter/image-zoom.c in CUPS 1.3 allow attackers to cause a denial of service (crash) and trigger memory corruption, as demonstrated via a crafted PNG image.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:44.986-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:53.535-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:54.458-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:8768 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:09.571-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:17:53.059-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 0:1.1.17-13.3.53" test_ref="oval:org.mitre.oval:tst:36975"/>
            <criterion comment="cups is earlier than 0:1.1.17-13.3.53" test_ref="oval:org.mitre.oval:tst:36705"/>
            <criterion comment="cups-libs is earlier than 0:1.1.17-13.3.53" test_ref="oval:org.mitre.oval:tst:36751"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 0:1.1.22-0.rc1.9.20.2.el4_6.8" test_ref="oval:org.mitre.oval:tst:36818"/>
            <criterion comment="cups is earlier than 0:1.1.22-0.rc1.9.20.2.el4_6.8" test_ref="oval:org.mitre.oval:tst:36974"/>
            <criterion comment="cups-libs is earlier than 0:1.1.22-0.rc1.9.20.2.el4_6.8" test_ref="oval:org.mitre.oval:tst:36816"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-lpd is earlier than 0:1.2.4-11.18.el5_2.1" test_ref="oval:org.mitre.oval:tst:36736"/>
            <criterion comment="cups-devel is earlier than 0:1.2.4-11.18.el5_2.1" test_ref="oval:org.mitre.oval:tst:36909"/>
            <criterion comment="cups is earlier than 0:1.2.4-11.18.el5_2.1" test_ref="oval:org.mitre.oval:tst:36512"/>
            <criterion comment="cups-libs is earlier than 0:1.2.4-11.18.el5_2.1" test_ref="oval:org.mitre.oval:tst:36915"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8765" version="5" class="vulnerability">
      <metadata>
        <title>Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform administrative actions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5086"/>
        <description>Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform administrative actions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:12:00.484-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:53.329-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:54.240-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:8765 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:47:13.437-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:17:52.700-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="libvirt-python is earlier than 0:0.3.3-14.el5_3.1" test_ref="oval:org.mitre.oval:tst:38518"/>
          <criterion comment="libvirt is earlier than 0:0.3.3-14.el5_3.1" test_ref="oval:org.mitre.oval:tst:38026"/>
          <criterion comment="libvirt-devel is earlier than 0:0.3.3-14.el5_3.1" test_ref="oval:org.mitre.oval:tst:38242"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:876" version="4" class="vulnerability">
      <metadata>
        <title>Apache 2 Denial of Service due to Memory Leak in mod_ssl</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>httpd</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0113" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0113"/>
        <description>Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service (memory consumption) via plain HTTP requests to the SSL port of an SSL-enabled server.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-26T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:31.325-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:06.035-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.470-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T21:00:00.400-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:44.890-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="mod_ssl version is less than 2.0.46-32.ent" negate="false" test_ref="oval:org.mitre.oval:tst:1534"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="httpd is listening to the network" negate="false" test_ref="oval:org.mitre.oval:tst:1611"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8758" version="3" class="vulnerability">
      <metadata>
        <title>Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier does not properly enforce access restrictions for untrusted (1) applications and (2) applets, which allows user-assisted remote attackers to copy or rename arbitrary files when local users perform drag-and-drop operations from the untrusted application or applet window onto certain types of desktop applications.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5239" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5239"/>
        <description>Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier does not properly enforce access restrictions for untrusted (1) applications and (2) applets, which allows user-assisted remote attackers to copy or rename arbitrary files when local users perform drag-and-drop operations from the untrusted application or applet window onto certain types of desktop applications.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:38.700-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:52.243-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:53.126-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criteria operator="OR">
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:35438"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:36312"/>
            <criterion comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:36020"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:36170"/>
            <criterion comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:36131"/>
            <criterion comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:35578"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:35718"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:36338"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:35439"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35617"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34688"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35272"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35892"/>
            <criterion comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35850"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:34849"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36357"/>
            <criterion comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36067"/>
            <criterion comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35854"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35532"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35673"/>
            <criterion comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.14-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36263"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36219"/>
            <criterion comment="java-1.5.0-bea is earlier than 0:1.5.0.14-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36444"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35110"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35478"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35875"/>
            <criterion comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35815"/>
            <criterion comment="java-1.5.0-bea-src is earlier than 0:1.5.0.14-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36470"/>
            <criterion comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.14-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36435"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34668"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35191"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35384"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35413"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35465"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36292"/>
            <criterion comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.14-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36151"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35057"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35644"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36198"/>
            <criterion comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35192"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36227"/>
            <criterion comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36087"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36003"/>
            <criterion comment="java-1.5.0-bea is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36374"/>
            <criterion comment="java-1.4.2-bea-demo is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36127"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35624"/>
            <criterion comment="java-1.5.0-ibm-accessibility is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35633"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35280"/>
            <criterion comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36290"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35256"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35453"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35822"/>
            <criterion comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36337"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35584"/>
            <criterion comment="java-1.4.2-bea-missioncontrol is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35296"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34760"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35317"/>
            <criterion comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35972"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35429"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36350"/>
            <criterion comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36261"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35144"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35886"/>
            <criterion comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36301"/>
            <criterion comment="java-1.5.0-bea-missioncontrol is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36452"/>
            <criterion comment="java-1.5.0-bea-src is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36372"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35437"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35392"/>
            <criterion comment="java-1.4.2-bea-src is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36128"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34772"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8757" version="5" class="vulnerability">
      <metadata>
        <title>GUI overlay vulnerability in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 allows remote attackers to spoof certain user interface elements, such as the host name or security indicators, via the CSS3 hotspot property with a large, transparent, custom cursor.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0779" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0779"/>
        <description>GUI overlay vulnerability in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 allows remote attackers to spoof certain user interface elements, such as the host name or security indicators, via the CSS3 hotspot property with a large, transparent, custom cursor.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:03.340-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:51.570-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:52.447-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:8757 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:29.311-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:17:51.395-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33391"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33688"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33675"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33724"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33510"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33409"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33467"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33658"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33649"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33381"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:32760"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33554"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33648"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.10-0.1.el4" test_ref="oval:org.mitre.oval:tst:32765"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33712"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33705"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33379"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:33400"/>
            <criterion comment="firefox is earlier than 0:1.5.0.10-0.1.el4" test_ref="oval:org.mitre.oval:tst:33759"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33678"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33695"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33697"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33244"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33645"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.10-2.el5" test_ref="oval:org.mitre.oval:tst:33461"/>
            <criterion comment="yelp is earlier than 0:2.16.0-14.0.1.el5" test_ref="oval:org.mitre.oval:tst:33761"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-10.0.1.el5" test_ref="oval:org.mitre.oval:tst:33744"/>
            <criterion comment="devhelp is earlier than 0:0.12-10.0.1.el5" test_ref="oval:org.mitre.oval:tst:33415"/>
            <criterion comment="firefox is earlier than 0:1.5.0.10-2.el5" test_ref="oval:org.mitre.oval:tst:33616"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.10-1.el5" test_ref="oval:org.mitre.oval:tst:33493"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:875" version="2" class="vulnerability">
      <metadata>
        <title>XMLSoft Libxml2 Code Execution Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>libxml2</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0110" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0110"/>
        <description>Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execute arbitrary code via a long URL.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-02-22T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:33.480-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:05.843-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criteria operator="OR" comment="Vulnerable Config">
          <criterion comment="libxml2 version is less than 2.5.10-6" negate="false" test_ref="oval:org.mitre.oval:tst:1609"/>
          <criterion comment="libxml2-devel version is less than 2.5.10-6" negate="false" test_ref="oval:org.mitre.oval:tst:1608"/>
          <criterion comment="libxml2-python version is less than 2.5.10-6" negate="false" test_ref="oval:org.mitre.oval:tst:1607"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:874" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Mozilla Zombie Document Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0191" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0191"/>
        <description>Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page (zombie document) and enable cross-domain and cross-site scripting (XSS) attacks, as demonstrated using onmousemove events.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-18T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:50.329-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:05.638-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="mozilla version is less than 1.4.2-0.9.0" negate="false" test_ref="oval:org.mitre.oval:tst:1538"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/bin/mozilla is executable">
            <criterion comment="/usr/bin/mozilla is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1537"/>
            <criterion comment="/usr/bin/mozilla is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1536"/>
            <criterion comment="/usr/bin/mozilla is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1535"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:873" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Mozilla Bypass Cookie Access Restrictions Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0594" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0594"/>
        <description>Mozilla allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Mozilla to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-18T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:24.788-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:05.449-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="mozilla version is less than 1.4.2-0.9.0" negate="false" test_ref="oval:org.mitre.oval:tst:1538"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/bin/mozilla is executable">
            <criterion comment="/usr/bin/mozilla is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1537"/>
            <criterion comment="/usr/bin/mozilla is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1536"/>
            <criterion comment="/usr/bin/mozilla is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1535"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:872" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat S/MIME Protocol Denial of Service Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0564" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0564"/>
        <description>Multiple vulnerabilities in multiple vendor implementations of the Secure/Multipurpose Internet Mail Extensions (S/MIME) protocol allow remote attackers to cause a denial of service and possibly execute arbitrary code via an S/MIME email message containing certain unexpected ASN.1 constructs, as demonstrated using the NISSC test suite.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-18T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:39.006-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:05.158-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="mozilla-nss version is less than 1.4.2-0.9.0" negate="false" test_ref="oval:org.mitre.oval:tst:1539"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:871" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Enterprise 3 OpenSSL Improper Unknown Message Handling Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>OpenSSL</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0081" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0081"/>
        <description>OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <modified date="2004-05-11T12:00:00.000-04:00" comment="Corrected pattern used in rrt-206">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:42.840-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:04.958-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="openssl version is less than 0.9.7a-33.4" negate="false" test_ref="oval:org.mitre.oval:tst:1543"/>
        <criterion comment="openssl-devel version is less than 0.9.7a-33.4" negate="false" test_ref="oval:org.mitre.oval:tst:1542"/>
        <criterion comment="openssl-perl version is less than 0.9.7a-33.4" negate="false" test_ref="oval:org.mitre.oval:tst:1541"/>
        <criterion comment="openssl096b version is less than 0.9.6b-16" negate="false" test_ref="oval:org.mitre.oval:tst:1540"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:870" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Enterprise 3 OpenSSL do_change_cipher_spec Function Denial of Service</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>OpenSSL</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0079"/>
        <description>The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <modified date="2004-05-11T12:00:00.000-04:00" comment="Corrected pattern used in rrt-206">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:46.147-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:04.736-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="openssl version is less than 0.9.7a-33.4" negate="false" test_ref="oval:org.mitre.oval:tst:1543"/>
        <criterion comment="openssl-devel version is less than 0.9.7a-33.4" negate="false" test_ref="oval:org.mitre.oval:tst:1542"/>
        <criterion comment="openssl-perl version is less than 0.9.7a-33.4" negate="false" test_ref="oval:org.mitre.oval:tst:1541"/>
        <criterion comment="openssl096b version is less than 0.9.6b-16" negate="false" test_ref="oval:org.mitre.oval:tst:1540"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:869" version="4" class="vulnerability">
      <metadata>
        <title>Net-SNMP MIB Information Disclosure Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>Net-SNMP</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0935" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0935"/>
        <description>Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:40.441-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:04.539-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.706-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T21:00:30.287-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:44.564-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="net-snmp version is less than 5.0.9-2.30E.1" negate="false" test_ref="oval:org.mitre.oval:tst:1545"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="snmpd is listening to the network" negate="false" test_ref="oval:org.mitre.oval:tst:1544"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8687" version="5" class="vulnerability">
      <metadata>
        <title>A certain Red Hat patch for the Linux kernel in Red Hat Enterprise Linux (RHEL) 4 on the ia64 platform allows local users to use ptrace on an arbitrary process, and consequently gain privileges, via vectors related to a missing ptrace_check_attach call.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0729" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0729"/>
        <description>A certain Red Hat patch for the Linux kernel in Red Hat Enterprise Linux (RHEL) 4 on the ia64 platform allows local users to use ptrace on an arbitrary process, and consequently gain privileges, via vectors related to a missing ptrace_check_attach call.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:13:07.998-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:51.245-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:52.121-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:8687 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:05.326-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:17:50.917-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40272"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40483"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40310"/>
          <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40062"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40096"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:39895"/>
          <criterion comment="kernel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40165"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40131"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40380"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:39955"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40115"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8680" version="5" class="vulnerability">
      <metadata>
        <title>The ptrace_start function in kernel/ptrace.c in the Linux kernel 2.6.18 does not properly handle simultaneous execution of the do_coredump function, which allows local users to cause a denial of service (deadlock) via vectors involving the ptrace system call and a coredumping thread.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1388" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1388"/>
        <description>The ptrace_start function in kernel/ptrace.c in the Linux kernel 2.6.18 does not properly handle simultaneous execution of the do_coredump function, which allows local users to cause a denial of service (deadlock) via vectors involving the ptrace system call and a coredumping thread.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:58.917-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:50.892-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:51.730-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:8680 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:20.899-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:17:50.472-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38128"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38668"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38883"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38948"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38732"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38969"/>
          <criterion comment="kernel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38991"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:39056"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38817"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:39009"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38672"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38983"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:868" version="1" class="vulnerability">
      <metadata>
        <title>Linux Kernel eflags Checking Privilege Escalation Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>Linux kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0001" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0001"/>
        <description>Unknown vulnerability in the eflags checking in the 32-bit ptrace emulation for the Linux kernel on AMD64 systems allows local users to gain privileges.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:1547"/>
        <criterion comment="kernel version is less than 2.4.21-9.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1546"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:867" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Enterprise 3 Linux Kernel do_mremap Denial of Service Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>Linux kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0985" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0985"/>
        <description>The mremap system call (do_mremap) in Linux kernel 2.4.x before 2.4.21, and possibly other versions before 2.4.24, does not properly perform bounds checks, which allows local users to cause a denial of service and possibly gain privileges by causing a remapping of a virtual memory area (VMA) to create a zero length VMA, a different vulnerability than CAN-2004-0077.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:44.503-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:04.347-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criteria operator="OR" comment="Vulnerable Configuration">
          <criterion comment="kernel version is less than 2.4.21-4.0.2.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1550"/>
          <criterion comment="kernel-smp version is less than 2.4.21-4.0.2.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1549"/>
          <criterion comment="kernel-bigmem version is less than 2.4.21-4.0.2.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1548"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:866" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Enterprise 3 CVS Server root Directory Access Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>CVS server</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0977" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0977"/>
        <description>CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:42:04.684-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:04.168-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="cvs version is less than 1.11.2-14" negate="false" test_ref="oval:org.mitre.oval:tst:1551"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/ is world-writable" negate="false" test_ref="oval:org.mitre.oval:tst:1576"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8653" version="1" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability in the TCP Loopback/Fusion Code May Lead to a System Hang Resulting in a Denial of Service (DoS)</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3469" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3469"/>
        <description>Unspecified vulnerability in the TCP Loopback/Fusion implementation in Sun Solaris 10 allows local users to cause a denial of service (resource exhaustion and service hang) via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-03T10:36:57.000-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </submitted>
            <status_change date="2007-08-03T16:51:06.782-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:43.600-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:36.390-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102963" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 125100-10 or later installed" test_ref="oval:org.mitre.oval:tst:4665" negate="true"/>
          <criterion comment="Patch 118833-17 or later installed" test_ref="oval:org.mitre.oval:tst:4625" negate="false"/>
          <criterion comment="Patch 118833-36 or earlier installed" test_ref="oval:org.mitre.oval:tst:4778" negate="false"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102963" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 125101-10 or later installed" test_ref="oval:org.mitre.oval:tst:4966" negate="true"/>
          <criterion comment="Patch 118855-15 or later installed" test_ref="oval:org.mitre.oval:tst:4714" negate="false"/>
          <criterion comment="Patch 118855-36 or earlier installed" test_ref="oval:org.mitre.oval:tst:4725" negate="false"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:865" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Enterprise 3 kdepim VCF File Information Reader BO</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>KDE Personal Information Management (kdepim)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0988"/>
        <description>Buffer overflow in the VCF file information reader for KDE Personal Information Management (kdepim) suite in KDE 3.1.0 through 3.1.4 allows attackers to execute arbitrary code via a VCF file.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-11T12:00:00.000-04:00" comment="Corrected pattern used in rrt-206">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:57.566-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:03.917-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="kdepim version is less than 3.1.3-3.3" negate="false" test_ref="oval:org.mitre.oval:tst:1552"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/share/services/kfile_vcf.desktop is readable">
            <criterion comment="/usr/share/services/kfile_vcf.desktop is readable" negate="false" test_ref="oval:org.mitre.oval:tst:1563"/>
            <criterion comment="/usr/share/services/kfile_vcf.desktop is readable" negate="false" test_ref="oval:org.mitre.oval:tst:1562"/>
            <criterion comment="/usr/share/services/kfile_vcf.desktop is readable" negate="false" test_ref="oval:org.mitre.oval:tst:1561"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:864" version="4" class="vulnerability">
      <metadata>
        <title>Red Hat Enterprise 3 Multiple stack-based BO Vulnerabilities in Apache</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0542" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0542"/>
        <description>Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9 captures.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:55.327-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:03.722-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.863-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:55:50.726-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:44.258-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="httpd version is less than 2.0.46-26.ent" negate="false" test_ref="oval:org.mitre.oval:tst:1553"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="httpd.worker is listening on the network" negate="false" test_ref="oval:org.mitre.oval:tst:2851"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:863" version="4" class="vulnerability">
      <metadata>
        <title>Red Hat Multiple stack-based BO Vulnerabilities in Apache</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>httpd</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0542" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0542"/>
        <description>Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9 captures.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-17T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:37.702-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:03.502-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.863-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:55:50.619-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:43.886-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="httpd version is less than 2.0.40-21.9" negate="false" test_ref="oval:org.mitre.oval:tst:1554"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="httpd.worker is listening on the network" negate="false" test_ref="oval:org.mitre.oval:tst:2851"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:862" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Enterprise 3 sysstat port and trigger Scripts symlink Attack Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>Sysstat</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0107" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0107"/>
        <description>The (1) post and (2) trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability than CVE-2004-0108.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <modified date="2004-05-11T12:00:00.000-04:00" comment="Corrected pattern used in rrt-206">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:21.223-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:03.313-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="sysstat version is less than 4.0.7-4.EL3.2" negate="false" test_ref="oval:org.mitre.oval:tst:1555"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:861" version="4" class="vulnerability">
      <metadata>
        <title>rpc.mountd Denial of Service via NFS Mount</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>nfs-utils packages</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0154" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0154"/>
        <description>rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <modified date="2004-05-11T12:00:00.000-04:00" comment="Corrected pattern used in rrt-206">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:26.329-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:03.061-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.992-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T21:00:14.572-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:43.548-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="nfs-utils version is less than 1.0.6-7.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1557"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="rpc.mountd is listening to the network" negate="false" test_ref="oval:org.mitre.oval:tst:1556"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:860" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Linux Kernel do_mremap Denial of Service Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Linux kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0985" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0985"/>
        <description>The mremap system call (do_mremap) in Linux kernel 2.4.x before 2.4.21, and possibly other versions before 2.4.24, does not properly perform bounds checks, which allows local users to cause a denial of service and possibly gain privileges by causing a remapping of a virtual memory area (VMA) to create a zero length VMA, a different vulnerability than CAN-2004-0077.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:42.419-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:02.810-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criteria operator="OR" comment="Vulnerable Configuration">
          <criterion comment="kernel version is less than 2.4.20-28.9" negate="false" test_ref="oval:org.mitre.oval:tst:1560"/>
          <criterion comment="kernel-smp version is less than 2.4.20-28.9" negate="false" test_ref="oval:org.mitre.oval:tst:1559"/>
          <criterion comment="kernel-bigmem version is less than 2.4.20-28.9" negate="false" test_ref="oval:org.mitre.oval:tst:1558"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:86" version="1" class="vulnerability">
      <metadata>
        <title>Solaris 8 LBXProxy Display Name Buffer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>lbxproxy</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0090" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0090"/>
        <description>Buffer overflow in Low BandWidth X proxy (lbxproxy) in Solaris 8 allows local users to execute arbitrary code via a long display command line option.</description>
        <oval_repository>
          <dates>
            <submitted date="2002-08-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="File lbxproxy exists" negate="false" test_ref="oval:org.mitre.oval:tst:2964"/>
          <criterion comment="Patch 108652-51 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:2963"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="File lbxproxy SGID and executable">
            <criterion comment="File lbxproxy SGID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:2962"/>
            <criterion comment="File lbxproxy SGID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:2961"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:859" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Kernel Real Time Clock Data Leakage</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Linux kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0984" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0984"/>
        <description>Real time clock (RTC) routines in Linux kernel 2.4.23 and earlier do not properly initialize their structures, which could leak kernel data to user space.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:42:04.989-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:02.615-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criteria operator="OR" comment="Vulnerable Configuration">
          <criterion comment="kernel version is less than 2.4.20-28.9" negate="false" test_ref="oval:org.mitre.oval:tst:1560"/>
          <criterion comment="kernel-smp version is less than 2.4.20-28.9" negate="false" test_ref="oval:org.mitre.oval:tst:1559"/>
          <criterion comment="kernel-bigmem version is less than 2.4.20-28.9" negate="false" test_ref="oval:org.mitre.oval:tst:1558"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8584" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the browser engine in Mozilla Firefox before 3.0.16, SeaMonkey before 2.0.1, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3981" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3981"/>
        <description>Unspecified vulnerability in the browser engine in Mozilla Firefox before 3.0.16, SeaMonkey before 2.0.1, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:48.302-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:50.632-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:51.460-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:8584 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:21.857-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:17:50.063-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.16-4.el4" test_ref="oval:org.mitre.oval:tst:39002"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.16-2.el5_4" test_ref="oval:org.mitre.oval:tst:39838"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.16-2.el5_4" test_ref="oval:org.mitre.oval:tst:39032"/>
            <criterion comment="firefox is earlier than 0:3.0.16-1.el5_4" test_ref="oval:org.mitre.oval:tst:39721"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.16-2.el5_4" test_ref="oval:org.mitre.oval:tst:39558"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:858" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat kdepim VCF File Information Reader BO</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>KDE Personal Information Management (kdepim)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0988"/>
        <description>Buffer overflow in the VCF file information reader for KDE Personal Information Management (kdepim) suite in KDE 3.1.0 through 3.1.4 allows attackers to execute arbitrary code via a VCF file.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:42:04.520-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:02.420-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="kdepim version is less than 3.1-6" negate="false" test_ref="oval:org.mitre.oval:tst:1564"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/share/services/kfile_vcf.desktop is readable">
            <criterion comment="/usr/share/services/kfile_vcf.desktop is readable" negate="false" test_ref="oval:org.mitre.oval:tst:1563"/>
            <criterion comment="/usr/share/services/kfile_vcf.desktop is readable" negate="false" test_ref="oval:org.mitre.oval:tst:1562"/>
            <criterion comment="/usr/share/services/kfile_vcf.desktop is readable" negate="false" test_ref="oval:org.mitre.oval:tst:1561"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:857" version="2" class="vulnerability">
      <metadata>
        <title>Ethereal Malformed Q.931 Packet Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Tethereal</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1013" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1013"/>
        <description>The Q.931 dissector in Ethereal before 0.10.0, and Tethereal, allows remote attackers to cause a denial of service (crash) via a malformed Q.931, which triggers a null dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:55.490-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:02.172-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criteria operator="OR" comment="Vulnerable Config">
            <criterion comment="ethereal version is less than 0.10.0a-0.90.1" negate="false" test_ref="oval:org.mitre.oval:tst:1575"/>
            <criterion comment="ethereal-gnome version is less than 0.10.0a-0.90.1" negate="false" test_ref="oval:org.mitre.oval:tst:1574"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="Vulnerable Config">
            <criteria operator="OR" comment="/usr/bin/ethereal is executable">
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1573"/>
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1572"/>
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1571"/>
            </criteria>
            <criteria operator="OR" comment="/usr/sbin/ethereal is executable">
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1570"/>
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1569"/>
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1568"/>
            </criteria>
            <criteria operator="OR" comment="/usr/sbin/tethereal is executable">
              <criterion comment="/usr/sbin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1567"/>
              <criterion comment="/usr/sbin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1566"/>
              <criterion comment="/usr/sbin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1565"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:856" version="2" class="vulnerability">
      <metadata>
        <title>Ethereal Malformed SMB Packet Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Ethereal</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1012" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1012"/>
        <description>The SMB dissector in Ethereal before 0.10.0 allows remote attackers to cause a denial of service via a malformed SMB packet that triggers a segmentation fault during processing of Selected packets.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:49.899-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:01.900-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criteria operator="OR" comment="Vulnerable Config">
            <criterion comment="ethereal version is less than 0.10.0a-0.90.1" negate="false" test_ref="oval:org.mitre.oval:tst:1575"/>
            <criterion comment="ethereal-gnome version is less than 0.10.0a-0.90.1" negate="false" test_ref="oval:org.mitre.oval:tst:1574"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="Vulnerable Config">
            <criteria operator="OR" comment="/usr/bin/ethereal is executable">
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1573"/>
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1572"/>
              <criterion comment="/usr/bin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1571"/>
            </criteria>
            <criteria operator="OR" comment="/usr/sbin/ethereal is executable">
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1570"/>
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1569"/>
              <criterion comment="/usr/sbin/ethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1568"/>
            </criteria>
            <criteria operator="OR" comment="/usr/sbin/tethereal is executable">
              <criterion comment="/usr/sbin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1567"/>
              <criterion comment="/usr/sbin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1566"/>
              <criterion comment="/usr/sbin/tethereal is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1565"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:855" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat CVS Server root Directory Access Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>CVS server</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0977" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0977"/>
        <description>CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:22.699-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:01.591-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="cvs version is less than 1.11.2-13" negate="false" test_ref="oval:org.mitre.oval:tst:1577"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/ is world-writable" negate="false" test_ref="oval:org.mitre.oval:tst:1576"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8540" version="3" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3109" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3109"/>
        <description>Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:10:20.969-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:50.407-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:51.217-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
        <criteria operator="OR">
          <criterion comment="java-1.6.0-sun-devel is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36649"/>
          <criterion comment="java-1.6.0-sun is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37229"/>
          <criterion comment="java-1.6.0-sun-src is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37035"/>
          <criterion comment="java-1.6.0-sun-demo is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37509"/>
          <criterion comment="java-1.6.0-sun-plugin is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37441"/>
          <criterion comment="java-1.6.0-sun-jdbc is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37490"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:854" version="3" class="vulnerability">
      <metadata>
        <title>RHE3 tcpdump DoS via ISAKMP Packets II</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>tcpdump</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0057" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0057"/>
        <description>The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via malformed ISAKMP packets that cause invalid "len" or "loc" values to be used in a loop, a different vulnerability than CVE-2003-0989.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2004-05-11T12:00:00.000-04:00" comment="Corrected pattern used in rrt-206">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:44.116-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:01.298-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="tcpdump version is less than 3.7.2-7.E3.1" negate="false" test_ref="oval:org.mitre.oval:tst:1578"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/sbin/tcpdump is executable">
            <criterion comment="/usr/sbin/tcpdump is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1582"/>
            <criterion comment="/usr/sbin/tcpdump is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1581"/>
            <criterion comment="/usr/sbin/tcpdump is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1580"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:853" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Enterprise 3 tcpdump Denial of Service via print_attr_string Function</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>tcpdump</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0055" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0055"/>
        <description>The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a RADIUS attribute with a large length value.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:33.687-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:01.098-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="tcpdump version is less than 3.7.2-7.E3.1" negate="false" test_ref="oval:org.mitre.oval:tst:1578"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/sbin/tcpdump is executable">
            <criterion comment="/usr/sbin/tcpdump is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1582"/>
            <criterion comment="/usr/sbin/tcpdump is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1581"/>
            <criterion comment="/usr/sbin/tcpdump is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1580"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:852" version="2" class="vulnerability">
      <metadata>
        <title>RHE3 tcpdump DoS via ISAKMP Packets</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>tcpdump</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0989" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0989"/>
        <description>tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets, a different vulnerability than CVE-2004-0057.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:24.952-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:00.899-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="tcpdump version is less than 3.7.2-7.E3.1" negate="false" test_ref="oval:org.mitre.oval:tst:1578"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/sbin/tcpdump is executable">
            <criterion comment="/usr/sbin/tcpdump is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1582"/>
            <criterion comment="/usr/sbin/tcpdump is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1581"/>
            <criterion comment="/usr/sbin/tcpdump is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1580"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:851" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat tcpdump Denial of Service via ISAKMP Packets II</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>tcpdump</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0057" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0057"/>
        <description>The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via malformed ISAKMP packets that cause invalid "len" or "loc" values to be used in a loop, a different vulnerability than CVE-2003-0989.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:40.838-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:00.715-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="tcpdump version is less than 3.7.2-7.9.1" negate="false" test_ref="oval:org.mitre.oval:tst:1583"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/sbin/tcpdump is executable">
            <criterion comment="/usr/sbin/tcpdump is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1582"/>
            <criterion comment="/usr/sbin/tcpdump is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1581"/>
            <criterion comment="/usr/sbin/tcpdump is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1580"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:850" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat tcpdump Denial of Service via print_attr_string Function</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>tcpdump</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0055" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0055"/>
        <description>The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a RADIUS attribute with a large length value.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:36.651-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:00.525-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="tcpdump version is less than 3.7.2-7.9.1" negate="false" test_ref="oval:org.mitre.oval:tst:1583"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/sbin/tcpdump is executable">
            <criterion comment="/usr/sbin/tcpdump is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1582"/>
            <criterion comment="/usr/sbin/tcpdump is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1581"/>
            <criterion comment="/usr/sbin/tcpdump is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1580"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:849" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat sysstat port and trigger Scripts symlink Attack Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>sysstat</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0107" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0107"/>
        <description>The (1) post and (2) trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability than CVE-2004-0108.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:50.135-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:00.342-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="sysstat version is less than 4.0.7-4.rhl9.1" negate="false" test_ref="oval:org.mitre.oval:tst:1579"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:847" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat tcpdump Denial of Service via ISAKMP Packets</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>tcpdump</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0989" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0989"/>
        <description>tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets, a different vulnerability than CVE-2004-0057.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:51.672-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:53:00.169-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="tcpdump version is less than 3.7.2-7.9.1" negate="false" test_ref="oval:org.mitre.oval:tst:1583"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/sbin/tcpdump is executable">
            <criterion comment="/usr/sbin/tcpdump is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1582"/>
            <criterion comment="/usr/sbin/tcpdump is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1581"/>
            <criterion comment="/usr/sbin/tcpdump is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1580"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:846" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat gdk-pixbuf Denial of Service</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>gdk-pixbuf</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0111" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0111"/>
        <description>gdk-pixbuf before 0.20 allows attackers to cause a denial of service (crash) via a malformed bitmap (BMP) file.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-11T12:00:00.000-04:00" comment="Corrected pattern used in rrt-206">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:25.497-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:59.959-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criteria operator="OR" comment="Vulnerable configuration">
          <criterion comment="gdk-pixbuf version is less than 0.22.0-6.1.0" negate="false" test_ref="oval:org.mitre.oval:tst:1586"/>
          <criterion comment="gdk-pixbuf-devel version is less than 0.22.0-6.1.0" negate="false" test_ref="oval:org.mitre.oval:tst:1585"/>
          <criterion comment="gdk-pixbuf-gnome version is less than 0.22.0-6.1.0" negate="false" test_ref="oval:org.mitre.oval:tst:1584"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:845" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Enterprise 3 gdk-pixbuf Denial of Service</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>gdk-pixbuf</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0111" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0111"/>
        <description>gdk-pixbuf before 0.20 allows attackers to cause a denial of service (crash) via a malformed bitmap (BMP) file.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-11T12:00:00.000-04:00" comment="Corrected pattern used in rrt-206">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:44.319-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:59.778-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criteria operator="OR" comment="Vulnerable configuration">
          <criterion comment="gdk-pixbuf version is less than 0.22.0-6.0.3" negate="false" test_ref="oval:org.mitre.oval:tst:1589"/>
          <criterion comment="gdk-pixbuf-devel version is less than 0.22.0-6.0.3" negate="false" test_ref="oval:org.mitre.oval:tst:1588"/>
          <criterion comment="gdk-pixbuf-gnome version is less than 0.22.0-6.0.3" negate="false" test_ref="oval:org.mitre.oval:tst:1587"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:842" version="1" class="vulnerability">
      <metadata>
        <title>MS Windows Media Service Denial of Service</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Windows Media Services</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0905" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0905"/>
        <description>Unknown vulnerability in Windows Media Station Service and Windows Media Monitor Service components of Windows Media Services 4.1 allows remote attackers to cause a denial of service (disallowing new connections) via a certain sequence of TCP/IP packets.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-09T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2006-10-31T04:13:00.000-04:00" comment="Replaced reference to obj:1374 with reference to obj:1550 since it referencess Product\Options and not ProductOptions in the controlset registry key.  Modified by Harvey Rubinovitz">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-11-21T04:13:00.000-04:00">INTERIM</status_change>
            <modified comment="Fixed obj:1078: Removed HKEY_LOCAL_MACHINE\ from the key, as it's specified as the hive.  Implemented by Harvey Rubinovitz." date="2007-01-22T00:34:00.741-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.292-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.906-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
          </dates>
          <status>INTERIM</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Software section">
          <criteria operator="AND" comment="Windows Media Services 4.1 is installed on Microsoft Windows 2000 Server">
            <criterion comment="Windows Media Services 4.1 is installed" test_ref="oval:org.mitre.oval:tst:1602"/>
            <criteria operator="AND" comment="Windows 2000 Server is installed">
              <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
              <criteria operator="OR" comment="Windows NT server product option">
                <criterion comment="this is an NT Server (stand-alone)" test_ref="oval:org.mitre.oval:tst:2408"/>
                <criterion comment="this is an NT Server (domain controller)" test_ref="oval:org.mitre.oval:tst:3035"/>
              </criteria>
            </criteria>
          </criteria>
          <criterion comment="the version of nscm.exe is less than 4.1.0.3934" test_ref="oval:org.mitre.oval:tst:1601"/>
          <criterion comment="the version of nspmon.exe is less than 4.1.0.3934" test_ref="oval:org.mitre.oval:tst:1600"/>
          <criterion negate="true" comment="the patch kb832359 is installed" test_ref="oval:org.mitre.oval:tst:1599"/>
        </criteria>
        <criteria operator="AND" comment="Configuration section">
          <criterion negate="true" comment="configured to only offer streaming media over unicast" test_ref="oval:org.mitre.oval:tst:1598"/>
          <criterion negate="true" comment="the Windows Media Station service is disabled" test_ref="oval:org.mitre.oval:tst:1597"/>
          <criterion negate="true" comment="the Windows Media Monitor service is disabled" test_ref="oval:org.mitre.oval:tst:1596"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:840" version="1" class="vulnerability">
      <metadata>
        <title>Apache HTTP Request Smuggling</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2088"/>
        <description>The Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy, allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Apache to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-11-30T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-12-20T11:03:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-01-04T08:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-01-25T07:30:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.00, 11.11, or 11.23">
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.11">
            <criteria operator="AND" comment="700 Series OS Release 11.11">
              <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
              <criterion comment="HP Release B.11.11" negate="false" test_ref="oval:org.mitre.oval:tst:2514"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.11">
              <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
              <criterion comment="HP Release B.11.11" negate="false" test_ref="oval:org.mitre.oval:tst:2514"/>
            </criteria>
          </criteria>
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.00">
            <criteria operator="AND" comment="700 Series OS Release 11.00">
              <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
              <criterion comment="HP Release B.11.00" negate="false" test_ref="oval:org.mitre.oval:tst:2512"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.00">
              <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
              <criterion comment="HP Release B.11.00" negate="false" test_ref="oval:org.mitre.oval:tst:2512"/>
            </criteria>
          </criteria>
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.23">
            <criteria operator="AND" comment="700 Series OS Release 11.23">
              <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
              <criterion comment="HP Release B.11.23" negate="false" test_ref="oval:org.mitre.oval:tst:2511"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.23">
              <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
              <criterion comment="HP Release B.11.23" negate="false" test_ref="oval:org.mitre.oval:tst:2511"/>
            </criteria>
          </criteria>
        </criteria>
        <criterion comment="hpuxwsAPACHE is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2388"/>
        <criterion comment="hpuxwsAPACHE has a version greater than or equal (A|B).2.0.55.0" negate="true" test_ref="oval:org.mitre.oval:tst:2387"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:84" version="2" class="vulnerability">
      <metadata>
        <title>Ethereal 0.9.12 Vulnerability in OSI Dissector</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Ethereal</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0429" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0429"/>
        <description>The OSI dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via invalid IPv4 or IPv6 prefix lengths, possibly triggering a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-29T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:22.040-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:59.592-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criteria operator="OR" comment="Vulnerable Config">
          <criterion comment="ethereal version is less than 0.9.13-1.90.1" negate="false" test_ref="oval:org.mitre.oval:tst:2985"/>
          <criterion comment="ethereal-gnome version is less than 0.9.13-1.90.1" negate="false" test_ref="oval:org.mitre.oval:tst:2984"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8399" version="1" class="vulnerability">
      <metadata>
        <title>MSO.DLL Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Office XP</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0243" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0243"/>
        <description>Buffer overflow in MSO.DLL in Microsoft Office XP SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Office document, aka "MSO.DLL Buffer Overflow."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-02-08T13:00:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2010-02-10T13:38:36.382-05:00">DRAFT</status_change>
            <status_change date="2010-03-01T04:00:22.458-05:00">INTERIM</status_change>
            <status_change date="2010-03-22T04:00:12.421-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft Office XP is installed" definition_ref="oval:org.mitre.oval:def:663"/>
        <criterion comment="Mso.dll version is less than 10.0.6858.0" test_ref="oval:org.mitre.oval:tst:20723"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:839" version="3" deprecated="true" class="vulnerability">
      <metadata>
        <title>mod_python Web Server Denial of Service</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>mod_python</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0973" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0973"/>
        <description>Unknown vulnerability in mod_python 3.0.x before 3.0.4, and 2.7.x before 2.7.9, allows remote attackers to cause a denial of service (httpd crash) via a certain query string.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:59.304-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:59.430-04:00">ACCEPTED</status_change>
            <modified date="2007-05-08T07:29:32.570-04:00" comment="Deprecated becased this definition is a duplicate of oval:org.mitre.oval:def:828">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-05-08T07:29:32.570-04:00">DEPRECATED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.470-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="mod_python version is less than 3.0.1-4" negate="false" test_ref="oval:org.mitre.oval:tst:1612"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="httpd is listening to the network" negate="false" test_ref="oval:org.mitre.oval:tst:1611"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:838" version="3" class="vulnerability">
      <metadata>
        <title>Red Hat Enterprise 3 Mutt BO in Index Menu</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>Mutt</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0078" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0078"/>
        <description>Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain mail messages.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2004-05-11T12:00:00.000-04:00" comment="Corrected pattern used in rrt-206">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:33.067-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:59.230-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="mutt version is less than 1.4.1-3.4" negate="false" test_ref="oval:org.mitre.oval:tst:1603"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/bin/mutt is executable">
            <criterion comment="/usr/bin/mutt is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2637"/>
            <criterion comment="/usr/bin/mutt is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2636"/>
            <criterion comment="/usr/bin/mutt is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2635"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:837" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Linux Kernel do_mremap Privilege Escalation Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>mremap</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0077" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0077"/>
        <description>The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:54.124-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:59.044-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criteria operator="OR" comment="Vulnerable Configuration">
          <criterion comment="kernel version is less than 2.4.20-30.9" negate="false" test_ref="oval:org.mitre.oval:tst:1606"/>
          <criterion comment="kernel-smp version is less than 2.4.20-30.9" negate="false" test_ref="oval:org.mitre.oval:tst:1605"/>
          <criterion comment="kernel-bigmem version is less than 2.4.20-30.9" negate="false" test_ref="oval:org.mitre.oval:tst:1604"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:836" version="2" class="vulnerability">
      <metadata>
        <title>Vicam USB Driver Data Copy Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Vicam USB driver</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0075" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0075"/>
        <description>The Vicam USB driver in Linux before 2.4.25 does not use the copy_from_user function when copying data from userspace to kernel space, which crosses security boundaries and allows local users to cause a denial of service.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:52.053-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:58.802-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criteria operator="OR" comment="Vulnerable Configuration">
          <criterion comment="kernel version is less than 2.4.20-30.9" negate="false" test_ref="oval:org.mitre.oval:tst:1606"/>
          <criterion comment="kernel-smp version is less than 2.4.20-30.9" negate="false" test_ref="oval:org.mitre.oval:tst:1605"/>
          <criterion comment="kernel-bigmem version is less than 2.4.20-30.9" negate="false" test_ref="oval:org.mitre.oval:tst:1604"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:835" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Kernel ncp_lookup Function BO</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Linux kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0010" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0010"/>
        <description>Stack-based buffer overflow in the ncp_lookup function for ncpfs in Linux kernel 2.4.x allows local users to gain privileges.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:46.479-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:58.625-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criteria operator="OR" comment="Vulnerable Configuration">
          <criterion comment="kernel version is less than 2.4.20-30.9" negate="false" test_ref="oval:org.mitre.oval:tst:1606"/>
          <criterion comment="kernel-smp version is less than 2.4.20-30.9" negate="false" test_ref="oval:org.mitre.oval:tst:1605"/>
          <criterion comment="kernel-bigmem version is less than 2.4.20-30.9" negate="false" test_ref="oval:org.mitre.oval:tst:1604"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:834" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Kernel R128 DRI Limits Checking Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Linux kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0003" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0003"/>
        <description>Unknown vulnerability in Linux kernel before 2.4.22 allows local users to gain privileges, related to "R128 DRI limits checking."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:58.073-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:58.430-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criteria operator="OR" comment="Vulnerable Configuration">
          <criterion comment="kernel version is less than 2.4.20-30.9" negate="false" test_ref="oval:org.mitre.oval:tst:1606"/>
          <criterion comment="kernel-smp version is less than 2.4.20-30.9" negate="false" test_ref="oval:org.mitre.oval:tst:1605"/>
          <criterion comment="kernel-bigmem version is less than 2.4.20-30.9" negate="false" test_ref="oval:org.mitre.oval:tst:1604"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8334" version="1" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability in lbxproxy(1) may Allow Unauthorized Read Access to Files</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4070" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4070"/>
        <description>Unspecified vulnerability in Low Bandwidth X proxy (lbxproxy) on Sun Solaris 8 through 10 before 20070725 allows local users to read arbitrary files with root group ownership via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-01T13:14:10.000-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </submitted>
            <status_change date="2007-08-01T22:21:39.310-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:42.437-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:34.971-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102948" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 119067-08 or later installed" test_ref="oval:org.mitre.oval:tst:5089" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102948" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 112785-62 or later installed" test_ref="oval:org.mitre.oval:tst:4378" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102948" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 119059-28 or later installed" test_ref="oval:org.mitre.oval:tst:4559" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102948" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 119068-08 or later installed" test_ref="oval:org.mitre.oval:tst:4495" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102948" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 112786-51 or later installed" test_ref="oval:org.mitre.oval:tst:4915" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102948" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 119060-27 or later installed" test_ref="oval:org.mitre.oval:tst:5067" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:833" version="2" deprecated="true" class="vulnerability">
      <metadata>
        <title>XMLSoft Libxml2 Code Execution Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>XMLSoft Libxml2</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0110" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0110"/>
        <description>Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execute arbitrary code via a long URL.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <modified date="2004-05-11T12:00:00.000-04:00" comment="Corrected pattern used in rrt-206">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:47.353-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:58.231-04:00">ACCEPTED</status_change>
            <modified date="2007-05-08T07:29:32.570-04:00" comment="Deprecated becased this definition is a duplicate of oval:org.mitre.oval:def:875">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-05-08T07:29:32.570-04:00">DEPRECATED</status_change>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criteria operator="OR" comment="Vulnerable Config">
          <criterion comment="libxml2 version is less than 2.5.10-6" negate="false" test_ref="oval:org.mitre.oval:tst:1609"/>
          <criterion comment="libxml2-devel version is less than 2.5.10-6" negate="false" test_ref="oval:org.mitre.oval:tst:1608"/>
          <criterion comment="libxml2-python version is less than 2.5.10-6" negate="false" test_ref="oval:org.mitre.oval:tst:1607"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:832" version="2" class="vulnerability">
      <metadata>
        <title>XFree86 Improper Handling of Font Files</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>XFree86</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0106" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0106"/>
        <description>Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font files, a different set of vulnerabilities than CVE-2004-0083 and CVE-2004-0084.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:53.814-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:58.024-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="XFree86 version is less than 4.3.0-55.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1610"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="/usr/X11R6/bin/XFree86 is SUID and executable">
            <criterion comment="/usr/X11R6/bin/XFree86 is SUID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:1640"/>
            <criteria operator="OR" comment="/usr/X11R6/bin/XFree86 is SUID and executable">
              <criterion comment="/usr/X11R6/bin/XFree86 is SUID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:1639"/>
              <criterion comment="/usr/X11R6/bin/XFree86 is SUID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:1638"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:831" version="2" class="vulnerability">
      <metadata>
        <title>XFree86 Buffer Overflow in CopyISOLatin1Lowered Function</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>XFree86</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0084" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0084"/>
        <description>Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias (font.alias) file, a different vulnerability than CVE-2004-0083 and CVE-2004-0106.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <modified date="2004-05-11T12:00:00.000-04:00" comment="Corrected pattern used in rrt-206">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:54.698-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:57.831-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="XFree86 version is less than 4.3.0-55.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1610"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="/usr/X11R6/bin/XFree86 is SUID and executable">
            <criterion comment="/usr/X11R6/bin/XFree86 is SUID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:1640"/>
            <criteria operator="OR" comment="/usr/X11R6/bin/XFree86 is SUID and executable">
              <criterion comment="/usr/X11R6/bin/XFree86 is SUID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:1639"/>
              <criterion comment="/usr/X11R6/bin/XFree86 is SUID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:1638"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:830" version="2" class="vulnerability">
      <metadata>
        <title>XFree86 Buffer Overflow in dirfile</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>XFree86</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0083"/>
        <description>Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a font alias file (font.alias) with a long token, a different vulnerability than CVE-2004-0084 and CVE-2004-0106.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-02-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <modified date="2004-05-11T12:00:00.000-04:00" comment="Corrected pattern used in rrt-206">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:55.757-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:57.643-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="XFree86 version is less than 4.3.0-55.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1610"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="/usr/X11R6/bin/XFree86 is SUID and executable">
            <criterion comment="/usr/X11R6/bin/XFree86 is SUID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:1640"/>
            <criteria operator="OR" comment="/usr/X11R6/bin/XFree86 is SUID and executable">
              <criterion comment="/usr/X11R6/bin/XFree86 is SUID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:1639"/>
              <criterion comment="/usr/X11R6/bin/XFree86 is SUID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:1638"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:83" version="4" class="vulnerability">
      <metadata>
        <title>Microsoft SQL Server 3-Function Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft SQL Server</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0542" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0542"/>
        <description>Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage, or (3) xp_sprintf.  NOTE: the C runtime format string vulnerability reported in MS01-060 is identified by CVE-2001-0879.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Yi-Fang Koh</contributor>
            </submitted>
            <modified date="2005-04-08T12:00:00.000-04:00" comment="modified wft-227 - corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2005-04-11T08:48:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-04-27T12:07:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T10:57:00.000-04:00" comment="modified wft-227 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:83 - Corrected typo in product name" date="2011-04-27T10:10:00.373-04:00">
              <contributor organization="The MITRE Corporation">Mike Lah</contributor>
            </modified>
            <status_change date="2011-04-27T10:11:15.271-04:00">INTERIM</status_change>
            <status_change date="2011-05-16T04:03:32.410-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="SQL Server 2000 is installed" test_ref="oval:org.mitre.oval:tst:2977"/>
        <criterion comment="File sqlservr.exe version3 less than 2000.80.428.0" test_ref="oval:org.mitre.oval:tst:2965"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8280" version="5" class="vulnerability">
      <metadata>
        <title>OpenOffice_org WMF buffer overflows</title>
        <affected family="unix">
          <platform>Novell Linux Desktop 9</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux Professional 9.3</platform>
          <platform>SUSE Linux Desktop 1.0</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
          <product>OpenOffice_org1</product>
          <product>OpenOffice_org1-ar</product>
          <product>OpenOffice_org1-ca</product>
          <product>OpenOffice_org1-cs</product>
          <product>OpenOffice_org1-da</product>
          <product>OpenOffice_org1-de</product>
          <product>OpenOffice_org1-el</product>
          <product>OpenOffice_org1-en</product>
          <product>OpenOffice_org1-es</product>
          <product>OpenOffice_org1-et</product>
          <product>OpenOffice_org1-fi</product>
          <product>OpenOffice_org1-fr</product>
          <product>OpenOffice_org1-gnome</product>
          <product>OpenOffice_org1-hu</product>
          <product>OpenOffice_org1-it</product>
          <product>OpenOffice_org1-ja</product>
          <product>OpenOffice_org1-kde</product>
          <product>OpenOffice_org1-ko</product>
          <product>OpenOffice_org1-nl</product>
          <product>OpenOffice_org1-pl</product>
          <product>OpenOffice_org1-pt</product>
          <product>OpenOffice_org1-ru</product>
          <product>OpenOffice_org1-sk</product>
          <product>OpenOffice_org1-sl</product>
          <product>OpenOffice_org1-sv</product>
          <product>OpenOffice_org1-tr</product>
          <product>OpenOffice_org1-zh-CN</product>
          <product>OpenOffice_org1-zh-TW</product>
          <product>OpenOffice_org</product>
          <product>OpenOffice_org-af</product>
          <product>OpenOffice_org-be-BY</product>
          <product>OpenOffice_org-bg</product>
          <product>OpenOffice_org-ca</product>
          <product>OpenOffice_org-cs</product>
          <product>OpenOffice_org-cy</product>
          <product>OpenOffice_org-da</product>
          <product>OpenOffice_org-de</product>
          <product>OpenOffice_org-el</product>
          <product>OpenOffice_org-en</product>
          <product>OpenOffice_org-en-GB</product>
          <product>OpenOffice_org-es</product>
          <product>OpenOffice_org-et</product>
          <product>OpenOffice_org-fi</product>
          <product>OpenOffice_org-fr</product>
          <product>OpenOffice_org-galleries</product>
          <product>OpenOffice_org-gnome</product>
          <product>OpenOffice_org-gu-IN</product>
          <product>OpenOffice_org-hr</product>
          <product>OpenOffice_org-hu</product>
          <product>OpenOffice_org-hunspell</product>
          <product>OpenOffice_org-it</product>
          <product>OpenOffice_org-ja</product>
          <product>OpenOffice_org-kde</product>
          <product>OpenOffice_org-ko</product>
          <product>OpenOffice_org-mono</product>
          <product>OpenOffice_org-nb</product>
          <product>OpenOffice_org-nl</product>
          <product>OpenOffice_org-nn</product>
          <product>OpenOffice_org-officebean</product>
          <product>OpenOffice_org-pa-IN</product>
          <product>OpenOffice_org-pl</product>
          <product>OpenOffice_org-pt</product>
          <product>OpenOffice_org-pt-BR</product>
          <product>OpenOffice_org-ru</product>
          <product>OpenOffice_org-sk</product>
          <product>OpenOffice_org-sl</product>
          <product>OpenOffice_org-sv</product>
          <product>OpenOffice_org-tr</product>
          <product>OpenOffice_org-vi</product>
          <product>OpenOffice_org-xh</product>
          <product>OpenOffice_org-zh-CN</product>
          <product>OpenOffice_org-zh-TW</product>
          <product>OpenOffice_org-zu</product>
        </affected>
        <reference ref_id="CVE-2006-5870" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5870" source="CVE"/>
        <description>Multiple integer overflows in OpenOffice.org (OOo) 2.0.4 and earlier, and possibly other versions before 2.1.0; and StarOffice 6 through 8; allow user-assisted remote attackers to execute arbitrary code via a crafted (a) WMF or (b) EMF file that triggers heap-based buffer overflows in (1) wmf/winwmf.cxx, during processing of META_ESCAPE records; and wmf/enhwmf.cxx, during processing of (2) EMR_POLYPOLYGON and (3) EMR_POLYPOLYGON16 records.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-22T11:38:47">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:07.872-04:00">DRAFT</status_change>
            <modified comment="Assigned new id to ste used for tst:4278." date="2007-08-02T14:42:00.077-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-08-20T08:04:41.466-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:33.864-04:00">ACCEPTED</status_change>
            <modified comment="Added a datatype of 'version' of the release and version entities for several rpminfo_states." date="2010-09-02T21:15:00.227-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T21:18:40.737-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:39.430-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:8280 - Typo Corrections" date="2014-05-22T11:03:00.270-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-05-22T11:06:07.371-04:00">INTERIM</status_change>
            <status_change date="2014-06-09T04:01:48.851-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/novell:linux_desktop:9</cpe>
            <cpe>cpe:/novell:suse_linux:10.1</cpe>
            <cpe>cpe:/novell:suse_linux:10.0</cpe>
            <cpe>cpe:/novell:suse_linux:9.3:pro</cpe>
            <cpe>cpe:/novell:suse_linux:1.0:desktop</cpe>
            <cpe>cpe:/novell:suse_linux_enterprise:10:desktop</cpe>
            <cpe>cpe:/novell:OpenOffice_org1</cpe>
            <cpe>cpe:/novell:OpenOffice_org1-ar</cpe>
            <cpe>cpe:/novell:OpenOffice_org1-ca</cpe>
            <cpe>cpe:/novell:OpenOffice_org1-cs</cpe>
            <cpe>cpe:/novell:OpenOffice_org1-da</cpe>
            <cpe>cpe:/novell:OpenOffice_org1-de</cpe>
            <cpe>cpe:/novell:OpenOffice_org1-el</cpe>
            <cpe>cpe:/novell:OpenOffice_org1-en</cpe>
            <cpe>cpe:/novell:OpenOffice_org1-es</cpe>
            <cpe>cpe:/novell:OpenOffice_org1-et</cpe>
            <cpe>cpe:/novell:OpenOffice_org1-fi</cpe>
            <cpe>cpe:/novell:OpenOffice_org1-fr</cpe>
            <cpe>cpe:/novell:OpenOffice_org1-gnome</cpe>
            <cpe>cpe:/novell:OpenOffice_org1-hu</cpe>
            <cpe>cpe:/novell:OpenOffice_org1-it</cpe>
            <cpe>cpe:/novell:OpenOffice_org1-ja</cpe>
            <cpe>cpe:/novell:OpenOffice_org1-kde</cpe>
            <cpe>cpe:/novell:OpenOffice_org1-ko</cpe>
            <cpe>cpe:/novell:OpenOffice_org1-nl</cpe>
            <cpe>cpe:/novell:OpenOffice_org1-pl</cpe>
            <cpe>cpe:/novell:OpenOffice_org1-pt</cpe>
            <cpe>cpe:/novell:OpenOffice_org1-ru</cpe>
            <cpe>cpe:/novell:OpenOffice_org1-sk</cpe>
            <cpe>cpe:/novell:OpenOffice_org1-sl</cpe>
            <cpe>cpe:/novell:OpenOffice_org1-sv</cpe>
            <cpe>cpe:/novell:OpenOffice_org1-tr</cpe>
            <cpe>cpe:/novell:OpenOffice_org1-zh-CN</cpe>
            <cpe>cpe:/novell:OpenOffice_org1-zh-TW</cpe>
            <cpe>cpe:/novell:OpenOffice_org</cpe>
            <cpe>cpe:/novell:OpenOffice_org-af</cpe>
            <cpe>cpe:/novell:OpenOffice_org-be-BY</cpe>
            <cpe>cpe:/novell:OpenOffice_org-bg</cpe>
            <cpe>cpe:/novell:OpenOffice_org-ca</cpe>
            <cpe>cpe:/novell:OpenOffice_org-cs</cpe>
            <cpe>cpe:/novell:OpenOffice_org-cy</cpe>
            <cpe>cpe:/novell:OpenOffice_org-da</cpe>
            <cpe>cpe:/novell:OpenOffice_org-de</cpe>
            <cpe>cpe:/novell:OpenOffice_org-el</cpe>
            <cpe>cpe:/novell:OpenOffice_org-en</cpe>
            <cpe>cpe:/novell:OpenOffice_org-en-GB</cpe>
            <cpe>cpe:/novell:OpenOffice_org-es</cpe>
            <cpe>cpe:/novell:OpenOffice_org-et</cpe>
            <cpe>cpe:/novell:OpenOffice_org-fi</cpe>
            <cpe>cpe:/novell:OpenOffice_org-fr</cpe>
            <cpe>cpe:/novell:OpenOffice_org-galleries</cpe>
            <cpe>cpe:/novell:OpenOffice_org-gnome</cpe>
            <cpe>cpe:/novell:OpenOffice_org-gu-IN</cpe>
            <cpe>cpe:/novell:OpenOffice_org-hr</cpe>
            <cpe>cpe:/novell:OpenOffice_org-hu</cpe>
            <cpe>cpe:/novell:OpenOffice_org-hunspell</cpe>
            <cpe>cpe:/novell:OpenOffice_org-it</cpe>
            <cpe>cpe:/novell:OpenOffice_org-ja</cpe>
            <cpe>cpe:/novell:OpenOffice_org-kde</cpe>
            <cpe>cpe:/novell:OpenOffice_org-ko</cpe>
            <cpe>cpe:/novell:OpenOffice_org-mono</cpe>
            <cpe>cpe:/novell:OpenOffice_org-nb</cpe>
            <cpe>cpe:/novell:OpenOffice_org-nl</cpe>
            <cpe>cpe:/novell:OpenOffice_org-nn</cpe>
            <cpe>cpe:/novell:OpenOffice_org-officebean</cpe>
            <cpe>cpe:/novell:OpenOffice_org-pa-IN</cpe>
            <cpe>cpe:/novell:OpenOffice_org-pl</cpe>
            <cpe>cpe:/novell:OpenOffice_org-pt</cpe>
            <cpe>cpe:/novell:OpenOffice_org-pt-BR</cpe>
            <cpe>cpe:/novell:OpenOffice_org-ru</cpe>
            <cpe>cpe:/novell:OpenOffice_org-sk</cpe>
            <cpe>cpe:/novell:OpenOffice_org-sl</cpe>
            <cpe>cpe:/novell:OpenOffice_org-sv</cpe>
            <cpe>cpe:/novell:OpenOffice_org-tr</cpe>
            <cpe>cpe:/novell:OpenOffice_org-vi</cpe>
            <cpe>cpe:/novell:OpenOffice_org-xh</cpe>
            <cpe>cpe:/novell:OpenOffice_org-zh-CN</cpe>
            <cpe>cpe:/novell:OpenOffice_org-zh-TW</cpe>
            <cpe>cpe:/novell:OpenOffice_org-zu</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exploitable Novell Linux Desktop 9 or SUSE Linux Desktop 1.0 Vulnerability Exists">
          <criteria operator="AND" comment="Potential System Vulnerability Exists">
            <criteria operator="OR" comment="Potential Novell Linux Desktop 9 or SUSE Linux Desktop 1.0 Vulnerability Exists">
              <extend_definition comment="Novell Linux Desktop 9 is installed" definition_ref="oval:org.mitre.oval:def:2090"/>
              <extend_definition comment="SUSE Linux Desktop 1.0 is installed" definition_ref="oval:org.mitre.oval:def:1366"/>
            </criteria>
            <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3152"/>
          </criteria>
          <criteria operator="OR" comment="Potential Package Vulnerability Exists">
            <criterion comment="OpenOffice_org is installed" test_ref="oval:org.mitre.oval:tst:4677"/>
            <criterion comment="OpenOffice_org-ar is installed" test_ref="oval:org.mitre.oval:tst:4205"/>
            <criterion comment="OpenOffice_org-ca is installed" test_ref="oval:org.mitre.oval:tst:4866"/>
            <criterion comment="OpenOffice_org-cs is installed" test_ref="oval:org.mitre.oval:tst:4348"/>
            <criterion comment="OpenOffice_org-da is installed" test_ref="oval:org.mitre.oval:tst:4791"/>
            <criterion comment="OpenOffice_org-de is installed" test_ref="oval:org.mitre.oval:tst:5008"/>
            <criterion comment="OpenOffice_org-el is installed" test_ref="oval:org.mitre.oval:tst:4238"/>
            <criterion comment="OpenOffice_org-en is installed" test_ref="oval:org.mitre.oval:tst:4287"/>
            <criterion comment="OpenOffice_org-es is installed" test_ref="oval:org.mitre.oval:tst:4751"/>
            <criterion comment="OpenOffice_org-et is installed" test_ref="oval:org.mitre.oval:tst:5033"/>
            <criterion comment="OpenOffice_org-fi is installed" test_ref="oval:org.mitre.oval:tst:4254"/>
            <criterion comment="OpenOffice_org-fr is installed" test_ref="oval:org.mitre.oval:tst:4518"/>
            <criterion comment="OpenOffice_org-gnome is installed" test_ref="oval:org.mitre.oval:tst:4675"/>
            <criterion comment="OpenOffice_org-hu is installed" test_ref="oval:org.mitre.oval:tst:4235"/>
            <criterion comment="OpenOffice_org-it is installed" test_ref="oval:org.mitre.oval:tst:4849"/>
            <criterion comment="OpenOffice_org-ja is installed" test_ref="oval:org.mitre.oval:tst:4671"/>
            <criterion comment="OpenOffice_org-kde is installed" test_ref="oval:org.mitre.oval:tst:4544"/>
            <criterion comment="OpenOffice_org-ko is installed" test_ref="oval:org.mitre.oval:tst:4941"/>
            <criterion comment="OpenOffice_org-nl is installed" test_ref="oval:org.mitre.oval:tst:4956"/>
            <criterion comment="OpenOffice_org-pl is installed" test_ref="oval:org.mitre.oval:tst:4556"/>
            <criterion comment="OpenOffice_org-pt is installed" test_ref="oval:org.mitre.oval:tst:4724"/>
            <criterion comment="OpenOffice_org-pt-BR is installed" test_ref="oval:org.mitre.oval:tst:4754"/>
            <criterion comment="OpenOffice_org-ru is installed" test_ref="oval:org.mitre.oval:tst:4980"/>
            <criterion comment="OpenOffice_org-sk is installed" test_ref="oval:org.mitre.oval:tst:4739"/>
            <criterion comment="OpenOffice_org-sl is installed" test_ref="oval:org.mitre.oval:tst:4596"/>
            <criterion comment="OpenOffice_org-sv is installed" test_ref="oval:org.mitre.oval:tst:4550"/>
            <criterion comment="OpenOffice_org-tr is installed" test_ref="oval:org.mitre.oval:tst:4210"/>
            <criterion comment="OpenOffice_org-zh-CN is installed" test_ref="oval:org.mitre.oval:tst:4875"/>
            <criterion comment="OpenOffice_org-zh-TW is installed" test_ref="oval:org.mitre.oval:tst:4555"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Exploitable SUSE Linux 10.1 Vulnerability Exists">
          <criteria operator="AND" comment="Potential System Vulnerability Exists">
            <extend_definition comment="SUSE Linux 10.1 is installed" definition_ref="oval:org.mitre.oval:def:2157"/>
            <criteria operator="OR" comment="Potential Architecture Vulnerability Exists">
              <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3152"/>
              <criterion comment="ppc architecture" test_ref="oval:org.mitre.oval:tst:4278"/>
            </criteria>
          </criteria>
          <criteria operator="OR" comment="Potential Package Vulnerability Exists">
            <criteria operator="AND" comment="Potential Package OpenOffice_org Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org is installed" definition_ref="oval:org.mitre.oval:def:8865"/>
              <criterion comment="Package OpenOffice_org version-release is less than 2.0.2-27.15" test_ref="oval:org.mitre.oval:tst:4673"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-gnome Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-gnome is installed" definition_ref="oval:org.mitre.oval:def:8914"/>
              <criterion comment="Package OpenOffice_org-gnome version-release is less than 2.0.2-27.15" test_ref="oval:org.mitre.oval:tst:4905"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-kde Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-kde is installed" definition_ref="oval:org.mitre.oval:def:9199"/>
              <criterion comment="Package OpenOffice_org-kde version-release is less than 2.0.2-27.15" test_ref="oval:org.mitre.oval:tst:4272"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-mono Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-mono is installed" definition_ref="oval:org.mitre.oval:def:8222"/>
              <criterion comment="Package OpenOffice_org-mono version-release is less than 2.0.2-27.15" test_ref="oval:org.mitre.oval:tst:4421"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-officebean Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-officebean is installed" definition_ref="oval:org.mitre.oval:def:8541"/>
              <criterion comment="Package OpenOffice_org-officebean version-release is less than 2.0.2-27.15" test_ref="oval:org.mitre.oval:tst:5087"/>
            </criteria>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Exploitable SUSE Linux 10.0 Vulnerability Exists">
          <criteria operator="AND" comment="Potential System Vulnerability Exists">
            <extend_definition comment="SUSE Linux 10.0 is installed" definition_ref="oval:org.mitre.oval:def:2027"/>
            <criteria operator="OR" comment="Potential Architecture Vulnerability Exists">
              <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3152"/>
              <criterion comment="ppc architecture" test_ref="oval:org.mitre.oval:tst:4278"/>
            </criteria>
          </criteria>
          <criteria operator="OR" comment="Potential Package Vulnerability Exists">
            <criteria operator="AND" comment="Potential Package OpenOffice_org Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org is installed" definition_ref="oval:org.mitre.oval:def:8865"/>
              <criterion comment="Package OpenOffice_org version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4770"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-af Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-af is installed" definition_ref="oval:org.mitre.oval:def:8974"/>
              <criterion comment="Package OpenOffice_org-af version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:5076"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-ar Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-ar is installed" definition_ref="oval:org.mitre.oval:def:8663"/>
              <criterion comment="Package OpenOffice_org-ar version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4524"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-be-BY Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-be-BY is installed" definition_ref="oval:org.mitre.oval:def:8432"/>
              <criterion comment="Package OpenOffice_org-be-BY version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4761"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-bg Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-bg is installed" definition_ref="oval:org.mitre.oval:def:8403"/>
              <criterion comment="Package OpenOffice_org-bg version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4224"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-ca Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-ca is installed" definition_ref="oval:org.mitre.oval:def:8887"/>
              <criterion comment="Package OpenOffice_org-ca version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4449"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-cs Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-cs is installed" definition_ref="oval:org.mitre.oval:def:8733"/>
              <criterion comment="Package OpenOffice_org-cs version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4479"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-cy Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-cy is installed" definition_ref="oval:org.mitre.oval:def:8329"/>
              <criterion comment="Package OpenOffice_org-cy version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4986"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-da Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-da is installed" definition_ref="oval:org.mitre.oval:def:8998"/>
              <criterion comment="Package OpenOffice_org-da version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4833"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-de Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-de is installed" definition_ref="oval:org.mitre.oval:def:8688"/>
              <criterion comment="Package OpenOffice_org-de version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4410"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-el Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-el is installed" definition_ref="oval:org.mitre.oval:def:8801"/>
              <criterion comment="Package OpenOffice_org-el version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4561"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-en-GB Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-en-GB is installed" definition_ref="oval:org.mitre.oval:def:8829"/>
              <criterion comment="Package OpenOffice_org-en-GB version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4226"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-es Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-es is installed" definition_ref="oval:org.mitre.oval:def:8583"/>
              <criterion comment="Package OpenOffice_org-es version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4656"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-et Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-et is installed" definition_ref="oval:org.mitre.oval:def:8678"/>
              <criterion comment="Package OpenOffice_org-et version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:5031"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-fi Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-fi is installed" definition_ref="oval:org.mitre.oval:def:8451"/>
              <criterion comment="Package OpenOffice_org-fi version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4716"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-fr Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-fr is installed" definition_ref="oval:org.mitre.oval:def:8215"/>
              <criterion comment="Package OpenOffice_org-fr version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:5020"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-galleries Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-galleries is installed" definition_ref="oval:org.mitre.oval:def:8997"/>
              <criterion comment="Package OpenOffice_org-galleries version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4981"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-gnome Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-gnome is installed" definition_ref="oval:org.mitre.oval:def:8914"/>
              <criterion comment="Package OpenOffice_org-gnome version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:5098"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-gu-IN Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-gu-IN is installed" definition_ref="oval:org.mitre.oval:def:8341"/>
              <criterion comment="Package OpenOffice_org-gu-IN version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4763"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-hr Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-hr is installed" definition_ref="oval:org.mitre.oval:def:8715"/>
              <criterion comment="Package OpenOffice_org-hr version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4280"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-hu Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-hu is installed" definition_ref="oval:org.mitre.oval:def:8228"/>
              <criterion comment="Package OpenOffice_org-hu version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:5191"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-hunspell Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-hunspell is installed" definition_ref="oval:org.mitre.oval:def:8892"/>
              <criterion comment="Package OpenOffice_org-hunspell version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:5152"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-it Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-it is installed" definition_ref="oval:org.mitre.oval:def:9104"/>
              <criterion comment="Package OpenOffice_org-it version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4644"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-ja Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-ja is installed" definition_ref="oval:org.mitre.oval:def:8987"/>
              <criterion comment="Package OpenOffice_org-ja version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4620"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-kde Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-kde is installed" definition_ref="oval:org.mitre.oval:def:9199"/>
              <criterion comment="Package OpenOffice_org-kde version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4921"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-ko Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-ko is installed" definition_ref="oval:org.mitre.oval:def:8352"/>
              <criterion comment="Package OpenOffice_org-ko version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:5038"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-mono Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-mono is installed" definition_ref="oval:org.mitre.oval:def:8222"/>
              <criterion comment="Package OpenOffice_org-mono version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:5103"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-nb Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-nb is installed" definition_ref="oval:org.mitre.oval:def:8804"/>
              <criterion comment="Package OpenOffice_org-nb version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:5128"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-nl Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-nl is installed" definition_ref="oval:org.mitre.oval:def:8611"/>
              <criterion comment="Package OpenOffice_org-nl version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4520"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-nn Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-nn is installed" definition_ref="oval:org.mitre.oval:def:8501"/>
              <criterion comment="Package OpenOffice_org-nn version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4274"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-officebean Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-officebean is installed" definition_ref="oval:org.mitre.oval:def:8541"/>
              <criterion comment="Package OpenOffice_org-officebean version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4420"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-pa-IN Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-pa-IN is installed" definition_ref="oval:org.mitre.oval:def:8882"/>
              <criterion comment="Package OpenOffice_org-pa-IN version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4209"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-pl Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-pl is installed" definition_ref="oval:org.mitre.oval:def:8799"/>
              <criterion comment="Package OpenOffice_org-pl version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4456"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-pt Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-pt is installed" definition_ref="oval:org.mitre.oval:def:8664"/>
              <criterion comment="Package OpenOffice_org-pt version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4940"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-pt-BR Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-pt-BR is installed" definition_ref="oval:org.mitre.oval:def:8886"/>
              <criterion comment="Package OpenOffice_org-pt-BR version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:5180"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-ru Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-ru is installed" definition_ref="oval:org.mitre.oval:def:8389"/>
              <criterion comment="Package OpenOffice_org-ru version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:5096"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-sk Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-sk is installed" definition_ref="oval:org.mitre.oval:def:8244"/>
              <criterion comment="Package OpenOffice_org-sk version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:5058"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-sl Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-sl is installed" definition_ref="oval:org.mitre.oval:def:9181"/>
              <criterion comment="Package OpenOffice_org-sl version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4908"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-sv Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-sv is installed" definition_ref="oval:org.mitre.oval:def:8860"/>
              <criterion comment="Package OpenOffice_org-sv version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:5051"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-tr Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-tr is installed" definition_ref="oval:org.mitre.oval:def:8707"/>
              <criterion comment="Package OpenOffice_org-tr version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4258"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-vi Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-vi is installed" definition_ref="oval:org.mitre.oval:def:8288"/>
              <criterion comment="Package OpenOffice_org-vi version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4828"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-xh Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-xh is installed" definition_ref="oval:org.mitre.oval:def:8477"/>
              <criterion comment="Package OpenOffice_org-xh version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4893"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-zh-CN Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-zh-CN is installed" definition_ref="oval:org.mitre.oval:def:8995"/>
              <criterion comment="Package OpenOffice_org-zh-CN version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4331"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-zh-TW Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-zh-TW is installed" definition_ref="oval:org.mitre.oval:def:9146"/>
              <criterion comment="Package OpenOffice_org-zh-TW version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4204"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org-zu Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org-zu is installed" definition_ref="oval:org.mitre.oval:def:8269"/>
              <criterion comment="Package OpenOffice_org-zu version-release is less than 2.0.0-1.6" test_ref="oval:org.mitre.oval:tst:4850"/>
            </criteria>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Exploitable SUSE Linux Professional 9.3 Vulnerability Exists">
          <criteria operator="AND" comment="Potential System Vulnerability Exists">
            <extend_definition comment="SUSE Linux Professional 9.3 is installed" definition_ref="oval:org.mitre.oval:def:2044"/>
            <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3152"/>
          </criteria>
          <criteria operator="OR" comment="Potential Package Vulnerability Exists">
            <criteria operator="AND" comment="Potential Package OpenOffice_org1 Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org1 is installed" definition_ref="oval:org.mitre.oval:def:8264"/>
              <criterion comment="Package OpenOffice_org1 version-release is less than 1.1.3-4.7" test_ref="oval:org.mitre.oval:tst:4622"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org1-ar Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org1-ar is installed" definition_ref="oval:org.mitre.oval:def:8777"/>
              <criterion comment="Package OpenOffice_org1-ar version-release is less than 1.1.3-4.7" test_ref="oval:org.mitre.oval:tst:4923"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org1-ca Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org1-ca is installed" definition_ref="oval:org.mitre.oval:def:8915"/>
              <criterion comment="Package OpenOffice_org1-ca version-release is less than 1.1.3-4.7" test_ref="oval:org.mitre.oval:tst:5069"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org1-cs Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org1-cs is installed" definition_ref="oval:org.mitre.oval:def:8357"/>
              <criterion comment="Package OpenOffice_org1-cs version-release is less than 1.1.3-4.7" test_ref="oval:org.mitre.oval:tst:4463"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org1-da Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org1-da is installed" definition_ref="oval:org.mitre.oval:def:8308"/>
              <criterion comment="Package OpenOffice_org1-da version-release is less than 1.1.3-4.7" test_ref="oval:org.mitre.oval:tst:5139"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org1-de Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org1-de is installed" definition_ref="oval:org.mitre.oval:def:8533"/>
              <criterion comment="Package OpenOffice_org1-de version-release is less than 1.1.3-4.7" test_ref="oval:org.mitre.oval:tst:4368"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org1-el Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org1-el is installed" definition_ref="oval:org.mitre.oval:def:8652"/>
              <criterion comment="Package OpenOffice_org1-el version-release is less than 1.1.3-4.7" test_ref="oval:org.mitre.oval:tst:4650"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org1-en Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org1-en is installed" definition_ref="oval:org.mitre.oval:def:8958"/>
              <criterion comment="Package OpenOffice_org1-en version-release is less than 1.1.3-4.7" test_ref="oval:org.mitre.oval:tst:4537"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org1-es Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org1-es is installed" definition_ref="oval:org.mitre.oval:def:8705"/>
              <criterion comment="Package OpenOffice_org1-es version-release is less than 1.1.3-4.7" test_ref="oval:org.mitre.oval:tst:4937"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org1-et Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org1-et is installed" definition_ref="oval:org.mitre.oval:def:8681"/>
              <criterion comment="Package OpenOffice_org1-et version-release is less than 1.1.3-4.7" test_ref="oval:org.mitre.oval:tst:4627"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org1-fi Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org1-fi is installed" definition_ref="oval:org.mitre.oval:def:8815"/>
              <criterion comment="Package OpenOffice_org1-fi version-release is less than 1.1.3-4.7" test_ref="oval:org.mitre.oval:tst:4462"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org1-fr Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org1-fr is installed" definition_ref="oval:org.mitre.oval:def:8672"/>
              <criterion comment="Package OpenOffice_org1-fr version-release is less than 1.1.3-4.7" test_ref="oval:org.mitre.oval:tst:4404"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org1-gnome Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org1-gnome is installed" definition_ref="oval:org.mitre.oval:def:8342"/>
              <criterion comment="Package OpenOffice_org1-gnome version-release is less than 1.1.3-4.7" test_ref="oval:org.mitre.oval:tst:4713"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org1-hu Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org1-hu is installed" definition_ref="oval:org.mitre.oval:def:8380"/>
              <criterion comment="Package OpenOffice_org1-hu version-release is less than 1.1.3-4.7" test_ref="oval:org.mitre.oval:tst:5127"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org1-it Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org1-it is installed" definition_ref="oval:org.mitre.oval:def:8691"/>
              <criterion comment="Package OpenOffice_org1-it version-release is less than 1.1.3-4.7" test_ref="oval:org.mitre.oval:tst:4541"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org1-ja Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org1-ja is installed" definition_ref="oval:org.mitre.oval:def:9174"/>
              <criterion comment="Package OpenOffice_org1-ja version-release is less than 1.1.3-4.7" test_ref="oval:org.mitre.oval:tst:4727"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org1-kde Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org1-kde is installed" definition_ref="oval:org.mitre.oval:def:8774"/>
              <criterion comment="Package OpenOffice_org1-kde version-release is less than 1.1.3-4.7" test_ref="oval:org.mitre.oval:tst:4594"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org1-ko Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org1-ko is installed" definition_ref="oval:org.mitre.oval:def:9070"/>
              <criterion comment="Package OpenOffice_org1-ko version-release is less than 1.1.3-4.7" test_ref="oval:org.mitre.oval:tst:4816"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org1-nl Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org1-nl is installed" definition_ref="oval:org.mitre.oval:def:9192"/>
              <criterion comment="Package OpenOffice_org1-nl version-release is less than 1.1.3-4.7" test_ref="oval:org.mitre.oval:tst:4590"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org1-pl Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org1-pl is installed" definition_ref="oval:org.mitre.oval:def:8502"/>
              <criterion comment="Package OpenOffice_org1-pl version-release is less than 1.1.3-4.7" test_ref="oval:org.mitre.oval:tst:5010"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org1-pt Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org1-pt is installed" definition_ref="oval:org.mitre.oval:def:8906"/>
              <criterion comment="Package OpenOffice_org1-pt version-release is less than 1.1.3-4.7" test_ref="oval:org.mitre.oval:tst:5028"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org1-ru Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org1-ru is installed" definition_ref="oval:org.mitre.oval:def:9169"/>
              <criterion comment="Package OpenOffice_org1-ru version-release is less than 1.1.3-4.7" test_ref="oval:org.mitre.oval:tst:4728"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org1-sk Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org1-sk is installed" definition_ref="oval:org.mitre.oval:def:8903"/>
              <criterion comment="Package OpenOffice_org1-sk version-release is less than 1.1.3-4.7" test_ref="oval:org.mitre.oval:tst:5118"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org1-sl Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org1-sl is installed" definition_ref="oval:org.mitre.oval:def:8773"/>
              <criterion comment="Package OpenOffice_org1-sl version-release is less than 1.1.3-4.7" test_ref="oval:org.mitre.oval:tst:4598"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org1-sv Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org1-sv is installed" definition_ref="oval:org.mitre.oval:def:9168"/>
              <criterion comment="Package OpenOffice_org1-sv version-release is less than 1.1.3-4.7" test_ref="oval:org.mitre.oval:tst:4806"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org1-tr Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org1-tr is installed" definition_ref="oval:org.mitre.oval:def:8310"/>
              <criterion comment="Package OpenOffice_org1-tr version-release is less than 1.1.3-4.7" test_ref="oval:org.mitre.oval:tst:4775"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org1-zh-CN Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org1-zh-CN is installed" definition_ref="oval:org.mitre.oval:def:8604"/>
              <criterion comment="Package OpenOffice_org1-zh-CN version-release is less than 1.1.3-4.7" test_ref="oval:org.mitre.oval:tst:5086"/>
            </criteria>
            <criteria operator="AND" comment="Potential Package OpenOffice_org1-zh-TW Vulnerability Exists">
              <extend_definition comment="Package OpenOffice_org1-zh-TW is installed" definition_ref="oval:org.mitre.oval:def:8999"/>
              <criterion comment="Package OpenOffice_org1-zh-TW version-release is less than 1.1.3-4.7" test_ref="oval:org.mitre.oval:tst:4376"/>
            </criteria>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Exploitable SUSE Linux Enterprise Desktop 10 Vulnerability Exists">
          <criteria operator="AND" comment="Potential System Vulnerability Exists">
            <extend_definition comment="SUSE Linux Enterprise Desktop 10 is installed" definition_ref="oval:org.mitre.oval:def:2106"/>
            <criteria operator="OR" comment="Potential Architecture Vulnerability Exists">
              <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3152"/>
              <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:1547"/>
            </criteria>
          </criteria>
          <criteria operator="OR" comment="Potential Package Vulnerability Exists">
            <criterion comment="OpenOffice_org is installed" test_ref="oval:org.mitre.oval:tst:4677"/>
            <criterion comment="OpenOffice_org-gnome is installed" test_ref="oval:org.mitre.oval:tst:4675"/>
            <criterion comment="OpenOffice_org-kde is installed" test_ref="oval:org.mitre.oval:tst:4544"/>
            <criterion comment="OpenOffice_org-mono is installed" test_ref="oval:org.mitre.oval:tst:4809"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9199" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-kde is installed</title>
        <affected family="unix">
          <platform>Novell Linux Desktop 9</platform>
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:OpenOffice_org-kde"/>
        <description>Package OpenOffice_org-kde is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:00:11">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:05.674-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:46.395-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:39.790-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:linux_desktop:9</cpe>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-kde is installed" test_ref="oval:org.mitre.oval:tst:4544"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9192" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org1-nl is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Professional 9.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org1-nl"/>
        <description>Package OpenOffice_org1-nl is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:09:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:03.778-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:46.343-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:39.725-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:9.3::pro</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org1-nl is installed" test_ref="oval:org.mitre.oval:tst:4451"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9181" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-sl is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-sl"/>
        <description>Package OpenOffice_org-sl is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:01:42">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:06.411-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:46.286-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:39.625-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-sl is installed" test_ref="oval:org.mitre.oval:tst:4596"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9174" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org1-ja is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Professional 9.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org1-ja"/>
        <description>Package OpenOffice_org1-ja is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:09:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:03.648-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:46.230-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:39.540-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:9.3::pro</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org1-ja is installed" test_ref="oval:org.mitre.oval:tst:4794"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9169" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org1-ru is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Professional 9.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org1-ru"/>
        <description>Package OpenOffice_org1-ru is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:09:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:03.904-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:46.177-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:39.477-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:9.3::pro</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org1-ru is installed" test_ref="oval:org.mitre.oval:tst:4542"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9168" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org1-sv is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Professional 9.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org1-sv"/>
        <description>Package OpenOffice_org1-sv is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:09:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:04.040-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:46.125-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:39.418-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:9.3::pro</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org1-sv is installed" test_ref="oval:org.mitre.oval:tst:4290"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9146" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-zh-TW is installed</title>
        <affected family="unix">
          <platform>Novell Linux Desktop 9</platform>
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-zh-TW"/>
        <description>Package OpenOffice_org-zh-TW is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:02:38">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:06.764-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:45.980-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:39.253-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:linux_desktop:9</cpe>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-zh-TW is installed" test_ref="oval:org.mitre.oval:tst:4555"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9104" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-it is installed</title>
        <affected family="unix">
          <platform>Novell Linux Desktop 9</platform>
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-it"/>
        <description>Package OpenOffice_org-it is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:00:04">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:05.574-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:45.918-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:39.180-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:linux_desktop:9</cpe>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-it is installed" test_ref="oval:org.mitre.oval:tst:4849"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:9070" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org1-ko is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Professional 9.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org1-ko"/>
        <description>Package OpenOffice_org1-ko is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:09:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:03.732-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:45.863-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:39.120-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:9.3::pro</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org1-ko is installed" test_ref="oval:org.mitre.oval:tst:4418"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8999" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org1-zh-TW is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Professional 9.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org1-zh-TW"/>
        <description>Package OpenOffice_org1-zh-TW is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:09:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:04.171-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:45.743-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:38.974-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:9.3::pro</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org1-zh-TW is installed" test_ref="oval:org.mitre.oval:tst:4477"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8998" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-da is installed</title>
        <affected family="unix">
          <platform>Novell Linux Desktop 9</platform>
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-da"/>
        <description>Package OpenOffice_org-da is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:58:47">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:04.780-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:45.683-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:38.904-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:linux_desktop:9</cpe>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-da is installed" test_ref="oval:org.mitre.oval:tst:4791"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8997" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-galleries is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-galleries"/>
        <description>Package OpenOffice_org-galleries is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:59:33">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:05.255-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:45.625-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:38.819-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-galleries is installed" test_ref="oval:org.mitre.oval:tst:4799"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8995" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-zh-CN is installed</title>
        <affected family="unix">
          <platform>Novell Linux Desktop 9</platform>
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-zh-CN"/>
        <description>Package OpenOffice_org-zh-CN is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:02:33">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:06.712-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:45.565-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:38.708-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:linux_desktop:9</cpe>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-zh-CN is installed" test_ref="oval:org.mitre.oval:tst:4875"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8987" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-ja is installed</title>
        <affected family="unix">
          <platform>Novell Linux Desktop 9</platform>
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-ja"/>
        <description>Package OpenOffice_org-ja is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:00:07">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:05.622-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:45.500-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:38.635-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:linux_desktop:9</cpe>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-ja is installed" test_ref="oval:org.mitre.oval:tst:4671"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8974" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-af is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-af"/>
        <description>Package OpenOffice_org-af is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:58:15">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:04.334-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:45.440-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:38.570-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-af is installed" test_ref="oval:org.mitre.oval:tst:4549"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8958" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org1-en is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Professional 9.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org1-en"/>
        <description>Package OpenOffice_org1-en is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:09:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:03.195-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:45.381-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:38.511-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:9.3::pro</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org1-en is installed" test_ref="oval:org.mitre.oval:tst:4947"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8915" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org1-ca is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Professional 9.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org1-ca"/>
        <description>Package OpenOffice_org1-ca is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:09:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:02.928-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:45.325-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:38.444-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:9.3::pro</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org1-ca is installed" test_ref="oval:org.mitre.oval:tst:4574"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8914" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-gnome is installed</title>
        <affected family="unix">
          <platform>Novell Linux Desktop 9</platform>
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-gnome"/>
        <description>Package OpenOffice_org-gnome is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:59:37">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:05.305-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:45.260-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:38.371-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:linux_desktop:9</cpe>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-gnome is installed" test_ref="oval:org.mitre.oval:tst:4675"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8906" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org1-pt is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Professional 9.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org1-pt"/>
        <description>Package OpenOffice_org1-pt is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:09:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:03.866-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:45.205-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:38.313-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:9.3::pro</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org1-pt is installed" test_ref="oval:org.mitre.oval:tst:5167"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8903" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org1-sk is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Professional 9.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org1-sk"/>
        <description>Package OpenOffice_org1-sk is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:09:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:03.950-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:45.152-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:38.255-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:9.3::pro</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org1-sk is installed" test_ref="oval:org.mitre.oval:tst:4843"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8892" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-hunspell is installed</title>
        <affected family="unix">
          <platform>SUSE Linux 10.0</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-hunspell"/>
        <description>Package OpenOffice_org-hunspell is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:59:56">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:05.529-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:45.099-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:38.197-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-hunspell is installed" test_ref="oval:org.mitre.oval:tst:4443"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8887" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-ca is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-ca"/>
        <description>Package OpenOffice_org-ca is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:58:33">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:04.567-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:45.040-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:38.133-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-ca is installed" test_ref="oval:org.mitre.oval:tst:4866"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8886" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-pt-BR is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-pt-BR"/>
        <description>Package OpenOffice_org-pt-BR is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:01:07">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:06.237-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:44.971-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:38.067-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-pt-BR is installed" test_ref="oval:org.mitre.oval:tst:4754"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8882" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-pa-IN is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-pa-IN"/>
        <description>Package OpenOffice_org-pa-IN is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:00:54">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:06.083-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:44.910-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:38.002-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-pa-IN is installed" test_ref="oval:org.mitre.oval:tst:4615"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8865" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org is installed</title>
        <affected family="unix">
          <platform>Novell Linux Desktop 9</platform>
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org"/>
        <description>Package OpenOffice_org is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:58:09">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:04.247-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:44.849-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:37.936-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:linux_desktop:9</cpe>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org is installed" test_ref="oval:org.mitre.oval:tst:4677"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8860" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-sv is installed</title>
        <affected family="unix">
          <platform>Novell Linux Desktop 9</platform>
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-sv"/>
        <description>Package OpenOffice_org-sv is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:01:53">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:06.506-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:44.789-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:37.870-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:linux_desktop:9</cpe>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-sv is installed" test_ref="oval:org.mitre.oval:tst:4550"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8829" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-en-GB is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-en-GB"/>
        <description>Package OpenOffice_org-en-GB is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:59:11">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:04.980-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:44.732-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:37.798-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-en-GB is installed" test_ref="oval:org.mitre.oval:tst:4815"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8815" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org1-fi is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Professional 9.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org1-fi"/>
        <description>Package OpenOffice_org1-fi is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:09:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:03.353-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:44.680-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:37.738-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:9.3::pro</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org1-fi is installed" test_ref="oval:org.mitre.oval:tst:5169"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8804" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-nb is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-nb"/>
        <description>Package OpenOffice_org-nb is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:00:39">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:05.901-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:44.619-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:37.674-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-nb is installed" test_ref="oval:org.mitre.oval:tst:5021"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8801" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-el is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-el"/>
        <description>Package OpenOffice_org-el is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:59:07">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:04.924-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:44.553-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:37.610-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-el is installed" test_ref="oval:org.mitre.oval:tst:4238"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8799" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-pl is installed</title>
        <affected family="unix">
          <platform>Novell Linux Desktop 9</platform>
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-pl"/>
        <description>Package OpenOffice_org-pl is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:00:59">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:06.128-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:44.489-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:37.533-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:linux_desktop:9</cpe>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-pl is installed" test_ref="oval:org.mitre.oval:tst:4556"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8777" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org1-ar is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Professional 9.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org1-ar"/>
        <description>Package OpenOffice_org1-ar is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:09:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:02.882-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:44.436-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:37.454-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:9.3::pro</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org1-ar is installed" test_ref="oval:org.mitre.oval:tst:4273"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8774" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org1-kde is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Professional 9.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org1-kde"/>
        <description>Package OpenOffice_org1-kde is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:09:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:03.694-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:44.383-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:37.393-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:9.3::pro</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org1-kde is installed" test_ref="oval:org.mitre.oval:tst:4748"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8773" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org1-sl is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Professional 9.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org1-sl"/>
        <description>Package OpenOffice_org1-sl is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:09:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:03.994-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:44.330-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:37.333-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:9.3::pro</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org1-sl is installed" test_ref="oval:org.mitre.oval:tst:5084"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8733" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-cs is installed</title>
        <affected family="unix">
          <platform>Novell Linux Desktop 9</platform>
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-cs"/>
        <description>Package OpenOffice_org-cs is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:58:39">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:04.637-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:44.268-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:37.259-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:linux_desktop:9</cpe>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-cs is installed" test_ref="oval:org.mitre.oval:tst:4348"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8715" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-hr is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-hr"/>
        <description>Package OpenOffice_org-hr is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:59:49">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:05.414-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:44.205-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:37.145-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-hr is installed" test_ref="oval:org.mitre.oval:tst:5026"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8707" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-tr is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-tr"/>
        <description>Package OpenOffice_org-tr is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:02:15">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:06.558-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:44.146-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:37.081-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-tr is installed" test_ref="oval:org.mitre.oval:tst:4210"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8705" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org1-es is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Professional 9.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org1-es"/>
        <description>Package OpenOffice_org1-es is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:09:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:03.244-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:44.092-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:37.017-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:9.3::pro</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org1-es is installed" test_ref="oval:org.mitre.oval:tst:4329"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8691" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org1-it is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Professional 9.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org1-it"/>
        <description>Package OpenOffice_org1-it is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:09:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:03.599-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:44.037-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:36.952-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:9.3::pro</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org1-it is installed" test_ref="oval:org.mitre.oval:tst:4212"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8688" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-de is installed</title>
        <affected family="unix">
          <platform>Novell Linux Desktop 9</platform>
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-de"/>
        <description>Package OpenOffice_org-de is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:58:51">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:04.859-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:43.969-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:36.882-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:linux_desktop:9</cpe>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-de is installed" test_ref="oval:org.mitre.oval:tst:5008"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8681" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org1-et is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Professional 9.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org1-et"/>
        <description>Package OpenOffice_org1-et is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:09:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:03.304-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:43.915-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:36.818-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:9.3::pro</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org1-et is installed" test_ref="oval:org.mitre.oval:tst:5094"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8678" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-et is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-et"/>
        <description>Package OpenOffice_org-et is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:59:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:05.091-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:43.853-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:36.752-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-et is installed" test_ref="oval:org.mitre.oval:tst:5033"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8672" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org1-fr is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Professional 9.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org1-fr"/>
        <description>Package OpenOffice_org1-fr is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:09:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:03.406-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:43.798-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:36.693-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:9.3::pro</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org1-fr is installed" test_ref="oval:org.mitre.oval:tst:5105"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8664" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-pt is installed</title>
        <affected family="unix">
          <platform>Novell Linux Desktop 9</platform>
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-pt"/>
        <description>Package OpenOffice_org-pt is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:01:03">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:06.180-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:43.735-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:36.537-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:linux_desktop:9</cpe>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-pt is installed" test_ref="oval:org.mitre.oval:tst:4724"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8663" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-ar is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-ar"/>
        <description>Package OpenOffice_org-ar is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:58:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:04.415-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:43.675-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:36.472-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-ar is installed" test_ref="oval:org.mitre.oval:tst:4205"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8652" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org1-el is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Professional 9.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org1-el"/>
        <description>Package OpenOffice_org1-el is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:09:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:03.150-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:43.535-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:36.317-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:9.3::pro</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org1-el is installed" test_ref="oval:org.mitre.oval:tst:4345"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8611" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-nl is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-nl"/>
        <description>Package OpenOffice_org-nl is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:00:42">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:05.942-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:43.477-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:36.251-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-nl is installed" test_ref="oval:org.mitre.oval:tst:4956"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8604" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org1-zh-CN is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Professional 9.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org1-zh-CN"/>
        <description>Package OpenOffice_org1-zh-CN is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:09:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:04.127-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:43.426-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:36.194-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:9.3::pro</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org1-zh-CN is installed" test_ref="oval:org.mitre.oval:tst:5187"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8583" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-es is installed</title>
        <affected family="unix">
          <platform>Novell Linux Desktop 9</platform>
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-es"/>
        <description>Package OpenOffice_org-es is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:59:15">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:05.035-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:43.365-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:36.123-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:linux_desktop:9</cpe>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-es is installed" test_ref="oval:org.mitre.oval:tst:4751"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8541" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-officebean is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.1</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-officebean"/>
        <description>Package OpenOffice_org-officebean is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:00:50">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:06.039-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:43.307-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:36.061-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-officebean is installed" test_ref="oval:org.mitre.oval:tst:5132"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8533" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org1-de is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Professional 9.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org1-de"/>
        <description>Package OpenOffice_org1-de is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:09:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:03.092-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:43.254-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:35.998-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:9.3::pro</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org1-de is installed" test_ref="oval:org.mitre.oval:tst:4764"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8502" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org1-pl is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Professional 9.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org1-pl"/>
        <description>Package OpenOffice_org1-pl is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:09:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:03.818-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:43.200-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:35.917-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:9.3::pro</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org1-pl is installed" test_ref="oval:org.mitre.oval:tst:4319"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8501" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-nn is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-nn"/>
        <description>Package OpenOffice_org-nn is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:00:46">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:05.988-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:43.144-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:35.856-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-nn is installed" test_ref="oval:org.mitre.oval:tst:4734"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8477" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-xh is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-xh"/>
        <description>Package OpenOffice_org-xh is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:02:29">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:06.658-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:43.087-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:35.791-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-xh is installed" test_ref="oval:org.mitre.oval:tst:4357"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8451" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-fi is installed</title>
        <affected family="unix">
          <platform>Novell Linux Desktop 9</platform>
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-fi"/>
        <description>Package OpenOffice_org-fi is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:59:22">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:05.142-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:43.025-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:35.724-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:linux_desktop:9</cpe>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-fi is installed" test_ref="oval:org.mitre.oval:tst:4254"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8432" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-be-BY is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-be-BY"/>
        <description>Package OpenOffice_org-be-BY is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:58:25">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:04.465-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:42.964-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:35.657-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-be-BY is installed" test_ref="oval:org.mitre.oval:tst:4526"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8403" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-bg is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-bg"/>
        <description>Package OpenOffice_org-bg is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:58:29">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:04.517-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:42.902-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:35.585-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-bg is installed" test_ref="oval:org.mitre.oval:tst:4461"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8389" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-ru is installed</title>
        <affected family="unix">
          <platform>Novell Linux Desktop 9</platform>
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-ru"/>
        <description>Package OpenOffice_org-ru is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:01:24">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:06.287-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:42.844-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:35.515-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:linux_desktop:9</cpe>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-ru is installed" test_ref="oval:org.mitre.oval:tst:4980"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8380" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org1-hu is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Professional 9.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org1-hu"/>
        <description>Package OpenOffice_org1-hu is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:09:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:03.557-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:42.794-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:35.432-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:9.3::pro</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org1-hu is installed" test_ref="oval:org.mitre.oval:tst:4532"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8357" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org1-cs is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Professional 9.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org1-cs"/>
        <description>Package OpenOffice_org1-cs is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:09:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:02.976-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:42.691-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:35.369-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:9.3::pro</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org1-cs is installed" test_ref="oval:org.mitre.oval:tst:4711"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8352" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-ko is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-ko"/>
        <description>Package OpenOffice_org-ko is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:00:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:05.726-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:42.634-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:35.270-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-ko is installed" test_ref="oval:org.mitre.oval:tst:4941"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8342" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org1-gnome is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Professional 9.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org1-gnome"/>
        <description>Package OpenOffice_org1-gnome is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:09:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:03.454-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:42.582-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:35.183-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:9.3::pro</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org1-gnome is installed" test_ref="oval:org.mitre.oval:tst:4430"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8341" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-gu-IN is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-gu-IN"/>
        <description>Package OpenOffice_org-gu-IN is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:59:42">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:05.364-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:42.525-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:35.112-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-gu-IN is installed" test_ref="oval:org.mitre.oval:tst:4522"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8329" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-cy is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-cy"/>
        <description>Package OpenOffice_org-cy is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:58:44">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:04.695-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:42.359-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:34.880-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-cy is installed" test_ref="oval:org.mitre.oval:tst:5190"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8310" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org1-tr is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Professional 9.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org1-tr"/>
        <description>Package OpenOffice_org1-tr is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:09:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:04.083-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:42.307-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:34.822-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:9.3::pro</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org1-tr is installed" test_ref="oval:org.mitre.oval:tst:4961"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8308" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org1-da is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Professional 9.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org1-da"/>
        <description>Package OpenOffice_org1-da is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:09:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:03.025-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:42.256-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:34.763-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:9.3::pro</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org1-da is installed" test_ref="oval:org.mitre.oval:tst:5012"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8288" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-vi is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-vi"/>
        <description>Package OpenOffice_org-vi is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:02:23">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:06.610-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:42.202-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:34.693-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-vi is installed" test_ref="oval:org.mitre.oval:tst:5155"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8269" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-zu is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-zu"/>
        <description>Package OpenOffice_org-zu is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:02:42">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:06.813-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:41.108-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:33.519-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-zu is installed" test_ref="oval:org.mitre.oval:tst:4496"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8264" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org1 is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Professional 9.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org1"/>
        <description>Package OpenOffice_org1 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:09:19">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:02.829-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:41.060-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:33.458-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:9.3::pro</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org1 is installed" test_ref="oval:org.mitre.oval:tst:4214"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8244" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-sk is installed</title>
        <affected family="unix">
          <platform>Novell Linux Desktop 9</platform>
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-sk"/>
        <description>Package OpenOffice_org-sk is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:01:38">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:06.342-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:40.996-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:33.387-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:linux_desktop:9</cpe>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-sk is installed" test_ref="oval:org.mitre.oval:tst:4739"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8228" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-hu is installed</title>
        <affected family="unix">
          <platform>Novell Linux Desktop 9</platform>
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-hu"/>
        <description>Package OpenOffice_org-hu is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:59:53">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:05.468-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:40.941-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:33.318-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:linux_desktop:9</cpe>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-hu is installed" test_ref="oval:org.mitre.oval:tst:4235"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8222" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-mono is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-mono"/>
        <description>Package OpenOffice_org-mono is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T22:00:35">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:05.845-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:40.881-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:33.249-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-mono is installed" test_ref="oval:org.mitre.oval:tst:4809"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8215" version="1" class="inventory">
      <metadata>
        <title>Package OpenOffice_org-fr is installed</title>
        <affected family="unix">
          <platform>Novell Linux Desktop 9</platform>
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:openoffice_org-fr"/>
        <description>Package OpenOffice_org-fr is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:59:29">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-01T22:23:05.202-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:40.821-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:33.180-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:linux_desktop:9</cpe>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="OpenOffice_org-fr is installed" test_ref="oval:org.mitre.oval:tst:4518"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2090" version="3" class="inventory">
      <metadata>
        <title>Novell Linux Desktop 9 is installed</title>
        <affected family="unix">
          <platform>Novell Linux Desktop 9</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:novell:linux_desktop:9"/>
        <description>Novell Linux Desktop 9 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-11T16:29:48">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-07-12T07:09:37.446-04:00">DRAFT</status_change>
            <modified comment="Removed unneeded platform information from the affected element and affected cpe list." date="2007-07-25T12:36:00.664-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Changed version value to 9" date="2007-07-25T12:58:00.106-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-08-10T13:33:40.954-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:30.062-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:2090 - Fixed Definitions with missing platforms." date="2012-12-12T17:14:00.907-05:00">
              <contributor organization="SecPod Technologies">Chandan S</contributor>
            </modified>
            <status_change date="2012-12-12T17:21:07.472-05:00">INTERIM</status_change>
            <status_change date="2012-12-31T04:02:05.592-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Novell Linux Desktop 9 is installed" test_ref="oval:org.mitre.oval:tst:4075"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2044" version="3" class="inventory">
      <metadata>
        <title>SUSE Linux Professional 9.3 is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Professional 9.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:novell:suse_linux:9.3::pro"/>
        <description>SUSE Linux Professional 9.3 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-11T16:29:48">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-07-12T07:09:38.537-04:00">DRAFT</status_change>
            <modified comment="Removed unneeded platform information from the affected element and affected cpe list." date="2007-07-25T12:36:00.045-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-08-10T13:33:40.898-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:29.867-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:2044 - Fixed Definitions with missing platforms." date="2012-12-12T17:14:00.907-05:00">
              <contributor organization="SecPod Technologies">Chandan S</contributor>
            </modified>
            <status_change date="2012-12-12T17:20:54.378-05:00">INTERIM</status_change>
            <status_change date="2012-12-31T04:02:05.347-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="SUSE Linux Professional 9.3 is installed" test_ref="oval:org.mitre.oval:tst:3212"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2027" version="3" class="inventory">
      <metadata>
        <title>SUSE Linux 10.0 is installed</title>
        <affected family="unix">
          <platform>SUSE Linux 10.0</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:novell:suse_linux:10.0"/>
        <description>SUSE Linux 10.0 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-28T06:18:50">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-07-10T21:08:30.126-04:00">DRAFT</status_change>
            <modified comment="Removed unneeded platform information from the affected element and affected cpe list." date="2007-07-25T13:03:00.573-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-08-10T13:33:40.841-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:29.546-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:2027 - Fixed Definitions with missing platforms." date="2012-12-12T17:14:00.907-05:00">
              <contributor organization="SecPod Technologies">Chandan S</contributor>
            </modified>
            <status_change date="2012-12-12T17:20:49.625-05:00">INTERIM</status_change>
            <status_change date="2012-12-31T04:02:04.984-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="SUSE Linux 10.0 is installed" test_ref="oval:org.mitre.oval:tst:3693"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1366" version="3" class="inventory">
      <metadata>
        <title>SUSE Linux Desktop 1.0 is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Desktop 1.0</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:novell:suse_linux:1.0::desktop"/>
        <description>SUSE Linux Desktop 1.0 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-11T16:29:48">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-07-12T07:09:38.919-04:00">DRAFT</status_change>
            <modified comment="Removed unneeded platform information from the affected element and affected cpe list." date="2007-07-25T12:36:00.746-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-08-10T13:33:40.780-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:26.876-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1366 - Fixed Definitions with missing platforms." date="2012-12-12T17:14:00.907-05:00">
              <contributor organization="SecPod Technologies">Chandan S</contributor>
            </modified>
            <status_change date="2012-12-12T17:21:13.681-05:00">INTERIM</status_change>
            <status_change date="2012-12-31T04:00:30.233-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="SUSE Linux Desktop 1.0 is installed" test_ref="oval:org.mitre.oval:tst:3465"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:828" version="4" class="vulnerability">
      <metadata>
        <title>mod_python Web Server Denial of Service</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>mod_python</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0973" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0973"/>
        <description>Unknown vulnerability in mod_python 3.0.x before 3.0.4, and 2.7.x before 2.7.9, allows remote attackers to cause a denial of service (httpd crash) via a certain query string.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:57.737-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:57.394-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.470-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T21:00:00.457-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:38.929-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="mod_python version is less than 3.0.1-4" negate="false" test_ref="oval:org.mitre.oval:tst:1612"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="httpd is listening to the network" negate="false" test_ref="oval:org.mitre.oval:tst:1611"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8272" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in rm(1) may Lead to Unauthorized Deletion of Files or Directories</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0895" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0895"/>
        <description>Race condition in recursive directory deletion with the (1) -r or (2) -R option in rm in Solaris 8 through 10 before 20070208 allows local users to delete files and directories as the user running rm by moving a low-level directory to a higher level as it is being deleted, which causes rm to chdir to a ".." directory that is higher than expected, possibly up to the root file system, a related issue to CVE-2002-0435.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-06T11:50:11.000-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </submitted>
            <status_change date="2007-08-08T21:33:23.977-04:00">DRAFT</status_change>
            <status_change date="2007-08-23T14:55:19.959-04:00">INTERIM</status_change>
            <status_change date="2007-09-10T14:45:27.362-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102782" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 124969-01 or later installed" test_ref="oval:org.mitre.oval:tst:4414" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102782" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 123372-02 or later installed" test_ref="oval:org.mitre.oval:tst:4946" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102782" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 124244-01 or later installed" test_ref="oval:org.mitre.oval:tst:4215" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102782" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 124970-01 or later installed" test_ref="oval:org.mitre.oval:tst:4906" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102782" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 123373-02 or later installed" test_ref="oval:org.mitre.oval:tst:5133" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102782" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 124245-01 or later installed" test_ref="oval:org.mitre.oval:tst:4576" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:827" version="4" class="vulnerability">
      <metadata>
        <title>Samba mksmboasswd Disabled Account Creation Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>Samba 3.0.0 and 3.0.1</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0082" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0082"/>
        <description>The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized buffer, which could enable the account with a more easily guessable password.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:25.833-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:57.214-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.279-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:57:22.153-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:38.639-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="samba version is less than 3.0.2-6.3E" negate="false" test_ref="oval:org.mitre.oval:tst:1613"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="smbd is listening on the network" negate="false" test_ref="oval:org.mitre.oval:tst:2558"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:826" version="4" class="vulnerability">
      <metadata>
        <title>RedHat Enterprise 3 Code Execution and DoS Vulnerabilities in PWLib</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>PWLib</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0097" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0097"/>
        <description>Multiple vulnerabilities in PWLib before 1.6.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Added a program_name element to rlt-217">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:26.501-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:57.025-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.033-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:59:24.680-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:38.346-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="pwlib version is less than 1.4.7-7.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1614"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="a program is listening on TCP or UDP port 1720" negate="false" test_ref="oval:org.mitre.oval:tst:2320"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:825" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Enterprise 3 Linux Kernel do_mremap Privilege Escalation Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>mremap</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0077" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0077"/>
        <description>The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:35.934-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:56.836-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criteria operator="OR" comment="Vulnerable Config">
          <criterion comment="kernel version is less than 2.4.21-9.0.1.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1617"/>
          <criterion comment="kernel-smp version is less than 2.4.21-9.0.1.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1616"/>
          <criterion comment="kernel-hugemem version is less than 2.4.21-9.0.1.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1615"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:823" version="2" class="vulnerability">
      <metadata>
        <title>Konqueror Cookie Access Restrictions Bypass Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>KDE</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0592" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0592"/>
        <description>Konqueror in KDE 3.1.3 and earlier (kdelibs) allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Konqueror to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:45.940-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:56.638-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="kdelibs version is less than 3.1-13" negate="false" test_ref="oval:org.mitre.oval:tst:1618"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/bin/konqueror is executable">
            <criterion comment="/usr/bin/konqueror is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2655"/>
            <criterion comment="/usr/bin/konqueror is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2654"/>
            <criterion comment="/usr/bin/konqueror is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2653"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:822" version="2" class="vulnerability">
      <metadata>
        <title>Midnight Commander vfs_s_resolve_symlink BO</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Midnight Commander</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1023" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1023"/>
        <description>Stack-based buffer overflow in vfs_s_resolve_symlink of vfs/direntry.c for Midnight Commander (mc) 4.6.0 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code during symlink conversion.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-21T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:43.070-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:56.376-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="mc version is less than 4.6.0-7.9" negate="false" test_ref="oval:org.mitre.oval:tst:1622"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/bin/mc is executable">
            <criterion comment="/usr/bin/mc is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1621"/>
            <criterion comment="/usr/bin/mc is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1620"/>
            <criterion comment="/usr/bin/mc is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1619"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:821" version="2" class="vulnerability">
      <metadata>
        <title>slocate Privilege Escalation Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>slocate</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0848" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0848"/>
        <description>Heap-based buffer overflow in main.c of slocate 2.6, and possibly other versions, may allow local users to gain privileges via a modified slocate database that causes a negative "pathlen" value to be used.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:39.635-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:56.173-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="slocate version is less than 2.7-2" negate="false" test_ref="oval:org.mitre.oval:tst:1625"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="/usr/bin/slocate is setgid">
            <criterion comment="/usr/bin/slocate is setgid" negate="false" test_ref="oval:org.mitre.oval:tst:1624"/>
            <criterion comment="/usr/bin/slocate is setgid" negate="false" test_ref="oval:org.mitre.oval:tst:1623"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:820" version="2" class="vulnerability">
      <metadata>
        <title>Gaim / Ultramagnetic directIM Packet Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Gaim</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0008" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0008"/>
        <description>Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:51.269-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:55.989-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="gaim version is less than 0.75-0.9.0" negate="false" test_ref="oval:org.mitre.oval:tst:1629"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/bin/gaim is executable">
            <criterion comment="/usr/bin/gaim is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1628"/>
            <criterion comment="/usr/bin/gaim is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1627"/>
            <criterion comment="/usr/bin/gaim is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1626"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:82" version="2" class="vulnerability">
      <metadata>
        <title>Microsoft RPC Denial of Service</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft SQL Server 2000</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0509" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0509"/>
        <description>Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT 4.0, and (4) Windows 2000 allow remote attackers to cause a denial of service via malformed inputs.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-27T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified date="2005-04-07T12:00:00.000-04:00" comment="modified wft-225 - correct literal component in file path. Added '\' to the start of the literal string.">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2005-04-11T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2005-04-12T12:00:00.000-04:00" comment="modified wft-89 - wft-89 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2005-04-27T12:07:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-27T01:26:00.000-04:00" comment="modified wft-89 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="SQL Server 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2977"/>
        <criterion comment="the version of ssmsrp70.dll is less than 2000.80.213.0" negate="false" test_ref="oval:org.mitre.oval:tst:2968"/>
        <criterion comment="the version of dbmsrpcn.dll is less than 2000.80.213.0" negate="false" test_ref="oval:org.mitre.oval:tst:2967"/>
        <criterion comment="File sqlservr.exe version3 greater than or equal to 2000.80.384.0" negate="true" test_ref="oval:org.mitre.oval:tst:2966"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:819" version="2" class="vulnerability">
      <metadata>
        <title>Gaim / Ultramagnetic Extract Info Field Function BO</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Gaim</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0007"/>
        <description>Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG protocol handlers in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:39.253-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:55.739-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="gaim version is less than 0.75-0.9.0" negate="false" test_ref="oval:org.mitre.oval:tst:1629"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/bin/gaim is executable">
            <criterion comment="/usr/bin/gaim is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1628"/>
            <criterion comment="/usr/bin/gaim is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1627"/>
            <criterion comment="/usr/bin/gaim is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1626"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:818" version="2" class="vulnerability">
      <metadata>
        <title>Gaim / Ultramagnetic BO Vulnerabilities</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Gaim</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0006" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0006"/>
        <description>Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) cookies in a Yahoo web connection, (2) a long name parameter in the Yahoo login web page, (3) a long value parameter in the Yahoo login page, (4) a YMSG packet, (5) the URL parser, and (6) HTTP proxy connect.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:36.164-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:55.558-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="gaim version is less than 0.75-0.9.0" negate="false" test_ref="oval:org.mitre.oval:tst:1629"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/bin/gaim is executable">
            <criterion comment="/usr/bin/gaim is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1628"/>
            <criterion comment="/usr/bin/gaim is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1627"/>
            <criterion comment="/usr/bin/gaim is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1626"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:817" version="1" class="vulnerability">
      <metadata>
        <title>RHE3 Firefox and Mozilla Shared Object Code Execution</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2270" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2270"/>
        <description>Firefox before 1.0.5 and Mozilla before 1.7.9 does not properly clone base objects, which allows remote attackers to execute arbitrary code by navigating the prototype chain to reach a privileged object.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-15T04:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-08-19T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2483"/>
          <criterion comment="mozilla RPM is earlier than 37:1.7.10-1.1.3.1" negate="false" test_ref="oval:org.mitre.oval:tst:2482"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/mozilla is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2650"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:816" version="6" class="vulnerability">
      <metadata>
        <title>COM+ Memory Structures Process Permits Remote Code Execution (Win2k,SP4)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1978" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1978"/>
        <description>COM+ in Microsoft Windows does not properly "create and use memory structures," which allows local users or remote attackers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-10-12T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-10-19T05:46:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-08-31T12:00:00.000-04:00" comment="removed an incorrect leading ^ from the value entity of ste:2402">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-08-31T00:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:54.237-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:816 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:39.310-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:32.111-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="Win2K/XP/2003 service pack 4 is installed" test_ref="oval:org.mitre.oval:tst:2569"/>
        <criteria operator="OR" comment="Either ole32.dll or rpcss.dll has a version less than 5.0.2195.7059">
          <criterion comment="the version of ole32.dll is less than 5.0.2195.7059" test_ref="oval:org.mitre.oval:tst:2568"/>
          <criterion comment="the version of rpcss.dll is less than 5.0.2195.7059" test_ref="oval:org.mitre.oval:tst:2567"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:815" version="4" class="vulnerability">
      <metadata>
        <title>Mailman Cross-site Scripting Vulnerability II</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Mailman</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0992" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0992"/>
        <description>Cross-site scripting (XSS) vulnerability in the create CGI script for Mailman before 2.1.3 allows remote attackers to steal cookies of other users.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:56.512-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:55.374-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.329-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:59:44.492-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:38.008-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="mailman version is less than 2.1.1-5" negate="false" test_ref="oval:org.mitre.oval:tst:1631"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="httpd is listening on the network" negate="false" test_ref="oval:org.mitre.oval:tst:1630"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:813" version="4" class="vulnerability">
      <metadata>
        <title>Mailman Cross-site Scripting Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Mailman</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0965" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0965"/>
        <description>Cross-site scripting (XSS) vulnerability in the admin CGI script for Mailman before 2.1.4 allows remote attackers to steal session cookies and conduct unauthorized activities.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:32.431-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:55.077-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.329-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:59:44.212-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:37.725-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="mailman version is less than 2.1.1-5" negate="false" test_ref="oval:org.mitre.oval:tst:1631"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="httpd is listening on the network" negate="false" test_ref="oval:org.mitre.oval:tst:1630"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8127" version="5" class="vulnerability">
      <metadata>
        <title>Address Bar Spoofing on Double Byte Character Set Systems Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0844" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0844"/>
        <description>Internet Explorer 6 on Double Byte Character Set (DBCS) systems allows remote attackers to alter displayed address bars and spoof web pages via a URL containing special characters, facilitating phishing attacks, aka the "Address Bar Spoofing on Double Byte Character Set Systems Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-25T05:13:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-27T01:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-17T10:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-27T10:50:00.000-04:00" comment="modified wft-564 - Changed test to match comment">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:45:59.342-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:41:00.949-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:40.633-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:27.966-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2800.1476" negate="false" test_ref="oval:org.mitre.oval:tst:856"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3534.2800" negate="true" test_ref="oval:org.mitre.oval:tst:519"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:811" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Mutt BO in Index Menu</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Mutt</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0078" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0078"/>
        <description>Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain mail messages.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:31.712-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:54.867-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="mutt version is less than 1.4.1-3.3" negate="false" test_ref="oval:org.mitre.oval:tst:1634"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/bin/mutt is executable">
            <criterion comment="/usr/bin/mutt is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2637"/>
            <criterion comment="/usr/bin/mutt is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2636"/>
            <criterion comment="/usr/bin/mutt is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2635"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:810" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Enterprise 3 netpbm File Overwrite Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>netpbm</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0924" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0924"/>
        <description>netpbm 9.25 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:26.732-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:49.762-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criteria operator="OR" comment="Vulnerable Config">
            <criterion comment="netpbm version is less than 9.24-11.30.1" negate="false" test_ref="oval:org.mitre.oval:tst:1637"/>
            <criterion comment="netpbm-devel version is less than 9.24-11.30.1" negate="false" test_ref="oval:org.mitre.oval:tst:1636"/>
            <criterion comment="netpbm-progs version is less than 9.24-11.30.1" negate="false" test_ref="oval:org.mitre.oval:tst:1635"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="Vulnerable configuration">
            <criteria operator="OR" comment="/usr/bin/411toppm is executable">
              <criterion comment="/usr/bin/411toppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2316"/>
              <criterion comment="/usr/bin/411toppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2315"/>
              <criterion comment="/usr/bin/411toppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2314"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/asciitopgm is executable">
              <criterion comment="/usr/bin/asciitopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2313"/>
              <criterion comment="/usr/bin/asciitopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2312"/>
              <criterion comment="/usr/bin/asciitopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2311"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/atktopbm is executable">
              <criterion comment="/usr/bin/atktopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2310"/>
              <criterion comment="/usr/bin/atktopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2309"/>
              <criterion comment="/usr/bin/atktopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2308"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/bioradtopgm is executable">
              <criterion comment="/usr/bin/bioradtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2307"/>
              <criterion comment="/usr/bin/bioradtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2306"/>
              <criterion comment="/usr/bin/bioradtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2305"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/bmptoppm is executable">
              <criterion comment="/usr/bin/bmptoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2304"/>
              <criterion comment="/usr/bin/bmptoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2303"/>
              <criterion comment="/usr/bin/bmptoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2302"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/brushtopbm is executable">
              <criterion comment="/usr/bin/brushtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2301"/>
              <criterion comment="/usr/bin/brushtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2300"/>
              <criterion comment="/usr/bin/brushtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2299"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/cmuwmtopbm is executable">
              <criterion comment="/usr/bin/cmuwmtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2298"/>
              <criterion comment="/usr/bin/cmuwmtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2297"/>
              <criterion comment="/usr/bin/cmuwmtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2296"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/eyuvtoppm is executable">
              <criterion comment="/usr/bin/eyuvtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2295"/>
              <criterion comment="/usr/bin/eyuvtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2294"/>
              <criterion comment="/usr/bin/eyuvtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2293"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/fiascotopnm is executable">
              <criterion comment="/usr/bin/fiascotopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2292"/>
              <criterion comment="/usr/bin/fiascotopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2291"/>
              <criterion comment="/usr/bin/fiascotopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2290"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/fitstopnm is executable">
              <criterion comment="/usr/bin/fitstopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2289"/>
              <criterion comment="/usr/bin/fitstopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2288"/>
              <criterion comment="/usr/bin/fitstopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2287"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/fstopgm is executable">
              <criterion comment="/usr/bin/fstopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2286"/>
              <criterion comment="/usr/bin/fstopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2285"/>
              <criterion comment="/usr/bin/fstopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2284"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/g3topbm is executable">
              <criterion comment="/usr/bin/g3topbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2283"/>
              <criterion comment="/usr/bin/g3topbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2282"/>
              <criterion comment="/usr/bin/g3topbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2281"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/gemtopbm is executable">
              <criterion comment="/usr/bin/gemtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2280"/>
              <criterion comment="/usr/bin/gemtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2279"/>
              <criterion comment="/usr/bin/gemtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2278"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/gemtopnm is executable">
              <criterion comment="/usr/bin/gemtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2277"/>
              <criterion comment="/usr/bin/gemtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2276"/>
              <criterion comment="/usr/bin/gemtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2275"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/giftopnm is executable">
              <criterion comment="/usr/bin/giftopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2274"/>
              <criterion comment="/usr/bin/giftopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2273"/>
              <criterion comment="/usr/bin/giftopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2272"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/gouldtoppm is executable">
              <criterion comment="/usr/bin/gouldtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2271"/>
              <criterion comment="/usr/bin/gouldtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2270"/>
              <criterion comment="/usr/bin/gouldtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2269"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/hipstopgm is executable">
              <criterion comment="/usr/bin/hipstopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2268"/>
              <criterion comment="/usr/bin/hipstopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2267"/>
              <criterion comment="/usr/bin/hipstopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2266"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/hpcdtoppm is executable">
              <criterion comment="/usr/bin/hpcdtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2265"/>
              <criterion comment="/usr/bin/hpcdtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2264"/>
              <criterion comment="/usr/bin/hpcdtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2263"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/icontopbm is executable">
              <criterion comment="/usr/bin/icontopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2262"/>
              <criterion comment="/usr/bin/icontopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2261"/>
              <criterion comment="/usr/bin/icontopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2260"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ilbmtoppm is executable">
              <criterion comment="/usr/bin/ilbmtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2259"/>
              <criterion comment="/usr/bin/ilbmtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2258"/>
              <criterion comment="/usr/bin/ilbmtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2257"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/imgtoppm is executable">
              <criterion comment="/usr/bin/imgtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2256"/>
              <criterion comment="/usr/bin/imgtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2255"/>
              <criterion comment="/usr/bin/imgtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2254"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/jpegtopnm is executable">
              <criterion comment="/usr/bin/jpegtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2253"/>
              <criterion comment="/usr/bin/jpegtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2252"/>
              <criterion comment="/usr/bin/jpegtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2251"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/leaftoppm is executable">
              <criterion comment="/usr/bin/leaftoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2250"/>
              <criterion comment="/usr/bin/leaftoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2249"/>
              <criterion comment="/usr/bin/leaftoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2248"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/lispmtopgm is executable">
              <criterion comment="/usr/bin/lispmtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2247"/>
              <criterion comment="/usr/bin/lispmtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2246"/>
              <criterion comment="/usr/bin/lispmtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2245"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/macptopbm is executable">
              <criterion comment="/usr/bin/macptopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2244"/>
              <criterion comment="/usr/bin/macptopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2243"/>
              <criterion comment="/usr/bin/macptopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2242"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/mdatopbm is executable">
              <criterion comment="/usr/bin/mdatopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2241"/>
              <criterion comment="/usr/bin/mdatopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2240"/>
              <criterion comment="/usr/bin/mdatopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2239"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/mgrtopbm is executable">
              <criterion comment="/usr/bin/mgrtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2238"/>
              <criterion comment="/usr/bin/mgrtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2237"/>
              <criterion comment="/usr/bin/mgrtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2236"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/mtvtoppm is executable">
              <criterion comment="/usr/bin/mtvtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2235"/>
              <criterion comment="/usr/bin/mtvtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2234"/>
              <criterion comment="/usr/bin/mtvtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2233"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/neotoppm is executable">
              <criterion comment="/usr/bin/neotoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2232"/>
              <criterion comment="/usr/bin/neotoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2231"/>
              <criterion comment="/usr/bin/neotoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2230"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/palmtopnm is executable">
              <criterion comment="/usr/bin/palmtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2229"/>
              <criterion comment="/usr/bin/palmtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2228"/>
              <criterion comment="/usr/bin/palmtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2227"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pamchannel is executable">
              <criterion comment="/usr/bin/pamchannel is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2226"/>
              <criterion comment="/usr/bin/pamchannel is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2225"/>
              <criterion comment="/usr/bin/pamchannel is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2224"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pamcut is executable">
              <criterion comment="/usr/bin/pamcut is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2223"/>
              <criterion comment="/usr/bin/pamcut is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2222"/>
              <criterion comment="/usr/bin/pamcut is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2221"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pamdeinterlace is executable">
              <criterion comment="/usr/bin/pamdeinterlace is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2220"/>
              <criterion comment="/usr/bin/pamdeinterlace is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2219"/>
              <criterion comment="/usr/bin/pamdeinterlace is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2218"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pamfile is executable">
              <criterion comment="/usr/bin/pamfile is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2217"/>
              <criterion comment="/usr/bin/pamfile is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2216"/>
              <criterion comment="/usr/bin/pamfile is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2215"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pamoil is executable">
              <criterion comment="/usr/bin/pamoil is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2214"/>
              <criterion comment="/usr/bin/pamoil is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2213"/>
              <criterion comment="/usr/bin/pamoil is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2212"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pamstretch is executable">
              <criterion comment="/usr/bin/pamstretch is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2211"/>
              <criterion comment="/usr/bin/pamstretch is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2210"/>
              <criterion comment="/usr/bin/pamstretch is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2209"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pamtopnm is executable">
              <criterion comment="/usr/bin/pamtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2208"/>
              <criterion comment="/usr/bin/pamtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2207"/>
              <criterion comment="/usr/bin/pamtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2206"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmclean is executable">
              <criterion comment="/usr/bin/pbmclean is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2205"/>
              <criterion comment="/usr/bin/pbmclean is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2204"/>
              <criterion comment="/usr/bin/pbmclean is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2203"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmlife is executable">
              <criterion comment="/usr/bin/pbmlife is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2202"/>
              <criterion comment="/usr/bin/pbmlife is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2201"/>
              <criterion comment="/usr/bin/pbmlife is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2200"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmmake is executable">
              <criterion comment="/usr/bin/pbmmake is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2199"/>
              <criterion comment="/usr/bin/pbmmake is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2198"/>
              <criterion comment="/usr/bin/pbmmake is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2197"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmmask is executable">
              <criterion comment="/usr/bin/pbmmask is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2196"/>
              <criterion comment="/usr/bin/pbmmask is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2195"/>
              <criterion comment="/usr/bin/pbmmask is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2194"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmpage is executable">
              <criterion comment="/usr/bin/pbmpage is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2193"/>
              <criterion comment="/usr/bin/pbmpage is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2192"/>
              <criterion comment="/usr/bin/pbmpage is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2191"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmpscale is executable">
              <criterion comment="/usr/bin/pbmpscale is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2190"/>
              <criterion comment="/usr/bin/pbmpscale is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2189"/>
              <criterion comment="/usr/bin/pbmpscale is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2188"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmreduce is executable">
              <criterion comment="/usr/bin/pbmreduce is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2187"/>
              <criterion comment="/usr/bin/pbmreduce is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2186"/>
              <criterion comment="/usr/bin/pbmreduce is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2185"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtext is executable">
              <criterion comment="/usr/bin/pbmtext is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2184"/>
              <criterion comment="/usr/bin/pbmtext is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2183"/>
              <criterion comment="/usr/bin/pbmtext is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2182"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmto10x is executable">
              <criterion comment="/usr/bin/pbmto10x is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2181"/>
              <criterion comment="/usr/bin/pbmto10x is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2180"/>
              <criterion comment="/usr/bin/pbmto10x is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2179"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmto4425 is executable">
              <criterion comment="/usr/bin/pbmto4425 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2178"/>
              <criterion comment="/usr/bin/pbmto4425 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2177"/>
              <criterion comment="/usr/bin/pbmto4425 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2176"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtoascii is executable">
              <criterion comment="/usr/bin/pbmtoascii is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2175"/>
              <criterion comment="/usr/bin/pbmtoascii is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2174"/>
              <criterion comment="/usr/bin/pbmtoascii is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2173"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtoatk is executable">
              <criterion comment="/usr/bin/pbmtoatk is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2172"/>
              <criterion comment="/usr/bin/pbmtoatk is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2171"/>
              <criterion comment="/usr/bin/pbmtoatk is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2170"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtobbnbg is executable">
              <criterion comment="/usr/bin/pbmtobbnbg is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2169"/>
              <criterion comment="/usr/bin/pbmtobbnbg is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2168"/>
              <criterion comment="/usr/bin/pbmtobbnbg is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2167"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtocmuwm is executable">
              <criterion comment="/usr/bin/pbmtocmuwm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2166"/>
              <criterion comment="/usr/bin/pbmtocmuwm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2165"/>
              <criterion comment="/usr/bin/pbmtocmuwm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2164"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtoepsi is executable">
              <criterion comment="/usr/bin/pbmtoepsi is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2163"/>
              <criterion comment="/usr/bin/pbmtoepsi is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2162"/>
              <criterion comment="/usr/bin/pbmtoepsi is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2161"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtoepson is executable">
              <criterion comment="/usr/bin/pbmtoepson is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2160"/>
              <criterion comment="/usr/bin/pbmtoepson is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2159"/>
              <criterion comment="/usr/bin/pbmtoepson is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2158"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtog3 is executable">
              <criterion comment="/usr/bin/pbmtog3 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2157"/>
              <criterion comment="/usr/bin/pbmtog3 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2156"/>
              <criterion comment="/usr/bin/pbmtog3 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2155"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtogem is executable">
              <criterion comment="/usr/bin/pbmtogem is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2154"/>
              <criterion comment="/usr/bin/pbmtogem is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2153"/>
              <criterion comment="/usr/bin/pbmtogem is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2152"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtogo is executable">
              <criterion comment="/usr/bin/pbmtogo is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2151"/>
              <criterion comment="/usr/bin/pbmtogo is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2150"/>
              <criterion comment="/usr/bin/pbmtogo is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2149"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtoicon is executable">
              <criterion comment="/usr/bin/pbmtoicon is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2148"/>
              <criterion comment="/usr/bin/pbmtoicon is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2147"/>
              <criterion comment="/usr/bin/pbmtoicon is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2146"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtolj is executable">
              <criterion comment="/usr/bin/pbmtolj is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2145"/>
              <criterion comment="/usr/bin/pbmtolj is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2144"/>
              <criterion comment="/usr/bin/pbmtolj is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2143"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtoln03 is executable">
              <criterion comment="/usr/bin/pbmtoln03 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2142"/>
              <criterion comment="/usr/bin/pbmtoln03 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2141"/>
              <criterion comment="/usr/bin/pbmtoln03 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2140"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtolps is executable">
              <criterion comment="/usr/bin/pbmtolps is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2139"/>
              <criterion comment="/usr/bin/pbmtolps is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2138"/>
              <criterion comment="/usr/bin/pbmtolps is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2137"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtomacp is executable">
              <criterion comment="/usr/bin/pbmtomacp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2136"/>
              <criterion comment="/usr/bin/pbmtomacp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2135"/>
              <criterion comment="/usr/bin/pbmtomacp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2134"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtomda is executable">
              <criterion comment="/usr/bin/pbmtomda is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2133"/>
              <criterion comment="/usr/bin/pbmtomda is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2132"/>
              <criterion comment="/usr/bin/pbmtomda is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2131"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtomgr is executable">
              <criterion comment="/usr/bin/pbmtomgr is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2130"/>
              <criterion comment="/usr/bin/pbmtomgr is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2129"/>
              <criterion comment="/usr/bin/pbmtomgr is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2128"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtonokia is executable">
              <criterion comment="/usr/bin/pbmtonokia is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2127"/>
              <criterion comment="/usr/bin/pbmtonokia is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2126"/>
              <criterion comment="/usr/bin/pbmtonokia is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2125"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtopgm is executable">
              <criterion comment="/usr/bin/pbmtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2124"/>
              <criterion comment="/usr/bin/pbmtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2123"/>
              <criterion comment="/usr/bin/pbmtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2122"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtopi3 is executable">
              <criterion comment="/usr/bin/pbmtopi3 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2121"/>
              <criterion comment="/usr/bin/pbmtopi3 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2120"/>
              <criterion comment="/usr/bin/pbmtopi3 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2119"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtopk is executable">
              <criterion comment="/usr/bin/pbmtopk is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2118"/>
              <criterion comment="/usr/bin/pbmtopk is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2117"/>
              <criterion comment="/usr/bin/pbmtopk is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2116"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtoplot is executable">
              <criterion comment="/usr/bin/pbmtoplot is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2115"/>
              <criterion comment="/usr/bin/pbmtoplot is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2114"/>
              <criterion comment="/usr/bin/pbmtoplot is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2113"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtoppa is executable">
              <criterion comment="/usr/bin/pbmtoppa is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2112"/>
              <criterion comment="/usr/bin/pbmtoppa is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2111"/>
              <criterion comment="/usr/bin/pbmtoppa is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2110"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtopsg3 is executable">
              <criterion comment="/usr/bin/pbmtopsg3 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2109"/>
              <criterion comment="/usr/bin/pbmtopsg3 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2108"/>
              <criterion comment="/usr/bin/pbmtopsg3 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2107"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtoptx is executable">
              <criterion comment="/usr/bin/pbmtoptx is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2106"/>
              <criterion comment="/usr/bin/pbmtoptx is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2105"/>
              <criterion comment="/usr/bin/pbmtoptx is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2104"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtowbmp is executable">
              <criterion comment="/usr/bin/pbmtowbmp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2103"/>
              <criterion comment="/usr/bin/pbmtowbmp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2102"/>
              <criterion comment="/usr/bin/pbmtowbmp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2101"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtox10bm is executable">
              <criterion comment="/usr/bin/pbmtox10bm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2100"/>
              <criterion comment="/usr/bin/pbmtox10bm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2099"/>
              <criterion comment="/usr/bin/pbmtox10bm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2098"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtoxbm is executable">
              <criterion comment="/usr/bin/pbmtoxbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2097"/>
              <criterion comment="/usr/bin/pbmtoxbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2096"/>
              <criterion comment="/usr/bin/pbmtoxbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2095"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtoybm is executable">
              <criterion comment="/usr/bin/pbmtoybm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2094"/>
              <criterion comment="/usr/bin/pbmtoybm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2093"/>
              <criterion comment="/usr/bin/pbmtoybm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2092"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtozinc is executable">
              <criterion comment="/usr/bin/pbmtozinc is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2091"/>
              <criterion comment="/usr/bin/pbmtozinc is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2090"/>
              <criterion comment="/usr/bin/pbmtozinc is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2089"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmupc is executable">
              <criterion comment="/usr/bin/pbmupc is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2088"/>
              <criterion comment="/usr/bin/pbmupc is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2087"/>
              <criterion comment="/usr/bin/pbmupc is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2086"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pcxtoppm is executable">
              <criterion comment="/usr/bin/pcxtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2085"/>
              <criterion comment="/usr/bin/pcxtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2084"/>
              <criterion comment="/usr/bin/pcxtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2083"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmbentley is executable">
              <criterion comment="/usr/bin/pgmbentley is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2082"/>
              <criterion comment="/usr/bin/pgmbentley is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2081"/>
              <criterion comment="/usr/bin/pgmbentley is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2080"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmcrater is executable">
              <criterion comment="/usr/bin/pgmcrater is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2079"/>
              <criterion comment="/usr/bin/pgmcrater is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2078"/>
              <criterion comment="/usr/bin/pgmcrater is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2077"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmedge is executable">
              <criterion comment="/usr/bin/pgmedge is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2076"/>
              <criterion comment="/usr/bin/pgmedge is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2075"/>
              <criterion comment="/usr/bin/pgmedge is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2074"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmenhance is executable">
              <criterion comment="/usr/bin/pgmenhance is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2073"/>
              <criterion comment="/usr/bin/pgmenhance is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2072"/>
              <criterion comment="/usr/bin/pgmenhance is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2071"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmhist is executable">
              <criterion comment="/usr/bin/pgmhist is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2070"/>
              <criterion comment="/usr/bin/pgmhist is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2069"/>
              <criterion comment="/usr/bin/pgmhist is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2068"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmkernel is executable">
              <criterion comment="/usr/bin/pgmkernel is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2067"/>
              <criterion comment="/usr/bin/pgmkernel is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2066"/>
              <criterion comment="/usr/bin/pgmkernel is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2065"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmnoise is executable">
              <criterion comment="/usr/bin/pgmnoise is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2064"/>
              <criterion comment="/usr/bin/pgmnoise is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2063"/>
              <criterion comment="/usr/bin/pgmnoise is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2062"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmnorm is executable">
              <criterion comment="/usr/bin/pgmnorm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2061"/>
              <criterion comment="/usr/bin/pgmnorm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2060"/>
              <criterion comment="/usr/bin/pgmnorm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2059"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmoil is executable">
              <criterion comment="/usr/bin/pgmoil is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2058"/>
              <criterion comment="/usr/bin/pgmoil is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2057"/>
              <criterion comment="/usr/bin/pgmoil is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2056"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmramp is executable">
              <criterion comment="/usr/bin/pgmramp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2055"/>
              <criterion comment="/usr/bin/pgmramp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2054"/>
              <criterion comment="/usr/bin/pgmramp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2053"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmslice is executable">
              <criterion comment="/usr/bin/pgmslice is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2052"/>
              <criterion comment="/usr/bin/pgmslice is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2051"/>
              <criterion comment="/usr/bin/pgmslice is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2050"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmtexture is executable">
              <criterion comment="/usr/bin/pgmtexture is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2049"/>
              <criterion comment="/usr/bin/pgmtexture is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2048"/>
              <criterion comment="/usr/bin/pgmtexture is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2047"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmtofs is executable">
              <criterion comment="/usr/bin/pgmtofs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2046"/>
              <criterion comment="/usr/bin/pgmtofs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2045"/>
              <criterion comment="/usr/bin/pgmtofs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2044"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmtolispm is executable">
              <criterion comment="/usr/bin/pgmtolispm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2043"/>
              <criterion comment="/usr/bin/pgmtolispm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2042"/>
              <criterion comment="/usr/bin/pgmtolispm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2041"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmtopbm is executable">
              <criterion comment="/usr/bin/pgmtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2040"/>
              <criterion comment="/usr/bin/pgmtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2039"/>
              <criterion comment="/usr/bin/pgmtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2038"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmtoppm is executable">
              <criterion comment="/usr/bin/pgmtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2037"/>
              <criterion comment="/usr/bin/pgmtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2036"/>
              <criterion comment="/usr/bin/pgmtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2035"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pi1toppm is executable">
              <criterion comment="/usr/bin/pi1toppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2034"/>
              <criterion comment="/usr/bin/pi1toppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2033"/>
              <criterion comment="/usr/bin/pi1toppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2032"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pi3topbm is executable">
              <criterion comment="/usr/bin/pi3topbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2031"/>
              <criterion comment="/usr/bin/pi3topbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2030"/>
              <criterion comment="/usr/bin/pi3topbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2029"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pjtoppm is executable">
              <criterion comment="/usr/bin/pjtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2028"/>
              <criterion comment="/usr/bin/pjtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2027"/>
              <criterion comment="/usr/bin/pjtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2026"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pktopbm is executable">
              <criterion comment="/usr/bin/pktopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2025"/>
              <criterion comment="/usr/bin/pktopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2024"/>
              <criterion comment="/usr/bin/pktopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2023"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pngtopnm is executable">
              <criterion comment="/usr/bin/pngtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2022"/>
              <criterion comment="/usr/bin/pngtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2021"/>
              <criterion comment="/usr/bin/pngtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2020"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmalias is executable">
              <criterion comment="/usr/bin/pnmalias is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2019"/>
              <criterion comment="/usr/bin/pnmalias is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2018"/>
              <criterion comment="/usr/bin/pnmalias is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2017"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmarith is executable">
              <criterion comment="/usr/bin/pnmarith is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2016"/>
              <criterion comment="/usr/bin/pnmarith is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2015"/>
              <criterion comment="/usr/bin/pnmarith is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2014"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmcat is executable">
              <criterion comment="/usr/bin/pnmcat is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2013"/>
              <criterion comment="/usr/bin/pnmcat is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2012"/>
              <criterion comment="/usr/bin/pnmcat is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2011"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmcolormap is executable">
              <criterion comment="/usr/bin/pnmcolormap is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2010"/>
              <criterion comment="/usr/bin/pnmcolormap is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2009"/>
              <criterion comment="/usr/bin/pnmcolormap is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2008"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmcomp is executable">
              <criterion comment="/usr/bin/pnmcomp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2007"/>
              <criterion comment="/usr/bin/pnmcomp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2006"/>
              <criterion comment="/usr/bin/pnmcomp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2005"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmconvol is executable">
              <criterion comment="/usr/bin/pnmconvol is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2004"/>
              <criterion comment="/usr/bin/pnmconvol is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2003"/>
              <criterion comment="/usr/bin/pnmconvol is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2002"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmcrop is executable">
              <criterion comment="/usr/bin/pnmcrop is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2001"/>
              <criterion comment="/usr/bin/pnmcrop is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2000"/>
              <criterion comment="/usr/bin/pnmcrop is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1999"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmcut is executable">
              <criterion comment="/usr/bin/pnmcut is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1998"/>
              <criterion comment="/usr/bin/pnmcut is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1997"/>
              <criterion comment="/usr/bin/pnmcut is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1996"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmdepth is executable">
              <criterion comment="/usr/bin/pnmdepth is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1995"/>
              <criterion comment="/usr/bin/pnmdepth is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1994"/>
              <criterion comment="/usr/bin/pnmdepth is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1993"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmenlarge is executable">
              <criterion comment="/usr/bin/pnmenlarge is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1992"/>
              <criterion comment="/usr/bin/pnmenlarge is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1991"/>
              <criterion comment="/usr/bin/pnmenlarge is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1990"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmfile is executable">
              <criterion comment="/usr/bin/pnmfile is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1989"/>
              <criterion comment="/usr/bin/pnmfile is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1988"/>
              <criterion comment="/usr/bin/pnmfile is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1987"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmflip is executable">
              <criterion comment="/usr/bin/pnmflip is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1986"/>
              <criterion comment="/usr/bin/pnmflip is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1985"/>
              <criterion comment="/usr/bin/pnmflip is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1984"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmgamma is executable">
              <criterion comment="/usr/bin/pnmgamma is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1983"/>
              <criterion comment="/usr/bin/pnmgamma is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1982"/>
              <criterion comment="/usr/bin/pnmgamma is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1981"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmhisteq is executable">
              <criterion comment="/usr/bin/pnmhisteq is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1980"/>
              <criterion comment="/usr/bin/pnmhisteq is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1979"/>
              <criterion comment="/usr/bin/pnmhisteq is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1978"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmhistmap is executable">
              <criterion comment="/usr/bin/pnmhistmap is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1977"/>
              <criterion comment="/usr/bin/pnmhistmap is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1976"/>
              <criterion comment="/usr/bin/pnmhistmap is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1975"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnminterp is executable">
              <criterion comment="/usr/bin/pnminterp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1974"/>
              <criterion comment="/usr/bin/pnminterp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1973"/>
              <criterion comment="/usr/bin/pnminterp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1972"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnminvert is executable">
              <criterion comment="/usr/bin/pnminvert is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1971"/>
              <criterion comment="/usr/bin/pnminvert is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1970"/>
              <criterion comment="/usr/bin/pnminvert is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1969"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmmontage is executable">
              <criterion comment="/usr/bin/pnmmontage is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1968"/>
              <criterion comment="/usr/bin/pnmmontage is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1967"/>
              <criterion comment="/usr/bin/pnmmontage is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1966"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmnlfilt is executable">
              <criterion comment="/usr/bin/pnmnlfilt is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1965"/>
              <criterion comment="/usr/bin/pnmnlfilt is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1964"/>
              <criterion comment="/usr/bin/pnmnlfilt is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1963"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmnoraw is executable">
              <criterion comment="/usr/bin/pnmnoraw is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1962"/>
              <criterion comment="/usr/bin/pnmnoraw is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1961"/>
              <criterion comment="/usr/bin/pnmnoraw is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1960"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmpad is executable">
              <criterion comment="/usr/bin/pnmpad is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1959"/>
              <criterion comment="/usr/bin/pnmpad is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1958"/>
              <criterion comment="/usr/bin/pnmpad is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1957"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmpaste is executable">
              <criterion comment="/usr/bin/pnmpaste is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1956"/>
              <criterion comment="/usr/bin/pnmpaste is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1955"/>
              <criterion comment="/usr/bin/pnmpaste is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1954"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmpsnr is executable">
              <criterion comment="/usr/bin/pnmpsnr is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1953"/>
              <criterion comment="/usr/bin/pnmpsnr is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1952"/>
              <criterion comment="/usr/bin/pnmpsnr is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1951"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmremap is executable">
              <criterion comment="/usr/bin/pnmremap is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1950"/>
              <criterion comment="/usr/bin/pnmremap is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1949"/>
              <criterion comment="/usr/bin/pnmremap is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1948"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmrotate is executable">
              <criterion comment="/usr/bin/pnmrotate is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1947"/>
              <criterion comment="/usr/bin/pnmrotate is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1946"/>
              <criterion comment="/usr/bin/pnmrotate is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1945"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmscale is executable">
              <criterion comment="/usr/bin/pnmscale is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1944"/>
              <criterion comment="/usr/bin/pnmscale is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1943"/>
              <criterion comment="/usr/bin/pnmscale is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1942"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtopict is executable">
              <criterion comment="/usr/bin/ppmtopict is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1941"/>
              <criterion comment="/usr/bin/ppmtopict is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1940"/>
              <criterion comment="/usr/bin/ppmtopict is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1939"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtopj is executable">
              <criterion comment="/usr/bin/ppmtopj is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1938"/>
              <criterion comment="/usr/bin/ppmtopj is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1937"/>
              <criterion comment="/usr/bin/ppmtopj is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1936"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtopjxl is executable">
              <criterion comment="/usr/bin/ppmtopjxl is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1935"/>
              <criterion comment="/usr/bin/ppmtopjxl is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1934"/>
              <criterion comment="/usr/bin/ppmtopjxl is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1933"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtopuzz is executable">
              <criterion comment="/usr/bin/ppmtopuzz is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1932"/>
              <criterion comment="/usr/bin/ppmtopuzz is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1931"/>
              <criterion comment="/usr/bin/ppmtopuzz is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1930"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtorgb3 is executable">
              <criterion comment="/usr/bin/ppmtorgb3 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1929"/>
              <criterion comment="/usr/bin/ppmtorgb3 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1928"/>
              <criterion comment="/usr/bin/ppmtorgb3 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1927"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtosixel is executable">
              <criterion comment="/usr/bin/ppmtosixel is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1926"/>
              <criterion comment="/usr/bin/ppmtosixel is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1925"/>
              <criterion comment="/usr/bin/ppmtosixel is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1924"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtotga is executable">
              <criterion comment="/usr/bin/ppmtotga is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1923"/>
              <criterion comment="/usr/bin/ppmtotga is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1922"/>
              <criterion comment="/usr/bin/ppmtotga is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1921"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtouil is executable">
              <criterion comment="/usr/bin/ppmtouil is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1920"/>
              <criterion comment="/usr/bin/ppmtouil is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1919"/>
              <criterion comment="/usr/bin/ppmtouil is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1918"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtowinicon is executable">
              <criterion comment="/usr/bin/ppmtowinicon is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1917"/>
              <criterion comment="/usr/bin/ppmtowinicon is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1916"/>
              <criterion comment="/usr/bin/ppmtowinicon is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1915"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtoxpm is executable">
              <criterion comment="/usr/bin/ppmtoxpm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1914"/>
              <criterion comment="/usr/bin/ppmtoxpm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1913"/>
              <criterion comment="/usr/bin/ppmtoxpm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1912"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtoyuv is executable">
              <criterion comment="/usr/bin/ppmtoyuv is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1911"/>
              <criterion comment="/usr/bin/ppmtoyuv is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1910"/>
              <criterion comment="/usr/bin/ppmtoyuv is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1909"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtoyuvsplit is executable">
              <criterion comment="/usr/bin/ppmtoyuvsplit is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1908"/>
              <criterion comment="/usr/bin/ppmtoyuvsplit is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1907"/>
              <criterion comment="/usr/bin/ppmtoyuvsplit is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1906"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtv is executable">
              <criterion comment="/usr/bin/ppmtv is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1905"/>
              <criterion comment="/usr/bin/ppmtv is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1904"/>
              <criterion comment="/usr/bin/ppmtv is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1903"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/psidtopgm is executable">
              <criterion comment="/usr/bin/psidtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1902"/>
              <criterion comment="/usr/bin/psidtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1901"/>
              <criterion comment="/usr/bin/psidtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1900"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pstopnm is executable">
              <criterion comment="/usr/bin/pstopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1899"/>
              <criterion comment="/usr/bin/pstopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1898"/>
              <criterion comment="/usr/bin/pstopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1897"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/qrttoppm is executable">
              <criterion comment="/usr/bin/qrttoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1896"/>
              <criterion comment="/usr/bin/qrttoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1895"/>
              <criterion comment="/usr/bin/qrttoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1894"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/rasttopnm is executable">
              <criterion comment="/usr/bin/rasttopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1893"/>
              <criterion comment="/usr/bin/rasttopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1892"/>
              <criterion comment="/usr/bin/rasttopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1891"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/rawtopgm is executable">
              <criterion comment="/usr/bin/rawtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1890"/>
              <criterion comment="/usr/bin/rawtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1889"/>
              <criterion comment="/usr/bin/rawtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1888"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/rawtoppm is executable">
              <criterion comment="/usr/bin/rawtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1887"/>
              <criterion comment="/usr/bin/rawtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1886"/>
              <criterion comment="/usr/bin/rawtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1885"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/rgb3toppm is executable">
              <criterion comment="/usr/bin/rgb3toppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1884"/>
              <criterion comment="/usr/bin/rgb3toppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1883"/>
              <criterion comment="/usr/bin/rgb3toppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1882"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/rletopnm is executable">
              <criterion comment="/usr/bin/rletopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1881"/>
              <criterion comment="/usr/bin/rletopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1880"/>
              <criterion comment="/usr/bin/rletopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1879"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/sbigtopgm is executable">
              <criterion comment="/usr/bin/sbigtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1878"/>
              <criterion comment="/usr/bin/sbigtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1877"/>
              <criterion comment="/usr/bin/sbigtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1876"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/sgitopnm is executable">
              <criterion comment="/usr/bin/sgitopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1875"/>
              <criterion comment="/usr/bin/sgitopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1874"/>
              <criterion comment="/usr/bin/sgitopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1873"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/sirtopnm is executable">
              <criterion comment="/usr/bin/sirtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1872"/>
              <criterion comment="/usr/bin/sirtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1871"/>
              <criterion comment="/usr/bin/sirtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1870"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/sldtoppm is executable">
              <criterion comment="/usr/bin/sldtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1869"/>
              <criterion comment="/usr/bin/sldtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1868"/>
              <criterion comment="/usr/bin/sldtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1867"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/spctoppm is executable">
              <criterion comment="/usr/bin/spctoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1866"/>
              <criterion comment="/usr/bin/spctoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1865"/>
              <criterion comment="/usr/bin/spctoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1864"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/spottopgm is executable">
              <criterion comment="/usr/bin/spottopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1863"/>
              <criterion comment="/usr/bin/spottopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1862"/>
              <criterion comment="/usr/bin/spottopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1861"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/sputoppm is executable">
              <criterion comment="/usr/bin/sputoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1860"/>
              <criterion comment="/usr/bin/sputoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1859"/>
              <criterion comment="/usr/bin/sputoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1858"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/tgatoppm is executable">
              <criterion comment="/usr/bin/tgatoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1857"/>
              <criterion comment="/usr/bin/tgatoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1856"/>
              <criterion comment="/usr/bin/tgatoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1855"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/thinkjettopbm is executable">
              <criterion comment="/usr/bin/thinkjettopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1854"/>
              <criterion comment="/usr/bin/thinkjettopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1853"/>
              <criterion comment="/usr/bin/thinkjettopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1852"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/tifftopnm is executable">
              <criterion comment="/usr/bin/tifftopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1851"/>
              <criterion comment="/usr/bin/tifftopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1850"/>
              <criterion comment="/usr/bin/tifftopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1849"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/wbmptopbm is executable">
              <criterion comment="/usr/bin/wbmptopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1848"/>
              <criterion comment="/usr/bin/wbmptopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1847"/>
              <criterion comment="/usr/bin/wbmptopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1846"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/winicontoppm is executable">
              <criterion comment="/usr/bin/winicontoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1845"/>
              <criterion comment="/usr/bin/winicontoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1844"/>
              <criterion comment="/usr/bin/winicontoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1843"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/xbmtopbm is executable">
              <criterion comment="/usr/bin/xbmtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1842"/>
              <criterion comment="/usr/bin/xbmtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1841"/>
              <criterion comment="/usr/bin/xbmtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1840"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ximtoppm is executable">
              <criterion comment="/usr/bin/ximtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1839"/>
              <criterion comment="/usr/bin/ximtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1838"/>
              <criterion comment="/usr/bin/ximtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1837"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/xpmtoppm is executable">
              <criterion comment="/usr/bin/xpmtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1836"/>
              <criterion comment="/usr/bin/xpmtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1835"/>
              <criterion comment="/usr/bin/xpmtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1834"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/xvminitoppm is executable">
              <criterion comment="/usr/bin/xvminitoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1833"/>
              <criterion comment="/usr/bin/xvminitoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1832"/>
              <criterion comment="/usr/bin/xvminitoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1831"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/xwdtopnm is executable">
              <criterion comment="/usr/bin/xwdtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1830"/>
              <criterion comment="/usr/bin/xwdtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1829"/>
              <criterion comment="/usr/bin/xwdtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1828"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ybmtopbm is executable">
              <criterion comment="/usr/bin/ybmtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1827"/>
              <criterion comment="/usr/bin/ybmtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1826"/>
              <criterion comment="/usr/bin/ybmtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1825"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/yuvsplittoppm is executable">
              <criterion comment="/usr/bin/yuvsplittoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1824"/>
              <criterion comment="/usr/bin/yuvsplittoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1823"/>
              <criterion comment="/usr/bin/yuvsplittoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1822"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/yuvtoppm is executable">
              <criterion comment="/usr/bin/yuvtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1821"/>
              <criterion comment="/usr/bin/yuvtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1820"/>
              <criterion comment="/usr/bin/yuvtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1819"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/zeisstopnm is executable">
              <criterion comment="/usr/bin/zeisstopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1818"/>
              <criterion comment="/usr/bin/zeisstopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1817"/>
              <criterion comment="/usr/bin/zeisstopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1816"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmscalefixed is executable">
              <criterion comment="/usr/bin/pnmscalefixed is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1815"/>
              <criterion comment="/usr/bin/pnmscalefixed is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1814"/>
              <criterion comment="/usr/bin/pnmscalefixed is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1813"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmshear is executable">
              <criterion comment="/usr/bin/pnmshear is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1812"/>
              <criterion comment="/usr/bin/pnmshear is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1811"/>
              <criterion comment="/usr/bin/pnmshear is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1810"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmsmooth is executable">
              <criterion comment="/usr/bin/pnmsmooth is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1809"/>
              <criterion comment="/usr/bin/pnmsmooth is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1808"/>
              <criterion comment="/usr/bin/pnmsmooth is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1807"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmsplit is executable">
              <criterion comment="/usr/bin/pnmsplit is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1806"/>
              <criterion comment="/usr/bin/pnmsplit is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1805"/>
              <criterion comment="/usr/bin/pnmsplit is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1804"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtile is executable">
              <criterion comment="/usr/bin/pnmtile is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1803"/>
              <criterion comment="/usr/bin/pnmtile is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1802"/>
              <criterion comment="/usr/bin/pnmtile is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1801"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtoddif is executable">
              <criterion comment="/usr/bin/pnmtoddif is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1800"/>
              <criterion comment="/usr/bin/pnmtoddif is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1799"/>
              <criterion comment="/usr/bin/pnmtoddif is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1798"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtofiasco is executable">
              <criterion comment="/usr/bin/pnmtofiasco is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1797"/>
              <criterion comment="/usr/bin/pnmtofiasco is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1796"/>
              <criterion comment="/usr/bin/pnmtofiasco is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1795"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtofits is executable">
              <criterion comment="/usr/bin/pnmtofits is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1794"/>
              <criterion comment="/usr/bin/pnmtofits is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1793"/>
              <criterion comment="/usr/bin/pnmtofits is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1792"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtojpeg is executable">
              <criterion comment="/usr/bin/pnmtojpeg is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1791"/>
              <criterion comment="/usr/bin/pnmtojpeg is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1790"/>
              <criterion comment="/usr/bin/pnmtojpeg is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1789"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtopalm is executable">
              <criterion comment="/usr/bin/pnmtopalm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1788"/>
              <criterion comment="/usr/bin/pnmtopalm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1787"/>
              <criterion comment="/usr/bin/pnmtopalm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1786"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtoplainpnm is executable">
              <criterion comment="/usr/bin/pnmtoplainpnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1785"/>
              <criterion comment="/usr/bin/pnmtoplainpnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1784"/>
              <criterion comment="/usr/bin/pnmtoplainpnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1783"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtopng is executable">
              <criterion comment="/usr/bin/pnmtopng is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1782"/>
              <criterion comment="/usr/bin/pnmtopng is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1781"/>
              <criterion comment="/usr/bin/pnmtopng is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1780"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtops is executable">
              <criterion comment="/usr/bin/pnmtops is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1779"/>
              <criterion comment="/usr/bin/pnmtops is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1778"/>
              <criterion comment="/usr/bin/pnmtops is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1777"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtorast is executable">
              <criterion comment="/usr/bin/pnmtorast is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1776"/>
              <criterion comment="/usr/bin/pnmtorast is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1775"/>
              <criterion comment="/usr/bin/pnmtorast is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1774"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtorle is executable">
              <criterion comment="/usr/bin/pnmtorle is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1773"/>
              <criterion comment="/usr/bin/pnmtorle is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1772"/>
              <criterion comment="/usr/bin/pnmtorle is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1771"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtosgi is executable">
              <criterion comment="/usr/bin/pnmtosgi is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1770"/>
              <criterion comment="/usr/bin/pnmtosgi is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1769"/>
              <criterion comment="/usr/bin/pnmtosgi is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1768"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtosir is executable">
              <criterion comment="/usr/bin/pnmtosir is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1767"/>
              <criterion comment="/usr/bin/pnmtosir is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1766"/>
              <criterion comment="/usr/bin/pnmtosir is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1765"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtotiff is executable">
              <criterion comment="/usr/bin/pnmtotiff is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1764"/>
              <criterion comment="/usr/bin/pnmtotiff is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1763"/>
              <criterion comment="/usr/bin/pnmtotiff is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1762"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtotiffcmyk is executable">
              <criterion comment="/usr/bin/pnmtotiffcmyk is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1761"/>
              <criterion comment="/usr/bin/pnmtotiffcmyk is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1760"/>
              <criterion comment="/usr/bin/pnmtotiffcmyk is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1759"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtoxwd is executable">
              <criterion comment="/usr/bin/pnmtoxwd is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1758"/>
              <criterion comment="/usr/bin/pnmtoxwd is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1757"/>
              <criterion comment="/usr/bin/pnmtoxwd is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1756"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppm3d is executable">
              <criterion comment="/usr/bin/ppm3d is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1755"/>
              <criterion comment="/usr/bin/ppm3d is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1754"/>
              <criterion comment="/usr/bin/ppm3d is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1753"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmbrighten is executable">
              <criterion comment="/usr/bin/ppmbrighten is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1752"/>
              <criterion comment="/usr/bin/ppmbrighten is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1751"/>
              <criterion comment="/usr/bin/ppmbrighten is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1750"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmchange is executable">
              <criterion comment="/usr/bin/ppmchange is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1749"/>
              <criterion comment="/usr/bin/ppmchange is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1748"/>
              <criterion comment="/usr/bin/ppmchange is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1747"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmcie is executable">
              <criterion comment="/usr/bin/ppmcie is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1746"/>
              <criterion comment="/usr/bin/ppmcie is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1745"/>
              <criterion comment="/usr/bin/ppmcie is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1744"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmcolormask is executable">
              <criterion comment="/usr/bin/ppmcolormask is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1743"/>
              <criterion comment="/usr/bin/ppmcolormask is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1742"/>
              <criterion comment="/usr/bin/ppmcolormask is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1741"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmcolors is executable">
              <criterion comment="/usr/bin/ppmcolors is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1740"/>
              <criterion comment="/usr/bin/ppmcolors is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1739"/>
              <criterion comment="/usr/bin/ppmcolors is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1738"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmdim is executable">
              <criterion comment="/usr/bin/ppmdim is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1737"/>
              <criterion comment="/usr/bin/ppmdim is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1736"/>
              <criterion comment="/usr/bin/ppmdim is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1735"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmdist is executable">
              <criterion comment="/usr/bin/ppmdist is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1734"/>
              <criterion comment="/usr/bin/ppmdist is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1733"/>
              <criterion comment="/usr/bin/ppmdist is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1732"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmdither is executable">
              <criterion comment="/usr/bin/ppmdither is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1731"/>
              <criterion comment="/usr/bin/ppmdither is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1730"/>
              <criterion comment="/usr/bin/ppmdither is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1729"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmflash is executable">
              <criterion comment="/usr/bin/ppmflash is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1728"/>
              <criterion comment="/usr/bin/ppmflash is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1727"/>
              <criterion comment="/usr/bin/ppmflash is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1726"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmforge is executable">
              <criterion comment="/usr/bin/ppmforge is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1725"/>
              <criterion comment="/usr/bin/ppmforge is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1724"/>
              <criterion comment="/usr/bin/ppmforge is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1723"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmhist is executable">
              <criterion comment="/usr/bin/ppmhist is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1722"/>
              <criterion comment="/usr/bin/ppmhist is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1721"/>
              <criterion comment="/usr/bin/ppmhist is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1720"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmlabel is executable">
              <criterion comment="/usr/bin/ppmlabel is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1719"/>
              <criterion comment="/usr/bin/ppmlabel is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1718"/>
              <criterion comment="/usr/bin/ppmlabel is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1717"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmmake is executable">
              <criterion comment="/usr/bin/ppmmake is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1716"/>
              <criterion comment="/usr/bin/ppmmake is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1715"/>
              <criterion comment="/usr/bin/ppmmake is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1714"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmmix is executable">
              <criterion comment="/usr/bin/ppmmix is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1713"/>
              <criterion comment="/usr/bin/ppmmix is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1712"/>
              <criterion comment="/usr/bin/ppmmix is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1711"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmnorm is executable">
              <criterion comment="/usr/bin/ppmnorm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1710"/>
              <criterion comment="/usr/bin/ppmnorm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1709"/>
              <criterion comment="/usr/bin/ppmnorm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1708"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmntsc is executable">
              <criterion comment="/usr/bin/ppmntsc is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1707"/>
              <criterion comment="/usr/bin/ppmntsc is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1706"/>
              <criterion comment="/usr/bin/ppmntsc is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1705"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmpat is executable">
              <criterion comment="/usr/bin/ppmpat is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1704"/>
              <criterion comment="/usr/bin/ppmpat is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1703"/>
              <criterion comment="/usr/bin/ppmpat is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1702"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmquant is executable">
              <criterion comment="/usr/bin/ppmquant is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1701"/>
              <criterion comment="/usr/bin/ppmquant is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1700"/>
              <criterion comment="/usr/bin/ppmquant is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1699"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmqvga is executable">
              <criterion comment="/usr/bin/ppmqvga is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1698"/>
              <criterion comment="/usr/bin/ppmqvga is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1697"/>
              <criterion comment="/usr/bin/ppmqvga is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1696"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmrelief is executable">
              <criterion comment="/usr/bin/ppmrelief is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1695"/>
              <criterion comment="/usr/bin/ppmrelief is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1694"/>
              <criterion comment="/usr/bin/ppmrelief is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1693"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmshift is executable">
              <criterion comment="/usr/bin/ppmshift is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1692"/>
              <criterion comment="/usr/bin/ppmshift is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1691"/>
              <criterion comment="/usr/bin/ppmshift is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1690"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmspread is executable">
              <criterion comment="/usr/bin/ppmspread is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1689"/>
              <criterion comment="/usr/bin/ppmspread is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1688"/>
              <criterion comment="/usr/bin/ppmspread is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1687"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtoacad is executable">
              <criterion comment="/usr/bin/ppmtoacad is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1686"/>
              <criterion comment="/usr/bin/ppmtoacad is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1685"/>
              <criterion comment="/usr/bin/ppmtoacad is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1684"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtobmp is executable">
              <criterion comment="/usr/bin/ppmtobmp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1683"/>
              <criterion comment="/usr/bin/ppmtobmp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1682"/>
              <criterion comment="/usr/bin/ppmtobmp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1681"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtoeyuv is executable">
              <criterion comment="/usr/bin/ppmtoeyuv is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1680"/>
              <criterion comment="/usr/bin/ppmtoeyuv is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1679"/>
              <criterion comment="/usr/bin/ppmtoeyuv is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1678"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtogif is executable">
              <criterion comment="/usr/bin/ppmtogif is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1677"/>
              <criterion comment="/usr/bin/ppmtogif is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1676"/>
              <criterion comment="/usr/bin/ppmtogif is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1675"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtoicr is executable">
              <criterion comment="/usr/bin/ppmtoicr is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1674"/>
              <criterion comment="/usr/bin/ppmtoicr is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1673"/>
              <criterion comment="/usr/bin/ppmtoicr is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1672"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtoilbm is executable">
              <criterion comment="/usr/bin/ppmtoilbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1671"/>
              <criterion comment="/usr/bin/ppmtoilbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1670"/>
              <criterion comment="/usr/bin/ppmtoilbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1669"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtojpeg is executable">
              <criterion comment="/usr/bin/ppmtojpeg is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1668"/>
              <criterion comment="/usr/bin/ppmtojpeg is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1667"/>
              <criterion comment="/usr/bin/ppmtojpeg is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1666"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtoleaf is executable">
              <criterion comment="/usr/bin/ppmtoleaf is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1665"/>
              <criterion comment="/usr/bin/ppmtoleaf is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1664"/>
              <criterion comment="/usr/bin/ppmtoleaf is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1663"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtolj is executable">
              <criterion comment="/usr/bin/ppmtolj is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1662"/>
              <criterion comment="/usr/bin/ppmtolj is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1661"/>
              <criterion comment="/usr/bin/ppmtolj is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1660"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtomitsu is executable">
              <criterion comment="/usr/bin/ppmtomitsu is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1659"/>
              <criterion comment="/usr/bin/ppmtomitsu is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1658"/>
              <criterion comment="/usr/bin/ppmtomitsu is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1657"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtompeg is executable">
              <criterion comment="/usr/bin/ppmtompeg is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1656"/>
              <criterion comment="/usr/bin/ppmtompeg is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1655"/>
              <criterion comment="/usr/bin/ppmtompeg is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1654"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtoneo is executable">
              <criterion comment="/usr/bin/ppmtoneo is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1653"/>
              <criterion comment="/usr/bin/ppmtoneo is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1652"/>
              <criterion comment="/usr/bin/ppmtoneo is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1651"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtopcx is executable">
              <criterion comment="/usr/bin/ppmtopcx is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1650"/>
              <criterion comment="/usr/bin/ppmtopcx is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1649"/>
              <criterion comment="/usr/bin/ppmtopcx is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1648"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtopgm is executable">
              <criterion comment="/usr/bin/ppmtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1647"/>
              <criterion comment="/usr/bin/ppmtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1646"/>
              <criterion comment="/usr/bin/ppmtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1645"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtopi1 is executable">
              <criterion comment="/usr/bin/ppmtopi1 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1644"/>
              <criterion comment="/usr/bin/ppmtopi1 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1643"/>
              <criterion comment="/usr/bin/ppmtopi1 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1642"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:81" version="2" class="vulnerability" deprecated="true">
      <metadata>
        <title>DEPRECATED: Windows NT IIS HTTP Error Page Cross-site Scripting</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0148" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0148"/>
        <description>Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other users via an HTTP error page.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-20T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified comment="Use def:12008 instead" date="2011-01-20T10:17:26.815-05:00">
              <contributor organization="Symantec Corporation">Josh Turpin</contributor>
            </modified>
            <status_change date="2011-01-20T10:17:26.815-05:00">DEPRECATED</status_change>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="IIS 4.0 Major Version" negate="false" test_ref="oval:org.mitre.oval:tst:3099"/>
        <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
        <criterion comment="this is an NT Terminal Server" negate="true" test_ref="oval:org.mitre.oval:tst:3097"/>
        <criterion comment="the version of w3svc.dll is less than 4.2.775.1" negate="false" test_ref="oval:org.mitre.oval:tst:3096"/>
        <criterion comment="Patch Q319733 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3095"/>
        <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
        <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:809" version="2" class="vulnerability">
      <metadata>
        <title>XFree86 Font File Handling Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>XFree86</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0106" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0106"/>
        <description>Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font files, a different set of vulnerabilities than CVE-2004-0083 and CVE-2004-0084.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:21.877-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:47.539-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="XFree86 version is less than 4.3.0-2.90.55" negate="false" test_ref="oval:org.mitre.oval:tst:1641"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="/usr/X11R6/bin/XFree86 is SUID and executable">
            <criterion comment="/usr/X11R6/bin/XFree86 is SUID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:1640"/>
            <criteria operator="OR" comment="/usr/X11R6/bin/XFree86 is SUID and executable">
              <criterion comment="/usr/X11R6/bin/XFree86 is SUID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:1639"/>
              <criterion comment="/usr/X11R6/bin/XFree86 is SUID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:1638"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:808" version="5" class="vulnerability">
      <metadata>
        <title>RHE4 XBL Script Security Bypass Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2261" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2261"/>
        <description>Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts even when Javascript has been disabled, which makes it easier for remote attackers to bypass such protection.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-15T04:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-08-19T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11366 - Updated CPE reference, updated regular expression" date="2011-02-17T13:29:00.547-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2011-02-17T13:31:08.313-05:00">INTERIM</status_change>
            <status_change date="2011-03-07T04:00:15.721-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11366 - Corrected - right version for brlapi and brlapi-devel as specified by RHSA-2010:0181-5" date="2013-03-18T12:26:00.995-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-03-18T12:31:11.401-04:00">INTERIM</status_change>
            <status_change date="2013-04-08T04:00:49.461-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2652"/>
          <criterion comment="mozilla RPM is earlier than 37:1.7.10-1.4.1" negate="false" test_ref="oval:org.mitre.oval:tst:2651"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/mozilla is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2650"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:8077" version="5" class="vulnerability">
      <metadata>
        <title>IE v6.0, SP1 HijackClick 3 / Script in Image Tag File Download Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0841" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0841"/>
        <description>Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" and the "Script in Image Tag File Download Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-18T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-01-20T02:31:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-27T10:50:00.000-04:00" comment="modified wft-564 - Changed test to match comment">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:46:03.976-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:41:00.405-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:58.585-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:27.894-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2800.1476" negate="false" test_ref="oval:org.mitre.oval:tst:856"/>
          <criterion comment="the patch kb834707 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:855"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:807" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat XFree86 Buffer Overflow in ReadFontAlias II</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>XFree86</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0084" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0084"/>
        <description>Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias (font.alias) file, a different vulnerability than CVE-2004-0083 and CVE-2004-0106.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:43.326-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:47.331-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="XFree86 version is less than 4.3.0-2.90.55" negate="false" test_ref="oval:org.mitre.oval:tst:1641"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="/usr/X11R6/bin/XFree86 is SUID and executable">
            <criterion comment="/usr/X11R6/bin/XFree86 is SUID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:1640"/>
            <criteria operator="OR" comment="/usr/X11R6/bin/XFree86 is SUID and executable">
              <criterion comment="/usr/X11R6/bin/XFree86 is SUID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:1639"/>
              <criterion comment="/usr/X11R6/bin/XFree86 is SUID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:1638"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:806" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat XFree86 Buffer Overflow in ReadFontAlias</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>XFree86</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0083"/>
        <description>Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a font alias file (font.alias) with a long token, a different vulnerability than CVE-2004-0084 and CVE-2004-0106.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:23.593-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:47.083-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="XFree86 version is less than 4.3.0-2.90.55" negate="false" test_ref="oval:org.mitre.oval:tst:1641"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="/usr/X11R6/bin/XFree86 is SUID and executable">
            <criterion comment="/usr/X11R6/bin/XFree86 is SUID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:1640"/>
            <criteria operator="OR" comment="/usr/X11R6/bin/XFree86 is SUID and executable">
              <criterion comment="/usr/X11R6/bin/XFree86 is SUID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:1639"/>
              <criterion comment="/usr/X11R6/bin/XFree86 is SUID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:1638"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:805" version="6" class="vulnerability">
      <metadata>
        <title>IE v6.0,SP1 (Server 2003) Travel Log Cross Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1026" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1026"/>
        <description>Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the history list and executed in the top window's zone when the history.back (back) function is called, as demonstrated by BackToFramedJpu, aka the "Travel Log Cross Domain Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-02-03T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-05-10T12:00:00.000-04:00" comment="modified wrt-51 - Comment updated to indicate IE 6.">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-05-11T05:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:54:00.000-04:00" comment="modified wft-95 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2621. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T20:21:00.819-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T20:22:33.027-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:41:00.077-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:50.984-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:27.815-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6  for Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2801"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.3790.118" negate="false" test_ref="oval:org.mitre.oval:tst:2572"/>
          <criterion comment="the patch q832894 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2571"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:804" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat netpbm File Overwrite Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>netpbm</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0924" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0924"/>
        <description>netpbm 9.25 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:42:00.100-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:42.229-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criteria operator="OR" comment="Vulnerable Config">
            <criterion comment="netpbm version is less than 9.24-10.90.1" negate="false" test_ref="oval:org.mitre.oval:tst:2319"/>
            <criterion comment="netpbm-devel version is less than 9.24-10.90.1" negate="false" test_ref="oval:org.mitre.oval:tst:2318"/>
            <criterion comment="netpbm-progs version is less than 9.24-10.90.1" negate="false" test_ref="oval:org.mitre.oval:tst:2317"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="Vulnerable configuration">
            <criteria operator="OR" comment="/usr/bin/411toppm is executable">
              <criterion comment="/usr/bin/411toppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2316"/>
              <criterion comment="/usr/bin/411toppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2315"/>
              <criterion comment="/usr/bin/411toppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2314"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/asciitopgm is executable">
              <criterion comment="/usr/bin/asciitopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2313"/>
              <criterion comment="/usr/bin/asciitopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2312"/>
              <criterion comment="/usr/bin/asciitopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2311"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/atktopbm is executable">
              <criterion comment="/usr/bin/atktopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2310"/>
              <criterion comment="/usr/bin/atktopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2309"/>
              <criterion comment="/usr/bin/atktopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2308"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/bioradtopgm is executable">
              <criterion comment="/usr/bin/bioradtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2307"/>
              <criterion comment="/usr/bin/bioradtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2306"/>
              <criterion comment="/usr/bin/bioradtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2305"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/bmptoppm is executable">
              <criterion comment="/usr/bin/bmptoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2304"/>
              <criterion comment="/usr/bin/bmptoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2303"/>
              <criterion comment="/usr/bin/bmptoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2302"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/brushtopbm is executable">
              <criterion comment="/usr/bin/brushtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2301"/>
              <criterion comment="/usr/bin/brushtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2300"/>
              <criterion comment="/usr/bin/brushtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2299"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/cmuwmtopbm is executable">
              <criterion comment="/usr/bin/cmuwmtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2298"/>
              <criterion comment="/usr/bin/cmuwmtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2297"/>
              <criterion comment="/usr/bin/cmuwmtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2296"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/eyuvtoppm is executable">
              <criterion comment="/usr/bin/eyuvtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2295"/>
              <criterion comment="/usr/bin/eyuvtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2294"/>
              <criterion comment="/usr/bin/eyuvtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2293"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/fiascotopnm is executable">
              <criterion comment="/usr/bin/fiascotopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2292"/>
              <criterion comment="/usr/bin/fiascotopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2291"/>
              <criterion comment="/usr/bin/fiascotopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2290"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/fitstopnm is executable">
              <criterion comment="/usr/bin/fitstopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2289"/>
              <criterion comment="/usr/bin/fitstopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2288"/>
              <criterion comment="/usr/bin/fitstopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2287"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/fstopgm is executable">
              <criterion comment="/usr/bin/fstopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2286"/>
              <criterion comment="/usr/bin/fstopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2285"/>
              <criterion comment="/usr/bin/fstopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2284"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/g3topbm is executable">
              <criterion comment="/usr/bin/g3topbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2283"/>
              <criterion comment="/usr/bin/g3topbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2282"/>
              <criterion comment="/usr/bin/g3topbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2281"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/gemtopbm is executable">
              <criterion comment="/usr/bin/gemtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2280"/>
              <criterion comment="/usr/bin/gemtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2279"/>
              <criterion comment="/usr/bin/gemtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2278"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/gemtopnm is executable">
              <criterion comment="/usr/bin/gemtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2277"/>
              <criterion comment="/usr/bin/gemtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2276"/>
              <criterion comment="/usr/bin/gemtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2275"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/giftopnm is executable">
              <criterion comment="/usr/bin/giftopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2274"/>
              <criterion comment="/usr/bin/giftopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2273"/>
              <criterion comment="/usr/bin/giftopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2272"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/gouldtoppm is executable">
              <criterion comment="/usr/bin/gouldtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2271"/>
              <criterion comment="/usr/bin/gouldtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2270"/>
              <criterion comment="/usr/bin/gouldtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2269"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/hipstopgm is executable">
              <criterion comment="/usr/bin/hipstopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2268"/>
              <criterion comment="/usr/bin/hipstopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2267"/>
              <criterion comment="/usr/bin/hipstopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2266"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/hpcdtoppm is executable">
              <criterion comment="/usr/bin/hpcdtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2265"/>
              <criterion comment="/usr/bin/hpcdtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2264"/>
              <criterion comment="/usr/bin/hpcdtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2263"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/icontopbm is executable">
              <criterion comment="/usr/bin/icontopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2262"/>
              <criterion comment="/usr/bin/icontopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2261"/>
              <criterion comment="/usr/bin/icontopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2260"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ilbmtoppm is executable">
              <criterion comment="/usr/bin/ilbmtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2259"/>
              <criterion comment="/usr/bin/ilbmtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2258"/>
              <criterion comment="/usr/bin/ilbmtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2257"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/imgtoppm is executable">
              <criterion comment="/usr/bin/imgtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2256"/>
              <criterion comment="/usr/bin/imgtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2255"/>
              <criterion comment="/usr/bin/imgtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2254"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/jpegtopnm is executable">
              <criterion comment="/usr/bin/jpegtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2253"/>
              <criterion comment="/usr/bin/jpegtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2252"/>
              <criterion comment="/usr/bin/jpegtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2251"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/leaftoppm is executable">
              <criterion comment="/usr/bin/leaftoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2250"/>
              <criterion comment="/usr/bin/leaftoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2249"/>
              <criterion comment="/usr/bin/leaftoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2248"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/lispmtopgm is executable">
              <criterion comment="/usr/bin/lispmtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2247"/>
              <criterion comment="/usr/bin/lispmtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2246"/>
              <criterion comment="/usr/bin/lispmtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2245"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/macptopbm is executable">
              <criterion comment="/usr/bin/macptopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2244"/>
              <criterion comment="/usr/bin/macptopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2243"/>
              <criterion comment="/usr/bin/macptopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2242"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/mdatopbm is executable">
              <criterion comment="/usr/bin/mdatopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2241"/>
              <criterion comment="/usr/bin/mdatopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2240"/>
              <criterion comment="/usr/bin/mdatopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2239"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/mgrtopbm is executable">
              <criterion comment="/usr/bin/mgrtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2238"/>
              <criterion comment="/usr/bin/mgrtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2237"/>
              <criterion comment="/usr/bin/mgrtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2236"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/mtvtoppm is executable">
              <criterion comment="/usr/bin/mtvtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2235"/>
              <criterion comment="/usr/bin/mtvtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2234"/>
              <criterion comment="/usr/bin/mtvtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2233"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/neotoppm is executable">
              <criterion comment="/usr/bin/neotoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2232"/>
              <criterion comment="/usr/bin/neotoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2231"/>
              <criterion comment="/usr/bin/neotoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2230"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/palmtopnm is executable">
              <criterion comment="/usr/bin/palmtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2229"/>
              <criterion comment="/usr/bin/palmtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2228"/>
              <criterion comment="/usr/bin/palmtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2227"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pamchannel is executable">
              <criterion comment="/usr/bin/pamchannel is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2226"/>
              <criterion comment="/usr/bin/pamchannel is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2225"/>
              <criterion comment="/usr/bin/pamchannel is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2224"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pamcut is executable">
              <criterion comment="/usr/bin/pamcut is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2223"/>
              <criterion comment="/usr/bin/pamcut is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2222"/>
              <criterion comment="/usr/bin/pamcut is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2221"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pamdeinterlace is executable">
              <criterion comment="/usr/bin/pamdeinterlace is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2220"/>
              <criterion comment="/usr/bin/pamdeinterlace is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2219"/>
              <criterion comment="/usr/bin/pamdeinterlace is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2218"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pamfile is executable">
              <criterion comment="/usr/bin/pamfile is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2217"/>
              <criterion comment="/usr/bin/pamfile is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2216"/>
              <criterion comment="/usr/bin/pamfile is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2215"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pamoil is executable">
              <criterion comment="/usr/bin/pamoil is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2214"/>
              <criterion comment="/usr/bin/pamoil is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2213"/>
              <criterion comment="/usr/bin/pamoil is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2212"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pamstretch is executable">
              <criterion comment="/usr/bin/pamstretch is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2211"/>
              <criterion comment="/usr/bin/pamstretch is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2210"/>
              <criterion comment="/usr/bin/pamstretch is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2209"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pamtopnm is executable">
              <criterion comment="/usr/bin/pamtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2208"/>
              <criterion comment="/usr/bin/pamtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2207"/>
              <criterion comment="/usr/bin/pamtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2206"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmclean is executable">
              <criterion comment="/usr/bin/pbmclean is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2205"/>
              <criterion comment="/usr/bin/pbmclean is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2204"/>
              <criterion comment="/usr/bin/pbmclean is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2203"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmlife is executable">
              <criterion comment="/usr/bin/pbmlife is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2202"/>
              <criterion comment="/usr/bin/pbmlife is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2201"/>
              <criterion comment="/usr/bin/pbmlife is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2200"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmmake is executable">
              <criterion comment="/usr/bin/pbmmake is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2199"/>
              <criterion comment="/usr/bin/pbmmake is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2198"/>
              <criterion comment="/usr/bin/pbmmake is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2197"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmmask is executable">
              <criterion comment="/usr/bin/pbmmask is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2196"/>
              <criterion comment="/usr/bin/pbmmask is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2195"/>
              <criterion comment="/usr/bin/pbmmask is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2194"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmpage is executable">
              <criterion comment="/usr/bin/pbmpage is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2193"/>
              <criterion comment="/usr/bin/pbmpage is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2192"/>
              <criterion comment="/usr/bin/pbmpage is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2191"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmpscale is executable">
              <criterion comment="/usr/bin/pbmpscale is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2190"/>
              <criterion comment="/usr/bin/pbmpscale is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2189"/>
              <criterion comment="/usr/bin/pbmpscale is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2188"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmreduce is executable">
              <criterion comment="/usr/bin/pbmreduce is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2187"/>
              <criterion comment="/usr/bin/pbmreduce is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2186"/>
              <criterion comment="/usr/bin/pbmreduce is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2185"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtext is executable">
              <criterion comment="/usr/bin/pbmtext is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2184"/>
              <criterion comment="/usr/bin/pbmtext is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2183"/>
              <criterion comment="/usr/bin/pbmtext is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2182"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmto10x is executable">
              <criterion comment="/usr/bin/pbmto10x is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2181"/>
              <criterion comment="/usr/bin/pbmto10x is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2180"/>
              <criterion comment="/usr/bin/pbmto10x is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2179"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmto4425 is executable">
              <criterion comment="/usr/bin/pbmto4425 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2178"/>
              <criterion comment="/usr/bin/pbmto4425 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2177"/>
              <criterion comment="/usr/bin/pbmto4425 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2176"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtoascii is executable">
              <criterion comment="/usr/bin/pbmtoascii is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2175"/>
              <criterion comment="/usr/bin/pbmtoascii is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2174"/>
              <criterion comment="/usr/bin/pbmtoascii is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2173"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtoatk is executable">
              <criterion comment="/usr/bin/pbmtoatk is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2172"/>
              <criterion comment="/usr/bin/pbmtoatk is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2171"/>
              <criterion comment="/usr/bin/pbmtoatk is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2170"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtobbnbg is executable">
              <criterion comment="/usr/bin/pbmtobbnbg is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2169"/>
              <criterion comment="/usr/bin/pbmtobbnbg is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2168"/>
              <criterion comment="/usr/bin/pbmtobbnbg is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2167"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtocmuwm is executable">
              <criterion comment="/usr/bin/pbmtocmuwm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2166"/>
              <criterion comment="/usr/bin/pbmtocmuwm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2165"/>
              <criterion comment="/usr/bin/pbmtocmuwm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2164"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtoepsi is executable">
              <criterion comment="/usr/bin/pbmtoepsi is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2163"/>
              <criterion comment="/usr/bin/pbmtoepsi is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2162"/>
              <criterion comment="/usr/bin/pbmtoepsi is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2161"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtoepson is executable">
              <criterion comment="/usr/bin/pbmtoepson is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2160"/>
              <criterion comment="/usr/bin/pbmtoepson is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2159"/>
              <criterion comment="/usr/bin/pbmtoepson is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2158"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtog3 is executable">
              <criterion comment="/usr/bin/pbmtog3 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2157"/>
              <criterion comment="/usr/bin/pbmtog3 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2156"/>
              <criterion comment="/usr/bin/pbmtog3 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2155"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtogem is executable">
              <criterion comment="/usr/bin/pbmtogem is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2154"/>
              <criterion comment="/usr/bin/pbmtogem is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2153"/>
              <criterion comment="/usr/bin/pbmtogem is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2152"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtogo is executable">
              <criterion comment="/usr/bin/pbmtogo is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2151"/>
              <criterion comment="/usr/bin/pbmtogo is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2150"/>
              <criterion comment="/usr/bin/pbmtogo is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2149"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtoicon is executable">
              <criterion comment="/usr/bin/pbmtoicon is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2148"/>
              <criterion comment="/usr/bin/pbmtoicon is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2147"/>
              <criterion comment="/usr/bin/pbmtoicon is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2146"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtolj is executable">
              <criterion comment="/usr/bin/pbmtolj is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2145"/>
              <criterion comment="/usr/bin/pbmtolj is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2144"/>
              <criterion comment="/usr/bin/pbmtolj is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2143"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtoln03 is executable">
              <criterion comment="/usr/bin/pbmtoln03 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2142"/>
              <criterion comment="/usr/bin/pbmtoln03 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2141"/>
              <criterion comment="/usr/bin/pbmtoln03 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2140"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtolps is executable">
              <criterion comment="/usr/bin/pbmtolps is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2139"/>
              <criterion comment="/usr/bin/pbmtolps is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2138"/>
              <criterion comment="/usr/bin/pbmtolps is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2137"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtomacp is executable">
              <criterion comment="/usr/bin/pbmtomacp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2136"/>
              <criterion comment="/usr/bin/pbmtomacp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2135"/>
              <criterion comment="/usr/bin/pbmtomacp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2134"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtomda is executable">
              <criterion comment="/usr/bin/pbmtomda is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2133"/>
              <criterion comment="/usr/bin/pbmtomda is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2132"/>
              <criterion comment="/usr/bin/pbmtomda is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2131"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtomgr is executable">
              <criterion comment="/usr/bin/pbmtomgr is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2130"/>
              <criterion comment="/usr/bin/pbmtomgr is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2129"/>
              <criterion comment="/usr/bin/pbmtomgr is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2128"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtonokia is executable">
              <criterion comment="/usr/bin/pbmtonokia is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2127"/>
              <criterion comment="/usr/bin/pbmtonokia is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2126"/>
              <criterion comment="/usr/bin/pbmtonokia is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2125"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtopgm is executable">
              <criterion comment="/usr/bin/pbmtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2124"/>
              <criterion comment="/usr/bin/pbmtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2123"/>
              <criterion comment="/usr/bin/pbmtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2122"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtopi3 is executable">
              <criterion comment="/usr/bin/pbmtopi3 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2121"/>
              <criterion comment="/usr/bin/pbmtopi3 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2120"/>
              <criterion comment="/usr/bin/pbmtopi3 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2119"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtopk is executable">
              <criterion comment="/usr/bin/pbmtopk is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2118"/>
              <criterion comment="/usr/bin/pbmtopk is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2117"/>
              <criterion comment="/usr/bin/pbmtopk is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2116"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtoplot is executable">
              <criterion comment="/usr/bin/pbmtoplot is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2115"/>
              <criterion comment="/usr/bin/pbmtoplot is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2114"/>
              <criterion comment="/usr/bin/pbmtoplot is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2113"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtoppa is executable">
              <criterion comment="/usr/bin/pbmtoppa is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2112"/>
              <criterion comment="/usr/bin/pbmtoppa is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2111"/>
              <criterion comment="/usr/bin/pbmtoppa is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2110"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtopsg3 is executable">
              <criterion comment="/usr/bin/pbmtopsg3 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2109"/>
              <criterion comment="/usr/bin/pbmtopsg3 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2108"/>
              <criterion comment="/usr/bin/pbmtopsg3 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2107"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtoptx is executable">
              <criterion comment="/usr/bin/pbmtoptx is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2106"/>
              <criterion comment="/usr/bin/pbmtoptx is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2105"/>
              <criterion comment="/usr/bin/pbmtoptx is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2104"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtowbmp is executable">
              <criterion comment="/usr/bin/pbmtowbmp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2103"/>
              <criterion comment="/usr/bin/pbmtowbmp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2102"/>
              <criterion comment="/usr/bin/pbmtowbmp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2101"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtox10bm is executable">
              <criterion comment="/usr/bin/pbmtox10bm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2100"/>
              <criterion comment="/usr/bin/pbmtox10bm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2099"/>
              <criterion comment="/usr/bin/pbmtox10bm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2098"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtoxbm is executable">
              <criterion comment="/usr/bin/pbmtoxbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2097"/>
              <criterion comment="/usr/bin/pbmtoxbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2096"/>
              <criterion comment="/usr/bin/pbmtoxbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2095"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtoybm is executable">
              <criterion comment="/usr/bin/pbmtoybm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2094"/>
              <criterion comment="/usr/bin/pbmtoybm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2093"/>
              <criterion comment="/usr/bin/pbmtoybm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2092"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmtozinc is executable">
              <criterion comment="/usr/bin/pbmtozinc is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2091"/>
              <criterion comment="/usr/bin/pbmtozinc is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2090"/>
              <criterion comment="/usr/bin/pbmtozinc is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2089"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pbmupc is executable">
              <criterion comment="/usr/bin/pbmupc is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2088"/>
              <criterion comment="/usr/bin/pbmupc is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2087"/>
              <criterion comment="/usr/bin/pbmupc is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2086"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pcxtoppm is executable">
              <criterion comment="/usr/bin/pcxtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2085"/>
              <criterion comment="/usr/bin/pcxtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2084"/>
              <criterion comment="/usr/bin/pcxtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2083"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmbentley is executable">
              <criterion comment="/usr/bin/pgmbentley is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2082"/>
              <criterion comment="/usr/bin/pgmbentley is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2081"/>
              <criterion comment="/usr/bin/pgmbentley is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2080"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmcrater is executable">
              <criterion comment="/usr/bin/pgmcrater is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2079"/>
              <criterion comment="/usr/bin/pgmcrater is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2078"/>
              <criterion comment="/usr/bin/pgmcrater is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2077"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmedge is executable">
              <criterion comment="/usr/bin/pgmedge is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2076"/>
              <criterion comment="/usr/bin/pgmedge is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2075"/>
              <criterion comment="/usr/bin/pgmedge is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2074"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmenhance is executable">
              <criterion comment="/usr/bin/pgmenhance is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2073"/>
              <criterion comment="/usr/bin/pgmenhance is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2072"/>
              <criterion comment="/usr/bin/pgmenhance is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2071"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmhist is executable">
              <criterion comment="/usr/bin/pgmhist is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2070"/>
              <criterion comment="/usr/bin/pgmhist is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2069"/>
              <criterion comment="/usr/bin/pgmhist is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2068"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmkernel is executable">
              <criterion comment="/usr/bin/pgmkernel is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2067"/>
              <criterion comment="/usr/bin/pgmkernel is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2066"/>
              <criterion comment="/usr/bin/pgmkernel is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2065"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmnoise is executable">
              <criterion comment="/usr/bin/pgmnoise is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2064"/>
              <criterion comment="/usr/bin/pgmnoise is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2063"/>
              <criterion comment="/usr/bin/pgmnoise is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2062"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmnorm is executable">
              <criterion comment="/usr/bin/pgmnorm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2061"/>
              <criterion comment="/usr/bin/pgmnorm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2060"/>
              <criterion comment="/usr/bin/pgmnorm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2059"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmoil is executable">
              <criterion comment="/usr/bin/pgmoil is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2058"/>
              <criterion comment="/usr/bin/pgmoil is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2057"/>
              <criterion comment="/usr/bin/pgmoil is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2056"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmramp is executable">
              <criterion comment="/usr/bin/pgmramp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2055"/>
              <criterion comment="/usr/bin/pgmramp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2054"/>
              <criterion comment="/usr/bin/pgmramp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2053"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmslice is executable">
              <criterion comment="/usr/bin/pgmslice is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2052"/>
              <criterion comment="/usr/bin/pgmslice is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2051"/>
              <criterion comment="/usr/bin/pgmslice is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2050"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmtexture is executable">
              <criterion comment="/usr/bin/pgmtexture is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2049"/>
              <criterion comment="/usr/bin/pgmtexture is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2048"/>
              <criterion comment="/usr/bin/pgmtexture is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2047"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmtofs is executable">
              <criterion comment="/usr/bin/pgmtofs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2046"/>
              <criterion comment="/usr/bin/pgmtofs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2045"/>
              <criterion comment="/usr/bin/pgmtofs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2044"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmtolispm is executable">
              <criterion comment="/usr/bin/pgmtolispm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2043"/>
              <criterion comment="/usr/bin/pgmtolispm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2042"/>
              <criterion comment="/usr/bin/pgmtolispm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2041"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmtopbm is executable">
              <criterion comment="/usr/bin/pgmtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2040"/>
              <criterion comment="/usr/bin/pgmtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2039"/>
              <criterion comment="/usr/bin/pgmtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2038"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pgmtoppm is executable">
              <criterion comment="/usr/bin/pgmtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2037"/>
              <criterion comment="/usr/bin/pgmtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2036"/>
              <criterion comment="/usr/bin/pgmtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2035"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pi1toppm is executable">
              <criterion comment="/usr/bin/pi1toppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2034"/>
              <criterion comment="/usr/bin/pi1toppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2033"/>
              <criterion comment="/usr/bin/pi1toppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2032"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pi3topbm is executable">
              <criterion comment="/usr/bin/pi3topbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2031"/>
              <criterion comment="/usr/bin/pi3topbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2030"/>
              <criterion comment="/usr/bin/pi3topbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2029"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pjtoppm is executable">
              <criterion comment="/usr/bin/pjtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2028"/>
              <criterion comment="/usr/bin/pjtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2027"/>
              <criterion comment="/usr/bin/pjtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2026"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pktopbm is executable">
              <criterion comment="/usr/bin/pktopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2025"/>
              <criterion comment="/usr/bin/pktopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2024"/>
              <criterion comment="/usr/bin/pktopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2023"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pngtopnm is executable">
              <criterion comment="/usr/bin/pngtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2022"/>
              <criterion comment="/usr/bin/pngtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2021"/>
              <criterion comment="/usr/bin/pngtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2020"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmalias is executable">
              <criterion comment="/usr/bin/pnmalias is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2019"/>
              <criterion comment="/usr/bin/pnmalias is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2018"/>
              <criterion comment="/usr/bin/pnmalias is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2017"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmarith is executable">
              <criterion comment="/usr/bin/pnmarith is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2016"/>
              <criterion comment="/usr/bin/pnmarith is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2015"/>
              <criterion comment="/usr/bin/pnmarith is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2014"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmcat is executable">
              <criterion comment="/usr/bin/pnmcat is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2013"/>
              <criterion comment="/usr/bin/pnmcat is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2012"/>
              <criterion comment="/usr/bin/pnmcat is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2011"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmcolormap is executable">
              <criterion comment="/usr/bin/pnmcolormap is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2010"/>
              <criterion comment="/usr/bin/pnmcolormap is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2009"/>
              <criterion comment="/usr/bin/pnmcolormap is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2008"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmcomp is executable">
              <criterion comment="/usr/bin/pnmcomp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2007"/>
              <criterion comment="/usr/bin/pnmcomp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2006"/>
              <criterion comment="/usr/bin/pnmcomp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2005"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmconvol is executable">
              <criterion comment="/usr/bin/pnmconvol is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2004"/>
              <criterion comment="/usr/bin/pnmconvol is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2003"/>
              <criterion comment="/usr/bin/pnmconvol is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2002"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmcrop is executable">
              <criterion comment="/usr/bin/pnmcrop is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2001"/>
              <criterion comment="/usr/bin/pnmcrop is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2000"/>
              <criterion comment="/usr/bin/pnmcrop is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1999"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmcut is executable">
              <criterion comment="/usr/bin/pnmcut is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1998"/>
              <criterion comment="/usr/bin/pnmcut is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1997"/>
              <criterion comment="/usr/bin/pnmcut is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1996"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmdepth is executable">
              <criterion comment="/usr/bin/pnmdepth is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1995"/>
              <criterion comment="/usr/bin/pnmdepth is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1994"/>
              <criterion comment="/usr/bin/pnmdepth is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1993"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmenlarge is executable">
              <criterion comment="/usr/bin/pnmenlarge is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1992"/>
              <criterion comment="/usr/bin/pnmenlarge is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1991"/>
              <criterion comment="/usr/bin/pnmenlarge is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1990"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmfile is executable">
              <criterion comment="/usr/bin/pnmfile is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1989"/>
              <criterion comment="/usr/bin/pnmfile is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1988"/>
              <criterion comment="/usr/bin/pnmfile is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1987"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmflip is executable">
              <criterion comment="/usr/bin/pnmflip is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1986"/>
              <criterion comment="/usr/bin/pnmflip is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1985"/>
              <criterion comment="/usr/bin/pnmflip is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1984"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmgamma is executable">
              <criterion comment="/usr/bin/pnmgamma is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1983"/>
              <criterion comment="/usr/bin/pnmgamma is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1982"/>
              <criterion comment="/usr/bin/pnmgamma is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1981"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmhisteq is executable">
              <criterion comment="/usr/bin/pnmhisteq is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1980"/>
              <criterion comment="/usr/bin/pnmhisteq is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1979"/>
              <criterion comment="/usr/bin/pnmhisteq is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1978"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmhistmap is executable">
              <criterion comment="/usr/bin/pnmhistmap is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1977"/>
              <criterion comment="/usr/bin/pnmhistmap is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1976"/>
              <criterion comment="/usr/bin/pnmhistmap is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1975"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnminterp is executable">
              <criterion comment="/usr/bin/pnminterp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1974"/>
              <criterion comment="/usr/bin/pnminterp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1973"/>
              <criterion comment="/usr/bin/pnminterp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1972"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnminvert is executable">
              <criterion comment="/usr/bin/pnminvert is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1971"/>
              <criterion comment="/usr/bin/pnminvert is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1970"/>
              <criterion comment="/usr/bin/pnminvert is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1969"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmmontage is executable">
              <criterion comment="/usr/bin/pnmmontage is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1968"/>
              <criterion comment="/usr/bin/pnmmontage is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1967"/>
              <criterion comment="/usr/bin/pnmmontage is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1966"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmnlfilt is executable">
              <criterion comment="/usr/bin/pnmnlfilt is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1965"/>
              <criterion comment="/usr/bin/pnmnlfilt is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1964"/>
              <criterion comment="/usr/bin/pnmnlfilt is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1963"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmnoraw is executable">
              <criterion comment="/usr/bin/pnmnoraw is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1962"/>
              <criterion comment="/usr/bin/pnmnoraw is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1961"/>
              <criterion comment="/usr/bin/pnmnoraw is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1960"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmpad is executable">
              <criterion comment="/usr/bin/pnmpad is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1959"/>
              <criterion comment="/usr/bin/pnmpad is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1958"/>
              <criterion comment="/usr/bin/pnmpad is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1957"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmpaste is executable">
              <criterion comment="/usr/bin/pnmpaste is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1956"/>
              <criterion comment="/usr/bin/pnmpaste is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1955"/>
              <criterion comment="/usr/bin/pnmpaste is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1954"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmpsnr is executable">
              <criterion comment="/usr/bin/pnmpsnr is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1953"/>
              <criterion comment="/usr/bin/pnmpsnr is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1952"/>
              <criterion comment="/usr/bin/pnmpsnr is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1951"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmremap is executable">
              <criterion comment="/usr/bin/pnmremap is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1950"/>
              <criterion comment="/usr/bin/pnmremap is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1949"/>
              <criterion comment="/usr/bin/pnmremap is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1948"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmrotate is executable">
              <criterion comment="/usr/bin/pnmrotate is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1947"/>
              <criterion comment="/usr/bin/pnmrotate is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1946"/>
              <criterion comment="/usr/bin/pnmrotate is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1945"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmscale is executable">
              <criterion comment="/usr/bin/pnmscale is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1944"/>
              <criterion comment="/usr/bin/pnmscale is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1943"/>
              <criterion comment="/usr/bin/pnmscale is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1942"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtopict is executable">
              <criterion comment="/usr/bin/ppmtopict is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1941"/>
              <criterion comment="/usr/bin/ppmtopict is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1940"/>
              <criterion comment="/usr/bin/ppmtopict is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1939"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtopj is executable">
              <criterion comment="/usr/bin/ppmtopj is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1938"/>
              <criterion comment="/usr/bin/ppmtopj is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1937"/>
              <criterion comment="/usr/bin/ppmtopj is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1936"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtopjxl is executable">
              <criterion comment="/usr/bin/ppmtopjxl is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1935"/>
              <criterion comment="/usr/bin/ppmtopjxl is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1934"/>
              <criterion comment="/usr/bin/ppmtopjxl is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1933"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtopuzz is executable">
              <criterion comment="/usr/bin/ppmtopuzz is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1932"/>
              <criterion comment="/usr/bin/ppmtopuzz is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1931"/>
              <criterion comment="/usr/bin/ppmtopuzz is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1930"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtorgb3 is executable">
              <criterion comment="/usr/bin/ppmtorgb3 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1929"/>
              <criterion comment="/usr/bin/ppmtorgb3 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1928"/>
              <criterion comment="/usr/bin/ppmtorgb3 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1927"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtosixel is executable">
              <criterion comment="/usr/bin/ppmtosixel is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1926"/>
              <criterion comment="/usr/bin/ppmtosixel is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1925"/>
              <criterion comment="/usr/bin/ppmtosixel is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1924"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtotga is executable">
              <criterion comment="/usr/bin/ppmtotga is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1923"/>
              <criterion comment="/usr/bin/ppmtotga is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1922"/>
              <criterion comment="/usr/bin/ppmtotga is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1921"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtouil is executable">
              <criterion comment="/usr/bin/ppmtouil is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1920"/>
              <criterion comment="/usr/bin/ppmtouil is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1919"/>
              <criterion comment="/usr/bin/ppmtouil is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1918"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtowinicon is executable">
              <criterion comment="/usr/bin/ppmtowinicon is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1917"/>
              <criterion comment="/usr/bin/ppmtowinicon is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1916"/>
              <criterion comment="/usr/bin/ppmtowinicon is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1915"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtoxpm is executable">
              <criterion comment="/usr/bin/ppmtoxpm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1914"/>
              <criterion comment="/usr/bin/ppmtoxpm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1913"/>
              <criterion comment="/usr/bin/ppmtoxpm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1912"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtoyuv is executable">
              <criterion comment="/usr/bin/ppmtoyuv is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1911"/>
              <criterion comment="/usr/bin/ppmtoyuv is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1910"/>
              <criterion comment="/usr/bin/ppmtoyuv is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1909"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtoyuvsplit is executable">
              <criterion comment="/usr/bin/ppmtoyuvsplit is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1908"/>
              <criterion comment="/usr/bin/ppmtoyuvsplit is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1907"/>
              <criterion comment="/usr/bin/ppmtoyuvsplit is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1906"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtv is executable">
              <criterion comment="/usr/bin/ppmtv is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1905"/>
              <criterion comment="/usr/bin/ppmtv is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1904"/>
              <criterion comment="/usr/bin/ppmtv is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1903"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/psidtopgm is executable">
              <criterion comment="/usr/bin/psidtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1902"/>
              <criterion comment="/usr/bin/psidtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1901"/>
              <criterion comment="/usr/bin/psidtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1900"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pstopnm is executable">
              <criterion comment="/usr/bin/pstopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1899"/>
              <criterion comment="/usr/bin/pstopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1898"/>
              <criterion comment="/usr/bin/pstopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1897"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/qrttoppm is executable">
              <criterion comment="/usr/bin/qrttoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1896"/>
              <criterion comment="/usr/bin/qrttoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1895"/>
              <criterion comment="/usr/bin/qrttoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1894"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/rasttopnm is executable">
              <criterion comment="/usr/bin/rasttopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1893"/>
              <criterion comment="/usr/bin/rasttopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1892"/>
              <criterion comment="/usr/bin/rasttopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1891"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/rawtopgm is executable">
              <criterion comment="/usr/bin/rawtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1890"/>
              <criterion comment="/usr/bin/rawtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1889"/>
              <criterion comment="/usr/bin/rawtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1888"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/rawtoppm is executable">
              <criterion comment="/usr/bin/rawtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1887"/>
              <criterion comment="/usr/bin/rawtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1886"/>
              <criterion comment="/usr/bin/rawtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1885"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/rgb3toppm is executable">
              <criterion comment="/usr/bin/rgb3toppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1884"/>
              <criterion comment="/usr/bin/rgb3toppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1883"/>
              <criterion comment="/usr/bin/rgb3toppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1882"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/rletopnm is executable">
              <criterion comment="/usr/bin/rletopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1881"/>
              <criterion comment="/usr/bin/rletopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1880"/>
              <criterion comment="/usr/bin/rletopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1879"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/sbigtopgm is executable">
              <criterion comment="/usr/bin/sbigtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1878"/>
              <criterion comment="/usr/bin/sbigtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1877"/>
              <criterion comment="/usr/bin/sbigtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1876"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/sgitopnm is executable">
              <criterion comment="/usr/bin/sgitopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1875"/>
              <criterion comment="/usr/bin/sgitopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1874"/>
              <criterion comment="/usr/bin/sgitopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1873"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/sirtopnm is executable">
              <criterion comment="/usr/bin/sirtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1872"/>
              <criterion comment="/usr/bin/sirtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1871"/>
              <criterion comment="/usr/bin/sirtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1870"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/sldtoppm is executable">
              <criterion comment="/usr/bin/sldtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1869"/>
              <criterion comment="/usr/bin/sldtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1868"/>
              <criterion comment="/usr/bin/sldtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1867"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/spctoppm is executable">
              <criterion comment="/usr/bin/spctoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1866"/>
              <criterion comment="/usr/bin/spctoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1865"/>
              <criterion comment="/usr/bin/spctoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1864"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/spottopgm is executable">
              <criterion comment="/usr/bin/spottopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1863"/>
              <criterion comment="/usr/bin/spottopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1862"/>
              <criterion comment="/usr/bin/spottopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1861"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/sputoppm is executable">
              <criterion comment="/usr/bin/sputoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1860"/>
              <criterion comment="/usr/bin/sputoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1859"/>
              <criterion comment="/usr/bin/sputoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1858"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/tgatoppm is executable">
              <criterion comment="/usr/bin/tgatoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1857"/>
              <criterion comment="/usr/bin/tgatoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1856"/>
              <criterion comment="/usr/bin/tgatoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1855"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/thinkjettopbm is executable">
              <criterion comment="/usr/bin/thinkjettopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1854"/>
              <criterion comment="/usr/bin/thinkjettopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1853"/>
              <criterion comment="/usr/bin/thinkjettopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1852"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/tifftopnm is executable">
              <criterion comment="/usr/bin/tifftopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1851"/>
              <criterion comment="/usr/bin/tifftopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1850"/>
              <criterion comment="/usr/bin/tifftopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1849"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/wbmptopbm is executable">
              <criterion comment="/usr/bin/wbmptopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1848"/>
              <criterion comment="/usr/bin/wbmptopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1847"/>
              <criterion comment="/usr/bin/wbmptopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1846"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/winicontoppm is executable">
              <criterion comment="/usr/bin/winicontoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1845"/>
              <criterion comment="/usr/bin/winicontoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1844"/>
              <criterion comment="/usr/bin/winicontoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1843"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/xbmtopbm is executable">
              <criterion comment="/usr/bin/xbmtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1842"/>
              <criterion comment="/usr/bin/xbmtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1841"/>
              <criterion comment="/usr/bin/xbmtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1840"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ximtoppm is executable">
              <criterion comment="/usr/bin/ximtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1839"/>
              <criterion comment="/usr/bin/ximtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1838"/>
              <criterion comment="/usr/bin/ximtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1837"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/xpmtoppm is executable">
              <criterion comment="/usr/bin/xpmtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1836"/>
              <criterion comment="/usr/bin/xpmtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1835"/>
              <criterion comment="/usr/bin/xpmtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1834"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/xvminitoppm is executable">
              <criterion comment="/usr/bin/xvminitoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1833"/>
              <criterion comment="/usr/bin/xvminitoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1832"/>
              <criterion comment="/usr/bin/xvminitoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1831"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/xwdtopnm is executable">
              <criterion comment="/usr/bin/xwdtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1830"/>
              <criterion comment="/usr/bin/xwdtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1829"/>
              <criterion comment="/usr/bin/xwdtopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1828"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ybmtopbm is executable">
              <criterion comment="/usr/bin/ybmtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1827"/>
              <criterion comment="/usr/bin/ybmtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1826"/>
              <criterion comment="/usr/bin/ybmtopbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1825"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/yuvsplittoppm is executable">
              <criterion comment="/usr/bin/yuvsplittoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1824"/>
              <criterion comment="/usr/bin/yuvsplittoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1823"/>
              <criterion comment="/usr/bin/yuvsplittoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1822"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/yuvtoppm is executable">
              <criterion comment="/usr/bin/yuvtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1821"/>
              <criterion comment="/usr/bin/yuvtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1820"/>
              <criterion comment="/usr/bin/yuvtoppm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1819"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/zeisstopnm is executable">
              <criterion comment="/usr/bin/zeisstopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1818"/>
              <criterion comment="/usr/bin/zeisstopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1817"/>
              <criterion comment="/usr/bin/zeisstopnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1816"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmscalefixed is executable">
              <criterion comment="/usr/bin/pnmscalefixed is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1815"/>
              <criterion comment="/usr/bin/pnmscalefixed is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1814"/>
              <criterion comment="/usr/bin/pnmscalefixed is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1813"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmshear is executable">
              <criterion comment="/usr/bin/pnmshear is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1812"/>
              <criterion comment="/usr/bin/pnmshear is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1811"/>
              <criterion comment="/usr/bin/pnmshear is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1810"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmsmooth is executable">
              <criterion comment="/usr/bin/pnmsmooth is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1809"/>
              <criterion comment="/usr/bin/pnmsmooth is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1808"/>
              <criterion comment="/usr/bin/pnmsmooth is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1807"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmsplit is executable">
              <criterion comment="/usr/bin/pnmsplit is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1806"/>
              <criterion comment="/usr/bin/pnmsplit is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1805"/>
              <criterion comment="/usr/bin/pnmsplit is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1804"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtile is executable">
              <criterion comment="/usr/bin/pnmtile is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1803"/>
              <criterion comment="/usr/bin/pnmtile is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1802"/>
              <criterion comment="/usr/bin/pnmtile is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1801"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtoddif is executable">
              <criterion comment="/usr/bin/pnmtoddif is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1800"/>
              <criterion comment="/usr/bin/pnmtoddif is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1799"/>
              <criterion comment="/usr/bin/pnmtoddif is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1798"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtofiasco is executable">
              <criterion comment="/usr/bin/pnmtofiasco is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1797"/>
              <criterion comment="/usr/bin/pnmtofiasco is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1796"/>
              <criterion comment="/usr/bin/pnmtofiasco is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1795"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtofits is executable">
              <criterion comment="/usr/bin/pnmtofits is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1794"/>
              <criterion comment="/usr/bin/pnmtofits is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1793"/>
              <criterion comment="/usr/bin/pnmtofits is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1792"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtojpeg is executable">
              <criterion comment="/usr/bin/pnmtojpeg is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1791"/>
              <criterion comment="/usr/bin/pnmtojpeg is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1790"/>
              <criterion comment="/usr/bin/pnmtojpeg is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1789"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtopalm is executable">
              <criterion comment="/usr/bin/pnmtopalm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1788"/>
              <criterion comment="/usr/bin/pnmtopalm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1787"/>
              <criterion comment="/usr/bin/pnmtopalm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1786"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtoplainpnm is executable">
              <criterion comment="/usr/bin/pnmtoplainpnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1785"/>
              <criterion comment="/usr/bin/pnmtoplainpnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1784"/>
              <criterion comment="/usr/bin/pnmtoplainpnm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1783"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtopng is executable">
              <criterion comment="/usr/bin/pnmtopng is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1782"/>
              <criterion comment="/usr/bin/pnmtopng is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1781"/>
              <criterion comment="/usr/bin/pnmtopng is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1780"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtops is executable">
              <criterion comment="/usr/bin/pnmtops is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1779"/>
              <criterion comment="/usr/bin/pnmtops is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1778"/>
              <criterion comment="/usr/bin/pnmtops is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1777"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtorast is executable">
              <criterion comment="/usr/bin/pnmtorast is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1776"/>
              <criterion comment="/usr/bin/pnmtorast is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1775"/>
              <criterion comment="/usr/bin/pnmtorast is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1774"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtorle is executable">
              <criterion comment="/usr/bin/pnmtorle is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1773"/>
              <criterion comment="/usr/bin/pnmtorle is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1772"/>
              <criterion comment="/usr/bin/pnmtorle is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1771"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtosgi is executable">
              <criterion comment="/usr/bin/pnmtosgi is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1770"/>
              <criterion comment="/usr/bin/pnmtosgi is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1769"/>
              <criterion comment="/usr/bin/pnmtosgi is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1768"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtosir is executable">
              <criterion comment="/usr/bin/pnmtosir is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1767"/>
              <criterion comment="/usr/bin/pnmtosir is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1766"/>
              <criterion comment="/usr/bin/pnmtosir is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1765"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtotiff is executable">
              <criterion comment="/usr/bin/pnmtotiff is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1764"/>
              <criterion comment="/usr/bin/pnmtotiff is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1763"/>
              <criterion comment="/usr/bin/pnmtotiff is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1762"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtotiffcmyk is executable">
              <criterion comment="/usr/bin/pnmtotiffcmyk is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1761"/>
              <criterion comment="/usr/bin/pnmtotiffcmyk is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1760"/>
              <criterion comment="/usr/bin/pnmtotiffcmyk is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1759"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/pnmtoxwd is executable">
              <criterion comment="/usr/bin/pnmtoxwd is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1758"/>
              <criterion comment="/usr/bin/pnmtoxwd is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1757"/>
              <criterion comment="/usr/bin/pnmtoxwd is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1756"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppm3d is executable">
              <criterion comment="/usr/bin/ppm3d is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1755"/>
              <criterion comment="/usr/bin/ppm3d is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1754"/>
              <criterion comment="/usr/bin/ppm3d is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1753"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmbrighten is executable">
              <criterion comment="/usr/bin/ppmbrighten is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1752"/>
              <criterion comment="/usr/bin/ppmbrighten is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1751"/>
              <criterion comment="/usr/bin/ppmbrighten is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1750"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmchange is executable">
              <criterion comment="/usr/bin/ppmchange is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1749"/>
              <criterion comment="/usr/bin/ppmchange is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1748"/>
              <criterion comment="/usr/bin/ppmchange is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1747"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmcie is executable">
              <criterion comment="/usr/bin/ppmcie is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1746"/>
              <criterion comment="/usr/bin/ppmcie is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1745"/>
              <criterion comment="/usr/bin/ppmcie is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1744"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmcolormask is executable">
              <criterion comment="/usr/bin/ppmcolormask is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1743"/>
              <criterion comment="/usr/bin/ppmcolormask is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1742"/>
              <criterion comment="/usr/bin/ppmcolormask is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1741"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmcolors is executable">
              <criterion comment="/usr/bin/ppmcolors is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1740"/>
              <criterion comment="/usr/bin/ppmcolors is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1739"/>
              <criterion comment="/usr/bin/ppmcolors is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1738"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmdim is executable">
              <criterion comment="/usr/bin/ppmdim is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1737"/>
              <criterion comment="/usr/bin/ppmdim is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1736"/>
              <criterion comment="/usr/bin/ppmdim is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1735"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmdist is executable">
              <criterion comment="/usr/bin/ppmdist is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1734"/>
              <criterion comment="/usr/bin/ppmdist is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1733"/>
              <criterion comment="/usr/bin/ppmdist is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1732"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmdither is executable">
              <criterion comment="/usr/bin/ppmdither is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1731"/>
              <criterion comment="/usr/bin/ppmdither is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1730"/>
              <criterion comment="/usr/bin/ppmdither is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1729"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmflash is executable">
              <criterion comment="/usr/bin/ppmflash is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1728"/>
              <criterion comment="/usr/bin/ppmflash is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1727"/>
              <criterion comment="/usr/bin/ppmflash is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1726"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmforge is executable">
              <criterion comment="/usr/bin/ppmforge is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1725"/>
              <criterion comment="/usr/bin/ppmforge is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1724"/>
              <criterion comment="/usr/bin/ppmforge is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1723"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmhist is executable">
              <criterion comment="/usr/bin/ppmhist is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1722"/>
              <criterion comment="/usr/bin/ppmhist is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1721"/>
              <criterion comment="/usr/bin/ppmhist is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1720"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmlabel is executable">
              <criterion comment="/usr/bin/ppmlabel is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1719"/>
              <criterion comment="/usr/bin/ppmlabel is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1718"/>
              <criterion comment="/usr/bin/ppmlabel is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1717"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmmake is executable">
              <criterion comment="/usr/bin/ppmmake is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1716"/>
              <criterion comment="/usr/bin/ppmmake is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1715"/>
              <criterion comment="/usr/bin/ppmmake is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1714"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmmix is executable">
              <criterion comment="/usr/bin/ppmmix is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1713"/>
              <criterion comment="/usr/bin/ppmmix is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1712"/>
              <criterion comment="/usr/bin/ppmmix is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1711"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmnorm is executable">
              <criterion comment="/usr/bin/ppmnorm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1710"/>
              <criterion comment="/usr/bin/ppmnorm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1709"/>
              <criterion comment="/usr/bin/ppmnorm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1708"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmntsc is executable">
              <criterion comment="/usr/bin/ppmntsc is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1707"/>
              <criterion comment="/usr/bin/ppmntsc is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1706"/>
              <criterion comment="/usr/bin/ppmntsc is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1705"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmpat is executable">
              <criterion comment="/usr/bin/ppmpat is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1704"/>
              <criterion comment="/usr/bin/ppmpat is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1703"/>
              <criterion comment="/usr/bin/ppmpat is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1702"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmquant is executable">
              <criterion comment="/usr/bin/ppmquant is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1701"/>
              <criterion comment="/usr/bin/ppmquant is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1700"/>
              <criterion comment="/usr/bin/ppmquant is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1699"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmqvga is executable">
              <criterion comment="/usr/bin/ppmqvga is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1698"/>
              <criterion comment="/usr/bin/ppmqvga is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1697"/>
              <criterion comment="/usr/bin/ppmqvga is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1696"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmrelief is executable">
              <criterion comment="/usr/bin/ppmrelief is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1695"/>
              <criterion comment="/usr/bin/ppmrelief is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1694"/>
              <criterion comment="/usr/bin/ppmrelief is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1693"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmshift is executable">
              <criterion comment="/usr/bin/ppmshift is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1692"/>
              <criterion comment="/usr/bin/ppmshift is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1691"/>
              <criterion comment="/usr/bin/ppmshift is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1690"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmspread is executable">
              <criterion comment="/usr/bin/ppmspread is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1689"/>
              <criterion comment="/usr/bin/ppmspread is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1688"/>
              <criterion comment="/usr/bin/ppmspread is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1687"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtoacad is executable">
              <criterion comment="/usr/bin/ppmtoacad is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1686"/>
              <criterion comment="/usr/bin/ppmtoacad is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1685"/>
              <criterion comment="/usr/bin/ppmtoacad is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1684"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtobmp is executable">
              <criterion comment="/usr/bin/ppmtobmp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1683"/>
              <criterion comment="/usr/bin/ppmtobmp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1682"/>
              <criterion comment="/usr/bin/ppmtobmp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1681"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtoeyuv is executable">
              <criterion comment="/usr/bin/ppmtoeyuv is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1680"/>
              <criterion comment="/usr/bin/ppmtoeyuv is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1679"/>
              <criterion comment="/usr/bin/ppmtoeyuv is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1678"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtogif is executable">
              <criterion comment="/usr/bin/ppmtogif is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1677"/>
              <criterion comment="/usr/bin/ppmtogif is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1676"/>
              <criterion comment="/usr/bin/ppmtogif is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1675"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtoicr is executable">
              <criterion comment="/usr/bin/ppmtoicr is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1674"/>
              <criterion comment="/usr/bin/ppmtoicr is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1673"/>
              <criterion comment="/usr/bin/ppmtoicr is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1672"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtoilbm is executable">
              <criterion comment="/usr/bin/ppmtoilbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1671"/>
              <criterion comment="/usr/bin/ppmtoilbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1670"/>
              <criterion comment="/usr/bin/ppmtoilbm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1669"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtojpeg is executable">
              <criterion comment="/usr/bin/ppmtojpeg is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1668"/>
              <criterion comment="/usr/bin/ppmtojpeg is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1667"/>
              <criterion comment="/usr/bin/ppmtojpeg is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1666"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtoleaf is executable">
              <criterion comment="/usr/bin/ppmtoleaf is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1665"/>
              <criterion comment="/usr/bin/ppmtoleaf is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1664"/>
              <criterion comment="/usr/bin/ppmtoleaf is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1663"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtolj is executable">
              <criterion comment="/usr/bin/ppmtolj is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1662"/>
              <criterion comment="/usr/bin/ppmtolj is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1661"/>
              <criterion comment="/usr/bin/ppmtolj is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1660"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtomitsu is executable">
              <criterion comment="/usr/bin/ppmtomitsu is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1659"/>
              <criterion comment="/usr/bin/ppmtomitsu is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1658"/>
              <criterion comment="/usr/bin/ppmtomitsu is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1657"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtompeg is executable">
              <criterion comment="/usr/bin/ppmtompeg is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1656"/>
              <criterion comment="/usr/bin/ppmtompeg is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1655"/>
              <criterion comment="/usr/bin/ppmtompeg is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1654"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtoneo is executable">
              <criterion comment="/usr/bin/ppmtoneo is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1653"/>
              <criterion comment="/usr/bin/ppmtoneo is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1652"/>
              <criterion comment="/usr/bin/ppmtoneo is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1651"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtopcx is executable">
              <criterion comment="/usr/bin/ppmtopcx is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1650"/>
              <criterion comment="/usr/bin/ppmtopcx is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1649"/>
              <criterion comment="/usr/bin/ppmtopcx is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1648"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtopgm is executable">
              <criterion comment="/usr/bin/ppmtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1647"/>
              <criterion comment="/usr/bin/ppmtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1646"/>
              <criterion comment="/usr/bin/ppmtopgm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1645"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ppmtopi1 is executable">
              <criterion comment="/usr/bin/ppmtopi1 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1644"/>
              <criterion comment="/usr/bin/ppmtopi1 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1643"/>
              <criterion comment="/usr/bin/ppmtopi1 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1642"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:803" version="4" class="vulnerability">
      <metadata>
        <title>RedHat Code Execution and DoS Vulnerabilities in PWLib</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>PWLib</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0097" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0097"/>
        <description>Multiple vulnerabilities in PWLib before 1.6.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Added a program_name element to rlt-217">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:57.185-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:40.547-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.033-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:59:24.750-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:37.420-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="pwlib version is less than 1.4.7-4.1" negate="false" test_ref="oval:org.mitre.oval:tst:2321"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="a program is listening on TCP or UDP port 1720" negate="false" test_ref="oval:org.mitre.oval:tst:2320"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:802" version="1" class="vulnerability">
      <metadata>
        <title>Windows Server 2003 WINS Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Windows Internet Naming Service (WINS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0825" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0825"/>
        <description>The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets, which allows attackers to cause a denial of service and possibly execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-02-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
          <criterion comment="the version of wins.exe is less than 5.2.3790.99" negate="false" test_ref="oval:org.mitre.oval:tst:2322"/>
          <criterion comment="the patch kb830352 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2406"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="the wins service is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2405"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:80" version="3" class="vulnerability">
      <metadata>
        <title>Solaris 7 CDE ToolTalk Database Symbolic Link Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>Common Desktop Environment</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0678" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0678"/>
        <description>CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-01-29T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified comment="fixed the service_name entity used in the inetd_object" date="2007-04-10T15:17:00.627-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-04-10T15:17:28.768-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:40.359-04:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:53.319-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:37.114-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="File rpc.ttdbserverd exists" negate="false" test_ref="oval:org.mitre.oval:tst:3105"/>
          <criterion comment="Patch 107893-19 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:2969"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="inetd.conf contains rpc.ttdbserverd" negate="false" test_ref="oval:org.mitre.oval:tst:3103"/>
          <criterion comment="inetd running" negate="false" test_ref="oval:org.mitre.oval:tst:3135"/>
          <criteria operator="OR" comment="File rpc.ttdbserverd executable">
            <criterion comment="File rpc.ttdbserverd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3102"/>
            <criterion comment="File rpc.ttdbserverd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3101"/>
            <criterion comment="File rpc.ttdbserverd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3100"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:799" version="1" class="vulnerability">
      <metadata>
        <title>Windows Server 2003 ASN.1 Library Integer Overflow Vulnerabilities</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft ASN.1 Library</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0818" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0818"/>
        <description>Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attackers to execute arbitrary code via ASN.1 BER encodings with (1) very large length fields that cause arbitrary heap data to be overwritten, or (2) modified bit strings.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-02-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="the version of msasn1.dll is less than 5.2.3790.88" negate="false" test_ref="oval:org.mitre.oval:tst:2325"/>
        <criterion comment="the patch kb828028 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2468"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:795" version="7" class="vulnerability" deprecated="true">
      <metadata>
        <title>DEPRECATED: Windows Script Engine Heap Overflow (Test 3)</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Windows Script Engine for JScript v5.5</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0010" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0010"/>
        <description>Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript (JScript.dll) on various Windows operating system allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail that uses a large array index value that enables a heap-based buffer overflow attack.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-03T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2004-08-24T11:01:00.000-04:00" comment="Added patch information to definition">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2004-08-26T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-07-03T12:56:00.000-04:00" comment="Added negate=true attribute to criteria sub-block to fix conversion error from OVAL 4.2 to OVAL 5.0">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-07-03T12:56:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:38.925-04:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:13.852-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:28.063-04:00">ACCEPTED</status_change>
            <modified comment="Use def:134 instead, which covers all appropriate versions of windows and uses the file test" date="2011-01-20T10:36:25.174-05:00">
              <contributor organization="The MITRE Corporation">Nate Przybyszewski</contributor>
            </modified>
            <status_change date="2011-01-20T10:36:25.174-05:00">DEPRECATED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="the version of jscript.dll is less than 5.5.0.8513" negate="false" test_ref="oval:org.mitre.oval:tst:2906"/>
          <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed" negate="true">
            <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
            <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3084"/>
          </criteria>
          <criterion comment="the patch js56nen.exe (5.5.0.8513 version) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2902"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="active scripting is enabled">
            <criteria operator="AND" comment="current user settings are being used and active scripting is enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and active scripting is enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:794" version="7" class="vulnerability" deprecated="true">
      <metadata>
        <title>DEPRECATED: Windows Script Engine Heap Overflow (Test 2)</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Windows Script Engine for JScript v5.1</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0010" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0010"/>
        <description>Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript (JScript.dll) on various Windows operating system allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail that uses a large array index value that enables a heap-based buffer overflow attack.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-03T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2004-08-24T11:02:00.000-04:00" comment="Added patch information to definition">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2004-08-26T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-07-03T12:56:00.000-04:00" comment="Added negate=true attribute to criteria sub-block to fix conversion error from OVAL 4.2 to OVAL 5.0">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-07-03T12:56:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:53.836-04:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:14.535-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:27.797-04:00">ACCEPTED</status_change>
            <modified comment="Use def:134 instead, which covers all appropriate versions of windows and uses the file test" date="2011-01-20T10:35:34.539-05:00">
              <contributor organization="The MITRE Corporation">Nate Przybyszewski</contributor>
            </modified>
            <status_change date="2011-01-20T10:35:34.539-05:00">DEPRECATED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="the version of jscript.dll is less than 5.1.0.8513" negate="false" test_ref="oval:org.mitre.oval:tst:2907"/>
          <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed" negate="true">
            <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
            <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3084"/>
          </criteria>
          <criterion comment="the patch js56nen.exe (5.1.0.8513 version) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2903"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="active scripting is enabled">
            <criteria operator="AND" comment="current user settings are being used and active scripting is enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and active scripting is enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:793" version="3" class="vulnerability">
      <metadata>
        <title>IE6:XP,SP2 Java Proxy COM Object Instantiation Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2087"/>
        <description>Internet Explorer 5.01 SP4 up to 6 on various Windows operating systems, including IE 6.0.2900.2180 on Windows XP, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not ActiveX controls, as demonstrated using the JVIEW Profiler (Javaprxy.dll).  NOTE: the researcher says that the vendor could not reproduce this problem.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-12-26T09:36:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-01-04T08:04:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-01-25T07:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:45.183-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:27.734-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Internet Explorer 6.0 Installed XP SP2" negate="false" test_ref="oval:org.mitre.oval:tst:2403"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.2900.2722" negate="false" test_ref="oval:org.mitre.oval:tst:2331"/>
        <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
          <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
            <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
            <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
            <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
          </criteria>
          <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
            <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
            <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
            <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:7906" version="5" class="vulnerability">
      <metadata>
        <title>IE v6.0 Similar Method Name Redirection Cross Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0727" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0727"/>
        <description>Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name, as demonstrated by SimilarMethodNameRedir, aka the "Similar Method Name Redirection Cross Domain Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-19T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-20T04:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T05:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T05:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="Changed IE registry test to wrt-18">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:491: Removed HKEY_LOCAL_MACHINE\ from the key, as it's specified as the hive.  Implemented by Harvey Rubinovitz." date="2007-01-22T00:36:00.756-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T00:37:48.866-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:59.465-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:38.920-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:27.521-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="the version of mshtml.dll is less than 6.0.2745.2800" negate="false" test_ref="oval:org.mitre.oval:tst:590"/>
          <criterion comment="the patch kb834707 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:589"/>
          <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:79" version="3" class="vulnerability">
      <metadata>
        <title>Solaris 8 RWall Daemon Syslog Format String Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>rpc.rwalld</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0573" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0573"/>
        <description>Format string vulnerability in RPC wall daemon (rpc.rwalld) for Solaris 2.5.1 through 8 allows remote attackers to execute arbitrary code via format strings in a message that is not properly provided to the syslog function when the wall command cannot be executed.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-01-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified comment="fixed the service_name entity used in the inetd_object" date="2007-04-10T15:16:00.472-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-04-10T15:17:04.742-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:40.174-04:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:54.569-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:36.762-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="File rpc.rwalld exists" negate="false" test_ref="oval:org.mitre.oval:tst:3032"/>
          <criterion comment="Patch 112846-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:2970"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="inetd.conf contains rpc.rwalld" negate="false" test_ref="oval:org.mitre.oval:tst:3030"/>
          <criterion comment="inetd running" negate="false" test_ref="oval:org.mitre.oval:tst:3135"/>
          <criteria operator="OR" comment="File rpc.rwalld executable">
            <criterion comment="File rpc.rwalld executable" negate="false" test_ref="oval:org.mitre.oval:tst:3029"/>
            <criterion comment="File rpc.rwalld executable" negate="false" test_ref="oval:org.mitre.oval:tst:3028"/>
            <criterion comment="File rpc.rwalld executable" negate="false" test_ref="oval:org.mitre.oval:tst:3027"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:789" version="5" class="vulnerability">
      <metadata>
        <title>URL Parsing Memory Corruption Vulnerability (IE6,SP1)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0554" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0554"/>
        <description>Buffer overflow in the URL processor of Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL with a long hostname, aka "URL Parsing Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-05-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-05-11T05:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-22T12:38:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-06-23T12:49:00.000-04:00" comment="modified obj:1340 - Set xsi:nil to true on the name entity as we are only concerned with the existance of the key itself.">
              <contributor organization="Centennial Software">Jason Spashett</contributor>
            </modified>
            <status_change date="2006-06-23T12:49:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:38.339-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:46:03.185-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:58.863-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:43.183-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:27.309-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
          <criteria operator="OR" comment="a vulnerable version of mshtml.dll exisits GDR/QFE">
            <criterion comment="machine has followed the GDR update path and mshtml.dll is less than 6.0.2800.1498" negate="false" test_ref="oval:org.mitre.oval:tst:2338"/>
            <criterion comment="machine has followed the QFE update path and mshtml.dll is less than 6.0.2800.1499" negate="false" test_ref="oval:org.mitre.oval:tst:2337"/>
          </criteria>
          <criterion comment="the patch kb890923 is installed (XP Win2K Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2336"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:7865" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP3 Install Engine Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0216" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0216"/>
        <description>Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious website or HTML email with a long .CAB file name, which triggers the integer overflow when calculating a buffer length and leads to a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-25T04:20:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-27T01:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-17T10:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2824. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:48:00.494-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:52:29.108-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:58.563-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:47.566-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:27.240-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3015"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3821.2800" negate="false" test_ref="oval:org.mitre.oval:tst:625"/>
          <criterion comment="the patch kb834707-ie501sp3 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:624"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:784" version="3" class="vulnerability">
      <metadata>
        <title>Windows 2000 Telnet Environment Disclosure Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Services for UNIX</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1205" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1205"/>
        <description>The Telnet client for Microsoft Windows XP, Windows Server 2003, and Windows Services for UNIX allows remote attackers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-06-22T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </submitted>
            <status_change date="2005-06-22T12:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:784 - Spelling mistakes fixed in def:784 and several author guide fixes." date="2011-05-02T19:05:00.614-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-02T19:05:59.269-04:00">INTERIM</status_change>
            <status_change date="2011-05-23T04:00:20.495-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion negate="true" comment="the patch KB896428 for Services for UNIX is installed" test_ref="oval:org.mitre.oval:tst:2351"/>
        <criteria operator="OR" comment="Services for UNIX is installed and a vulnerable version of telnet.exe exists">
          <criteria operator="AND" comment="Services for UNIX version 2.2 and telnet.exe version less than 5.3000.2073.13">
            <criterion comment="the version of telnet.exe is less than 5.3000.2073.13" test_ref="oval:org.mitre.oval:tst:2350"/>
            <criterion comment="the software Services for UNIX is installed and the version is 2.2" test_ref="oval:org.mitre.oval:tst:2349"/>
          </criteria>
          <criteria operator="AND" comment="Services for UNIX version 3.0 and telnet.exe version less than 7.0.1701.44">
            <criterion comment="the software Services for UNIX is installed and the version is 3.0" test_ref="oval:org.mitre.oval:tst:2348"/>
            <criterion comment="the version of telnet.exe is less than 7.0.1701.44" test_ref="oval:org.mitre.oval:tst:2347"/>
          </criteria>
          <criteria operator="AND" comment="Services for UNIX version 3.5 and telnet.exe version less than 8.0.1969.33">
            <criterion comment="the software Services for UNIX is installed and the version is 3.5" test_ref="oval:org.mitre.oval:tst:2346"/>
            <criterion comment="the version of telnet.exe is less than 8.0.1969.33" test_ref="oval:org.mitre.oval:tst:2345"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:783" version="6" class="vulnerability">
      <metadata>
        <title>Windows Server 2003 Plug and Play Buffer Overflow Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1983" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1983"/>
        <description>Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob (aka Mytob) worm.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:40:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:53.701-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:16:00.880-04:00">ACCEPTED</status_change>
            <modified comment="Corrected tst:3429. Removed reference to ste:3948. Deprecated ste:3948" date="2007-02-12T10:38:00.383-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T10:40:21.525-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:27.634-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:783 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:28.835-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:29.142-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:4033"/>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:3429"/>
        <criterion comment="the version of umpnpmgr.dll is less than 5.2.3790.360" test_ref="oval:org.mitre.oval:tst:3457"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:781" version="1" class="vulnerability">
      <metadata>
        <title>RHE3 InstallVersion.compareTo() DoS and Code Execution Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2265"/>
        <description>Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of service (access violation and crash), and possibly execute arbitrary code, by calling InstallVersion.compareTo with an object instead of a string.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-15T04:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-08-19T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2483"/>
          <criterion comment="mozilla RPM is earlier than 37:1.7.10-1.1.3.1" negate="false" test_ref="oval:org.mitre.oval:tst:2482"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/mozilla is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2650"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:78" version="7" class="vulnerability">
      <metadata>
        <title>Windows 2000 IIS Directory Traversal Command Execution (Test 1)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0333" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0333"/>
        <description>Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and "\" characters twice.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified date="2004-08-04T12:00:00.000-04:00" comment="Modifed without comment">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </modified>
            <status_change date="2004-08-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2004-08-26T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2884" date="2010-11-29T16:14:00.692-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:39.710-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:01:33.655-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:53.110-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:27.809-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="IIS major version equals 5" negate="false" test_ref="oval:org.mitre.oval:tst:3081"/>
        <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
        <criterion comment="File %windir%\system32\inetsrv\ism.dll version is less than 5.0.2195.3407" negate="false" test_ref="oval:org.mitre.oval:tst:2971"/>
        <criterion comment="Patch Q293826 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3020"/>
        <criterion comment="Patch Q301625 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3037"/>
        <criterion comment="Patch Q319733 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3095"/>
        <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
        <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
        <criterion comment="Windows 2000 Security Roll-up 1 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2990"/>
        <criterion comment="Win2K/XP/2003 service pack 3 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:3079"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:779" version="7" class="vulnerability">
      <metadata>
        <title>Windows XP Kernel Debugger-based Buffer Overflow (Test 2)</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Windows kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0112"/>
        <description>Buffer overflow in Windows Kernel allows local users to gain privileges by causing certain error messages to be passed to a debugger.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-11-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2005-01-12T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-02T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-23T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-06-02T12:00:00.000-04:00" comment="Added product">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-06-08T03:17:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-29T06:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2656" date="2010-11-29T16:12:00.873-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:12:59.912-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:01:33.325-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:11.346-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:27.460-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="the patch Q811493 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2885"/>
        <criteria operator="AND" comment="Windows XP (sp1 or earlier) is installed">
          <criterion comment="Windows XP is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2838"/>
          <criterion comment="Win2K/XP/2003 service pack 2 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2837"/>
        </criteria>
        <criterion comment="the patch KB840987 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2356"/>
        <criterion comment="The version of Ntoskrnl.exe is less than 5.1.2600.160" negate="false" test_ref="oval:org.mitre.oval:tst:2355"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:778" version="7" class="vulnerability">
      <metadata>
        <title>LSASS Privilege Escalation Vulnerability (Windows 2000)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Local Security Authority Subsystem Service (LSASS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0894" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0894"/>
        <description>LSASS (Local Security Authority Subsystem Service) of Windows 2000 Server and Windows Server 2003 does not properly validate connection information, which allows local users to gain privileges via a specially-designed program.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-12-28T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2005-01-12T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-02T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-23T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-06-17T12:00:00.000-04:00" comment="modified cmp-1106 - Replaced the test that checks for the service pack level, instead of checking for sp4 or ealier (did not check for GOLD edition) it is now negating the test that checks for sp5 for later.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2005-06-22T12:35:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected and tightened regular expression in ste:2610" date="2010-12-02T11:46:00.307-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-12-02T11:47:27.629-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:01:32.976-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:10.398-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:27.063-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 (sp4 or earlier) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 5 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2790"/>
        </criteria>
        <criterion comment="the version of lsasrv.dll is less than 5.0.2195.6987" negate="false" test_ref="oval:org.mitre.oval:tst:2357"/>
        <criterion comment="the patch kb885835is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2622"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:777" version="6" class="vulnerability">
      <metadata>
        <title>Windows 2000 CSRSS Privilege Escalation Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Client Server Runtime System (CSRSS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0551" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0551"/>
        <description>Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application that provides console window information with a long FaceName value.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-05-02T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2005-05-04T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2005-06-02T12:00:00.000-04:00" comment="Added product">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2005-06-17T12:00:00.000-04:00" comment="modified cmp-1106 - Replaced the test that checks for the service pack level, instead of checking for sp4 or ealier (did not check for GOLD edition) it is now negating the test that checks for sp5 for later.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2005-07-27T10:37:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected and tightened regular expression in ste:2610" date="2010-12-02T11:46:00.307-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-12-02T11:47:28.052-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:01:32.683-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:14.699-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:26.716-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 (sp4 or earlier) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 5 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2790"/>
        </criteria>
        <criterion comment="The version of Ntoskrnl.exe is less than 5.0.2195.7035" negate="false" test_ref="oval:org.mitre.oval:tst:2358"/>
        <criterion comment="the patch KB890859 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2737"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:776" version="4" class="vulnerability">
      <metadata>
        <title>IE5.01,SP4 File Disclosure via Redirects Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0648" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0648"/>
        <description>The legacy &lt;script> data-island capability for XML in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to read arbitrary XML files, and portions of other files, via a URL whose "src" attribute redirects to a local file.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-06-22T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-06-22T12:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:40.296-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:57.997-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:41.291-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:27.096-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3828.2700" negate="false" test_ref="oval:org.mitre.oval:tst:2359"/>
          <criterion comment="the patch kb883939 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2750"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:774" version="5" class="vulnerability">
      <metadata>
        <title>IE v6.0,SP1 Travel Log Cross Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1026" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1026"/>
        <description>Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the history list and executed in the top window's zone when the history.back (back) function is called, as demonstrated by BackToFramedJpu, aka the "Travel Log Cross Domain Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-02-03T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:52:00.000-04:00" comment="modified wft-94 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:46:07.285-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:57.688-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:41.144-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:27.027-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2800.1400" negate="false" test_ref="oval:org.mitre.oval:tst:2579"/>
          <criterion comment="the patch q832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2588"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:773" version="1" class="vulnerability">
      <metadata>
        <title>RHE3 Mozilla top.focus() Cross-Site Scripting Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2266" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2266"/>
        <description>Firefox before 1.0.5 and Mozilla before 1.7.9 allows a child frame to call top.focus and other methods in a parent frame, even when the parent is in a different domain, which violates the same origin policy and allows remote attackers to steal sensitive information such as cookies and passwords from web sites whose child frames do not verify that they are in the same domain as their parents.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-15T04:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-08-19T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2483"/>
          <criterion comment="mozilla RPM is earlier than 37:1.7.10-1.1.3.1" negate="false" test_ref="oval:org.mitre.oval:tst:2482"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/mozilla is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2650"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:7721" version="5" class="vulnerability">
      <metadata>
        <title>IE v6.0 Drag-and-Drop Code Execution Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0839" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0839"/>
        <description>Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by "wottapoop.html".</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-25T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-27T04:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-17T05:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T05:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="Changed IE registry test to wrt-18">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:491: Removed HKEY_LOCAL_MACHINE\ from the key, as it's specified as the hive.  Implemented by Harvey Rubinovitz." date="2007-01-22T00:36:00.756-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T00:37:49.862-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:57.431-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:33.885-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:26.955-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="the version of mshtml.dll is less than 6.0.2745.2800" negate="false" test_ref="oval:org.mitre.oval:tst:590"/>
          <criterion comment="the patch kb834707 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:589"/>
          <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:772" version="2" class="vulnerability">
      <metadata>
        <title>HP-UX Usermod Local Unauthorized Access Vulnerability instead of usermod Recursive Ownership Error.</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1248"/>
        <description>Unspecified vulnerability in usermod in HP-UX B.11.00, B.11.11, and B.11.23, when run with certain options that involve a new home directory, might cause usermod to change the ownership of all directories and files under the new directory, which might result in less secure permissions than intended.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-03-18T07:24:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-03-22T11:10:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-04-06T06:31:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added CVE reference. Implemented by Jon Baker of The MITRE Corporation." date="2007-03-19T20:27:00.650-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-03-19T20:42:53.692-04:00">INTERIM</status_change>
            <modified comment="Updated definition title. Implemented by Jon Baker of The MITRE Corporation." date="2007-03-19T20:42:00.035-04:00">
              <contributor organization="Security-Database">Nabil Ouchn</contributor>
            </modified>
            <status_change date="2007-04-10T13:44:28.730-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.00">
          <criteria operator="AND" comment="700 Series OS Release 11.00">
            <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
            <criterion comment="HP Release B.11.00" negate="false" test_ref="oval:org.mitre.oval:tst:2512"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 11.00">
            <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
            <criterion comment="HP Release B.11.00" negate="false" test_ref="oval:org.mitre.oval:tst:2512"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:7717" version="5" class="vulnerability">
      <metadata>
        <title>IE v6.0 Install Engine Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0216" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0216"/>
        <description>Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious website or HTML email with a long .CAB file name, which triggers the integer overflow when calculating a buffer length and leads to a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-25T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-27T04:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-17T05:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T05:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="Changed IE registry test to wrt-18">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:491: Removed HKEY_LOCAL_MACHINE\ from the key, as it's specified as the hive.  Implemented by Harvey Rubinovitz." date="2007-01-22T00:36:00.756-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T00:37:49.102-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:57.156-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:36.412-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:26.893-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="the version of mshtml.dll is less than 6.0.2745.2800" negate="false" test_ref="oval:org.mitre.oval:tst:590"/>
          <criterion comment="the patch kb834707 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:589"/>
          <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:770" version="5" class="vulnerability">
      <metadata>
        <title>IE6,SP1 PNG Image Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1211"/>
        <description>Buffer overflow in the PNG image rendering component of Microsoft Internet Explorer allows remote attackers to execute arbitrary code via a crafted PNG file.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-06-22T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-06-22T09:24:00.000-04:00">DRAFT</status_change>
            <modified date="2005-06-24T12:00:00.000-04:00" comment="added description">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-07-27T10:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-10-17T04:13:00.000-04:00" comment="Fixed registry_object obj:1557 by moving PNGFilter.CoPNGFilter from name to end of key, and setting xsi:nil to true on name.  Modified by Harvey Rubinovitz">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2006-10-17T04:13:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-11-14T08:57:58.160-05:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:46:05.785-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:56.830-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:41.083-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:26.832-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
          <criteria operator="OR" comment="the version of mshtml.dll is less than 6.0.2800.1505 or 6.0.2800.1506">
            <criterion comment="the version of mshtml.dll is less than 6.0.2800.1505 (RTMGDR)" negate="false" test_ref="oval:org.mitre.oval:tst:2365"/>
            <criterion comment="the version of mshtml.dll is less than 6.0.2800.1506 (RTMQFE)" negate="false" test_ref="oval:org.mitre.oval:tst:2364"/>
          </criteria>
          <criterion comment="the patch kb883939 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2750"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="PNG image rendering enabled in Internet Explorer" negate="false" test_ref="oval:org.mitre.oval:tst:2749"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:77" version="3" class="vulnerability">
      <metadata>
        <title>IE v5.5 GetObject File Retrieval</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0023" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0023"/>
        <description>Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to read arbitrary files via malformed requests to the GetObject function, which bypass some of GetObject's security checks.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:57.088-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:26.783-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Internet Explorer 5.5 Installed">
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3078"/>
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3077"/>
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3076"/>
        </criteria>
        <criterion comment="the version of mshtml.dll is less than 5.50.4725.2100" negate="false" test_ref="oval:org.mitre.oval:tst:3075"/>
        <criterion comment="the patch q316059 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3121"/>
        <criterion comment="the patch q319282 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3120"/>
        <criterion comment="the patch q321232 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3119"/>
        <criterion comment="the patch q323759 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3118"/>
        <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:765" version="3" class="vulnerability">
      <metadata>
        <title>GNU GZip CHMod File Permission Modification Race ConditionWeakness</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
          <product>gzip</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0988"/>
        <description>Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:52:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:53.441-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:16:00.590-04:00">ACCEPTED</status_change>
            <modified comment="Added title. Implemented by Jon Baker of The MITRE Corporation." date="2007-02-13T14:47:00.641-05:00">
              <contributor organization="Security-Database">Nabil Ouchn</contributor>
            </modified>
            <status_change date="2007-02-13T14:48:04.662-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:27.180-04:00">ACCEPTED</status_change>
            <modified comment="Corrected sparc criterion that was intended to be x86." date="2009-07-17T11:09:00.290-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </modified>
            <status_change date="2009-07-17T11:19:33.298-04:00">INTERIM</status_change>
            <status_change date="2009-08-03T04:00:04.095-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert ID 101816 criteria.">
          <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3437"/>
          <criterion comment="sparc architecture" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criterion comment="Patch 112668-03 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:4005"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert ID 101816 criteria.">
          <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3437"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criterion comment="Patch 112669-03 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:4070"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert ID 101816 criteria.">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3172"/>
          <criterion comment="sparc architecture" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criterion comment="Patch 116340-04 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3666"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert ID 101816 criteria.">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3172"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criterion comment="Patch 116341-04 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3778"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert ID 101816 criteria.">
          <criterion comment="Solaris 10 Installed" test_ref="oval:org.mitre.oval:tst:3680"/>
          <criterion comment="sparc architecture" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criterion comment="Patch 120719-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3295"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert ID 101816 criteria.">
          <criterion comment="Solaris 10 Installed" test_ref="oval:org.mitre.oval:tst:3680"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criterion comment="Patch 120720-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3621"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:762" version="4" class="vulnerability">
      <metadata>
        <title>MS FrontPage Server Extensions SmartHTML Denial of Service (Test 5)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft SharePoint Team Services</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0824" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0824"/>
        <description>Unknown vulnerability in the SmartHTML interpreter (shtml.dll) in Microsoft FrontPage Server Extensions 2000 and 2002, and Microsoft SharePoint Team Services 2002, allows remote attackers to cause a denial of service (response failure) via a certain request.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-12-09T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-14T12:00:00.000-04:00" comment="Changed the definition to look at the file shtml.dll instead of fp5awel.dll.  It was determined that this is where the vulnerability (a buffer overflow) actually existed.  Also added the configuration test saying you are vulnerable if the SmartHTML interpreter is enabled.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2004-09-14T09:53:00.000-04:00" comment="XP SP2 added">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2004-09-15T12:00:00.000-04:00">INTERIM</status_change>
            <modified comment="Corrected to use a forward slash as the separator in the key." date="2007-05-07T15:59:00.964-04:00">
              <contributor organization="Secure Elements, Inc.">Glenn Strickland</contributor>
            </modified>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2656" date="2010-11-29T16:12:00.873-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
          </dates>
          <status>INTERIM</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Software section">
          <criteria operator="OR" comment="Windows 2000, XP, or 2003 is installed">
            <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
            <criterion comment="Windows XP is installed" test_ref="oval:org.mitre.oval:tst:2838"/>
            <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
          </criteria>
          <criterion comment="a vulnerable version of shtml.dll exists (FPSE 2002 or SPTS 2003)" test_ref="oval:org.mitre.oval:tst:2490"/>
          <criterion negate="true" comment="Win2K/XP/2003 service pack 2 (or later) is installed" test_ref="oval:org.mitre.oval:tst:2837"/>
        </criteria>
        <criteria operator="AND" comment="Configuration section">
          <criterion comment="SharePoint Team Services are enabled (2K, XP, 2003)" test_ref="oval:org.mitre.oval:tst:2379"/>
          <criterion comment="SmartHTML interpreter is enabled" test_ref="oval:org.mitre.oval:tst:2705"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:7611" version="6" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP3 SSL Cached Content Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0845" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0845"/>
        <description>Internet Explorer 5.01, 5.5, and 6 does not properly cache SSL content, which allows remote attackers to obtain information or spoof content via a web site with the same host name as the target web site, whose content is cached and reused when the user visits the target web site.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-26T02:09:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-27T01:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-17T10:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-06-23T12:49:00.000-04:00" comment="modified obj:490 - Chagned the pattern match operation to equals since there was no need for a regular expression.">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-06-23T11:35:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:37.703-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2824. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:48:00.494-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:52:26.101-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:56.374-05:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.853-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:53:30.999-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:21.209-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:36.228-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:26.721-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3015"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3821.2800" negate="false" test_ref="oval:org.mitre.oval:tst:625"/>
          <criterion comment="the patch kb834707-ie501sp3 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:624"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="Users not saving encrypted pages to disk  (DisableCachingOfSSLPages)" negate="false" test_ref="oval:org.mitre.oval:tst:588"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:760" version="1" class="vulnerability">
      <metadata>
        <title>Apache HTTP Byte-range DoS Vulnerability</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2728" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2728"/>
        <description>The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-11-30T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-12-20T11:03:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-01-04T08:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-01-25T07:30:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.00, 11.11, or 11.23">
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.11">
            <criteria operator="AND" comment="700 Series OS Release 11.11">
              <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
              <criterion comment="HP Release B.11.11" negate="false" test_ref="oval:org.mitre.oval:tst:2514"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.11">
              <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
              <criterion comment="HP Release B.11.11" negate="false" test_ref="oval:org.mitre.oval:tst:2514"/>
            </criteria>
          </criteria>
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.00">
            <criteria operator="AND" comment="700 Series OS Release 11.00">
              <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
              <criterion comment="HP Release B.11.00" negate="false" test_ref="oval:org.mitre.oval:tst:2512"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.00">
              <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
              <criterion comment="HP Release B.11.00" negate="false" test_ref="oval:org.mitre.oval:tst:2512"/>
            </criteria>
          </criteria>
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.23">
            <criteria operator="AND" comment="700 Series OS Release 11.23">
              <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
              <criterion comment="HP Release B.11.23" negate="false" test_ref="oval:org.mitre.oval:tst:2511"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.23">
              <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
              <criterion comment="HP Release B.11.23" negate="false" test_ref="oval:org.mitre.oval:tst:2511"/>
            </criteria>
          </criteria>
        </criteria>
        <criterion comment="hpuxwsAPACHE is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2388"/>
        <criterion comment="hpuxwsAPACHE has a version greater than or equal (A|B).2.0.55.0" negate="true" test_ref="oval:org.mitre.oval:tst:2387"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:76" version="6" class="vulnerability">
      <metadata>
        <title>Windows 2000 Process Handle Duplication Privilege Escalation</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0367" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0367"/>
        <description>smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-04-04T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2884" date="2010-11-29T16:14:00.692-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:39.349-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:01:32.417-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:51.849-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:26.169-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="File %windir%\system32\smss.exe version is less than 5.0.2195.5695" negate="false" test_ref="oval:org.mitre.oval:tst:2973"/>
        <criterion comment="Patch Q320206 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2972"/>
        <criterion comment="Win2K/XP/2003 service pack 3 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:3079"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:759" version="5" class="vulnerability">
      <metadata>
        <title>RHE4 Firefox and Mozilla Framed Site Spoofing Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1937" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1937"/>
        <description>A regression error in Firefox 1.0.3 and Mozilla 1.7.7 allows remote attackers to inject arbitrary Javascript from one page into the frameset of another site, aka the frame injection spoofing vulnerability, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2004-0718.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-15T04:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-08-19T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11366 - Updated CPE reference, updated regular expression" date="2011-02-17T13:29:00.547-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2011-02-17T13:31:08.961-05:00">INTERIM</status_change>
            <status_change date="2011-03-07T04:00:15.412-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11366 - Corrected - right version for brlapi and brlapi-devel as specified by RHSA-2010:0181-5" date="2013-03-18T12:26:00.995-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-03-18T12:31:12.572-04:00">INTERIM</status_change>
            <status_change date="2013-04-08T04:00:48.883-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2652"/>
          <criterion comment="mozilla RPM is earlier than 37:1.7.10-1.4.1" negate="false" test_ref="oval:org.mitre.oval:tst:2651"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/mozilla is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2650"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:755" version="2" class="vulnerability">
      <metadata>
        <title>Sun Java System Access Manager Local Authentication Bypass Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
          <platform>Sun Solaris 9</platform>
          <product>Access Manager</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0531" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0531"/>
        <description>Unspecified vulnerability in Sun Java System Access Manager 7.0 allows local users logged in as "root" to bypass authentication and gain top-level administrator privileges via the amadmin CLI tool.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:52:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:53.102-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:16:00.406-04:00">ACCEPTED</status_change>
            <modified comment="Added title. Implemented by Jon Baker of The MITRE Corporation." date="2007-02-13T14:52:00.016-05:00">
              <contributor organization="Security-Database">Nabil Ouchn</contributor>
            </modified>
            <status_change date="2007-02-13T14:53:06.046-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:26.994-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="x86" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
        <criterion comment="Sun Java System Access Manager 7 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3551"/>
        <criterion comment="Patch 120955-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3363"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:751" version="2" class="vulnerability">
      <metadata>
        <title>Microsoft Data Access Components 2.7 Broadcast Response Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Data Access Components 2.7</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0903" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0903"/>
        <description>Buffer overflow in a component of Microsoft Data Access Components (MDAC) 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.717-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:57:27.527-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:20.986-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Microsoft Data Access Components 2.7 is installed and a vulnerable version of sqlsrv32.dll and odbcbcp.dll exists">
          <criteria operator="AND" comment="Microsoft Data Access Components 2.7 (RTM) is installed and both sqlsrv32.dll and odbcbcp.dll are less than 2000.81.9002.0">
            <criterion comment="Microsoft Data Access Components 2.7 (RTM) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2590"/>
            <criterion comment="the version of sqlsrv32.dll is less than 2000.81.9002.0" negate="false" test_ref="oval:org.mitre.oval:tst:2384"/>
            <criterion comment="the version of odbcbcp.dll is less than 2000.81.9002.0" negate="false" test_ref="oval:org.mitre.oval:tst:2383"/>
          </criteria>
          <criteria operator="AND" comment="Microsoft Data Access Components 2.7 (SP1) is installed and both sqlsrv32.dll and odbcbcp.dll are less than 2000.81.9042.0">
            <criterion comment="Microsoft Data Access Components 2.7 (SP1) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2382"/>
            <criterion comment="the version of sqlsrv32.dll is less than 2000.81.9042.0" negate="false" test_ref="oval:org.mitre.oval:tst:2381"/>
            <criterion comment="the version of odbcbcp.dll is less than 2000.81.9042.0" negate="false" test_ref="oval:org.mitre.oval:tst:2380"/>
          </criteria>
        </criteria>
        <criterion comment="the patch q832483 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2573"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:75" version="2" class="vulnerability">
      <metadata>
        <title>Ethereal 0.9.12 Vulnerability in DCERPC Dissector</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Ethereal</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0428" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0428"/>
        <description>Unknown vulnerability in the DCERPC (DCE/RPC) dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service (memory consumption) via a certain NDR string.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-29T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:25.279-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:39.950-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criteria operator="OR" comment="Vulnerable Config">
          <criterion comment="ethereal version is less than 0.9.13-1.90.1" negate="false" test_ref="oval:org.mitre.oval:tst:2985"/>
          <criterion comment="ethereal-gnome version is less than 0.9.13-1.90.1" negate="false" test_ref="oval:org.mitre.oval:tst:2984"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:7496" version="4" class="vulnerability">
      <metadata>
        <title>IE v6.0,SP2 for Server 2003 Similar Method Name Redirection Cross Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0727" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0727"/>
        <description>Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name, as demonstrated by SimilarMethodNameRedir, aka the "Similar Method Name Redirection Cross Domain Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-19T07:40:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-20T02:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:267. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T20:19:00.959-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T20:19:46.066-05:00">INTERIM</status_change>
            <modified comment="Fixed obj:246: Removed HKEY_LOCAL_MACHINE\ from the key, as it's specified as the hive.  Implemented by Harvey Rubinovitz." date="2007-01-22T00:36:00.713-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-02-20T13:40:55.564-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:51.067-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:26.550-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 Service Pack 2 for XP is installed" negate="false" test_ref="oval:org.mitre.oval:tst:269"/>
          <criteria operator="OR" comment="a vulnerable version of mshtml.dll exisits">
            <criterion comment="machine has followed the GDR update path and mshtml.dll is less than  6.0.2900.2523" negate="false" test_ref="oval:org.mitre.oval:tst:268"/>
            <criterion comment="machine has followed the QFE update path and mshtml.dll is less than  6.0.2900.2524" negate="false" test_ref="oval:org.mitre.oval:tst:267"/>
          </criteria>
          <criterion comment="the patch kb834707  is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:266"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:749" version="1" class="vulnerability">
      <metadata>
        <title>bzip2 Decompression Bomb</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>bzip2</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1260"/>
        <description>bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes an infinite loop (a.k.a "decompression bomb").</description>
        <oval_repository>
          <dates>
            <submitted date="2005-07-11T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-07-27T10:36:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="bzip2 RPM earlier than 0:1.0.2-11.EL3.4" negate="false" test_ref="oval:org.mitre.oval:tst:2386"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/bzip2 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2385"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:745" version="4" class="vulnerability">
      <metadata>
        <title>IE v6.0 (XP) Travel Log Cross Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1026" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1026"/>
        <description>Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the history list and executed in the top window's zone when the history.back (back) function is called, as demonstrated by BackToFramedJpu, aka the "Travel Log Cross Domain Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-02-03T05:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-03-04T05:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T05:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T05:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="modified wrt-18 - Changed value element to include pattern match">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <modified date="2005-09-26T12:51:00.000-04:00" comment="modified wft-93 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:52.148-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:26.483-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2737.800" negate="false" test_ref="oval:org.mitre.oval:tst:2580"/>
          <criterion comment="the patch q832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2588"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:7448" version="6" class="vulnerability">
      <metadata>
        <title>IE v5.5,SP2 Similar Method Name Redirection Cross Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0727" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0727"/>
        <description>Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name, as demonstrated by SimilarMethodNameRedir, aka the "Similar Method Name Redirection Cross Domain Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-19T07:31:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-20T02:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:42:00.000-04:00" comment="modified wft-562 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-14T11:27:00.000-04:00" comment="Fixed CVE reference; was CVE-2003-0727 because of a typo.  Now correctly refers to CVE-2004-0727.  Change was implemented by Matthew Wojcik.">
              <contributor organization="MessageLabs">Andrew Simmons</contributor>
            </modified>
            <status_change date="2005-12-16T12:49:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-01-04T08:04:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added platforms based on MS Bulletin information." date="2008-06-27T09:26:00.268-04:00">
              <contributor organization="Hewlett-Packard">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2008-06-27T09:44:31.282-04:00">INTERIM</status_change>
            <status_change date="2008-07-14T04:00:23.150-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:59.188-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:26.407-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
          <criterion comment="the version of mshtml.dll is less than 5.50.4945.2800" negate="false" test_ref="oval:org.mitre.oval:tst:384"/>
          <criterion comment="the patch kb834707 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:855"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:744" version="1" class="vulnerability">
      <metadata>
        <title>Gaim DoS via Yahoo! Message</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>Gaim</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1269" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1269"/>
        <description>Gaim before 1.3.1 allows remote attackers to cause a denial of service (application crash) via a Yahoo! message with non-ASCII characters in a file name.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-07-11T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-07-27T10:36:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="gaim RPM earlier than 1:1.3.1-0.el3" negate="false" test_ref="oval:org.mitre.oval:tst:2740"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/gaim is executable by any user" negate="false" test_ref="oval:org.mitre.oval:tst:2739"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:743" version="6" class="vulnerability">
      <metadata>
        <title>MS FrontPage Server Extensions Chunked Encoded Request Buffer Overflow (Test 5)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft FrontPage Server Extensions 2000</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0822" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0822"/>
        <description>Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-03-04T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified date="2003-03-05T12:00:00.000-04:00" comment="Changed the definition to test for fp30reg.dll and fp4areg.dll instead of fp4awel.dll.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T10:50:00.000-04:00" comment="modified wft-114 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2005-09-27T01:22:00.000-04:00" comment="modified wft-31 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:14.792-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:26.161-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:41.402-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:25.346-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="AND" comment="Windows 2000 (sp3 or earlier) is installed">
            <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
            <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:3084"/>
          </criteria>
          <criteria operator="OR" comment="a vulnerable version of fp30reg.dll or fp4areg.dll exists">
            <criterion comment="the version of fp4areg.dll is less than 4.0.02.7523" negate="false" test_ref="oval:org.mitre.oval:tst:2681"/>
            <criterion comment="the version of fp30reg.dll is less than 4.00.02.7523" negate="false" test_ref="oval:org.mitre.oval:tst:2680"/>
          </criteria>
          <criterion comment="the patch q810217 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2707"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="FrontPage Server Extensions 2000 are enabled (2K, XP)" negate="false" test_ref="oval:org.mitre.oval:tst:2706"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:742" version="1" class="vulnerability">
      <metadata>
        <title>RHE3 Improper Handling of Synthetic Events in Mozilla</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2260"/>
        <description>The browser user interface in Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 does not properly distinguish between user-generated events and untrusted synthetic events, which makes it easier for remote attackers to perform dangerous actions that normally could only be performed manually by the user.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-15T04:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-08-19T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2483"/>
          <criterion comment="mozilla RPM is earlier than 37:1.7.10-1.1.3.1" negate="false" test_ref="oval:org.mitre.oval:tst:2482"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/mozilla is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2650"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:74" version="3" class="vulnerability">
      <metadata>
        <title>Solaris 7 CDE dtspcd Buffer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>dtspcd</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0803" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0803"/>
        <description>Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands.</description>
        <oval_repository>
          <dates>
            <submitted date="2002-10-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified comment="fixed the service_name entity used in the inetd_object" date="2007-04-10T15:14:00.836-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-04-10T15:14:25.949-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:39.778-04:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:54.018-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:35.977-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="File dtspcd exists" negate="false" test_ref="oval:org.mitre.oval:tst:2983"/>
          <criterion comment="Patch 106934-04 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:2974"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="inetd.conf contains dtspcd" negate="false" test_ref="oval:org.mitre.oval:tst:2981"/>
          <criterion comment="inetd running" negate="false" test_ref="oval:org.mitre.oval:tst:3135"/>
          <criteria operator="OR" comment="File dtspcd executable">
            <criterion comment="File dtspcd executable" negate="false" test_ref="oval:org.mitre.oval:tst:2980"/>
            <criterion comment="File dtspcd executable" negate="false" test_ref="oval:org.mitre.oval:tst:2979"/>
            <criterion comment="File dtspcd executable" negate="false" test_ref="oval:org.mitre.oval:tst:2978"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:736" version="2" class="vulnerability">
      <metadata>
        <title>MIT Kerberos 5 Key Distribution Center Remote Denial of Service Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
          <product>Kerberos</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1175" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1175"/>
        <description>Heap-based buffer overflow in the Key Distribution Center (KDC) in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to cause a denial of service (apllication crash) and possibly execute arbitrary code via a certain valid TCP or UDP request.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:52:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:52.863-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:16:00.079-04:00">ACCEPTED</status_change>
            <modified comment="Added title. Implemented by Jon Baker of The MITRE Corporation." date="2007-02-13T14:02:00.285-05:00">
              <contributor organization="Security-Database">Nabil Ouchn</contributor>
            </modified>
            <status_change date="2007-02-13T14:04:28.310-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:25.886-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Solaris 7 (SPARC) meets Sun Alert ID 101809 criteria." negate="false">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3576"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criterion comment="Patch 112536-06 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3209"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 7 (x86) meets Sun Alert ID 101809 criteria." negate="false">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3576"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criterion comment="Patch 112537-06 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3424"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert ID 101809 criteria." negate="false">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3437"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criterion comment="Patch 112237-13 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3567"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert ID 101809 criteria." negate="false">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3437"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criterion comment="Patch 112238-12 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3898"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (SPARC) with Supplmental Encryption Packages meets Sun Alert ID 101809 criteria." negate="false">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3437"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criteria operator="OR" comment="Solaris Supplemental Encryption Packages are installed" negate="false">
            <criterion comment="Pkg SUNWcry (Supplemental Encryption) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3198"/>
            <criterion comment="Pkg SUNWcryr (Supplemental Encryption) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3694"/>
          </criteria>
          <criterion comment="Patch 112390-11 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3640"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) with Supplmental Encryption Packages meets Sun Alert ID 101809 criteria." negate="false">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3437"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criteria operator="OR" comment="Solaris Supplemental Encryption Packages are installed" negate="false">
            <criterion comment="Pkg SUNWcry (Supplemental Encryption) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3198"/>
            <criterion comment="Pkg SUNWcryr (Supplemental Encryption) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3694"/>
          </criteria>
          <criterion comment="Patch 112240-10 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3497"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert ID 101809 criteria." negate="false">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3172"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criterion comment="Patch 112908-20 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3389"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert ID 101809 criteria." negate="false">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3172"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criterion comment="Patch 115168-08 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3624"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert ID 101809 criteria." negate="false">
          <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3680"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criterion comment="Patch 120469-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3561"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert ID 101809 criteria." negate="false">
          <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3680"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criterion comment="Patch 120470-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3418"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:735" version="1" class="vulnerability">
      <metadata>
        <title>Apache Integer Overflow in pcre_compile.c</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2491" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2491"/>
        <description>Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-11-30T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-12-20T11:03:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-01-04T08:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-01-25T07:30:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.00, 11.11, or 11.23">
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.11">
            <criteria operator="AND" comment="700 Series OS Release 11.11">
              <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
              <criterion comment="HP Release B.11.11" negate="false" test_ref="oval:org.mitre.oval:tst:2514"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.11">
              <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
              <criterion comment="HP Release B.11.11" negate="false" test_ref="oval:org.mitre.oval:tst:2514"/>
            </criteria>
          </criteria>
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.00">
            <criteria operator="AND" comment="700 Series OS Release 11.00">
              <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
              <criterion comment="HP Release B.11.00" negate="false" test_ref="oval:org.mitre.oval:tst:2512"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.00">
              <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
              <criterion comment="HP Release B.11.00" negate="false" test_ref="oval:org.mitre.oval:tst:2512"/>
            </criteria>
          </criteria>
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.23">
            <criteria operator="AND" comment="700 Series OS Release 11.23">
              <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
              <criterion comment="HP Release B.11.23" negate="false" test_ref="oval:org.mitre.oval:tst:2511"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.23">
              <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
              <criterion comment="HP Release B.11.23" negate="false" test_ref="oval:org.mitre.oval:tst:2511"/>
            </criteria>
          </criteria>
        </criteria>
        <criterion comment="hpuxwsAPACHE is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2388"/>
        <criterion comment="hpuxwsAPACHE has a version greater than or equal (A|B).2.0.55.0" negate="true" test_ref="oval:org.mitre.oval:tst:2387"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:733" version="4" class="vulnerability">
      <metadata>
        <title>IE v6.0 (XP) HijackClick Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0823" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0823"/>
        <description>Internet Explorer 6 SP1 and earlier allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by calling the window.moveBy method, aka HijackClick, a different vulnerability than CVE-2003-1027.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-12-18T05:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified date="2004-01-21T05:00:00.000-04:00" comment="Removed the test for Windows XP.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 6 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T05:00:00.000-04:00" comment="Removed the IE 6 SP 1 part of this definition as the SP 1 part is defined in a different OVAL.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T05:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T05:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="modified wrt-18 - Changed value element to include pattern match">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:48.873-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:26.241-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2734.1600" negate="false" test_ref="oval:org.mitre.oval:tst:2663"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:73" version="2" class="vulnerability">
      <metadata>
        <title>Integer Overflow Vulnerabilities in Ethereal 0.9.11</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Ethereal</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0357" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0357"/>
        <description>Multiple integer overflow vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) Mount and (2) PPP dissectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-29T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:55.945-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:39.569-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criteria operator="OR" comment="Vulnerable Config">
          <criterion comment="ethereal version is less than 0.9.13-1.90.1" negate="false" test_ref="oval:org.mitre.oval:tst:2985"/>
          <criterion comment="ethereal-gnome version is less than 0.9.13-1.90.1" negate="false" test_ref="oval:org.mitre.oval:tst:2984"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:729" version="5" class="vulnerability">
      <metadata>
        <title>RHE4 Firefox and Mozilla DOM Node Spoofing</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2269" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2269"/>
        <description>Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM node names within the context of their namespaces, which allows remote attackers to modify certain tag properties, possibly leading to execution of arbitrary script or code, as demonstrated using an XHTML document with IMG tags with custom properties ("XHTML node spoofing").</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-15T04:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-08-19T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11366 - Updated CPE reference, updated regular expression" date="2011-02-17T13:29:00.547-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2011-02-17T13:31:09.465-05:00">INTERIM</status_change>
            <status_change date="2011-03-07T04:00:15.121-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11366 - Corrected - right version for brlapi and brlapi-devel as specified by RHSA-2010:0181-5" date="2013-03-18T12:26:00.995-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-03-18T12:31:13.197-04:00">INTERIM</status_change>
            <status_change date="2013-04-08T04:00:48.317-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2652"/>
          <criterion comment="mozilla RPM is earlier than 37:1.7.10-1.4.1" negate="false" test_ref="oval:org.mitre.oval:tst:2651"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/mozilla is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2650"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:727" version="3" class="vulnerability">
      <metadata>
        <title>Korean IME Privilege Elevation Vulnerability in Office 2003 and Accessories</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0008" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0008"/>
        <description>The ShellAbout API call in Korean Input Method Editor (IME) in Korean versions of Microsoft Windows XP SP1 and SP2, Windows Server 2003 up to SP1, and Office 2003, allows local users to gain privileges by launching the "shell about dialog box" and clicking the "End-User License Agreement" link, which executes Notepad with the privileges of the program that displays the about box.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-02-17T07:36:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-02-22T08:27:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-03-09T12:19:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-04-06T06:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:727 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:23.126-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:46.180-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="the version of Imekr70.ime is less than 7.0.8002.0 (Office 2003 and Accessories)" test_ref="oval:org.mitre.oval:tst:2389"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:726" version="6" class="vulnerability">
      <metadata>
        <title>HP-UX 11.00 ICMP Source Quench Attack Vulnerability</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0791" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0791"/>
        <description>Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via a blind throughput-reduction attack using spoofed Source Quench packets, aka the "ICMP Source Quench attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:48:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:52.288-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:59.492-04:00">ACCEPTED</status_change>
            <modified comment="Added title." date="2007-02-23T12:52:00.826-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-02-23T12:53:23.849-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:25.287-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:31.157-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:13.290-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:726 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:50.414-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:45.820-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.00">
          <criteria operator="AND" comment="700 Series OS Release 11.00">
            <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:3443"/>
            <criterion comment="HP Release B.11.00" test_ref="oval:org.mitre.oval:tst:3571"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 11.00">
            <criterion comment="800-series HP" test_ref="oval:org.mitre.oval:tst:4124"/>
            <criterion comment="HP Release B.11.00" test_ref="oval:org.mitre.oval:tst:3571"/>
          </criteria>
        </criteria>
        <criterion negate="true" comment="Patch PHNE_33395 is installed" test_ref="oval:org.mitre.oval:tst:3393"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:724" version="4" class="vulnerability">
      <metadata>
        <title>MIT Kerberos 5 KRB5_AName_To_Localname Multiple Principal Name Buffer Overrun Vulnerabilities</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 7</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0523" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0523"/>
        <description>Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:52:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:52.045-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:59.217-04:00">ACCEPTED</status_change>
            <modified comment="Added title. Implemented by Jon Baker of The MITRE Corporation." date="2007-02-13T14:49:00.749-05:00">
              <contributor organization="Security-Database">Nabil Ouchn</contributor>
            </modified>
            <status_change date="2007-02-13T14:50:17.774-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:25.042-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:724 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:04:51.141-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:44.632-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="Software section">
          <criteria operator="AND" comment="Solaris 7 (SPARC) meets Sun Alert ID 101512 criteria.">
            <criterion comment="Solaris 7 Installed" test_ref="oval:org.mitre.oval:tst:3576"/>
            <criterion comment="sparc architecture" test_ref="oval:org.mitre.oval:tst:3237"/>
            <criterion negate="true" comment="Patch 112536-05 or later installed" test_ref="oval:org.mitre.oval:tst:3544"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 7 (x86) meets Sun Alert ID 101512 criteria.">
            <criterion comment="Solaris 7 Installed" test_ref="oval:org.mitre.oval:tst:3576"/>
            <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3912"/>
            <criterion negate="true" comment="Patch 112537-05 or later installed" test_ref="oval:org.mitre.oval:tst:3498"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert ID 101512 criteria.">
            <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3437"/>
            <criterion comment="sparc architecture" test_ref="oval:org.mitre.oval:tst:3237"/>
            <criterion negate="true" comment="Patch 112237-11 or later installed" test_ref="oval:org.mitre.oval:tst:3354"/>
            <criterion negate="true" comment="Patch 112390-09 or later installed" test_ref="oval:org.mitre.oval:tst:3509"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert ID 101512 criteria.">
            <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3437"/>
            <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3912"/>
            <criterion negate="true" comment="Patch 112240-08 or later installed" test_ref="oval:org.mitre.oval:tst:3366"/>
            <criterion negate="true" comment="Patch 112238-10 or later installed" test_ref="oval:org.mitre.oval:tst:4043"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert ID 101512 criteria.">
            <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3172"/>
            <criterion comment="sparc architecture" test_ref="oval:org.mitre.oval:tst:3237"/>
            <criterion negate="true" comment="Patch 112908-15 or later installed" test_ref="oval:org.mitre.oval:tst:3824"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert ID 101512 criteria.">
            <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3172"/>
            <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3912"/>
            <criterion negate="true" comment="Patch 115168-05 or later installed" test_ref="oval:org.mitre.oval:tst:4066"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Configuration section">
          <criteria operator="OR" comment="Target's configuration meets 101512 configuration criteria.">
            <criteria operator="OR" comment="Solaris Enterprise Authentication Mechanism (ANY SUNWkr5sl/SUNWkr5sv/SUNWkrgdo/SUNWkrggl)">
              <criterion comment="Sun Enterprise Authentication Mechanism (SEAM, SUNWkr5sv) installed" test_ref="oval:org.mitre.oval:tst:3514"/>
              <criterion comment=" Sun Enterprise Authentication Mechanism (SEAM, SUNWkr5sl) installed" test_ref="oval:org.mitre.oval:tst:3192"/>
              <criterion comment=" Sun Enterprise Authentication Mechanism (SEAM, SUNWkrgdo) installed" test_ref="oval:org.mitre.oval:tst:3873"/>
              <criterion comment=" Sun Enterprise Authentication Mechanism (SEAM, SUNWkrggl) installed" test_ref="oval:org.mitre.oval:tst:3369"/>
            </criteria>
            <criteria operator="AND" comment="SEAM is not installed, but target is a kerberos client.">
              <criteria negate="true" operator="OR" comment="Solaris Enterprise Authentication Mechanism (ANY SUNWkr5sl/SUNWkr5sv/SUNWkrgdo/SUNWkrggl)">
                <criterion comment="Sun Enterprise Authentication Mechanism (SEAM, SUNWkr5sv) installed" test_ref="oval:org.mitre.oval:tst:3514"/>
                <criterion comment=" Sun Enterprise Authentication Mechanism (SEAM, SUNWkr5sl) installed" test_ref="oval:org.mitre.oval:tst:3192"/>
                <criterion comment=" Sun Enterprise Authentication Mechanism (SEAM, SUNWkrgdo) installed" test_ref="oval:org.mitre.oval:tst:3873"/>
                <criterion comment=" Sun Enterprise Authentication Mechanism (SEAM, SUNWkrggl) installed" test_ref="oval:org.mitre.oval:tst:3369"/>
              </criteria>
              <criterion comment="/etc/krb5/krb5.conf is configured as a kerberos client" test_ref="oval:org.mitre.oval:tst:3487"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:72" version="3" class="vulnerability" deprecated="true">
      <metadata>
        <title>DEPRECATED: Windows NT Variant of Chunked Encoding Buffer Overrun</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0147" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0147"/>
        <description>Buffer overflow in the ASP data transfer mechanism in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to cause a denial of service or execute code, aka "Microsoft-discovered variant of Chunked Encoding buffer overrun."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-14T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected to use a forward slash as the separator in the key." date="2007-05-07T15:59:00.430-04:00">
              <contributor organization="Secure Elements, Inc.">Glenn Strickland</contributor>
            </modified>
            <status_change date="2007-05-07T16:06:12.556-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:51.497-04:00">ACCEPTED</status_change>
            <modified comment="Use def:12307 instead" date="2011-01-20T10:06:16.315-05:00">
              <contributor organization="Symantec Corporation">Josh Turpin</contributor>
            </modified>
            <status_change date="2011-01-20T10:06:16.315-05:00">DEPRECATED</status_change>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="IIS 4.0 Major Version" negate="false" test_ref="oval:org.mitre.oval:tst:3099"/>
          <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
          <criterion comment="this is an NT Terminal Server" negate="true" test_ref="oval:org.mitre.oval:tst:3097"/>
          <criterion comment="the version of w3svc.dll is less than 4.2.775.1" negate="false" test_ref="oval:org.mitre.oval:tst:3096"/>
          <criterion comment="Patch Q319733 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3095"/>
          <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
          <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="asp.dll mapping exists" negate="false" test_ref="oval:org.mitre.oval:tst:3092"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:7194" version="5" class="vulnerability">
      <metadata>
        <title>IE v6.0,SP1 Plug-in Navigation Address Bar Spoofing Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0843" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0843"/>
        <description>Internet Explorer 5.5 and 6 does not properly handle plug-in navigation, which allows remote attackers to alter displayed address bars and thereby spoof web pages, facilitating phishing attacks, aka the "Plug-in Navigation Address Bar Spoofing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-25T07:44:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-27T01:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-17T10:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-27T10:50:00.000-04:00" comment="modified wft-564 - Changed test to match comment">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:45:58.632-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:54.717-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:36.130-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:26.063-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2800.1476" negate="false" test_ref="oval:org.mitre.oval:tst:856"/>
          <criterion comment="the patch kb834707 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:855"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:717" version="2" class="vulnerability">
      <metadata>
        <title>gftp Directory Traversal Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>gftp</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0372" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0372"/>
        <description>Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via .. (dot dot) sequences in filenames returned from a LIST command.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-06-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-06-22T12:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-01-25T10:22:00.000-04:00" comment="modified upt-62 - Changed DATA operation to OR (to test for any exec bit set, not all).  Fixed typo in comment.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-01-25T07:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="gftp rpm is earlier than 1:2.0.14-4" negate="false" test_ref="oval:org.mitre.oval:tst:2394"/>
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="gftp is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2393"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:714" version="6" class="vulnerability">
      <metadata>
        <title>Win2k Embedded Web Font Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0010" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0010"/>
        <description>Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type (EOT) web font that triggers the overflow during decompression.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-01-11T12:56:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-01-12T09:18:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-02-01T09:08:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:11.052-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:24.629-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:714 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:22.084-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:23.639-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criteria operator="OR" comment="Fontsub.dll &lt; 5.0.2195.7071 or T2embed.dll &lt;5.0.2195.7073 (Win2k,SP4)">
          <criterion comment="the version of Fontsub.dll is less than 5.0.2195.7071" test_ref="oval:org.mitre.oval:tst:2397"/>
          <criterion comment="the version of T2embed.dll is less than 5.0.2195.7073" test_ref="oval:org.mitre.oval:tst:2396"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:713" version="1" class="vulnerability">
      <metadata>
        <title>Windows 2000 Hyperlink Object Library Unchecked Buffer Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Hyperlink Object Library</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0057" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0057"/>
        <description>The Hyperlink Object Library for Windows 98, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a crafted link that triggers an "unchecked buffer" in the library, possibly due to a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-02-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2005-02-11T09:34:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-03-02T09:01:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-23T08:09:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="the version of hlink.dll is less than 5.2.3790.227" negate="false" test_ref="oval:org.mitre.oval:tst:2399"/>
        <criterion comment="the patch kb888113 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2398"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:711" version="1" class="vulnerability">
      <metadata>
        <title>ImageMagick Buffer Overflow in ReadPNMImage()</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>ImageMagick</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1275" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1275"/>
        <description>Heap-based buffer overflow in the ReadPNMImage function in pnm.c for ImageMagick 6.2.1 and earlier allows remote attackers to cause a denial of service (application crash) via a PNM file with a small colors value.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-06-28T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-06-29T06:49:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criterion comment="ImageMagick RPM earlier than 0:5.5.6-14" negate="false" test_ref="oval:org.mitre.oval:tst:2401"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:710" version="4" class="vulnerability">
      <metadata>
        <title>IE6 DHTML Method Heap Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0055" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0055"/>
        <description>Internet Explorer 5.01, 5.5, and 6 does not properly validate buffers when handling certain DHTML methods including the createControlRange Javascript function, which allows remote attackers to execute arbitrary code, aka the "DHTML Method Heap Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-03-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-03-23T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-13T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2005-04-21T12:00:00.000-04:00" comment="modified wrt-159 - unchecked value">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-05-11T05:41:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed test to check kb867282.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:58.649-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:25.890-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6.0 Installed XP SP2" negate="false" test_ref="oval:org.mitre.oval:tst:2403"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2900.2604" negate="false" test_ref="oval:org.mitre.oval:tst:2402"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:71" version="2" class="vulnerability">
      <metadata>
        <title>Privilege Escalation Using Cached Admin Connection</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft SQL Server 2000</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0344" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0344"/>
        <description>An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached connection of the sa administrator account.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-06-24T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Yi-Fang Koh</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-04-07T12:00:00.000-04:00" comment="modified wft-222 - corrected literal component of file path. It was missing the leading '\'">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified date="2005-04-07T09:25:00.000-04:00" comment="modified wft-222 - Corrected comment">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2005-04-11T08:48:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-04-27T12:07:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="SQL Server 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2977"/>
          <criterion comment="the version of sqlservr.exe is less than 2000.80.296.0" negate="false" test_ref="oval:org.mitre.oval:tst:2976"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="Mixed Mode Enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2975"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:7095" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.5,SP2 Plug-in Navigation Address Bar Spoofing Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0843" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0843"/>
        <description>Internet Explorer 5.5 and 6 does not properly handle plug-in navigation, which allows remote attackers to alter displayed address bars and thereby spoof web pages, facilitating phishing attacks, aka the "Plug-in Navigation Address Bar Spoofing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-25T05:31:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-27T01:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-17T10:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:42:00.000-04:00" comment="modified wft-562 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:43.509-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:25.812-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
        <criterion comment="the version of mshtml.dll is less than 5.50.4945.2800" negate="false" test_ref="oval:org.mitre.oval:tst:384"/>
        <criterion comment="the patch kb834707 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:855"/>
        <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
          <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
            <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
            <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
            <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
          </criteria>
          <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
            <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
            <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
            <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:7084" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP3 Similar Method Name Redirection Cross Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0727" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0727"/>
        <description>Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name, as demonstrated by SimilarMethodNameRedir, aka the "Similar Method Name Redirection Cross Domain Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-19T07:22:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-20T02:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2824. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:48:00.494-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:52:28.926-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:53.871-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:41.869-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:25.745-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3015"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3821.2800" negate="false" test_ref="oval:org.mitre.oval:tst:625"/>
          <criterion comment="the patch kb834707-ie501sp3 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:624"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:704" version="2" class="vulnerability">
      <metadata>
        <title>Windows 2000 WINS Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Windows Internet Naming Service (WINS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0825" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0825"/>
        <description>The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets, which allows attackers to cause a denial of service and possibly execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-02-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-10-31T04:13:00.000-04:00" comment="Replaced reference to obj:1374 with reference to obj:1550 since it references Product\Options and not ProductOptions in the controlset registry key.  Modified by Harvey Rubinovitz">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-11-21T04:13:00.000-04:00">INTERIM</status_change>
            <status_change date="2007-01-03T13:54:00.642-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="AND" comment="Windows 2000 Server is installed">
            <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
            <criteria operator="OR" comment="Windows NT server product option">
              <criterion comment="this is an NT Server (stand-alone)" negate="false" test_ref="oval:org.mitre.oval:tst:2408"/>
              <criterion comment="this is an NT Server (domain controller)" negate="false" test_ref="oval:org.mitre.oval:tst:3035"/>
            </criteria>
          </criteria>
          <criterion comment="the version of wins.exe is less than 5.0.2195.6870" negate="false" test_ref="oval:org.mitre.oval:tst:2407"/>
          <criterion comment="the patch kb830352 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2406"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="the wins service is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2405"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:702" version="3" class="vulnerability">
      <metadata>
        <title>Solaris Privilege Escalation/DoS Vulnerability (6293270)</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0190" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0190"/>
        <description>Unspecified vulnerability in Sun Solaris 9 and 10 for the x86 platform allows local users to gain privileges or cause a denial of service (panic) via unspecified vectors, possibly involving functions from the mm driver.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-01-12T11:25:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-01-25T07:30:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-03-09T12:19:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:702 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:50.977-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:43.069-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert ID 102066 criteria.">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criteria operator="OR" comment="Contributing factors for Solaris 9, Sun Alert ID 102066 criteria.">
            <criterion comment="Patch 112234-11 is installed" test_ref="oval:org.mitre.oval:tst:2413"/>
            <criterion comment="Patch 112234-12 is installed" test_ref="oval:org.mitre.oval:tst:2412"/>
            <criterion comment="Patch 117172-16 or later installed" test_ref="oval:org.mitre.oval:tst:2411"/>
          </criteria>
          <criterion negate="true" comment="Patch 118559-19 or later installed" test_ref="oval:org.mitre.oval:tst:2410"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert ID 102066 and 102108 criteria.">
          <criterion comment="Solaris 10 Installed" test_ref="oval:org.mitre.oval:tst:2459"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion negate="true" comment="Patch 118844-24 or later installed" test_ref="oval:org.mitre.oval:tst:2409"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:70" version="3" class="vulnerability">
      <metadata>
        <title>Solaris 8 CDE dtspcd Buffer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>dtspcd</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0803" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0803"/>
        <description>Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands.</description>
        <oval_repository>
          <dates>
            <submitted date="2002-08-23T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified comment="fixed the service_name entity used in the inetd_object" date="2007-04-10T15:14:00.836-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-04-10T15:14:26.106-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:39.399-04:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:54.164-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:35.161-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="File dtspcd exists" negate="false" test_ref="oval:org.mitre.oval:tst:2983"/>
          <criterion comment="Patch 108949-07 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:2982"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="inetd.conf contains dtspcd" negate="false" test_ref="oval:org.mitre.oval:tst:2981"/>
          <criterion comment="inetd running" negate="false" test_ref="oval:org.mitre.oval:tst:3135"/>
          <criteria operator="OR" comment="File dtspcd executable">
            <criterion comment="File dtspcd executable" negate="false" test_ref="oval:org.mitre.oval:tst:2980"/>
            <criterion comment="File dtspcd executable" negate="false" test_ref="oval:org.mitre.oval:tst:2979"/>
            <criterion comment="File dtspcd executable" negate="false" test_ref="oval:org.mitre.oval:tst:2978"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:7" version="1" class="vulnerability">
      <metadata>
        <title>Solaris 8 kcms_configure Command-Line Buffer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>kcms_configure</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0594" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0594"/>
        <description>kcms_configure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer overflow in a command line argument.</description>
        <oval_repository>
          <dates>
            <submitted date="2002-09-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="File kcms_configure exists" negate="false" test_ref="oval:org.mitre.oval:tst:3144"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="File kcms_configure executable and SUID or SGID">
            <criterion comment="File kcms_configure executable and SUID or SGID" negate="false" test_ref="oval:org.mitre.oval:tst:3143"/>
            <criteria operator="OR" comment="File kcms_configure executable and SUID or SGID">
              <criterion comment="File kcms_configure executable and SUID or SGID" negate="false" test_ref="oval:org.mitre.oval:tst:3142"/>
              <criterion comment="File kcms_configure executable and SUID or SGID" negate="false" test_ref="oval:org.mitre.oval:tst:3141"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:697" version="5" class="vulnerability">
      <metadata>
        <title>IE6,SP1 Web Folder Behaviors Cross-Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1989" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1989"/>
        <description>Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to obtain information and possibly execute code when browsing from a web site to a web folder view using WebDAV, aka "Web Folder Behaviors Cross-Domain Vulnerability".</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-23T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-08-25T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed reference to patch kb896727 from criteria.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:46:07.513-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:53.538-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:38.454-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:25.658-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
          <criteria operator="OR" comment="the version of mshtml.dll is less than 6.0.2800.1515 or 6.0.2800.1516">
            <criterion comment="the version of mshtml.dll is less than 6.0.2800.1515 (RTMGDR)" negate="false" test_ref="oval:org.mitre.oval:tst:2418"/>
            <criterion comment="the version of mshtml.dll is less than 6.0.2800.1516 (RTMQFE)" negate="false" test_ref="oval:org.mitre.oval:tst:2417"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:694" version="4" class="vulnerability">
      <metadata>
        <title>Visual Basic for Applications Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Visual Basic 6.0</product>
        </affected>
        <reference ref_id="CVE-2006-3649" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3649" source="CVE"/>
        <description>Buffer overflow in Microsoft Visual Basic for Applications (VBA) SDK 6.0 through 6.4, as used by Microsoft Office 2000 SP3, Office XP SP3, Project 2000 SR1, Project 2002 SP1, Access 2000 Runtime SP3, Visio 2002 SP2, and Works Suite 2004 through 2006, allows user-assisted attackers to execute arbitrary code via unspecified document properties that are not verified when VBA is invoked to open documents.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-08-11T12:53:40">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-08T11:26:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-09-27T12:29:35.094-04:00">INTERIM</status_change>
            <status_change date="2006-10-16T15:58:46.846-04:00">ACCEPTED</status_change>
            <modified comment="References registry value for Common Files directory due to multilingual support" date="2008-04-14T11:07:00.744-04:00">
              <contributor organization="GFI Software">Clifford Farrugia</contributor>
            </modified>
            <status_change date="2008-04-14T12:25:45.747-04:00">INTERIM</status_change>
            <status_change date="2008-05-05T04:00:26.766-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:694 - Modified vulnerabilities - a lot of fixes" date="2015-07-22T13:29:00.390-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-07-22T13:32:17.953-04:00">INTERIM</status_change>
            <status_change date="2015-08-10T04:01:08.526-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Visual Basic 6.0 is installed" definition_ref="oval:org.mitre.oval:def:15369"/>
        <criterion comment="The version of vbe6.dll is less than 6.4.99.72." test_ref="oval:org.mitre.oval:tst:94"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:690" version="3" class="vulnerability">
      <metadata>
        <title>IE v5.5 Temporary Internet Files folders Name Reading Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1188" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1188"/>
        <description>Internet Explorer 5.01 through 6.0 allows remote attackers to identify the path to the Temporary Internet Files folder and obtain user information such as cookies via certain uses of the OBJECT tag, which are not subjected to the proper security checks, aka "Temporary Internet Files folders Name Reading."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-27T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:38.821-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:25.602-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Internet Explorer 5.5 Installed">
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3078"/>
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3077"/>
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3076"/>
          <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
        </criteria>
        <criterion comment="the version of mshtml.dll is less than 5.50.4922.900" negate="false" test_ref="oval:org.mitre.oval:tst:2786"/>
        <criterion comment="the patch q328970 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3117"/>
        <criterion comment="the patch q324929 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3116"/>
        <criterion comment="the patch q810847 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3115"/>
        <criterion comment="the patch q813489 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3114"/>
        <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:69" version="2" class="vulnerability">
      <metadata>
        <title>Off-by-one Vulnerabilities in Ethereal 0.9.11</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Ethereal</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0356" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0356"/>
        <description>Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) AIM, (2) GIOP Gryphon, (3) OSPF, (4) PPTP, (5) Quake, (6) Quake2, (7) Quake3, (8) Rsync, (9) SMB, (10) SMPP, and (11) TSP dissectors, which do not properly use the tvb_get_nstringz and tvb_get_nstringz0 functions.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-29T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:47.572-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:39.216-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criteria operator="OR" comment="Vulnerable Config">
          <criterion comment="ethereal version is less than 0.9.13-1.90.1" negate="false" test_ref="oval:org.mitre.oval:tst:2985"/>
          <criterion comment="ethereal-gnome version is less than 0.9.13-1.90.1" negate="false" test_ref="oval:org.mitre.oval:tst:2984"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:689" version="3" class="vulnerability">
      <metadata>
        <title>IE v5.5,SP2 Travel Log Cross Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1026" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1026"/>
        <description>Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the history list and executed in the top window's zone when the history.back (back) function is called, as demonstrated by BackToFramedJpu, aka the "Travel Log Cross Domain Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-02-03T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:37.129-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:25.546-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
          <criterion comment="the version of mshtml.dll is less than 5.50.4937.800" negate="false" test_ref="oval:org.mitre.oval:tst:2581"/>
          <criterion comment="the patch q832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2588"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:688" version="8" class="vulnerability">
      <metadata>
        <title>HP-UX 11.23 ICMP Source Quench Attack Vulnerability</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0791" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0791"/>
        <description>Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via a blind throughput-reduction attack using spoofed Source Quench packets, aka the "ICMP Source Quench attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:48:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:51.358-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:58.763-04:00">ACCEPTED</status_change>
            <modified comment="Added title." date="2007-02-23T12:53:00.978-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-02-23T12:53:50.998-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:24.308-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:31.069-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:13.145-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:688 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:24.592-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:41.079-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:tst:3901 - HP-UX Security Advisory - HPSBUX02944_101" date="2014-02-19T09:09:00.021-05:00">
              <contributor organization="Hewlett-Packard">Sushant Kumar Singh</contributor>
            </modified>
            <status_change date="2014-02-19T09:13:06.502-05:00">INTERIM</status_change>
            <status_change date="2014-03-10T04:00:51.815-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.23">
          <criteria operator="AND" comment="700 Series OS Release 11.23">
            <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:3443"/>
            <criterion comment="HP Release B.11.23" test_ref="oval:org.mitre.oval:tst:3901"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 11.23">
            <criterion comment="800-series HP" test_ref="oval:org.mitre.oval:tst:4124"/>
            <criterion comment="HP Release B.11.23" test_ref="oval:org.mitre.oval:tst:3901"/>
          </criteria>
        </criteria>
        <criterion negate="true" comment="Patch PHNE_32606 is installed" test_ref="oval:org.mitre.oval:tst:3439"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:687" version="5" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP4 Travel Log Cross Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1026" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1026"/>
        <description>Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the history list and executed in the top window's zone when the history.back (back) function is called, as demonstrated by BackToFramedJpu, aka the "Travel Log Cross Domain Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-02-03T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:49:00.000-04:00" comment="modified wft-91 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:42.977-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:53.220-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:37.271-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:25.473-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3813.800" negate="false" test_ref="oval:org.mitre.oval:tst:2582"/>
          <criterion comment="the patch q832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2588"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6829" version="5" class="vulnerability">
      <metadata>
        <title>IE v6.0,SP1 Similar Method Name Redirection Cross Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0727" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0727"/>
        <description>Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name, as demonstrated by SimilarMethodNameRedir, aka the "Similar Method Name Redirection Cross Domain Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-19T07:37:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-20T02:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-27T10:50:00.000-04:00" comment="modified wft-564 - Changed test to match comment">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:46:01.100-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:52.941-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:29:00.033-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:25.399-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
          <criterion comment="the patch kb834707 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:855"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2800.1476" negate="false" test_ref="oval:org.mitre.oval:tst:856"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:682" version="7" class="vulnerability">
      <metadata>
        <title>Microsoft Agent Security Prompt Spoofing Vulnerability (Windows 2000)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Agent</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1214"/>
        <description>Microsoft Agent allows remote attackers to spoof trusted Internet content and execute arbitrary code by disguising security prompts on a malicious Web page.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-06-22T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-06-22T07:25:00.000-04:00">DRAFT</status_change>
            <modified date="2005-06-24T12:00:00.000-04:00" comment="added cve description">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-07-27T10:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-11-17T09:54:00.000-04:00" comment="Updated obj:1000 to use new variable var:759 for path reference rather than var:200.  Now uses 'msagent' subdir of SystemRoot instead of System32.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-11-17T09:54:00.000-04:00">INTERIM</status_change>
            <status_change date="2007-01-03T13:54:00.438-05:00">ACCEPTED</status_change>
            <modified comment="Corrected and tightened regular expression in ste:2610" date="2010-12-02T11:46:00.307-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-12-02T11:47:27.247-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:01:09.056-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:43:56.813-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:20.482-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="AND" comment="Windows 2000 (sp4 or earlier) is installed">
            <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
            <criterion comment="Win2K/XP/2003 service pack 5 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2790"/>
          </criteria>
          <criterion comment="the version of agentdpv.dll is less than 2.0.0.3423" negate="false" test_ref="oval:org.mitre.oval:tst:2425"/>
          <criterion comment="the patch kb890046 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2424"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:68" version="2" class="vulnerability">
      <metadata>
        <title>Solaris 7 admintool Local Buffer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>Admintool</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0089" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0089"/>
        <description>Buffer overflow in admintool in Solaris 2.5 through 8 allows local users to gain root privileges via long arguments to (1) the -d command line option, or (2) the PRODVERS argument in the .cdtoc file.</description>
        <oval_repository>
          <dates>
            <submitted date="2002-10-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified date="2006-06-13T02:02:00.000-04:00" comment="modified uft-15 - admintool is either /bin/admintool or /usr/bin/admintool (or both).  Regular expression had been ^.*/bin/admintool$, which could cause arbitrary-depth search.  Changed to ^(/usr)?/bin/admintool$, which bounds the search properly.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <modified date="2006-06-13T02:20:00.000-04:00" comment="modified upt-845 - admintool is either /bin/admintool or /usr/bin/admintool (or both). Regular expression had been ^.*/bin/admintool$, which could cause arbitrary-depth search. Changed to ^(/usr)?/bin/admintool$, which bounds the search properly.  Also modified to test for both SUID and OEXEC bits, so a second test is not needed.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <modified date="2006-06-13T02:25:00.000-04:00" comment="Removed compound test for &quot;admintool SUID and executable&quot; because new version of upt-845 does both.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-06-14T07:41:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:34.775-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:1726, which had been badly mangled during conversion from OVAL 4.2 to 5.0.  Operation set to pattern match on path, and terminal regexp anchor moved from filename to path." date="2007-01-22T16:24:00.728-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-01-22T16:26:00.857-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:52.685-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="File admintool exists" negate="false" test_ref="oval:org.mitre.oval:tst:3017"/>
          <criterion comment="Patch 108721-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:2986"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="File admintool SUID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:3016"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:676" version="1" class="vulnerability">
      <metadata>
        <title>PostgreSQL Character Conversion Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>postgresql</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1409" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1409"/>
        <description>PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unprivileged users to call those functions with malicious values, with unknown impact, aka the "Character conversion vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-06-27T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-06-29T06:49:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="rh-postgresql-server is earlier than 0:7.3.10-1" negate="false" test_ref="oval:org.mitre.oval:tst:2433"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="postmaster (the PostgreSQL master daemon) is running" negate="false" test_ref="oval:org.mitre.oval:tst:2432"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:671" version="6" class="vulnerability">
      <metadata>
        <title>EMF Rendering Denial of Service Vulnerability (64-bit Windows XP and Server 2003,Unpatched)</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0803" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0803"/>
        <description>The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to cause a denial of service (application crash) via a crafted Enhanced Metafile (EMF) file that causes invalid (1) end, (2) emreof, or (3) palent offsets to be used, aka "Enhanced Metafile Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-11-09T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-11-10T07:06:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-16T01:04:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:59.602-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:52.335-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:671 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:53.199-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:19.838-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="64-bit XP or Server 2003 is installed">
          <criteria operator="AND" comment="64-bit XP is installed">
            <criterion comment="Windows XP is installed" test_ref="oval:org.mitre.oval:tst:2838"/>
            <criterion comment="64-Bit (x64 architecture) version of Windows is installed" test_ref="oval:org.mitre.oval:tst:2744"/>
          </criteria>
          <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        </criteria>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of Gdi32.dll is less than 5.2.3790.419" test_ref="oval:org.mitre.oval:tst:2436"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:67" version="2" class="vulnerability">
      <metadata>
        <title>Solaris 8 admintool Local Buffer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>Admintool</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0089" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0089"/>
        <description>Buffer overflow in admintool in Solaris 2.5 through 8 allows local users to gain root privileges via long arguments to (1) the -d command line option, or (2) the PRODVERS argument in the .cdtoc file.</description>
        <oval_repository>
          <dates>
            <submitted date="2002-09-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified date="2006-06-13T02:02:00.000-04:00" comment="modified uft-15 - admintool is either /bin/admintool or /usr/bin/admintool (or both).  Regular expression had been ^.*/bin/admintool$, which could cause arbitrary-depth search.  Changed to ^(/usr)?/bin/admintool$, which bounds the search properly.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <modified date="2006-06-13T02:20:00.000-04:00" comment="modified upt-845 - admintool is either /bin/admintool or /usr/bin/admintool (or both). Regular expression had been ^.*/bin/admintool$, which could cause arbitrary-depth search. Changed to ^(/usr)?/bin/admintool$, which bounds the search properly.  Also modified to test for both SUID and OEXEC bits, so a second test is not needed.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <modified date="2006-06-13T02:24:00.000-04:00" comment="Removed compound test for &quot;admintool SUID and executable&quot; because new version of upt-845 does both.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-06-14T07:41:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:34.346-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:1726, which had been badly mangled during conversion from OVAL 4.2 to 5.0.  Operation set to pattern match on path, and terminal regexp anchor moved from filename to path." date="2007-01-22T16:24:00.728-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-01-22T16:26:01.442-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:52.089-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="File admintool exists" negate="false" test_ref="oval:org.mitre.oval:tst:3017"/>
          <criterion comment="Patch 110453-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:2987"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="File admintool SUID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:3016"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:667" version="4" class="vulnerability">
      <metadata>
        <title>ypserv NIS Server Denial of Service</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>ypserv</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0251" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0251"/>
        <description>ypserv NIS server before 2.7 allows remote attackers to cause a denial of service via a TCP client request that does not respond to the server, which causes ypserv to block.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-29T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:43.920-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:39.014-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.450-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:59:09.017-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:34.808-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="ypserv version is less than 2.8-0.9E" negate="false" test_ref="oval:org.mitre.oval:tst:2451"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="ypserv is listening on the network" negate="false" test_ref="oval:org.mitre.oval:tst:2450"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6650" version="3" class="vulnerability">
      <metadata>
        <title>Buffer overflow vulnerability in kavfm.sys in Kingsoft Antivirus 2010.7.30.201 and earlier</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Kingsoft Antivirus</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-3396" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3396"/>
        <description>Buffer overflow in kavfm.sys in Kingsoft Antivirus 2010.04.26.648 and earlier allows local users to execute arbitrary code via a long argument to IOCTL 0x80030004.  NOTE: some of these details are obtained from third party information.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-10-22T18:45:49">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2010-10-25T10:41:08.637-04:00">DRAFT</status_change>
            <status_change date="2010-11-15T04:00:27.886-05:00">INTERIM</status_change>
            <status_change date="2010-12-06T04:00:43.283-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Kingsoft Antivirus is installed" definition_ref="oval:org.mitre.oval:def:6932"/>
        <criterion comment="Check if the version of kavfm.sys in Kingsoft Antivirus is less than or equal to 2010.7.30.201" test_ref="oval:org.mitre.oval:tst:19977"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6932" version="3" class="inventory">
      <metadata>
        <title>Kingsoft Antivirus is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Kingsoft Antivirus</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:kingsoftsecurity:kingsoft_antivirus"/>
        <description>Kingsoft Antivirus is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2010-10-22T18:45:49">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2010-10-25T10:41:08.123-04:00">DRAFT</status_change>
            <status_change date="2010-11-15T04:00:36.902-05:00">INTERIM</status_change>
            <status_change date="2010-12-06T04:00:48.331-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Kingsoft Antivirus is installed" test_ref="oval:org.mitre.oval:tst:20507"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:664" version="2" class="vulnerability">
      <metadata>
        <title>Code Execution Vulnerability in XPDF PDF Viewer</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>xpdf</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0434" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0434"/>
        <description>Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-29T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-05T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:43.685-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:38.816-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="xpdf version is less than 2.0.1-11" negate="false" test_ref="oval:org.mitre.oval:tst:2455"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="xpdf is executable">
            <criterion comment="xpdf is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2454"/>
            <criterion comment="xpdf is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2453"/>
            <criterion comment="xpdf is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2452"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:662" version="4" class="vulnerability">
      <metadata>
        <title>lpsched Local System Corruption Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0227" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0227"/>
        <description>Multiple unspecified vulnerabilities in lpsched in Sun Solaris 8, 9, and 10 allow local users to delete arbitrary files or disable the LP print service via unknown attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-01-16T12:05:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-01-25T07:30:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-03-09T12:19:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:1394 to more correctly look for subdirectories under /etc/lp/printers." date="2007-01-22T16:00:00.391-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-01-22T16:01:01.488-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:51.556-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:662 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:54.814-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:39.926-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert ID 102033 criteria.">
          <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Installed architecture is sparc" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion negate="true" comment="Patch 109320-17 or later installed" test_ref="oval:org.mitre.oval:tst:2464"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert ID 102033 criteria.">
          <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion negate="true" comment="Patch 109321-17 or later installed" test_ref="oval:org.mitre.oval:tst:2462"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert ID 102033 criteria.">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="Installed architecture is sparc" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion negate="true" comment="Patch 113329-16 or later installed" test_ref="oval:org.mitre.oval:tst:2461"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert ID 102033 criteria.">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion negate="true" comment="Patch 114980-17 or later installed" test_ref="oval:org.mitre.oval:tst:2460"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (sparc) meets Sun Alert ID 102033 criteria.">
          <criterion comment="Solaris 10 Installed" test_ref="oval:org.mitre.oval:tst:2459"/>
          <criterion comment="Installed architecture is sparc" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion negate="true" comment="Patch 120467-03 or later installed" test_ref="oval:org.mitre.oval:tst:2458"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert ID 102033 criteria.">
          <criterion comment="Solaris 10 Installed" test_ref="oval:org.mitre.oval:tst:2459"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion negate="true" comment="Patch 120468-03 or later installed" test_ref="oval:org.mitre.oval:tst:2457"/>
        </criteria>
        <criterion comment="Target is configured as a print server" test_ref="oval:org.mitre.oval:tst:2456"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6600" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP4 Install Engine Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0216" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0216"/>
        <description>Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious website or HTML email with a long .CAB file name, which triggers the integer overflow when calculating a buffer length and leads to a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-25T04:23:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-27T01:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-17T10:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:43.980-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:51.304-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:50.139-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:25.333-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3534.2800" negate="false" test_ref="oval:org.mitre.oval:tst:519"/>
          <criterion comment="the patch kb834707-ie501sp4 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:518"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:66" version="6" class="vulnerability">
      <metadata>
        <title>IIS ASP Function Cross-site Scripting</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0223" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0223"/>
        <description>Cross-site scripting vulnerability (XSS) in the ASP function responsible for redirection in Microsoft Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to embed a URL containing script in a redirection message.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified date="2005-03-07T12:00:00.000-04:00" comment="modified wrt-222 - changed pattern match">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-03-09T07:55:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-29T07:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2878" date="2010-11-29T16:13:00.904-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:04.957-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:01:05.408-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:25.719-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:19.519-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="IIS major version equals 5" negate="false" test_ref="oval:org.mitre.oval:tst:3081"/>
        <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
        <criterion comment="File %windir%\system32\inetsrv\asp.dll version is less than 5.0.2195.6672" negate="false" test_ref="oval:org.mitre.oval:tst:2988"/>
        <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
        <criterion comment="SP4 or later Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3073"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6579" version="5" class="vulnerability">
      <metadata>
        <title>Windows (ME, NT, 2K, XP), IE v6,SP1 CSS Heap Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0842" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0842"/>
        <description>Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from "memory corruption") via certain malformed Cascading Style Sheet (CSS) elements that trigger heap-based buffer overflows, as demonstrated using the "&lt;STYLE>@;/*" string, possibly due to a missing comment terminator that may cause an invalid length to trigger a large memory copy operation, aka the "CSS Heap Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-19T04:56:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-20T02:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-27T10:50:00.000-04:00" comment="modified wft-564 - Changed test to match comment">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:46:07.043-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:50.989-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:57.699-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:25.262-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2800.1476" negate="false" test_ref="oval:org.mitre.oval:tst:856"/>
          <criterion comment="the patch kb834707 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:855"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:657" version="4" class="vulnerability">
      <metadata>
        <title>xinitd Memory Leak Invites Denial of Service Attack</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>xinetd</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0211"/>
        <description>Memory leak in xinetd 2.3.10 allows remote attackers to cause a denial of service (memory consumption) via a large number of rejected connections.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-18T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <modified date="2004-05-17T12:00:00.000-04:00" comment="Changed tested epoch in xinetd test rvt-253 to 2, based on testing.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:40.150-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:38.517-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.551-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:58:51.127-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:34.475-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="xinetd version is less than 2:2.3.11-1.9.0" negate="false" test_ref="oval:org.mitre.oval:tst:2467"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="xinetd is listening to the network" negate="false" test_ref="oval:org.mitre.oval:tst:2466"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:653" version="1" class="vulnerability">
      <metadata>
        <title>Windows 2000 ASN.1 Library Integer Overflow Vulnerabilities</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft ASN.1 Library</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0818" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0818"/>
        <description>Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attackers to execute arbitrary code via ASN.1 BER encodings with (1) very large length fields that cause arbitrary heap data to be overwritten, or (2) modified bit strings.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-02-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="the version of msasn1.dll is less than 5.0.2195.6823" negate="false" test_ref="oval:org.mitre.oval:tst:2469"/>
        <criterion comment="the patch kb828028 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2468"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:651" version="8" class="vulnerability">
      <metadata>
        <title>HP-UX 11.11 or 11.23 Path MTU Discovery Attack Vulnerability</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1060" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1060"/>
        <description>Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:48:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:51.103-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:58.450-04:00">ACCEPTED</status_change>
            <modified comment="Added title." date="2007-02-22T17:43:00.954-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-02-22T17:44:10.985-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:23.230-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:651 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:15.190-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:39.616-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:tst:3901 - HP-UX Security Advisory - HPSBUX02944_101" date="2014-02-19T09:09:00.021-05:00">
              <contributor organization="Hewlett-Packard">Sushant Kumar Singh</contributor>
            </modified>
            <status_change date="2014-02-19T09:13:13.099-05:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:tst:3704 - HP-UX Security Advisories published in February 2014" date="2014-03-05T13:28:00.446-05:00">
              <contributor organization="Hewlett-Packard">Sushant Kumar Singh</contributor>
            </modified>
            <status_change date="2014-03-24T04:01:52.274-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="An HPUX 11.11 or 11.23 is installed">
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.11">
            <criteria operator="AND" comment="700 Series OS Release 11.11">
              <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:3443"/>
              <criterion comment="HP Release B.11.11" test_ref="oval:org.mitre.oval:tst:3704"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.11">
              <criterion comment="800-series HP" test_ref="oval:org.mitre.oval:tst:4124"/>
              <criterion comment="HP Release B.11.11" test_ref="oval:org.mitre.oval:tst:3704"/>
            </criteria>
          </criteria>
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.23">
            <criteria operator="AND" comment="700 Series OS Release 11.23">
              <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:3443"/>
              <criterion comment="HP Release B.11.23" test_ref="oval:org.mitre.oval:tst:3901"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.23">
              <criterion comment="800-series HP" test_ref="oval:org.mitre.oval:tst:4124"/>
              <criterion comment="HP Release B.11.23" test_ref="oval:org.mitre.oval:tst:3901"/>
            </criteria>
          </criteria>
        </criteria>
        <criterion comment="TOUR_PRODUCT.T-NET2-KRN with version less than A.03.00 is installed" test_ref="oval:org.mitre.oval:tst:3415"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6509" version="3" class="vulnerability">
      <metadata>
        <title>Avast! Home and Professional 'ashWsFtr.dll' Unspecified Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Avast! AntiVirus</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3524" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3524"/>
        <description>Unspecified vulnerability in ashWsFtr.dll in Avast! Home and Professional for Windows before 4.8.1356 has unknown impact and local attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-11-25T10:27:31.430-04:00">
              <contributor organization="SecPod Technologies">Sharath S</contributor>
            </submitted>
            <status_change date="2009-11-25T13:47:37.199-05:00">DRAFT</status_change>
            <status_change date="2009-12-14T04:00:13.761-05:00">INTERIM</status_change>
            <status_change date="2010-01-04T04:01:50.838-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:var:592 - Removed the trailing \ from all local_variables that are used as paths in a file_object" date="2011-08-03T08:25:00.425-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-08-03T08:27:15.971-04:00">INTERIM</status_change>
            <status_change date="2011-08-22T04:01:30.120-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Avast! AntiVirus is installed" definition_ref="oval:org.mitre.oval:def:6558"/>
        <criterion comment="Avast! version is less than 4.8.1356.0" test_ref="oval:org.mitre.oval:tst:10746"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:65" version="1" class="vulnerability">
      <metadata>
        <title>Solaris 7 kcms_configure Command-Line Buffer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>kcms_configure</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0594" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0594"/>
        <description>kcms_configure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer overflow in a command line argument.</description>
        <oval_repository>
          <dates>
            <submitted date="2002-09-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="File kcms_configure exists" negate="false" test_ref="oval:org.mitre.oval:tst:3144"/>
          <criterion comment="Patch 107337-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:2989"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="File kcms_configure executable and SUID or SGID">
            <criterion comment="File kcms_configure executable and SUID or SGID" negate="false" test_ref="oval:org.mitre.oval:tst:3143"/>
            <criteria operator="OR" comment="File kcms_configure executable and SUID or SGID">
              <criterion comment="File kcms_configure executable and SUID or SGID" negate="false" test_ref="oval:org.mitre.oval:tst:3142"/>
              <criterion comment="File kcms_configure executable and SUID or SGID" negate="false" test_ref="oval:org.mitre.oval:tst:3141"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:647" version="1" class="vulnerability">
      <metadata>
        <title>mikmod Long Filename Buffer Overflow</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>mikmod</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0427" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0427"/>
        <description>Buffer overflow in mikmod 3.1.6 and earlier allows remote attackers to execute arbitrary code via an archive file that contains a file with a long filename.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-06-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-06-22T12:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="mikmod RPM prior to 0:3.1.6-22.EL3" negate="false" test_ref="oval:org.mitre.oval:tst:2474"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/mikmod is executable by any user" negate="false" test_ref="oval:org.mitre.oval:tst:2473"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6430" version="4" class="vulnerability">
      <metadata>
        <title>Office BMP Integer Overflow Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Office XP</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2518" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2518"/>
        <description>Integer overflow in GDI+ in Microsoft Office XP SP3 allows remote attackers to execute arbitrary code via an Office document with a bitmap (aka BMP) image that triggers memory corruption, aka "Office BMP Integer Overflow Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2009-10-13T13:00:00">
              <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2009-10-22T17:37:21.332-04:00">DRAFT</status_change>
            <status_change date="2009-11-09T04:00:59.154-05:00">INTERIM</status_change>
            <status_change date="2009-11-30T04:00:43.170-05:00">ACCEPTED</status_change>
            <modified comment="Changed product &quot;Office 2002&quot; to &quot;Office XP&quot;" date="2010-01-14T15:36:00.885-05:00">
              <contributor organization="The MITRE Corporation">Mike Lah</contributor>
            </modified>
            <status_change date="2010-01-14T15:37:16.891-05:00">INTERIM</status_change>
            <status_change date="2010-02-01T04:00:24.818-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:6430 - Fixed several false positives by setting negate = true.  Also fixed several style issues." date="2011-12-28T21:13:00.551-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2011-12-28T21:20:58.464-05:00">INTERIM</status_change>
            <status_change date="2012-01-16T04:03:16.739-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="Vulnerable Microsoft Office XP, Project 2002, Visio 2002">
          <extend_definition comment="Microsoft Office XP is installed" definition_ref="oval:org.mitre.oval:def:663"/>
          <extend_definition comment="Microsoft Project 2002 SP1 is installed" definition_ref="oval:org.mitre.oval:def:707"/>
          <extend_definition comment="Microsoft Office Visio 2002 SP2 is installed" definition_ref="oval:org.mitre.oval:def:692"/>
        </criteria>
        <criterion comment="Mso.dll version is less than 10.0.6856.0" test_ref="oval:org.mitre.oval:tst:10932"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:643" version="5" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP3 Travel Log Cross Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1026" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1026"/>
        <description>Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the history list and executed in the top window's zone when the history.back (back) function is called, as demonstrated by BackToFramedJpu, aka the "Travel Log Cross Domain Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-02-03T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:50:00.000-04:00" comment="modified wft-90 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2824. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:48:00.494-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:52:26.933-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:50.618-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:44.138-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:24.990-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3015"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3526.800" negate="false" test_ref="oval:org.mitre.oval:tst:2589"/>
          <criterion comment="the patch q832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2588"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6426" version="4" class="vulnerability">
      <metadata>
        <title>Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Office XP</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2528" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2528"/>
        <description>GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2009-10-13T13:00:00">
              <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2009-10-22T17:37:21.158-04:00">DRAFT</status_change>
            <status_change date="2009-11-09T04:00:57.700-05:00">INTERIM</status_change>
            <status_change date="2009-11-30T04:00:42.161-05:00">ACCEPTED</status_change>
            <modified comment="Changed product &quot;Office 2002&quot; to &quot;Office XP&quot;" date="2010-01-14T15:37:00.456-05:00">
              <contributor organization="The MITRE Corporation">Mike Lah</contributor>
            </modified>
            <status_change date="2010-01-14T15:37:39.462-05:00">INTERIM</status_change>
            <status_change date="2010-02-01T04:00:24.525-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:6426 - Fixed several false positives by setting negate = true.  Also fixed several style issues." date="2011-12-28T21:13:00.551-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2011-12-28T21:21:11.278-05:00">INTERIM</status_change>
            <status_change date="2012-01-16T04:03:16.403-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="Vulnerable Microsoft Office XP, Project 2002, Visio 2002">
          <extend_definition comment="Microsoft Office XP is installed" definition_ref="oval:org.mitre.oval:def:663"/>
          <extend_definition comment="Microsoft Project 2002 SP1 is installed" definition_ref="oval:org.mitre.oval:def:707"/>
          <extend_definition comment="Microsoft Office Visio 2002 SP2 is installed" definition_ref="oval:org.mitre.oval:def:692"/>
        </criteria>
        <criterion comment="Mso.dll version is less than 10.0.6856.0" test_ref="oval:org.mitre.oval:tst:10932"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:707" version="1" class="inventory">
      <metadata>
        <title>Microsoft Project 2002 SP1 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:project:2002:sp1"/>
        <description>The application Microsoft Project 2002 SP1 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-07-25T12:05:33">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-10-07T09:15:51.895-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:59.024-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Windows Project Professional 2002 Service Pack 1 is installed" test_ref="oval:org.mitre.oval:tst:555"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:692" version="3" class="inventory">
      <metadata>
        <title>Microsoft Office Visio 2002 SP2 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Office Visio 2002</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:visio:2002:sp2"/>
        <description>The application Microsoft Office Visio 2002 SP2 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-07-25T12:05:33">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-10-07T09:15:51.484-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:58.914-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:692 - products added to inventories" date="2015-04-17T09:41:00.607-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-04-17T09:42:54.947-04:00">INTERIM</status_change>
            <status_change date="2015-05-04T04:00:21.507-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Microsoft Office Visio Professional 2002 with service pack 2" test_ref="oval:org.mitre.oval:tst:481"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:64" version="3" class="vulnerability">
      <metadata>
        <title>Windows 2000 Trusted Domain Loophole</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0018" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0018"/>
        <description>In Microsoft Windows NT and Windows 2000, a trusting domain that receives authorization information from a trusted domain does not verify that the trusted domain is authoritative for all listed SIDs, which allows remote attackers to gain Domain Administrator privileges on the trusting domain by injecting SIDs from untrusted domains into the authorization data that comes from from the trusted domain.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-05-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified date="2004-08-04T12:00:00.000-04:00" comment="Modifed without comment">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </modified>
            <status_change date="2004-08-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2004-08-26T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T10:56:00.000-04:00" comment="modified wft-220 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="File %windir%\system32\netlogon.dll version is less than 5.0.893.1105" negate="false" test_ref="oval:org.mitre.oval:tst:2991"/>
        <criterion comment="Windows 2000 Security Roll-up 1 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2990"/>
        <criterion comment="Patch Q319733 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3095"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6392" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in Solaris pollwakeup(9F) May Allow an Unprivileged User to Panic the System</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2952" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2952"/>
        <description>Unspecified vulnerability in the pollwakeup function in Sun Solaris 10, and OpenSolaris before snv_51, allows local users to cause a denial of service (panic) via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-08-25T16:38:09.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-08-26T08:16:49.443-04:00">DRAFT</status_change>
            <status_change date="2009-09-14T04:00:11.965-04:00">INTERIM</status_change>
            <status_change date="2009-10-05T04:00:06.640-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 265248">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 141414-09 or later installed" test_ref="oval:org.mitre.oval:tst:10377"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 265248">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 141415-09 or later installed" test_ref="oval:org.mitre.oval:tst:10060"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:637" version="1" class="vulnerability">
      <metadata>
        <title>RHE3 Firefox and Mozilla Framed Site Spoofing Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1937" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1937"/>
        <description>A regression error in Firefox 1.0.3 and Mozilla 1.7.7 allows remote attackers to inject arbitrary Javascript from one page into the frameset of another site, aka the frame injection spoofing vulnerability, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2004-0718.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-15T04:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-08-19T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2483"/>
          <criterion comment="mozilla RPM is earlier than 37:1.7.10-1.1.3.1" negate="false" test_ref="oval:org.mitre.oval:tst:2482"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/mozilla is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2650"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6349" version="1" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability in the Solaris SCTP Packet Processing may Lead to a System Panic Resulting in a Denial of Service (DoS)</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2486" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2486"/>
        <description>Unspecified vulnerability in the SCTP implementation in Sun Solaris 10, and OpenSolaris before snv_120, allows remote attackers to cause a denial of service (panic) via unspecified packets.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-08-12T12:29:13.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-08-12T18:16:42.390-04:00">DRAFT</status_change>
            <status_change date="2009-08-31T04:00:14.243-04:00">INTERIM</status_change>
            <status_change date="2009-09-21T04:00:07.660-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 253608">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 141414-01 or later installed" test_ref="oval:org.mitre.oval:tst:10476"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 253608">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 141415-01 or later installed" test_ref="oval:org.mitre.oval:tst:10522"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:634" version="4" class="vulnerability">
      <metadata>
        <title>vsftpd Fails to Integrate with TCP Wrappers</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>vsftpd</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0135" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0135"/>
        <description>vsftpd FTP daemon in Red Hat Linux 9 is not compiled against TCP wrappers (tcp_wrappers) but is installed as a standalone service, which inadvertently prevents vsftpd from restricting access as intended.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-11T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:23.164-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:38.322-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.109-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:58:30.699-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:33.393-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="vsftpd version is less than 1.1.3-8" negate="false" test_ref="oval:org.mitre.oval:tst:2487"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="vsftpd is listening to the network" negate="false" test_ref="oval:org.mitre.oval:tst:2486"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6313" version="5" class="vulnerability">
      <metadata>
        <title>IE v6.0,SP1 for Server 2003 Plug-in Navigation Address Bar Spoofing Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0843" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0843"/>
        <description>Internet Explorer 5.5 and 6 does not properly handle plug-in navigation, which allows remote attackers to alter displayed address bars and thereby spoof web pages, facilitating phishing attacks, aka the "Plug-in Navigation Address Bar Spoofing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-25T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-27T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-17T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-05-10T12:00:00.000-04:00" comment="modified wrt-51 - Comment updated to indicate IE 6.">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-05-11T05:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2621. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T20:21:00.819-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T20:22:36.346-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:50.347-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:58.522-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:24.919-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6  for Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2801"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.3790.219" negate="false" test_ref="oval:org.mitre.oval:tst:535"/>
          <criterion comment="the patch kb834707 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:534"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:631" version="2" class="vulnerability">
      <metadata>
        <title>up2date RPM GPG Signature Verification Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>up2date</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0546"/>
        <description>up2date 3.0.7 and 3.1.23 does not properly verify RPM GPG signatures, which could allow remote attackers to cause unsigned packages to be installed from the Red Hat Network, if that network is compromised.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-03T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:48.365-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:38.112-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="up2date version is less than 3.1.23.1-5" negate="false" test_ref="oval:org.mitre.oval:tst:2489"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="rhnsd is running" negate="false" test_ref="oval:org.mitre.oval:tst:2488"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:630" version="5" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP2 Travel Log Cross Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1026" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1026"/>
        <description>Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the history list and executed in the top window's zone when the history.back (back) function is called, as demonstrated by BackToFramedJpu, aka the "Travel Log Cross Domain Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-02-03T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:50:00.000-04:00" comment="modified wft-90 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2868. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:41:00.387-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:43:10.741-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:50.053-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:48.729-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:24.834-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3063"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3526.800" negate="false" test_ref="oval:org.mitre.oval:tst:2589"/>
          <criterion comment="the patch q832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2588"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:63" version="6" class="vulnerability">
      <metadata>
        <title>Windows 2000 Remote Access Service Phonebook Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Remote Access Service (RAS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0366" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0366"/>
        <description>Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server (RRAS) allows local users to execute arbitrary code by modifying the rasphone.pbk file to use a long dial-up entry.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-04-04T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2884" date="2010-11-29T16:14:00.692-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:40.053-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:01:04.202-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:27.244-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:18.751-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="RAS Phonebook" negate="false" test_ref="oval:org.mitre.oval:tst:2999"/>
          <criterion comment="File %windir%\system32\rasman.dll version is less than 5.0.2195.4983" negate="false" test_ref="oval:org.mitre.oval:tst:2992"/>
          <criterion comment="Patch Q318138 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2997"/>
          <criterion comment="Win2K/XP/2003 service pack 3 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:3079"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="RAS Enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2996"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:629" version="6" class="vulnerability">
      <metadata>
        <title>IE v6.0,SP1 (Server 2003) Function Pointer Drag and Drop Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1027"/>
        <description>Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by using method caching (SaveRef) to access the window.moveBy method, which is otherwise inaccessible, as demonstrated by HijackClickV2, a different vulnerability than CVE-2003-0823, aka the "Function Pointer Drag and Drop Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-02-03T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-05-10T12:00:00.000-04:00" comment="modified wrt-51 - Comment updated to indicate IE 6.">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-05-11T05:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:54:00.000-04:00" comment="modified wft-95 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2621. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T20:21:00.819-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T20:22:35.315-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:49.729-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:47.495-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:24.754-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6  for Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2801"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.3790.118" negate="false" test_ref="oval:org.mitre.oval:tst:2572"/>
          <criterion comment="the patch q832894 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2571"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6272" version="5" class="vulnerability">
      <metadata>
        <title>IE v6.0,SP1 (Server 2003) Drag-and-Drop Code Execution Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0839" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0839"/>
        <description>Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by "wottapoop.html".</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-25T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-27T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-17T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-05-10T12:00:00.000-04:00" comment="modified wrt-51 - Comment updated to indicate IE 6.">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-05-11T05:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2621. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T20:21:00.819-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T20:22:34.823-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:49.461-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:38.204-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:24.596-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6  for Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2801"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.3790.219" negate="false" test_ref="oval:org.mitre.oval:tst:535"/>
          <criterion comment="the patch kb834707 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:534"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6256" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in Solaris 9 fstat(2) System Call May Lead to a System Panic, Resulting in a Denial of Service (DoS)</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1673" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1673"/>
        <description>The kernel in Sun Solaris 9 allows local users to cause a denial of service (panic) by calling fstat with a first argument of AT_FDCWD.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-05-20T10:58:53.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-05-27T17:29:30.743-04:00">DRAFT</status_change>
            <status_change date="2009-06-15T04:01:13.061-04:00">INTERIM</status_change>
            <status_change date="2009-07-06T04:00:49.860-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 257988">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 122300-40 or later installed" test_ref="oval:org.mitre.oval:tst:9907"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 257988">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 122301-40 or later installed" test_ref="oval:org.mitre.oval:tst:10040"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:624" version="2" class="vulnerability">
      <metadata>
        <title>Exchange Server 5.5 TNEF Decoding Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Outlook</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0002" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0002"/>
        <description>Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-01-11T12:56:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-01-12T09:21:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-02-01T09:08:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.382-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:53:15.979-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:20.045-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Exchange 5.5 with SP4 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:2492"/>
        <criterion comment="the version of Mapi32.dll is less than 5.5.2658.34" negate="false" test_ref="oval:org.mitre.oval:tst:2491"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6234" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerabilities in the libxml2 Library Routines xmlBufferResize() May Lead to Denial of Service (DoS)</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4225" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4225"/>
        <description>Integer overflow in the xmlBufferResize function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (infinite loop) via a large XML document.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-02-13T15:56:00.000-05:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-02-13T17:01:31.147-05:00">DRAFT</status_change>
            <status_change date="2009-03-02T04:00:28.318-05:00">INTERIM</status_change>
            <status_change date="2009-03-23T04:00:21.781-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 240546">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 114014-22 or later installed" test_ref="oval:org.mitre.oval:tst:9654"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 240546">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 125731-04 or later installed" test_ref="oval:org.mitre.oval:tst:8710"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 240546">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 114015-22 or later installed" test_ref="oval:org.mitre.oval:tst:9487"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 240546">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 125732-04 or later installed" test_ref="oval:org.mitre.oval:tst:9600"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:623" version="1" class="vulnerability">
      <metadata>
        <title>sysreport Plaintext Password Leak</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>sysreport</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1760" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1760"/>
        <description>sysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the password for a proxy server in plaintext and allows local users to gain privileges.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-07-11T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-07-27T10:36:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="sysreport RPM earlier than 0:1.3.7.2-6" negate="false" test_ref="oval:org.mitre.oval:tst:2494"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/tmp is world-writable" negate="false" test_ref="oval:org.mitre.oval:tst:2493"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6226" version="3" class="vulnerability">
      <metadata>
        <title>Avast! Home and Professional 'aswMon2.sys' Stack-based Buffer Overflow Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Avast! AntiVirus</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3522" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3522"/>
        <description>Stack-based buffer overflow in aswMon2.sys in Avast! Home and Professional for Windows 4.8.1351, and possibly other versions before 4.8.1356, allows local users to cause a denial of service (system crash) and possibly gain privileges via a crafted IOCTL request to IOCTL 0xb2c80018.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-11-25T10:27:31.430-04:00">
              <contributor organization="SecPod Technologies">Sharath S</contributor>
            </submitted>
            <status_change date="2009-11-25T13:47:36.813-05:00">DRAFT</status_change>
            <status_change date="2009-12-14T04:00:08.462-05:00">INTERIM</status_change>
            <status_change date="2010-01-04T04:01:44.267-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:var:592 - Removed the trailing \ from all local_variables that are used as paths in a file_object" date="2011-08-03T08:25:00.425-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-08-03T08:27:16.300-04:00">INTERIM</status_change>
            <status_change date="2011-08-22T04:01:18.938-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Avast! AntiVirus is installed" definition_ref="oval:org.mitre.oval:def:6558"/>
        <criterion comment="Avast! version is less than 4.8.1356.0" test_ref="oval:org.mitre.oval:tst:10746"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6225" version="1" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability in the Solaris Print Service (in.lpd(1M)) May Lead to a Denial of Service (DoS) Condition</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2972" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2972"/>
        <description>in.lpd in the print service in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors that trigger a "fork()/exec() bomb."</description>
        <oval_repository>
          <dates>
            <submitted date="2009-08-28T12:11:40.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-08-28T20:32:58.712-04:00">DRAFT</status_change>
            <status_change date="2009-09-14T04:00:08.792-04:00">INTERIM</status_change>
            <status_change date="2009-10-05T04:00:05.585-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 264608">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion negate="true" comment="Patch 109320-23 or later installed" test_ref="oval:org.mitre.oval:tst:10451"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 264608">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 113329-07 or later installed" test_ref="oval:org.mitre.oval:tst:10764"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 264608">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 109321-23 or later installed" test_ref="oval:org.mitre.oval:tst:10134"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 264608">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 114980-09 or later installed" test_ref="oval:org.mitre.oval:tst:10602"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:622" version="6" class="vulnerability">
      <metadata>
        <title>Solaris 8, 9, 10 Blind Connection Reset Attack Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0790" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0790"/>
        <description>Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error messages, aka the "blind connection-reset attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:52:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:50.491-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:58.160-04:00">ACCEPTED</status_change>
            <modified comment="Added title. Implemented by Jon Baker of The MITRE Corporation." date="2007-02-13T14:46:00.662-05:00">
              <contributor organization="Security-Database">Nabil Ouchn</contributor>
            </modified>
            <status_change date="2007-02-13T14:47:31.744-05:00">INTERIM</status_change>
            <modified comment="Standardized title." date="2007-02-26T01:01:00.306-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-03-21T16:17:22.881-04:00">ACCEPTED</status_change>
            <modified comment="Added missing patch checks." date="2007-06-26T10:59:00.754-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </modified>
            <status_change date="2007-06-26T11:00:29.787-04:00">INTERIM</status_change>
            <status_change date="2007-07-11T15:17:33.358-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:622 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:42.080-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:38.771-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert ID 101658 criteria.">
          <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3437"/>
          <criterion comment="sparc architecture" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criterion negate="true" comment="Patch 116965-19 or later installed" test_ref="oval:org.mitre.oval:tst:4028"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert ID 101658 criteria.">
          <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3437"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criterion negate="true" comment="Patch 116966-18 or later installed" test_ref="oval:org.mitre.oval:tst:4069"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert ID 101658 criteria.">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3172"/>
          <criterion comment="sparc architecture" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criterion negate="true" comment="Patch 118305-08 or later installed" test_ref="oval:org.mitre.oval:tst:3204"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert ID 101658 criteria.">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3172"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criterion negate="true" comment="Patch 117470-07 or later installed" test_ref="oval:org.mitre.oval:tst:4114"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert ID 101658 criteria.">
          <criterion comment="Solaris 10 Installed" test_ref="oval:org.mitre.oval:tst:3680"/>
          <criterion comment="sparc architecture" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criterion negate="true" comment="Patch 118822-27 or later installed" test_ref="oval:org.mitre.oval:tst:3505"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert ID 101658 criteria.">
          <criterion comment="Solaris 10 Installed" test_ref="oval:org.mitre.oval:tst:3680"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criterion negate="true" comment="Patch 118844-28 or later installed" test_ref="oval:org.mitre.oval:tst:3302"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6219" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerabilities in the libxml2 Library Routines xmlSAX2Characters() May Lead to Arbitrary Code Execution or Denial of Service (DoS)</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4226" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4226"/>
        <description>Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a large XML document.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-02-13T15:56:00.000-05:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-02-13T17:01:31.658-05:00">DRAFT</status_change>
            <status_change date="2009-03-02T04:00:27.722-05:00">INTERIM</status_change>
            <status_change date="2009-03-23T04:00:21.430-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 240546">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 114014-22 or later installed" test_ref="oval:org.mitre.oval:tst:9654"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 240546">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 125731-04 or later installed" test_ref="oval:org.mitre.oval:tst:8710"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 240546">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 114015-22 or later installed" test_ref="oval:org.mitre.oval:tst:9487"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 240546">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 125732-04 or later installed" test_ref="oval:org.mitre.oval:tst:9600"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6203" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the Solaris keysock Kernel Module may Lead to a System Panic</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0913" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0913"/>
        <description>Unspecified vulnerability in the keysock kernel module in Solaris 10 and OpenSolaris builds snv_01 through snv_108 allows local users to cause a denial of service (system panic) via unknown vectors related to PF_KEY socket, probably related to setting socket options.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-04-02T11:13:52.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-04-08T14:20:04.712-04:00">DRAFT</status_change>
            <status_change date="2009-04-27T04:00:16.486-04:00">INTERIM</status_change>
            <status_change date="2009-05-18T04:00:27.304-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 253568">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 141008-01 or later installed" test_ref="oval:org.mitre.oval:tst:9765"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 253568">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 141009-01 or later installed" test_ref="oval:org.mitre.oval:tst:9425"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:62" version="1" class="vulnerability">
      <metadata>
        <title>Solaris 7 mibiisa Remote Buffer Overflow Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>mibiisa</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0797" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0797"/>
        <description>Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root privileges.</description>
        <oval_repository>
          <dates>
            <submitted date="2002-10-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="File mibiisa exists" negate="false" test_ref="oval:org.mitre.oval:tst:2995"/>
          <criterion comment="Patch 107709-19 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:2994"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="mibiisa running" negate="false" test_ref="oval:org.mitre.oval:tst:2993"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:619" version="2" class="vulnerability">
      <metadata>
        <title>UnZip 5.0 Directory Traversal Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>unzip</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0282" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0282"/>
        <description>Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two . (dot) characters, which are filtered and result in a ".." sequence.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-04T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:46.657-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:37.784-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="unzip version is less than 5.50-33" negate="false" test_ref="oval:org.mitre.oval:tst:2498"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/bin/unzip is executable">
            <criterion comment="/usr/bin/unzip is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2497"/>
            <criterion comment="/usr/bin/unzip is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2496"/>
            <criterion comment="/usr/bin/unzip is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2495"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6183" version="1" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability in the Solaris dircmp(1) Shell Script may Allow Overwriting of Arbitrary Files</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1207"/>
        <description>Race condition in the dircmp script in Sun Solaris 8 through 10, and OpenSolaris snv_01 through snv_111, allows local users to overwrite arbitrary files, probably involving a symlink attack on temporary files.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-04-02T11:13:52.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-04-08T14:20:08.844-04:00">DRAFT</status_change>
            <status_change date="2009-04-27T04:00:15.946-04:00">INTERIM</status_change>
            <status_change date="2009-05-18T04:00:26.719-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 253468">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion negate="true" comment="Patch 140837-01 or later installed" test_ref="oval:org.mitre.oval:tst:9742"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 253468">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 138896-01 or later installed" test_ref="oval:org.mitre.oval:tst:9760"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 253468">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 141014-01 or later installed" test_ref="oval:org.mitre.oval:tst:9632"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 253468">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 140838-01 or later installed" test_ref="oval:org.mitre.oval:tst:9652"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 253468">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 138897-01 or later installed" test_ref="oval:org.mitre.oval:tst:9731"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 253468">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 141015-01 or later installed" test_ref="oval:org.mitre.oval:tst:9537"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:618" version="5" class="vulnerability">
      <metadata>
        <title>Windows XP,SP1 Remote Desktop Protocol (RDP) DoS Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1218"/>
        <description>The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attackers to cause a denial of service (crash) via crafted Remote Desktop Protocol (RDP) requests.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:40:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:50.349-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:57.992-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:618 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:04.955-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:17.306-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows XP is installed" test_ref="oval:org.mitre.oval:tst:3750"/>
        <criterion comment="Win2K/XP/2003 service pack 1 is installed" test_ref="oval:org.mitre.oval:tst:3342"/>
        <criterion negate="true" comment="64-Bit (ia64 architecture) version of Windows is installed" test_ref="oval:org.mitre.oval:tst:3257"/>
        <criterion comment="the version of rdpwd.sys is less than 5.1.2600.1698" test_ref="oval:org.mitre.oval:tst:3742"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6175" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerabilities in the Solaris lpadmin(1M) and ppdmgr(1M) Utilities May Lead to a Denial of Service (DoS) Condition</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0167" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0167"/>
        <description>Unspecified vulnerability in lpadmin in Sun Solaris 10 and OpenSolaris snv_61 through snv_106 allows local users to cause a denial of service via unspecified vectors, related to enumeration of "wrong printers," aka a "Temporary file vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2009-02-05T13:18:38.000-05:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-02-06T15:58:48.744-05:00">DRAFT</status_change>
            <status_change date="2009-02-23T04:00:23.607-05:00">INTERIM</status_change>
            <status_change date="2009-03-16T04:00:20.571-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 249306">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 127127-11 installed" test_ref="oval:org.mitre.oval:tst:9551"/>
          <criterion negate="true" comment="Patch 139390-01 or later installed" test_ref="oval:org.mitre.oval:tst:9591"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 249306">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 127128-11 installed" test_ref="oval:org.mitre.oval:tst:9422"/>
          <criterion negate="true" comment="Patch 139391-01 or later installed" test_ref="oval:org.mitre.oval:tst:8934"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6168" version="1" class="vulnerability">
      <metadata>
        <title>Race Condition Security Vulnerability in Solaris Auditing Related to Extended File Attributes May Allow Local Unprivileged Users to Panic the System</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2644" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2644"/>
        <description>Race condition in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv_121, when extended file attributes are used, allows local users to cause a denial of service (panic) via vectors related to "pathnames for invalid fds."</description>
        <oval_repository>
          <dates>
            <submitted date="2009-08-10T16:40:08.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-08-12T09:49:57.004-04:00">DRAFT</status_change>
            <status_change date="2009-08-31T04:00:08.660-04:00">INTERIM</status_change>
            <status_change date="2009-09-21T04:00:05.908-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="Software Section">
          <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 264429">
            <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
            <criterion negate="true" comment="Patch 122300-42 or later installed" test_ref="oval:org.mitre.oval:tst:10143"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 264429">
            <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
            <criterion negate="true" comment="Patch 140921-02 or later installed" test_ref="oval:org.mitre.oval:tst:10518"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 264429">
            <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
            <criterion negate="true" comment="Patch 122301-42 or later installed" test_ref="oval:org.mitre.oval:tst:10507"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 264429">
            <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
            <criterion negate="true" comment="Patch 140922-02 or later installed" test_ref="oval:org.mitre.oval:tst:9991"/>
          </criteria>
        </criteria>
        <criterion comment="Solaris Auditing is enabled" test_ref="oval:org.mitre.oval:tst:10368"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6166" version="3" class="vulnerability">
      <metadata>
        <title>Virtual PC and Virtual Server Privileged Instruction Decoding Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <product>Microsoft Virtual Server 2005</product>
          <product>Microsoft Virtual PC 2004</product>
          <product>Microsoft Virtual PC 2007</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1542" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1542"/>
        <description>The Virtual Machine Monitor (VMM) in Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, does not enforce CPU privilege-level requirements for all machine instructions, which allows guest OS users to execute arbitrary kernel-mode code and gain privileges within the guest OS via a crafted application, aka "Virtual PC and Virtual Server Privileged Instruction Decoding Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2009-07-14T13:00:00">
              <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2009-07-20T15:51:35.232-04:00">DRAFT</status_change>
            <status_change date="2009-08-10T04:00:06.156-04:00">INTERIM</status_change>
            <status_change date="2009-08-31T04:00:08.267-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:6166 - - def:6166, Microsoft Virtual Server 2005 criteria added according to bulletin revision 2. - obj:2423 is updated to use the proper registry key." date="2011-10-27T10:17:00.608-04:00">
              <contributor organization="SecPod Technologies">Rachana Shetty</contributor>
            </modified>
            <status_change date="2011-10-27T10:20:08.656-04:00">INTERIM</status_change>
            <status_change date="2011-11-14T04:00:58.694-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria comment="Microsoft Virtual PC 2004 SP1">
          <extend_definition comment="Microsoft Virtual PC 2004 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:2177"/>
          <criterion comment="The version of VMM.sys is less than 1.1.465.15" test_ref="oval:org.mitre.oval:tst:9798"/>
        </criteria>
        <criteria comment="Microsoft Virtual PC 2007">
          <extend_definition comment="Microsoft Virtual PC 2007 is installed" definition_ref="oval:org.mitre.oval:def:5854"/>
          <criterion comment="The version of VMM.sys is less than 1.1.598.0" test_ref="oval:org.mitre.oval:tst:10244"/>
        </criteria>
        <criteria comment="Microsoft Virtual PC 2007 SP1">
          <extend_definition comment="Microsoft Virtual PC 2007 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:6324"/>
          <criterion comment="The version of VMM.sys is less than 1.1.656.0" test_ref="oval:org.mitre.oval:tst:10406"/>
        </criteria>
        <criteria comment="Microsoft Virtual Server 2005 R2 Enterprise">
          <extend_definition comment="Microsoft Virtual Server 2005 R2 is installed" definition_ref="oval:org.mitre.oval:def:6342"/>
          <criterion comment="The version of VMM.sys is less than 1.1.656.0" test_ref="oval:org.mitre.oval:tst:10406"/>
        </criteria>
        <criteria operator="AND" comment="Microsoft Virtual Server 2005">
          <criteria operator="OR" comment="Check Microsoft Virtual Server 2005 Standard or Enterprise">
            <extend_definition comment="Microsoft Virtual Server 2005 Enterprise is installed" definition_ref="oval:org.mitre.oval:def:2220"/>
            <extend_definition comment="Microsoft Virtual Server 2005 Standard is installed" definition_ref="oval:org.mitre.oval:def:2119"/>
          </criteria>
          <criterion comment="The version of VMM.sys is less than 1.1.465.16" test_ref="oval:org.mitre.oval:tst:44366"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6342" version="5" class="inventory">
      <metadata>
        <title>Microsoft Virtual Server 2005 R2 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <product>Microsoft Virtual Server 2005 R2</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:virtual_server:2005:r2"/>
        <description>The application Microsoft Virtual Server 2005 R2 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-07-14T13:00:00">
              <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2009-07-20T15:51:35.080-04:00">DRAFT</status_change>
            <status_change date="2009-08-10T04:00:10.944-04:00">INTERIM</status_change>
            <status_change date="2009-08-31T04:00:13.951-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:6342 - Modifications vary from minor OVAL title/description changes to suggesting an alternative CPE name to use." date="2011-09-28T11:29:00.976-04:00">
              <contributor organization="The MITRE Corporation">David Rothenberg</contributor>
            </modified>
            <status_change date="2011-09-28T11:33:33.474-04:00">INTERIM</status_change>
            <status_change date="2011-10-17T04:00:22.585-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:6342 - Added product info to inventory" date="2015-05-12T14:25:00.628-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-05-12T14:28:56.094-04:00">INTERIM</status_change>
            <status_change date="2015-06-01T04:00:23.534-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Microsoft Virtual Server 2005 R2 Service Pack 1, Enterprise Edition is installed" test_ref="oval:org.mitre.oval:tst:10032"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6324" version="1" class="inventory">
      <metadata>
        <title>Microsoft Virtual PC 2007 Service Pack 1 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:virtual_pc:2007:sp1"/>
        <description>The application Microsoft Virtual PC 2007 Service Pack 1 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-07-14T13:00:00">
              <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2009-07-20T15:51:34.701-04:00">DRAFT</status_change>
            <status_change date="2009-08-10T04:00:08.326-04:00">INTERIM</status_change>
            <status_change date="2009-08-31T04:00:11.552-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Microsoft Virtual PC 2007 Service Pack 1 is installed" test_ref="oval:org.mitre.oval:tst:10104"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5854" version="1" class="inventory">
      <metadata>
        <title>Microsoft Virtual PC 2007 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:virtual_pc:2007"/>
        <description>The application Microsoft Virtual PC 2007 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-07-14T13:00:00">
              <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2009-07-20T15:51:34.497-04:00">DRAFT</status_change>
            <status_change date="2009-08-10T04:00:05.145-04:00">INTERIM</status_change>
            <status_change date="2009-08-31T04:00:06.732-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Microsoft Virtual PC 2007 is installed" test_ref="oval:org.mitre.oval:tst:10031"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2220" version="3" class="inventory">
      <metadata>
        <title>Microsoft Virtual Server 2005 Enterprise is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Virtual Server 2005</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:virtual_server:2005::enterprise"/>
        <description>The application Microsoft Virtual Server 2005 Enterprise is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-16T14:45:00">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </submitted>
            <status_change date="2007-08-20T07:56:42.451-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:32.616-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:46.885-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:2220 - Added product info to inventory" date="2015-05-12T14:25:00.628-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-05-12T14:28:56.172-04:00">INTERIM</status_change>
            <status_change date="2015-06-01T04:00:13.995-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Microsoft Virtual Server 2005 Enterprise is installed" test_ref="oval:org.mitre.oval:tst:3460"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2177" version="1" class="inventory">
      <metadata>
        <title>Microsoft Virtual PC 2004 Service Pack 1 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:virtual_pc:2004:sp1"/>
        <description>The application Microsoft Virtual PC 2004 Service Pack 1 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-16T14:45:00">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </submitted>
            <status_change date="2007-08-20T07:56:42.337-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:31.874-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:45.837-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Microsoft Virtual PC 2004 Service Pack 1 is installed" test_ref="oval:org.mitre.oval:tst:3530"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2119" version="5" class="inventory">
      <metadata>
        <title>Microsoft Virtual Server 2005 Standard is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Virtual Server 2005</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:virtual_server:2005::std"/>
        <description>The application Microsoft Virtual Server 2005 Standard is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-16T14:45:00">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </submitted>
            <status_change date="2007-08-20T07:56:42.399-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:30.805-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:44.665-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:2423 - - def:6166, Microsoft Virtual Server 2005 criteria added according to bulletin revision 2. - obj:2423 is updated to use the proper registry key." date="2011-10-27T10:17:00.608-04:00">
              <contributor organization="SecPod Technologies">Rachana Shetty</contributor>
            </modified>
            <status_change date="2011-10-27T10:20:08.008-04:00">INTERIM</status_change>
            <status_change date="2011-11-14T04:00:19.400-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:2119 - Added product info to inventory" date="2015-05-12T14:25:00.628-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-05-12T14:28:56.261-04:00">INTERIM</status_change>
            <status_change date="2015-06-01T04:00:13.636-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Microsoft Virtual Server 2005 Standard is installed" test_ref="oval:org.mitre.oval:tst:4165"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6152" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the Solaris Kernel Involving the Interaction of the Filesystem and Virtual Memory Subsystems</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2857" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2857"/>
        <description>The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_103, does not properly handle interaction between the filesystem and virtual-memory implementations, which allows local users to cause a denial of service (deadlock and system halt) via vectors involving mmap and write operations on the same file.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-08-21T11:07:35.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-08-21T20:56:31.695-04:00">DRAFT</status_change>
            <status_change date="2009-09-07T04:00:11.548-04:00">INTERIM</status_change>
            <status_change date="2009-09-28T04:00:15.555-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 257848">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion negate="true" comment="Patch 127721-02 or later installed" test_ref="oval:org.mitre.oval:tst:10639"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 257848">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 122300-41 or later installed" test_ref="oval:org.mitre.oval:tst:10603"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 257848">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 139555-08 or later installed" test_ref="oval:org.mitre.oval:tst:9767"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 257848">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 127722-02 or later installed" test_ref="oval:org.mitre.oval:tst:10324"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 257848">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 122301-41 or later installed" test_ref="oval:org.mitre.oval:tst:10053"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 257848">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 139556-08 or later installed" test_ref="oval:org.mitre.oval:tst:10254"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:615" version="4" class="vulnerability">
      <metadata>
        <title>HP-UX ftpd Remote Unauthorized Data Access (B.11.11)</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
          <product>ftpd</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3296" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3296"/>
        <description>The FTP server in HP-UX 10.20, B.11.00, and B.11.11, allows remote attackers to list arbitrary directories as root by running the LIST command before logging in.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:48:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:49.969-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:57.625-04:00">ACCEPTED</status_change>
            <modified comment="Added title." date="2007-02-25T23:52:00.850-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-02-25T23:52:49.873-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:22.517-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:tst:3704 - HP-UX Security Advisories published in February 2014" date="2014-03-05T13:28:00.446-05:00">
              <contributor organization="Hewlett-Packard">Sushant Kumar Singh</contributor>
            </modified>
            <status_change date="2014-03-05T13:32:30.580-05:00">INTERIM</status_change>
            <status_change date="2014-03-24T04:01:51.288-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.11" negate="false">
          <criteria operator="AND" comment="700 Series OS Release 11.11" negate="false">
            <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:3443"/>
            <criterion comment="HP Release B.11.11" negate="false" test_ref="oval:org.mitre.oval:tst:3704"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 11.11" negate="false">
            <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:4124"/>
            <criterion comment="HP Release B.11.11" negate="false" test_ref="oval:org.mitre.oval:tst:3704"/>
          </criteria>
        </criteria>
        <criterion comment="WUFTP-26.INETSVCS-FTP with version less than B.11.11.01.006 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3641"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:614" version="2" class="vulnerability">
      <metadata>
        <title>SqirrelMail Cross-site Scripting Vulnerabilities</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>SquirrelMail</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0160" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0160"/>
        <description>Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.2.11 allow remote attackers to inject arbitrary HTML code and steal information from a client's web browser.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-17T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:33.275-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:37.549-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="squirrelmail version is less than 1.2.11-1" negate="false" test_ref="oval:org.mitre.oval:tst:2499"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6136" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the Simple Authentication and Security Layer (SASL) Library Bundled with the Java Enterprise System (JES) may Allow Unprivileged Users to Crash Applications Using the sasl_encode64 Function</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0688" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0688"/>
        <description>Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-07-28T11:14:39.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-07-30T17:45:06.789-04:00">DRAFT</status_change>
            <status_change date="2009-08-17T04:00:03.181-04:00">INTERIM</status_change>
            <status_change date="2009-09-07T04:00:11.189-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="Software Section">
          <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 264248">
            <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
            <criterion negate="true" comment="Patch 115328-08 or later installed" test_ref="oval:org.mitre.oval:tst:10445"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 264248">
            <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
            <criterion negate="true" comment="Patch 115342-08 or later installed" test_ref="oval:org.mitre.oval:tst:10367"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 264248">
            <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
            <criterion negate="true" comment="Patch 119345-07 or later installed" test_ref="oval:org.mitre.oval:tst:10193"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 264248">
            <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
            <criterion negate="true" comment="Patch 115343-08 or later installed" test_ref="oval:org.mitre.oval:tst:10455"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 264248">
            <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
            <criterion negate="true" comment="Patch 119346-07 or later installed" test_ref="oval:org.mitre.oval:tst:9898"/>
          </criteria>
        </criteria>
        <criterion comment="SUNWsasl is installed" test_ref="oval:org.mitre.oval:tst:9482"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6116" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability with IKE Packet Handling in Solaris libike Library may Lead to a Crash of in.iked(1M)</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0267" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0267"/>
        <description>libike in Sun Solaris 9 and 10, and OpenSolaris before snv_100, does not properly check packets, which allows remote attackers to cause a denial of service (in.iked daemon crash) via an unspecified IKE packet, a different vulnerability than CVE-2007-2989.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-01-28T11:08:21.000-05:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-01-30T18:16:31.359-05:00">DRAFT</status_change>
            <status_change date="2009-02-16T04:00:26.978-05:00">INTERIM</status_change>
            <status_change date="2009-03-09T04:00:11.155-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="Software Section">
          <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 247406">
            <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
            <criterion negate="true" comment="Patch 113451-15 or later installed" test_ref="oval:org.mitre.oval:tst:9566"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 247406">
            <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
            <criterion negate="true" comment="Patch 140196-01 or later installed" test_ref="oval:org.mitre.oval:tst:8940"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 247406">
            <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
            <criterion negate="true" comment="Patch 114435-14 or later installed" test_ref="oval:org.mitre.oval:tst:9611"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 247406">
            <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
            <criterion negate="true" comment="Patch 140414-01 or later installed" test_ref="oval:org.mitre.oval:tst:8709"/>
          </criteria>
        </criteria>
        <criterion comment="File /etc/inet/ike/config exists" test_ref="oval:org.mitre.oval:tst:9478"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6100" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.5,SP2 Install Engine Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0216" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0216"/>
        <description>Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious website or HTML email with a long .CAB file name, which triggers the integer overflow when calculating a buffer length and leads to a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-18T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-01-20T02:31:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:42:00.000-04:00" comment="modified wft-562 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:41.030-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:24.382-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
          <criterion comment="the version of mshtml.dll is less than 5.50.4945.2800" negate="false" test_ref="oval:org.mitre.oval:tst:384"/>
          <criterion comment="the patch kb834707 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:855"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:610" version="5" class="vulnerability">
      <metadata>
        <title>HP-UX AutoRAID Critical Functionality Issue</title>
        <affected family="unix">
          <platform>HP-UX 10</platform>
          <product>AutoRAID Manager</product>
        </affected>
        <reference source="MISC" ref_id="PHCO_23261" ref_url="http://www.itrc.hp.com/service/cki/patchDocDisplay.do?patchId=PHCO_23261"/>
        <description>Possible unknown vulnerability or vulnerabilities in HP DiskArray Utilities with AutoRAID Manager.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:48:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:49.786-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:57.424-04:00">ACCEPTED</status_change>
            <modified comment="Added title and reference, updated description and product." date="2007-02-26T15:48:00.739-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-02-26T15:49:57.767-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:22.307-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:30.769-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:12.759-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:610 - Typo Corrections" date="2014-05-22T11:03:00.270-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-05-22T11:06:08.156-04:00">INTERIM</status_change>
            <status_change date="2014-06-09T04:01:45.320-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 10.X">
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 10.20">
            <criteria operator="AND" comment="700 Series OS Release 10.20">
              <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:3443"/>
              <criterion comment="HP Release B.10.20" test_ref="oval:org.mitre.oval:tst:3807"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 10.20">
              <criterion comment="800-series HP" test_ref="oval:org.mitre.oval:tst:4124"/>
              <criterion comment="HP Release B.10.20" test_ref="oval:org.mitre.oval:tst:3807"/>
            </criteria>
          </criteria>
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 10.01">
            <criteria operator="AND" comment="700 Series OS Release 10.01">
              <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:3443"/>
              <criterion comment="HP Release B.10.01" test_ref="oval:org.mitre.oval:tst:3581"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 10.01">
              <criterion comment="800-series HP" test_ref="oval:org.mitre.oval:tst:4124"/>
              <criterion comment="HP Release B.10.01" test_ref="oval:org.mitre.oval:tst:3581"/>
            </criteria>
          </criteria>
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 10.10">
            <criteria operator="AND" comment="700 Series OS Release 10.10">
              <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:3443"/>
              <criterion comment="HP Release B.10.10" test_ref="oval:org.mitre.oval:tst:3985"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 10.10">
              <criterion comment="800-series HP" test_ref="oval:org.mitre.oval:tst:4124"/>
              <criterion comment="HP Release B.10.10" test_ref="oval:org.mitre.oval:tst:3985"/>
            </criteria>
          </criteria>
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 10.30">
            <criteria operator="AND" comment="700 Series OS Release 10.30">
              <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:3443"/>
              <criterion comment="HP Release B.10.30" test_ref="oval:org.mitre.oval:tst:3461"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 10.30">
              <criterion comment="800-series HP" test_ref="oval:org.mitre.oval:tst:4124"/>
              <criterion comment="HP Release B.10.30" test_ref="oval:org.mitre.oval:tst:3461"/>
            </criteria>
          </criteria>
        </criteria>
        <criteria operator="OR" comment="OS-Core.ADMN-ENG-A-MAN or OS-Core.C2400-UTIL is installed">
          <criterion comment="OS-Core.ADMN-ENG-A-MAN is installed" test_ref="oval:org.mitre.oval:tst:3370"/>
          <criterion comment="OS-Core.C2400-UTIL is installed" test_ref="oval:org.mitre.oval:tst:3376"/>
        </criteria>
        <criterion negate="true" comment="Patch PHCO_23261 is installed" test_ref="oval:org.mitre.oval:tst:3674"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6094" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in GNU tar May Lead to Arbitrary Code Execution or Denial of Service (DoS)</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0300" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0300"/>
        <description>Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-04-30T11:23:00.000-04:00">
              <contributor organization="Hewlett-Packard">Michael Wood</contributor>
            </submitted>
            <status_change date="2009-05-07T11:17:30.107-04:00">DRAFT</status_change>
            <status_change date="2009-05-25T04:01:59.363-04:00">INTERIM</status_change>
            <status_change date="2009-06-15T04:01:00.185-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 241646">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 118192-02 or later installed" test_ref="oval:org.mitre.oval:tst:10043"/>
          <criterion comment="Patch 118192-01 or later installed" test_ref="oval:org.mitre.oval:tst:10160"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6092" version="3" class="vulnerability">
      <metadata>
        <title>Integer Overflow Vulnerability in the Solaris 8 and 9 sadmind(1M) Daemon May Lead to Arbitrary Code Execution</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3870" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3870"/>
        <description>Integer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request that triggers a heap-based buffer overflow, related to improper memory allocation.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-05-28T13:34:47.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-06-05T14:12:44.849-04:00">DRAFT</status_change>
            <status_change date="2009-06-22T04:00:27.049-04:00">INTERIM</status_change>
            <status_change date="2009-07-13T04:00:47.597-04:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:53.660-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:32.984-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="Software Section">
          <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 259468">
            <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
            <criterion negate="true" comment="Patch 116455-02 or later installed" test_ref="oval:org.mitre.oval:tst:9833"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 259468">
            <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
            <criterion negate="true" comment="Patch 116453-03 or later installed" test_ref="oval:org.mitre.oval:tst:9695"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 259468">
            <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
            <criterion negate="true" comment="Patch 116442-02 or later installed" test_ref="oval:org.mitre.oval:tst:10038"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 259468">
            <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
            <criterion negate="true" comment="Patch 116454-03 or later installed" test_ref="oval:org.mitre.oval:tst:10171"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Configuration Section">
          <criterion comment="inetd running" test_ref="oval:org.mitre.oval:tst:3135"/>
          <criterion comment="inetd.conf contains sadmind" test_ref="oval:org.mitre.oval:tst:1023"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:609" version="6" class="vulnerability">
      <metadata>
        <title>Windows Server 2003 Remote Desktop Protocol (RDP) DoS Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1218"/>
        <description>The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attackers to cause a denial of service (crash) via crafted Remote Desktop Protocol (RDP) requests.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:40:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:49.579-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:57.082-04:00">ACCEPTED</status_change>
            <modified comment="Corrected tst:3429. Removed reference to ste:3948. Deprecated ste:3948" date="2007-02-12T10:38:00.383-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T10:40:21.704-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:22.135-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:609 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:08.011-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:16.119-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:4033"/>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:3429"/>
        <criterion comment="the version of rdpwd.sys is less than 5.2.3790.348" test_ref="oval:org.mitre.oval:tst:3978"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6088" version="1" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability in the Solaris ip(7P) Kernel Module's IP-in-IP Packet Processing May Lead to a Denial of Service (DoS)</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0346" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0346"/>
        <description>The IP-in-IP packet processing implementation in the IPsec and IP stacks in the kernel in Sun Solaris 9 and 10, and OpenSolaris snv_01 though snv_85, allows local users to cause a denial of service (panic) via a self-encapsulated packet that lacks IPsec protection.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-02-05T13:18:38.000-05:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-02-06T15:58:53.969-05:00">DRAFT</status_change>
            <status_change date="2009-02-23T04:00:23.036-05:00">INTERIM</status_change>
            <status_change date="2009-03-16T04:00:16.923-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 240086">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 114344-38 or later installed" test_ref="oval:org.mitre.oval:tst:9675"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 240086">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 138888-03 or later installed" test_ref="oval:org.mitre.oval:tst:8820"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 240086">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 119435-26 or later installed" test_ref="oval:org.mitre.oval:tst:9614"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 240086">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 138889-03 or later installed" test_ref="oval:org.mitre.oval:tst:9254"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6085" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in Solaris SSH May Allow Unauthorized Access to X11 Sessions</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1483"/>
        <description>OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-08-25T11:33:40.000-04:00">
              <contributor organization="Hewlett-Packard">Nicholas Hansen</contributor>
            </submitted>
            <status_change date="2008-08-28T14:12:27.939-04:00">DRAFT</status_change>
            <status_change date="2008-09-15T04:00:28.608-04:00">INTERIM</status_change>
            <status_change date="2008-10-06T04:00:20.232-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="Software Section">
          <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 237444">
            <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
            <criterion negate="true" comment="Patch 114356-14 or later installed" test_ref="oval:org.mitre.oval:tst:9096"/>
            <criterion comment="X11Forwarding is enabled" test_ref="oval:org.mitre.oval:tst:9067"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 237444">
            <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
            <criterion negate="true" comment="Patch 114357-13 or later installed" test_ref="oval:org.mitre.oval:tst:9157"/>
            <criterion comment="X11Forwarding is enabled" test_ref="oval:org.mitre.oval:tst:9067"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 237444">
            <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
            <criterion negate="true" comment="Patch 126133-03 or later installed" test_ref="oval:org.mitre.oval:tst:9197"/>
            <criterion negate="true" comment="X11Forwarding is not enabled" test_ref="oval:org.mitre.oval:tst:9165"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 237444">
            <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
            <criterion negate="true" comment="Patch 126134-03 or later installed" test_ref="oval:org.mitre.oval:tst:9048"/>
            <criterion negate="true" comment="X11Forwarding is not enabled" test_ref="oval:org.mitre.oval:tst:9165"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration Section">
          <criterion comment="sshd running" test_ref="oval:org.mitre.oval:tst:484"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6061" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the Solaris Pseudo-terminal Driver (pty(7D)) may Cause a System Panic</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0268"/>
        <description>Race condition in the pseudo-terminal (aka pty) driver module in Sun Solaris 8 through 10, and OpenSolaris before snv_103, allows local users to cause a denial of service (panic) via unspecified vectors related to lack of "properly sequenced code" in ptc and ptsl.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-01-28T11:08:21.000-05:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-01-30T18:16:32.895-05:00">DRAFT</status_change>
            <status_change date="2009-02-16T04:00:26.165-05:00">INTERIM</status_change>
            <status_change date="2009-03-09T04:00:10.700-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 249586">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion negate="true" comment="Patch 113685-07 or later installed" test_ref="oval:org.mitre.oval:tst:9513"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 249586">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 140426-01 or later installed" test_ref="oval:org.mitre.oval:tst:9267"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 249586">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 140383-01 or later installed" test_ref="oval:org.mitre.oval:tst:9659"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 249586">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 113686-06 or later installed" test_ref="oval:org.mitre.oval:tst:9438"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 249586">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 140427-01 or later installed" test_ref="oval:org.mitre.oval:tst:9498"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 249586">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 140384-01 or later installed" test_ref="oval:org.mitre.oval:tst:9523"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:606" version="8" class="vulnerability">
      <metadata>
        <title>MS FrontPage Server Extensions SmartHTML Denial of Service (Test 3)</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft FrontPage Server Extensions 2000</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0824" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0824"/>
        <description>Unknown vulnerability in the SmartHTML interpreter (shtml.dll) in Microsoft FrontPage Server Extensions 2000 and 2002, and Microsoft SharePoint Team Services 2002, allows remote attackers to cause a denial of service (response failure) via a certain request.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-12-09T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-14T12:00:00.000-04:00" comment="Changed the definition to look at the file shtml.dll instead of fp4awel.dll.  It was determined that this is where the vulnerability (a buffer overflow) actually existed.  Also added the configuration test saying you are vulnerable if the SmartHTML interpreter is enabled.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T10:51:00.000-04:00" comment="modified wft-12 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected to use a forward slash as the separator in the key." date="2007-05-07T15:59:00.964-04:00">
              <contributor organization="Secure Elements, Inc.">Glenn Strickland</contributor>
            </modified>
            <status_change date="2007-05-07T16:05:38.476-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:49.456-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2656" date="2010-11-29T16:12:00.873-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:13:01.868-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:01:03.624-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:42.958-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:15.195-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="AND" comment="Windows XP (sp1 or earlier) is installed">
            <criterion comment="Windows XP is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2838"/>
            <criterion comment="Win2K/XP/2003 service pack 2 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2837"/>
          </criteria>
          <criterion comment="the version of shtml.dll is less than 4.00.02.7523" negate="false" test_ref="oval:org.mitre.oval:tst:2708"/>
          <criterion comment="the patch q810217 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2707"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="FrontPage Server Extensions 2000 are enabled (2K, XP)" negate="false" test_ref="oval:org.mitre.oval:tst:2706"/>
          <criterion comment="SmartHTML interpreter is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2705"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6048" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01, SP4 HijackClick 3 / Script in Image Tag File Download Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0841" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0841"/>
        <description>Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" and the "Script in Image Tag File Download Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-18T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-01-20T02:31:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:45.715-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:48.581-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:36.497-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:24.192-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3534.2800" negate="false" test_ref="oval:org.mitre.oval:tst:519"/>
          <criterion comment="the patch kb834707-ie501sp4 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:518"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6038" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the Solaris IP(7p) Implementation, Related to Minor Number Allocation, may Lead to a Denial of Service (DoS) Condition</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0480"/>
        <description>The IP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv_82, uses an improper arena when allocating minor numbers for sockets, which allows local users to cause a denial of service (32-bit application failure and login outage) by opening a large number of sockets.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-02-10T11:19:01.000-05:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-02-13T17:01:54.282-05:00">DRAFT</status_change>
            <status_change date="2009-03-02T04:00:19.981-05:00">INTERIM</status_change>
            <status_change date="2009-03-23T04:00:16.596-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 248026">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion negate="true" comment="Patch 116965-34 or later installed" test_ref="oval:org.mitre.oval:tst:9631"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 248026">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 114344-37 or later installed" test_ref="oval:org.mitre.oval:tst:9582"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 248026">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 138888-01 or later installed" test_ref="oval:org.mitre.oval:tst:9474"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 248026">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 116966-33 or later installed" test_ref="oval:org.mitre.oval:tst:9681"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 248026">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 119435-25 or later installed" test_ref="oval:org.mitre.oval:tst:8868"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 248026">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 138889-01 or later installed" test_ref="oval:org.mitre.oval:tst:9661"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6031" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.5, SP2 HijackClick 3 / Script in Image Tag File Download Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0841" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0841"/>
        <description>Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" and the "Script in Image Tag File Download Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-25T07:54:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-27T01:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-17T10:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:42:00.000-04:00" comment="modified wft-562 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:38.043-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:24.130-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
          <criterion comment="the version of mshtml.dll is less than 5.50.4945.2800" negate="false" test_ref="oval:org.mitre.oval:tst:384"/>
          <criterion comment="the patch kb834707 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:855"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:603" version="4" class="vulnerability">
      <metadata>
        <title>Sendmail BO in prescan Function</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Sendmail</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0694" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0694"/>
        <description>The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-21T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:24.124-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:37.318-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.305-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:57:46.056-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:32.475-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="sendmail version is less than 8.12.8-9.90" negate="false" test_ref="oval:org.mitre.oval:tst:2518"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="Vulnerable Config">
            <criteria operator="AND" comment="sendmail is Set-UID">
              <criterion comment="sendmail is Set-UID" negate="false" test_ref="oval:org.mitre.oval:tst:2548"/>
              <criteria operator="OR" comment="sendmail is Set-UID">
                <criterion comment="sendmail is Set-UID" negate="false" test_ref="oval:org.mitre.oval:tst:2547"/>
                <criterion comment="sendmail is Set-UID" negate="false" test_ref="oval:org.mitre.oval:tst:2546"/>
              </criteria>
            </criteria>
            <criteria operator="AND" comment="sendmail is Set-GID">
              <criterion comment="sendmail is Set-GID" negate="false" test_ref="oval:org.mitre.oval:tst:2545"/>
              <criterion comment="sendmail is Set-UID" negate="false" test_ref="oval:org.mitre.oval:tst:2546"/>
            </criteria>
            <criterion comment="sendmail listening" negate="false" test_ref="oval:org.mitre.oval:tst:2544"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6024" version="3" class="vulnerability">
      <metadata>
        <title>Avast! Home and Professional 'aavmKer4.sys' Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Avast! AntiVirus</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3523" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3523"/>
        <description>aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs (1) 0xb2d6000c and (2) 0xb2d60034, which allows local users to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption, a different vulnerability than CVE-2008-1625.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-11-25T10:27:31.430-04:00">
              <contributor organization="SecPod Technologies">Sharath S</contributor>
            </submitted>
            <status_change date="2009-11-25T13:47:36.986-05:00">DRAFT</status_change>
            <status_change date="2009-12-14T04:00:07.702-05:00">INTERIM</status_change>
            <status_change date="2010-01-04T04:01:41.807-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:var:592 - Removed the trailing \ from all local_variables that are used as paths in a file_object" date="2011-08-03T08:25:00.425-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-08-03T08:27:16.835-04:00">INTERIM</status_change>
            <status_change date="2011-08-22T04:01:12.702-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Avast! AntiVirus is installed" definition_ref="oval:org.mitre.oval:def:6558"/>
        <criterion comment="Avast! version is less than 4.8.1356.0" test_ref="oval:org.mitre.oval:tst:10746"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6558" version="5" class="inventory">
      <metadata>
        <title>Avast! AntiVirus for Windows is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows 8.1</platform>
          <product>Avast! AntiVirus</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:avast:avast_antivirus:::windows"/>
        <description>The application Avast! AntiVirus for Windows is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-11-25T10:27:37">
              <contributor organization="SecPod Technologies">Sharath S</contributor>
            </submitted>
            <status_change date="2009-11-25T13:47:36.546-05:00">DRAFT</status_change>
            <status_change date="2009-12-14T04:00:15.773-05:00">INTERIM</status_change>
            <status_change date="2010-01-04T04:01:53.587-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:6558 - Modifications vary from minor OVAL title/description changes to suggesting an alternative CPE name to use." date="2011-09-28T11:29:00.976-04:00">
              <contributor organization="The MITRE Corporation">David Rothenberg</contributor>
            </modified>
            <status_change date="2011-09-28T11:33:35.733-04:00">INTERIM</status_change>
            <status_change date="2011-10-17T04:00:23.746-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:tst:10161 - def:6558 - platform list updated, extended definitions removed, new tests for Avast" date="2014-03-26T13:20:00.160-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-03-26T13:22:02.443-04:00">INTERIM</status_change>
            <status_change date="2014-04-14T04:00:18.046-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criterion comment="Avast! AntiVirus old version is installed" test_ref="oval:org.mitre.oval:tst:10161"/>
        <criterion comment="Avast! AntiVirus is installed" test_ref="oval:org.mitre.oval:tst:113006"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6009" version="1" class="vulnerability">
      <metadata>
        <title>Security vulnerability in the Virtual Host Manager in Tomcat 5.5 bundled with Solaris 9 and Solaris 10 may lead to Cross Site Scripting (XSS).</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1947" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1947"/>
        <description>Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-02-26T10:58:29.000-05:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-02-27T16:20:22.124-05:00">DRAFT</status_change>
            <status_change date="2009-03-16T04:00:16.528-04:00">INTERIM</status_change>
            <status_change date="2009-04-06T04:00:18.038-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Software Section">
        <criteria operator="OR">
          <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 251986">
            <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
            <criterion negate="true" comment="Patch 114016-03 or later installed" test_ref="oval:org.mitre.oval:tst:9634"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 251986">
            <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
            <criterion negate="true" comment="Patch 122911-15 or later installed" test_ref="oval:org.mitre.oval:tst:9605"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 251986">
            <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
            <criterion negate="true" comment="Patch 114017-03 or later installed" test_ref="oval:org.mitre.oval:tst:9480"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 251986">
            <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
            <criterion negate="true" comment="Patch 122912-15 or later installed" test_ref="oval:org.mitre.oval:tst:9406"/>
          </criteria>
        </criteria>
        <criterion comment="SUNWtcatr is installed" test_ref="oval:org.mitre.oval:tst:9550"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6003" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the X Inter Client Exchange Library (libICE) Shipped With Solaris May Allow a Denial of Service (DoS)</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5684" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5684"/>
        <description>Unspecified vulnerability in the X Inter Client Exchange library (aka libICE) in Sun Solaris 8 through 10 and OpenSolaris before snv_85 allows context-dependent attackers to cause a denial of service (application crash), as demonstrated by a port scan that triggers a segmentation violation in the Gnome session manager (aka gnome-session).</description>
        <oval_repository>
          <dates>
            <submitted date="2009-01-05T16:39:26.000-05:00">
              <contributor organization="Hewlett-Packard">Michael Wood</contributor>
            </submitted>
            <status_change date="2009-01-09T14:23:46.445-05:00">DRAFT</status_change>
            <status_change date="2009-01-26T04:00:20.280-05:00">INTERIM</status_change>
            <status_change date="2009-02-16T04:00:24.753-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 243566">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion negate="true" comment="Patch 119067-11 or later installed" test_ref="oval:org.mitre.oval:tst:9572"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 243566">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 112785-65 or later installed" test_ref="oval:org.mitre.oval:tst:9617"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 243566">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 119059-46 or later installed" test_ref="oval:org.mitre.oval:tst:9472"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 243566">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 119068-11 or later installed" test_ref="oval:org.mitre.oval:tst:9453"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 243566">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 112786-54 or later installed" test_ref="oval:org.mitre.oval:tst:9118"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 243566">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 119060-45 or later installed" test_ref="oval:org.mitre.oval:tst:9264"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:60" version="2" class="vulnerability">
      <metadata>
        <title>Solaris 8 AdminTool Media Installation Path Buffer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>Admintool</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0088"/>
        <description>Buffer overflow in admintool in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long media installation path.</description>
        <oval_repository>
          <dates>
            <submitted date="2002-09-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified date="2006-06-13T02:02:00.000-04:00" comment="modified uft-15 - admintool is either /bin/admintool or /usr/bin/admintool (or both).  Regular expression had been ^.*/bin/admintool$, which could cause arbitrary-depth search.  Changed to ^(/usr)?/bin/admintool$, which bounds the search properly.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <modified date="2006-06-13T02:20:00.000-04:00" comment="modified upt-845 - admintool is either /bin/admintool or /usr/bin/admintool (or both). Regular expression had been ^.*/bin/admintool$, which could cause arbitrary-depth search. Changed to ^(/usr)?/bin/admintool$, which bounds the search properly.  Also modified to test for both SUID and OEXEC bits, so a second test is not needed.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <modified date="2006-06-13T02:23:00.000-04:00" comment="Removed compound test for &quot;admintool SUID and executable&quot; because new version of upt-845 does both.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-06-14T07:41:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:32.137-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:1726, which had been badly mangled during conversion from OVAL 4.2 to 5.0.  Operation set to pattern match on path, and terminal regexp anchor moved from filename to path." date="2007-01-22T16:24:00.728-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-01-22T16:26:01.046-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:48.356-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="File admintool exists" negate="false" test_ref="oval:org.mitre.oval:tst:3017"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="File admintool SUID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:3016"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6" version="4" class="vulnerability">
      <metadata>
        <title>Common Unix Printing System Partial Print DOS</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Common Unix Printing System</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0195" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0195"/>
        <description>CUPS before 1.1.19 allows remote attackers to cause a denial of service via a partial printing request to the IPP port (631), which does not time out.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-19T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:56.350-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:37.018-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.024-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:55:16.846-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:32.153-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="cups version is less than 1.1.17-13.3" negate="false" test_ref="oval:org.mitre.oval:tst:3147"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="cupsd listens on the network" negate="false" test_ref="oval:org.mitre.oval:tst:3146"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5993" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in GNU tar May Lead to Arbitrary Code Execution or Denial of Service (DoS)</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0300" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0300"/>
        <description>Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-04-30T11:23:00.000-04:00">
              <contributor organization="Hewlett-Packard">Michael Wood</contributor>
            </submitted>
            <status_change date="2009-05-07T11:17:32.738-04:00">DRAFT</status_change>
            <status_change date="2009-05-25T04:01:52.639-04:00">INTERIM</status_change>
            <status_change date="2009-06-15T04:00:54.861-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 241646">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 118191-02 or later installed" test_ref="oval:org.mitre.oval:tst:9793"/>
          <criterion comment="Patch 118191-01 or later installed" test_ref="oval:org.mitre.oval:tst:9763"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5985" version="1" class="vulnerability">
      <metadata>
        <title>Security vulnerability in the HttpServletResponse.sendError method in Tomcat 5.5 bundled with Solaris 9 and Solaris 10 may lead to Cross Site Scripting (XSS).</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1232" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1232"/>
        <description>Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via a crafted string that is used in the message argument to the HttpServletResponse.sendError method.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-02-26T10:58:29.000-05:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-02-27T16:20:22.464-05:00">DRAFT</status_change>
            <status_change date="2009-03-16T04:00:16.102-04:00">INTERIM</status_change>
            <status_change date="2009-04-06T04:00:17.059-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Software Section">
        <criteria operator="OR">
          <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 251986">
            <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
            <criterion negate="true" comment="Patch 114016-03 or later installed" test_ref="oval:org.mitre.oval:tst:9634"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 251986">
            <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
            <criterion negate="true" comment="Patch 122911-15 or later installed" test_ref="oval:org.mitre.oval:tst:9605"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 251986">
            <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
            <criterion negate="true" comment="Patch 114017-03 or later installed" test_ref="oval:org.mitre.oval:tst:9480"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 251986">
            <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
            <criterion negate="true" comment="Patch 122912-15 or later installed" test_ref="oval:org.mitre.oval:tst:9406"/>
          </criteria>
        </criteria>
        <criterion comment="SUNWtcatr is installed" test_ref="oval:org.mitre.oval:tst:9550"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5978" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in GNU tar May Lead to Arbitrary Code Execution or Denial of Service (DoS)</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0300" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0300"/>
        <description>Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-04-30T11:23:00.000-04:00">
              <contributor organization="Hewlett-Packard">Michael Wood</contributor>
            </submitted>
            <status_change date="2009-05-07T11:17:33.789-04:00">DRAFT</status_change>
            <status_change date="2009-05-25T04:01:51.856-04:00">INTERIM</status_change>
            <status_change date="2009-06-15T04:00:53.458-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 241646">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 139099-01 or later installed" test_ref="oval:org.mitre.oval:tst:9629"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5977" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the Solaris "autofs" Kernel Module may Allow a Local Unprivileged User to Execute Arbitrary Code</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0319" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0319"/>
        <description>Unspecified vulnerability in the autofs module in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_108, allows local users to cause a denial of service (autofs mount outage) or possibly gain privileges via vectors related to "xdr processing problems."</description>
        <oval_repository>
          <dates>
            <submitted date="2009-02-05T13:18:38.000-05:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-02-06T15:58:55.814-05:00">DRAFT</status_change>
            <status_change date="2009-02-23T04:00:21.897-05:00">INTERIM</status_change>
            <status_change date="2009-03-16T04:00:15.050-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="Software Section">
          <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 249966">
            <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
            <criterion negate="true" comment="Patch 128624-09 or later installed" test_ref="oval:org.mitre.oval:tst:9674"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 249966">
            <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
            <criterion negate="true" comment="Patch 113318-34 or later installed" test_ref="oval:org.mitre.oval:tst:9559"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 249966">
            <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
            <criterion negate="true" comment="Patch 139560-01 or later installed" test_ref="oval:org.mitre.oval:tst:9658"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 249966">
            <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
            <criterion negate="true" comment="Patch 128625-09 or later installed" test_ref="oval:org.mitre.oval:tst:9544"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 249966">
            <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
            <criterion negate="true" comment="Patch 116053-03 or later installed" test_ref="oval:org.mitre.oval:tst:9593"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 249966">
            <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
            <criterion negate="true" comment="Patch 139561-01 or later installed" test_ref="oval:org.mitre.oval:tst:8913"/>
          </criteria>
        </criteria>
        <criterion comment="autofs is enabled" test_ref="oval:org.mitre.oval:tst:9385"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:597" version="4" class="vulnerability">
      <metadata>
        <title>Denial of Service in Sendmail via the enhdnsbl Feature</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Sendmail</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0688" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0688"/>
        <description>The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a denial of service (process crash) via an invalid DNS response that causes Sendmail to free incorrect data.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-05T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:49.069-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:36.804-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.764-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:58:05.332-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:31.764-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="sendmail version is less than 8.12.8-6.90" negate="false" test_ref="oval:org.mitre.oval:tst:2517"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="sendmail is listening to the network" negate="false" test_ref="oval:org.mitre.oval:tst:2516"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5969" version="2" class="vulnerability">
      <metadata>
        <title>Vulnerability in Content-Disposition Header Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Office XP</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4020"/>
        <description>Cross-site scripting (XSS) vulnerability in Microsoft Office XP SP3 allows remote attackers to inject arbitrary web script or HTML via a document that contains a "Content-Disposition: attachment" header and is accessed through a cdo: URL, which renders the content instead of raising a File Download dialog box, aka "Vulnerability in Content-Disposition Header Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2008-10-14T13:33:00">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </submitted>
            <status_change date="2008-10-16T14:01:57.619-04:00">DRAFT</status_change>
            <status_change date="2008-11-03T04:00:23.190-05:00">INTERIM</status_change>
            <status_change date="2008-12-01T04:00:16.749-05:00">ACCEPTED</status_change>
            <modified comment="Changed product &quot;Office 2002&quot; to &quot;Office XP&quot;" date="2010-01-14T15:51:00.779-05:00">
              <contributor organization="The MITRE Corporation">Mike Lah</contributor>
            </modified>
            <status_change date="2010-01-14T15:51:20.784-05:00">INTERIM</status_change>
            <status_change date="2010-02-01T04:00:16.394-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft Office XP is installed" definition_ref="oval:org.mitre.oval:def:663"/>
        <criterion comment="HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\cdo exists" test_ref="oval:org.mitre.oval:tst:8796"/>
        <criterion comment="HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CDO exists" test_ref="oval:org.mitre.oval:tst:9141"/>
        <criterion comment="HKEY_CLASSES_ROOT\PROTOCOLS\Handler\cdo exists" test_ref="oval:org.mitre.oval:tst:9354"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5960" version="1" class="vulnerability">
      <metadata>
        <title>SUNRAS Plugin of Gimp Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2356" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2356"/>
        <description>Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-09-11T11:37:41.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2008-09-12T12:49:06.257-04:00">DRAFT</status_change>
            <status_change date="2008-09-29T04:00:49.434-04:00">INTERIM</status_change>
            <status_change date="2008-10-20T04:00:28.436-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 201320">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 122212-22 or later installed" test_ref="oval:org.mitre.oval:tst:8701"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 201320">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 121775-01 or later installed" test_ref="oval:org.mitre.oval:tst:9219"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 201320">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 122213-22 or later installed" test_ref="oval:org.mitre.oval:tst:8353"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:596" version="8" class="vulnerability">
      <metadata>
        <title>HP-UX 11.11 or 11.23 ICMP Source Quench Attack Vulnerability</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0791" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0791"/>
        <description>Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via a blind throughput-reduction attack using spoofed Source Quench packets, aka the "ICMP Source Quench attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:48:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:49.438-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:56.897-04:00">ACCEPTED</status_change>
            <modified comment="Added title." date="2007-02-23T12:53:00.683-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-02-23T12:54:12.704-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:21.919-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:596 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:04:49.880-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:37.359-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:tst:3901 - HP-UX Security Advisory - HPSBUX02944_101" date="2014-02-19T09:09:00.021-05:00">
              <contributor organization="Hewlett-Packard">Sushant Kumar Singh</contributor>
            </modified>
            <status_change date="2014-02-19T09:13:37.611-05:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:tst:3704 - HP-UX Security Advisories published in February 2014" date="2014-03-05T13:28:00.446-05:00">
              <contributor organization="Hewlett-Packard">Sushant Kumar Singh</contributor>
            </modified>
            <status_change date="2014-03-24T04:01:49.234-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="An HPUX 11.11 or 11.23 is installed">
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.11">
            <criteria operator="AND" comment="700 Series OS Release 11.11">
              <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:3443"/>
              <criterion comment="HP Release B.11.11" test_ref="oval:org.mitre.oval:tst:3704"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.11">
              <criterion comment="800-series HP" test_ref="oval:org.mitre.oval:tst:4124"/>
              <criterion comment="HP Release B.11.11" test_ref="oval:org.mitre.oval:tst:3704"/>
            </criteria>
          </criteria>
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.23">
            <criteria operator="AND" comment="700 Series OS Release 11.23">
              <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:3443"/>
              <criterion comment="HP Release B.11.23" test_ref="oval:org.mitre.oval:tst:3901"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.23">
              <criterion comment="800-series HP" test_ref="oval:org.mitre.oval:tst:4124"/>
              <criterion comment="HP Release B.11.23" test_ref="oval:org.mitre.oval:tst:3901"/>
            </criteria>
          </criteria>
        </criteria>
        <criterion comment="TOUR_PRODUCT.T-NET2-KRN with version less than A.03.00 is installed" test_ref="oval:org.mitre.oval:tst:3415"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:595" version="4" class="vulnerability">
      <metadata>
        <title>Potential BO in Ruleset Parsing for Sendmail</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Sendmail</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0681" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0681"/>
        <description>A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-21T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:50.782-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:36.569-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.305-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:57:46.198-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:31.385-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="sendmail version is less than 8.12.8-9.90" negate="false" test_ref="oval:org.mitre.oval:tst:2518"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="Vulnerable Config">
            <criteria operator="AND" comment="sendmail is Set-UID">
              <criterion comment="sendmail is Set-UID" negate="false" test_ref="oval:org.mitre.oval:tst:2548"/>
              <criteria operator="OR" comment="sendmail is Set-UID">
                <criterion comment="sendmail is Set-UID" negate="false" test_ref="oval:org.mitre.oval:tst:2547"/>
                <criterion comment="sendmail is Set-UID" negate="false" test_ref="oval:org.mitre.oval:tst:2546"/>
              </criteria>
            </criteria>
            <criteria operator="AND" comment="sendmail is Set-GID">
              <criterion comment="sendmail is Set-GID" negate="false" test_ref="oval:org.mitre.oval:tst:2545"/>
              <criterion comment="sendmail is Set-UID" negate="false" test_ref="oval:org.mitre.oval:tst:2546"/>
            </criteria>
            <criterion comment="sendmail listening" negate="false" test_ref="oval:org.mitre.oval:tst:2544"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5949" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in Solaris IP Tunnel Parameter Processing May Lead to a System Panic or Possible Execution of Arbitrary Code by Unprivileged Users</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5689" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5689"/>
        <description>tun in IP Tunnel in Solaris 10 and OpenSolaris snv_01 through snv_76 allows local users to cause a denial of service (panic) and possibly execute arbitrary code via a crafted SIOCGTUNPARAM IOCTL request, which triggers a NULL pointer dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-01-05T16:39:26.000-05:00">
              <contributor organization="Hewlett-Packard">Michael Wood</contributor>
            </submitted>
            <status_change date="2009-01-09T14:23:46.915-05:00">DRAFT</status_change>
            <status_change date="2009-01-26T04:00:18.461-05:00">INTERIM</status_change>
            <status_change date="2009-02-16T04:00:23.987-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 242266">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 138888-01 or later installed" test_ref="oval:org.mitre.oval:tst:9457"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 242266">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 138889-01 or later installed" test_ref="oval:org.mitre.oval:tst:9500"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:594" version="5" class="vulnerability" deprecated="true">
      <metadata>
        <title>Windows Messenger 6 libpng Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>MSN Messenger</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0597" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0597"/>
        <description>Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tRNS) data, or the (2) png_handle_sBIT or (3) png_handle_hIST functions do not perform sufficient bounds checking.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-03-29T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2005-03-29T08:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-13T12:15:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-05-04T12:33:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-11-24T12:00:00.000-04:00" comment="Added wrt-620 to see if MSN Messenger 6.2 is installed.  Changed wrt-195 to check for 6.2.0205 or later.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <modified date="2005-12-20T07:05:00.000-04:00" comment="Added wrt-195.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-04T08:04:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:2359" date="2007-03-06T08:06:00.649-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-06T08:07:06.751-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:21.723-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:1436" date="2007-04-23T12:05:00.002-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:31:50.117-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:1435" date="2007-04-23T12:05:00.788-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:11:07.574-04:00">ACCEPTED</status_change>
            <status_change date="2010-03-01T11:12:00.000-05:00">DEPRECATED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:1436 - vulnerabilities for VMware and inventories for VMware Workstation, VMware View and VMware Player." date="2013-06-21T12:00:00.019-04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="MSN Messenger 6.2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2520"/>
        <criterion comment="MSN Messenger 6.2.0205 or later is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2519"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5938" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS HTTP Configuration Interface Denial of Service Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2000-0380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0380"/>
        <description>The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:13.003-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:01:06.657-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:58.241-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2000-0380">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8807"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8890"/>
        <criterion comment="config contains: ^\s*ip http server" test_ref="oval:org.mitre.oval:tst:8123"/>
        <criterion negate="true" comment="config contains: ^\s*no ip http server" test_ref="oval:org.mitre.oval:tst:8920"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5926" version="7" class="vulnerability">
      <metadata>
        <title>Windows 2000 NNTP Component Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Network News Transport Protocol (NNTP)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0574" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0574"/>
        <description>The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an "unchecked buffer," leading to off-by-one and heap-based buffer overflows.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-14T08:58:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-10-20T02:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-10-31T04:13:00.000-04:00" comment="Replaced reference to obj:1374 with reference to obj:1550 since it references Product\Options and not ProductOptions in the controlset registry key.  Modified by Harvey Rubinovitz">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-11-21T04:13:00.000-04:00">INTERIM</status_change>
            <status_change date="2007-01-03T13:53:59.853-05:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2884" date="2010-11-29T16:14:00.692-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:39.987-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:01:03.271-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:39.642-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:14.450-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="AND" comment="Windows 2000 Server is installed">
            <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
            <criteria operator="OR" comment="Windows NT server product option">
              <criterion comment="this is an NT Server (stand-alone)" negate="false" test_ref="oval:org.mitre.oval:tst:2408"/>
              <criterion comment="this is an NT Server (domain controller)" negate="false" test_ref="oval:org.mitre.oval:tst:3035"/>
            </criteria>
          </criteria>
          <criterion comment="Win2K/XP/2003 service pack 3 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3079"/>
          <criterion comment="the version of nntpsvc.dll is less than 5.0.2195.6972" negate="false" test_ref="oval:org.mitre.oval:tst:274"/>
          <criterion comment="Patch Windows2000-KB883935-x86-ENU.exe Installed" negate="true" test_ref="oval:org.mitre.oval:tst:273"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="the NNTP service is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2757"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:592" version="1" class="vulnerability">
      <metadata>
        <title>rwho daemon Code Execution Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>Licence Logging Service</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1351" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1351"/>
        <description>Unknown vulnerability in the rwho daemon (in.rwhod) for Solaris 7 through 9 allows remote attackers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-04-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-04-20T12:13:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-05-11T05:41:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="OR" comment="Solaris 7 or 8 OR Solaris 9 and Remote Network Server Commands (SUNWrcmds) installed">
            <criteria operator="OR" comment="Solaris 7 or 8 installed">
              <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
              <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
            </criteria>
            <criteria operator="AND" comment="Solaris 9 and Remote Network Server Commands (SUNWrcmds) installed">
              <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
              <criterion comment="Remote Network Server Commands - Usr (SUNWrcmds) installed" negate="false" test_ref="oval:org.mitre.oval:tst:2525"/>
            </criteria>
          </criteria>
          <criterion comment="Patch 118239-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:2524"/>
          <criterion comment="Patch 116984-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:2523"/>
          <criterion comment="Patch 117455-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:2522"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="in.rwhod is running" negate="false" test_ref="oval:org.mitre.oval:tst:2521"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5918" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS HTTP Server Query Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2000-0984" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0984"/>
        <description>The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a URL containing a "?/" string.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:14.159-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:01:06.376-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:57.558-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2000-0984">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8864"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8803"/>
        <criterion comment="config contains: ^\s*ip http server" test_ref="oval:org.mitre.oval:tst:8123"/>
        <criterion negate="true" comment="config contains: ^\s*no ip http server" test_ref="oval:org.mitre.oval:tst:8920"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5917" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the DNS Protocol May Lead to DNS Cache Poisoning</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1447" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1447"/>
        <description>The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses in-bailiwick referrals to conduct cache poisoning against recursive resolvers, related to insufficient randomness of DNS transaction IDs and source ports, aka "DNS Insufficient Socket Entropy Vulnerability" or "the Kaminsky bug."</description>
        <oval_repository>
          <dates>
            <submitted date="2009-08-25T16:38:09.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-08-26T08:16:51.091-04:00">DRAFT</status_change>
            <status_change date="2009-09-14T04:00:06.253-04:00">INTERIM</status_change>
            <status_change date="2009-10-05T04:00:05.186-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criteria operator="OR" comment="Software Section">
          <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 239392">
            <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
            <criterion negate="true" comment="Patch 109326-23 or later installed" test_ref="oval:org.mitre.oval:tst:10663"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 239392">
            <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
            <criterion negate="true" comment="Patch 112837-15 or later installed" test_ref="oval:org.mitre.oval:tst:10777"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 239392">
            <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
            <criterion negate="true" comment="Patch 119783-06 or later installed" test_ref="oval:org.mitre.oval:tst:10241"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 239392">
            <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
            <criterion negate="true" comment="Patch 109327-23 or later installed" test_ref="oval:org.mitre.oval:tst:10701"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 239392">
            <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
            <criterion negate="true" comment="Patch 114265-14 or later installed" test_ref="oval:org.mitre.oval:tst:9857"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 239392">
            <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
            <criterion negate="true" comment="Patch 119784-06 or later installed" test_ref="oval:org.mitre.oval:tst:10275"/>
          </criteria>
        </criteria>
        <criterion comment="in.named running" test_ref="oval:org.mitre.oval:tst:2624"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5914" version="1" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability in the OpenSSL PKCS#11 Engine May Result in Denial of Service (DoS) Due to a Corrupted Session Cache</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5410"/>
        <description>The PK11_SESSION cache in the OpenSSL PKCS#11 engine in Sun Solaris 10 does not maintain reference counts for operations with asymmetric keys, which allows context-dependent attackers to cause a denial of service (failed cryptographic operations) via unspecified vectors, related to the (1) RSA_sign and (2) RSA_verify functions.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-01-05T16:39:26.000-05:00">
              <contributor organization="Hewlett-Packard">Michael Wood</contributor>
            </submitted>
            <status_change date="2009-01-09T14:23:45.557-05:00">DRAFT</status_change>
            <status_change date="2009-01-26T04:00:17.033-05:00">INTERIM</status_change>
            <status_change date="2009-02-16T04:00:23.547-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 246846">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 139459-01 or later installed" test_ref="oval:org.mitre.oval:tst:9516"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 246846">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 138863-02 or later installed" test_ref="oval:org.mitre.oval:tst:9087"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5908" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in GIMP(1) May Lead to Denial of Service (DoS) or Execution of Arbitrary Code</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3404" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3404"/>
        <description>Buffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XCF file with a large num_axes value in the VECTORS property.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-09-09T10:55:30.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2008-09-09T11:57:57.533-04:00">DRAFT</status_change>
            <status_change date="2008-09-29T04:00:47.920-04:00">INTERIM</status_change>
            <status_change date="2008-10-20T04:00:25.426-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 200070">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 122212-18 or later installed" test_ref="oval:org.mitre.oval:tst:8318"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 200070">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 122213-18 or later installed" test_ref="oval:org.mitre.oval:tst:9239"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5906" version="1" class="vulnerability">
      <metadata>
        <title>Two Race Condition Vulnerabilities in the Solaris Event Port API May Allow Local Users to Panic the System, Causing a Denial of Service (DoS)</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2135" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2135"/>
        <description>Multiple race conditions in the Solaris Event Port API in Sun Solaris 10 and OpenSolaris before snv_107 allow local users to cause a denial of service (panic) via unspecified vectors related to a race between the port_dissociate and close functions.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-06-23T12:21:57.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-06-30T10:48:14.002-04:00">DRAFT</status_change>
            <status_change date="2009-07-20T04:00:39.553-04:00">INTERIM</status_change>
            <status_change date="2009-08-10T04:00:05.339-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 260449">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 141414-01 or later installed" test_ref="oval:org.mitre.oval:tst:9911"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 260449">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 141415-01 or later installed" test_ref="oval:org.mitre.oval:tst:9619"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:59" version="6" class="vulnerability">
      <metadata>
        <title>Microsoft Windows RPC Denial of Service</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Remote Procedure Call (RPC)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1561" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1561"/>
        <description>The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service (disabled RPC service) via a malformed packet to the RPC Endpoint Mapper at TCP port 135, which triggers a null pointer dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified date="2005-03-07T12:00:00.000-04:00" comment="modified wrt-222 - changed pattern match">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-03-09T07:55:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-29T07:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2878" date="2010-11-29T16:13:00.904-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:04.901-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:01:02.953-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:19.928-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:14.116-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="File %windir%\system32\rpcrt4.dll version is less than 5.0.2195.6106" negate="false" test_ref="oval:org.mitre.oval:tst:3002"/>
        <criterion comment="Patch Q331953_W2K_SP4_X86_EN.exe Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3001"/>
        <criterion comment="Patch Windows2000-KB823980-x86-ENU.exe Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3000"/>
        <criterion comment="SP4 or later Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3073"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5894" version="5" class="vulnerability">
      <metadata>
        <title>DataGrid Control Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <product>Microsoft Visual Basic 6.0</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4252"/>
        <description>The DataGrid ActiveX control in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to corruption of the "system state," aka "DataGrid Control Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2008-12-09T13:31:00">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </submitted>
            <status_change date="2008-12-12T16:42:47.411-05:00">DRAFT</status_change>
            <status_change date="2008-12-29T04:00:29.700-05:00">INTERIM</status_change>
            <status_change date="2009-01-19T04:00:12.445-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:5894 - updated by including Visual FoxPro Inventory criteria" date="2011-11-14T13:22:00.233-05:00">
              <contributor organization="SecPod Technologies">Pradeep R B</contributor>
            </modified>
            <status_change date="2011-11-14T13:23:34.184-05:00">INTERIM</status_change>
            <status_change date="2011-12-05T04:00:33.000-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:5894 - New inventory definition for VB6, and updates to definitions incorrectly checking VBA inventory instead of VB6." date="2012-10-25T16:38:00.742-04:00">
              <contributor organization="SecPod Technologies">Pradeep R B</contributor>
            </modified>
            <status_change date="2012-10-25T16:58:34.478-04:00">INTERIM</status_change>
            <status_change date="2012-11-12T04:00:34.888-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="Vulnerable Visual Basic 6.0 or VisualFoxPro">
          <extend_definition comment="Microsoft Visual FoxPro is installed" definition_ref="oval:org.mitre.oval:def:14198"/>
          <extend_definition comment="Microsoft Visual Basic 6.0 is installed" definition_ref="oval:org.mitre.oval:def:15369"/>
        </criteria>
        <criterion comment="Mscomct2.ocx version is less than 6.1.98.12" test_ref="oval:org.mitre.oval:tst:9209"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5892" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS Protocol Check Design Error</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0929" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0929"/>
        <description>Cisco IOS Firewall Feature set, aka Context Based Access Control (CBAC) or Cisco Secure Integrated Software, for IOS 11.2P through 12.2T does not properly check the IP protocol type, which could allow remote attackers to bypass access control lists.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:14.623-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:01:06.117-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:57.235-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2001-0929">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8757"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8245"/>
        <criterion comment="config contains: ip inspect" test_ref="oval:org.mitre.oval:tst:9064"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5884" version="1" class="vulnerability">
      <metadata>
        <title>Manipulated Tag Files used with Solaris Text Editors May Lead to Execution of Arbitrary Code</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4131" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4131"/>
        <description>Multiple unspecified vulnerabilities in Sun Solaris 8 through 10 allow local users to gain privileges via vectors related to handling of tags with (1) the -t option and (2) the :tag command in the (a) vi, (b) ex, (c) vedit, (d) view, and (e) edit programs.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-09-24T10:35:21.000-04:00">
              <contributor organization="Hewlett-Packard">Todd Dolinsky</contributor>
            </submitted>
            <status_change date="2008-09-29T13:59:05.488-04:00">DRAFT</status_change>
            <status_change date="2008-10-20T04:00:24.938-04:00">INTERIM</status_change>
            <status_change date="2008-11-10T04:00:06.583-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 237987">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion negate="true" comment="Patch 110903-08 or later installed" test_ref="oval:org.mitre.oval:tst:8986"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 237987">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 113031-04 or later installed" test_ref="oval:org.mitre.oval:tst:9138"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 237987">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 120830-06 or later installed" test_ref="oval:org.mitre.oval:tst:9109"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 237987">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 110904-08 or later installed" test_ref="oval:org.mitre.oval:tst:9009"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 237987">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 116479-02 or later installed" test_ref="oval:org.mitre.oval:tst:9291"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 237987">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 120831-06 or later installed" test_ref="oval:org.mitre.oval:tst:9137"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:588" version="5" class="vulnerability">
      <metadata>
        <title>IE v6.0,SP1 (Server 2003) HijackClick Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0823" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0823"/>
        <description>Internet Explorer 6 SP1 and earlier allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by calling the window.moveBy method, aka HijackClick, a different vulnerability than CVE-2003-1027.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-12-18T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for Windows Server 2003.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 6 sp1 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-01-29T12:00:00.000-04:00" comment="Added Windows XP 64-bit, Version 2003 and Windows Server 2003 64-Bit to the list of affected platforms">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-05-10T12:00:00.000-04:00" comment="modified wrt-51 - Comment updated to indicate IE 6.">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-05-11T05:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2621. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T20:21:00.819-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T20:22:29.138-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:48.055-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:59.603-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:24.051-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6  for Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2801"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.3790.94" negate="false" test_ref="oval:org.mitre.oval:tst:2686"/>
          <criterion comment="the patch q824145 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2685"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5876" version="1" class="vulnerability">
      <metadata>
        <title>Security vulnerability in the RequestDispatcher class in Tomcat 5.5 bundled with Solaris 9 and Solaris 10 may lead to Directory Traversal.</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2370" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2370"/>
        <description>Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalization before removing the query string from the URI, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a .. (dot dot) in a request parameter.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-02-26T10:58:29.000-05:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-02-27T16:20:22.715-05:00">DRAFT</status_change>
            <status_change date="2009-03-16T04:00:13.906-04:00">INTERIM</status_change>
            <status_change date="2009-04-06T04:00:13.554-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Software Section">
        <criteria operator="OR">
          <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 251986">
            <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
            <criterion negate="true" comment="Patch 114016-03 or later installed" test_ref="oval:org.mitre.oval:tst:9634"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 251986">
            <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
            <criterion negate="true" comment="Patch 122911-15 or later installed" test_ref="oval:org.mitre.oval:tst:9605"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 251986">
            <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
            <criterion negate="true" comment="Patch 114017-03 or later installed" test_ref="oval:org.mitre.oval:tst:9480"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 251986">
            <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
            <criterion negate="true" comment="Patch 122912-15 or later installed" test_ref="oval:org.mitre.oval:tst:9406"/>
          </criteria>
        </criteria>
        <criterion comment="SUNWtcatr is installed" test_ref="oval:org.mitre.oval:tst:9550"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5874" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS UDP 514 Denial of Service Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-1999-0063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0063"/>
        <description>Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:15.001-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:01:05.913-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:56.968-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-1999-0063">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8596"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8788"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5869" version="1" class="vulnerability">
      <metadata>
        <title>Cisco 7600, Catalyst 6000 and 6500 MPLS Packet DoS Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1258"/>
        <description>Unspecified vulnerability in Cisco IOS 12.2SXA, SXB, SXD, and SXF; and the MSFC2, MSFC2a and MSFC3 running in Hybrid Mode on Cisco Catalyst 6000, 6500 and Cisco 7600 series systems; allows remote attackers on a local network segment to cause a denial of service (software reload) via a certain MPLS packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:15.391-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:01:05.715-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:56.733-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2007-1258">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8476"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8613"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5867" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS HTTP Server Router Administration Script Injection Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3921" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3921"/>
        <description>Cross-site scripting (XSS) vulnerability in Cisco IOS Web Server for IOS 12.0(2a) allows remote attackers to inject arbitrary web script or HTML by (1) packets containing HTML that an administrator views via an HTTP interface to the contents of memory buffers, as demonstrated by the URI /level/15/exec/-/buffers/assigned/dump; or (2) sending the router Cisco Discovery Protocol (CDP) packets with HTML payload that an administrator views via the CDP status pages.  NOTE: these vectors were originally reported as being associated with the dump and packet options in /level/15/exec/-/show/buffers.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:15.847-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:01:05.477-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:56.335-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2005-3921">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8847"/>
        <criteria operator="OR" comment="running congfig meets CVE-2005-3921">
          <criteria operator="AND">
            <criterion comment="config contains: ^\s*ip http server" test_ref="oval:org.mitre.oval:tst:8123"/>
            <criterion negate="true" comment="config contains: ^\s*no ip http server" test_ref="oval:org.mitre.oval:tst:8920"/>
          </criteria>
          <criteria operator="AND">
            <criterion comment="config contains: ^\s*ip http secure-server" test_ref="oval:org.mitre.oval:tst:8767"/>
            <criterion negate="true" comment="config contains: ^\s*no ip http secure-server" test_ref="oval:org.mitre.oval:tst:8357"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5866" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS VTY Authentication Bypass Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4632" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4632"/>
        <description>Cisco IOS 12.2E, 12.2F, and 12.2S places a "no login" line into the VTY configuration when an administrator makes certain changes to a (1) VTY/AUX or (2) CONSOLE setting on a device without AAA enabled, which allows remote attackers to bypass authentication and obtain a terminal session, a different vulnerability than CVE-1999-0293 and CVE-2005-2105.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:16.314-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:01:05.216-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:55.970-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2007-4632">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8759"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8872"/>
        <criterion comment="config contains: no login" test_ref="oval:org.mitre.oval:tst:9004"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5862" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS 12.0 Series Internet Router Allowance for Malicious Packets Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0864" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0864"/>
        <description>Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly handle the implicit "deny ip any any" rule in an outgoing ACL when the ACL contains exactly 448 entries, which can allow some outgoing packets to bypass access restrictions.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:16.638-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:01:05.018-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:55.719-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2001-0864">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8175"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8762"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5860" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS UDP for IPv4/IPv6 Unspecified Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1153" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1153"/>
        <description>Cisco IOS 12.1, 12.2, 12.3, and 12.4, with IPv4 UDP services and the IPv6 protocol enabled, allows remote attackers to cause a denial of service (device crash and possible blocked interface) via a crafted IPv6 packet to the device.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:17.363-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:01:04.794-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:55.428-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2008-1153">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8691"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8548"/>
        <criteria operator="OR">
          <criterion comment="config contains: ipv6 address" test_ref="oval:org.mitre.oval:tst:8725"/>
          <criterion comment="config contains: ipv6 enabled" test_ref="oval:org.mitre.oval:tst:8696"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5859" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS Malformed PPTP Packet Denial of Service Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-1183" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1183"/>
        <description>PPTP implementation in Cisco IOS 12.1 and 12.2 allows remote attackers to cause a denial of service (crash) via a malformed packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:17.795-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:01:04.579-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:55.148-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2001-1183">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8778"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8717"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5858" version="3" class="vulnerability">
      <metadata>
        <title>Cisco IOS Fragmented Packet IPS Evasion Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0917" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0917"/>
        <description>The Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signatures that use regular expressions via fragmented packets.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:18.098-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:01:04.310-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:54.889-04:00">ACCEPTED</status_change>
            <modified comment="Added test for IPS modules" date="2010-05-26T12:59:00.025-04:00">
              <contributor organization="DTCC">KASHIF LATIF</contributor>
            </modified>
            <status_change date="2010-05-26T12:59:46.059-04:00">INTERIM</status_change>
            <status_change date="2010-06-14T04:00:04.364-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Cisco ISO Version Test">
          <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8199"/>
          <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8865"/>
        </criteria>
        <criterion comment="config contains: ip ips" test_ref="oval:org.mitre.oval:tst:23865"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5857" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS IPv6 Type 0 Routing Header DoS Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0481" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0481"/>
        <description>Cisco IOS allows remote attackers to cause a denial of service (crash) via a crafted IPv6 Type 0 Routing header.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:18.478-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:01:04.043-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:54.603-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2007-0481">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8879"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8736"/>
        <criteria operator="OR">
          <criterion comment="config contains: ipv6 address" test_ref="oval:org.mitre.oval:tst:8725"/>
          <criterion comment="config contains: ipv6 enabled" test_ref="oval:org.mitre.oval:tst:8696"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5852" version="1" class="vulnerability">
      <metadata>
        <title>Cisco Systems IOS Easy VPN Server xauth Extension Access Validation Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1057" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1057"/>
        <description>Cisco IOS 12.2T, 12.3 and 12.3T, when using Easy VPN Server XAUTH version 6 authentication, allows remote attackers to bypass authentication via a "malformed packet."</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:18.970-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:01:03.811-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:54.295-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2005-1057">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8755"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8721"/>
        <criteria operator="OR">
          <criterion comment="config contains: crypto map \S+ client authentication list" test_ref="oval:org.mitre.oval:tst:8976"/>
          <criteria operator="AND">
            <criterion comment="config contains: crypto isakmp profile" test_ref="oval:org.mitre.oval:tst:9110"/>
            <criterion comment="config contains: crypto isakmp profile" test_ref="oval:org.mitre.oval:tst:9110"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5851" version="3" class="vulnerability">
      <metadata>
        <title>Cisco IOS Session Initiation Protocol (SIP) Packet Arbitrary Code Execution Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4294" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4294"/>
        <description>Unspecified vulnerability in Cisco Unified Communications Manager (CUCM) 5.0, 5.1, and 6.0, and IOS 12.0 through 12.4, allows remote attackers to execute arbitrary code via a malformed SIP packet, aka CSCsi80102.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:19.279-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:01:03.605-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:54.027-04:00">ACCEPTED</status_change>
            <modified comment="Added tests for SIP modules" date="2010-05-26T12:57:00.192-04:00">
              <contributor organization="DTCC">KASHIF LATIF</contributor>
            </modified>
            <status_change date="2010-05-26T12:58:11.236-04:00">INTERIM</status_change>
            <status_change date="2010-06-14T04:00:04.080-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Cisco ISO version Test">
          <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8832"/>
          <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8472"/>
        </criteria>
        <criteria operator="OR" comment="SIP Line Test">
          <criterion comment="SIP Test using ip socket. config contains: 5060 .may generate few false positive" test_ref="oval:org.mitre.oval:tst:24211"/>
          <criterion comment="SIP Test using Tcp brief all. result contains: 5060" test_ref="oval:org.mitre.oval:tst:24372"/>
          <criterion comment="SIP Test using runnning config. result contains: 5060" test_ref="oval:org.mitre.oval:tst:24146"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5849" version="3" class="vulnerability">
      <metadata>
        <title>Multiple Vendors SSH2 "incorrect length fields" Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1357" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1357"/>
        <description>Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:19.616-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:01:03.369-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:53.642-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:5849 - Typo Corrections" date="2014-05-22T11:01:00.943-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-05-22T11:03:39.311-04:00">INTERIM</status_change>
            <status_change date="2014-06-09T04:01:43.813-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8661"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8424"/>
        <criterion comment="config contains: crypto key generate rsa" test_ref="oval:org.mitre.oval:tst:8948"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5848" version="1" class="vulnerability">
      <metadata>
        <title>Multiple Vendors SSH2 "buffer overflow" Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1359" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1359"/>
        <description>Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH protocol test suite.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:19.752-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:01:03.150-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:53.225-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2002-1359">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8661"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8424"/>
        <criterion comment="config contains: crypto key generate rsa" test_ref="oval:org.mitre.oval:tst:8948"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5845" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS SNMP Malformed Message Denial of Service Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0714" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0714"/>
        <description>Cisco Internetwork Operating System (IOS) 12.0S through 12.3T attempts to process SNMP solicited operations on improper ports (UDP 162 and a randomly chosen UDP port), which allows remote attackers to cause a denial of service (device reload and memory corruption).</description>
        <oval_repository>
          <dates>
            <submitted date="2008-04-30T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:20.103-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:01:02.949-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:52.962-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2004-0714">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8964"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8643"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5840" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS 12.3 IPv6 Packet Processing Information Leakage Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4285" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4285"/>
        <description>Unspecified vulnerability in Cisco IOS and Cisco IOS XR 12.x up to 12.3, including some versions before 12.3(15) and 12.3(14)T, allows remote attackers to obtain sensitive information (partial packet contents) or cause a denial of service (router or component crash) via crafted IPv6 packets with a Type 0 routing header.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:20.454-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:01:02.696-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:52.250-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2007-4285">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8702"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8846"/>
        <criteria operator="OR">
          <criterion comment="config contains: ipv6 address" test_ref="oval:org.mitre.oval:tst:8725"/>
          <criterion comment="config contains: ipv6 enabled" test_ref="oval:org.mitre.oval:tst:8696"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:584" version="3" class="vulnerability">
      <metadata>
        <title>Mozilla IDN heap overrun using soft-hyphens</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2871" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2871"/>
        <description>Buffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6 and earlier, and Netscape 8.0.3.3 and 7.2, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a hostname with all "soft" hyphens (character 0xAD), which is not properly handled by the NormalizeIDN call in nsStandardURL::BuildNormalizedSpec.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-11-11T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-12-12T10:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:2367" date="2007-02-26T08:32:00.241-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-26T08:32:39.060-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:2370" date="2007-03-06T07:46:00.064-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:17:21.368-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:1444" date="2007-04-23T12:05:00.911-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:19:58.657-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:1445" date="2007-04-23T12:05:00.720-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:11:06.815-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Suite version 1.7.10 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.10 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2535"/>
          <criterion comment="Mozilla Suite version 1.7.10 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2534"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.6 or earlier is installed">
          <criterion comment="Firefox version 1.0.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2533"/>
          <criterion comment="Mozilla Firefox version 1.0.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2532"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5839" version="1" class="vulnerability">
      <metadata>
        <title>Cisco Node Route Processor 2 12.1 DC Authorization Circumvention Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0757" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0757"/>
        <description>Cisco 6400 Access Concentrator Node Route Processor 2 (NRP2) 12.1DC card does not properly disable access when a password has not been set for vtys, which allows remote attackers to obtain access via telnet.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:20.802-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:01:02.476-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:52.026-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2001-0757">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8582"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8873"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5838" version="1" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability May Allow Popup Windows to Appear Through the Solaris XScreenSaver Program on Xorg(1) Servers</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2711" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2711"/>
        <description>XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv_120, and X11 6.4.1 for Solaris 8, when the Xorg or Xnewt server is used, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different vulnerability than CVE-2009-1276.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-08-10T16:40:08.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-08-12T09:49:58.244-04:00">DRAFT</status_change>
            <status_change date="2009-08-31T04:00:06.335-04:00">INTERIM</status_change>
            <status_change date="2009-09-21T04:00:04.819-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="Software Section">
          <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 258928">
            <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
            <criterion negate="true" comment="Patch 115298-02 or later installed" test_ref="oval:org.mitre.oval:tst:10067"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 258928">
            <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
            <criterion negate="true" comment="Patch 115158-11 or later installed" test_ref="oval:org.mitre.oval:tst:10579"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 258928">
            <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
            <criterion negate="true" comment="Patch 120094-23 or later installed" test_ref="oval:org.mitre.oval:tst:10472"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 258928">
            <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
            <criterion negate="true" comment="Patch 115299-02 or later installed" test_ref="oval:org.mitre.oval:tst:10441"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 258928">
            <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
            <criterion negate="true" comment="Patch 115159-11 or later installed" test_ref="oval:org.mitre.oval:tst:10429"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 258928">
            <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
            <criterion negate="true" comment="Patch 120095-23 or later installed" test_ref="oval:org.mitre.oval:tst:10567"/>
          </criteria>
        </criteria>
        <criterion comment="SUNWxwsvr is installed" test_ref="oval:org.mitre.oval:tst:10577"/>
        <criterion comment="The Xorg X server is running" test_ref="oval:org.mitre.oval:tst:1334"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5836" version="2" class="vulnerability">
      <metadata>
        <title>Cisco IOS AAA Command Authorization Bypass Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0485" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0485"/>
        <description>The TCL shell in Cisco IOS 12.2(14)S before 12.2(14)S16, 12.2(18)S before 12.2(18)S11, and certain other releases before 25 January 2006 does not perform Authentication, Authorization, and Accounting (AAA) command authorization checks, which may allow local users to execute IOS EXEC commands that were prohibited via the AAA configuration, aka Bug ID CSCeh73049.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:21.325-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:01:02.236-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:51.590-04:00">ACCEPTED</status_change>
            <modified comment="correction to regular expression" date="2009-11-23T14:31:00.179-05:00">
              <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2009-11-23T14:36:28.549-05:00">INTERIM</status_change>
            <modified comment="correcting escape characters in regular expression for ste:4000" date="2009-11-24T11:18:00.673-05:00">
              <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2009-12-14T04:00:06.094-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2006-2006-0485">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8666"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8876"/>
        <criterion comment="config contains: aaa authorization commands .*tacacs+" test_ref="oval:org.mitre.oval:tst:9042"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5835" version="1" class="vulnerability">
      <metadata>
        <title>Multiple OS TCP/IP DoS Vulnerabilities</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-1999-0016" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0016"/>
        <description>Land IP denial of service.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-01T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:21.683-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:01:02.032-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:50.960-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-1999-0016">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8821"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8970"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5834" version="3" class="vulnerability">
      <metadata>
        <title>Cisco Aironet Wireless Devices DoS</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0511"/>
        <description>The web server for Cisco Aironet AP1x00 Series Wireless devices running certain versions of IOS 12.2 allow remote attackers to cause a denial of service (reload) via a malformed URL.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-04-30T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:22.316-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:01:01.778-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:50.686-04:00">ACCEPTED</status_change>
            <modified comment="Corrected the criteria &amp; removed the tests oval:org.mitre.oval:tst:8623 and oval:org.mitre.oval:tst:9032 because the affected version is already included in tst:8760" date="2010-04-30T14:22:00.317-04:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2010-04-30T14:23:24.366-04:00">INTERIM</status_change>
            <status_change date="2010-05-17T04:00:07.894-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="IOS vulnerable versions: 12.2(4)JA, 12.2(4)JA1, 12.2(8)JA, 12.2(11)JA" test_ref="oval:org.mitre.oval:tst:8760"/>
        <criterion comment="config contains: ^\s*ip http secure-server" test_ref="oval:org.mitre.oval:tst:9043"/>
        <criterion negate="true" comment="config contains: ^\s*no ip http secure-server" test_ref="oval:org.mitre.oval:tst:8992"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5832" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS Regular Expression ATOMIC.TCP DoS Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0918" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0918"/>
        <description>The ATOMIC.TCP signature engine in the Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XA, 12.3YA, 12.3T, and other trains allows remote attackers to cause a denial of service (IPS crash and traffic loss) via unspecified manipulations that are not properly handled by the regular expression feature, as demonstrated using the 3123.0 (Netbus Pro Traffic) signature.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:22.698-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:01:01.533-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:50.379-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2007-0918">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8199"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8865"/>
        <criteria operator="OR">
          <criterion comment="config contains: ip ips \S+ in" test_ref="oval:org.mitre.oval:tst:8601"/>
          <criterion comment="config contains: ip ips \S+ out" test_ref="oval:org.mitre.oval:tst:8509"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5831" version="1" class="vulnerability">
      <metadata>
        <title>Multiple Vendor Session Initiation Protocol Denial of Service Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1108" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1108"/>
        <description>The Session Initiation Protocol (SIP) implementation in Alcatel OmniPCX Enterprise 5.0 Lx allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:23.038-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:01:01.305-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:49.911-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2003-1108">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8895"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8850"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5828" version="1" class="vulnerability">
      <metadata>
        <title>Cisco 6000/6500/7600 Crafted Layer 2 Frame Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0244"/>
        <description>Cisco 6000, 6500, and 7600 series systems with Multilayer Switch Feature Card 2 (MSFC2) and a FlexWAN or OSM module allow local users to cause a denial of service (hang or reset) by sending a layer 2 frame packet that encapsulates a layer 3 packet, but has inconsistent length values with that packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:23.380-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:01:01.089-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:49.655-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2004-0244">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8738"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:9014"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5827" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS PPP CHAP Authentication Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-1999-0160" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0160"/>
        <description>Some classic Cisco IOS devices have a vulnerability in the PPP CHAP authentication to establish unauthorized PPP connections.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:23.697-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:01:00.879-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:49.256-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-1999-0160">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8639"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8894"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5826" version="1" class="vulnerability">
      <metadata>
        <title>Cisco Multiple Router Products Web Setup Configuration Error Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3595" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3595"/>
        <description>The default configuration of IOS HTTP server in Cisco Router Web Setup (CRWS) before 3.3.0 build 31 does not require credentials, which allows remote attackers to access the server with arbitrary privilege levels, aka bug CSCsa78190.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:24.232-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:01:00.647-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:48.880-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2006-3595">
        <criterion comment="config contains: ^\s*ip http" test_ref="oval:org.mitre.oval:tst:8515"/>
        <criterion negate="true" comment="config contains: enable secret" test_ref="oval:org.mitre.oval:tst:8603"/>
        <criterion negate="true" comment="config contains: ^\s*ip http authentication" test_ref="oval:org.mitre.oval:tst:8554"/>
        <criterion negate="true" comment="config contains: enable password" test_ref="oval:org.mitre.oval:tst:8120"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5824" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS User Enumeration via Error Messages</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0512"/>
        <description>Cisco IOS 12.2 and earlier generates a "% Login invalid" message instead of prompting for a password when an invalid username is provided, which allows remote attackers to identify valid usernames on the system and conduct brute force password guessing, as reported for the Aironet Bridge.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:24.639-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:01:00.385-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:48.595-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2003-0512">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8849"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8699"/>
        <criterion negate="true" comment="config contains: aaa new-model" test_ref="oval:org.mitre.oval:tst:9089"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5823" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS CDP Denial of Service Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-1071" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1071"/>
        <description>Cisco IOS 12.2 and earlier running Cisco Discovery Protocol (CDP) allows remote attackers to cause a denial of service (memory consumption) via a flood of CDP neighbor announcements.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:25.284-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:01:00.121-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:48.109-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2001-1071">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8782"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8852"/>
        <criteria operator="OR" comment="running congfig meets CVE-2005-3921">
          <criteria operator="AND">
            <criterion comment="config contains: ^\s*cdp run" test_ref="oval:org.mitre.oval:tst:8706"/>
            <criterion negate="true" comment="config contains: ^\s*no cdp run" test_ref="oval:org.mitre.oval:tst:8904"/>
          </criteria>
          <criteria operator="AND">
            <criterion comment="config contains: cdp enable" test_ref="oval:org.mitre.oval:tst:8789"/>
            <criterion negate="true" comment="config contains: no cdp enable" test_ref="oval:org.mitre.oval:tst:8908"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5821" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS Data-link Switching (DLSw) Unspecified DoS Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1152" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1152"/>
        <description>The data-link switching (DLSw) component in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (device restart or memory consumption) via crafted (1) UDP port 2067 or (2) IP protocol 91 packets.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:25.726-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:59.896-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:47.749-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2008-1152">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8729"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8735"/>
        <criterion comment="config contains: dlsw local-peer" test_ref="oval:org.mitre.oval:tst:8926"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:582" version="1" class="vulnerability">
      <metadata>
        <title>MSJava Applet CODEBASE File Access Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Virtual Machine (VM)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1258"/>
        <description>Two vulnerabilities in Microsoft Virtual Machine (VM) up to and including build 5.0.3805, as used in Internet Explorer and other applications, allow remote attackers to read files via a Java applet with a spoofed location in the CODEBASE parameter in the APPLET tag, possibly due to a parsing error.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="the version of msjava.dll is less than 5.0.3809.0" negate="false" test_ref="oval:org.mitre.oval:tst:2536"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5818" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS Denial of Service Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0750" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0750"/>
        <description>Cisco IOS 12.1(2)T, 12.1(3)T allow remote attackers to cause a denial of service (reload) via a connection to TCP ports 3100-3999, 5100-5999, 7100-7999 and 10100-10999.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:26.030-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:59.677-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:47.492-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2001-0750">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8823"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8723"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5817" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerabilities in DHCP Handling of DHCP Requests May Allow Remote Users to Execute Arbitrary Code or Cause a Denial of the DHCP Service</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5365" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5365"/>
        <description>Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a DHCP request specifying a maximum message size smaller than the minimum IP MTU.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-01-05T16:39:26.000-05:00">
              <contributor organization="Hewlett-Packard">Michael Wood</contributor>
            </submitted>
            <status_change date="2009-01-09T14:23:44.885-05:00">DRAFT</status_change>
            <status_change date="2009-01-26T04:00:15.739-05:00">INTERIM</status_change>
            <status_change date="2009-02-16T04:00:22.825-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 243806">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion negate="true" comment="Patch 109077-21 or later installed" test_ref="oval:org.mitre.oval:tst:9562"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 243806">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 112837-16 or later installed" test_ref="oval:org.mitre.oval:tst:9503"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 243806">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 138876-01 or later installed" test_ref="oval:org.mitre.oval:tst:9282"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 243806">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 109078-21 or later installed" test_ref="oval:org.mitre.oval:tst:9497"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 243806">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 114265-15 or later installed" test_ref="oval:org.mitre.oval:tst:9355"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 243806">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 138877-01 or later installed" test_ref="oval:org.mitre.oval:tst:8742"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5813" version="1" class="vulnerability">
      <metadata>
        <title>Cisco Systems IOS IPv6 Heap Corruption Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0195" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0195"/>
        <description>Cisco IOS 12.0S through 12.3YH allows remote attackers to cause a denial of service (device restart) via a crafted IPv6 packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:26.334-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:59.463-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:47.231-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2005-0195">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8545"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8111"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5805" version="5" class="vulnerability">
      <metadata>
        <title>Hierarchical FlexGrid Control Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <product>Microsoft Visual Basic 6.0</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4254" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4254"/>
        <description>Multiple integer overflows in the Hierarchical FlexGrid ActiveX control (mshflxgd.ocx) in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allow remote attackers to execute arbitrary code via crafted (1) Rows and (2) Cols properties to the (a) ExpandAll and (b) CollapseAll methods, related to access of incorrectly initialized objects and corruption of the "system state," aka "Hierarchical FlexGrid Control Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2008-12-09T13:31:00">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </submitted>
            <status_change date="2008-12-12T16:42:48.769-05:00">DRAFT</status_change>
            <status_change date="2008-12-29T04:00:26.236-05:00">INTERIM</status_change>
            <status_change date="2009-01-19T04:00:11.106-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:5805 - updated by including Visual FoxPro Inventory criteria" date="2011-11-14T13:22:00.233-05:00">
              <contributor organization="SecPod Technologies">Pradeep R B</contributor>
            </modified>
            <status_change date="2011-11-14T13:23:34.810-05:00">INTERIM</status_change>
            <status_change date="2011-12-05T04:00:31.932-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:5805 - New inventory definition for VB6, and updates to definitions incorrectly checking VBA inventory instead of VB6." date="2012-10-25T16:38:00.742-04:00">
              <contributor organization="SecPod Technologies">Pradeep R B</contributor>
            </modified>
            <status_change date="2012-10-25T16:58:26.688-04:00">INTERIM</status_change>
            <status_change date="2012-11-12T04:00:34.005-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="Vulnerable Visual Basic 6.0 or VisualFoxPro">
          <extend_definition comment="Microsoft Visual FoxPro is installed" definition_ref="oval:org.mitre.oval:def:14198"/>
          <extend_definition comment="Microsoft Visual Basic 6.0 is installed" definition_ref="oval:org.mitre.oval:def:15369"/>
        </criteria>
        <criterion comment="Mscomct2.ocx version is less than 6.1.98.12" test_ref="oval:org.mitre.oval:tst:9209"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5803" version="1" class="vulnerability">
      <metadata>
        <title>Cisco SSH Denial of Service Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1024" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1024"/>
        <description>Cisco IOS 12.0 through 12.2, when supporting SSH, allows remote attackers to cause a denial of service (CPU consumption) via a large packet that was designed to exploit the SSH CRC32 attack detection overflow (CVE-2001-0144).</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:26.672-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:59.248-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:46.850-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2002-1024">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8886"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8714"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5802" version="1" class="vulnerability">
      <metadata>
        <title>PCX Plugin of Gimp Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1046" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1046"/>
        <description>Buffer overflow in the kimgio library for KDE 3.4.0 allows remote attackers to execute arbitrary code via a crafted PCX image file.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-09-11T11:37:41.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2008-09-12T12:49:06.892-04:00">DRAFT</status_change>
            <status_change date="2008-09-29T04:00:44.977-04:00">INTERIM</status_change>
            <status_change date="2008-10-20T04:00:22.743-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 201320">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 122212-22 or later installed" test_ref="oval:org.mitre.oval:tst:8701"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 201320">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 121775-01 or later installed" test_ref="oval:org.mitre.oval:tst:9219"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 201320">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 122213-22 or later installed" test_ref="oval:org.mitre.oval:tst:8353"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5801" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS Media Gateway Control Protocol Packet DoS Vulnerability and Facsimile Reception Overly Large Packet DoS Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4293" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4293"/>
        <description>Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (device crash) via (1) "abnormal" MGCP messages, aka CSCsd81407; and (2) a large facsimile packet, aka CSCej20505.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:26.900-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:58.758-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:46.060-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2007-4293">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8832"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8472"/>
        <criterion comment="config contains: service mgcpapp" test_ref="oval:org.mitre.oval:tst:8910"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:58" version="2" class="vulnerability" deprecated="true">
      <metadata>
        <title>DEPRECATED: Windows NT IIS HTTP Redirect Error Message Cross-site Scripting</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0075" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0075"/>
        <description>Cross-site scripting vulnerability for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other web users via the error message used in a URL redirect (""302 Object Moved") message.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-20T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified comment="Use def:12346 instead" date="2011-01-20T10:20:56.997-05:00">
              <contributor organization="Symantec Corporation">Josh Turpin</contributor>
            </modified>
            <status_change date="2011-01-20T10:20:56.997-05:00">DEPRECATED</status_change>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="IIS 4.0 Major Version" negate="false" test_ref="oval:org.mitre.oval:tst:3099"/>
        <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
        <criterion comment="this is an NT Terminal Server" negate="true" test_ref="oval:org.mitre.oval:tst:3097"/>
        <criterion comment="the version of w3svc.dll is less than 4.2.775.1" negate="false" test_ref="oval:org.mitre.oval:tst:3096"/>
        <criterion comment="Patch Q319733 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3095"/>
        <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
        <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5797" version="1" class="vulnerability">
      <metadata>
        <title>Multiple Vendors SSH2 "null characters in strings" Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1360" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1360"/>
        <description>Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified by a length field, which could allow remote attackers to cause a denial of service or possibly execute arbitrary code due to interactions with the use of null-terminated strings as implemented using languages such as C, as demonstrated by the SSHredder SSH protocol test suite.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:27.069-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:58.475-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:45.801-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2002-1360">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8661"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8424"/>
        <criterion comment="config contains: crypto key generate rsa" test_ref="oval:org.mitre.oval:tst:8948"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5794" version="5" class="vulnerability">
      <metadata>
        <title>Masked Edit Control Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Visual Basic 6.0</product>
          <product>Microsoft Visual FoxPro</product>
          <product>Microsoft Visual Studio .NET 2002</product>
          <product>Microsoft Visual Studio .NET 2003</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3704" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3704"/>
        <description>Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allows remote attackers to execute arbitrary code via a long Mask parameter, related to not "validating property values with boundary checks," as exploited in the wild in August 2008, aka "Masked Edit Control Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2008-12-09T13:31:00">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </submitted>
            <status_change date="2008-12-12T16:42:49.009-05:00">DRAFT</status_change>
            <status_change date="2008-12-29T04:00:25.494-05:00">INTERIM</status_change>
            <status_change date="2009-01-19T04:00:10.644-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:5794 - updated by including Visual FoxPro Inventory criteria" date="2011-11-14T13:22:00.233-05:00">
              <contributor organization="SecPod Technologies">Pradeep R B</contributor>
            </modified>
            <status_change date="2011-11-14T13:23:36.384-05:00">INTERIM</status_change>
            <status_change date="2011-12-05T04:00:31.514-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:5794 - New inventory definition for VB6, and updates to definitions incorrectly checking VBA inventory instead of VB6." date="2012-10-25T16:38:00.742-04:00">
              <contributor organization="SecPod Technologies">Pradeep R B</contributor>
            </modified>
            <status_change date="2012-10-25T16:58:29.715-04:00">INTERIM</status_change>
            <status_change date="2012-11-12T04:00:33.420-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Vulnerable Visual Studio .NET 2002 SP1 /2003 SP1">
          <criteria operator="OR" comment="Visual Studio .NET 2002 SP1 /2003 SP1">
            <extend_definition comment="Microsoft Visual Studio .NET 2002 SP1 is installed" definition_ref="oval:org.mitre.oval:def:981"/>
            <extend_definition comment="Microsoft Visual Studio .NET 2003 SP1 is installed" definition_ref="oval:org.mitre.oval:def:168"/>
          </criteria>
          <criterion comment="Mschrt20.ocx version is less than 6.1.98.12" test_ref="oval:org.mitre.oval:tst:9283"/>
        </criteria>
        <criteria operator="AND" comment="Vulnerable Visual Basic 6.0 or VisualFoxPro">
          <criteria operator="OR" comment="Visual Basic 6.0 or VisualFoxPro">
            <extend_definition comment="Microsoft Visual FoxPro is installed" definition_ref="oval:org.mitre.oval:def:14198"/>
            <extend_definition comment="Microsoft Visual Basic 6.0 is installed" definition_ref="oval:org.mitre.oval:def:15369"/>
          </criteria>
          <criterion comment="Mscomct2.ocx version is less than 6.1.98.12" test_ref="oval:org.mitre.oval:tst:9209"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5792" version="1" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability in the Management of Solaris Kerberos (see kerberos(5)) may Lead to a User Denial of Service (DoS) Attack</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5690" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5690"/>
        <description>The Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv_01 through snv_104, allows local users to cause a denial of service (authentication failure) via unspecified vectors related to incorrect cache file permissions, and lack of credential storage by the store_cred function in pam_krb5.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-01-05T16:39:26.000-05:00">
              <contributor organization="Hewlett-Packard">Michael Wood</contributor>
            </submitted>
            <status_change date="2009-01-09T14:23:47.824-05:00">DRAFT</status_change>
            <status_change date="2009-01-26T04:00:13.978-05:00">INTERIM</status_change>
            <status_change date="2009-02-16T04:00:21.959-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 244866">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion negate="true" comment="Patch 109805-19 or later installed" test_ref="oval:org.mitre.oval:tst:9258"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 244866">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 112908-33 or later installed" test_ref="oval:org.mitre.oval:tst:9565"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 244866">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 139478-01 or later installed" test_ref="oval:org.mitre.oval:tst:9246"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 244866">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 109806-19 or later installed" test_ref="oval:org.mitre.oval:tst:9364"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 244866">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 115168-18 or later installed" test_ref="oval:org.mitre.oval:tst:9595"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 244866">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 139479-01 or later installed" test_ref="oval:org.mitre.oval:tst:9348"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5785" version="3" class="vulnerability">
      <metadata>
        <title>Multiple Vendors Net-SNMPv3 Hash Message Authentication Code Design Error Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0960" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0960"/>
        <description>SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 through 2.0.0; (5) NetApp (aka Network Appliance) Data ONTAP 7.3RC1 and 7.3RC2; (6) SNMP Research before 16.2; (7) multiple Cisco IOS, CatOS, ACE, and Nexus products; (8) Ingate Firewall 3.1.0 and later and SIParator 3.1.0 and later; (9) HP OpenView SNMP Emanate Master Agent 15.x; and possibly other products relies on the client to specify the HMAC length, which makes it easier for remote attackers to bypass SNMP authentication via a length value of 1, which only checks the first byte.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:27.397-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:58.218-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:45.081-04:00">ACCEPTED</status_change>
            <modified comment="Added line test for SNMP v3" date="2010-07-16T11:21:00.024-04:00">
              <contributor organization="DTCC">KASHIF LATIF</contributor>
            </modified>
            <status_change date="2010-07-16T11:23:18.077-04:00">INTERIM</status_change>
            <status_change date="2010-08-02T04:00:08.371-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8885"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8684"/>
        <criterion comment="SNMP v3 Test" test_ref="oval:org.mitre.oval:tst:40698"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5784" version="1" class="vulnerability">
      <metadata>
        <title>Cisco Express Forwarding Information Disclosure vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0339" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0339"/>
        <description>Cisco IOS 11.1CC through 12.2 with Cisco Express Forwarding (CEF) enabled includes portions of previous packets in the padding of a MAC level packet when the MAC packet's length is less than the IP level packet length.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:27.691-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:58.001-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:44.674-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2002-0339">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8695"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8467"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5781" version="3" class="vulnerability">
      <metadata>
        <title>Cisco IOS Session Initiation Protocol (SIP) Packet DoS Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4292" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4292"/>
        <description>Multiple memory leaks in Cisco IOS 12.0 through 12.4 allow remote attackers to cause a denial of service (device crash) via a malformed SIP packet, aka (1) CSCsf11855, (2) CSCeb21064, (3) CSCse40276, (4) CSCse68355, (5) CSCsf30058, (6) CSCsb24007, and (7) CSCsc60249.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:27.837-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:57.796-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:44.330-04:00">ACCEPTED</status_change>
            <modified comment="Added tests for SIP modules" date="2010-05-26T12:58:00.063-04:00">
              <contributor organization="DTCC">KASHIF LATIF</contributor>
            </modified>
            <status_change date="2010-05-26T12:58:41.104-04:00">INTERIM</status_change>
            <status_change date="2010-06-14T04:00:03.752-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Cisco ISO Version Tests">
          <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8832"/>
          <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8472"/>
        </criteria>
        <criteria operator="OR" comment="SIP Line Test">
          <criterion comment="SIP Test using ip socket. config contains: 5060 .may generate few false positive" test_ref="oval:org.mitre.oval:tst:24211"/>
          <criterion comment="SIP Test using Tcp brief all. result contains: 5060" test_ref="oval:org.mitre.oval:tst:24372"/>
          <criterion comment="SIP Test using runnning config. result contains: 5060" test_ref="oval:org.mitre.oval:tst:24146"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5778" version="2" class="vulnerability">
      <metadata>
        <title>RSA BSAFE Cyrpt-C and Cert-C Libraries ASN.1 Object Parsing DoS Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3894" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3894"/>
        <description>The RSA Crypto-C before 6.3.1 and Cert-C before 2.8 libraries, as used by RSA BSAFE, multiple Cisco products, and other products, allows remote attackers to cause a denial of service via malformed ASN.1 objects.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:28.393-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:57.201-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:43.994-04:00">ACCEPTED</status_change>
            <modified comment="correction to regular expression" date="2009-11-23T14:36:00.936-05:00">
              <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2009-11-23T14:36:53.093-05:00">INTERIM</status_change>
            <modified comment="Correction to regex for clarity and readability" date="2009-12-03T17:17:00.974-05:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2009-12-21T04:00:39.821-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2006-3894">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8044"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8527"/>
        <criteria operator="OR">
          <criteria operator="AND">
            <criterion comment="config contains: ^\s*ip http secure-server" test_ref="oval:org.mitre.oval:tst:8767"/>
            <criterion negate="true" comment="config contains: ^\s*no ip http secure-server" test_ref="oval:org.mitre.oval:tst:8357"/>
          </criteria>
          <criterion comment="config contains: parameter-map type tms" test_ref="oval:org.mitre.oval:tst:8983"/>
          <criterion comment="config contains: crypto signaling default trustpoint" test_ref="oval:org.mitre.oval:tst:8848"/>
          <criterion comment="config contains: method tls" test_ref="oval:org.mitre.oval:tst:8967"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5774" version="3" class="vulnerability">
      <metadata>
        <title>Access Control Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <product>Microsoft Office SharePoint Server 2007</product>
          <product>Microsoft Search Server 2008</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4032" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4032"/>
        <description>Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which allows remote attackers to cause a denial of service (server load), obtain sensitive information, and "create scripts that would run in the context of the site" via requests to administrative URIs, aka "Access Control Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2008-12-10T10:44:00">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </submitted>
            <status_change date="2008-12-12T16:42:49.941-05:00">DRAFT</status_change>
            <status_change date="2008-12-29T04:00:24.315-05:00">INTERIM</status_change>
            <status_change date="2009-01-19T04:00:10.275-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:5774 - Added Search Server 2008 inventory criteria, new object is created for tst:9391 &amp; corrected tst:9391 comment" date="2011-11-14T13:29:00.007-05:00">
              <contributor organization="SecPod Technologies">Pradeep R B</contributor>
            </modified>
            <status_change date="2011-11-14T13:30:54.533-05:00">INTERIM</status_change>
            <status_change date="2011-12-05T04:00:31.168-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="Check for Office SharePoint Server 2007 or Search Server 2008">
          <extend_definition comment="Microsoft Office SharePoint Server 2007 is installed." definition_ref="oval:org.mitre.oval:def:2313"/>
          <extend_definition comment="Microsoft Search Server 2008 is installed" definition_ref="oval:org.mitre.oval:def:14104"/>
        </criteria>
        <criterion comment="the version of Mssdmn.exe is less than 12.0.6318.5000" test_ref="oval:org.mitre.oval:tst:9391"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14104" version="3" class="inventory">
      <metadata>
        <title>Microsoft Search Server 2008 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <product>Microsoft Windows 7</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:search_server:2008"/>
        <description>Microsoft Search Server 2008 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-11-08T07:50:11">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2011-11-14T13:30:42.767-05:00">DRAFT</status_change>
            <status_change date="2011-12-05T04:00:22.448-05:00">INTERIM</status_change>
            <status_change date="2011-12-26T04:01:00.652-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Search Server 2008 is installed" test_ref="oval:org.mitre.oval:tst:77223"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5772" version="1" class="vulnerability">
      <metadata>
        <title>PSD Plugin of Gimp vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2949" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2949"/>
        <description>Integer overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that contains a large (1) width or (2) height value.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-09-11T11:37:41.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2008-09-12T12:49:07.128-04:00">DRAFT</status_change>
            <status_change date="2008-09-29T04:00:44.579-04:00">INTERIM</status_change>
            <status_change date="2008-10-20T04:00:22.365-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 201320">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 122212-22 or later installed" test_ref="oval:org.mitre.oval:tst:8701"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 201320">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 121775-01 or later installed" test_ref="oval:org.mitre.oval:tst:9219"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 201320">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 122213-22 or later installed" test_ref="oval:org.mitre.oval:tst:8353"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5770" version="3" class="vulnerability">
      <metadata>
        <title>Multiple Vendor OpenSSL 0.9.6x, 0.9.7x Null-Pointer DoS Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0079"/>
        <description>The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:28.753-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:56.544-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:43.402-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:4037 - Updated series of States to escape .(period) character." date="2012-01-13T17:30:00.463-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2012-01-13T17:34:51.695-05:00">INTERIM</status_change>
            <status_change date="2012-01-30T04:00:58.211-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2004-0079">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8567"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8785"/>
        <criterion comment="config contains: ^\s*ip http secure-server" test_ref="oval:org.mitre.oval:tst:8767"/>
        <criterion negate="true" comment="config contains: ^\s*no ip http secure-server" test_ref="oval:org.mitre.oval:tst:8357"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5769" version="1" class="vulnerability">
      <metadata>
        <title>Cisco 12000 Series Internet Router Denial Of Service Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0861" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0861"/>
        <description>Cisco 12000 with IOS 12.0 and line cards based on Engine 2 and earlier allows remote attackers to cause a denial of service (CPU consumption) by flooding the router with traffic that generates a large number of ICMP Unreachable replies.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:29.148-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:56.282-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:43.122-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2001-0861">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8513"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8756"/>
        <criterion negate="true" comment="config contains: no ip unreachables" test_ref="oval:org.mitre.oval:tst:8671"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5762" version="1" class="vulnerability">
      <metadata>
        <title>Vulnerability in the Solaris 10 Event Port Implementation May Lead to a System Panic, Resulting in a Denial of Service (DoS)</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2706" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2706"/>
        <description>Unspecified vulnerability in the event port implementation in Sun Solaris 10 allows local users to cause a denial of service (panic) by submitting and retrieving user-defined events, probably related to a NULL dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-06-17T14:54:16.000-04:00">
              <contributor organization="Hewlett-Packard">Todd Dolinsky</contributor>
            </submitted>
            <status_change date="2008-06-18T17:12:08.386-04:00">DRAFT</status_change>
            <status_change date="2008-07-07T04:00:36.344-04:00">INTERIM</status_change>
            <status_change date="2008-07-28T04:00:26.268-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 235122">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 137111-01 or later installed" test_ref="oval:org.mitre.oval:tst:7853"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 235122">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 137112-01 or later installed" test_ref="oval:org.mitre.oval:tst:8065"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5756" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS RADIUS Authentication Bypass Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2105" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2105"/>
        <description>Cisco IOS 12.2T through 12.4 allows remote attackers to bypass Authentication, Authorization, and Accounting (AAA) RADIUS authentication, if the fallback method is set to none, via a long username.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:29.793-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:55.981-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:42.538-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2005-2105">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8860"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8538"/>
        <criteria operator="OR">
          <criterion comment="config contains: aaa authentication login \S+ group radius none" test_ref="oval:org.mitre.oval:tst:8909"/>
          <criterion comment="config contains: aaa authentication ppp \S+ group radius none" test_ref="oval:org.mitre.oval:tst:8410"/>
          <criterion comment="config contains: aaa authentication login \S+ group radius local none" test_ref="oval:org.mitre.oval:tst:9081"/>
          <criterion comment="config contains: aaa authentication ppp \S+ group radius local none" test_ref="oval:org.mitre.oval:tst:9040"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5754" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS 12.0 Security Policy Circumvention Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0867" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0867"/>
        <description>Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly filter does not properly filter packet fragments even when the "fragment" keyword is used in an ACL, which allows remote attackers to bypass the intended access controls.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:30.151-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:55.753-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:42.197-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2001-0867">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8800"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8750"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:575" version="3" class="vulnerability">
      <metadata>
        <title>Windows 2000 Workstation Service Logging Function Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Windows Workstation Service</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0812" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0812"/>
        <description>Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote attackers to execute arbitrary code via RPC calls that cause long entries to be written to a debug log file ("NetSetup.LOG"), as demonstrated using the NetAddAlternateComputerName API.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:1448 - Correction of a filename (Spwmp.dll is replaced by wkssvc.dll as per the bulletin info.) in an object oval:org.mitre.oval:obj:1448 along with comments" date="2011-09-14T12:12:00.927-04:00">
              <contributor organization="SecPod Technologies">Pradeep R B</contributor>
            </modified>
            <status_change date="2011-09-14T12:12:56.922-04:00">INTERIM</status_change>
            <status_change date="2011-10-03T04:00:06.592-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="the version of wkssvc.dll is less than 5.00.2195.6862" negate="false" test_ref="oval:org.mitre.oval:tst:2541"/>
          <criterion comment="the patch q828748 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2540"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="the workstation service is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2696"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5745" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS SSL ChamgeCipherSpec DoS Vulnerability, ClientHello DoS Vulnerability and Finished Message DoS Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2813" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2813"/>
        <description>Cisco IOS 12.4 and earlier, when using the crypto packages and SSL support is enabled, allows remote attackers to cause a denial of service via a malformed (1) ClientHello, (2) ChangeCipherSpec, or (3) Finished message during an SSL session.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:30.561-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:55.493-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:41.815-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2007-2813">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8866"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8625"/>
        <criteria operator="OR">
          <criterion comment="config contains: cns config \S+ \S+ encrypt" test_ref="oval:org.mitre.oval:tst:8989"/>
          <criteria operator="AND">
            <criterion comment="config contains: ^\s*ip http secure-server" test_ref="oval:org.mitre.oval:tst:8767"/>
            <criterion negate="true" comment="config contains: ^\s*no ip http secure-server" test_ref="oval:org.mitre.oval:tst:8357"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5742" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in Solaris snoop(1M) when Displaying SMB Traffic</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0965" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0965"/>
        <description>Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-08-11T12:08:06.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2008-08-14T15:03:06.340-04:00">DRAFT</status_change>
            <status_change date="2008-09-01T04:01:05.820-04:00">INTERIM</status_change>
            <status_change date="2008-09-22T04:00:30.399-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 240101">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 138083-01 or later installed" test_ref="oval:org.mitre.oval:tst:9062"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 240101">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 112915-05 or later installed" test_ref="oval:org.mitre.oval:tst:9103"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 240101">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion negate="true" comment="Patch 108964-11 or later installed" test_ref="oval:org.mitre.oval:tst:8936"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 240101">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 138084-01 or later installed" test_ref="oval:org.mitre.oval:tst:8152"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 240101">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 114262-04 or later installed" test_ref="oval:org.mitre.oval:tst:8854"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 240101">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 108965-11 or later installed" test_ref="oval:org.mitre.oval:tst:9126"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5741" version="1" class="vulnerability">
      <metadata>
        <title>Cisco "EIGRP" Protocol "HELLO" Packet Replay Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-4437" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4437"/>
        <description>MD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS 11.3 and later, does not include the Message Authentication Code (MAC) in the checksum, which allows remote attackers to sniff message hashes and (1) replay EIGRP HELLO messages or (2) cause a denial of service by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:30.907-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:54.898-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:41.335-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2005-4437">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8536"/>
        <criterion comment="config contains: router eigrp" test_ref="oval:org.mitre.oval:tst:8871"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5740" version="7" class="vulnerability">
      <metadata>
        <title>IE v6.0,SP1 SSL Cached Content Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0845" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0845"/>
        <description>Internet Explorer 5.01, 5.5, and 6 does not properly cache SSL content, which allows remote attackers to obtain information or spoof content via a web site with the same host name as the target web site, whose content is cached and reused when the user visits the target web site.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-26T02:20:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-27T01:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-17T10:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-27T10:50:00.000-04:00" comment="modified wft-564 - Changed test to match comment">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-06-23T12:49:00.000-04:00" comment="modified obj:490 - Chagned the pattern match operation to equals since there was no need for a regular expression.">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-06-23T11:35:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:31.382-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:45:58.311-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:47.041-05:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.853-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:53:30.233-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:19.716-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:54.318-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:23.836-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2800.1476" negate="false" test_ref="oval:org.mitre.oval:tst:856"/>
          <criterion comment="the patch kb834707 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:855"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="Users not saving encrypted pages to disk  (DisableCachingOfSSLPages)" negate="false" test_ref="oval:org.mitre.oval:tst:588"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5738" version="1" class="vulnerability">
      <metadata>
        <title>Cisco Systems IOS Unauthorized IPSec SA Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1058" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1058"/>
        <description>Cisco IOS 12.2T, 12.3 and 12.3T, when processing an ISAKMP profile that specifies XAUTH authentication after Phase 1 negotiation, may not process certain attributes in the ISAKMP profile that specifies XAUTH, which allows remote attackers to bypass XAUTH and move to Phase 2 negotiations.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:31.084-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:54.461-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:40.957-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2005-1058">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8755"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8721"/>
        <criteria operator="OR">
          <criterion comment="config contains: crypto map \S+ client authentication list" test_ref="oval:org.mitre.oval:tst:8976"/>
          <criteria operator="AND">
            <criterion comment="config contains: crypto isakmp profile" test_ref="oval:org.mitre.oval:tst:9110"/>
            <criterion comment="config contains: crypto isakmp profile" test_ref="oval:org.mitre.oval:tst:9110"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5732" version="1" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability in the Solaris Kerberos PAM Module May Allow Use of a User Specified Kerberos Configuration File, Leading to Escalation of Privileges</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0360" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0360"/>
        <description>Russ Allbery pam-krb5 before 3.13, when linked against MIT Kerberos, does not properly initialize the Kerberos libraries for setuid use, which allows local users to gain privileges by pointing an environment variable to a modified Kerberos configuration file, and then launching a PAM-based setuid application.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-03-27T14:00:00.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-04-01T14:58:24.663-04:00">DRAFT</status_change>
            <status_change date="2009-04-20T04:00:18.263-04:00">INTERIM</status_change>
            <status_change date="2009-05-11T04:00:21.367-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 252767">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion negate="true" comment="Patch 112237-16 or later installed" test_ref="oval:org.mitre.oval:tst:9624"/>
          <criterion negate="true" comment="Patch 112390-14 or later installed" test_ref="oval:org.mitre.oval:tst:8797"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 252767">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 112908-34 or later installed" test_ref="oval:org.mitre.oval:tst:9570"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 252767">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 138371-06 or later installed" test_ref="oval:org.mitre.oval:tst:9655"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 252767">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 112238-15 or later installed" test_ref="oval:org.mitre.oval:tst:9370"/>
          <criterion negate="true" comment="Patch 112240-13 or later installed" test_ref="oval:org.mitre.oval:tst:9206"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 252767">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 115168-19 or later installed" test_ref="oval:org.mitre.oval:tst:9606"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 252767">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 138372-06 or later installed" test_ref="oval:org.mitre.oval:tst:9713"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5731" version="1" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability in IP Multicast Filter processing of Sockets may lead to a system panic or possible execution of Arbitrary Code</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2710" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2710"/>
        <description>Integer signedness error in the ip_set_srcfilter function in the IP Multicast Filter in uts/common/inet/ip/ip_multi.c in the kernel in Sun Solaris 10 and OpenSolaris before snv_92 allows local users to execute arbitrary code in other Solaris Zones via an SIOCSIPMSFILTER IOCTL request with a large value of the imsf->imsf_numsrc field, which triggers an out-of-bounds write of kernel memory.  NOTE: this was reported as an integer overflow, but the root cause involves the bypass of a signed comparison.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-06-17T14:54:16.000-04:00">
              <contributor organization="Hewlett-Packard">Todd Dolinsky</contributor>
            </submitted>
            <status_change date="2008-06-18T17:12:08.608-04:00">DRAFT</status_change>
            <status_change date="2008-07-07T04:00:34.971-04:00">INTERIM</status_change>
            <status_change date="2008-07-28T04:00:24.214-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 237965">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 137111-01 or later installed" test_ref="oval:org.mitre.oval:tst:7853"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 237965">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 137112-01 or later installed" test_ref="oval:org.mitre.oval:tst:8065"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5729" version="1" class="vulnerability">
      <metadata>
        <title>Multiple Vendor SSH 1.5 Session Key Recovery Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0361" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0361"/>
        <description>Implementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGate, and (3) ssh-1 up to version 1.2.31, in certain configurations, allow a remote attacker to decrypt and/or alter traffic via a "Bleichenbacher attack" on PKCS#1 version 1.5.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:31.427-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:53.180-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:40.338-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2001-0361">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8889"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8737"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5721" version="1" class="vulnerability">
      <metadata>
        <title>Multiple Vendors SSH2 "lists with empty elements or multiple separators" Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1358" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1358"/>
        <description>Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:31.562-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:52.466-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:40.070-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2002-1358">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8661"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8424"/>
        <criterion comment="config contains: crypto key generate rsa" test_ref="oval:org.mitre.oval:tst:8948"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:572" version="4" class="vulnerability">
      <metadata>
        <title>Sendmail BO in Prescan Function</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Sendmail</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0694" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0694"/>
        <description>The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-11T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:38.145-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:36.305-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.305-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:57:46.132-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:30.551-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="sendmail version is less than 8.12.8-5.90" negate="false" test_ref="oval:org.mitre.oval:tst:2549"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="Vulnerable Config">
            <criteria operator="AND" comment="sendmail is Set-UID">
              <criterion comment="sendmail is Set-UID" negate="false" test_ref="oval:org.mitre.oval:tst:2548"/>
              <criteria operator="OR" comment="sendmail is Set-UID">
                <criterion comment="sendmail is Set-UID" negate="false" test_ref="oval:org.mitre.oval:tst:2547"/>
                <criterion comment="sendmail is Set-UID" negate="false" test_ref="oval:org.mitre.oval:tst:2546"/>
              </criteria>
            </criteria>
            <criteria operator="AND" comment="sendmail is Set-GID">
              <criterion comment="sendmail is Set-GID" negate="false" test_ref="oval:org.mitre.oval:tst:2545"/>
              <criterion comment="sendmail is Set-UID" negate="false" test_ref="oval:org.mitre.oval:tst:2546"/>
            </criteria>
            <criterion comment="sendmail listening" negate="false" test_ref="oval:org.mitre.oval:tst:2544"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5718" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS ILMI SNMP Community String Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0380"/>
        <description>Crosscom/Olicom XLT-F running XL 80 IM Version 5.5 Build Level 2 allows a remote attacker SNMP read and write access via a default, undocumented community string 'ILMI'.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:31.847-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:52.240-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:39.767-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2001-0380">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8851"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8481"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5714" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS 12.4 Malformed DLSw Message DoS Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0199" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0199"/>
        <description>The Data-link Switching (DLSw) feature in Cisco IOS 11.0 through 12.4 allows remote attackers to cause a denial of service (device reload) via "an invalid value in a DLSw message... during the capabilities exchange."</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:32.201-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:51.981-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:39.103-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2007-0199">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8853"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8809"/>
        <criterion comment="config contains: dlsw local-peer" test_ref="oval:org.mitre.oval:tst:8973"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5713" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS GRE Source Routing Integer Overflow ACL Bypass Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4650" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4650"/>
        <description>Cisco IOS 12.0, 12.1, and 12.2, when GRE IP tunneling is used and the RFC2784 compliance fixes are missing, does not verify the offset field of a GRE packet during decapsulation, which leads to an integer overflow that references data from incorrect memory locations, which allows remote attackers to inject crafted packets into the routing queue, possibly bypassing intended router ACLs.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:32.446-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:51.734-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:38.826-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2006-4650">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8798"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5711" version="1" class="vulnerability">
      <metadata>
        <title>Cisco Systems Spoofed TCP Reset and SYN Denial of Service Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0230" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0230"/>
        <description>TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:32.716-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:51.474-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:38.111-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2004-0230">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8766"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8552"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:57" version="3" class="vulnerability">
      <metadata>
        <title>Improper Cross Domain Security Validation with ShowHelp Functionality</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1328" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1328"/>
        <description>The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types of pluggable protocols that allow remote attackers to bypass the cross-domain security model and execute arbitrary code, aka "Improper Cross Domain Security Validation with ShowHelp functionality."</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T05:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="Changed IE registry test to wrt-18">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:37.203-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:23.759-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="the version of mshtml.dll is less than 6.0.2723.2500" negate="false" test_ref="oval:org.mitre.oval:tst:3003"/>
        <criterion comment="the patch q810847 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3115"/>
        <criterion comment="the patch q813489 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3114"/>
        <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5698" version="1" class="vulnerability">
      <metadata>
        <title>The Solaris rpc.metad(1M) Daemon is Vulnerable to a Denial of Service (DoS) Attack</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1480"/>
        <description>rpc.metad in Sun Solaris 10 allows remote attackers to cause a denial of service (daemon crash) via a malformed RPC request.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-05-06T17:15:10.000-04:00">
              <contributor organization="Hewlett-Packard">Michael Wood</contributor>
            </submitted>
            <status_change date="2009-05-07T11:17:43.220-04:00">DRAFT</status_change>
            <status_change date="2009-05-25T04:01:43.025-04:00">INTERIM</status_change>
            <status_change date="2009-06-15T04:00:46.835-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 249146">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 116669-34 or later installed" test_ref="oval:org.mitre.oval:tst:9832"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 249146">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 138632-03 or later installed" test_ref="oval:org.mitre.oval:tst:9259"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 249146">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 138574-01 or later installed" test_ref="oval:org.mitre.oval:tst:9628"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 249146">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 138882-02 or later installed" test_ref="oval:org.mitre.oval:tst:9974"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5696" version="1" class="vulnerability">
      <metadata>
        <title>Cisco Systems IPSec VPN Services Module Malformed IKE Packet Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0710" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0710"/>
        <description>IP Security VPN Services Module (VPNSM) in Cisco Catalyst 6500 Series Switch and the Cisco 7600 Series Internet Routers running IOS before 12.2(17b)SXA, before 12.2(17d)SXB, or before 12.2(14)SY03 could allow remote attackers to cause a denial of service (device crash and reload) via a malformed Internet Key Exchange (IKE) packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:32.974-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:50.330-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:37.350-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2004-0710">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8569"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8647"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5695" version="1" class="vulnerability">
      <metadata>
        <title>OWA For Exchange Server Parsing XSS Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <product>Microsoft Exchange Server</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2248"/>
        <description>Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) for Exchange Server 2003 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified HTML, a different vulnerability than CVE-2008-2247.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-07-08T14:18:00">
              <contributor organization="Secure Elements, Inc.">Jeff Ito</contributor>
            </submitted>
            <status_change date="2008-07-11T10:55:59.238-04:00">DRAFT</status_change>
            <status_change date="2008-07-28T04:00:22.634-04:00">INTERIM</status_change>
            <status_change date="2008-08-18T04:00:49.999-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <extend_definition comment="Microsoft Exchange Server 2007 (no Service Pack) is installed" definition_ref="oval:org.mitre.oval:def:1641"/>
          <criterion comment="cdoex.dll is less than 8.0.813.0" test_ref="oval:org.mitre.oval:tst:8570"/>
        </criteria>
        <criteria operator="AND">
          <extend_definition comment="Microsoft Exchange Server 2007 SP1 is installed" definition_ref="oval:org.mitre.oval:def:5577"/>
          <criterion comment="cdoex.dll is less than 8.1.291.1" test_ref="oval:org.mitre.oval:tst:8531"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5577" version="3" class="inventory">
      <metadata>
        <title>Microsoft Exchange Server 2007 SP1 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:exchange_server:2007:sp1"/>
        <description>Exchange Server 2007 SP1 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-07-08T14:18:00">
              <contributor organization="Secure Elements, Inc.">Jeff Ito</contributor>
            </submitted>
            <status_change date="2008-07-11T10:55:58.308-04:00">DRAFT</status_change>
            <status_change date="2008-07-28T04:00:15.727-04:00">INTERIM</status_change>
            <status_change date="2008-08-18T04:00:41.475-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:5577 - Updated CPEs for Microsoft Exchange Server." date="2011-03-29T13:58:00.209-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-03-29T13:58:52.203-04:00">INTERIM</status_change>
            <status_change date="2011-04-18T04:00:37.753-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Exchange Server 2007 is installed." test_ref="oval:org.mitre.oval:tst:8521"/>
        <criterion comment="Exchange Server 2007 SP1 is installed." test_ref="oval:org.mitre.oval:tst:7911"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5692" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the Solaris sendfile(3EXT) and sendfilev(3EXT) Extended Library Functions may Result in a Denial of Service (DoS) Condition due to a System Panic</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2912" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2912"/>
        <description>The (1) sendfile and (2) sendfilev functions in Sun Solaris 8 through 10, and OpenSolaris before snv_110, allow local users to cause a denial of service (panic) via vectors related to vnode function calls.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-08-21T11:07:35.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-08-21T20:56:32.365-04:00">DRAFT</status_change>
            <status_change date="2009-09-07T04:00:05.294-04:00">INTERIM</status_change>
            <status_change date="2009-09-28T04:00:07.402-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 258588">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion negate="true" comment="Patch 127721-02 or later installed" test_ref="oval:org.mitre.oval:tst:10485"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 258588">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 122300-42 or later installed" test_ref="oval:org.mitre.oval:tst:10637"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 258588">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 141414-05 or later installed" test_ref="oval:org.mitre.oval:tst:10676"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 258588">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 127722-02 or later installed" test_ref="oval:org.mitre.oval:tst:10535"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 258588">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 122301-42 or later installed" test_ref="oval:org.mitre.oval:tst:10364"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 258588">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 141415-05 or later installed" test_ref="oval:org.mitre.oval:tst:10432"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:569" version="2" class="vulnerability">
      <metadata>
        <title>Symlink Attack Vulnerability in semi/wemi MIME Libraries</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>semi MIME library</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0440" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0440"/>
        <description>The (1) semi MIME library 1.14.5 and earlier, and (2) wemi 1.14.0 and possibly other versions, allows local users to overwrite arbitrary files via a symlink attack on temporary files.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-29T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:21.573-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:35.987-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criteria operator="OR" comment="Vulnerable Config">
            <criterion comment="wl version is less than 2.10.1-1.1" negate="false" test_ref="oval:org.mitre.oval:tst:2557"/>
            <criterion comment="wl-xemacs version is less than 2.10.1-1.1" negate="false" test_ref="oval:org.mitre.oval:tst:2556"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="Vulnerable Config">
            <criteria operator="OR" comment="/usr/bin/emacs is executable">
              <criterion comment="/usr/bin/emacs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2555"/>
              <criterion comment="/usr/bin/emacs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2554"/>
              <criterion comment="/usr/bin/emacs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2553"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/xemacs is executable">
              <criterion comment="/usr/bin/xemacs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2552"/>
              <criterion comment="/usr/bin/xemacs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2551"/>
              <criterion comment="/usr/bin/xemacs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2550"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5687" version="1" class="vulnerability">
      <metadata>
        <title>Cisco Systems IOS SSH Transmission Control Blocks DoS Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1021" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1021"/>
        <description>Memory leak in Secure Shell (SSH) in Cisco IOS 12.0 through 12.3, when authenticating against a TACACS+ server, allows remote attackers to cause a denial of service (memory consumption) via an incorrect username or password.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:33.226-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:49.791-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:36.790-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2005-1021">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8734"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8670"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5681" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS Denial of Service Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0895" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0895"/>
        <description>Multiple Cisco networking products allow remote attackers to cause a denial of service on the local network via a series of ARP packets sent to the router's interface that contains a different MAC address for the router, which eventually causes the router to overwrite the MAC address in its ARP table.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:33.492-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:48.652-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:36.016-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2001-0895">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8616"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8772"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5680" version="1" class="vulnerability">
      <metadata>
        <title>Cisco Aironet Access Point ARP Memory Exhaustion DoS Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0354" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0354"/>
        <description>Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points (WAP) allows remote authenticated users to cause a denial of service (termination of packet passing or termination of client connections) by sending the management interface a large number of spoofed ARP packets, which creates a large ARP table that exhausts memory, aka Bug ID CSCsc16644.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:33.827-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:48.370-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:35.719-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2006-0354">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8837"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8121"/>
        <criterion negate="true" comment="config contains: l2-filter block-arp" test_ref="oval:org.mitre.oval:tst:8252"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5675" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS Next Hop Resolution Protocol Buffer Overflow Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4286" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4286"/>
        <description>Buffer overflow in the Next Hop Resolution Protocol (NHRP) functionality in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (restart) and execute arbitrary code via a crafted NHRP packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:34.174-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:47.788-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:35.305-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2007-4286">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8062"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8862"/>
        <criterion comment="config contains: ip nhrp network-id" test_ref="oval:org.mitre.oval:tst:8955"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:567" version="4" class="vulnerability">
      <metadata>
        <title>BO in Samba call_trans2open Function</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Samba, Samba-TNG</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0201" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0201"/>
        <description>Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-17T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:49.693-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:35.765-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.279-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:57:22.269-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:30.236-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="samba version is less than 2.2.7a-8.9.0" negate="false" test_ref="oval:org.mitre.oval:tst:2559"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="smbd is listening on the network" negate="false" test_ref="oval:org.mitre.oval:tst:2558"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5666" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS IP Option Remote Code Execution Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0480"/>
        <description>Cisco IOS 9.x, 10.x, 11.x, and 12.x and IOS XR 2.0.x, 3.0.x, and 3.2.x allows remote attackers to cause a denial of service or execute arbitrary code via a crafted IP option in the IP header in a (1) ICMP, (2) PIMv2, (3) PGM, or (4) URD packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:34.462-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:47.297-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:34.793-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2007-0480">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8093"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8863"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5665" version="1" class="vulnerability">
      <metadata>
        <title>Cisco Systems Non-DOCSIS Platform Default DOCSIS SNMP Support Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4950" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4950"/>
        <description>Cisco IOS 12.2 through 12.4 before 20060920, as used by Cisco IAD2430, IAD2431, and IAD2432 Integrated Access Devices, the VG224 Analog Phone Gateway, and the MWR 1900 and 1941 Mobile Wireless Edge Routers, is incorrectly identified as supporting DOCSIS, which allows remote attackers to gain read-write access via a hard-coded cable-docsis community string and read or modify arbitrary SNMP variables.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:34.683-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:47.082-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:34.479-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2006-4950">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8482"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8783"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5663" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS HTTP Authorization Circumvention Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0537" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0537"/>
        <description>HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:34.919-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:46.837-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:34.178-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2001-0537">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8333"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8811"/>
        <criterion comment="config contains: ^\s*ip http server" test_ref="oval:org.mitre.oval:tst:8123"/>
        <criterion negate="true" comment="config contains: ^\s*no ip http server" test_ref="oval:org.mitre.oval:tst:8920"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5662" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS Routers MPLS Reset Denial of Service Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0197" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0197"/>
        <description>Cisco IOS 12.1T, 12.2, 12.2T, 12.3 and 12.3T, with Multi Protocol Label Switching (MPLS) installed but disabled, allows remote attackers to cause a denial of service (device reload) via a crafted packet sent to the disabled interface.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:35.345-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:46.591-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:33.660-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2005-0197">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:7886"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8506"/>
        <criterion negate="true" comment="config contains: mpls traffic-eng tunnels" test_ref="oval:org.mitre.oval:tst:8747"/>
        <criteria operator="OR">
          <criterion comment="config contains: mpls ip" test_ref="oval:org.mitre.oval:tst:8652"/>
          <criterion comment="config contains: tag-switching ip" test_ref="oval:org.mitre.oval:tst:8682"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5661" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS access-list Keyword Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-1999-0162" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0162"/>
        <description>The "established" keyword in some Cisco IOS software allowed an attacker to bypass filtering.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:35.528-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:46.376-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:33.404-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-1999-0162">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8564"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:566" version="5" class="vulnerability">
      <metadata>
        <title>IE v6.0,SP1 (Server 2003) Zone Restrictions Bypass via XML Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0817" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0817"/>
        <description>Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for Windows Server 2003.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 6 sp1 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-01-29T12:00:00.000-04:00" comment="Added Windows XP 64-bit, Version 2003 and Windows Server 2003 64-Bit to the list of affected platforms">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-05-10T12:00:00.000-04:00" comment="modified wrt-51 - Comment updated to indicate IE 6.">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-05-11T05:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2621. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T20:21:00.819-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T20:22:30.155-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:46.758-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:57.207-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:23.677-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6  for Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2801"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.3790.94" negate="false" test_ref="oval:org.mitre.oval:tst:2686"/>
          <criterion comment="the patch q824145 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2685"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5659" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS 12.0 ACL Denial of Service Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0862" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0862"/>
        <description>Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not block non-initial packet fragments, which allows remote attackers to bypass the ACL.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:35.734-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:46.165-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:32.882-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2001-0862">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8761"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8638"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5652" version="1" class="vulnerability">
      <metadata>
        <title>Cisco Systems IOS Malformed BGP Denial of Service Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0196"/>
        <description>Cisco IOS 12.0 through 12.3YL, with BGP enabled and running the bgp log-neighbor-changes command, allows remote attackers to cause a denial of service (device reload) via a malformed BGP packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:36.107-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:45.659-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:32.597-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2005-0196">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8628"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8771"/>
        <criteria operator="OR">
          <criterion comment="config contains: bgp log-neighbor-changes" test_ref="oval:org.mitre.oval:tst:8841"/>
          <criterion comment="config contains: snmp-server enable traps bgp" test_ref="oval:org.mitre.oval:tst:8694"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5651" version="5" class="vulnerability">
      <metadata>
        <title>Charts Control Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Visual Basic 6.0</product>
          <product>Microsoft Visual FoxPro</product>
          <product>Microsoft Visual Studio .NET 2002</product>
          <product>Microsoft Visual Studio .NET 2003</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4256" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4256"/>
        <description>The Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to corruption of the "system state," aka "Charts Control Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2008-12-09T13:31:00">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </submitted>
            <status_change date="2008-12-12T16:42:51.273-05:00">DRAFT</status_change>
            <status_change date="2008-12-29T04:00:18.671-05:00">INTERIM</status_change>
            <status_change date="2009-01-19T04:00:07.574-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:5651 - updated by including Visual FoxPro Inventory criteria" date="2011-11-14T13:22:00.233-05:00">
              <contributor organization="SecPod Technologies">Pradeep R B</contributor>
            </modified>
            <status_change date="2011-11-14T13:23:37.274-05:00">INTERIM</status_change>
            <status_change date="2011-12-05T04:00:27.775-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:5651 - New inventory definition for VB6, and updates to definitions incorrectly checking VBA inventory instead of VB6." date="2012-10-25T16:38:00.742-04:00">
              <contributor organization="SecPod Technologies">Pradeep R B</contributor>
            </modified>
            <status_change date="2012-10-25T16:58:27.408-04:00">INTERIM</status_change>
            <status_change date="2012-11-12T04:00:32.568-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Vulnerable Visual Studio .NET 2002 SP1 /2003 SP1">
          <criteria operator="OR" comment="Visual Studio .NET 2002 SP1 /2003 SP1">
            <extend_definition comment="Microsoft Visual Studio .NET 2002 SP1 is installed" definition_ref="oval:org.mitre.oval:def:981"/>
            <extend_definition comment="Microsoft Visual Studio .NET 2003 SP1 is installed" definition_ref="oval:org.mitre.oval:def:168"/>
          </criteria>
          <criterion comment="Mschrt20.ocx version is less than 6.1.98.12" test_ref="oval:org.mitre.oval:tst:9283"/>
        </criteria>
        <criteria operator="AND" comment="Vulnerable Visual Basic 6.0 or VisualFoxPro">
          <criteria operator="OR" comment="Visual Basic 6.0 or VisualFoxPro">
            <extend_definition comment="Microsoft Visual FoxPro is installed" definition_ref="oval:org.mitre.oval:def:14198"/>
            <extend_definition comment="Microsoft Visual Basic 6.0 is installed" definition_ref="oval:org.mitre.oval:def:15369"/>
          </criteria>
          <criterion comment="Mscomct2.ocx version is less than 6.1.98.12" test_ref="oval:org.mitre.oval:tst:9209"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:168" version="9" class="inventory">
      <metadata>
        <title>Microsoft Visual Studio .NET 2003 SP1 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:visual_studio_.net:2003:sp1"/>
        <description>Microsoft Visual Studio .NET 2003 SP1 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-02-14T09:49:32">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2007-02-16T21:55:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-03-21T16:16:59.273-04:00">INTERIM</status_change>
            <status_change date="2007-04-10T13:44:22.175-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.378-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:51:17.649-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:01.364-05:00">ACCEPTED</status_change>
            <modified date="2008-03-02T04:44:54" comment="Added file check to ensure a full installation.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2008-03-17T04:00:17.981-04:00">ACCEPTED</status_change>
            <modified date="2009-06-15T04:44:54" comment="Added CPE">
              <contributor organization="The MITRE Corporation">Brendan Miles</contributor>
            </modified>
            <status_change date="2009-06-22T04:00:50.418-04:00">INTERIM</status_change>
            <status_change date="2009-07-13T04:00:28.042-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:168 - Modifications vary from minor OVAL title/description changes to suggesting an alternative CPE name to use." date="2011-09-28T11:29:00.976-04:00">
              <contributor organization="The MITRE Corporation">David Rothenberg</contributor>
            </modified>
            <status_change date="2011-09-28T11:33:15.228-04:00">INTERIM</status_change>
            <status_change date="2011-10-17T04:00:12.929-04:00">ACCEPTED</status_change>
            <status_change date="2012-03-05T14:23:48.868-05:00">INTERIM</status_change>
            <modified comment="Added Windows Server 2008 R2 platform" date="2012-03-05T14:23:48.868-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2012-03-26T04:02:57.903-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="devenv.exe exists as a Microsoft Visual Studio 2003 component" test_ref="oval:org.mitre.oval:tst:7817"/>
        <criterion comment="Service Pack 1 for Microsoft Visual Studio .NET 2003 is installed" test_ref="oval:org.mitre.oval:tst:3648"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15369" version="5" class="inventory">
      <metadata>
        <title>Microsoft Visual Basic 6.0 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Visual Basic 6.0</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:visual_basic:6.0"/>
        <description>The application Microsoft Visual Basic 6.0 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-10-25T05:39:06">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-10-25T16:55:43.428-04:00">DRAFT</status_change>
            <status_change date="2012-11-12T04:00:10.103-05:00">INTERIM</status_change>
            <status_change date="2012-12-03T04:00:07.178-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:15369 - corrected inventory-definition for Visual Basic 6.0" date="2013-06-11T12:18:00.504-04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-06-11T12:20:21.617-04:00">INTERIM</status_change>
            <status_change date="2013-07-01T04:00:17.631-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Check if file vb6.exe exists" test_ref="oval:org.mitre.oval:tst:80295"/>
        <criterion comment="Check if HKLM\SOFTWARE\Microsoft\VisualStudio\6.0\Setup\Microsoft Visual Basic!ProductDir exists" test_ref="oval:org.mitre.oval:tst:80783"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14198" version="3" class="inventory">
      <metadata>
        <title>Microsoft Visual FoxPro is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Visual FoxPro</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:visual_foxpro"/>
        <description>Microsoft Visual FoxPro is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2011-11-08T12:21:48">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2011-11-14T13:22:58.537-05:00">DRAFT</status_change>
            <status_change date="2011-12-05T04:00:23.248-05:00">INTERIM</status_change>
            <status_change date="2011-12-26T04:01:18.817-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Microsoft Visual FoxPro is installed" test_ref="oval:org.mitre.oval:tst:77534"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5648" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS Multicast Virtual Private Network Information Leakage Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1156" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1156"/>
        <description>Unspecified vulnerability in the Multicast Virtual Private Network (MVPN) implementation in Cisco IOS 12.0, 12.2, 12.3, and 12.4 allows remote attackers to create "extra multicast states on the core routers" via a crafted Multicast Distribution Tree (MDT) Data Join message.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:36.411-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:45.071-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:32.289-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2008-1156">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8529"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8722"/>
        <criterion comment="config contains: mdt default" test_ref="oval:org.mitre.oval:tst:8882"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5644" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS BGP Denial of Service Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0650" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0650"/>
        <description>Cisco devices IOS 12.0 and earlier allow a remote attacker to cause a crash, or bad route updates, via malformed BGP updates with unrecognized transitive attribute.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:36.820-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:44.847-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:31.982-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2001-0650">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8793"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8826"/>
        <criterion comment="config contains: router bgp" test_ref="oval:org.mitre.oval:tst:8749"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5641" version="1" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability With the Solaris Crypto Driver May Cause a System Panic</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0838" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0838"/>
        <description>The crypto pseudo device driver in Sun Solaris 10, and OpenSolaris snv_88 through snv_102, does not properly free memory, which allows local users to cause a denial of service (panic) via unspecified vectors, related to the vmem_hash_delete function.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-03-10T13:09:16.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-03-13T20:24:03.298-04:00">DRAFT</status_change>
            <status_change date="2009-03-30T04:00:18.937-04:00">INTERIM</status_change>
            <status_change date="2009-04-20T04:00:16.154-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 254088">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 139498-04 or later installed" test_ref="oval:org.mitre.oval:tst:9626"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 254088">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 139499-04 or later installed" test_ref="oval:org.mitre.oval:tst:9460"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:564" version="4" class="vulnerability">
      <metadata>
        <title>Multiple Buffer Overflows in Samba</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Samba</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0196"/>
        <description>Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service, as discovered by the Samba team and a different vulnerability than CVE-2003-0201.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-17T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:53.310-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:35.547-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.279-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:57:22.210-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:29.864-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="samba version is less than 2.2.7a-8.9.0" negate="false" test_ref="oval:org.mitre.oval:tst:2559"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="smbd is listening on the network" negate="false" test_ref="oval:org.mitre.oval:tst:2558"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5639" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the ACL (acl(2)) Implementation for UFS File Systems May Allow a Local User to Panic the System</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4160" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4160"/>
        <description>Unspecified vulnerability in the UFS module in Sun Solaris 8 through 10 and OpenSolaris allows local users to cause a denial of service (NULL pointer dereference and kernel panic) via unknown vectors related to the Solaris Access Control List (ACL) implementation.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-08-19T11:48:53.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-08-19T14:58:28.865-04:00">DRAFT</status_change>
            <status_change date="2009-09-07T04:00:04.209-04:00">INTERIM</status_change>
            <status_change date="2009-09-28T04:00:06.168-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criteria operator="OR" comment="Software Section">
          <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 242267">
            <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
            <criterion negate="true" comment="Patch 117350-60 or later installed" test_ref="oval:org.mitre.oval:tst:10320"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 242267">
            <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
            <criterion negate="true" comment="Patch 122300-34 or later installed" test_ref="oval:org.mitre.oval:tst:10524"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 242267">
            <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
            <criterion negate="true" comment="Patch 139483-01 or later installed" test_ref="oval:org.mitre.oval:tst:10531"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 242267">
            <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
            <criterion negate="true" comment="Patch 117351-60 or later installed" test_ref="oval:org.mitre.oval:tst:9984"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 242267">
            <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
            <criterion negate="true" comment="Patch 122301-34 or later installed" test_ref="oval:org.mitre.oval:tst:10020"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 242267">
            <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
            <criterion negate="true" comment="Patch 139484-01 or later installed" test_ref="oval:org.mitre.oval:tst:9621"/>
          </criteria>
        </criteria>
        <criterion comment="The system has UFS file systems mounted which are writable (read-write)" test_ref="oval:org.mitre.oval:tst:10049"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5632" version="1" class="vulnerability">
      <metadata>
        <title>Cisco Systems IOS DHCP Input Queue DoS Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1111" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1111"/>
        <description>Cisco IOS 2.2(18)EW, 12.2(18)EWA, 12.2(14)SZ, 12.2(18)S, 12.2(18)SE, 12.2(18)SV, 12.2(18)SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue instead of dropping them, which allows remote attackers to cause a denial of service (dropped traffic) via multiple undeliverable DHCP packets that exceed the input queue size.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:37.234-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:44.401-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:31.343-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2004-1111">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:7843"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8838"/>
        <criterion negate="true" comment="config contains: no service dhcp" test_ref="oval:org.mitre.oval:tst:8974"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5620" version="5" class="vulnerability">
      <metadata>
        <title>IE v6.0 for 2003, SP3 HijackClick 3 / Script in Image Tag File Download Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0841" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0841"/>
        <description>Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" and the "Script in Image Tag File Download Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-18T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-01-20T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-05-10T12:00:00.000-04:00" comment="modified wrt-51 - Comment updated to indicate IE 6.">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-05-11T05:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2621. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T20:21:00.819-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T20:22:31.393-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:46.319-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:49.449-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:23.531-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6  for Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2801"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.3790.219" negate="false" test_ref="oval:org.mitre.oval:tst:535"/>
          <criterion comment="the patch kb834707 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:534"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5609" version="1" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability in the namefs Kernel module may result in Arbitrary Code Execution or a Denial of Service (DoS)</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3450" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3450"/>
        <description>Unspecified vulnerability in the namefs kernel module in Sun Solaris 8 through 10 allows local users to gain privileges or cause a denial of service (panic) via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-08-05T10:37:22.000-04:00">
              <contributor organization="Hewlett-Packard">Nicholas Hansen</contributor>
            </submitted>
            <status_change date="2008-08-11T11:11:36.400-04:00">DRAFT</status_change>
            <status_change date="2008-09-01T04:01:01.503-04:00">INTERIM</status_change>
            <status_change date="2008-09-22T04:00:26.767-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 237986">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion negate="true" comment="Patch 114984-02 or later installed" test_ref="oval:org.mitre.oval:tst:9052"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 237986">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 114985-02 or later installed" test_ref="oval:org.mitre.oval:tst:9021"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 237986">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 114971-03 or later installed" test_ref="oval:org.mitre.oval:tst:9022"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 237986">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 138570-01 or later installed" test_ref="oval:org.mitre.oval:tst:8942"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 237986">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 136716-01 or later installed" test_ref="oval:org.mitre.oval:tst:8779"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 237986">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 136717-01 or later installed" test_ref="oval:org.mitre.oval:tst:9079"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5608" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS Denial of Service Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0305" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0305"/>
        <description>The Service Assurance Agent (SAA) in Cisco IOS 12.0 through 12.2, aka Response Time Reporter (RTR), allows remote attackers to cause a denial of service (crash) via malformed RTR packets to port 1967.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:37.665-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:43.201-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:30.972-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2003-0305">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8719"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8833"/>
        <criterion comment="config contains: ^\s*rtr responder" test_ref="oval:org.mitre.oval:tst:8464"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5603" version="1" class="vulnerability">
      <metadata>
        <title>Cisco Systems IOS 11.x/12.x DoS Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0567" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0567"/>
        <description>Cisco IOS 11.x and 12.0 through 12.2 allows remote attackers to cause a denial of service (traffic block) by sending a particular sequence of IPv4 packets to an interface on the device, causing the input queue on that interface to be marked as full.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:37.988-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:42.955-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:29.991-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2003-0567">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8795"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8460"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:56" version="1" class="vulnerability">
      <metadata>
        <title>Solaris 8 rpc.yppasswdd Buffer Overrun Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>rpc.yppasswdd</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0779" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0779"/>
        <description>Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote attackers to gain root access via a long username.</description>
        <oval_repository>
          <dates>
            <submitted date="2002-08-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="File rpc.yppasswdd exists" negate="false" test_ref="oval:org.mitre.oval:tst:3006"/>
          <criterion comment="Patch 111596-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3005"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="rpc.yppasswdd running" negate="false" test_ref="oval:org.mitre.oval:tst:3004"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5598" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS Virtual Private Dial-up Network (VPDN) Denial of Service (DoS) Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1150" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1150"/>
        <description>The virtual private dial-up network (VPDN) component in Cisco IOS before 12.3 allows remote attackers to cause a denial of service (resource exhaustion) via a series of PPTP sessions, related to the persistence of interface descriptor block (IDB) data structures after process termination, aka bug ID CSCdv59309.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:38.610-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:41.752-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:29.437-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2008-1150">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8768"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8607"/>
        <criterion comment="config contains: vpdn enable" test_ref="oval:org.mitre.oval:tst:8784"/>
        <criterion comment="config contains: vpdn-group" test_ref="oval:org.mitre.oval:tst:8900"/>
        <criteria operator="OR">
          <criterion comment="config contains: protocol any" test_ref="oval:org.mitre.oval:tst:8950"/>
          <criterion comment="config contains: protocol pptp" test_ref="oval:org.mitre.oval:tst:9078"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5592" version="4" class="vulnerability">
      <metadata>
        <title>Windows (ME, NT, 2K), IE v5.5,SP2 CSS Heap Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0842" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0842"/>
        <description>Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from "memory corruption") via certain malformed Cascading Style Sheet (CSS) elements that trigger heap-based buffer overflows, as demonstrated using the "&lt;STYLE>@;/*" string, possibly due to a missing comment terminator that may cause an invalid length to trigger a large memory copy operation, aka the "CSS Heap Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-19T04:49:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-20T02:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:42:00.000-04:00" comment="modified wft-562 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:56.358-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:23.456-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
          <criterion comment="the version of mshtml.dll is less than 5.50.4945.2800" negate="false" test_ref="oval:org.mitre.oval:tst:384"/>
          <criterion comment="the patch kb834707 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:855"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5586" version="1" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the NFSv4 module in the kernel in Sun Solaris 10."</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2488" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2488"/>
        <description>Unspecified vulnerability in the NFSv4 module in the kernel in Sun Solaris 10, and OpenSolaris snv_102 through snv_119, allows local users to cause a denial of service (client panic) via vectors involving "file operations."</description>
        <oval_repository>
          <dates>
            <submitted date="2009-08-09T17:59:08-04:00">
              <contributor organization="DTCC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2009-08-12T09:49:45.817-04:00">DRAFT</status_change>
            <status_change date="2009-08-31T04:00:04.652-04:00">INTERIM</status_change>
            <status_change date="2009-09-21T04:00:04.218-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (X86) meets Sun Alert ID 262788 criteria.">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 141734-03 or later installed" test_ref="oval:org.mitre.oval:tst:10132"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert ID 262788 criteria.">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 141733-03 or later installed" test_ref="oval:org.mitre.oval:tst:10550"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5575" version="1" class="vulnerability">
      <metadata>
        <title>Cisco PIX CBAC Fragmentation Attack</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-1999-0157" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0157"/>
        <description>Cisco PIX firewall and CBAC IP fragmentation attack results in a denial of service.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:38.886-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:41.174-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:29.157-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-1999-0157">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8704"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5574" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS Input Access List Packet Leakage Flaw</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-1999-0445" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0445"/>
        <description>In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by input access list filters.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:39.440-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:40.924-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:28.181-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-1999-0445">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8290"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8748"/>
        <criterion comment="config contains: ip access-group \S+ in" test_ref="oval:org.mitre.oval:tst:8685"/>
        <criteria operator="OR">
          <criterion comment="config contains: ip nat inside" test_ref="oval:org.mitre.oval:tst:9093"/>
          <criterion comment="config contains: ip nat outside" test_ref="oval:org.mitre.oval:tst:8816"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5570" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS H.323 Packet DoS Vulnerability, Media Gateway Control Protocol Packet DoS Vulnerability and Real-time Transport Protocol Packet DoS Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4291" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4291"/>
        <description>Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service via (1) a malformed MGCP packet, which causes a device hang, aka CSCsf08998; a malformed H.323 packet, which causes a device crash, as identified by (2) CSCsi60004 with Proxy Unregistration and (3) CSCsg70474; and a malformed Real-time Transport Protocol (RTP) packet, which causes a device crash, as identified by (4) CSCse68138, related to VOIP RTP Lib, and (5) CSCse05642, related to I/O memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:39.789-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:39.779-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:27.831-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2007-4291">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8832"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8472"/>
        <criteria operator="OR">
          <criterion comment="config contains: proxy h323" test_ref="oval:org.mitre.oval:tst:8899"/>
          <criterion comment="config contains: ip inspect name \S+ h323" test_ref="oval:org.mitre.oval:tst:8786"/>
          <criterion comment="config contains: service mgcpapp" test_ref="oval:org.mitre.oval:tst:8910"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5567" version="3" class="vulnerability">
      <metadata>
        <title>Cisco IOS Remote Router Denial of Service Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-1999-0159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0159"/>
        <description>Attackers can crash a Cisco IOS router or device, provided they can get to an interactive prompt (such as a login).  This applies to some IOS 9.x, 10.x, and 11.x releases.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:40.141-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:39.550-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:27.543-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:4064 - Updated series of States to escape .(period) character." date="2012-01-13T17:30:00.463-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2012-01-13T17:34:52.318-05:00">INTERIM</status_change>
            <status_change date="2012-01-30T04:00:57.885-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-1999-0159">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8891"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8453"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5565" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS OSPF Buffer Overflow Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0100" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0100"/>
        <description>Buffer overflow in Cisco IOS 11.2.x to 12.0.x allows remote attackers to cause a denial of service and possibly execute commands via a large number of OSPF neighbor announcements.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:40.458-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:39.322-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:27.286-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2003-0100">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8676"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8519"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:556" version="4" class="vulnerability">
      <metadata>
        <title>IE v6.0,SP1 Zone Restrictions Bypass via XML Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0817" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0817"/>
        <description>Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for specific Windows operating systems.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 6 sp1 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-01-29T12:00:00.000-04:00" comment="Added Windows XP 64-bit to the list of affected platforms">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:46:02.703-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:45.819-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:50.913-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:23.353-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2800.1276" negate="false" test_ref="oval:org.mitre.oval:tst:2688"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:555" version="1" class="vulnerability">
      <metadata>
        <title>Xsun Buffer Overflow via HOME Envvar</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>Xsun</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0422" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0422"/>
        <description>Buffer overflow in Xsun in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-12-28T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-12T12:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-02T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-23T09:25:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 7 or 8 installed">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
        </criteria>
        <criterion comment="Patch 108376-25 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:2562"/>
        <criterion comment="Patch 108652-30 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:2561"/>
        <criterion comment="X Window System platform software (SUNWxwplt) installed" negate="false" test_ref="oval:org.mitre.oval:tst:2560"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5545" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in Simplified Chinese, Traditional Chinese, Korean, and Thai Language Input Methods</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0730" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0730"/>
        <description>The (1) Simplified Chinese, (2) Traditional Chinese, (3) Korean, and (4) Thai language input methods in Sun Solaris 10 create files and directories with weak permissions under (a) .iiim/le and (b) .Xlocale in home directories, which might allow local users to write to, or read from, the home directories of other users.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-02-13T12:26:00.000-05:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2008-02-13T16:34:40.858-05:00">DRAFT</status_change>
            <status_change date="2008-03-03T04:00:18.561-05:00">INTERIM</status_change>
            <status_change date="2008-03-24T04:00:48.962-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="Software Section">
          <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 201315">
            <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
            <criteria operator="OR">
              <criterion negate="true" comment="Patch 120412-08 or later installed" test_ref="oval:org.mitre.oval:tst:7399"/>
              <criterion negate="true" comment="Patch 120414-20 or later installed" test_ref="oval:org.mitre.oval:tst:7700"/>
            </criteria>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 201315">
            <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
            <criteria operator="OR">
              <criterion negate="true" comment="Patch 120413-08 or later installed" test_ref="oval:org.mitre.oval:tst:7743"/>
              <criterion negate="true" comment="Patch 120415-20 or later installed" test_ref="oval:org.mitre.oval:tst:7675"/>
            </criteria>
          </criteria>
        </criteria>
        <criteria operator="OR" comment="Configuration Section">
          <criterion comment="Package SUNWcleu2 (Simplified Chinese) is installed" test_ref="oval:org.mitre.oval:tst:6860"/>
          <criterion comment="Package SUNWhleu2 (Traditional Chinese) is installed" test_ref="oval:org.mitre.oval:tst:7614"/>
          <criterion comment="PPackage SUNWhkleu (Traditional Chinese (Hong Kong)) is installed" test_ref="oval:org.mitre.oval:tst:7115"/>
          <criterion comment="Package SUNWkleu (Korean) is installed" test_ref="oval:org.mitre.oval:tst:7155"/>
          <criterion comment="Package SUNWtleu (Thai) is installed" test_ref="oval:org.mitre.oval:tst:7742"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5544" version="1" class="vulnerability">
      <metadata>
        <title>Cisco VTP Subset-Advert DoS Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-4826" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4826"/>
        <description>Unspecified vulnerability in the VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(22)EA3 on Catalyst 2950T switches allows remote attackers to cause a denial of service (device reboot) via a crafted Subset-Advert message packet, a different issue than CVE-2006-4774, CVE-2006-4775, and CVE-2006-4776.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:40.691-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:37.221-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:27.046-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2005-4826">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8688"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5543" version="3" class="vulnerability">
      <metadata>
        <title>A Buffer Overflow Security Vulnerability in the Solaris sadmind(1M) Daemon May Lead to Execution of Arbitrary Code</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4556"/>
        <description>Stack-based buffer overflow in the adm_build_path function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted request.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-05-26T13:34:47.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-05-27T17:29:51.085-04:00">DRAFT</status_change>
            <status_change date="2009-06-15T04:00:44.279-04:00">INTERIM</status_change>
            <status_change date="2009-07-06T04:00:22.228-04:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:54.673-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:29.494-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="Software Section">
          <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 245806">
            <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
            <criterion negate="true" comment="Patch 116455-02 or later installed" test_ref="oval:org.mitre.oval:tst:9833"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 245806">
            <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
            <criterion negate="true" comment="Patch 116453-03 or later installed" test_ref="oval:org.mitre.oval:tst:9695"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 245806">
            <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
            <criterion negate="true" comment="Patch 116442-02 or later installed" test_ref="oval:org.mitre.oval:tst:10038"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 245806">
            <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
            <criterion negate="true" comment="Patch 116454-03 or later installed" test_ref="oval:org.mitre.oval:tst:10171"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Configuration Section">
          <criterion comment="inetd running" test_ref="oval:org.mitre.oval:tst:3135"/>
          <criterion comment="inetd.conf contains sadmind" test_ref="oval:org.mitre.oval:tst:1023"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5542" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS 12.2 Secure Copy Security Bypass Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4263" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4263"/>
        <description>Unspecified vulnerability in the server side of the Secure Copy (SCP) implementation in Cisco 12.2-based IOS allows remote authenticated users to read, write or overwrite any file on the device's filesystem via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:41.029-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:36.883-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:26.720-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2007-4263">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8345"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8836"/>
        <criterion comment="config contains: ip scp server enable" test_ref="oval:org.mitre.oval:tst:8618"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5541" version="1" class="vulnerability">
      <metadata>
        <title>Cisco Fragment Outgoing Fragment Access Control Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0863" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0863"/>
        <description>Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not handle the "fragment" keyword in a compiled ACL (Turbo ACL) for packets that are sent to the router, which allows remote attackers to cause a denial of service via a flood of fragments.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:41.400-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:36.391-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:26.453-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2001-0863">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8635"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8787"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:554" version="2" class="vulnerability">
      <metadata>
        <title>Samba Arbitrary File Overwrite Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Samba</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0086"/>
        <description>The code for writing reg files in Samba before 2.2.8 allows local users to overwrite arbitrary files via a race condition involving chown.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-11T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:48.134-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:35.344-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="samba version is less than 2.2.7a-7.9.0" negate="false" test_ref="oval:org.mitre.oval:tst:2566"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5532" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in FreeType 2 Font Engine May Allow Privilege Escalation Due to Heap Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2754"/>
        <description>Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arbitrary code via a crafted TTF image with a negative n_points value, which leads to an integer overflow and heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-01-09T07:41:41.000-05:00">
              <contributor organization="Hewlett-Packard">Nicholas Hansen</contributor>
            </submitted>
            <status_change date="2008-01-09T14:14:49.552-05:00">DRAFT</status_change>
            <status_change date="2008-02-04T10:19:29.641-05:00">INTERIM</status_change>
            <status_change date="2008-02-25T04:00:11.261-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 103171">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion negate="true" comment="Patch 124420-03 or later installed" test_ref="oval:org.mitre.oval:tst:7777"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 103171">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 116105-08 or later installed" test_ref="oval:org.mitre.oval:tst:7445"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 103171">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 119812-05 or later installed" test_ref="oval:org.mitre.oval:tst:7736"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 103171">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 124421-03 or later installed" test_ref="oval:org.mitre.oval:tst:7493"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 103171">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 116106-07 or later installed" test_ref="oval:org.mitre.oval:tst:7547"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 103171">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 119813-07 or later installed" test_ref="oval:org.mitre.oval:tst:6931"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:553" version="2" class="vulnerability">
      <metadata>
        <title>Microsoft Data Access Components 2.6 Broadcast Response Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 95</platform>
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Data Access Components 2.6</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0903" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0903"/>
        <description>Buffer overflow in a component of Microsoft Data Access Components (MDAC) 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.717-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:57:26.904-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:19.427-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Microsoft Data Access Components 2.6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2717"/>
        <criterion comment="the version of odbcbcp.dll is less than 2000.80.747.0" negate="false" test_ref="oval:org.mitre.oval:tst:2564"/>
        <criterion comment="the version of sqlsrv32.dll is less than 2000.80.747.0" negate="false" test_ref="oval:org.mitre.oval:tst:2563"/>
        <criterion comment="the patch q832483 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2573"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5528" version="1" class="vulnerability">
      <metadata>
        <title>OpenSSL 0.9.6k ASN.1 DoS Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0851" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0851"/>
        <description>OpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recursion) via malformed ASN.1 sequences.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:41.688-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:36.052-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:26.119-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2003-0851">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8884"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:9003"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5520" version="6" class="vulnerability">
      <metadata>
        <title>IE v5.5, SP2 SSL Cached Content Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0845" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0845"/>
        <description>Internet Explorer 5.01, 5.5, and 6 does not properly cache SSL content, which allows remote attackers to obtain information or spoof content via a web site with the same host name as the target web site, whose content is cached and reused when the user visits the target web site.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-18T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-01-20T02:31:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:42:00.000-04:00" comment="modified wft-562 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-06-23T12:49:00.000-04:00" comment="modified obj:490 - Chagned the pattern match operation to equals since there was no need for a regular expression.">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-06-23T11:35:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:30.653-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.853-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:53:29.120-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:19.168-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:53.773-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:23.268-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
          <criterion comment="the version of mshtml.dll is less than 5.50.4945.2800" negate="false" test_ref="oval:org.mitre.oval:tst:384"/>
          <criterion comment="the patch kb834707 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:855"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="Users not saving encrypted pages to disk  (DisableCachingOfSSLPages)" negate="false" test_ref="oval:org.mitre.oval:tst:588"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:552" version="4" class="vulnerability">
      <metadata>
        <title>SMB/CIFS Packet Fragment Re-assembly BO</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>smbd</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0085" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0085"/>
        <description>Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba before 2.2.8, and Samba-TNG before 0.3.1, allows remote attackers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-11T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:55.164-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:35.011-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.966-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:57:08.565-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:29.162-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="samba version is less than 2.2.7a-7.9.0" negate="false" test_ref="oval:org.mitre.oval:tst:2566"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="smbd listens on the network" negate="false" test_ref="oval:org.mitre.oval:tst:2565"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5511" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability May Allow Firewall Compromise or Creation of Denial of Service (DoS) Condition</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1095" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1095"/>
        <description>Unspecified vulnerability in the Internet Protocol (IP) implementation in Sun Solaris 8, 9, and 10 allows remote attackers to bypass intended firewall policies or cause a denial of service (panic) via unknown vectors, possibly related to ICMP packets and IP fragment reassembly.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-03-04T08:44:56.000-05:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2008-03-06T08:35:11.775-05:00">DRAFT</status_change>
            <status_change date="2008-03-24T04:00:48.629-04:00">INTERIM</status_change>
            <status_change date="2008-04-14T04:00:10.100-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 200183">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion negate="true" comment="Patch 116965-30 or later installed" test_ref="oval:org.mitre.oval:tst:7533"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 200183">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 114344-32 or later installed" test_ref="oval:org.mitre.oval:tst:7854"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 200183">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 118822-27 or later installed" test_ref="oval:org.mitre.oval:tst:7608"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 200183">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 116966-29 or later installed" test_ref="oval:org.mitre.oval:tst:7656"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 200183">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 119435-20 or later installed" test_ref="oval:org.mitre.oval:tst:6892"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 200183">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 118844-28 or later installed" test_ref="oval:org.mitre.oval:tst:7175"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:551" version="5" class="vulnerability">
      <metadata>
        <title>MSDTC Unchecked Buffer Permits Remote Code Execution or Privilege Elevation (Win2k,SP4)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>MSDTC</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2119" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2119"/>
        <description>The MIDL_user_allocate function in the Microsoft Distributed Transaction Coordinator (MSDTC) proxy (MSDTCPRX.DLL) allocates a 4K page of memory regardless of the required size, which allows attackers to overwrite arbitrary memory locations using an incorrect size value that is provided to the NdrAllocate function, which writes management data to memory outside of the allocated buffer.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-10-12T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-10-19T05:46:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-08-31T12:00:00.000-04:00" comment="removed an incorrect leading ^ from the value entity of ste:2402">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-08-31T00:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:49.122-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:40.712-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:10.701-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="Win2K/XP/2003 service pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2569"/>
        <criteria operator="OR" comment="Either ole32.dll or rpcss.dll has a version less than 5.0.2195.7059">
          <criterion comment="the version of ole32.dll is less than 5.0.2195.7059" negate="false" test_ref="oval:org.mitre.oval:tst:2568"/>
          <criterion comment="the version of rpcss.dll is less than 5.0.2195.7059" negate="false" test_ref="oval:org.mitre.oval:tst:2567"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5509" version="2" class="vulnerability">
      <metadata>
        <title>Exchange Server 2003 Routing Engine Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>SMTP</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0840" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0840"/>
        <description>The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Routing Engine component of Exchange Server 2003, allows remote attackers to execute arbitrary code via a malicious DNS response message containing length values that are not properly validated.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-13T10:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-10-13T01:16:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-10-27T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-11-17T10:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.406-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:53:46.688-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:18.967-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
          <criterion comment="The version of smtpsvc.dll is less than 6.0.3790.211" negate="false" test_ref="oval:org.mitre.oval:tst:558"/>
          <criterion comment="the patch WindowsServer2003-KB885881-x86-enu.exe is installed" negate="true" test_ref="oval:org.mitre.oval:tst:557"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="SMTP Enabled" negate="false" test_ref="oval:org.mitre.oval:tst:3054"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5507" version="1" class="vulnerability">
      <metadata>
        <title>Multiple Security Vulnerabilities in ICU 3.2 Library Regular Expression Processing May Cause a Denial of Service (DoS)</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4770" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4770"/>
        <description>libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group zero (aka \0), which might allow context-dependent attackers to read from, or write to, out-of-bounds memory locations, related to corruption of REStackFrames.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-03-11T10:54:47.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2008-03-12T09:38:11.814-04:00">DRAFT</status_change>
            <status_change date="2008-03-31T04:00:11.544-04:00">INTERIM</status_change>
            <status_change date="2008-04-21T04:00:22.668-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 233922">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 114677-15 or later installed" test_ref="oval:org.mitre.oval:tst:7086"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 233922">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 119810-05 or later installed" test_ref="oval:org.mitre.oval:tst:7683"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 233922">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 114678-15 or later installed" test_ref="oval:org.mitre.oval:tst:7869"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 233922">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 119811-05 or later installed" test_ref="oval:org.mitre.oval:tst:6971"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5503" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerabilities in the Solaris lpadmin(1M) and ppdmgr(1M) Utilities May Lead to a Denial of Service (DoS) Condition</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0168" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0168"/>
        <description>Unspecified vulnerability in ppdmgr in Sun Solaris 10 and OpenSolaris snv_61 through snv_106 allows local users to cause a denial of service via unspecified vectors, related to a failure to "include all cache files," and improper handling of temporary files.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-02-05T13:18:38.000-05:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-02-06T15:58:58.298-05:00">DRAFT</status_change>
            <status_change date="2009-02-23T04:00:14.196-05:00">INTERIM</status_change>
            <status_change date="2009-03-16T04:00:10.751-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 249306">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 127127-11 installed" test_ref="oval:org.mitre.oval:tst:9551"/>
          <criterion negate="true" comment="Patch 139390-01 or later installed" test_ref="oval:org.mitre.oval:tst:9591"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 249306">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 127128-11 installed" test_ref="oval:org.mitre.oval:tst:9422"/>
          <criterion negate="true" comment="Patch 139391-01 or later installed" test_ref="oval:org.mitre.oval:tst:8934"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:550" version="5" class="vulnerability">
      <metadata>
        <title>RHE4 Firefox and Mozilla Shared Object Code Execution</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2270" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2270"/>
        <description>Firefox before 1.0.5 and Mozilla before 1.7.9 does not properly clone base objects, which allows remote attackers to execute arbitrary code by navigating the prototype chain to reach a privileged object.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-15T04:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-08-19T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11366 - Updated CPE reference, updated regular expression" date="2011-02-17T13:29:00.547-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2011-02-17T13:31:07.641-05:00">INTERIM</status_change>
            <status_change date="2011-03-07T04:00:14.500-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11366 - Corrected - right version for brlapi and brlapi-devel as specified by RHSA-2010:0181-5" date="2013-03-18T12:26:00.995-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-03-18T12:31:10.486-04:00">INTERIM</status_change>
            <status_change date="2013-04-08T04:00:47.014-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2652"/>
          <criterion comment="mozilla RPM is earlier than 37:1.7.10-1.4.1" negate="false" test_ref="oval:org.mitre.oval:tst:2651"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/mozilla is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2650"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:55" version="2" class="vulnerability">
      <metadata>
        <title>Ethereal NTLMSSP Buffer Overflow</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Ethereal</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0159"/>
        <description>Heap-based buffer overflow in the NTLMSSP code for Ethereal 0.9.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-17T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:45.490-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:34.756-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="ethereal version is less than 0.9.11-0.90.1" negate="false" test_ref="oval:org.mitre.oval:tst:3007"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:549" version="3" class="vulnerability">
      <metadata>
        <title>IE v5.5,SP2 Zone Restrictions Bypass via XML Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0817" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0817"/>
        <description>Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for specific Windows operating systems.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 5.5 sp2 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:54.216-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:23.104-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
          <criterion comment="the version of mshtml.dll is less than 5.50.4934.1600" negate="false" test_ref="oval:org.mitre.oval:tst:2689"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5486" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS Secure Shell Denial of Service Vulnerabilities</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1159"/>
        <description>Multiple unspecified vulnerabilities in the SSH server in Cisco IOS 12.4 allow remote attackers to cause a denial of service (device restart) via unknown vectors, aka Bug ID (1) CSCsk42419, (2) CSCsk60020, and (3) CSCsh51293.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:41.987-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:34.243-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:25.774-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2008-1159">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8512"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8550"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5485" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in Solaris 8 Directory Functions</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1115" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1115"/>
        <description>Unspecified vulnerability in Sun Solaris 8 directory functions allows local users to cause a denial of service (panic) via an unspecified sequence of system calls or commands.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-03-04T08:44:57.000-05:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2008-03-06T08:35:12.523-05:00">DRAFT</status_change>
            <status_change date="2008-03-24T04:00:48.080-04:00">INTERIM</status_change>
            <status_change date="2008-04-14T04:00:09.676-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 200163">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion negate="true" comment="Patch 117350-53 or later installed" test_ref="oval:org.mitre.oval:tst:7711"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 200163">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 117351-53 or later installed" test_ref="oval:org.mitre.oval:tst:7677"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:548" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP4 Zone Restrictions Bypass via XML Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0817" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0817"/>
        <description>Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for Windows 2000 sp4 installed.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 5.01 sp4 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:39.731-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:45.555-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:54.500-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:22.682-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3810.1700" negate="false" test_ref="oval:org.mitre.oval:tst:2690"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5476" version="1" class="vulnerability">
      <metadata>
        <title>Two Security Vulnerabilities Exist Within the cpc(3CPC) Sub-System of the Solaris Kernel</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0933" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0933"/>
        <description>Multiple race conditions in the CPU Performance Counters (cpc) subsystem in the kernel in Sun Solaris 10 allow local users to cause a denial of service (panic) via unspecified vectors related to kcpc_unbind and kcpc_restore.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-02-27T15:10:44.000-05:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2008-02-28T09:30:27.469-05:00">DRAFT</status_change>
            <status_change date="2008-03-17T04:00:23.723-04:00">INTERIM</status_change>
            <status_change date="2008-04-07T04:00:10.576-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 231466">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 127111-08 or later installed" test_ref="oval:org.mitre.oval:tst:7708"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 231466">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 127112-08 or later installed" test_ref="oval:org.mitre.oval:tst:7275"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5474" version="3" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability in the USB Mouse STREAMS Module May Lead to a System Panic</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0718" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0718"/>
        <description>Unspecified vulnerability in the USB Mouse STREAMS module (usbms) in Sun Solaris 9 and 10, when 64-bit mode is enabled, allows local users to cause a denial of service (panic) via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-02-13T12:25:59.000-05:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2008-02-13T16:34:39.778-05:00">DRAFT</status_change>
            <status_change date="2008-03-03T04:00:18.196-05:00">INTERIM</status_change>
            <status_change date="2008-03-24T04:00:47.661-04:00">ACCEPTED</status_change>
            <modified comment="Added datatype to bits entity on an isainfo_state.  Datatype set to int." date="2010-09-02T21:09:00.853-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T21:11:44.185-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:28.762-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="Software Section">
          <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 201316">
            <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
            <criterion negate="true" comment="Patch 115553-29 or later installed" test_ref="oval:org.mitre.oval:tst:7796"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 201316">
            <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
            <criterion negate="true" comment="Patch 123402-01 or later installed" test_ref="oval:org.mitre.oval:tst:7809"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 201316">
            <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
            <criterion negate="true" comment="Patch 115554-25 or later installed" test_ref="oval:org.mitre.oval:tst:6972"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 201316">
            <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
            <criterion negate="true" comment="Patch 123403-01 or later installed" test_ref="oval:org.mitre.oval:tst:7804"/>
          </criteria>
        </criteria>
        <criterion comment="system is running in 64-bit mode" test_ref="oval:org.mitre.oval:tst:3884"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5465" version="1" class="vulnerability">
      <metadata>
        <title>Multiple Vendor Full and Half Width Unicode Detection Bypass Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2688" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2688"/>
        <description>The Cisco Intrusion Prevention System (IPS) and IOS with Firewall/IPS Feature Set do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:42.198-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:33.643-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:25.468-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Cisco ISO meets CVE-2007-2688">
        <criterion comment="config contains: ip inspect name \S+ http" test_ref="oval:org.mitre.oval:tst:8663"/>
        <criterion comment="config contains: ip ips \S+ in" test_ref="oval:org.mitre.oval:tst:8601"/>
        <criterion comment="config contains: ip ips \S+ out" test_ref="oval:org.mitre.oval:tst:8509"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5461" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS 12.0 Turbo ACL Denial of Service Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0865" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0865"/>
        <description>Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not support the "fragment" keyword in an outgoing ACL, which could allow fragmented packets in violation of the intended access.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:42.503-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:33.152-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:25.065-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2001-0865">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8258"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8806"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5455" version="1" class="vulnerability">
      <metadata>
        <title>Cisco Systems IOS SSH2 DoS Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1020"/>
        <description>Secure Shell (SSH) 2 in Cisco IOS 12.0 through 12.3 allows remote attackers to cause a denial of service (device reload) (1) via a username that contains a domain name when using a TACACS+ server to authenticate, (2) when a new SSH session is in the login phase and a currently logged in user issues a send command, or (3) when IOS is logging messages and an SSH session is terminated while the server is sending data.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:42.639-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:32.903-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:24.767-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2005-1020">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8734"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8670"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5454" version="1" class="vulnerability">
      <metadata>
        <title>Cisco "EIGRP" Protocol "Goodbye Message" Packet Replay Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-4436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4436"/>
        <description>Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS after 12.3(2), 12.3(3)B, and 12.3(2)T and other products, allows remote attackers to cause a denial of service by sending a "spoofed neighbor announcement" with (1) mismatched k values or (2) "goodbye message" Type-Length-Value (TLV).</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:42.790-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:31.991-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:24.411-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2005-4436">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8536"/>
        <criterion comment="config contains: router eigrp" test_ref="oval:org.mitre.oval:tst:8871"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5453" version="1" class="vulnerability">
      <metadata>
        <title>Covert Channel Security Vulnerability in the Solaris Kernel</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3875" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3875"/>
        <description>The kernel in Sun Solaris 8 through 10 and OpenSolaris before snv_90 allows local users to bypass chroot, zones, and the Solaris Trusted Extensions multi-level security policy, and establish a covert communication channel, via unspecified vectors involving system calls.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-09-03T10:23:55.000-04:00">
              <contributor organization="Hewlett-Packard">Nicholas Hansen</contributor>
            </submitted>
            <status_change date="2008-09-09T10:51:57.209-04:00">DRAFT</status_change>
            <status_change date="2008-09-29T04:00:42.720-04:00">INTERIM</status_change>
            <status_change date="2008-10-20T04:00:19.491-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 240706">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion negate="true" comment="Patch 117350-56 or later installed" test_ref="oval:org.mitre.oval:tst:9150"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 240706">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 117351-56 or later installed" test_ref="oval:org.mitre.oval:tst:8843"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 240706">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 122300-30 or later installed" test_ref="oval:org.mitre.oval:tst:9046"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 240706">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 122301-30 or later installed" test_ref="oval:org.mitre.oval:tst:9227"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 240706">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 137111-05 or later installed" test_ref="oval:org.mitre.oval:tst:9075"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 240706">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 137112-05 or later installed" test_ref="oval:org.mitre.oval:tst:8905"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5451" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the Solaris 10 DTrace Dynamic Tracing Framework May Allow Unauthorized Kernel Level Tracing</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0938" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0938"/>
        <description>Unspecified vulnerability in the dynamic tracing framework (DTrace) in Sun Solaris 10 allows local users with PRIV_DTRACE_USER or PRIV_DTRACE_PROC privileges to obtain sensitive kernel information via unspecified vectors, a different vulnerability than CVE-2007-4126.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-02-27T15:10:45.000-05:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2008-02-28T09:30:27.910-05:00">DRAFT</status_change>
            <status_change date="2008-03-17T04:00:23.061-04:00">INTERIM</status_change>
            <status_change date="2008-04-07T04:00:09.767-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 231803">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 120011-04 or later installed" test_ref="oval:org.mitre.oval:tst:7688"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 231803">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 120012-04 or later installed" test_ref="oval:org.mitre.oval:tst:7520"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5449" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS TFTP Server Long File Name Denial of Service Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0813" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0813"/>
        <description>Heap-based buffer overflow in the TFTP server capability in Cisco IOS 11.1, 11.2, and 11.3 allows remote attackers to cause a denial of service (reset) or modify configuration via a long filename.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:43.013-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:31.070-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:23.929-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2002-0813">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:7897"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5446" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerabilities in the Solaris Priority Inherited pthread mutex API May Result in a Denial of Service (DoS) Condition</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3549" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3549"/>
        <description>Unspecified vulnerability in the pthread_mutex_reltimedlock_np API in Sun Solaris 10 and OpenSolaris before snv_90 allows local users to cause a denial of service (system hang or panic) via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-08-11T17:42:55.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2008-08-14T15:03:12.846-04:00">DRAFT</status_change>
            <status_change date="2008-09-01T04:00:56.846-04:00">INTERIM</status_change>
            <status_change date="2008-09-22T04:00:23.912-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 239387">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 137111-04 or later installed" test_ref="oval:org.mitre.oval:tst:9095"/>
          <criterion comment="deadman feature is enabled (kernel variable 'snooping' has a value of one)" test_ref="oval:org.mitre.oval:tst:8414"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 239387">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 137112-04 or later installed" test_ref="oval:org.mitre.oval:tst:9125"/>
          <criterion comment="deadman feature is enabled (kernel variable 'snooping' has a value of one)" test_ref="oval:org.mitre.oval:tst:8414"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5445" version="1" class="vulnerability">
      <metadata>
        <title>Cisco Systems Internetwork Operating System IPv6 Packet DoS, Code Execution Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2451" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2451"/>
        <description>Cisco IOS 12.0 through 12.4 and IOS XR before 3.2, with IPv6 enabled, allows remote attackers on a local network segment to cause a denial of service (device reload) and possibly execute arbitrary code via a crafted IPv6 packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:43.410-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:30.413-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:23.616-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2005-2451">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8728"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8869"/>
        <criterion comment="config contains: ip auth-proxy" test_ref="oval:org.mitre.oval:tst:8880"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5444" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS File Transfer DoS Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2587" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2587"/>
        <description>The IOS FTP Server in Cisco IOS 11.3 through 12.4 allows remote authenticated users to cause a denial of service (IOS reload) via unspecified vectors involving transferring files (aka bug ID CSCse29244).</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:43.824-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:28.820-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:23.236-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2007-2587">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8323"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8479"/>
        <criterion comment="config contains: ftp-server enable" test_ref="oval:org.mitre.oval:tst:8637"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:544" version="4" class="vulnerability">
      <metadata>
        <title>Denial of Service Vulnerability in Postfix Parser Code</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Postfix</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0540" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0540"/>
        <description>The address parser code in Postfix 1.1.12 and earlier allows remote attackers to cause a denial of service (lock) via (1) a malformed envelope address to a local host that would generate a bounce and contains the ".!" string in the MAIL FROM or Errors-To headers, which causes nqmgr to lock up, or (2) via a valid MAIL FROM with a RCPT TO containing a ".!" string, which causes an instance of the SMTP listener to lock up.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-02T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-05T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:56.860-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:34.582-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.045-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:56:57.744-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:28.470-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="postfix version is less than 1.1.12-1" negate="false" test_ref="oval:org.mitre.oval:tst:2578"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="smtpd listens on the network" negate="false" test_ref="oval:org.mitre.oval:tst:2577"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5431" version="1" class="vulnerability">
      <metadata>
        <title>Multiple Security Vulnerabilities in ICU 3.2 Library Regular Expression Processing May Cause a Denial of Service (DoS)</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4771" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4771"/>
        <description>Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode (ICU) 3.8.1 and earlier allows context-dependent attackers to cause a denial of service (memory consumption) and possibly have unspecified other impact via a regular expression that writes a large amount of data to the backtracking stack.  NOTE: some of these details are obtained from third party information.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-03-11T10:54:48.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2008-03-12T09:38:12.118-04:00">DRAFT</status_change>
            <status_change date="2008-03-31T04:00:09.181-04:00">INTERIM</status_change>
            <status_change date="2008-04-21T04:00:22.018-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 233922">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 114677-15 or later installed" test_ref="oval:org.mitre.oval:tst:7086"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 233922">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 119810-05 or later installed" test_ref="oval:org.mitre.oval:tst:7683"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 233922">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 114678-15 or later installed" test_ref="oval:org.mitre.oval:tst:7869"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 233922">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 119811-05 or later installed" test_ref="oval:org.mitre.oval:tst:6971"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:543" version="4" class="vulnerability">
      <metadata>
        <title>IE v6.0 (XP) Zone Restrictions Bypass via XML Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0817" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0817"/>
        <description>Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T05:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified date="2004-01-21T05:00:00.000-04:00" comment="Removed the test for Windows XP.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 6 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T05:00:00.000-04:00" comment="Removed the IE 6 SP 1 part of this definition as the SP 1 part is defined in a different OVAL.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T05:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T05:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="modified wrt-18 - Changed value element to include pattern match">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:53.065-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:22.619-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2734.1600" negate="false" test_ref="oval:org.mitre.oval:tst:2663"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:542" version="3" class="vulnerability">
      <metadata>
        <title>IE v5.5 Malformed PNG Image File Failure Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1185" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1185"/>
        <description>Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allows remote attackers to cause a denial of service (crash) by triggering a heap-based buffer overflow using invalid length codes during decompression, aka "Malformed PNG Image File Failure."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-27T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:53.133-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:22.562-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Internet Explorer 5.5 Installed">
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3078"/>
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3077"/>
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3076"/>
          <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
        </criteria>
        <criterion comment="the version of mshtml.dll is less than 5.50.4922.900" negate="false" test_ref="oval:org.mitre.oval:tst:2786"/>
        <criterion comment="the patch q328970 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3117"/>
        <criterion comment="the patch q324929 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3116"/>
        <criterion comment="the patch q810847 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3115"/>
        <criterion comment="the patch q813489 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3114"/>
        <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5403" version="1" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability in the Solaris Kerberos PAM Module May Allow Use of a User Specified Kerberos Configuration File, Leading to Escalation of Privileges</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0361" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0361"/>
        <description>Russ Allbery pam-krb5 before 3.13, as used by libpam-heimdal, su in Solaris 10, and other software, does not properly handle calls to pam_setcred when running setuid, which allows local users to overwrite and change the ownership of arbitrary files by setting the KRB5CCNAME environment variable, and then launching a setuid application that performs certain pam_setcred operations.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-03-27T14:00:00.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-04-01T14:58:25.195-04:00">DRAFT</status_change>
            <status_change date="2009-04-20T04:00:10.359-04:00">INTERIM</status_change>
            <status_change date="2009-05-11T04:00:19.532-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 252767">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion negate="true" comment="Patch 112237-16 or later installed" test_ref="oval:org.mitre.oval:tst:9624"/>
          <criterion negate="true" comment="Patch 112390-14 or later installed" test_ref="oval:org.mitre.oval:tst:8797"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 252767">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 112908-34 or later installed" test_ref="oval:org.mitre.oval:tst:9570"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 252767">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 138371-06 or later installed" test_ref="oval:org.mitre.oval:tst:9655"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 252767">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 112238-15 or later installed" test_ref="oval:org.mitre.oval:tst:9370"/>
          <criterion negate="true" comment="Patch 112240-13 or later installed" test_ref="oval:org.mitre.oval:tst:9206"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 252767">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 115168-19 or later installed" test_ref="oval:org.mitre.oval:tst:9606"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 252767">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 138372-06 or later installed" test_ref="oval:org.mitre.oval:tst:9713"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5402" version="1" class="vulnerability">
      <metadata>
        <title>Multiple Vendor NTP Buffer Overflow</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0414" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0414"/>
        <description>Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long readvar argument.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:44.149-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:27.807-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:22.933-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2001-0414">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8576"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8546"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5400" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in Solaris 10 Related to the dotoprocs() Routine</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0269" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0269"/>
        <description>Unspecified vulnerability in the dotoprocs function in Sun Solaris 10 allows local users to cause a denial of service (panic) via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-01-16T09:18:15.000-05:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2008-01-17T09:53:53.580-05:00">DRAFT</status_change>
            <status_change date="2008-02-04T10:19:21.179-05:00">INTERIM</status_change>
            <status_change date="2008-02-25T04:00:10.927-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 103188">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 127111-06 or later installed" test_ref="oval:org.mitre.oval:tst:7472"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 103188">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 127112-06 or later installed" test_ref="oval:org.mitre.oval:tst:7670"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:54" version="2" class="vulnerability">
      <metadata>
        <title>Ethereal SOCKS String Format Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Ethereal</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0081" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0081"/>
        <description>Format string vulnerability in packet-socks.c of the SOCKS dissector for Ethereal 0.8.7 through 0.9.9 allows remote attackers to execute arbitrary code via SOCKS packets containing format string specifiers.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-17T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:34.832-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:34.325-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="ethereal version is less than 0.9.11-0.90.1" negate="false" test_ref="oval:org.mitre.oval:tst:3007"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5397" version="1" class="vulnerability">
      <metadata>
        <title>Multiple Vendor SSH Buffer Overflow Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0144" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0144"/>
        <description>CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:44.313-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:27.126-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:22.689-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2001-0144">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8889"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8737"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5393" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the Solaris X Server May Lead to Unauthorized Disclosure of Information on Access Restricted Files and Directories</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5958" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5958"/>
        <description>X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-02-12T08:48:34.000-05:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2008-02-13T09:26:36.813-05:00">DRAFT</status_change>
            <status_change date="2008-03-03T04:00:16.207-05:00">INTERIM</status_change>
            <status_change date="2008-03-24T04:00:46.668-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 230901">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion negate="true" comment="Patch 119067-09 or later installed" test_ref="oval:org.mitre.oval:tst:7606"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 230901">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 112785-63 or later installed" test_ref="oval:org.mitre.oval:tst:7770"/>
        </criteria>
        <criteria operator="AND">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criteria operator="OR">
            <criteria operator="AND">
              <criterion comment="File Xsun exists" test_ref="oval:org.mitre.oval:tst:3109"/>
              <criterion negate="true" comment="Patch 119059-38 or later installed" test_ref="oval:org.mitre.oval:tst:7694"/>
            </criteria>
            <criteria operator="AND">
              <criterion comment="File Xorg exists" test_ref="oval:org.mitre.oval:tst:1336"/>
              <criterion negate="true" comment="Patch 125719-07 or later installed" test_ref="oval:org.mitre.oval:tst:7744"/>
            </criteria>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 230901">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 119068-09 or later installed" test_ref="oval:org.mitre.oval:tst:7681"/>
        </criteria>
        <criteria operator="AND">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criteria operator="OR">
            <criteria operator="AND">
              <criterion comment="File Xsun exists" test_ref="oval:org.mitre.oval:tst:3109"/>
              <criterion negate="true" comment="Patch 112786-52 or later installed" test_ref="oval:org.mitre.oval:tst:7415"/>
            </criteria>
            <criteria operator="AND">
              <criterion comment="File Xorg exists" test_ref="oval:org.mitre.oval:tst:1336"/>
              <criterion negate="true" comment="Patch 118908-04 or later installed" test_ref="oval:org.mitre.oval:tst:7428"/>
            </criteria>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criteria operator="OR">
            <criteria operator="AND">
              <criterion comment="File Xsun exists" test_ref="oval:org.mitre.oval:tst:3109"/>
              <criterion negate="true" comment="Patch 119060-37 or later installed" test_ref="oval:org.mitre.oval:tst:7764"/>
            </criteria>
            <criteria operator="AND">
              <criterion comment="File Xorg exists" test_ref="oval:org.mitre.oval:tst:1336"/>
              <criterion negate="true" comment="Patch 125720-17 or later installed" test_ref="oval:org.mitre.oval:tst:7423"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5386" version="1" class="vulnerability">
      <metadata>
        <title>Multiple Vendor ICMP Path MTU Discovery Connection Degradation DoS Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1060" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1060"/>
        <description>Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:45.046-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:26.186-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:22.253-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2004-1060">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8503"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8451"/>
        <criteria operator="OR">
          <criterion comment="config contains: ip tcp path-mtu-discovery" test_ref="oval:org.mitre.oval:tst:8608"/>
          <criterion comment="config contains: crypto map" test_ref="oval:org.mitre.oval:tst:9102"/>
          <criterion comment="config contains: tunnel protection" test_ref="oval:org.mitre.oval:tst:8933"/>
          <criterion comment="config contains: ip pmtu" test_ref="oval:org.mitre.oval:tst:9066"/>
          <criterion comment="config contains: tunnel path-mtu-discovery" test_ref="oval:org.mitre.oval:tst:8954"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5369" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in inetd(1M) Daemon When Debug Logging is Enabled</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1684" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1684"/>
        <description>inetd on Sun Solaris 10, when debug logging is enabled, allows local users to write to arbitrary files via a symlink attack on the /var/tmp/inetd.log temporary file.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-04-08T07:20:30.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2008-04-09T13:51:36.728-04:00">DRAFT</status_change>
            <status_change date="2008-04-28T04:00:15.519-04:00">INTERIM</status_change>
            <status_change date="2008-05-19T04:00:13.301-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="Software Section">
          <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 233284">
            <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
            <criterion negate="true" comment="Patch 127718-05 or later installed" test_ref="oval:org.mitre.oval:tst:7859"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 233284">
            <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
            <criterion negate="true" comment="Patch 127719-05 or later installed" test_ref="oval:org.mitre.oval:tst:7909"/>
          </criteria>
        </criteria>
        <criterion comment="File /var/tmp/inetd.log exists" test_ref="oval:org.mitre.oval:tst:7756"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5354" version="1" class="vulnerability">
      <metadata>
        <title>OWA For Exchange Server Data Validation XSS Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <product>Microsoft Exchange Server</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2247" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2247"/>
        <description>Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) for Exchange Server 2003 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified e-mail fields, a different vulnerability than CVE-2008-2248.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-07-08T14:18:00">
              <contributor organization="Secure Elements, Inc.">Jeff Ito</contributor>
            </submitted>
            <status_change date="2008-07-11T10:55:59.110-04:00">DRAFT</status_change>
            <status_change date="2008-07-28T04:00:11.225-04:00">INTERIM</status_change>
            <status_change date="2008-08-18T04:00:25.262-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft Exchange Server 2003 Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:1869"/>
        <criterion comment="owaauth.dll is less than 6.5.7653.38" test_ref="oval:org.mitre.oval:tst:8555"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5347" version="3" class="vulnerability">
      <metadata>
        <title>Heap-based Buffer Overflow Vulnerability in the Solaris 8 and 9 sadmind(1M) Daemon May Lead to Arbitrary Code Execution</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3869" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3869"/>
        <description>Heap-based buffer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request, related to improper decoding of request parameters.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-05-28T13:34:47.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2009-06-05T14:12:44.460-04:00">DRAFT</status_change>
            <status_change date="2009-06-22T04:00:19.512-04:00">INTERIM</status_change>
            <status_change date="2009-07-13T04:00:31.941-04:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:54.398-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:28.072-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="Software Section">
          <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 259468">
            <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
            <criterion negate="true" comment="Patch 116455-02 or later installed" test_ref="oval:org.mitre.oval:tst:9833"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 259468">
            <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
            <criterion negate="true" comment="Patch 116453-03 or later installed" test_ref="oval:org.mitre.oval:tst:9695"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 259468">
            <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
            <criterion negate="true" comment="Patch 116442-02 or later installed" test_ref="oval:org.mitre.oval:tst:10038"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 259468">
            <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
            <criterion negate="true" comment="Patch 116454-03 or later installed" test_ref="oval:org.mitre.oval:tst:10171"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Configuration Section">
          <criterion comment="inetd running" test_ref="oval:org.mitre.oval:tst:3135"/>
          <criterion comment="inetd.conf contains sadmind" test_ref="oval:org.mitre.oval:tst:1023"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5346" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the Solaris 10 STREAMS Administrative Driver ("sad") May Allow a Denial of Service (System panic)</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2418" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2418"/>
        <description>Race condition in the STREAMS Administrative Driver (sad) in Sun Solaris 10 allows local users to cause a denial of service (panic) via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-29T14:40:41.000-04:00">
              <contributor organization="Hewlett-Packard">Nicholas Hansen</contributor>
            </submitted>
            <status_change date="2008-06-02T10:54:28.218-04:00">DRAFT</status_change>
            <status_change date="2008-06-23T04:00:13.629-04:00">INTERIM</status_change>
            <status_change date="2008-07-14T04:00:20.599-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 237584">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 127743-01 or later installed" test_ref="oval:org.mitre.oval:tst:7719"/>
          <criterion comment="Patch 120011-06 or later installed" test_ref="oval:org.mitre.oval:tst:7858"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 237584">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 127744-01 or later installed" test_ref="oval:org.mitre.oval:tst:8071"/>
          <criterion comment="Patch 120012-06 or later installed" test_ref="oval:org.mitre.oval:tst:8036"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:534" version="5" class="vulnerability">
      <metadata>
        <title>IE v6.0,SP1 Function Pointer Drag and Drop Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1027"/>
        <description>Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by using method caching (SaveRef) to access the window.moveBy method, which is otherwise inaccessible, as demonstrated by HijackClickV2, a different vulnerability than CVE-2003-0823, aka the "Function Pointer Drag and Drop Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-02-03T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:52:00.000-04:00" comment="modified wft-94 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:45:56.946-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:44.635-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:46.323-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:22.343-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2800.1400" negate="false" test_ref="oval:org.mitre.oval:tst:2579"/>
          <criterion comment="the patch q832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2588"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5337" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in Solaris 10 OpenSSL SSL_get_shared_ciphers() Function</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5135" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5135"/>
        <description>Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that triggers a one-byte buffer underflow.  NOTE: this issue was introduced as a result of a fix for CVE-2006-3738.  As of 20071012, it is unknown whether code execution is possible.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-02-14T08:25:18.000-05:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2008-02-14T15:57:58.357-05:00">DRAFT</status_change>
            <status_change date="2008-03-03T04:00:13.537-05:00">INTERIM</status_change>
            <status_change date="2008-03-24T04:00:43.411-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 200858">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 127111-08 or later installed" test_ref="oval:org.mitre.oval:tst:7721"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 200858">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 127112-08 or later installed" test_ref="oval:org.mitre.oval:tst:7761"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5329" version="5" class="vulnerability">
      <metadata>
        <title>IE v6.0,SP1 Install Engine Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0216" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0216"/>
        <description>Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious website or HTML email with a long .CAB file name, which triggers the integer overflow when calculating a buffer length and leads to a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-25T04:35:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-27T01:04:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-17T10:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-27T10:50:00.000-04:00" comment="modified wft-564 - Changed test to match comment">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:46:01.772-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:44.229-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:53.347-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:22.267-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2800.1476" negate="false" test_ref="oval:org.mitre.oval:tst:856"/>
          <criterion comment="the patch kb834707 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:855"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:532" version="4" class="vulnerability">
      <metadata>
        <title>IE v6.0 Function Pointer Drag and Drop Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1027"/>
        <description>Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by using method caching (SaveRef) to access the window.moveBy method, which is otherwise inaccessible, as demonstrated by HijackClickV2, a different vulnerability than CVE-2003-0823, aka the "Function Pointer Drag and Drop Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-02-03T05:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-03-04T05:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T05:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T05:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="modified wrt-18 - Changed value element to include pattern match">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <modified date="2005-09-26T12:51:00.000-04:00" comment="modified wft-93 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:46.260-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:22.205-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2737.800" negate="false" test_ref="oval:org.mitre.oval:tst:2580"/>
          <criterion comment="the patch q832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2588"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5318" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in Solaris snoop(1M) when Displaying SMB Traffic</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0964" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0964"/>
        <description>Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via a crafted SMB packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-08-11T12:08:06.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2008-08-14T15:03:14.279-04:00">DRAFT</status_change>
            <status_change date="2008-09-01T04:00:54.664-04:00">INTERIM</status_change>
            <status_change date="2008-09-22T04:00:22.547-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 240101">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 138083-01 or later installed" test_ref="oval:org.mitre.oval:tst:9062"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 240101">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 112915-05 or later installed" test_ref="oval:org.mitre.oval:tst:9103"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 240101">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion negate="true" comment="Patch 108964-11 or later installed" test_ref="oval:org.mitre.oval:tst:8936"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 240101">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 138084-01 or later installed" test_ref="oval:org.mitre.oval:tst:8152"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 240101">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 114262-04 or later installed" test_ref="oval:org.mitre.oval:tst:8854"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 240101">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 108965-11 or later installed" test_ref="oval:org.mitre.oval:tst:9126"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5317" version="2" class="vulnerability">
      <metadata>
        <title>Cisco IOS Firewall Authentication Proxy Buffer Overflow Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2841" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2841"/>
        <description>Buffer overflow in Firewall Authentication Proxy for FTP and/or Telnet Sessions for Cisco IOS 12.2ZH and 12.2ZL, 12.3 and 12.3T, and 12.4 and 12.4T allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted user authentication credentials.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:45.445-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:25.019-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:21.945-04:00">ACCEPTED</status_change>
            <modified comment="correction to regular expression" date="2009-11-23T14:36:00.227-05:00">
              <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2009-11-23T14:37:14.380-05:00">INTERIM</status_change>
            <status_change date="2009-12-14T04:00:05.128-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2005-2841">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8103"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8624"/>
        <criterion comment="config contains: ip auth-proxy" test_ref="oval:org.mitre.oval:tst:8880"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5316" version="5" class="vulnerability">
      <metadata>
        <title>IE v6.0,SP1 (Server 2003) Install Engine Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0216" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0216"/>
        <description>Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious website or HTML email with a long .CAB file name, which triggers the integer overflow when calculating a buffer length and leads to a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-25T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-27T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-17T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-05-10T12:00:00.000-04:00" comment="modified wrt-51 - Comment updated to indicate IE 6.">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-05-11T05:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2621. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T20:21:00.819-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T20:22:32.788-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:43.969-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:55.806-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:22.092-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6  for Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2801"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.3790.219" negate="false" test_ref="oval:org.mitre.oval:tst:535"/>
          <criterion comment="the patch kb834707 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:534"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:531" version="3" class="vulnerability">
      <metadata>
        <title>IE v5.5,SP2 Function Pointer Drag and Drop Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1027"/>
        <description>Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by using method caching (SaveRef) to access the window.moveBy method, which is otherwise inaccessible, as demonstrated by HijackClickV2, a different vulnerability than CVE-2003-0823, aka the "Function Pointer Drag and Drop Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-02-03T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:46.100-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:22.035-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
          <criterion comment="the version of mshtml.dll is less than 5.50.4937.800" negate="false" test_ref="oval:org.mitre.oval:tst:2581"/>
          <criterion comment="the patch q832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2588"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:530" version="5" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP4 Function Pointer Drag and Drop Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1027"/>
        <description>Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by using method caching (SaveRef) to access the window.moveBy method, which is otherwise inaccessible, as demonstrated by HijackClickV2, a different vulnerability than CVE-2003-0823, aka the "Function Pointer Drag and Drop Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-02-03T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:49:00.000-04:00" comment="modified wft-91 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:45.361-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:43.759-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:45.989-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:21.956-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3813.800" negate="false" test_ref="oval:org.mitre.oval:tst:2582"/>
          <criterion comment="the patch q832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2588"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5299" version="1" class="vulnerability">
      <metadata>
        <title>Cisco Multiple Products IKE Packet DoS</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3906" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3906"/>
        <description>Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service (resource exhaustion) via a flood of IKE Phase-1 packets that exceed the session expiration rate. NOTE: it has been argued that this is due to a design weakness of the IKE version 1 protocol, in which case other vendors and implementations would also be affected.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:45.761-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:24.789-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:21.662-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2006-3906">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8763"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8579"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5297" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS access-list "tacacs-ds" or "tacacs" Keyword Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-1999-0161" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0161"/>
        <description>In Cisco IOS 10.3, with the tacacs-ds or tacacs keyword, an extended IP access control list could bypass filtering.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:45.982-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:24.588-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:21.365-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-1999-0161">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8758"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5292" version="1" class="vulnerability">
      <metadata>
        <title>Multiple Vendor OpenSSL 0.9.6, 0.9.7 ASN.1 Vulnerabilities</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0543" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0543"/>
        <description>Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service (crash) via an SSL client certificate with certain ASN.1 tag values.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:46.284-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:24.326-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:21.069-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2003-0543">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8874"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8878"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:529" version="5" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP3 Function Pointer Drag and Drop Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1027"/>
        <description>Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by using method caching (SaveRef) to access the window.moveBy method, which is otherwise inaccessible, as demonstrated by HijackClickV2, a different vulnerability than CVE-2003-0823, aka the "Function Pointer Drag and Drop Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-02-03T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:50:00.000-04:00" comment="modified wft-90 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2824. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:48:00.494-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:52:24.763-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:43.533-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:50.510-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:21.885-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3015"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3526.800" negate="false" test_ref="oval:org.mitre.oval:tst:2589"/>
          <criterion comment="the patch q832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2588"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5288" version="1" class="vulnerability">
      <metadata>
        <title>Cisco Extensible Authentication Protocol (EAP) Design Error Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5651" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5651"/>
        <description>Unspecified vulnerability in the Extensible Authentication Protocol (EAP) implementation in Cisco IOS 12.3 and 12.4 on Cisco Access Points and 1310 Wireless Bridges (Wireless EAP devices), IOS 12.1 and 12.2 on Cisco switches (Wired EAP devices), and CatOS 6.x through 8.x on Cisco switches allows remote attackers to cause a denial of service (device reload) via a crafted EAP Response Identity packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:47.036-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:23.552-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:20.684-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2007-5651">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8533"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8877"/>
        <criteria operator="OR">
          <criterion comment="config contains: authentication open eap" test_ref="oval:org.mitre.oval:tst:9094"/>
          <criterion comment="config contains: authentication network-eap" test_ref="oval:org.mitre.oval:tst:8665"/>
          <criterion comment="config contains: wlccp authentication-server client" test_ref="oval:org.mitre.oval:tst:8620"/>
          <criterion comment="config contains: wlccp authentication-server infrastructure" test_ref="oval:org.mitre.oval:tst:8994"/>
          <criterion comment="config contains: dot1x pae authenticator" test_ref="oval:org.mitre.oval:tst:8941"/>
          <criterion comment="config contains: dot1x pae both" test_ref="oval:org.mitre.oval:tst:9068"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5287" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS Virtual Private Dial-up Network (VPDN) PPTP Session Termination Memory Leak Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1151" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1151"/>
        <description>Memory leak in the virtual private dial-up network (VPDN) component in Cisco IOS before 12.3 allows remote attackers to cause a denial of service (memory consumption) via a series of PPTP sessions, related to "dead memory" that remains allocated after process termination, aka bug ID CSCsj58566.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:47.260-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:22.952-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:19.955-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2008-1151">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8768"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8607"/>
        <criterion comment="config contains: vpdn enable" test_ref="oval:org.mitre.oval:tst:8784"/>
        <criterion comment="config contains: vpdn-group" test_ref="oval:org.mitre.oval:tst:8900"/>
        <criteria operator="OR">
          <criterion comment="config contains: protocol any" test_ref="oval:org.mitre.oval:tst:8950"/>
          <criterion comment="config contains: protocol pptp" test_ref="oval:org.mitre.oval:tst:9078"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5282" version="1" class="vulnerability">
      <metadata>
        <title>Solaris 9 sshd(1M) Patches May Cause Incorrect Audit Data to be Logged</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6505"/>
        <description>Solaris 9, with Solaris Auditing enabled and certain patches for sshd installed, can generate audit records with an audit-ID of 0 even when the user logging into ssh is not root, which makes it easier for attackers to avoid detection and can make it more difficult to conduct forensics activities.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-01-09T07:41:42.000-05:00">
              <contributor organization="Hewlett-Packard">Nicholas Hansen</contributor>
            </submitted>
            <status_change date="2008-01-09T14:14:50.538-05:00">DRAFT</status_change>
            <status_change date="2008-02-04T10:19:09.130-05:00">INTERIM</status_change>
            <status_change date="2008-02-25T04:00:10.579-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 103172">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 122300-17 or later installed" test_ref="oval:org.mitre.oval:tst:7771"/>
          <criterion comment="Patch 113273-11 or later installed" test_ref="oval:org.mitre.oval:tst:7745"/>
          <criterion comment="Patch 113273-16 or earlier installed" test_ref="oval:org.mitre.oval:tst:7780"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 103172">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 122301-17 or later installed" test_ref="oval:org.mitre.oval:tst:7712"/>
          <criterion comment="Patch 114858-09 or later installed" test_ref="oval:org.mitre.oval:tst:7746"/>
          <criterion comment="Patch 114858-13 or earlier installed" test_ref="oval:org.mitre.oval:tst:7680"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:527" version="5" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP2 Function Pointer Drag and Drop Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1027"/>
        <description>Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by using method caching (SaveRef) to access the window.moveBy method, which is otherwise inaccessible, as demonstrated by HijackClickV2, a different vulnerability than CVE-2003-0823, aka the "Function Pointer Drag and Drop Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-02-03T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:50:00.000-04:00" comment="modified wft-90 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2868. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:41:00.387-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:43:08.486-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:43.312-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:49.747-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:21.798-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3063"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3526.800" negate="false" test_ref="oval:org.mitre.oval:tst:2589"/>
          <criterion comment="the patch q832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2588"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5269" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerabilities in Solaris Print Service May Lead to Denial of Service (DoS) or Execution of Arbitrary Code</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2144" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2144"/>
        <description>Multiple unspecified vulnerabilities in Solaris print service for Sun Solaris 8, 9, and 10 allow remote attackers to cause a denial of service or execute arbitrary code via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-14T13:20:42.000-04:00">
              <contributor organization="Hewlett-Packard">Nicholas Hansen</contributor>
            </submitted>
            <status_change date="2008-05-15T14:47:17.480-04:00">DRAFT</status_change>
            <status_change date="2008-06-02T04:00:08.809-04:00">INTERIM</status_change>
            <status_change date="2008-06-23T04:00:12.580-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 236884">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion negate="true" comment="Patch 109320-20 or later installed" test_ref="oval:org.mitre.oval:tst:7494"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 236884">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 109321-20 or later installed" test_ref="oval:org.mitre.oval:tst:7873"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 236884">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 113329-19 or later installed" test_ref="oval:org.mitre.oval:tst:7921"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 236884">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 114980-20 or later installed" test_ref="oval:org.mitre.oval:tst:7759"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 236884">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 127127-11 or later installed" test_ref="oval:org.mitre.oval:tst:7382"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 236884">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 127128-11 or later installed" test_ref="oval:org.mitre.oval:tst:7793"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:526" version="6" class="vulnerability">
      <metadata>
        <title>IE v6.0,SP1 (Server 2003) Improper URL Canonicalization Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1025"/>
        <description>Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the user@domain portion of the URL, which hides the rest of the URL, including the real site, in the address bar, aka the "Improper URL Canonicalization Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-02-03T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-05-10T12:00:00.000-04:00" comment="modified wrt-51 - Comment updated to indicate IE 6.">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-05-11T05:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:54:00.000-04:00" comment="modified wft-95 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2621. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T20:21:00.819-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T20:22:30.648-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:43.096-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:50.220-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:21.732-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Internet Explorer 6  for Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2801"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.3790.118" negate="false" test_ref="oval:org.mitre.oval:tst:2572"/>
        <criterion comment="the patch q832894 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2571"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5258" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in Solaris 10 Involving the SCTP Protocol May Result in a Denial of Network Services Due to Network Flooding</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2090" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2090"/>
        <description>Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service (CPU consumption and network traffic amplification) via a crafted SCTP packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-05T13:33:55.000-04:00">
              <contributor organization="Hewlett-Packard">Nicholas Hansen</contributor>
            </submitted>
            <status_change date="2008-05-08T13:36:09.054-04:00">DRAFT</status_change>
            <status_change date="2008-05-26T04:00:20.600-04:00">INTERIM</status_change>
            <status_change date="2008-06-16T04:00:07.192-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 236521">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 127127-08 or later installed" test_ref="oval:org.mitre.oval:tst:7996"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 236521">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 127128-08 or later installed" test_ref="oval:org.mitre.oval:tst:7373"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5252" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in GNU tar May Lead to Arbitrary Code Execution or Denial of Service (DoS)</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0300" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0300"/>
        <description>Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-04-30T11:23:00.000-04:00">
              <contributor organization="Hewlett-Packard">Michael Wood</contributor>
            </submitted>
            <status_change date="2009-05-07T11:17:46.363-04:00">DRAFT</status_change>
            <status_change date="2009-05-25T04:01:32.862-04:00">INTERIM</status_change>
            <status_change date="2009-06-15T04:00:39.412-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 241646">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 139100-01 or later installed" test_ref="oval:org.mitre.oval:tst:9899"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:525" version="2" class="vulnerability">
      <metadata>
        <title>Microsoft Data Access Components 2.5 Broadcast Response Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 95</platform>
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Data Access Components 2.5</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0903" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0903"/>
        <description>Buffer overflow in a component of Microsoft Data Access Components (MDAC) 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.717-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:57:27.859-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:18.770-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Microsoft Data Access Components 2.5 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2576"/>
        <criterion comment="the version of odbcbcp.dll is less than 3.70.11.46" negate="false" test_ref="oval:org.mitre.oval:tst:2575"/>
        <criterion comment="the version of sqlsrv32.dll is less than 3.70.11.46" negate="false" test_ref="oval:org.mitre.oval:tst:2574"/>
        <criterion comment="the patch q832483 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2573"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5226" version="1" class="vulnerability">
      <metadata>
        <title>Cisco Systems Malformed IPSec IKE DoS Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3669" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3669"/>
        <description>Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in multiple Cisco products allow remote attackers to cause a denial of service (device reset) via certain malformed IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.  NOTE: due to the lack of details in the Cisco advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:47.608-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:21.397-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:19.252-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2005-3669">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8641"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:522" version="4" class="vulnerability">
      <metadata>
        <title>Postfix Bounce Scans Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Postfix</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0468" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0468"/>
        <description>Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of other hosts via an email address to the local host containing the target IP address and service name followed by a "!" string, which causes Postfix to attempt to use SMTP to communicate with the target on the associated port.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-02T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-05T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:22.986-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:34.153-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.045-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:56:57.800-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:27.729-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="postfix version is less than 1.1.12-1" negate="false" test_ref="oval:org.mitre.oval:tst:2578"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="smtpd listens on the network" negate="false" test_ref="oval:org.mitre.oval:tst:2577"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5216" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the libxml2 Library May Lead to a Denial of Service (DoS)</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6284" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6284"/>
        <description>The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service (infinite loop) via XML containing invalid UTF-8 sequences.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-02-12T08:48:33.000-05:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2008-02-13T09:26:34.461-05:00">DRAFT</status_change>
            <status_change date="2008-03-03T04:00:10.886-05:00">INTERIM</status_change>
            <status_change date="2008-03-24T04:00:40.950-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 201514">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 114014-18 or later installed" test_ref="oval:org.mitre.oval:tst:7816"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 201514">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 125731-02 or later installed" test_ref="oval:org.mitre.oval:tst:7732"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 201514">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 114015-18 or later installed" test_ref="oval:org.mitre.oval:tst:7223"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 201514">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 125732-02 or later installed" test_ref="oval:org.mitre.oval:tst:7419"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5211" version="1" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability in libdevinfo(3LIB) May Allow Unauthorized Access to Files on the System</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0242" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0242"/>
        <description>Unspecified vulnerability in libdevinfo in Sun Solaris 10 allows local users to access files and gain privileges via unknown vectors, related to login device permissions.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-01-15T11:52:30.000-05:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-01-17T09:54:51.531-05:00">DRAFT</status_change>
            <status_change date="2008-02-04T10:19:00.101-05:00">INTERIM</status_change>
            <status_change date="2008-02-25T04:00:10.261-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 103165">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 125251-02 installed" test_ref="oval:org.mitre.oval:tst:7347"/>
          <criterion comment="Patch 118833-04 or later installed" test_ref="oval:org.mitre.oval:tst:7841"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 103165">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 125252-02 installed" test_ref="oval:org.mitre.oval:tst:7106"/>
          <criterion comment="Patch 118855-03 or later installed" test_ref="oval:org.mitre.oval:tst:7786"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5210" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS 12.0 Allowance of Malicious Traffic Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0866" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0866"/>
        <description>Cisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound ACL when an input ACL is not configured on all the interfaces of a multi port line card, which could allow remote attackers to bypass the intended access controls.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:47.878-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:20.967-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:18.958-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2001-0866">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8814"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8514"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:520" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP3 Zone Restrictions Bypass via XML Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0817" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0817"/>
        <description>Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for Windows 2000 sp3 installed.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 5.01 sp3 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2824. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:48:00.494-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:52:28.658-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:42.856-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:48.358-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:21.669-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3015"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3523.1700" negate="false" test_ref="oval:org.mitre.oval:tst:2693"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:52" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Eye of GNOME (EOG) Packages Fix Format String Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>EOG</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0165" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0165"/>
        <description>Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via format string specifiers in a command line argument for the file to display.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-14T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:49.492-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:33.934-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="eog version is less than 2.2.0-2" negate="false" test_ref="oval:org.mitre.oval:tst:3011"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="eog is executable">
            <criterion comment="eog is world-executable" negate="false" test_ref="oval:org.mitre.oval:tst:3010"/>
            <criterion comment="eog is group-executable" negate="false" test_ref="oval:org.mitre.oval:tst:3009"/>
            <criterion comment="eog is owner-executable" negate="false" test_ref="oval:org.mitre.oval:tst:3008"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:519" version="4" class="vulnerability">
      <metadata>
        <title>Scob and Toofer Internet Explorer v6.0 Vulnerabilities</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0549" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0549"/>
        <description>The WebBrowser ActiveX control, or the Internet Explorer HTML rendering engine (MSHTML), as used in Internet Explorer 6, allows remote attackers to execute arbitrary code in the Local Security context by using the showModalDialog method and modifying the location to execute code such as Javascript, as demonstrated using (1) delayed HTTP redirect operations, and an HTTP response with a Location: header containing a "URL:" prepended to a "ms-its" protocol URI, or (2) modifying the location attribute of the window, as exploited by the Download.ject (aka Scob aka Toofer) using the ADODB.Stream object.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-30T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-08-02T04:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-08-25T04:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-09T04:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="modified wrt-18 - Changed value element to include pattern match">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <modified date="2005-09-26T12:19:00.000-04:00" comment="modified wft-268 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:42.277-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:21.607-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2743.600" negate="false" test_ref="oval:org.mitre.oval:tst:2583"/>
          <criterion comment="the patch kb832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2802"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5188" version="3" class="vulnerability">
      <metadata>
        <title>Cisco 7600, Catalyst 6000 and 6500 Network Analysis Module SNMP Message Spoofing Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1257" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1257"/>
        <description>The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets that are spoofed from the NAM's own IP address.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:48.406-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:20.342-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:17.957-04:00">ACCEPTED</status_change>
            <modified comment="Added test for NAM module" date="2010-05-26T12:56:00.608-04:00">
              <contributor organization="DTCC">KASHIF LATIF</contributor>
            </modified>
            <status_change date="2010-05-26T12:57:25.698-04:00">INTERIM</status_change>
            <status_change date="2010-06-14T04:00:03.476-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8859"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8446"/>
        <criteria operator="OR" comment="NAM Test">
          <criterion comment="Show Modules" test_ref="oval:org.mitre.oval:tst:24212"/>
          <criterion comment="Show Modules" test_ref="oval:org.mitre.oval:tst:24169"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:517" version="6" class="vulnerability">
      <metadata>
        <title>IE v6.0,SP1 (Server 2003) Malformed GIF Image Double-free Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1048" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1048"/>
        <description>Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-08-02T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-08-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-05-10T12:00:00.000-04:00" comment="modified wrt-51 - Comment updated to indicate IE 6.">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-05-11T05:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T11:00:00.000-04:00" comment="modified wft-266 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2621. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T20:21:00.819-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T20:22:32.334-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:42.647-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:42.743-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:21.542-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Software section">
        <criterion comment="Internet Explorer 6  for Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2801"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.3790.191" test_ref="oval:org.mitre.oval:tst:2800"/>
        <criterion negate="true" comment="the patch kb867801 is installed (Hotfix key)" test_ref="oval:org.mitre.oval:tst:2799"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5165" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in Solaris 10 Involving the SCTP Protocol May Result in a Panic and Denial of Service (DoS)</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2089" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2089"/>
        <description>Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service (panic) via a crafted SCTP packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-05T13:33:55.000-04:00">
              <contributor organization="Hewlett-Packard">Nicholas Hansen</contributor>
            </submitted>
            <status_change date="2008-05-08T13:36:09.338-04:00">DRAFT</status_change>
            <status_change date="2008-05-26T04:00:19.762-04:00">INTERIM</status_change>
            <status_change date="2008-06-16T04:00:06.194-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 236321">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 127127-08 or later installed" test_ref="oval:org.mitre.oval:tst:7996"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 236321">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 127128-08 or later installed" test_ref="oval:org.mitre.oval:tst:7373"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5150" version="6" class="vulnerability">
      <metadata>
        <title>IE v5.01, SP4 SSL Cached Content Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0845" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0845"/>
        <description>Internet Explorer 5.01, 5.5, and 6 does not properly cache SSL content, which allows remote attackers to obtain information or spoof content via a web site with the same host name as the target web site, whose content is cached and reused when the user visits the target web site.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-18T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-01-20T02:31:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-06-23T12:49:00.000-04:00" comment="modified obj:490 - Chagned the pattern match operation to equals since there was no need for a regular expression.">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-06-23T11:35:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:29.549-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:42.093-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:42.366-05:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.853-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:53:30.687-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:18.516-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:47.802-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:21.476-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3534.2800" negate="false" test_ref="oval:org.mitre.oval:tst:519"/>
          <criterion comment="the patch kb834707-ie501sp4 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:518"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="Users not saving encrypted pages to disk  (DisableCachingOfSSLPages)" negate="false" test_ref="oval:org.mitre.oval:tst:588"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:515" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP2 Bitmap Integer Overflow Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0566" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0566"/>
        <description>Integer overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with a large bfOffBits value.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2004-08-02T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-08-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2868. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:41:00.387-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:43:09.802-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:42.124-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:42.989-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:21.423-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Internet Explorer 5.01 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3063"/>
        <criterion comment="the version of mshtml.dll is less than 5.0.3532.300" negate="false" test_ref="oval:org.mitre.oval:tst:2803"/>
        <criterion comment="the patch kb832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2802"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5141" version="2" class="vulnerability">
      <metadata>
        <title>CDE libDtHelp Buffer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>Common Desktop Environment</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0834" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0834"/>
        <description>Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via (1) a modified DTHELPUSERSEARCHPATH environment variable and the Help feature, (2) DTSEARCHPATH, or (3) LOGNAME.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-19T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-24T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-06-02T12:00:00.000-04:00" comment="Added product">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-06-08T03:17:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-29T06:49:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 7,8,or 9 installed">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
        </criteria>
        <criteria operator="OR" comment="CDE Application Runtime or CDE Separable Help (any SUNWdtbas/SUNWdtbax/SUNWdthep) installed">
          <criterion comment="CDE application basic runtime environment (SUNWdtbas/SUNWdtbax) installed" negate="false" test_ref="oval:org.mitre.oval:tst:459"/>
          <criterion comment="Separable help for CDE (SUNWdthep) installed" negate="false" test_ref="oval:org.mitre.oval:tst:280"/>
        </criteria>
        <criterion comment="Patch 107178-03 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:279"/>
        <criterion comment="Patch 108949-08 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:278"/>
        <criterion comment="Patch 116308-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:277"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:514" version="8" class="vulnerability">
      <metadata>
        <title>HP-UX 11.11, 11.23 Blind Connection Reset Attack Vulnerability</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0790" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0790"/>
        <description>Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error messages, aka the "blind connection-reset attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:48:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:48.503-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:56.136-04:00">ACCEPTED</status_change>
            <modified comment="Added title." date="2007-02-26T01:00:00.030-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-02-26T01:00:42.054-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:19.700-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:514 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:36.745-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:36.248-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:tst:3901 - HP-UX Security Advisory - HPSBUX02944_101" date="2014-02-19T09:09:00.021-05:00">
              <contributor organization="Hewlett-Packard">Sushant Kumar Singh</contributor>
            </modified>
            <status_change date="2014-02-19T09:13:10.878-05:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:tst:3704 - HP-UX Security Advisories published in February 2014" date="2014-03-05T13:28:00.446-05:00">
              <contributor organization="Hewlett-Packard">Sushant Kumar Singh</contributor>
            </modified>
            <status_change date="2014-03-24T04:01:39.608-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="An HPUX 11.11 or 11.23 is installed">
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.11">
            <criteria operator="AND" comment="700 Series OS Release 11.11">
              <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:3443"/>
              <criterion comment="HP Release B.11.11" test_ref="oval:org.mitre.oval:tst:3704"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.11">
              <criterion comment="800-series HP" test_ref="oval:org.mitre.oval:tst:4124"/>
              <criterion comment="HP Release B.11.11" test_ref="oval:org.mitre.oval:tst:3704"/>
            </criteria>
          </criteria>
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.23">
            <criteria operator="AND" comment="700 Series OS Release 11.23">
              <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:3443"/>
              <criterion comment="HP Release B.11.23" test_ref="oval:org.mitre.oval:tst:3901"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.23">
              <criterion comment="800-series HP" test_ref="oval:org.mitre.oval:tst:4124"/>
              <criterion comment="HP Release B.11.23" test_ref="oval:org.mitre.oval:tst:3901"/>
            </criteria>
          </criteria>
        </criteria>
        <criterion comment="TOUR_PRODUCT.T-NET2-KRN with version less than A.03.00 is installed" test_ref="oval:org.mitre.oval:tst:3415"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5138" version="3" class="vulnerability">
      <metadata>
        <title>Cisco IOS Device SIP Support DoS Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0648" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0648"/>
        <description>Cisco IOS after 12.3(14)T, 12.3(8)YC1, 12.3(8)YG, and 12.4, with voice support and without Session Initiated Protocol (SIP) configured, allows remote attackers to cause a denial of service (crash) by sending a crafted packet to port 5060/UDP.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:48.861-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:19.139-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:17.038-04:00">ACCEPTED</status_change>
            <modified comment="Added tests for SIP module" date="2010-05-26T12:58:00.373-04:00">
              <contributor organization="DTCC">KASHIF LATIF</contributor>
            </modified>
            <status_change date="2010-05-26T12:59:10.414-04:00">INTERIM</status_change>
            <status_change date="2010-06-14T04:00:02.671-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Cisco Version Test">
          <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8543"/>
          <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8602"/>
        </criteria>
        <criteria operator="OR" comment="SIP Line Test">
          <criterion comment="SIP Test using ip socket. config contains: 5060 .may generate few false positive" test_ref="oval:org.mitre.oval:tst:24211"/>
          <criterion comment="SIP Test using Tcp brief all. result contains: 5060" test_ref="oval:org.mitre.oval:tst:24372"/>
          <criterion comment="SIP Test using runnning config. result contains: 5060" test_ref="oval:org.mitre.oval:tst:24146"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:513" version="5" class="vulnerability">
      <metadata>
        <title>IE v6.0,SP1 Improper URL Canonicalization Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1025"/>
        <description>Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the user@domain portion of the URL, which hides the rest of the URL, including the real site, in the address bar, aka the "Improper URL Canonicalization Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-02-03T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:52:00.000-04:00" comment="modified wft-94 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:45:59.589-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:41.965-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:43.645-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:21.331-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.2800.1400" negate="false" test_ref="oval:org.mitre.oval:tst:2579"/>
        <criterion comment="the patch q832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2588"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5128" version="1" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability in Solaris 10 involving the sendfilev() system call could result in Denial of Service (DoS) due to System Panic</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3666" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3666"/>
        <description>Unspecified vulnerability in Sun Solaris 10 and OpenSolaris before snv_96 allows (1) context-dependent attackers to cause a denial of service (panic) via vectors involving creation of a crafted file and use of the sendfilev system call, as demonstrated by a file served by an Apache 2.2.x web server with EnableSendFile configured; and (2) local users to cause a denial of service (panic) via a call to the sendfile system call, as reachable through the sendfilev library.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-08-14T11:25:43.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2008-08-14T15:03:16.477-04:00">DRAFT</status_change>
            <status_change date="2008-09-01T04:00:51.409-04:00">INTERIM</status_change>
            <status_change date="2008-09-22T04:00:21.027-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 239186">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 137111-04 or later installed" test_ref="oval:org.mitre.oval:tst:9073"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 239186">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 137112-04 or later installed" test_ref="oval:org.mitre.oval:tst:8753"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:512" version="4" class="vulnerability">
      <metadata>
        <title>IE v6.0 Improper URL Canonicalization Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1025"/>
        <description>Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the user@domain portion of the URL, which hides the rest of the URL, including the real site, in the address bar, aka the "Improper URL Canonicalization Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-02-03T05:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-03-09T05:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T05:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="modified wrt-18 - Changed value element to include pattern match">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <modified date="2005-09-26T12:51:00.000-04:00" comment="modified wft-93 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:43.706-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:21.275-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.2737.800" negate="false" test_ref="oval:org.mitre.oval:tst:2580"/>
        <criterion comment="the patch q832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2588"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:511" version="3" class="vulnerability">
      <metadata>
        <title>IE v5.5,SP2 Improper URL Canonicalization Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1025"/>
        <description>Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the user@domain portion of the URL, which hides the rest of the URL, including the real site, in the address bar, aka the "Improper URL Canonicalization Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-02-03T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:43.785-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:21.232-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
        <criterion comment="the version of mshtml.dll is less than 5.50.4937.800" negate="false" test_ref="oval:org.mitre.oval:tst:2581"/>
        <criterion comment="the patch q832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2588"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:510" version="5" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP4 Improper URL Canonicalization Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1025"/>
        <description>Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the user@domain portion of the URL, which hides the rest of the URL, including the real site, in the address bar, aka the "Improper URL Canonicalization Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-02-03T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:49:00.000-04:00" comment="modified wft-91 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:38.610-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:41.812-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:43.964-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:21.164-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
        <criterion comment="the version of mshtml.dll is less than 5.0.3813.800" negate="false" test_ref="oval:org.mitre.oval:tst:2582"/>
        <criterion comment="the patch q832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2588"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:509" version="5" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP4 Malformed GIF Image Double-free Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1048" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1048"/>
        <description>Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-08-02T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-08-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:21:00.000-04:00" comment="modified wft-279 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:43.183-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:41.656-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:44.540-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:21.111-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Software section">
        <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" test_ref="oval:org.mitre.oval:tst:2794"/>
        <criterion comment="the version of mshtml.dll is less than 5.0.3819.300" test_ref="oval:org.mitre.oval:tst:2793"/>
        <criterion negate="true" comment="the patch kb832894 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:2802"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5080" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS IPv4 Memory Leak DoS Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0479"/>
        <description>Memory leak in the TCP listener in Cisco IOS 9.x, 10.x, 11.x, and 12.x allows remote attackers to cause a denial of service by sending crafted TCP traffic to an IPv4 address on the IOS device.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-01T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:49.430-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:18.562-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:16.210-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2007-0479">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8922"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8659"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:508" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP2 Zone Restrictions Bypass via XML Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0817" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0817"/>
        <description>Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for Windows 2000 sp2 installed.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 5.01 sp2 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2868. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:41:00.387-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:43:09.567-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:41.485-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:44.466-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:21.028-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3063"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3523.1700" negate="false" test_ref="oval:org.mitre.oval:tst:2693"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5075" version="3" class="vulnerability">
      <metadata>
        <title>Cisco IOS Session Initiation Protocol (SIP) Packet Code Execution Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4295" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4295"/>
        <description>Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows remote attackers to execute arbitrary code via a malformed SIP packet, aka CSCsi80749.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:49.607-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:17.872-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:15.706-04:00">ACCEPTED</status_change>
            <modified comment="Added SIP Line Test" date="2010-07-16T11:27:00.329-04:00">
              <contributor organization="DTCC">KASHIF LATIF</contributor>
            </modified>
            <status_change date="2010-07-16T11:27:36.374-04:00">INTERIM</status_change>
            <status_change date="2010-08-02T04:00:07.922-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8832"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8472"/>
        <criteria operator="OR" comment="SIP Line Test">
          <criterion comment="SIP Test using ip socket. config contains: 5060" test_ref="oval:org.mitre.oval:tst:24211"/>
          <criterion comment="SIP Test using Tcp brief all. result contains: 5060" test_ref="oval:org.mitre.oval:tst:24372"/>
          <criterion comment="SIP Test using runnning config. result contains: 5060" test_ref="oval:org.mitre.oval:tst:24146"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:507" version="4" class="vulnerability">
      <metadata>
        <title>IE v6.0 Bitmap Integer Overflow Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0566" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0566"/>
        <description>Integer overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with a large bfOffBits value.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-30T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2004-08-02T04:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-08-25T04:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-09T04:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="modified wrt-18 - Changed value element to include pattern match">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <modified date="2005-09-26T12:19:00.000-04:00" comment="modified wft-268 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:44.259-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:20.970-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.2743.600" negate="false" test_ref="oval:org.mitre.oval:tst:2583"/>
        <criterion comment="the patch kb832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2802"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5036" version="2" class="vulnerability">
      <metadata>
        <title>Cisco IOS FTP Server Authentication Bypass Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2586" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2586"/>
        <description>The FTP Server in Cisco IOS 11.3 through 12.4 does not properly check user authorization, which allows remote attackers to execute arbitrary code, and have other impact including reading startup-config, as demonstrated by a crafted MKD command that involves access to a VTY device and overflows a buffer, aka bug ID CSCek55259.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:49.753-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:17.196-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:15.218-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2007-2586">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8323"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8479"/>
        <criterion comment="config contains: ftp-server enable" test_ref="oval:org.mitre.oval:tst:8637"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:503" version="2" class="vulnerability">
      <metadata>
        <title>Integer Signedness Error in PINE</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>pine</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0721"/>
        <description>Integer signedness error in rfc2231_get_param from strings.c in PINE before 4.58 allows remote attackers to execute arbitrary code via an email that causes an out-of-bounds array access using a negative number.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-12T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:47.076-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:33.657-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="pine version is less than 4.44-19.90.0" negate="false" test_ref="oval:org.mitre.oval:tst:2587"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/bin/pine is executable">
            <criterion comment="/usr/bin/pine is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2586"/>
            <criterion comment="/usr/bin/pine is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2585"/>
            <criterion comment="/usr/bin/pine is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2584"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:50" version="3" class="vulnerability">
      <metadata>
        <title>IE v5.01 GetObject File Retrieval</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0023" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0023"/>
        <description>Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to read arbitrary files via malformed requests to the GetObject function, which bypass some of GetObject's security checks.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified comment="Corrected ste:2875 set datatype to version on version element. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-12T20:46:00.631-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-12T20:47:58.750-05:00">INTERIM</status_change>
            <modified comment="Corrected ste:2873. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-12T20:52:00.978-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <modified comment="Corrected ste:2874. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-12T21:00:00.301-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <modified comment="Corrected ste:2871. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-12T21:03:00.158-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <modified comment="Corrected ste:2872. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-12T21:06:00.183-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <modified comment="Corrected ste:2870. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:36:00.896-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <modified comment="Corrected ste:2869. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:39:00.994-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <modified comment="Corrected ste:2868. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:41:00.387-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-02-20T13:40:40.531-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:37.537-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:20.775-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Internet Explorer 5.01 Installed">
          <criterion comment="Internet Explorer 5.01 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3070"/>
          <criterion comment="Internet Explorer 5.01 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3069"/>
          <criterion comment="Internet Explorer 5.01 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3068"/>
          <criterion comment="Internet Explorer 5.01 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3067"/>
          <criterion comment="Internet Explorer 5.01 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3066"/>
          <criterion comment="Internet Explorer 5.01 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3065"/>
          <criterion comment="Internet Explorer 5.01 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3064"/>
          <criterion comment="Internet Explorer 5.01 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3063"/>
        </criteria>
        <criterion comment="the version of mshtml.dll is less than 5.0.3502.4856" negate="false" test_ref="oval:org.mitre.oval:tst:3012"/>
        <criterion comment="the patch q316059 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3121"/>
        <criterion comment="the patch q319282 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3120"/>
        <criterion comment="the patch q321232 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3119"/>
        <criterion comment="the patch q323759 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3118"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:499" version="2" class="vulnerability">
      <metadata>
        <title>PINE Buffer Overflow</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>pine</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0720" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0720"/>
        <description>Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a malformed message/external-body MIME type.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-12T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:39.919-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:33.417-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="pine version is less than 4.44-19.90.0" negate="false" test_ref="oval:org.mitre.oval:tst:2587"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/bin/pine is executable">
            <criterion comment="/usr/bin/pine is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2586"/>
            <criterion comment="/usr/bin/pine is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2585"/>
            <criterion comment="/usr/bin/pine is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2584"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4988" version="6" class="vulnerability">
      <metadata>
        <title>Windows 2000 Message Queuing Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Message Queuing</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0059" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0059"/>
        <description>Buffer overflow in the Message Queuing component of Microsoft Windows 2000 and Windows XP SP1 allows remote attackers to execute arbitrary code via a crafted message.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-05-02T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2005-05-04T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2005-06-02T12:00:00.000-04:00" comment="Added product">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2005-06-17T12:00:00.000-04:00" comment="modified cmp-1106 - Replaced the test that checks for the service pack level, instead of checking for sp4 or ealier (did not check for GOLD edition) it is now negating the test that checks for sp5 for later.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2005-07-27T10:37:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected and tightened regular expression in ste:2610" date="2010-12-02T11:46:00.307-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-12-02T11:47:28.283-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:01:01.473-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:57.456-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:08.282-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 (sp4 or earlier) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 5 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2790"/>
        </criteria>
        <criterion comment="the version of mqrt.dll is less than 5.0.0.799" negate="false" test_ref="oval:org.mitre.oval:tst:285"/>
        <criterion comment="the patch KB892944 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:328"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4987" version="5" class="vulnerability">
      <metadata>
        <title>Microsoft .NET Framework v1.0 Security Bypass</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft .NET Framework</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0847"/>
        <description>The Microsoft .NET forms authentication capability for ASP.NET allows remote attackers to bypass authentication for .aspx files in restricted directories via a request containing a (1) "\" (backslash) or (2) "%5C" (encoded backslash), aka "Path Validation Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-03-31T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Matthew Burton</contributor>
            </submitted>
            <status_change date="2005-04-12T08:26:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-27T12:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Set xsi:nil=&quot;true&quot; on name sub-element of obj:267.  Implemented by Harvey Rubinovitz." date="2007-01-08T16:36:00.431-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-08T16:40:23.526-05:00">INTERIM</status_change>
            <modified comment="Updated metadata: changed affected product to .NET Framework (was MDAC 2.7), and added Microsoft Windows 2000 as affected platform." date="2007-01-08T17:19:00.528-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <modified comment="Fixed obj:264: Removed repeated string in key.  Implemented by Matthew Wojcik." date="2007-01-23T13:34:00.065-05:00">
              <contributor organization="GFI Software">Daniel Tarnu</contributor>
            </modified>
            <status_change date="2007-02-20T13:40:39.846-05:00">ACCEPTED</status_change>
            <modified comment="Corrected obj:263 to use variable that constructs the path to the .net 1.1 directory." date="2007-07-18T13:42:00.929-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-07-18T13:44:10.000-04:00">INTERIM</status_change>
            <status_change date="2007-08-02T14:47:16.146-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.569-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:57:00.767-04:00">INTERIM</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.540-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-11-13T12:01:17.728-05:00">ACCEPTED</status_change>
            <modified comment="Removed the leading &quot;\&quot; from the key." date="2008-02-04T10:03:00.376-05:00">
              <contributor organization="Hewlett-Packard">Jeff Cheng</contributor>
            </modified>
            <status_change date="2008-02-04T10:08:27.718-05:00">INTERIM</status_change>
            <status_change date="2008-02-25T04:00:09.634-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Software section">
        <criterion comment="Is the Microsoft .NET Framework 1.0 installed" test_ref="oval:org.mitre.oval:tst:292"/>
        <criteria operator="OR" comment="A vulnerable version of Microsoft .NET Framework v1.0 is installed.">
          <criteria operator="AND" comment="A vulnerable version of Microsoft .NET Framework v1.0 (SP 2) is installed.">
            <criterion negate="true" comment="Is the KB886905 patch installed for Microsoft .NET Framework v1.0 sp 2?" test_ref="oval:org.mitre.oval:tst:291"/>
            <criterion comment="the version of System.web.dll is less than 1.0.3705.556" test_ref="oval:org.mitre.oval:tst:290"/>
            <criterion comment="Is Service Pack 2 for Microsoft .NET Framework 1.0 installed" test_ref="oval:org.mitre.oval:tst:289"/>
          </criteria>
          <criteria operator="AND" comment="A vulnerable version of Microsoft .NET Framework v1.0 (SP 3) is installed.">
            <criterion comment="Is Service Pack 3 for Microsoft .NET Framework 1.0 installed" test_ref="oval:org.mitre.oval:tst:288"/>
            <criterion comment="the version of System.web.dll is less than 1.0.3705.6021" test_ref="oval:org.mitre.oval:tst:287"/>
            <criterion negate="true" comment="Is the KB886906 patch installed for Microsoft .NET Framework v1.0 sp 3?" test_ref="oval:org.mitre.oval:tst:286"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4985" version="4" class="vulnerability">
      <metadata>
        <title>DHTML Object Memory Corruption Vulnerability (IE5.01,SP4)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0553" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0553"/>
        <description>Race condition in the memory management routines in the DHTML object processor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail, aka "DHTML Object Memory Corruption Vulnerability".</description>
        <oval_repository>
          <dates>
            <submitted date="2005-05-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-05-11T05:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-22T12:38:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:45.189-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:39.635-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:49.935-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:20.603-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3826.2400" negate="false" test_ref="oval:org.mitre.oval:tst:567"/>
          <criterion comment="the patch kb890923 is installed (Win2K SP4  Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:566"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4950" version="1" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability in Floating Point Context Switch Implementation May Result in a Denial of Service (DoS) or Data Integrity Issues</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1778" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1778"/>
        <description>Unspecified vulnerability in the floating point context switch implementation in Sun Solaris 9 and 10 on x86 platforms might allow local users to cause a denial of service (application exit), corrupt data, or trigger incorrect calculations via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-04-15T07:48:47.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2008-04-15T12:06:15.409-04:00">DRAFT</status_change>
            <status_change date="2008-05-05T04:00:22.388-04:00">INTERIM</status_change>
            <status_change date="2008-05-26T04:00:19.375-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 233921">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 122301-23 or later installed" test_ref="oval:org.mitre.oval:tst:7682"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 233921">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 127112-10 or later installed" test_ref="oval:org.mitre.oval:tst:7749"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:495" version="3" class="vulnerability">
      <metadata>
        <title>IE v5.5 Encoded Characters Information Disclosure Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1186" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1186"/>
        <description>Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded characters within a URL, which allows a remote attacker to steal potentially sensitive information from a user by redirecting the user to another site that has that information, aka "Encoded Characters Information Disclosure."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-27T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:35.369-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:20.548-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Internet Explorer 5.5 Installed">
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3078"/>
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3077"/>
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3076"/>
          <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
        </criteria>
        <criterion comment="the version of mshtml.dll is less than 5.50.4922.900" negate="false" test_ref="oval:org.mitre.oval:tst:2786"/>
        <criterion comment="the patch q328970 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3117"/>
        <criterion comment="the patch q324929 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3116"/>
        <criterion comment="the patch q810847 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3115"/>
        <criterion comment="the patch q813489 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3114"/>
        <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4948" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS Border Gateway Protocol (BGP) OPEN and UPDATE Messages Design Error Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0589" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0589"/>
        <description>Cisco IOS 11.1(x) through 11.3(x) and 12.0(x) through 12.2(x), when configured for BGP routing, allows remote attackers to cause a denial of service (device reload) via malformed BGP (1) OPEN or (2) UPDATE messages.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-04-30T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:50.172-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:16.734-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:14.857-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2004-0589">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8462"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8383"/>
        <criterion comment="config contains: router bgp" test_ref="oval:org.mitre.oval:tst:8953"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4947" version="5" class="vulnerability">
      <metadata>
        <title>IE5.01,SP4 Channel Definition Format Cross Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0056" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0056"/>
        <description>Internet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition Format (CDF) files, which allows remote attackers to obtain sensitive information or execute arbitrary code, aka the "Channel Definition Format (CDF) Cross Domain Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-03-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-03-23T08:09:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-13T12:15:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-05-04T12:33:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed test to check kb867282.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:45.906-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:39.413-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:41.451-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:20.486-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3825.700" negate="false" test_ref="oval:org.mitre.oval:tst:994"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:494" version="6" class="vulnerability">
      <metadata>
        <title>MS Windows RPC DCOM DoS-based Privilege Escalation Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Remote Procedure Call (RPC)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0605" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0605"/>
        <description>The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via certain messages to the __RemoteGetClassObject interface that cause a NULL pointer to be passed to the PerformScmStage function.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-12-03T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2884" date="2010-11-29T16:14:00.692-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:40.118-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:01:01.214-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:16.426-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:07.115-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="the version of rpcrt4.dll is less than 5.0.2195.6802" negate="false" test_ref="oval:org.mitre.oval:tst:2914"/>
          <criterion comment="the patch kb824146 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:3082"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="DCOM is enabled on systems with SP3 or later">
            <criterion comment="Win2K/XP/2003 service pack 3 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3079"/>
            <criterion comment="DCOM is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2913"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4937" version="1" class="vulnerability">
      <metadata>
        <title>Cisco Gigabit Switch Routers (GSR) Authentication Circumvention Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2000-0700" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0700"/>
        <description>Cisco Gigabit Switch Routers (GSR) with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.2(15)GS1A up to 11.2(19)GS0.2 and some versions of 12.0, do not properly handle line card failures, which allows remote attackers to bypass ACLs or force the interface to stop forwarding packets.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:50.531-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:16.024-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:14.319-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2000-0700">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8828"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8227"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4936" version="1" class="vulnerability">
      <metadata>
        <title>Kerberos 5 KDC ASN.1 Error Handling Double-free Vulnerabilities</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <product>Kerberos5</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0642" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0642"/>
        <description>Double free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key Distribution Center (KDC) library and (2) client library for MIT Kerberos 5 (krb5) 1.3.4 and earlier may allow remote attackers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2004-10-13T12:00:00.000-04:00">DRAFT</status_change>
            <modified date="2005-01-14T12:00:00.000-04:00" comment="Changed kerberos unknown test to solaris file contents test">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </modified>
            <status_change date="2005-02-02T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-23T09:25:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Software section">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="Kerberos 5 installed" test_ref="oval:org.mitre.oval:tst:648"/>
          <criterion negate="true" comment="Patch 112908-15 or later installed" test_ref="oval:org.mitre.oval:tst:616"/>
        </criteria>
        <criteria operator="AND" comment="Configuration section">
          <criterion comment="/etc/krb5/krb5.conf is configured with a kerberos domain" test_ref="oval:org.mitre.oval:tst:1153"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4927" version="5" class="vulnerability">
      <metadata>
        <title>MSN Messenger GIF Size Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>MSN Messenger</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0562" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0562"/>
        <description>GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary code via a GIF image with an improper height and width.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-04-19T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2005-04-20T12:13:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-05-11T05:41:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-11-24T12:00:00.000-04:00" comment="Added wrt-620 to see if MSN Messenger 6.2 is installed.  Changed wrt-431 to check 'DisplayVersion' rather than 'MSN Messenger 6.2'.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <modified date="2005-12-20T07:05:00.000-04:00" comment="Added wrt-431.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-04T08:04:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:1436" date="2007-04-23T12:05:00.002-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:31:50.312-04:00">INTERIM</status_change>
            <status_change date="2007-05-09T16:11:06.297-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:1436 - vulnerabilities for VMware and inventories for VMware Workstation, VMware View and VMware Player." date="2013-06-21T12:00:00.019-04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-06-21T12:13:31.098-04:00">INTERIM</status_change>
            <status_change date="2013-07-08T04:02:56.930-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="MSN Messenger 6.2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2520"/>
        <criterion comment="MSN Messenger 6.2.0208 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:294"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4922" version="1" class="vulnerability">
      <metadata>
        <title>Multiple Vendor TCP/IP stack Weak Initial Sequence Number Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0328" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0328"/>
        <description>TCP implementations that use random increments for initial sequence numbers (ISN) can allow remote attackers to perform session hijacking or disruption by injecting a flood of packets with a range of ISN values, one of which may match the expected ISN.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-02T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:50.991-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:15.718-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:14.026-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2001-0328">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8829"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8632"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4914" version="1" class="vulnerability">
      <metadata>
        <title>Cisco IOS System Timers Heap Overflow Code Execution Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3481" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3481"/>
        <description>Cisco IOS 12.0 to 12.4 might allow remote attackers to execute arbitrary code via a heap-based buffer overflow in system timers. NOTE: this issue does not correspond to a specific vulnerability, rather a general weakness that only increases the feasibility of exploitation of any vulnerabilities that might exist.  Such design-level weaknesses normally are not included in CVE, so perhaps this issue should be REJECTed.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:51.368-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:14.994-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:13.734-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2005-3481">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8732"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8855"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:491" version="5" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP3 Improper URL Canonicalization Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1025"/>
        <description>Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the user@domain portion of the URL, which hides the rest of the URL, including the real site, in the address bar, aka the "Improper URL Canonicalization Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-02-03T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:50:00.000-04:00" comment="modified wft-90 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2824. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:48:00.494-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:52:25.906-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:39.201-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:35.607-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:20.430-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Internet Explorer 5.01 Service Pack 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3015"/>
        <criterion comment="the version of mshtml.dll is less than 5.0.3526.800" negate="false" test_ref="oval:org.mitre.oval:tst:2589"/>
        <criterion comment="the patch q832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2588"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4905" version="2" class="vulnerability">
      <metadata>
        <title>Cisco IOS AAA Command Authorization Bypass via TCL Shell Reuse Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0486" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0486"/>
        <description>Certain Cisco IOS releases in 12.2S based trains with maintenance release number 25 and later, 12.3T based trains, and 12.4 based trains reuse a Tcl Shell process across login sessions of different local users on the same terminal if the first user does not use tclquit before exiting, which may cause subsequent local users to execute unintended commands or bypass AAA command authorization checks, aka Bug ID CSCef77770.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:51.634-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:14.557-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:12.949-04:00">ACCEPTED</status_change>
            <modified comment="correction to regular expression" date="2009-11-23T14:31:00.179-05:00">
              <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2009-11-23T14:36:28.354-05:00">INTERIM</status_change>
            <modified comment="correcting escape characters in regular expression for ste:4000" date="2009-11-24T11:18:00.673-05:00">
              <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2009-12-14T04:00:04.606-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2006-0486">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8666"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8876"/>
        <criterion comment="config contains: aaa authorization commands .*tacacs+" test_ref="oval:org.mitre.oval:tst:9042"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:490" version="5" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP2 Improper URL Canonicalization Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1025"/>
        <description>Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the user@domain portion of the URL, which hides the rest of the URL, including the real site, in the address bar, aka the "Improper URL Canonicalization Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-02-03T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:50:00.000-04:00" comment="modified wft-90 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2868. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:41:00.387-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:43:10.547-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:38.999-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:35.748-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:20.186-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Internet Explorer 5.01 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3063"/>
        <criterion comment="the version of mshtml.dll is less than 5.0.3526.800" negate="false" test_ref="oval:org.mitre.oval:tst:2589"/>
        <criterion comment="the patch q832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2588"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:49" version="3" class="vulnerability">
      <metadata>
        <title>IE v5.01 Improper Cross Domain Security Validation with Dialog Box</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1326" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1326"/>
        <description>Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model to run malicious script or arbitrary programs via dialog boxes, aka "Improper Cross Domain Security Validation with dialog box."</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified comment="Corrected ste:2875 set datatype to version on version element. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-12T20:46:00.631-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-12T20:47:59.459-05:00">INTERIM</status_change>
            <modified comment="Corrected ste:2873. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-12T20:52:00.978-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <modified comment="Corrected ste:2874. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-12T21:00:00.301-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <modified comment="Corrected ste:2871. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-12T21:03:00.158-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <modified comment="Corrected ste:2872. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-12T21:06:00.183-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <modified comment="Corrected ste:2870. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:36:00.896-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <modified comment="Corrected ste:2869. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:39:00.994-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <modified comment="Corrected ste:2868. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:41:00.387-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <modified comment="Corrected ste:2824. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:48:00.494-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-02-20T13:40:38.675-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:35.184-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:20.061-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Internet Explorer 5.01 Installed">
          <criterion comment="Internet Explorer 5.01 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3070"/>
          <criterion comment="Internet Explorer 5.01 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3069"/>
          <criterion comment="Internet Explorer 5.01 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3068"/>
          <criterion comment="Internet Explorer 5.01 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3067"/>
          <criterion comment="Internet Explorer 5.01 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3066"/>
          <criterion comment="Internet Explorer 5.01 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3065"/>
          <criterion comment="Internet Explorer 5.01 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3064"/>
          <criterion comment="Internet Explorer 5.01 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3063"/>
          <criterion comment="Internet Explorer 5.01 Service Pack 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3015"/>
        </criteria>
        <criterion comment="File %windir%\system32\mshtml.dll version is less than 5.0.3513.900" negate="false" test_ref="oval:org.mitre.oval:tst:3014"/>
        <criterion comment="the patch q810847 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3115"/>
        <criterion comment="the patch q813489 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3013"/>
        <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:489" version="2" class="vulnerability">
      <metadata>
        <title>Unchecked Buffer in SQLXML ISAPI Extension for Microsoft Data Access Components 2.7</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft SQL Server 2000</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0186" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0186"/>
        <description>Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code via data queries with a long content-type parameter, aka "Unchecked Buffer in SQLXML ISAPI Extension."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-09-15T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Matthew Burton</contributor>
            </submitted>
            <modified date="2004-09-16T12:00:00.000-04:00" comment="Input of initial submission.">
              <contributor organization="The MITRE Corporation">Matthew Burton</contributor>
            </modified>
            <status_change date="2004-09-22T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-10-06T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-10-20T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-04-08T12:00:00.000-04:00" comment="modified wft-492 - wft-492 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2005-04-11T08:48:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-04-27T12:07:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="SQL Server 2000 installed" negate="false" test_ref="oval:org.mitre.oval:tst:2591"/>
        <criterion comment="Microsoft Data Access Components 2.7 (RTM) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2590"/>
        <criterion comment="the version of sqlisapi.dll is less than 2000.80.309.0" negate="false" test_ref="oval:org.mitre.oval:tst:2594"/>
        <criterion comment="the version of sqlservr.exe is less than 2000.80.760.0" negate="false" test_ref="oval:org.mitre.oval:tst:2593"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4884" version="1" class="vulnerability">
      <metadata>
        <title>Cisco H.323 Protocol Denial of Service Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0054" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0054"/>
        <description>Multiple vulnerabilities in the H.323 protocol implementation for Cisco IOS 11.3T through 12.2T allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:51.950-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:14.094-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:12.094-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Cisco ISO meets CVE-2004-0054">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8675"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8720"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4874" version="4" class="vulnerability">
      <metadata>
        <title>DHTML Object Memory Corruption Vulnerability (IE5.01,SP3)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0553" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0553"/>
        <description>Race condition in the memory management routines in the DHTML object processor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail, aka "DHTML Object Memory Corruption Vulnerability".</description>
        <oval_repository>
          <dates>
            <submitted date="2005-05-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-05-11T05:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-22T12:38:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2824. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:48:00.494-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:52:29.286-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:38.317-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:46.855-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:19.990-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3015"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3539.2400" negate="false" test_ref="oval:org.mitre.oval:tst:1083"/>
          <criterion comment="the patch kb890923  is installed (Win2K SP3  Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:1082"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4864" version="7" class="vulnerability">
      <metadata>
        <title>IE5.01,SP4 Drag-and-Drop Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0053" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0053"/>
        <description>Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the "Drag-and-Drop Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-03-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-03-23T08:09:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-13T12:15:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-05-04T12:33:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed test to check kb867282.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:38.772-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:38.010-05:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.795-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:47:49.181-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:17.465-05:00">ACCEPTED</status_change>
            <modified comment="Fix for regular expression" date="2010-01-13T14:40:00.667-05:00">
              <contributor organization="The MITRE Corporation">Dan Haynes</contributor>
            </modified>
            <status_change date="2010-01-13T14:41:05.301-05:00">INTERIM</status_change>
            <status_change date="2010-02-01T04:00:08.134-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:58.707-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:19.891-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3825.700" negate="false" test_ref="oval:org.mitre.oval:tst:994"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="Check for Drag&amp;Drop enabled and the patch kb834707(wildcard*)  missing">
            <criterion comment="Drag-and-Drop disabled when set to 3" negate="true" test_ref="oval:org.mitre.oval:tst:1316"/>
            <criterion comment="the patch kb834707(wildcard*) is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:977"/>
          </criteria>
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4863" version="1" class="vulnerability">
      <metadata>
        <title>Apache Mod_Proxy Remote Negative Content-Length Buffer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0492" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0492"/>
        <description>Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-14T01:12:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <modified date="2004-10-18T03:16:00.000-04:00" comment="Changed apache test to file test">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </modified>
            <modified date="2004-10-19T11:20:00.000-04:00" comment="Changed apache test to package test">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </modified>
            <status_change date="2004-10-20T02:35:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="OR" comment="Solaris 8 or 9 installed">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          </criteria>
          <criterion comment="Patch 116973-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:656"/>
          <criterion comment="Patch 113146-05 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:655"/>
          <criterion comment="Apache (SUNWapchu) installed" negate="false" test_ref="oval:org.mitre.oval:tst:653"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="Apache running (httpd)" negate="false" test_ref="oval:org.mitre.oval:tst:654"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4859" version="2" class="vulnerability">
      <metadata>
        <title>Proxy Server Reverse DNS Lookup Results Spoofing</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <product>Proxy Server 2.0 SP1</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0892" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0892"/>
        <description>Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition) allows remote attackers to spoof trusted Internet content on a specially crafted webpage via spoofed reverse DNS lookup results.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-11-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2005-01-12T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-02T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2005-03-01T12:00:00.000-04:00" comment="modified wft-7 - Corrected path">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2005-06-02T12:00:00.000-04:00" comment="modified wft-7 - corrected object path">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2005-06-22T12:38:00.000-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.194-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:56:51.390-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:17.241-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Microsoft Proxy Server 2.0 SP1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:297"/>
        <criterion comment="the version of w3proxy.dll is less than 2.0.390.16" negate="false" test_ref="oval:org.mitre.oval:tst:296"/>
        <criterion comment="the patch KB888258 for Proxy Server 2.0 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:295"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:485" version="2" class="vulnerability">
      <metadata>
        <title>PH Cross-site Scripting Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>php</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0442" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0442"/>
        <description>Cross-site scripting (XSS) vulnerability in the transparent SID support capability for PHP before 4.3.2 (session.use_trans_sid) allows remote attackers to insert arbitrary script via the PHPSESSID parameter.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-29T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:58.679-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:33.229-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="php version is less than 4.2.2-17.2" negate="false" test_ref="oval:org.mitre.oval:tst:2592"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4849" version="3" class="vulnerability">
      <metadata>
        <title>Cisco Systems IOS Skinny Call Control Protocol Handler Denial of Service Vulnerability</title>
        <affected family="ios">
          <platform>Cisco IOS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0186" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0186"/>
        <description>Cisco IOS 12.1YD, 12.2T, 12.3 and 12.3T, when configured for the IOS Telephony Service (ITS), CallManager Express (CME) or Survivable Remote Site Telephony (SRST), allows remote attackers to cause a denial of service (device reboot) via a malformed packet to the SCCP port.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-05-26T11:06:36.000-04:00">
              <contributor organization="Hewlett-Packard">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2008-07-30T16:33:52.419-04:00">DRAFT</status_change>
            <status_change date="2008-08-18T04:00:13.793-04:00">INTERIM</status_change>
            <status_change date="2008-09-08T04:00:07.258-04:00">ACCEPTED</status_change>
            <modified comment="Modified &quot;telephony-service&quot; state (ste:3343) to include the regex carrot to ensure that the command statements are at the beggining of each line." date="2010-05-12T12:46:00.564-04:00">
              <contributor organization="DTCC">Ronald Jones</contributor>
            </modified>
            <status_change date="2010-05-12T12:50:21.225-04:00">INTERIM</status_change>
            <modified comment="Modified &quot;call-manager-fallback&quot; state (ste:3189) to include the regex carrot to ensure that the command statements are at the beggining of each line." date="2010-05-12T12:50:00.406-04:00">
              <contributor organization="DTCC">Ronald Jones</contributor>
            </modified>
            <status_change date="2010-05-31T04:00:06.154-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8432"/>
        <criterion negate="true" comment="IOS vulnerable versions" test_ref="oval:org.mitre.oval:tst:8727"/>
        <criteria operator="OR">
          <criterion comment="config contains: telephony-service" test_ref="oval:org.mitre.oval:tst:8822"/>
          <criterion comment="config contains: call-manager-fallback" test_ref="oval:org.mitre.oval:tst:8870"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4848" version="1" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability in the Handling of Self Encapsulated IP Packets may Lead to a Denial of Service (DOS) Condition.</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1779" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1779"/>
        <description>Sun Solaris 8, 9, and 10 allows "remote privileged" users to cause a denial of service (panic) via unknown vectors related to self encapsulated IP packets.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-04-15T07:48:47.000-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </submitted>
            <status_change date="2008-04-15T12:06:17.868-04:00">DRAFT</status_change>
            <status_change date="2008-05-05T04:00:21.938-04:00">INTERIM</status_change>
            <status_change date="2008-05-26T04:00:15.482-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 235901">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion negate="true" comment="Patch 116965-32 or later installed" test_ref="oval:org.mitre.oval:tst:7947"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 235901">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 114344-34 or later installed" test_ref="oval:org.mitre.oval:tst:7482"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 235901">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 127111-11 or later installed" test_ref="oval:org.mitre.oval:tst:7975"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 235901">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 116966-31 or later installed" test_ref="oval:org.mitre.oval:tst:7668"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 235901">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 119435-22 or later installed" test_ref="oval:org.mitre.oval:tst:7881"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 235901">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 127112-11 or later installed" test_ref="oval:org.mitre.oval:tst:7822"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:484" version="2" class="vulnerability">
      <metadata>
        <title>Unchecked Buffer in SQLXML ISAPI Extension for Microsoft Data Access Components 2.6</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft SQL Server 2000</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0186" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0186"/>
        <description>Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code via data queries with a long content-type parameter, aka "Unchecked Buffer in SQLXML ISAPI Extension."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-09-15T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Matthew Burton</contributor>
            </submitted>
            <modified date="2004-09-16T12:00:00.000-04:00" comment="filling out initial submission.">
              <contributor organization="The MITRE Corporation">Matthew Burton</contributor>
            </modified>
            <modified date="2004-09-16T10:31:00.000-04:00" comment="Added service pack 3 test">
              <contributor organization="The MITRE Corporation">Matthew Burton</contributor>
            </modified>
            <status_change date="2004-09-22T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-10-06T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-10-20T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-04-08T12:00:00.000-04:00" comment="modified wft-492 - wft-492 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2005-04-11T08:48:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-04-27T12:07:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="SQL Server 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2977"/>
        <criterion comment="Microsoft Data Access Components 2.6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2717"/>
        <criterion comment="the version of sqlisapi.dll is less than 2000.80.309.0" negate="false" test_ref="oval:org.mitre.oval:tst:2594"/>
        <criterion comment="the version of sqlservr.exe is less than 2000.80.760.0" negate="false" test_ref="oval:org.mitre.oval:tst:2593"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4834" version="2" class="vulnerability">
      <metadata>
        <title>LDAP RBAC Privilege Escalation Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>LDAP</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1353"/>
        <description>Unknown vulnerability in LDAP on Sun Solaris 8 and 9, when using Role Based Access Control (RBAC), allows local users to execute certain commands with additional privileges.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-04-13T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-04-20T04:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-05-11T04:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T04:00:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-08-25T10:03:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-25T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="OR" comment="Solaris 8 or 9 installed">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          </criteria>
          <criterion comment="Patch 108993-38 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:300"/>
          <criterion comment="Patch 112960-17 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:299"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/etc/nsswitch.conf configured to use LDAP with RBAC" negate="false" test_ref="oval:org.mitre.oval:tst:298"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4832" version="6" class="vulnerability">
      <metadata>
        <title>Windows 2000 Object Management Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Windows kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0550" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0550"/>
        <description>Buffer overflow in Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to cause a denial of service (i.e., system crash) via a malformed request, aka "Object Management Vulnerability".</description>
        <oval_repository>
          <dates>
            <submitted date="2005-05-02T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2005-05-04T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2005-06-02T12:00:00.000-04:00" comment="Added product">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2005-06-17T12:00:00.000-04:00" comment="modified cmp-1106 - Replaced the test that checks for the service pack level, instead of checking for sp4 or ealier (did not check for GOLD edition) it is now negating the test that checks for sp5 for later.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2005-07-27T10:37:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected and tightened regular expression in ste:2610" date="2010-12-02T11:46:00.307-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-12-02T11:47:26.587-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:01:00.827-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:18.332-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:06.379-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 (sp4 or earlier) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 5 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2790"/>
        </criteria>
        <criterion comment="The version of Ntoskrnl.exe is less than 5.0.2195.7035" negate="false" test_ref="oval:org.mitre.oval:tst:2358"/>
        <criterion comment="the patch KB890859 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2737"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:483" version="8" class="vulnerability">
      <metadata>
        <title>IIS Server Side Include Web Pages Buffer Overrun</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0224" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0224"/>
        <description>Buffer overflow in ssinc.dll for Microsoft Internet Information Services (IIS) 5.0 allows local users to execute arbitrary code via a web page with a Server Side Include (SSI) directive with a long filename, aka "Server Side Include Web Pages Buffer Overrun."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-14T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-03-07T12:00:00.000-04:00" comment="modified wrt-222 - changed pattern match">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-03-09T07:55:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-29T07:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected to use a forward slash as the separator in the key." date="2007-05-07T15:59:00.964-04:00">
              <contributor organization="Secure Elements, Inc.">Glenn Strickland</contributor>
            </modified>
            <status_change date="2007-05-07T16:05:38.842-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:47.405-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2878" date="2010-11-29T16:13:00.904-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:05.462-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:01:00.470-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:05.866-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:05.925-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="IIS major version equals 5" negate="false" test_ref="oval:org.mitre.oval:tst:3081"/>
          <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
          <criterion comment="File %windir%\system32\inetsrv\ssinc.dll version is less than 5.0.2195.6624" negate="false" test_ref="oval:org.mitre.oval:tst:2595"/>
          <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
          <criterion comment="SP4 or later Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3073"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="SmartHTML interpreter is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2705"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4814" version="1" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability in Solaris 10 libexif May Allow Code Execution or a Denial of Service (DoS) Condition</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6352" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6352"/>
        <description>Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.c.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-03-25T13:04:49.000-04:00">
              <contributor organization="Hewlett-Packard">Nicholas Hansen</contributor>
            </submitted>
            <status_change date="2008-03-26T16:26:15.177-04:00">DRAFT</status_change>
            <status_change date="2008-04-14T04:00:08.823-04:00">INTERIM</status_change>
            <status_change date="2008-05-05T04:00:21.678-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 234701">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 121095-02 or later installed" test_ref="oval:org.mitre.oval:tst:7952"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 234701">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 121096-02 or later installed" test_ref="oval:org.mitre.oval:tst:7912"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:48" version="2" class="vulnerability">
      <metadata>
        <title>Solaris 7 AdminTool Media Installation Path Buffer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>Admintool</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0088"/>
        <description>Buffer overflow in admintool in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long media installation path.</description>
        <oval_repository>
          <dates>
            <submitted date="2002-10-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified date="2006-06-13T02:02:00.000-04:00" comment="modified uft-15 - admintool is either /bin/admintool or /usr/bin/admintool (or both).  Regular expression had been ^.*/bin/admintool$, which could cause arbitrary-depth search.  Changed to ^(/usr)?/bin/admintool$, which bounds the search properly.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <modified date="2006-06-13T02:20:00.000-04:00" comment="modified upt-845 - admintool is either /bin/admintool or /usr/bin/admintool (or both). Regular expression had been ^.*/bin/admintool$, which could cause arbitrary-depth search. Changed to ^(/usr)?/bin/admintool$, which bounds the search properly.  Also modified to test for both SUID and OEXEC bits, so a second test is not needed.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <modified date="2006-06-13T02:22:00.000-04:00" comment="Removed compound test for &quot;admintool SUID and executable&quot; because new version of upt-845 does both.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-06-14T07:41:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:28.137-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:1726, which had been badly mangled during conversion from OVAL 4.2 to 5.0.  Operation set to pattern match on path, and terminal regexp anchor moved from filename to path." date="2007-01-22T16:24:00.728-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-01-22T16:26:01.244-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:37.788-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="File admintool exists" negate="false" test_ref="oval:org.mitre.oval:tst:3017"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="File admintool SUID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:3016"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4791" version="5" class="vulnerability">
      <metadata>
        <title>Win2k Large Window Size TCP RST Denial of Service</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0230" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0230"/>
        <description>TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-04-22T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Matthew Burton</contributor>
            </submitted>
            <status_change date="2005-04-27T12:06:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-22T12:38:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-11-06T04:13:00.000-04:00" comment="Replaced reference to var:200 with reference to var:201 in obj:588 since tcpip.sys is located in \system32\drivers and not \system32.  Modified by Harvey Rubinovitz">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-11-21T04:13:00.000-04:00">INTERIM</status_change>
            <status_change date="2007-01-03T13:53:58.351-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:31.925-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:04.644-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="Win2K/XP/2003 service pack 4 (or earlier) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1247"/>
        <criterion comment="the version of Tcpip.sys is less than 5.0.2195.7035" negate="false" test_ref="oval:org.mitre.oval:tst:1012"/>
        <criterion comment="the patch KB893066 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2353"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:479" version="4" class="vulnerability">
      <metadata>
        <title>IE v6.0 (XP) Script URLs Cross Domain Zone Restrictions Bypass</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0816" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0816"/>
        <description>Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJPU, (2) using the window.open method to load a file: URL containing Javascript, as demonstrated using WsOpenFileJPU, (3) setting the href property in the base tag for the _search window, as demonstrated using WsBASEjpu, (4) loading the search window into an Iframe, as demonstrated using WsFakeSrc, (5) caching a javascript: URL in the browser history, then accessing that URL in the same frame as the target domain, as demonstrated using WsOpenJpuInHistory, NAFjpuInHistory, BackMyParent, BackMyParent2, and RefBack, aka the "Script URLs Cross Domain" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T05:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified date="2004-01-21T05:00:00.000-04:00" comment="Removed the test for Windows XP.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 6 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T05:00:00.000-04:00" comment="Removed the IE 6 SP 1 part of this definition as the SP 1 part is defined in a different OVAL.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T05:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T05:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="modified wrt-18 - Changed value element to include pattern match">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:54.815-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:19.800-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2734.1600" negate="false" test_ref="oval:org.mitre.oval:tst:2663"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:478" version="3" class="vulnerability">
      <metadata>
        <title>MS Internet Security and Acceleration Server H.323 Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Security and Acceleration Server 2000</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0819" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0819"/>
        <description>Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrary code in the Microsoft Firewall Service via certain H.323 traffic, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:1477: filename was '323ftlr.dll' due to conversion error.  Now 'h323ftlr.dll'." date="2007-01-22T16:48:00.041-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-01-22T16:49:43.158-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:37.595-05:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.657-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:50:14.165-04:00">INTERIM</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.722-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.575-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.264-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-11-13T12:01:16.914-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="ISA Server 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2935"/>
          <criterion comment="the version of h32fltr.dll is less than 3.0.1200.291" negate="false" test_ref="oval:org.mitre.oval:tst:2599"/>
          <criterion comment="the patch q816458 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2598"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="H.323 filter is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2597"/>
          <criterion comment="Microsoft Firewall Service is not disabled" negate="false" test_ref="oval:org.mitre.oval:tst:2596"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:477" version="1" class="vulnerability">
      <metadata>
        <title>MS Exchange / OWA NTLM Authentication Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Exchange Server</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0904" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0904"/>
        <description>Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an authentication method for IIS 6.0, e.g. when SharePoint Services 2.0 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-20T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-08-28T12:00:00.000-04:00" comment="modified obj 1480 to use xsi:nil instead of a .* pattern match">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-08-28T12:00:00.000-04:00">INTERIM</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.093-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.038-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
          </dates>
          <status>INTERIM</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Software section">
          <criterion comment="Exchange Server 2003 (gold edition) is installed" test_ref="oval:org.mitre.oval:tst:2760"/>
          <criterion comment="the version of exprox.dll is less than 6.5.6980.57" test_ref="oval:org.mitre.oval:tst:2605"/>
          <criterion negate="true" comment="the patch KB832759 is installed" test_ref="oval:org.mitre.oval:tst:2604"/>
        </criteria>
        <criteria operator="AND" comment="Configuration section">
          <criterion comment="this is a front-end server providing Outlook Web Access" test_ref="oval:org.mitre.oval:tst:2603"/>
          <criterion comment="the back-end server is Exchange Server 2003 running on Windows 2003" test_ref="oval:org.mitre.oval:tst:2602"/>
          <criterion negate="true" comment="HTTP connection reuse is disabled" test_ref="oval:org.mitre.oval:tst:2601"/>
          <criterion comment="Kerberos is disabled on the virtual server that hosts OWA on the Exchange Server 2003 back-end server" test_ref="oval:org.mitre.oval:tst:2600"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4767" version="5" class="vulnerability">
      <metadata>
        <title>Windows Server 2003 IIS WebDAV Message Handler Denial of Service Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0718" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0718"/>
        <description>The WebDAV Message Handler for Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows remote attackers to cause a denial of service (memory and CPU exhaustion, application crash) via a PROPFIND request with an XML message containing XML elements with a large number of attributes.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-13T12:13:00.000-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </submitted>
            <status_change date="2004-10-13T01:16:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-10-27T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-11-17T10:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.950-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:50:55.442-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:16.717-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:05.444-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:04.343-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Software section">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of httpext.dll is less than 6.0.3790.212" test_ref="oval:org.mitre.oval:tst:303"/>
        <criterion comment="the patch KB824151 is installed" test_ref="oval:org.mitre.oval:tst:984"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4762" version="1" class="vulnerability">
      <metadata>
        <title>Windows NT Terminal Server VDM Privilege Escalation Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <product>VDM</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0208" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0208"/>
        <description>The Virtual DOS Machine (VDM) subsystem of Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to access kernel memory and gain privileges via a malicious program that modified some system structures in a way that is not properly validated by privileged operating system functions.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-13T12:02:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2004-10-13T01:16:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-10-27T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-11-17T10:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="this is an NT Terminal Server" negate="false" test_ref="oval:org.mitre.oval:tst:3097"/>
        <criterion comment="the version of gdi32.dll is less than 4.0.1381.33566" negate="false" test_ref="oval:org.mitre.oval:tst:304"/>
        <criterion comment="the patch KB840987 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2356"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4756" version="1" class="vulnerability">
      <metadata>
        <title>Mozilla, Firebird, Firefox Frame Injection Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0718" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0718"/>
        <description>The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-19T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-24T03:40:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 8 or 9 installed">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
        </criteria>
        <criteria operator="OR" comment="Mozilla components (any SUNWmoznav/SUNWmozmail) installed">
          <criterion comment="Mozilla (SUNWmoznav) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1070"/>
          <criterion comment="Mozilla Mail (SUNWmozmail) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1069"/>
        </criteria>
        <criterion comment="Patch 117765-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1068"/>
        <criterion comment="Patch 117767-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1067"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4741" version="8" class="vulnerability">
      <metadata>
        <title>HyperTerminal Session File Vulnerability (Windows 2000)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>HyperTerminal</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0568" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0568"/>
        <description>HyperTerminal application for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the length of a value that is saved in a session file, which allows remote attackers to execute arbitrary code via a malicious HyperTerminal session file (.ht), web site, or Telnet URL contained in an e-mail message, triggering a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-12-21T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-01-18T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-02T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2005-03-02T12:00:00.000-04:00" comment="modified wft-200 - access DLL via HKLM">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-03-23T08:09:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:282: Removed blank before the word Filelist in the Key.  Implemented by Harvey Rubinovitz." date="2007-01-22T00:21:00.615-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T00:23:15.729-05:00">INTERIM</status_change>
            <modified comment="Fixed obj:282: changed Hive from HKEY_CLASSES_ROOT to HKEY_LOCAL_MACHINE.  Implemented by Harvey Rubinovitz." date="2007-01-22T01:09:00.941-05:00">
              <contributor organization="GFI Software">Daniel Tarnu</contributor>
            </modified>
            <status_change date="2007-02-20T13:40:37.079-05:00">ACCEPTED</status_change>
            <modified comment="Updated ste:741 to use regex pattern match instead of hardcoded path" date="2009-10-19T16:07:00.879-04:00">
              <contributor organization="The MITRE Corporation">Mike Lah</contributor>
            </modified>
            <status_change date="2009-10-19T16:09:06.580-04:00">INTERIM</status_change>
            <modified comment="Fixed registry key reference in obj:625" date="2009-10-19T16:09:00.553-04:00">
              <contributor organization="The MITRE Corporation">Mike Lah</contributor>
            </modified>
            <status_change date="2009-11-09T04:00:17.014-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:28.083-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:03.904-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:741 - obj/ste updates to conform to authoring style guide" date="2013-03-26T09:53:00.500-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-03-26T09:56:23.166-04:00">INTERIM</status_change>
            <status_change date="2013-04-15T04:00:23.463-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or earlier) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1247"/>
          <criterion comment="the version of hypertrm.dll is less than 5.0.2195.7000" negate="false" test_ref="oval:org.mitre.oval:tst:307"/>
          <criterion comment="the patch Windows2000-KB873339-x86-ENU.EXE is installed" negate="true" test_ref="oval:org.mitre.oval:tst:306"/>
        </criteria>
        <criteria comment="Configuration section" operator="OR">
          <criterion comment="If key present hyperterminal will automatically open session files" negate="false" test_ref="oval:org.mitre.oval:tst:827"/>
          <criterion comment="If the Hyperterminal client is registered as the default telnet client" negate="false" test_ref="oval:org.mitre.oval:tst:826"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:474" version="3" class="vulnerability">
      <metadata>
        <title>Windows 2000 Plug and Play Buffer Overflow Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1983" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1983"/>
        <description>Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob (aka Mytob) worm.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:40:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:48.172-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:55.755-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:474 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:04:39.612-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:34.741-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3381"/>
        <criterion comment="the version of umpnpmgr.dll is less than 5.0.2195.7057" test_ref="oval:org.mitre.oval:tst:3723"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4728" version="2" class="vulnerability">
      <metadata>
        <title>SunRPC xdr_array Function Integer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>Sun RPC</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0391" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0391"/>
        <description>Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-19T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-24T03:40:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-07-03T12:56:00.000-04:00" comment="Added negate=true attribute to criteria sub-block to fix conversion error from OVAL 4.2 to OVAL 5.0">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-07-03T12:56:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:27.565-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <notes>
        <note>Specific applications using this library are not tested for because Suns advisory only provides a sample of known vulnerable applications and states that they are still investigating.</note>
      </notes>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 7,8,or 9 installed">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
        </criteria>
        <criteria operator="AND" comment="Patches 106942-22 and 108451-06 or later installed" negate="true">
          <criterion comment="Patch 106942-22 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:3026"/>
          <criterion comment="Patch 108451-06 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:310"/>
        </criteria>
        <criteria operator="AND" comment="Patches 108827-30 and 108901-06" negate="true">
          <criterion comment="Patch 108827-30 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:3138"/>
          <criterion comment="Patch 108901-06 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:3137"/>
        </criteria>
        <criteria operator="AND" comment="Patches 113319-01 and 112233-02 or later installed" negate="true">
          <criterion comment="Patch 113319-01 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:309"/>
          <criterion comment="Patch 112233-02 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:308"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4725" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the Solaris crontab(1) utility may allow execution of Arbitrary Code</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2538"/>
        <description>Unspecified vulnerability in crontab on Sun Solaris 8 through 10, and OpenSolaris before snv_93, allows local users to insert cron jobs into the crontab files of arbitrary users via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-06-05T11:19:56.000-04:00">
              <contributor organization="Hewlett-Packard">Nicholas Hansen</contributor>
            </submitted>
            <status_change date="2008-06-05T14:00:22.164-04:00">DRAFT</status_change>
            <status_change date="2008-06-23T04:00:11.562-04:00">INTERIM</status_change>
            <modified comment="Fixed duplicate criteria for Solaris 9" date="2008-07-02T16:52:00.808-04:00">
              <contributor organization="Secure Elements, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2008-07-21T04:00:08.039-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 237864">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion negate="true" comment="Patch 109007-26 or later installed" test_ref="oval:org.mitre.oval:tst:7905"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 237864">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 122300-27 or later installed" test_ref="oval:org.mitre.oval:tst:7763"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 237864">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 137017-02 or later installed" test_ref="oval:org.mitre.oval:tst:8027"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 237864">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 109008-26 or later installed" test_ref="oval:org.mitre.oval:tst:7968"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 237864">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 122301-27 or later installed" test_ref="oval:org.mitre.oval:tst:7797"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 237864">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 137018-02 or later installed" test_ref="oval:org.mitre.oval:tst:8019"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:472" version="4" class="vulnerability">
      <metadata>
        <title>IE v6.0 (XP) Function Pointer Override Cross Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0815" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0815"/>
        <description>Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1) modifying the createTextRange method and using CreateLink, as demonstrated using LinkillerSaveRef, LinkillerJPU, and Linkiller, or (2) modifying the createRange method and using the FIND dialog to select text, as demonstrated using Findeath, aka the "Function Pointer Override Cross Domain" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T05:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified date="2004-01-21T05:00:00.000-04:00" comment="Removed the test for Windows XP.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 6 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T05:00:00.000-04:00" comment="Removed the IE 6 SP 1 part of this definition as the SP 1 part is defined in a different OVAL.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T05:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T05:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="modified wrt-18 - Changed value element to include pattern match">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:55.420-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:19.720-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2734.1600" negate="false" test_ref="oval:org.mitre.oval:tst:2663"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4710" version="6" class="vulnerability">
      <metadata>
        <title>MSHTA Code Execution Vulnerability (Windows 2000)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Windows Shell</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0063"/>
        <description>The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by modifying the CLSID stored in a file so that it is processed by HTML Application Host (MSHTA), as demonstrated using a Microsoft Word document.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-05-04T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-05-04T10:01:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2005-06-17T12:00:00.000-04:00" comment="modified cmp-1106 - Replaced the test that checks for the service pack level, instead of checking for sp4 or ealier (did not check for GOLD edition) it is now negating the test that checks for sp5 for later.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2005-07-27T10:37:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected and tightened regular expression in ste:2610" date="2010-12-02T11:46:00.307-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-12-02T11:47:26.982-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:59.829-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:34.211-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:03.562-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="AND" comment="Windows 2000 (sp4 or earlier) is installed">
            <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
            <criterion comment="Win2K/XP/2003 service pack 5 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2790"/>
          </criteria>
          <criterion comment="the version of shell32.dll is less than 5.0.3900.7032" negate="false" test_ref="oval:org.mitre.oval:tst:313"/>
          <criterion comment="the patch  KB893086 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:312"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment=".hta applications are enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2915"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:471" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01 Encoded Characters Information Disclosure Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1186" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1186"/>
        <description>Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded characters within a URL, which allows a remote attacker to steal potentially sensitive information from a user by redirecting the user to another site that has that information, aka "Encoded Characters Information Disclosure."</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-29T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2875 set datatype to version on version element. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-12T20:46:00.631-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-12T20:47:58.969-05:00">INTERIM</status_change>
            <modified comment="Corrected ste:2873. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-12T20:52:00.978-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <modified comment="Corrected ste:2874. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-12T21:00:00.301-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <modified comment="Corrected ste:2871. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-12T21:03:00.158-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <modified comment="Corrected ste:2872. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-12T21:06:00.183-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <modified comment="Corrected ste:2870. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:36:00.896-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <modified comment="Corrected ste:2869. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:39:00.994-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <modified comment="Corrected ste:2868. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:41:00.387-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-02-20T13:40:36.706-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:55.487-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:19.599-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Internet Explorer 5.01 Installed">
          <criterion comment="Internet Explorer 5.01 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3070"/>
          <criterion comment="Internet Explorer 5.01 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3069"/>
          <criterion comment="Internet Explorer 5.01 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3068"/>
          <criterion comment="Internet Explorer 5.01 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3067"/>
          <criterion comment="Internet Explorer 5.01 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3066"/>
          <criterion comment="Internet Explorer 5.01 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3065"/>
          <criterion comment="Internet Explorer 5.01 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3064"/>
          <criterion comment="Internet Explorer 5.01 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3063"/>
        </criteria>
        <criterion comment="File %windir%\system32\mshtml.dll version is less than 5.0.3510.1100" negate="false" test_ref="oval:org.mitre.oval:tst:2606"/>
        <criterion comment="the patch q328970 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3117"/>
        <criterion comment="the patch q324929 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3116"/>
        <criterion comment="the patch q810847 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3115"/>
        <criterion comment="the patch q813489 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3114"/>
        <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4702" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP4 Similar Method Name Redirection Cross Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0727" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0727"/>
        <description>Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name, as demonstrated by SimilarMethodNameRedir, aka the "Similar Method Name Redirection Cross Domain Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-19T07:27:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-20T02:35:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:41.060-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:36.423-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:35.439-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:19.508-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3534.2800" negate="false" test_ref="oval:org.mitre.oval:tst:519"/>
          <criterion comment="the patch kb834707-ie501sp4 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:518"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:470" version="2" class="vulnerability">
      <metadata>
        <title>CGI.pm Cross-site Scripting Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>CGI.pm</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0615" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0615"/>
        <description>Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-25T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-05T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:54.481-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:33.013-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="perl-CGI version is less than 2.81-88.3" negate="false" test_ref="oval:org.mitre.oval:tst:2607"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:47" version="1" class="vulnerability">
      <metadata>
        <title>Solaris 8 whodo Buffer Overflow Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>whodo</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-1076" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1076"/>
        <description>Buffer overflow in whodo in Solaris SunOS 5.5.1 through 5.8 allows local users to execute arbitrary code via a long (1) SOR or (2) CFIME environment variable.</description>
        <oval_repository>
          <dates>
            <submitted date="2002-09-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified comment="Fixed obj:1742: moved regexp terminal anchor from filename to path." date="2007-01-22T17:29:00.420-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-01-22T17:30:41.522-05:00">INTERIM</status_change>
            <modified comment="Replaced reference to obj:1740 with obj:1742, which is more correct, and fixed test comment." date="2007-01-22T17:59:00.207-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <modified comment="Fixed tst:3041: Replaced reference to obj:1740 with obj:1742, which is more correct, and fixed test comment.  Note previous edit was to tst:3040." date="2007-01-22T18:01:00.910-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <modified comment="Fixed criterion comments." date="2007-01-22T18:10:00.528-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-02-20T13:40:36.167-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="File whodo exists" negate="false" test_ref="oval:org.mitre.oval:tst:3043"/>
          <criterion comment="Patch 111826-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3018"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="File whodo SUID and executable">
            <criterion comment="File whodo SUID" negate="false" test_ref="oval:org.mitre.oval:tst:3041"/>
            <criterion comment="File whodo oexec set" negate="false" test_ref="oval:org.mitre.oval:tst:3040"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:469" version="2" class="vulnerability">
      <metadata>
        <title>Buffer Overflow in PAM SMB Module</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>pam_smb</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0686" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0686"/>
        <description>Buffer overflow in PAM SMB module (pam_smb) 1.1.6 and earlier, when authenticating to a remote service, allows remote attackers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-05T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:38.611-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:32.853-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="pam_smb version is less than 1.1.6-9.9" negate="false" test_ref="oval:org.mitre.oval:tst:2608"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:468" version="4" class="vulnerability">
      <metadata>
        <title>ISA Server NetBIOS Packet Filter Bypass Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Security and Acceleration Server 2000</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1216" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1216"/>
        <description>Microsoft ISA Server 2000 allows remote attackers to connect to services utilizing the NetBIOS protocol via a NetBIOS connection with an ISA Server that uses the NetBIOS (all) predefined packet filter.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-06-23T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2005-06-29T04:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-07-27T04:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T04:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-19T04:00:00.000-04:00" comment="modified wft-81 - Removed extra trailing \\ on registry component.">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:468 - Corrected capitalization and extra spacing errors in product names" date="2011-04-08T16:13:00.153-04:00">
              <contributor organization="AIST">Akihito Nakamura</contributor>
            </modified>
            <status_change date="2011-04-08T16:17:39.508-04:00">INTERIM</status_change>
            <status_change date="2011-04-25T04:00:20.293-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="ISA Server 2000 SP2 (or earlier) is installed" test_ref="oval:org.mitre.oval:tst:2611"/>
        <criterion comment="the version of w3proxy.exe is less than 3.0.1200.430" test_ref="oval:org.mitre.oval:tst:2610"/>
        <criterion negate="true" comment="the patch KB899753 is installed" test_ref="oval:org.mitre.oval:tst:2609"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4674" version="5" class="vulnerability">
      <metadata>
        <title>IE6 (for Server 2003) Content Advisor Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0555"/>
        <description>Buffer overflow in the Content Advisor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a crafted Content Advisor file, aka "Content Advisor Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-05-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-05-11T05:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-22T12:38:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:44:00.000-04:00" comment="modified wft-594 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2621. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T20:21:00.819-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T20:22:32.559-05:00">INTERIM</status_change>
            <modified comment="Fixed obj:440: Removed blank before the word Filelist in the Key.  Modified by Harvey Rubinovitz." date="2007-01-22T00:06:00.404-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-02-20T13:40:35.854-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:46.914-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:19.440-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6  for Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2801"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.3790.279" negate="false" test_ref="oval:org.mitre.oval:tst:515"/>
          <criterion comment="the patch kb890923 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:514"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4671" version="8" class="vulnerability">
      <metadata>
        <title>LoadImage Cursor and Icon Format Handling Vulnerability (Windows 2000)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Cursor and Icon Formatting</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1049"/>
        <description>Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp, .cur, .ico or .ani file with a large image size field, which leads to a buffer overflow, aka the "Cursor and Icon Format Handling Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-14T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2005-01-20T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-06-17T12:00:00.000-04:00" comment="modified cmp-1106 - Replaced the test that checks for the service pack level, instead of checking for sp4 or ealier (did not check for GOLD edition) it is now negating the test that checks for sp5 for later.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2005-06-22T12:35:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.059-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:50:28.008-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:16.241-05:00">ACCEPTED</status_change>
            <modified comment="Corrected and tightened regular expression in ste:2610" date="2010-12-02T11:46:00.307-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-12-02T11:47:27.075-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:59.470-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:35.229-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:02.877-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 (sp4 or earlier) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 5 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2790"/>
        </criteria>
        <criterion comment="the version of user32.dll is less than 5.0.2195.7017" negate="false" test_ref="oval:org.mitre.oval:tst:446"/>
        <criterion comment="the patch kb891711 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2807"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4670" version="1" class="vulnerability">
      <metadata>
        <title>Apache Mod_Access Access Control Rule Bypass Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0993" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0993"/>
        <description>mod_access in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not properly parse Allow/Deny rules using IP addresses without a netmask, which could allow remote attackers to bypass intended access restrictions.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-14T01:13:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <modified date="2004-10-18T03:16:00.000-04:00" comment="Changes apache test to file test">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </modified>
            <modified date="2004-10-19T11:19:00.000-04:00" comment="Changed apache test to package test">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </modified>
            <status_change date="2004-10-20T02:35:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="OR" comment="Solaris 8 or 9 installed">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          </criteria>
          <criterion comment="Patch 116973-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:656"/>
          <criterion comment="Patch 113146-05 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:655"/>
          <criterion comment="Apache (SUNWapchu) installed" negate="false" test_ref="oval:org.mitre.oval:tst:653"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="Apache running (httpd)" negate="false" test_ref="oval:org.mitre.oval:tst:654"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:467" version="6" class="vulnerability">
      <metadata>
        <title>Windows 2000 Unknown Vector SMB Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Small Business Server 2000</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1206" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1206"/>
        <description>Buffer overflow in the Server Message Block (SMB) functionality for Microsoft Windows 2000, XP SP1 and SP2, and Server 2003 and SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka the "Server Message Block Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-06-22T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </submitted>
            <status_change date="2005-06-22T12:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected and tightened regular expression in ste:2610" date="2010-12-02T11:46:00.307-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-12-02T11:47:27.514-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:59.180-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:51.570-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:02.582-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="the patch KB896422 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2743"/>
        <criterion comment="the version of srv.sys is less than 5.0.2195.7044" negate="false" test_ref="oval:org.mitre.oval:tst:2612"/>
        <criterion comment="Win2K/XP/2003 service pack 5 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2790"/>
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4661" version="1" class="vulnerability">
      <metadata>
        <title>MIT Kerberos 5 Multiple Double-Free Vulnerabilities</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <product>Kerberos5</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0772" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0772"/>
        <description>Double free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and earlier may allow remote attackers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-12T03:18:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2004-10-13T01:16:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-10-27T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-11-17T10:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Software section">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="Kerberos 5 installed" test_ref="oval:org.mitre.oval:tst:648"/>
          <criterion negate="true" comment="Patch 112908-15 or later installed" test_ref="oval:org.mitre.oval:tst:616"/>
        </criteria>
        <criteria operator="AND" comment="Configuration section">
          <criterion comment="Kerberos Key Distribution Center (krb5kdc) running" test_ref="oval:org.mitre.oval:tst:314"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:466" version="2" class="vulnerability">
      <metadata>
        <title>OpenSSL No RSA Blinding Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>OpenSSL</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0147" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0147"/>
        <description>OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private key by determining factors using timing differences on (1) the number of extra reductions during Montgomery reduction, and (2) the use of different integer multiplication algorithms ("Karatsuba" and normal).</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-11T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <modified date="2004-05-11T12:00:00.000-04:00" comment="Added cmp-914 which uses an or to combine the 5 version tests. Previously the tests had been combined with an and.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:37.910-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:32.667-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criteria operator="OR" comment="affected version of SSL and TLS components for OpenSSL">
          <criterion comment="openssl version is less than 0.9.7a-5" negate="false" test_ref="oval:org.mitre.oval:tst:2618"/>
          <criterion comment="openssl-devel version is less than 0.9.7a-5" negate="false" test_ref="oval:org.mitre.oval:tst:2617"/>
          <criterion comment="openssl-perl version is less than 0.9.7a-5" negate="false" test_ref="oval:org.mitre.oval:tst:2616"/>
          <criterion comment="openssl096 version is less than 0.9.6-17" negate="false" test_ref="oval:org.mitre.oval:tst:2615"/>
          <criterion comment="openssl096b version is less than 0.9.6b-6" negate="false" test_ref="oval:org.mitre.oval:tst:2614"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:464" version="6" class="vulnerability">
      <metadata>
        <title>Solaris 8, 9, 10 ICMP Source Quench Attack Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0791" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0791"/>
        <description>Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via a blind throughput-reduction attack using spoofed Source Quench packets, aka the "ICMP Source Quench attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:52:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:47.997-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:55.567-04:00">ACCEPTED</status_change>
            <modified comment="Added title. Implemented by Jon Baker of The MITRE Corporation." date="2007-02-13T14:45:00.680-05:00">
              <contributor organization="Security-Database">Nabil Ouchn</contributor>
            </modified>
            <status_change date="2007-02-13T14:46:46.709-05:00">INTERIM</status_change>
            <modified comment="Standardized title." date="2007-02-23T13:00:00.812-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-03-21T16:17:19.479-04:00">ACCEPTED</status_change>
            <modified comment="Added missing patch checks." date="2007-06-26T10:59:00.998-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </modified>
            <status_change date="2007-06-26T11:01:33.028-04:00">INTERIM</status_change>
            <status_change date="2007-07-11T15:17:32.802-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:464 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:38.269-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:34.130-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert ID 101658 criteria.">
          <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3437"/>
          <criterion comment="sparc architecture" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criterion negate="true" comment="Patch 116965-19 or later installed" test_ref="oval:org.mitre.oval:tst:4028"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert ID 101658 criteria.">
          <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3437"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criterion negate="true" comment="Patch 116966-18 or later installed" test_ref="oval:org.mitre.oval:tst:4069"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert ID 101658 criteria.">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3172"/>
          <criterion comment="sparc architecture" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criterion negate="true" comment="Patch 118305-08 or later installed" test_ref="oval:org.mitre.oval:tst:3204"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert ID 101658 criteria.">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3172"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criterion negate="true" comment="Patch 117470-07 or later installed" test_ref="oval:org.mitre.oval:tst:4114"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert ID 101658 criteria.">
          <criterion comment="Solaris 10 Installed" test_ref="oval:org.mitre.oval:tst:3680"/>
          <criterion comment="sparc architecture" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criterion negate="true" comment="Patch 118822-27 or later installed" test_ref="oval:org.mitre.oval:tst:3505"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert ID 101658 criteria.">
          <criterion comment="Solaris 10 Installed" test_ref="oval:org.mitre.oval:tst:3680"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criterion negate="true" comment="Patch 118844-28 or later installed" test_ref="oval:org.mitre.oval:tst:3302"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:463" version="7" class="vulnerability">
      <metadata>
        <title>Windows 2000 HTML Help Remote Code Execution Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>HTML Help Facility</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1208" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1208"/>
        <description>Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via a crafted compiled Help (.CHM) file with a large size field that triggers a heap-based buffer overflow, as demonstrated using a "ms-its:" URL in Internet Explorer.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-06-20T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2005-06-22T12:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Updated tst:2668 to refer to the correct a new object that looks for KB896358" date="2007-10-04T09:48:00.040-04:00">
              <contributor organization="Secure Elements, Inc.">Jeff Ito</contributor>
            </modified>
            <status_change date="2007-10-04T09:50:41.144-04:00">INTERIM</status_change>
            <status_change date="2007-10-22T08:53:27.646-04:00">ACCEPTED</status_change>
            <modified comment="Corrected and tightened regular expression in ste:2610" date="2010-12-02T11:46:00.307-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-12-02T11:47:27.567-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:58.783-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:52.140-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:02.244-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 (sp4 or earlier) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 5 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2790"/>
        </criteria>
        <criterion comment="the version of hh.exe is less than 5.2.3790.309" negate="false" test_ref="oval:org.mitre.oval:tst:2613"/>
        <criterion comment="the patch kb896358 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2668"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4629" version="1" class="vulnerability">
      <metadata>
        <title>Mozilla, Netscape SOAPParameter Integer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0722" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0722"/>
        <description>Integer overflow in the SOAPParameter object constructor in (1) Netscape version 7.0 and 7.1 and (2) Mozilla 1.6, and possibly earlier versions, allows remote attackers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-19T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-24T03:40:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 8 or 9 installed">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
        </criteria>
        <criteria operator="OR" comment="Mozilla components (any SUNWmoznav/SUNWmozmail) installed">
          <criterion comment="Mozilla (SUNWmoznav) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1070"/>
          <criterion comment="Mozilla Mail (SUNWmozmail) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1069"/>
        </criteria>
        <criterion comment="Patch 117765-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1068"/>
        <criterion comment="Patch 117767-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1067"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:461" version="2" class="vulnerability">
      <metadata>
        <title>Klima-Pokorny-Rosa Attack Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>OpenSSL</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0131" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0131"/>
        <description>The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA private key operation via a modified Bleichenbacher attack that uses a large number of SSL or TLS connections using PKCS #1 v1.5 padding that cause OpenSSL to leak information regarding the relationship between ciphertext and the associated plaintext, aka the "Klima-Pokorny-Rosa attack."</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-11T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <modified date="2004-05-11T12:00:00.000-04:00" comment="Added cmp-914 which uses an or to combine the 5 version tests. Previously the tests had been combined with an and.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:51.829-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:32.405-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criteria operator="OR" comment="affected version of SSL and TLS components for OpenSSL">
          <criterion comment="openssl version is less than 0.9.7a-5" negate="false" test_ref="oval:org.mitre.oval:tst:2618"/>
          <criterion comment="openssl-devel version is less than 0.9.7a-5" negate="false" test_ref="oval:org.mitre.oval:tst:2617"/>
          <criterion comment="openssl-perl version is less than 0.9.7a-5" negate="false" test_ref="oval:org.mitre.oval:tst:2616"/>
          <criterion comment="openssl096 version is less than 0.9.6-17" negate="false" test_ref="oval:org.mitre.oval:tst:2615"/>
          <criterion comment="openssl096b version is less than 0.9.6b-6" negate="false" test_ref="oval:org.mitre.oval:tst:2614"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:46" version="6" class="vulnerability" deprecated="true">
      <metadata>
        <title>DEPRECATED: IIS Help File Search Cross-site Scripting</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0074" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0074"/>
        <description>Cross-site scripting vulnerability in Help File search facility for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to embed scripts into another user's session.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2884" date="2010-11-29T16:14:00.692-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:39.922-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:58.484-05:00">ACCEPTED</status_change>
            <modified comment="Use def:12356 instead" date="2011-01-20T10:14:55.330-05:00">
              <contributor organization="Symantec Corporation">Josh Turpin</contributor>
            </modified>
            <status_change date="2011-01-20T10:14:55.330-05:00">DEPRECATED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="IIS major version equals 5" negate="false" test_ref="oval:org.mitre.oval:tst:3081"/>
        <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
        <criterion comment="the version of w3svc.dll is less than 5.0.2195.5269" negate="false" test_ref="oval:org.mitre.oval:tst:3080"/>
        <criterion comment="Patch Q319733 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3095"/>
        <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
        <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
        <criterion comment="Win2K/XP/2003 service pack 3 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:3079"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4593" version="6" class="vulnerability">
      <metadata>
        <title>Windows 2000 Access Requests Privilege Escalation Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Windows kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0061" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0061"/>
        <description>The kernel of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via certain access requests.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-05-02T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2005-05-04T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2005-06-02T12:00:00.000-04:00" comment="Added product">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2005-06-17T12:00:00.000-04:00" comment="modified cmp-1106 - Replaced the test that checks for the service pack level, instead of checking for sp4 or ealier (did not check for GOLD edition) it is now negating the test that checks for sp5 for later.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2005-07-27T10:37:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected and tightened regular expression in ste:2610" date="2010-12-02T11:46:00.307-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-12-02T11:47:26.925-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:58.214-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:55.259-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:01.852-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 (sp4 or earlier) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 5 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2790"/>
        </criteria>
        <criterion comment="The version of Ntoskrnl.exe is less than 5.0.2195.7035" negate="false" test_ref="oval:org.mitre.oval:tst:2358"/>
        <criterion comment="the patch KB890859 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2737"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4592" version="2" class="vulnerability">
      <metadata>
        <title>Windows Server 2003 (32-Bit) Unchecked Buffer in NetDDE</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>NetDDE</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0206" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0206"/>
        <description>Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer," possibly a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-14T04:38:00.000-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </submitted>
            <status_change date="2004-10-20T02:35:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.630-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:52:11.758-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:15.950-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="32-Bit version of Windows is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2748"/>
        <criterion comment="the version of nddenb32.dll is less than 5.2.3790.173" negate="false" test_ref="oval:org.mitre.oval:tst:316"/>
        <criterion comment="the version of netdde.exe is less than 5.2.3790.184" negate="false" test_ref="oval:org.mitre.oval:tst:315"/>
        <criterion comment="the patch KB841533 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:682"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:459" version="5" class="vulnerability">
      <metadata>
        <title>IE v6.0,SP1 (Server 2003) Script URLs Cross Domain Zone Restrictions Bypass</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0816" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0816"/>
        <description>Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJPU, (2) using the window.open method to load a file: URL containing Javascript, as demonstrated using WsOpenFileJPU, (3) setting the href property in the base tag for the _search window, as demonstrated using WsBASEjpu, (4) loading the search window into an Iframe, as demonstrated using WsFakeSrc, (5) caching a javascript: URL in the browser history, then accessing that URL in the same frame as the target domain, as demonstrated using WsOpenJpuInHistory, NAFjpuInHistory, BackMyParent, BackMyParent2, and RefBack, aka the "Script URLs Cross Domain" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for Windows Server 2003.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 6 sp1 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-01-29T12:00:00.000-04:00" comment="Added Windows XP 64-bit, Version 2003 and Windows Server 2003 64-Bit to the list of affected platforms">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-05-10T12:00:00.000-04:00" comment="modified wrt-51 - Comment updated to indicate IE 6.">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-05-11T05:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2621. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T20:21:00.819-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T20:22:35.588-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:35.077-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:58.448-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:19.235-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6  for Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2801"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.3790.94" negate="false" test_ref="oval:org.mitre.oval:tst:2686"/>
          <criterion comment="the patch q824145 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2685"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4574" version="3" class="vulnerability">
      <metadata>
        <title>OpenSSL ASN.1 Inputs Character Tracking Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>Sun Cluster</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0544" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0544"/>
        <description>OpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs, which allows remote attackers to cause a denial of service (crash) via an SSL client certificate that causes OpenSSL to read past the end of a buffer when the long form is used.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-19T03:10:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2004-10-20T02:35:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:434 - In some &quot;pattern match&quot; strings added &quot;\&quot; before &quot;.&quot; to clarify if &quot;point&quot; or &quot;any symbol&quot; needed." date="2014-07-28T18:11:00.493-04:00">
              <contributor organization="ALTX-SOFT">Evgeniy Pavlov</contributor>
            </modified>
            <status_change date="2014-07-28T18:14:46.909-04:00">INTERIM</status_change>
            <status_change date="2014-08-18T04:05:56.097-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="OR" comment="Solaris 8 or 9 installed">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          </criteria>
          <criterion comment="Patch 113505-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:511"/>
          <criterion comment="Patch 113508-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:510"/>
          <criterion comment="Patch 115054-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:509"/>
          <criterion comment="Patch 115055-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:508"/>
          <criterion comment="SunCluster Component SUNWscvw installed" negate="false" test_ref="oval:org.mitre.oval:tst:507"/>
          <criterion comment="Apache (SUNWapchu) installed" negate="false" test_ref="oval:org.mitre.oval:tst:653"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="Apache running with SunPlex Manager config" negate="false" test_ref="oval:org.mitre.oval:tst:506"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4561" version="2" class="vulnerability">
      <metadata>
        <title>Solaris Code Execution DoS Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0669" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0669"/>
        <description>Unknown vulnerability in Solaris 2.6 through 9 causes a denial of service (system panic) via "a rare race condition" or an attack by local users.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-04-13T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-04-20T04:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-05-11T04:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T04:00:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-08-25T10:03:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-25T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 7,8,or 9 installed">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
        </criteria>
        <criterion comment="Patch 106541-25 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:319"/>
        <criterion comment="Patch 108528-19 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:318"/>
        <criterion comment="Patch 112233-05 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:317"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4532" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability With Loading Arbitrary Kernel Modules in Solaris Kernel</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 2.6</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1767" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1767"/>
        <description>The kernel in Solaris 2.6, 7, 8, and 9 allows local users to gain privileges by loading arbitrary loadable kernel modules (LKM), possibly involving the modload function.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-09-25T11:24:50.000-04:00">
              <contributor organization="Hewlett-Packard">Nicholas Hansen</contributor>
            </submitted>
            <status_change date="2007-12-13T15:33:46.112-05:00">DRAFT</status_change>
            <status_change date="2007-12-31T04:01:18.435-05:00">INTERIM</status_change>
            <status_change date="2008-02-04T10:16:58.394-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 7 (SPARC) meets Sun Alert 57479">
          <extend_definition comment="Solaris 7 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:2107"/>
          <criterion negate="true" comment="Patch 106541-29 or later installed" test_ref="oval:org.mitre.oval:tst:4002"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 57479">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion negate="true" comment="Patch 108528-27 or later installed" test_ref="oval:org.mitre.oval:tst:4228"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 57479">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 112233-11 or later installed" test_ref="oval:org.mitre.oval:tst:3814"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 7 (x86) meets Sun Alert 57479">
          <extend_definition comment="Solaris 7 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2036"/>
          <criterion negate="true" comment="Patch 106542-29 or later installed" test_ref="oval:org.mitre.oval:tst:3686"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 57479">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 108529-27 or later installed" test_ref="oval:org.mitre.oval:tst:4247"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 57479">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 112234-11 or later installed" test_ref="oval:org.mitre.oval:tst:3937"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 2.6 (SPARC) meets Sun Alert 57479">
          <extend_definition comment="Solaris 2.6 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1361"/>
          <criterion negate="true" comment="Patch 105181-37 or later installed" test_ref="oval:org.mitre.oval:tst:3794"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 2.6 (x86) meets Sun Alert 57479">
          <extend_definition comment="Solaris 2.6 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1967"/>
          <criterion negate="true" comment="Patch 105182-37 or later installed" test_ref="oval:org.mitre.oval:tst:3479"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:452" version="4" class="vulnerability">
      <metadata>
        <title>Mutliple Buffer Management Errors in OpenSSH</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>OpenSSH</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0695" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0695"/>
        <description>Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial of service or execute arbitrary code using (1) buffer_init in buffer.c, (2) buffer_free in buffer.c, or (3) a separate function in channels.c, a different vulnerability than CVE-2003-0693.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-21T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:57.014-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:32.218-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.296-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:56:44.050-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:27.401-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="openssh-server version is less than 3.5p1-11" negate="false" test_ref="oval:org.mitre.oval:tst:2627"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="sshd listens on the network" negate="false" test_ref="oval:org.mitre.oval:tst:2628"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:451" version="7" class="vulnerability">
      <metadata>
        <title>Windows ListView Shatter Message Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Utilities Manager/Windows Messaging</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0350" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0350"/>
        <description>The control for listing accessibility options in the Accessibility Utility Manager on Windows 2000 (ListView) does not properly handle Windows messages, which allows local users to execute arbitrary code via a "Shatter" style message to the Utility Manager that references a user-controlled callback function.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-09T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-03-07T12:00:00.000-04:00" comment="modified wrt-222 - changed pattern match">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-03-09T07:55:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-29T07:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2878" date="2010-11-29T16:13:00.904-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:04.155-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:57.841-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:54.913-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:03:00.883-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="the version of sp3res.dll is less than 5.0.2195.6713" negate="false" test_ref="oval:org.mitre.oval:tst:2621"/>
        <criterion comment="the version of umandlg.dll is less than 1.0.0.3" negate="false" test_ref="oval:org.mitre.oval:tst:2620"/>
        <criterion comment="Patch KB822679 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2619"/>
        <criterion comment="SP4 or later Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3073"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:45" version="3" class="vulnerability" deprecated="true">
      <metadata>
        <title>DEPRECATED: Windows NT HTR ISAPI Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0071" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0071"/>
        <description>Buffer overflow in the ism.dll ISAPI extension that implements HTR scripting in Internet Information Server (IIS) 4.0 and 5.0 allows attackers to cause a denial of service or execute arbitrary code via HTR requests with long variable names.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-14T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected to use a forward slash as the separator in the key." date="2007-05-07T15:59:00.150-04:00">
              <contributor organization="Secure Elements, Inc.">Glenn Strickland</contributor>
            </modified>
            <status_change date="2007-05-07T16:04:55.096-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:46.010-04:00">ACCEPTED</status_change>
            <modified comment="Use def:12413 instead" date="2011-01-20T10:13:42.818-05:00">
              <contributor organization="Symantec Corporation">Josh Turpin</contributor>
            </modified>
            <status_change date="2011-01-20T10:13:42.818-05:00">DEPRECATED</status_change>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="IIS 4.0 Major Version" negate="false" test_ref="oval:org.mitre.oval:tst:3099"/>
          <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
          <criterion comment="this is an NT Terminal Server" negate="true" test_ref="oval:org.mitre.oval:tst:3097"/>
          <criterion comment="the version of w3svc.dll is less than 4.2.775.1" negate="false" test_ref="oval:org.mitre.oval:tst:3096"/>
          <criterion comment="Patch Q319733 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3095"/>
          <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
          <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="ism.dll mapping exists" negate="false" test_ref="oval:org.mitre.oval:tst:3057"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:449" version="1" class="vulnerability">
      <metadata>
        <title>Bind OPT Resource Record DoS Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <product>Bind</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1220" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1220"/>
        <description>BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to assertion failure) via a request for a subdomain that does not exist, with an OPT resource record with a large UDP payload size.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-19T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-24T03:40:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="Internet Domain Name Server (BIND, SUNWinamd) installed" negate="false" test_ref="oval:org.mitre.oval:tst:2626"/>
          <criterion comment="Patch 112970-03 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:2625"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="in.named running" negate="false" test_ref="oval:org.mitre.oval:tst:2624"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:447" version="4" class="vulnerability">
      <metadata>
        <title>Mutliple Buffer Management Errors in OpenSSH II</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>OpenSSH</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0693" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0693"/>
        <description>A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-2003-0695.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-21T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:26.157-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:32.039-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.296-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:56:44.126-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:27.010-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="openssh-server version is less than 3.5p1-11" negate="false" test_ref="oval:org.mitre.oval:tst:2627"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="sshd listens on the network" negate="false" test_ref="oval:org.mitre.oval:tst:2628"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:446" version="4" class="vulnerability">
      <metadata>
        <title>Memory Bugs in OpenSSH</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>OpenSSH</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0682" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0682"/>
        <description>"Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of vulnerabilities than CVE-2003-0693 and CVE-2003-0695.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-21T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:35.446-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:31.864-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.296-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:56:44.185-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:26.670-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="openssh-server version is less than 3.5p1-11" negate="false" test_ref="oval:org.mitre.oval:tst:2627"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="sshd listens on the network" negate="false" test_ref="oval:org.mitre.oval:tst:2628"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:445" version="4" class="vulnerability">
      <metadata>
        <title>OpenSSH Indirect User Disclosure Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>OpenSSH</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0190" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0190"/>
        <description>OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-29T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:48.710-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:31.675-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.296-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:56:44.254-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:26.335-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="openssh-server version is less than 3.5p1-6.9" negate="false" test_ref="oval:org.mitre.oval:tst:2629"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="sshd listens on the network" negate="false" test_ref="oval:org.mitre.oval:tst:2628"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:444" version="4" class="vulnerability">
      <metadata>
        <title>IE v6.0 Temporary Internet Files folders Name Reading Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1188" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1188"/>
        <description>Internet Explorer 5.01 through 6.0 allows remote attackers to identify the path to the Temporary Internet Files folder and obtain user information such as cookies via certain uses of the OBJECT tag, which are not subjected to the proper security checks, aka "Temporary Internet Files folders Name Reading."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-27T05:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-03-09T05:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="Changed IE registry test to wrt-18">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:59.361-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:18.732-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="the version of mshtml.dll is less than 6.0.2722.900" negate="false" test_ref="oval:org.mitre.oval:tst:2884"/>
        <criterion comment="the patch q328970 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3117"/>
        <criterion comment="the patch q324929 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3116"/>
        <criterion comment="the patch q810847 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3115"/>
        <criterion comment="the patch q813489 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3114"/>
        <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4430" version="2" class="vulnerability">
      <metadata>
        <title>Kerberos 5 KDC Buffer Underrun in Principle Name Handling</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>Solaris Enterprise Authentication Mechanism (SEAM)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0082" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0082"/>
        <description>The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm using a certain protocol request that causes the KDC to corrupt its heap (aka "buffer underrun").</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-19T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-24T03:40:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-07-03T12:56:00.000-04:00" comment="Added negate=true attribute to criteria sub-block to fix conversion error from OVAL 4.2 to OVAL 5.0">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-07-03T12:56:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:26.851-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <notes>
        <note>Vulnerability exists in standard Solaris kerberos and SEAM.  This definition only covers SEAM</note>
      </notes>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 7,8,or 9 installed">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
        </criteria>
        <criterion comment="Sun Enterprise Authentication Mechanism (SEAM, SUNWkr5sv) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1161"/>
        <criteria operator="AND" comment="Patches 112536-04 and 110057-07 or later installed" negate="true">
          <criterion comment="Patch 112536-04 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:325"/>
          <criterion comment="Patch 110057-07 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:324"/>
        </criteria>
        <criterion comment="Patch 110060-04 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:323"/>
        <criterion comment="Patch 116462-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:322"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:443" version="4" class="vulnerability">
      <metadata>
        <title>mountd xlog Function Off-by-One Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>nfs-utils</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0252"/>
        <description>Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC requests to mountd that do not contain newlines.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-02T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:56.121-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:31.401-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.923-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:56:30.518-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:25.948-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="nfs-utils version is less than 1.0.1-3.9" negate="false" test_ref="oval:org.mitre.oval:tst:2631"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="rpc.mountd listens on the network" negate="false" test_ref="oval:org.mitre.oval:tst:2630"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:442" version="4" class="vulnerability">
      <metadata>
        <title>MYSQL Privilege Escalation Vulnerability via INFO OUTFILE Select</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>MySQL</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0150" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0150"/>
        <description>MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-18T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:41.728-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:31.202-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.773-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:56:19.417-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:25.618-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="mysql-server version is less than 3.23.56-1.9" negate="false" test_ref="oval:org.mitre.oval:tst:2634"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="mysqld is listening to the network" negate="false" test_ref="oval:org.mitre.oval:tst:2633"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4416" version="1" class="vulnerability">
      <metadata>
        <title>Apache mod_digest Nonce Verification Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0987" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0987"/>
        <description>mod_digest for Apache before 1.3.31 does not properly verify the nonce of a client response by using a AuthNonce secret.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-14T01:14:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <modified date="2004-10-18T03:15:00.000-04:00" comment="Change apache test to file test">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </modified>
            <modified date="2004-10-19T11:19:00.000-04:00" comment="Changed apache test to package test">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </modified>
            <status_change date="2004-10-20T02:35:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="OR" comment="Solaris 8 or 9 installed">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          </criteria>
          <criterion comment="Patch 116973-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:656"/>
          <criterion comment="Patch 113146-05 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:655"/>
          <criterion comment="Apache (SUNWapchu) installed" negate="false" test_ref="oval:org.mitre.oval:tst:653"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="Apache running (httpd)" negate="false" test_ref="oval:org.mitre.oval:tst:654"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4403" version="1" class="vulnerability">
      <metadata>
        <title>Mozilla, Firefox, Thunderbird XPInstall Security Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0762" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0762"/>
        <description>Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to install arbitrary extensions by using interactive events to manipulate the XPInstall Security dialog box.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-19T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-24T03:40:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 8 or 9 installed">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
        </criteria>
        <criteria operator="OR" comment="Mozilla components (any SUNWmoznav/SUNWmozmail) installed">
          <criterion comment="Mozilla (SUNWmoznav) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1070"/>
          <criterion comment="Mozilla Mail (SUNWmozmail) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1069"/>
        </criteria>
        <criterion comment="Patch 117765-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1068"/>
        <criterion comment="Patch 117767-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1067"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4392" version="2" class="vulnerability">
      <metadata>
        <title>Windows Server 2003 NNTP Component Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Network News Transport Protocol (NNTP)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0574" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0574"/>
        <description>The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an "unchecked buffer," leading to off-by-one and heap-based buffer overflows.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-14T08:47:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-10-20T02:35:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.054-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:55:58.258-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:15.748-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
          <criterion comment="the version of nntpsvc.dll is less than 6.0.3790.206" negate="false" test_ref="oval:org.mitre.oval:tst:2759"/>
          <criterion comment="the patch WindowsServer2003-KB883935-x86-enu.exe is installed" negate="true" test_ref="oval:org.mitre.oval:tst:326"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="the NNTP service is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2757"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4383" version="1" class="vulnerability">
      <metadata>
        <title>lpq Buffer Overflow in bsd_queue()</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>lpstat</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0091" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0091"/>
        <description>Stack-based buffer overflow in the bsd_queue() function for lpq on Solaris 2.6 and 7 allows local users to gain root privilege.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-02-01T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-02-01T08:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
        <criterion comment="SunSoft Print - Client - Usr (SUNWpcu) installed" negate="false" test_ref="oval:org.mitre.oval:tst:753"/>
        <criterion comment="Patch 107115-12 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:330"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:438" version="2" class="vulnerability">
      <metadata>
        <title>HP-UX ftpd Remote Unauthorized Data Access (B.11.00)</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
          <product>ftpd</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3296" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3296"/>
        <description>The FTP server in HP-UX 10.20, B.11.00, and B.11.11, allows remote attackers to list arbitrary directories as root by running the LIST command before logging in.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:48:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:47.606-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:55.094-04:00">ACCEPTED</status_change>
            <modified comment="Added title." date="2007-02-25T23:51:00.539-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-02-25T23:52:03.561-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:19.299-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.00" negate="false">
          <criteria operator="AND" comment="700 Series OS Release 11.00" negate="false">
            <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:3443"/>
            <criterion comment="HP Release B.11.00" negate="false" test_ref="oval:org.mitre.oval:tst:3571"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 11.00" negate="false">
            <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:4124"/>
            <criterion comment="HP Release B.11.00" negate="false" test_ref="oval:org.mitre.oval:tst:3571"/>
          </criteria>
        </criteria>
        <criterion comment="WUFTP-26.INETSVCS-FTP with version less than B.11.00.01.005 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3962"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4374" version="1" class="vulnerability">
      <metadata>
        <title>ToolTalk Buffer Overflow via TT_SESSION Envvar</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>Common Desktop Environment</product>
        </affected>
        <reference source="CVE" ref_id="CVE-1999-0693" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0693"/>
        <description>Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-02-01T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-02-01T08:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
        <criterion comment="CDE Desktop Window Manager (SUNWdtwm) installed" negate="false" test_ref="oval:org.mitre.oval:tst:675"/>
        <criterion comment="Patch 107893-05 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:331"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4363" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01, SP3 HijackClick 3 / Script in Image Tag File Download Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0841" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0841"/>
        <description>Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" and the "Script in Image Tag File Download Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-18T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-01-20T02:31:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2824. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:48:00.494-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:52:24.290-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:33.504-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:54.389-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:18.632-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3015"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3821.2800" negate="false" test_ref="oval:org.mitre.oval:tst:625"/>
          <criterion comment="the patch kb834707-ie501sp3 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:624"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:436" version="4" class="vulnerability">
      <metadata>
        <title>MYSQLd Double-free Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>MySQL</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0073" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0073"/>
        <description>Double-free vulnerability in mysqld for MySQL before 3.23.55 allows attackers with MySQL access to cause a denial of service (crash) via mysql_change_user.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-18T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:42:05.441-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:31.006-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.773-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:56:19.473-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:25.288-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="mysql-server version is less than 3.23.56-1.9" negate="false" test_ref="oval:org.mitre.oval:tst:2634"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="mysqld is listening to the network" negate="false" test_ref="oval:org.mitre.oval:tst:2633"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4356" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerabilities in OpenSSL May Lead to a Denial of Service (DoS) to Applications or Execution of Arbitrary Code With Elevated Privileges</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4343" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4343"/>
        <description>The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-12-04T09:53:52.000-05:00">
              <contributor organization="Hewlett-Packard">Todd Dolinsky</contributor>
            </submitted>
            <status_change date="2007-12-06T15:39:49.237-05:00">DRAFT</status_change>
            <status_change date="2007-12-24T04:06:29.015-05:00">INTERIM</status_change>
            <status_change date="2008-01-14T04:00:06.896-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102711">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criteria operator="OR">
            <criterion negate="true" comment="Patch 121229-02 or later installed" test_ref="oval:org.mitre.oval:tst:6483"/>
            <criteria operator="AND">
              <criterion comment="Patch 121229-02 or later installed" test_ref="oval:org.mitre.oval:tst:6483"/>
              <criterion negate="true" comment="Patch 118562-13 or later installed" test_ref="oval:org.mitre.oval:tst:6849"/>
              <criterion comment="Pkg SUNWcry (Supplemental Encryption) is installed" test_ref="oval:org.mitre.oval:tst:3198"/>
            </criteria>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102711">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criteria operator="OR">
            <criterion negate="true" comment="Patch 121230-02 or later installed" test_ref="oval:org.mitre.oval:tst:6715"/>
            <criteria operator="AND">
              <criterion comment="Patch 121230-02 or later installed" test_ref="oval:org.mitre.oval:tst:6715"/>
              <criterion negate="true" comment="Patch 118563-13 or later installed" test_ref="oval:org.mitre.oval:tst:6121"/>
              <criterion comment="Pkg SUNWcry (Supplemental Encryption) is installed" test_ref="oval:org.mitre.oval:tst:3198"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4345" version="1" class="vulnerability">
      <metadata>
        <title>Windows 2000 Long Share Names Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Windows Shell</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0214"/>
        <description>Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application crash) and possibly execute arbitrary code via long share names, as demonstrated using Samba.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-14T03:38:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-10-20T02:35:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="the version of shell32.dll is less than 5.0.3900.6970" negate="false" test_ref="oval:org.mitre.oval:tst:332"/>
        <criterion comment="the patch q841356 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:739"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:434" version="2" class="vulnerability">
      <metadata>
        <title>Mutt BO Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Mutt</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0140" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0140"/>
        <description>Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code such as Balsa before 2.0.10, allows a remote malicious IMAP server to cause a denial of service (crash) and possibly execute arbitrary code via a crafted folder.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-18T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-05T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:53.121-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:30.758-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="mutt version is less than 1.4.1-1" negate="false" test_ref="oval:org.mitre.oval:tst:2638"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/bin/mutt is executable">
            <criterion comment="/usr/bin/mutt is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2637"/>
            <criterion comment="/usr/bin/mutt is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2636"/>
            <criterion comment="/usr/bin/mutt is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2635"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4329" version="4" class="vulnerability">
      <metadata>
        <title>cachefsd DoS via Invalid RPC Request</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>cachefsd</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0085" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0085"/>
        <description>cachefsd in Solaris 2.6, 7, and 8 allows remote attackers to cause a denial of service (crash) via an invalid procedure call in an RPC request.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-02-01T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-02-01T08:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
            <modified comment="fixed the service_name entity used in the inetd_object" date="2007-04-10T15:17:00.350-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-04-10T15:17:45.456-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:30.532-04:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:54.971-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:24.850-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="OR" comment="Solaris 7,8,or 9 installed">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          </criteria>
          <criterion comment="Patch 108800-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3024"/>
          <criterion comment="Patch 110896-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:2946"/>
          <criterion comment="Patch 114008-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3050"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="inetd.conf contains cachefsd" negate="false" test_ref="oval:org.mitre.oval:tst:3049"/>
          <criterion comment="inetd running" negate="false" test_ref="oval:org.mitre.oval:tst:3135"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4316" version="1" class="vulnerability">
      <metadata>
        <title>Windows 2000 VDM Privilege Escalation Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>VDM</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0208" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0208"/>
        <description>The Virtual DOS Machine (VDM) subsystem of Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to access kernel memory and gain privileges via a malicious program that modified some system structures in a way that is not properly validated by privileged operating system functions.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-13T11:08:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2004-10-13T01:16:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-10-27T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-11-17T10:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="the version of vdmdbg.dll is less than 5.0.2195.6946" negate="false" test_ref="oval:org.mitre.oval:tst:333"/>
        <criterion comment="the patch KB840987 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2356"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4307" version="6" class="vulnerability">
      <metadata>
        <title>GDI+ JPEG Parsing Engine Buffer Overflow (VS.NET 2002)</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Visual Studio .NET 2002</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0200"/>
        <description>Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-09-30T11:37:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2004-10-06T12:57:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-10-20T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed test to check KB830348.  Added check for VS.NET Gdiplus.dll in WinSxS.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-08-28T12:00:00.000-04:00" comment="modified obj 303 to use xsi:nil instead of a .* pattern match">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-08-28T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:47.358-04:00">ACCEPTED</status_change>
            <modified comment="var:228 updated: reference to windir environment variable object obj:577 replaced with obj:219, the registry object for SystemRoot.  Literal component now starts with a backslash.  Implemented by Harvey Rubinovitz." date="2007-01-05T16:46:00.401-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-05T16:52:19.766-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:32.512-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:tst:755 - Updating criterion logic and check attributes for Gdiplus.dll related Objects." date="2013-12-30T09:14:00.018-05:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-12-30T09:17:36.661-05:00">INTERIM</status_change>
            <status_change date="2014-01-20T04:01:19.269-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Microsoft Visual Studio .NET 2002 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:334"/>
        <criterion comment="the version of Gdiplus.dll for Microsoft Visual Studio .NET is less than 5.1.3102.1355" negate="false" test_ref="oval:org.mitre.oval:tst:755"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:430" version="2" class="vulnerability">
      <metadata>
        <title>Multilingual File Viewer .lv File Sneak Attack Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>lv</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0188" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0188"/>
        <description>lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other directories.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-19T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:48.886-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:30.316-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="lv version is less than 4.49.4-9.9.1" negate="false" test_ref="oval:org.mitre.oval:tst:2639"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:43" version="4" class="vulnerability">
      <metadata>
        <title>Solaris 7 cachefsd Buffer Overrun Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>cachefsd</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0084" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0084"/>
        <description>Buffer overflow in the fscache_setup function of cachefsd in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long mount argument.</description>
        <oval_repository>
          <dates>
            <submitted date="2002-10-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified date="2005-01-28T12:00:00.000-04:00" comment="Updated to add patch test">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </modified>
            <status_change date="2005-02-01T08:25:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="fixed the service_name entity used in the inetd_object" date="2007-04-10T15:17:00.350-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-04-10T15:17:45.882-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:30.070-04:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:55.042-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:24.489-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="File cachefsd exists" negate="false" test_ref="oval:org.mitre.oval:tst:3053"/>
          <criterion comment="Patch 108800-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3024"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="inetd.conf contains cachefsd" negate="false" test_ref="oval:org.mitre.oval:tst:3049"/>
          <criterion comment="inetd running" negate="false" test_ref="oval:org.mitre.oval:tst:3135"/>
          <criteria operator="OR" comment="File cachefsd executable">
            <criterion comment="File cachefsd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3048"/>
            <criterion comment="File cachefsd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3047"/>
            <criterion comment="File cachefsd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3046"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4264" version="4" class="vulnerability">
      <metadata>
        <title>ISA Server Reverse DNS Lookup Results Spoofing</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Security and Acceleration Server 2000</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0892" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0892"/>
        <description>Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition) allows remote attackers to spoof trusted Internet content on a specially crafted webpage via spoofed reverse DNS lookup results.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-11-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2005-01-12T12:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-02T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-23T09:25:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-08-24T12:00:00.000-04:00" comment="modified var 208 to correctly point at the ISA Server directory">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-08-24T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:25.022-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:4264 - Corrected capitalization and extra spacing errors in product names" date="2011-04-08T16:13:00.153-04:00">
              <contributor organization="AIST">Akihito Nakamura</contributor>
            </modified>
            <status_change date="2011-04-08T16:17:42.900-04:00">INTERIM</status_change>
            <status_change date="2011-04-25T04:00:19.862-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="the version of msphlpr.dll is less than 3.0.1200.408" test_ref="oval:org.mitre.oval:tst:338"/>
        <criterion comment="ISA Server 2000 SP2 (or earlier) is installed" test_ref="oval:org.mitre.oval:tst:2611"/>
        <criterion comment="the patch KB888258 is installed" test_ref="oval:org.mitre.oval:tst:337"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4256" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerabilities in OpenSSL May Lead to a Denial of Service (DoS) to Applications or Execution of Arbitrary Code With Elevated Privileges</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3738" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3738"/>
        <description>Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-12-04T09:53:52.000-05:00">
              <contributor organization="Hewlett-Packard">Todd Dolinsky</contributor>
            </submitted>
            <status_change date="2007-12-06T15:39:48.901-05:00">DRAFT</status_change>
            <status_change date="2007-12-24T04:06:15.412-05:00">INTERIM</status_change>
            <status_change date="2008-01-14T04:00:05.944-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102711">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criteria operator="OR">
            <criterion negate="true" comment="Patch 121229-02 or later installed" test_ref="oval:org.mitre.oval:tst:6483"/>
            <criteria operator="AND">
              <criterion comment="Patch 121229-02 or later installed" test_ref="oval:org.mitre.oval:tst:6483"/>
              <criterion negate="true" comment="Patch 118562-13 or later installed" test_ref="oval:org.mitre.oval:tst:6849"/>
              <criterion comment="Pkg SUNWcry (Supplemental Encryption) is installed" test_ref="oval:org.mitre.oval:tst:3198"/>
            </criteria>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102711">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criteria operator="OR">
            <criterion negate="true" comment="Patch 121230-02 or later installed" test_ref="oval:org.mitre.oval:tst:6715"/>
            <criteria operator="AND">
              <criterion comment="Patch 121230-02 or later installed" test_ref="oval:org.mitre.oval:tst:6715"/>
              <criterion negate="true" comment="Patch 118563-13 or later installed" test_ref="oval:org.mitre.oval:tst:6121"/>
              <criterion comment="Pkg SUNWcry (Supplemental Encryption) is installed" test_ref="oval:org.mitre.oval:tst:3198"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4254" version="3" class="vulnerability">
      <metadata>
        <title>OpenSSL Integer Overflow Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>Sun Cluster</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0543" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0543"/>
        <description>Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service (crash) via an SSL client certificate with certain ASN.1 tag values.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-19T03:10:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2004-10-20T02:35:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:434 - In some &quot;pattern match&quot; strings added &quot;\&quot; before &quot;.&quot; to clarify if &quot;point&quot; or &quot;any symbol&quot; needed." date="2014-07-28T18:11:00.493-04:00">
              <contributor organization="ALTX-SOFT">Evgeniy Pavlov</contributor>
            </modified>
            <status_change date="2014-07-28T18:14:46.815-04:00">INTERIM</status_change>
            <status_change date="2014-08-18T04:05:55.650-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="OR" comment="Solaris 8 or 9 installed">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          </criteria>
          <criterion comment="Patch 113505-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:511"/>
          <criterion comment="Patch 113508-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:510"/>
          <criterion comment="Patch 115054-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:509"/>
          <criterion comment="Patch 115055-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:508"/>
          <criterion comment="SunCluster Component SUNWscvw installed" negate="false" test_ref="oval:org.mitre.oval:tst:507"/>
          <criterion comment="Apache (SUNWapchu) installed" negate="false" test_ref="oval:org.mitre.oval:tst:653"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="Apache running with SunPlex Manager config" negate="false" test_ref="oval:org.mitre.oval:tst:506"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4244" version="1" class="vulnerability">
      <metadata>
        <title>Windows 2003 (32-Bit) Program Group Converter Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Program Group Converter</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0572" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0572"/>
        <description>Buffer overflow in the Windows Program Group Converter (grpconv.exe) may allow remote attackers to execute arbitrary code via a shell: URL with a long filename and a .grp extension, which is not properly handled when the shell capability launches grpconv.exe.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-14T03:39:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-10-20T02:35:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="32-Bit version of Windows is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2748"/>
        <criterion comment="the version of grpconv.exe (system32) is less than 5.2.3790.205" negate="false" test_ref="oval:org.mitre.oval:tst:339"/>
        <criterion comment="the patch q841356 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:739"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:424" version="1" class="vulnerability">
      <metadata>
        <title>Windows Telnet Server Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Telnet protocol</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0020"/>
        <description>Buffer overflow in telnet server in Windows 2000 and Interix 2.2 allows remote attackers to execute arbitrary code via malformed protocol options.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <modified date="2004-07-20T12:00:00.000-04:00" comment="Changed patch registry key value to IsInstalled">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2004-07-21T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-08-11T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="the version of tlntsvr.exe is less than 5.0.33668.1" negate="false" test_ref="oval:org.mitre.oval:tst:2644"/>
          <criterion comment="Patch Q307298 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2643"/>
          <criterion comment="Windows 2000 Security Roll-up 1 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2990"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="the telnet service is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2642"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:423" version="4" class="vulnerability">
      <metadata>
        <title>LPRng Symbolic Link Attack Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>LPRng</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0136" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0136"/>
        <description>psbanner in the LPRng package allows local users to overwrite arbitrary files via a symbolic link attack on the /tmp/before file.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-17T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:58.226-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:29.837-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.034-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:56:03.661-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:24.159-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="lprng version is less than 3.8.19-3.1" negate="false" test_ref="oval:org.mitre.oval:tst:2647"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="psbanner is world-executable" negate="false" test_ref="oval:org.mitre.oval:tst:2646"/>
          <criterion comment="lpd listening on the network" negate="false" test_ref="oval:org.mitre.oval:tst:2645"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4224" version="1" class="vulnerability">
      <metadata>
        <title>Windows XP (32-bit) RPCSS DCOM Buffer Overflow (Blaster)</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Distributed Component Object Model (DCOM)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0715" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0715"/>
        <description>Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed DCERPC DCOM object activation request packet with modified length fields, a different vulnerability than CVE-2003-0352 (Blaster/Nachi) and CVE-2003-0528.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-18T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2005-01-20T02:31:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="AND" comment="Windows XP 32-bit edition is installed">
            <criterion comment="Windows XP is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2838"/>
            <criterion comment="32-Bit version of Windows is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2748"/>
          </criteria>
          <criterion comment="the version of rpcrt4.dll is less than 5.1.2600.109" negate="false" test_ref="oval:org.mitre.oval:tst:556"/>
          <criterion comment="the patch kb824146 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:3082"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="DCOM is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2913"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4216" version="6" class="vulnerability">
      <metadata>
        <title>GDI+ JPEG Parsing Engine Buffer Overflow (IE6)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0200"/>
        <description>Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-04T09:55:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2004-10-06T12:57:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-10-20T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed test to check q833989, added check for vgx.dll.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:46:00.470-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:31.442-05:00">ACCEPTED</status_change>
            <modified comment="References registry value for Common Files directory due to multilingual support" date="2008-04-14T11:07:00.466-04:00">
              <contributor organization="GFI Software">Clifford Farrugia</contributor>
            </modified>
            <status_change date="2008-04-14T12:28:15.957-04:00">INTERIM</status_change>
            <status_change date="2008-05-05T04:00:21.326-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:34.063-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:18.221-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
        <criterion comment="the version of vgx.dll is less than 6.0.2800.1411" negate="false" test_ref="oval:org.mitre.oval:tst:341"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:42" version="4" class="vulnerability">
      <metadata>
        <title>Solaris 7 RPC xdr_array Buffer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>libnsl</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0391" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0391"/>
        <description>Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-01-02T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified date="2006-07-03T12:56:00.000-04:00" comment="Added negate=true attribute to criteria sub-block to fix conversion error from OVAL 4.2 to OVAL 5.0">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-07-03T12:56:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:24.285-04:00">ACCEPTED</status_change>
            <modified comment="fixed the service_name entity used in the inetd_object" date="2007-04-10T15:14:00.967-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-04-10T15:14:45.338-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:29.513-04:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:55.175-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:23.326-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criteria operator="OR" comment="rpc.cmsd or dmispd exist">
            <criterion comment="File rpc.cmsd exists" negate="false" test_ref="oval:org.mitre.oval:tst:3140"/>
            <criterion comment="File dmispd exists" negate="false" test_ref="oval:org.mitre.oval:tst:3139"/>
          </criteria>
          <criteria operator="AND" comment="Patches 106942-22 and 108451-06" negate="true">
            <criterion comment="Patch 106942-22 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:3026"/>
            <criterion comment="Patch 108541-06 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:3025"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="rpc.cmsd enabled OR dmispd running">
            <criteria operator="AND" comment="rpc.cmsd enabled">
              <criterion comment="inetd.conf contains rpc.cmsd" negate="false" test_ref="oval:org.mitre.oval:tst:3136"/>
              <criterion comment="inetd running" negate="false" test_ref="oval:org.mitre.oval:tst:3135"/>
              <criteria operator="OR" comment="File rpc.cmsd executable">
                <criterion comment="File rpc.cmsd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3134"/>
                <criterion comment="File rpc.cmsd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3133"/>
                <criterion comment="File rpc.cmsd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3132"/>
              </criteria>
            </criteria>
            <criterion comment="dmispd running" negate="false" test_ref="oval:org.mitre.oval:tst:3131"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4190" version="1" class="vulnerability">
      <metadata>
        <title>Buffer Overflow in DNS Resolver Library</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>Bind</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0651" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0651"/>
        <description>Buffer overflow in the DNS resolver code used in libc, glibc, and libbind, as derived from ISC BIND, allows remote malicious DNS servers to cause a denial of service and possibly execute arbitrary code via the stub resolvers.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-19T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-24T03:40:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="OR" comment="Solaris 7,8,or 9 installed">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          </criteria>
          <criterion comment="Patch 106938-06 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:345"/>
          <criterion comment="Patch 109326-09 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:344"/>
          <criterion comment="Patch 112970-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:343"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/etc/nsswitch.conf configured to resolve hosts through DNS" negate="false" test_ref="oval:org.mitre.oval:tst:342"/>
        </criteria>
      </criteria>
    </definition>
    <definition class="vulnerability" id="oval:org.mitre.oval:def:419" version="2">
      <metadata>
        <title>.NET 2.0 Application Folder Information Disclosure Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft .NET Framework</product>
        </affected>
        <reference ref_id="CVE-2006-1300" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1300" source="CVE"/>
        <description>Microsoft .NET framework 2.0 (ASP.NET) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1 allows remote attackers to bypass access restrictions via unspecified "URL paths" that can access Application Folder objects "explicitly by name."</description>
        <oval_repository>
          <dates>
            <submitted date="2006-07-25T12:05:33">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-27T12:29:24.125-04:00">INTERIM</status_change>
            <status_change date="2006-10-16T15:58:39.673-04:00">ACCEPTED</status_change>
            <modified comment="Corrected comment on tst:8. Added new state ste:98 to check the correct file version. Corrected file path and name specification in obj:180. Edits made by Jon Baker." date="2006-11-09T06:09:00.371-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-04T09:13:47.443-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:31.216-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft .NET Framework 2.0 (Original RTM or later) is installed" definition_ref="oval:org.mitre.oval:def:1934"/>
        <criterion comment="the version of Aspnet_filter.dll is less than 2.0.50727.101" test_ref="oval:org.mitre.oval:tst:8"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:417" version="5" class="vulnerability">
      <metadata>
        <title>RHE4 InstallVersion.compareTo() DoS and Code Execution Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2265"/>
        <description>Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of service (access violation and crash), and possibly execute arbitrary code, by calling InstallVersion.compareTo with an object instead of a string.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-15T04:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-08-19T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11366 - Updated CPE reference, updated regular expression" date="2011-02-17T13:29:00.547-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2011-02-17T13:31:08.733-05:00">INTERIM</status_change>
            <status_change date="2011-03-07T04:00:14.156-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11366 - Corrected - right version for brlapi and brlapi-devel as specified by RHSA-2010:0181-5" date="2013-03-18T12:26:00.995-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-03-18T12:31:12.278-04:00">INTERIM</status_change>
            <status_change date="2013-04-08T04:00:46.461-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2652"/>
          <criterion comment="mozilla RPM is earlier than 37:1.7.10-1.4.1" negate="false" test_ref="oval:org.mitre.oval:tst:2651"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/mozilla is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2650"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4169" version="5" class="vulnerability">
      <metadata>
        <title>Windows XP, IE v6.0 CSS Heap Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0842" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0842"/>
        <description>Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from "memory corruption") via certain malformed Cascading Style Sheet (CSS) elements that trigger heap-based buffer overflows, as demonstrated using the "&lt;STYLE>@;/*" string, possibly due to a missing comment terminator that may cause an invalid length to trigger a large memory copy operation, aka the "CSS Heap Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-19T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-20T04:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T05:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T05:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="Changed IE registry test to wrt-18">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:491: Removed HKEY_LOCAL_MACHINE\ from the key, as it's specified as the hive.  Implemented by Harvey Rubinovitz." date="2007-01-22T00:36:00.756-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T00:37:49.586-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:30.899-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:47.622-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:18.156-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="the version of mshtml.dll is less than 6.0.2745.2800" negate="false" test_ref="oval:org.mitre.oval:tst:590"/>
          <criterion comment="the patch kb834707 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:589"/>
          <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:416" version="4" class="vulnerability">
      <metadata>
        <title>IE v6.0,SP1 Script URLs Cross Domain Zone Restrictions Bypass</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0816" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0816"/>
        <description>Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJPU, (2) using the window.open method to load a file: URL containing Javascript, as demonstrated using WsOpenFileJPU, (3) setting the href property in the base tag for the _search window, as demonstrated using WsBASEjpu, (4) loading the search window into an Iframe, as demonstrated using WsFakeSrc, (5) caching a javascript: URL in the browser history, then accessing that URL in the same frame as the target domain, as demonstrated using WsOpenJpuInHistory, NAFjpuInHistory, BackMyParent, BackMyParent2, and RefBack, aka the "Script URLs Cross Domain" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for specific Windows operating systems.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 6 sp1 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-01-29T12:00:00.000-04:00" comment="Added Windows XP 64-bit to the list of affected platforms">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:46:02.945-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:30.538-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:51.866-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:18.084-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2800.1276" negate="false" test_ref="oval:org.mitre.oval:tst:2688"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4152" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP4 Drag-and-Drop Code Execution Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0839" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0839"/>
        <description>Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by "wottapoop.html".</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-25T04:44:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-27T01:04:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-17T10:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:43.670-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:30.285-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:49.015-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:18.005-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3534.2800" negate="false" test_ref="oval:org.mitre.oval:tst:519"/>
          <criterion comment="the patch kb834707-ie501sp4 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:518"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:412" version="6" class="vulnerability">
      <metadata>
        <title>HP-UX 11.04 Blind Connection Reset Attack Vulnerability</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0790" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0790"/>
        <description>Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error messages, aka the "blind connection-reset attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:48:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:46.966-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:54.574-04:00">ACCEPTED</status_change>
            <modified comment="Added title." date="2007-02-26T00:59:00.221-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-02-26T01:00:20.244-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:18.872-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:30.416-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:12.318-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:412 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:40.087-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:32.572-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.04">
          <criteria operator="AND" comment="700 Series OS Release 11.04">
            <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:3443"/>
            <criterion comment="HP Release B.11.04" test_ref="oval:org.mitre.oval:tst:3294"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 11.04">
            <criterion comment="800-series HP" test_ref="oval:org.mitre.oval:tst:4124"/>
            <criterion comment="HP Release B.11.04" test_ref="oval:org.mitre.oval:tst:3294"/>
          </criteria>
        </criteria>
        <criterion negate="true" comment="Patch PHNE_33427 is installed" test_ref="oval:org.mitre.oval:tst:3468"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4114" version="1" class="vulnerability">
      <metadata>
        <title>Apache Error Log Escape Sequence Injection Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0020"/>
        <description>Apache does not filter terminal escape sequences from its error logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-14T01:14:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <modified date="2004-10-18T03:14:00.000-04:00" comment="Change apache test to file test">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </modified>
            <modified date="2004-10-19T11:18:00.000-04:00" comment="Changed apache test to package test">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </modified>
            <status_change date="2004-10-20T02:35:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="OR" comment="Solaris 8 or 9 installed">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          </criteria>
          <criterion comment="Patch 116973-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:656"/>
          <criterion comment="Patch 113146-05 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:655"/>
          <criterion comment="Apache (SUNWapchu) installed" negate="false" test_ref="oval:org.mitre.oval:tst:653"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="Apache running (httpd)" negate="false" test_ref="oval:org.mitre.oval:tst:654"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:411" version="2" class="vulnerability">
      <metadata>
        <title>KDE Konqueror Userid/Password Disclosure Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Konqueror</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0459" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0459"/>
        <description>KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer header, which could allow remote web sites to steal the credentials for pages that link to the sites.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-04T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-05T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:36.910-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:29.267-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="kdelibs version is less than 3.1-12" negate="false" test_ref="oval:org.mitre.oval:tst:2656"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/bin/konqueror is executable">
            <criterion comment="/usr/bin/konqueror is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2655"/>
            <criterion comment="/usr/bin/konqueror is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2654"/>
            <criterion comment="/usr/bin/konqueror is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2653"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:41" version="3" class="vulnerability">
      <metadata>
        <title>Solaris 7 RWall Daemon Syslog Format String Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>rpc.rwalld</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0573" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0573"/>
        <description>Format string vulnerability in RPC wall daemon (rpc.rwalld) for Solaris 2.5.1 through 8 allows remote attackers to execute arbitrary code via format strings in a message that is not properly provided to the syslog function when the wall command cannot be executed.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-01-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified comment="fixed the service_name entity used in the inetd_object" date="2007-04-10T15:16:00.472-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-04-10T15:17:04.573-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:29.060-04:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:54.918-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:22.248-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="File rpc.rwalld exists" negate="false" test_ref="oval:org.mitre.oval:tst:3032"/>
          <criterion comment="Patch 112899-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3031"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="inetd.conf contains rpc.rwalld" negate="false" test_ref="oval:org.mitre.oval:tst:3030"/>
          <criterion comment="inetd running" negate="false" test_ref="oval:org.mitre.oval:tst:3135"/>
          <criteria operator="OR" comment="File rpc.rwalld executable">
            <criterion comment="File rpc.rwalld executable" negate="false" test_ref="oval:org.mitre.oval:tst:3029"/>
            <criterion comment="File rpc.rwalld executable" negate="false" test_ref="oval:org.mitre.oval:tst:3028"/>
            <criterion comment="File rpc.rwalld executable" negate="false" test_ref="oval:org.mitre.oval:tst:3027"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4098" version="3" class="vulnerability">
      <metadata>
        <title>Multiple Vulnerabilities in lpstat and libprint</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>lpstat</product>
          <product>libprint</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0999" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0999"/>
        <description>Unknown multiple vulnerabilities in (1) lpstat and (2) the libprint library in Solaris 2.6 through 9 may allow attackers to execute arbitrary code or read or write arbitrary files.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-19T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-24T03:40:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:4098 - Split &lt;product>lpstat, libprint&lt;/product> in &lt;product>lpstat&lt;/product> &lt;product>libprint&lt;/product>" date="2014-06-02T14:48:00.144-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-06-02T14:49:47.363-04:00">INTERIM</status_change>
            <status_change date="2014-06-23T04:07:47.261-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="Solaris 7,8,or 9 installed">
          <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Solaris 7 Installed" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
        </criteria>
        <criteria operator="OR" comment="Solaris Printing Services installed (any SUNWpcr/SUNWpcu/SUNWpsr/SUNWpsu)">
          <criterion comment="Solaris Print - Client - Root (SUNWpcr) installed" test_ref="oval:org.mitre.oval:tst:352"/>
          <criterion comment="Solaris Print - Client - Usr (SUNWpcu) installed" test_ref="oval:org.mitre.oval:tst:351"/>
          <criterion comment="Solaris Print - LP Server - Root (SUNWpsr) installed" test_ref="oval:org.mitre.oval:tst:350"/>
          <criterion comment="Solaris Print - LP Server - Usr (SUNWpsu) installed" test_ref="oval:org.mitre.oval:tst:349"/>
        </criteria>
        <criterion negate="true" comment="Patch 107115-13 or later installed" test_ref="oval:org.mitre.oval:tst:348"/>
        <criterion negate="true" comment="Patch 109320-07 or later installed" test_ref="oval:org.mitre.oval:tst:347"/>
        <criterion negate="true" comment="Patch 113329-02 or later installed" test_ref="oval:org.mitre.oval:tst:346"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4095" version="1" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability in Solaris Volume Manager (SVM) May Allow a Denial of Service (DoS)</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5921" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5921"/>
        <description>Unspecified vulnerability in the ioctl interface in the Solaris Volume Manager (SVM) in Sun Solaris 9 and 10 allows local users to cause a denial of service (panic) via unspecified vectors, a different vulnerability than CVE-2004-1346.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-11-14T13:46:57.000-05:00">
              <contributor organization="Hewlett-Packard">Nicholas Hansen</contributor>
            </submitted>
            <status_change date="2007-11-16T08:53:16.185-05:00">DRAFT</status_change>
            <status_change date="2007-12-03T04:05:58.160-05:00">INTERIM</status_change>
            <status_change date="2007-12-24T04:05:42.679-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 103143">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 124256-03 or later installed" test_ref="oval:org.mitre.oval:tst:6439"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 103143">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 126257-04 or later installed" test_ref="oval:org.mitre.oval:tst:6587"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 103143">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 116669-31 or later installed" test_ref="oval:org.mitre.oval:tst:5870"/>
          <criteria operator="OR" comment="Solaris 9 (SPARC) Sun Alert 103143 extra patches">
            <criterion comment="Patch 113026-03 or later installed" test_ref="oval:org.mitre.oval:tst:6795"/>
            <criterion comment="Patch 113073-11 or later installed" test_ref="oval:org.mitre.oval:tst:6844"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 103143">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 122371-07 or later installed" test_ref="oval:org.mitre.oval:tst:6632"/>
          <criteria operator="OR" comment="Solaris 9 (x86) Sun Alert 103143 extra patches">
            <criterion comment="Patch 113994-02 or later installed" test_ref="oval:org.mitre.oval:tst:6596"/>
            <criterion comment="Patch 118559-12 or later installed" test_ref="oval:org.mitre.oval:tst:6809"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:409" version="3" class="vulnerability">
      <metadata>
        <title>IE v5.5,SP2 Script URLs Cross Domain Zone Restrictions Bypass</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0816" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0816"/>
        <description>Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJPU, (2) using the window.open method to load a file: URL containing Javascript, as demonstrated using WsOpenFileJPU, (3) setting the href property in the base tag for the _search window, as demonstrated using WsBASEjpu, (4) loading the search window into an Iframe, as demonstrated using WsFakeSrc, (5) caching a javascript: URL in the browser history, then accessing that URL in the same frame as the target domain, as demonstrated using WsOpenJpuInHistory, NAFjpuInHistory, BackMyParent, BackMyParent2, and RefBack, aka the "Script URLs Cross Domain" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for specific Windows operating systems.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 5.5 sp2 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:53.916-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:17.934-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
          <criterion comment="the version of mshtml.dll is less than 5.50.4934.1600" negate="false" test_ref="oval:org.mitre.oval:tst:2689"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4085" version="4" class="vulnerability">
      <metadata>
        <title>IE6,SP2 Channel Definition Format Cross Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0056" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0056"/>
        <description>Internet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition Format (CDF) files, which allows remote attackers to obtain sensitive information or execute arbitrary code, aka the "Channel Definition Format (CDF) Cross Domain Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-03-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-03-23T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-13T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2005-04-21T12:00:00.000-04:00" comment="modified wrt-159 - unchecked value">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-05-11T05:41:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed test to check kb867282.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:50.712-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:17.869-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6.0 Installed XP SP2" negate="false" test_ref="oval:org.mitre.oval:tst:2403"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2900.2604" negate="false" test_ref="oval:org.mitre.oval:tst:2402"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:408" version="3" class="vulnerability">
      <metadata>
        <title>IE v5.5 Cross Domain Verification via Cached Methods Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1254" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1254"/>
        <description>Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information on the local system or in other domains, and possibly execute code, via cached methods and objects, aka "Cross Domain Verification via Cached Methods."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-27T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:54.037-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:17.813-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Internet Explorer 5.5 Installed">
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3078"/>
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3077"/>
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3076"/>
          <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
        </criteria>
        <criterion comment="the version of mshtml.dll is less than 5.50.4922.900" negate="false" test_ref="oval:org.mitre.oval:tst:2786"/>
        <criterion comment="the patch q328970 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3117"/>
        <criterion comment="the patch q324929 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3116"/>
        <criterion comment="the patch q810847 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3115"/>
        <criterion comment="the patch q813489 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3114"/>
        <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4076" version="2" class="vulnerability" deprecated="true">
      <metadata>
        <title>Suppressed: Duplicate of OVAL1655</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Word for Windows 6.0 Converter</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0901" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0901"/>
        <description>Microsoft Word for Windows 6.0 Converter (MSWRD632.WPC), as used in WordPad, does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Font Conversion Vulnerability," a different vulnerability than CVE-2004-0571.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-05T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2005-01-12T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-02T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-23T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-04-08T12:00:00.000-04:00" comment="modified wrt-35 - wrt-35 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2005-04-11T08:48:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-04-27T12:07:00.000-04:00">ACCEPTED</status_change>
            <modified date="2007-03-01T12:01:01" comment="Deprecated in favor of oval:org.mitre.oval:def:1655.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-03-01T12:01:01">DEPRECATED</status_change>
            <modified comment="References registry value for Common Files directory due to multilingual support" date="2008-04-14T11:07:00.928-04:00">
              <contributor organization="GFI Software">Clifford Farrugia</contributor>
            </modified>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="the patch kb885836 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:1104"/>
          <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
          <criterion comment="the version of mswrd632.wpc is less than 2004.10.25.0" negate="false" test_ref="oval:org.mitre.oval:tst:1103"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="Word for Windows 6.0 Converter is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2421"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:407" version="2" class="vulnerability">
      <metadata>
        <title>MSHTA Code Execution Vulnerability (32-bit Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Windows Shell</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0063"/>
        <description>The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by modifying the CLSID stored in a file so that it is processed by HTML Application Host (MSHTA), as demonstrated using a Microsoft Word document.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-05-04T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-05-04T12:32:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-22T12:38:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:1522: Removed blank before the word Filelist in the Key.  Modified by Harvey Rubinovitz." date="2007-01-22T00:07:00.158-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T00:08:37.474-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:29.778-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="AND" comment="Microsoft Windows Server 2003 32-Bit Edition">
            <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
            <criterion comment="32-Bit version of Windows is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2748"/>
          </criteria>
          <criterion comment="the version of shell32.dll is less than 6.0.3790.280" negate="false" test_ref="oval:org.mitre.oval:tst:2658"/>
          <criterion comment="the patch  KB893086 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2657"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment=".hta applications are enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2915"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:406" version="2" class="vulnerability">
      <metadata>
        <title>Microsoft Winsock Proxy Service Denial of Service</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Security and Acceleration Server 2000</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0110" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0110"/>
        <description>The Winsock Proxy service in Microsoft Proxy Server 2.0 and the Microsoft Firewall service in Internet Security and Acceleration (ISA) Server 2000 allow remote attackers to cause a denial of service (CPU consumption or packet storm) via a spoofed, malformed packet to UDP port 1745.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-12-03T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.657-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:50:13.984-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:15.559-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Software section">
          <criterion comment="ISA Server 2000 is installed" test_ref="oval:org.mitre.oval:tst:2935"/>
          <criterion comment="the version of w3proxy.exe is less than 3.0.1200.257" test_ref="oval:org.mitre.oval:tst:2662"/>
          <criterion comment="the version of wpsrv.exe is less than 3.0.1200.257" test_ref="oval:org.mitre.oval:tst:2661"/>
          <criterion negate="true" comment="Patch isahf257 installed" test_ref="oval:org.mitre.oval:tst:2660"/>
        </criteria>
        <criteria operator="AND" comment="Configuration section">
          <criterion comment="Microsoft Firewall Service Enabled" test_ref="oval:org.mitre.oval:tst:2659"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:405" version="8" class="vulnerability">
      <metadata>
        <title>HP-UX 11.23 Path MTU Discovery Attack Vulnerability</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1060" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1060"/>
        <description>Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:48:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:46.701-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:54.231-04:00">ACCEPTED</status_change>
            <modified comment="Added title." date="2007-02-22T17:44:00.552-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-02-22T17:44:54.576-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:18.520-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:30.190-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:12.105-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:405 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:16.435-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:32.266-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:tst:3901 - HP-UX Security Advisory - HPSBUX02944_101" date="2014-02-19T09:09:00.021-05:00">
              <contributor organization="Hewlett-Packard">Sushant Kumar Singh</contributor>
            </modified>
            <status_change date="2014-02-19T09:13:26.565-05:00">INTERIM</status_change>
            <status_change date="2014-03-10T04:00:50.464-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.23">
          <criteria operator="AND" comment="700 Series OS Release 11.23">
            <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:3443"/>
            <criterion comment="HP Release B.11.23" test_ref="oval:org.mitre.oval:tst:3901"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 11.23">
            <criterion comment="800-series HP" test_ref="oval:org.mitre.oval:tst:4124"/>
            <criterion comment="HP Release B.11.23" test_ref="oval:org.mitre.oval:tst:3901"/>
          </criteria>
        </criteria>
        <criterion negate="true" comment="Patch PHNE_32606 is installed" test_ref="oval:org.mitre.oval:tst:3439"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4047" version="2" class="vulnerability">
      <metadata>
        <title>Shell Redirect Symlink Attack Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 8</platform>
          <product>Bourne Shell (sh)</product>
          <product>Bourne Again Shell (bash)</product>
          <product>TENEX C Shell (tcsh)</product>
          <product>C Shell (csh)</product>
          <product>Korn Shell (ksh)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2000-1134" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-1134"/>
        <description>Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing &lt;&lt; redirects (aka here-documents or in-here documents), which allows local users to overwrite files of other users via a symlink attack.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-19T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-24T03:40:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-06-13T03:18:00.000-04:00" comment="Added Sun Solaris 8 to list of platforms in Affected metadata.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-06-14T07:41:00.000-04:00">INTERIM</status_change>
            <modified date="2006-07-03T12:56:00.000-04:00" comment="Added negate=true attribute to criteria sub-block to fix conversion error from OVAL 4.2 to OVAL 5.0">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-09-27T12:29:23.796-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 7 or 8 installed">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
        </criteria>
        <criteria operator="AND" comment="Patches 108574-03, 108162-04, and 108416-02 or later installed" negate="true">
          <criterion comment="Patch 108574-03 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:358"/>
          <criterion comment="Patch 108162-04 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:357"/>
          <criterion comment="Patch 108416-02 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:356"/>
        </criteria>
        <criteria operator="AND" comment="Patches 110943-01, 110898-02, and 109324-03 or later installed" negate="true">
          <criterion comment="Patch 110943-01 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:355"/>
          <criterion comment="Patch 110898-02 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:354"/>
          <criterion comment="Patch 109324-03 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:353"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4043" version="8" class="vulnerability">
      <metadata>
        <title>SMB Code Execution Vulnerability (Windows 2000)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>SMB (Server Message Block)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0045" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0045"/>
        <description>The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, which allows remote attackers to execute arbitrary code via Transaction responses containing (1) Trans or (2) Trans2 commands, aka the "Server Message Block Vulnerability," and as demonstrated using Trans2 FIND_FIRST2 responses with large file name length fields.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-02-15T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2005-02-18T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-29T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-06-17T12:00:00.000-04:00" comment="modified cmp-1106 - Replaced the test that checks for the service pack level, instead of checking for sp4 or ealier (did not check for GOLD edition) it is now negating the test that checks for sp5 for later.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2005-06-22T12:35:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.350-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:51:29.763-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:15.337-05:00">ACCEPTED</status_change>
            <modified comment="Corrected and tightened regular expression in ste:2610" date="2010-12-02T11:46:00.307-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-12-02T11:47:26.827-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:57.215-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:33.080-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:56.870-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 (sp4 or earlier) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 5 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2790"/>
        </criteria>
        <criterion comment="the version of mrxsmb.sys is less than 5.0.2195.7023" negate="false" test_ref="oval:org.mitre.oval:tst:359"/>
        <criterion comment="the patch KB885250 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:824"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4032" version="1" class="vulnerability">
      <metadata>
        <title>Exchange Server SMTP Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Exchange Server</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0560" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0560"/>
        <description>Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003 allows remote attackers to execute arbitrary code via a crafted X-LINK2STATE extended verb request to the SMTP port.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-04-21T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2005-04-27T12:06:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-22T12:38:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Exchange Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:362"/>
        <criterion comment="the version of xlsasink.dll is less than 6.5.6981.3" negate="false" test_ref="oval:org.mitre.oval:tst:361"/>
        <criterion comment="the patch KB894549 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:360"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4030" version="1" class="vulnerability">
      <metadata>
        <title>DtMail Local Command Line Format String Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>DtMail</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0800" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0800"/>
        <description>Format string vulnerability in CDE Mailer (dtmail) on Solaris 8 and 9 allows local users to gain privileges via format strings in the argv[0] value.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-19T03:09:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2004-10-20T02:35:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 8 or 9 installed">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
        </criteria>
        <criterion comment="Patch 109613-07 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:365"/>
        <criterion comment="Patch 112810-06 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:364"/>
        <criterion comment="CDE Desktop Applications (SUNWdtdst) installed" negate="false" test_ref="oval:org.mitre.oval:tst:363"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:403" version="7" class="vulnerability">
      <metadata>
        <title>Code Execution via Compiled HTML Help File</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>HTML Help Facility</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0694" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0694"/>
        <description>The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP uses the Local Computer Security Zone when opening .chm files from the Temporary Internet Files folder, which allows remote attackers to execute arbitrary code via HTML mail that references or inserts a malicious .chm file containing shortcuts that can be executed, aka "Code Execution via Compiled HTML Help File."</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-03-07T12:00:00.000-04:00" comment="modified wrt-222 - changed pattern match">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-03-09T07:55:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-29T07:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2878" date="2010-11-29T16:13:00.904-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:04.718-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:56.855-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:46.281-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:56.526-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="the version of hhsetup.dll is less than 5.2.3644.0" negate="false" test_ref="oval:org.mitre.oval:tst:2675"/>
        <criterion comment="the version of itircl.dll is less than 5.2.3644.0" negate="false" test_ref="oval:org.mitre.oval:tst:2674"/>
        <criterion comment="the version of itss.dll is less than 5.2.3644.0" negate="false" test_ref="oval:org.mitre.oval:tst:2673"/>
        <criterion comment="the patch q323255 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2672"/>
        <criterion comment="SP4 or later Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3073"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4022" version="2" class="vulnerability">
      <metadata>
        <title>Office XP URL Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Office XP SP3</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0848" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0848"/>
        <description>Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long inputs after (1) "%00 (null byte) in .doc filenames or (2) "%0a" (carriage return) in .rtf filenames.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-02-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <modified date="2005-02-11T12:00:00.000-04:00" comment="Added patch check">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-03-29T12:00:00.000-04:00" comment="corrected patch negation">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2006-09-21T12:00:00.000-04:00" comment="removed tst:366 since it doesn't detect KB873352 correctly">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2005-03-29T08:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-13T12:15:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-05-04T12:33:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2006-09-21T12:15:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:46.501-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Microsoft Office XP Service Pack 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1592"/>
        <criterion comment="the version of mso.dll is less than 10.0.6735.0" negate="false" test_ref="oval:org.mitre.oval:tst:554"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:401" version="2" class="vulnerability">
      <metadata>
        <title>C-Media Sound Driver Userspace Access Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Linux kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0700" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0700"/>
        <description>The C-Media PCI sound driver in Linux before 2.4.22 does not use the get_user function to access userspace in certain conditions, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0699.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-26T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:23.972-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:28.781-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="kernel version is less than 2.4.20-19.9" negate="false" test_ref="oval:org.mitre.oval:tst:2709"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:4003" version="2" class="vulnerability">
      <metadata>
        <title>GDI+ JPEG Parsing Engine Buffer Overflow (Windows XP)</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>GDI+</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0200"/>
        <description>Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-09-20T03:32:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2004-09-22T02:10:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-10-06T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-10-20T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed test to check KB833987.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows XP is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2838"/>
        <criterion comment="the version of sxs.dll is less than 5.1.2600.1363" negate="false" test_ref="oval:org.mitre.oval:tst:368"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:40" version="3" class="vulnerability">
      <metadata>
        <title>IE v5.5,SP2 GetObject File Retrieval</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0023" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0023"/>
        <description>Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to read arbitrary files via malformed requests to the GetObject function, which bypass some of GetObject's security checks.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:35.680-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:17.744-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
        <criterion comment="the version of mshtml.dll is less than 5.50.4913.1100" negate="false" test_ref="oval:org.mitre.oval:tst:3122"/>
        <criterion comment="the patch q316059 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3121"/>
        <criterion comment="the patch q319282 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3120"/>
        <criterion comment="the patch q321232 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3119"/>
        <criterion comment="the patch q323759 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3118"/>
        <criterion comment="the patch q328970 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3117"/>
        <criterion comment="the patch q324929 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3116"/>
        <criterion comment="the patch q810847 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3115"/>
        <criterion comment="the patch q813489 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3114"/>
        <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3989" version="1" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox Certificate Spoofing Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0763" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0763"/>
        <description>Mozilla Firefox 0.9.1 and 0.9.2 allows remote web sites to spoof certificates of trusted web sites via redirects and Javascript that uses the "onunload" method.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-19T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-24T03:40:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 8 or 9 installed">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
        </criteria>
        <criteria operator="OR" comment="Mozilla components (any SUNWmoznav/SUNWmozmail) installed">
          <criterion comment="Mozilla (SUNWmoznav) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1070"/>
          <criterion comment="Mozilla Mail (SUNWmozmail) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1069"/>
        </criteria>
        <criterion comment="Patch 117765-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1068"/>
        <criterion comment="Patch 117767-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1067"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:397" version="2" class="vulnerability">
      <metadata>
        <title>MIT Kerberos 5 Key Distribution Center Remote Denial of Service Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
          <product>Kerberos</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1174"/>
        <description>MIT Kerberos 5 (krb5) 1.3 through 1.4.1 Key Distribution Center (KDC) allows remote attackers to cause a denial of service (application crash) via a certain valid TCP connection that causes a free of unallocated memory.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:52:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:46.201-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:53.901-04:00">ACCEPTED</status_change>
            <modified comment="Added title. Implemented by Jon Baker of The MITRE Corporation." date="2007-02-13T14:01:00.728-05:00">
              <contributor organization="Security-Database">Nabil Ouchn</contributor>
            </modified>
            <status_change date="2007-02-13T14:02:18.764-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:18.240-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Solaris 7 (SPARC) meets Sun Alert ID 101809 criteria." negate="false">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3576"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criterion comment="Patch 112536-06 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3209"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 7 (x86) meets Sun Alert ID 101809 criteria." negate="false">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3576"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criterion comment="Patch 112537-06 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3424"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert ID 101809 criteria." negate="false">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3437"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criterion comment="Patch 112237-13 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3567"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert ID 101809 criteria." negate="false">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3437"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criterion comment="Patch 112238-12 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3898"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (SPARC) with Supplmental Encryption Packages meets Sun Alert ID 101809 criteria." negate="false">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3437"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criteria operator="OR" comment="Solaris Supplemental Encryption Packages are installed" negate="false">
            <criterion comment="Pkg SUNWcry (Supplemental Encryption) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3198"/>
            <criterion comment="Pkg SUNWcryr (Supplemental Encryption) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3694"/>
          </criteria>
          <criterion comment="Patch 112390-11 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3640"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) with Supplmental Encryption Packages meets Sun Alert ID 101809 criteria." negate="false">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3437"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criteria operator="OR" comment="Solaris Supplemental Encryption Packages are installed" negate="false">
            <criterion comment="Pkg SUNWcry (Supplemental Encryption) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3198"/>
            <criterion comment="Pkg SUNWcryr (Supplemental Encryption) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3694"/>
          </criteria>
          <criterion comment="Patch 112240-10 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3497"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert ID 101809 criteria." negate="false">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3172"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criterion comment="Patch 112908-20 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3389"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert ID 101809 criteria." negate="false">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3172"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criterion comment="Patch 115168-08 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3624"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert ID 101809 criteria." negate="false">
          <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3680"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criterion comment="Patch 120469-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3561"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert ID 101809 criteria." negate="false">
          <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3680"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criterion comment="Patch 120470-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3418"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3960" version="1" class="vulnerability">
      <metadata>
        <title>in.named Process Crash Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>Bind</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1348" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1348"/>
        <description>Unknown vulnerability in in.named on Solaris 8 allows remote attackers to cause a denial of service (process crash).</description>
        <oval_repository>
          <dates>
            <submitted date="2005-04-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-04-20T12:13:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-05-11T05:41:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Internet Domain Name Server (BIND, SUNWinamd) installed" negate="false" test_ref="oval:org.mitre.oval:tst:2626"/>
          <criterion comment="Patch 109326-16 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:372"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="File /etc/named.conf exists" negate="false" test_ref="oval:org.mitre.oval:tst:371"/>
          <criterion comment="in.named running" negate="false" test_ref="oval:org.mitre.oval:tst:2624"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3949" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01, SP3 Plug-in Navigation Address Bar Spoofing Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0843" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0843"/>
        <description>Internet Explorer 5.5 and 6 does not properly handle plug-in navigation, which allows remote attackers to alter displayed address bars and thereby spoof web pages, facilitating phishing attacks, aka the "Plug-in Navigation Address Bar Spoofing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-18T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-01-20T02:31:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2824. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:48:00.494-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:52:23.599-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:29.050-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:44.755-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:17.653-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3015"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3821.2800" negate="false" test_ref="oval:org.mitre.oval:tst:625"/>
          <criterion comment="the patch kb834707-ie501sp3 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:624"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:393" version="4" class="vulnerability">
      <metadata>
        <title>IE v6.0 Malformed PNG Image File Failure Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1185" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1185"/>
        <description>Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allows remote attackers to cause a denial of service (crash) by triggering a heap-based buffer overflow using invalid length codes during decompression, aka "Malformed PNG Image File Failure."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-27T05:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-03-09T05:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="Changed IE registry test to wrt-18">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:35.536-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:17.576-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="the version of mshtml.dll is less than 6.0.2722.900" negate="false" test_ref="oval:org.mitre.oval:tst:2884"/>
        <criterion comment="the patch q328970 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3117"/>
        <criterion comment="the patch q324929 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3116"/>
        <criterion comment="the patch q810847 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3115"/>
        <criterion comment="the patch q813489 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3114"/>
        <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3926" version="5" class="vulnerability">
      <metadata>
        <title>IE6,SP1 Content Advisor Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0555"/>
        <description>Buffer overflow in the Content Advisor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a crafted Content Advisor file, aka "Content Advisor Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-05-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-05-11T05:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-22T12:38:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-06-23T12:49:00.000-04:00" comment="modified obj:1340 - Set xsi:nil to true on the name entity as we are only concerned with the existance of the key itself.">
              <contributor organization="Centennial Software">Jason Spashett</contributor>
            </modified>
            <status_change date="2006-06-23T12:49:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:23.314-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:46:03.466-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:28.586-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:33.976-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:17.497-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
          <criteria operator="OR" comment="a vulnerable version of mshtml.dll exisits GDR/QFE">
            <criterion comment="machine has followed the GDR update path and mshtml.dll is less than 6.0.2800.1498" negate="false" test_ref="oval:org.mitre.oval:tst:2338"/>
            <criterion comment="machine has followed the QFE update path and mshtml.dll is less than 6.0.2800.1499" negate="false" test_ref="oval:org.mitre.oval:tst:2337"/>
          </criteria>
          <criterion comment="the patch kb890923 is installed (XP Win2K Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2336"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:392" version="4" class="vulnerability">
      <metadata>
        <title>IE v6.0 (XP) ExecCommand Cross Domain Zone Restriction Bypass</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0814"/>
        <description>Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setting the window's "href" to the malicious Javascript, then calling execCommand("Refresh") to refresh the page, aka BodyRefreshLoadsJPU or the "ExecCommand Cross Domain" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T05:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified date="2004-01-21T05:00:00.000-04:00" comment="Removed the test for Windows XP.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 6 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T05:00:00.000-04:00" comment="Removed the IE 6 SP 1 part of this definition as the SP 1 part is defined in a different OVAL.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T05:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T05:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="modified wrt-18 - Changed value element to include pattern match">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:35.290-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:17.425-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2734.1600" negate="false" test_ref="oval:org.mitre.oval:tst:2663"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3913" version="5" class="vulnerability">
      <metadata>
        <title>Windows Server 2003 (32-Bit) DUNZIP Integer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Compressed Folders</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0575" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0575"/>
        <description>Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote attackers to execute arbitrary code via compressed (zipped) folders that involve an "unchecked buffer" and improper length validation.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-14T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <status_change date="2004-10-20T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-01-13T12:00:00.000-04:00" comment="modified wrt-554 - corrected regular exprsssion on value. Needed to escape the period in the file name and change the *'s to .*">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2005-01-20T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-05-05T12:00:00.000-04:00" comment="Removed the negate=&quot;true&quot; from the config test; should be vulnerable *if* enabled, rather than vulnerable if *not*  enabled.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2005-05-11T05:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:1107 - Fixed some regular expressions to conform to the Authoring style guide." date="2011-10-03T15:44:00.952-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-10-03T15:45:25.915-04:00">INTERIM</status_change>
            <status_change date="2011-10-24T04:00:08.561-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
          <criterion comment="32-Bit version of Windows is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2748"/>
          <criterion comment="the 32-bit version of zipfldr.dll is less than 6.0.3790.198" negate="false" test_ref="oval:org.mitre.oval:tst:374"/>
          <criterion comment="the patch q873376 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:1236"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="Compressed Folders with zipfldr.dll are enabled" negate="false" test_ref="oval:org.mitre.oval:tst:1235"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3910" version="5" class="vulnerability">
      <metadata>
        <title>IE5.01,SP4 DHTML Method Heap Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0055" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0055"/>
        <description>Internet Explorer 5.01, 5.5, and 6 does not properly validate buffers when handling certain DHTML methods including the createControlRange Javascript function, which allows remote attackers to execute arbitrary code, aka the "DHTML Method Heap Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-03-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-03-23T08:09:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-13T12:15:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-05-04T12:33:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed test to check kb867282.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:46.182-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:28.356-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:37.613-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:17.354-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3825.700" negate="false" test_ref="oval:org.mitre.oval:tst:994"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:390" version="5" class="vulnerability">
      <metadata>
        <title>IE5.01,SP4 JPEG Image Rendering Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1988"/>
        <description>Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to execute arbitrary code via a web site or an HTML e-mail containing a crafted JPEG image that causes memory corruption, aka "JPEG Image Rendering Memory Corruption Vulnerability".</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-23T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-08-25T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed reference to patch kb896727 from criteria.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:42.263-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:28.153-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:34.839-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:17.280-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
        <criterion comment="the version of mshtml.dll is less than 5.0.3831.1800" negate="false" test_ref="oval:org.mitre.oval:tst:2664"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:39" version="7" class="vulnerability" deprecated="true">
      <metadata>
        <title>DEPRECATED: Windows 2000 IIS HTTP Header Field Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0150" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0150"/>
        <description>Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to spoof the safety check for HTTP headers and cause a denial of service or execute arbitrary code via HTTP header field values.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-14T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected to use a forward slash as the separator in the key." date="2007-05-07T15:59:00.430-04:00">
              <contributor organization="Secure Elements, Inc.">Glenn Strickland</contributor>
            </modified>
            <status_change date="2007-05-07T16:06:10.858-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:45.654-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2884" date="2010-11-29T16:14:00.692-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:38.824-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:56.252-05:00">ACCEPTED</status_change>
            <modified comment="Use def:12124 instead" date="2011-01-20T10:07:34.136-05:00">
              <contributor organization="Symantec Corporation">Josh Turpin</contributor>
            </modified>
            <status_change date="2011-01-20T10:07:34.136-05:00">DEPRECATED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="IIS major version equals 5" negate="false" test_ref="oval:org.mitre.oval:tst:3081"/>
          <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
          <criterion comment="the version of w3svc.dll is less than 5.0.2195.5269" negate="false" test_ref="oval:org.mitre.oval:tst:3080"/>
          <criterion comment="Patch Q319733 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3095"/>
          <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
          <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
          <criterion comment="Win2K/XP/2003 service pack 3 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:3079"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="asp.dll mapping exists" negate="false" test_ref="oval:org.mitre.oval:tst:3092"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3889" version="2" class="vulnerability">
      <metadata>
        <title>Help and Support Center PCHealth System Buffer Overflow (32-bit XP)</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Windows Help and Support Center</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0711" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0711"/>
        <description>Stack-based buffer overflow in the PCHealth system in the Help and Support Center function in Windows XP and Windows Server 2003 allows remote attackers to execute arbitrary code via a long query in an HCP URL.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-18T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2005-01-20T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-06-02T12:00:00.000-04:00" comment="Added product">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-06-08T03:17:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-29T06:49:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Software section">
          <criteria operator="AND" comment="Windows XP 32-bit edition is installed">
            <criterion comment="Windows XP is installed" test_ref="oval:org.mitre.oval:tst:2838"/>
            <criterion comment="32-Bit version of Windows is installed" test_ref="oval:org.mitre.oval:tst:2748"/>
          </criteria>
          <criterion comment="the version of itircl.dll is less than 5.2.3790.80" test_ref="oval:org.mitre.oval:tst:2792"/>
          <criterion negate="true" comment="Patch KB825119 Installed" test_ref="oval:org.mitre.oval:tst:2791"/>
        </criteria>
        <criteria operator="AND" comment="Configuration section">
          <criterion comment="the HCP Protocol is registered" test_ref="oval:org.mitre.oval:tst:1477"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3881" version="3" class="vulnerability">
      <metadata>
        <title>GDI+ JPEG Parsing Engine Buffer Overflow (Office XP,SP2)</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Office XP SP2</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0200"/>
        <description>Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-04T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2004-10-06T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-10-20T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-02-10T12:00:00.000-04:00" comment="modified wft-496 - corrected registry path check">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2005-02-11T09:31:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-02T09:01:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Changed criteria to remove test for KB832332.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Microsoft Office XP Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:375"/>
        <criterion comment="the version of mso.dll is less than 10.0.6714.0" negate="false" test_ref="oval:org.mitre.oval:tst:463"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:388" version="4" class="vulnerability">
      <metadata>
        <title>IE v6.0 Cross Domain Verification via Cached Methods Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1254" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1254"/>
        <description>Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information on the local system or in other domains, and possibly execute code, via cached methods and objects, aka "Cross Domain Verification via Cached Methods."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-27T05:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-03-09T05:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="Changed IE registry test to wrt-18">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:33.521-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:17.188-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="the version of mshtml.dll is less than 6.0.2722.900" negate="false" test_ref="oval:org.mitre.oval:tst:2884"/>
        <criterion comment="the patch q328970 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3117"/>
        <criterion comment="the patch q324929 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3116"/>
        <criterion comment="the patch q810847 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3115"/>
        <criterion comment="the patch q813489 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3114"/>
        <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3872" version="7" class="vulnerability">
      <metadata>
        <title>IE v6.0,SP1 (Server 2003) SSL Cached Content Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0845" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0845"/>
        <description>Internet Explorer 5.01, 5.5, and 6 does not properly cache SSL content, which allows remote attackers to obtain information or spoof content via a web site with the same host name as the target web site, whose content is cached and reused when the user visits the target web site.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-26T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-27T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-17T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-05-10T12:00:00.000-04:00" comment="modified wrt-51 - Comment updated to indicate IE 6.">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-05-11T05:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-06-23T12:49:00.000-04:00" comment="modified obj:490 - Chagned the pattern match operation to equals since there was no need for a regular expression.">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-06-23T11:35:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:23.055-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2621. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T20:21:00.819-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T20:22:30.416-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:27.836-05:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.853-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:53:29.836-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:14.863-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:46.190-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:17.096-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6  for Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2801"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.3790.219" negate="false" test_ref="oval:org.mitre.oval:tst:535"/>
          <criterion comment="the patch kb834707 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:534"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="Users not saving encrypted pages to disk  (DisableCachingOfSSLPages)" negate="false" test_ref="oval:org.mitre.oval:tst:588"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:387" version="2" class="vulnerability">
      <metadata>
        <title>C-Media Sound Driver Userspace Access Vulnerability II</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Linux kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0699" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0699"/>
        <description>The C-Media PCI sound driver in Linux before 2.4.21 does not use the get_user function to access userspace, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0700.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-26T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:35.221-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:28.596-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="kernel version is less than 2.4.20-19.9" negate="false" test_ref="oval:org.mitre.oval:tst:2709"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:386" version="2" class="vulnerability">
      <metadata>
        <title>Lunix Kernel NFSv3 Procedure Kernel Panic Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Linux kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0619" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0619"/>
        <description>Integer signedness error in the decode_fh function of nfs3xdr.c in Linux kernel before 2.4.21 allows remote attackers to cause a denial of service (kernel panic) via a negative size value within XDR data of an NFSv3 procedure call.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-25T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:42.165-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:28.400-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="kernel version is less than 2.4.20-13.9" negate="false" test_ref="oval:org.mitre.oval:tst:2742"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3851" version="10" class="vulnerability">
      <metadata>
        <title>IE AbusiveParent Vulnerability (Windows 2000)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1319" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1319"/>
        <description>The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a window, opening a child page whose target is the window with the given name, then injecting the script from the parent into the child using execScript, as demonstrated by "AbusiveParent" in Internet Explorer 6.0.2900.2180.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-02-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </submitted>
            <status_change date="2005-02-11T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-03-02T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-23T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-06-02T12:00:00.000-04:00" comment="Added product">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-06-08T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2005-06-17T12:00:00.000-04:00" comment="modified cmp-1106 - Replaced the test that checks for the service pack level, instead of checking for sp4 or ealier (did not check for GOLD edition) it is now negating the test that checks for sp5 for later.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2005-07-27T10:37:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:823: Removed HKEY_LOCAL_MACHINE\ from the key, as it's specified as the hive.  Implemented by Harvey Rubinovitz." date="2007-01-22T00:37:00.710-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T00:38:35.456-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:27.616-05:00">ACCEPTED</status_change>
            <modified comment="Corrected and tightened regular expression in ste:2610" date="2010-12-02T11:46:00.307-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-12-02T11:47:27.448-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:55.878-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:26.856-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:54.880-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:var:206 - modified vulnerabilities ofÂ MS Visual C++ Â  (winsxs folder checks were modified)" date="2014-04-17T13:09:00.881-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-04-17T13:11:50.268-04:00">INTERIM</status_change>
            <status_change date="2014-05-05T04:00:25.420-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 (sp4 or earlier) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 5 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2790"/>
        </criteria>
        <criterion comment="the version of dhtmled.ocx is less than 6.1.0.9232" negate="false" test_ref="oval:org.mitre.oval:tst:427"/>
        <criterion comment="the patch kb891781 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:1151"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:385" version="2" class="vulnerability">
      <metadata>
        <title>Linux Kernel Bridge Forwarding Table Spoof Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Linux kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0552" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0552"/>
        <description>Linux 2.4.x allows remote attackers to spoof the bridge Forwarding table via forged packets whose source addresses are the same as the target.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-26T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:49.252-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:28.196-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="kernel version is less than 2.4.20-19.9" negate="false" test_ref="oval:org.mitre.oval:tst:2709"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:384" version="2" class="vulnerability">
      <metadata>
        <title>STP Protocol Length Verification Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Linux kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0551" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0551"/>
        <description>The STP protocol implementation in Linux 2.4.x does not properly verify certain lengths, which could allow attackers to cause a denial of service.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-26T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:41.192-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:27.991-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="kernel version is less than 2.4.20-19.9" negate="false" test_ref="oval:org.mitre.oval:tst:2709"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3831" version="1" class="vulnerability">
      <metadata>
        <title>Buffer Overflow in ntp Daemon via readvar</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 8</platform>
          <product>sendfilev()</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0414" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0414"/>
        <description>Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long readvar argument.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-04-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-04-20T12:13:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-05-11T05:41:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="OR" comment="Solaris 7 or 8 installed">
            <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          </criteria>
          <criterion comment="NTP daemon - Usr (SUNWntpu) installed" negate="false" test_ref="oval:org.mitre.oval:tst:379"/>
          <criterion comment="Patch 109409-04 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:378"/>
          <criterion comment="Patch 109667-04 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:377"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="xntpd running" negate="false" test_ref="oval:org.mitre.oval:tst:376"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3824" version="5" class="vulnerability">
      <metadata>
        <title>Win2k IP Validation Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0048" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0048"/>
        <description>Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IP packets with malformed options, aka the "IP Validation Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-04-22T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Matthew Burton</contributor>
            </submitted>
            <status_change date="2005-04-27T12:06:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-22T12:38:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-11-06T04:13:00.000-04:00" comment="Replaced reference to var:200 with reference to var:201 in obj:588 since tcpip.sys is located in \system32\drivers and not \system32.  Modified by Harvey Rubinovitz">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-11-21T04:13:00.000-04:00">INTERIM</status_change>
            <status_change date="2007-01-03T13:53:55.361-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:17.624-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:54.172-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="Win2K/XP/2003 service pack 4 (or earlier) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1247"/>
        <criterion comment="the version of Tcpip.sys is less than 5.0.2195.7035" negate="false" test_ref="oval:org.mitre.oval:tst:1012"/>
        <criterion comment="the patch KB893066 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2353"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:382" version="1" class="vulnerability">
      <metadata>
        <title>gzip Directory Traversal Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>gzip</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1228" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1228"/>
        <description>Directory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote attackers to write to arbitrary directories via a .. (dot dot) in the original filename within a compressed file.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-06-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-06-22T12:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="gzip RPM earlier than 0:1.3.3-12rhel3" negate="false" test_ref="oval:org.mitre.oval:tst:2667"/>
        </criteria>
        <criteria comment="Configuration section" operator="OR">
          <criterion comment="/usr/bin/gzip is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2666"/>
          <criterion comment="/usr/bin/gunzip is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2665"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3817" version="4" class="vulnerability">
      <metadata>
        <title>URL Parsing Memory Corruption Vulnerability (IE6 for XP,SP2)</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0554" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0554"/>
        <description>Buffer overflow in the URL processor of Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL with a long hostname, aka "URL Parsing Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-05-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-05-11T05:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-22T12:38:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:583: Removed blank after the word Filelist in the Key.  Modified by Harvey Rubinovitz." date="2007-01-22T00:06:00.366-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T00:07:40.831-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:27.412-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:36.670-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:17.037-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6.0 Installed XP SP2" negate="false" test_ref="oval:org.mitre.oval:tst:2403"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2900.2627" negate="false" test_ref="oval:org.mitre.oval:tst:768"/>
          <criterion comment="the patch kb890923  is installed (XP SP2 Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:767"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3810" version="3" class="vulnerability">
      <metadata>
        <title>GDI+ JPEG Parsing Engine Buffer Overflow (Project 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Project Professional 2003</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0200"/>
        <description>Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-09-24T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2004-09-29T12:00:00.000-04:00">DRAFT</status_change>
            <modified date="2004-09-30T12:00:00.000-04:00" comment="Changed affected platforms">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2004-10-20T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-02-10T12:00:00.000-04:00" comment="modified wft-495 - corrected registry path check for .dll file">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2005-02-11T09:31:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-02T09:01:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Changed criteria to remove test for KB838344.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Project Professional 2003 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:382"/>
        <criterion comment="the version of gdiplus.dll is less than 6.0.3264.0" negate="false" test_ref="oval:org.mitre.oval:tst:438"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:380" version="2" class="vulnerability">
      <metadata>
        <title>Insecure Design of the STP Protocol</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Linux kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0550" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0550"/>
        <description>The STP protocol, as enabled in Linux 2.4.x, does not provide sufficient security by design, which allows attackers to modify the bridge topology.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-26T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:59.904-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:27.798-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="kernel version is less than 2.4.20-19.9" negate="false" test_ref="oval:org.mitre.oval:tst:2709"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:38" version="7" class="vulnerability">
      <metadata>
        <title>Windows 2000 Group Policy Bypass</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0051" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0051"/>
        <description>Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-05-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified date="2005-09-26T10:55:00.000-04:00" comment="modified wft-212 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-10-31T04:13:00.000-04:00" comment="Replaced reference to obj:1374 with reference to obj:1550 since it references Product\Options and not ProductOptions in the controlset registry key.  Modified by Harvey Rubinovitz">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-11-21T04:13:00.000-04:00">INTERIM</status_change>
            <status_change date="2007-01-03T13:53:55.181-05:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2884" date="2010-11-29T16:14:00.692-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:38.887-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:55.184-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:04.695-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:52.916-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 (domain controller) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="this is an NT Server (domain controller)" negate="false" test_ref="oval:org.mitre.oval:tst:3035"/>
        </criteria>
        <criterion comment="the version of srvsvc.dll is less than 5.0.2195.4980" negate="false" test_ref="oval:org.mitre.oval:tst:3034"/>
        <criterion comment="Patch Q318593 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3033"/>
        <criterion comment="Win2K/XP/2003 service pack 3 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:3079"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3799" version="1" class="vulnerability">
      <metadata>
        <title>Apache Web Server Multiple Module Local Buffer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0542" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0542"/>
        <description>Multiple stack-based buffer overflows in (1) mod_alias and (2) mod_rewrite for Apache before 1.3.29 allow attackers to create configuration files to cause a denial of service (crash) or execute arbitrary code via a regular expression with more than 9 captures.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-19T03:08:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2004-10-20T02:35:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="OR" comment="Solaris 8 or 9 installed">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          </criteria>
          <criterion comment="Patch 113146-03 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:383"/>
          <criterion comment="Patch 116973-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:656"/>
          <criterion comment="Apache (SUNWapchu) installed" negate="false" test_ref="oval:org.mitre.oval:tst:653"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="Apache running (httpd)" negate="false" test_ref="oval:org.mitre.oval:tst:654"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3773" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.5,SP2 Drag-and-Drop Code Execution Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0839" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0839"/>
        <description>Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by "wottapoop.html".</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-18T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-01-20T02:31:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:42:00.000-04:00" comment="modified wft-562 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:38.677-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:16.955-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
          <criterion comment="the version of mshtml.dll is less than 5.50.4945.2800" negate="false" test_ref="oval:org.mitre.oval:tst:384"/>
          <criterion comment="the patch kb834707 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:855"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition class="vulnerability" id="oval:org.mitre.oval:def:377" version="2">
      <metadata>
        <title>Microsoft .NET Framework 2.0 Cross-Site Scripting Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft .NET Framework</product>
        </affected>
        <reference ref_id="CVE-2006-3436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3436" source="CVE"/>
        <description>Cross-site scripting (XSS) vulnerability in Microsoft .NET Framework 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "ASP.NET controls that set the AutoPostBack property to true".</description>
        <oval_repository>
          <dates>
            <submitted date="2006-10-11T05:29:41">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-10-13T14:55:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-31T19:35:37.503-05:00">INTERIM</status_change>
            <status_change date="2006-11-21T21:27:46.838-05:00">ACCEPTED</status_change>
            <modified comment="Changed obj:4 to use var:1061 instead of the duplicate var:998" date="2007-07-18T13:46:00.709-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-07-18T13:47:55.255-04:00">INTERIM</status_change>
            <status_change date="2007-08-02T14:47:15.981-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft .NET Framework 2.0 (Original RTM or later) is installed" definition_ref="oval:org.mitre.oval:def:1934"/>
        <criterion comment="the version of Aspnet_filter.dll is less than 2.0.50727.101" test_ref="oval:org.mitre.oval:tst:42"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1934" version="6" class="inventory">
      <metadata>
        <title>Microsoft .NET Framework 2.0 (Original RTM or later) is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <product>Microsoft .NET Framework 2.0</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:.net_framework:2.0"/>
        <description>Microsoft .NET Framework 2.0 (Original RTM or later) is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-11T18:34:24">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </submitted>
            <status_change date="2007-07-16T09:52:05.115-04:00">DRAFT</status_change>
            <status_change date="2007-08-01T22:26:15.137-04:00">INTERIM</status_change>
            <status_change date="2007-08-20T08:04:39.577-04:00">ACCEPTED</status_change>
            <status_change date="2007-09-13T11:07:56.103-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1934 - Updated to check registry keys instead of version of DLL." date="2011-01-13T14:14:00.592-05:00">
              <contributor organization="The MITRE Corporation">Nate Przybyszewski</contributor>
            </modified>
            <status_change date="2011-01-13T14:16:15.689-05:00">INTERIM</status_change>
            <status_change date="2011-01-31T04:00:14.357-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1934 - MS Oct 2013 bulletin ms13-081-n-082 (.Net 2 inventory CPE added)" date="2013-10-17T11:45:00.437-04:00">
              <contributor organization="SecPod Technologies">Sharath S</contributor>
            </modified>
            <status_change date="2013-10-17T11:49:24.854-04:00">INTERIM</status_change>
            <status_change date="2013-11-11T04:02:02.396-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Is the Microsoft .NET Framework 2.0 installed" test_ref="oval:org.mitre.oval:tst:42091"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3768" version="1" class="vulnerability">
      <metadata>
        <title>Windows ME Program Group Converter Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <product>Program Group Converter</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0572" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0572"/>
        <description>Buffer overflow in the Windows Program Group Converter (grpconv.exe) may allow remote attackers to execute arbitrary code via a shell: URL with a long filename and a .grp extension, which is not properly handled when the shell capability launches grpconv.exe.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-14T03:38:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-10-20T02:35:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows ME Installed" negate="false" test_ref="oval:org.mitre.oval:tst:831"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3752" version="5" class="vulnerability">
      <metadata>
        <title>DHTML Object Memory Corruption Vulnerability (IE6,SP1)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0553" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0553"/>
        <description>Race condition in the memory management routines in the DHTML object processor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail, aka "DHTML Object Memory Corruption Vulnerability".</description>
        <oval_repository>
          <dates>
            <submitted date="2005-05-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-05-11T05:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-22T12:38:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-06-23T12:49:00.000-04:00" comment="modified obj:1340 - Set xsi:nil to true on the name entity as we are only concerned with the existance of the key itself.">
              <contributor organization="Centennial Software">Jason Spashett</contributor>
            </modified>
            <status_change date="2006-06-23T12:49:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:22.554-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:46:05.298-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:27.126-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:35.801-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:16.864-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
          <criteria operator="OR" comment="a vulnerable version of mshtml.dll exisits GDR/QFE">
            <criterion comment="machine has followed the GDR update path and mshtml.dll is less than 6.0.2800.1498" negate="false" test_ref="oval:org.mitre.oval:tst:2338"/>
            <criterion comment="machine has followed the QFE update path and mshtml.dll is less than 6.0.2800.1499" negate="false" test_ref="oval:org.mitre.oval:tst:2337"/>
          </criteria>
          <criterion comment="the patch kb890923 is installed (XP Win2K Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2336"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:374" version="6" class="vulnerability">
      <metadata>
        <title>HTML Help ActiveX Control Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>HTML Help ActiveX Control</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0693" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0693"/>
        <description>Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via (1) a long parameter to the Alink function, or (2) script containing a long argument to the showHelp function.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-18T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if active scripting is enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-07-03T12:56:00.000-04:00" comment="Added negate=true attribute to criteria sub-block to fix conversion error from OVAL 4.2 to OVAL 5.0">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-07-03T12:56:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:22.284-04:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:12.667-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:17.857-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:29.833-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:52.166-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="the version of hhctrl.ocx is less than 5.2.3669.0" negate="false" test_ref="oval:org.mitre.oval:tst:2676"/>
          <criterion comment="the version of hhsetup.dll is less than 5.2.3644.0" negate="false" test_ref="oval:org.mitre.oval:tst:2675"/>
          <criterion comment="the version of itircl.dll is less than 5.2.3644.0" negate="false" test_ref="oval:org.mitre.oval:tst:2674"/>
          <criterion comment="the version of itss.dll is less than 5.2.3644.0" negate="false" test_ref="oval:org.mitre.oval:tst:2673"/>
          <criterion comment="the patch q323255 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2672"/>
          <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed" negate="true">
            <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
            <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3084"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="active scripting is enabled">
            <criteria operator="AND" comment="current user settings are being used and active scripting is enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and active scripting is enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:373" version="6" class="vulnerability">
      <metadata>
        <title>IIS AddHeader Large Header Denial of Service</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0225" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0225"/>
        <description>The ASP function Response.AddHeader in Microsoft Internet Information Server (IIS) 4.0 and 5.0 does not limit memory requests when constructing headers, which allow remote attackers to generate a large header to cause a denial of service (memory consumption) with an ASP page.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified date="2005-03-07T12:00:00.000-04:00" comment="modified wrt-222 - changed pattern match">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-03-09T07:55:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-29T07:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2878" date="2010-11-29T16:13:00.904-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:04.835-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:54.861-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:23.801-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:51.794-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="IIS major version equals 5" negate="false" test_ref="oval:org.mitre.oval:tst:3081"/>
        <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
        <criterion comment="File %windir%\system32\inetsrv\asp.dll version is less than 5.0.2195.6672" negate="false" test_ref="oval:org.mitre.oval:tst:2988"/>
        <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
        <criterion comment="SP4 or later Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3073"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:372" version="4" class="vulnerability">
      <metadata>
        <title>IE v6.0,SP1 HijackClick Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0823" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0823"/>
        <description>Internet Explorer 6 SP1 and earlier allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by calling the window.moveBy method, aka HijackClick, a different vulnerability than CVE-2003-1027.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-12-18T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for specific Windows operating systems.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 6 sp1 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-01-29T12:00:00.000-04:00" comment="Added Windows XP 64-bit to the list of affected platforms">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:46:00.655-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:26.571-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:38.266-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:16.778-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2800.1276" negate="false" test_ref="oval:org.mitre.oval:tst:2688"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:371" version="3" class="vulnerability">
      <metadata>
        <title>IE v5.5,SP2 HijackClick Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0823" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0823"/>
        <description>Internet Explorer 6 SP1 and earlier allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by calling the window.moveBy method, aka HijackClick, a different vulnerability than CVE-2003-1027.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-12-18T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for specific Windows operating systems.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 5.5 sp2 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:38.391-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:16.716-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
          <criterion comment="the version of mshtml.dll is less than 5.50.4934.1600" negate="false" test_ref="oval:org.mitre.oval:tst:2689"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:370" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP4 HijackClick Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0823" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0823"/>
        <description>Internet Explorer 6 SP1 and earlier allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by calling the window.moveBy method, aka HijackClick, a different vulnerability than CVE-2003-1027.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-12-18T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for Windows 2000 sp4 installed.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 5.01 sp4 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:39.916-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:26.325-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:38.334-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:16.646-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3810.1700" negate="false" test_ref="oval:org.mitre.oval:tst:2690"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:37" version="1" class="vulnerability">
      <metadata>
        <title>Windows NT IIS Directory Traversal Command Execution (Test 1)</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0333" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0333"/>
        <description>Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and "\" characters twice.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="IIS 4.0 Major Version" negate="false" test_ref="oval:org.mitre.oval:tst:3099"/>
        <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
        <criterion comment="this is an NT Terminal Server" negate="true" test_ref="oval:org.mitre.oval:tst:3097"/>
        <criterion comment="File %windir%\system32\inetsrv\ism.dll version is less than 4.2.764.1" negate="false" test_ref="oval:org.mitre.oval:tst:3039"/>
        <criterion comment="Patch Q295534 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3038"/>
        <criterion comment="Patch Q301625 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3037"/>
        <criterion comment="Patch Q319733 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3095"/>
        <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
        <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
        <criterion comment="Windows NT 4.0 Security Roll-up Package" negate="true" test_ref="oval:org.mitre.oval:tst:3036"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:369" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP3 HijackClick Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0823" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0823"/>
        <description>Internet Explorer 6 SP1 and earlier allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by calling the window.moveBy method, aka HijackClick, a different vulnerability than CVE-2003-1027.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-12-18T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for Windows 2000 sp3 installed.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 5.01 sp3 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2824. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:48:00.494-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:52:27.655-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:26.062-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:37.480-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:16.571-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3015"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3523.1700" negate="false" test_ref="oval:org.mitre.oval:tst:2693"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:368" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP2 HijackClick Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0823" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0823"/>
        <description>Internet Explorer 6 SP1 and earlier allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by calling the window.moveBy method, aka HijackClick, a different vulnerability than CVE-2003-1027.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-12-18T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for Windows 2000 sp2 installed.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 5.01 sp2 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2868. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:41:00.387-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:43:10.305-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:25.792-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:37.345-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:16.465-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3063"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3523.1700" negate="false" test_ref="oval:org.mitre.oval:tst:2693"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3677" version="1" class="vulnerability">
      <metadata>
        <title>WINS Association Context Vulnerability (64-bit Server 2003, Test 2)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Windows Internet Naming Service (WINS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1080" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1080"/>
        <description>The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port 42, aka the "Association Context Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-03T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Matthew Burton</contributor>
            </submitted>
            <status_change date="2005-01-12T12:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-02T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-23T09:25:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="AND" comment="Windows Server 2003 (excluding WinXP 64-bit, Version 2003) is installed">
            <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
            <criterion comment="this is an NT Workstation" negate="true" test_ref="oval:org.mitre.oval:tst:2703"/>
          </criteria>
          <criterion comment="the version of wins.exe is less than 5.2.3790.239" negate="false" test_ref="oval:org.mitre.oval:tst:866"/>
          <criterion comment="the patch KB870763 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:865"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="the wins service is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2405"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:367" version="7" class="vulnerability">
      <metadata>
        <title>MS FrontPage Server Extensions Chunked Encoded Request Buffer Overflow (Test 3)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft SharePoint Team Services</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0822" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0822"/>
        <description>Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-12-09T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-03-05T12:00:00.000-04:00" comment="Changed the definition to test for fp30reg.dll and fp5areg.dll instead of fp5awel.dll.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2004-09-14T09:52:00.000-04:00" comment="XP SP2 added">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2004-09-15T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-29T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2656" date="2010-11-29T16:12:00.873-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:13:01.632-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:54.513-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:21.358-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:51.402-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="OR" comment="Windows 2000, XP, or 2003 is installed">
            <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
            <criterion comment="Windows XP is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2838"/>
            <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
          </criteria>
          <criteria operator="OR" comment="a vulnerable version of fp30reg.dll or fp5areg.dll exists">
            <criterion comment="the version of fp5areg.dll is less than 10.00.4205.0000" negate="false" test_ref="oval:org.mitre.oval:tst:2679"/>
            <criterion comment="the version of fp30reg.dll is less than 10.00.4205.0000" negate="false" test_ref="oval:org.mitre.oval:tst:2678"/>
          </criteria>
          <criterion comment="Win2K/XP/2003 service pack 2 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2837"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="FrontPage Server Extensions 2002 are enabled (NT, 2K, XP)" negate="false" test_ref="oval:org.mitre.oval:tst:2677"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3657" version="1" class="vulnerability">
      <metadata>
        <title>Portable Network Graphics Library Offset Calculation Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>libpng</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1363" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1363"/>
        <description>Portable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a buffer overflow attack on the row buffers.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-09-03T04:26:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-09-08T10:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-09-22T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-10-06T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criteria operator="OR" comment="libpng or libpng-devel rpm older than 1.2.2-24, Epoch 2 OR libpng10or libpng10-devel rpm older than 1.0.13-14, Epoch 0">
          <criterion comment="libpng rpm older than 1.2.2-24, Epoch 2" negate="false" test_ref="oval:org.mitre.oval:tst:388"/>
          <criterion comment="libpng-devel rpm older than 1.2.2-24, Epoch 2" negate="false" test_ref="oval:org.mitre.oval:tst:387"/>
          <criterion comment="libpng10-devel rpm older than 1.0.13-14, Epoch 0" negate="false" test_ref="oval:org.mitre.oval:tst:386"/>
          <criterion comment="libpng10 rpm older than 1.0.13-14, Epoch 0" negate="false" test_ref="oval:org.mitre.oval:tst:385"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:364" version="7" class="vulnerability">
      <metadata>
        <title>MS FrontPage Server Extensions Chunked Encoded Request Buffer Overflow (Test 1)</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft FrontPage Server Extensions 2000</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0822" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0822"/>
        <description>Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-12-09T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-03-05T12:00:00.000-04:00" comment="Changed the definition to test for fp30reg.dll and fp4areg.dll instead of fp4awel.dll.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T10:50:00.000-04:00" comment="modified wft-114 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2005-09-27T01:22:00.000-04:00" comment="modified wft-31 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2656" date="2010-11-29T16:12:00.873-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:13:01.785-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:53.676-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:22.414-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:50.513-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="AND" comment="Windows XP (sp1 or earlier) is installed">
            <criterion comment="Windows XP is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2838"/>
            <criterion comment="Win2K/XP/2003 service pack 2 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2837"/>
          </criteria>
          <criteria operator="OR" comment="a vulnerable version of fp30reg.dll or fp4areg.dll exists">
            <criterion comment="the version of fp4areg.dll is less than 4.0.02.7523" negate="false" test_ref="oval:org.mitre.oval:tst:2681"/>
            <criterion comment="the version of fp30reg.dll is less than 4.00.02.7523" negate="false" test_ref="oval:org.mitre.oval:tst:2680"/>
          </criteria>
          <criterion comment="the patch q810217 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2707"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="FrontPage Server Extensions 2000 are enabled (2K, XP)" negate="false" test_ref="oval:org.mitre.oval:tst:2706"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3637" version="1" class="vulnerability">
      <metadata>
        <title>priocntl Directory Traversal Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>priocntl()</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1296" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1296"/>
        <description>Directory traversal vulnerability in priocntl system call in Solaris does allows local users to execute arbitrary code via ".." sequences in the pc_clname field of a pcinfo_t structure, which cause priocntl to load a malicious kernel module.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-02-01T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-02-01T08:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 7,8,or 9 installed">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
        </criteria>
        <criterion comment="Patch 106541-24 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:546"/>
        <criterion comment="Patch 108528-18 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:390"/>
        <criterion comment="Patch 112233-04 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:389"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:363" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP4 Script URLs Cross Domain Zone Restrictions Bypass</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0816" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0816"/>
        <description>Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJPU, (2) using the window.open method to load a file: URL containing Javascript, as demonstrated using WsOpenFileJPU, (3) setting the href property in the base tag for the _search window, as demonstrated using WsBASEjpu, (4) loading the search window into an Iframe, as demonstrated using WsFakeSrc, (5) caching a javascript: URL in the browser history, then accessing that URL in the same frame as the target domain, as demonstrated using WsOpenJpuInHistory, NAFjpuInHistory, BackMyParent, BackMyParent2, and RefBack, aka the "Script URLs Cross Domain" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for Windows 2000 sp4 installed.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 5.01 sp4 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:41.558-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:25.497-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:37.693-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:16.400-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3810.1700" negate="false" test_ref="oval:org.mitre.oval:tst:2690"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:362" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP3 Script URLs Cross Domain Zone Restrictions Bypass</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0816" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0816"/>
        <description>Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJPU, (2) using the window.open method to load a file: URL containing Javascript, as demonstrated using WsOpenFileJPU, (3) setting the href property in the base tag for the _search window, as demonstrated using WsBASEjpu, (4) loading the search window into an Iframe, as demonstrated using WsFakeSrc, (5) caching a javascript: URL in the browser history, then accessing that URL in the same frame as the target domain, as demonstrated using WsOpenJpuInHistory, NAFjpuInHistory, BackMyParent, BackMyParent2, and RefBack, aka the "Script URLs Cross Domain" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for Windows 2000 sp3 installed.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 5.01 sp3 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2824. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:48:00.494-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:52:28.053-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:25.208-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:37.018-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:16.335-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3015"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3523.1700" negate="false" test_ref="oval:org.mitre.oval:tst:2693"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:361" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP2 Script URLs Cross Domain Zone Restrictions Bypass</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0816" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0816"/>
        <description>Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJPU, (2) using the window.open method to load a file: URL containing Javascript, as demonstrated using WsOpenFileJPU, (3) setting the href property in the base tag for the _search window, as demonstrated using WsBASEjpu, (4) loading the search window into an Iframe, as demonstrated using WsFakeSrc, (5) caching a javascript: URL in the browser history, then accessing that URL in the same frame as the target domain, as demonstrated using WsOpenJpuInHistory, NAFjpuInHistory, BackMyParent, BackMyParent2, and RefBack, aka the "Script URLs Cross Domain" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for Windows 2000 sp2 installed.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 5.01 sp2 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2868. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:41:00.387-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:43:09.057-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:24.823-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:36.801-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:16.254-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3063"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3523.1700" negate="false" test_ref="oval:org.mitre.oval:tst:2693"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3606" version="1" class="vulnerability">
      <metadata>
        <title>Sendmail Ruleset Parsing Buffer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>Sendmail</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0681" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0681"/>
        <description>A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-12T12:26:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2004-10-13T01:15:00.000-04:00">DRAFT</status_change>
          </dates>
          <status>INTERIM</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Software section">
          <criterion comment="Sendmail - root (SUNWsndmr) installed" test_ref="oval:org.mitre.oval:tst:608"/>
          <criteria operator="OR" comment="Solaris 7,8,or 9 installed">
            <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="Solaris 7 Installed" test_ref="oval:org.mitre.oval:tst:3045"/>
            <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          </criteria>
          <criterion negate="true" comment="Patch 107684-11 or later installed" test_ref="oval:org.mitre.oval:tst:392"/>
          <criterion negate="true" comment="Patch 110615-11 or later installed" test_ref="oval:org.mitre.oval:tst:391"/>
          <criterion negate="true" comment="Patch 113575-05 or later installed" test_ref="oval:org.mitre.oval:tst:464"/>
        </criteria>
        <criteria operator="AND" comment="Configuration section">
          <criterion comment="Sendmail running" test_ref="oval:org.mitre.oval:tst:583"/>
          <criterion comment="Sendmail has recipient or final rulesets" test_ref="oval:org.mitre.oval:tst:393"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3603" version="1" class="vulnerability">
      <metadata>
        <title>Mozilla, Firefox, Thunderbird Security Lock Icon Spoof Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0761" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0761"/>
        <description>Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote attackers to use certain redirect sequences to spoof the security lock icon that makes a web page appear to be encrypted.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-19T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-24T03:40:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 8 or 9 installed">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
        </criteria>
        <criteria operator="OR" comment="Mozilla components (any SUNWmoznav/SUNWmozmail) installed">
          <criterion comment="Mozilla (SUNWmoznav) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1070"/>
          <criterion comment="Mozilla Mail (SUNWmozmail) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1069"/>
        </criteria>
        <criterion comment="Patch 117765-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1068"/>
        <criterion comment="Patch 117767-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1067"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3601" version="1" class="vulnerability">
      <metadata>
        <title>Runtime linker, ld.so.1 LD_PRELOAD Envvar Buffer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>Solaris Runtime Linker</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0609" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0609"/>
        <description>Stack-based buffer overflow in the runtime linker, ld.so.1, on Solaris 2.6 through 9 allows local users to gain root privileges via a long LD_PRELOAD environment variable.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-12-29T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-12T12:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-02T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-23T09:25:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 7,8,or 9 installed">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
        </criteria>
        <criteria operator="OR" comment="Solaris 9 OR Patch 106950-14+ OR Patch 109147-07+ installed">
          <criterion comment="Patch 106950-14 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:397"/>
          <criterion comment="Patch 109147-07 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:396"/>
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
        </criteria>
        <criterion comment="Patch 106950-14 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:397"/>
        <criterion comment="Patch 109147-07 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:396"/>
        <criterion comment="Patch 112963-09 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:395"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:360" version="2" class="vulnerability">
      <metadata>
        <title>Sun Java System Access Manager Local Authentication Bypass Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 8</platform>
          <product>Access Manager</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0531" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0531"/>
        <description>Unspecified vulnerability in Sun Java System Access Manager 7.0 allows local users logged in as "root" to bypass authentication and gain top-level administrator privileges via the amadmin CLI tool.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:52:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:45.919-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:53.570-04:00">ACCEPTED</status_change>
            <modified comment="Added title. Implemented by Jon Baker of The MITRE Corporation." date="2007-02-13T14:50:00.385-05:00">
              <contributor organization="Security-Database">Nabil Ouchn</contributor>
            </modified>
            <status_change date="2007-02-13T14:52:25.407-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:17.664-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="SPARC" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
        <criterion comment="Sun Java System Access Manager 7 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3551"/>
        <criterion comment="Patch 120954-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:4067"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:359" version="5" class="vulnerability">
      <metadata>
        <title>IE v6.0,SP1 (Server 2003)  Function Pointer Override Cross Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0815" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0815"/>
        <description>Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1) modifying the createTextRange method and using CreateLink, as demonstrated using LinkillerSaveRef, LinkillerJPU, and Linkiller, or (2) modifying the createRange method and using the FIND dialog to select text, as demonstrated using Findeath, aka the "Function Pointer Override Cross Domain" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for Windows Server 2003.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 6 sp1 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-01-29T12:00:00.000-04:00" comment="Added Windows XP 64-bit, Version 2003 and Windows Server 2003 64-Bit to the list of affected platforms">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-05-10T12:00:00.000-04:00" comment="modified wrt-51 - Comment updated to indicate IE 6.">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-05-11T05:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2621. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T20:21:00.819-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T20:22:34.562-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:24.477-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:52.530-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:16.175-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6  for Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2801"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.3790.94" negate="false" test_ref="oval:org.mitre.oval:tst:2686"/>
          <criterion comment="the patch q824145 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2685"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3586" version="5" class="vulnerability">
      <metadata>
        <title>IE6.0,SP1 Security Zone Restriction Bypass Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0054" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0054"/>
        <description>Internet Explorer 5.01, 5.5, and 6 allows remote attackers to spoof a less restrictive security zone and execute arbitrary code via an HTML page containing URLs that contain hostnames that have been double hex encoded, which are decoded twice to generate a malicious hostname, aka the "URL Decoding Zone Spoofing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-03-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-03-23T08:09:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-13T12:15:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-05-04T12:33:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed test to check kb867282.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:46:01.535-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:24.192-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:57.774-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:16.107-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
          <criteria operator="OR" comment="a vulnerable version of mshtml.dll exisits GDR/QFE">
            <criterion comment="machine has followed the GDR update path and mshtml.dll is less than 6.0.2800.1491" negate="false" test_ref="oval:org.mitre.oval:tst:1329"/>
            <criterion comment="machine has followed the QFE update path and mshtml.dll is less than 6.0.2800.1492" negate="false" test_ref="oval:org.mitre.oval:tst:1328"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3585" version="6" class="vulnerability">
      <metadata>
        <title>Web View Remote Code Execution Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Windows Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1191" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1191"/>
        <description>The Web View DLL (webvw.dll), as used in Windows Explorer on Windows 2000 systems, does not properly filter an apostrophe ("'") in the author name in a document, which allows attackers to execute arbitrary script via extra attributes when Web View constructs a mailto: link for the preview pane when the user selects the file.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-05-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2005-06-01T12:00:00.000-04:00">DRAFT</status_change>
            <modified date="2005-06-17T12:00:00.000-04:00" comment="modified cmp-1106 - Replaced the test that checks for the service pack level, instead of checking for sp4 or ealier (did not check for GOLD edition) it is now negating the test that checks for sp5 for later.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2005-07-27T10:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected and tightened regular expression in ste:2610" date="2010-12-02T11:46:00.307-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-12-02T11:47:28.111-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:53.232-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:53.976-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:50.093-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="AND" comment="Windows 2000 (sp4 or earlier) is installed">
            <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
            <criterion comment="Win2K/XP/2003 service pack 5 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2790"/>
          </criteria>
          <criterion comment="the version of webvw.dll is less than 5.0.3900.7036" negate="false" test_ref="oval:org.mitre.oval:tst:400"/>
          <criterion comment="the patch KB894320 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:399"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="Webview is  Enabled" negate="false" test_ref="oval:org.mitre.oval:tst:398"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3582" version="2" class="vulnerability">
      <metadata>
        <title>License Logging Service Vulnerability (Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Data Access Components 2.8</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0050" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0050"/>
        <description>The License Logging service for Windows NT Server, Windows 2000 Server, and Windows Server 2003 does not properly validate the length of messages, which leads to an "unchecked buffer" and allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, aka the "License Logging Service Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-03-29T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2005-03-29T11:25:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-13T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-05-04T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-06-02T12:00:00.000-04:00" comment="Corrected Windows Server 2003 test logic">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2005-06-08T03:17:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-29T06:49:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
          <criterion comment="the patch kb885834 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2477"/>
          <criterion comment="the version of Llssrv.exe is less than 5.2.3790.242" negate="false" test_ref="oval:org.mitre.oval:tst:401"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="license logging service is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2475"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:358" version="1" class="vulnerability">
      <metadata>
        <title>cpio Race Condition</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>cpio</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1111" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1111"/>
        <description>Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cpio after the decompression is complete.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-08T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-08-09T07:56:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-08-24T09:56:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="cpio rpm is older than 0:2.5-4.RHEL3" negate="false" test_ref="oval:org.mitre.oval:tst:2683"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/bin/cpio is executable by all" negate="false" test_ref="oval:org.mitre.oval:tst:2682"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3573" version="5" class="vulnerability">
      <metadata>
        <title>Microsoft Data Access Components 2.1 Remote Data Services Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 95</platform>
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows NT</platform>
          <product>Microsoft Data Access Components 2.1</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1142" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1142"/>
        <description>Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-08-24T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2004-08-25T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-09-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-29T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-02-28T12:00:00.000-04:00" comment="removed the test for windows NT and added a test for Microsoft Data Access Components 2.1 since this definition is dependent on the Microsoft Data Access Components version and not the platform">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2005-03-02T08:52:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-23T08:09:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed title." date="2007-03-02T18:58:00.105-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-03-02T18:59:08.122-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:17.458-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.220-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:54:19.864-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:14.142-05:00">ACCEPTED</status_change>
            <modified comment="References registry value for Common Files directory due to multilingual support" date="2008-04-14T11:07:00.270-04:00">
              <contributor organization="GFI Software">Clifford Farrugia</contributor>
            </modified>
            <status_change date="2008-04-14T12:27:04.626-04:00">INTERIM</status_change>
            <status_change date="2008-05-05T04:00:20.879-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Microsoft Data Access Components 2.1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:403"/>
        <criterion comment="the version of msadco.dll is less than 2.12.5118.0" negate="false" test_ref="oval:org.mitre.oval:tst:402"/>
        <criterion comment="Patch Q329414 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2715"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:357" version="4" class="vulnerability">
      <metadata>
        <title>IE v6.0,SP1 Function Pointer Override Cross Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0815" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0815"/>
        <description>Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1) modifying the createTextRange method and using CreateLink, as demonstrated using LinkillerSaveRef, LinkillerJPU, and Linkiller, or (2) modifying the createRange method and using the FIND dialog to select text, as demonstrated using Findeath, aka the "Function Pointer Override Cross Domain" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for specific Windows operating systems.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 6 sp1 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-01-29T12:00:00.000-04:00" comment="Added Windows XP 64-bit to the list of affected platforms">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:46:03.716-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:23.868-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:52.361-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:16.038-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2800.1276" negate="false" test_ref="oval:org.mitre.oval:tst:2688"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3567" version="1" class="vulnerability">
      <metadata>
        <title>Patches Disable Basic Security Module Auditing Functionality</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <product>Basic Security Module</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1358" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1358"/>
        <description>The patches (1) 114332-08 and (2) 114929-06 for Sun Solaris 9 disable the auditing functionality of the Basic Security Module (BSM), which allows attackers to avoid having their activity logged.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-04-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-04-20T12:13:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-05-11T05:41:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="Patch 114332-08 installed" negate="false" test_ref="oval:org.mitre.oval:tst:406"/>
          <criterion comment="Patch 114332-10 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:405"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/etc/system has BSM enabled" negate="false" test_ref="oval:org.mitre.oval:tst:404"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:356" version="3" class="vulnerability">
      <metadata>
        <title>IE v5.5,SP2 Function Pointer Override Cross Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0815" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0815"/>
        <description>Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1) modifying the createTextRange method and using CreateLink, as demonstrated using LinkillerSaveRef, LinkillerJPU, and Linkiller, or (2) modifying the createRange method and using the FIND dialog to select text, as demonstrated using Findeath, aka the "Function Pointer Override Cross Domain" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for specific Windows operating systems.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 5.5 sp2 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:52.425-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:15.970-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
          <criterion comment="the version of mshtml.dll is less than 5.50.4934.1600" negate="false" test_ref="oval:org.mitre.oval:tst:2689"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3556" version="8" class="vulnerability">
      <metadata>
        <title>Microsoft .NET Framework v1.1 Security Bypass</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft .NET Framework</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0847"/>
        <description>The Microsoft .NET forms authentication capability for ASP.NET allows remote attackers to bypass authentication for .aspx files in restricted directories via a request containing a (1) "\" (backslash) or (2) "%5C" (encoded backslash), aka "Path Validation Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-03-31T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Matthew Burton</contributor>
            </submitted>
            <status_change date="2005-04-12T08:26:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-27T12:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Set xsi:nil to true on the name of registry_object obj:365.  Implemented by Harvey Rubinovitz." date="2007-01-21T23:31:00.108-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-21T23:33:34.196-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:23.595-05:00">ACCEPTED</status_change>
            <modified comment="Corrected missing registry key in obj:364 and corrected ste:384 to check for a value of 1. Implemented by Jon Baker of The MITRE Corporation." date="2007-05-07T09:34:00.400-04:00">
              <contributor organization="GFI Software">Daniel Tarnu</contributor>
            </modified>
            <status_change date="2007-05-07T11:07:53.475-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:44.474-04:00">ACCEPTED</status_change>
            <modified comment="Changed tst:410 to use obj:1808 to properly check for the .net 1.1 version of System.web.dll" date="2007-07-18T13:37:00.377-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-07-18T13:39:03.515-04:00">INTERIM</status_change>
            <modified comment="Changed tst:408 to use obj:1808 to properly check for the .net 1.1 version of System.web.dll" date="2007-07-18T13:37:00.126-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-08-02T14:47:15.833-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.747-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:55:08.118-04:00">INTERIM</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.295-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.970-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-11-13T12:01:13.752-05:00">ACCEPTED</status_change>
            <modified comment="Corrected affected element list to include .NET Framework" date="2008-04-14T11:06:00.975-04:00">
              <contributor organization="Secure Elements, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2008-04-14T11:07:28.967-04:00">INTERIM</status_change>
            <status_change date="2008-05-05T04:00:20.234-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:tst:412 - Updated to check registry keys instead of version of DLL." date="2011-01-13T14:14:00.592-05:00">
              <contributor organization="The MITRE Corporation">Nate Przybyszewski</contributor>
            </modified>
            <status_change date="2011-01-13T14:16:15.041-05:00">INTERIM</status_change>
            <status_change date="2011-01-31T04:00:14.968-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Is the Microsoft .NET Framework 1.1 installed" negate="false" test_ref="oval:org.mitre.oval:tst:412"/>
        <criteria operator="OR" comment="A vulnerable version of Microsoft .NET Framework v1.1 is installed.">
          <criteria operator="AND" comment="A vulnerable version of Microsoft .NET Framework v1.1 (SP 1) is installed.">
            <criterion comment="Is Service Pack 1 for Microsoft .NET Framework 1.1 installed" negate="false" test_ref="oval:org.mitre.oval:tst:411"/>
            <criterion comment="the version of System.web.dll is less than 1.1.4322.2037" negate="false" test_ref="oval:org.mitre.oval:tst:410"/>
            <criterion comment="Is the KB886903 patch installed for Microsoft .NET Framework v1.1 sp 1?" negate="true" test_ref="oval:org.mitre.oval:tst:409"/>
          </criteria>
          <criteria operator="AND" comment="A vulnerable version of Microsoft .NET Framework v1.1 (Gold) is installed.">
            <criterion comment="Is Service Pack 1 for Microsoft .NET Framework 1.1 installed" negate="true" test_ref="oval:org.mitre.oval:tst:411"/>
            <criterion comment="the version of System.web.dll is less than 1.1.4322.1085" negate="false" test_ref="oval:org.mitre.oval:tst:408"/>
            <criterion comment="Is the KB886904 patch installed for Microsoft .NET Framework v1.1 Gold?" negate="true" test_ref="oval:org.mitre.oval:tst:407"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3533" version="9" class="vulnerability">
      <metadata>
        <title>Windows XP Shell CLSID File Type Spoof Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0420"/>
        <description>The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by spoofing the type of a file via a CLSID specifier in the filename, as demonstrated using Internet Explorer 6.0.2800.1106 on Windows XP.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-14T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-08-04T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-08-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-20T07:05:00.000-04:00" comment="Changed criteria to drop explicit test for patch kb839645. Inclusion resulted in false positives w/o incremental patching.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-04T08:04:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2656" date="2010-11-29T16:12:00.873-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:13:02.403-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:52.578-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:3533 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:50.554-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:49.354-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Windows XP (sp1 or earlier) is installed">
          <criterion comment="Windows XP is installed" test_ref="oval:org.mitre.oval:tst:2838"/>
          <criterion negate="true" comment="Win2K/XP/2003 service pack 2 (or later) is installed" test_ref="oval:org.mitre.oval:tst:2837"/>
        </criteria>
        <criterion comment="32-Bit version of Windows is installed" test_ref="oval:org.mitre.oval:tst:2748"/>
        <criterion comment="the version of shell32.dll is less than 6.0.2600.151" test_ref="oval:org.mitre.oval:tst:414"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:353" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP4 Function Pointer Override Cross Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0815" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0815"/>
        <description>Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1) modifying the createTextRange method and using CreateLink, as demonstrated using LinkillerSaveRef, LinkillerJPU, and Linkiller, or (2) modifying the createRange method and using the FIND dialog to select text, as demonstrated using Findeath, aka the "Function Pointer Override Cross Domain" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for Windows 2000 sp4 installed.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of having IE 5.01 sp4 installed.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:38.416-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:23.325-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:52.612-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:15.902-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3810.1700" negate="false" test_ref="oval:org.mitre.oval:tst:2690"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:352" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP3 Function Pointer Override Cross Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0815" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0815"/>
        <description>Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1) modifying the createTextRange method and using CreateLink, as demonstrated using LinkillerSaveRef, LinkillerJPU, and Linkiller, or (2) modifying the createRange method and using the FIND dialog to select text, as demonstrated using Findeath, aka the "Function Pointer Override Cross Domain" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for Windows 2000 sp3 installed.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of having IE 5.01 sp3 installed.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2824. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:48:00.494-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:52:23.827-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:23.036-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:52.671-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:15.810-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3015"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3523.1700" negate="false" test_ref="oval:org.mitre.oval:tst:2693"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3514" version="2" class="vulnerability">
      <metadata>
        <title>IE .chm Directory Traversal Windows Server 2003 Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>HTML Help Facility</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1041" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1041"/>
        <description>Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL containing ".." (dot dot) sequences and a filename that ends in "::" which is treated as a .chm file even if it does not have a .chm extension.  NOTE: this bug may overlap CVE-2004-0475.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-14T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-08-04T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-08-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected obj:964. Changed registry key name from a pattern match of .* to nil." date="2007-02-12T13:46:00.470-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T13:47:37.829-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:17.120-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
          <criterion comment="the version of itss.dll is less than 5.2.3790.185" negate="false" test_ref="oval:org.mitre.oval:tst:1406"/>
          <criterion comment="the patch kb840315 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1405"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="HTML Help is registered" negate="true" test_ref="oval:org.mitre.oval:tst:1404"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:351" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP2 Function Pointer Override Cross Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0815" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0815"/>
        <description>Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1) modifying the createTextRange method and using CreateLink, as demonstrated using LinkillerSaveRef, LinkillerJPU, and Linkiller, or (2) modifying the createRange method and using the FIND dialog to select text, as demonstrated using Findeath, aka the "Function Pointer Override Cross Domain" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for Windows 2000 sp2 installed.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of having IE 5.01 sp2 installed.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2868. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:41:00.387-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:43:10.987-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:22.761-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:51.937-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:15.727-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3063"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3523.1700" negate="false" test_ref="oval:org.mitre.oval:tst:2693"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3505" version="2" class="vulnerability">
      <metadata>
        <title>sshd Log Bypass Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <product>sshd</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1357" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1357"/>
        <description>The Secure Shell (SSH) Daemon (SSHD) in Sun Solaris 9 does not properly log IP addresses when SSHD is configured with the ListenAddress as 0.0.0.0, which makes it easier for remote attackers to hide the source of their activities.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-04-13T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-04-20T04:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-05-11T04:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T04:00:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-08-25T10:03:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-25T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="Secure Shell Server - Usr (SUNWsshdu) installed" negate="false" test_ref="oval:org.mitre.oval:tst:417"/>
          <criterion comment="Patch 113273-05 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:416"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/etc/ssh/sshd_config has 0.0.0.0 as ListenAddress" negate="false" test_ref="oval:org.mitre.oval:tst:415"/>
          <criterion comment="sshd running" negate="false" test_ref="oval:org.mitre.oval:tst:484"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:350" version="1" class="vulnerability">
      <metadata>
        <title>PEAR XML_RPC PHP Code Execution Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>php</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1921" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1921"/>
        <description>Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) MailWatch, (6) TikiWiki, (7) phpWebSite, (8) Ampache, and others, allows remote attackers to execute arbitrary PHP code via an XML file, which is not properly sanitized before being used in an eval statement.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-07-19T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-07-27T10:36:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="php RPM prior to  0:4.3.2-24.ent" negate="false" test_ref="oval:org.mitre.oval:tst:2687"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/etc/httpd/conf.d/php.conf exists" negate="false" test_ref="oval:org.mitre.oval:tst:2684"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:35" version="7" class="vulnerability" deprecated="true">
      <metadata>
        <title>DEPRECATED: Windows 2000 IIS FTP Connection Status Request Denial of Service</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>FTP</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0073" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0073"/>
        <description>The FTP service in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows attackers who have established an FTP session to cause a denial of service via a specially crafted status request containing glob characters.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified comment="Corrected to use a forward slash as the separator in the key." date="2007-05-07T15:59:00.528-04:00">
              <contributor organization="Secure Elements, Inc.">Glenn Strickland</contributor>
            </modified>
            <status_change date="2007-05-07T16:04:20.811-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:44.077-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2884" date="2010-11-29T16:14:00.692-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:38.762-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:52.224-05:00">ACCEPTED</status_change>
            <modified comment="Use def:12490 instead" date="2011-01-20T10:00:39.409-05:00">
              <contributor organization="Symantec Corporation">Josh Turpin</contributor>
            </modified>
            <status_change date="2011-01-20T10:00:39.409-05:00">DEPRECATED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="IIS major version equals 5" negate="false" test_ref="oval:org.mitre.oval:tst:3081"/>
          <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
          <criterion comment="the version of w3svc.dll is less than 5.0.2195.5269" negate="false" test_ref="oval:org.mitre.oval:tst:3080"/>
          <criterion comment="Patch Q319733 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3095"/>
          <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
          <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
          <criterion comment="Win2K/XP/2003 service pack 3 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:3079"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="FTP Enabled" negate="false" test_ref="oval:org.mitre.oval:tst:3074"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:349" version="5" class="vulnerability">
      <metadata>
        <title>IE v6.0,SP1 (Server 2003) ExecCommand Cross Domain Zone Restriction Bypass</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0814"/>
        <description>Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setting the window's "href" to the malicious Javascript, then calling execCommand("Refresh") to refresh the page, aka BodyRefreshLoadsJPU or the "ExecCommand Cross Domain" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for Windows Server 2003.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 6 sp1 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-01-29T12:00:00.000-04:00" comment="Added Windows XP 64-bit, Version 2003 and Windows Server 2003 64-Bit to the list of affected platforms">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-05-10T12:00:00.000-04:00" comment="modified wrt-51 - Comment updated to indicate IE 6.">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-05-11T05:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2621. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T20:21:00.819-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T20:22:34.321-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:22.454-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:53.192-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:15.657-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6  for Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2801"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.3790.94" negate="false" test_ref="oval:org.mitre.oval:tst:2686"/>
          <criterion comment="the patch q824145 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2685"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3465" version="5" class="vulnerability">
      <metadata>
        <title>SunOS 5.9: ufs and fsck patch</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <product>Solaris Volume Manager (SVM)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1346" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1346"/>
        <description>The Sun Solaris Volume Manager (SVM) on Solaris 9 allows local users to cause a denial of service (kernel panic) via a malformed probe request to the SVM.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-19T05:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-24T05:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T05:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T05:00:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-08-25T10:03:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-25T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected operation on line element of textfilecontent_object. Operation must be pattern match." date="2007-01-04T08:52:00.308-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-04T08:54:46.519-05:00">INTERIM</status_change>
            <modified comment="Updated obj:374: set operation to pattern match on filename." date="2007-01-22T13:52:00.664-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-02-20T13:40:22.064-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:374 - In some &quot;pattern match&quot; strings added &quot;\&quot; before &quot;.&quot; to clarify if &quot;point&quot; or &quot;any symbol&quot; needed." date="2014-07-28T18:11:00.493-04:00">
              <contributor organization="ALTX-SOFT">Evgeniy Pavlov</contributor>
            </modified>
            <status_change date="2014-07-28T18:14:45.939-04:00">INTERIM</status_change>
            <status_change date="2014-08-18T04:05:55.419-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="Patch 113073-13 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:426"/>
          <criterion comment="Solaris Volume Manager package installed" negate="false" test_ref="oval:org.mitre.oval:tst:425"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="svm.init init script exists" negate="false" test_ref="oval:org.mitre.oval:tst:424"/>
          <criterion comment="/etc/vfstab is configured with SVM devices" negate="false" test_ref="oval:org.mitre.oval:tst:423"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3464" version="8" class="vulnerability">
      <metadata>
        <title>IE AbusiveParent Vulnerability (32-bit XP)</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1319" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1319"/>
        <description>The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a window, opening a child page whose target is the window with the given name, then injecting the script from the parent into the child using execScript, as demonstrated by "AbusiveParent" in Internet Explorer 6.0.2900.2180.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-02-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </submitted>
            <status_change date="2005-02-11T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-03-02T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-23T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-06-02T12:00:00.000-04:00" comment="Added product">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-06-08T03:17:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-29T06:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:823: Removed HKEY_LOCAL_MACHINE\ from the key, as it's specified as the hive.  Implemented by Harvey Rubinovitz." date="2007-01-22T00:37:00.710-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T00:38:35.011-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:21.779-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:00.262-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:47.771-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:var:206 - modified vulnerabilities ofÂ MS Visual C++ Â  (winsxs folder checks were modified)" date="2014-04-17T13:09:00.881-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-04-17T13:11:50.370-04:00">INTERIM</status_change>
            <status_change date="2014-05-05T04:00:25.219-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows XP 32-bit edition is installed  with service pack 2 (or earlier)">
          <criterion comment="Windows XP is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2838"/>
          <criterion comment="32-Bit version of Windows is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2748"/>
          <criterion comment="Win2K/XP/2003 service pack 2 (or earlier) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1318"/>
        </criteria>
        <criterion comment="the version of dhtmled.ocx is less than 6.1.0.9232" negate="false" test_ref="oval:org.mitre.oval:tst:427"/>
        <criterion comment="the patch kb891781 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:1151"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:346" version="5" class="vulnerability">
      <metadata>
        <title>Windows Server 2003,SP1 Remote Desktop Protocol (RDP) DoS Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1218"/>
        <description>The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attackers to cause a denial of service (crash) via crafted Remote Desktop Protocol (RDP) requests.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:40:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:45.636-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:53.231-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:346 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:33.995-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:47.338-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:4033"/>
        <criterion comment="Win2K/XP/2003 service pack 1 is installed" test_ref="oval:org.mitre.oval:tst:3342"/>
        <criterion comment="the version of rdpwd.sys is less than 5.2.3790.2465" test_ref="oval:org.mitre.oval:tst:3760"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3458" version="5" class="vulnerability">
      <metadata>
        <title>Win2k Blind Connection Reset Attack Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0790" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0790"/>
        <description>Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error messages, aka the "blind connection-reset attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-04-22T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Matthew Burton</contributor>
            </submitted>
            <status_change date="2005-04-27T12:06:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-22T12:38:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-11-06T04:13:00.000-04:00" comment="Replaced reference to var:200 with reference to var:201 in obj:588 since tcpip.sys is located in \system32\drivers and not \system32.  Modified by Harvey Rubinovitz">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-11-21T04:13:00.000-04:00">INTERIM</status_change>
            <status_change date="2007-01-03T13:53:54.175-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:10.546-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:47.049-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="Win2K/XP/2003 service pack 4 (or earlier) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1247"/>
        <criterion comment="the version of Tcpip.sys is less than 5.0.2195.7035" negate="false" test_ref="oval:org.mitre.oval:tst:1012"/>
        <criterion comment="the patch KB893066 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2353"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:345" version="1" class="vulnerability">
      <metadata>
        <title>shtool Race Condition</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>php</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1751" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1751"/>
        <description>Race condition in shtool 2.0.1 and earlier allows local users to create or modify arbitrary files via a symlink attack on the .shtool.$$ temporary file, a different vulnerability than CVE-2005-1759.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-07-19T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-07-27T10:36:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="php RPM prior to  0:4.3.2-24.ent" negate="false" test_ref="oval:org.mitre.oval:tst:2687"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/tmp is writable by everyone" negate="false" test_ref="oval:org.mitre.oval:tst:2856"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:344" version="4" class="vulnerability">
      <metadata>
        <title>IE v6.0,SP1 ExecCommand Cross Domain Zone Restriction Bypass</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0814"/>
        <description>Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setting the window's "href" to the malicious Javascript, then calling execCommand("Refresh") to refresh the page, aka BodyRefreshLoadsJPU or the "ExecCommand Cross Domain" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for specific Windows operating systems.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 6 sp1 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-01-29T12:00:00.000-04:00" comment="Added Windows XP 64-bit to the list of affected platforms">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:46:02.264-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:21.175-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:54.153-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:15.587-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2800.1276" negate="false" test_ref="oval:org.mitre.oval:tst:2688"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:343" version="3" class="vulnerability">
      <metadata>
        <title>IE v5.5,SP2 ExecCommand Cross Domain Zone Restriction Bypass</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0814"/>
        <description>Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setting the window's "href" to the malicious Javascript, then calling execCommand("Refresh") to refresh the page, aka BodyRefreshLoadsJPU or the "ExecCommand Cross Domain" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for specific Windows operating systems.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 5.5 sp2 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:54.267-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:15.531-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
          <criterion comment="the version of mshtml.dll is less than 5.50.4934.1600" negate="false" test_ref="oval:org.mitre.oval:tst:2689"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3428" version="1" class="vulnerability">
      <metadata>
        <title>Windows 2000 Task Scheduler Stack Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Task Scheduler</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0212" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0212"/>
        <description>Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file containing long parameters, as demonstrated using Internet Explorer and accessing a .job file on an anonymous share.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-14T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-08-04T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-08-25T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="the version of mstask.dll is less than 4.71.2195.6920" negate="false" test_ref="oval:org.mitre.oval:tst:429"/>
        <criterion comment="Patch Windows2000-kb841873-x86-enu.exe Installed" negate="true" test_ref="oval:org.mitre.oval:tst:720"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:342" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP4 ExecCommand Cross Domain Zone Restriction Bypass</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0814"/>
        <description>Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setting the window's "href" to the malicious Javascript, then calling execCommand("Refresh") to refresh the page, aka BodyRefreshLoadsJPU or the "ExecCommand Cross Domain" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for Windows 2000 sp4 installed.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 5.01 sp4 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:38.975-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:20.861-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:54.443-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:15.460-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3810.1700" negate="false" test_ref="oval:org.mitre.oval:tst:2690"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:341" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP3 ExecCommand Cross Domain Zone Restriction Bypass</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0814"/>
        <description>Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setting the window's "href" to the malicious Javascript, then calling execCommand("Refresh") to refresh the page, aka BodyRefreshLoadsJPU or the "ExecCommand Cross Domain" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for Windows 2000 sp3 installed.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 5.01 sp3 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2824. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:48:00.494-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:52:26.543-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:20.485-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:54.553-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:15.395-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3015"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3523.1700" negate="false" test_ref="oval:org.mitre.oval:tst:2693"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3400" version="1" class="vulnerability">
      <metadata>
        <title>Buffer Overflow in Solaris ping Daemon</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>Licence Logging Service</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1352" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1352"/>
        <description>Buffer overflow in the ping daemon of Sun Solaris 7 through 9 may allow local users to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-04-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-04-20T12:13:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-05-11T05:41:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 7 or 8 OR Solaris 9 and Solaris Basic IP Commands (SUNWbip) installed">
          <criteria operator="OR" comment="Solaris 7 or 8 installed">
            <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 and Solaris Basic IP Commands (SUNWbip) installed">
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
            <criterion comment="Solaris Basic IP Commands (SUNWbip) installed" negate="false" test_ref="oval:org.mitre.oval:tst:433"/>
          </criteria>
        </criteria>
        <criterion comment="Patch 118313-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:432"/>
        <criterion comment="Patch 116986-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:431"/>
        <criterion comment="Patch 116774-03 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:430"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:340" version="4" class="vulnerability">
      <metadata>
        <title>Windows 2000 ComboBox/ListBox GUI Widget User32.dll Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0659" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0659"/>
        <description>Buffer overflow in a function in User32.dll on Windows NT through Server 2003 allows local users to execute arbitrary code via long (1) LB_DIR messages to ListBox or (2) CB_DIR messages to ComboBox controls in a privileged application.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-16T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-01-27T12:00:00.000-04:00" comment="Added the patch KB891711 (from MS05-002) which supercedes the previous patch">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-01-28T09:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-16T07:32:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2005-09-26T12:22:00.000-04:00" comment="modified wft-285 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.059-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:50:29.242-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:13.002-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="File %windir%\system32\user32.dll version is less than 5.0.2195.6799" negate="false" test_ref="oval:org.mitre.oval:tst:2691"/>
          <criterion comment="the patch kb824141 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2808"/>
          <criterion comment="the patch kb891711 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2807"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="the utility manager Service is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2806"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:34" version="1" class="vulnerability">
      <metadata>
        <title>Solaris 7 whodo Buffer Overflow Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>whodo</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-1076" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1076"/>
        <description>Buffer overflow in whodo in Solaris SunOS 5.5.1 through 5.8 allows local users to execute arbitrary code via a long (1) SOR or (2) CFIME environment variable.</description>
        <oval_repository>
          <dates>
            <submitted date="2002-10-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified comment="Fixed obj:1742: moved regexp terminal anchor from filename to path." date="2007-01-22T17:29:00.420-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-01-22T17:30:41.689-05:00">INTERIM</status_change>
            <modified comment="Replaced reference to obj:1740 with obj:1742, which is more correct, and fixed test comment." date="2007-01-22T17:59:00.207-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <modified comment="Fixed tst:3041: Replaced reference to obj:1740 with obj:1742, which is more correct, and fixed test comment.  Note previous edit was to tst:3040." date="2007-01-22T18:01:00.910-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <modified comment="Fixed criterion comments." date="2007-01-22T18:10:00.596-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-02-20T13:40:20.231-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="File whodo exists" negate="false" test_ref="oval:org.mitre.oval:tst:3043"/>
          <criterion comment="Patch 111600-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3042"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="File whodo SUID and executable">
            <criterion comment="File whodo SUID" negate="false" test_ref="oval:org.mitre.oval:tst:3041"/>
            <criterion comment="File whodo oexec set" negate="false" test_ref="oval:org.mitre.oval:tst:3040"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3386" version="8" class="vulnerability">
      <metadata>
        <title>Windows 2000 Shell CLSID File Type Spoof Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0420"/>
        <description>The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by spoofing the type of a file via a CLSID specifier in the filename, as demonstrated using Internet Explorer 6.0.2800.1106 on Windows XP.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-04T01:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-10-06T12:57:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-10-20T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-20T07:05:00.000-04:00" comment="Changed criteria to drop explicit test for patch kb839645.  Inclusion resulted in false positives w/o incremental patching.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-04T08:04:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2656" date="2010-11-29T16:12:00.873-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:12:59.124-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:50.978-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:3386 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:22.629-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:46.089-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="the version of shell32.dll is less than 5.0.3900.6922" test_ref="oval:org.mitre.oval:tst:436"/>
        <criterion comment="Win2K/XP/2003 service pack 2 (or later) is installed" test_ref="oval:org.mitre.oval:tst:2837"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3376" version="8" class="vulnerability">
      <metadata>
        <title>Microsoft Outlook Express v6.0 (WinXP) Malformed Email Header Denial of Service</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Outlook Express</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0215" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0215"/>
        <description>Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service (application crash) via a malformed e-mail header.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-08-26T08:07:00.000-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </submitted>
            <status_change date="2004-08-26T08:14:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-09-09T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-09-13T11:40:00.000-04:00" comment="cmp-66 added">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2004-09-29T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:533: changed Hive from HKEY_CLASSES_ROOT to HKEY_LOCAL_MACHINE.  Implemented by Harvey Rubinovitz." date="2007-01-22T01:12:00.977-05:00">
              <contributor organization="GFI Software">Daniel Tarnu</contributor>
            </modified>
            <status_change date="2007-01-22T01:12:58.111-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:19.900-05:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.788-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:52:38.002-04:00">INTERIM</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.053-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-11-13T12:01:12.730-05:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2656" date="2010-11-29T16:12:00.873-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:13:02.107-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:50.574-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:43:58.886-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:45.548-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Outlook Express 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1353"/>
          <criterion comment="the version of inetcomm.dll is less than 6.0.2742.200" negate="false" test_ref="oval:org.mitre.oval:tst:437"/>
          <criterion comment="the patch kb823353 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:668"/>
          <criteria operator="AND" comment="Windows XP (sp1 or earlier) is installed">
            <criterion comment="Windows XP is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2838"/>
            <criterion comment="Win2K/XP/2003 service pack 2 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2837"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="all users have the preview pane disabled" negate="false" test_ref="oval:org.mitre.oval:tst:667"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3372" version="5" class="vulnerability">
      <metadata>
        <title>Windows Server 2003, IE v6,SP1 CSS Heap Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0842" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0842"/>
        <description>Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from "memory corruption") via certain malformed Cascading Style Sheet (CSS) elements that trigger heap-based buffer overflows, as demonstrated using the "&lt;STYLE>@;/*" string, possibly due to a missing comment terminator that may cause an invalid length to trigger a large memory copy operation, aka the "CSS Heap Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-19T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-20T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-05-10T12:00:00.000-04:00" comment="modified wrt-51 - Comment updated to indicate IE 6.">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-05-11T05:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2621. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T20:21:00.819-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T20:22:29.666-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:19.606-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:37.758-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:15.326-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6  for Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2801"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.3790.219" negate="false" test_ref="oval:org.mitre.oval:tst:535"/>
          <criterion comment="the patch kb834707 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:534"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:335" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP2 ExecCommand Cross Domain Zone Restriction Bypass</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0814"/>
        <description>Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setting the window's "href" to the malicious Javascript, then calling execCommand("Refresh") to refresh the page, aka BodyRefreshLoadsJPU or the "ExecCommand Cross Domain" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-01-21T12:00:00.000-04:00" comment="Removed the test for Windows 2000 sp2 installed.  This is not part of the vulnerability definition.  Instead, it is a pre-requisite of installing the IE 5.01 sp2 patch.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls and active scripting are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2868. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:41:00.387-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:43:09.301-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:18.820-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:47.864-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:15.131-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3063"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3523.1700" negate="false" test_ref="oval:org.mitre.oval:tst:2693"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:334" version="6" class="vulnerability">
      <metadata>
        <title>Windows NNTP Memory Leak</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Network News Transport Protocol (NNTP)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0543" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0543"/>
        <description>Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed posts.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-16T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2884" date="2010-11-29T16:14:00.692-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:38.975-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:50.304-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:38.356-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:45.224-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 3 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:3079"/>
          <criterion comment="the version of nntpsvc.dll is less than 5.0.2195.3881" negate="false" test_ref="oval:org.mitre.oval:tst:2695"/>
          <criterion comment="Patch Q303984 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2694"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="the NNTP service is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2757"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:333" version="3" class="vulnerability">
      <metadata>
        <title>IE v5.5 Domain Restriction Bypass Cross-Frame Scripting</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1217" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1217"/>
        <description>Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code, read arbitrary files, or conduct other unauthorized activities via script that accesses the Document property, which bypasses &lt;frame> and &lt;iframe> domain restrictions.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-27T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:47.751-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:15.073-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Internet Explorer 5.5 Installed">
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3078"/>
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3077"/>
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3076"/>
          <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
        </criteria>
        <criterion comment="the version of mshtml.dll is less than 5.50.4922.900" negate="false" test_ref="oval:org.mitre.oval:tst:2786"/>
        <criterion comment="the patch q328970 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3117"/>
        <criterion comment="the patch q324929 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3116"/>
        <criterion comment="the patch q810847 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3115"/>
        <criterion comment="the patch q813489 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3114"/>
        <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3322" version="1" class="vulnerability">
      <metadata>
        <title>Kerberos 5 Double-free Vulnerability in krb5_rd_cred Function</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <product>Kerberos5</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0643" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0643"/>
        <description>Double free vulnerability in the krb5_rd_cred function for MIT Kerberos 5 (krb5) 1.3.1 and earlier may allow local users to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2004-10-13T12:00:00.000-04:00">DRAFT</status_change>
            <modified date="2005-01-14T12:00:00.000-04:00" comment="Changed kerberos unknown test to solaris file contents test">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </modified>
            <status_change date="2005-02-02T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-23T09:25:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Software section">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="Kerberos 5 installed" test_ref="oval:org.mitre.oval:tst:648"/>
          <criterion negate="true" comment="Patch 112908-15 or later installed" test_ref="oval:org.mitre.oval:tst:616"/>
        </criteria>
        <criteria operator="AND" comment="Configuration section">
          <criterion comment="/etc/krb5/krb5.conf is configured with a kerberos domain" test_ref="oval:org.mitre.oval:tst:1153"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3320" version="4" class="vulnerability">
      <metadata>
        <title>GDI+ JPEG Parsing Engine Buffer Overflow Microsoft Office Visio Pro 2003</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Office Visio Professional 2003</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0200"/>
        <description>Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-09-27T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2004-09-29T12:00:00.000-04:00">DRAFT</status_change>
            <modified date="2004-09-30T12:00:00.000-04:00" comment="Changed affected platforms">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2004-10-20T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-02-10T12:00:00.000-04:00" comment="modified wft-495 - corrected registry path check for .dll file">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2005-02-11T09:31:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-02T09:01:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Changed criteria to remove test for KB838345.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Altered to leverage new inventory def:1450" date="2007-06-15T14:06:00.373-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-06-15T14:06:36.408-04:00">INTERIM</status_change>
            <status_change date="2007-07-03T14:05:59.508-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <extend_definition definition_ref="oval:org.mitre.oval:def:1450"/>
        <criterion comment="the version of gdiplus.dll is less than 6.0.3264.0" negate="false" test_ref="oval:org.mitre.oval:tst:438"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1450" version="7" class="inventory">
      <metadata>
        <title>Microsoft Office Visio 2003 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Office Visio 2003</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:visio:2003"/>
        <description>The application Microsoft Office Visio 2003 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-15T11:00:31-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2007-06-15T15:20:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-07-03T14:05:55.207-04:00">INTERIM</status_change>
            <status_change date="2007-07-18T15:57:49.776-04:00">ACCEPTED</status_change>
            <status_change date="2012-03-05T14:23:58.837-05:00">INTERIM</status_change>
            <modified comment="Added Windows Server 2008 R2 platform" date="2012-03-05T14:23:58.837-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2012-03-26T04:02:47.424-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1450 - products added to inventories" date="2015-04-17T09:41:00.607-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-04-17T09:42:54.635-04:00">INTERIM</status_change>
            <status_change date="2015-05-04T04:00:07.748-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:tst:439 - Added check for standard version in MS Visio 2003 inventory" date="2015-07-29T13:09:00.256-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-07-29T13:11:51.017-04:00">INTERIM</status_change>
            <status_change date="2015-08-17T04:00:06.111-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Microsoft Office Visio 2003 is Installed" test_ref="oval:org.mitre.oval:tst:439"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3318" version="5" class="vulnerability">
      <metadata>
        <title>IE6,SP1 Channel Definition Format Cross Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0056" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0056"/>
        <description>Internet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition Format (CDF) files, which allows remote attackers to obtain sensitive information or execute arbitrary code, aka the "Channel Definition Format (CDF) Cross Domain Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-03-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-03-23T08:09:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-13T12:15:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-05-04T12:33:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed test to check kb867282.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:45:59.798-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:18.542-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:56.020-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:14.995-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
          <criteria operator="OR" comment="a vulnerable version of mshtml.dll exisits GDR/QFE">
            <criterion comment="machine has followed the GDR update path and mshtml.dll is less than 6.0.2800.1491" negate="false" test_ref="oval:org.mitre.oval:tst:1329"/>
            <criterion comment="machine has followed the QFE update path and mshtml.dll is less than 6.0.2800.1492" negate="false" test_ref="oval:org.mitre.oval:tst:1328"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:33" version="1" class="vulnerability">
      <metadata>
        <title>Sun Solaris 7 XSun Color Database File Heap Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>Xsun</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0158" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0158"/>
        <description>Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a long -co (color database) command line argument.</description>
        <oval_repository>
          <dates>
            <submitted date="2002-10-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="File Xsun exists" negate="false" test_ref="oval:org.mitre.oval:tst:3109"/>
          <criterion comment="Patch 108376-38 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3044"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="File Xsun SGID and executable">
            <criterion comment="File Xsun SGID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:3107"/>
            <criterion comment="File Xsun SGID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:3106"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:328" version="2" class="vulnerability">
      <metadata>
        <title>Linux Kernel /proc/self setuid Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Linux kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0501" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0501"/>
        <description>The /proc filesystem in Linux allows local users to obtain sensitive information by opening various entries in /proc/self before executing a setuid program, which causes the program to fail to change the ownership and permissions of those entries.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-26T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:57.895-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:27.525-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="kernel version is less than 2.4.20-19.9" negate="false" test_ref="oval:org.mitre.oval:tst:2709"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3270" version="2" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the Solaris 10 Internet Protocol (ip(7P)) may Lead to a Denial of Service (DoS) Condition</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5716" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5716"/>
        <description>Unspecified vulnerability in the Internet Protocol (IP) functionality in Sun Solaris 10 allows local users to cause a denial of service (panic) via unspecified vectors, probably related to a UDP packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-11-05T11:19:05.000-05:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-11-06T13:03:43.139-05:00">DRAFT</status_change>
            <status_change date="2007-11-26T04:00:04.347-05:00">INTERIM</status_change>
            <status_change date="2007-12-17T04:00:05.181-05:00">ACCEPTED</status_change>
            <modified comment="Changed criterion to check for the patch or later being installed instead of simply checking if the patch is installed." date="2009-07-17T11:04:00.761-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </modified>
            <status_change date="2009-07-17T11:09:04.768-04:00">INTERIM</status_change>
            <status_change date="2009-08-03T04:00:03.743-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 103087">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 118833-04 or later installed" test_ref="oval:org.mitre.oval:tst:5394"/>
          <criterion negate="true" comment="Patch 127111-02 or later installed" test_ref="oval:org.mitre.oval:tst:5429"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 103087">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 118855-03 or later installed" test_ref="oval:org.mitre.oval:tst:5577"/>
          <criterion negate="true" comment="Patch 127112-02 or later installed" test_ref="oval:org.mitre.oval:tst:5048"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:327" version="4" class="vulnerability">
      <metadata>
        <title>Linux Kernel execve Read Access to Restricted File Descriptors</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Linux kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0476" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0476"/>
        <description>The execve system call in Linux 2.4.x records the file descriptor of the executable process in the file table of the calling process, which allows local users to gain read access to restricted file descriptors.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-26T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:40.650-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:27.328-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:327 - Typo Corrections" date="2014-05-22T11:01:00.943-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-05-22T11:03:39.537-04:00">INTERIM</status_change>
            <status_change date="2014-06-09T04:01:43.654-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Red Hat 9 is installed" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="kernel version is less than 2.4.20-19.9" test_ref="oval:org.mitre.oval:tst:2709"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3250" version="1" class="vulnerability">
      <metadata>
        <title>Mozilla, Firefox, Thunderbird POP3 SendUidl Buffer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0757" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0757"/>
        <description>Heap-based buffer overflow in the SendUidl in the POP3 capability for Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, may allow remote POP3 mail servers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-19T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-24T03:40:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 8 or 9 installed">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
        </criteria>
        <criteria operator="OR" comment="Mozilla components (any SUNWmoznav/SUNWmozmail) installed">
          <criterion comment="Mozilla (SUNWmoznav) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1070"/>
          <criterion comment="Mozilla Mail (SUNWmozmail) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1069"/>
        </criteria>
        <criterion comment="Patch 117765-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1068"/>
        <criterion comment="Patch 117767-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1067"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:322" version="3" class="vulnerability">
      <metadata>
        <title>IE v5.5,SP2 Bitmap Integer Overflow Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0566" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0566"/>
        <description>Integer overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with a large bfOffBits value.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2004-08-02T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-08-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:49.661-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:14.886-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
        <criterion comment="the version of mshtml.dll is less than 5.50.4943.400" negate="false" test_ref="oval:org.mitre.oval:tst:2762"/>
        <criterion comment="the patch kb832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2802"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3216" version="8" class="vulnerability">
      <metadata>
        <title>Animated Cursor Denial of Service (Windows 2000)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Windows Animated Cursor</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1305" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1305"/>
        <description>The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-14T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2005-01-20T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-06-17T12:00:00.000-04:00" comment="modified cmp-1106 - Replaced the test that checks for the service pack level, instead of checking for sp4 or ealier (did not check for GOLD edition) it is now negating the test that checks for sp5 for later.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2005-06-22T12:35:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.059-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:50:28.219-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:11.844-05:00">ACCEPTED</status_change>
            <modified comment="Corrected and tightened regular expression in ste:2610" date="2010-12-02T11:46:00.307-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-12-02T11:47:27.352-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:49.090-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:24.678-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:43.224-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 (sp4 or earlier) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 5 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2790"/>
        </criteria>
        <criterion comment="the version of user32.dll is less than 5.0.2195.7017" negate="false" test_ref="oval:org.mitre.oval:tst:446"/>
        <criterion comment="the patch kb891711 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2807"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3203" version="2" class="vulnerability">
      <metadata>
        <title>Server 2003 Hyperlink Object Library Unchecked Buffer Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Hyperlink Object Library</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0057" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0057"/>
        <description>The Hyperlink Object Library for Windows 98, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a crafted link that triggers an "unchecked buffer" in the library, possibly due to a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-02-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2005-02-11T09:34:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-03-02T09:01:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-23T08:09:00.000-04:00">ACCEPTED</status_change>
            <modified comment="added back the development_class entity that was mistakenly removed during the conversion from version 4.2 to 5.0" date="2007-01-25T13:53:00.508-05:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2007-01-25T13:57:46.835-05:00">INTERIM</status_change>
            <modified comment="added back the development_class entity that was mistakenly removed during the conversion from version 4.2 to 5.0" date="2007-01-25T13:57:00.897-05:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2007-02-20T13:40:17.756-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criteria operator="OR" comment="a vulnerable version of hlink.dll exists on Server 2003">
          <criterion comment="machine has followed the GDR update path and hlink.dll is less than 5.2.3790.225" negate="false" test_ref="oval:org.mitre.oval:tst:448"/>
          <criterion comment="machine has followed the QFE update path and hlink.dll is less than 5.2.3790.227" negate="false" test_ref="oval:org.mitre.oval:tst:447"/>
        </criteria>
        <criterion comment="the patch kb888113 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2398"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:32" version="3" class="vulnerability">
      <metadata>
        <title>IE v6.0 Forced Script Execution</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0026" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0026"/>
        <description>Internet Explorer 5.5 and 6.0 allows remote attackers to bypass restrictions for executing scripts via an object that processes asynchronous events after the initial security checks have been made.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T05:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="Changed IE registry test to wrt-18">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:33.629-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:14.826-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="the version of mshtml.dll is less than 6.0.2713.1100" negate="false" test_ref="oval:org.mitre.oval:tst:3091"/>
        <criterion comment="the patch q316059 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3121"/>
        <criterion comment="the patch q319282 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3120"/>
        <criterion comment="the patch q321232 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3119"/>
        <criterion comment="the patch q323759 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3118"/>
        <criterion comment="the patch q328970 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3117"/>
        <criterion comment="the patch q324929 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3116"/>
        <criterion comment="the patch q810847 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3115"/>
        <criterion comment="the patch q813489 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3114"/>
        <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3196" version="4" class="vulnerability">
      <metadata>
        <title>IE6.0,SP2 Security Zone Restriction Bypass Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0054" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0054"/>
        <description>Internet Explorer 5.01, 5.5, and 6 allows remote attackers to spoof a less restrictive security zone and execute arbitrary code via an HTML page containing URLs that contain hostnames that have been double hex encoded, which are decoded twice to generate a malicious hostname, aka the "URL Decoding Zone Spoofing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-03-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-03-23T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-13T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2005-04-21T12:00:00.000-04:00" comment="modified wrt-159 - unchecked value">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-05-11T05:41:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed test to check kb867282.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:56.707-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:14.764-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6.0 Installed XP SP2" negate="false" test_ref="oval:org.mitre.oval:tst:2403"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2900.2604" negate="false" test_ref="oval:org.mitre.oval:tst:2402"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3162" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in RPCSEC_GSS (rpcsec_gss(3NSL)) Affects Kerberos Administration Daemon (kadmind(1M))</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3999" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3999"/>
        <description>Stack-based buffer overflow in the svcauth_gss_validate function in lib/rpc/svc_auth_gss.c in the RPCSEC_GSS RPC library (librpcsecgss) in MIT Kerberos 5 (krb5) 1.4 through 1.6.2, as used by the Kerberos administration daemon (kadmind) and some third-party applications that use krb5, allows remote attackers to cause a denial of service (daemon crash) and probably execute arbitrary code via a long string in an RPC message.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-10-31T12:34:51.000-04:00">
              <contributor organization="Opsware, Inc.">Nicholas Hansen</contributor>
            </submitted>
            <status_change date="2007-11-01T12:41:43.692-04:00">DRAFT</status_change>
            <status_change date="2007-11-16T08:14:50.135-05:00">INTERIM</status_change>
            <status_change date="2007-12-03T04:01:50.066-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 103060">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion negate="true" comment="Patch 126928-02 or later installed" test_ref="oval:org.mitre.oval:tst:5410"/>
          <criterion comment="Key Distribution Center (kadmind) process running" test_ref="oval:org.mitre.oval:tst:3331"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 103060">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 113318-32 or later installed" test_ref="oval:org.mitre.oval:tst:5371"/>
          <criterion comment="Key Distribution Center (kadmind) process running" test_ref="oval:org.mitre.oval:tst:3331"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 103060">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 126661-02 or later installed" test_ref="oval:org.mitre.oval:tst:5581"/>
          <criterion comment="Key Distribution Center (kadmind) process running" test_ref="oval:org.mitre.oval:tst:3331"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 103060">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 126929-02 or later installed" test_ref="oval:org.mitre.oval:tst:5434"/>
          <criterion comment="Key Distribution Center (kadmind) process running" test_ref="oval:org.mitre.oval:tst:3331"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 103060">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 117468-18 or later installed" test_ref="oval:org.mitre.oval:tst:5207"/>
          <criterion comment="Key Distribution Center (kadmind) process running" test_ref="oval:org.mitre.oval:tst:3331"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 103060">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 126662-02 or later installed" test_ref="oval:org.mitre.oval:tst:5538"/>
          <criterion comment="Key Distribution Center (kadmind) process running" test_ref="oval:org.mitre.oval:tst:3331"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3161" version="1" class="vulnerability">
      <metadata>
        <title>Windows XP VDM Privilege Escalation Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>VDM</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0208" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0208"/>
        <description>The Virtual DOS Machine (VDM) subsystem of Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to access kernel memory and gain privileges via a malicious program that modified some system structures in a way that is not properly validated by privileged operating system functions.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-14T09:58:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2004-10-20T02:35:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows XP is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2838"/>
        <criterion comment="the patch KB840987 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2356"/>
        <criterion comment="the version of vdmdbg.dll is less than 5.1.2600.1560" negate="false" test_ref="oval:org.mitre.oval:tst:681"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:316" version="3" class="vulnerability">
      <metadata>
        <title>MS SQL Server Bulk Insert Procedure Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft SQL Server 2000</product>
          <product>Microsoft SQL Server 2000 Desktop Engine (WMSDE)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0641" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0641"/>
        <description>Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows attackers with database administration privileges to execute arbitrary code via a long filename in the BULK INSERT query.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Yi-Fang Koh</contributor>
            </submitted>
            <modified date="2005-04-08T10:31:00.000-04:00" comment="modified wft-237 - literal string corrected">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:31:00.000-04:00" comment="modified wft-65 - Corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:31:00.000-04:00" comment="modified wft-66 - corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:31:00.000-04:00" comment="modified wft-67 - Corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:31:00.000-04:00" comment="modified wft-68 - Corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:32:00.000-04:00" comment="modified wft-69 - corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:33:00.000-04:00" comment="modified wft-278 - wft-278 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:34:00.000-04:00" comment="modified wft-58 - wft-58 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2005-04-11T08:48:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-04-27T12:07:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:316 - SQL Server 2000 has been replaced by Microsoft SQL Server 2000" date="2014-06-02T14:52:00.465-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-06-02T14:54:19.939-04:00">INTERIM</status_change>
            <status_change date="2014-06-23T04:07:47.100-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="SQL Server 2000 is installed" test_ref="oval:org.mitre.oval:tst:2977"/>
        <criterion comment="the version of sqlservr.exe is less than 2000.80.650.0" test_ref="oval:org.mitre.oval:tst:2718"/>
        <criterion comment="the version of odsole70.dll is less than 2000.80.606.0" test_ref="oval:org.mitre.oval:tst:2925"/>
        <criterion comment="the version of xpqueue.dll is less than 2000.80.606.0" test_ref="oval:org.mitre.oval:tst:2924"/>
        <criterion comment="the version of xprepl.dll is less than 2000.80.606.0" test_ref="oval:org.mitre.oval:tst:2923"/>
        <criterion comment="the version of xplog70.dll is less than 2000.80.606.0" test_ref="oval:org.mitre.oval:tst:2922"/>
        <criterion comment="the version of xpweb70.dll is less than 2000.80.606.0" test_ref="oval:org.mitre.oval:tst:2921"/>
        <criterion comment="the version of xpstar.dll is less than 2000.80.628.0" test_ref="oval:org.mitre.oval:tst:2920"/>
        <criterion comment="the version of impprov.dll is less than 2000.80.650.0" test_ref="oval:org.mitre.oval:tst:2704"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3157" version="4" class="vulnerability">
      <metadata>
        <title>IE6 (for XP,SP2) Content Advisor Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0555"/>
        <description>Buffer overflow in the Content Advisor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a crafted Content Advisor file, aka "Content Advisor Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-05-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-05-11T05:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-22T12:38:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:583: Removed blank after the word Filelist in the Key.  Modified by Harvey Rubinovitz." date="2007-01-22T00:06:00.366-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T00:07:40.648-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:17.527-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:34.906-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:14.607-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6.0 Installed XP SP2" negate="false" test_ref="oval:org.mitre.oval:tst:2403"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2900.2627" negate="false" test_ref="oval:org.mitre.oval:tst:768"/>
          <criterion comment="the patch kb890923  is installed (XP SP2 Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:767"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3145" version="2" class="vulnerability">
      <metadata>
        <title>Windows 2000 Kernel Debugger-based Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Windows kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0112"/>
        <description>Buffer overflow in Windows Kernel allows local users to gain privileges by causing certain error messages to be passed to a debugger.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <modified date="2004-07-14T12:00:00.000-04:00" comment="Changed to DRAFT">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2004-08-04T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-08-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-06-02T12:00:00.000-04:00" comment="Added product">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-06-08T03:17:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-29T06:49:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="The version of Ntoskrnl.exe is less than 5.0.2195.6159" negate="false" test_ref="oval:org.mitre.oval:tst:449"/>
        <criterion comment="the patch Q811493 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2885"/>
        <criterion comment="the patch kb835732 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1510"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3138" version="5" class="vulnerability">
      <metadata>
        <title>HyperTerminal Session File Vulnerability (Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>HyperTerminal</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0568" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0568"/>
        <description>HyperTerminal application for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the length of a value that is saved in a session file, which allows remote attackers to execute arbitrary code via a malicious HyperTerminal session file (.ht), web site, or Telnet URL contained in an e-mail message, triggering a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-07T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-01-24T12:00:00.000-04:00">DRAFT</status_change>
            <modified date="2005-01-27T12:00:00.000-04:00" comment="modified wrt-44 -">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <modified date="2005-03-02T12:00:00.000-04:00" comment="modified wft-169 - Change to access dll via HKLM">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-03-23T08:09:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-04-13T12:15:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:392: Removed blank before the word Filelist in the Key.  Modified by Harvey Rubinovitz." date="2007-01-22T00:05:00.353-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T00:06:08.439-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:17.192-05:00">ACCEPTED</status_change>
            <modified comment="Updated ste:741 to use regex pattern match instead of hardcoded path" date="2009-10-19T16:07:00.879-04:00">
              <contributor organization="The MITRE Corporation">Mike Lah</contributor>
            </modified>
            <status_change date="2009-10-19T16:09:06.302-04:00">INTERIM</status_change>
            <modified comment="Fixed registry key reference in obj:625" date="2009-10-19T16:09:00.553-04:00">
              <contributor organization="The MITRE Corporation">Mike Lah</contributor>
            </modified>
            <status_change date="2009-11-09T04:00:15.509-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:741 - obj/ste updates to conform to authoring style guide" date="2013-03-26T09:53:00.500-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-03-26T09:56:24.193-04:00">INTERIM</status_change>
            <status_change date="2013-04-15T04:00:19.523-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
          <criterion comment="the patch Windows 2003 kb873339 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:451"/>
          <criterion comment="the version of hypertrm.dll is less than 5.2.3790.233" negate="false" test_ref="oval:org.mitre.oval:tst:450"/>
        </criteria>
        <criteria comment="Configuration section" operator="OR">
          <criterion comment="If key present hyperterminal will automatically open session files" negate="false" test_ref="oval:org.mitre.oval:tst:827"/>
          <criterion comment="If the Hyperterminal client is registered as the default telnet client" negate="false" test_ref="oval:org.mitre.oval:tst:826"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3137" version="5" class="vulnerability">
      <metadata>
        <title>IE6 DHTML Method Heap Memory Corruption Vulnerability (Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0055" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0055"/>
        <description>Internet Explorer 5.01, 5.5, and 6 does not properly validate buffers when handling certain DHTML methods including the createControlRange Javascript function, which allows remote attackers to execute arbitrary code, aka the "DHTML Method Heap Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-03-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-03-23T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-13T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2005-04-21T08:33:00.000-04:00" comment="modified wrt-158 - removed note">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <modified date="2005-04-21T12:00:00.000-04:00" comment="modified wrt-158 - removed value to check against">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <modified date="2005-05-10T12:00:00.000-04:00" comment="modified wrt-51 - Comment updated to indicate IE 6.">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed test to check kb867282.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2621. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T20:21:00.819-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T20:22:29.904-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:16.870-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:45.840-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:14.521-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6  for Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2801"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.3790.259" negate="false" test_ref="oval:org.mitre.oval:tst:978"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3134" version="1" class="vulnerability">
      <metadata>
        <title>Mozilla CA Certificate DoS</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0758" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0758"/>
        <description>Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as that of the built-in CA root certificate, which allows remote attackers to cause a denial of service to SSL pages because the malicious certificate is treated as invalid.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-19T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-24T03:40:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 8 or 9 installed">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
        </criteria>
        <criteria operator="OR" comment="Mozilla components (any SUNWmoznav/SUNWmozmail) installed">
          <criterion comment="Mozilla (SUNWmoznav) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1070"/>
          <criterion comment="Mozilla Mail (SUNWmozmail) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1069"/>
        </criteria>
        <criterion comment="Patch 117765-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1068"/>
        <criterion comment="Patch 117767-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1067"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3120" version="8" class="vulnerability">
      <metadata>
        <title>Windows 2000 Unchecked Buffer in NetDDE (Test 1)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>NetDDE</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0206" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0206"/>
        <description>Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer," possibly a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-13T04:17:00.000-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </submitted>
            <status_change date="2004-10-20T02:35:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.630-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:52:11.329-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:11.651-05:00">ACCEPTED</status_change>
            <modified comment="Corrected tst:452 to refer to obj:260" date="2010-11-22T18:00:00.000-05:00">
              <contributor organization="Critical Watch">Nelson Bunker</contributor>
            </modified>
            <status_change date="2010-11-22T18:00:00.000-05:00">INTERIM</status_change>
            <modified comment="Corrected and tightened regular expression in ste:2610" date="2010-12-02T11:46:00.307-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-12-20T04:00:48.688-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:24.682-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:42.779-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 (sp5 or earlier) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 5 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2790"/>
        </criteria>
        <criterion comment="the version of netdde.exe is less than 5.0.2195.6952" negate="false" test_ref="oval:org.mitre.oval:tst:453"/>
        <criterion comment="the version of nddenb32.dll is less than 5.0.2195.6922" negate="false" test_ref="oval:org.mitre.oval:tst:452"/>
        <criterion comment="the patch KB841533 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:682"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:311" version="2" class="vulnerability">
      <metadata>
        <title>Linux Kernel Reuse Flag Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Linux kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0464" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0464"/>
        <description>The RPC code in Linux kernel 2.4 sets the reuse flag when sockets are created, which could allow local users to bind to UDP ports that are used by privileged services such as nfsd.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-26T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:53.493-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:27.102-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="kernel version is less than 2.4.20-19.9" negate="false" test_ref="oval:org.mitre.oval:tst:2709"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3100" version="5" class="vulnerability">
      <metadata>
        <title>DHTML Object Memory Corruption Vulnerability (IE6 for Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0553" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0553"/>
        <description>Race condition in the memory management routines in the DHTML object processor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail, aka "DHTML Object Memory Corruption Vulnerability".</description>
        <oval_repository>
          <dates>
            <submitted date="2005-05-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-05-11T05:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-22T12:38:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:44:00.000-04:00" comment="modified wft-594 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2621. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T20:21:00.819-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T20:22:31.884-05:00">INTERIM</status_change>
            <modified comment="Fixed obj:440: Removed blank before the word Filelist in the Key.  Modified by Harvey Rubinovitz." date="2007-01-22T00:06:00.404-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-02-20T13:40:16.266-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:40.096-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:14.323-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6  for Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2801"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.3790.279" negate="false" test_ref="oval:org.mitre.oval:tst:515"/>
          <criterion comment="the patch kb890923 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:514"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:31" version="4" class="vulnerability">
      <metadata>
        <title>Solaris 8/9 cachefsd Heap Overflow Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>cachefsd</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0033" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0033"/>
        <description>Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-01-31T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified date="2005-01-28T12:00:00.000-04:00" comment="Updated to include Solaris 9 and Solaris 9 patch info">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </modified>
            <status_change date="2005-02-01T08:24:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="fixed the service_name entity used in the inetd_object" date="2007-04-10T15:17:00.350-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-04-10T15:17:46.309-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:26.771-04:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:53.715-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:21.410-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="File cachefsd exists" negate="false" test_ref="oval:org.mitre.oval:tst:3053"/>
          <criterion comment="Patch 110896-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3052"/>
          <criteria operator="OR" comment="Solaris 8 or 9 installed">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          </criteria>
          <criterion comment="Patch 114008-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3050"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="inetd.conf contains cachefsd" negate="false" test_ref="oval:org.mitre.oval:tst:3049"/>
          <criterion comment="inetd running" negate="false" test_ref="oval:org.mitre.oval:tst:3135"/>
          <criteria operator="OR" comment="File cachefsd executable">
            <criterion comment="File cachefsd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3048"/>
            <criterion comment="File cachefsd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3047"/>
            <criterion comment="File cachefsd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3046"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:309" version="2" class="vulnerability">
      <metadata>
        <title>Linux Kernel execve Race Condition Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Linux kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0462" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0462"/>
        <description>A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial of service (crash).</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-26T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:34.404-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:26.586-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="kernel version is less than 2.4.20-19.9" negate="false" test_ref="oval:org.mitre.oval:tst:2709"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3082" version="3" class="vulnerability">
      <metadata>
        <title>GDI+ JPEG Parsing Engine Buffer Overflow (Visio Pro 2002)</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Office Visio Professional 2002</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0200"/>
        <description>Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-09-27T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2004-09-29T12:00:00.000-04:00">DRAFT</status_change>
            <modified date="2004-09-30T12:00:00.000-04:00" comment="Changed affected platforms">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2004-10-20T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-02-10T12:00:00.000-04:00" comment="modified wft-496 - corrected registry path check">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2005-02-11T09:31:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-02T09:01:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Changed criteria to remove test for KB831932.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Visio Professional 2002 with service pack 2" negate="false" test_ref="oval:org.mitre.oval:tst:481"/>
        <criterion comment="the version of mso.dll is less than 10.0.6714.0" negate="false" test_ref="oval:org.mitre.oval:tst:463"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:308" version="7" class="vulnerability">
      <metadata>
        <title>MS FrontPage Server Extensions SmartHTML Denial of Service (Test 1)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft FrontPage Server Extensions 2000</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0824" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0824"/>
        <description>Unknown vulnerability in the SmartHTML interpreter (shtml.dll) in Microsoft FrontPage Server Extensions 2000 and 2002, and Microsoft SharePoint Team Services 2002, allows remote attackers to cause a denial of service (response failure) via a certain request.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-12-09T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified date="2004-01-14T12:00:00.000-04:00" comment="Changed the definition to look at the file shtml.dll instead of fp4awel.dll.  It was determined that this is where the vulnerability (a buffer overflow) actually existed.  Also added the configuration test saying you are vulnerable if the SmartHTML interpreter is enabled.">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </modified>
            <status_change date="2004-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T10:51:00.000-04:00" comment="modified wft-12 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:08.128-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:15.842-04:00">ACCEPTED</status_change>
            <modified comment="Corrected to use a forward slash as the separator in the key." date="2007-05-07T15:59:00.964-04:00">
              <contributor organization="Secure Elements, Inc.">Glenn Strickland</contributor>
            </modified>
            <status_change date="2007-05-07T16:05:38.149-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:43.156-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:59.318-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:41.914-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="AND" comment="Windows 2000 (sp3 or earlier) is installed">
            <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
            <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:3084"/>
          </criteria>
          <criterion comment="the version of shtml.dll is less than 4.00.02.7523" negate="false" test_ref="oval:org.mitre.oval:tst:2708"/>
          <criterion comment="the patch q810217 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2707"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="FrontPage Server Extensions 2000 are enabled (2K, XP)" negate="false" test_ref="oval:org.mitre.oval:tst:2706"/>
          <criterion comment="SmartHTML interpreter is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2705"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3078" version="1" class="vulnerability">
      <metadata>
        <title>CDE AddSuLog Function Buffer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>Common Desktop Environment</product>
        </affected>
        <reference source="CVE" ref_id="CVE-1999-0691" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0691"/>
        <description>Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-02-01T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-02-01T08:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
        <criterion comment="CDE application basic runtime environment (SUNWdtbas/SUNWdtbax) installed" negate="false" test_ref="oval:org.mitre.oval:tst:459"/>
        <criterion comment="Patch 108219-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:458"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:307" version="3" class="vulnerability">
      <metadata>
        <title>CGI.pm start_form Cross-Site Scripting Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>Perl</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0615" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0615"/>
        <description>Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:52:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:45.271-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:52.795-04:00">ACCEPTED</status_change>
            <modified comment="Added title. Implemented by Jon Baker of The MITRE Corporation." date="2007-02-13T14:07:00.888-05:00">
              <contributor organization="Security-Database">Nabil Ouchn</contributor>
            </modified>
            <status_change date="2007-02-13T14:07:47.915-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:15.663-04:00">ACCEPTED</status_change>
            <modified comment="Updated criteria for Solaris 9 and updated comments." date="2008-06-16T16:47:00.045-04:00">
              <contributor organization="Secure Elements, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2008-06-16T16:51:14.059-04:00">INTERIM</status_change>
            <status_change date="2008-07-07T04:00:16.879-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert ID 200205 (formerly 101426) criteria.">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion negate="true" comment="Patch 122091-01 or later installed" test_ref="oval:org.mitre.oval:tst:7556"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert ID 200205 (formerly 101426) criteria.">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 122092-01 or later installed" test_ref="oval:org.mitre.oval:tst:7630"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert ID 200205 (formerly 101426) criteria.">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 119449-01 or later installed" test_ref="oval:org.mitre.oval:tst:3644"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert ID 200205 (formerly 101426) criteria.">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 119450-01 or later installed" test_ref="oval:org.mitre.oval:tst:3771"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3060" version="5" class="vulnerability">
      <metadata>
        <title>IE6 for Server 2003 Security Zone Restriction Bypass Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0054" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0054"/>
        <description>Internet Explorer 5.01, 5.5, and 6 allows remote attackers to spoof a less restrictive security zone and execute arbitrary code via an HTML page containing URLs that contain hostnames that have been double hex encoded, which are decoded twice to generate a malicious hostname, aka the "URL Decoding Zone Spoofing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-03-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-03-23T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-13T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2005-04-21T08:52:00.000-04:00" comment="modified wrt-158 - removed note">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <modified date="2005-04-21T12:00:00.000-04:00" comment="modified wrt-158 - removed value to check against">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <modified date="2005-05-10T12:00:00.000-04:00" comment="modified wrt-51 - Comment updated to indicate IE 6.">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed test to check kb867282.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2621. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T20:21:00.819-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T20:22:33.551-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:16.054-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:34.144-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:14.235-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6  for Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2801"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.3790.259" negate="false" test_ref="oval:org.mitre.oval:tst:978"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:306" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP3 Bitmap Integer Overflow Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0566" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0566"/>
        <description>Integer overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with a large bfOffBits value.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2004-08-02T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-08-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2824. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:48:00.494-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:52:27.505-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:15.839-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:59.863-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:14.169-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Internet Explorer 5.01 Service Pack 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3015"/>
        <criterion comment="the version of mshtml.dll is less than 5.0.3532.300" negate="false" test_ref="oval:org.mitre.oval:tst:2803"/>
        <criterion comment="the patch kb832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2802"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:304" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Linux Kernel Serial Link Information Disclosure Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0461"/>
        <description>/proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial links, which could allow local users to obtain potentially sensitive information such as the length of passwords.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-26T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:50.987-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:26.364-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="kernel version is less than 2.4.20-19.9" negate="false" test_ref="oval:org.mitre.oval:tst:2709"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3038" version="3" class="vulnerability">
      <metadata>
        <title>GDI+ JPEG Parsing Engine Buffer Overflow (Project 2002,SP1)</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Project Professional 2002</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0200"/>
        <description>Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-09-27T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2004-09-29T12:00:00.000-04:00">DRAFT</status_change>
            <modified date="2004-09-30T12:00:00.000-04:00" comment="Changed affected platforms">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2004-10-20T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-02-10T12:00:00.000-04:00" comment="modified wft-496 - corrected registry path check">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2005-02-11T09:31:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-02T09:01:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Changed criteria to remove test for KB831931.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Project Professional 2002 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:555"/>
        <criterion comment="the version of mso.dll is less than 10.0.6714.0" negate="false" test_ref="oval:org.mitre.oval:tst:463"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:303" version="6" class="vulnerability">
      <metadata>
        <title>SQL Server LPC Port Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft SQL Server 2000</product>
          <product>Microsoft SQL Server 2000 Desktop Engine (WMSDE)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0232" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0232"/>
        <description>Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls (LPC) port that leads to a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Yi-Fang Koh</contributor>
            </submitted>
            <modified date="2005-01-14T12:00:00.000-04:00" comment="modified wft-55 - Added &quot;80&quot; to the registry component. So that new component value is HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\80\SharedCode. This key specifes the location of the  file that should be tested.">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2005-01-20T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-04-08T10:31:00.000-04:00" comment="modified wft-72 - corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:32:00.000-04:00" comment="modified wft-70 - Corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:41:00.000-04:00" comment="modified wft-73 - Corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:51:00.000-04:00" comment="modified wft-78 - wft-78 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T11:01:00.000-04:00" comment="modified wft-79 - wft-79 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T11:31:00.000-04:00" comment="modified wft-51 - wft-51 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T11:32:00.000-04:00" comment="modified wft-52 - wft-52 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T11:33:00.000-04:00" comment="modified wft-53 - wft-53 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T11:34:00.000-04:00" comment="modified wft-54 - wft-54 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T11:51:00.000-04:00" comment="modified wft-60 - wft-60 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2005-04-11T08:48:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-04-27T12:07:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-27T01:23:00.000-04:00" comment="modified wft-70 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2005-09-27T01:24:00.000-04:00" comment="modified wft-72 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2005-09-27T01:25:00.000-04:00" comment="modified wft-73 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:1560, missing first character due to conversion error.  Was sgprox.dll, now msgprox.dll.  Also fixed comment on var:257, used by obj:1560." date="2007-01-22T18:59:00.461-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-01-22T18:57:30.998-05:00">INTERIM</status_change>
            <modified comment="Fixed obj:1559, missing first character due to conversion error.  Was eplrec.dll, now replrec.dll." date="2007-01-22T19:00:00.302-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <modified comment="Fixed obj:1557, missing first character in filename due to conversion error.  Was qlvdi.dll, now sqlvdi.dll." date="2007-01-22T19:08:00.006-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <modified comment="Fixed obj:1589, missing first character in filename due to conversion error.  Was eplprov.dll, now replprov.dll." date="2007-01-22T19:20:00.817-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-02-20T13:40:15.454-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:303 - SQL Server 2000 has been replaced by Microsoft SQL Server 2000" date="2014-06-02T14:54:00.396-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-06-02T14:56:26.858-04:00">INTERIM</status_change>
            <status_change date="2014-06-23T04:07:46.845-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="SQL Server 2000 is installed" test_ref="oval:org.mitre.oval:tst:2977"/>
        <criterion comment="File console.exe version3 is less than 2000.80.818.0" test_ref="oval:org.mitre.oval:tst:2780"/>
        <criterion comment="the version of dbmslpcn.dll is less than 2000.80.818.0" test_ref="oval:org.mitre.oval:tst:2713"/>
        <criterion comment="File sqlmap70.dll version3 is less than 2000.80.811.0" test_ref="oval:org.mitre.oval:tst:2778"/>
        <criterion comment="File sqlrepss.dll version3 is less than 2000.80.765.0" test_ref="oval:org.mitre.oval:tst:2777"/>
        <criterion comment="the version of sqlservr.exe is less than 2000.80.818.0" test_ref="oval:org.mitre.oval:tst:2776"/>
        <criterion comment="the version of ssmslpcn.dll is less than 2000.80.818.0" test_ref="oval:org.mitre.oval:tst:2775"/>
        <criterion comment="the version of ssnetlib.dll is less than 2000.80.818.0" test_ref="oval:org.mitre.oval:tst:2774"/>
        <criterion comment="the version of ssnmpn70.dll is less than 2000.80.818.0" test_ref="oval:org.mitre.oval:tst:2773"/>
        <criterion comment="the version of ums.dll is less than 2000.80.816.0" test_ref="oval:org.mitre.oval:tst:2772"/>
        <criterion comment="the version of odsole70.dll is less than 2000.80.800.0" test_ref="oval:org.mitre.oval:tst:2771"/>
        <criterion comment="the version of xpweb70.dll is less than 2000.80.778.0" test_ref="oval:org.mitre.oval:tst:2770"/>
        <criterion comment="the version of msgprox.dll is less than 2000.80.765.0" test_ref="oval:org.mitre.oval:tst:2712"/>
        <criterion comment="the version of replprov.dll is less than 2000.80.798.0" test_ref="oval:org.mitre.oval:tst:2768"/>
        <criterion comment="the version of replrec.dll is less than 2000.80.765.0" test_ref="oval:org.mitre.oval:tst:2711"/>
        <criterion comment="the version of sqlvdi.dll is less than 2000.80.765.0" test_ref="oval:org.mitre.oval:tst:2710"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3027" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerabilities in Solaris Kernel Statistics Retrieval Process May Allow a Denial of Service (DoS)</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5632" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5632"/>
        <description>Multiple unspecified vulnerabilities in the kernel in Sun Solaris 8 through 10 allow local users to cause a denial of service (panic), related to the support for retrieval of kernel statistics, and possibly related to the sfmmu_mlspl_enter or sfmmu_mlist_enter functions.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-10-24T12:32:39.000-04:00">
              <contributor organization="Opsware, Inc.">Nicholas Hansen</contributor>
            </submitted>
            <status_change date="2007-10-24T17:06:05.258-04:00">DRAFT</status_change>
            <status_change date="2007-11-13T12:01:11.224-05:00">INTERIM</status_change>
            <status_change date="2007-12-03T04:01:12.772-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 103064">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion negate="true" comment="Patch 117350-50 or later installed" test_ref="oval:org.mitre.oval:tst:5260"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 103064">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 122300-13 or later installed" test_ref="oval:org.mitre.oval:tst:4570"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 103064">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 127111-01 or later installed" test_ref="oval:org.mitre.oval:tst:5241"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 103064">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 117351-50 or later installed" test_ref="oval:org.mitre.oval:tst:5306"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 103064">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 122301-13 or later installed" test_ref="oval:org.mitre.oval:tst:5341"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 103064">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 127112-01 or later installed" test_ref="oval:org.mitre.oval:tst:5374"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:3006" version="7" class="vulnerability">
      <metadata>
        <title>IE5.01,SP3 Drag-and-Drop Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0053" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0053"/>
        <description>Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the "Drag-and-Drop Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-03-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-03-23T08:09:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-13T12:15:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-05-04T12:33:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed test to check kb867282.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2824. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:48:00.494-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:52:28.437-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:15.222-05:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.795-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:47:48.480-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:10.892-05:00">ACCEPTED</status_change>
            <modified comment="Fix for regular expression" date="2010-01-13T14:40:00.667-05:00">
              <contributor organization="The MITRE Corporation">Dan Haynes</contributor>
            </modified>
            <status_change date="2010-01-13T14:41:05.146-05:00">INTERIM</status_change>
            <status_change date="2010-02-01T04:00:07.585-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:40.018-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:14.088-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3015"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3528.700" negate="false" test_ref="oval:org.mitre.oval:tst:749"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="Check for Drag&amp;Drop enabled and the patch kb834707(wildcard*)  missing">
            <criterion comment="Drag-and-Drop disabled when set to 3" negate="true" test_ref="oval:org.mitre.oval:tst:1316"/>
            <criterion comment="the patch kb834707(wildcard*) is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:977"/>
          </criteria>
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:30" version="6" class="vulnerability">
      <metadata>
        <title>Microsoft SMTP Malformed BDAT Request Denial of Service</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>SMTP</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0055" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0055"/>
        <description>SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer (BDAT) request.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-05-20T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified date="2004-03-30T12:00:00.000-04:00" comment="Changed the registry key in question for the SMTP enabled check to SMTPSVC from SMTP.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2884" date="2010-11-29T16:14:00.692-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:39.071-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:48.093-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:06.786-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:41.296-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="File %windir%\system32\inetsrv\smtpsvc.dll version is less than 5.0.2195.4905" negate="false" test_ref="oval:org.mitre.oval:tst:3056"/>
          <criterion comment="Patch Q313450" negate="true" test_ref="oval:org.mitre.oval:tst:3055"/>
          <criterion comment="Win2K/XP/2003 service pack 3 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:3079"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="SMTP Enabled" negate="false" test_ref="oval:org.mitre.oval:tst:3054"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:299" version="6" class="vulnerability">
      <metadata>
        <title>SQL Server Named Pipe Denial of Service</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft SQL Server 2000</product>
          <product>Microsoft SQL Server 2000 Desktop Engine (WMSDE)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0231" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0231"/>
        <description>Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service (crash or hang) via a long request to a named pipe.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Yi-Fang Koh</contributor>
            </submitted>
            <modified date="2005-01-14T12:00:00.000-04:00" comment="modified wft-55 - Added &quot;80&quot; to the registry component. So that new component value is HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\80\SharedCode. This key specifes the location of the  file that should be tested.">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2005-01-20T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-04-08T10:31:00.000-04:00" comment="modified wft-72 - corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:32:00.000-04:00" comment="modified wft-70 - Corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:33:00.000-04:00" comment="modified wft-73 - Corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:34:00.000-04:00" comment="modified wft-78 - wft-78 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:35:00.000-04:00" comment="modified wft-79 - wft-79 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:36:00.000-04:00" comment="modified wft-51 - wft-51 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:37:00.000-04:00" comment="modified wft-52 - wft-52 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:38:00.000-04:00" comment="modified wft-53 - wft-53 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:39:00.000-04:00" comment="modified wft-54 - wft-54 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:40:00.000-04:00" comment="modified wft-60 - wft-60 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2005-04-11T08:48:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-04-27T12:07:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-27T01:23:00.000-04:00" comment="modified wft-70 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2005-09-27T01:24:00.000-04:00" comment="modified wft-72 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2005-09-27T01:25:00.000-04:00" comment="modified wft-73 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:1560, missing first character due to conversion error.  Was sgprox.dll, now msgprox.dll.  Also fixed comment on var:257, used by obj:1560." date="2007-01-22T18:59:00.461-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-01-22T18:57:30.571-05:00">INTERIM</status_change>
            <modified comment="Fixed obj:1559, missing first character due to conversion error.  Was eplrec.dll, now replrec.dll." date="2007-01-22T19:00:00.302-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <modified comment="Fixed obj:1557, missing first character in filename due to conversion error.  Was qlvdi.dll, now sqlvdi.dll." date="2007-01-22T19:08:00.006-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <modified comment="Fixed obj:1589, missing first character in filename due to conversion error.  Was eplprov.dll, now replprov.dll." date="2007-01-22T19:20:00.817-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-02-20T13:40:14.695-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:299 - SQL Server 2000 has been replaced by Microsoft SQL Server 2000" date="2014-06-02T14:56:00.745-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-06-02T14:57:39.214-04:00">INTERIM</status_change>
            <status_change date="2014-06-23T04:07:46.560-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="SQL Server 2000 is installed" test_ref="oval:org.mitre.oval:tst:2977"/>
        <criterion comment="File console.exe version3 is less than 2000.80.818.0" test_ref="oval:org.mitre.oval:tst:2780"/>
        <criterion comment="the version of dbmslpcn.dll is less than 2000.80.818.0" test_ref="oval:org.mitre.oval:tst:2713"/>
        <criterion comment="File sqlmap70.dll version3 is less than 2000.80.811.0" test_ref="oval:org.mitre.oval:tst:2778"/>
        <criterion comment="File sqlrepss.dll version3 is less than 2000.80.765.0" test_ref="oval:org.mitre.oval:tst:2777"/>
        <criterion comment="the version of sqlservr.exe is less than 2000.80.818.0" test_ref="oval:org.mitre.oval:tst:2776"/>
        <criterion comment="the version of ssmslpcn.dll is less than 2000.80.818.0" test_ref="oval:org.mitre.oval:tst:2775"/>
        <criterion comment="the version of ssnetlib.dll is less than 2000.80.818.0" test_ref="oval:org.mitre.oval:tst:2774"/>
        <criterion comment="the version of ssnmpn70.dll is less than 2000.80.818.0" test_ref="oval:org.mitre.oval:tst:2773"/>
        <criterion comment="the version of ums.dll is less than 2000.80.816.0" test_ref="oval:org.mitre.oval:tst:2772"/>
        <criterion comment="the version of odsole70.dll is less than 2000.80.800.0" test_ref="oval:org.mitre.oval:tst:2771"/>
        <criterion comment="the version of xpweb70.dll is less than 2000.80.778.0" test_ref="oval:org.mitre.oval:tst:2770"/>
        <criterion comment="the version of msgprox.dll is less than 2000.80.765.0" test_ref="oval:org.mitre.oval:tst:2712"/>
        <criterion comment="the version of replprov.dll is less than 2000.80.798.0" test_ref="oval:org.mitre.oval:tst:2768"/>
        <criterion comment="the version of replrec.dll is less than 2000.80.765.0" test_ref="oval:org.mitre.oval:tst:2711"/>
        <criterion comment="the version of sqlvdi.dll is less than 2000.80.765.0" test_ref="oval:org.mitre.oval:tst:2710"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:298" version="6" class="vulnerability">
      <metadata>
        <title>Windows 2000 SNMPv1 Trap Handling DoS and Privilege Escalation (Test 2)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Simple Network Management Protocol (SNMP)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0013" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0013"/>
        <description>Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via (1) GetRequest, (2) GetNextRequest, and (3) SetRequest messages, as demonstrated by the PROTOS c06-SNMPv1 test suite.  NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one or more for each vendor.  This and other SNMP-related candidates will be updated when more accurate information is available.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <modified date="2004-09-20T10:31:00.000-04:00" comment="Changed CAN-2002-0012 to CAN-2002-0013.">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2004-09-22T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-10-06T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2884" date="2010-11-29T16:14:00.692-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:39.812-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:47.758-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:10.803-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:40.839-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 3 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:3079"/>
          <criterion comment="the version of snmp.exe is less than 5.0.2195.4919" negate="false" test_ref="oval:org.mitre.oval:tst:2883"/>
          <criterion comment="Patch Q314147 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2959"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="the SNMP service is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2958"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2975" version="1" class="vulnerability">
      <metadata>
        <title>Sendmail prescan function Buffer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>Sendmail</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0694" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0694"/>
        <description>The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-12-29T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-12T12:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-02T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-23T09:25:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 7,8,or 9 installed">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
        </criteria>
        <criterion comment="Sendmail - user (SUNWsndmu) installed" negate="false" test_ref="oval:org.mitre.oval:tst:587"/>
        <criterion comment="Patch 107684-10 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:466"/>
        <criterion comment="Patch 110615-10 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:465"/>
        <criterion comment="Patch 113575-05 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:464"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2972" version="2" class="vulnerability">
      <metadata>
        <title>Solaris TCP/IP Stack System Panic Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>TCP/IP</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1355" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1355"/>
        <description>Unknown vulnerability in the TCP/IP stack for Sun Solaris 8 and 9 allows local users to cause a denial of service (system panic) via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-04-13T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-04-20T04:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-05-11T04:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T04:00:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-08-25T10:03:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-25T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 8 or 9 installed">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
        </criteria>
        <criterion comment="Patch 116895-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:468"/>
        <criterion comment="Patch 117000-03 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:467"/>
        <criterion comment="Patch 112233-12 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:777"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:297" version="2" class="vulnerability">
      <metadata>
        <title>Solaris 10 patchadd T-patch Issue</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
          <product>patchadd</product>
        </affected>
        <reference source="MISC" ref_id="http://sunsolve9.sun.com/search/document.do?assetkey=1-26-101666-1&amp;searchclause="/>
        <description>The patchadd facility for Solaris 10 fails to install T-patches.  Sun sometimes releases a T-patch as a temporary version of a patch prior to the final release of that patch.  While this flaw does not directly represent a vulnerability, it does prevent the timely application of some (possibly critical) updates.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:52:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:45.131-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:52.633-04:00">ACCEPTED</status_change>
            <modified comment="Added title." date="2007-02-26T01:12:00.098-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-02-26T01:12:39.122-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:15.226-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert ID 101666 criteria." negate="false">
          <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3680"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criterion comment="Patch 119254-03 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3284"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert ID 101666 criteria." negate="false">
          <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3680"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criterion comment="Patch 119255-03 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3698"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2968" version="1" class="vulnerability">
      <metadata>
        <title>RPCSS DCOM Buffer Overflow (XP)</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Distributed Component Object Model (DCOM)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0528" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0528"/>
        <description>Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed RPC request with a long filename parameter, a different vulnerability than CVE-2003-0352 (Blaster/Nachi) and CVE-2003-0715.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-18T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2005-01-20T02:31:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="AND" comment="Windows XP 32-bit edition is installed">
            <criterion comment="Windows XP is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2838"/>
            <criterion comment="32-Bit version of Windows is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2748"/>
          </criteria>
          <criterion comment="the version of rpcrt4.dll is less than 5.1.2600.109" negate="false" test_ref="oval:org.mitre.oval:tst:556"/>
          <criterion comment="the patch kb824146 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:3082"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="DCOM is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2913"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2961" version="1" class="vulnerability">
      <metadata>
        <title>Multiple Privilege Escalation Vulnerabilities in Linux Kernel</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>Linux kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0495" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0495"/>
        <description>Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memory, as found by the Sparse source code checking tool.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-09-02T12:06:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-09-08T10:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-09-22T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-10-06T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criteria operator="OR" comment="kernel, kernel-hugemem or kernel-smp rpm older than 2.4.21-15.0.2EL Epoch 0">
          <criterion comment="kernel rpm older than 2.4.21-15.0.2.EL Epoch 0" negate="false" test_ref="oval:org.mitre.oval:tst:476"/>
          <criterion comment="kernel-hugemem rpm older than 2.4.21-15.0.2.EL Epoch 0" negate="false" test_ref="oval:org.mitre.oval:tst:475"/>
          <criterion comment="kernel-smp rpm older than 2.4.21-15.0.2.EL Epoch 0" negate="false" test_ref="oval:org.mitre.oval:tst:474"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:296" version="6" class="vulnerability">
      <metadata>
        <title>Windows 2000 RPCSS DCOM Buffer Overflow (Blaster, Test 2)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Remote Procedure Call (RPC)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0352" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0352"/>
        <description>Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-12-03T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2884" date="2010-11-29T16:14:00.692-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:39.133-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:47.459-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:07.705-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:40.510-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="File %windir%\system32\rpcrt4.dll version is less than 5.0.2195.6753" negate="false" test_ref="oval:org.mitre.oval:tst:2714"/>
          <criterion comment="Patch Windows2000-KB823980-x86-ENU.exe Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3000"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="DCOM is enabled on systems with SP3 or later">
            <criterion comment="Win2K/XP/2003 service pack 3 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3079"/>
            <criterion comment="DCOM is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2913"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2953" version="6" class="vulnerability">
      <metadata>
        <title>Windows XP,SP2 IE6.0 Drag-and-Drop Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0053" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0053"/>
        <description>Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the "Drag-and-Drop Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-03-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-03-23T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-13T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2005-04-21T12:00:00.000-04:00" comment="modified wrt-159 - unchecked value">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-05-11T05:41:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed test to check kb867282.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.795-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:47:49.575-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:10.441-05:00">ACCEPTED</status_change>
            <modified comment="Fix for regular expression" date="2010-01-13T14:40:00.667-05:00">
              <contributor organization="The MITRE Corporation">Dan Haynes</contributor>
            </modified>
            <status_change date="2010-01-13T14:41:05.480-05:00">INTERIM</status_change>
            <status_change date="2010-02-01T04:00:07.169-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:34.409-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:13.962-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6.0 Installed XP SP2" negate="false" test_ref="oval:org.mitre.oval:tst:2403"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2900.2604" negate="false" test_ref="oval:org.mitre.oval:tst:2402"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="Check for Drag&amp;Drop enabled and the patch kb834707(wildcard*)  missing">
            <criterion comment="Drag-and-Drop disabled when set to 3" negate="true" test_ref="oval:org.mitre.oval:tst:1316"/>
            <criterion comment="the patch kb834707(wildcard*) is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:977"/>
          </criteria>
          <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
            <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
            <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
            <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:295" version="2" class="vulnerability">
      <metadata>
        <title>Linux Kernel TCP/IP Fragment Reassembly Denial of Service</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Linux kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0364" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0364"/>
        <description>The TCP/IP fragment reassembly handling in the Linux kernel 2.4 allows remote attackers to cause a denial of service (CPU consumption) via certain packets that cause a large number of hash table collisions.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-26T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:22.189-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:26.134-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="kernel version is less than 2.4.20-18.9" negate="false" test_ref="oval:org.mitre.oval:tst:2721"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:294" version="5" class="vulnerability">
      <metadata>
        <title>Microsoft Data Access Components 2.6 Remote Data Services Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 95</platform>
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Data Access Components 2.6</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1142" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1142"/>
        <description>Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-08-24T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2004-08-25T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-09-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-29T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-02-28T12:00:00.000-04:00" comment="removed the test for windows NT and added a test for Microsoft Data Access Components 2.6 since this definition is dependent on the Microsoft Data Access Components version and not the platform">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2005-03-02T08:52:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-23T08:09:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Standardized title." date="2007-03-02T19:00:00.375-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-03-02T19:01:00.393-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:15.008-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.220-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:54:19.542-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:10.176-05:00">ACCEPTED</status_change>
            <modified comment="References registry value for Common Files directory due to multilingual support" date="2008-04-14T11:07:00.270-04:00">
              <contributor organization="GFI Software">Clifford Farrugia</contributor>
            </modified>
            <status_change date="2008-04-14T12:27:04.258-04:00">INTERIM</status_change>
            <status_change date="2008-05-05T04:00:19.709-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Microsoft Data Access Components 2.6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2717"/>
        <criterion comment="the version of msadco.dll is less than 2.62.9119.1" negate="false" test_ref="oval:org.mitre.oval:tst:2716"/>
        <criterion comment="Patch Q329414 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2715"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:292" version="2" class="vulnerability">
      <metadata>
        <title>Linux Kernel mxcsr Code Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Linux kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0248"/>
        <description>The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-26T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:46.889-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:25.916-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="kernel version is less than 2.4.20-18.9" negate="false" test_ref="oval:org.mitre.oval:tst:2721"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2917" version="7" class="vulnerability">
      <metadata>
        <title>OLE Component Input Validation Vulnerability (Windows 2000)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Windows Media Player 9</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0044" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0044"/>
        <description>The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of messages for certain OLE data, which allows remote attackers to execute arbitrary code, aka the "Input Validation Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-02-15T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2005-02-18T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-29T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-06-17T12:00:00.000-04:00" comment="modified cmp-1106 - Replaced the test that checks for the service pack level, instead of checking for sp4 or ealier (did not check for GOLD edition) it is now negating the test that checks for sp5 for later.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2005-06-22T12:35:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected and tightened regular expression in ste:2610" date="2010-12-02T11:46:00.307-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-12-02T11:47:27.917-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:47.125-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:01.745-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:39.740-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 (sp4 or earlier) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 5 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2790"/>
        </criteria>
        <criterion comment="the version of ole32.dll is less than 5.0.2195.7021" negate="false" test_ref="oval:org.mitre.oval:tst:1109"/>
        <criterion comment="the patch KB873333 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1485"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2915" version="1" class="vulnerability">
      <metadata>
        <title>Linux Kernel Denial of Service Vulnerability via fsave and frstor Instructions</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>Linux kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0554" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0554"/>
        <description>Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and frstor instructions, as originally demonstrated using a "crash.c" program.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-09-02T12:10:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-09-08T10:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-09-22T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-10-06T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criteria operator="OR" comment="kernel, kernel-hugemem or kernel-smp rpm older than 2.4.21-15.0.2EL Epoch 0">
          <criterion comment="kernel rpm older than 2.4.21-15.0.2.EL Epoch 0" negate="false" test_ref="oval:org.mitre.oval:tst:476"/>
          <criterion comment="kernel-hugemem rpm older than 2.4.21-15.0.2.EL Epoch 0" negate="false" test_ref="oval:org.mitre.oval:tst:475"/>
          <criterion comment="kernel-smp rpm older than 2.4.21-15.0.2.EL Epoch 0" negate="false" test_ref="oval:org.mitre.oval:tst:474"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:29115" version="3" class="vulnerability">
      <metadata>
        <title>Exchange Cross-Site Request Forgery vulnerability - CVE-2015-1771 (MS15-064)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>Microsoft Exchange Server 2013</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2015-1771" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1771"/>
        <description>Cross-site request forgery (CSRF) vulnerability in the web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allows remote attackers to hijack the authentication of arbitrary users, aka "Exchange Cross-Site Request Forgery Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2015-06-16T10:41:46">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2015-06-22T14:10:51.667-04:00">DRAFT</status_change>
            <status_change date="2015-07-13T04:00:17.668-04:00">INTERIM</status_change>
            <status_change date="2015-08-03T04:01:53.001-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2013 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:18626"/>
          <criterion comment="Check if the version of Exsetup.exe is less than 15.0.847.41" test_ref="oval:org.mitre.oval:tst:139078"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2013 CU8 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 Cumulative Update 8 is installed" definition_ref="oval:org.mitre.oval:def:29138"/>
          <criterion comment="Check if the version of Exsetup.exe is less than 15.0.1076.011" test_ref="oval:org.mitre.oval:tst:139030"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:291" version="3" class="vulnerability">
      <metadata>
        <title>Unchecked Buffer in Password Encryption Procedure</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft SQL Server 2000</product>
          <product>Microsoft SQL Server 2000 Desktop Engine (WMSDE)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0624"/>
        <description>Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote attackers to gain control of the database and execute arbitrary code via SQL Server Authentication, aka "Unchecked Buffer in Password Encryption Procedure."</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Yi-Fang Koh</contributor>
            </submitted>
            <modified date="2005-04-08T10:31:00.000-04:00" comment="modified wft-237 - literal string corrected">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:31:00.000-04:00" comment="modified wft-65 - Corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:31:00.000-04:00" comment="modified wft-66 - corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:31:00.000-04:00" comment="modified wft-67 - Corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:31:00.000-04:00" comment="modified wft-68 - Corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:32:00.000-04:00" comment="modified wft-69 - corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:33:00.000-04:00" comment="modified wft-278 - wft-278 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2005-04-11T08:48:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-04-27T12:07:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:291 - SQL Server 2000 has been replaced by Microsoft SQL Server 2000" date="2014-06-02T14:57:00.519-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-06-02T14:58:42.803-04:00">INTERIM</status_change>
            <status_change date="2014-06-23T04:07:46.400-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Software section">
          <criterion comment="SQL Server 2000 is installed" test_ref="oval:org.mitre.oval:tst:2977"/>
          <criterion comment="the version of sqlservr.exe is less than 2000.80.650.0" test_ref="oval:org.mitre.oval:tst:2718"/>
          <criterion comment="the version of odsole70.dll is less than 2000.80.606.0" test_ref="oval:org.mitre.oval:tst:2925"/>
          <criterion comment="the version of xpqueue.dll is less than 2000.80.606.0" test_ref="oval:org.mitre.oval:tst:2924"/>
          <criterion comment="the version of xprepl.dll is less than 2000.80.606.0" test_ref="oval:org.mitre.oval:tst:2923"/>
          <criterion comment="the version of xplog70.dll is less than 2000.80.606.0" test_ref="oval:org.mitre.oval:tst:2922"/>
          <criterion comment="the version of xpweb70.dll is less than 2000.80.606.0" test_ref="oval:org.mitre.oval:tst:2921"/>
          <criterion comment="the version of xpstar.dll is less than 2000.80.628.0" test_ref="oval:org.mitre.oval:tst:2920"/>
        </criteria>
        <criteria operator="AND" comment="Configuration section">
          <criterion comment="Mixed Mode Enabled" test_ref="oval:org.mitre.oval:tst:2975"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2906" version="4" class="vulnerability">
      <metadata>
        <title>Windows 2000, IE v5.01 CSS Heap Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0842" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0842"/>
        <description>Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from "memory corruption") via certain malformed Cascading Style Sheet (CSS) elements that trigger heap-based buffer overflows, as demonstrated using the "&lt;STYLE>@;/*" string, possibly due to a missing comment terminator that may cause an invalid length to trigger a large memory copy operation, aka the "CSS Heap Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-19T04:45:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-20T02:35:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:39.545-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:14.473-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:33.183-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:13.890-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3534.2800" negate="false" test_ref="oval:org.mitre.oval:tst:519"/>
          <criterion comment="the patch kb834707-ie501sp4 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:518"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:29" version="7" class="vulnerability">
      <metadata>
        <title>Windows 2000 IIS Heap Overrun in HTR Chunked Encoding</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0364" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0364"/>
        <description>Buffer overflow in the chunked encoding transfer mechanism in IIS 4.0 and 5.0 allows attackers to execute arbitrary code via the processing of HTR request sessions, aka "Heap Overrun in HTR Chunked Encoding Could Enable Web Server Compromise."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-14T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected to use a forward slash as the separator in the key." date="2007-05-07T15:59:00.150-04:00">
              <contributor organization="Secure Elements, Inc.">Glenn Strickland</contributor>
            </modified>
            <status_change date="2007-05-07T16:04:54.297-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:42.741-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2884" date="2010-11-29T16:14:00.692-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:40.185-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:46.670-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:43.250-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:39.320-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="IIS major version equals 5" negate="false" test_ref="oval:org.mitre.oval:tst:3081"/>
          <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
          <criterion comment="File %windir%\system32\inetsrv\ism.dll version is less than 5.0.2195.5671" negate="false" test_ref="oval:org.mitre.oval:tst:3059"/>
          <criterion comment="Patch Q321599 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3058"/>
          <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
          <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
          <criterion comment="Win2K/XP/2003 service pack 3 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:3079"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="ism.dll mapping exists" negate="false" test_ref="oval:org.mitre.oval:tst:3057"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:28928" version="3" class="vulnerability">
      <metadata>
        <title>Exchange HTML injection vulnerability - CVE-2015-2359 (MS15-064)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>Microsoft Exchange Server 2013</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2015-2359" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2359"/>
        <description>Cross-site scripting (XSS) vulnerability in the web applications in Microsoft Exchange Server 2013 Cumulative Update 8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Exchange HTML Injection Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2015-06-16T10:41:46">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2015-06-22T14:10:52.070-04:00">DRAFT</status_change>
            <status_change date="2015-07-13T04:00:14.350-04:00">INTERIM</status_change>
            <status_change date="2015-08-03T04:01:50.898-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft Exchange Server 2013 Cumulative Update 8 is installed" definition_ref="oval:org.mitre.oval:def:29138"/>
        <criterion comment="Check if the version of Exsetup.exe is less than 15.0.1076.011" test_ref="oval:org.mitre.oval:tst:139030"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:28924" version="4" class="vulnerability">
      <metadata>
        <title>Microsoft SharePoint page content vulnerabilities – CVE-2015-1700 (MS15-047)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <product>Microsoft SharePoint Server 2007</product>
          <product>Microsoft SharePoint Server 2010</product>
          <product>Microsoft SharePoint Foundation 2010</product>
          <product>Microsoft SharePoint Foundation 2013</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2015-1700" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1700"/>
        <description>Microsoft SharePoint Server 2007 SP3, SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, and SharePoint Foundation 2013 SP1 allow remote authenticated users to execute arbitrary code via crafted page content, aka "Microsoft SharePoint Page Content Vulnerabilities."</description>
        <oval_repository>
          <dates>
            <submitted date="2015-05-20T20:21:11">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2015-05-28T14:09:54.328-04:00">DRAFT</status_change>
            <modified comment="EDITED oval:org.mitre.oval:var:1569 - MS Bulletins - May 2015" date="2015-05-28T14:06:00.511-04:00">
              <contributor organization="SecPod Technologies">Kumarswamy S</contributor>
            </modified>
            <status_change date="2015-06-15T04:00:30.063-04:00">INTERIM</status_change>
            <status_change date="2015-07-06T04:00:33.059-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Sharepoint 2007 and vulnerable file versions">
          <extend_definition comment="Microsoft Office SharePoint Server 2007 is installed." definition_ref="oval:org.mitre.oval:def:2313"/>
          <criterion comment="Check if the version of Microsoft.SharePoint.Portal.dll is less than 12.0.6721.5000" test_ref="oval:org.mitre.oval:tst:137831"/>
        </criteria>
        <criteria operator="AND" comment="Sharepoint 2010 and vulnerable file version">
          <extend_definition comment="Microsoft Office SharePoint Server 2010 is installed." definition_ref="oval:org.mitre.oval:def:12880"/>
          <criterion comment="Check if the version of Microsoft.office.policy.dll is less than 14.0.7149.5000" test_ref="oval:org.mitre.oval:tst:138630"/>
        </criteria>
        <criteria operator="AND" comment="Sharepoint Foundation 2010 / 2010 SP1">
          <extend_definition comment="Microsoft SharePoint Foundation 2010 is installed" definition_ref="oval:org.mitre.oval:def:12224"/>
          <criterion comment="Check if the version of onetutil.dll is less than 14.0.7149.5000" test_ref="oval:org.mitre.oval:tst:138555"/>
        </criteria>
        <criteria operator="AND" comment="Sharepoint Foundation 2013 and vulnerable file version">
          <extend_definition comment="Microsoft SharePoint Foundation 2013 is installed" definition_ref="oval:org.mitre.oval:def:19090"/>
          <criterion comment="Check if the version of stswel.dll is less than 15.0.4719.1002" test_ref="oval:org.mitre.oval:tst:138608"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:28811" version="3" class="vulnerability">
      <metadata>
        <title>OWA modified canary parameter cross site scripting vulnerability - CVE-2015-1628 (MS15-026)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>Microsoft Exchange Server 2013</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2015-1628" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1628"/>
        <description>Cross-site scripting (XSS) vulnerability in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to inject arbitrary web script or HTML via a crafted X-OWA-Canary cookie in an AD.RecipientType.User action, aka "OWA Modified Canary Parameter Cross Site Scripting Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2015-03-16T09:30:30">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2015-03-17T11:22:14.964-04:00">DRAFT</status_change>
            <status_change date="2015-04-06T04:00:15.759-04:00">INTERIM</status_change>
            <status_change date="2015-04-27T04:00:25.136-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2013 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:18626"/>
          <criterion comment="Check if the version of Exsetup.exe is less than 15.0.847.38" test_ref="oval:org.mitre.oval:tst:138401"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2013 CU7 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 Cumulative Update 7 is installed" definition_ref="oval:org.mitre.oval:def:28846"/>
          <criterion comment="Check if the version of Exsetup.exe is less than 15.0.1044.29" test_ref="oval:org.mitre.oval:tst:138053"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:288" class="vulnerability" version="1">
      <metadata>
        <title>WMI Object Broker Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Visual Studio</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4704" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4704"/>
        <description>Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka "WMI Object Broker Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2006-12-13T08:17:04">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-12-14T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-01-03T13:53:52.674-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:14.308-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft Visual Studio 2005 is installed." definition_ref="oval:org.mitre.oval:def:426"/>
        <criterion comment="The version of WmiScriptUtils.dll is less than 8.0.50727.236." test_ref="oval:org.mitre.oval:tst:150"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:28748" version="3" class="vulnerability">
      <metadata>
        <title>ExchangeDLP cross site scripting vulnerability - CVE-2015-1629 (MS15-026)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>Microsoft Exchange Server 2013</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2015-1629" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1629"/>
        <description>Cross-site scripting (XSS) vulnerability in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "ExchangeDLP Cross Site Scripting Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2015-03-16T09:30:30">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2015-03-17T11:22:15.740-04:00">DRAFT</status_change>
            <status_change date="2015-04-06T04:00:13.291-04:00">INTERIM</status_change>
            <status_change date="2015-04-27T04:00:22.393-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2013 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:18626"/>
          <criterion comment="Check if the version of Exsetup.exe is less than 15.0.847.38" test_ref="oval:org.mitre.oval:tst:138401"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2013 CU7 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 Cumulative Update 7 is installed" definition_ref="oval:org.mitre.oval:def:28846"/>
          <criterion comment="Check if the version of Exsetup.exe is less than 15.0.1044.29" test_ref="oval:org.mitre.oval:tst:138053"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:287" version="1" class="vulnerability">
      <metadata>
        <title>Windows Media Player Buffer Overflow via ASF</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Windows Media Player for Windows XP</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0719" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0719"/>
        <description>Buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via a malformed Advanced Streaming Format (ASF) file.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-26T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Media Player for Windows XP is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2727"/>
        <criterion comment="the version of msdxm.ocx is less than 6.4.9.1121" negate="false" test_ref="oval:org.mitre.oval:tst:2720"/>
        <criterion comment="the version of dxmasf.dll is less than 6.4.9.1121" negate="false" test_ref="oval:org.mitre.oval:tst:2726"/>
        <criterion comment="Patch wm308567 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2719"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:28658" version="5" class="vulnerability">
      <metadata>
        <title>Microsoft SharePoint xss vulnerability – CVE-2015-1636 (MS15-022)</title>
        <affected family="windows">
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows 8.1</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft SharePoint Foundation 2013</product>
          <product>Microsoft SharePoint Server 2013</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2015-1636" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1636"/>
        <description>Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2013 Gold and SP1 and SharePoint Server 2013 Gold and SP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2015-03-17T17:47:04">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2015-03-18T09:59:52.885-04:00">DRAFT</status_change>
            <status_change date="2015-04-06T04:00:11.162-04:00">INTERIM</status_change>
            <status_change date="2015-04-27T04:00:19.313-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:var:1569 - MS Bulletins - May 2015" date="2015-05-28T14:06:00.511-04:00">
              <contributor organization="SecPod Technologies">Kumarswamy S</contributor>
            </modified>
            <status_change date="2015-05-28T14:09:56.611-04:00">INTERIM</status_change>
            <status_change date="2015-06-15T04:00:22.408-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Sharepoint Foundation Server 2013 and vulnerable file version">
          <extend_definition comment="Microsoft SharePoint Foundation 2013 is installed" definition_ref="oval:org.mitre.oval:def:19090"/>
          <criterion comment="Check if the version of stswel.dll is less than 15.0.4701.1000" test_ref="oval:org.mitre.oval:tst:138170"/>
        </criteria>
        <criteria operator="AND" comment="Sharepoint Server 2013 and vulnerable file version">
          <extend_definition comment="Microsoft SharePoint Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:16325"/>
          <criteria operator="OR" comment="Check for vulnerable versions">
            <criterion comment="Check if the version of xlsrv.dll is less than 15.0.4701.1000" test_ref="oval:org.mitre.oval:tst:138254"/>
            <criterion comment="Check if the version of wwintl.dll is less than 15.0.4631.1000" test_ref="oval:org.mitre.oval:tst:138441"/>
            <criterion comment="Check if the version of vutils.dll is less than 15.0.4701.1000" test_ref="oval:org.mitre.oval:tst:138393"/>
            <criterion comment="Check if the version of microsoft.office.infopath.server.dll is less than 15.0.4701.1000" test_ref="oval:org.mitre.oval:tst:138339"/>
            <criterion comment="Check if the version of ascalc.dll is less than 15.0.4699.1000" test_ref="oval:org.mitre.oval:tst:138351"/>
            <criterion comment="Check if the version of msoserverintl.dll is less than 15.0.4697.1000" test_ref="oval:org.mitre.oval:tst:138449"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:28607" version="3" class="vulnerability">
      <metadata>
        <title>Exchange Server-Side Request Forgery vulnerability - CVE-2015-1764 (MS15-064)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>Microsoft Exchange Server 2013</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2015-1764" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1764"/>
        <description>The web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allow remote attackers to bypass the Same Origin Policy and send HTTP traffic to intranet servers via a crafted request, related to a Server-Side Request Forgery (SSRF) issue, aka "Exchange Server-Side Request Forgery Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2015-06-16T10:41:46">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2015-06-22T14:10:51.904-04:00">DRAFT</status_change>
            <status_change date="2015-07-13T04:00:11.617-04:00">INTERIM</status_change>
            <status_change date="2015-08-03T04:01:49.943-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2013 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:18626"/>
          <criterion comment="Check if the version of Exsetup.exe is less than 15.0.847.41" test_ref="oval:org.mitre.oval:tst:139078"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2013 CU8 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 Cumulative Update 8 is installed" definition_ref="oval:org.mitre.oval:def:29138"/>
          <criterion comment="Check if the version of Exsetup.exe is less than 15.0.1076.011" test_ref="oval:org.mitre.oval:tst:139030"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:29138" version="3" class="inventory">
      <metadata>
        <title>Microsoft Exchange Server 2013 Cumulative Update 8 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>Microsoft Exchange Server 2013</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:exchange_server:2013:cu8"/>
        <description>Microsoft Exchange Server 2013 Cumulative Update 8 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2015-06-16T18:41:14">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2015-06-22T14:10:51.193-04:00">DRAFT</status_change>
            <status_change date="2015-07-13T04:00:18.099-04:00">INTERIM</status_change>
            <status_change date="2015-08-03T04:01:53.336-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Exchange Server 2013 Cumulative Update 8 is installed" test_ref="oval:org.mitre.oval:tst:138824"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:28524" version="3" class="vulnerability">
      <metadata>
        <title>Audit report cross site scripting vulnerability - CVE-2015-1630 (MS15-026)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>Microsoft Exchange Server 2013</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2015-1630" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1630"/>
        <description>Cross-site scripting (XSS) vulnerability in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Audit Report Cross Site Scripting Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2015-03-16T09:30:30">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2015-03-17T11:22:14.215-04:00">DRAFT</status_change>
            <status_change date="2015-04-06T04:00:08.617-04:00">INTERIM</status_change>
            <status_change date="2015-04-27T04:00:15.732-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2013 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:18626"/>
          <criterion comment="Check if the version of Exsetup.exe is less than 15.0.847.38" test_ref="oval:org.mitre.oval:tst:138401"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2013 CU7 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 Cumulative Update 7 is installed" definition_ref="oval:org.mitre.oval:def:28846"/>
          <criterion comment="Check if the version of Exsetup.exe is less than 15.0.1044.29" test_ref="oval:org.mitre.oval:tst:138053"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:28523" version="3" class="vulnerability">
      <metadata>
        <title>Microsoft SharePoint XSS vulnerability – CVE-2015-1653 (MS15-036)</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <platform>Microsoft Windows 8.1</platform>
          <product>Microsoft SharePoint Foundation 2013</product>
          <product>Microsoft SharePoint Server 2013</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2015-1653" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1653"/>
        <description>Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2013 SP1 and SharePoint Server 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2015-04-21T14:12:20">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2015-04-24T09:26:54.953-04:00">DRAFT</status_change>
            <status_change date="2015-05-11T04:00:14.929-04:00">INTERIM</status_change>
            <status_change date="2015-06-01T04:00:17.114-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Check if the version of Microsoft.Office.Server.Search.dll is less than 15.0.4711.1000" test_ref="oval:org.mitre.oval:tst:137998"/>
        <criteria operator="OR" comment="Either SharePoint Server 2013 / SharePoint Foundation 2013">
          <extend_definition comment="Microsoft SharePoint Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:16325"/>
          <extend_definition comment="Microsoft SharePoint Foundation 2013 is installed" definition_ref="oval:org.mitre.oval:def:19090"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:285" version="2" class="vulnerability">
      <metadata>
        <title>XSLT Buffer Overrun Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft XML Core Services</product>
        </affected>
        <reference ref_id="CVE-2006-4686" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4686" source="CVE"/>
        <description>Buffer overflow in the Extensible Stylesheet Language Transformations (XSLT) processing in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted Web page.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-10-11T05:29:41">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-10-13T14:55:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-31T19:35:36.018-05:00">INTERIM</status_change>
            <status_change date="2006-11-21T21:27:44.869-05:00">ACCEPTED</status_change>
            <modified comment="Changed the location of MSXML5.dll, which is installed as a part of Office 2003 and Office 2007" date="2008-11-19T10:37:00.716-05:00">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2008-11-19T10:38:59.866-05:00">INTERIM</status_change>
            <status_change date="2008-12-08T04:00:47.023-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <extend_definition comment="Microsoft XML Core Services 3 is installed" definition_ref="oval:org.mitre.oval:def:415"/>
          <criterion comment="The version of Msxml3.dll is less than 8.70.1113.0." test_ref="oval:org.mitre.oval:tst:34"/>
        </criteria>
        <criteria operator="AND">
          <extend_definition comment="Microsoft XML Core Services 4 is installed" definition_ref="oval:org.mitre.oval:def:1002"/>
          <criterion comment="The version of Msxml4.dll is less than 4.20.9839.0." test_ref="oval:org.mitre.oval:tst:72"/>
        </criteria>
        <criteria operator="AND">
          <extend_definition comment="Microsoft XML Core Services 5 is installed" definition_ref="oval:org.mitre.oval:def:493"/>
          <criterion comment="The version of Msxml5.dll is less than 5.10.2930.0." test_ref="oval:org.mitre.oval:tst:87"/>
        </criteria>
        <criteria operator="AND">
          <extend_definition comment="Microsoft XML Core Services 6 is installed" definition_ref="oval:org.mitre.oval:def:454"/>
          <criterion comment="The version of Msxml6.dll is less than 6.0.3888.0." test_ref="oval:org.mitre.oval:tst:32"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:28425" version="3" class="vulnerability">
      <metadata>
        <title>Outlook Web App token spoofing vulnerability (CVE-2014-6319) - MS14-075</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows 8.1</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>Microsoft Exchange Server 2007</product>
          <product>Microsoft Exchange Server 2010</product>
          <product>Microsoft Exchange Server 2013</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2014-6319" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6319"/>
        <description>Outlook Web App (OWA) in Microsoft Exchange Server 2007 SP3, 2010 SP3, and 2013 SP1 and Cumulative Update 6 does not properly validate tokens in requests, which allows remote attackers to spoof the origin of e-mail messages via unspecified vectors, aka "Outlook Web App Token Spoofing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2014-12-12T15:06:06">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2014-12-15T23:58:20.948-05:00">DRAFT</status_change>
            <status_change date="2015-01-05T04:00:40.958-05:00">INTERIM</status_change>
            <status_change date="2015-01-26T04:00:43.811-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2007 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2007 (no Service Pack) is installed" definition_ref="oval:org.mitre.oval:def:1641"/>
          <criterion comment="Check if the version of exsetup.exe is less than 8.03.0389.002" test_ref="oval:org.mitre.oval:tst:135507"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2010 is installed" definition_ref="oval:org.mitre.oval:def:15107"/>
          <criterion comment="Check if the version of ExSetup.exe is less than 14.03.0224.001" test_ref="oval:org.mitre.oval:tst:135743"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2013 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:18626"/>
          <criterion comment="Check if the version of ExSetup.exe is less than 15.00.0847.035" test_ref="oval:org.mitre.oval:tst:135793"/>
        </criteria>
        <criteria operator="AND" comment="Exchange 2013 CU 6 and vulnerable file version">
          <criterion comment="Check if the version of ExSetup.exe is less than 15.00.0995.034" test_ref="oval:org.mitre.oval:tst:135701"/>
          <extend_definition comment="Microsoft Exchange Server 2013 CU 6 is installed" definition_ref="oval:org.mitre.oval:def:28213"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15107" version="3" class="inventory">
      <metadata>
        <title>Microsoft Exchange Server 2010 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Exchange Server 2010</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:exchange:2010"/>
        <description>Microsoft Exchange Server 2010 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2012-04-04T12:52:26.748+04:00">
              <contributor organization="ALTX-SOFT">Sergey Artykhov</contributor>
            </submitted>
            <status_change date="2012-04-06T11:34:21.490-04:00">DRAFT</status_change>
            <status_change date="2012-04-23T04:00:13.600-04:00">INTERIM</status_change>
            <status_change date="2012-05-14T04:00:06.829-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Microsoft Exchange Server 2010 is installed" test_ref="oval:org.mitre.oval:tst:77602"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:28415" version="3" class="vulnerability">
      <metadata>
        <title>Exchange URL redirection vulnerability (CVE-2014-6336) - MS14-075</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows 8.1</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>Microsoft Exchange Server 2013</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2014-6336" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6336"/>
        <description>Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 does not properly validate redirection tokens, which allows remote attackers to redirect users to arbitrary web sites and spoof the origin of e-mail messages via unspecified vectors, aka "Exchange URL Redirection Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2014-12-12T15:06:06">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2014-12-15T23:58:17.070-05:00">DRAFT</status_change>
            <status_change date="2015-01-05T04:00:40.340-05:00">INTERIM</status_change>
            <status_change date="2015-01-26T04:00:42.997-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2013 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:18626"/>
          <criterion comment="Check if the version of ExSetup.exe is less than 15.00.0847.035" test_ref="oval:org.mitre.oval:tst:135793"/>
        </criteria>
        <criteria operator="AND" comment="Exchange 2013 CU 6 and vulnerable file version">
          <criterion comment="Check if the version of ExSetup.exe is less than 15.00.0995.034" test_ref="oval:org.mitre.oval:tst:135701"/>
          <extend_definition comment="Microsoft Exchange Server 2013 CU 6 is installed" definition_ref="oval:org.mitre.oval:def:28213"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:284" version="2" class="vulnerability">
      <metadata>
        <title>Linux Kernel TTY Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Linux kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0247" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0247"/>
        <description>Unknown vulnerability in the TTY layer of the Linux kernel 2.4 allows attackers to cause a denial of service ("kernel oops").</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-26T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:42:05.289-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:25.727-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="kernel version is less than 2.4.20-18.9" negate="false" test_ref="oval:org.mitre.oval:tst:2721"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:28328" version="3" class="vulnerability">
      <metadata>
        <title>OWA XSS vulnerability (CVE-2014-6326) - MS14-075</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows 8.1</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>Microsoft Exchange Server 2013</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2014-6326" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6326"/>
        <description>Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "OWA XSS Vulnerability," a different vulnerability than CVE-2014-6325.</description>
        <oval_repository>
          <dates>
            <submitted date="2014-12-12T15:06:06">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2014-12-15T23:58:18.138-05:00">DRAFT</status_change>
            <status_change date="2015-01-05T04:00:32.118-05:00">INTERIM</status_change>
            <status_change date="2015-01-26T04:00:35.683-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2013 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:18626"/>
          <criterion comment="Check if the version of ExSetup.exe is less than 15.00.0847.035" test_ref="oval:org.mitre.oval:tst:135793"/>
        </criteria>
        <criteria operator="AND" comment="Exchange 2013 CU 6 and vulnerable file version">
          <criterion comment="Check if the version of ExSetup.exe is less than 15.00.0995.034" test_ref="oval:org.mitre.oval:tst:135701"/>
          <extend_definition comment="Microsoft Exchange Server 2013 CU 6 is installed" definition_ref="oval:org.mitre.oval:def:28213"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2830" version="1" class="vulnerability">
      <metadata>
        <title>Windows 2000 IE HTML Help ActiveX control Cross Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1043" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1043"/>
        <description>Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help ActiveX Control (hhctrl.ocx) to open a Help popup window containing the PCHealth tools.htm file in the local zone and injecting Javascript to be executed, as demonstrated using "writehta.txt" and the ADODB recordset, which saves a .HTA file to the local system, aka the "HTML Help ActiveX control Cross Domain Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-02-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Matthew Burton</contributor>
            </submitted>
            <status_change date="2005-02-11T12:00:00.000-04:00">DRAFT</status_change>
            <modified date="2005-03-01T12:00:00.000-04:00" comment="Removed software test to check for Windows service Packs">
              <contributor organization="The MITRE Corporation">Matthew Burton</contributor>
            </modified>
            <modified date="2005-03-24T12:00:00.000-04:00" comment="Added a configuration test to see if ActiveX controls are enabled.">
              <contributor organization="The MITRE Corporation">Matthew Burton</contributor>
            </modified>
            <status_change date="2005-04-13T12:15:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-05-04T12:33:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="the version of hhctrl.ocx is less than 5.2.3790.233" negate="false" test_ref="oval:org.mitre.oval:tst:971"/>
          <criterion comment="the patch kb890175 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:972"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:28294" version="3" class="vulnerability">
      <metadata>
        <title>Exchange forged meeting request spoofing vulnerability  - CVE-2015-1631 (MS15-026)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>Microsoft Exchange Server 2013</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2015-1631" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1631"/>
        <description>Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to spoof meeting organizers via unspecified vectors, aka "Exchange Forged Meeting Request Spoofing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2015-03-16T09:30:30">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2015-03-17T11:22:15.438-04:00">DRAFT</status_change>
            <status_change date="2015-04-06T04:00:06.415-04:00">INTERIM</status_change>
            <status_change date="2015-04-27T04:00:12.818-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2013 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:18626"/>
          <criterion comment="Check if the version of Exsetup.exe is less than 15.0.847.38" test_ref="oval:org.mitre.oval:tst:138401"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2013 CU7 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 Cumulative Update 7 is installed" definition_ref="oval:org.mitre.oval:def:28846"/>
          <criterion comment="Check if the version of Exsetup.exe is less than 15.0.1044.29" test_ref="oval:org.mitre.oval:tst:138053"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:28291" version="3" class="vulnerability">
      <metadata>
        <title>OWA XSS vulnerability (CVE-2014-6325) - MS14-075</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows 8.1</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>Microsoft Exchange Server 2013</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2014-6325" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6325"/>
        <description>Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "OWA XSS Vulnerability," a different vulnerability than CVE-2014-6326.</description>
        <oval_repository>
          <dates>
            <submitted date="2014-12-12T15:06:06">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2014-12-15T23:58:19.017-05:00">DRAFT</status_change>
            <status_change date="2015-01-05T04:00:28.586-05:00">INTERIM</status_change>
            <status_change date="2015-01-26T04:00:32.459-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2013 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:18626"/>
          <criterion comment="Check if the version of ExSetup.exe is less than 15.00.0847.035" test_ref="oval:org.mitre.oval:tst:135793"/>
        </criteria>
        <criteria operator="AND" comment="Exchange 2013 CU 6 and vulnerable file version">
          <criterion comment="Check if the version of ExSetup.exe is less than 15.00.0995.034" test_ref="oval:org.mitre.oval:tst:135701"/>
          <extend_definition comment="Microsoft Exchange Server 2013 CU 6 is installed" definition_ref="oval:org.mitre.oval:def:28213"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:28213" version="3" class="inventory">
      <metadata>
        <title>Microsoft Exchange Server 2013 CU 6 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows 8.1</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>Microsoft Exchange Server 2013</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:exchange_server:2013:cu6"/>
        <description>Microsoft Exchange Server 2013 CU 6 is installed. Microsoft Exchange Server is calendaring software, a mail server and contact manager developed by Microsoft.</description>
        <oval_repository>
          <dates>
            <submitted date="2014-12-12T14:23:36">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2014-12-15T23:58:16.589-05:00">DRAFT</status_change>
            <status_change date="2015-01-05T04:00:24.485-05:00">INTERIM</status_change>
            <status_change date="2015-01-26T04:00:28.280-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft Exchange Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:18626"/>
        <criterion comment="Microsoft Exchange Server Cumulative Update 6 is installed" test_ref="oval:org.mitre.oval:tst:135802"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2819" version="1" class="vulnerability">
      <metadata>
        <title>Denial of Service Vulnerability in Linux Kernel do_fork Function via CLONE_VM</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>Linux kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0427" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0427"/>
        <description>The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count counter when an error occurs after the mm_struct for a child process has been activated, which triggers a memory leak that allows local users to cause a denial of service (memory exhaustion) via the clone (CLONE_VM) system call.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-09-01T11:51:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-09-08T10:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-09-22T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-10-06T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="kernel, kernel-hugemem or kernel-smp rpm older than 2.4.21-15.0.2EL Epoch 0">
          <criterion comment="kernel rpm older than 2.4.21-15.0.2.EL Epoch 0" negate="false" test_ref="oval:org.mitre.oval:tst:476"/>
          <criterion comment="kernel-hugemem rpm older than 2.4.21-15.0.2.EL Epoch 0" negate="false" test_ref="oval:org.mitre.oval:tst:475"/>
          <criterion comment="kernel-smp rpm older than 2.4.21-15.0.2.EL Epoch 0" negate="false" test_ref="oval:org.mitre.oval:tst:474"/>
        </criteria>
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2817" version="5" class="vulnerability">
      <metadata>
        <title>IE for Server 2003 Channel Definition Format Cross Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0056" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0056"/>
        <description>Internet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition Format (CDF) files, which allows remote attackers to obtain sensitive information or execute arbitrary code, aka the "Channel Definition Format (CDF) Cross Domain Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-03-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-03-23T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-13T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2005-04-21T03:53:00.000-04:00" comment="modified wrt-158 - removed note">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <modified date="2005-04-21T12:00:00.000-04:00" comment="modified wrt-158 - removed value to check against">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <modified date="2005-05-10T12:00:00.000-04:00" comment="modified wrt-51 - Comment updated to indicate IE 6.">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed test to check kb867282.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2621. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T20:21:00.819-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T20:22:33.790-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:14.059-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:55.338-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:13.821-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6  for Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2801"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.3790.259" negate="false" test_ref="oval:org.mitre.oval:tst:978"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2816" version="4" class="vulnerability">
      <metadata>
        <title>XFS Dispatch() Buffer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <product>fs.auto, xfs</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1317" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1317"/>
        <description>Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a certain XFS query.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-19T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-24T03:40:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
            <modified comment="fixed the service_name entity used in the inetd_object" date="2007-04-10T15:16:00.255-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-04-10T15:16:47.366-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:25.482-04:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:53.493-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:21.086-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="X Window System Font Server (SUNWxwfs) installed" negate="false" test_ref="oval:org.mitre.oval:tst:478"/>
          <criterion comment="Patch 113923-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:477"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="inetd.conf contains fs.auto" negate="false" test_ref="oval:org.mitre.oval:tst:2870"/>
          <criterion comment="inetd running" negate="false" test_ref="oval:org.mitre.oval:tst:3135"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:28" version="2" class="vulnerability">
      <metadata>
        <title>SKK/DDSKK Insecure Temporary File Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>skk</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0539" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0539"/>
        <description>skk (Simple Kana to Kanji conversion program) 12.1 and earlier, and the ddskk package which is based on skk, creates temporary files insecurely, which allows local users to overwrite arbitrary files.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-04T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:59.552-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:25.291-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criteria operator="OR" comment="Vulnerable config">
          <criterion comment="ddskk version is less than 11.6.0-11.90" negate="false" test_ref="oval:org.mitre.oval:tst:3061"/>
          <criterion comment="ddskk-xemacs version is less than 11.6.0-11.90" negate="false" test_ref="oval:org.mitre.oval:tst:3060"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:27900" version="3" class="vulnerability">
      <metadata>
        <title>Exchange error message cross site scripting vulnerability - CVE-2015-1632 (MS15-026)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>Microsoft Exchange Server 2013</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2015-1632" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1632"/>
        <description>Cross-site scripting (XSS) vulnerability in errorfe.aspx in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to inject arbitrary web script or HTML via the msgParam parameter in an authError action, aka "Exchange Error Message Cross Site Scripting Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2015-03-16T09:30:30">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2015-03-17T11:22:14.644-04:00">DRAFT</status_change>
            <status_change date="2015-04-06T04:00:05.298-04:00">INTERIM</status_change>
            <status_change date="2015-04-27T04:00:12.014-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2013 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:18626"/>
          <criterion comment="Check if the version of Exsetup.exe is less than 15.0.847.38" test_ref="oval:org.mitre.oval:tst:138401"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2013 CU7 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 Cumulative Update 7 is installed" definition_ref="oval:org.mitre.oval:def:28846"/>
          <criterion comment="Check if the version of Exsetup.exe is less than 15.0.1044.29" test_ref="oval:org.mitre.oval:tst:138053"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:28846" version="3" class="inventory">
      <metadata>
        <title>Microsoft Exchange Server 2013 Cumulative Update 7 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>Microsoft Exchange Server 2013</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:exchange_server:2013:cu7"/>
        <description>Microsoft Exchange Server 2013 Cumulative Update 7 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2015-03-16T09:30:21">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2015-03-17T11:22:13.692-04:00">DRAFT</status_change>
            <status_change date="2015-04-06T04:00:16.874-04:00">INTERIM</status_change>
            <status_change date="2015-04-27T04:00:26.847-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Exchange Server 2013 Cumulative Update 7 is installed" test_ref="oval:org.mitre.oval:tst:138458"/>
        <extend_definition comment="Microsoft Exchange Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:18626"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:27875" version="5" class="vulnerability">
      <metadata>
        <title>Microsoft SharePoint xss vulnerability – CVE-2015-1633 (MS15-022)</title>
        <affected family="windows">
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows 8.1</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>Microsoft SharePoint Foundation 2010</product>
          <product>Microsoft SharePoint Foundation 2013</product>
          <product>Microsoft SharePoint Server 2010</product>
          <product>Microsoft SharePoint Server 2013</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2015-1633" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1633"/>
        <description>Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, SharePoint Foundation 2013 Gold and SP1, and SharePoint Server 2013 Gold and SP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2015-03-17T17:47:04">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2015-03-18T10:00:06.481-04:00">DRAFT</status_change>
            <status_change date="2015-04-06T04:00:04.604-04:00">INTERIM</status_change>
            <status_change date="2015-04-27T04:00:11.681-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:var:1569 - MS Bulletins - May 2015" date="2015-05-28T14:06:00.511-04:00">
              <contributor organization="SecPod Technologies">Kumarswamy S</contributor>
            </modified>
            <status_change date="2015-05-28T14:09:56.846-04:00">INTERIM</status_change>
            <status_change date="2015-06-15T04:00:12.182-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Sharepoint Server 2010 and vulnerable file version">
          <extend_definition comment="Microsoft Office SharePoint Server 2010 is installed." definition_ref="oval:org.mitre.oval:def:12880"/>
          <criterion comment="Check if the version of msoserver.dll is less than 14.0.7145.5000" test_ref="oval:org.mitre.oval:tst:138365"/>
        </criteria>
        <criteria operator="AND" comment="Sharepoint Foundation Server 2013 and vulnerable file version">
          <extend_definition comment="Microsoft SharePoint Foundation 2013 is installed" definition_ref="oval:org.mitre.oval:def:19090"/>
          <criterion comment="Check if the version of stswel.dll is less than 15.0.4701.1000" test_ref="oval:org.mitre.oval:tst:138170"/>
        </criteria>
        <criteria operator="AND" comment="Sharepoint Server 2013 and vulnerable file version">
          <extend_definition comment="Microsoft SharePoint Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:16325"/>
          <criteria operator="OR" comment="Check for vulnerable versions">
            <criterion comment="Check if the version of xlsrv.dll is less than 15.0.4701.1000" test_ref="oval:org.mitre.oval:tst:138254"/>
            <criterion comment="Check if the version of wwintl.dll is less than 15.0.4631.1000" test_ref="oval:org.mitre.oval:tst:138441"/>
            <criterion comment="Check if the version of vutils.dll is less than 15.0.4701.1000" test_ref="oval:org.mitre.oval:tst:138393"/>
            <criterion comment="Check if the version of microsoft.office.infopath.server.dll is less than 15.0.4701.1000" test_ref="oval:org.mitre.oval:tst:138339"/>
            <criterion comment="Check if the version of ascalc.dll is less than 15.0.4699.1000" test_ref="oval:org.mitre.oval:tst:138351"/>
            <criterion comment="Check if the version of msoserverintl.dll is less than 15.0.4697.1000" test_ref="oval:org.mitre.oval:tst:138449"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Sharepoint Foundation Server 2010 and vulnerable file version">
          <extend_definition comment="Microsoft SharePoint Foundation 2010 is installed" definition_ref="oval:org.mitre.oval:def:12224"/>
          <criterion comment="Check if the version of onetutil.dll is less than 14.0.7145.5000" test_ref="oval:org.mitre.oval:tst:138454"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2786" version="4" class="vulnerability">
      <metadata>
        <title>IE5.01,SP4 Content Advisor Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0555"/>
        <description>Buffer overflow in the Content Advisor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a crafted Content Advisor file, aka "Content Advisor Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-05-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-05-11T05:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-22T12:38:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:41.384-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:13.825-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:45.123-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:13.746-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3826.2400" negate="false" test_ref="oval:org.mitre.oval:tst:567"/>
          <criterion comment="the patch kb890923 is installed (Win2K SP4  Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:566"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:27824" version="4" class="vulnerability">
      <metadata>
        <title>SharePoint elevation of privilege vulnerability - CVE-2014-4116 (MS14-073)</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows 8.1</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <platform>Microsoft Windows Vista</platform>
          <product>Microsoft SharePoint Foundation 2010</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2014-4116" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4116"/>
        <description>Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2010 SP2 allows remote authenticated users to inject arbitrary web script or HTML via a modified list, aka "SharePoint Elevation of Privilege Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2014-11-14T10:39:40">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2014-11-17T17:29:43.671-05:00">DRAFT</status_change>
            <modified comment="EDITED oval:org.mitre.oval:var:1390 - November 2014 bulletins." date="2014-11-17T17:25:00.386-05:00">
              <contributor organization="SecPod Technologies">Kumarswamy S</contributor>
            </modified>
            <status_change date="2014-12-08T04:00:50.207-05:00">INTERIM</status_change>
            <status_change date="2014-12-29T04:00:19.171-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft SharePoint Foundation 2010 is installed" definition_ref="oval:org.mitre.oval:def:12224"/>
        <criterion comment="Check if the version of Onetutil.dll is less than 14.0.7137.5000" test_ref="oval:org.mitre.oval:tst:134500"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:278" version="2" class="vulnerability">
      <metadata>
        <title>Linux ioperm Privilege Restriction Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Linux kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0246" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0246"/>
        <description>The ioperm system call in Linux kernel 2.4.20 and earlier does not properly restrict privileges, which allows local users to gain read or write access to certain I/O ports.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-25T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:56.655-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:25.107-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="kernel version is less than 2.4.20-13.9" negate="false" test_ref="oval:org.mitre.oval:tst:2742"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2770" version="5" class="vulnerability">
      <metadata>
        <title>Solaris 9 CDE ToolTalk Database Server Symbolic Link Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <product>Common Desktop Environment</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0678" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0678"/>
        <description>CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-15T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2004-10-20T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-01-11T12:00:00.000-04:00" comment="modified sat-6 - Changed test to pattern match and added check for 64bit version">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </modified>
            <modified date="2005-01-14T12:00:00.000-04:00" comment="modified sat-6 - Changed regular expression test to properly check for 64bit package">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </modified>
            <status_change date="2005-01-24T02:39:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="fixed the service_name entity used in the inetd_object" date="2007-04-10T15:17:00.627-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-04-10T15:17:29.208-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:24.787-04:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:53.201-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:20.686-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="Toolktalk (SUNWtltk/SUNWtltkx) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1169"/>
          <criterion comment="Patch 112808-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1168"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="inetd running" negate="false" test_ref="oval:org.mitre.oval:tst:3135"/>
          <criterion comment="inetd.conf contains rpc.ttdbserverd" negate="false" test_ref="oval:org.mitre.oval:tst:3103"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:277" version="2" class="vulnerability">
      <metadata>
        <title>SMB Session Digital Signature Sidestep</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>SMB Signing (Server Message Block)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1256" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1256"/>
        <description>The SMB signing capability in the Server Message Block (SMB) protocol in Microsoft Windows 2000 and Windows XP allows attackers to disable the digital signing settings in an SMB session to force the data to be sent unsigned, then inject data into the session without detection, e.g. by modifying group policy information sent from a domain controller.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-16T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-27T11:09:00.000-04:00" comment="modified wft-276 - Changed test to match comment">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="the version of srvsvc.dll is less than 5.0.2195.6110" negate="false" test_ref="oval:org.mitre.oval:tst:2730"/>
          <criterion comment="Patch Q329170 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2729"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="SMB Signing enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2728"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2753" version="1" class="vulnerability">
      <metadata>
        <title>Windows 2000 Program Group Converter Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Program Group Converter</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0572" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0572"/>
        <description>Buffer overflow in the Windows Program Group Converter (grpconv.exe) may allow remote attackers to execute arbitrary code via a shell: URL with a long filename and a .grp extension, which is not properly handled when the shell capability launches grpconv.exe.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-14T03:39:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-10-20T02:35:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="the version of grpconv.exe (system32) is less than 5.0.2195.6966" negate="false" test_ref="oval:org.mitre.oval:tst:479"/>
        <criterion comment="the patch q841356 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:739"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2738" version="1" class="vulnerability">
      <metadata>
        <title>Microsoft Office Visio Professional URL Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Office Visio Professional 2002</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0848" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0848"/>
        <description>Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long inputs after (1) "%00 (null byte) in .doc filenames or (2) "%0a" (carriage return) in .rtf filenames.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-03-29T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2005-03-29T08:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-13T12:15:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-05-04T12:33:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Microsoft Office Visio Professional 2002 with service pack 2" negate="false" test_ref="oval:org.mitre.oval:tst:481"/>
        <criterion comment="Patch KB873354 installed" negate="true" test_ref="oval:org.mitre.oval:tst:480"/>
        <criterion comment="the version of mso.dll is less than 10.0.6735.0" negate="false" test_ref="oval:org.mitre.oval:tst:554"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2734" version="2" class="vulnerability">
      <metadata>
        <title>WINS Association Context Vulnerability (Terminal Server Test 1)</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <product>Windows Internet Naming Service (WINS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1080" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1080"/>
        <description>The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port 42, aka the "Association Context Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-12-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Matthew Burton</contributor>
            </submitted>
            <status_change date="2005-01-12T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-02T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-23T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-06-02T12:00:00.000-04:00" comment="Added product">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-06-08T03:17:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-29T06:49:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="this is an NT Terminal Server" negate="false" test_ref="oval:org.mitre.oval:tst:3097"/>
          <criterion comment="the version of wins.exe is less than 4.0.1381.33618" negate="false" test_ref="oval:org.mitre.oval:tst:482"/>
          <criterion comment="the patch KB870763 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:865"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="the wins service is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2405"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2731" version="1" class="vulnerability">
      <metadata>
        <title>Server 2003 Font Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Windows kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0060" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0060"/>
        <description>Buffer overflow in the font processing component of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-05-02T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2005-05-04T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2005-06-02T12:00:00.000-04:00" comment="Added product">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-06-22T12:38:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="The version of Ntoskrnl.exe is less than 5.2.3790.280" negate="false" test_ref="oval:org.mitre.oval:tst:1025"/>
        <criterion comment="the patch KB890859 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2737"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2730" version="5" class="vulnerability">
      <metadata>
        <title>Microsoft Data Access Components 2.5 Remote Data Services Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 95</platform>
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Data Access Components 2.5</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1142" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1142"/>
        <description>Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-08-24T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2004-08-25T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-09-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-29T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-02-28T12:00:00.000-04:00" comment="removed the test for windows NT and added a test for Microsoft Data Access Components 2.5 since this definition is dependent on the Microsoft Data Access Components version and not the platform">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2005-03-02T08:52:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-23T08:09:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed title." date="2007-03-02T18:54:00.290-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-03-02T18:55:52.307-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:13.972-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.220-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:54:20.160-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:09.900-05:00">ACCEPTED</status_change>
            <modified comment="References registry value for Common Files directory due to multilingual support" date="2008-04-14T11:07:00.270-04:00">
              <contributor organization="GFI Software">Clifford Farrugia</contributor>
            </modified>
            <status_change date="2008-04-14T12:27:08.969-04:00">INTERIM</status_change>
            <status_change date="2008-05-05T04:00:18.440-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Microsoft Data Access Components 2.5 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2576"/>
        <criterion comment="the version of msadco.dll is less than 2.53.6202.0" negate="false" test_ref="oval:org.mitre.oval:tst:483"/>
        <criterion comment="Patch Q329414 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2715"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:272" version="4" class="vulnerability">
      <metadata>
        <title>IE v6.0 Domain Restriction Bypass Cross-Frame Scripting</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1217" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1217"/>
        <description>Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code, read arbitrary files, or conduct other unauthorized activities via script that accesses the Document property, which bypasses &lt;frame> and &lt;iframe> domain restrictions.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-27T05:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-03-09T05:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="Changed IE registry test to wrt-18">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:44.985-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:13.673-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="the version of mshtml.dll is less than 6.0.2722.900" negate="false" test_ref="oval:org.mitre.oval:tst:2884"/>
        <criterion comment="the patch q328970 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3117"/>
        <criterion comment="the patch q324929 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3116"/>
        <criterion comment="the patch q810847 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3115"/>
        <criterion comment="the patch q813489 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3114"/>
        <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2719" version="1" class="vulnerability">
      <metadata>
        <title>Buffer Management Error in OpenSSH</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <product>OpenSSH</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0693" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0693"/>
        <description>A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-2003-0695.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-12-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-12T12:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-02T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-23T09:25:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="Patch 113273-04 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:485"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="sshd running" negate="false" test_ref="oval:org.mitre.oval:tst:484"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:271" version="2" class="vulnerability">
      <metadata>
        <title>SQL Server OpenDataSource/OpenRowset Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft SQL Server 2000</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0056" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0056"/>
        <description>Buffer overflow in SQL Server 7.0 and 2000 allows remote attackers to execute arbitrary code via a long OLE DB provider name to (1) OpenDataSource or (2) OpenRowset in an ad hoc connection.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Yi-Fang Koh</contributor>
            </submitted>
            <modified date="2005-04-08T10:31:00.000-04:00" comment="modified wft-275 - wft-275 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T12:00:00.000-04:00" comment="modified wft-274 - wft-274 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2005-04-11T08:48:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-04-27T12:07:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:20:00.000-04:00" comment="modified wft-274 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2005-09-27T01:22:00.000-04:00" comment="modified wft-275 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="SQL Server 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2977"/>
        <criterion comment="File sqlservr.exe version3 is less than 2000.80.578.0" negate="false" test_ref="oval:org.mitre.oval:tst:2732"/>
        <criterion comment="File xpstar.dll version3 is less than 2000.80.561.0" negate="false" test_ref="oval:org.mitre.oval:tst:2731"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:27" version="10" class="vulnerability">
      <metadata>
        <title>IE v5.01 Content Disposition/Type Arbitrary Code Execution</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0193" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0193"/>
        <description>Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error message, aka the first variant of the "Content Disposition" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-27T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified date="2005-03-07T12:00:00.000-04:00" comment="modified wrt-222 - changed pattern match">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-03-09T07:55:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-29T07:59:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-07-03T12:56:00.000-04:00" comment="Added negate=true attribute to criteria sub-block to fix conversion error from OVAL 4.2 to OVAL 5.0">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-07-03T12:56:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:19.605-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2875 set datatype to version on version element. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-12T20:46:00.631-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-12T20:47:59.736-05:00">INTERIM</status_change>
            <modified comment="Corrected ste:2873. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-12T20:52:00.978-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <modified comment="Corrected ste:2874. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-12T21:00:00.301-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <modified comment="Corrected ste:2871. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-12T21:03:00.158-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <modified comment="Corrected ste:2872. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-12T21:06:00.183-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <modified comment="Corrected ste:2870. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:36:00.896-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <modified comment="Corrected ste:2869. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:39:00.994-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <modified comment="Corrected ste:2868. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:41:00.387-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-02-20T13:40:13.024-05:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2878" date="2010-11-29T16:13:00.904-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:05.286-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:45.973-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:42.368-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:37.646-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:45.383-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:13.538-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Internet Explorer 5.01 Installed">
          <criterion comment="Internet Explorer 5.01 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3070"/>
          <criterion comment="Internet Explorer 5.01 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3069"/>
          <criterion comment="Internet Explorer 5.01 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3068"/>
          <criterion comment="Internet Explorer 5.01 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3067"/>
          <criterion comment="Internet Explorer 5.01 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3066"/>
          <criterion comment="Internet Explorer 5.01 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3065"/>
          <criterion comment="Internet Explorer 5.01 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3064"/>
          <criterion comment="Internet Explorer 5.01 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3063"/>
        </criteria>
        <criterion comment="the version of mshtml.dll is less than 5.0.3504.2500" negate="false" test_ref="oval:org.mitre.oval:tst:3062"/>
        <criterion comment="the patch q321232 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3119"/>
        <criterion comment="the patch q323759 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3118"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed" negate="true">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="SP4 or later Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3073"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2692" version="5" class="vulnerability">
      <metadata>
        <title>IE5.01,SP3 DHTML Method Heap Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0055" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0055"/>
        <description>Internet Explorer 5.01, 5.5, and 6 does not properly validate buffers when handling certain DHTML methods including the createControlRange Javascript function, which allows remote attackers to execute arbitrary code, aka the "DHTML Method Heap Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-03-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-03-23T08:09:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-13T12:15:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-05-04T12:33:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed test to check kb867282.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2824. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:48:00.494-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:52:26.331-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:12.698-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:39.572-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:13.428-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3015"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3528.700" negate="false" test_ref="oval:org.mitre.oval:tst:749"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2671" version="6" class="vulnerability">
      <metadata>
        <title>Windows 2000 Certificate Validation Identity Spoofing Vulnerability (Test 2)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Certificate Validation</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0862" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0862"/>
        <description>The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Windows 98 through XP, Office for Mac, Internet Explorer for Mac, and Outlook Express for Mac, do not properly verify the Basic Constraints of intermediate CA-signed X.509 certificates, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack for SSL sessions, as originally reported for Internet Explorer and IIS.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-11T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <modified date="2004-07-12T12:00:00.000-04:00" comment="negated patch info.">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2004-07-13T12:00:00.000-04:00" comment="Added superceding patch info.">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2004-07-14T12:00:00.000-04:00" comment="Changed to DRAFT">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2004-08-04T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-08-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-06-02T12:00:00.000-04:00" comment="Added product">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-06-08T03:17:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-29T06:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:13.649-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:13.745-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:22.072-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:35.841-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 (sp3 or earlier) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="the version of cryptdlg.dll is less then 5.0.1558.6072" negate="false" test_ref="oval:org.mitre.oval:tst:1229"/>
        <criterion comment="the patch Q329115 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1231"/>
        <criterion comment="the patch kb835732 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1510"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:267" version="5" class="vulnerability">
      <metadata>
        <title>Windows XP Plug and Play Buffer Overflow Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1983" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1983"/>
        <description>Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob (aka Mytob) worm.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:40:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:44.992-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:52.447-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:267 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:04:39.216-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:35.445-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows XP is installed" test_ref="oval:org.mitre.oval:tst:3750"/>
        <criterion comment="Win2K/XP/2003 service pack 1 is installed" test_ref="oval:org.mitre.oval:tst:3342"/>
        <criterion negate="true" comment="64-Bit (ia64 architecture) version of Windows is installed" test_ref="oval:org.mitre.oval:tst:3257"/>
        <criterion comment="the version of umpnpmgr.dll is less than 5.1.2600.1711" test_ref="oval:org.mitre.oval:tst:3367"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:26680" version="3" class="vulnerability">
      <metadata>
        <title>Lync Denial of Service vulnerability (CVE-2014-4068) - MS14-055</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows 8.1</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>Microsoft Lync Server 2013</product>
          <product>Microsoft Lync Server 2010</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2014-4068" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4068"/>
        <description>The Response Group Service in Microsoft Lync Server 2010 and 2013 and the Core Components in Lync Server 2013 do not properly handle exceptions, which allows remote attackers to cause a denial of service (daemon hang) via a crafted call, aka "Lync Denial of Service Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2014-09-12T17:08:37">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2014-09-17T10:58:56.842-04:00">DRAFT</status_change>
            <status_change date="2014-10-06T04:03:58.073-04:00">INTERIM</status_change>
            <status_change date="2014-10-27T04:01:22.329-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Lync server 2013 / vulnerable file version">
          <extend_definition comment="Microsoft Lync Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:16524"/>
          <criteria operator="OR" comment="either file versions">
            <criterion comment="Check if the version of Microsoft.Rtc.Acd.Workflow.dll is less than 5.0.8308.803" test_ref="oval:org.mitre.oval:tst:123294"/>
            <criterion comment="Check if the version of Deploy.resources.dll is less than 5.0.8308.420" test_ref="oval:org.mitre.oval:tst:123329"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Lync server 2010 / vulnerable file version">
          <extend_definition comment="Microsoft Lync Server 2010 is installed" definition_ref="oval:org.mitre.oval:def:26794"/>
          <criteria operator="OR" comment="either file versions">
            <criterion comment="Check if the version of wrtces.dll is less than 4.0.7577.230" test_ref="oval:org.mitre.oval:tst:123304"/>
            <criterion comment="Check if the version of Microsoft.Rtc.Acd.Workflow.dll is less than 4.0.7577.276" test_ref="oval:org.mitre.oval:tst:122801"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2665" version="1" class="vulnerability">
      <metadata>
        <title>Data Leak in NIC</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>Sun Am7990 Ethernet Driver</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0001" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0001"/>
        <description>Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-12-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-12T12:41:00.000-04:00">DRAFT</status_change>
            <modified comment="Fixed obj:424: set operation to pattern match on filename.  Removed pattern match from path." date="2007-01-22T14:01:00.764-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
          </dates>
          <status>INTERIM</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Software section">
          <criteria operator="OR" comment="Solaris 7,8,or 9 installed">
            <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="Solaris 7 Installed" test_ref="oval:org.mitre.oval:tst:3045"/>
            <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          </criteria>
          <criterion negate="true" comment="Patch 112604-02 or later installed" test_ref="oval:org.mitre.oval:tst:497"/>
          <criterion negate="true" comment="Patch 112609-02 or later installed" test_ref="oval:org.mitre.oval:tst:496"/>
          <criterion negate="true" comment="Patch 115172-01 or later installed" test_ref="oval:org.mitre.oval:tst:495"/>
        </criteria>
        <criteria operator="AND" comment="Configuration section">
          <criterion comment="Lance Ethernet (le) interface configured to start" test_ref="oval:org.mitre.oval:tst:494"/>
          <criterion comment="Lance Ethernet interface in use" test_ref="oval:org.mitre.oval:tst:493"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2657" version="4" class="vulnerability">
      <metadata>
        <title>Outlook Express v6.0 for Server 2003 Malformed Email Header Denial of Service</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Outlook Express</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0215" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0215"/>
        <description>Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service (application crash) via a malformed e-mail header.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-08-26T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </submitted>
            <status_change date="2004-08-26T10:32:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-09-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-29T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-06-02T12:00:00.000-04:00" comment="Added product">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-06-08T03:17:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-29T06:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:533: changed Hive from HKEY_CLASSES_ROOT to HKEY_LOCAL_MACHINE.  Implemented by Harvey Rubinovitz." date="2007-01-22T01:12:00.977-05:00">
              <contributor organization="GFI Software">Daniel Tarnu</contributor>
            </modified>
            <status_change date="2007-01-22T01:12:58.518-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:12.412-05:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.788-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:52:38.593-04:00">INTERIM</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.053-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-11-13T12:01:09.610-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
          <criterion comment="Microsoft Outlook Express 6 for Windows 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2855"/>
          <criterion comment="the patch kb823353 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:668"/>
          <criteria operator="OR" comment="a vulnerable version of inetcomm.dll exisits">
            <criterion comment="machine has followed the GDR update path and inetcomm.dll is less than 6.0.3790.181" negate="false" test_ref="oval:org.mitre.oval:tst:499"/>
            <criterion comment="machine has followed the QFE update path and inetcomm.dll is less than 6.0.3790.185" negate="false" test_ref="oval:org.mitre.oval:tst:498"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="all users have the preview pane disabled" negate="false" test_ref="oval:org.mitre.oval:tst:667"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:26550" version="3" class="vulnerability">
      <metadata>
        <title>Lync Denial of Service vulnerability (CVE-2014-4071) - MS14-055</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows 8.1</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>Microsoft Lync Server 2013</product>
          <product>Microsoft Lync Server 2010</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2014-4071" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4071"/>
        <description>The Server in Microsoft Lync Server 2013 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon hang) via a crafted request, aka "Lync Denial of Service Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2014-09-12T17:08:37">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2014-09-17T10:58:56.412-04:00">DRAFT</status_change>
            <status_change date="2014-10-06T04:03:45.038-04:00">INTERIM</status_change>
            <status_change date="2014-10-27T04:01:01.738-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Lync server 2013 / vulnerable file version">
          <extend_definition comment="Microsoft Lync Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:16524"/>
          <criterion comment="Check if the version of SIPStack.dll is less than 5.0.8308.803" test_ref="oval:org.mitre.oval:tst:123219"/>
        </criteria>
        <criteria operator="AND" comment="Lync server 2010 / vulnerable file version">
          <extend_definition comment="Microsoft Lync Server 2010 is installed" definition_ref="oval:org.mitre.oval:def:26794"/>
          <criterion comment="Check if the version of wrtces.dll is less than 4.0.7577.230" test_ref="oval:org.mitre.oval:tst:123304"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:26794" version="3" class="inventory">
      <metadata>
        <title>Microsoft Lync Server 2010 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows 8.1</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>Microsoft Lync Server 2010</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:lync_server:2010"/>
        <description>Microsoft Lync Server 2010 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2014-09-12T15:07:42">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2014-09-17T10:58:55.728-04:00">DRAFT</status_change>
            <status_change date="2014-10-06T04:04:06.363-04:00">INTERIM</status_change>
            <status_change date="2014-10-27T04:01:36.134-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Microsoft Lync Server 2010 is installed" test_ref="oval:org.mitre.oval:tst:123575"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16524" version="3" class="inventory">
      <metadata>
        <title>Microsoft Lync Server 2013 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <product>Microsoft Lync Server 2013</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:lync_server:2013"/>
        <description>Microsoft Lync Server 2013 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2013-05-17T15:07:42">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-05-21T11:55:37.927-04:00">DRAFT</status_change>
            <status_change date="2013-06-10T04:01:08.247-04:00">INTERIM</status_change>
            <status_change date="2013-07-01T04:00:49.126-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Microsoft Lync Server 2013 is installed" test_ref="oval:org.mitre.oval:tst:81027"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:264" version="6" class="vulnerability">
      <metadata>
        <title>Windows 2000 RPCSS DCOM Buffer Overflow (Blaster, Test 1)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0715" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0715"/>
        <description>Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed DCERPC DCOM object activation request packet with modified length fields, a different vulnerability than CVE-2003-0352 (Blaster/Nachi) and CVE-2003-0528.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-12-03T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2884" date="2010-11-29T16:14:00.692-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:38.536-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:45.273-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:33.111-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:34.353-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="the version of rpcrt4.dll is less than 5.0.2195.6802" negate="false" test_ref="oval:org.mitre.oval:tst:2914"/>
          <criterion comment="the patch kb824146 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:3082"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="DCOM is enabled on systems with SP3 or later">
            <criterion comment="Win2K/XP/2003 service pack 3 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3079"/>
            <criterion comment="DCOM is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2913"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2638" version="1" class="vulnerability">
      <metadata>
        <title>Windows 98 Long Share Names Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <product>Windows Shell</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0214"/>
        <description>Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application crash) and possibly execute arbitrary code via long share names, as demonstrated using Samba.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-14T03:37:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-10-20T02:35:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 98 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:1345"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:26378" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability allows remote attackers to bypass Protected Mode</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows 8.1</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>Microsoft Internet Explorer 8</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2011-1347" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1347"/>
        <description>Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to bypass Protected Mode and create arbitrary files by leveraging access to a Low integrity process, as demonstrated by Stephen Fewer as the third of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011.</description>
        <oval_repository>
          <dates>
            <submitted date="2014-09-03T08:31:03">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </submitted>
            <status_change date="2014-09-11T08:03:40.643-04:00">DRAFT</status_change>
            <status_change date="2014-09-29T04:00:19.262-04:00">INTERIM</status_change>
            <status_change date="2014-10-20T04:00:27.454-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:26378 - Modified vulnerabilities - a lot of fixes" date="2015-07-22T13:39:00.268-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-07-22T13:41:47.467-04:00">INTERIM</status_change>
            <status_change date="2015-08-10T04:00:27.668-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 8 is installed" definition_ref="oval:org.mitre.oval:def:6210"/>
        <criteria operator="OR" comment="GDR or LDR Service branch">
          <criterion comment="Mshtml.dll version is less than 8.0.7600.16722" test_ref="oval:org.mitre.oval:tst:42403"/>
          <criteria operator="AND" comment="LDR">
            <criterion comment="Mshtml.dll version is greater than or equal 8.0.7600.20000" test_ref="oval:org.mitre.oval:tst:20848"/>
            <criterion comment="Mshtml.dll version is less than 8.0.7600.20861" test_ref="oval:org.mitre.oval:tst:42393"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:26317" version="3" class="vulnerability">
      <metadata>
        <title>Allows remote attackers to spoof web sites via a crafted HTML document</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer 8</product>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2013-1451" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1451"/>
        <description>Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy address and Port values in the HTTP and Secure rows, does not ensure that the SSL lock icon is consistent with the Address bar, which makes it easier for remote attackers to spoof web sites via a crafted HTML document that triggers many HTTPS requests to an arbitrary host, followed by an HTTPS request to a trusted host and then an HTTP request to an untrusted host, a related issue to CVE-2013-1450.</description>
        <oval_repository>
          <dates>
            <submitted date="2014-09-03T08:31:03">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </submitted>
            <status_change date="2014-09-11T08:03:45.045-04:00">DRAFT</status_change>
            <status_change date="2014-09-29T04:00:18.248-04:00">INTERIM</status_change>
            <status_change date="2014-10-20T04:00:25.447-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <extend_definition comment="Microsoft Internet Explorer 8 is installed" definition_ref="oval:org.mitre.oval:def:6210"/>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:org.mitre.oval:def:11985"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:26308" version="3" class="vulnerability">
      <metadata>
        <title>Allows remote attackers to obtain sensitive information intended for a specific host via a crafted HTML document</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer 8</product>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2013-1450" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1450"/>
        <description>Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy address and Port values in the HTTP and Secure rows, does not properly reuse TCP sessions to the proxy server, which allows remote attackers to obtain sensitive information intended for a specific host via a crafted HTML document that triggers many HTTPS requests and then triggers an HTTP request to that host, as demonstrated by reading a Cookie header, aka MSRC 12096gd.</description>
        <oval_repository>
          <dates>
            <submitted date="2014-09-03T08:31:03">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </submitted>
            <status_change date="2014-09-11T08:03:35.872-04:00">DRAFT</status_change>
            <status_change date="2014-09-29T04:00:18.073-04:00">INTERIM</status_change>
            <status_change date="2014-10-20T04:00:25.246-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <extend_definition comment="Microsoft Internet Explorer 8 is installed" definition_ref="oval:org.mitre.oval:def:6210"/>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:org.mitre.oval:def:11985"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:26300" version="3" class="vulnerability">
      <metadata>
        <title>SharePoint Page Content Vulnerability (CVE-2014-2816) - MS14-050</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>Microsoft SharePoint Foundation 2013</product>
          <product>Microsoft SharePoint Server 2013</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2014-2816" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2816"/>
        <description>Microsoft SharePoint Server 2013 Gold and SP1 and SharePoint Foundation 2013 Gold and SP1 allow remote authenticated users to gain privileges via a Trojan horse app that executes a custom action in the context of the SharePoint extensibility model, aka "SharePoint Page Content Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2014-08-19T14:12:20">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2014-08-26T16:05:02.551-04:00">DRAFT</status_change>
            <status_change date="2014-09-15T04:00:54.428-04:00">INTERIM</status_change>
            <status_change date="2014-10-06T04:03:31.051-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="Sharepoint Server or Foundation 2013">
          <extend_definition comment="Microsoft SharePoint Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:16325"/>
          <extend_definition comment="Microsoft SharePoint Foundation 2013 is installed" definition_ref="oval:org.mitre.oval:def:19090"/>
        </criteria>
        <criterion comment="Check if the version of wsssetup.dll is less than 15.0.4641.1000" test_ref="oval:org.mitre.oval:tst:121842"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:263" version="1" class="vulnerability">
      <metadata>
        <title>Gaim DoS via Malformed MSN Message</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>Gaim</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1934" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1934"/>
        <description>Gaim before 1.3.1 allows remote attackers to cause a denial of service (crash) via a malformed MSN message that leads to a memory allocation of a large size, possibly due to an integer signedness error.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-07-11T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-07-27T10:36:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="gaim RPM earlier than 1:1.3.1-0.el3" negate="false" test_ref="oval:org.mitre.oval:tst:2740"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/gaim is executable by any user" negate="false" test_ref="oval:org.mitre.oval:tst:2739"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2621" version="1" class="vulnerability">
      <metadata>
        <title>OpenSSL Denial of Service Vulnerabilities</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>Sun Crypto Accelerator 4000</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0079"/>
        <description>The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-12T09:44:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2004-10-13T01:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-10-27T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-11-17T10:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="OR" comment="Solaris 8 or 9 installed">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          </criteria>
          <criterion comment="Patch 114796-04 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:501"/>
          <criterion comment="Sun Crypto Accelerator 4000 software installed" negate="false" test_ref="oval:org.mitre.oval:tst:500"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="Apache running (httpd)" negate="false" test_ref="oval:org.mitre.oval:tst:654"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:26208" version="3" class="vulnerability">
      <metadata>
        <title>Denial of service (memory corruption) by leveraging access to a Low integrity process.</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 6</product>
          <product>Microsoft Internet Explorer 7</product>
          <product>Microsoft Internet Explorer 8</product>
          <product>Microsoft Internet Explorer 9</product>
          <product>Microsoft Internet Explorer 10</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-1545" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1545"/>
        <description>Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, allows remote attackers to bypass Protected Mode or cause a denial of service (memory corruption) by leveraging access to a Low integrity process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012.</description>
        <oval_repository>
          <dates>
            <submitted date="2014-09-03T08:31:03">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </submitted>
            <status_change date="2014-09-11T08:03:41.415-04:00">DRAFT</status_change>
            <status_change date="2014-09-29T04:00:16.656-04:00">INTERIM</status_change>
            <status_change date="2014-10-20T04:00:22.408-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <extend_definition comment="Microsoft Internet Explorer 6 is installed" definition_ref="oval:org.mitre.oval:def:563"/>
        <extend_definition comment="Microsoft Internet Explorer 7 is installed" definition_ref="oval:org.mitre.oval:def:627"/>
        <extend_definition comment="Microsoft Internet Explorer 8 is installed" definition_ref="oval:org.mitre.oval:def:6210"/>
        <extend_definition comment="Microsoft Internet Explorer 9 is installed" definition_ref="oval:org.mitre.oval:def:11985"/>
        <criterion comment="Check if Internet Explorer 10 Consumer Preview is installed" test_ref="oval:org.mitre.oval:tst:122132"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11985" version="9" class="inventory">
      <metadata>
        <title>Microsoft Internet Explorer 9 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 9</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:ie:9"/>
        <description>A version of Microsoft Internet Explorer 9 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-03-15T15:15:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </submitted>
            <status_change date="2011-03-16T11:15:52.347-04:00">DRAFT</status_change>
            <status_change date="2011-04-04T04:00:07.004-04:00">INTERIM</status_change>
            <status_change date="2011-04-25T04:00:07.313-04:00">ACCEPTED</status_change>
            <status_change date="2012-03-05T14:24:09.181-05:00">INTERIM</status_change>
            <modified comment="Added Windows Server 2008 R2 platform" date="2012-03-05T14:24:09.181-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2012-03-26T04:00:36.550-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:12091 - New Microsoft Patch Tuesday December 2012 definitions." date="2012-12-12T18:47:00.575-05:00">
              <contributor organization="SecPod Technologies">Chandan S</contributor>
            </modified>
            <status_change date="2012-12-12T18:55:58.342-05:00">INTERIM</status_change>
            <status_change date="2012-12-31T04:00:07.525-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:59.975-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:10.220-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Internet Explorer 9 is installed" test_ref="oval:org.mitre.oval:tst:42359"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:262" version="2" class="vulnerability">
      <metadata>
        <title>Windows 2000 Kernel Debugger-based Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Windows kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0112"/>
        <description>Buffer overflow in Windows Kernel allows local users to gain privileges by causing certain error messages to be passed to a debugger.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-11-02T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-11-03T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-12-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-01-06T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-06-02T12:00:00.000-04:00" comment="Added product">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-06-08T03:17:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-29T06:49:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="the version of kernel32.dll is less than 5.0.2195.6011" negate="false" test_ref="oval:org.mitre.oval:tst:2741"/>
        <criterion comment="the patch Q811493 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2885"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2611" version="5" class="vulnerability">
      <metadata>
        <title>IE v6.0 HijackClick 3 / Script in Image Tag File Download Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0841" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0841"/>
        <description>Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" and the "Script in Image Tag File Download Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-25T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-27T04:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-17T05:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T05:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="Changed IE registry test to wrt-18">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:491: Removed HKEY_LOCAL_MACHINE\ from the key, as it's specified as the hive.  Implemented by Harvey Rubinovitz." date="2007-01-22T00:36:00.756-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T00:37:50.295-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:12.106-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:55.168-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:13.349-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="the version of mshtml.dll is less than 6.0.2745.2800" negate="false" test_ref="oval:org.mitre.oval:tst:590"/>
          <criterion comment="the patch kb834707 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:589"/>
          <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:261" version="2" class="vulnerability">
      <metadata>
        <title>Linux Route Cache / Netfilter Denial of Service</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Netfilter</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0244"/>
        <description>The route cache implementation in Linux 2.4, and the Netfilter IP conntrack module, allows remote attackers to cause a denial of service (CPU consumption) via packets with forged source addresses that cause a large number of hash table collisions.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-25T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:41.931-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:24.590-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="kernel version is less than 2.4.20-13.9" negate="false" test_ref="oval:org.mitre.oval:tst:2742"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:260" version="2" class="vulnerability">
      <metadata>
        <title>Netfilter Denial of Service</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Netfilter</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0187" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0187"/>
        <description>The connection tracking core of Netfilter for Linux 2.4.20, with CONFIG_IP_NF_CONNTRACK enabled or the ip_conntrack module loaded, allows remote attackers to cause a denial of service (resource consumption) due to an inconsistency with Linux 2.4.20's support of linked lists, which causes Netfilter to fail to identify connections with an UNCONFIRMED status and use large timeouts.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-25T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:38.425-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:24.425-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="kernel version is less than 2.4.20-13.9" negate="false" test_ref="oval:org.mitre.oval:tst:2742"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:26" version="6" class="vulnerability">
      <metadata>
        <title>Windows 2000 Network Connection Manager Privilege Escalation</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Network Connection Manager (NCM)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0720" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0720"/>
        <description>A handler routine for the Network Connection Manager (NCM) in Windows 2000 allows local users to gain privileges via a complex attack that causes the handler to run in the LocalSystem context with user-specified code.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <modified date="2005-03-07T12:00:00.000-04:00" comment="modified wrt-222 - changed pattern match">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-03-09T07:55:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-29T07:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2878" date="2010-11-29T16:13:00.904-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:05.025-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:44.954-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:42.085-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:33.861-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="SP4 or later Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3073"/>
        <criterion comment="the version of netman.dll is less than 5.0.2195.5974" negate="false" test_ref="oval:org.mitre.oval:tst:3072"/>
        <criterion comment="Patch Q326886 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3071"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2592" version="5" class="vulnerability">
      <metadata>
        <title>KCMS KCS_OPEN_PROFILE File Disclosure Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>kcms_server</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0027"/>
        <description>Directory traversal vulnerability in Sun Kodak Color Management System (KCMS) library service daemon (kcms_server) allows remote attackers to read arbitrary files via the KCS_OPEN_PROFILE procedure.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-19T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-24T03:40:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
            <modified comment="fixed the service_name entity used in the inetd_object" date="2007-04-10T15:15:00.237-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-04-10T15:15:57.329-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:24.241-04:00">ACCEPTED</status_change>
            <modified comment="Added platforms for Solaris 8 and 9" date="2008-12-08T13:59:00.558-05:00">
              <contributor organization="Secure Elements, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2008-12-08T14:09:27.638-05:00">INTERIM</status_change>
            <status_change date="2008-12-29T04:00:13.900-05:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:53.870-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:20.237-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Software section">
          <criteria operator="OR" comment="Solaris 7,8,or 9 installed">
            <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="Solaris 7 Installed" test_ref="oval:org.mitre.oval:tst:3045"/>
            <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          </criteria>
          <criterion comment="Kodak Color Managment Server (KCMS) Runtime Environment (SUNWkcsrt/SUNWkcsrx) installed" test_ref="oval:org.mitre.oval:tst:505"/>
          <criterion negate="true" comment="Patch 114636-01 or later installed" test_ref="oval:org.mitre.oval:tst:504"/>
          <criterion negate="true" comment="Patch 107337-03 or later installed" test_ref="oval:org.mitre.oval:tst:503"/>
          <criterion negate="true" comment="Patch 111400-02 or later installed" test_ref="oval:org.mitre.oval:tst:502"/>
        </criteria>
        <criteria operator="AND" comment="Configuration section">
          <criterion comment="inetd.conf contains kcms_server" test_ref="oval:org.mitre.oval:tst:2930"/>
          <criterion comment="inetd running" test_ref="oval:org.mitre.oval:tst:3135"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2590" version="3" class="vulnerability">
      <metadata>
        <title>OpenSSL Double-free Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>Sun Cluster</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0545" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0545"/>
        <description>Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an SSL client certificate with a certain invalid ASN.1 encoding.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-19T03:11:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2004-10-20T02:35:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:434 - In some &quot;pattern match&quot; strings added &quot;\&quot; before &quot;.&quot; to clarify if &quot;point&quot; or &quot;any symbol&quot; needed." date="2014-07-28T18:11:00.493-04:00">
              <contributor organization="ALTX-SOFT">Evgeniy Pavlov</contributor>
            </modified>
            <status_change date="2014-07-28T18:14:46.989-04:00">INTERIM</status_change>
            <status_change date="2014-08-18T04:05:30.723-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Software section">
          <criteria operator="OR" comment="Solaris 8 or 9 installed">
            <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          </criteria>
          <criterion negate="true" comment="Patch 113505-02 or later installed" test_ref="oval:org.mitre.oval:tst:511"/>
          <criterion negate="true" comment="Patch 113508-02 or later installed" test_ref="oval:org.mitre.oval:tst:510"/>
          <criterion negate="true" comment="Patch 115054-01 or later installed" test_ref="oval:org.mitre.oval:tst:509"/>
          <criterion negate="true" comment="Patch 115055-01 or later installed" test_ref="oval:org.mitre.oval:tst:508"/>
          <criterion comment="SunCluster Component SUNWscvw installed" test_ref="oval:org.mitre.oval:tst:507"/>
          <criterion comment="Apache (SUNWapchu) installed" test_ref="oval:org.mitre.oval:tst:653"/>
        </criteria>
        <criteria operator="AND" comment="Configuration section">
          <criterion comment="Apache running with SunPlex Manager config" test_ref="oval:org.mitre.oval:tst:506"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:258" version="5" class="vulnerability">
      <metadata>
        <title>IE5.01,SP3 PNG Image Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1211"/>
        <description>Buffer overflow in the PNG image rendering component of Microsoft Internet Explorer allows remote attackers to execute arbitrary code via a crafted PNG file.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-06-22T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-06-22T06:22:00.000-04:00">DRAFT</status_change>
            <modified date="2005-06-24T12:00:00.000-04:00" comment="added description">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-07-27T10:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-10-17T04:13:00.000-04:00" comment="Fixed registry_object obj:1557 by moving PNGFilter.CoPNGFilter from name to end of key, and setting xsi:nil to true on name.  Modified by Harvey Rubinovitz">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2006-10-17T04:13:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-11-14T08:57:57.024-05:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2824. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:48:00.494-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:52:27.298-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:11.781-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:40.469-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:13.273-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3015"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3541.2700" negate="false" test_ref="oval:org.mitre.oval:tst:2751"/>
          <criterion comment="the patch kb883939 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2750"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="PNG image rendering enabled in Internet Explorer" negate="false" test_ref="oval:org.mitre.oval:tst:2749"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2572" version="1" class="vulnerability">
      <metadata>
        <title>DoS Vulnerability in libpng function png_handle_iCCP()</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>libpng</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0598" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0598"/>
        <description>The png_handle_iCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service (application crash) via a certain PNG image that triggers a null dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-12-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-24T12:04:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 7,8,or 9 installed">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
        </criteria>
        <criterion comment="Netscape installed" negate="false" test_ref="oval:org.mitre.oval:tst:901"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2570" version="1" class="vulnerability">
      <metadata>
        <title>Windows XP Hyperlink Object Library Unchecked Buffer Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Hyperlink Object Library</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0057" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0057"/>
        <description>The Hyperlink Object Library for Windows 98, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a crafted link that triggers an "unchecked buffer" in the library, possibly due to a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-02-24T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2005-03-02T09:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-03-23T08:09:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-04-13T12:15:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows XP is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2838"/>
        <criterion comment="the version of hlink.dll is less than 5.2.3790.227" negate="false" test_ref="oval:org.mitre.oval:tst:2399"/>
        <criterion comment="the patch kb888113 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2398"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2568" version="2" class="vulnerability">
      <metadata>
        <title>License Logging Service Vulnerability (Windows 2000)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Data Access Components 2.8</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0050" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0050"/>
        <description>The License Logging service for Windows NT Server, Windows 2000 Server, and Windows Server 2003 does not properly validate the length of messages, which leads to an "unchecked buffer" and allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, aka the "License Logging Service Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-03-29T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2005-03-29T08:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-13T12:15:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-05-04T12:33:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-10-31T04:13:00.000-04:00" comment="Replaced reference to obj:1374 with reference to obj:1550 since it references Product\Options and not ProductOptions in the controlset registry key.  Modified by Harvey Rubinovitz">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-11-21T04:13:00.000-04:00">INTERIM</status_change>
            <status_change date="2007-01-03T13:53:52.285-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="AND" comment="Windows 2000 Server is installed">
            <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
            <criteria operator="OR" comment="Windows NT server product option">
              <criterion comment="this is an NT Server (stand-alone)" negate="false" test_ref="oval:org.mitre.oval:tst:2408"/>
              <criterion comment="this is an NT Server (domain controller)" negate="false" test_ref="oval:org.mitre.oval:tst:3035"/>
            </criteria>
          </criteria>
          <criterion comment="the patch kb885834 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2477"/>
          <criterion comment="the version of Llssrv.exe is less than 5.0.2195.7021" negate="false" test_ref="oval:org.mitre.oval:tst:513"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="license logging service is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2475"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:25633" version="5" class="vulnerability">
      <metadata>
        <title>Arbitrary code executing via unknown vectors.</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows 8.1</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>Microsoft Internet Explorer 8</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2011-1346" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1346"/>
        <description>Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by Stephen Fewer as the second of three chained vulnerabilities during a Pwn2Own competition at CanSecWest 2011.</description>
        <oval_repository>
          <dates>
            <submitted date="2014-09-03T08:31:03">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </submitted>
            <status_change date="2014-09-11T08:03:36.855-04:00">DRAFT</status_change>
            <status_change date="2014-09-29T04:00:12.433-04:00">INTERIM</status_change>
            <status_change date="2014-10-20T04:00:13.514-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:25633 - Modified vulnerabilities - a lot of fixes" date="2015-07-22T13:39:00.268-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-07-22T13:41:44.917-04:00">INTERIM</status_change>
            <status_change date="2015-08-10T04:00:25.583-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 8 is installed" definition_ref="oval:org.mitre.oval:def:6210"/>
        <criteria operator="OR" comment="GDR or LDR Service branch">
          <criterion comment="Mshtml.dll version is less than 8.0.7600.16722" test_ref="oval:org.mitre.oval:tst:42403"/>
          <criteria operator="AND" comment="LDR">
            <criterion comment="Mshtml.dll version is greater than or equal 8.0.7600.20000" test_ref="oval:org.mitre.oval:tst:20848"/>
            <criterion comment="Mshtml.dll version is less than 8.0.7600.20861" test_ref="oval:org.mitre.oval:tst:42393"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2562" version="6" class="vulnerability">
      <metadata>
        <title>Windows 2000 Font Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Windows kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0060" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0060"/>
        <description>Buffer overflow in the font processing component of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-05-02T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2005-05-04T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2005-06-02T12:00:00.000-04:00" comment="Added product">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2005-06-17T12:00:00.000-04:00" comment="modified cmp-1106 - Replaced the test that checks for the service pack level, instead of checking for sp4 or ealier (did not check for GOLD edition) it is now negating the test that checks for sp5 for later.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2005-07-27T10:37:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected and tightened regular expression in ste:2610" date="2010-12-02T11:46:00.307-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-12-02T11:47:28.161-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:44.627-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:15.813-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:32.900-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 (sp4 or earlier) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 5 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2790"/>
        </criteria>
        <criterion comment="The version of Ntoskrnl.exe is less than 5.0.2195.7035" negate="false" test_ref="oval:org.mitre.oval:tst:2358"/>
        <criterion comment="the patch KB890859 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2737"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2559" version="5" class="vulnerability">
      <metadata>
        <title>URL Parsing Memory Corruption Vulnerability (IE6 for Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0554" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0554"/>
        <description>Buffer overflow in the URL processor of Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL with a long hostname, aka "URL Parsing Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-05-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-05-11T05:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-22T12:38:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:44:00.000-04:00" comment="modified wft-594 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2621. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T20:21:00.819-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T20:22:36.575-05:00">INTERIM</status_change>
            <modified comment="Fixed obj:440: Removed blank before the word Filelist in the Key.  Modified by Harvey Rubinovitz." date="2007-01-22T00:06:00.404-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-02-20T13:40:11.502-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:33.706-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:13.097-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6  for Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2801"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.3790.279" negate="false" test_ref="oval:org.mitre.oval:tst:515"/>
          <criterion comment="the patch kb890923 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:514"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:255" version="4" class="vulnerability">
      <metadata>
        <title>Clear Text Password Logging Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0653" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0653"/>
        <description>Solaris 9, when configured as a Kerberos client with patch 112908-12 or 115168-03 and using pam_krb5 as an "auth" module with the debug feature enabled, records passwords in plaintext, which could allow local users to gain other user's passwords by reading log files.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:52:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:44.676-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:52.059-04:00">ACCEPTED</status_change>
            <modified comment="Added title and CVE reference. Implemented by Jon Baker of The MITRE Corporation." date="2007-02-13T14:48:00.753-05:00">
              <contributor organization="Security-Database">Nabil Ouchn</contributor>
            </modified>
            <status_change date="2007-02-13T14:49:30.783-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:13.310-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:255 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:03.306-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:28.701-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="Software section">
          <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert ID 101519 criteria.">
            <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3172"/>
            <criterion comment="sparc architecture" test_ref="oval:org.mitre.oval:tst:3237"/>
            <criterion comment="Patch 112908-12 is installed" test_ref="oval:org.mitre.oval:tst:4105"/>
            <criterion negate="true" comment="Patch 112908-13 or later installed" test_ref="oval:org.mitre.oval:tst:3957"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert ID 101519 criteria.">
            <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3172"/>
            <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3912"/>
            <criterion comment="Patch 115168-03 is installed" test_ref="oval:org.mitre.oval:tst:3258"/>
            <criterion negate="true" comment="Patch 115168-04 or later installed" test_ref="oval:org.mitre.oval:tst:4013"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Configuration section">
          <criterion comment="/etc/krb5/krb5.conf is configured as a kerberos client" test_ref="oval:org.mitre.oval:tst:3487"/>
          <criterion comment="pam_krb5 is an auth module with debug enabled" test_ref="oval:org.mitre.oval:tst:4074"/>
          <criterion comment="Logging of LOG_DEBUG level messages is enabled" test_ref="oval:org.mitre.oval:tst:3394"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2541" version="5" class="vulnerability">
      <metadata>
        <title>WINS Association Context Vulnerability (Windows 2000)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1080" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1080"/>
        <description>The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port 42, aka the "Association Context Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-03T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Matthew Burton</contributor>
            </submitted>
            <status_change date="2005-01-12T12:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-02T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-23T09:25:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-10-31T04:13:00.000-04:00" comment="Replaced reference to obj:1374 with reference to obj:1550 since it references Product\Options and not ProductOptions in the controlset registry key.  Modified by Harvey Rubinovitz">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-11-21T04:13:00.000-04:00">INTERIM</status_change>
            <status_change date="2007-01-03T13:53:52.038-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:29.262-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:30.956-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="AND" comment="Windows 2000 Server is installed">
            <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
            <criteria operator="OR" comment="Windows NT server product option">
              <criterion comment="this is an NT Server (stand-alone)" negate="false" test_ref="oval:org.mitre.oval:tst:2408"/>
              <criterion comment="this is an NT Server (domain controller)" negate="false" test_ref="oval:org.mitre.oval:tst:3035"/>
            </criteria>
          </criteria>
          <criterion comment="Win2K/XP/2003 service pack 4 (or earlier) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1247"/>
          <criterion comment="the version of wins.exe is less than 5.0.2195.7005" negate="false" test_ref="oval:org.mitre.oval:tst:517"/>
          <criterion comment="the patch KB870763 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:865"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="the wins service is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2405"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:254" version="2" class="vulnerability">
      <metadata>
        <title>Linux Kernel ptrace Privilege Escalation Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Linux kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0127" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0127"/>
        <description>The kernel module loader in Linux kernel 2.2.x before 2.2.25, and 2.4.x before 2.4.21, allows local users to gain root privileges by using ptrace to attach to a child process that is spawned by the kernel.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-25T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:21.400-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:23.998-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="kernel version = 2.4.20-6" negate="false" test_ref="oval:org.mitre.oval:tst:2753"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="kernel 2.4.20-6 or earlier is running" negate="false" test_ref="oval:org.mitre.oval:tst:2752"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2539" version="1" class="vulnerability">
      <metadata>
        <title>BIND SIG Resource Records Buffer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>Bind</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1219" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1219"/>
        <description>Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitrary code via a certain DNS server response containing SIG resource records (RR).</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-19T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-24T03:40:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="OR" comment="Solaris 7,8,or 9 installed">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          </criteria>
          <criterion comment="Internet Domain Name Server (BIND, SUNWinamd) installed" negate="false" test_ref="oval:org.mitre.oval:tst:2626"/>
          <criterion comment="Patch 106938-07 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:623"/>
          <criterion comment="Patch 109326-10 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:622"/>
          <criterion comment="Patch 112970-03 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:2625"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="in.named running" negate="false" test_ref="oval:org.mitre.oval:tst:2624"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2537" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP4 Plug-in Navigation Address Bar Spoofing Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0843" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0843"/>
        <description>Internet Explorer 5.5 and 6 does not properly handle plug-in navigation, which allows remote attackers to alter displayed address bars and thereby spoof web pages, facilitating phishing attacks, aka the "Plug-in Navigation Address Bar Spoofing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-25T05:29:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-27T01:04:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-17T10:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:44.775-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:10.762-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:37.421-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:13.018-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3534.2800" negate="false" test_ref="oval:org.mitre.oval:tst:519"/>
          <criterion comment="the patch kb834707-ie501sp4 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:518"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2536" version="2" class="vulnerability">
      <metadata>
        <title>Kerberos 5 KDC Heap Corruption Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>Kerberos5</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0082" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0082"/>
        <description>The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm using a certain protocol request that causes the KDC to corrupt its heap (aka "buffer underrun").</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-19T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-24T03:40:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-07-03T12:56:00.000-04:00" comment="Added negate=true attribute to criteria sub-block to fix conversion error from OVAL 4.2 to OVAL 5.0">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-07-03T12:56:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:18.623-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <notes>
        <note>Vulnerability exists in standard Solaris kerberos and SEAM.  This definition only covers Solaris kerberos</note>
      </notes>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="OR" comment="Solaris 8 or 9 installed">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          </criteria>
          <criteria operator="OR" comment="Kerberos v5 (any SUNWkrbr/SUNWkrbu/SUNWkrbux) installed">
            <criterion comment="Kerberos v5 - Root (SUNWkrbr) installed" negate="false" test_ref="oval:org.mitre.oval:tst:527"/>
            <criterion comment="Kerberos v5 - Usr (SUNWkrbu/SUNWkrbux) installed" negate="false" test_ref="oval:org.mitre.oval:tst:526"/>
          </criteria>
          <criteria operator="AND" comment="Patches 112237-09 and 112390-08 or later installed" negate="true">
            <criterion comment="Patch 112237-09 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:525"/>
            <criterion comment="Patch 112390-08 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:524"/>
          </criteria>
          <criteria operator="AND" comment="Patches 112925-03,112923-03,112921-02, and 112908-10 or later installed" negate="true">
            <criterion comment="Patch 112925-03 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:523"/>
            <criterion comment="Patch 112923-03 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:522"/>
            <criterion comment="Patch 112921-02 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:521"/>
            <criterion comment="Patch 112908-10 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:520"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/etc/krb5/krb5.conf is configured with a kerberos domain" negate="false" test_ref="oval:org.mitre.oval:tst:1153"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:253" version="6" class="vulnerability">
      <metadata>
        <title>SQL Server Format String Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0879" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0879"/>
        <description>Format string vulnerability in the C runtime functions in SQL Server 7.0 and 2000 allows attackers to cause a denial of service.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Yi-Fang Koh</contributor>
            </submitted>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2884" date="2010-11-29T16:14:00.692-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:39.461-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:44.405-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:32.867-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:30.600-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="Patch Q305601 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2754"/>
        <criterion comment="Win2K/XP/2003 service pack 3 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:3079"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:25184" version="5" class="vulnerability">
      <metadata>
        <title>Service Bus Denial of Service Vulnerability - CVE-2014-2814 (MS14-042)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>Microsoft Service Bus 1.1</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2014-2814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2814"/>
        <description>Microsoft Service Bus 1.1 on Microsoft Windows Server 2008 R2 SP1 and Server 2012 Gold and R2 allows remote authenticated users to cause a denial of service (AMQP messaging outage) via crafted AMQP messages, aka "Service Bus Denial of Service Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2014-07-11T11:54:58">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2014-07-11T11:54:52.877-04:00">DRAFT</status_change>
            <status_change date="2014-07-28T04:00:51.944-04:00">INTERIM</status_change>
            <status_change date="2014-08-18T04:03:27.230-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft Service Bus 1.1 is installed" definition_ref="oval:org.mitre.oval:def:24926"/>
        <criterion comment="Check if the version of Microsoft.ServiceBus.dll is less than 2.1.40512.2" test_ref="oval:org.mitre.oval:tst:115300"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:24926" version="3" class="inventory">
      <metadata>
        <title>Microsoft Service Bus 1.1 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>Microsoft Service Bus 1.1</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:service_bus:1.1"/>
        <description>Microsoft Service Bus 1.1 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2014-07-11T11:54:58">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2014-07-11T11:54:52.836-04:00">DRAFT</status_change>
            <status_change date="2014-07-28T04:00:39.303-04:00">INTERIM</status_change>
            <status_change date="2014-08-18T04:02:56.322-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Microsoft Server Bus 1.1 is installed" test_ref="oval:org.mitre.oval:tst:114968"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2516" version="1" class="vulnerability">
      <metadata>
        <title>Windows Server 2003 (32-Bit) DirectPlay Denial of Service</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>DirectX</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0202" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0202"/>
        <description>IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-06-15T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified date="2004-06-16T12:00:00.000-04:00" comment="Changed Status to Draft; Added cmp-969">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </modified>
            <modified date="2004-07-06T12:00:00.000-04:00" comment="Added the negate attribute with a value of 'true' to the subtest elements referencing patch installations.">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </modified>
            <status_change date="2004-07-12T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-07-21T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="32-Bit version of Windows is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2748"/>
        <criteria operator="OR" comment="DirectX without KB839643 Installed on Windows Server 2003">
          <criteria operator="AND" comment="DirectX 8.2 without DirectX82-KB839643-x86-ENU.EXE Installed">
            <criterion comment="the version of dplayx.dll is less than 5.2.3677.144" negate="false" test_ref="oval:org.mitre.oval:tst:605"/>
            <criterion comment="DirectX 8.2 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:604"/>
            <criterion comment="Patch DirectX82-KB839643-x86-ENU Installed" negate="true" test_ref="oval:org.mitre.oval:tst:603"/>
          </criteria>
          <criteria operator="AND" comment="DirectX 9.0 without DirectX9-KB839643-x86-ENU.EXE Installed">
            <criterion comment="the version of dplayx.dll is less than 5.3.0.903" negate="false" test_ref="oval:org.mitre.oval:tst:602"/>
            <criterion comment="DirectX 9.0x Installed" negate="false" test_ref="oval:org.mitre.oval:tst:601"/>
            <criterion comment="Patch DirectX90-KB839643-x86-ENU Installed" negate="true" test_ref="oval:org.mitre.oval:tst:600"/>
          </criteria>
          <criteria operator="AND" comment="DirectX 8.1 without WindowsServer2003-KB839643-x86-ENU.EXE Installed">
            <criterion comment="the version of dplayx.dll is less than 5.2.3790.163" negate="false" test_ref="oval:org.mitre.oval:tst:528"/>
            <criterion comment="DirectX 8.1x Installed" negate="false" test_ref="oval:org.mitre.oval:tst:598"/>
            <criterion comment="the patch kb839643 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:597"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:250" version="2" class="vulnerability">
      <metadata>
        <title>Kerberos krb4 Ticket Splicing Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>krb5</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0139" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0139"/>
        <description>Certain weaknesses in the implementation of version 4 of the Kerberos protocol (krb4) in the krb5 distribution, when triple-DES keys are used to key krb4 services, allow an attacker to create krb4 tickets for unauthorized principals using a cut-and-paste attack and "ticket splicing."</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-14T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:52.850-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:23.823-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="krb5-libs version is less than 1.2.7-14" negate="false" test_ref="oval:org.mitre.oval:tst:2756"/>
        <criteria operator="OR" comment="krb5-server or krb5-workstation installed">
          <criterion comment="krb5-server version is less than 1.2.7-14" negate="false" test_ref="oval:org.mitre.oval:tst:2785"/>
          <criterion comment="krb5-workstation version is less than 1.2.7-14" negate="false" test_ref="oval:org.mitre.oval:tst:2755"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:25" version="7" class="vulnerability" deprecated="true">
      <metadata>
        <title>DEPRECATED: Windows 2000 IIS Chunked Encoding Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0079"/>
        <description>Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Server Pages allows attackers to cause a denial of service or execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-14T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected to use a forward slash as the separator in the key." date="2007-05-07T15:59:00.430-04:00">
              <contributor organization="Secure Elements, Inc.">Glenn Strickland</contributor>
            </modified>
            <status_change date="2007-05-07T16:06:11.429-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:41.481-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2884" date="2010-11-29T16:14:00.692-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:40.343-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:43.992-05:00">ACCEPTED</status_change>
            <modified comment="Use def:12501 instead" date="2011-01-20T10:03:10.960-05:00">
              <contributor organization="Symantec Corporation">Josh Turpin</contributor>
            </modified>
            <status_change date="2011-01-20T10:03:10.960-05:00">DEPRECATED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="IIS major version equals 5" negate="false" test_ref="oval:org.mitre.oval:tst:3081"/>
          <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
          <criterion comment="the version of w3svc.dll is less than 5.0.2195.5269" negate="false" test_ref="oval:org.mitre.oval:tst:3080"/>
          <criterion comment="Patch Q319733 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3095"/>
          <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
          <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
          <criterion comment="Win2K/XP/2003 service pack 3 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:3079"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="asp.dll mapping exists" negate="false" test_ref="oval:org.mitre.oval:tst:3092"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2495" version="2" class="vulnerability">
      <metadata>
        <title>Windows Utility Manager Shatter Message Vulnerability II</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Utility Manager</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0213" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0213"/>
        <description>Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which allows local users to gain system privileges via a "Shatter" style attack that sends a Windows message to cause Utility Manager to launch winhlp32 by directly accessing the context sensitive help and bypassing the GUI, then sending another message to winhlp32 in order to open a user-selected file, a different vulnerability than CVE-2003-0908.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </submitted>
            <status_change date="2004-08-04T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-08-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added missing value to value element of ste:483. Set value to 1. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-11T21:18:00.841-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-11T21:21:35.996-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:10.539-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="the version of Sp3res.dll is less than 5.0.2195.6928" negate="false" test_ref="oval:org.mitre.oval:tst:533"/>
        <criterion comment="the version of Umandlg.dll is less than 1.0.0.5" negate="false" test_ref="oval:org.mitre.oval:tst:532"/>
        <criterion comment="the patch kb842526 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:531"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2487" version="5" class="vulnerability">
      <metadata>
        <title>IE v6.0 Plug-in Navigation Address Bar Spoofing Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0843" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0843"/>
        <description>Internet Explorer 5.5 and 6 does not properly handle plug-in navigation, which allows remote attackers to alter displayed address bars and thereby spoof web pages, facilitating phishing attacks, aka the "Plug-in Navigation Address Bar Spoofing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-25T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-27T04:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-17T05:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T05:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="Changed IE registry test to wrt-18">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:491: Removed HKEY_LOCAL_MACHINE\ from the key, as it's specified as the hive.  Implemented by Harvey Rubinovitz." date="2007-01-22T00:36:00.756-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T00:37:50.083-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:10.260-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:55.879-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:12.898-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="the version of mshtml.dll is less than 6.0.2745.2800" negate="false" test_ref="oval:org.mitre.oval:tst:590"/>
          <criterion comment="the patch kb834707 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:589"/>
          <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:248" version="2" class="vulnerability">
      <metadata>
        <title>Kerberos krb4 Plaintext Attack Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>krb5</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0138" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0138"/>
        <description>Version 4 of the Kerberos protocol (krb4), as used in Heimdal and other packages, allows an attacker to impersonate any principal in a realm via a chosen-plaintext attack.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-14T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:23.753-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:23.652-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="krb5-libs version is less than 1.2.7-14" negate="false" test_ref="oval:org.mitre.oval:tst:2756"/>
        <criteria operator="OR" comment="krb5-server or krb5-workstation installed">
          <criterion comment="krb5-server version is less than 1.2.7-14" negate="false" test_ref="oval:org.mitre.oval:tst:2785"/>
          <criterion comment="krb5-workstation version is less than 1.2.7-14" negate="false" test_ref="oval:org.mitre.oval:tst:2755"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:24787" version="3" class="vulnerability">
      <metadata>
        <title>Web Applications Page Content Vulnerability (CVE-2014-1813) - MS14-022</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <platform>Microsoft Windows 8</platform>
          <product>Microsoft Office Web Apps 2010</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2014-1813" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1813"/>
        <description>Microsoft Web Applications 2010 SP1 and SP2 allows remote authenticated users to execute arbitrary code via crafted page content, aka "Web Applications Page Content Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2014-05-26T14:12:20">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2014-05-27T13:27:06.381-04:00">DRAFT</status_change>
            <status_change date="2014-06-16T04:00:16.303-04:00">INTERIM</status_change>
            <status_change date="2014-07-07T04:01:20.149-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="office web apps sp1/sp2">
          <extend_definition comment="Microsoft Office Web Apps 2010 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:15860"/>
          <extend_definition comment="Microsoft Office Web Apps 2010 Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:19186"/>
        </criteria>
        <criterion comment="Check if the version of SWORD.DLL is less than 14.0.7123.5000" test_ref="oval:org.mitre.oval:tst:114167"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:24618" version="3" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.1.32, 4.2.24, and 4.3.10</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows 8.1</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>VirtualBox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2014-2441" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2441"/>
        <description>Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.1.32, 4.2.24, and 4.3.10 allows local users to affect confidentiality, integrity, and availability via vectors related to Graphics driver (WDDM) for Windows guests.</description>
        <oval_repository>
          <dates>
            <submitted date="2014-04-17T08:31:03">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </submitted>
            <status_change date="2014-04-18T14:38:40.749-04:00">DRAFT</status_change>
            <status_change date="2014-05-05T04:00:24.278-04:00">INTERIM</status_change>
            <status_change date="2014-05-26T04:06:28.149-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="VirtualBox is installed" definition_ref="oval:org.mitre.oval:def:11581"/>
        <criterion comment="Check if Oracle VM VirtualBox is installed" test_ref="oval:org.mitre.oval:tst:42006"/>
        <criteria operator="OR" comment="Check versions of VirtualBox">
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.1.0" test_ref="oval:org.mitre.oval:tst:88836"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.1.30" test_ref="oval:org.mitre.oval:tst:113796"/>
          </criteria>
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.2.0" test_ref="oval:org.mitre.oval:tst:99857"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.2.22" test_ref="oval:org.mitre.oval:tst:113462"/>
          </criteria>
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.3.0" test_ref="oval:org.mitre.oval:tst:100120"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.3.8" test_ref="oval:org.mitre.oval:tst:113616"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:246" version="2" class="vulnerability">
      <metadata>
        <title>Network News Transfer Protocol Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Network News Transport Protocol (NNTP)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0574" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0574"/>
        <description>The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an "unchecked buffer," leading to off-by-one and heap-based buffer overflows.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-26T09:17:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-10-27T01:04:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-17T10:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.093-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:53:57.636-04:00">INTERIM</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.233-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-11-13T12:01:09.183-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="AND" comment="Exchange Server 2003 is installed on Windows Server 2003">
            <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
            <criterion comment="Exchange Server 2003 (gold edition) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2760"/>
          </criteria>
          <criterion comment="the version of nntpsvc.dll is less than 6.0.3790.206" negate="false" test_ref="oval:org.mitre.oval:tst:2759"/>
          <criterion comment="the patch WindowsServer2003-KB883935-ia64-enu.exe is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2758"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="the NNTP service is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2757"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:24480" version="3" class="vulnerability">
      <metadata>
        <title>SharePoint XSS Vulnerability (CVE-2014-1754) - MS14-022</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>Microsoft SharePoint Foundation 2013</product>
          <product>Microsoft SharePoint Server 2013</product>
          <product>Microsoft Office Web Apps Server 2013</product>
          <product>Microsoft SharePoint Server 2013 Client Components SDK</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2014-1754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1754"/>
        <description>Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 Gold and SP1, SharePoint Foundation 2013 Gold and SP1, Office Web Apps Server 2013 Gold and SP1, and SharePoint Server 2013 Client Components SDK allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "SharePoint XSS Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2014-05-26T14:12:20">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2014-05-27T13:27:08.488-04:00">DRAFT</status_change>
            <status_change date="2014-06-16T04:00:11.888-04:00">INTERIM</status_change>
            <status_change date="2014-07-07T04:01:15.125-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="foundation 2013/version">
          <criterion comment="Check if the version of Microsoft.Office.Server.Msg.dll is less than 15.0.4514.1000" test_ref="oval:org.mitre.oval:tst:114603"/>
          <criteria operator="OR" comment="2013/sp1">
            <extend_definition comment="Microsoft SharePoint Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:16325"/>
            <extend_definition comment="Microsoft SharePoint Server 2013 SP1 is installed" definition_ref="oval:org.mitre.oval:def:24462"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="sharepoint foundation 2013/version">
          <criteria operator="OR" comment="2013/sp1">
            <extend_definition comment="Microsoft SharePoint Foundation 2013 is installed" definition_ref="oval:org.mitre.oval:def:19090"/>
            <extend_definition comment="Microsoft SharePoint Foundation 2013 SP1 is installed" definition_ref="oval:org.mitre.oval:def:24685"/>
          </criteria>
          <criteria operator="OR" comment="either versions">
            <criterion comment="Check if the version of wsssetup.dll is less than 15.0.4615.1000" test_ref="oval:org.mitre.oval:tst:113960"/>
            <criterion comment="Check if the version of wsetupui.dll is less than 15.0.4561.1000" test_ref="oval:org.mitre.oval:tst:114600"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="web apps server 2013/version">
          <criteria operator="OR" comment="2013/sp1">
            <extend_definition comment="Microsoft Office Web Apps Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:22312"/>
            <extend_definition comment="Microsoft Office Web Apps Server 2013 SP1 is installed" definition_ref="oval:org.mitre.oval:def:24530"/>
          </criteria>
          <criterion comment="Check if the version of msoserver.dll is less than 15.0.4615.1000" test_ref="oval:org.mitre.oval:tst:114430"/>
        </criteria>
        <criteria operator="AND" comment="SharePoint Server 2013 Client Components SDK/version">
          <extend_definition comment="Microsoft SharePoint Server 2013 Client Components SDK is installed" definition_ref="oval:org.mitre.oval:def:24752"/>
          <criterion comment="Check if the version of Microsoft.sharepoint.client.dll is less than 15.0.4609.1000" test_ref="oval:org.mitre.oval:tst:114066"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:24752" version="3" class="inventory">
      <metadata>
        <title>Microsoft SharePoint Server 2013 Client Components SDK is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <product>Microsoft SharePoint Server 2013 Client Components SDK</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:sharepoint_server_client_components_sdk:2013"/>
        <description>Microsoft SharePoint Server 2013 Client Components SDK is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2014-05-26T16:15:48">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2014-05-27T13:27:05.214-04:00">DRAFT</status_change>
            <status_change date="2014-06-16T04:00:15.775-04:00">INTERIM</status_change>
            <status_change date="2014-07-07T04:01:19.339-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Microsoft SharePoint Server 2013 Client Components SDK is installed" test_ref="oval:org.mitre.oval:tst:114587"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:24685" version="5" class="inventory">
      <metadata>
        <title>Microsoft SharePoint Foundation 2013 SP1 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>Microsoft SharePoint Foundation 2013</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:sharepoint_foundation:2013:sp1"/>
        <description>Microsoft SharePoint Foundation 2013 SP1 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2014-05-26T14:12:20">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2014-05-27T13:27:04.107-04:00">DRAFT</status_change>
            <status_change date="2014-06-16T04:00:13.760-04:00">INTERIM</status_change>
            <status_change date="2014-07-07T04:01:18.247-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:39142 - In some &quot;pattern match&quot; strings added &quot;\&quot; before &quot;.&quot; to clarify if &quot;point&quot; or &quot;any symbol&quot; needed." date="2014-07-28T18:11:00.493-04:00">
              <contributor organization="ALTX-SOFT">Evgeniy Pavlov</contributor>
            </modified>
            <status_change date="2014-07-28T18:14:45.534-04:00">INTERIM</status_change>
            <status_change date="2014-08-18T04:02:43.221-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Sharepoint server 2013 SP1 is installed" test_ref="oval:org.mitre.oval:tst:114158"/>
        <extend_definition comment="Microsoft SharePoint Foundation 2013 is installed" definition_ref="oval:org.mitre.oval:def:19090"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:24530" version="6" class="inventory">
      <metadata>
        <title>Microsoft Office Web Apps Server 2013 SP1 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>Microsoft Office Web Apps Server 2013</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:office_web_apps:2013:sp1"/>
        <description>Microsoft Office Web Apps Server 2013 SP1 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2014-05-26T14:12:20">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2014-05-27T13:27:04.569-04:00">DRAFT</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:39205 - regular expression fixes" date="2014-06-10T14:50:00.707-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-06-30T04:10:22.150-04:00">INTERIM</status_change>
            <status_change date="2014-07-21T04:01:22.543-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:39205 - In some &quot;pattern match&quot; strings added &quot;\&quot; before &quot;.&quot; to clarify if &quot;point&quot; or &quot;any symbol&quot; needed." date="2014-07-28T18:11:00.493-04:00">
              <contributor organization="ALTX-SOFT">Evgeniy Pavlov</contributor>
            </modified>
            <status_change date="2014-07-28T18:12:35.894-04:00">INTERIM</status_change>
            <status_change date="2014-08-18T04:02:32.248-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Web Apps Server 2013 SP1 is installed" test_ref="oval:org.mitre.oval:tst:114300"/>
        <extend_definition comment="Microsoft Office Web Apps Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:22312"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:24462" version="5" class="inventory">
      <metadata>
        <title>Microsoft SharePoint Server 2013 SP1 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>Microsoft SharePoint Server 2013</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:sharepoint_server:2013:sp1"/>
        <description>Microsoft SharePoint Server 2013 SP1 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2014-05-26T14:12:20">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2014-05-27T13:27:03.977-04:00">DRAFT</status_change>
            <status_change date="2014-06-16T04:00:11.763-04:00">INTERIM</status_change>
            <status_change date="2014-07-07T04:01:14.552-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:39142 - In some &quot;pattern match&quot; strings added &quot;\&quot; before &quot;.&quot; to clarify if &quot;point&quot; or &quot;any symbol&quot; needed." date="2014-07-28T18:11:00.493-04:00">
              <contributor organization="ALTX-SOFT">Evgeniy Pavlov</contributor>
            </modified>
            <status_change date="2014-07-28T18:14:45.577-04:00">INTERIM</status_change>
            <status_change date="2014-08-18T04:02:31.164-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Sharepoint server 2013 SP1 is installed" test_ref="oval:org.mitre.oval:tst:114158"/>
        <extend_definition comment="Microsoft SharePoint Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:16325"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2448" version="5" class="vulnerability">
      <metadata>
        <title>Address Bar Spoofing on Double Byte Character Set Systems Vulnerability (Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0844" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0844"/>
        <description>Internet Explorer 6 on Double Byte Character Set (DBCS) systems allows remote attackers to alter displayed address bars and spoof web pages via a URL containing special characters, facilitating phishing attacks, aka the "Address Bar Spoofing on Double Byte Character Set Systems Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-18T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-01-20T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-05-10T12:00:00.000-04:00" comment="modified wrt-51 - Comment updated to indicate IE 6.">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-05-11T05:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2621. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T20:21:00.819-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T20:22:30.875-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:09.969-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:45.916-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:12.787-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6  for Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2801"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.3790.219" negate="false" test_ref="oval:org.mitre.oval:tst:535"/>
          <criterion comment="the patch kb834707 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:534"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:244" version="2" class="vulnerability">
      <metadata>
        <title>Kerberos KDC Heap Corruption Denial of Service</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>krb5</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0082" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0082"/>
        <description>The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm using a certain protocol request that causes the KDC to corrupt its heap (aka "buffer underrun").</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-14T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:25.682-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:23.488-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="krb5-server version is less than 1.2.7-14" negate="false" test_ref="oval:org.mitre.oval:tst:2785"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2426" version="1" class="vulnerability">
      <metadata>
        <title>BSM Audit Kernel Panic</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>Basic Security Module</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0654" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0654"/>
        <description>Unknown vulnerability in the Basic Security Module (BSM), when configured to audit either the Administrative (ad) or the System-Wide Administration (as) audit class in Solaris 7, 8, and 9, allows local users to cause a denial of service (kernel panic).</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-12T09:40:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2004-10-13T01:15:00.000-04:00">DRAFT</status_change>
            <modified comment="Operation changed from not equal to equals for object oval:org.mitre.oval:obj:458." date="2007-12-28T11:37:00.427-05:00">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </modified>
          </dates>
          <status>INTERIM</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Software section">
          <criterion negate="true" comment="Patch 106541-33 or later installed" test_ref="oval:org.mitre.oval:tst:542"/>
          <criterion negate="true" comment="Patch 109007-18 or later installed" test_ref="oval:org.mitre.oval:tst:541"/>
          <criterion negate="true" comment="Patch 114332-12 or later installed" test_ref="oval:org.mitre.oval:tst:540"/>
          <criteria operator="OR" comment="Solaris 7,8,or 9 installed">
            <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="Solaris 7 Installed" test_ref="oval:org.mitre.oval:tst:3045"/>
            <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Configuration section">
          <criterion comment="Basic Security Module enabled" test_ref="oval:org.mitre.oval:tst:539"/>
          <criterion comment="Auditing Administrative or System-Wide Administrative audit classes" test_ref="oval:org.mitre.oval:tst:538"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2423" version="1" class="vulnerability">
      <metadata>
        <title>ypxfrd File Disclosure Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>NIS</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1199" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1199"/>
        <description>The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on the domain and map arguments.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-19T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-24T03:40:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="OR" comment="Solaris 7,8,or 9 installed">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          </criteria>
          <criterion comment="NIS Server - User (SUNWypu) installed" negate="false" test_ref="oval:org.mitre.oval:tst:547"/>
          <criterion comment="Patch 106541-24 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:546"/>
          <criterion comment="Patch 109328-03 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:545"/>
          <criterion comment="Patch 113579-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:544"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="ypxfrd running" negate="false" test_ref="oval:org.mitre.oval:tst:543"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2418" version="1" class="vulnerability">
      <metadata>
        <title>Mozilla, Firefox, Thunderbird User Interface Hijacking Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0764" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0764"/>
        <description>Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to hijack the user interface via the "chrome" flag and XML User Interface Language (XUL) files.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-19T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-24T03:40:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 8 or 9 installed">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
        </criteria>
        <criteria operator="OR" comment="Mozilla components (any SUNWmoznav/SUNWmozmail) installed">
          <criterion comment="Mozilla (SUNWmoznav) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1070"/>
          <criterion comment="Mozilla Mail (SUNWmozmail) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1069"/>
        </criteria>
        <criterion comment="Patch 117765-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1068"/>
        <criterion comment="Patch 117767-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1067"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2413" version="8" class="vulnerability">
      <metadata>
        <title>Windows XP (64-Bit) DirectPlay Denial of Service</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>DirectX</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0202" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0202"/>
        <description>IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-06-15T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified date="2004-06-16T12:00:00.000-04:00" comment="Changed Status to Draft; Added cmp-967">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </modified>
            <modified date="2004-07-06T12:00:00.000-04:00" comment="Added the negate attribute with a value of 'true' to the subtest elements referencing patch installations.">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </modified>
            <status_change date="2004-07-12T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-07-21T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2004-09-13T12:00:00.000-04:00" comment="Modifed without comment">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2004-09-14T10:07:00.000-04:00" comment="">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2004-09-14T10:07:00.000-04:00" comment="">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2004-09-15T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-29T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected comment for var:202 to refer to environment variable" date="2009-12-01T17:28:00.093-05:00">
              <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2009-12-01T17:32:25.201-05:00">INTERIM</status_change>
            <status_change date="2009-12-21T04:00:28.456-05:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2656" date="2010-11-29T16:12:00.873-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:13:02.177-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:42.927-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:44.569-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:29.544-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="DirectX 8.1 without kb839643 installed">
          <criterion comment="the version of dplayx.dll is less than 5.2.3790.163 on 64-bit edition" test_ref="oval:org.mitre.oval:tst:548"/>
          <criterion comment="DirectX 8.1x Installed" test_ref="oval:org.mitre.oval:tst:598"/>
          <criterion comment="the patch kb839643 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:597"/>
        </criteria>
        <criteria operator="AND" comment="Windows XP 64-bit with SP1 (or earlier) installed">
          <criteria operator="AND" comment="Windows XP (sp1 or earlier) is installed">
            <criterion comment="Windows XP is installed" test_ref="oval:org.mitre.oval:tst:2838"/>
            <criterion comment="Win2K/XP/2003 service pack 2 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2837"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:24120" version="5" class="vulnerability">
      <metadata>
        <title>Vulnerability in the VirtualBox component in Oracle VirtualBox 4.2.x through 4.2.20 and 4.3.x before 4.3.8 when using 3D Acceleration, allow local guest OS users to execute arbitrary code on the Chromium server (CVE-2014-0981)</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows 8.1</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>VirtualBox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2014-0981" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0981"/>
        <description>VBox/GuestHost/OpenGL/util/net.c in Oracle VirtualBox before 3.2.22, 4.0.x before 4.0.24, 4.1.x before 4.1.32, 4.2.x before 4.2.24, and 4.3.x before 4.3.8, when using 3D Acceleration allows local guest OS users to execute arbitrary code on the Chromium server via crafted Chromium network pointer in a (1) CR_MESSAGE_READBACK or (2) CR_MESSAGE_WRITEBACK message to the VBoxSharedCrOpenGL service, which triggers an arbitrary pointer dereference and memory corruption.  NOTE: this issue was MERGED with CVE-2014-0982 because it is the same type of vulnerability affecting the same set of versions. All CVE users should reference CVE-2014-0981 instead of CVE-2014-0982.</description>
        <oval_repository>
          <dates>
            <submitted date="2014-04-03T08:31:03">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </submitted>
            <status_change date="2014-04-04T10:24:42.126-04:00">DRAFT</status_change>
            <status_change date="2014-04-21T04:00:37.090-04:00">INTERIM</status_change>
            <status_change date="2014-05-12T04:00:33.128-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="VirtualBox is installed" definition_ref="oval:org.mitre.oval:def:11581"/>
        <criterion comment="Check if Oracle VM VirtualBox is installed" test_ref="oval:org.mitre.oval:tst:42006"/>
        <criteria operator="OR" comment="Check versions of VirtualBox">
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.2.0" test_ref="oval:org.mitre.oval:tst:99857"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.2.20" test_ref="oval:org.mitre.oval:tst:113418"/>
          </criteria>
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.3.0" test_ref="oval:org.mitre.oval:tst:100120"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.3.6" test_ref="oval:org.mitre.oval:tst:113364"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:241" version="3" class="vulnerability">
      <metadata>
        <title>Scob and Toofer Internet Explorer v5.5,SP2 Vulnerabilities</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0549" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0549"/>
        <description>The WebBrowser ActiveX control, or the Internet Explorer HTML rendering engine (MSHTML), as used in Internet Explorer 6, allows remote attackers to execute arbitrary code in the Local Security context by using the showModalDialog method and modifying the location to execute code such as Javascript, as demonstrated using (1) delayed HTTP redirect operations, and an HTTP response with a Location: header containing a "URL:" prepended to a "ms-its" protocol URI, or (2) modifying the location attribute of the window, as exploited by the Download.ject (aka Scob aka Toofer) using the ADODB.Stream object.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-08-02T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-08-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:39.400-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:12.690-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
          <criterion comment="the version of mshtml.dll is less than 5.50.4943.400" negate="false" test_ref="oval:org.mitre.oval:tst:2762"/>
          <criterion comment="the patch kb832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2802"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:24026" version="3" class="vulnerability">
      <metadata>
        <title>Vulnerability in the VirtualBox component in Oracle VirtualBox 4.2.x through 4.2.20 and 4.3.x before 4.3.8 when using 3D Acceleration, allow local guest OS users to execute arbitrary code on the Chromium server (CVE-2014-0983)</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows 8.1</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>VirtualBox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2014-0983" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0983"/>
        <description>Multiple array index errors in programs that are automatically generated by VBox/HostServices/SharedOpenGL/crserverlib/server_dispatch.py in Oracle VirtualBox 4.2.x through 4.2.20 and 4.3.x before 4.3.8, when using 3D Acceleration, allow local guest OS users to execute arbitrary code on the Chromium server via certain CR_MESSAGE_OPCODES messages with a crafted index, which are not properly handled by the (1) CR_VERTEXATTRIB4NUBARB_OPCODE to the crServerDispatchVertexAttrib4NubARB function, (2) CR_VERTEXATTRIB1DARB_OPCODE to the crServerDispatchVertexAttrib1dARB function, (3) CR_VERTEXATTRIB1FARB_OPCODE to the crServerDispatchVertexAttrib1fARB function, (4) CR_VERTEXATTRIB1SARB_OPCODE to the crServerDispatchVertexAttrib1sARB function, (5) CR_VERTEXATTRIB2DARB_OPCODE to the crServerDispatchVertexAttrib2dARB function, (6) CR_VERTEXATTRIB2FARB_OPCODE to the crServerDispatchVertexAttrib2fARB function, (7) CR_VERTEXATTRIB2SARB_OPCODE to the crServerDispatchVertexAttrib2sARB function, (8) CR_VERTEXATTRIB3DARB_OPCODE to the crServerDispatchVertexAttrib3dARB function, (9) CR_VERTEXATTRIB3FARB_OPCODE to the crServerDispatchVertexAttrib3fARB function, (10) CR_VERTEXATTRIB3SARB_OPCODE to the crServerDispatchVertexAttrib3sARB function, (11) CR_VERTEXATTRIB4DARB_OPCODE to the crServerDispatchVertexAttrib4dARB function, (12) CR_VERTEXATTRIB4FARB_OPCODE to the crServerDispatchVertexAttrib4fARB function, and (13) CR_VERTEXATTRIB4SARB_OPCODE to the crServerDispatchVertexAttrib4sARB function.</description>
        <oval_repository>
          <dates>
            <submitted date="2014-04-03T08:31:03">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </submitted>
            <status_change date="2014-04-04T10:24:41.750-04:00">DRAFT</status_change>
            <status_change date="2014-04-21T04:00:34.902-04:00">INTERIM</status_change>
            <status_change date="2014-05-12T04:00:30.503-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="VirtualBox is installed" definition_ref="oval:org.mitre.oval:def:11581"/>
        <criterion comment="Check if Oracle VM VirtualBox is installed" test_ref="oval:org.mitre.oval:tst:42006"/>
        <criteria operator="OR" comment="Check versions of VirtualBox">
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.2.0" test_ref="oval:org.mitre.oval:tst:99857"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.2.20" test_ref="oval:org.mitre.oval:tst:113418"/>
          </criteria>
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.3.0" test_ref="oval:org.mitre.oval:tst:100120"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.3.6" test_ref="oval:org.mitre.oval:tst:113364"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:24" version="3" class="vulnerability" deprecated="true">
      <metadata>
        <title>DEPRECATED: Windows NT IIS FTP Connection Status Request Denial of Service</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <product>FTP</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0073" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0073"/>
        <description>The FTP service in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows attackers who have established an FTP session to cause a denial of service via a specially crafted status request containing glob characters.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified comment="Corrected to use a forward slash as the separator in the key." date="2007-05-07T15:59:00.528-04:00">
              <contributor organization="Secure Elements, Inc.">Glenn Strickland</contributor>
            </modified>
            <status_change date="2007-05-07T16:04:20.644-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:41.192-04:00">ACCEPTED</status_change>
            <modified comment="Use def:12490 instead" date="2011-01-20T10:01:50.563-05:00">
              <contributor organization="Symantec Corporation">Josh Turpin</contributor>
            </modified>
            <status_change date="2011-01-20T10:01:50.563-05:00">DEPRECATED</status_change>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="IIS 4.0 Major Version" negate="false" test_ref="oval:org.mitre.oval:tst:3099"/>
          <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
          <criterion comment="the version of w3svc.dll is less than 4.2.775.1" negate="false" test_ref="oval:org.mitre.oval:tst:3096"/>
          <criterion comment="Patch Q319733 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3095"/>
          <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
          <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="FTP Enabled" negate="false" test_ref="oval:org.mitre.oval:tst:3074"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2385" version="5" class="vulnerability">
      <metadata>
        <title>IE5.01,SP3 Channel Definition Format Cross Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0056" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0056"/>
        <description>Internet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition Format (CDF) files, which allows remote attackers to obtain sensitive information or execute arbitrary code, aka the "Channel Definition Format (CDF) Cross Domain Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-03-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-03-23T08:09:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-13T12:15:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-05-04T12:33:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed test to check kb867282.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2824. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:48:00.494-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:52:24.518-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:09.684-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:35.103-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:12.589-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3015"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3528.700" negate="false" test_ref="oval:org.mitre.oval:tst:749"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2381" version="4" class="vulnerability">
      <metadata>
        <title>Windows Server 2003 Shell CLSID File Type Spoof Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0420"/>
        <description>The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by spoofing the type of a file via a CLSID specifier in the filename, as demonstrated using Internet Explorer 6.0.2800.1106 on Windows XP.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-14T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-08-04T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-08-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-20T07:05:00.000-04:00" comment="Changed criteria to drop explicit test for patch kb839645.  Inclusion resulted in false positives w/o incremental patching.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-04T08:04:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:2381 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:40.591-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:28.440-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion negate="true" comment="the version of helpctr.exe is less than 5.1.2600.1515" test_ref="oval:org.mitre.oval:tst:1321"/>
        <criterion comment="the version of shell32.dll is less than 6.0.3790.168" test_ref="oval:org.mitre.oval:tst:551"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2379" version="4" class="vulnerability">
      <metadata>
        <title>Windows 2000 Media Player PNG Processing Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Windows Media Player 9</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1244"/>
        <description>Windows Media Player 9 allows remote attackers to execute arbitrary code via a PNG file containing large (1) width or (2) height values, aka the "PNG Processing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-02-22T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2005-02-23T08:48:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-03-23T08:09:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-04-13T12:15:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-08-28T12:00:00.000-04:00" comment="modified objects 733, 734, 735, 736, 738, and 739 to use xsi:nil instead of a .* pattern match">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-08-28T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:17.953-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:895. Set datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-12T20:40:00.220-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-12T20:42:16.038-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:09.368-05:00">ACCEPTED</status_change>
            <modified comment="Removed the leading &quot;\&quot; from the key." date="2008-02-04T10:03:00.486-05:00">
              <contributor organization="Hewlett-Packard">Jeff Cheng</contributor>
            </modified>
            <status_change date="2008-02-04T10:08:43.021-05:00">INTERIM</status_change>
            <modified comment="Removed the leading &quot;\&quot; from the key." date="2008-02-04T10:03:00.093-05:00">
              <contributor organization="Hewlett-Packard">Jeff Cheng</contributor>
            </modified>
            <modified comment="Removed the leading &quot;\&quot; from the key." date="2008-02-04T10:03:00.139-05:00">
              <contributor organization="Hewlett-Packard">Jeff Cheng</contributor>
            </modified>
            <modified comment="Removed the leading &quot;\&quot; from the key." date="2008-02-04T10:03:00.121-05:00">
              <contributor organization="Hewlett-Packard">Jeff Cheng</contributor>
            </modified>
            <modified comment="Removed the leading &quot;\&quot; from the key." date="2008-02-04T10:03:00.237-05:00">
              <contributor organization="Hewlett-Packard">Jeff Cheng</contributor>
            </modified>
            <modified comment="Removed the leading &quot;\&quot; from the key." date="2008-02-04T10:03:00.221-05:00">
              <contributor organization="Hewlett-Packard">Jeff Cheng</contributor>
            </modified>
            <modified comment="Removed the leading &quot;\&quot; from the key." date="2008-02-04T10:03:00.557-05:00">
              <contributor organization="Hewlett-Packard">Jeff Cheng</contributor>
            </modified>
            <status_change date="2008-02-25T04:00:08.047-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Software section">
          <criterion comment="Windows Media Player 9.0 installed" test_ref="oval:org.mitre.oval:tst:1004"/>
          <criterion comment="the version of wmp.dll is les than 9.0.0.3250" test_ref="oval:org.mitre.oval:tst:1003"/>
          <criterion negate="true" comment="The patch KB885492 is installed on Windows 2000" test_ref="oval:org.mitre.oval:tst:552"/>
        </criteria>
        <criteria operator="AND" comment="Configuration section">
          <criteria operator="AND" comment="The files .asx, .wax, .wvx, .wpl, .wmx, .wms, .wmz EXIST">
            <criterion comment=".asx EXISTS" test_ref="oval:org.mitre.oval:tst:1001"/>
            <criterion comment=".wax EXISTS" test_ref="oval:org.mitre.oval:tst:1000"/>
            <criterion comment=".wvx EXISTS" test_ref="oval:org.mitre.oval:tst:999"/>
            <criterion comment=".wpl EXISTS" test_ref="oval:org.mitre.oval:tst:998"/>
            <criterion comment=".wmx EXISTS" test_ref="oval:org.mitre.oval:tst:997"/>
            <criterion comment=".wms EXISTS" test_ref="oval:org.mitre.oval:tst:996"/>
            <criterion comment=".wmz EXISTS" test_ref="oval:org.mitre.oval:tst:995"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2378" version="1" class="vulnerability">
      <metadata>
        <title>Multiple Buffer Overflows in libpng</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>libpng</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0597" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0597"/>
        <description>Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tRNS) data, or the (2) png_handle_sBIT or (3) png_handle_hIST functions do not perform sufficient bounds checking.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-12-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-24T12:04:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 7,8,or 9 installed">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
        </criteria>
        <criterion comment="Netscape installed" negate="false" test_ref="oval:org.mitre.oval:tst:901"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:237" version="1" class="vulnerability">
      <metadata>
        <title>Troubleshooter ActiveX Control Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0662" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0662"/>
        <description>Buffer overflow in Troubleshooter ActiveX Control (Tshoot.ocx) in Microsoft Windows 2000 SP4 and earlier allows remote attackers to execute arbitrary code via an HTML document with a long argument to the RunQuery2 method.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="the version of tshoot.ocx is less than 1.0.1.2125" negate="false" test_ref="oval:org.mitre.oval:tst:2764"/>
          <criterion comment="the patch kb826232 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2763"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:236" version="5" class="vulnerability">
      <metadata>
        <title>IE v6.0,SP1 Malformed GIF Image Double-free Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1048" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1048"/>
        <description>Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-08-02T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-08-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T11:01:00.000-04:00" comment="modified wft-267 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:46:05.069-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:09.072-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:47.061-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:12.485-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Software section">
        <criterion comment="Internet Explorer 6 Service Pack 1 is installed" test_ref="oval:org.mitre.oval:tst:2919"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.2800.1458" test_ref="oval:org.mitre.oval:tst:2765"/>
        <criterion negate="true" comment="the patch kb832894 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:2802"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:235" version="6" class="vulnerability">
      <metadata>
        <title>SQL Server Named Pipe Hijacking</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft SQL Server 2000</product>
          <product>Microsoft SQL Server 2000 Desktop Engine (WMSDE)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0230" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0230"/>
        <description>Microsoft SQL Server 7, 2000, and MSDE allows local users to gain privileges by hijacking a named pipe during the authentication of another user, aka the "Named Pipe Hijacking" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Yi-Fang Koh</contributor>
            </submitted>
            <modified date="2005-01-14T12:00:00.000-04:00" comment="modified wft-62 - Added &quot;80&quot; to the registry component. So that new component value is HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\80\SharedCode. This key specifes the location of the  file that should be tested.">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2005-01-20T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-16T10:31:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2005-04-08T10:31:00.000-04:00" comment="modified wft-70 - Corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:32:00.000-04:00" comment="modified wft-73 - Corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:33:00.000-04:00" comment="modified wft-78 - wft-78 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:34:00.000-04:00" comment="modified wft-79 - wft-79 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:35:00.000-04:00" comment="modified wft-51 - wft-51 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:36:00.000-04:00" comment="modified wft-52 - wft-52 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:37:00.000-04:00" comment="modified wft-53 - wft-53 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:38:00.000-04:00" comment="modified wft-54 - wft-54 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:39:00.000-04:00" comment="modified wft-60 - wft-60 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:45:00.000-04:00" comment="modified wft-61 - wft-61 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:56:00.000-04:00" comment="modified wft-63 - wft-63 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T11:52:00.000-04:00" comment="modified wft-64 - wft-64 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T12:00:00.000-04:00" comment="modified wft-72 - corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2005-04-11T08:48:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-04-27T12:07:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:46:00.000-04:00" comment="modified wft-61 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2005-09-27T01:21:00.000-04:00" comment="modified wft-63 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2005-09-27T01:23:00.000-04:00" comment="modified wft-64 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2005-09-27T01:26:00.000-04:00" comment="modified wft-73 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2005-09-27T01:27:00.000-04:00" comment="modified wft-72 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2005-09-27T01:28:00.000-04:00" comment="modified wft-70 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2005-09-27T01:29:00.000-04:00" comment="modified wft-71 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:1589, missing first character in filename due to conversion error.  Was eplprov.dll, now replprov.dll." date="2007-01-22T19:20:00.817-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-01-22T19:21:04.921-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:08.473-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:235 - SQL Server 2000 has been replaced by Microsoft SQL Server 2000" date="2014-06-02T14:58:00.754-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-06-02T14:59:46.268-04:00">INTERIM</status_change>
            <status_change date="2014-06-23T04:07:37.998-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="SQL Server 2000 is installed" test_ref="oval:org.mitre.oval:tst:2977"/>
        <criterion comment="File console.exe version3 is less than 2000.80.818.0" test_ref="oval:org.mitre.oval:tst:2780"/>
        <criterion comment="File dbmslpcn.dll version3 is less than 2000.80.818.0" test_ref="oval:org.mitre.oval:tst:2779"/>
        <criterion comment="File sqlmap70.dll version3 is less than 2000.80.811.0" test_ref="oval:org.mitre.oval:tst:2778"/>
        <criterion comment="File sqlrepss.dll version3 is less than 2000.80.765.0" test_ref="oval:org.mitre.oval:tst:2777"/>
        <criterion comment="the version of sqlservr.exe is less than 2000.80.818.0" test_ref="oval:org.mitre.oval:tst:2776"/>
        <criterion comment="the version of ssmslpcn.dll is less than 2000.80.818.0" test_ref="oval:org.mitre.oval:tst:2775"/>
        <criterion comment="the version of ssnetlib.dll is less than 2000.80.818.0" test_ref="oval:org.mitre.oval:tst:2774"/>
        <criterion comment="the version of ssnmpn70.dll is less than 2000.80.818.0" test_ref="oval:org.mitre.oval:tst:2773"/>
        <criterion comment="the version of ums.dll is less than 2000.80.816.0" test_ref="oval:org.mitre.oval:tst:2772"/>
        <criterion comment="the version of odsole70.dll is less than 2000.80.800.0" test_ref="oval:org.mitre.oval:tst:2771"/>
        <criterion comment="the version of xpweb70.dll is less than 2000.80.778.0" test_ref="oval:org.mitre.oval:tst:2770"/>
        <criterion comment="File msgprox.dll version3 is less than 2000.80.765.0" test_ref="oval:org.mitre.oval:tst:2769"/>
        <criterion comment="the version of replprov.dll is less than 2000.80.798.0" test_ref="oval:org.mitre.oval:tst:2768"/>
        <criterion comment="File replrec.dll version3 is less than 2000.80.765.0" test_ref="oval:org.mitre.oval:tst:2767"/>
        <criterion comment="File sqlvdi.dll version3 is less than 2000.80.765.0" test_ref="oval:org.mitre.oval:tst:2766"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2348" version="3" class="vulnerability">
      <metadata>
        <title>Windows Project Professional URL Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Project Professional 2002</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0848" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0848"/>
        <description>Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long inputs after (1) "%00 (null byte) in .doc filenames or (2) "%0a" (carriage return) in .rtf filenames.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-03-29T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2005-03-29T08:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-13T12:15:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-05-04T12:33:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-07-11T12:00:00.000-04:00" comment="removed extra closing curly brace from obj:466">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-09-08T12:56:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:17.655-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:500: datatype was int, now version.  Implemented by Matthew Wojcik." date="2007-01-23T14:36:00.930-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-23T14:44:59.057-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:08.188-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Project Professional 2002 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:555"/>
        <criterion comment="the version of mso.dll is less than 10.0.6735.0" negate="false" test_ref="oval:org.mitre.oval:tst:554"/>
        <criterion comment="Patch KB873355 installed" negate="true" test_ref="oval:org.mitre.oval:tst:553"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:231" version="2" class="vulnerability">
      <metadata>
        <title>SQL Server Extended Stored Procedure Parameter Parsing</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft SQL Server</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2000-1081" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-1081"/>
        <description>The xp_displayparamstmt function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-27T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified date="2005-04-08T05:25:00.000-04:00" comment="modified wft-85 - wft-85 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T05:28:00.000-04:00" comment="modified wft-86 - wft-86 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T05:35:00.000-04:00" comment="modified wft-87 - wft-87 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T05:55:00.000-04:00" comment="modified wft-88 - wft-88 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2005-04-11T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2005-04-12T12:00:00.000-04:00" comment="modified wft-89 - wft-89 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2005-04-27T12:07:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:48:00.000-04:00" comment="modified wft-85 - Changed comment to match match">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2005-09-27T01:25:00.000-04:00" comment="modified wft-86 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2005-09-27T01:26:00.000-04:00" comment="modified wft-87 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2005-09-27T01:27:00.000-04:00" comment="modified wft-88 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2005-09-27T01:28:00.000-04:00" comment="modified wft-89 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="SQL Server 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2977"/>
        <criterion comment="File odsole70.dll Version3 is less than 2000.80.223.0" negate="false" test_ref="oval:org.mitre.oval:tst:2784"/>
        <criterion comment="File xpqueue.dll Version3 is less than 2000.80.223.0" negate="false" test_ref="oval:org.mitre.oval:tst:2783"/>
        <criterion comment="File xprepl.dll Version3 is less than 2000.80.223.0" negate="false" test_ref="oval:org.mitre.oval:tst:2782"/>
        <criterion comment="File xpstar.dll Version3 is less than 2000.80.223.0" negate="false" test_ref="oval:org.mitre.oval:tst:2781"/>
        <criterion comment="File sqlservr.exe version3 greater than or equal to 2000.80.384.0" negate="true" test_ref="oval:org.mitre.oval:tst:2966"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2300" version="2" class="vulnerability">
      <metadata>
        <title>Exchange Server 2003 (INTERIM) Routing Engine Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>SMTP</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0840" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0840"/>
        <description>The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Routing Engine component of Exchange Server 2003, allows remote attackers to execute arbitrary code via a malicious DNS response message containing length values that are not properly validated.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-19T10:33:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-10-20T02:35:00.000-04:00">DRAFT</status_change>
            <modified date="2004-10-26T09:17:00.000-04:00" comment="">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2004-11-17T10:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.406-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:53:46.890-04:00">INTERIM</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.093-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-11-13T12:01:07.563-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="The version of smtpsvc.dll is less than 6.0.3790.211" negate="false" test_ref="oval:org.mitre.oval:tst:558"/>
          <criterion comment="the patch WindowsServer2003-KB885881-x86-enu.exe is installed" negate="false" test_ref="oval:org.mitre.oval:tst:557"/>
          <criteria operator="AND" comment="Exchange Server 2003 is installed on Windows Server 2003">
            <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
            <criterion comment="Exchange Server 2003 (gold edition) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2760"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="SMTP Enabled" negate="false" test_ref="oval:org.mitre.oval:tst:3054"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:230" version="2" class="vulnerability">
      <metadata>
        <title>xdrmem_bytes() Integer Overflow Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>krb5</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0028"/>
        <description>Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-14T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:22.838-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:23.324-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="krb5-server version is less than 1.2.7-14" negate="false" test_ref="oval:org.mitre.oval:tst:2785"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:23" version="3" class="vulnerability">
      <metadata>
        <title>IE v5.5 Forced Script Execution</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0026" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0026"/>
        <description>Internet Explorer 5.5 and 6.0 allows remote attackers to bypass restrictions for executing scripts via an object that processes asynchronous events after the initial security checks have been made.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:45.790-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:12.135-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Internet Explorer 5.5 Installed">
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3078"/>
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3077"/>
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3076"/>
        </criteria>
        <criterion comment="the version of mshtml.dll is less than 5.50.4725.2100" negate="false" test_ref="oval:org.mitre.oval:tst:3075"/>
        <criterion comment="the patch q316059 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3121"/>
        <criterion comment="the patch q319282 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3120"/>
        <criterion comment="the patch q321232 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3119"/>
        <criterion comment="the patch q323759 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3118"/>
        <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2286" version="1" class="vulnerability">
      <metadata>
        <title>SharePoint Privilege Elevation Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>SharePoint</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2581" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2581"/>
        <description>Multiple cross-site scripting (XSS) vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 2003 and Office SharePoint Server 2007 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO (query string) in "every main page," as demonstrated by default.aspx.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-10-10T04:39:42">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2007-10-11T10:02:54.308-04:00">DRAFT</status_change>
            <modified comment="Replaced check for ia64 architecture with check for x64 architecture." date="2007-10-25T13:02:00.922-04:00">
              <contributor organization="Assuria Ltd.">Chris Wood</contributor>
            </modified>
            <status_change date="2007-11-13T12:01:07.357-05:00">INTERIM</status_change>
            <status_change date="2007-12-03T04:00:10.817-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criteria operator="OR">
          <criteria operator="AND">
            <criterion comment="32-Bit version of Windows is installed" test_ref="oval:org.mitre.oval:tst:2748"/>
            <extend_definition comment="Microsoft Office SharePoint Services 2003 are installed." definition_ref="oval:org.mitre.oval:def:1363"/>
            <criterion comment="the version of Mssdmn.exe is less than 12.0.6031.5000" test_ref="oval:org.mitre.oval:tst:4297"/>
          </criteria>
          <criteria operator="AND">
            <criterion comment="64-Bit (x64 architecture) version of Windows is installed" test_ref="oval:org.mitre.oval:tst:2744"/>
            <extend_definition comment="Microsoft Office SharePoint Services 2003 are installed." definition_ref="oval:org.mitre.oval:def:1363"/>
            <criterion comment="the version of Mssdmn.exe is less than 12.0.6028.5000" test_ref="oval:org.mitre.oval:tst:4505"/>
          </criteria>
          <criteria operator="AND">
            <extend_definition comment="Microsoft Office SharePoint Server 2007 is installed." definition_ref="oval:org.mitre.oval:def:2313"/>
            <criterion comment="the version of Mssdmn.exe is less than 12.0.6031.5000" test_ref="oval:org.mitre.oval:tst:4297"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1363" version="3" class="inventory">
      <metadata>
        <title>Microsoft Office SharePoint Services 2003 are installed.</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:sharepoint_services:2003"/>
        <description>Microsoft Office SharePoint Services 2003 are installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-10-10T04:39:42">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2007-10-11T10:02:54.086-04:00">DRAFT</status_change>
            <status_change date="2007-10-26T10:00:29.596-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:00:59.252-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1363 - Modifications vary from minor OVAL title/description changes to suggesting an alternative CPE name to use." date="2011-09-28T11:29:00.976-04:00">
              <contributor organization="The MITRE Corporation">David Rothenberg</contributor>
            </modified>
            <status_change date="2011-09-28T11:33:32.585-04:00">INTERIM</status_change>
            <status_change date="2011-10-17T04:00:11.410-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="SharePoint has been upgraded from 2.0" test_ref="oval:org.mitre.oval:tst:4391"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2253" version="4" class="vulnerability">
      <metadata>
        <title>URL Parsing Memory Corruption Vulnerability (IE5.01,SP4)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0554" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0554"/>
        <description>Buffer overflow in the URL processor of Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL with a long hostname, aka "URL Parsing Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-05-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-05-11T05:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-22T12:38:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:40.528-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:07.663-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:43.115-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:11.830-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3826.2400" negate="false" test_ref="oval:org.mitre.oval:tst:567"/>
          <criterion comment="the patch kb890923 is installed (Win2K SP4  Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:566"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:225" version="3" class="vulnerability">
      <metadata>
        <title>IE v5.5 Frames Cross-site Scripting Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1187" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1187"/>
        <description>Cross-site scripting vulnerability (XSS) in Internet Explorer 5.01 through 6.0 allows remote attackers to read and execute files on the local system via web pages using the &lt;frame> or &lt;iframe> element and javascript, aka "Frames Cross Site Scripting," as demonstrated using the PrivacyPolicy.dlg resource.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-27T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:48.935-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:11.752-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Internet Explorer 5.5 Installed">
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3078"/>
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3077"/>
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3076"/>
          <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
        </criteria>
        <criterion comment="the version of mshtml.dll is less than 5.50.4922.900" negate="false" test_ref="oval:org.mitre.oval:tst:2786"/>
        <criterion comment="the patch q328970 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3117"/>
        <criterion comment="the patch q324929 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3116"/>
        <criterion comment="the patch q810847 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3115"/>
        <criterion comment="the patch q813489 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3114"/>
        <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2248" version="1" class="vulnerability">
      <metadata>
        <title>Sun RPC No Timeout Denial of Service on TCP Ports</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>libc</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1265"/>
        <description>The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism when reading data from TCP connections, which allows remote attackers to cause a denial of service (hang).</description>
        <oval_repository>
          <dates>
            <submitted date="2005-04-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-04-20T12:13:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-05-11T05:41:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criteria operator="AND" comment="All RPC w/TCP patches installed - CVE-2002-1265">
            <criterion comment="Patch 108748-01 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:581"/>
            <criterion comment="Patch 108750-01 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:580"/>
            <criteria operator="OR" comment="Patches 108752-01 or 106541-14 installed">
              <criterion comment="Patch 108752-01 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:579"/>
              <criterion comment="Patch 106541-14 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:578"/>
            </criteria>
            <criterion comment="Patch 106942-09 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:577"/>
            <criterion comment="Patch 107477-03 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:576"/>
            <criterion comment="Patch 108551-03 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:575"/>
            <criterion comment="Patch 108754-01 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:574"/>
            <criterion comment="Patch 108756-01 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:573"/>
            <criterion comment="Patch 108758-01 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:572"/>
            <criterion comment="Patch 108760-01 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:571"/>
            <criterion comment="Patch 108762-01 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:570"/>
            <criterion comment="Patch 108764-01 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:569"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="rpcbind running" negate="false" test_ref="oval:org.mitre.oval:tst:568"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:22434" version="3" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the VirtualBox component in Oracle Virtualization VirtualBox 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect integrity and availability, a different vulnerability than CVE-2014-0404</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows 8.1</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>VirtualBox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2014-0406" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0406"/>
        <description>Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-0404.</description>
        <oval_repository>
          <dates>
            <submitted date="2014-01-17T08:31:03">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </submitted>
            <status_change date="2014-01-21T16:48:45.576-05:00">DRAFT</status_change>
            <status_change date="2014-02-10T04:00:27.944-05:00">INTERIM</status_change>
            <status_change date="2014-03-03T04:01:09.043-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="VirtualBox is installed" definition_ref="oval:org.mitre.oval:def:11581"/>
        <criterion comment="Check if Oracle VM VirtualBox is installed" test_ref="oval:org.mitre.oval:tst:42006"/>
        <criteria operator="OR" comment="Check versions of VirtualBox">
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 3.2.0" test_ref="oval:org.mitre.oval:tst:88842"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than or equals to 3.2.18" test_ref="oval:org.mitre.oval:tst:100117"/>
          </criteria>
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.0.0" test_ref="oval:org.mitre.oval:tst:88607"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than or equals to 4.0.20" test_ref="oval:org.mitre.oval:tst:100096"/>
          </criteria>
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.1.0" test_ref="oval:org.mitre.oval:tst:88836"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.1.28" test_ref="oval:org.mitre.oval:tst:99957"/>
          </criteria>
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.2.0" test_ref="oval:org.mitre.oval:tst:99857"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.2.18" test_ref="oval:org.mitre.oval:tst:99972"/>
          </criteria>
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.3.0" test_ref="oval:org.mitre.oval:tst:100120"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.3.2" test_ref="oval:org.mitre.oval:tst:100166"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:22420" version="3" class="vulnerability">
      <metadata>
        <title>The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Next Protocol Negotiation record in a TLS handshake</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 6</platform>
          <platform>CentOS Linux 6</platform>
          <product>OpenSSL</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2013-4353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4353"/>
        <description>The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Next Protocol Negotiation record in a TLS handshake.</description>
        <oval_repository>
          <dates>
            <submitted date="2014-02-27T13:00:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </submitted>
            <status_change date="2014-02-28T15:23:50.821-05:00">DRAFT</status_change>
            <status_change date="2014-03-17T04:00:18.401-04:00">INTERIM</status_change>
            <status_change date="2014-04-07T04:02:47.119-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="OpenSSL 1.0.1 before 1.0.1f" test_ref="oval:org.mitre.oval:tst:100449"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:22409" version="3" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the VirtualBox component in Oracle Virtualization VirtualBox 3.2.20, 4.0.22, 4.1.30, 4.2.22, and 4.3.6 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core.</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows 8.1</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>VirtualBox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2013-5892" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5892"/>
        <description>Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.22, and 4.3.6 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core.</description>
        <oval_repository>
          <dates>
            <submitted date="2014-01-28T12:03:17">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </submitted>
            <status_change date="2014-01-30T14:49:20.533-05:00">DRAFT</status_change>
            <status_change date="2014-02-17T04:01:38.405-05:00">INTERIM</status_change>
            <status_change date="2014-03-10T04:00:43.864-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="VirtualBox is installed" definition_ref="oval:org.mitre.oval:def:11581"/>
        <criterion comment="Check if Oracle VM VirtualBox is installed" test_ref="oval:org.mitre.oval:tst:42006"/>
        <criteria operator="OR" comment="Check versions of VirtualBox">
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 3.2.0" test_ref="oval:org.mitre.oval:tst:88842"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than or equals to 3.2.18" test_ref="oval:org.mitre.oval:tst:100117"/>
          </criteria>
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.0.0" test_ref="oval:org.mitre.oval:tst:88607"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than or equals to 4.0.20" test_ref="oval:org.mitre.oval:tst:100096"/>
          </criteria>
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.1.0" test_ref="oval:org.mitre.oval:tst:88836"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.1.28" test_ref="oval:org.mitre.oval:tst:99957"/>
          </criteria>
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.2.0" test_ref="oval:org.mitre.oval:tst:99857"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.2.20" test_ref="oval:org.mitre.oval:tst:100260"/>
          </criteria>
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.3.0" test_ref="oval:org.mitre.oval:tst:100120"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.3.4" test_ref="oval:org.mitre.oval:tst:100012"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:22391" version="3" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the VirtualBox component in Oracle Virtualization VirtualBox 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect integrity and availability, a different vulnerability than CVE-2014-0406</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows 8.1</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>VirtualBox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2014-0404" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0404"/>
        <description>Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-0406.</description>
        <oval_repository>
          <dates>
            <submitted date="2014-01-17T08:31:03">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </submitted>
            <status_change date="2014-01-21T16:48:45.953-05:00">DRAFT</status_change>
            <status_change date="2014-02-10T04:00:27.690-05:00">INTERIM</status_change>
            <status_change date="2014-03-03T04:01:07.094-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="VirtualBox is installed" definition_ref="oval:org.mitre.oval:def:11581"/>
        <criterion comment="Check if Oracle VM VirtualBox is installed" test_ref="oval:org.mitre.oval:tst:42006"/>
        <criteria operator="OR" comment="Check versions of VirtualBox">
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 3.2.0" test_ref="oval:org.mitre.oval:tst:88842"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than or equals to 3.2.18" test_ref="oval:org.mitre.oval:tst:100117"/>
          </criteria>
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.0.0" test_ref="oval:org.mitre.oval:tst:88607"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than or equals to 4.0.20" test_ref="oval:org.mitre.oval:tst:100096"/>
          </criteria>
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.1.0" test_ref="oval:org.mitre.oval:tst:88836"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.1.28" test_ref="oval:org.mitre.oval:tst:99957"/>
          </criteria>
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.2.0" test_ref="oval:org.mitre.oval:tst:99857"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.2.18" test_ref="oval:org.mitre.oval:tst:99972"/>
          </criteria>
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.3.0" test_ref="oval:org.mitre.oval:tst:100120"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.3.2" test_ref="oval:org.mitre.oval:tst:100166"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2226" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in Solaris 10 BIND: Susceptible to Cache Poisoning Attack</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2926"/>
        <description>ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-23T13:32:59.000-04:00">
              <contributor organization="Opsware, Inc.">Nicholas Hansen</contributor>
            </submitted>
            <status_change date="2007-08-24T08:19:39.287-04:00">DRAFT</status_change>
            <status_change date="2007-09-10T14:45:26.976-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:47.043-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 103018" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="BIND DNS Name server (SUNWbind) is installed" test_ref="oval:org.mitre.oval:tst:4225" negate="false"/>
          <criterion comment="Patch 119783-05 or later installed" test_ref="oval:org.mitre.oval:tst:3255" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 103018" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="BIND DNS Name server (SUNWbind) installed" test_ref="oval:org.mitre.oval:tst:4225" negate="false"/>
          <criterion comment="Patch 119784-05 or later installed" test_ref="oval:org.mitre.oval:tst:3372" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2223" version="1" class="vulnerability">
      <metadata>
        <title>Local Users May be Able to Hang Systems That Have Loaded The Kernel Debugger kmdb(1)</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3782" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3782"/>
        <description>Unspecified vulnerability in the kernel debugger (kmdb) in Sun Solaris 10, when running on x86, allows local users to cause a denial of service (system hang) via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-10T12:25:26.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-13T13:57:14.041-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:32.678-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:46.961-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102512" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 118855-15 or later installed" test_ref="oval:org.mitre.oval:tst:3399" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2222" version="1" class="vulnerability">
      <metadata>
        <title>Sendmail Address Processor Buffer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>Sendmail</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1337" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1337"/>
        <description>Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-04-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-04-20T12:13:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-05-11T05:41:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="OR" comment="Solaris 7,8,or 9 installed">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          </criteria>
          <criterion comment="Sendmail - user (SUNWsndmu) installed" negate="false" test_ref="oval:org.mitre.oval:tst:587"/>
          <criterion comment="Patch 107684-08 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:586"/>
          <criterion comment="Patch 110615-08 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:585"/>
          <criterion comment="Patch 113575-03 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:584"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="Sendmail running" negate="false" test_ref="oval:org.mitre.oval:tst:583"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2219" version="7" class="vulnerability">
      <metadata>
        <title>IE v6.0 SSL Cached Content Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0845" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0845"/>
        <description>Internet Explorer 5.01, 5.5, and 6 does not properly cache SSL content, which allows remote attackers to obtain information or spoof content via a web site with the same host name as the target web site, whose content is cached and reused when the user visits the target web site.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-26T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-27T04:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-17T05:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T05:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="Changed IE registry test to wrt-18">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-06-23T12:49:00.000-04:00" comment="modified obj:490 - Chagned the pattern match operation to equals since there was no need for a regular expression.">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-06-23T11:35:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:16.422-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:491: Removed HKEY_LOCAL_MACHINE\ from the key, as it's specified as the hive.  Implemented by Harvey Rubinovitz." date="2007-01-22T00:36:00.756-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T00:37:49.332-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:07.288-05:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.853-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:53:29.486-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:07.008-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:52.991-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:02:53.847-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="the version of mshtml.dll is less than 6.0.2745.2800" negate="false" test_ref="oval:org.mitre.oval:tst:590"/>
          <criterion comment="the patch kb834707 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:589"/>
          <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="Users not saving encrypted pages to disk  (DisableCachingOfSSLPages)" negate="false" test_ref="oval:org.mitre.oval:tst:588"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2214" version="1" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability in the Handling of Thread Contexts in the Solaris Kernel May Allow a Denial of Service (DoS)</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5132" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5132"/>
        <description>Race condition in the kernel in Sun Solaris 8 through 10 allows local users to cause a denial of service (panic) via unspecified vectors related to "the handling of thread contexts."</description>
        <oval_repository>
          <dates>
            <submitted date="2007-09-28T13:02:59.000-04:00">
              <contributor organization="Opsware, Inc.">Nicholas Hansen</contributor>
            </submitted>
            <status_change date="2007-10-02T08:04:40.234-04:00">DRAFT</status_change>
            <status_change date="2007-10-18T21:59:20.303-04:00">INTERIM</status_change>
            <status_change date="2007-11-02T07:17:42.208-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 103084" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 117350-48 or later installed" test_ref="oval:org.mitre.oval:tst:4094" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 103084" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 122300-10 or later installed" test_ref="oval:org.mitre.oval:tst:3262" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 103084" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 125100-02 or later installed" test_ref="oval:org.mitre.oval:tst:3554" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 103084" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 117351-48 or later installed" test_ref="oval:org.mitre.oval:tst:4106" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 103084" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 122301-10 or later installed" test_ref="oval:org.mitre.oval:tst:4263" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 103084" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 125101-02 or later installed" test_ref="oval:org.mitre.oval:tst:3275" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2210" version="1" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability in Solaris libnsl(3LIB) may lead to a Denial of Service (DoS) to the rpcbind(1M) Service</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0165" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0165"/>
        <description>Unspecified vulnerability in libnsl in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (crash) via malformed RPC requests that trigger a crash in rpcbind.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-10T12:25:20.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-13T13:57:11.972-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:32.343-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:46.612-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102713" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 108993-65 or later installed" test_ref="oval:org.mitre.oval:tst:3523" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102713" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 113319-27 or later installed" test_ref="oval:org.mitre.oval:tst:3553" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102713" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 108994-65 or later installed" test_ref="oval:org.mitre.oval:tst:3253" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102713" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 113719-21 or later installed" test_ref="oval:org.mitre.oval:tst:3740" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:221" version="2" class="vulnerability">
      <metadata>
        <title>Microsoft XML Core Services Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft XML Core Services</product>
        </affected>
        <reference ref_id="CVE-2006-4685" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4685" source="CVE"/>
        <description>The XMLHTTP ActiveX control in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 does not properly handle HTTP server-side redirects, which allows remote user-assisted attackers to access content from other domains.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-10-11T05:29:41">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-10-13T14:55:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-31T19:35:32.199-05:00">INTERIM</status_change>
            <status_change date="2006-11-21T21:27:41.254-05:00">ACCEPTED</status_change>
            <modified comment="Changed the location of MSXML5.dll, which is installed as a part of Office 2003 and Office 2007" date="2008-11-19T10:37:00.716-05:00">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2008-11-19T10:38:59.386-05:00">INTERIM</status_change>
            <status_change date="2008-12-08T04:00:46.006-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <extend_definition comment="Microsoft XML Core Services 3 is installed" definition_ref="oval:org.mitre.oval:def:415"/>
          <criterion comment="The version of Msxml3.dll is less than 8.70.1113.0." test_ref="oval:org.mitre.oval:tst:34"/>
        </criteria>
        <criteria operator="AND">
          <extend_definition comment="Microsoft XML Core Services 4 is installed" definition_ref="oval:org.mitre.oval:def:1002"/>
          <criterion comment="The version of Msxml4.dll is less than 4.20.9839.0." test_ref="oval:org.mitre.oval:tst:72"/>
        </criteria>
        <criteria operator="AND">
          <extend_definition comment="Microsoft XML Core Services 5 is installed" definition_ref="oval:org.mitre.oval:def:493"/>
          <criterion comment="The version of Msxml5.dll is less than 5.10.2930.0." test_ref="oval:org.mitre.oval:tst:87"/>
        </criteria>
        <criteria operator="AND">
          <extend_definition comment="Microsoft XML Core Services 6 is installed" definition_ref="oval:org.mitre.oval:def:454"/>
          <criterion comment="The version of Msxml6.dll is less than 6.0.3888.0." test_ref="oval:org.mitre.oval:tst:32"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:493" version="4" class="inventory">
      <metadata>
        <title>Microsoft XML Core Services 5 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft XML Core Services 5</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:xml_core_services:5"/>
        <description>Microsoft XML Core Services 5 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-10-11T05:29:41">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-10-13T14:55:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-31T19:35:45.581-05:00">INTERIM</status_change>
            <status_change date="2006-11-21T21:27:55.727-05:00">ACCEPTED</status_change>
            <modified comment="Changed the location of MSXML5.dll, which is installed as a part of Office 2003 and Office 2007" date="2008-11-19T10:37:00.716-05:00">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2008-11-19T10:38:59.532-05:00">INTERIM</status_change>
            <status_change date="2008-12-08T04:00:48.083-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:493 - products added to inventories" date="2015-04-17T09:39:00.289-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-04-17T09:41:23.301-04:00">INTERIM</status_change>
            <status_change date="2015-05-04T04:00:20.058-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Microsoft XML Core Services 5 is installed." test_ref="oval:org.mitre.oval:tst:49"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:415" version="3" class="inventory">
      <metadata>
        <title>Microsoft XML Core Services 3 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft XML Core Services 3</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:xml_core_services:3"/>
        <description>Microsoft XML Core Services 3 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-10-11T05:29:41">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-10-13T14:55:00.00-04:00">DRAFT</status_change>
            <status_change date="2006-10-31T19:35:39.106-05:00">INTERIM</status_change>
            <status_change date="2006-11-21T21:27:48.903-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:415 - products added to inventories" date="2015-04-17T09:39:00.289-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-04-17T09:41:23.535-04:00">INTERIM</status_change>
            <status_change date="2015-05-04T04:00:19.498-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Microsoft XML Core Services 3 is installed." test_ref="oval:org.mitre.oval:tst:179"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2205" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in X Display Manager (xdm(1)) Xsession Script</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5215" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5215"/>
        <description>The Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060317, and Solaris 8 through 10 before 20061006, allows local users to overwrite arbitrary files, or read another user's Xsession errors file, via a symlink attack on a /tmp/xses-$USER file.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-10T12:25:23.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-13T13:57:13.067-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:32.233-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:46.256-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102652" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 111844-04 or later installed" test_ref="oval:org.mitre.oval:tst:3324" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102652" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 124830-01 or later installed" test_ref="oval:org.mitre.oval:tst:3994" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102652" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 124457-01 or later installed" test_ref="oval:org.mitre.oval:tst:3954" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102652" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 111845-04 or later installed" test_ref="oval:org.mitre.oval:tst:4176" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102652" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 124831-01 or later installed" test_ref="oval:org.mitre.oval:tst:3585" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102652" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 124458-01 or later installed" test_ref="oval:org.mitre.oval:tst:3425" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2202" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the in.telnetd(1M) Daemon May Allow Unauthorized Remote Users to Gain Access to a Solaris Host</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0882" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0882"/>
        <description>Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote attackers to log into certain accounts, as demonstrated by the bin account.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-10T12:25:19.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-13T13:57:11.422-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:32.140-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:46.156-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102802" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 120068-02 or later installed" test_ref="oval:org.mitre.oval:tst:3727" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102802" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 120069-02 or later installed" test_ref="oval:org.mitre.oval:tst:3199" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:22" version="7" class="vulnerability" deprecated="true">
      <metadata>
        <title>DEPRECATED: Windows 2000 Variant of Chunked Encoding Buffer Overrun</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0147" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0147"/>
        <description>Buffer overflow in the ASP data transfer mechanism in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to cause a denial of service or execute code, aka "Microsoft-discovered variant of Chunked Encoding buffer overrun."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-14T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected to use a forward slash as the separator in the key." date="2007-05-07T15:59:00.430-04:00">
              <contributor organization="Secure Elements, Inc.">Glenn Strickland</contributor>
            </modified>
            <status_change date="2007-05-07T16:06:12.258-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:39.243-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2884" date="2010-11-29T16:14:00.692-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:40.276-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:42.264-05:00">ACCEPTED</status_change>
            <modified comment="Use def:12307 instead" date="2011-01-20T10:05:17.755-05:00">
              <contributor organization="Symantec Corporation">Josh Turpin</contributor>
            </modified>
            <status_change date="2011-01-20T10:05:17.755-05:00">DEPRECATED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="IIS major version equals 5" negate="false" test_ref="oval:org.mitre.oval:tst:3081"/>
          <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
          <criterion comment="the version of w3svc.dll is less than 5.0.2195.5269" negate="false" test_ref="oval:org.mitre.oval:tst:3080"/>
          <criterion comment="Patch Q319733 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3095"/>
          <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
          <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
          <criterion comment="Win2K/XP/2003 service pack 3 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:3079"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="asp.dll mapping exists" negate="false" test_ref="oval:org.mitre.oval:tst:3092"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2199" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the Solaris 10 TCP Fusion Code May Lead to a System Panic, Resulting in a Denial of Service (DoS)</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5396" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5396"/>
        <description>The tcp_fuse_rcv_drain function in the Sun Solaris 10 kernel before 20061017, when TCP Fusion is enabled, allows local users to cause a denial of service (system crash) via a TCP loopback connection with both endpoints on the same system.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-10T12:25:23.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-13T13:57:12.927-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:32.000-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:45.983-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102667" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 118833-23 or later installed" test_ref="oval:org.mitre.oval:tst:3263" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102667" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 118855-19 or later installed" test_ref="oval:org.mitre.oval:tst:3362" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2190" version="7" class="vulnerability">
      <metadata>
        <title>Windows XP (32-Bit) DirectPlay Denial of Service</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>DirectX</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0202" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0202"/>
        <description>IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-06-15T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified date="2004-06-16T12:00:00.000-04:00" comment="Added cmp-966 to test for vulnerable versions of DirectX">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </modified>
            <modified date="2004-06-17T12:00:00.000-04:00" comment="Re-added cmp-966">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </modified>
            <modified date="2004-07-06T12:00:00.000-04:00" comment="Added the negate attribute with a value of 'true' to the subtest elements referencing patch installations.">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </modified>
            <status_change date="2004-07-12T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-07-21T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-09-07T18:56:00.000-04:00" comment="set negate attribute to true in criteria for oval:org.mitre.oval:tst:2845">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2006-09-08T12:56:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:15.868-04:00">ACCEPTED</status_change>
            <modified comment="Corrections and update to POSIX compatibility for ste:868" date="2010-11-29T16:09:00.337-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:12:03.103-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:41.712-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:14.396-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:25.766-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Software section">
        <criterion comment="Windows XP is installed" test_ref="oval:org.mitre.oval:tst:2838"/>
        <criterion comment="32-Bit version of Windows is installed" test_ref="oval:org.mitre.oval:tst:2748"/>
        <criteria operator="OR" comment="DirectX without KB839643 Installed">
          <criteria operator="AND" comment="DirectX 8.2 without DirectX82-KB839643-x86-ENU.EXE Installed">
            <criterion comment="the version of dplayx.dll is less than 5.2.3677.144" test_ref="oval:org.mitre.oval:tst:605"/>
            <criterion comment="DirectX 8.2 Installed" test_ref="oval:org.mitre.oval:tst:604"/>
            <criterion negate="true" comment="Patch DirectX82-KB839643-x86-ENU Installed" test_ref="oval:org.mitre.oval:tst:603"/>
          </criteria>
          <criteria operator="AND" comment="DirectX 9.0 without DirectX9-KB839643-x86-ENU.EXE Installed">
            <criterion comment="the version of dplayx.dll is less than 5.3.0.903" test_ref="oval:org.mitre.oval:tst:602"/>
            <criterion comment="DirectX 9.0x Installed" test_ref="oval:org.mitre.oval:tst:601"/>
            <criterion negate="true" comment="Patch DirectX90-KB839643-x86-ENU Installed" test_ref="oval:org.mitre.oval:tst:600"/>
          </criteria>
          <criteria operator="OR" comment="DirectX 8.1 without WindowsXP-KB839643-x86-ENU.EXE Installed">
            <criteria operator="AND" comment="DirectX 8.1 without WindowsXP-KB839643-x86-ENU.EXE Installed on XP Gold">
              <criterion comment="the version of dplayx.dll is less than 5.1.2600.148" test_ref="oval:org.mitre.oval:tst:599"/>
              <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
              <criterion comment="DirectX 8.1x Installed" test_ref="oval:org.mitre.oval:tst:598"/>
              <criterion negate="true" comment="the patch kb839643 is installed" test_ref="oval:org.mitre.oval:tst:597"/>
            </criteria>
            <criteria operator="AND" comment="DirectX 8.1 without WindowsXP-KB839643-x86-ENU.EXE Installed on XP SP1">
              <criterion comment="the version of dplayx.dll is less than 5.1.2600.1517" test_ref="oval:org.mitre.oval:tst:596"/>
              <criterion comment="DirectX 8.1x Installed" test_ref="oval:org.mitre.oval:tst:598"/>
              <criterion comment="the patch kb839643 is installed" test_ref="oval:org.mitre.oval:tst:597"/>
              <criterion negate="true" comment="Win2K/XP/2003 service pack 1 (or later) is installed" test_ref="oval:org.mitre.oval:tst:969"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:219" version="6" class="vulnerability">
      <metadata>
        <title>Sun Solaris Unspecified x86 64 Bit Local Denial Of ServiceVulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0516" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0516"/>
        <description>Unspecified vulnerability in the kernel processing in Solaris 10 64 bit platform, when running in 64-bit mode, allows local users to cause a denial of service (system panic) via unknown attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:52:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-25T12:47:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-10T20:39:58.679-04:00">INTERIM</status_change>
            <status_change date="2006-10-31T19:35:30.871-05:00">ACCEPTED</status_change>
            <modified comment="Added title. Implemented by Jon Baker of The MITRE Corporation." date="2007-02-13T14:50:00.900-05:00">
              <contributor organization="Security-Database">Nabil Ouchn</contributor>
            </modified>
            <status_change date="2007-02-13T14:50:50.923-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:12.403-04:00">ACCEPTED</status_change>
            <modified comment="Added datatype to bits entity on an isainfo_state.  Datatype set to int." date="2010-09-02T21:09:00.853-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T21:11:44.313-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:19.873-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:219 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:04:57.460-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:27.252-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Software section">
          <criterion comment="Solaris 10 Installed" test_ref="oval:org.mitre.oval:tst:3955"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3338"/>
          <criterion negate="true" comment="Patch 118844-14 or later installed" test_ref="oval:org.mitre.oval:tst:3195"/>
        </criteria>
        <criteria operator="AND" comment="Configuration section">
          <criterion comment="system is running in 64-bit mode" test_ref="oval:org.mitre.oval:tst:3884"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:21883" version="3" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the VirtualBox component in Oracle Virtualization VirtualBox 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect confidentiality, integrity, and availability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows 8.1</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>VirtualBox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2014-0407" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0407"/>
        <description>Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core.</description>
        <oval_repository>
          <dates>
            <submitted date="2014-01-17T08:31:03">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </submitted>
            <status_change date="2014-01-21T16:48:46.749-05:00">DRAFT</status_change>
            <status_change date="2014-02-10T04:00:22.299-05:00">INTERIM</status_change>
            <status_change date="2014-03-03T04:01:02.226-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="VirtualBox is installed" definition_ref="oval:org.mitre.oval:def:11581"/>
        <criterion comment="Check if Oracle VM VirtualBox is installed" test_ref="oval:org.mitre.oval:tst:42006"/>
        <criteria operator="OR" comment="Check versions of VirtualBox">
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 3.2.0" test_ref="oval:org.mitre.oval:tst:88842"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than or equals to 3.2.18" test_ref="oval:org.mitre.oval:tst:100117"/>
          </criteria>
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.0.0" test_ref="oval:org.mitre.oval:tst:88607"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than or equals to 4.0.20" test_ref="oval:org.mitre.oval:tst:100096"/>
          </criteria>
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.1.0" test_ref="oval:org.mitre.oval:tst:88836"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.1.28" test_ref="oval:org.mitre.oval:tst:99957"/>
          </criteria>
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.2.0" test_ref="oval:org.mitre.oval:tst:99857"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.2.18" test_ref="oval:org.mitre.oval:tst:99972"/>
          </criteria>
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.3.0" test_ref="oval:org.mitre.oval:tst:100120"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.3.2" test_ref="oval:org.mitre.oval:tst:100166"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2188" version="5" class="vulnerability">
      <metadata>
        <title>Win2k Path MTU Discovery Attack Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1060" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1060"/>
        <description>Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-04-22T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Matthew Burton</contributor>
            </submitted>
            <status_change date="2005-04-27T12:06:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-22T12:38:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-11-06T04:13:00.000-04:00" comment="Replaced reference to var:200 with reference to var:201 in obj:588 since tcpip.sys is located in \system32\drivers and not \system32.  Modified by Harvey Rubinovitz">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-11-21T04:13:00.000-04:00">INTERIM</status_change>
            <status_change date="2007-01-03T13:53:51.442-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:09.289-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:25.416-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or earlier) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1247"/>
          <criterion comment="the version of Tcpip.sys is less than 5.0.2195.7035" negate="false" test_ref="oval:org.mitre.oval:tst:1012"/>
          <criterion comment="the patch KB893066 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2353"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="Enable Path MTU Discovery is Disabled" negate="true" test_ref="oval:org.mitre.oval:tst:2352"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2183" version="1" class="vulnerability">
      <metadata>
        <title>Sendmail Custom DNS Map Buffer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <product>Sendmail</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0906" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0906"/>
        <description>Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malicious DNS server.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-12-22T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-12T12:00:00.000-04:00">DRAFT</status_change>
            <modified date="2005-01-27T12:00:00.000-04:00" comment="Removed &quot;Sendmail running&quot; configuration test.  Sendmail installs as SUID root">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </modified>
            <status_change date="2005-04-20T12:13:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-05-11T05:41:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
        <criterion comment="Sendmail - root (SUNWsndmr) installed" negate="false" test_ref="oval:org.mitre.oval:tst:608"/>
        <criterion comment="Patch 113575-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:607"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2173" version="1" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability With the Special File System (SPECFS) strfreectty() Function May Allow a Local Unprivileged User to Panic a System</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4732" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4732"/>
        <description>Unspecified vulnerability in the strfreectty function in the Special File System (SPECFS) in Sun Solaris 8 through 10 allows local users to cause a denial of service (system panic), related to passing a NULL pointer to the pgsignal function.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-09-10T09:34:14.000-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </submitted>
            <status_change date="2007-09-10T14:41:52.544-04:00">DRAFT</status_change>
            <status_change date="2007-09-27T08:57:45.669-04:00">INTERIM</status_change>
            <status_change date="2007-10-12T07:56:14.294-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 103009" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 109025-07 or later installed" test_ref="oval:org.mitre.oval:tst:4230" negate="true"/>
          <criterion comment="Patch 117350-49 or later installed" test_ref="oval:org.mitre.oval:tst:3903" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 103009" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 122300-11 or later installed" test_ref="oval:org.mitre.oval:tst:3307" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 103009" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 118822-24 or later installed" test_ref="oval:org.mitre.oval:tst:3780" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 103009" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 109026-08 or later installed" test_ref="oval:org.mitre.oval:tst:3708" negate="true"/>
          <criterion comment="Patch 117351-49 or later installed" test_ref="oval:org.mitre.oval:tst:3841" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 103009" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 122301-11 or later installed" test_ref="oval:org.mitre.oval:tst:3697" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 103009" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 118844-24 or later installed" test_ref="oval:org.mitre.oval:tst:4200" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2170" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in Solaris Named Pipes (pipe(2)) May Allow Unauthorized Data Access</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5225" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5225"/>
        <description>Integer signedness error in FIFO filesystems (named pipes) on Sun Solaris 8 through 10 allows local users to read the contents of unspecified memory locations via a negative maximum length value to the I_PEEK ioctl.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-10-10T07:52:08.000-04:00">
              <contributor organization="Opsware, Inc.">Nicholas Hansen</contributor>
            </submitted>
            <status_change date="2007-10-10T13:53:56.913-04:00">DRAFT</status_change>
            <status_change date="2007-10-25T13:04:40.663-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:06.734-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 103061">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion negate="true" comment="Patch 109454-06 or later installed" test_ref="oval:org.mitre.oval:tst:4308"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 103061">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 117471-04 or later installed" test_ref="oval:org.mitre.oval:tst:3569"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 103061">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 127737-01 or later installed" test_ref="oval:org.mitre.oval:tst:4494"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 103061">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 109455-06 or later installed" test_ref="oval:org.mitre.oval:tst:4095"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 103061">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 117472-04 or later installed" test_ref="oval:org.mitre.oval:tst:4375"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 103061">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 127738-01 or later installed" test_ref="oval:org.mitre.oval:tst:4523"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:217" version="9" class="vulnerability">
      <metadata>
        <title>Help and Support Center PCHealth System Buffer Overflow (Windows 2000)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Help and Support Center (HSC)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0711" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0711"/>
        <description>Stack-based buffer overflow in the PCHealth system in the Help and Support Center function in Windows XP and Windows Server 2003 allows remote attackers to execute arbitrary code via a long query in an HCP URL.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-16T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-01-18T12:00:00.000-04:00" comment="Windows 2000 replaced by check for Windows 2000 SP4 or earlier">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-01-20T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-06-17T12:00:00.000-04:00" comment="modified cmp-1106 - Replaced the test that checks for the service pack level, instead of checking for sp4 or ealier (did not check for GOLD edition) it is now negating the test that checks for sp5 for later.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2005-06-22T12:35:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-08-28T12:00:00.000-04:00" comment="modified obj 1001 to use xsi:nil instead of a .* pattern match">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-08-28T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:15.602-04:00">ACCEPTED</status_change>
            <modified comment="Corrected and tightened regular expression in ste:2610" date="2010-12-02T11:46:00.307-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-12-02T11:47:26.679-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:41.317-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:40.981-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:23.777-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Software section">
          <criterion comment="the version of itircl.dll is less than 5.2.3790.80" test_ref="oval:org.mitre.oval:tst:2792"/>
          <criterion negate="true" comment="Patch KB825119 Installed" test_ref="oval:org.mitre.oval:tst:2791"/>
          <criteria operator="AND" comment="Windows 2000 (sp4 or earlier) is installed">
            <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
            <criterion negate="true" comment="Win2K/XP/2003 service pack 5 (or later) is installed" test_ref="oval:org.mitre.oval:tst:2790"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Configuration section">
          <criterion negate="true" comment="the HCP Protocol is registered" test_ref="oval:org.mitre.oval:tst:1477"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2164" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability Due to Buffer Overflow in The format(1M) Command May Allow Privilege Elevation For Certain RBAC Profiles</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4319" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4319"/>
        <description>Buffer overflow in the format command in Solaris 8, 9, and 10 allows local users with access to format (such as the "File System Management" RBAC profile) to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2006-4307.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-10T12:25:25.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-13T13:57:13.779-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:31.628-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:45.469-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102519" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 108975-10 or later installed" test_ref="oval:org.mitre.oval:tst:3837" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102519" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 113072-08 or later installed" test_ref="oval:org.mitre.oval:tst:4119" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102519" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 118833-18 or later installed" test_ref="oval:org.mitre.oval:tst:3220" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102519" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 108976-10 or later installed" test_ref="oval:org.mitre.oval:tst:3332" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102519" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 114423-07 or later installed" test_ref="oval:org.mitre.oval:tst:3870" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102519" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 118997-09 or later installed" test_ref="oval:org.mitre.oval:tst:3445" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2163" version="3" class="vulnerability">
      <metadata>
        <title>Samba call_trans2open() Buffer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <product>Samba</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0201" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0201"/>
        <description>Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-12-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-12T12:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-02T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-23T09:25:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:54.219-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:19.563-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="Samba (SUNWsmbar) installed" negate="false" test_ref="oval:org.mitre.oval:tst:615"/>
          <criterion comment="Patch 114684-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:614"/>
        </criteria>
        <criteria comment="Configuration section" operator="OR">
          <criteria operator="AND" comment="Inetd running and inetd.conf contains smbd">
            <criterion comment="inetd running" negate="false" test_ref="oval:org.mitre.oval:tst:3135"/>
            <criterion comment="inetd.conf contains smbd" negate="false" test_ref="oval:org.mitre.oval:tst:613"/>
          </criteria>
          <criterion comment="smbd running" negate="false" test_ref="oval:org.mitre.oval:tst:912"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:216" version="5" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP4 Bitmap Integer Overflow Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0566" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0566"/>
        <description>Integer overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with a large bfOffBits value.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2004-08-02T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-08-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:21:00.000-04:00" comment="modified wft-279 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:39.366-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:06.770-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:52.213-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:01:46.464-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
        <criterion comment="the version of mshtml.dll is less than 5.0.3819.300" negate="false" test_ref="oval:org.mitre.oval:tst:2793"/>
        <criterion comment="the patch kb832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2802"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2155" version="2" class="vulnerability">
      <metadata>
        <title>Windows Server 2003 HtmlHelp Heap Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>HTML Help Facility</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0201" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0201"/>
        <description>Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-14T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-08-04T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-08-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected obj:964. Changed registry key name from a pattern match of .* to nil." date="2007-02-12T13:46:00.470-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T13:47:37.040-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:12.188-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
          <criterion comment="the version of itss.dll is less than 5.2.3790.185" negate="false" test_ref="oval:org.mitre.oval:tst:1406"/>
          <criterion comment="the patch kb840315 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1405"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="HTML Help is registered" negate="true" test_ref="oval:org.mitre.oval:tst:1404"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2154" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in BIND 8 May Allow Cache Poisoning Attack</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2930" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2930"/>
        <description>The (1) NSID_SHUFFLE_ONLY and (2) NSID_USE_POOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as NOTIFY messages when answering questions as a resolver, which allows remote attackers to poison DNS caches via unknown vectors.  NOTE: this issue is different from CVE-2007-2926.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-10-16T10:34:50.000-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </submitted>
            <status_change date="2007-10-16T14:50:58.416-04:00">DRAFT</status_change>
            <status_change date="2007-11-02T07:17:39.538-04:00">INTERIM</status_change>
            <status_change date="2007-11-19T04:01:00.472-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Software and Criteria Section">
        <criteria operator="OR" comment="Software Section">
          <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 103063" negate="false">
            <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
            <criterion comment="Patch 109326-20 or later installed" test_ref="oval:org.mitre.oval:tst:4282" negate="true"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 103063" negate="false">
            <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
            <criterion comment="Patch 109327-20 or later installed" test_ref="oval:org.mitre.oval:tst:4431" negate="true"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 103063" negate="false">
            <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
            <criterion comment="Patch 112837-14 or later installed" test_ref="oval:org.mitre.oval:tst:4470" negate="true"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 103063" negate="false">
            <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
            <criterion comment="Patch 114265-13 or later installed" test_ref="oval:org.mitre.oval:tst:4525" negate="true"/>
          </criteria>
        </criteria>
        <criterion comment="in.named running" negate="false" test_ref="oval:org.mitre.oval:tst:2624"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:215" version="2" class="vulnerability">
      <metadata>
        <title>KDM Weak Cookie Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>KDM</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0692" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0692"/>
        <description>KDM in KDE 3.1.3 and earlier uses a weak session cookie generation algorithm that does not provide 128 bits of entropy, which allows attackers to guess session cookies via brute force methods and gain access to the user session.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-21T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-05T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:47.959-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:23.173-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="kdebase version is less than 3.1-15" negate="false" test_ref="oval:org.mitre.oval:tst:2826"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/bin/kdm is executable">
            <criterion comment="/usr/bin/kdm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2825"/>
            <criterion comment="/usr/bin/kdm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2824"/>
            <criterion comment="/usr/bin/kdm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2823"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:21438" version="3" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the VirtualBox component in Oracle Virtualization VirtualBox 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect confidentiality, integrity, and availability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows 8.1</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>VirtualBox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2014-0405" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0405"/>
        <description>Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core.</description>
        <oval_repository>
          <dates>
            <submitted date="2014-01-17T08:31:03">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </submitted>
            <status_change date="2014-01-21T16:48:46.316-05:00">DRAFT</status_change>
            <status_change date="2014-02-10T04:00:21.478-05:00">INTERIM</status_change>
            <status_change date="2014-03-03T04:01:00.562-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="VirtualBox is installed" definition_ref="oval:org.mitre.oval:def:11581"/>
        <criterion comment="Check if Oracle VM VirtualBox is installed" test_ref="oval:org.mitre.oval:tst:42006"/>
        <criteria operator="OR" comment="Check versions of VirtualBox">
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 3.2.0" test_ref="oval:org.mitre.oval:tst:88842"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than or equals to 3.2.18" test_ref="oval:org.mitre.oval:tst:100117"/>
          </criteria>
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.0.0" test_ref="oval:org.mitre.oval:tst:88607"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than or equals to 4.0.20" test_ref="oval:org.mitre.oval:tst:100096"/>
          </criteria>
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.1.0" test_ref="oval:org.mitre.oval:tst:88836"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.1.28" test_ref="oval:org.mitre.oval:tst:99957"/>
          </criteria>
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.2.0" test_ref="oval:org.mitre.oval:tst:99857"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.2.18" test_ref="oval:org.mitre.oval:tst:99972"/>
          </criteria>
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.3.0" test_ref="oval:org.mitre.oval:tst:100120"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.3.2" test_ref="oval:org.mitre.oval:tst:100166"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2143" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the Solaris libsldap Library May Allow a Denial of Service to nscd(1M)</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3458" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3458"/>
        <description>The libsldap library in Sun Solaris 8, 9, and 10 allows local users to cause a denial of service (Name Service Caching Daemon (nscd) crash) via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-10T12:25:18.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-13T13:57:11.150-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:31.197-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:45.094-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102926" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 126373-02 or later installed" test_ref="oval:org.mitre.oval:tst:3188" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102926" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 112960-40 or later installed" test_ref="oval:org.mitre.oval:tst:3433" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102926" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 120036-07 or later installed" test_ref="oval:org.mitre.oval:tst:3274" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102926" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 126374-02 or later installed" test_ref="oval:org.mitre.oval:tst:3728" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102926" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 114242-27 or later installed" test_ref="oval:org.mitre.oval:tst:3171" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102926" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 120037-07 or later installed" test_ref="oval:org.mitre.oval:tst:4079" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2139" version="1" class="vulnerability">
      <metadata>
        <title>Kerberos 5 ASN.1 Library DoS</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <product>Kerberos5</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0644" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0644"/>
        <description>The asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service (infinite loop) via a certain BER encoding.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2004-10-13T12:00:00.000-04:00">DRAFT</status_change>
            <modified date="2005-01-14T12:00:00.000-04:00" comment="Changed kerberos unknown test to solaris file contents test">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </modified>
            <status_change date="2005-02-02T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-23T09:25:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="Kerberos 5 installed" negate="false" test_ref="oval:org.mitre.oval:tst:648"/>
          <criterion comment="Patch 112908-15 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:616"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/etc/krb5/krb5.conf is configured with a kerberos domain" negate="false" test_ref="oval:org.mitre.oval:tst:1153"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2137" version="3" class="vulnerability">
      <metadata>
        <title>Outlook Express v5.5,SP2 Malformed Email Header Denial of Service</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Outlook Express</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0215" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0215"/>
        <description>Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service (application crash) via a malformed e-mail header.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-08-26T08:06:00.000-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </submitted>
            <status_change date="2004-08-26T08:14:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-09-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-29T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:533: changed Hive from HKEY_CLASSES_ROOT to HKEY_LOCAL_MACHINE.  Implemented by Harvey Rubinovitz." date="2007-01-22T01:12:00.977-05:00">
              <contributor organization="GFI Software">Daniel Tarnu</contributor>
            </modified>
            <status_change date="2007-01-22T01:12:58.320-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:06.549-05:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.788-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:52:38.332-04:00">INTERIM</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.053-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-11-13T12:01:06.364-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Outlook Express 5.5 SP2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1514"/>
          <criterion comment="the version of inetcomm.dll is less than 5.50.4942.400" negate="false" test_ref="oval:org.mitre.oval:tst:617"/>
          <criterion comment="the patch kb823353 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:668"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="all users have the preview pane disabled" negate="false" test_ref="oval:org.mitre.oval:tst:667"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:213" version="4" class="vulnerability">
      <metadata>
        <title>Windows 2000 Messenger Service Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Messenger Service</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0717" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0717"/>
        <description>The Messenger Service for Windows NT through Server 2003 does not properly verify the length of the message, which allows remote attackers to execute arbitrary code via a buffer overflow attack.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-16T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2004-03-29T12:00:00.000-04:00" comment="Fixed an error in the configuration section, now correctly testing that messenger service is enabled.  Before it was testing that HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Messenger\Start=2, now it is testing that it does not equal 4.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-05-05T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:1448 - Correction of a filename (Spwmp.dll is replaced by wkssvc.dll as per the bulletin info.) in an object oval:org.mitre.oval:obj:1448 along with comments" date="2011-09-14T12:12:00.927-04:00">
              <contributor organization="SecPod Technologies">Pradeep R B</contributor>
            </modified>
            <status_change date="2011-09-14T12:12:55.461-04:00">INTERIM</status_change>
            <status_change date="2011-10-03T04:00:04.092-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="the version of msgsvc.dll is less than 5.0.2195.6861" negate="false" test_ref="oval:org.mitre.oval:tst:2798"/>
          <criterion comment="the version of wkssvc.dll is less than 5.0.2195.6861" negate="false" test_ref="oval:org.mitre.oval:tst:2797"/>
          <criterion comment="the patch q828035 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2796"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="the messenger service is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2795"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2121" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerabilities in Solaris ld.so.1(1) may Lead to Execution of Arbitrary Code with Elevated Privileges</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6494"/>
        <description>Directory traversal vulnerability in ld.so.1 in Sun Solaris 8, 9, and 10 allows local users to execute arbitrary code via a .. (dot dot) sequence in the LANG environment variable that points to a locale file containing attacker-controlled format string specifiers.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-10T12:25:21.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-13T13:57:12.395-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:30.885-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:44.757-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102724" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 109147-42 or later installed" test_ref="oval:org.mitre.oval:tst:3395" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102724" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 112963-27 or later installed" test_ref="oval:org.mitre.oval:tst:3790" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102724" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 124922-01 or later installed" test_ref="oval:org.mitre.oval:tst:3922" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102724" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 109148-41 or later installed" test_ref="oval:org.mitre.oval:tst:3236" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102724" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 113986-22 or later installed" test_ref="oval:org.mitre.oval:tst:3819" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102724" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 124923-01 or later installed" test_ref="oval:org.mitre.oval:tst:3173" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2120" version="1" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability in the TCP Implementation of Solaris 10 Systems May Result in a System Panic Under High TCP/IP Traffic</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0914" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0914"/>
        <description>Race condition in the TCP subsystem for Solaris 10 allows remote attackers to cause a denial of service (system panic) via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-28T09:00:00.000-04:00">
              <contributor organization="Opsware, Inc.">Gyesi Amaniampong</contributor>
            </submitted>
            <status_change date="2007-06-29T09:24:19.159-04:00">DRAFT</status_change>
            <status_change date="2007-07-16T09:55:14.965-04:00">INTERIM</status_change>
            <status_change date="2007-08-01T22:26:15.758-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Solaris 10 (SPARC)" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 119998-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3448"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86)" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 119999-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3655"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:212" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP3 Malformed GIF Image Double-free Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1048" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1048"/>
        <description>Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-08-02T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-08-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2824. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:48:00.494-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:52:26.766-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:06.339-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:52.023-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:56.999-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Software section">
        <criterion comment="Internet Explorer 5.01 Service Pack 3 is installed" test_ref="oval:org.mitre.oval:tst:3015"/>
        <criterion comment="the version of mshtml.dll is less than 5.0.3532.300" test_ref="oval:org.mitre.oval:tst:2803"/>
        <criterion negate="true" comment="the patch kb832894 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:2802"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2114" version="1" class="vulnerability">
      <metadata>
        <title>Windows 2000 Enhanced Metafile Image Format Rendering Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Enhanced Metafile (EMF)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0209"/>
        <description>Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats that involve "an unchecked buffer."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-13T11:11:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2004-10-13T01:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-10-27T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-11-17T10:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="the patch KB840987 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2356"/>
        <criterion comment="the version of gdi32.dll is less than 5.0.2195.6945" negate="false" test_ref="oval:org.mitre.oval:tst:620"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:211" version="8" class="vulnerability">
      <metadata>
        <title>HP-UX 11.23 Blind Connection Reset Attack Vulnerability</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0790" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0790"/>
        <description>Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error messages, aka the "blind connection-reset attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:48:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:44.322-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:51.097-04:00">ACCEPTED</status_change>
            <modified comment="Added title." date="2007-02-26T01:00:00.930-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-02-26T00:59:48.970-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:11.753-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:29.901-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:11.686-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:211 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:31.338-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:26.877-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:tst:3901 - HP-UX Security Advisory - HPSBUX02944_101" date="2014-02-19T09:09:00.021-05:00">
              <contributor organization="Hewlett-Packard">Sushant Kumar Singh</contributor>
            </modified>
            <status_change date="2014-02-19T09:13:23.560-05:00">INTERIM</status_change>
            <status_change date="2014-03-10T04:00:34.539-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.23">
          <criteria operator="AND" comment="700 Series OS Release 11.23">
            <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:3443"/>
            <criterion comment="HP Release B.11.23" test_ref="oval:org.mitre.oval:tst:3901"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 11.23">
            <criterion comment="800-series HP" test_ref="oval:org.mitre.oval:tst:4124"/>
            <criterion comment="HP Release B.11.23" test_ref="oval:org.mitre.oval:tst:3901"/>
          </criteria>
        </criteria>
        <criterion negate="true" comment="Patch PHNE_32606 is installed" test_ref="oval:org.mitre.oval:tst:3439"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:21058" version="4" class="vulnerability">
      <metadata>
        <title>Oracle Outside In Contains Multiple Exploitable Vulnerabilities (CVE-2013-5763) - MS13-105</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <product>Microsoft Exchange Server 2013</product>
          <product>Microsoft Exchange Server 2010</product>
          <product>Microsoft Exchange Server 2007</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2013-5763" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5763"/>
        <description>Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Maintenance.  NOTE: the original disclosure of this issue erroneously mapped it to CVE-2013-3624.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-12-13T12:19:11">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-12-13T11:13:50.869-05:00">DRAFT</status_change>
            <status_change date="2013-12-30T04:01:01.737-05:00">INTERIM</status_change>
            <status_change date="2014-01-20T04:01:18.527-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2007 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2007 SP3 is installed" definition_ref="oval:org.mitre.oval:def:15784"/>
          <criterion comment="Check if the version of exsetup.exe is less than 8.3.342.4" test_ref="oval:org.mitre.oval:tst:89886"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP2 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP2 is installed" definition_ref="oval:org.mitre.oval:def:14151"/>
          <criterion comment="Check if the version of exsetup.exe is less than 14.2.390.3" test_ref="oval:org.mitre.oval:tst:89663"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP3 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP3 is installed" definition_ref="oval:org.mitre.oval:def:17932"/>
          <criterion comment="Check if the version of exsetup.exe is less than 14.3.174.1" test_ref="oval:org.mitre.oval:tst:89845"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2013 CU2 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 Cumulative Update 2 is installed" definition_ref="oval:org.mitre.oval:def:18484"/>
          <criterion comment="Check if the version of exsetup.exe is less than 15.0.712.31" test_ref="oval:org.mitre.oval:tst:89888"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2013 CU3 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 Cumulative Update 3 is installed" definition_ref="oval:org.mitre.oval:def:20878"/>
          <criterion comment="Check if the version of exsetup.exe is less than 15.0.775.41" test_ref="oval:org.mitre.oval:tst:89992"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2100" version="3" class="vulnerability">
      <metadata>
        <title>IE v5.5,SP2 Malformed GIF Image Double-free Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1048" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1048"/>
        <description>Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-08-02T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-08-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:47.923-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:42.119-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Software section">
        <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3123"/>
        <criterion comment="the version of mshtml.dll is less than 5.50.4943.400" test_ref="oval:org.mitre.oval:tst:2762"/>
        <criterion negate="true" comment="the patch kb832894 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:2802"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:210" version="6" class="vulnerability" deprecated="true">
      <metadata>
        <title>DEPRECATED: Windows 2000 IIS HTTP Redirect Error Message Cross-site Scripting</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0075" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0075"/>
        <description>Cross-site scripting vulnerability for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other web users via the error message used in a URL redirect (""302 Object Moved") message.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2884" date="2010-11-29T16:14:00.692-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:38.714-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:40.972-05:00">ACCEPTED</status_change>
            <modified comment="Use def:12346 instead" date="2011-01-20T10:18:24.960-05:00">
              <contributor organization="Symantec Corporation">Josh Turpin</contributor>
            </modified>
            <status_change date="2011-01-20T10:18:24.960-05:00">DEPRECATED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="IIS major version equals 5" negate="false" test_ref="oval:org.mitre.oval:tst:3081"/>
        <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
        <criterion comment="the version of w3svc.dll is less than 5.0.2195.5269" negate="false" test_ref="oval:org.mitre.oval:tst:3080"/>
        <criterion comment="Patch Q319733 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3095"/>
        <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
        <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
        <criterion comment="Win2K/XP/2003 service pack 3 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:3079"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2099" version="1" class="vulnerability">
      <metadata>
        <title>Vulnerability With Solaris IPv6 May Allow a Remote User the Ability to Create a Denial of Service Condition</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5073" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5073"/>
        <description>Unspecified vulnerability in Sun Solaris 8, 9 and 10 allows remote attackers to cause a denial of service (panic) via crafted IPv6 packets, a different vulnerability than CVE-2006-5013.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-10T12:25:24.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-13T13:57:13.314-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:30.639-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:44.301-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102144" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 116965-22 or later installed" test_ref="oval:org.mitre.oval:tst:3455" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102144" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 114344-20 or later installed" test_ref="oval:org.mitre.oval:tst:4036" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102144" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 119075-13 or later installed" test_ref="oval:org.mitre.oval:tst:3800" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102144" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 116966-21 or later installed" test_ref="oval:org.mitre.oval:tst:4061" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102144" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 119435-10 or later installed" test_ref="oval:org.mitre.oval:tst:3968" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102144" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 119076-11 or later installed" test_ref="oval:org.mitre.oval:tst:3217" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2096" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the Solaris Auditing (BSM) Related to Network Auditing May Lead to Denial of Service (DoS)</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5422" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5422"/>
        <description>Unspecified vulnerability in "Solaris Auditing" in the Basic Security Module (BSM) in Sun Solaris 10, when configured for auditing of networking (nt) events, allows local users to cause a denial of service (panic) via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-10-16T10:34:50.000-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </submitted>
            <status_change date="2007-10-16T14:50:57.377-04:00">DRAFT</status_change>
            <status_change date="2007-11-02T07:17:37.733-04:00">INTERIM</status_change>
            <status_change date="2007-11-19T04:00:56.246-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software and Configuration sections" operator="AND">
        <criteria operator="OR" comment="Software Section">
          <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 103096" negate="false">
            <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
            <criterion comment="Patch 127111-01 or later installed" test_ref="oval:org.mitre.oval:tst:3953" negate="true"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 103096" negate="false">
            <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
            <criterion comment="Patch 127112-01 or later installed" test_ref="oval:org.mitre.oval:tst:4336" negate="true"/>
          </criteria>
        </criteria>
        <criterion comment="Solaris auditing is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:4548"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2094" version="1" class="vulnerability">
      <metadata>
        <title>BIND DoS via SIG RR Elements</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>Bind</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1221" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1221"/>
        <description>BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service (crash) via SIG RR elements with invalid expiry times, which are removed from the internal BIND database and later cause a null dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-19T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-24T03:40:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="OR" comment="Solaris 7,8,or 9 installed">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          </criteria>
          <criterion comment="Internet Domain Name Server (BIND, SUNWinamd) installed" negate="false" test_ref="oval:org.mitre.oval:tst:2626"/>
          <criterion comment="Patch 106938-07 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:623"/>
          <criterion comment="Patch 109326-10 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:622"/>
          <criterion comment="Patch 112970-03 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:2625"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="in.named running" negate="false" test_ref="oval:org.mitre.oval:tst:2624"/>
        </criteria>
      </criteria>
    </definition>
    <definition class="vulnerability" id="oval:org.mitre.oval:def:2092" version="2">
      <metadata>
        <title>mono-web ASP.net sourcecode disclosure</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
          <platform>SUSE Linux Enterprise Server 10</platform>
          <product>bytefx-data-mysql</product>
          <product>ibm-data-db2</product>
          <product>mono-basic</product>
          <product>mono-core</product>
          <product>mono-core-32bit</product>
          <product>mono-data</product>
          <product>mono-data-firebird</product>
          <product>mono-data-oracle</product>
          <product>mono-data-postgresql</product>
          <product>mono-data-sqlite</product>
          <product>mono-data-sybase</product>
          <product>mono-devel</product>
          <product>mono-extras</product>
          <product>mono-jscript</product>
          <product>mono-locale-extras</product>
          <product>mono-nunit</product>
          <product>mono-web</product>
          <product>mono-winforms</product>
        </affected>
        <reference ref_id="CVE-2006-6104" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6104" source="CVE"/>
        <description>The System.Web class in the XSP for ASP.NET server 1.1 through 2.0 in Mono does not properly verify local pathnames, which allows remote attackers to (1) read source code by appending a space (%20) to a URI, and (2) read credentials via a request for Web.Config%20.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-09T08:17:54">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-10T13:32:27.453-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:30.226-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:43.914-04:00">ACCEPTED</status_change>
            <modified comment="Set datatype to version on version element of ste:3584" date="2007-11-14T19:58:00.239-05:00">
              <contributor organization="Hewlett-Packard">Nicholas Hansen</contributor>
            </modified>
            <status_change date="2007-11-14T20:01:27.585-05:00">INTERIM</status_change>
            <modified comment="Set datatype to version on version element of ste:3622" date="2007-11-14T19:58:00.248-05:00">
              <contributor organization="Hewlett-Packard">Nicholas Hansen</contributor>
            </modified>
            <modified comment="Set datatype to version on version element of ste:3682" date="2007-11-14T19:58:00.780-05:00">
              <contributor organization="Hewlett-Packard">Nicholas Hansen</contributor>
            </modified>
            <modified comment="The version/release child elements were changed to evr in order to better identify and compare the version/release of their respective packages." date="2007-11-21T11:06:00.027-05:00">
              <contributor organization="Hewlett-Packard">Jeff Cheng</contributor>
            </modified>
            <modified comment="The version/release child elements were changed to evr in order to better identify and compare the version/release of their respective packages." date="2007-11-21T11:06:00.404-05:00">
              <contributor organization="Hewlett-Packard">Jeff Cheng</contributor>
            </modified>
            <modified comment="The version/release child elements were changed to evr in order to better identify and compare the version/release of their respective packages." date="2007-11-21T11:06:00.984-05:00">
              <contributor organization="Hewlett-Packard">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-12-10T04:00:05.181-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe://novell:opensuse:10.2</cpe>
            <cpe>cpe://novell:suse_linux:10.1</cpe>
            <cpe>cpe://novell:suse_linux_enterprise:10:desktop</cpe>
            <cpe>cpe://novell:suse_linux_enterprise:10:server</cpe>
            <cpe>cpe:///novell:bytefx-data-mysql</cpe>
            <cpe>cpe:///novell:ibm-data-db2</cpe>
            <cpe>cpe:///novell:mono-basic</cpe>
            <cpe>cpe:///novell:mono-core</cpe>
            <cpe>cpe:///novell:mono-core-32bit</cpe>
            <cpe>cpe:///novell:mono-data</cpe>
            <cpe>cpe:///novell:mono-data-firebird</cpe>
            <cpe>cpe:///novell:mono-data-oracle</cpe>
            <cpe>cpe:///novell:mono-data-postgresql</cpe>
            <cpe>cpe:///novell:mono-data-sqlite</cpe>
            <cpe>cpe:///novell:mono-data-sybase</cpe>
            <cpe>cpe:///novell:mono-devel</cpe>
            <cpe>cpe:///novell:mono-extras</cpe>
            <cpe>cpe:///novell:mono-jscript</cpe>
            <cpe>cpe:///novell:mono-locale-extras</cpe>
            <cpe>cpe:///novell:mono-nunit</cpe>
            <cpe>cpe:///novell:mono-web</cpe>
            <cpe>cpe:///novell:mono-winforms</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria comment="Exploitable Vulnerability Exists" operator="OR">
        <criteria comment="Exploitable openSUSE 10.2 Vulnerability Exists" operator="AND">
          <criteria comment="Potential openSUSE 10.2 Vulnerability Exists" operator="AND">
            <extend_definition comment="openSUSE 10.2 is installed" negate="false" definition_ref="oval:org.mitre.oval:def:1170"/>
            <criteria comment="Potential Architecture Vulnerability Exists" operator="OR">
              <criterion comment="x86_64 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:1547"/>
              <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
              <criterion comment="ppc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:4278"/>
            </criteria>
          </criteria>
          <criteria comment="Potential Package Vulnerability Exists" operator="OR">
            <criteria comment="Potential Package bytefx-data-mysql Vulnerability Exists" operator="AND">
              <extend_definition comment="Package bytefx-data-mysql is installed" negate="false" definition_ref="oval:org.mitre.oval:def:315"/>
              <criterion comment="Package bytefx-data-mysql version-release is less than 1.1.18.1-12.2" negate="false" test_ref="oval:org.mitre.oval:tst:3563"/>
            </criteria>
            <criteria comment="Potential Package ibm-data-db2 Vulnerability Exists" operator="AND">
              <extend_definition comment="Package ibm-data-db2 is installed" negate="false" definition_ref="oval:org.mitre.oval:def:633"/>
              <criterion comment="Package ibm-data-db2 version-release is less than 1.1.18.1-12.2" negate="false" test_ref="oval:org.mitre.oval:tst:3613"/>
            </criteria>
            <criteria comment="Potential Package mono-basic Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-basic is installed" negate="false" definition_ref="oval:org.mitre.oval:def:646"/>
              <criterion comment="Package mono-basic version-release is less than 1.1.18-9.1" negate="false" test_ref="oval:org.mitre.oval:tst:3184"/>
            </criteria>
            <criteria comment="Potential Package mono-core Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-core is installed" negate="false" definition_ref="oval:org.mitre.oval:def:1616"/>
              <criterion comment="Package mono-core version-release is less than 1.1.18.1-12.2" negate="false" test_ref="oval:org.mitre.oval:tst:3848"/>
            </criteria>
            <criteria comment="Potential Package mono-core-32bit Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-core-32bit is installed" negate="false" definition_ref="oval:org.mitre.oval:def:1233"/>
              <criterion comment="Package mono-core-32bit version-release is less than 1.1.18.1-12.2" negate="false" test_ref="oval:org.mitre.oval:tst:3977"/>
            </criteria>
            <criteria comment="Potential Package mono-data Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-data is installed" negate="false" definition_ref="oval:org.mitre.oval:def:1717"/>
              <criterion comment="Package mono-data version-release is less than 1.1.18.1-12.2" negate="false" test_ref="oval:org.mitre.oval:tst:4120"/>
            </criteria>
            <criteria comment="Potential Package mono-data-firebird Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-data-firebird is installed" negate="false" definition_ref="oval:org.mitre.oval:def:2212"/>
              <criterion comment="Package mono-data-firebird version-release is less than 1.1.18.1-12.2" negate="false" test_ref="oval:org.mitre.oval:tst:3601"/>
            </criteria>
            <criteria comment="Potential Package mono-data-oracle Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-data-oracle is installed" negate="false" definition_ref="oval:org.mitre.oval:def:2227"/>
              <criterion comment="Package mono-data-oracle version-release is less than 1.1.18.1-12.2" negate="false" test_ref="oval:org.mitre.oval:tst:3932"/>
            </criteria>
            <criteria comment="Potential Package mono-data-postgresql Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-data-postgresql is installed" negate="false" definition_ref="oval:org.mitre.oval:def:2230"/>
              <criterion comment="Package mono-data-postgresql version-release is less than 1.1.18.1-12.2" negate="false" test_ref="oval:org.mitre.oval:tst:3314"/>
            </criteria>
            <criteria comment="Potential Package mono-data-sqlite Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-data-sqlite is installed" negate="false" definition_ref="oval:org.mitre.oval:def:2146"/>
              <criterion comment="Package mono-data-sqlite version-release is less than 1.1.18.1-12.2" negate="false" test_ref="oval:org.mitre.oval:tst:3280"/>
            </criteria>
            <criteria comment="Potential Package mono-data-sybase Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-data-sybase is installed" negate="false" definition_ref="oval:org.mitre.oval:def:1812"/>
              <criterion comment="Package mono-data-sybase version-release is less than 1.1.18.1-12.2" negate="false" test_ref="oval:org.mitre.oval:tst:3221"/>
            </criteria>
            <criteria comment="Potential Package mono-devel Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-devel is installed" negate="false" definition_ref="oval:org.mitre.oval:def:2042"/>
              <criterion comment="Package mono-devel version-release is less than 1.1.18.1-12.2" negate="false" test_ref="oval:org.mitre.oval:tst:3542"/>
            </criteria>
            <criteria comment="Potential Package mono-extras Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-extras is installed" negate="false" definition_ref="oval:org.mitre.oval:def:2175"/>
              <criterion comment="Package mono-extras version-release is less than 1.1.18.1-12.2" negate="false" test_ref="oval:org.mitre.oval:tst:3671"/>
            </criteria>
            <criteria comment="Potential Package mono-jscript Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-jscript is installed" negate="false" definition_ref="oval:org.mitre.oval:def:2218"/>
              <criterion comment="Package mono-jscript version-release is less than 1.1.18.1-12.2" negate="false" test_ref="oval:org.mitre.oval:tst:4162"/>
            </criteria>
            <criteria comment="Potential Package mono-locale-extras Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-locale-extras is installed" negate="false" definition_ref="oval:org.mitre.oval:def:2066"/>
              <criterion comment="Package mono-locale-extras version-release is less than 1.1.18.1-12.2" negate="false" test_ref="oval:org.mitre.oval:tst:3743"/>
            </criteria>
            <criteria comment="Potential Package mono-nunit Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-nunit is installed" negate="false" definition_ref="oval:org.mitre.oval:def:2125"/>
              <criterion comment="Package mono-nunit version-release is less than 1.1.18.1-12.2" negate="false" test_ref="oval:org.mitre.oval:tst:3596"/>
            </criteria>
            <criteria comment="Potential Package mono-web Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-web is installed" negate="false" definition_ref="oval:org.mitre.oval:def:1554"/>
              <criterion comment="Package mono-web version-release is less than 1.1.18.1-12.2" negate="false" test_ref="oval:org.mitre.oval:tst:3999"/>
            </criteria>
            <criteria comment="Potential Package mono-winforms Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-winforms is installed" negate="false" definition_ref="oval:org.mitre.oval:def:2131"/>
              <criterion comment="Package mono-winforms version-release is less than 1.1.18.1-12.2" negate="false" test_ref="oval:org.mitre.oval:tst:3496"/>
            </criteria>
          </criteria>
        </criteria>
        <criteria comment="Exploitable SUSE Linux 10.1 Vulnerability Exists" operator="AND">
          <criteria comment="Potential SUSE Linux 10.1 Vulnerability Exists" operator="AND">
            <extend_definition comment="SUSE Linux 10.1 is installed" negate="false" definition_ref="oval:org.mitre.oval:def:2157"/>
            <criteria comment="Potential Architecture Vulnerability Exists" operator="OR">
              <criterion comment="x86_64 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:1547"/>
              <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
              <criterion comment="ppc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:4278"/>
            </criteria>
          </criteria>
          <criteria comment="Potential Package Vulnerability Exists" operator="OR">
            <criteria comment="Potential Package bytefx-data-mysql Vulnerability Exists" operator="AND">
              <extend_definition comment="Package bytefx-data-mysql is installed" negate="false" definition_ref="oval:org.mitre.oval:def:315"/>
              <criterion comment="Package bytefx-data-mysql version-release is less than 1.1.13.8-2.15" negate="false" test_ref="oval:org.mitre.oval:tst:3816"/>
            </criteria>
            <criteria comment="Potential Package ibm-data-db2 Vulnerability Exists" operator="AND">
              <extend_definition comment="Package ibm-data-db2 is installed" negate="false" definition_ref="oval:org.mitre.oval:def:633"/>
              <criterion comment="Package ibm-data-db2 version-release is less than 1.1.13.8-2.15" negate="false" test_ref="oval:org.mitre.oval:tst:3476"/>
            </criteria>
            <criteria comment="Potential Package mono-basic Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-basic is installed" negate="false" definition_ref="oval:org.mitre.oval:def:646"/>
              <criterion comment="Package mono-basic version-release is less than 1.1.13.8-2.15" negate="false" test_ref="oval:org.mitre.oval:tst:4038"/>
            </criteria>
            <criteria comment="Potential Package mono-core Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-core is installed" negate="false" definition_ref="oval:org.mitre.oval:def:1616"/>
              <criterion comment="Package mono-core version-release is less than 1.1.13.8-2.15" negate="false" test_ref="oval:org.mitre.oval:tst:3511"/>
            </criteria>
            <criteria comment="Potential Package mono-core-32bit Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-core-32bit is installed" negate="false" definition_ref="oval:org.mitre.oval:def:1233"/>
              <criterion comment="Package mono-core-32bit version-release is less than 1.1.13.8-2.15" negate="false" test_ref="oval:org.mitre.oval:tst:4108"/>
            </criteria>
            <criteria comment="Potential Package mono-data Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-data is installed" negate="false" definition_ref="oval:org.mitre.oval:def:1717"/>
              <criterion comment="Package mono-data version-release is less than 1.1.13.8-2.15" negate="false" test_ref="oval:org.mitre.oval:tst:4044"/>
            </criteria>
            <criteria comment="Potential Package mono-data-firebird Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-data-firebird is installed" negate="false" definition_ref="oval:org.mitre.oval:def:2212"/>
              <criterion comment="Package mono-data-firebird version-release is less than 1.1.13.8-2.15" negate="false" test_ref="oval:org.mitre.oval:tst:3441"/>
            </criteria>
            <criteria comment="Potential Package mono-data-oracle Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-data-oracle is installed" negate="false" definition_ref="oval:org.mitre.oval:def:2227"/>
              <criterion comment="Package mono-data-oracle version-release is less than 1.1.13.8-2.15" negate="false" test_ref="oval:org.mitre.oval:tst:3299"/>
            </criteria>
            <criteria comment="Potential Package mono-data-postgresql Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-data-postgresql is installed" negate="false" definition_ref="oval:org.mitre.oval:def:2230"/>
              <criterion comment="Package mono-data-postgresql version-release is less than 1.1.13.8-2.15" negate="false" test_ref="oval:org.mitre.oval:tst:3406"/>
            </criteria>
            <criteria comment="Potential Package mono-data-sqlite Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-data-sqlite is installed" negate="false" definition_ref="oval:org.mitre.oval:def:2146"/>
              <criterion comment="Package mono-data-sqlite version-release is less than 1.1.13.8-2.15" negate="false" test_ref="oval:org.mitre.oval:tst:3741"/>
            </criteria>
            <criteria comment="Potential Package mono-data-sybase Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-data-sybase is installed" negate="false" definition_ref="oval:org.mitre.oval:def:1812"/>
              <criterion comment="Package mono-data-sybase version-release is less than 1.1.13.8-2.15" negate="false" test_ref="oval:org.mitre.oval:tst:3485"/>
            </criteria>
            <criteria comment="Potential Package mono-devel Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-devel is installed" negate="false" definition_ref="oval:org.mitre.oval:def:2042"/>
              <criterion comment="Package mono-devel version-release is less than 1.1.13.8-2.15" negate="false" test_ref="oval:org.mitre.oval:tst:3706"/>
            </criteria>
            <criteria comment="Potential Package mono-extras Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-extras is installed" negate="false" definition_ref="oval:org.mitre.oval:def:2175"/>
              <criterion comment="Package mono-extras version-release is less than 1.1.13.8-2.15" negate="false" test_ref="oval:org.mitre.oval:tst:4032"/>
            </criteria>
            <criteria comment="Potential Package mono-jscript Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-jscript is installed" negate="false" definition_ref="oval:org.mitre.oval:def:2218"/>
              <criterion comment="Package mono-jscript version-release is less than 1.1.13.8-2.15" negate="false" test_ref="oval:org.mitre.oval:tst:3801"/>
            </criteria>
            <criteria comment="Potential Package mono-locale-extras Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-locale-extras is installed" negate="false" definition_ref="oval:org.mitre.oval:def:2066"/>
              <criterion comment="Package mono-locale-extras version-release is less than 1.1.13.8-2.15" negate="false" test_ref="oval:org.mitre.oval:tst:4127"/>
            </criteria>
            <criteria comment="Potential Package mono-nunit Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-nunit is installed" negate="false" definition_ref="oval:org.mitre.oval:def:2125"/>
              <criterion comment="Package mono-nunit version-release is less than 1.1.13.8-2.15" negate="false" test_ref="oval:org.mitre.oval:tst:3165"/>
            </criteria>
            <criteria comment="Potential Package mono-web Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-web is installed" negate="false" definition_ref="oval:org.mitre.oval:def:1554"/>
              <criterion comment="Package mono-web version-release is less than 1.1.13.8-2.15" negate="false" test_ref="oval:org.mitre.oval:tst:3277"/>
            </criteria>
            <criteria comment="Potential Package mono-winforms Vulnerability Exists" operator="AND">
              <extend_definition comment="Package mono-winforms is installed" negate="false" definition_ref="oval:org.mitre.oval:def:2131"/>
              <criterion comment="Package mono-winforms version-release is less than 1.1.13.8-2.15" negate="false" test_ref="oval:org.mitre.oval:tst:3411"/>
            </criteria>
          </criteria>
        </criteria>
        <criteria comment="Exploitable SUSE Linux Enterprise Desktop 10 or SUSE Linux Enterprise Server 10 Vulnerability Exists" operator="AND">
          <criteria comment="Potential System Vulnerability Exists" operator="OR">
            <criteria comment="Potential SUSE Linux Enterprise Desktop 10 Vulnerability Exists" operator="AND">
              <extend_definition comment="SUSE Linux Enterprise Desktop 10 is installed" negate="false" definition_ref="oval:org.mitre.oval:def:2106"/>
              <criteria comment="Potential Architecture Vulnerability Exists" operator="OR">
                <criterion comment="x86_64 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:1547"/>
                <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
              </criteria>
            </criteria>
            <criteria comment="Potential SUSE Linux Enterprise Server 10 Vulnerability Exists" operator="AND">
              <extend_definition comment="SUSE Linux Enterprise Server 10 is installed" negate="false" definition_ref="oval:org.mitre.oval:def:1368"/>
              <criteria comment="Potential Architecture Vulnerability Exists" operator="OR">
                <criterion comment="x86_64 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:1547"/>
                <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
                <criterion comment="ppc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:4278"/>
              </criteria>
            </criteria>
          </criteria>
          <criteria comment="Potential Package Vulnerability Exists" operator="OR">
            <criterion comment="Package bytefx-data-mysql is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3161"/>
            <criterion comment="Package ibm-data-db2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3447"/>
            <criterion comment="Package mono-basic is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3595"/>
            <criterion comment="Package mono-core is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3776"/>
            <criterion comment="Package mono-core-32bit is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3308"/>
            <criterion comment="Package mono-data is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3602"/>
            <criterion comment="Package mono-data-firebird is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3169"/>
            <criterion comment="Package mono-data-oracle is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3297"/>
            <criterion comment="Package mono-data-postgresql is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3283"/>
            <criterion comment="Package mono-data-sqlite is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3866"/>
            <criterion comment="Package mono-data-sybase is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3718"/>
            <criterion comment="Package mono-devel is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3766"/>
            <criterion comment="Package mono-extras is installed" negate="false" test_ref="oval:org.mitre.oval:tst:4057"/>
            <criterion comment="Package mono-jscript is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3444"/>
            <criterion comment="Package mono-locale-extras is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3301"/>
            <criterion comment="Package mono-nunit is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3632"/>
            <criterion comment="Package mono-web is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3838"/>
            <criterion comment="Package mono-winforms is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3345"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:646" version="1" class="inventory">
      <metadata>
        <title>Package mono-basic is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:mono-basic"/>
        <description>Package mono-basic is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:06:13">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-10T13:32:25.904-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:33.111-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:47.786-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="mono-basic is installed" test_ref="oval:org.mitre.oval:tst:3595"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:633" version="1" class="inventory">
      <metadata>
        <title>Package ibm-data-db2 is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:ibm-data-db2"/>
        <description>Package ibm-data-db2 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T16:32:09">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-10T13:32:25.826-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:33.025-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:47.695-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="ibm-data-db2 is installed" test_ref="oval:org.mitre.oval:tst:3447"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:315" version="1" class="inventory">
      <metadata>
        <title>Package bytefx-data-mysql is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:bytefx-data-mysql"/>
        <description>Package bytefx-data-mysql is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T12:24:51">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-10T13:32:25.761-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:32.941-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:47.608-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="bytefx-data-mysql is installed" test_ref="oval:org.mitre.oval:tst:3161"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2230" version="1" class="inventory">
      <metadata>
        <title>Package mono-data-postgresql is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
          <platform>SUSE Linux Enterprise Server 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:mono-data-postgresql"/>
        <description>Package mono-data-postgresql is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:06:51">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-10T13:32:26.294-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:32.807-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:47.190-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::server</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="mono-data-postgresql is installed" test_ref="oval:org.mitre.oval:tst:3283"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2227" version="1" class="inventory">
      <metadata>
        <title>Package mono-data-oracle is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
          <platform>SUSE Linux Enterprise Server 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:mono-data-oracle"/>
        <description>Package mono-data-oracle is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:06:46">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-10T13:32:26.231-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:32.739-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:47.120-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::server</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="mono-data-oracle is installed" test_ref="oval:org.mitre.oval:tst:3297"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2218" version="1" class="inventory">
      <metadata>
        <title>Package mono-jscript is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.1</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:mono-jscript"/>
        <description>Package mono-jscript is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:07:43">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-10T13:32:26.590-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:32.557-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:46.823-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="mono-jscript is installed" test_ref="oval:org.mitre.oval:tst:3444"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2212" version="1" class="inventory">
      <metadata>
        <title>Package mono-data-firebird is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
          <platform>SUSE Linux Enterprise Server 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:mono-data-firebird"/>
        <description>Package mono-data-firebird is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:06:42">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-10T13:32:26.162-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:32.491-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:46.756-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::server</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="mono-data-firebird is installed" test_ref="oval:org.mitre.oval:tst:3169"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2175" version="1" class="inventory">
      <metadata>
        <title>Package mono-extras is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:mono-extras"/>
        <description>Package mono-extras is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:07:35">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-10T13:32:26.538-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:31.794-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:45.770-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="mono-extras is installed" test_ref="oval:org.mitre.oval:tst:4057"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2157" version="4" class="inventory">
      <metadata>
        <title>SUSE Linux 10.1 is installed</title>
        <affected family="unix">
          <platform>SUSE Linux 10.1</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:novell:suse_linux:10.1"/>
        <description>SUSE Linux 10.1 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-28T06:18:50">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-07-10T21:08:30.381-04:00">DRAFT</status_change>
            <modified comment="Removed unneeded platform information from the affected element and affected cpe list." date="2007-07-25T12:36:00.918-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-08-10T13:33:41.076-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:31.539-04:00">ACCEPTED</status_change>
            <modified comment="Set datatype to version on version element of ste:3286" date="2007-11-14T19:58:00.803-05:00">
              <contributor organization="Hewlett-Packard">Nicholas Hansen</contributor>
            </modified>
            <status_change date="2007-11-14T20:00:08.214-05:00">INTERIM</status_change>
            <status_change date="2007-12-03T04:00:07.896-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:2157 - Fixed Definitions with missing platforms." date="2012-12-12T17:14:00.907-05:00">
              <contributor organization="SecPod Technologies">Chandan S</contributor>
            </modified>
            <status_change date="2012-12-12T17:21:39.916-05:00">INTERIM</status_change>
            <status_change date="2012-12-31T04:02:06.151-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="SUSE Linux 10.1 is installed" test_ref="oval:org.mitre.oval:tst:3940"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2146" version="1" class="inventory">
      <metadata>
        <title>Package mono-data-sqlite is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
          <platform>SUSE Linux Enterprise Server 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:mono-data-sqlite"/>
        <description>Package mono-data-sqlite is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:06:57">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-10T13:32:26.368-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:31.290-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:45.190-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::server</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="mono-data-sqlite is installed" test_ref="oval:org.mitre.oval:tst:3866"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2131" version="1" class="inventory">
      <metadata>
        <title>Package mono-winforms is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:mono-winforms"/>
        <description>Package mono-winforms is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:08:08">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-10T13:32:26.816-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:31.113-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:44.998-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="mono-winforms is installed" test_ref="oval:org.mitre.oval:tst:3345"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2125" version="1" class="inventory">
      <metadata>
        <title>Package mono-nunit is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
          <platform>SUSE Linux Enterprise Server 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:mono-nunit"/>
        <description>Package mono-nunit is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:07:52">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-10T13:32:26.702-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:30.978-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:44.860-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::server</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="mono-nunit is installed" test_ref="oval:org.mitre.oval:tst:3632"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2106" version="8" class="inventory">
      <metadata>
        <title>SUSE Linux Enterprise Desktop 10 is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Desktop 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:novell:suse_linux:10::desktop"/>
        <description>SUSE Linux Enterprise Desktop 10 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-11T16:29:48">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-07-12T07:09:37.834-04:00">DRAFT</status_change>
            <modified comment="Removed unneeded platform information from the affected element and affected cpe list." date="2007-07-25T12:36:00.029-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-08-10T13:33:41.021-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:30.742-04:00">ACCEPTED</status_change>
            <modified comment="Set datatype to version on version element of ste:3857" date="2007-11-14T19:58:00.649-05:00">
              <contributor organization="Hewlett-Packard">Nicholas Hansen</contributor>
            </modified>
            <status_change date="2007-11-14T20:00:29.988-05:00">INTERIM</status_change>
            <status_change date="2007-12-03T04:00:06.107-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:2106 - Fixed Definitions with missing platforms." date="2012-12-12T17:14:00.907-05:00">
              <contributor organization="SecPod Technologies">Chandan S</contributor>
            </modified>
            <status_change date="2012-12-12T17:21:14.550-05:00">INTERIM</status_change>
            <status_change date="2012-12-31T04:02:05.837-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:3857 - patch-definitions for Suse" date="2014-07-29T19:01:00.489-04:00">
              <contributor organization="ALTX-SOFT">Evgeniy Pavlov</contributor>
            </modified>
            <status_change date="2014-07-29T19:03:57.568-04:00">INTERIM</status_change>
            <status_change date="2014-08-18T04:02:11.316-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:3857 - removed signature_keyid because not all versions of SUSE are signed" date="2015-06-24T13:04:00.361-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-06-24T13:05:16.805-04:00">INTERIM</status_change>
            <status_change date="2015-07-13T04:00:07.638-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="SUSE Linux Enterprise Desktop 10 is installed" test_ref="oval:org.mitre.oval:tst:3588"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2066" version="1" class="inventory">
      <metadata>
        <title>Package mono-locale-extras is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
          <platform>SUSE Linux Enterprise Server 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:mono-locale-extras"/>
        <description>Package mono-locale-extras is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:07:47">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-10T13:32:26.645-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:29.925-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:43.365-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::server</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="mono-locale-extras is installed" test_ref="oval:org.mitre.oval:tst:3301"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2042" version="1" class="inventory">
      <metadata>
        <title>Package mono-devel is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:mono-devel"/>
        <description>Package mono-devel is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:07:15">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-10T13:32:26.485-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:29.804-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:43.298-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="mono-devel is installed" test_ref="oval:org.mitre.oval:tst:3766"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1812" version="1" class="inventory">
      <metadata>
        <title>Package mono-data-sybase is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
          <platform>SUSE Linux Enterprise Server 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:mono-data-sybase"/>
        <description>Package mono-data-sybase is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:07:02">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-10T13:32:26.426-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:28.587-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:42.059-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::server</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="mono-data-sybase is installed" test_ref="oval:org.mitre.oval:tst:3718"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1717" version="1" class="inventory">
      <metadata>
        <title>Package mono-data is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
          <platform>SUSE Linux Enterprise Server 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:mono-data"/>
        <description>Package mono-data is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:06:36">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-10T13:32:26.099-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:28.007-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:41.135-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::server</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="mono-data is installed" test_ref="oval:org.mitre.oval:tst:3602"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1616" version="1" class="inventory">
      <metadata>
        <title>Package mono-core is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
          <platform>SUSE Linux Enterprise Server 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:mono-core"/>
        <description>Package mono-core is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:06:23">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-10T13:32:25.971-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:27.539-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:40.671-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::server</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="mono-core is installed" test_ref="oval:org.mitre.oval:tst:3776"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1554" version="1" class="inventory">
      <metadata>
        <title>Package mono-web is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
          <platform>SUSE Linux Enterprise Desktop 10</platform>
          <platform>SUSE Linux Enterprise Server 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:mono-web"/>
        <description>Package mono-web is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:08:02">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-10T13:32:26.763-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:27.383-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:40.482-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::desktop</cpe>
            <cpe>cpe:/o:novell:suse_linux_enterprise:10::server</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="mono-web is installed" test_ref="oval:org.mitre.oval:tst:3838"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1368" version="6" class="inventory">
      <metadata>
        <title>SUSE Linux Enterprise Server 10 is installed</title>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 10</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:novell:suse_linux:10::server"/>
        <description>SUSE Linux Enterprise Server 10 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-11T16:29:48">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-07-12T07:09:38.141-04:00">DRAFT</status_change>
            <status_change date="2007-08-01T22:26:14.016-04:00">INTERIM</status_change>
            <status_change date="2007-08-20T08:04:38.503-04:00">ACCEPTED</status_change>
            <modified comment="Set datatype to version on version element of ste:3857" date="2007-11-14T19:58:00.649-05:00">
              <contributor organization="Hewlett-Packard">Nicholas Hansen</contributor>
            </modified>
            <status_change date="2007-11-14T20:00:30.290-05:00">INTERIM</status_change>
            <status_change date="2007-12-03T04:00:05.730-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:3857 - patch-definitions for Suse" date="2014-07-29T19:01:00.489-04:00">
              <contributor organization="ALTX-SOFT">Evgeniy Pavlov</contributor>
            </modified>
            <status_change date="2014-07-29T19:03:57.508-04:00">INTERIM</status_change>
            <status_change date="2014-08-18T04:00:45.873-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:3857 - removed signature_keyid because not all versions of SUSE are signed" date="2015-06-24T13:04:00.361-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-06-24T13:05:16.763-04:00">INTERIM</status_change>
            <status_change date="2015-07-13T04:00:04.303-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:suse_linux:10:server</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="SUSE Linux Enterprise Server 10 is installed" test_ref="oval:org.mitre.oval:tst:3669"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1233" version="1" class="inventory">
      <metadata>
        <title>Package mono-core-32bit is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
          <platform>SUSE Linux 10.0</platform>
          <platform>SUSE Linux 10.1</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:novell:mono-core-32bit"/>
        <description>Package mono-core-32bit is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-07T21:06:29">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-08-10T13:32:26.041-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:26.600-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:39.118-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.0</cpe>
            <cpe>cpe:/o:novell:suse_linux:10.1</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="mono-core-32bit is installed" test_ref="oval:org.mitre.oval:tst:3308"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1170" version="2" class="inventory">
      <metadata>
        <title>openSUSE 10.2 is installed</title>
        <affected family="unix">
          <platform>openSUSE 10.2</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:novell:opensuse:10.2"/>
        <description>openSUSE 10.2 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-28T06:18:50">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </submitted>
            <status_change date="2007-07-10T21:08:29.742-04:00">DRAFT</status_change>
            <status_change date="2007-08-01T22:26:13.957-04:00">INTERIM</status_change>
            <status_change date="2007-08-20T08:04:38.324-04:00">ACCEPTED</status_change>
            <modified comment="Set datatype to version on version element of ste:3836" date="2007-11-14T19:58:00.824-05:00">
              <contributor organization="Hewlett-Packard">Nicholas Hansen</contributor>
            </modified>
            <status_change date="2007-11-14T20:01:05.098-05:00">INTERIM</status_change>
            <status_change date="2007-12-03T04:00:04.575-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
          <affected_cpe_list>
            <cpe>cpe:/o:novell:opensuse:10.2</cpe>
          </affected_cpe_list>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="openSUSE 10.2 is installed" test_ref="oval:org.mitre.oval:tst:3589"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:209" version="6" class="vulnerability">
      <metadata>
        <title>SNMP Agent Service Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Simple Network Management Protocol (SNMP)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0053" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0053"/>
        <description>Buffer overflow in SNMP agent service in Windows 95/98/98SE, Windows NT 4.0, Windows 2000, and Windows XP allows remote attackers to cause a denial of service or execute arbitrary code via a malformed management request.  NOTE: this candidate may be split or merged with other candidates.  This and other PROTOS-related candidates, especially CVE-2002-0012 and CVE-2002-0013, will be updated when more accurate information is available.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-12-03T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2884" date="2010-11-29T16:14:00.692-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:39.517-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:40.678-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:45.632-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:22.564-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="the version of snmp.exe is less than 5.0.2195.4919" negate="false" test_ref="oval:org.mitre.oval:tst:2883"/>
          <criterion comment="Patch Q314147 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2959"/>
          <criterion comment="Win2K/XP/2003 service pack 3 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:3079"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="the SNMP service is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2958"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:20798" version="5" class="vulnerability">
      <metadata>
        <title>SignalR XSS Vulnerability (CVE-2013-5042) - MS13-103</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows 8.1</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <product>Microsoft Visual Studio Team Foundation Server</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2013-5042" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5042"/>
        <description>Cross-site scripting (XSS) vulnerability in Microsoft ASP.NET SignalR 1.1.x before 1.1.4 and 2.0.x before 2.0.1, and Visual Studio Team Foundation Server 2013, allows remote attackers to inject arbitrary web script or HTML via crafted Forever Frame transport protocol data, aka "SignalR XSS Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2013-12-13T19:38:53">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-12-16T12:27:45.400-05:00">DRAFT</status_change>
            <status_change date="2014-01-06T04:00:45.490-05:00">INTERIM</status_change>
            <status_change date="2014-01-06T04:00:31.500-05:00">INTERIM</status_change>
            <status_change date="2014-01-27T04:00:31.970-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft Visual Studio Team Foundation Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:20854"/>
        <criterion comment="Check if the version of Microsoft.AspNet.SignalR.Core.dll is less than 1.1.21022.0" test_ref="oval:org.mitre.oval:tst:89989"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:20854" version="4" class="inventory">
      <metadata>
        <title>Microsoft Visual Studio Team Foundation Server 2013 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows 8.1</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <product>Microsoft Visual Studio Team Foundation Server</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:visual_studio_team_foundation_server:2013"/>
        <description>Microsoft Visual Studio Team Foundation Server 2013 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2013-12-13T19:38:53">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-12-16T12:27:45.255-05:00">DRAFT</status_change>
            <status_change date="2014-01-06T04:00:45.786-05:00">INTERIM</status_change>
            <status_change date="2014-01-06T04:00:31.721-05:00">INTERIM</status_change>
            <status_change date="2014-01-27T04:00:37.681-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Visual Studio Team Foundation Server is installed" test_ref="oval:org.mitre.oval:tst:90023"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2078" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerabilities in The Solaris Event Port API May Result in a Denial of Service (DoS) Condition</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3781" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3781"/>
        <description>Unspecified vulnerability in Sun Solaris 10 allows context-dependent attackers to cause a denial of service (panic) via unspecified vectors involving the event port API.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-10T12:25:26.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-13T13:57:14.069-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:29.992-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:43.586-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102485" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 118833-12 or later installed" test_ref="oval:org.mitre.oval:tst:3185" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102485" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 118855-10 or later installed" test_ref="oval:org.mitre.oval:tst:4131" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2077" version="4" class="vulnerability">
      <metadata>
        <title>IE5.01,SP3 Content Advisor Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0555"/>
        <description>Buffer overflow in the Content Advisor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a crafted Content Advisor file, aka "Content Advisor Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-05-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-05-11T05:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-22T12:38:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2824. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:48:00.494-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:52:27.860-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:06.007-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:57.553-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:33.960-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3015"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3539.2400" negate="false" test_ref="oval:org.mitre.oval:tst:1083"/>
          <criterion comment="the patch kb890923  is installed (Win2K SP3  Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:1082"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:20769" version="6" class="vulnerability">
      <metadata>
        <title>SharePoint Page Content Vulnerabilities (CVE-2013-5059) - MS13-100</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <product>Microsoft SharePoint Server 2010</product>
          <product>Microsoft SharePoint Server 2013</product>
          <product>Microsoft Office Web Apps Server 2013</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2013-5059" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5059"/>
        <description>Microsoft SharePoint Server 2010 SP1 and SP2 and 2013, and Office Web Apps 2013, allows remote attackers to execute arbitrary code via crafted page content, aka "SharePoint Page Content Vulnerabilities."</description>
        <oval_repository>
          <dates>
            <submitted date="2013-12-13T13:31:37">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-12-16T12:23:40.189-05:00">DRAFT</status_change>
            <status_change date="2014-01-06T04:00:45.057-05:00">INTERIM</status_change>
            <status_change date="2014-01-06T04:00:31.218-05:00">INTERIM</status_change>
            <status_change date="2014-01-27T04:00:29.330-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:20769 - update for office web apps server 2013 in ms13-100." date="2014-02-04T12:29:00.924-05:00">
              <contributor organization="SecPod Technologies">Bhavya K</contributor>
            </modified>
            <status_change date="2014-02-04T12:31:06.140-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:33.801-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="sharepoint server 2010/sp1/sp2 and file version">
          <criteria operator="OR" comment="sharepoint server 2010/sp1/sp2">
            <extend_definition comment="Microsoft SharePoint Server 2010 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:15614"/>
            <extend_definition comment="Microsoft SharePoint Server 2010 Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:18921"/>
          </criteria>
          <criterion comment="Check if the version of ascalc.dll is less than 14.0.7011.1000" test_ref="oval:org.mitre.oval:tst:90029"/>
        </criteria>
        <criteria operator="AND" comment="foundation 2013/version">
          <extend_definition comment="Microsoft SharePoint Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:16325"/>
          <criterion comment="Check if the version of ascalc.dll is less than 15.0.4545.1000" test_ref="oval:org.mitre.oval:tst:89884"/>
        </criteria>
        <criteria operator="AND" comment="web apps 2013">
          <extend_definition comment="Microsoft Office Web Apps Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:22312"/>
          <criterion comment="Msoserver.Dll is less than 15.0.4551.1007" test_ref="oval:org.mitre.oval:tst:100103"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:22312" version="3" class="inventory">
      <metadata>
        <title>Microsoft Office Web Apps Server 2013 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <product>Microsoft Office Web Apps Server 2013</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:office_web_apps:2013"/>
        <description>Microsoft Office Web Apps Server 2013 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2014-01-17T14:16:01">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2014-01-21T17:03:41.194-05:00">DRAFT</status_change>
            <status_change date="2014-02-10T04:00:25.770-05:00">INTERIM</status_change>
            <status_change date="2014-03-03T04:01:05.741-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Msoserver.dll is present" test_ref="oval:org.mitre.oval:tst:99831"/>
        <criterion comment="Check for the existence of SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Office15.WacServer" test_ref="oval:org.mitre.oval:tst:100108"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2073" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP3 Drag-and-Drop Code Execution Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0839" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0839"/>
        <description>Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by "wottapoop.html".</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-25T04:42:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-27T01:04:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-17T10:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2824. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:48:00.494-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:52:24.059-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:05.744-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:57.407-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:32.496-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3015"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3821.2800" negate="false" test_ref="oval:org.mitre.oval:tst:625"/>
          <criterion comment="the patch kb834707-ie501sp3 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:624"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:207" version="6" class="vulnerability">
      <metadata>
        <title>Scob and Toofer Internet Explorer v6.0,SP1 for Server 2003 Vulnerabilities</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0549" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0549"/>
        <description>The WebBrowser ActiveX control, or the Internet Explorer HTML rendering engine (MSHTML), as used in Internet Explorer 6, allows remote attackers to execute arbitrary code in the Local Security context by using the showModalDialog method and modifying the location to execute code such as Javascript, as demonstrated using (1) delayed HTTP redirect operations, and an HTTP response with a Location: header containing a "URL:" prepended to a "ms-its" protocol URI, or (2) modifying the location attribute of the window, as exploited by the Download.ject (aka Scob aka Toofer) using the ADODB.Stream object.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-08-02T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-08-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-05-10T12:00:00.000-04:00" comment="modified wrt-51 - Comment updated to indicate IE 6.">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-05-11T05:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T11:00:00.000-04:00" comment="modified wft-266 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2621. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T20:21:00.819-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T20:22:31.120-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:05.355-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:53.539-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:31.742-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6  for Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2801"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.3790.191" negate="false" test_ref="oval:org.mitre.oval:tst:2800"/>
          <criterion comment="the patch kb867801 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2799"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:20653" version="3" class="vulnerability">
      <metadata>
        <title>OWA XSS Vulnerability (CVE-2013-5072) - MS13-105</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <product>Microsoft Exchange Server 2013</product>
          <product>Microsoft Exchange Server 2010</product>
          <product>Microsoft Exchange Server 2007</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2013-5072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5072"/>
        <description>Cross-site scripting (XSS) vulnerability in Outlook Web Access in Microsoft Exchange Server 2010 SP2 and SP3 and 2013 Cumulative Update 2 and 3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "OWA XSS Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2013-12-13T12:19:11">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-12-13T11:13:50.156-05:00">DRAFT</status_change>
            <status_change date="2013-12-30T04:00:49.514-05:00">INTERIM</status_change>
            <status_change date="2014-01-20T04:01:04.987-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2007 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2007 SP3 is installed" definition_ref="oval:org.mitre.oval:def:15784"/>
          <criterion comment="Check if the version of exsetup.exe is less than 8.3.342.4" test_ref="oval:org.mitre.oval:tst:89886"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP2 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP2 is installed" definition_ref="oval:org.mitre.oval:def:14151"/>
          <criterion comment="Check if the version of exsetup.exe is less than 14.2.390.3" test_ref="oval:org.mitre.oval:tst:89663"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP3 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP3 is installed" definition_ref="oval:org.mitre.oval:def:17932"/>
          <criterion comment="Check if the version of exsetup.exe is less than 14.3.174.1" test_ref="oval:org.mitre.oval:tst:89845"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2013 CU2 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 Cumulative Update 2 is installed" definition_ref="oval:org.mitre.oval:def:18484"/>
          <criterion comment="Check if the version of exsetup.exe is less than 15.0.712.31" test_ref="oval:org.mitre.oval:tst:89888"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2013 CU3 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 Cumulative Update 3 is installed" definition_ref="oval:org.mitre.oval:def:20878"/>
          <criterion comment="Check if the version of exsetup.exe is less than 15.0.775.41" test_ref="oval:org.mitre.oval:tst:89992"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2065" version="1" class="vulnerability">
      <metadata>
        <title>Kerberos Client Plaintext Password Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <product>pam_krb5</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0653" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0653"/>
        <description>Solaris 9, when configured as a Kerberos client with patch 112908-12 or 115168-03 and using pam_krb5 as an "auth" module with the debug feature enabled, records passwords in plaintext, which could allow local users to gain other user's passwords by reading log files.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2004-10-13T12:00:00.000-04:00">DRAFT</status_change>
            <modified date="2005-01-14T12:00:00.000-04:00" comment="Changed all unknown tests to solaris file contents tests">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </modified>
            <status_change date="2005-02-02T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-23T09:25:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="Kerberos 5 installed" negate="false" test_ref="oval:org.mitre.oval:tst:648"/>
          <criterion comment="Patch 112908-13 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:630"/>
          <criterion comment="Patch 112908-12 installed" negate="false" test_ref="oval:org.mitre.oval:tst:629"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/etc/pam.conf is configured to use pam_krb5 as an 'auth' module and the debug feature of pam_krb5 is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:628"/>
          <criterion comment="/etc/krb5/krb5.conf is configured with a kerberos domain" negate="false" test_ref="oval:org.mitre.oval:tst:1153"/>
          <criterion comment="/etc/syslog.conf is configured to log &quot;debug&quot; level messages for at least daemon" negate="false" test_ref="oval:org.mitre.oval:tst:627"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2060" version="7" class="vulnerability">
      <metadata>
        <title>SMB Invalid Handle Vulnerability (WinS03)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2374" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2374"/>
        <description>The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to cause a denial of service (hang) by calling the MrxSmbCscIoctlCloseForCopyChunk with the file handle of the shadow device, which results in a deadlock, aka the "SMB Invalid Handle Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:43.858-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:49.854-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:55.066-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:05.049-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:2060 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:37.761-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:21.215-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of mrxsmb.sys is less than 5.2.3790.529" test_ref="oval:org.mitre.oval:tst:714"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:206" version="4" class="vulnerability">
      <metadata>
        <title>IE v5.01,SP2 Malformed GIF Image Double-free Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1048" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1048"/>
        <description>Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-08-02T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-08-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2868. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:41:00.387-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:43:11.217-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:04.806-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:53.420-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:28.945-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Software section">
        <criterion comment="Internet Explorer 5.01 Service Pack 2 is installed" test_ref="oval:org.mitre.oval:tst:3063"/>
        <criterion comment="the version of mshtml.dll is less than 5.0.3532.300" test_ref="oval:org.mitre.oval:tst:2803"/>
        <criterion negate="true" comment="the patch kb832894 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:2802"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2055" class="vulnerability" version="1">
      <metadata>
        <title>Vulnerability in Crystal Reports for Microsoft Visual Studio Could Allow Remote Code Execution</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <product>Microsoft Visual Studio</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6133" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6133"/>
        <description>Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and 2005 and 2005 SP1 (formerly Business Objects Crystal Reports XI Professional) allows user-assisted remote attackers to execute arbitrary code via a crafted RPT file.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-09-25T05:47:58">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2007-09-27T08:47:05.208-04:00">DRAFT</status_change>
            <modified comment="set datatype to version on file state 2972" date="2007-10-04T12:11:00.241-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <modified comment="set datatype to version on file state 3261" date="2007-10-04T12:11:00.500-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-22T08:53:25.962-04:00">INTERIM</status_change>
            <status_change date="2007-11-06T12:26:41.959-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment=".NET 2002, SP1">
          <extend_definition comment="Microsoft Visual Studio .NET 2002,SP1 is installed" definition_ref="oval:org.mitre.oval:def:981"/>
          <criterion comment="the version of crpe32.dll is less than 9.1.2.1871" test_ref="oval:org.mitre.oval:tst:4172"/>
        </criteria>
        <criteria operator="AND" comment=".NET 2003">
          <extend_definition comment="Microsoft Visual Studio .NET 2003 is installed" definition_ref="oval:org.mitre.oval:def:166"/>
          <criterion comment="the version of crpe32.dll is less than 9.1.2.1871" test_ref="oval:org.mitre.oval:tst:4172"/>
        </criteria>
        <criteria operator="AND" comment=".NET 2003">
          <extend_definition comment="Microsoft Visual Studio .NET 2005 is installed" definition_ref="oval:org.mitre.oval:def:426"/>
          <criterion comment="the version of crpe32.dll is less than 10.2.0.1222" test_ref="oval:org.mitre.oval:tst:3483"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:981" version="5" class="inventory">
      <metadata>
        <title>Microsoft Visual Studio .NET 2002 SP1 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:visual_studio_.net:2002:SP1"/>
        <description>Microsoft Visual Studio .NET 2002 SP1 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-02-14T09:49:32">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2007-02-16T21:55:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-03-21T16:17:29.144-04:00">INTERIM</status_change>
            <status_change date="2007-04-10T13:44:29.181-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.378-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:51:17.911-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:21.771-05:00">ACCEPTED</status_change>
            <modified date="2008-03-02T04:44:54" comment="Added file check to ensure a full installation.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2008-03-17T04:00:24.075-04:00">ACCEPTED</status_change>
            <modified date="2009-06-15T04:44:54" comment="Added CPE">
              <contributor organization="The MITRE Corporation">Brendan Miles</contributor>
            </modified>
            <status_change date="2009-06-22T04:00:54.806-04:00">INTERIM</status_change>
            <status_change date="2009-07-13T04:00:58.429-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="devenv.exe exists as a Microsoft Visual Studio 2002 component" test_ref="oval:org.mitre.oval:tst:7813"/>
        <criterion comment="Service Pack 1 for Microsoft Visual Studio .NET 2002 is installed" test_ref="oval:org.mitre.oval:tst:3317"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:426" version="9" class="inventory">
      <metadata>
        <title>Microsoft Visual Studio 2005 is installed.</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Visual Studio 2005</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:visual_studio:2005"/>
        <description>Microsoft Visual Studio 2005 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-12-13T08:17:04">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-12-14T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-01-03T13:53:56.869-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:31.985-05:00">ACCEPTED</status_change>
            <modified date="2008-03-02T04:44:54" comment="Added file check to ensure a full installation.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2008-03-17T04:00:21.372-04:00">ACCEPTED</status_change>
            <modified comment="Added the CPE name and added platform for vista" date="2009-05-26T16:45:00.332-04:00">
              <contributor organization="The MITRE Corporation">Brendan Miles</contributor>
            </modified>
            <status_change date="2009-05-25T10:32:00.713-04:00">INTERIM</status_change>
            <status_change date="2009-06-15T04:00:38.387-04:00">ACCEPTED</status_change>
            <modified comment="Added Microsoft Windows Server 2008 platform" date="2009-09-27T16:45:00.332-04:00">
              <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2009-10-05T04:00:09.737-04:00">INTERIM</status_change>
            <status_change date="2009-10-26T04:00:03.240-04:00">ACCEPTED</status_change>
            <status_change date="2012-03-05T14:23:48.806-05:00">INTERIM</status_change>
            <modified comment="Added Windows Server 2008 R2 platform" date="2012-03-05T14:23:48.806-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2012-03-26T04:03:02.227-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:426 - The attached file contains modified inventory for Microsoft Visual Studio." date="2013-04-15T20:51:00.845-04:00">
              <contributor organization="ALTX-SOFT">Sergey Artykhov</contributor>
            </modified>
            <status_change date="2013-04-15T20:56:48.989-04:00">INTERIM</status_change>
            <status_change date="2013-05-06T04:02:40.457-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="devenv.exe exists as a Microsoft Visual Studio 2005 component" test_ref="oval:org.mitre.oval:tst:7741"/>
        <criterion comment="Check if HKLM\Software\Microsoft\VisualStudio\8.0!InstallDir exists" test_ref="oval:org.mitre.oval:tst:80280"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:166" version="6" class="inventory">
      <metadata>
        <title>Microsoft Visual Studio .NET 2003 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:visual_studio_.net:2003"/>
        <description>Microsoft Visual Studio .NET 2003 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-02-14T09:49:32">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2007-02-16T21:55:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-03-21T16:16:58.485-04:00">INTERIM</status_change>
            <status_change date="2007-04-10T13:44:21.203-04:00">ACCEPTED</status_change>
            <modified date="2008-03-02T04:44:54" comment="Added file check to ensure a full installation.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2008-03-17T04:00:17.442-04:00">ACCEPTED</status_change>
            <modified date="2009-06-15T04:44:54" comment="Added CPE">
              <contributor organization="The MITRE Corporation">Brendan Miles</contributor>
            </modified>
            <status_change date="2009-06-22T04:00:50.087-04:00">INTERIM</status_change>
            <status_change date="2009-07-13T04:00:22.776-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:166 - modified inventories for Microsoft Expression Design." date="2013-07-05T09:53:00.264-04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-07-05T09:57:59.362-04:00">INTERIM</status_change>
            <status_change date="2013-07-22T04:00:58.244-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="devenv.exe exists as a Microsoft Visual Studio 2003 component" test_ref="oval:org.mitre.oval:tst:7817"/>
        <criterion comment="Registry key specifying where Microsoft Visual Studio 2003 exists" test_ref="oval:org.mitre.oval:tst:80757"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2054" class="vulnerability" version="2">
      <metadata>
        <title>IMAP Literal Processing Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Exchange Server</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0221" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0221"/>
        <description>Integer overflow in the IMAP (IMAP4) support in Microsoft Exchange Server 2000 SP3 allows remote attackers to cause a denial of service (service hang) via crafted literals in an IMAP command, aka the "IMAP Literal Processing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2007-05-09T10:04:48">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2007-05-09T12:53:06-04:00">DRAFT</status_change>
            <status_change date="2007-05-31T15:26:39.721-04:00">INTERIM</status_change>
            <status_change date="2007-06-15T11:07:38.252-04:00">ACCEPTED</status_change>
            <modified comment="References registry value for Common Files directory due to multilingual support" date="2008-04-14T11:07:00.679-04:00">
              <contributor organization="GFI Software">Clifford Farrugia</contributor>
            </modified>
            <status_change date="2008-04-14T12:26:44.754-04:00">INTERIM</status_change>
            <status_change date="2008-05-05T04:00:16.603-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Microsoft Exchange 2000 Server Service Pack 3" operator="AND">
        <extend_definition comment="Microsoft Exchange 2000 Server Service Pack 3 is installed" definition_ref="oval:org.mitre.oval:def:1858"/>
        <criterion comment="the version of Cdoex.dll is less than 6.0.6619.12" test_ref="oval:org.mitre.oval:tst:3975"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2046" version="6" class="vulnerability">
      <metadata>
        <title>Windows 2000 Drag-and-Drop Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0053" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0053"/>
        <description>Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the "Drag-and-Drop Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-03-31T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Matthew Burton</contributor>
            </submitted>
            <status_change date="2005-04-12T08:26:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-27T12:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed test to check kb890047.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.795-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:47:48.826-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:06.090-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:46.357-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:20.658-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or earlier) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1247"/>
          <criterion comment="the version of shell32.dll is less than 5.0.3900.7009" negate="false" test_ref="oval:org.mitre.oval:tst:632"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="Drag-and-Drop disabled when set to 3" negate="true" test_ref="oval:org.mitre.oval:tst:1316"/>
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:204" version="5" class="vulnerability">
      <metadata>
        <title>IE ActiveX Popup Zone Restriction Bypass</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0838" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0838"/>
        <description>Internet Explorer allows remote attackers to bypass zone restrictions to inject and execute arbitrary programs by creating a popup window and inserting ActiveX object code with a "data" tag pointing to the malicious code, which Internet Explorer treats as HTML or Javascript, but later executes as an HTA application, a different vulnerability than CVE-2003-0532, and as exploited using the QHosts Trojan horse (aka Trojan.Qhosts, QHosts-1, VBS.QHOSTS, or aolfix.exe).</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T05:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified date="2004-03-04T05:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-03-25T05:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="modified wrt-18 - Changed value element to include pattern match">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:45:58.888-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:04.584-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:53.836-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:27.219-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="OR" comment="Internet Explorer 6.0 or IE 6.0 SP1 is installed">
            <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
            <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
          </criteria>
          <criterion comment="the version of mshtml.dll is less than 6.0.2800.1264" negate="false" test_ref="oval:org.mitre.oval:tst:2918"/>
          <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
            </criteria>
          </criteria>
          <criterion comment=".hta applications are enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2915"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2038" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerabilities in the tip(1) Command May Allow Execution of Arbitrary Code With Elevated Privileges</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0470" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0470"/>
        <description>Multiple unspecified vulnerabilities in tip in Sun Solaris 8, 9, and 10 allow local users to gain uucp account privileges via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-10T12:25:20.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-13T13:57:11.835-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:29.716-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:43.199-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102773" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 111504-02 or later installed" test_ref="oval:org.mitre.oval:tst:3623" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102773" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 123368-01 or later installed" test_ref="oval:org.mitre.oval:tst:3805" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102773" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 124997-01 or later installed" test_ref="oval:org.mitre.oval:tst:3829" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102773" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 111505-02 or later installed" test_ref="oval:org.mitre.oval:tst:3755" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102773" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 123369-01 or later installed" test_ref="oval:org.mitre.oval:tst:3273" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102773" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 124998-01 or later installed" test_ref="oval:org.mitre.oval:tst:4023" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2037" version="1" class="vulnerability">
      <metadata>
        <title>GNOME XScreenSaver in Solaris 8 and 9 may Allow Physically Proximate Attackers to Access the Console</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3283" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3283"/>
        <description>GNOME XScreenSaver in Sun Solaris 8 and 9 before 20070417, when root is logged into the console, does not automatically lock the screen after a session has been inactive, which might allow physically proximate attackers to access the console.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-21T09:00:00.000-04:00">
              <contributor organization="Opsware, Inc.">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2007-06-22T08:20:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-07-10T21:08:51.190-04:00">INTERIM</status_change>
            <status_change date="2007-08-01T22:26:15.533-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software and Configuration sections" operator="AND">
        <criteria comment="Software section" operator="OR">
          <criteria operator="AND" comment="Solaris 8 (SPARC)" negate="false">
            <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
            <criterion comment="Patch 115298-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3643"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 8 (x86)" negate="false">
            <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
            <criterion comment="Patch 115299-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3440"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (SPARC)" negate="false">
            <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
            <criterion comment="Patch 115158-03 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3586"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (x86)" negate="false">
            <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
            <criterion comment="Patch 115159-03 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3700"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration Section" operator="AND">
          <criterion comment="Gnome (major version is equal to 2) Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3407"/>
          <criterion comment="Gnome (minor version is equal to 0) Installed" negate="false" test_ref="oval:org.mitre.oval:tst:4148"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2035" version="3" class="vulnerability">
      <metadata>
        <title>Exchange 2003,SP1 Calendar Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Exchange Server</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0027"/>
        <description>Unspecified vulnerability in Microsoft Exchange allows remote attackers to execute arbitrary code via e-mail messages with crafted (1) vCal or (2) iCal Calendar properties.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-05-10T03:16:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-05-10T08:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:43.717-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.055-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:50:01.449-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:05.640-05:00">ACCEPTED</status_change>
            <modified comment="References registry value for Common Files directory due to multilingual support" date="2008-04-14T11:07:00.679-04:00">
              <contributor organization="GFI Software">Clifford Farrugia</contributor>
            </modified>
            <status_change date="2008-04-14T12:26:44.509-04:00">INTERIM</status_change>
            <status_change date="2008-05-05T04:00:16.084-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Exchange Server 2003,SP1 is installed." negate="false" test_ref="oval:org.mitre.oval:tst:1108"/>
        <criterion comment="cdoex.dll is less than 6.5.7233.69" negate="false" test_ref="oval:org.mitre.oval:tst:633"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2033" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the X Inter Client Exchange Library (libICE)</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3606" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3606"/>
        <description>Unspecified vulnerability in Sun Solaris X Inter Client Exchange library (libICE) on Solaris 8 and 9 allows context-dependent attackers to cause a denial of service (application crash) to applications that use the library.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-10T12:25:27.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-13T13:57:14.391-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:29.620-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:43.086-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102503" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 119067-02 or later installed" test_ref="oval:org.mitre.oval:tst:3413" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102503" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 112785-53 or later installed" test_ref="oval:org.mitre.oval:tst:3734" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102503" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 119068-02 or later installed" test_ref="oval:org.mitre.oval:tst:3473" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102503" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 112786-42 or later installed" test_ref="oval:org.mitre.oval:tst:3965" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2032" version="3" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability in the Solaris 10 inetd(1M) Service May Lead to a Denial of Service (DoS) Condition</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2990" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2990"/>
        <description>Unspecified vulnerability in inetd in Sun Solaris 10 before 20070529 allows local users to cause a denial of service (daemon termination) via unspecified manipulations of the /var/run/.inetd.uds Unix domain socket file.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-06T11:47:00.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-06-06T14:28:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-06-22T08:57:42.624-04:00">INTERIM</status_change>
            <status_change date="2007-07-10T21:08:50.809-04:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:55.102-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:19.273-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="OR">
          <criteria operator="AND" comment="Solaris 10 (SPARC)" negate="false">
            <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3680"/>
            <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
            <criterion comment="Patch 121288-03 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3934"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (x86)" negate="false">
            <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3680"/>
            <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
            <criterion comment="Patch 121289-04 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3679"/>
          </criteria>
        </criteria>
        <criterion comment="inetd running" negate="false" test_ref="oval:org.mitre.oval:tst:3135"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:203" version="4" class="vulnerability">
      <metadata>
        <title>IE v6.0 Frames Cross-site Scripting Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1187" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1187"/>
        <description>Cross-site scripting vulnerability (XSS) in Internet Explorer 5.01 through 6.0 allows remote attackers to read and execute files on the local system via web pages using the &lt;frame> or &lt;iframe> element and javascript, aka "Frames Cross Site Scripting," as demonstrated using the PrivacyPolicy.dlg resource.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-27T05:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-03-09T05:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="Changed IE registry test to wrt-18">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:53.978-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:26.679-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="the version of mshtml.dll is less than 6.0.2722.900" negate="false" test_ref="oval:org.mitre.oval:tst:2884"/>
        <criterion comment="the patch q328970 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3117"/>
        <criterion comment="the patch q324929 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3116"/>
        <criterion comment="the patch q810847 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3115"/>
        <criterion comment="the patch q813489 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3114"/>
        <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2025" version="1" class="vulnerability">
      <metadata>
        <title>System V login Buffer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>login</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0797" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0797"/>
        <description>Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-12-29T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-12T12:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-02T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-23T09:25:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 7 or 8 installed">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
        </criteria>
        <criterion comment="Patch 112300-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:635"/>
        <criterion comment="Patch 111085-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:634"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2021" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the Human Interface Device (HID) Class Driver for Solaris</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5118" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5118"/>
        <description>Unspecified vulnerability in the HID (Human Interface Device) class driver in Sun Solaris 8, 9, and 10 before 20070925 allows local users to cause a denial of service (panic) via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-09-28T13:03:00.000-04:00">
              <contributor organization="Opsware, Inc.">Nicholas Hansen</contributor>
            </submitted>
            <status_change date="2007-10-02T08:04:40.419-04:00">DRAFT</status_change>
            <status_change date="2007-10-18T21:59:19.829-04:00">INTERIM</status_change>
            <status_change date="2007-11-02T07:17:35.588-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102883" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 109896-35 or later installed" test_ref="oval:org.mitre.oval:tst:3285" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102883" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 115553-28 or later installed" test_ref="oval:org.mitre.oval:tst:4284" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102883" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 125123-01 or later installed" test_ref="oval:org.mitre.oval:tst:3599" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102883" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 115554-24 or later installed" test_ref="oval:org.mitre.oval:tst:4255" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102883" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 125124-01 or later installed" test_ref="oval:org.mitre.oval:tst:4246" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2020" version="3" class="vulnerability">
      <metadata>
        <title>Mozilla Accessing XBL Compilation Scope via valueOf.call()</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1733" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1733"/>
        <description>Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 does not properly protect the compilation scope of privileged built-in XBL bindings, which allows remote attackers to execute arbitrary code via the (1) valueOf.call or (2) valueOf.apply methods of an XBL binding, or (3) "by inserting an XBL method into the DOM's document.body prototype chain."</description>
        <oval_repository>
          <dates>
            <submitted date="2006-05-07T09:05:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-05-10T08:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:42.962-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:1133" date="2007-02-26T08:08:00.208-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-26T08:09:15.851-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:1135" date="2007-02-26T08:21:00.993-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:1136" date="2007-02-26T08:24:00.848-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:1138" date="2007-02-26T08:25:00.405-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:2283" date="2007-02-26T08:29:00.407-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:2284" date="2007-02-26T08:30:00.724-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:17:10.898-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:881" date="2007-04-23T12:05:00.811-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:12:54.039-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:882" date="2007-04-23T12:05:00.939-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:883" date="2007-04-23T12:05:00.804-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:1385" date="2007-04-23T12:05:00.430-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:11:04.533-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.7 or earlier is installed">
          <criterion comment="Mozilla Firefox version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1268"/>
          <criterion comment="Firefox version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1267"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Thunderbird version 1.0.7 or earlier is installed">
          <criterion comment="Mozilla Thunderbird version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1266"/>
          <criterion comment="Mozilla Thunderbird version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1265"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.12 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.12 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1264"/>
          <criterion comment="Mozilla Suite version 1.7.12 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1263"/>
        </criteria>
        <criteria operator="AND" comment="A pre-release of SeaMonkey 1.0 is installed">
          <criterion comment="A pre-release of SeaMonkey 1.0 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2439"/>
          <criterion comment="A pre-release of SeaMonkey 1.0 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2438"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2017" version="5" class="vulnerability">
      <metadata>
        <title>COM Object Instantiation Memory Corruption Vulnerability (WinS03)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1303" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1303"/>
        <description>Multiple unspecified vulnerabilities in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allow remote attackers to execute arbitrary code by instantiating certain COM objects from Wmm2fxa.dll as ActiveX controls including (1) DXImageTransform.Microsoft.MMSpecialEffect1Input, (2) DXImageTransform.Microsoft.MMSpecialEffect1Input.1, (3) DXImageTransform.Microsoft.MMSpecialEffect2Inputs, (4) DXImageTransform.Microsoft.MMSpecialEffect2Inputs.1, (5) DXImageTransform.Microsoft.MMSpecialEffectInplace1Input, and (6) DXImageTransform.Microsoft.MMSpecialEffectInplace1Input.1, which causes memory corruption during garbage collection.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:42.693-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:48.660-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:56.378-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:04.411-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:10.430-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:18.804-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="Win2K/XP/2003 is patched" negate="true" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.3790.536" negate="false" test_ref="oval:org.mitre.oval:tst:952"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2016" version="4" class="vulnerability">
      <metadata>
        <title>MS Exchange Server Cross-site Scripting Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <product>Outlook Web Access</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0203" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0203"/>
        <description>Cross-site scripting (XSS) vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbitrary script and spoof content in HTML email or web caches via an HTML redirect query.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-08-25T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-08-25T12:24:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-09-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-29T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-06-02T12:00:00.000-04:00" comment="Added product">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-06-08T03:17:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-29T06:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Changed registry key name from a pattern match of .* to nil." date="2007-01-24T21:30:00.572-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-24T21:31:37.657-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:04.222-05:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.937-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:53:01.145-04:00">INTERIM</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.382-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-11-13T12:01:05.055-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Exchange 5.5 with SP4 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:2492"/>
          <criterion comment="the version of cdo.dll is less than 5.5.2558.10" negate="false" test_ref="oval:org.mitre.oval:tst:638"/>
          <criterion comment="the  patch kb842436 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:637"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="Outlook Web Access exists" negate="false" test_ref="oval:org.mitre.oval:tst:636"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2015" version="1" class="vulnerability">
      <metadata>
        <title>dtsession(1X) Contains a Buffer Overflow Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3471" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3471"/>
        <description>Buffer overflow in the dtsession Common Desktop Environment (CDE) Session Manager in Sun Solaris 8, 9, and 10 allows local users to execute arbitrary code via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-03T09:00:00.000-04:00">
              <contributor organization="Opsware, Inc.">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2007-07-03T21:46:26.557-04:00">DRAFT</status_change>
            <status_change date="2007-07-18T15:57:52.224-04:00">INTERIM</status_change>
            <status_change date="2007-08-02T14:47:15.305-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Solaris 8 (SPARC)" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 109354-26 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3656"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86)" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 109355-25 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3474"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC)" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 113240-13 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3196"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86)" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 113241-13 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3818"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC)" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 125279-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3803"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86)" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 125280-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3725"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2011" version="2" class="vulnerability">
      <metadata>
        <title>ISC BIND Cache Poison Denial Of Service</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>Bind</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0914" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0914"/>
        <description>ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-19T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2004-10-20T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-01-11T12:00:00.000-04:00" comment="modified sat-10 - Changed test to pattern match to check for 64bit version of Core Solaris">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </modified>
            <modified date="2005-01-14T12:00:00.000-04:00" comment="modified sat-10 - Changed regular expression to properly check for 64bit package">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </modified>
            <status_change date="2005-01-24T02:36:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="OR" comment="Solaris 7,8,or 9 installed">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          </criteria>
          <criterion comment="Patch 106938-08 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:642"/>
          <criterion comment="Patch 109326-13 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:641"/>
          <criterion comment="Patch 112970-06 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:640"/>
          <criterion comment="Core Solaris (SUNWcsu/SUNWcsxu) installed" negate="false" test_ref="oval:org.mitre.oval:tst:639"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="in.named running" negate="false" test_ref="oval:org.mitre.oval:tst:2624"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2010" version="1" class="vulnerability">
      <metadata>
        <title>pkgadd(1M) May Set Incorrect Permissions if The pkgmap(4) File Contains a "?" in The "Mode" Field</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4439" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4439"/>
        <description>pkgadd in Sun Solaris 10 before 20060825 installs files with insecure file and directory permissions (755 or 777) if the pkgmap file contains a "?" (question mark) in the mode field, which allows local users to modify arbitrary files or directories, a different vulnerability than CVE-2002-1871.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-10T12:25:25.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-13T13:57:13.656-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:29.485-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:42.976-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102513" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 119254-26 or later installed" test_ref="oval:org.mitre.oval:tst:3525" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102513" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 119255-26 or later installed" test_ref="oval:org.mitre.oval:tst:3358" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:20083" version="5" class="vulnerability">
      <metadata>
        <title>Oracle Outside In Contains Multiple Exploitable Vulnerabilities (CVE-2013-5791) - MS13-105</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <product>Microsoft Exchange Server 2013</product>
          <product>Microsoft Exchange Server 2010</product>
          <product>Microsoft Exchange Server 2007</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2013-5791" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5791"/>
        <description>Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.4.1 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.  NOTE: the previous information is from the October 2013 CPU. Oracle has not commented on claims from a third party that the issue is a stack-based buffer overflow in the Microsoft Access 1.x parser in vsacs.dll before 8.4.0.108 and before 8.4.1.52, which allows attackers to execute arbitrary code via a long field (aka column) name.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-12-13T12:19:11">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-12-13T11:13:51.440-05:00">DRAFT</status_change>
            <status_change date="2013-12-30T04:00:32.522-05:00">INTERIM</status_change>
            <status_change date="2014-01-20T04:00:30.068-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2007 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2007 SP3 is installed" definition_ref="oval:org.mitre.oval:def:15784"/>
          <criterion comment="Check if the version of exsetup.exe is less than 8.3.342.4" test_ref="oval:org.mitre.oval:tst:89886"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP2 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP2 is installed" definition_ref="oval:org.mitre.oval:def:14151"/>
          <criterion comment="Check if the version of exsetup.exe is less than 14.2.390.3" test_ref="oval:org.mitre.oval:tst:89663"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP3 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP3 is installed" definition_ref="oval:org.mitre.oval:def:17932"/>
          <criterion comment="Check if the version of exsetup.exe is less than 14.3.174.1" test_ref="oval:org.mitre.oval:tst:89845"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2013 CU2 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 Cumulative Update 2 is installed" definition_ref="oval:org.mitre.oval:def:18484"/>
          <criterion comment="Check if the version of exsetup.exe is less than 15.0.712.31" test_ref="oval:org.mitre.oval:tst:89888"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2013 CU3 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 Cumulative Update 3 is installed" definition_ref="oval:org.mitre.oval:def:20878"/>
          <criterion comment="Check if the version of exsetup.exe is less than 15.0.775.41" test_ref="oval:org.mitre.oval:tst:89992"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:20878" version="3" class="inventory">
      <metadata>
        <title>Microsoft Exchange Server 2013 Cumulative Update 3 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <product>Microsoft Exchange Server 2013</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:exchange_server:2013:cu3"/>
        <description>Microsoft Exchange Server 2013 Cumulative Update 3 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2013-12-11T13:04:34">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-12-13T11:13:50.125-05:00">DRAFT</status_change>
            <status_change date="2013-12-30T04:00:58.676-05:00">INTERIM</status_change>
            <status_change date="2014-01-20T04:01:14.300-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft Exchange Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:18626"/>
        <criterion comment="Check if Exchange Server 2013 Cumulative Update 3 is installed" test_ref="oval:org.mitre.oval:tst:89964"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2003" version="2" class="vulnerability" deprecated="true">
      <metadata>
        <title>DEPRECATED: Microsoft JScript Memory Corruption Vulnerability (WinXP)</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Operating System</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1313" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1313"/>
        <description>Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objects early" in certain cases, which results in memory corruption and allows remote attackers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:42.312-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:47.362-04:00">ACCEPTED</status_change>
            <modified comment="Use def:1067 instead, which covers all appropriate versions of the DLL" date="2011-01-20T10:32:19.559-05:00">
              <contributor organization="The MITRE Corporation">Nate Przybyszewski</contributor>
            </modified>
            <status_change date="2011-01-20T10:32:19.559-05:00">DEPRECATED</status_change>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows XP is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2838"/>
        <criterion comment="the version of Jscript.dll is less than 5.6.0.8831" negate="false" test_ref="oval:org.mitre.oval:tst:1206"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2002" version="2" class="vulnerability">
      <metadata>
        <title>Multiple Buffer Overflows in Kerberos 5 (krb5_aname_to_localname)</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>Solaris Enterprise Authentication Mechanism (SEAM)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0523" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0523"/>
        <description>Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-11T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2004-10-13T12:00:00.000-04:00">DRAFT</status_change>
            <modified date="2005-01-14T12:00:00.000-04:00" comment="Changed two unknown tests for kerberos configuration to Solaris text file contents tests">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </modified>
            <status_change date="2005-02-02T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-23T09:25:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-07-03T12:56:00.000-04:00" comment="Added negate=true attribute to criteria sub-block to fix conversion error from OVAL 4.2 to OVAL 5.0">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-07-03T12:56:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:12.225-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Kerberos 5 installed" negate="false" test_ref="oval:org.mitre.oval:tst:648"/>
          <criteria operator="OR" comment="Solaris 7,8,or 9 installed">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          </criteria>
          <criterion comment="Patch 112908-16 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:647"/>
          <criterion comment="Patch 112536-05 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:646"/>
          <criteria operator="AND" comment="Patches 112237-11 and 112390-09 or greater installed" negate="true">
            <criterion comment="Patch 112237-11 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:645"/>
            <criterion comment="Patch 112390-09 or later installed" negate="false" test_ref="oval:org.mitre.oval:tst:644"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/etc/krb5/krb5.conf is configured with a kerberos domain" negate="false" test_ref="oval:org.mitre.oval:tst:1153"/>
          <criterion comment="/etc/krb5/krb5.conf is configured with explicit or rules-based mapping" negate="false" test_ref="oval:org.mitre.oval:tst:643"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:200" version="7" class="vulnerability" deprecated="true">
      <metadata>
        <title>DEPRECATED: Windows Script Engine Heap Overflow (Test 1)</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Windows Script Engine for JScript v5.6</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0010" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0010"/>
        <description>Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript (JScript.dll) on various Windows operating system allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail that uses a large array index value that enables a heap-based buffer overflow attack.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-27T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified date="2004-03-03T12:00:00.000-04:00" comment="Corrected to reflect the unification of the Windows Schema">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </modified>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if active scripting is enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </modified>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2004-08-24T10:58:00.000-04:00" comment="Added Patch to Definition">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2004-08-24T10:58:00.000-04:00" comment="negated patch">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2004-08-26T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-07-03T12:56:00.000-04:00" comment="Added negate=true attribute to criteria sub-block to fix conversion error from OVAL 4.2 to OVAL 5.0">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-07-03T12:56:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:11.933-04:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:11.452-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:10.592-04:00">ACCEPTED</status_change>
            <modified comment="Use def:134 instead, which covers all appropriate versions of windows and uses the file test" date="2011-01-20T10:33:54.035-05:00">
              <contributor organization="The MITRE Corporation">Nate Przybyszewski</contributor>
            </modified>
            <status_change date="2011-01-20T10:33:54.035-05:00">DEPRECATED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="the version of jscript.dll is less than 5.6.0.8513" negate="false" test_ref="oval:org.mitre.oval:tst:2905"/>
          <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed" negate="true">
            <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
            <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3084"/>
          </criteria>
          <criterion comment="the patch js56nen.exe (5.6.0.8513 version) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2904"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="active scripting is enabled">
            <criteria operator="AND" comment="current user settings are being used and active scripting is enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and active scripting is enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:20" version="2" class="vulnerability" deprecated="true">
      <metadata>
        <title>Suppressed OVAL20</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Distributed Component Object Model (DCOM)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0715" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0715"/>
        <description>Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed DCERPC DCOM object activation request packet with modified length fields, a different vulnerability than CVE-2003-0352 (Blaster/Nachi) and CVE-2003-0528.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-11-02T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-11-03T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-12-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-01-06T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-06-02T12:00:00.000-04:00" comment="Added product">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-06-08T03:17:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-29T06:49:00.000-04:00">ACCEPTED</status_change>
            <modified date="2007-03-01T12:01:01" comment="Deprecated in favor of oval:org.mitre.oval:def:264.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-03-01T12:01:01">DEPRECATED</status_change>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="the version of rpcss.dll is less than 5.0.2195.6810" negate="false" test_ref="oval:org.mitre.oval:tst:3083"/>
        <criterion comment="the patch kb824146 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:3082"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2" version="2" class="vulnerability">
      <metadata>
        <title>Mutt BO Vulnerability in balsa</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Mutt</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0140" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0140"/>
        <description>Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code such as Balsa before 2.0.10, allows a remote malicious IMAP server to cause a denial of service (crash) and possibly execute arbitrary code via a crafted folder.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-18T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:42:05.738-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:22.102-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="balsa version is less than 2.0.6-2" negate="false" test_ref="oval:org.mitre.oval:tst:3151"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/bin/balsa is executable">
            <criterion comment="/usr/bin/balsa is executable" negate="false" test_ref="oval:org.mitre.oval:tst:3150"/>
            <criterion comment="/usr/bin/balsa is executable" negate="false" test_ref="oval:org.mitre.oval:tst:3149"/>
            <criterion comment="/usr/bin/balsa is executable" negate="false" test_ref="oval:org.mitre.oval:tst:3148"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1996" version="3" class="vulnerability">
      <metadata>
        <title>Exchange 2003,SP2 Calendar Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Exchange Server</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0027"/>
        <description>Unspecified vulnerability in Microsoft Exchange allows remote attackers to execute arbitrary code via e-mail messages with crafted (1) vCal or (2) iCal Calendar properties.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-05-10T03:16:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-05-10T08:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:42.184-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.345-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:48:05.600-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:04.493-05:00">ACCEPTED</status_change>
            <modified comment="References registry value for Common Files directory due to multilingual support" date="2008-04-14T11:07:00.679-04:00">
              <contributor organization="GFI Software">Clifford Farrugia</contributor>
            </modified>
            <status_change date="2008-04-14T12:26:44.264-04:00">INTERIM</status_change>
            <status_change date="2008-05-05T04:00:15.037-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Exchange Server 2003,SP2 is installed." negate="false" test_ref="oval:org.mitre.oval:tst:1202"/>
        <criterion comment="cdoex.dll is less than 6.5.7650.29" negate="false" test_ref="oval:org.mitre.oval:tst:651"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1990" version="7" class="vulnerability">
      <metadata>
        <title>MSDTC Denial of Service Vulnerability (Win2K)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1184" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1184"/>
        <description>Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0, 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to cause a denial of service (crash) via a BuildContextW request with a large (1) UuidString or (2) GuidIn of a certain length, which causes an out-of-range memory access, aka the MSDTC Denial of Service Vulnerability.  NOTE: this is a variant of CVE-2005-2119.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-05-10T03:16:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-05-10T08:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:41.999-04:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:08.822-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:10.429-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1990 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:29.380-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:15.392-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="the version of Msdtctm.dll is less than 2000.2.3535.0" test_ref="oval:org.mitre.oval:tst:1074"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:199" version="8" class="vulnerability">
      <metadata>
        <title>Weak Encryption in RDP Protocol</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Remote Data Protocol (RDP)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0863" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0863"/>
        <description>Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption in RDP Protocol."</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified date="2005-03-07T12:00:00.000-04:00" comment="modified wrt-222 - changed pattern match">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-03-09T07:55:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-29T07:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2878" date="2010-11-29T16:13:00.904-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:04.221-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:39.390-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:07.963-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:14.604-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:2636 - Definitions for numerous CVEs" date="2012-03-27T14:22:00.237-04:00">
              <contributor organization="DTCC">Scott Quint</contributor>
            </modified>
            <status_change date="2012-03-27T14:37:33.872-04:00">INTERIM</status_change>
            <status_change date="2012-04-16T04:07:56.223-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Terminal Server Version" negate="false" test_ref="oval:org.mitre.oval:tst:2816"/>
          <criterion comment="File %windir%\system32\drivers\rdpwd.sys version is less than 5.0.2195.5880" negate="false" test_ref="oval:org.mitre.oval:tst:2815"/>
          <criterion comment="Patch Q324380 installed" negate="true" test_ref="oval:org.mitre.oval:tst:2814"/>
          <criterion comment="SP4 or later Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3073"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="RDP Enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2813"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1989" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the vuidmice(7M) STREAMS Modules May Lead to a Denial of Service (DoS) Condition</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5319" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5319"/>
        <description>Unspecified vulnerability in the vuidmice STREAMS modules in Sun Solaris 8, 9, and 10 allows local users with console (/dev/console) access to cause a denial of service ("unusable" system console) via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-10-10T07:52:08.000-04:00">
              <contributor organization="Opsware, Inc.">Nicholas Hansen</contributor>
            </submitted>
            <status_change date="2007-10-10T13:53:56.573-04:00">DRAFT</status_change>
            <status_change date="2007-10-25T13:04:40.350-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:04.274-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 103065">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 114154-02 or later installed" test_ref="oval:org.mitre.oval:tst:4419"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 103065">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 117419-03 or later installed" test_ref="oval:org.mitre.oval:tst:3534"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 103065">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 127751-01 or later installed" test_ref="oval:org.mitre.oval:tst:4460"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1985" version="5" class="vulnerability">
      <metadata>
        <title>CSS Cross-Domain Information Disclosure Vulnerability (WinS03)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-4089" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4089"/>
        <description>Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive information by using the @import directive to download files from other domains that are not valid Cascading Style Sheets (CSS) files, as demonstrated using Google Desktop, aka "CSSXSS" and "CSS Cross-Domain Information Disclosure Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:41.748-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:46.973-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:54.879-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:04.062-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:50.370-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:13.835-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="Win2K/XP/2003 is patched" negate="true" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.3790.536" negate="false" test_ref="oval:org.mitre.oval:tst:952"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1983" version="6" class="vulnerability">
      <metadata>
        <title>RASMAN Registry Corruption Vulnerability (WinS03)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2371" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2371"/>
        <description>Buffer overflow in the Remote Access Connection Manager service (RASMAN) service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted "RPC related requests," that lead to registry corruption and stack corruption, aka the "RASMAN Registry Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:41.454-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:46.133-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:57.492-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:03.663-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1983 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:48.596-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:13.339-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of rasmans.dll is less than 5.2.3790.529" test_ref="oval:org.mitre.oval:tst:757"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1982" version="1" class="vulnerability">
      <metadata>
        <title>Apache Connection Blocking Denial Of Service Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0174"/>
        <description>Apache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when using multiple listening sockets on certain platforms, allows remote attackers to cause a denial of service (blocked new connections) via a "short-lived connection on a rarely-accessed listening socket."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-14T01:13:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <modified date="2004-10-18T03:12:00.000-04:00" comment="Changed apache test to file test">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </modified>
            <modified date="2004-10-19T11:17:00.000-04:00" comment="Changed apache test to package test">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </modified>
            <status_change date="2004-10-20T02:35:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="OR" comment="Solaris 8 or 9 installed">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          </criteria>
          <criterion comment="Patch 116973-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:656"/>
          <criterion comment="Patch 113146-05 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:655"/>
          <criterion comment="Apache (SUNWapchu) installed" negate="false" test_ref="oval:org.mitre.oval:tst:653"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="Apache running (httpd)" negate="false" test_ref="oval:org.mitre.oval:tst:654"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1980" version="1" class="vulnerability">
      <metadata>
        <title>Multiple vulnerabilities in libfreetype, Xsun(1) and Xorg(1)</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1003" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1003"/>
        <description>Integer overflow in ALLOCATE_LOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server (xserver) 7.1-1.1.0, and other versions before 20070403, allows remote authenticated users to execute arbitrary code via a large expression, which results in memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-30T08:16:45.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-01T22:21:20.780-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:39.670-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:29.249-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 119067-07 or later installed" test_ref="oval:org.mitre.oval:tst:3167" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 119060-24 or later installed" test_ref="oval:org.mitre.oval:tst:3231" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 125720-03 or later installed" test_ref="oval:org.mitre.oval:tst:4003" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 112785-61 or later installed" test_ref="oval:org.mitre.oval:tst:3874" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 119059-25 or later installed" test_ref="oval:org.mitre.oval:tst:3577" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 119068-07 or later installed" test_ref="oval:org.mitre.oval:tst:3216" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 112786-50 or later installed" test_ref="oval:org.mitre.oval:tst:3471" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 124833-02 or later installed" test_ref="oval:org.mitre.oval:tst:3278" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:198" version="1" class="vulnerability">
      <metadata>
        <title>Automatic ActiveX Approval on Windows 2000 Low Memory</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0660" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0660"/>
        <description>The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls when the system is low on memory, which could allow remote attackers execute arbitrary code without user approval.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-16T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified date="2004-03-04T12:00:00.000-04:00" comment="Added the configuration check to see if downloading of signed ActiveX controls are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </modified>
            <status_change date="2004-03-25T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="File %windir%\system32\cryptui.dll version is less than 5.131.2195.6758" negate="false" test_ref="oval:org.mitre.oval:tst:2817"/>
          <criterion comment="Patch WindowsXP-KB823182-x86-ENU Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2841"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="downloading of signed ActiveX controls is enabled">
            <criteria operator="AND" comment="current user settings are being used and the downloading of signed ActiveX controls is enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="downloading of signed ActiveX controls is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2840"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and the downloading of signed ActiveX controls is enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="downloading of signed ActiveX controls is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2839"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1970" version="4" class="vulnerability">
      <metadata>
        <title>Off-by-one Error in fb_realpath()</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <product>Solaris Management Console (SMC)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0466" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0466"/>
        <description>Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow, including (1) STOR, (2) RETR, (3) APPE, (4) DELE, (5) MKD, (6) RMD, (7) STOU, or (8) RNTO.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-04-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-04-20T12:13:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-05-11T05:41:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="fixed the service_name entity used in the inetd_object" date="2007-04-10T15:14:00.011-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-04-10T15:15:14.122-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:21.868-04:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:53.799-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:18.853-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="FTP Server - Usr (SUNWftpu) installed" negate="false" test_ref="oval:org.mitre.oval:tst:661"/>
          <criterion comment="Patch 114564-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:660"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="inetd.conf contains in.ftpd" negate="false" test_ref="oval:org.mitre.oval:tst:659"/>
          <criterion comment="inetd running" negate="false" test_ref="oval:org.mitre.oval:tst:3135"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:197" version="7" class="vulnerability">
      <metadata>
        <title>IIS ISAPI Extension Indexing Service Buffer Overflow (Code Red)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0500" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0500"/>
        <description>Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as default.ida, as commonly exploited by Code Red.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-14T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified date="2004-08-04T12:00:00.000-04:00" comment="Modifed without comment">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </modified>
            <status_change date="2004-08-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected to use a forward slash as the separator in the key." date="2007-05-07T15:59:00.817-04:00">
              <contributor organization="Secure Elements, Inc.">Glenn Strickland</contributor>
            </modified>
            <status_change date="2007-05-07T16:03:31.923-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:35.420-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2884" date="2010-11-29T16:14:00.692-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:39.568-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:38.939-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:10.160-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:11.628-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="IIS major version equals 5" negate="false" test_ref="oval:org.mitre.oval:tst:3081"/>
          <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
          <criterion comment="File %windir%\system32\idq.dll version is less than 5.0.2195.3645" negate="false" test_ref="oval:org.mitre.oval:tst:2820"/>
          <criterion comment="Patch Q300972 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2819"/>
          <criterion comment="Patch Q301625 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3037"/>
          <criterion comment="Patch Q319733 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3095"/>
          <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
          <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
          <criterion comment="Windows 2000 Security Roll-up 1 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2990"/>
          <criterion comment="Win2K/XP/2003 service pack 3 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:3079"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="idq.dll mapping exists" negate="false" test_ref="oval:org.mitre.oval:tst:2818"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1966" version="1" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability in the in.iked(1M) Service May Lead To a Denial of Service (DoS)</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2989" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2989"/>
        <description>The libike library in Sun Solaris 9 before 20070529 contains a logic error related to a certain pointer, which allows remote attackers to cause a denial of service (in.iked daemon crash) by sending certain UDP packets with a source port different from 500.  NOTE: this issue might overlap CVE-2006-2298.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-06T11:47:00.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-06-06T14:28:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-06-22T08:57:42.447-04:00">INTERIM</status_change>
            <status_change date="2007-07-10T21:08:50.458-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="OR">
          <criteria operator="AND" comment="Solaris 9 (SPARC)" negate="false">
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3172"/>
            <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
            <criterion comment="Patch 113451-13 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3350"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (x86)" negate="false">
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3172"/>
            <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
            <criterion comment="Patch 114435-12 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3373"/>
          </criteria>
        </criteria>
        <criterion comment="/etc/inet/ike/config exists" negate="false" test_ref="oval:org.mitre.oval:tst:3233"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1963" version="7" class="vulnerability">
      <metadata>
        <title>Windows XP IE HTML Help ActiveX control Cross Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1043" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1043"/>
        <description>Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help ActiveX Control (hhctrl.ocx) to open a Help popup window containing the PCHealth tools.htm file in the local zone and injecting Javascript to be executed, as demonstrated using "writehta.txt" and the ADODB recordset, which saves a .HTA file to the local system, aka the "HTML Help ActiveX control Cross Domain Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-03-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Matthew Burton</contributor>
            </submitted>
            <status_change date="2005-04-12T08:26:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-27T12:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed windows xp product" date="2009-05-25T10:32:00.713-04:00">
              <contributor organization="The MITRE Corporation">Brendan Miles</contributor>
            </modified>
            <status_change date="2009-05-25T10:32:00.713-04:00">INTERIM</status_change>
            <status_change date="2009-06-15T04:00:35.832-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2656" date="2010-11-29T16:12:00.873-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:13:00.777-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:38.543-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:30.187-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:10.588-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Software section">
          <criterion comment="Windows XP is installed" test_ref="oval:org.mitre.oval:tst:2838"/>
          <criterion negate="true" comment="the patch kb890175 is installed" test_ref="oval:org.mitre.oval:tst:972"/>
          <criteria operator="OR" comment="A vulnerable version of hhctrl.ocx exists on Windows XP">
            <criteria operator="AND" comment="Windows XP SP1 or earlier and version of hhctrl.ocx is less than 5.2.3790.233">
              <criterion negate="true" comment="Win2K/XP/2003 service pack 2 (or later) is installed" test_ref="oval:org.mitre.oval:tst:2837"/>
              <criterion comment="the version of hhctrl.ocx is less than 5.2.3790.233" test_ref="oval:org.mitre.oval:tst:971"/>
            </criteria>
            <criteria operator="AND" comment="Windows XP SP2 or later and version of hhctrl.ocx is less than 5.2.3790.1280">
              <criterion comment="Win2K/XP/2003 service pack 2 (or later) is installed" test_ref="oval:org.mitre.oval:tst:2837"/>
              <criterion comment="the version of hhctrl.ocx is less than 5.2.3790.1280" test_ref="oval:org.mitre.oval:tst:664"/>
            </criteria>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Configuration section">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion negate="true" comment="use machine settings rather than individual user settings" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:196" version="8" class="vulnerability">
      <metadata>
        <title>HP-UX 11.11 Path MTU Discovery Attack Vulnerability</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1060" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1060"/>
        <description>Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:48:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:40.215-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:43.584-04:00">ACCEPTED</status_change>
            <modified comment="Added title." date="2007-02-22T17:44:00.683-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-02-22T17:44:35.704-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:09.637-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:29.816-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:11.581-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:196 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:02.249-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:24.055-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:tst:3704 - HP-UX Security Advisories published in February 2014" date="2014-03-05T13:28:00.446-05:00">
              <contributor organization="Hewlett-Packard">Sushant Kumar Singh</contributor>
            </modified>
            <status_change date="2014-03-05T13:32:48.529-05:00">INTERIM</status_change>
            <status_change date="2014-03-24T04:01:16.817-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.11">
          <criteria operator="AND" comment="700 Series OS Release 11.11">
            <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:3443"/>
            <criterion comment="HP Release B.11.11" test_ref="oval:org.mitre.oval:tst:3704"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 11.11">
            <criterion comment="800-series HP" test_ref="oval:org.mitre.oval:tst:4124"/>
            <criterion comment="HP Release B.11.11" test_ref="oval:org.mitre.oval:tst:3704"/>
          </criteria>
        </criteria>
        <criterion negate="true" comment="Patch PHNE_33159 is installed" test_ref="oval:org.mitre.oval:tst:3779"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1957" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in NFS Client Module May Lead to a Denial of Service Condition</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2882" ref_url="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-2882"/>
        <description>Unspecified vulnerability in the NFS client module in Sun Solaris 8 through 10 before 20070524, when operating as an NFS server, allows remote attackers to cause a denial of service (crash) via certain Access Control List (acl) packets.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-15T09:00:00.000-04:00">
              <contributor organization="Opsware, Inc.">John Wregglesworth</contributor>
            </submitted>
            <status_change date="2007-06-15T11:20:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-07-03T14:05:57.850-04:00">INTERIM</status_change>
            <status_change date="2007-07-18T15:57:51.521-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Solaris 8 (SPARC)" negate="false">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3437"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criterion comment="Patch 116959-16 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3570"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86)" negate="false">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3437"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criterion comment="Patch 116960-16 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:4073"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC)" negate="false">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3172"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criterion comment="Patch 113318-29 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3914"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86)" negate="false">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3172"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criterion comment="Patch 117468-15 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3605"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC)" negate="false">
          <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3680"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criterion comment="Patch 124258-04 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3213"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86)" negate="false">
          <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3680"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criterion comment="Patch 124259-04 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3414"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1955" version="3" class="vulnerability">
      <metadata>
        <title>Mozilla Cross-site Scripting Using .valueOf.call()</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1731" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1731"/>
        <description>Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 returns the Object class prototype instead of the global window object when (1) .valueOf.call or (2) .valueOf.apply are called without any arguments, which allows remote attackers to conduct cross-site scripting (XSS) attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-05-07T09:05:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-05-10T08:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:39.953-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:1133" date="2007-02-26T08:08:00.208-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-26T08:09:14.353-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:1135" date="2007-02-26T08:21:00.993-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:1136" date="2007-02-26T08:24:00.848-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:1138" date="2007-02-26T08:25:00.405-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:2283" date="2007-02-26T08:29:00.407-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:2284" date="2007-02-26T08:30:00.724-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:17:09.407-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:881" date="2007-04-23T12:05:00.811-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:12:52.268-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:882" date="2007-04-23T12:05:00.939-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:883" date="2007-04-23T12:05:00.804-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:1385" date="2007-04-23T12:05:00.430-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:11:03.043-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.7 or earlier is installed">
          <criterion comment="Mozilla Firefox version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1268"/>
          <criterion comment="Firefox version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1267"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Thunderbird version 1.0.7 or earlier is installed">
          <criterion comment="Mozilla Thunderbird version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1266"/>
          <criterion comment="Mozilla Thunderbird version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1265"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.12 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.12 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1264"/>
          <criterion comment="Mozilla Suite version 1.7.12 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1263"/>
        </criteria>
        <criteria operator="AND" comment="A pre-release of SeaMonkey 1.0 is installed">
          <criterion comment="A pre-release of SeaMonkey 1.0 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2439"/>
          <criterion comment="A pre-release of SeaMonkey 1.0 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2438"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1950" version="3" class="vulnerability">
      <metadata>
        <title>Microsoft Outlook Express v6,SP1 Malformed Email Header Denial of Service</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Outlook Express</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0215" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0215"/>
        <description>Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service (application crash) via a malformed e-mail header.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-08-26T08:05:00.000-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </submitted>
            <status_change date="2004-08-26T08:14:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-09-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-29T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:533: changed Hive from HKEY_CLASSES_ROOT to HKEY_LOCAL_MACHINE.  Implemented by Harvey Rubinovitz." date="2007-01-22T01:12:00.977-05:00">
              <contributor organization="GFI Software">Daniel Tarnu</contributor>
            </modified>
            <status_change date="2007-01-22T01:12:58.739-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:03.348-05:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.788-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:52:38.963-04:00">INTERIM</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.053-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-11-13T12:01:03.958-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Outlook Express 6 SP1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1355"/>
          <criterion comment="the version of inetcomm.dll is less than 6.0.2800.1441" negate="false" test_ref="oval:org.mitre.oval:tst:669"/>
          <criterion comment="the patch kb823353 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:668"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="all users have the preview pane disabled" negate="true" test_ref="oval:org.mitre.oval:tst:667"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:195" version="2" class="vulnerability" deprecated="true">
      <metadata>
        <title>Solaris 8 KCMS Arbitrary File Access Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>kcms_server</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0027"/>
        <description>Directory traversal vulnerability in Sun Kodak Color Management System (KCMS) library service daemon (kcms_server) allows remote attackers to read arbitrary files via the KCS_OPEN_PROFILE procedure.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-01-24T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified comment="fixed the service_name entity used in the inetd_object" date="2007-04-10T15:15:00.237-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-04-10T15:15:57.654-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:21.718-04:00">ACCEPTED</status_change>
            <modified comment="Deprecated. Superseded by def:2592 (same CVE-2003-0027)." date="2008-12-19T11:22:00.240-05:00">
              <contributor organization="Secure Elements, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2008-12-19T11:23:32.257-05:00">DEPRECATED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Software section">
          <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="File kcms_server exists" test_ref="oval:org.mitre.oval:tst:2931"/>
        </criteria>
        <criteria operator="AND" comment="Configuration section">
          <criterion comment="inetd.conf contains kcms_server" test_ref="oval:org.mitre.oval:tst:2930"/>
          <criterion comment="inetd running" test_ref="oval:org.mitre.oval:tst:3135"/>
          <criteria operator="OR" comment="File kcms_server executable and SUID or SGID">
            <criterion comment="File kcms_server executable and SUID or SGID" test_ref="oval:org.mitre.oval:tst:2929"/>
            <criterion comment="File kcms_server executable and SUID or SGID" test_ref="oval:org.mitre.oval:tst:2928"/>
            <criterion comment="File kcms_server executable and SUID or SGID" test_ref="oval:org.mitre.oval:tst:2927"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1949" version="5" class="vulnerability">
      <metadata>
        <title>ActiveX Control Memory Corruption Vulnerability (WinS03)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2383" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2383"/>
        <description>Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code via "unexpected data" related to "parameter validation" in the DXImageTransform.Microsoft.Light ActiveX control, which causes Internet Explorer to crash in a way that enables the code execution.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:39.825-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:43.166-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:55.236-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:03.213-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:43:50.938-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:09.831-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="Win2K/XP/2003 is patched" negate="true" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.3790.536" negate="false" test_ref="oval:org.mitre.oval:tst:952"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1943" version="2" class="vulnerability">
      <metadata>
        <title>IE .chm Directory Traversal Windows 2000 Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>HTML Help Facility</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1041" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1041"/>
        <description>Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL containing ".." (dot dot) sequences and a filename that ends in "::" which is treated as a .chm file even if it does not have a .chm extension.  NOTE: this bug may overlap CVE-2004-0475.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-14T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-08-04T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-08-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected obj:964. Changed registry key name from a pattern match of .* to nil." date="2007-02-12T13:46:00.470-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T13:47:37.482-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:08.910-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="the version of itss.dll is less than 5.2.3790.185" negate="false" test_ref="oval:org.mitre.oval:tst:1406"/>
          <criterion comment="the patch kb840315 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1405"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="HTML Help is registered" negate="true" test_ref="oval:org.mitre.oval:tst:1404"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1941" version="1" class="vulnerability">
      <metadata>
        <title>Two Security Vulnerabilities in Solaris 8 Role Based Access Control (rbac(5)) may Allow Unauthorized Remote Access</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4395" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4395"/>
        <description>Multiple unspecified vulnerabilities in the Role Based Access Control (RBAC) functionality in Sun Solaris 8 allow remote attackers who know the password for a role to gain privileges via that role.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-21T07:46:29.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-23T14:07:45.066-04:00">DRAFT</status_change>
            <status_change date="2007-09-10T14:45:26.279-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:42.671-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="Software Section">
          <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 103029" negate="false">
            <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
            <criterion comment="Patch 127033-01 or later installed" test_ref="oval:org.mitre.oval:tst:3566" negate="true"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 103029" negate="false">
            <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
            <criterion comment="Patch 127034-01 or later installed" test_ref="oval:org.mitre.oval:tst:3705" negate="true"/>
          </criteria>
        </criteria>
        <criterion comment="Some role has been created on the system" test_ref="oval:org.mitre.oval:tst:3659" negate="false"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1933" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the Solaris 10 Virtual File System (VFS) may Lead to a Denial of Service (DoS) Condition</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5367" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5367"/>
        <description>Unspecified vulnerability in the Virtual File System (VFS) in Sun Solaris 10 allows local users to cause a denial of service (kernel memory consumption) via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-10-12T07:38:45.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-10-15T18:16:19.589-04:00">DRAFT</status_change>
            <status_change date="2007-11-02T07:17:33.539-04:00">INTERIM</status_change>
            <status_change date="2007-11-19T04:00:45.447-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 103088" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 127111-01 or later installed" test_ref="oval:org.mitre.oval:tst:3557" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 103088" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 127112-01 or later installed" test_ref="oval:org.mitre.oval:tst:4169" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:193" version="2" class="vulnerability">
      <metadata>
        <title>KDM pam_setcred Privilege Escalation Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>KDM</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0690" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0690"/>
        <description>KDM in KDE 3.1.3 and earlier does not verify whether the pam_setcred function call succeeds, which may allow attackers to gain root privileges by triggering error conditions within PAM modules, as demonstrated in certain configurations of the MIT pam_krb5 module.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-21T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-05T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:36.443-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:21.414-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="kdebase version is less than 3.1-15" negate="false" test_ref="oval:org.mitre.oval:tst:2826"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/bin/kdm is executable">
            <criterion comment="/usr/bin/kdm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2825"/>
            <criterion comment="/usr/bin/kdm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2824"/>
            <criterion comment="/usr/bin/kdm is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2823"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1924" version="8" class="vulnerability">
      <metadata>
        <title>ActiveX Control Memory Corruption Vulnerability (Win2K)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2383" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2383"/>
        <description>Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code via "unexpected data" related to "parameter validation" in the DXImageTransform.Microsoft.Light ActiveX control, which causes Internet Explorer to crash in a way that enables the code execution.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:38.543-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:40.378-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:43.835-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:02.817-05:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:14.118-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:08.440-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:43:56.170-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:07.075-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:36.733-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:25.968-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
        <criterion comment="the version of mshtml.dll is less than 5.0.3841.1900" negate="false" test_ref="oval:org.mitre.oval:tst:957"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1921" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability With NIS server ypserv(1M) May Allow a Denial of Service (DoS) to Occur</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3664" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3664"/>
        <description>Unspecified vulnerability in NIS server on Sun Solaris 8, 9, and 10 allows local and remote attackers to cause a denial of service (ypserv hang) via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-10T12:25:27.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-13T13:57:14.232-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:29.026-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:42.566-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102462" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 109328-06 or later installed" test_ref="oval:org.mitre.oval:tst:3189" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102462" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 113579-09 or later installed" test_ref="oval:org.mitre.oval:tst:3489" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102462" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 123186-01 or later installed" test_ref="oval:org.mitre.oval:tst:3820" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102462" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 109329-06 or later installed" test_ref="oval:org.mitre.oval:tst:4121" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102462" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 114342-09 or later installed" test_ref="oval:org.mitre.oval:tst:3508" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102462" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 122078-02 or later installed" test_ref="oval:org.mitre.oval:tst:3928" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1920" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in Sun Remote Services (SRS) Net Connect Software</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2617" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2617"/>
        <description>srsexec in Sun Remote Services (SRS) Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file permissions when opening files, which allows local users to read the first line of arbitrary files via the -d and -v options.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-10T12:25:19.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-13T13:57:11.321-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:28.914-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:42.438-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102891" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 125713-01 or later installed" test_ref="oval:org.mitre.oval:tst:3206" negate="true"/>
          <criterion comment="SRS Net Connect Software 3.2.3 is installed" test_ref="oval:org.mitre.oval:tst:4171"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102891" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 125713-01 or later installed" test_ref="oval:org.mitre.oval:tst:3206" negate="true"/>
          <criterion comment="SRS Net Connect Software 3.2.3 is installed" test_ref="oval:org.mitre.oval:tst:4171"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102891" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 125713-01 or later installed" test_ref="oval:org.mitre.oval:tst:3206" negate="true"/>
          <criterion comment="SRS Net Connect Software 3.2.3 is installed" test_ref="oval:org.mitre.oval:tst:4171"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102891" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 123870-02 or later installed" test_ref="oval:org.mitre.oval:tst:4014" negate="true"/>
          <criterion comment="SRS Net Connect Software 3.2.4 is installed" test_ref="oval:org.mitre.oval:tst:3230"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102891" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 123870-02 or later installed" test_ref="oval:org.mitre.oval:tst:4014" negate="true"/>
          <criterion comment="SRS Net Connect Software 3.2.4 is installed" test_ref="oval:org.mitre.oval:tst:3230"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102891" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 123870-02 or later installed" test_ref="oval:org.mitre.oval:tst:4014" negate="true"/>
          <criterion comment="SRS Net Connect Software 3.2.4 is installed" test_ref="oval:org.mitre.oval:tst:3230"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:192" version="3" class="vulnerability">
      <metadata>
        <title>Solaris 8 CDE ToolTalk Database Heap Corruption Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>Common Desktop Environment</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0679" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0679"/>
        <description>Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code via an argument to the _TT_CREATE_FILE procedure.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-01-29T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified comment="fixed the service_name entity used in the inetd_object" date="2007-04-10T15:17:00.627-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-04-10T15:17:28.508-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:20.651-04:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:54.513-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:18.506-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="File rpc.ttdbserverd exists" negate="false" test_ref="oval:org.mitre.oval:tst:3105"/>
          <criterion comment="Patch 110286-10 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:2827"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="inetd.conf contains rpc.ttdbserverd" negate="false" test_ref="oval:org.mitre.oval:tst:3103"/>
          <criterion comment="inetd running" negate="false" test_ref="oval:org.mitre.oval:tst:3135"/>
          <criteria operator="OR" comment="File rpc.ttdbserverd executable">
            <criterion comment="File rpc.ttdbserverd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3102"/>
            <criterion comment="File rpc.ttdbserverd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3101"/>
            <criterion comment="File rpc.ttdbserverd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3100"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:19136" version="9" class="vulnerability">
      <metadata>
        <title>Cross-site scripting vulnerability in Microsoft SharePoint (CVE-2013-3180) - MS13-067</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft SharePoint Foundation 2010</product>
          <product>Microsoft SharePoint Foundation 2013</product>
          <product>Microsoft SharePoint Server 2010</product>
          <product>Microsoft SharePoint Server 2013</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2013-3180" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3180"/>
        <description>Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 and SP2 and 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted POST request, aka "POST XSS Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2013-10-16T14:45:34">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-10-23T11:48:44.387-04:00">DRAFT</status_change>
            <status_change date="2013-11-11T04:01:51.214-05:00">INTERIM</status_change>
            <status_change date="2013-11-26T13:49:27.136-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:19136 - updated to check proper version as per bulletin." date="2014-01-16T10:58:00.923-05:00">
              <contributor organization="SecPod Technologies">Pooja Shetty</contributor>
            </modified>
            <status_change date="2014-01-16T10:59:41.814-05:00">INTERIM</status_change>
            <status_change date="2014-02-03T04:01:12.485-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:var:1390 - November 2014 bulletins." date="2014-11-17T17:25:00.386-05:00">
              <contributor organization="SecPod Technologies">Kumarswamy S</contributor>
            </modified>
            <status_change date="2014-11-17T17:29:49.370-05:00">INTERIM</status_change>
            <status_change date="2014-12-08T04:00:16.378-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:var:1569 - MS Bulletins - May 2015" date="2015-05-28T14:06:00.511-04:00">
              <contributor organization="SecPod Technologies">Kumarswamy S</contributor>
            </modified>
            <status_change date="2015-05-28T14:09:56.946-04:00">INTERIM</status_change>
            <status_change date="2015-06-15T04:00:11.388-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="foundation 2010/version">
          <criterion comment="Check if the version of onetutil.dll is less than 14.0.7105.5000" test_ref="oval:org.mitre.oval:tst:87199"/>
          <criteria operator="OR" comment="foundation 2010 sp1/sp2">
            <extend_definition comment="Microsoft SharePoint Foundation 2010 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:15661"/>
            <extend_definition comment="Microsoft SharePoint Foundation 2010 Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:19047"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="sharepoint server 2010/version">
          <criteria operator="OR" comment="sharepoint server 2010 sp1/sp2">
            <extend_definition comment="Microsoft SharePoint Server 2010 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:15614"/>
            <extend_definition comment="Microsoft SharePoint Server 2010 Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:18921"/>
          </criteria>
          <criteria operator="OR" comment="either files versions">
            <criterion comment="Check if the version of microsoft.office.server.native.dll is less than 14.0.7005.1000" test_ref="oval:org.mitre.oval:tst:87074"/>
            <criterion comment="Check if the version of WdsrvWorker.dll is less than 14.0.6112.5000" test_ref="oval:org.mitre.oval:tst:87135"/>
            <criterion comment="Check if the version of xlsrv.dll is less than 14.0.7104.5000 (sharepoint server)" test_ref="oval:org.mitre.oval:tst:86965"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="foundation 2013/version">
          <criterion comment="Check if the version of Microsoft.office.server.native.dll is less than 15.0.4535.1000" test_ref="oval:org.mitre.oval:tst:87023"/>
          <extend_definition comment="Microsoft SharePoint Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:16325"/>
        </criteria>
        <criteria operator="AND" comment="sharepoint foundation 2013/version">
          <extend_definition comment="Microsoft SharePoint Foundation 2013 is installed" definition_ref="oval:org.mitre.oval:def:19090"/>
          <criterion comment="Check if the version of Onfda.dll is less than 15.0.4535.1000" test_ref="oval:org.mitre.oval:tst:86497"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:19090" version="3" class="inventory">
      <metadata>
        <title>Microsoft SharePoint Foundation 2013 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Vista</platform>
          <product>Microsoft SharePoint Foundation 2013</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:sharepoint_foundation:2013"/>
        <description>Microsoft SharePoint Foundation 2013 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2013-10-16T13:16:37">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-10-23T11:48:15.530-04:00">DRAFT</status_change>
            <status_change date="2013-11-11T04:01:44.863-05:00">INTERIM</status_change>
            <status_change date="2013-11-26T13:49:25.849-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Microsoft SharePoint Foundation 2013 is installed" test_ref="oval:org.mitre.oval:tst:87180"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:19047" version="3" class="inventory">
      <metadata>
        <title>Microsoft SharePoint Foundation 2010 Service Pack 2 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Vista</platform>
          <product>Microsoft SharePoint Foundation 2010</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:sharepoint_foundation:2010:sp2"/>
        <description>Microsoft SharePoint Foundation 2010 Service Pack 2 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2013-10-16T14:45:34">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-10-23T11:48:10.996-04:00">DRAFT</status_change>
            <status_change date="2013-11-11T04:01:34.923-05:00">INTERIM</status_change>
            <status_change date="2013-11-26T13:49:24.234-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft SharePoint Foundation 2010 is installed" definition_ref="oval:org.mitre.oval:def:12224"/>
        <criterion comment="Check if Microsoft SharePoint Foundation 2010 SP2 is installed" test_ref="oval:org.mitre.oval:tst:87020"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1911" version="8" class="vulnerability">
      <metadata>
        <title>MHT Memory Corruption Vulnerability (Win2K)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2385" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2385"/>
        <description>Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows user-assisted remote attackers to execute arbitrary code via a crafted web page that triggers memory corruption when it is saved as a multipart HTML (.mht) file.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:37.622-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:38.616-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:44.200-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:02.489-05:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:09.872-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:08.249-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:16.711-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:04.575-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:41.769-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:25.793-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
        <criterion comment="the version of mshtml.dll is less than 5.0.3841.1900" negate="false" test_ref="oval:org.mitre.oval:tst:957"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:19100" version="3" class="vulnerability">
      <metadata>
        <title>Denial of service vulnerability in Microsoft SharePoint (CVE-2013-3849) - MS13-067</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft SharePoint Server 2010</product>
          <product>Microsoft Office Web Apps</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2013-3849" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3849"/>
        <description>Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3847, CVE-2013-3848, and CVE-2013-3858.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-10-16T14:45:34">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-10-23T11:48:29.586-04:00">DRAFT</status_change>
            <status_change date="2013-11-11T04:01:48.195-05:00">INTERIM</status_change>
            <status_change date="2013-11-26T13:49:26.489-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="sharepoint server 2010/version">
          <extend_definition comment="Microsoft SharePoint Server 2010 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:15614"/>
          <criterion comment="Check if the version of WdsrvWorker.dll is less than 14.0.6112.5000" test_ref="oval:org.mitre.oval:tst:87135"/>
        </criteria>
        <criteria operator="AND" comment="web apps/version">
          <extend_definition comment="Microsoft Office Web Apps 2010 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:15860"/>
          <criterion comment="Check if the version of msoserver.dll is less than 14.0.7106.5000" test_ref="oval:org.mitre.oval:tst:87179"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1909" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerabilities in Solaris ld.so.1(1) may Lead to Execution of Arbitrary Code with Elevated Privileges</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6495" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6495"/>
        <description>Stack-based buffer overflow in ld.so.1 in Sun Solaris 8, 9, and 10 allows local users to execute arbitrary code via large precision padding values in a format string specifier in the format parameter of the doprf function.  NOTE: this issue normally does not cross privilege boundaries, except in cases of external introduction of malicious message files, or if it is leveraged with other vulnerabilities such as CVE-2006-6494.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-10T12:25:21.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-13T13:57:12.283-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:28.806-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:42.313-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102724" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 109147-42 or later installed" test_ref="oval:org.mitre.oval:tst:3395" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102724" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 112963-27 or later installed" test_ref="oval:org.mitre.oval:tst:3790" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102724" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 124922-01 or later installed" test_ref="oval:org.mitre.oval:tst:3922" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102724" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 109148-41 or later installed" test_ref="oval:org.mitre.oval:tst:3236" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102724" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 113986-22 or later installed" test_ref="oval:org.mitre.oval:tst:3819" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102724" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 124923-01 or later installed" test_ref="oval:org.mitre.oval:tst:3173" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1905" version="1" class="vulnerability">
      <metadata>
        <title>dtsession Buffer Overflow via HOME Envvar</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>Common Desktop Environment</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0092"/>
        <description>Heap-based buffer overflow in dtsession for Solaris 2.5.1 through Solaris 9 allows local users to gain root privileges via a long HOME environment variable.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-02-01T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-02-01T08:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 7,8,or 9 installed">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
        </criteria>
        <criterion comment="CDE Desktop Window Manager (SUNWdtwm) installed" negate="false" test_ref="oval:org.mitre.oval:tst:675"/>
        <criterion comment="Patch 107702-12 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:674"/>
        <criterion comment="Patch 109354-19 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:673"/>
        <criterion comment="Patch 114497-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:672"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1904" version="6" class="vulnerability">
      <metadata>
        <title>SMB Driver Elevation of Privilege Vulnerability (Win2K)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2373" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2373"/>
        <description>The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to execute arbitrary code by calling the MrxSmbCscIoctlOpenForCopyChunk function with the METHOD_NEITHER method flag and an arbitrary address, possibly for kernel memory, aka the "SMB Driver Elevation of Privilege Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:36.973-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:37.356-04:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:07.779-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:08.092-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1904 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:22.567-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:02.521-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="the version of mrxsmb.sys is less than 5.0.2195.7097" test_ref="oval:org.mitre.oval:tst:685"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1901" version="3" class="vulnerability">
      <metadata>
        <title>Mozilla Crashes with Evidence of Memory Corruption (CVE-2006-1724)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1724" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1724"/>
        <description>Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to DHTML.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-05-07T09:05:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-05-10T08:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:36.624-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:1133" date="2007-02-26T08:08:00.208-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-26T08:09:16.134-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:1135" date="2007-02-26T08:21:00.993-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:1136" date="2007-02-26T08:24:00.848-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:1138" date="2007-02-26T08:25:00.405-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:17:07.625-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:881" date="2007-04-23T12:05:00.811-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:12:54.286-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:882" date="2007-04-23T12:05:00.939-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:883" date="2007-04-23T12:05:00.804-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:11:01.149-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.7 or earlier is installed">
          <criterion comment="Mozilla Firefox version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1268"/>
          <criterion comment="Firefox version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1267"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Thunderbird version 1.0.7 or earlier is installed">
          <criterion comment="Mozilla Thunderbird version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1266"/>
          <criterion comment="Mozilla Thunderbird version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1265"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.12 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.12 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1264"/>
          <criterion comment="Mozilla Suite version 1.7.12 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1263"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:190" version="7" class="vulnerability">
      <metadata>
        <title>ActiveX Certificate Enrollment Unauthorized Remote Certificate Deletion</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Certificate Enrollment Control</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0699" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0699"/>
        <description>Unknown vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium, Windows NT 4.0, Windows 2000, and Windows XP allow remote attackers to delete digital certificates on a user's system via HTML.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-03-07T12:00:00.000-04:00" comment="modified wrt-222 - changed pattern match">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-03-09T07:55:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-29T07:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2878" date="2010-11-29T16:13:00.904-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:04.658-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:38.221-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:08.911-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:02.180-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="the version of xenroll.dll is less than 5.131.3659.0" negate="false" test_ref="oval:org.mitre.oval:tst:2831"/>
          <criterion comment="Patch Q323172 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2830"/>
          <criterion comment="SP4 or later Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3073"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="ActiveX Enabled">
            <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
            <criterion comment="ActiveX Enabled In At Least One Zone" negate="false" test_ref="oval:org.mitre.oval:tst:2829"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:19" version="8" class="vulnerability">
      <metadata>
        <title>IE Cross-Site Scripting</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0189" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0189"/>
        <description>Cross-site scripting vulnerability in Internet Explorer 6.0 allows remote attackers to execute scripts in the Local Computer zone via a URL that exploits a local HTML resource file, aka the "Cross-Site Scripting in Local HTML Resource" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-27T05:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="Changed IE registry test to wrt-18">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-07-03T12:56:00.000-04:00" comment="Added negate=true attribute to criteria sub-block to fix conversion error from OVAL 4.2 to OVAL 5.0">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-07-03T12:56:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:29:04.771-04:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:09.603-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:07.349-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:36.273-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:01.640-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:42.879-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:25.465-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="the version of mshtml.dll is less than 6.0.2716.2200" negate="false" test_ref="oval:org.mitre.oval:tst:3086"/>
        <criterion comment="the patch q321232 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3119"/>
        <criterion comment="the patch q323759 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3118"/>
        <criterion comment="the patch q328970 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3117"/>
        <criterion comment="the patch q324929 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3116"/>
        <criterion comment="the patch q810847 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3115"/>
        <criterion comment="the patch q813489 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3114"/>
        <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed" negate="true">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:18988" version="3" class="vulnerability">
      <metadata>
        <title>Denial of service vulnerability in Microsoft SharePoint (CVE-2013-3847) - MS13-067</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft SharePoint Server 2010</product>
          <product>Microsoft Office Web Apps</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2013-3847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3847"/>
        <description>Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3848, CVE-2013-3849, and CVE-2013-3858.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-10-16T14:45:34">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-10-23T11:48:26.744-04:00">DRAFT</status_change>
            <status_change date="2013-11-11T04:01:17.125-05:00">INTERIM</status_change>
            <status_change date="2013-11-26T13:49:20.571-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="sharepoint server 2010/version">
          <extend_definition comment="Microsoft SharePoint Server 2010 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:15614"/>
          <criterion comment="Check if the version of WdsrvWorker.dll is less than 14.0.6112.5000" test_ref="oval:org.mitre.oval:tst:87135"/>
        </criteria>
        <criteria operator="AND" comment="web apps/version">
          <extend_definition comment="Microsoft Office Web Apps 2010 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:15860"/>
          <criterion comment="Check if the version of msoserver.dll is less than 14.0.7106.5000" test_ref="oval:org.mitre.oval:tst:87179"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:18942" version="3" class="vulnerability">
      <metadata>
        <title>Word memory corruption vulnerability in Microsoft SharePoint (CVE-2013-3857) - MS13-067</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft SharePoint Server 2010</product>
          <product>Microsoft Office Web Apps</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2013-3857" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3857"/>
        <description>Microsoft Word Automation Services in SharePoint Server 2010 SP1 and SP2, Word Web App 2010 SP1 and SP2 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1 and SP2, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2013-10-16T14:45:34">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-10-23T11:48:36.867-04:00">DRAFT</status_change>
            <status_change date="2013-11-11T04:01:04.763-05:00">INTERIM</status_change>
            <status_change date="2013-11-26T13:49:18.228-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="sharepoint server 2010/version">
          <criteria operator="OR" comment="sharepoint server 2010 sp1/sp2">
            <extend_definition comment="Microsoft SharePoint Server 2010 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:15614"/>
            <extend_definition comment="Microsoft SharePoint Server 2010 Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:18921"/>
          </criteria>
          <criterion comment="Check if the version of WdsrvWorker.dll is less than 14.0.6112.5000" test_ref="oval:org.mitre.oval:tst:87135"/>
        </criteria>
        <criteria operator="AND" comment="web apps/version">
          <criteria operator="OR" comment="office web apps sp1/sp2">
            <extend_definition comment="Microsoft Office Web Apps 2010 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:15860"/>
            <extend_definition comment="Microsoft Office Web Apps 2010 Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:19186"/>
          </criteria>
          <criterion comment="Check if the version of msoserver.dll is less than 14.0.7106.5000" test_ref="oval:org.mitre.oval:tst:87179"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:19186" version="6" class="inventory">
      <metadata>
        <title>Microsoft Office Web Apps 2010 Service Pack 2 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Office Web Apps 2010</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:office_web_apps:2010:sp2"/>
        <description>Microsoft Office Web Apps 2010 Service Pack 2 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2013-10-16T14:45:34">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-10-23T11:48:16.599-04:00">DRAFT</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:26572 - '\' precedding '_' removed in object regex;un-deprecated registry state" date="2013-11-08T09:48:00.143-05:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-11-26T13:49:28.297-05:00">INTERIM</status_change>
            <status_change date="2013-12-16T04:01:31.088-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:26572 - In some &quot;pattern match&quot; strings added &quot;\&quot; before &quot;.&quot; to clarify if &quot;point&quot; or &quot;any symbol&quot; needed." date="2014-07-28T18:11:00.493-04:00">
              <contributor organization="ALTX-SOFT">Evgeniy Pavlov</contributor>
            </modified>
            <status_change date="2014-07-28T18:14:47.701-04:00">INTERIM</status_change>
            <status_change date="2014-08-18T04:02:07.926-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft Office Web Apps 2010 is installed" definition_ref="oval:org.mitre.oval:def:15787"/>
        <criterion comment="Check if Microsoft Office Web Apps 2010 SP2 is installed" test_ref="oval:org.mitre.oval:tst:86576"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:18921" version="5" class="inventory">
      <metadata>
        <title>Microsoft SharePoint Server 2010 Service Pack 2 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft SharePoint Server 2010</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:sharepoint_server:2010:sp2"/>
        <description>Microsoft SharePoint Server 2010 SP2 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2013-10-16T14:45:34">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-10-23T11:48:12.179-04:00">DRAFT</status_change>
            <status_change date="2013-11-11T04:00:58.881-05:00">INTERIM</status_change>
            <status_change date="2013-11-26T13:49:16.818-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:23979 - ms14-001, new registry tst to detect SP's properly, def:18921 15614 updated to check display version" date="2014-01-21T16:50:00.071-05:00">
              <contributor organization="SecPod Technologies">Pooja Shetty</contributor>
            </modified>
            <status_change date="2014-01-21T17:03:44.673-05:00">INTERIM</status_change>
            <status_change date="2014-02-10T04:00:10.747-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft Office SharePoint Server 2010 is installed." definition_ref="oval:org.mitre.oval:def:12880"/>
        <criterion comment="Check if Microsoft SharePoint 2010 SP2 is installed" test_ref="oval:org.mitre.oval:tst:86608"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1893" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in Solaris 10 Link Aggregation may Allow Local Users Total Access to Network Packets</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5013" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5013"/>
        <description>Sun Solaris 10 before patch 118855-16 (20060925), when run on x64 systems using IPv6, allows remote attackers to cause a denial of service (kernel panic) via crafted IPv6 packets.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-10T12:25:23.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-13T13:57:13.177-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:28.723-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:42.219-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102606" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 118833-23 or later installed" test_ref="oval:org.mitre.oval:tst:3263" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102606" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 118855-19 or later installed" test_ref="oval:org.mitre.oval:tst:3362" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1892" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerabilities in the Solaris Trusted Extensions "labeld" Service May Lead to a Denial of Service (DoS) Condition</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5368" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5368"/>
        <description>Multiple unspecified vulnerabilities in labeld in Trusted Extensions in Sun Solaris 10 allow local users to cause a denial of service (multiple application hang) via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-10-12T07:38:45.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-10-15T18:16:19.852-04:00">DRAFT</status_change>
            <status_change date="2007-11-02T07:17:32.943-04:00">INTERIM</status_change>
            <status_change date="2007-11-19T04:00:43.393-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 103109" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 126448-04 or later installed" test_ref="oval:org.mitre.oval:tst:4307" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 103109" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 126449-04 or later installed" test_ref="oval:org.mitre.oval:tst:4545" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1890" class="vulnerability" version="2">
      <metadata>
        <title>MIME Decoding Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <product>Microsoft Exchange Server</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0213" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0213"/>
        <description>Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 does not properly decode certain MIME encoded e-mails, which allows remote attackers to execute arbitrary code via a crafted base64-encoded MIME e-mail message.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-05-09T10:04:48">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2007-05-09T12:53:06-04:00">DRAFT</status_change>
            <status_change date="2007-05-31T15:26:37.157-04:00">INTERIM</status_change>
            <status_change date="2007-06-15T11:07:36.641-04:00">ACCEPTED</status_change>
            <modified comment="References registry value for Common Files directory due to multilingual support" date="2008-04-14T11:07:00.679-04:00">
              <contributor organization="GFI Software">Clifford Farrugia</contributor>
            </modified>
            <status_change date="2008-04-14T12:26:45.478-04:00">INTERIM</status_change>
            <status_change date="2008-05-05T04:00:14.460-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria comment="Microsoft Exchange 2000 Server Service Pack 3" operator="AND">
          <extend_definition comment="Microsoft Exchange 2000 Server Service Pack 3 is installed" definition_ref="oval:org.mitre.oval:def:1858"/>
          <criterion comment="the version of Cdoex.dll is less than 6.0.6619.12" test_ref="oval:org.mitre.oval:tst:3975"/>
        </criteria>
        <criteria comment="Microsoft Exchange Server 2003 Service Pack 1" operator="AND">
          <extend_definition comment="Microsoft Exchange Server 2003 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:1672"/>
          <criterion comment="the version of Cdoex.dll is less than 6.5.7235.2" test_ref="oval:org.mitre.oval:tst:3925"/>
        </criteria>
        <criteria comment="Microsoft Exchange Server 2003 Service Pack 2" operator="AND">
          <extend_definition comment="Microsoft Exchange Server 2003 Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:1869"/>
          <criterion comment="the version of Cdoex.dll is less than 6.5.7652.24" test_ref="oval:org.mitre.oval:tst:3618"/>
        </criteria>
        <criteria comment="Microsoft Exchange Server 2007" operator="AND">
          <extend_definition comment="Microsoft Exchange Server 2007 is installed" definition_ref="oval:org.mitre.oval:def:1641"/>
          <criterion comment="the version of Cdoex.dll is less than 8.0.709.0" test_ref="oval:org.mitre.oval:tst:4122"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:189" version="6" class="vulnerability">
      <metadata>
        <title>Network Share Provider Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>SMB (Server Message Block)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0724" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0724"/>
        <description>Buffer overflow in SMB (Server Message Block) protocol in Microsoft Windows NT, Windows 2000, and Windows XP allows attackers to cause a denial of service (crash) via a SMB_COM_TRANSACTION packet with a request for the (1) NetShareEnum, (2) NetServerEnum2, or (3) NetServerEnum3, aka "Unchecked Buffer in Network Share Provider Can Lead to Denial of Service".</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <modified date="2005-03-07T12:00:00.000-04:00" comment="modified wrt-222 - changed pattern match">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-03-09T07:55:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-29T07:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2878" date="2010-11-29T16:13:00.904-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:04.353-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:37.891-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:00.893-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:02:00.701-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="the version of xactsrv.dll is less than 5.0.2195.5971" negate="false" test_ref="oval:org.mitre.oval:tst:2834"/>
          <criterion comment="Patch Q326830 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2833"/>
          <criterion comment="SP4 or later Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3073"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="Lanman enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2832"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1887" version="3" class="vulnerability">
      <metadata>
        <title>Mozilla Cross-site Scripting through window.controllers</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1732" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1732"/>
        <description>Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to bypass same-origin protections and conduct cross-site scripting (XSS) attacks via unspecified vectors involving the window.controllers array.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-05-07T09:05:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-05-10T08:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:36.188-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:1133" date="2007-02-26T08:08:00.208-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-26T08:09:16.824-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:1135" date="2007-02-26T08:21:00.993-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:1136" date="2007-02-26T08:24:00.848-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:1138" date="2007-02-26T08:25:00.405-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:2283" date="2007-02-26T08:29:00.407-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:2284" date="2007-02-26T08:30:00.724-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:17:07.092-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:881" date="2007-04-23T12:05:00.811-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:12:55.064-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:882" date="2007-04-23T12:05:00.939-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:883" date="2007-04-23T12:05:00.804-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:1385" date="2007-04-23T12:05:00.430-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:11:00.552-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.7 or earlier is installed">
          <criterion comment="Mozilla Firefox version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1268"/>
          <criterion comment="Firefox version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1267"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Thunderbird version 1.0.7 or earlier is installed">
          <criterion comment="Mozilla Thunderbird version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1266"/>
          <criterion comment="Mozilla Thunderbird version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1265"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.12 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.12 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1264"/>
          <criterion comment="Mozilla Suite version 1.7.12 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1263"/>
        </criteria>
        <criteria operator="AND" comment="A pre-release of SeaMonkey 1.0 is installed">
          <criterion comment="A pre-release of SeaMonkey 1.0 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2439"/>
          <criterion comment="A pre-release of SeaMonkey 1.0 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2438"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:18801" version="3" class="vulnerability">
      <metadata>
        <title>Memory corruption vulnerability in Microsoft SharePoint (CVE-2013-3858) - MS13-067</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Office Web Apps</product>
          <product>Microsoft SharePoint Server 2010</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2013-3858" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3858"/>
        <description>Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3847, CVE-2013-3848, and CVE-2013-3849.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-10-16T14:45:34">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-10-23T11:48:19.228-04:00">DRAFT</status_change>
            <status_change date="2013-11-11T04:00:36.426-05:00">INTERIM</status_change>
            <status_change date="2013-11-26T13:49:11.638-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="sharepoint server 2010/version">
          <extend_definition comment="Microsoft SharePoint Server 2010 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:15614"/>
          <criterion comment="Check if the version of WdsrvWorker.dll is less than 14.0.6112.5000" test_ref="oval:org.mitre.oval:tst:87135"/>
        </criteria>
        <criteria operator="AND" comment="web apps/version">
          <extend_definition comment="Microsoft Office Web Apps 2010 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:15860"/>
          <criterion comment="Check if the version of msoserver.dll is less than 14.0.7106.5000" test_ref="oval:org.mitre.oval:tst:87179"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:18800" version="3" class="vulnerability">
      <metadata>
        <title>Denial of service vulnerability in Microsoft SharePoint (CVE-2013-3848) - MS13-067</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft SharePoint Server 2010</product>
          <product>Microsoft Office Web Apps</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2013-3848" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3848"/>
        <description>Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3847, CVE-2013-3849, and CVE-2013-3858.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-10-16T14:45:34">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-10-23T11:48:39.934-04:00">DRAFT</status_change>
            <status_change date="2013-11-11T04:00:35.846-05:00">INTERIM</status_change>
            <status_change date="2013-11-26T13:49:11.524-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="sharepoint server 2010/version">
          <extend_definition comment="Microsoft SharePoint Server 2010 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:15614"/>
          <criterion comment="Check if the version of WdsrvWorker.dll is less than 14.0.6112.5000" test_ref="oval:org.mitre.oval:tst:87135"/>
        </criteria>
        <criteria operator="AND" comment="web apps/version">
          <extend_definition comment="Microsoft Office Web Apps 2010 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:15860"/>
          <criterion comment="Check if the version of msoserver.dll is less than 14.0.7106.5000" test_ref="oval:org.mitre.oval:tst:87179"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15860" version="7" class="inventory">
      <metadata>
        <title>Microsoft Office Web Apps 2010 Service Pack 1 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Office Web Apps 2010</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:office_web_apps:2010:sp1"/>
        <description>Microsoft Office Web Apps 2010 Service Pack 1 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2012-10-17T09:07:03">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-10-19T16:11:26.152-04:00">DRAFT</status_change>
            <status_change date="2012-11-05T04:00:23.370-05:00">INTERIM</status_change>
            <status_change date="2012-11-26T04:00:14.164-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:24131 - Symbol \ (backslash) is not needed because symbol _ (underscore) isn't a metacharacter." date="2013-08-29T09:21:00.244-04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-08-29T09:22:52.391-04:00">INTERIM</status_change>
            <status_change date="2013-09-16T04:00:21.578-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:24131 - In some &quot;pattern match&quot; strings added &quot;\&quot; before &quot;.&quot; to clarify if &quot;point&quot; or &quot;any symbol&quot; needed." date="2014-07-28T18:11:00.493-04:00">
              <contributor organization="ALTX-SOFT">Evgeniy Pavlov</contributor>
            </modified>
            <status_change date="2014-07-28T18:14:45.693-04:00">INTERIM</status_change>
            <status_change date="2014-08-18T04:01:26.929-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Microsoft Office Web Apps SP1 is installed" test_ref="oval:org.mitre.oval:tst:80139"/>
        <extend_definition comment="Microsoft Office Web Apps 2010 is installed" definition_ref="oval:org.mitre.oval:def:15787"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15787" version="3" class="inventory">
      <metadata>
        <title>Microsoft Office Web Apps 2010 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Office Web Apps 2010</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:office_web_apps:2010"/>
        <description>Microsoft Office Web Apps 2010 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2012-10-17T14:16:01">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-10-19T16:11:25.935-04:00">DRAFT</status_change>
            <status_change date="2012-11-05T04:00:19.815-05:00">INTERIM</status_change>
            <status_change date="2012-11-26T04:00:13.143-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Microsoft Web Apps is installed" test_ref="oval:org.mitre.oval:tst:80134"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1880" version="1" class="vulnerability">
      <metadata>
        <title>CDE dtspcd Daemon Symlink Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>dtspcd</product>
        </affected>
        <reference source="CVE" ref_id="CVE-1999-0689" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0689"/>
        <description>The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-02-01T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-02-01T08:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
        <criterion comment="CDE Daemons (SUNWdtdmn) installed" negate="false" test_ref="oval:org.mitre.oval:tst:680"/>
        <criterion comment="Patch 108221-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:679"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1872" version="1" class="vulnerability">
      <metadata>
        <title>Windows XP Enhanced Metafile Image Format Rendering Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Enhanced Metafile (EMF)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0209"/>
        <description>Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats that involve "an unchecked buffer."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-14T09:59:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2004-10-20T02:35:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows XP is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2838"/>
        <criterion comment="the patch KB840987 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2356"/>
        <criterion comment="the version of vdmdbg.dll is less than 5.1.2600.1560" negate="false" test_ref="oval:org.mitre.oval:tst:681"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1866" version="3" class="vulnerability">
      <metadata>
        <title>ART Image Rendering Vulnerability (WinS03)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2378" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2378"/>
        <description>Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:35.894-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:36.010-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1866 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:36.282-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:22.805-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criteria operator="OR" comment="Either jgdw400.dll or Wjgdw400.dll exist with a file version less than 106.0.0.0">
          <criterion comment="the version of jgdw400.dll is less than 106.0.0.0" test_ref="oval:org.mitre.oval:tst:835"/>
          <criterion comment="the version of Wjgdw400.dll is less than 106.0.0.0" test_ref="oval:org.mitre.oval:tst:782"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1857" version="6" class="vulnerability">
      <metadata>
        <title>RASMAN Registry Corruption Vulnerability (Win2K)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2371" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2371"/>
        <description>Buffer overflow in the Remote Access Connection Manager service (RASMAN) service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted "RPC related requests," that lead to registry corruption and stack corruption, aka the "RASMAN Registry Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:35.404-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:35.183-04:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:12.493-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:06.640-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1857 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:31.897-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:59.168-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="the version of rasmans.dll is less than 5.0.2195.7093" test_ref="oval:org.mitre.oval:tst:747"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1855" version="3" class="vulnerability">
      <metadata>
        <title>Mozilla Cross-site JavaScript Injection Using Event Handlers</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1741" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1741"/>
        <description>Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to inject arbitrary Javascript into other sites by (1) "using a modal alert to suspend an event handler while a new page is being loaded", (2) using eval(), and using certain variants involving (3) "new Script;" and (4) using window.__proto__ to extend eval, aka "cross-site JavaScript injection".</description>
        <oval_repository>
          <dates>
            <submitted date="2006-05-07T09:05:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-05-10T08:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:35.230-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:1133" date="2007-02-26T08:08:00.208-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-26T08:09:12.530-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:1135" date="2007-02-26T08:21:00.993-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:1136" date="2007-02-26T08:24:00.848-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:1138" date="2007-02-26T08:25:00.405-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:2283" date="2007-02-26T08:29:00.407-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:2284" date="2007-02-26T08:30:00.724-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:17:06.364-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:881" date="2007-04-23T12:05:00.811-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:12:50.191-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:882" date="2007-04-23T12:05:00.939-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:883" date="2007-04-23T12:05:00.804-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:1385" date="2007-04-23T12:05:00.430-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:11:00.102-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.7 or earlier is installed">
          <criterion comment="Mozilla Firefox version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1268"/>
          <criterion comment="Firefox version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1267"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Thunderbird version 1.0.7 or earlier is installed">
          <criterion comment="Mozilla Thunderbird version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1266"/>
          <criterion comment="Mozilla Thunderbird version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1265"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.12 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.12 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1264"/>
          <criterion comment="Mozilla Suite version 1.7.12 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1263"/>
        </criteria>
        <criteria operator="AND" comment="A pre-release of SeaMonkey 1.0 is installed">
          <criterion comment="A pre-release of SeaMonkey 1.0 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2439"/>
          <criterion comment="A pre-release of SeaMonkey 1.0 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2438"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1850" version="7" class="vulnerability">
      <metadata>
        <title>SMB Invalid Handle Vulnerability (Win2K)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2374" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2374"/>
        <description>The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to cause a denial of service (hang) by calling the MrxSmbCscIoctlCloseForCopyChunk with the file handle of the shadow device, which results in a deadlock, aka the "SMB Invalid Handle Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:34.969-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:34.163-04:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:16.296-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:06.141-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1850 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:42.717-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:58.550-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="the version of mrxsmb.sys is less than 5.0.2195.7097" test_ref="oval:org.mitre.oval:tst:685"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1848" version="3" class="vulnerability">
      <metadata>
        <title>Mozilla Mozilla Firefox Tag Order Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0749" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0749"/>
        <description>nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors involving a "particular sequence of HTML tags" that leads to memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-05-07T09:05:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-05-10T08:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:34.648-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:1133" date="2007-02-26T08:08:00.208-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-26T08:09:15.206-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:1135" date="2007-02-26T08:21:00.993-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:1136" date="2007-02-26T08:24:00.848-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:1138" date="2007-02-26T08:25:00.405-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:2283" date="2007-02-26T08:29:00.407-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:2284" date="2007-02-26T08:30:00.724-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:17:05.869-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:881" date="2007-04-23T12:05:00.811-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:12:53.321-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:882" date="2007-04-23T12:05:00.939-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:883" date="2007-04-23T12:05:00.804-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:1385" date="2007-04-23T12:05:00.430-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:59.612-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.7 or earlier is installed">
          <criterion comment="Mozilla Firefox version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1268"/>
          <criterion comment="Firefox version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1267"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Thunderbird version 1.0.7 or earlier is installed">
          <criterion comment="Mozilla Thunderbird version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1266"/>
          <criterion comment="Mozilla Thunderbird version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1265"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.12 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.12 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1264"/>
          <criterion comment="Mozilla Suite version 1.7.12 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1263"/>
        </criteria>
        <criteria operator="AND" comment="A pre-release of SeaMonkey 1.0 is installed">
          <criterion comment="A pre-release of SeaMonkey 1.0 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2439"/>
          <criterion comment="A pre-release of SeaMonkey 1.0 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2438"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1845" version="8" class="vulnerability">
      <metadata>
        <title>Exception Handling Memory Corruption Vulnerability (Win2k)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2218"/>
        <description>Unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote attackers to execute arbitrary code via "exceptional conditions" that trigger memory corruption, as demonstrated using an exception handler and nested object tags, a variant of CVE-2006-1992.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:34.389-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:33.395-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:44.345-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:02.161-05:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:10.084-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:05.660-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:45.132-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:57.372-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:59.798-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:24.392-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
        <criterion comment="the version of mshtml.dll is less than 5.0.3841.1900" negate="false" test_ref="oval:org.mitre.oval:tst:957"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1844" version="1" class="vulnerability">
      <metadata>
        <title>ypbind Daemon Buffer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>NIS</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-1328" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1328"/>
        <description>Buffer overflow in ypbind daemon in Solaris 5.4 through 8 allows remote attackers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-12-29T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-12T12:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-02T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-23T09:25:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="OR" comment="Solaris 7 or 8 installed">
            <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          </criteria>
          <criterion comment="NIS/NIS+ Utilities installed (SUNWnisu)" negate="false" test_ref="oval:org.mitre.oval:tst:690"/>
          <criterion comment="Patch 108750-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:689"/>
          <criterion comment="Patch 110322-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:688"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="ypbind running" negate="false" test_ref="oval:org.mitre.oval:tst:687"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1840" version="1" class="vulnerability">
      <metadata>
        <title>LDAP rootDN Password Disclosure Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>LDAP</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1782" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1782"/>
        <description>Unspecified vulnerability in Solaris 8 and 9 allows local users to obtain the LDAP Directory Server root Distinguished Name (rootDN) password when a privileged user (1) runs idsconfig; or "insecurely" runs LDAP2 commands with the -w option, including (2) ldapadd, (3) ldapdelete, (4) ldapmodify, (5) ldapmodrdn, and (6) ldapsearch.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-04-14T06:41:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-04-19T10:08:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-10T08:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert ID 102113 criteria.">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Patch 108993-14 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:700"/>
          <criterion comment="Patch 108993-51 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:699"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert ID 102113 criteria.">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Patch 115677-02 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:698"/>
          <criterion comment="Patch 121321-01 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:697"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert ID 102113 criteria.">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Patch 108994-14 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:696"/>
          <criterion comment="Patch 108994-51 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:695"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert ID 102113 criteria.">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Patch 115678-02 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:694"/>
          <criterion comment="Patch 121322-01 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:693"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:184" version="8" class="vulnerability">
      <metadata>
        <title>HP-UX 11.11 ICMP Source Quench Attack Vulnerability</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0791" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0791"/>
        <description>Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via a blind throughput-reduction attack using spoofed Source Quench packets, aka the "ICMP Source Quench attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:48:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:34.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:32.152-04:00">ACCEPTED</status_change>
            <modified comment="Added title." date="2007-02-23T12:54:00.475-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-02-23T12:54:31.499-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:05.483-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:29.731-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:11.315-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:184 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:04:52.948-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:21.987-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:tst:3704 - HP-UX Security Advisories published in February 2014" date="2014-03-05T13:28:00.446-05:00">
              <contributor organization="Hewlett-Packard">Sushant Kumar Singh</contributor>
            </modified>
            <status_change date="2014-03-05T13:32:46.697-05:00">INTERIM</status_change>
            <status_change date="2014-03-24T04:00:40.393-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.11">
          <criteria operator="AND" comment="700 Series OS Release 11.11">
            <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:3443"/>
            <criterion comment="HP Release B.11.11" test_ref="oval:org.mitre.oval:tst:3704"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 11.11">
            <criterion comment="800-series HP" test_ref="oval:org.mitre.oval:tst:4124"/>
            <criterion comment="HP Release B.11.11" test_ref="oval:org.mitre.oval:tst:3704"/>
          </criteria>
        </criteria>
        <criterion negate="true" comment="Patch PHNE_33159 is installed" test_ref="oval:org.mitre.oval:tst:3779"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:18376" version="4" class="vulnerability">
      <metadata>
        <title>Oracle Outside In Contains Multiple Exploitable Vulnerabilities - CVE-2013-2393 (MS13-061)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Exchange Server 2007</product>
          <product>Microsoft Exchange Server 2010</product>
          <product>Microsoft Exchange Server 2013</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2013-2393" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2393"/>
        <description>Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 and 8.4.0 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-08-19T11:51:17">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-08-19T14:41:13.943-04:00">DRAFT</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:18376 - Revised MS13-061 to V3.0" date="2013-09-04T14:47:00.917-04:00">
              <contributor organization="SecPod Technologies">Pooja Shetty</contributor>
            </modified>
            <status_change date="2013-09-23T04:05:37.920-04:00">INTERIM</status_change>
            <status_change date="2013-10-14T04:00:16.273-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2007 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2007 SP3 is installed" definition_ref="oval:org.mitre.oval:def:15784"/>
          <criterion comment="Check if the version of exsetup.exe is less than 8.3.327.1" test_ref="oval:org.mitre.oval:tst:85968"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP2 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP2 is installed" definition_ref="oval:org.mitre.oval:def:14151"/>
          <criterion comment="Check if the version of ExSetup.exe is less than 14.2.375.0" test_ref="oval:org.mitre.oval:tst:85977"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP3 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP3 is installed" definition_ref="oval:org.mitre.oval:def:17932"/>
          <criterion comment="Check if the version of ExSetup.exe is less than 14.3.158.1" test_ref="oval:org.mitre.oval:tst:85918"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2013 CU1 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 Cumulative Update 1 is installed" definition_ref="oval:org.mitre.oval:def:18838"/>
          <criterion comment="Check if the version of ExSetup.exe is less than 15.0.620.34" test_ref="oval:org.mitre.oval:tst:86148"/>
        </criteria>
        <criteria operator="AND" comment="Exchange 2013 CU2 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 Cumulative Update 2 is installed" definition_ref="oval:org.mitre.oval:def:18484"/>
          <criterion comment="Check if the version of ExSetup.exe is less than 15.0.712.28" test_ref="oval:org.mitre.oval:tst:86102"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1832" version="1" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability in How xscreensaver(1) Interacts With GNOME Assistive Technology May Allow Arbitrary Command Execution</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3069" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3069"/>
        <description>xscreensaver in Sun Solaris 10 before 20070604, when a GNOME session with Assistive Technology support is running, allows attackers with physical access to take control of the session after entering an Alt-Tab sequence.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-07T14:01:00.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-06-07T14:28:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-06-22T08:57:41.387-04:00">INTERIM</status_change>
            <status_change date="2007-07-10T21:08:50.203-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Solaris 10 (SPARC)" negate="false">
          <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3680"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criterion comment="Patch 120094-11 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3833"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86)" negate="false">
          <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3680"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criterion comment="Patch 120095-11 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:4096"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:183" version="4" class="vulnerability">
      <metadata>
        <title>Apache IPv6 Socket Failure Denial of Service</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0254" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0254"/>
        <description>Apache 2 before 2.0.47, when running on an IPv6 host, allows attackers to cause a denial of service (CPU consumption by infinite loop) when the FTP proxy server fails to create an IPv6 socket.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-05T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:41.547-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:20.097-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.149-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:55:38.322-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:18.162-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="httpd version is less than 2.0.40-21.5" negate="false" test_ref="oval:org.mitre.oval:tst:2852"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="httpd listening on the network" negate="false" test_ref="oval:org.mitre.oval:tst:2865"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1829" version="3" class="vulnerability">
      <metadata>
        <title>Mozilla Crashes with Evidence of Memory Corruption (RegEx)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1737" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1737"/>
        <description>Integer overflow in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary bytecode via JavaScript with a large regular expression.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-05-07T09:05:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-05-10T08:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:33.329-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:1133" date="2007-02-26T08:08:00.208-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-26T08:09:12.731-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:1135" date="2007-02-26T08:21:00.993-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:1136" date="2007-02-26T08:24:00.848-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:1138" date="2007-02-26T08:25:00.405-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:2283" date="2007-02-26T08:29:00.407-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:2284" date="2007-02-26T08:30:00.724-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:17:05.049-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:881" date="2007-04-23T12:05:00.811-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:12:50.443-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:882" date="2007-04-23T12:05:00.939-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:883" date="2007-04-23T12:05:00.804-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:1385" date="2007-04-23T12:05:00.430-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:59.155-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.7 or earlier is installed">
          <criterion comment="Mozilla Firefox version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1268"/>
          <criterion comment="Firefox version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1267"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Thunderbird version 1.0.7 or earlier is installed">
          <criterion comment="Mozilla Thunderbird version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1266"/>
          <criterion comment="Mozilla Thunderbird version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1265"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.12 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.12 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1264"/>
          <criterion comment="Mozilla Suite version 1.7.12 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1263"/>
        </criteria>
        <criteria operator="AND" comment="A pre-release of SeaMonkey 1.0 is installed">
          <criterion comment="A pre-release of SeaMonkey 1.0 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2439"/>
          <criterion comment="A pre-release of SeaMonkey 1.0 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2438"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1828" version="1" class="vulnerability">
      <metadata>
        <title>Buffer Overflow in "in.telnetd"or "telnetd"Process</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 8</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0554" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0554"/>
        <description>Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-15T09:00:00.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-06-15T11:20:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-07-03T14:05:56.035-04:00">INTERIM</status_change>
            <status_change date="2007-07-18T15:57:50.429-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Solaris 8 (SPARC)" negate="false">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3437"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criteria comment="System is unpatched" operator="OR">
            <criteria comment="SEAM and patch 110060-10" operator="AND">
              <criteria operator="OR" comment="Solaris Enterprise Authentication Mechanism (ANY SUNWkr5sl/SUNWkr5sv/SUNWkrgdo/SUNWkrggl)">
                <criterion comment="Sun Enterprise Authentication Mechanism (SEAM, SUNWkr5sv) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1161"/>
                <criterion comment=" Sun Enterprise Authentication Mechanism (SEAM, SUNWkr5sl) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1160"/>
                <criterion comment=" Sun Enterprise Authentication Mechanism (SEAM, SUNWkrgdo) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1159"/>
                <criterion comment=" Sun Enterprise Authentication Mechanism (SEAM, SUNWkrggl) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1158"/>
              </criteria>
              <criterion comment="Patch 110060-10 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3408"/>
            </criteria>
            <criterion comment="Patch 110668-03 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3463"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86)" negate="false">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3437"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criteria comment="System is unpatched" operator="OR">
            <criteria comment="SEAM and patch 110061-10" operator="AND">
              <criteria operator="OR" comment="Solaris Enterprise Authentication Mechanism (ANY SUNWkr5sl/SUNWkr5sv/SUNWkrgdo/SUNWkrggl)">
                <criterion comment="Sun Enterprise Authentication Mechanism (SEAM, SUNWkr5sv) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1161"/>
                <criterion comment=" Sun Enterprise Authentication Mechanism (SEAM, SUNWkr5sl) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1160"/>
                <criterion comment=" Sun Enterprise Authentication Mechanism (SEAM, SUNWkrgdo) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1159"/>
                <criterion comment=" Sun Enterprise Authentication Mechanism (SEAM, SUNWkrggl) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1158"/>
              </criteria>
              <criterion comment="Patch 110061-10 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3951"/>
            </criteria>
            <criterion comment="Patch 110669-03 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3634"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Solaris 7 (SPARC)" negate="false">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3576"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criteria comment="System is unpatched" operator="OR">
            <criteria comment="SEAM and patch 110057-04" operator="AND">
              <criteria operator="OR" comment="Solaris Enterprise Authentication Mechanism (ANY SUNWkr5sl/SUNWkr5sv/SUNWkrgdo/SUNWkrggl)">
                <criterion comment="Sun Enterprise Authentication Mechanism (SEAM, SUNWkr5sv) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1161"/>
                <criterion comment=" Sun Enterprise Authentication Mechanism (SEAM, SUNWkr5sl) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1160"/>
                <criterion comment=" Sun Enterprise Authentication Mechanism (SEAM, SUNWkrgdo) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1159"/>
                <criterion comment=" Sun Enterprise Authentication Mechanism (SEAM, SUNWkrggl) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1158"/>
              </criteria>
              <criterion comment="Patch 110057-04 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3494"/>
            </criteria>
            <criterion comment="Patch 107475-04 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:4081"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Solaris 7 (x86)" negate="false">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3576"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criteria comment="System is unpatched" operator="OR">
            <criteria comment="SEAM and patch 110058-04" operator="AND">
              <criteria operator="OR" comment="Solaris Enterprise Authentication Mechanism (ANY SUNWkr5sl/SUNWkr5sv/SUNWkrgdo/SUNWkrggl)">
                <criterion comment="Sun Enterprise Authentication Mechanism (SEAM, SUNWkr5sv) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1161"/>
                <criterion comment=" Sun Enterprise Authentication Mechanism (SEAM, SUNWkr5sl) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1160"/>
                <criterion comment=" Sun Enterprise Authentication Mechanism (SEAM, SUNWkrgdo) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1159"/>
                <criterion comment=" Sun Enterprise Authentication Mechanism (SEAM, SUNWkrggl) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1158"/>
              </criteria>
              <criterion comment="Patch 110058-04 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3361"/>
            </criteria>
            <criterion comment="Patch 107476-04 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3852"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:18243" version="4" class="vulnerability">
      <metadata>
        <title>Oracle Outside In Contains Multiple Exploitable Vulnerabilities - CVE-2013-3776 (MS13-061)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Exchange Server 2007</product>
          <product>Microsoft Exchange Server 2010</product>
          <product>Microsoft Exchange Server 2013</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2013-3776" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3776"/>
        <description>Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7, 8.4.0, and 8.4.1 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2013-3781.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-08-19T11:51:17">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-08-19T14:41:09.968-04:00">DRAFT</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:18243 - Revised MS13-061 to V3.0" date="2013-09-04T14:47:00.917-04:00">
              <contributor organization="SecPod Technologies">Pooja Shetty</contributor>
            </modified>
            <status_change date="2013-09-23T04:05:19.277-04:00">INTERIM</status_change>
            <status_change date="2013-10-14T04:00:12.566-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2007 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2007 SP3 is installed" definition_ref="oval:org.mitre.oval:def:15784"/>
          <criterion comment="Check if the version of exsetup.exe is less than 8.3.327.1" test_ref="oval:org.mitre.oval:tst:85968"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP2 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP2 is installed" definition_ref="oval:org.mitre.oval:def:14151"/>
          <criterion comment="Check if the version of ExSetup.exe is less than 14.2.375.0" test_ref="oval:org.mitre.oval:tst:85977"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP3 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP3 is installed" definition_ref="oval:org.mitre.oval:def:17932"/>
          <criterion comment="Check if the version of ExSetup.exe is less than 14.3.158.1" test_ref="oval:org.mitre.oval:tst:85918"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2013 CU1 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 Cumulative Update 1 is installed" definition_ref="oval:org.mitre.oval:def:18838"/>
          <criterion comment="Check if the version of ExSetup.exe is less than 15.0.620.34" test_ref="oval:org.mitre.oval:tst:86148"/>
        </criteria>
        <criteria operator="AND" comment="Exchange 2013 CU2 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 Cumulative Update 2 is installed" definition_ref="oval:org.mitre.oval:def:18484"/>
          <criterion comment="Check if the version of ExSetup.exe is less than 15.0.712.28" test_ref="oval:org.mitre.oval:tst:86102"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1822" version="1" class="vulnerability">
      <metadata>
        <title>Server 2003 CSRSS Privilege Escalation Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Client Server Runtime System (CSRSS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0551" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0551"/>
        <description>Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application that provides console window information with a long FaceName value.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-05-02T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2005-05-04T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2005-06-02T12:00:00.000-04:00" comment="Added product">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-06-22T12:38:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="The version of Ntoskrnl.exe is less than 5.2.3790.280" negate="false" test_ref="oval:org.mitre.oval:tst:1025"/>
        <criterion comment="the patch KB890859 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2737"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1820" version="5" class="vulnerability">
      <metadata>
        <title>Windows Media Player PNG Vulnerability (v9.0)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Media Player</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0025"/>
        <description>Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to execute arbitrary code via a PNG image with a large chunk size.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:32.741-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:28.915-04:00">ACCEPTED</status_change>
            <modified comment="Modified ste:705: altered regex to match on a double zero in the minor field of the version, and also added an initial anchor.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:23:00.679-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:25:34.938-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:01.980-05:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:746" date="2007-03-06T08:04:00.424-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-06T08:05:13.164-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:04.837-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:746 - added trailing $ to regexs" date="2011-10-31T09:26:00.646-04:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2011-10-31T09:31:17.158-04:00">INTERIM</status_change>
            <status_change date="2011-11-21T04:13:08.315-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Media Player 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:786"/>
        <criterion comment="Windows Media Player 10 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:833"/>
        <criterion comment="the version of wmp.dll is less than 9.0.0.3349" negate="false" test_ref="oval:org.mitre.oval:tst:706"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:182" version="2" class="vulnerability">
      <metadata>
        <title>Windows NT IIS Heap Overrun in HTR Chunked Encoding</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0364" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0364"/>
        <description>Buffer overflow in the chunked encoding transfer mechanism in IIS 4.0 and 5.0 allows attackers to execute arbitrary code via the processing of HTR request sessions, aka "Heap Overrun in HTR Chunked Encoding Could Enable Web Server Compromise."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-14T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected to use a forward slash as the separator in the key." date="2007-05-07T15:59:00.150-04:00">
              <contributor organization="Secure Elements, Inc.">Glenn Strickland</contributor>
            </modified>
            <status_change date="2007-05-07T16:04:54.593-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:33.163-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="IIS 4.0 Major Version" negate="false" test_ref="oval:org.mitre.oval:tst:3099"/>
          <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
          <criterion comment="File %windir%\system32\inetsrv\ism.dll version is less than 4.2.776.1" negate="false" test_ref="oval:org.mitre.oval:tst:2847"/>
          <criterion comment="Patch Q321599 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2846"/>
          <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
          <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="ism.dll mapping exists" negate="false" test_ref="oval:org.mitre.oval:tst:3057"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1819" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the Netscape Portable Runtime (NSPR) API Affects Solaris</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4842" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4842"/>
        <description>The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specifying log files even when running from setuid programs, which allows local users to create or overwrite arbitrary files.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-10T12:25:24.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-13T13:57:13.389-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:28.654-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:42.133-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102658" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 119213-10 or later installed" test_ref="oval:org.mitre.oval:tst:3926" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102658" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 119214-10 or later installed" test_ref="oval:org.mitre.oval:tst:3572" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1818" version="3" class="vulnerability">
      <metadata>
        <title>Exchange 2000,SP4 Calendar Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Exchange Server</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0027"/>
        <description>Unspecified vulnerability in Microsoft Exchange allows remote attackers to execute arbitrary code via e-mail messages with crafted (1) vCal or (2) iCal Calendar properties.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-05-10T03:16:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-05-10T08:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:32.600-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.427-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:50:41.619-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:02.102-05:00">ACCEPTED</status_change>
            <modified comment="References registry value for Common Files directory due to multilingual support" date="2008-04-14T11:07:00.679-04:00">
              <contributor organization="GFI Software">Clifford Farrugia</contributor>
            </modified>
            <status_change date="2008-04-14T12:26:44.953-04:00">INTERIM</status_change>
            <status_change date="2008-05-05T04:00:14.118-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Exchange Server 2000,SP3 is installed." negate="false" test_ref="oval:org.mitre.oval:tst:992"/>
        <criterion comment="cdoex.dll is less than 6.0.6618.4" negate="false" test_ref="oval:org.mitre.oval:tst:707"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:18156" version="5" class="vulnerability">
      <metadata>
        <title>Oracle Outside In Contains Multiple Exploitable Vulnerabilities - CVE-2013-3781 (MS13-061)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Exchange Server 2007</product>
          <product>Microsoft Exchange Server 2010</product>
          <product>Microsoft Exchange Server 2013</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2013-3781" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3781"/>
        <description>Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7, 8.4.0, and 8.4.1 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2013-3776.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-08-19T11:51:17">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-08-19T14:41:12.106-04:00">DRAFT</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:18156 - Revised MS13-061 to V3.0" date="2013-09-04T14:47:00.917-04:00">
              <contributor organization="SecPod Technologies">Pooja Shetty</contributor>
            </modified>
            <status_change date="2013-09-23T04:05:00.454-04:00">INTERIM</status_change>
            <status_change date="2013-10-14T04:00:11.165-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2007 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2007 SP3 is installed" definition_ref="oval:org.mitre.oval:def:15784"/>
          <criterion comment="Check if the version of exsetup.exe is less than 8.3.327.1" test_ref="oval:org.mitre.oval:tst:85968"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP2 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP2 is installed" definition_ref="oval:org.mitre.oval:def:14151"/>
          <criterion comment="Check if the version of ExSetup.exe is less than 14.2.375.0" test_ref="oval:org.mitre.oval:tst:85977"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP3 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP3 is installed" definition_ref="oval:org.mitre.oval:def:17932"/>
          <criterion comment="Check if the version of ExSetup.exe is less than 14.3.158.1" test_ref="oval:org.mitre.oval:tst:85918"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2013 CU1 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 Cumulative Update 1 is installed" definition_ref="oval:org.mitre.oval:def:18838"/>
          <criterion comment="Check if the version of ExSetup.exe is less than 15.0.620.34" test_ref="oval:org.mitre.oval:tst:86148"/>
        </criteria>
        <criteria operator="AND" comment="Exchange 2013 CU2 and vulnerable file version">
          <extend_definition comment="Microsoft Exchange Server 2013 Cumulative Update 2 is installed" definition_ref="oval:org.mitre.oval:def:18484"/>
          <criterion comment="Check if the version of ExSetup.exe is less than 15.0.712.28" test_ref="oval:org.mitre.oval:tst:86102"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:18838" version="3" class="inventory">
      <metadata>
        <title>Microsoft Exchange Server 2013 Cumulative Update 1 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <product>Microsoft Exchange Server 2013</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:exchange_server:2013:cu1"/>
        <description>Microsoft Exchange Server 2013 Cumulative Update 1 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2013-09-03T10:20:20">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-09-04T14:49:16.638-04:00">DRAFT</status_change>
            <status_change date="2013-09-23T04:05:38.966-04:00">INTERIM</status_change>
            <status_change date="2013-10-14T04:00:26.348-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Exchange Server 2013 is installed Cumulative Update 1" test_ref="oval:org.mitre.oval:tst:86178"/>
        <extend_definition comment="Microsoft Exchange Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:18626"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:18484" version="3" class="inventory">
      <metadata>
        <title>Microsoft Exchange Server 2013 Cumulative Update 2 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <product>Microsoft Exchange Server 2013</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:exchange_server:2013:cu2"/>
        <description>Microsoft Exchange Server 2013 Cumulative Update 2 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2013-09-03T10:20:20">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-09-04T14:49:15.758-04:00">DRAFT</status_change>
            <status_change date="2013-09-23T04:05:38.557-04:00">INTERIM</status_change>
            <status_change date="2013-10-14T04:00:17.243-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Exchange Server 2013 is installed Cumulative Update 2" test_ref="oval:org.mitre.oval:tst:86716"/>
        <extend_definition comment="Microsoft Exchange Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:18626"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:18626" version="3" class="inventory">
      <metadata>
        <title>Microsoft Exchange Server 2013 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <product>Microsoft Exchange Server 2013</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:exchange_server:2013"/>
        <description>Microsoft Exchange Server 2013 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2013-09-03T10:20:20">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-09-04T14:49:15.323-04:00">DRAFT</status_change>
            <status_change date="2013-09-23T04:05:38.765-04:00">INTERIM</status_change>
            <status_change date="2013-10-14T04:00:17.937-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Exchange Server 2013 is installed" test_ref="oval:org.mitre.oval:tst:86283"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:17932" version="3" class="inventory">
      <metadata>
        <title>Microsoft Exchange Server 2010 SP3 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Exchange Server 2010</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:exchange:2010:sp3"/>
        <description>Microsoft Exchange Server 2010 SP3 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2013-08-19T11:51:17">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-08-19T14:41:09.817-04:00">DRAFT</status_change>
            <status_change date="2013-09-09T04:03:03.757-04:00">INTERIM</status_change>
            <status_change date="2013-09-30T04:00:44.122-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Microsoft Exchange Server 2010 is installed" test_ref="oval:org.mitre.oval:tst:77602"/>
        <criterion comment="Check if Microsoft Exchange Server 2010 SP3 is installed" test_ref="oval:org.mitre.oval:tst:85809"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1811" version="3" class="vulnerability">
      <metadata>
        <title>Mozilla Secure-site Spoof (requires security warning dialog)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1740" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1740"/>
        <description>Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to spoof secure site indicators such as the locked icon by opening the trusted site in a popup window, then changing the location to a malicious site.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-05-07T09:05:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-05-10T08:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:32.430-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:1133" date="2007-02-26T08:08:00.208-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-26T08:09:16.615-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:1138" date="2007-02-26T08:25:00.405-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:2283" date="2007-02-26T08:29:00.407-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:2284" date="2007-02-26T08:30:00.724-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:17:04.624-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:881" date="2007-04-23T12:05:00.811-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:12:54.834-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:883" date="2007-04-23T12:05:00.804-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:1385" date="2007-04-23T12:05:00.430-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:58.597-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.7 or earlier is installed">
          <criterion comment="Mozilla Firefox version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1268"/>
          <criterion comment="Firefox version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1267"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.12 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.12 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1264"/>
          <criterion comment="Mozilla Suite version 1.7.12 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1263"/>
        </criteria>
        <criteria operator="AND" comment="A pre-release of SeaMonkey 1.0 is installed">
          <criterion comment="A pre-release of SeaMonkey 1.0 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2439"/>
          <criterion comment="A pre-release of SeaMonkey 1.0 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2438"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1810" version="1" class="vulnerability">
      <metadata>
        <title>Multiple vulnerabilities in libfreetype, Xsun(1) and Xorg(1)</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1351" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1351"/>
        <description>Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-30T08:16:45.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-01T22:21:20.643-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:38.899-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:28.469-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 119067-07 or later installed" test_ref="oval:org.mitre.oval:tst:3167" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 124420-02 or later installed" test_ref="oval:org.mitre.oval:tst:3470" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 116106-06 or later installed" test_ref="oval:org.mitre.oval:tst:3765" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 119060-24 or later installed" test_ref="oval:org.mitre.oval:tst:3231" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 125720-03 or later installed" test_ref="oval:org.mitre.oval:tst:4003" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 119813-04 or later installed" test_ref="oval:org.mitre.oval:tst:3930" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 112785-61 or later installed" test_ref="oval:org.mitre.oval:tst:3874" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 116105-07 or later installed" test_ref="oval:org.mitre.oval:tst:3197" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 119059-25 or later installed" test_ref="oval:org.mitre.oval:tst:3577" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 119812-03 or later installed" test_ref="oval:org.mitre.oval:tst:3921" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 119068-07 or later installed" test_ref="oval:org.mitre.oval:tst:3216" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 124421-02 or later installed" test_ref="oval:org.mitre.oval:tst:3676" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 112786-50 or later installed" test_ref="oval:org.mitre.oval:tst:3471" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 124833-02 or later installed" test_ref="oval:org.mitre.oval:tst:3278" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:181" version="6" class="vulnerability">
      <metadata>
        <title>HP-UX 11.00 Path MTU Discovery Attack Vulnerability</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1060" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1060"/>
        <description>Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:48:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:32.283-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:28.466-04:00">ACCEPTED</status_change>
            <modified comment="Added title." date="2007-02-22T17:25:00.740-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-02-22T17:28:59.770-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:04.459-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:29.645-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:11.204-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:181 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:01.649-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:20.887-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.00">
          <criteria operator="AND" comment="700 Series OS Release 11.00">
            <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:3443"/>
            <criterion comment="HP Release B.11.00" test_ref="oval:org.mitre.oval:tst:3571"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 11.00">
            <criterion comment="800-series HP" test_ref="oval:org.mitre.oval:tst:4124"/>
            <criterion comment="HP Release B.11.00" test_ref="oval:org.mitre.oval:tst:3571"/>
          </criteria>
        </criteria>
        <criterion negate="true" comment="Patch PHNE_33395 is installed" test_ref="oval:org.mitre.oval:tst:3393"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1808" version="3" class="vulnerability">
      <metadata>
        <title>Windows 2000 Negotiate Security Software Provider Denial of Service Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Negotiate SSP interface</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0119" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0119"/>
        <description>The Negotiate Security Software Provider (SSP) interface in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service (crash from null dereference) or execute arbitrary code via a crafted SPNEGO NegTokenInit request during authentication protocol selection.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-06-14T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2004-06-30T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-07-12T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-01-13T12:00:00.000-04:00" comment="modified wft-345 - Addded a space in the registry key component of the file path">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2005-01-20T01:26:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected to use a forward slash as the separator in the key." date="2007-05-07T15:59:00.728-04:00">
              <contributor organization="Secure Elements, Inc.">Glenn Strickland</contributor>
            </modified>
            <status_change date="2007-05-07T16:00:38.839-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:32.274-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="the patch kb835732 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1510"/>
          <criterion comment="The version of Ipnathlp.dll is less than 5.0.2195.6902" negate="false" test_ref="oval:org.mitre.oval:tst:710"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="Negotiate is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:709"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1807" version="4" class="vulnerability">
      <metadata>
        <title>Windows Media Player PNG Vulnerability (v8.0)</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Media Player</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0025"/>
        <description>Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to execute arbitrary code via a PNG image with a large chunk size.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:32.163-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:28.028-04:00">ACCEPTED</status_change>
            <modified comment="Modified ste:923: altered regex to match on a double zero in the minor field of the version, and also added an initial anchor.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:29:00.341-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:29:39.587-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:01.800-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:923 - obj/ste updates to conform to authoring style guide" date="2013-03-26T09:53:00.500-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-03-26T09:56:01.481-04:00">INTERIM</status_change>
            <status_change date="2013-04-15T04:00:17.577-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Media Player 8 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1035"/>
        <criterion comment="the version of wmpui.dll is less than 8.0.0.4496" negate="false" test_ref="oval:org.mitre.oval:tst:711"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1806" version="5" class="vulnerability">
      <metadata>
        <title>Flash Address Bar Spoofing Vulnerability (WinS03)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1626"/>
        <description>Internet Explorer 6 for Windows XP SP2 and earlier allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious Shockwave Flash application, then changing the window location back to a trusted URL while the Flash application is still loading.  NOTE: this is a different vulnerability than CVE-2006-1192.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:32.026-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:27.608-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:09:02.002-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:01.641-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:05.132-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:53.101-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="Win2K/XP/2003 is patched" negate="true" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.3790.536" negate="false" test_ref="oval:org.mitre.oval:tst:952"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1800" version="8" class="vulnerability">
      <metadata>
        <title>CSS Cross-Domain Information Disclosure Vulnerability (Win2K)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-4089" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4089"/>
        <description>Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive information by using the @import directive to download files from other domains that are not valid Cascading Style Sheets (CSS) files, as demonstrated using Google Desktop, aka "CSSXSS" and "CSS Cross-Domain Information Disclosure Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:31.754-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:26.731-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:43.526-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:01.455-05:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:09.200-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:04.018-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:05.764-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:52.740-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:39.909-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:24.264-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
        <criterion comment="the version of mshtml.dll is less than 5.0.3841.1900" negate="false" test_ref="oval:org.mitre.oval:tst:957"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:180" version="7" class="vulnerability">
      <metadata>
        <title>Windows 2000,SP4 Remote Desktop Protocol (RDP) DoS Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1218"/>
        <description>The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attackers to cause a denial of service (crash) via crafted Remote Desktop Protocol (RDP) requests.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:40:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:31.531-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:26.291-04:00">ACCEPTED</status_change>
            <modified comment="Replaced tst:3652 with tst:3073 and updated comments" date="2010-12-02T11:47:00.010-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-12-02T11:48:17.080-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:36.117-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:180 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:29.854-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:52.440-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3381"/>
          <criterion comment="SP4 or later Installed" test_ref="oval:org.mitre.oval:tst:3073"/>
        </criteria>
        <criterion comment="the version of rdpwd.sys is less than 5.0.2195.7055" test_ref="oval:org.mitre.oval:tst:3633"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1798" version="1" class="vulnerability">
      <metadata>
        <title>Buffer Overflow Vulnerability in libX11</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4655" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4655"/>
        <description>Buffer overflow in the Strcmp function in the XKEYBOARD extension in X Window System X11R6.4 and earlier, as used in SCO UnixWare 7.1.3 and Sun Solaris 8 through 10, allows local users to gain privileges via a long _XKB_CHARSET environment variable value.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-10T12:25:24.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-13T13:57:13.571-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:28.351-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:41.950-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102570" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 119067-03 or later installed" test_ref="oval:org.mitre.oval:tst:3849" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102570" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 112785-56 or later installed" test_ref="oval:org.mitre.oval:tst:4065" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102570" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 119059-16 or later installed" test_ref="oval:org.mitre.oval:tst:3650" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102570" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 119068-03 or later installed" test_ref="oval:org.mitre.oval:tst:3615" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102570" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 112786-45 or later installed" test_ref="oval:org.mitre.oval:tst:4004" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102570" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 119060-15 or later installed" test_ref="oval:org.mitre.oval:tst:3329" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1793" version="4" class="vulnerability">
      <metadata>
        <title>IE v6.0 Malformed GIF Image Double-free Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1048" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1048"/>
        <description>Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-30T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-08-02T04:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-08-25T04:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-09T04:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="modified wrt-18 - Changed value element to include pattern match">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <modified date="2005-09-26T12:19:00.000-04:00" comment="modified wft-268 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:57.979-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:24.154-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Software section">
        <criterion comment="Internet Explorer 6 is installed" test_ref="oval:org.mitre.oval:tst:3090"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.2743.600" test_ref="oval:org.mitre.oval:tst:2583"/>
        <criterion negate="true" comment="the patch kb832894 is installed (Installed Components key)" test_ref="oval:org.mitre.oval:tst:2802"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1792" version="6" class="vulnerability">
      <metadata>
        <title>SMB Driver Elevation of Privilege Vulnerability (WinS03)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2373" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2373"/>
        <description>The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to execute arbitrary code by calling the MrxSmbCscIoctlOpenForCopyChunk function with the METHOD_NEITHER method flag and an arbitrary address, possibly for kernel memory, aka the "SMB Driver Elevation of Privilege Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:31.411-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:25.867-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:09:01.157-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:01.232-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1792 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:15.892-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:51.773-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of mrxsmb.sys is less than 5.2.3790.529" test_ref="oval:org.mitre.oval:tst:714"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:179" version="1" class="vulnerability">
      <metadata>
        <title>Solaris 7 LBXProxy Display Name Buffer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>lbxproxy</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0090" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0090"/>
        <description>Buffer overflow in Low BandWidth X proxy (lbxproxy) in Solaris 8 allows local users to execute arbitrary code via a long display command line option.</description>
        <oval_repository>
          <dates>
            <submitted date="2002-10-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="File lbxproxy exists" negate="false" test_ref="oval:org.mitre.oval:tst:2964"/>
          <criterion comment="Patch 107654-10 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:2848"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="File lbxproxy SGID and executable">
            <criterion comment="File lbxproxy SGID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:2962"/>
            <criterion comment="File lbxproxy SGID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:2961"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1787" version="7" class="vulnerability">
      <metadata>
        <title>IP Source Route Vulnerability (Win2K)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2379" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2379"/>
        <description>Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via unknown vectors related to IP source routing.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:30.933-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:25.059-04:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:12.294-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:03.627-04:00">ACCEPTED</status_change>
            <modified comment="Changing deprecated obj:563 to obj:588" date="2010-01-12T15:23:00.503-05:00">
              <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2010-01-12T15:24:10.742-05:00">INTERIM</status_change>
            <status_change date="2010-02-01T04:00:06.500-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1787 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:34.758-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:50.242-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="the version of Tcpip.sys is less than 5.0.2195.7087" test_ref="oval:org.mitre.oval:tst:718"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1786" version="4" class="vulnerability">
      <metadata>
        <title>XPM Image Decoder Malicious Color String Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0783" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0783"/>
        <description>Stack-based buffer overflow in xpm_extract_color (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, may allow remote attackers to execute arbitrary code via a certain color string.  NOTE: this identifier is ONLY for gtk+.  It was incorrectly referenced in an advisory for a different issue (CVE-2004-0688).</description>
        <oval_repository>
          <dates>
            <submitted date="2006-03-21T04:03:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-03-22T11:10:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-04-06T06:31:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1786 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:04:54.531-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:20.204-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="GNOME 2.0 Solaris 8 (SPARC) meets Sun Alert ID 101776 criteria.">
          <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Installed architecture is sparc" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Gnome 2.0.0 is installed" test_ref="oval:org.mitre.oval:tst:818"/>
          <criterion negate="true" comment="Patch 114644-03 or later installed" test_ref="oval:org.mitre.oval:tst:817"/>
        </criteria>
        <criteria operator="AND" comment="GNOME 2.0 Solaris 8 (x86) meets Sun Alert ID 101776 criteria.">
          <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Gnome 2.0.0 is installed" test_ref="oval:org.mitre.oval:tst:818"/>
          <criterion negate="true" comment="Patch 114645-03 or later installed" test_ref="oval:org.mitre.oval:tst:816"/>
        </criteria>
        <criteria operator="AND" comment="GNOME 2.0 Solaris 9 (SPARC) meets Sun Alert ID 101776 criteria.">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="Installed architecture is sparc" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Gnome 2.0.0 is installed" test_ref="oval:org.mitre.oval:tst:818"/>
          <criterion negate="true" comment="Patch 114686-03 or later installed" test_ref="oval:org.mitre.oval:tst:815"/>
        </criteria>
        <criteria operator="AND" comment="GNOME 2.0.2 Solaris 9 (SPARC) meets Sun Alert ID 101776 criteria.">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="Installed architecture is sparc" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Gnome 2.0.2 is installed" test_ref="oval:org.mitre.oval:tst:814"/>
          <criterion negate="true" comment="Patch 115738-04 or later installed" test_ref="oval:org.mitre.oval:tst:813"/>
        </criteria>
        <criteria operator="AND" comment="GNOME 2.0 Solaris 9 (x86) meets Sun Alert ID 101776 criteria.">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Gnome 2.0.0 is installed" test_ref="oval:org.mitre.oval:tst:818"/>
          <criterion negate="true" comment="Patch 114687-03 or later installed" test_ref="oval:org.mitre.oval:tst:812"/>
        </criteria>
        <criteria operator="AND" comment="GNOME 2.0.2 Solaris 9 (x86) meets Sun Alert ID 101776 criteria.">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Gnome 2.0.2 is installed" test_ref="oval:org.mitre.oval:tst:814"/>
          <criterion negate="true" comment="Patch 115739-04 or later installed" test_ref="oval:org.mitre.oval:tst:811"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) with JDS release 2 meets Sun Alert ID 101776 criteria.">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="JDS release 2 is installed" test_ref="oval:org.mitre.oval:tst:810"/>
          <criterion negate="true" comment="Patch 121092-01 or later installed" test_ref="oval:org.mitre.oval:tst:809"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1785" version="5" class="vulnerability" deprecated="true">
      <metadata>
        <title>DEPRECATED: Microsoft JScript Memory Corruption Vulnerability (Win2K w/ JScript 5.6)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Operating System</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1313" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1313"/>
        <description>Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objects early" in certain cases, which results in memory corruption and allows remote attackers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:30.792-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:24.604-04:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:15.987-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:03.450-04:00">ACCEPTED</status_change>
            <modified comment="Use def:1067 instead, which covers all appropriate versions of the DLL" date="2011-01-20T10:31:42.940-05:00">
              <contributor organization="The MITRE Corporation">Nate Przybyszewski</contributor>
            </modified>
            <status_change date="2011-01-20T10:31:42.940-05:00">DEPRECATED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="the version of Jscript.dll is greater than or equal to 5.6.0.0" negate="false" test_ref="oval:org.mitre.oval:tst:719"/>
        <criterion comment="the version of Jscript.dll is less than 5.6.0.8831" negate="false" test_ref="oval:org.mitre.oval:tst:1206"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1783" version="5" class="vulnerability">
      <metadata>
        <title>IE6 Script Execution Vulnerability (Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1190" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1190"/>
        <description>Microsoft Internet Explorer 5.01 through 6 does not always return the correct IOleClientSite information when dynamically creating an embedded object, which could cause Internet Explorer to run the object in the wrong security context or zone, and allow remote attackers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-04-12T12:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-04-12T05:16:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:56.773-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:00.966-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:40.706-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:49.894-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="Win2K/XP/2003 is patched" negate="true" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.3790.507" negate="false" test_ref="oval:org.mitre.oval:tst:1100"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1780" version="2" class="vulnerability">
      <metadata>
        <title>Microsoft Outlook Express 5.5 WAB Remote Code Execution Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Outlook Express</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0014" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0014"/>
        <description>Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book (WAB) file containing "certain Unicode strings" and modified length values.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-04-12T12:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-04-12T05:16:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-10-30T04:13:00.000-04:00" comment="Replaced periods with commas used to check Outlook Version  in ste:649.  Modified by Harvey Rubinovitz.">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <modified date="2006-10-30T12:13:00.000-04:00" comment="Added beginning anchor to ste:649 to eliminate potential mid-string matches.  Modified by Matthew Wojcik.">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2006-10-30T12:13:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-11-14T08:57:55.387-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Microsoft Outlook Express 5.5 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:723"/>
        <criterion comment="the version of inetcomm.dll is less than 5.50.4963.1700" negate="false" test_ref="oval:org.mitre.oval:tst:722"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:178" version="3" class="vulnerability">
      <metadata>
        <title>IE v5.5 Improper Cross Domain Security Validation with Dialog Box</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1326" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1326"/>
        <description>Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model to run malicious script or arbitrary programs via dialog boxes, aka "Improper Cross Domain Security Validation with dialog box."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-27T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:37.822-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:23.739-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Internet Explorer 5.5 Installed">
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3078"/>
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3077"/>
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3076"/>
          <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
        </criteria>
        <criterion comment="the version of mshtml.dll is less than 5.50.4923.2500" negate="false" test_ref="oval:org.mitre.oval:tst:2849"/>
        <criterion comment="the patch q810847 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3115"/>
        <criterion comment="the patch q813489 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3013"/>
        <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1779" version="7" class="vulnerability">
      <metadata>
        <title>MSDTC Denial of Service Vulnerability (Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1184" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1184"/>
        <description>Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0, 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to cause a denial of service (crash) via a BuildContextW request with a large (1) UuidString or (2) GuidIn of a certain length, which causes an out-of-range memory access, aka the MSDTC Denial of Service Vulnerability.  NOTE: this is a variant of CVE-2005-2119.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-05-10T03:16:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-05-10T08:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:30.657-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:57.668-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:00.794-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1779 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:24.075-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:48.999-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of Msdtctm.dll is less than 2001.12.4720.480" test_ref="oval:org.mitre.oval:tst:902"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1778" version="6" class="vulnerability">
      <metadata>
        <title>Microsoft Windows 2000 Microsoft Data Access Components RDS.Dataspace Remote Code Execution Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Data Access Components</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0003" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0003"/>
        <description>Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsoft Data Access Components (MDAC) 2.7 and 2.8, allows remote attackers to execute arbitrary code via unknown attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-04-12T12:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-04-12T05:16:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:15.739-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:03.149-04:00">ACCEPTED</status_change>
            <modified comment="References registry value for Common Files directory due to multilingual support" date="2008-04-14T11:07:00.270-04:00">
              <contributor organization="GFI Software">Clifford Farrugia</contributor>
            </modified>
            <status_change date="2008-04-14T12:27:07.673-04:00">INTERIM</status_change>
            <status_change date="2008-05-05T04:00:12.794-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:15.339-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:48.563-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criteria operator="OR" comment="Microsoft Data Access Components 2.5(SP3), 2.7(SP1), 2.8, or 2.8(SP1) is installed without patches for MS06-014">
          <criteria operator="AND" comment="Microsoft Data Access Components 2.5,SP3 with msadco.dll version less than 2.53.6306.0">
            <criterion comment="Microsoft Data Access Components 2.5 (SP3) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:729"/>
            <criterion comment="the version of msadco.dll is less than 2.53.6306.0" negate="false" test_ref="oval:org.mitre.oval:tst:728"/>
          </criteria>
          <criteria operator="AND" comment="Microsoft Data Access Components 2.7,SP1 with msadco.dll version less than 2.71.9053.0">
            <criterion comment="Microsoft Data Access Components 2.7 (SP1) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2382"/>
            <criterion comment="the version of msadco.dll is less than 2.71.9053.0" negate="false" test_ref="oval:org.mitre.oval:tst:727"/>
          </criteria>
          <criteria operator="AND" comment="Microsoft Data Access Components 2.8 with msadco.dll version less than 2.80.1062.0000">
            <criterion comment="Microsoft Data Access Components 2.8 (RTM) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2363"/>
            <criterion comment="the version of msadco.dll is less than 2.80.1062.0000" negate="false" test_ref="oval:org.mitre.oval:tst:726"/>
          </criteria>
          <criteria operator="AND" comment="Microsoft Data Access Components 2.8,SP1 with msadco.dll version less than 2.81.1124.0">
            <criterion comment="Microsoft Data Access Components 2.8 (SP1) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:725"/>
            <criterion comment="the version of msadco.dll is less than 2.81.1124.0" negate="false" test_ref="oval:org.mitre.oval:tst:724"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1776" version="7" class="vulnerability">
      <metadata>
        <title>IP Source Route Vulnerability (WinS03)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2379" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2379"/>
        <description>Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via unknown vectors related to IP source routing.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:30.526-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:24.157-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:55.419-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:00.627-05:00">ACCEPTED</status_change>
            <modified comment="Changing deprecated obj:563 to obj:588" date="2010-01-12T15:24:00.444-05:00">
              <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2010-01-12T15:24:24.629-05:00">INTERIM</status_change>
            <status_change date="2010-02-01T04:00:06.177-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1776 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:42.865-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:48.219-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of Tcpip.sys is less than 5.2.3790.537" test_ref="oval:org.mitre.oval:tst:730"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1774" version="8" class="vulnerability">
      <metadata>
        <title>IE5 HTA Execution Vulnerability (Win2K)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1388" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1388"/>
        <description>Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-04-12T12:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-04-12T05:16:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Modified ste:831: altered regex to match on a double zero in the minor field of the version, and also added an initial anchor.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:27:00.230-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:28:37.192-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:00.250-05:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:08.609-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:02.902-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:17.959-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:47.456-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:54.878-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:23.505-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="Internet Explorer 5.01 (any patch level) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:927"/>
        <criterion comment="the version of mshtml.dll is less than 5.0.3839.2200" negate="false" test_ref="oval:org.mitre.oval:tst:926"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1772" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the rcp(1) Command May Allow Execution of Unintended Commands</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3717" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3717"/>
        <description>rcp on Sun Solaris 8, 9, and 10 before 20070710 does not properly call certain helper applications, which allows local users to gain privileges by creating files with certain names, possibly containing shell metacharacters or spaces, a similar issue to CVE-2006-0225.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-12T12:19:52.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-07-16T08:59:43.133-04:00">DRAFT</status_change>
            <status_change date="2007-08-01T22:26:14.652-04:00">INTERIM</status_change>
            <status_change date="2007-08-20T08:04:38.771-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102978" negate="false">
          <extend_definition comment="Solaris 8 Installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criteria operator="AND" comment="Patch 110670-04 and 114669-04 or later installed" negate="true">
            <criterion comment="Patch 110670-04 or later installed" test_ref="oval:org.mitre.oval:tst:3292" negate="false"/>
            <criterion comment="Patch 114669-04 or later installed" test_ref="oval:org.mitre.oval:tst:3763" negate="false"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102978" negate="false">
          <extend_definition comment="Solaris 8 Installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criteria operator="AND" comment="Patch 110671-04 and 114670-04 or later installed" negate="true">
            <criterion comment="Patch 110671-04 or later installed" test_ref="oval:org.mitre.oval:tst:3592" negate="false"/>
            <criterion comment="Patch 114670-04 or later installed" test_ref="oval:org.mitre.oval:tst:3608" negate="false"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102978" negate="false">
          <extend_definition comment="Solaris 9 Installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 114716-05 or later installed" test_ref="oval:org.mitre.oval:tst:3667" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102978" negate="false">
          <extend_definition comment="Solaris 9 Installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 114717-05 or later installed" test_ref="oval:org.mitre.oval:tst:3799" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102978" negate="false">
          <extend_definition comment="Solaris 10 Installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 121132-03 or later installed" test_ref="oval:org.mitre.oval:tst:3927" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102978" negate="false">
          <extend_definition comment="Solaris 10 Installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 125794-02 or later installed" test_ref="oval:org.mitre.oval:tst:4051" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:177" version="3" class="vulnerability">
      <metadata>
        <title>Solaris 7 CDE ToolTalk Database Heap Corruption Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>Common Desktop Environment</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0679" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0679"/>
        <description>Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code via an argument to the _TT_CREATE_FILE procedure.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-01-29T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified comment="fixed the service_name entity used in the inetd_object" date="2007-04-10T15:17:00.627-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-04-10T15:17:28.951-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:19.005-04:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:54.338-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:17.742-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="File rpc.ttdbserverd exists" negate="false" test_ref="oval:org.mitre.oval:tst:3105"/>
          <criterion comment="Patch 107893-20 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:2850"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="inetd.conf contains rpc.ttdbserverd" negate="false" test_ref="oval:org.mitre.oval:tst:3103"/>
          <criterion comment="inetd running" negate="false" test_ref="oval:org.mitre.oval:tst:3135"/>
          <criteria operator="OR" comment="File rpc.ttdbserverd executable">
            <criterion comment="File rpc.ttdbserverd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3102"/>
            <criterion comment="File rpc.ttdbserverd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3101"/>
            <criterion comment="File rpc.ttdbserverd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3100"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1767" version="8" class="vulnerability">
      <metadata>
        <title>COM Object Instantiation Memory Corruption Vulnerability (Win2K)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1303" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1303"/>
        <description>Multiple unspecified vulnerabilities in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allow remote attackers to execute arbitrary code by instantiating certain COM objects from Wmm2fxa.dll as ActiveX controls including (1) DXImageTransform.Microsoft.MMSpecialEffect1Input, (2) DXImageTransform.Microsoft.MMSpecialEffect1Input.1, (3) DXImageTransform.Microsoft.MMSpecialEffect2Inputs, (4) DXImageTransform.Microsoft.MMSpecialEffect2Inputs.1, (5) DXImageTransform.Microsoft.MMSpecialEffectInplace1Input, and (6) DXImageTransform.Microsoft.MMSpecialEffectInplace1Input.1, which causes memory corruption during garbage collection.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:29.982-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:22.778-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:40.903-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:59.840-05:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:07.140-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:02.627-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:26.872-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:45.966-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:56.767-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:23.277-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
        <criterion comment="the version of mshtml.dll is less than 5.0.3841.1900" negate="false" test_ref="oval:org.mitre.oval:tst:957"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1764" version="6" class="vulnerability">
      <metadata>
        <title>Server 2003 COM object Remote Code Execution Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0012" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0012"/>
        <description>Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via attack vectors involving COM objects and "crafted files and directories," aka the "Windows Shell Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2006-04-12T12:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-04-12T05:16:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:09:02.381-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:59.456-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1764 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:52.653-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:44.830-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of shell32.dll is less than 6.0.3790.503" test_ref="oval:org.mitre.oval:tst:733"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1763" version="6" class="vulnerability">
      <metadata>
        <title>RPC Mutual Authentication Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2380"/>
        <description>Microsoft Windows 2000 SP4 does not properly validate an RPC server during mutual authentication over SSL, which allows remote attackers to spoof an RPC server, aka the "RPC Mutual Authentication Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:29.673-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:21.799-04:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:10.866-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:02.445-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1763 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:05.126-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:44.529-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="the version of rpcrt4.dll is less than 5.0.2195.7085" test_ref="oval:org.mitre.oval:tst:734"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1762" version="2" class="vulnerability">
      <metadata>
        <title>WU-FTPD "glob-*" Remote DoS Vulnerability (B.11.11)</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
          <product>ftpd</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0256" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0256"/>
        <description>The wu_fnmatch function in wu_fnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service (CPU exhaustion by recursion) via a glob pattern with a large number of * (wildcard) characters, as demonstrated using the dir command.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-04-06T06:39:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-04-12T05:16:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:29.565-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:11.109-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.11">
          <criteria operator="AND" comment="700 Series OS Release 11.11">
            <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
            <criterion comment="HP Release B.11.11" negate="false" test_ref="oval:org.mitre.oval:tst:2514"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 11.11">
            <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
            <criterion comment="HP Release B.11.11" negate="false" test_ref="oval:org.mitre.oval:tst:2514"/>
          </criteria>
        </criteria>
        <criteria operator="OR" comment="INETSVCS-RUN without patch PHNE_34544 or later, OR WUFTP-26.INETSVCS-FTP with version less than B.11.11.01.008 is installed">
          <criteria operator="AND" comment="INETSVCS-RUN without patch PHNE_34544 or later">
            <criterion comment="InternetSrvcs.INETSVCS-RUN is installed" negate="false" test_ref="oval:org.mitre.oval:tst:981"/>
            <criterion comment="Patch PHNE_34544 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:736"/>
          </criteria>
          <criterion comment="WUFTP-26.INETSVCS-FTP with version less than B.11.11.01.008 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:735"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1761" version="1" class="vulnerability">
      <metadata>
        <title>Server 2003 Access Requests Privilege Escalation Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Windows kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0061" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0061"/>
        <description>The kernel of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via certain access requests.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-05-02T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2005-05-04T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2005-06-02T12:00:00.000-04:00" comment="Added product">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-06-22T12:38:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="The version of Ntoskrnl.exe is less than 5.2.3790.280" negate="false" test_ref="oval:org.mitre.oval:tst:1025"/>
        <criterion comment="the patch KB890859 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2737"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1760" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in X Display Manager (xdm(1)) Xsession Script</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5214"/>
        <description>Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-10T12:25:23.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-13T13:57:13.122-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:28.241-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:41.428-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102652" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 111844-04 or later installed" test_ref="oval:org.mitre.oval:tst:3324" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102652" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 124830-01 or later installed" test_ref="oval:org.mitre.oval:tst:3994" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102652" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 124457-01 or later installed" test_ref="oval:org.mitre.oval:tst:3954" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102652" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 111845-04 or later installed" test_ref="oval:org.mitre.oval:tst:4176" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102652" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 124831-01 or later installed" test_ref="oval:org.mitre.oval:tst:3585" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102652" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 124458-01 or later installed" test_ref="oval:org.mitre.oval:tst:3425" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:176" version="6" class="vulnerability">
      <metadata>
        <title>HP-UX 11.00 Blind Connection Reset Attack Vulnerability</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0790" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0790"/>
        <description>Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error messages, aka the "blind connection-reset attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:48:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:29.514-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:21.329-04:00">ACCEPTED</status_change>
            <modified comment="Added title." date="2007-02-26T01:00:00.112-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-02-26T01:00:37.137-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:02.256-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:29.478-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:11.001-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:176 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:48.893-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:19.783-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.00">
          <criteria operator="AND" comment="700 Series OS Release 11.00">
            <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:3443"/>
            <criterion comment="HP Release B.11.00" test_ref="oval:org.mitre.oval:tst:3571"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 11.00">
            <criterion comment="800-series HP" test_ref="oval:org.mitre.oval:tst:4124"/>
            <criterion comment="HP Release B.11.00" test_ref="oval:org.mitre.oval:tst:3571"/>
          </criteria>
        </criteria>
        <criterion negate="true" comment="Patch PHNE_33395 is installed" test_ref="oval:org.mitre.oval:tst:3393"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1756" version="9" class="vulnerability">
      <metadata>
        <title>ART Image Rendering Vulnerability (Win2K)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2378" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2378"/>
        <description>Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:29.328-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:20.829-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:44.502-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:59.278-05:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:10.658-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:01.964-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1756 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:32.443-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:44.157-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:51.523-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:22.931-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" test_ref="oval:org.mitre.oval:tst:2794"/>
        <criterion comment="the version of jgdw400.dll is less than 106.0.0.0" test_ref="oval:org.mitre.oval:tst:835"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1752" version="5" class="vulnerability">
      <metadata>
        <title>HTML Decoding Memory Corruption Vulnerability (WinS03)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2382" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2382"/>
        <description>Heap-based buffer overflow in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code via crafted UTF-8 encoded HTML that results in size discrepancies during conversion to Unicode, aka "HTML Decoding Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:29.199-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:20.420-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:57.843-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:59.088-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:59.721-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:43.809-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="Win2K/XP/2003 is patched" negate="true" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.3790.536" negate="false" test_ref="oval:org.mitre.oval:tst:952"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:175" version="3" class="vulnerability">
      <metadata>
        <title>Solaris 8 CDE ToolTalk Database Server Symbolic Link Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>Common Desktop Environment</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0678" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0678"/>
        <description>CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-01-29T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified comment="fixed the service_name entity used in the inetd_object" date="2007-04-10T15:17:00.627-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-04-10T15:17:27.752-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:18.807-04:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:54.459-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:17.387-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="File rpc.ttdbserverd exists" negate="false" test_ref="oval:org.mitre.oval:tst:3105"/>
          <criterion comment="Patch 110286-09 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3104"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="inetd.conf contains rpc.ttdbserverd" negate="false" test_ref="oval:org.mitre.oval:tst:3103"/>
          <criterion comment="inetd running" negate="false" test_ref="oval:org.mitre.oval:tst:3135"/>
          <criteria operator="OR" comment="File rpc.ttdbserverd executable">
            <criterion comment="File rpc.ttdbserverd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3102"/>
            <criterion comment="File rpc.ttdbserverd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3101"/>
            <criterion comment="File rpc.ttdbserverd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3100"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1748" version="3" class="vulnerability">
      <metadata>
        <title>FPSE XSS Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft FrontPage Server Extensions 2002</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0015" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0015"/>
        <description>Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002 and SharePoint Team Services allows remote attackers to inject arbitrary web script or HTML, then leverage the attack to execute arbitrary programs or create new accounts, via the (1) operation, (2) command, and (3) name parameters.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-04-13T02:47:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-04-19T10:08:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-10T08:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1748 - Modified vulnerabilities - a lot of fixes" date="2015-07-22T13:29:00.390-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-07-22T13:32:13.283-04:00">INTERIM</status_change>
            <status_change date="2015-08-10T04:00:22.654-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criteria operator="OR" comment="Windows 2000, XP, or 2003 is installed">
          <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Windows XP is installed" test_ref="oval:org.mitre.oval:tst:2838"/>
          <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        </criteria>
        <extend_definition comment="Microsoft FrontPage Server Extensions 2002 is installed" definition_ref="oval:org.mitre.oval:def:28542"/>
        <criterion comment="Fpadmdll.dll version is less than 10.0.6790.0" test_ref="oval:org.mitre.oval:tst:744"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:28542" version="3" class="inventory">
      <metadata>
        <title>Microsoft FrontPage Server Extensions 2002 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft FrontPage Server Extensions 2002</product>
        </affected>
        <reference ref_id="cpe:/a:microsoft:frontpage_server_extensions:2002" source="CPE"/>
        <description>Microsoft FrontPage Server Extensions 2002 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2015-06-05T08:31:03">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </submitted>
            <status_change date="2015-06-10T14:07:23.441-04:00">DRAFT</status_change>
            <status_change date="2015-06-29T04:00:05.749-04:00">INTERIM</status_change>
            <status_change date="2015-07-20T04:00:09.785-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="FrontPage Server Extensions 2002 are enabled (NT, 2K, XP)" test_ref="oval:org.mitre.oval:tst:2677"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1747" version="2" class="vulnerability">
      <metadata>
        <title>Webproxy Off-by-One Error in mod_ssl CRL</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1268"/>
        <description>Off-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache, when configured to use a CRL, allows remote attackers to cause a denial of service (child process crash) via a CRL that causes a buffer overflow of one null byte.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-03-18T07:24:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-03-22T11:10:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-04-06T06:31:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:29.310-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:10.805-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="700 Series OS Release 11.04">
          <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
          <criterion comment="HP Release B.11.04" negate="false" test_ref="oval:org.mitre.oval:tst:1276"/>
        </criteria>
        <criterion comment="Webproxy is installed" negate="false" test_ref="oval:org.mitre.oval:tst:890"/>
        <criterion comment="Patch PHSS_34163 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:889"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1741" version="6" class="vulnerability">
      <metadata>
        <title>RRAS Memory Corruption Vulnerability (Win2K)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2370" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2370"/>
        <description>Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted "RPC related requests," aka the "RRAS Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:28.842-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:20.005-04:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:15.391-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:01.686-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1741 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:12.762-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:41.863-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="the version of rasmans.dll is less than 5.0.2195.7093" test_ref="oval:org.mitre.oval:tst:747"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1740" version="8" class="vulnerability">
      <metadata>
        <title>IE5 Address Bar Spoofing Vulnerability (Win2K)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1192" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1192"/>
        <description>Microsoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by spoofing the address bar and other parts of the trust UI via unknown methods that allow "window content to persist" after the user has navigated to another site, aka the "Address Bar Spoofing Vulnerability."  NOTE: this is a different vulnerability than CVE-2006-1626.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-04-12T12:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-04-12T05:16:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Modified ste:831: altered regex to match on a double zero in the minor field of the version, and also added an initial anchor.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:27:00.230-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:28:37.014-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:58.891-05:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:12.081-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:01.477-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:07.602-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:41.503-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:53.470-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:22.813-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="Internet Explorer 5.01 (any patch level) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:927"/>
        <criterion comment="the version of mshtml.dll is less than 5.0.3839.2200" negate="false" test_ref="oval:org.mitre.oval:tst:926"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1736" version="5" class="vulnerability">
      <metadata>
        <title>IE5.01,SP3 Security Zone Restriction Bypass Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0054" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0054"/>
        <description>Internet Explorer 5.01, 5.5, and 6 allows remote attackers to spoof a less restrictive security zone and execute arbitrary code via an HTML page containing URLs that contain hostnames that have been double hex encoded, which are decoded twice to generate a malicious hostname, aka the "URL Decoding Zone Spoofing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-03-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-03-23T08:09:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-13T12:15:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-05-04T12:33:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed test to check kb867282.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2824. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:48:00.494-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:52:25.682-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:58.661-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:47.305-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:22.708-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3015"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3528.700" negate="false" test_ref="oval:org.mitre.oval:tst:749"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:17338" version="7" class="vulnerability">
      <metadata>
        <title>DoS for arbitrary chosen IP addresses</title>
        <affected family="unix">
          <platform>openSUSE 11.4</platform>
          <platform>openSUSE 12.2</platform>
          <platform>openSUSE 12.3</platform>
        </affected>
        <reference ref_id="CVE-2013-2178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2178" source="CVE"/>
        <description>The apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf files in Fail2ban before 0.8.10 do not properly validate log messages, which allows remote attackers to block arbitrary IP addresses via certain messages in a request.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-07-03T10:26:26.748+04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </submitted>
            <status_change date="2013-07-05T16:52:54.958-04:00">DRAFT</status_change>
            <status_change date="2013-07-22T04:02:59.266-04:00">INTERIM</status_change>
            <status_change date="2013-08-12T04:09:09.092-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:17338 - Replace the occurrences of OpenSUSE by openSUSE in Platform" date="2014-06-10T14:43:00.558-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-06-10T14:44:51.447-04:00">INTERIM</status_change>
            <status_change date="2014-06-30T04:06:31.504-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Package List">
          <extend_definition comment="openSUSE 12.3 is installed" definition_ref="oval:org.mitre.oval:def:17041"/>
          <criterion comment="Package fail2ban is less than 0.8.8-2.8.1" test_ref="oval:org.mitre.oval:tst:81573"/>
        </criteria>
        <criteria operator="AND" comment="Package List">
          <extend_definition comment="openSUSE 12.2 is installed" definition_ref="oval:org.mitre.oval:def:17262"/>
          <criterion comment="Package fail2ban is less than 0.8.6-2.9.1" test_ref="oval:org.mitre.oval:tst:81765"/>
        </criteria>
        <criteria operator="AND" comment="Package List">
          <extend_definition comment="openSUSE 11.4 is installed" definition_ref="oval:org.mitre.oval:def:16752"/>
          <criterion comment="Package fail2ban is less than 0.8.4-22.1" test_ref="oval:org.mitre.oval:tst:81672"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16752" version="5" class="inventory">
      <metadata>
        <title>openSUSE 11.4 is installed</title>
        <affected family="unix">
          <platform>openSUSE 11.4</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:novell:opensuse:11.4"/>
        <description>openSUSE 11.4 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-07-03T10:26:26.748+04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </submitted>
            <status_change date="2013-07-05T16:52:52.230-04:00">DRAFT</status_change>
            <status_change date="2013-07-22T04:01:17.565-04:00">INTERIM</status_change>
            <status_change date="2013-08-12T04:08:46.605-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:16752 - Replace the occurrences of OpenSUSE by openSUSE in Platform" date="2014-06-10T14:43:00.558-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-06-10T14:44:51.234-04:00">INTERIM</status_change>
            <status_change date="2014-06-30T04:06:01.759-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="openSUSE 11.4 is installed" test_ref="oval:org.mitre.oval:tst:81660"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1732" version="2" class="vulnerability">
      <metadata>
        <title>/usr/lib/print/conv_fix Privilege Escalation Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1360" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1360"/>
        <description>Unknown vulnerability in conv_fix in Sun Solaris 7 through 9, when invoked by conv_lpd, allows local users to overwrite arbitrary files.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-04-13T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-04-20T04:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-05-11T04:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T04:00:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-08-25T10:03:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-25T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 7,8,or 9 installed">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
        </criteria>
        <criterion comment="SunSoft Print - Client - Usr (SUNWpcu) installed" negate="false" test_ref="oval:org.mitre.oval:tst:753"/>
        <criterion comment="Patch 107115-14 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:752"/>
        <criterion comment="Patch 109320-09 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:751"/>
        <criterion comment="Patch 113329-05 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:750"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:173" version="4" class="vulnerability">
      <metadata>
        <title>Apache prefork MPM Denial of Service</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0253" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0253"/>
        <description>The prefork MPM in Apache 2 before 2.0.47 does not properly handle certain errors from accept, which could lead to a denial of service.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-05T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:50.575-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:18.541-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.149-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:55:38.251-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:16.613-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="httpd version is less than 2.0.40-21.5" negate="false" test_ref="oval:org.mitre.oval:tst:2852"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="httpd listening on the network" negate="false" test_ref="oval:org.mitre.oval:tst:2865"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1728" version="5" class="vulnerability">
      <metadata>
        <title>Exception Handling Memory Corruption Vulnerability (WinS03)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2218"/>
        <description>Unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote attackers to execute arbitrary code via "exceptional conditions" that trigger memory corruption, as demonstrated using an exception handler and nested object tags, a variant of CVE-2006-1992.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:27.984-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:17.779-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:59.289-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:58.413-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:52.398-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:40.535-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="Win2K/XP/2003 is patched" negate="true" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.3790.536" negate="false" test_ref="oval:org.mitre.oval:tst:952"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1727" version="2" class="vulnerability">
      <metadata>
        <title>Webproxy CGI Byterange Request DoS</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2728" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2728"/>
        <description>The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-03-18T07:24:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-03-22T11:10:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-04-06T06:31:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:29.095-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:10.608-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="700 Series OS Release 11.04">
          <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
          <criterion comment="HP Release B.11.04" negate="false" test_ref="oval:org.mitre.oval:tst:1276"/>
        </criteria>
        <criterion comment="Webproxy is installed" negate="false" test_ref="oval:org.mitre.oval:tst:890"/>
        <criterion comment="Patch PHSS_34163 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:889"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1726" version="2" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the Kerberos Administration Daemon (kadmind(1M)) May Lead to Arbitrary Code Execution</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2798" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2798"/>
        <description>Stack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute arbitrary code via a crafted request to rename a principal.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-28T09:00:00.000-04:00">
              <contributor organization="Opsware, Inc.">Nicholas Hansen</contributor>
            </submitted>
            <status_change date="2007-06-29T09:24:18.908-04:00">DRAFT</status_change>
            <status_change date="2007-07-16T09:55:10.258-04:00">INTERIM</status_change>
            <status_change date="2007-08-01T22:26:14.499-04:00">ACCEPTED</status_change>
            <modified comment="The test references for all the criterion were inverted. This fix corrects the test_refs and updates the criteria comments to include the Sun Alert reference." date="2007-11-01T13:08:00.938-04:00">
              <contributor organization="Opsware, Inc.">Nicholas Hansen</contributor>
            </modified>
            <status_change date="2007-11-01T13:11:21.000-04:00">INTERIM</status_change>
            <status_change date="2007-11-16T08:14:19.297-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102985">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Sun Enterprise Authentication Mechanism (SEAM, SUNWkr5ma) installed" test_ref="oval:org.mitre.oval:tst:3971"/>
          <criterion comment="Key Distribution Center (kadmind) process running" test_ref="oval:org.mitre.oval:tst:3331"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102985">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Sun Enterprise Authentication Mechanism (SEAM, SUNWkr5ma) installed" test_ref="oval:org.mitre.oval:tst:3971"/>
          <criterion comment="Key Distribution Center (kadmind) process running" test_ref="oval:org.mitre.oval:tst:3331"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102985">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Sun Enterprise Authentication Mechanism (SEAM, SUNWkr5ma) installed" test_ref="oval:org.mitre.oval:tst:3971"/>
          <criterion comment="Key Distribution Center (kadmind) process running" test_ref="oval:org.mitre.oval:tst:3331"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102985">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Sun Enterprise Authentication Mechanism (SEAM, SUNWkr5ma) installed" test_ref="oval:org.mitre.oval:tst:3971"/>
          <criterion comment="Key Distribution Center (kadmind) process running" test_ref="oval:org.mitre.oval:tst:3331"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102985">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Sun Enterprise Authentication Mechanism (SEAM, SUNWkr5ma) installed" test_ref="oval:org.mitre.oval:tst:3971"/>
          <criterion comment="Key Distribution Center (kadmind) process running" test_ref="oval:org.mitre.oval:tst:3331"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102985">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Sun Enterprise Authentication Mechanism (SEAM, SUNWkr5ma) installed" test_ref="oval:org.mitre.oval:tst:3971"/>
          <criterion comment="Key Distribution Center (kadmind) process running" test_ref="oval:org.mitre.oval:tst:3331"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:17242" version="6" class="vulnerability">
      <metadata>
        <title>openconnect vulnerability</title>
        <affected family="unix">
          <platform>openSUSE 12.2</platform>
        </affected>
        <reference ref_id="CVE-2012-3291" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3291" source="CVE"/>
        <description>Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a denial of service via a crafted greeting banner.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-07-03T10:26:26.748+04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </submitted>
            <status_change date="2013-07-05T16:52:55.955-04:00">DRAFT</status_change>
            <status_change date="2013-07-22T04:02:53.598-04:00">INTERIM</status_change>
            <status_change date="2013-08-12T04:09:03.273-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:17242 - Replace the occurrences of OpenSUSE by openSUSE in Platform" date="2014-06-10T14:43:00.558-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-06-10T14:44:50.654-04:00">INTERIM</status_change>
            <status_change date="2014-06-30T04:06:23.509-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="openSUSE 12.2 is installed" definition_ref="oval:org.mitre.oval:def:17262"/>
        <criteria operator="OR" comment="Packages section">
          <criterion comment="Package openconnect is less than 3.20-2.4.1" test_ref="oval:org.mitre.oval:tst:81334"/>
          <criterion comment="Package openconnect-debuginfo is less than 3.20-2.4.1" test_ref="oval:org.mitre.oval:tst:81495"/>
          <criterion comment="Package openconnect-debugsource is less than 3.20-2.4.1" test_ref="oval:org.mitre.oval:tst:81319"/>
          <criterion comment="Package openconnect-devel is less than 3.20-2.4.1" test_ref="oval:org.mitre.oval:tst:80847"/>
          <criterion comment="Package openconnect-doc is less than 3.20-2.4.1" test_ref="oval:org.mitre.oval:tst:81816"/>
          <criterion comment="Package openconnect-lang is less than 3.20-2.4.1" test_ref="oval:org.mitre.oval:tst:81297"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:17262" version="5" class="inventory">
      <metadata>
        <title>openSUSE 12.2 is installed</title>
        <affected family="unix">
          <platform>openSUSE 12.2</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:novell:opensuse:12.2"/>
        <description>openSUSE 12.2 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-07-03T10:26:26.748+04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </submitted>
            <status_change date="2013-07-05T16:52:51.858-04:00">DRAFT</status_change>
            <status_change date="2013-07-22T04:02:54.583-04:00">INTERIM</status_change>
            <status_change date="2013-08-12T04:09:04.124-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:17262 - Replace the occurrences of OpenSUSE by openSUSE in Platform" date="2014-06-10T14:43:00.558-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-06-10T14:44:50.534-04:00">INTERIM</status_change>
            <status_change date="2014-06-30T04:06:24.631-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="openSUSE 12.2 is installed" test_ref="oval:org.mitre.oval:tst:81626"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1724" version="5" class="vulnerability">
      <metadata>
        <title>IE6 HTA Execution Vulnerability (Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1388" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1388"/>
        <description>Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-04-12T12:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-04-12T05:16:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:58.790-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:58.202-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:54.357-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:39.935-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="Win2K/XP/2003 is patched" negate="true" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.3790.507" negate="false" test_ref="oval:org.mitre.oval:tst:1100"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1721" version="6" class="vulnerability">
      <metadata>
        <title>GDI+ JPEG Parsing Engine Buffer Overflow (VS.NET 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Visual Studio .NET 2003</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0200"/>
        <description>Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-09-24T04:32:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2004-09-29T02:08:00.000-04:00">DRAFT</status_change>
            <modified date="2004-09-30T11:39:00.000-04:00" comment="changed affected platforms">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2004-10-20T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed test to check KB830348.  Added check for VS.NET Gdiplus.dll in WinSxS.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-08-28T12:00:00.000-04:00" comment="modified obj 578 to use xsi:nil instead of a .* pattern match">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-08-28T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:27.749-04:00">ACCEPTED</status_change>
            <modified comment="var:228 updated: reference to windir environment variable object obj:577 replaced with obj:219, the registry object for SystemRoot.  Literal component now starts with a backslash.  Implemented by Harvey Rubinovitz." date="2007-01-05T16:46:00.401-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-05T16:52:19.546-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:57.937-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:tst:755 - Updating criterion logic and check attributes for Gdiplus.dll related Objects." date="2013-12-30T09:14:00.018-05:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-12-30T09:17:36.748-05:00">INTERIM</status_change>
            <status_change date="2014-01-20T04:00:16.348-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Microsoft Visual Studio .NET 2003 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:756"/>
        <criterion comment="the version of Gdiplus.dll for Visual Studio .NET is less than 5.1.3102.1355" negate="false" test_ref="oval:org.mitre.oval:tst:755"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1720" version="6" class="vulnerability">
      <metadata>
        <title>RRAS Memory Corruption Vulnerability (WinS03)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2370" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2370"/>
        <description>Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted "RPC related requests," aka the "RRAS Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:27.624-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:17.355-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:09:02.545-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:57.740-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1720 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:30.929-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:39.629-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of rasmans.dll is less than 5.2.3790.529" test_ref="oval:org.mitre.oval:tst:757"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1718" version="1" class="vulnerability">
      <metadata>
        <title>Windows Virtual DOS Machine Local Privilege Escalation Vulnerability (Test 2)</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <product>VDM</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0118" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0118"/>
        <description>The component for the Virtual DOS Machine (VDM) subsystem in Windows NT 4.0 and Windows 2000 does not properly validate system structures, which allows local users to access protected kernel memory and execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-06-11T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2004-08-04T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="the patch kb835732 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1510"/>
        <criteria operator="OR" comment="Version check of Ntoskrnl for NT Terminal Server or NT Workstation">
          <criteria operator="AND" comment="Version Ntoskrnl.exe is less than 4.0.1381.7265 and this is an NT Workstation">
            <criterion comment="The version of Ntoskrnl.exe is less than 4.0.1381.7265" negate="false" test_ref="oval:org.mitre.oval:tst:759"/>
            <criterion comment="this is an NT Workstation" negate="false" test_ref="oval:org.mitre.oval:tst:2703"/>
          </criteria>
          <criteria operator="AND" comment="This is an NT Terminal Server and the version of Ntoskrnl.exe is less than 4.0.1381.33563">
            <criterion comment="The version of Ntoskrnl.exe is less than 4.0.1381.33563" negate="false" test_ref="oval:org.mitre.oval:tst:758"/>
            <criterion comment="this is an NT Terminal Server" negate="false" test_ref="oval:org.mitre.oval:tst:3097"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1714" version="2" class="vulnerability">
      <metadata>
        <title>VirusVault Off-by-One Error in mod_ssl CRL</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1268"/>
        <description>Off-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache, when configured to use a CRL, allows remote attackers to cause a denial of service (child process crash) via a CRL that causes a buffer overflow of one null byte.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-03-18T07:24:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-03-22T11:10:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-04-06T06:31:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:29.024-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:10.523-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="700 Series OS Release 11.04">
          <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
          <criterion comment="HP Release B.11.04" negate="false" test_ref="oval:org.mitre.oval:tst:1276"/>
        </criteria>
        <criterion comment="VirusVault is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1040"/>
        <criterion comment="Patch PHSS_34123 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1039"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1711" version="8" class="vulnerability">
      <metadata>
        <title>IE5 HTML Parsing Vulnerability (Win2K)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1185" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1185"/>
        <description>Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via certain invalid HTML that causes memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-04-12T12:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-04-12T05:16:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Modified ste:831: altered regex to match on a double zero in the minor field of the version, and also added an initial anchor.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:27:00.230-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:28:36.850-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:57.542-05:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:06.192-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:00.769-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:15.552-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:38.956-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:41.350-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:22.579-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="Internet Explorer 5.01 (any patch level) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:927"/>
        <criterion comment="the version of mshtml.dll is less than 5.0.3839.2200" negate="false" test_ref="oval:org.mitre.oval:tst:926"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1707" version="2" class="vulnerability">
      <metadata>
        <title>Enterprise Storage Manager 2.1 SAN Manager management station patch</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>Sun Enterprise Storage Manager (ESM)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1345"/>
        <description>Unknown vulnerability in Sun StorEdge Enterprise Storage Manager (ESM) 2.1 for Solaris 8 and Solaris 9 allows local users with the "ESMUser" role to gain root access.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-19T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-24T03:40:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
            <modified date="2009-06-15T12:00:00.000-04:00" comment="Added CVE Reference. Added solaris 9 as an affected platform.">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2009-06-22T04:00:51.071-04:00">INTERIM</status_change>
            <status_change date="2009-07-13T04:00:30.181-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criteria operator="OR" comment="Solaris 8 or 9 installed">
          <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
        </criteria>
        <criterion comment="Sun Enterprise Storage Manager installed" test_ref="oval:org.mitre.oval:tst:762"/>
        <criterion negate="true" comment="Patch 117367-01 or later installed" test_ref="oval:org.mitre.oval:tst:761"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1701" version="10" class="vulnerability">
      <metadata>
        <title>IE AbusiveParent Vulnerability (64-bit XP)</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1319" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1319"/>
        <description>The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a window, opening a child page whose target is the window with the given name, then injecting the script from the parent into the child using execScript, as demonstrated by "AbusiveParent" in Internet Explorer 6.0.2900.2180.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-02-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </submitted>
            <status_change date="2005-02-11T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-03-02T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-23T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-06-02T12:00:00.000-04:00" comment="Added product">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-06-08T03:17:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-29T06:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:823: Removed HKEY_LOCAL_MACHINE\ from the key, as it's specified as the hive.  Implemented by Harvey Rubinovitz." date="2007-01-22T00:37:00.710-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T00:38:35.663-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:56.697-05:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2656" date="2010-11-29T16:12:00.873-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:12:59.581-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:35.095-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:06.593-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:37.263-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:var:206 - modified vulnerabilities ofÂ MS Visual C++ Â  (winsxs folder checks were modified)" date="2014-04-17T13:09:00.881-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-04-17T13:11:49.949-04:00">INTERIM</status_change>
            <status_change date="2014-05-05T04:00:13.484-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows XP 64-bit with SP1 (or earlier) installed">
          <criteria operator="AND" comment="Windows XP (sp1 or earlier) is installed">
            <criterion comment="Windows XP is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2838"/>
            <criterion comment="Win2K/XP/2003 service pack 2 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2837"/>
          </criteria>
        </criteria>
        <criterion comment="the version of wdhtmled.ocx is less than 6.1.0.9232" negate="false" test_ref="oval:org.mitre.oval:tst:763"/>
        <criterion comment="the patch kb891781 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:1151"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:170" version="3" class="vulnerability">
      <metadata>
        <title>Sun Solaris Gzip Race condition and Directory Traversal Issues</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
          <product>gzip</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1228" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1228"/>
        <description>Directory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote attackers to write to arbitrary directories via a .. (dot dot) in the original filename within a compressed file.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:52:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:27.272-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:16.282-04:00">ACCEPTED</status_change>
            <modified comment="Added title. Implemented by Jon Baker of The MITRE Corporation." date="2007-02-13T14:05:00.064-05:00">
              <contributor organization="Security-Database">Nabil Ouchn</contributor>
            </modified>
            <status_change date="2007-02-13T14:07:07.091-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:17:00.447-04:00">ACCEPTED</status_change>
            <modified comment="Corrected sparc criterion that was intended to be x86." date="2009-07-17T11:09:00.287-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </modified>
            <status_change date="2009-07-17T11:27:44.296-04:00">INTERIM</status_change>
            <status_change date="2009-08-03T04:00:02.600-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert ID 101816 criteria.">
          <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3437"/>
          <criterion comment="sparc architecture" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criterion comment="Patch 112668-03 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:4005"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert ID 101816 criteria.">
          <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3437"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criterion comment="Patch 112669-03 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:4070"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert ID 101816 criteria.">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3172"/>
          <criterion comment="sparc architecture" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criterion comment="Patch 116340-04 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3666"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert ID 101816 criteria.">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3172"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criterion comment="Patch 116341-04 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3778"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert ID 101816 criteria.">
          <criterion comment="Solaris 10 Installed" test_ref="oval:org.mitre.oval:tst:3680"/>
          <criterion comment="sparc architecture" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criterion comment="Patch 120719-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3295"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert ID 101816 criteria.">
          <criterion comment="Solaris 10 Installed" test_ref="oval:org.mitre.oval:tst:3680"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criterion comment="Patch 120720-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3621"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:17" version="3" class="vulnerability">
      <metadata>
        <title>IE GetObject Security Bypass</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0023" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0023"/>
        <description>Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to read arbitrary files via malformed requests to the GetObject function, which bypass some of GetObject's security checks.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T05:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="changed IE test to wrt-18">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:43.577-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:22.161-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="the version of mshtml.dll is less than 6.0.2713.1100" negate="false" test_ref="oval:org.mitre.oval:tst:3091"/>
        <criterion comment="the patch q316059 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3121"/>
        <criterion comment="the patch q319282 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3120"/>
        <criterion comment="the patch q321232 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3119"/>
        <criterion comment="the patch q323759 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3118"/>
        <criterion comment="the patch q328970 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3117"/>
        <criterion comment="the patch q324929 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3116"/>
        <criterion comment="the patch q810847 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3115"/>
        <criterion comment="the patch q813489 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3114"/>
        <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1697" version="3" class="vulnerability">
      <metadata>
        <title>X.Org Privilege Escalation Vulnerability in X11R6.9, X11R7.0</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0745" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0745"/>
        <description>X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the return value of a call to geteuid, which allows local users to bypass intended restrictions and (1) execute arbitrary code via the -modulepath command line option or (2) overwrite arbitrary files via -logfile.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-03-21T04:03:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-03-22T11:10:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-04-06T06:31:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1697 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:02.748-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:19.512-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Solaris 10 Installed" test_ref="oval:org.mitre.oval:tst:2459"/>
        <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:2463"/>
        <criteria operator="AND" comment="Patch 118966-14 through 118966-16 is installed.">
          <criterion comment="Patch 118966-14 or later installed" test_ref="oval:org.mitre.oval:tst:765"/>
          <criterion negate="true" comment="Patch 118966-17 or later installed" test_ref="oval:org.mitre.oval:tst:764"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1695" version="4" class="vulnerability">
      <metadata>
        <title>DHTML Object Memory Corruption Vulnerability (IE6 for XP,SP2)</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0553" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0553"/>
        <description>Race condition in the memory management routines in the DHTML object processor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail, aka "DHTML Object Memory Corruption Vulnerability".</description>
        <oval_repository>
          <dates>
            <submitted date="2005-05-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-05-11T05:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-22T12:38:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:583: Removed blank after the word Filelist in the Key.  Modified by Harvey Rubinovitz." date="2007-01-22T00:06:00.366-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T00:07:40.459-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:56.476-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:37.076-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:22.025-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6.0 Installed XP SP2" negate="false" test_ref="oval:org.mitre.oval:tst:2403"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2900.2627" negate="false" test_ref="oval:org.mitre.oval:tst:768"/>
          <criterion comment="the patch kb890923  is installed (XP SP2 Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:767"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16948" version="9" class="vulnerability">
      <metadata>
        <title>openSUSE-SU-2013:1087-1: update for openstack-nova</title>
        <affected family="unix">
          <platform>openSUSE 12.3</platform>
        </affected>
        <reference ref_id="CVE-2013-2030" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2030" source="CVE"/>
        <description>keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demonstrated using /tmp/keystone-signing-nova on Fedora.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-07-02T10:26:26.748+04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </submitted>
            <status_change date="2013-07-05T09:51:49.156-04:00">DRAFT</status_change>
            <status_change date="2013-07-22T04:01:58.349-04:00">INTERIM</status_change>
            <status_change date="2013-08-12T04:08:53.965-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:16948 - changed extends from 17210 to 17041 (identical inventories) (17210 can be deprecated)" date="2013-12-18T16:27:00.878-05:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-12-18T16:29:36.593-05:00">INTERIM</status_change>
            <status_change date="2014-01-06T04:00:07.793-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:16948 - Replace the occurrences of OpenSUSE by openSUSE in Platform" date="2014-06-10T14:43:00.558-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-06-10T14:44:51.627-04:00">INTERIM</status_change>
            <status_change date="2014-06-30T04:06:06.426-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="openSUSE 12.3 is installed" definition_ref="oval:org.mitre.oval:def:17041"/>
        <criteria operator="OR" comment="Packages section">
          <criterion comment="Package python-greenlet is less than 0.4.0-3.3.1" test_ref="oval:org.mitre.oval:tst:80685"/>
          <criterion comment="Package python-greenlet-debuginfo is less than 0.4.0-3.3.1" test_ref="oval:org.mitre.oval:tst:80831"/>
          <criterion comment="Package python-greenlet-debugsource is less than 0.4.0-3.3.1" test_ref="oval:org.mitre.oval:tst:81583"/>
          <criterion comment="Package openstack-nova is less than 2012.2.4+git.1363297910.9561484-2.10.1" test_ref="oval:org.mitre.oval:tst:81574"/>
          <criterion comment="Package openstack-nova-api is less than 2012.2.4+git.1363297910.9561484-2.10.1" test_ref="oval:org.mitre.oval:tst:81394"/>
          <criterion comment="Package openstack-nova-cert is less than 2012.2.4+git.1363297910.9561484-2.10.1" test_ref="oval:org.mitre.oval:tst:81675"/>
          <criterion comment="Package openstack-nova-compute is less than 2012.2.4+git.1363297910.9561484-2.10.1" test_ref="oval:org.mitre.oval:tst:81069"/>
          <criterion comment="Package openstack-nova-doc is less than 2012.2.4+git.1363297910.9561484-2.10.1" test_ref="oval:org.mitre.oval:tst:81246"/>
          <criterion comment="Package openstack-nova-network is less than 2012.2.4+git.1363297910.9561484-2.10.1" test_ref="oval:org.mitre.oval:tst:81133"/>
          <criterion comment="Package openstack-nova-novncproxy is less than 2012.2.4+git.1363297910.9561484-2.10.1" test_ref="oval:org.mitre.oval:tst:81313"/>
          <criterion comment="Package openstack-nova-objectstore is less than 2012.2.4+git.1363297910.9561484-2.10.1" test_ref="oval:org.mitre.oval:tst:81430"/>
          <criterion comment="Package openstack-nova-scheduler is less than 2012.2.4+git.1363297910.9561484-2.10.1" test_ref="oval:org.mitre.oval:tst:81518"/>
          <criterion comment="Package openstack-nova-test is less than 2012.2.4+git.1363297910.9561484-2.10.1" test_ref="oval:org.mitre.oval:tst:81378"/>
          <criterion comment="Package openstack-nova-vncproxy is less than 2012.2.4+git.1363297910.9561484-2.10.1" test_ref="oval:org.mitre.oval:tst:81551"/>
          <criterion comment="Package openstack-nova-volume is less than 2012.2.4+git.1363297910.9561484-2.10.1" test_ref="oval:org.mitre.oval:tst:81451"/>
          <criterion comment="Package python-greenlet-devel is less than 0.4.0-3.3.1" test_ref="oval:org.mitre.oval:tst:81604"/>
          <criterion comment="Package python-nova is less than 2012.2.4+git.1363297910.9561484-2.10.1" test_ref="oval:org.mitre.oval:tst:81497"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16937" version="7" class="vulnerability">
      <metadata>
        <title>OpenStack keystone password disclosure on command line</title>
        <affected family="unix">
          <platform>openSUSE 12.3</platform>
        </affected>
        <reference ref_id="CVE-2013-2013" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2013" source="CVE"/>
        <description>The user-password-update command in python-keystoneclient before 0.2.4 accepts the new password in the --password argument, which allows local users to obtain sensitive information by listing the process.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-07-03T10:26:26.748+04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </submitted>
            <status_change date="2013-07-05T16:52:55.480-04:00">DRAFT</status_change>
            <status_change date="2013-07-22T04:01:55.128-04:00">INTERIM</status_change>
            <status_change date="2013-08-12T04:08:53.409-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:16937 - Replace the occurrences of OpenSUSE by openSUSE in Platform" date="2014-06-10T14:43:00.558-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-06-10T14:44:50.258-04:00">INTERIM</status_change>
            <status_change date="2014-06-30T04:06:06.131-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="openSUSE 12.3 is installed" definition_ref="oval:org.mitre.oval:def:17041"/>
        <criteria operator="OR" comment="Packages section">
          <criterion comment="Package python-keystoneclient is less than 0.2.1.3.gd37a3fb+git.1357543650.d37a3fb-2.8.1" test_ref="oval:org.mitre.oval:tst:81644"/>
          <criterion comment="Package python-keystoneclient-doc is less than 0.2.1.3.gd37a3fb+git.1357543650.d37a3fb-2.8.1" test_ref="oval:org.mitre.oval:tst:81669"/>
          <criterion comment="Package python-keystoneclient-test is less than 0.2.1.3.gd37a3fb+git.1357543650.d37a3fb-2.8.1" test_ref="oval:org.mitre.oval:tst:80967"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1693" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in libX11 for Solaris</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1667" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1667"/>
        <description>Multiple integer overflows in (1) the XGetPixel function in ImUtil.c in X.Org libx11 before 1.0.3, and (2) XInitImage function in xwd.c for ImageMagick, allow user-assisted remote attackers to cause a denial of service (crash) or obtain sensitive information via crafted images with large or negative values that trigger a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-26T14:51:13.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-07-27T21:36:53.111-04:00">DRAFT</status_change>
            <status_change date="2007-08-13T13:59:51.495-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:27.878-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102888" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 119067-08 or later installed" test_ref="oval:org.mitre.oval:tst:3777" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102888" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 112785-62 or later installed" test_ref="oval:org.mitre.oval:tst:4150" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102888" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 119059-26 or later installed" test_ref="oval:org.mitre.oval:tst:3735" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102888" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 119068-08 or later installed" test_ref="oval:org.mitre.oval:tst:3386" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102888" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 112786-51 or later installed" test_ref="oval:org.mitre.oval:tst:4112" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102888" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 119060-25 or later installed" test_ref="oval:org.mitre.oval:tst:3541" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16925" version="4" class="vulnerability">
      <metadata>
        <title>Vulnerability in the Management Pack for Oracle GoldenGate Server. Supported versions that are affected are 11.1.1.1.0.
		Vulnerability in the Oracle GoldenGate Veridata component of Oracle Fusion Middleware (subcomponent: Server). The supported version that is affected is 3.0.0.11.0. Easily exploitable vulnerability allows successful unauthenticated network attacks via HTTP. Successful attack of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle GoldenGate Veridata</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <product>Oracle GoldenGate Director</product>
          <product>Oracle GoldenGate Veridata</product>
        </affected>
        <reference ref_id="CVE-2012-0022" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0022" source="CVE"/>
        <description>Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service (CPU consumption) via a request that contains many parameters and parameter values, a different vulnerability than CVE-2011-4858.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-04-29T10:26:26.748+04:00">
              <contributor organization="ALTX-SOFT">Sergey Artykhov</contributor>
            </submitted>
            <status_change date="2013-06-19T16:06:43.613-04:00">DRAFT</status_change>
            <status_change date="2013-07-08T04:02:15.887-04:00">INTERIM</status_change>
            <status_change date="2013-07-29T04:00:59.180-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criterion comment="Check if version of Oracle GoldenGate Director is 11.1.1.1.0" test_ref="oval:org.mitre.oval:tst:81231"/>
        <criterion comment="Check if version for Oracle GoldenGate Veridata is 3.0.0.11.0" test_ref="oval:org.mitre.oval:tst:80940"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:169" version="4" class="vulnerability">
      <metadata>
        <title>Apache Weak Cipher Suite Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0192" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0192"/>
        <description>Apache 2 before 2.0.47, and certain versions of mod_ssl for Apache 1.3, do not properly handle "certain sequences of per-directory renegotiations and the SSLCipherSuite directive being used to upgrade from a weak ciphersuite to a strong one," which could cause Apache to use the weak ciphersuite.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-05T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:58.877-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:18.366-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.863-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:55:50.673-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:16.273-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="httpd version is less than 2.0.40-21.5" negate="false" test_ref="oval:org.mitre.oval:tst:2852"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="httpd.worker is listening on the network" negate="false" test_ref="oval:org.mitre.oval:tst:2851"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1689" version="5" class="vulnerability">
      <metadata>
        <title>Sendmail setjmp longjmp bo (Red Hat Internal)</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <product>Sendmail</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0058" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0058"/>
        <description>Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-03-27T09:51:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-04-06T06:30:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex in ste:694. Implemented by Jon Baker of The MITRE Corporation." date="2007-05-01T15:07:00.947-04:00">
              <contributor organization="DSCI Contractor">Vladimir Giszpenc</contributor>
            </modified>
            <status_change date="2007-05-01T15:08:55.075-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:31.387-04:00">ACCEPTED</status_change>
            <modified comment="Corrected vulnerability information for Redhat 3 and Redhat 4" date="2008-01-15T11:57:00-04:00">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2008-01-17T12:05:31.387-04:00">INTERIM</status_change>
            <status_change date="2008-02-04T04:00:06.233-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:694 - I found a few issues (regular expressions), which I've corrected and will detail below." date="2013-04-04T21:53:00.831-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2013-04-04T21:54:40.282-04:00">INTERIM</status_change>
            <status_change date="2013-04-22T04:00:13.977-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software section">
        <criteria operator="AND" comment="Sendmail on Redhat 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4 for x86" definition_ref="oval:org.mitre.oval:def:1734"/>
          <criterion comment="sendmail version is less than 8.13.1-3" test_ref="oval:org.mitre.oval:tst:7716"/>
        </criteria>
        <criteria operator="AND" comment="Sendmail on Redhat 3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3 for x86" definition_ref="oval:org.mitre.oval:def:5537"/>
          <criterion comment="sendmail version is less than 8.12.11-4" test_ref="oval:org.mitre.oval:tst:7751"/>
        </criteria>
        <criteria operator="AND" comment="Sendmail on other flavors of redhat">
          <extend_definition negate="true" comment="The operating system installed on the system is Red Hat Enterprise Linux 3 for x86" definition_ref="oval:org.mitre.oval:def:5537"/>
          <extend_definition negate="true" comment="The operating system installed on the system is Red Hat Enterprise Linux 4 for x86" definition_ref="oval:org.mitre.oval:def:1734"/>
          <criteria operator="OR" comment="vulnerable version of sendmail">
            <criterion comment="sendmail before 8.12.x is installed" test_ref="oval:org.mitre.oval:tst:774"/>
            <criterion comment="sendmail 8.12.x before 8.12.11 is installed" test_ref="oval:org.mitre.oval:tst:773"/>
            <criterion comment="sendmail 8.13.x before 8.13.6 is installed" test_ref="oval:org.mitre.oval:tst:772"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5537" version="7" class="inventory">
      <metadata>
        <title>The operating system installed on the system is Red Hat Enterprise Linux 3 for x86</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:redhat:enterprise_linux:3::ix86"/>
        <description>The operating system installed on the system is Red Hat Enterprise Linux 3 for x86.</description>
        <oval_repository>
          <dates>
            <submitted date="2008-01-12T14:07:00">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </submitted>
            <status_change date="2008-01-17T13:56:57.725-05:00">DRAFT</status_change>
            <status_change date="2008-02-04T04:00:08.231-05:00">INTERIM</status_change>
            <status_change date="2008-02-25T04:00:11.758-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11298 - Updated CPE reference, updated regular expression" date="2011-02-17T13:32:00.706-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2011-02-17T13:33:54.429-05:00">INTERIM</status_change>
            <status_change date="2011-03-07T04:00:14.802-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:5537 - Modifications vary from minor OVAL title/description changes to suggesting an alternative CPE name to use." date="2011-09-28T11:29:00.976-04:00">
              <contributor organization="The MITRE Corporation">David Rothenberg</contributor>
            </modified>
            <status_change date="2011-09-28T11:33:19.191-04:00">INTERIM</status_change>
            <status_change date="2011-10-17T04:00:19.985-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11298 - Corrected - right version for brlapi and brlapi-devel as specified by RHSA-2010:0181-5" date="2013-03-18T12:26:00.995-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-03-18T12:31:17.873-04:00">INTERIM</status_change>
            <status_change date="2013-04-08T04:00:47.744-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Red Hat Enterprise 3 is installed" test_ref="oval:org.mitre.oval:tst:7836"/>
        <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3912"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1734" version="5" class="inventory">
      <metadata>
        <title>The operating system installed on the system is Red Hat Enterprise Linux 4 for x86</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:redhat:enterprise_linux:4::ix86"/>
        <description>The operating system installed on the system is Red Hat Enterprise Linux 4 for x86.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-27T12:00:00.000-06:00">
              <contributor organization="McAfee, Inc.">Mark Villanova</contributor>
            </submitted>
            <status_change date="2007-08-14T21:26:14.122-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:28.105-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:41.206-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11366 - Updated CPE reference, updated regular expression" date="2011-02-17T13:29:00.547-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2011-02-17T13:31:08.535-05:00">INTERIM</status_change>
            <status_change date="2011-03-07T04:00:12.614-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11366 - Corrected - right version for brlapi and brlapi-devel as specified by RHSA-2010:0181-5" date="2013-03-18T12:26:00.995-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-03-18T12:31:11.695-04:00">INTERIM</status_change>
            <status_change date="2013-04-08T04:00:43.897-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Red Hat Enterprise 4 is installed" test_ref="oval:org.mitre.oval:tst:2652"/>
        <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3912"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16888" version="7" class="vulnerability">
      <metadata>
        <title>NULL pointer crash</title>
        <affected family="unix">
          <platform>openSUSE 12.3</platform>
        </affected>
        <reference ref_id="CVE-2013-2179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2179" source="CVE"/>
        <description>X.Org xdm 1.1.10, 1.1.11, and possibly other versions, when performing authentication using certain implementations of the crypt API function that can return NULL, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by attempting to log into an account whose password field contains invalid characters, as demonstrated using the crypt function from glibc 2.17 and later with (1) the "!" character in the salt portion of a password field or (2) a password that has been encrypted using DES or MD5 in FIPS-140 mode.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-07-03T10:26:26.748+04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </submitted>
            <status_change date="2013-07-05T16:52:53.414-04:00">DRAFT</status_change>
            <status_change date="2013-07-22T04:01:43.507-04:00">INTERIM</status_change>
            <status_change date="2013-08-12T04:08:51.937-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:16888 - Replace the occurrences of OpenSUSE by openSUSE in Platform" date="2014-06-10T14:43:00.558-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-06-10T14:44:50.128-04:00">INTERIM</status_change>
            <status_change date="2014-06-30T04:06:05.237-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="openSUSE 12.3 is installed" definition_ref="oval:org.mitre.oval:def:17041"/>
        <criteria operator="OR" comment="Packages section">
          <criterion comment="Package xdm is less than 1.1.10-14.10.1" test_ref="oval:org.mitre.oval:tst:81585"/>
          <criterion comment="Package xdm-debuginfo is less than 1.1.10-14.10.1" test_ref="oval:org.mitre.oval:tst:81554"/>
          <criterion comment="Package xdm-debugsource is less than 1.1.10-14.10.1" test_ref="oval:org.mitre.oval:tst:81728"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16881" version="7" class="vulnerability">
      <metadata>
        <title>DoS in system services caused by _dbus_printf_string_upper_bound</title>
        <affected family="unix">
          <platform>openSUSE 12.3</platform>
        </affected>
        <reference ref_id="CVE-2013-2168" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2168" source="CVE"/>
        <description>The _dbus_printf_string_upper_bound function in dbus/dbus-sysdeps-unix.c in D-Bus (aka DBus) 1.4.x before 1.4.26, 1.6.x before 1.6.12, and 1.7.x before 1.7.4 allows local users to cause a denial of service (service crash) via a crafted message.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-07-03T10:26:26.748+04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </submitted>
            <status_change date="2013-07-05T16:52:54.456-04:00">DRAFT</status_change>
            <status_change date="2013-07-22T04:01:41.299-04:00">INTERIM</status_change>
            <status_change date="2013-08-12T04:08:51.518-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:16881 - Replace the occurrences of OpenSUSE by openSUSE in Platform" date="2014-06-10T14:43:00.558-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-06-10T14:44:50.943-04:00">INTERIM</status_change>
            <status_change date="2014-06-30T04:06:05.074-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="openSUSE 12.3 is installed" definition_ref="oval:org.mitre.oval:def:17041"/>
        <criteria operator="OR" comment="Packages section">
          <criterion comment="Package dbus-1 is less than 1-1.6.8-2.6.1" test_ref="oval:org.mitre.oval:tst:81268"/>
          <criterion comment="Package dbus-1-debuginfo is less than 1-1.6.8-2.6.1" test_ref="oval:org.mitre.oval:tst:81468"/>
          <criterion comment="Package dbus-1-debugsource is less than 1-1.6.8-2.6.1" test_ref="oval:org.mitre.oval:tst:81340"/>
          <criterion comment="Package dbus-1-devel is less than 1-1.6.8-2.6.1" test_ref="oval:org.mitre.oval:tst:81732"/>
          <criterion comment="Package dbus-1-x11 is less than 1-1.6.8-2.6.1" test_ref="oval:org.mitre.oval:tst:81685"/>
          <criterion comment="Package dbus-1-x11-debuginfo is less than 1-1.6.8-2.6.1" test_ref="oval:org.mitre.oval:tst:81666"/>
          <criterion comment="Package dbus-1-x11-debugsource is less than 1-1.6.8-2.6.1" test_ref="oval:org.mitre.oval:tst:81667"/>
          <criterion comment="Package libdbus-1-3 is less than 1-1.6.8-2.6.1" test_ref="oval:org.mitre.oval:tst:81143"/>
          <criterion comment="Package libdbus-1-3-debuginfo is less than 1-1.6.8-2.6.1" test_ref="oval:org.mitre.oval:tst:81715"/>
          <criterion comment="Package dbus-1-32bit is less than 1-1.6.8-2.6.1" test_ref="oval:org.mitre.oval:tst:81721"/>
          <criterion comment="Package dbus-1-debuginfo-32bit is less than 1-1.6.8-2.6.1" test_ref="oval:org.mitre.oval:tst:81483"/>
          <criterion comment="Package dbus-1-devel-32bit is less than 1-1.6.8-2.6.1" test_ref="oval:org.mitre.oval:tst:81578"/>
          <criterion comment="Package libdbus-1-3-32bit is less than 1-1.6.8-2.6.1" test_ref="oval:org.mitre.oval:tst:81591"/>
          <criterion comment="Package libdbus-1-3-debuginfo-32bit is less than 1-1.6.8-2.6.1" test_ref="oval:org.mitre.oval:tst:81156"/>
          <criterion comment="Package dbus-1-devel-doc is less than 1-1.6.8-2.6.1" test_ref="oval:org.mitre.oval:tst:81293"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:17041" version="5" class="inventory">
      <metadata>
        <title>openSUSE 12.3 is installed</title>
        <affected family="unix">
          <platform>openSUSE 12.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:novell:opensuse:12.3"/>
        <description>openSUSE 12.3 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-07-03T10:26:26.748+04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </submitted>
            <status_change date="2013-07-05T16:52:53.149-04:00">DRAFT</status_change>
            <status_change date="2013-07-22T04:02:25.813-04:00">INTERIM</status_change>
            <status_change date="2013-08-12T04:08:56.140-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:tst:81714 - Replace the occurrences of OpenSUSE by openSUSE in Platform" date="2014-06-10T14:43:00.558-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-06-10T14:44:51.802-04:00">INTERIM</status_change>
            <status_change date="2014-06-30T04:06:10.654-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="openSUSE 12.3 is installed" test_ref="oval:org.mitre.oval:tst:81714"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1687" version="3" class="vulnerability">
      <metadata>
        <title>Mozilla Crashes with Evidence of Memory Corruption (moz-grid)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1738" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1738"/>
        <description>Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) by changing the (1) -moz-grid and (2) -moz-grid-group display styles.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-05-07T09:05:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-05-10T08:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:26.582-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:1133" date="2007-02-26T08:08:00.208-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-26T08:09:12.310-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:1135" date="2007-02-26T08:21:00.993-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:1136" date="2007-02-26T08:24:00.848-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:1138" date="2007-02-26T08:25:00.405-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:2283" date="2007-02-26T08:29:00.407-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:2284" date="2007-02-26T08:30:00.724-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:59.709-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:881" date="2007-04-23T12:05:00.811-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:12:49.901-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:882" date="2007-04-23T12:05:00.939-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:883" date="2007-04-23T12:05:00.804-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:1385" date="2007-04-23T12:05:00.430-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:57.510-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.7 or earlier is installed">
          <criterion comment="Mozilla Firefox version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1268"/>
          <criterion comment="Firefox version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1267"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Thunderbird version 1.0.7 or earlier is installed">
          <criterion comment="Mozilla Thunderbird version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1266"/>
          <criterion comment="Mozilla Thunderbird version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1265"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.12 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.12 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1264"/>
          <criterion comment="Mozilla Suite version 1.7.12 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1263"/>
        </criteria>
        <criteria operator="AND" comment="A pre-release of SeaMonkey 1.0 is installed">
          <criterion comment="A pre-release of SeaMonkey 1.0 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2439"/>
          <criterion comment="A pre-release of SeaMonkey 1.0 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2438"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1684" version="2" class="vulnerability">
      <metadata>
        <title>sendfilev DoS Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>sendfilev()</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1356" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1356"/>
        <description>Unknown vulnerability in the sendfilev function in Sun Solaris 8 and 9 allows local users to cause a denial of service (system panic) via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-04-13T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-04-20T04:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-05-11T04:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T04:00:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-08-25T10:03:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-25T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 8 or 9 installed">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
        </criteria>
        <criterion comment="Patch 108528-27 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:778"/>
        <criterion comment="Patch 112233-12 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:777"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1680" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the Logging Mechanism for Solaris Management Console (SMC) May Lead to Escalation of Privileges</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3093" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3093"/>
        <description>Unspecified vulnerability in the logging mechanism in Solaris Management Console (SMC) on Sun Solaris 8 through 10 before 20070605 allows remote attackers to execute arbitrary code via unspecified vectors, related to the WBEM server.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-08T14:30:00.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-06-08T21:28:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-06-26T20:49:49.714-04:00">INTERIM</status_change>
            <status_change date="2007-07-11T15:17:32.331-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="OR">
          <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102903" negate="false">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3437"/>
            <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
            <criterion comment="Patch 111313-06 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3336"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102903" negate="false">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3437"/>
            <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
            <criterion comment="Patch 111314-06 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3246"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102903" negate="false">
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3172"/>
            <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
            <criterion comment="Patch 112945-45 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3891"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102903" negate="false">
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3172"/>
            <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
            <criterion comment="Patch 114193-35 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3909"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102903" negate="false">
            <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3680"/>
            <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
            <criterion comment="Patch 121308-04 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3382"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102903" negate="false">
            <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3680"/>
            <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
            <criterion comment="Patch 121309-04 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3316"/>
          </criteria>
        </criteria>
        <criterion comment="Package SUNWwbmc installed" negate="false" test_ref="oval:org.mitre.oval:tst:3160"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1678" version="8" class="vulnerability">
      <metadata>
        <title>IE 5.01 DHTML Method Call Memory Corruption</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1359" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1359"/>
        <description>Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbox object, which results in a dereference of an invalid table pointer.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-04-12T12:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-04-12T05:16:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Modified ste:831: altered regex to match on a double zero in the minor field of the version, and also added an initial anchor.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:27:00.230-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:28:36.674-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:56.273-05:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:07.557-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:58.992-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:21.281-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:34.247-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:55.642-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:21.911-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="Internet Explorer 5.01 (any patch level) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:927"/>
        <criterion comment="the version of mshtml.dll is less than 5.0.3839.2200" negate="false" test_ref="oval:org.mitre.oval:tst:926"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16725" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Sun VirtualBox 3.0.0 and 3.0.2</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>VirtualBox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2714" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2714"/>
        <description>Unspecified vulnerability in Sun VirtualBox 3.0.0 and 3.0.2 allows guest OS users to cause a denial of service (host OS reboot) via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-04-25T16:31:26.748+04:00">
              <contributor organization="ALTX-SOFT">Sergey Artykhov</contributor>
            </submitted>
            <status_change date="2013-05-15T15:01:29.404-04:00">DRAFT</status_change>
            <status_change date="2013-06-03T04:03:31.002-04:00">INTERIM</status_change>
            <status_change date="2013-06-24T04:00:13.958-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:16725 - modificated vulnerabilities for VirtualBox" date="2013-12-05T10:43:00.197-05:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-12-05T10:45:12.580-05:00">INTERIM</status_change>
            <status_change date="2013-12-23T04:00:32.540-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="VirtualBox is installed" definition_ref="oval:org.mitre.oval:def:11581"/>
        <criterion comment="Check if Sun xVM VirtualBox is installed" test_ref="oval:org.mitre.oval:tst:41938"/>
        <criterion comment="Check if Sun xVM VirtualBox version is greater than or equals to 3.0.0" test_ref="oval:org.mitre.oval:tst:88496"/>
        <criterion comment="Check if Sun xVM VirtualBox version is less than or equals to 3.0.2" test_ref="oval:org.mitre.oval:tst:88902"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16722" version="7" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization 4.1 allows local users to affect confidentiality and integrity via unknown vectors related to Shared Folders</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>VirtualBox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-0111" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0111"/>
        <description>Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization 4.1 allows local users to affect confidentiality and integrity via unknown vectors related to Shared Folders.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-04-26T14:33:26.748+04:00">
              <contributor organization="ALTX-SOFT">Sergey Artykhov</contributor>
            </submitted>
            <status_change date="2013-05-15T15:01:31.559-04:00">DRAFT</status_change>
            <status_change date="2013-06-03T04:03:30.696-04:00">INTERIM</status_change>
            <status_change date="2013-06-24T04:00:13.205-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:16722 - modificated vulnerabilities for VirtualBox" date="2013-12-05T10:43:00.197-05:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-12-05T10:45:11.481-05:00">INTERIM</status_change>
            <status_change date="2013-12-23T04:00:32.456-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:16722 - New vulnerability(CVE-2013-5892) added and modified existing criteria" date="2014-01-30T14:45:00.034-05:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2014-01-30T14:49:21.565-05:00">INTERIM</status_change>
            <status_change date="2014-02-17T04:00:11.454-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="VirtualBox is installed" definition_ref="oval:org.mitre.oval:def:11581"/>
        <criterion comment="Check if Oracle VM VirtualBox is installed" test_ref="oval:org.mitre.oval:tst:42006"/>
        <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.1.0" test_ref="oval:org.mitre.oval:tst:88836"/>
        <criterion comment="Check if Oracle VM VirtualBox version is less than 4.2.0" test_ref="oval:org.mitre.oval:tst:99346"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1671" version="8" class="vulnerability">
      <metadata>
        <title>Server 2003 Insecure Default ACLs</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0023" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0023"/>
        <description>Microsoft Windows XP SP1 and SP2 before August 2004, and possibly other operating systems and versions, uses insecure default ACLs that allow the Authenticated Users group to gain privileges by modifying critical configuration information for the (1) Simple Service Discovery Protocol (SSDP), (2) Universal Plug and Play Device Host (UPnP), (3) NetBT, (4) SCardSvr, (5) DHCP, and (6) DnsCache services, aka "Permissive Windows Services DACLs."  NOTE: the NetBT, SCardSvr, DHCP, DnsCache already require privileged access to exploit.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-03-15T10:53:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-03-15T07:17:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-04-06T06:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-08-28T12:00:00.000-04:00" comment="modified obj 589 to use xsi:nil instead of a .* pattern match">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-08-28T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:26.136-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:53.777-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:56.055-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1671 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:29.381-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:32.956-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Software section">
          <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
          <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
        </criteria>
        <criteria operator="AND" comment="Configuration section">
          <criterion negate="true" comment="Patch S03-KB914798 is installed." test_ref="oval:org.mitre.oval:tst:781"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:167" version="1" class="vulnerability">
      <metadata>
        <title>Microsoft Outlook Express 6,2003 News Reading Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Outlook Express</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1213" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1213"/>
        <description>Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP servers to execute arbitrary code via a LIST response with a long second field.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2005-08-19T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Microsoft Outlook Express 6 for Windows 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2855"/>
        <criterion comment="the version of inetcomm.dll is less than 6.0.3790.326" negate="false" test_ref="oval:org.mitre.oval:tst:2854"/>
        <criterion comment="Patch KB897715 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2853"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1669" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability Relating to the acl(2) System Call May Allow Denial of Service (DoS) to the System</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2529" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2529"/>
        <description>Integer signedness error in the acl (facl) system call in Solaris 10 before 20070507 allows local users to cause a denial of service (kernel panic) and possibly gain privileges via a certain argument, related to ACE_SETACL.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-15T09:00:00.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-06-15T11:20:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-07-03T14:05:55.388-04:00">INTERIM</status_change>
            <status_change date="2007-07-18T15:57:49.919-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Solaris 10 (SPARC)" negate="false">
          <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3680"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criterion comment="Patch 125100-06 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3442"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86)" negate="false">
          <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3680"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criterion comment="Patch 125101-06 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3825"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16681" version="8" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the Oracle VM Virtual Box component in Oracle Virtualization 3.2, 4.0, and 4.1</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>VirtualBox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-3221" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3221"/>
        <description>Unspecified vulnerability in the Oracle VM Virtual Box component in Oracle Virtualization 3.2, 4.0, and 4.1 allows local users to affect availability via unknown vectors related to VirtualBox Core.  NOTE: The previous information was obtained from the October 2012 CPU. Oracle has not commented on claims from another vendor that this issue is related to "incorrect interrupt handling."</description>
        <oval_repository>
          <dates>
            <submitted date="2013-04-26T14:33:26.748+04:00">
              <contributor organization="ALTX-SOFT">Sergey Artykhov</contributor>
            </submitted>
            <status_change date="2013-05-15T15:01:32.442-04:00">DRAFT</status_change>
            <status_change date="2013-06-03T04:03:25.640-04:00">INTERIM</status_change>
            <status_change date="2013-06-24T04:00:11.296-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:15297 - modificated vulnerabilities for VirtualBox" date="2013-12-05T10:43:00.197-05:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-12-05T10:45:12.353-05:00">INTERIM</status_change>
            <status_change date="2013-12-23T04:00:32.336-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:16681 - New vulnerability(CVE-2013-5892) added and modified existing criteria" date="2014-01-30T14:45:00.034-05:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2014-01-30T14:49:21.841-05:00">INTERIM</status_change>
            <status_change date="2014-02-17T04:00:11.249-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="VirtualBox is installed" definition_ref="oval:org.mitre.oval:def:11581"/>
        <criterion comment="Check if Oracle VM VirtualBox is installed" test_ref="oval:org.mitre.oval:tst:42006"/>
        <criteria operator="OR" comment="Check versions of VirtualBox">
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 3.2.0" test_ref="oval:org.mitre.oval:tst:88842"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than or equals to 4.0.6" test_ref="oval:org.mitre.oval:tst:88945"/>
          </criteria>
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version  is greater than or equals to 4.0.8" test_ref="oval:org.mitre.oval:tst:88912"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than 4.2.0" test_ref="oval:org.mitre.oval:tst:99346"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1667" version="3" class="vulnerability">
      <metadata>
        <title>Mozilla Crashes with Evidence of Memory Corruption (CSS BO)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1739" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1739"/>
        <description>The CSS border-rendering code in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain Cascading Style Sheets (CSS) that causes an out-of-bounds array write and buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-05-07T09:05:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-05-10T08:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:25.785-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:1133" date="2007-02-26T08:08:00.208-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-26T08:09:14.769-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:1135" date="2007-02-26T08:21:00.993-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:1136" date="2007-02-26T08:24:00.848-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:1138" date="2007-02-26T08:25:00.405-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:2283" date="2007-02-26T08:29:00.407-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:2284" date="2007-02-26T08:30:00.724-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:58.683-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:881" date="2007-04-23T12:05:00.811-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:12:52.800-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:882" date="2007-04-23T12:05:00.939-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:883" date="2007-04-23T12:05:00.804-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:1385" date="2007-04-23T12:05:00.430-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:57.043-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.7 or earlier is installed">
          <criterion comment="Mozilla Firefox version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1268"/>
          <criterion comment="Firefox version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1267"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Thunderbird version 1.0.7 or earlier is installed">
          <criterion comment="Mozilla Thunderbird version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1266"/>
          <criterion comment="Mozilla Thunderbird version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1265"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.12 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.12 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1264"/>
          <criterion comment="Mozilla Suite version 1.7.12 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1263"/>
        </criteria>
        <criteria operator="AND" comment="A pre-release of SeaMonkey 1.0 is installed">
          <criterion comment="A pre-release of SeaMonkey 1.0 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2439"/>
          <criterion comment="A pre-release of SeaMonkey 1.0 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2438"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1661" version="4" class="vulnerability">
      <metadata>
        <title>Windows Media Player 9 Bitmap Remote Code Execution</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Windows Media Player</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0006" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0006"/>
        <description>Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on Windows 2000 SP4 and XP SP1, and Media Player 10 on XP SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted bitmap (.BMP) file that specifies a size of 0 but contains additional data.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-02-17T07:36:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-02-22T08:27:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-03-09T12:19:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-04-06T06:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Modified ste:705: altered regex to match on a double zero in the minor field of the version, and also added an initial anchor.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:23:00.679-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:25:34.781-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:55.645-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:705 - added trailing $ to regexs" date="2011-10-31T09:26:00.646-04:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2011-10-31T09:31:24.308-04:00">INTERIM</status_change>
            <status_change date="2011-11-21T04:13:07.300-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Media Player 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:786"/>
        <criterion comment="the version of Wmp.dll is less than 9.0.0.3344" negate="false" test_ref="oval:org.mitre.oval:tst:785"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16596" version="5" class="vulnerability">
      <metadata>
        <title>Callback Function Vulnerability - MS13-024</title>
        <affected family="windows">
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft SharePoint Foundation 2010</product>
          <product>Microsoft SharePoint Server 2010</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2013-0080" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0080"/>
        <description>Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allow remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "Callback Function Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2013-03-14T12:59:10">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-03-18T14:52:41.096-04:00">DRAFT</status_change>
            <status_change date="2013-04-08T04:00:41.275-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:17:19.717-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:var:1390 - November 2014 bulletins." date="2014-11-17T17:25:00.386-05:00">
              <contributor organization="SecPod Technologies">Kumarswamy S</contributor>
            </modified>
            <status_change date="2014-11-17T17:29:49.752-05:00">INTERIM</status_change>
            <status_change date="2014-12-08T04:00:13.034-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if the version of Onfda.dll is less than 14.0.6134.5000" test_ref="oval:org.mitre.oval:tst:80956"/>
        <extend_definition comment="Microsoft SharePoint Foundation 2010 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:15661"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1659" version="2" class="vulnerability">
      <metadata>
        <title>VirusVault Integer Overflow in pcre_compile</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2491" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2491"/>
        <description>Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-03-18T07:24:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-03-22T11:10:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-04-06T06:31:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:28.763-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:10.207-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="700 Series OS Release 11.04">
          <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
          <criterion comment="HP Release B.11.04" negate="false" test_ref="oval:org.mitre.oval:tst:1276"/>
        </criteria>
        <criterion comment="VirusVault is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1040"/>
        <criterion comment="Patch PHSS_34123 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1039"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1654" version="1" class="vulnerability">
      <metadata>
        <title>gzip -force File Permission Alteration Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>Licence Logging Service</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1349" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1349"/>
        <description>gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-04-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-04-20T12:13:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-05-11T05:41:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
        <criterion comment="GNU Zip (gzip, SUNWgzip) installed" negate="false" test_ref="oval:org.mitre.oval:tst:790"/>
        <criterion comment="Patch 112668-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:789"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1651" version="5" class="vulnerability">
      <metadata>
        <title>IE6 COM Object Instantiation Memory Corruption (Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1186" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1186"/>
        <description>Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via by instantiating the (1) Mdt2gddr.dll, (2) Mdt2dd.dll, and (3) Mdt2gddo.dll COM objects as ActiveX controls, which leads to memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-04-12T12:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-04-12T05:16:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:58.957-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:55.448-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:35.647-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:30.962-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="Win2K/XP/2003 is patched" negate="true" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.3790.507" negate="false" test_ref="oval:org.mitre.oval:tst:1100"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16500" version="3" class="vulnerability">
      <metadata>
        <title>Oracle Outside In Contains Multiple Exploitable Vulnerability - CVE-2012-3214 (MS13-013)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft FAST Search Server 2010 for SharePoint</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-3214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3214"/>
        <description>Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7.0 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-02-15T14:21:01">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-02-15T17:20:32.699-05:00">DRAFT</status_change>
            <status_change date="2013-03-04T04:01:19.853-05:00">INTERIM</status_change>
            <status_change date="2013-03-25T04:01:01.579-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft FAST Search Server 2010 for SharePoint is installed" definition_ref="oval:org.mitre.oval:def:15918"/>
        <criterion comment="Check if the version of vseshr.dll is less than 8.3.7.207" test_ref="oval:org.mitre.oval:tst:80570"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1650" version="6" class="vulnerability">
      <metadata>
        <title>Korean IME Privilege Elevation Vulnerability in Server 2003</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0008" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0008"/>
        <description>The ShellAbout API call in Korean Input Method Editor (IME) in Korean versions of Microsoft Windows XP SP1 and SP2, Windows Server 2003 up to SP1, and Office 2003, allows local users to gain privileges by launching the "shell about dialog box" and clicking the "End-User License Agreement" link, which executes Notepad with the privileges of the program that displays the about box.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-02-17T07:36:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-02-22T08:27:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-03-09T12:19:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-04-06T06:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:09:00.119-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:55.254-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1650 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:03.379-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:30.656-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of Imekr61.ime is less than 6.1.3790.1 (S03-Gold)" test_ref="oval:org.mitre.oval:tst:791"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1648" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability With RSA Signature Affects Solaris Applications Utilizing the libike Library</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-7140" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-7140"/>
        <description>The libike library, as used by in.iked, elfsign, and kcfd in Sun Solaris 9 and 10, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents libike from correctly verifying X.509 and other certificates that use PKCS #1, a similar issue to CVE-2006-4339.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-10T12:25:20.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-13T13:57:12.117-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:27.779-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:40.937-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102722" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 113451-12 or later installed" test_ref="oval:org.mitre.oval:tst:3311" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102722" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 118371-08 or later installed" test_ref="oval:org.mitre.oval:tst:3260" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102722" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 114435-11 or later installed" test_ref="oval:org.mitre.oval:tst:3665" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102722" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 118372-08 or later installed" test_ref="oval:org.mitre.oval:tst:4168" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16445" version="5" class="vulnerability">
      <metadata>
        <title>SharePoint Directory Traversal Vulnerability - MS13-024</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft SharePoint Foundation 2010</product>
          <product>Microsoft SharePoint Server 2010</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2013-0084" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0084"/>
        <description>Directory traversal vulnerability in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "SharePoint Directory Traversal Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2013-03-14T12:59:10">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-03-18T14:52:41.326-04:00">DRAFT</status_change>
            <status_change date="2013-04-08T04:00:29.945-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:17:05.574-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:var:1390 - November 2014 bulletins." date="2014-11-17T17:25:00.386-05:00">
              <contributor organization="SecPod Technologies">Kumarswamy S</contributor>
            </modified>
            <status_change date="2014-11-17T17:29:49.054-05:00">INTERIM</status_change>
            <status_change date="2014-12-08T04:00:12.814-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if the version of Onfda.dll is less than 14.0.6134.5000" test_ref="oval:org.mitre.oval:tst:80956"/>
        <extend_definition comment="Microsoft SharePoint Foundation 2010 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:15661"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1644" version="5" class="vulnerability" deprecated="true">
      <metadata>
        <title>DEPRECATED: Microsoft JScript Memory Corruption Vulnerability (Win2K)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Operating System</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1313" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1313"/>
        <description>Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objects early" in certain cases, which results in memory corruption and allows remote attackers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:24.831-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:13.461-04:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:06.606-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:57.859-04:00">ACCEPTED</status_change>
            <modified comment="Use def:1067 instead, which covers all appropriate versions of the DLL" date="2011-01-20T10:31:19.840-05:00">
              <contributor organization="The MITRE Corporation">Nate Przybyszewski</contributor>
            </modified>
            <status_change date="2011-01-20T10:31:19.840-05:00">DEPRECATED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="the version of Jscript.dll is less than 5.1.0.12512" negate="false" test_ref="oval:org.mitre.oval:tst:792"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16414" version="5" class="vulnerability">
      <metadata>
        <title>Buffer Overflow Vulnerability - MS13-024</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft SharePoint Foundation 2010</product>
          <product>Microsoft SharePoint Server 2010</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2013-0085" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0085"/>
        <description>Buffer overflow in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to cause a denial of service (W3WP process crash and site outage) via a crafted URL, aka "Buffer Overflow Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2013-03-14T12:59:10">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-03-18T14:52:41.572-04:00">DRAFT</status_change>
            <status_change date="2013-04-08T04:00:28.554-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:17:02.615-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:var:1390 - November 2014 bulletins." date="2014-11-17T17:25:00.386-05:00">
              <contributor organization="SecPod Technologies">Kumarswamy S</contributor>
            </modified>
            <status_change date="2014-11-17T17:29:48.452-05:00">INTERIM</status_change>
            <status_change date="2014-12-08T04:00:12.526-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if the version of Onfda.dll is less than 14.0.6134.5000" test_ref="oval:org.mitre.oval:tst:80956"/>
        <extend_definition comment="Microsoft SharePoint Foundation 2010 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:15661"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:164" version="1" class="vulnerability">
      <metadata>
        <title>Trustix Secure Linux der_chop Script Symlink Attack Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>OpenSSL</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0975" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0975"/>
        <description>The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-06-14T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-06-15T09:48:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criteria operator="OR" comment="openssl, openssl-devel, OR openssl-perl older than 0.9.7a-33.15 or openssl096b older than 0.9.6b-16.22.3">
            <criterion comment="openssl-perl is older than 0.9.7a-33.15" negate="false" test_ref="oval:org.mitre.oval:tst:2860"/>
            <criterion comment="openssl-devel older than 0.9.7a-33.15" negate="false" test_ref="oval:org.mitre.oval:tst:2859"/>
            <criterion comment="openssl older than 0.9.7a-33.15" negate="false" test_ref="oval:org.mitre.oval:tst:2858"/>
            <criterion comment="openssl096b package is older than 0.9.6b-16.22.3.i386.rpm" negate="false" test_ref="oval:org.mitre.oval:tst:2857"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/tmp is writable by everyone" negate="false" test_ref="oval:org.mitre.oval:tst:2856"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1638" version="4" class="vulnerability">
      <metadata>
        <title>Remote Code Execution Vulnerability in IE5.01</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0020"/>
        <description>An unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on Windows 2000 SP4, and 5.5 SP2 on Windows Millennium, and possibly other versions, allows attackers to cause a denial of service (crash) and possibly execute code via a crafted WMF file with a manipulated WMF header size, possibly involving an integer overflow, a different vulnerability than CVE-2005-4560, and aka "WMF Image Parsing Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2006-02-17T07:36:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-02-22T08:27:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-03-09T12:19:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-04-06T06:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:41.745-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:54.796-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:47.367-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:21.305-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
        <criterion comment="the version of mshtml.dll is less than 5.0.3837.1200" negate="false" test_ref="oval:org.mitre.oval:tst:793"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1637" version="1" class="vulnerability">
      <metadata>
        <title>HP-UX wuftpd Privilege Escalation Vulnerability (B.11.00)</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
          <product>ftpd</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0148" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0148"/>
        <description>wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-01-30T07:20:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-02-01T09:08:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-03-09T12:19:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.00">
          <criteria operator="AND" comment="700 Series OS Release 11.00">
            <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
            <criterion comment="HP Release B.11.00" negate="false" test_ref="oval:org.mitre.oval:tst:2512"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 11.00">
            <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
            <criterion comment="HP Release B.11.00" negate="false" test_ref="oval:org.mitre.oval:tst:2512"/>
          </criteria>
        </criteria>
        <criterion comment="WUFTP-26.INETSVCS-FTP with version less than B.11.00.01.004 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1124"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1635" version="1" class="vulnerability">
      <metadata>
        <title>Excel Viewer 2003 Remote Code Execution via Malformed File Format</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Office</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0028"/>
        <description>Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via a BIFF parsing format file containing malformed BOOLERR records that lead to memory corruption, probably involving invalid pointers.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-03-15T10:53:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-03-15T07:17:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-04-06T06:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Xlview.exe is installed with a version less than 11.0.8012.0" negate="false" test_ref="oval:org.mitre.oval:tst:881"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1632" version="5" class="vulnerability">
      <metadata>
        <title>IE6 Multiple Event Handler Memory Corruption (Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1245" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1245"/>
        <description>Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote attackers to execute arbitrary code via an HTML tag with a large number of script action handlers such as onload and onmouseover, as demonstrated using onclick, aka the "Multiple Event Handler Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2006-04-12T12:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-04-12T05:16:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:55.592-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:54.599-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:45.195-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:28.219-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="Win2K/XP/2003 is patched" negate="true" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.3790.507" negate="false" test_ref="oval:org.mitre.oval:tst:1100"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1630" version="1" class="vulnerability">
      <metadata>
        <title>Excel Viewer 2003 Remote Code Execution via Malformed Graphic</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Office</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0030" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0030"/>
        <description>Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed graphic, which leads to memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-03-15T10:53:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-03-15T07:17:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-04-06T06:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Xlview.exe is installed with a version less than 11.0.8012.0" negate="false" test_ref="oval:org.mitre.oval:tst:881"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1629" version="2" class="vulnerability">
      <metadata>
        <title>Webproxy HTTP Request Smuggling</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2088"/>
        <description>The Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy, allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Apache to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."</description>
        <oval_repository>
          <dates>
            <submitted date="2006-03-18T07:24:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-03-22T11:10:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-04-06T06:31:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:28.568-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:10.027-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="700 Series OS Release 11.04">
          <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
          <criterion comment="HP Release B.11.04" negate="false" test_ref="oval:org.mitre.oval:tst:1276"/>
        </criteria>
        <criterion comment="Webproxy is installed" negate="false" test_ref="oval:org.mitre.oval:tst:890"/>
        <criterion comment="Patch PHSS_34163 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:889"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1628" version="3" class="vulnerability">
      <metadata>
        <title>CD Drive DoS Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0901" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0901"/>
        <description>Unspecified vulnerability in the hsfs filesystem in Solaris 8, 9, and 10 allows unspecified attackers to cause a denial of service (panic) or execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-02-26T12:31:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-03-09T12:19:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-04-06T06:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1628 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:33.068-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:17.190-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert ID 102161 criteria.">
          <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Installed architecture is sparc" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion negate="true" comment="Patch 109764-06 or later installed (SPARC-8)" test_ref="oval:org.mitre.oval:tst:801"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert ID 102161 criteria.">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="Installed architecture is sparc" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion negate="true" comment="Patch 116047-03 or later installed (SPARC-9)" test_ref="oval:org.mitre.oval:tst:800"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert ID 102161 criteria.">
          <criterion comment="Solaris 10 Installed" test_ref="oval:org.mitre.oval:tst:2459"/>
          <criterion comment="Installed architecture is sparc" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion negate="true" comment="Patch 119596-03 or later installed (SPARC-10)" test_ref="oval:org.mitre.oval:tst:799"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert ID 102161 criteria.">
          <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion negate="true" comment="Patch 109765-06 or later installed (x86-8)" test_ref="oval:org.mitre.oval:tst:798"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert ID 102161 criteria.">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion negate="true" comment="Patch 121995-01 or later installed (x86-9)" test_ref="oval:org.mitre.oval:tst:797"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert ID 102161 criteria.">
          <criterion comment="Solaris 10 Installed" test_ref="oval:org.mitre.oval:tst:2459"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion negate="true" comment="Patch 118813-03 or later installed (x86-10)" test_ref="oval:org.mitre.oval:tst:796"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1626" version="1" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability in the Solaris Kernel May Allow a Denial of Service (DoS) Condition to Occur</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6275" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6275"/>
        <description>Race condition in the kernel in Sun Solaris 8 through 10 allows local users to cause a denial of service (panic) via unspecified vectors, possibly related to the exitlwps function and SIGKILL and /proc PCAGENT signals.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-10T12:25:21.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-13T13:57:12.817-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:27.633-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:40.779-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102574" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 117350-40 or later installed" test_ref="oval:org.mitre.oval:tst:3986" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102574" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 123703-01 or later installed" test_ref="oval:org.mitre.oval:tst:4110" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102574" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 123704-01 or later installed" test_ref="oval:org.mitre.oval:tst:3681" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102574" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 116960-15 or later installed" test_ref="oval:org.mitre.oval:tst:3895" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102574" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 118559-30 or later installed" test_ref="oval:org.mitre.oval:tst:3545" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102574" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 120884-02 or later installed" test_ref="oval:org.mitre.oval:tst:3804" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102574" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 121317-02 or later installed" test_ref="oval:org.mitre.oval:tst:3661" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102574" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 119439-06 or later installed" test_ref="oval:org.mitre.oval:tst:3522" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102574" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 120662-04 or later installed" test_ref="oval:org.mitre.oval:tst:3712" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102574" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 118844-19 or later installed" test_ref="oval:org.mitre.oval:tst:3175" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102574" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 116959-15 or later installed" test_ref="oval:org.mitre.oval:tst:3349" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102574" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 118558-30 or later installed" test_ref="oval:org.mitre.oval:tst:3713" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102574" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 117125-03 or later installed" test_ref="oval:org.mitre.oval:tst:3881" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102574" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 121316-02 or later installed" test_ref="oval:org.mitre.oval:tst:4159" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102574" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 113278-14 or later installed" test_ref="oval:org.mitre.oval:tst:3472" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102574" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 120661-03 or later installed" test_ref="oval:org.mitre.oval:tst:3180" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102574" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 118822-19 or later installed" test_ref="oval:org.mitre.oval:tst:3190" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102574" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 117351-40 or later installed" test_ref="oval:org.mitre.oval:tst:3264" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16251" version="4" class="vulnerability">
      <metadata>
        <title>Vulnerability in Microsoft Exchange Server Could Allow Remote Code Execution - CVE-2013-0418 - MS13-012</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Exchange Server 2007</product>
          <product>Microsoft Exchange Server 2010</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2013-0418" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0418"/>
        <description>Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 and 8.4 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2013-0393.  NOTE: the previous information was obtained from the January 2013 CPU.  Oracle has not commented on claims from an independent researcher that this is a heap-based buffer overflow in the Paradox database stream filter (vspdx.dll) that can be triggered using a table header with a crafted "number of fields" value.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-02-15T15:20:54">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-02-15T17:18:22.885-05:00">DRAFT</status_change>
            <status_change date="2013-03-04T04:00:32.728-05:00">INTERIM</status_change>
            <status_change date="2013-03-25T04:00:20.513-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="exchange server 2007/version">
          <extend_definition comment="Microsoft Exchange Server 2007 SP3 is installed" definition_ref="oval:org.mitre.oval:def:15784"/>
          <criterion comment="Check if the version ExSetup.exe is less than 8.3.298.3" test_ref="oval:org.mitre.oval:tst:80872"/>
        </criteria>
        <criteria operator="AND" comment="exchange server 2010/version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP2 is installed" definition_ref="oval:org.mitre.oval:def:15546"/>
          <criterion comment="Check if the version ExSetup.exe is less than 14.2.342.2" test_ref="oval:org.mitre.oval:tst:80598"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16235" version="8" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the Oracle VM VirtualBox  4.1 component</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>VirtualBox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-0105" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0105"/>
        <description>Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization 4.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Windows Guest Additions.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-04-26T14:33:26.748+04:00">
              <contributor organization="ALTX-SOFT">Sergey Artykhov</contributor>
            </submitted>
            <status_change date="2013-05-15T15:01:31.349-04:00">DRAFT</status_change>
            <status_change date="2013-06-03T04:02:50.801-04:00">INTERIM</status_change>
            <status_change date="2013-06-24T04:00:07.978-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:15297 - modificated vulnerabilities for VirtualBox" date="2013-12-05T10:43:00.197-05:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-12-05T10:45:12.004-05:00">INTERIM</status_change>
            <status_change date="2013-12-23T04:00:32.074-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:16235 - New vulnerability(CVE-2013-5892) added and modified existing criteria" date="2014-01-30T14:45:00.034-05:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2014-01-30T14:49:21.457-05:00">INTERIM</status_change>
            <status_change date="2014-02-17T04:00:11.043-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="VirtualBox is installed" definition_ref="oval:org.mitre.oval:def:11581"/>
        <criterion comment="Check if Oracle VM VirtualBox is installed" test_ref="oval:org.mitre.oval:tst:42006"/>
        <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.1.0" test_ref="oval:org.mitre.oval:tst:88836"/>
        <criterion comment="Check if Oracle VM VirtualBox version is less than 4.2.0" test_ref="oval:org.mitre.oval:tst:99346"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16232" version="3" class="vulnerability">
      <metadata>
        <title>System Center Operations Manager Web Console XSS Vulnerability-II - MS13-003</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft System Center Operations Manager 2007</product>
          <product>Microsoft System Center Operations Manager 2007 R2</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2013-0010" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0010"/>
        <description>Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Center Operations Manager Web Console XSS Vulnerability," a different vulnerability than CVE-2013-0009.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-01-10T16:59:36">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-01-10T11:18:30.675-05:00">DRAFT</status_change>
            <status_change date="2013-01-28T04:00:59.968-05:00">INTERIM</status_change>
            <status_change date="2013-02-18T04:00:12.125-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="SCOM 2007 is installed and vuln file">
          <extend_definition comment="Microsoft System Center Operations Manager 2007 SP1 is installed" definition_ref="oval:org.mitre.oval:def:16286"/>
          <criterion comment="Check if the version of AuditingMessages.dll is less than or equal to 6.0.6278.0" test_ref="oval:org.mitre.oval:tst:80576"/>
        </criteria>
        <criteria operator="AND" comment="2007 R2 and vulnerable file version">
          <extend_definition comment="Microsoft System Center Operations Manager 2007 R2 is installed" definition_ref="oval:org.mitre.oval:def:16190"/>
          <criterion comment="Check if the version of AuditingMessages.dll is less than 6.1.7221.110" test_ref="oval:org.mitre.oval:tst:80122"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16204" version="3" class="vulnerability">
      <metadata>
        <title>Vulnerability in Windows Essentials Could Allow Information Disclosure - MS13-045</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <product>Microsoft Windows Essentials 2012</product>
          <product>Microsoft Windows Essentials 2011</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2013-0096" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0096"/>
        <description>Writer in Microsoft Windows Essentials 2011 and 2012 allows remote attackers to bypass proxy settings and overwrite arbitrary files via crafted URL parameters, aka "Windows Essentials Improper URI Handling Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2013-05-17T10:14:08">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-05-21T11:45:56.932-04:00">DRAFT</status_change>
            <status_change date="2013-06-10T04:00:44.203-04:00">INTERIM</status_change>
            <status_change date="2013-07-01T04:00:30.937-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <extend_definition comment="Microsoft Windows Essentials 2011 is installed" definition_ref="oval:org.mitre.oval:def:16645"/>
        <criteria operator="AND" comment="windows essentials 2012/version">
          <extend_definition comment="Microsoft Windows Essentials 2012 is installed" definition_ref="oval:org.mitre.oval:def:16746"/>
          <criterion comment="Check if the version of Windowslivewriter.exe is less than 16.4.3508.205" test_ref="oval:org.mitre.oval:tst:81120"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16746" version="3" class="inventory">
      <metadata>
        <title>Microsoft Windows Essentials 2012 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <product>Microsoft Windows Essentials 2012</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:windows_essentials:2012"/>
        <description>Microsoft Windows Essentials 2012 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2013-05-17T11:11:38">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-05-21T11:45:56.629-04:00">DRAFT</status_change>
            <status_change date="2013-06-10T04:01:33.268-04:00">INTERIM</status_change>
            <status_change date="2013-07-01T04:01:11.784-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Windows Essentials is installed" test_ref="oval:org.mitre.oval:tst:80220"/>
        <criterion comment="Check if Windows Essentials 2012 is installed" test_ref="oval:org.mitre.oval:tst:80229"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16645" version="3" class="inventory">
      <metadata>
        <title>Microsoft Windows Essentials 2011 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <product>Microsoft Windows Essentials 2011</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:windows_essentials:2011"/>
        <description>Microsoft Windows Essentials 2011 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2013-05-17T11:11:38">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-05-21T11:45:56.349-04:00">DRAFT</status_change>
            <status_change date="2013-06-10T04:01:21.825-04:00">INTERIM</status_change>
            <status_change date="2013-07-01T04:00:56.481-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Windows Essentials is installed" test_ref="oval:org.mitre.oval:tst:80220"/>
        <criterion comment="Check if Windows Essentials 2011 is installed" test_ref="oval:org.mitre.oval:tst:80928"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16202" version="3" class="vulnerability">
      <metadata>
        <title>Vulnerability in Microsoft Exchange Server Could Allow Remote Code Execution - CVE-2013-0393 - MS13-012</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Exchange Server 2007</product>
          <product>Microsoft Exchange Server 2010</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2013-0393" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0393"/>
        <description>Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 and 8.4 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2013-0418.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-02-15T15:20:54">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-02-15T17:18:22.674-05:00">DRAFT</status_change>
            <status_change date="2013-03-04T04:00:24.360-05:00">INTERIM</status_change>
            <status_change date="2013-03-25T04:00:16.447-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="exchange server 2007/version">
          <extend_definition comment="Microsoft Exchange Server 2007 SP3 is installed" definition_ref="oval:org.mitre.oval:def:15784"/>
          <criterion comment="Check if the version ExSetup.exe is less than 8.3.298.3" test_ref="oval:org.mitre.oval:tst:80872"/>
        </criteria>
        <criteria operator="AND" comment="exchange server 2010/version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP2 is installed" definition_ref="oval:org.mitre.oval:def:15546"/>
          <criterion comment="Check if the version ExSetup.exe is less than 14.2.342.2" test_ref="oval:org.mitre.oval:tst:80598"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15546" version="3" class="inventory">
      <metadata>
        <title>Microsoft Exchange Server 2010 SP2 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Exchange Server 2010</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:exchange:2010:sp2"/>
        <description>Microsoft Exchange Server 2010 SP2 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2012-04-04T12:52:26.748+04:00">
              <contributor organization="ALTX-SOFT">Sergey Artykhov</contributor>
            </submitted>
            <status_change date="2012-04-06T11:34:21.189-04:00">DRAFT</status_change>
            <status_change date="2012-04-23T04:00:23.864-04:00">INTERIM</status_change>
            <status_change date="2012-05-14T04:00:16.500-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Microsoft Exchange Server 2010 is installed" test_ref="oval:org.mitre.oval:tst:77602"/>
        <criterion comment="Microsoft Exchange Server 2010 SP2 is installed" test_ref="oval:org.mitre.oval:tst:78176"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1618" version="4" class="vulnerability">
      <metadata>
        <title>pagedata Subsystem Local DoS Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1092"/>
        <description>Unspecified vulnerability in the pagedata subsystem of the process file system (/proc) in Solaris 8 through 10 allows local users to cause a denial of service (system hang or panic) via unknown attack vectors that cause cause the kmem_oversize arena to allocate a large amount of system memory that does not get freed.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-03-04T10:16:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-03-09T12:19:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-04-06T06:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected CVE reference. Implemented by Jon Baker of The MITRE Corporation." date="2007-02-13T13:58:00.691-05:00">
              <contributor organization="Security-Database">Nabil Ouchn</contributor>
            </modified>
            <status_change date="2007-02-13T14:00:20.779-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:56.595-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1618 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:25.779-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:16.703-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert ID 102159 criteria.">
          <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Installed architecture is sparc" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion negate="true" comment="Patch 117350-33 or later installed (SPARC-8)" test_ref="oval:org.mitre.oval:tst:808"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert ID 102159 criteria.">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="Installed architecture is sparc" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion negate="true" comment="Patch 118558-22 or later installed (SPARC-9)" test_ref="oval:org.mitre.oval:tst:807"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert ID 102159 criteria.">
          <criterion comment="Solaris 10 Installed" test_ref="oval:org.mitre.oval:tst:2459"/>
          <criterion comment="Installed architecture is sparc" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion negate="true" comment="Patch 118822-29 or later installed (SPARC-10)" test_ref="oval:org.mitre.oval:tst:806"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert ID 102159 criteria.">
          <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion negate="true" comment="Patch 117351-33 or later installed (x86-8)" test_ref="oval:org.mitre.oval:tst:805"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert ID 102159 criteria.">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion negate="true" comment="Patch 118559-22 or later installed (x86-9)" test_ref="oval:org.mitre.oval:tst:804"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert ID 102159 criteria.">
          <criterion comment="Solaris 10 Installed" test_ref="oval:org.mitre.oval:tst:2459"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion negate="true" comment="Patch 118844-29 or later installed (x86-10)" test_ref="oval:org.mitre.oval:tst:803"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16178" version="3" class="vulnerability">
      <metadata>
        <title>Oracle Outside In Contains Multiple Exploitable Vulnerabilities-I MS12-080</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Exchange Server 2007</product>
          <product>Microsoft Exchange Server 2010</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-3214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3214"/>
        <description>Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7.0 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-12-12T08:43:01">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-12-12T19:43:58.718-05:00">DRAFT</status_change>
            <status_change date="2012-12-31T04:02:03.099-05:00">INTERIM</status_change>
            <status_change date="2013-01-21T04:00:39.228-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2007 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2007 SP3 is installed" definition_ref="oval:org.mitre.oval:def:15784"/>
          <criterion comment="Check if the version ExSetup.exe is less than 8.3.297.2" test_ref="oval:org.mitre.oval:tst:79624"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP1 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP1 is installed" definition_ref="oval:org.mitre.oval:def:15339"/>
          <criterion comment="Check if the version ExSetup.exe is less than 14.1.438.0" test_ref="oval:org.mitre.oval:tst:80439"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP2">
          <extend_definition comment="Microsoft Exchange Server 2010 SP2 is installed" definition_ref="oval:org.mitre.oval:def:14151"/>
          <criterion comment="Check if the version ExSetup.exe is less than 14.2.328.10" test_ref="oval:org.mitre.oval:tst:80396"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1617" version="4" class="vulnerability">
      <metadata>
        <title>XPM Image Decoder Buffer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0782" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0782"/>
        <description>Integer overflow in pixbuf_create_from_xpm (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, allows remote attackers to execute arbitrary code via certain n_col and cpp values that enable a heap-based buffer overflow.  NOTE: this identifier is ONLY for gtk+.  It was incorrectly referenced in an advisory for a different issue (CVE-2004-0687).</description>
        <oval_repository>
          <dates>
            <submitted date="2006-03-21T04:03:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-03-22T11:10:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-04-06T06:31:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1617 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:03.967-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:16.284-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="GNOME 2.0 Solaris 8 (SPARC) meets Sun Alert ID 101776 criteria.">
          <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Installed architecture is sparc" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Gnome 2.0.0 is installed" test_ref="oval:org.mitre.oval:tst:818"/>
          <criterion negate="true" comment="Patch 114644-03 or later installed" test_ref="oval:org.mitre.oval:tst:817"/>
        </criteria>
        <criteria operator="AND" comment="GNOME 2.0 Solaris 8 (x86) meets Sun Alert ID 101776 criteria.">
          <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Gnome 2.0.0 is installed" test_ref="oval:org.mitre.oval:tst:818"/>
          <criterion negate="true" comment="Patch 114645-03 or later installed" test_ref="oval:org.mitre.oval:tst:816"/>
        </criteria>
        <criteria operator="AND" comment="GNOME 2.0 Solaris 9 (SPARC) meets Sun Alert ID 101776 criteria.">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="Installed architecture is sparc" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Gnome 2.0.0 is installed" test_ref="oval:org.mitre.oval:tst:818"/>
          <criterion negate="true" comment="Patch 114686-03 or later installed" test_ref="oval:org.mitre.oval:tst:815"/>
        </criteria>
        <criteria operator="AND" comment="GNOME 2.0.2 Solaris 9 (SPARC) meets Sun Alert ID 101776 criteria.">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="Installed architecture is sparc" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Gnome 2.0.2 is installed" test_ref="oval:org.mitre.oval:tst:814"/>
          <criterion negate="true" comment="Patch 115738-04 or later installed" test_ref="oval:org.mitre.oval:tst:813"/>
        </criteria>
        <criteria operator="AND" comment="GNOME 2.0 Solaris 9 (x86) meets Sun Alert ID 101776 criteria.">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Gnome 2.0.0 is installed" test_ref="oval:org.mitre.oval:tst:818"/>
          <criterion negate="true" comment="Patch 114687-03 or later installed" test_ref="oval:org.mitre.oval:tst:812"/>
        </criteria>
        <criteria operator="AND" comment="GNOME 2.0.2 Solaris 9 (x86) meets Sun Alert ID 101776 criteria.">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Gnome 2.0.2 is installed" test_ref="oval:org.mitre.oval:tst:814"/>
          <criterion negate="true" comment="Patch 115739-04 or later installed" test_ref="oval:org.mitre.oval:tst:811"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) with JDS release 2 meets Sun Alert ID 101776 criteria.">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="JDS release 2 is installed" test_ref="oval:org.mitre.oval:tst:810"/>
          <criterion negate="true" comment="Patch 121092-01 or later installed" test_ref="oval:org.mitre.oval:tst:809"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16163" version="5" class="vulnerability" deprecated="true">
      <metadata>
        <title>DEPRECATED: Sun VirtualBox 2.2 through 3.0.2 r49928 allows guest OS users to cause a denial of service (Linux host OS reboot) via a sysenter instruction</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>VirtualBox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2715" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2715"/>
        <description>Sun VirtualBox 2.2 through 3.0.2 r49928 allows guest OS users to cause a denial of service (Linux host OS reboot) via a sysenter instruction.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-04-26T14:33:26.748+04:00">
              <contributor organization="ALTX-SOFT">Sergey Artykhov</contributor>
            </submitted>
            <status_change date="2013-05-15T15:01:30.989-04:00">DRAFT</status_change>
            <status_change date="2013-06-03T04:02:47.469-04:00">INTERIM</status_change>
            <status_change date="2013-06-24T04:00:07.657-04:00">ACCEPTED</status_change>
            <modified comment="Title indicates Linux but Win platform defined" date="2013-07-26T14:32:26.392-04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-07-26T14:32:26.392-04:00">DEPRECATED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:16163 - modificated vulnerabilities for VirtualBox" date="2013-12-05T10:43:00.197-05:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="VirtualBox is installed" definition_ref="oval:org.mitre.oval:def:11581"/>
        <criterion comment="Check if Sun xVM VirtualBox is installed" test_ref="oval:org.mitre.oval:tst:41938"/>
        <criterion comment="Check if Sun xVM VirtualBox version  is greater than or equals to 2.2.0" test_ref="oval:org.mitre.oval:tst:89006"/>
        <criterion comment="Check if Sun xVM VirtualBox version is less than or equals to 3.0.2" test_ref="oval:org.mitre.oval:tst:88902"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16158" version="3" class="vulnerability">
      <metadata>
        <title>RSS Feed May Cause Exchange DoS Vulnerability - MS12-080</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Exchange Server 2007</product>
          <product>Microsoft Exchange Server 2010</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-4791" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4791"/>
        <description>Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to cause a denial of service (Information Store service hang) by subscribing to a crafted RSS feed, aka "RSS Feed May Cause Exchange DoS Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2012-12-12T08:43:01">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-12-12T19:43:58.501-05:00">DRAFT</status_change>
            <status_change date="2012-12-31T04:02:00.481-05:00">INTERIM</status_change>
            <status_change date="2013-01-21T04:00:36.888-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2007 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2007 SP3 is installed" definition_ref="oval:org.mitre.oval:def:15784"/>
          <criterion comment="Check if the version ExSetup.exe is less than 8.3.297.2" test_ref="oval:org.mitre.oval:tst:79624"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP1 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP1 is installed" definition_ref="oval:org.mitre.oval:def:15339"/>
          <criterion comment="Check if the version ExSetup.exe is less than 14.1.438.0" test_ref="oval:org.mitre.oval:tst:80439"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP2">
          <extend_definition comment="Microsoft Exchange Server 2010 SP2 is installed" definition_ref="oval:org.mitre.oval:def:14151"/>
          <criterion comment="Check if the version ExSetup.exe is less than 14.2.328.10" test_ref="oval:org.mitre.oval:tst:80396"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1612" version="6" class="vulnerability">
      <metadata>
        <title>Server 2003 Graphics Rendering Engine Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-4560" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4560"/>
        <description>The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbitrary code via a Windows Metafile (WMF) format image with a crafted SETABORTPROC GDI Escape function call, related to the Windows Picture and Fax Viewer (SHIMGVW.DLL), a different vulnerability than CVE-2005-2123 and CVE-2005-2124, and as originally discovered in the wild on unionseek.com.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-01-07T07:15:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-01-12T09:25:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-02-01T09:08:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:58.636-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:54.164-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1612 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:09.431-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:27.514-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of Gdi32.dll is less than 5.2.3790.462" test_ref="oval:org.mitre.oval:tst:819"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16080" version="3" class="vulnerability">
      <metadata>
        <title>Oracle Outside In Contains Multiple Exploitable Vulnerability - CVE-2012-3217 (MS13-013)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft FAST Search Server 2010 for SharePoint</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-3217" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3217"/>
        <description>Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7.0 allows context-dependent attackers to affect availability, related to Outside In HTML Export SDK.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-02-15T14:21:01">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-02-15T17:20:32.833-05:00">DRAFT</status_change>
            <status_change date="2013-03-04T04:00:16.301-05:00">INTERIM</status_change>
            <status_change date="2013-03-25T04:00:11.232-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft FAST Search Server 2010 for SharePoint is installed" definition_ref="oval:org.mitre.oval:def:15918"/>
        <criterion comment="Check if the version of vseshr.dll is less than 8.3.7.207" test_ref="oval:org.mitre.oval:tst:80570"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1608" version="3" class="vulnerability">
      <metadata>
        <title>Solaris 10 find on /proc panic DoS Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0191" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0191"/>
        <description>Unspecified vulnerability in Sun Solaris 10 allows local users to cause a denial of service (null dereference) via unspecified vectors involving the use of the find command on the "/proc" filesystem. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this is related to CVE-2005-3250.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-01-12T11:25:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-01-25T07:30:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-03-09T12:19:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1608 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:05.417-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:15.939-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Solaris 10 (sparc) meets Sun Alert ID 102108 criteria.">
          <criterion comment="Solaris 10 Installed" test_ref="oval:org.mitre.oval:tst:2459"/>
          <criterion comment="Installed architecture is sparc" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion negate="true" comment="Patch 118822-24 or later installed" test_ref="oval:org.mitre.oval:tst:822"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert ID 102066 and 102108 criteria.">
          <criterion comment="Solaris 10 Installed" test_ref="oval:org.mitre.oval:tst:2459"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion negate="true" comment="Patch 118844-24 or later installed" test_ref="oval:org.mitre.oval:tst:2409"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1607" version="4" class="vulnerability">
      <metadata>
        <title>HP-UX PMTUD Remote DoS (B.11.11)</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1192" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1192"/>
        <description>Unknown vulnerability in HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23, when running TCP/IP on IPv4, allows remote attackers to cause a denial of service via certain packets, related to the PMTU, a different vulnerability than CVE-2004-1060.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-02-01T11:45:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-03-09T12:19:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-04-06T06:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:28.493-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:09.927-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1607 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:49.558-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:15.620-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.11">
          <criteria operator="AND" comment="700 Series OS Release 11.11">
            <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:2515"/>
            <criterion comment="HP Release B.11.11" test_ref="oval:org.mitre.oval:tst:2514"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 11.11">
            <criterion comment="800-series HP" test_ref="oval:org.mitre.oval:tst:2513"/>
            <criterion comment="HP Release B.11.11" test_ref="oval:org.mitre.oval:tst:2514"/>
          </criteria>
        </criteria>
        <criterion comment="Networking.NET2-KRN is installed" test_ref="oval:org.mitre.oval:tst:1442"/>
        <criterion negate="true" comment="Patch PHNE_33159 is installed" test_ref="oval:org.mitre.oval:tst:823"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1603" version="10" class="vulnerability">
      <metadata>
        <title>HyperTerminal Session File Vulnerability (Windows XP,SP1)</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>HyperTerminal</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0568" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0568"/>
        <description>HyperTerminal application for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the length of a value that is saved in a session file, which allows remote attackers to execute arbitrary code via a malicious HyperTerminal session file (.ht), web site, or Telnet URL contained in an e-mail message, triggering a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-12-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-01-18T12:00:00.000-04:00">DRAFT</status_change>
            <modified date="2005-01-27T12:00:00.000-04:00" comment="Change OS test to include XP gold in addition to XP SP1">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <modified date="2005-03-02T12:00:00.000-04:00" comment="modified wft-175 - Access DLL via HKLM">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-03-23T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2005-03-29T12:00:00.000-04:00" comment="modified wrt-45 - deleted an extra space after Filelist">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2005-04-22T12:00:00.000-04:00" comment="modified wrt-45 - Removed extra space between 'Windows XP' in the key field">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </modified>
            <status_change date="2005-05-11T05:41:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:627: changed Hive from HKEY_CLASSES_ROOT to HKEY_LOCAL_MACHINE.  Implemented by Harvey Rubinovitz." date="2007-01-22T01:12:00.148-05:00">
              <contributor organization="GFI Software">Daniel Tarnu</contributor>
            </modified>
            <status_change date="2007-01-22T01:13:23.239-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:53.591-05:00">ACCEPTED</status_change>
            <modified comment="Updated ste:741 to use regex pattern match instead of hardcoded path" date="2009-10-19T16:07:00.879-04:00">
              <contributor organization="The MITRE Corporation">Mike Lah</contributor>
            </modified>
            <status_change date="2009-10-19T16:09:07.243-04:00">INTERIM</status_change>
            <modified comment="Fixed registry key reference in obj:625" date="2009-10-19T16:09:00.553-04:00">
              <contributor organization="The MITRE Corporation">Mike Lah</contributor>
            </modified>
            <status_change date="2009-11-09T04:00:07.274-05:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2656" date="2010-11-29T16:12:00.873-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:13:02.962-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:34.624-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:13.260-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:25.383-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:741 - obj/ste updates to conform to authoring style guide" date="2013-03-26T09:53:00.500-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-03-26T09:56:24.568-04:00">INTERIM</status_change>
            <status_change date="2013-04-15T04:00:15.404-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="the version of hypertrm.dll is less than 5.1.2600.1609" negate="false" test_ref="oval:org.mitre.oval:tst:829"/>
          <criterion comment="the patch WindowsXP-KB87339-x86-ENU.exe is installed" negate="false" test_ref="oval:org.mitre.oval:tst:828"/>
          <criteria operator="AND" comment="Windows XP (sp1 or earlier) is installed">
            <criterion comment="Windows XP is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2838"/>
            <criterion comment="Win2K/XP/2003 service pack 2 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2837"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="OR">
          <criterion comment="If key present hyperterminal will automatically open session files" negate="false" test_ref="oval:org.mitre.oval:tst:827"/>
          <criterion comment="If the Hyperterminal client is registered as the default telnet client" negate="false" test_ref="oval:org.mitre.oval:tst:826"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1601" version="1" class="vulnerability">
      <metadata>
        <title>Windows ME Long Share Names Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <product>Windows Shell</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0214"/>
        <description>Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application crash) and possibly execute arbitrary code via long share names, as demonstrated using Samba.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-14T03:37:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-10-20T02:35:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows ME Installed" negate="false" test_ref="oval:org.mitre.oval:tst:831"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1600" version="8" class="vulnerability">
      <metadata>
        <title>Flash Address Bar Spoofing Vulnerability (Win2K)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1626"/>
        <description>Internet Explorer 6 for Windows XP SP2 and earlier allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious Shockwave Flash application, then changing the window location back to a trusted URL while the Flash application is still loading.  NOTE: this is a different vulnerability than CVE-2006-1192.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:23.536-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:11.006-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:41.233-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:53.398-05:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:07.934-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:55.782-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:05.126-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:24.675-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:52.908-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:20.949-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
        <criterion comment="the version of mshtml.dll is less than 5.0.3841.1900" negate="false" test_ref="oval:org.mitre.oval:tst:957"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:160" version="5" class="vulnerability">
      <metadata>
        <title>Windows Server 2003 Plug and Play Buffer Overflow Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1983" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1983"/>
        <description>Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob (aka Mytob) worm.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:40:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:23.350-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:10.440-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:160 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:04:59.812-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:24.164-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:4033"/>
        <criterion comment="Win2K/XP/2003 service pack 1 is installed" test_ref="oval:org.mitre.oval:tst:3342"/>
        <criterion comment="the version of umpnpmgr.dll is less than 5.2.3790.2477" test_ref="oval:org.mitre.oval:tst:3535"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16" version="3" class="vulnerability" deprecated="true">
      <metadata>
        <title>DEPRECATED: Windows NT IIS Chunked Encoding Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0079"/>
        <description>Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Server Pages allows attackers to cause a denial of service or execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-14T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected to use a forward slash as the separator in the key." date="2007-05-07T15:59:00.430-04:00">
              <contributor organization="Secure Elements, Inc.">Glenn Strickland</contributor>
            </modified>
            <status_change date="2007-05-07T16:06:12.009-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:30.089-04:00">ACCEPTED</status_change>
            <modified comment="Use def:12501 instead" date="2011-01-20T10:03:27.099-05:00">
              <contributor organization="Symantec Corporation">Josh Turpin</contributor>
            </modified>
            <status_change date="2011-01-20T10:03:27.099-05:00">DEPRECATED</status_change>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="IIS 4.0 Major Version" negate="false" test_ref="oval:org.mitre.oval:tst:3099"/>
          <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
          <criterion comment="this is an NT Terminal Server" negate="true" test_ref="oval:org.mitre.oval:tst:3097"/>
          <criterion comment="the version of w3svc.dll is less than 4.2.775.1" negate="false" test_ref="oval:org.mitre.oval:tst:3096"/>
          <criterion comment="Patch Q319733 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3095"/>
          <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
          <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="asp.dll mapping exists" negate="false" test_ref="oval:org.mitre.oval:tst:3092"/>
        </criteria>
      </criteria>
    </definition>
    <definition class="vulnerability" id="oval:org.mitre.oval:def:1598" version="5">
      <metadata>
        <title>Windows Media Player 10 Bitmap Remote Code Execution</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Windows Media Player</product>
        </affected>
        <reference ref_id="CVE-2006-0006" source="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0006"/>
        <description>Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on Windows 2000 SP4 and XP SP1, and Media Player 10 on XP SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted bitmap (.BMP) file that specifies a size of 0 but contains additional data.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-02-17T07:36:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-02-22T08:27:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-03-09T12:19:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-04-06T06:30:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-05-31T01:08:00.000-04:00" comment="modified wrt-646 - Removed extra backslash from value regexp.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-05-31T09:44:00.000-04:00">INTERIM</status_change>
            <modified date="2006-08-22T07:56:12" comment="Restrict to XP and changed Wmp.dll version number per Apr11 changes to MS06-005.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-10-07T09:15:23.076-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:746" date="2007-03-06T08:04:00.424-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-06T08:05:12.535-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:55.525-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:746 - added trailing $ to regexs" date="2011-10-31T09:26:00.646-04:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2011-10-31T09:31:17.784-04:00">INTERIM</status_change>
            <status_change date="2011-11-21T04:13:06.921-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows XP is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2838"/>
        <criterion comment="Windows Media Player 10 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:833"/>
        <criterion comment="the version of Wmp.dll is less than 10.0.0.4019" negate="false" test_ref="oval:org.mitre.oval:tst:832"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1593" class="vulnerability" version="2">
      <metadata>
        <title>Malformed iCal Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <product>Microsoft Exchange Server</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0039" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0039"/>
        <description>The Exchange Collaboration Data Objects (EXCDO) functionality in Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 allows remote attackers to cause a denial of service (crash) via an Internet Calendar (iCal) file containing multiple X-MICROSOFT-CDO-MODPROPS (MODPROPS) properties in which the second MODPROPS is longer than the first, which triggers a NULL pointer dereference and an unhandled exception.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-05-09T10:04:48">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2007-05-09T12:53:06-04:00">DRAFT</status_change>
            <status_change date="2007-05-31T15:26:34.040-04:00">INTERIM</status_change>
            <status_change date="2007-06-15T11:07:34.879-04:00">ACCEPTED</status_change>
            <modified comment="References registry value for Common Files directory due to multilingual support" date="2008-04-14T11:07:00.679-04:00">
              <contributor organization="GFI Software">Clifford Farrugia</contributor>
            </modified>
            <status_change date="2008-04-14T12:26:45.215-04:00">INTERIM</status_change>
            <status_change date="2008-05-05T04:00:11.538-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria comment="Microsoft Exchange 2000 Server Service Pack 3" operator="AND">
          <extend_definition comment="Microsoft Exchange 2000 Server Service Pack 3 is installed" definition_ref="oval:org.mitre.oval:def:1858"/>
          <criterion comment="the version of Cdoex.dll is less than 6.0.6619.12" test_ref="oval:org.mitre.oval:tst:3975"/>
        </criteria>
        <criteria comment="Microsoft Exchange Server 2003 Service Pack 1" operator="AND">
          <extend_definition comment="Microsoft Exchange Server 2003 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:1672"/>
          <criterion comment="the version of Cdoex.dll is less than 6.5.7235.2" test_ref="oval:org.mitre.oval:tst:3925"/>
        </criteria>
        <criteria comment="Microsoft Exchange Server 2003 Service Pack 2" operator="AND">
          <extend_definition comment="Microsoft Exchange Server 2003 Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:1869"/>
          <criterion comment="the version of Cdoex.dll is less than 6.5.7652.24" test_ref="oval:org.mitre.oval:tst:3618"/>
        </criteria>
        <criteria comment="Microsoft Exchange Server 2007" operator="AND">
          <extend_definition comment="Microsoft Exchange Server 2007 is installed" definition_ref="oval:org.mitre.oval:def:1641"/>
          <criterion comment="the version of Cdoex.dll is less than 8.0.709.0" test_ref="oval:org.mitre.oval:tst:4122"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15911" version="3" class="vulnerability">
      <metadata>
        <title>Oracle Outside In Contains Multiple Exploitable Vulnerabilities-II MS12-080</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Exchange Server 2007</product>
          <product>Microsoft Exchange Server 2010</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-3217" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3217"/>
        <description>Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7.0 allows context-dependent attackers to affect availability, related to Outside In HTML Export SDK.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-12-12T08:43:01">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-12-12T19:43:58.935-05:00">DRAFT</status_change>
            <status_change date="2012-12-31T04:01:39.108-05:00">INTERIM</status_change>
            <status_change date="2013-01-21T04:00:19.244-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2007 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2007 SP3 is installed" definition_ref="oval:org.mitre.oval:def:15784"/>
          <criterion comment="Check if the version ExSetup.exe is less than 8.3.297.2" test_ref="oval:org.mitre.oval:tst:79624"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP1 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP1 is installed" definition_ref="oval:org.mitre.oval:def:15339"/>
          <criterion comment="Check if the version ExSetup.exe is less than 14.1.438.0" test_ref="oval:org.mitre.oval:tst:80439"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP2">
          <extend_definition comment="Microsoft Exchange Server 2010 SP2 is installed" definition_ref="oval:org.mitre.oval:def:14151"/>
          <criterion comment="Check if the version ExSetup.exe is less than 14.2.328.10" test_ref="oval:org.mitre.oval:tst:80396"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1583" version="4" class="vulnerability">
      <metadata>
        <title>Win2K Kernel Privilege Escalation Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2827" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2827"/>
        <description>The thread termination routine in the kernel for Windows NT 4.0 and 2000 (NTOSKRNL.EXE) allows local users to modify kernel memory and execution flow via steps in which a terminating thread causes Asynchronous Procedure Call (APC) entries to free the wrong data, aka the "Windows Kernel Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-12-13T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-12-16T01:03:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-01-04T08:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-01-25T07:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Changed obj:633 to use var:200 to get the Windows System 32 directory." date="2007-01-04T08:58:00.479-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-04T09:00:02.619-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:52.531-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1583 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:37.602-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:15.331-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="The version of Ntkrnlpa.exe is less than 5.0.2195.7071" test_ref="oval:org.mitre.oval:tst:839"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15812" version="5" class="vulnerability">
      <metadata>
        <title>Oracle Outside In contains multiple exploitable vulnerabilities - II</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Exchange Server 2007</product>
          <product>Microsoft Exchange Server 2010</product>
          <product>Microsoft FAST Search Server 2010 for SharePoint</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-1767" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1767"/>
        <description>Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-08-20T10:24:13">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-08-20T16:06:06.929-04:00">DRAFT</status_change>
            <status_change date="2012-09-10T04:00:37.642-04:00">INTERIM</status_change>
            <status_change date="2012-10-01T04:00:34.081-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:19493 - New Microsoft Patch Tuesday October 2012 definitions." date="2012-10-19T16:09:00.069-04:00">
              <contributor organization="SecPod Technologies">Chandan S</contributor>
            </modified>
            <status_change date="2012-10-19T16:39:03.763-04:00">INTERIM</status_change>
            <status_change date="2012-11-05T04:00:20.939-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2007 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2007 SP3 is installed" definition_ref="oval:org.mitre.oval:def:15784"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 8.3.279.4" test_ref="oval:org.mitre.oval:tst:80087"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP1 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP1 is installed" definition_ref="oval:org.mitre.oval:def:15339"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 14.1.421.2" test_ref="oval:org.mitre.oval:tst:80199"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP2">
          <extend_definition comment="Microsoft Exchange Server 2010 SP2 is installed" definition_ref="oval:org.mitre.oval:def:14151"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 14.2.318.4" test_ref="oval:org.mitre.oval:tst:79908"/>
        </criteria>
        <criteria operator="AND" comment="FAST Search Server 2010 for SharePoint vulnerable version">
          <extend_definition comment="Microsoft FAST Search Server 2010 for SharePoint is installed" definition_ref="oval:org.mitre.oval:def:15918"/>
          <criterion comment="Check if the version of Microsoft.sharepoint.search.extended.administration.dll is less than 14.0.334.11" test_ref="oval:org.mitre.oval:tst:80085"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15804" version="5" class="vulnerability">
      <metadata>
        <title>Oracle Outside In contains multiple exploitable vulnerabilities - XI</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Exchange Server 2007</product>
          <product>Microsoft Exchange Server 2010</product>
          <product>Microsoft FAST Search Server 2010 for SharePoint</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-3108" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3108"/>
        <description>Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-08-20T10:24:13">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-08-20T16:06:09.211-04:00">DRAFT</status_change>
            <status_change date="2012-09-10T04:00:36.501-04:00">INTERIM</status_change>
            <status_change date="2012-10-01T04:00:32.740-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:15804 - New Microsoft Patch Tuesday October 2012 definitions." date="2012-10-19T16:09:00.069-04:00">
              <contributor organization="SecPod Technologies">Chandan S</contributor>
            </modified>
            <status_change date="2012-10-19T16:38:58.775-04:00">INTERIM</status_change>
            <status_change date="2012-11-05T04:00:20.227-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2007 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2007 SP3 is installed" definition_ref="oval:org.mitre.oval:def:15784"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 8.3.279.4" test_ref="oval:org.mitre.oval:tst:80087"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP1 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP1 is installed" definition_ref="oval:org.mitre.oval:def:15339"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 14.1.421.2" test_ref="oval:org.mitre.oval:tst:80199"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP2">
          <extend_definition comment="Microsoft Exchange Server 2010 SP2 is installed" definition_ref="oval:org.mitre.oval:def:14151"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 14.2.318.4" test_ref="oval:org.mitre.oval:tst:79908"/>
        </criteria>
        <criteria operator="AND" comment="FAST Search Server 2010 for SharePoint vulnerable version">
          <extend_definition comment="Microsoft FAST Search Server 2010 for SharePoint is installed" definition_ref="oval:org.mitre.oval:def:15918"/>
          <criterion comment="Check if the version of Microsoft.sharepoint.search.extended.administration.dll is less than 14.0.334.11" test_ref="oval:org.mitre.oval:tst:80085"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1580" version="1" class="vulnerability">
      <metadata>
        <title>Kerberos Command Execution Vulnerability rexec Daemon</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
          <product>X</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0769" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0769"/>
        <description>Unspecified vulnerability in in.rexecd in Solaris 10 allows local users to gain privileges on Kerberos systems via unknown attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-02-19T05:38:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-02-22T08:27:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-03-09T12:19:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-04-06T06:30:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="OR">
          <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert ID 102186 criteria.">
            <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:2459"/>
            <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
            <criterion comment="Patch 120329-02 or later installed (SPARC-10)" negate="true" test_ref="oval:org.mitre.oval:tst:845"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert ID 102186 criteria.">
            <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:2459"/>
            <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
            <criterion comment="Patch 120330-02 or later installed (SPARC-10)" negate="true" test_ref="oval:org.mitre.oval:tst:844"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="Target is configured to reference pam_krb5" negate="false" test_ref="oval:org.mitre.oval:tst:843"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15781" version="5" class="vulnerability">
      <metadata>
        <title>Reflected XSS Vulnerability - MS12-062</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Vista</platform>
          <product>Microsoft System Center Configuration Manager 2007</product>
          <product>Microsoft System Center Configuration Manager 2007 R2</product>
          <product>Microsoft System Center Configuration Manager 2007 R3</product>
          <product>Microsoft Systems Management Server 2003</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-2536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2536"/>
        <description>Cross-site scripting (XSS) vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Reflected XSS Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2012-09-13T09:31:18">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-09-13T12:48:30.646-04:00">DRAFT</status_change>
            <status_change date="2012-10-01T04:00:30.570-04:00">INTERIM</status_change>
            <status_change date="2012-10-22T04:06:44.168-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:tst:80096 - Updates based on revised bulletin for MS12-062." date="2012-11-19T16:12:00.903-05:00">
              <contributor organization="SecPod Technologies">Pradeep R B</contributor>
            </modified>
            <status_change date="2012-11-19T16:20:34.844-05:00">INTERIM</status_change>
            <status_change date="2012-12-10T04:00:13.311-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Check for vulnerable SMS 2003/file version">
          <extend_definition comment="Microsoft Systems Management Server 2003 SP3 is installed" definition_ref="oval:org.mitre.oval:def:15150"/>
          <criterion comment="Check if version of ReportingInstall.exe (SMS 2003) is less than 2.50.4253.3129" test_ref="oval:org.mitre.oval:tst:80064"/>
        </criteria>
        <criteria operator="AND" comment="Check for vulnerable SCCM 2007/file version">
          <criterion comment="Check if version of ReportingInstall.exe (SCCM 2007) is less than 4.0.6487.2216" test_ref="oval:org.mitre.oval:tst:80096"/>
          <criteria operator="OR" comment="Either applications">
            <extend_definition comment="Microsoft System Center Configuration Manager 2007 SP2 is installed" definition_ref="oval:org.mitre.oval:def:15636"/>
            <extend_definition comment="Microsoft System Center Configuration Manager 2007 R2 is installed" definition_ref="oval:org.mitre.oval:def:15840"/>
            <extend_definition comment="Microsoft System Center Configuration Manager 2007 R3 is installed" definition_ref="oval:org.mitre.oval:def:15833"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15840" version="3" class="inventory">
      <metadata>
        <title>Microsoft System Center Configuration Manager 2007 R2 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Vista</platform>
          <product>Microsoft System Center Configuration Manager 2007 R2</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:systems_management_server:2007:r2"/>
        <description>Microsoft System Center Configuration Manager 2007 R2 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-09-13T09:31:18">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-09-13T12:48:30.145-04:00">DRAFT</status_change>
            <status_change date="2012-10-01T04:00:35.776-04:00">INTERIM</status_change>
            <status_change date="2012-10-22T04:06:46.648-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Microsoft System Center Configuration Manager 2007 R2 is installed" test_ref="oval:org.mitre.oval:tst:80002"/>
        <extend_definition comment="Microsoft System Center Configuration Manager 2007 is installed" definition_ref="oval:org.mitre.oval:def:15678"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15833" version="3" class="inventory">
      <metadata>
        <title>Microsoft System Center Configuration Manager 2007 R3 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Vista</platform>
          <product>Microsoft System Center Configuration Manager 2007 R3</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:systems_management_server:2007:r3"/>
        <description>Microsoft System Center Configuration Manager 2007 R3 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-09-13T09:31:18">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-09-13T12:48:30.433-04:00">DRAFT</status_change>
            <status_change date="2012-10-01T04:00:35.255-04:00">INTERIM</status_change>
            <status_change date="2012-10-22T04:06:46.379-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Microsoft System Center Configuration Manager 2007 R3 is installed" test_ref="oval:org.mitre.oval:tst:79954"/>
        <extend_definition comment="Microsoft System Center Configuration Manager 2007 is installed" definition_ref="oval:org.mitre.oval:def:15678"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15636" version="3" class="inventory">
      <metadata>
        <title>Microsoft System Center Configuration Manager 2007 SP2 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft System Center Configuration Manager 2007</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:systems_management_server:2007:sp2"/>
        <description>Microsoft System Center Configuration Manager 2007 SP2 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-09-13T18:48:18">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-09-13T12:48:29.178-04:00">DRAFT</status_change>
            <status_change date="2012-10-01T04:00:17.770-04:00">INTERIM</status_change>
            <status_change date="2012-10-22T04:06:35.953-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft System Center Configuration Manager 2007 is installed" definition_ref="oval:org.mitre.oval:def:15678"/>
        <criterion comment="Check if Microsoft System Center Configuration Manager 2007 SP2 is installed" test_ref="oval:org.mitre.oval:tst:80097"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15678" version="3" class="inventory">
      <metadata>
        <title>Microsoft System Center Configuration Manager 2007 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft System Center Configuration Manager 2007</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:systems_management_server:2007"/>
        <description>Microsoft System Center Configuration Manager 2007 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-09-13T18:48:18">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-09-13T12:48:28.852-04:00">DRAFT</status_change>
            <status_change date="2012-10-01T04:00:21.696-04:00">INTERIM</status_change>
            <status_change date="2012-10-22T04:06:37.946-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Microsoft System Center Configuration Manager 2007 is installed" test_ref="oval:org.mitre.oval:tst:80024"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15150" version="3" class="inventory">
      <metadata>
        <title>Microsoft Systems Management Server 2003 SP3 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Systems Management Server 2003</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:systems_management_server:2003:sp3"/>
        <description>Microsoft Systems Management Server 2003 SP3 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-09-13T18:48:18">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-09-13T12:48:29.676-04:00">DRAFT</status_change>
            <status_change date="2012-10-01T04:00:07.264-04:00">INTERIM</status_change>
            <status_change date="2012-10-22T04:06:06.888-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft Systems Management Server 2003 is installed" definition_ref="oval:org.mitre.oval:def:15121"/>
        <criterion comment="Check if Microsoft Systems Management Server 2003 SP3 is installed" test_ref="oval:org.mitre.oval:tst:79365"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15121" version="3" class="inventory">
      <metadata>
        <title>Microsoft Systems Management Server 2003 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Systems Management Server 2003</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:systems_management_server:2003"/>
        <description>Microsoft Systems Management Server 2003 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-09-13T18:48:18">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-09-13T12:48:29.443-04:00">DRAFT</status_change>
            <status_change date="2012-10-01T04:00:06.995-04:00">INTERIM</status_change>
            <status_change date="2012-10-22T04:06:05.660-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Microsoft Systems Management Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:80078"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1578" version="6" class="vulnerability">
      <metadata>
        <title>Windows Media Player 7.10 Bitmap Remote Code Execution</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Windows Media Player</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0006" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0006"/>
        <description>Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on Windows 2000 SP4 and XP SP1, and Media Player 10 on XP SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted bitmap (.BMP) file that specifies a size of 0 but contains additional data.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-02-17T07:36:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-02-22T08:27:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-03-09T12:19:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-04-06T06:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:952" date="2007-01-24T21:37:00.382-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-24T21:38:24.641-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:52.347-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:952 - def:5942 &amp; def:5689, Enhanced to cover WinVista, 2008, 2003 &amp; also 64-bit with service packs" date="2011-11-15T14:56:00.873-05:00">
              <contributor organization="SecPod Technologies">Pradeep R B</contributor>
            </modified>
            <status_change date="2011-11-15T14:58:49.714-05:00">INTERIM</status_change>
            <status_change date="2011-12-05T04:00:24.013-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:952 - Updated series of States to escape .(period) character." date="2012-01-13T17:30:00.463-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2012-01-13T17:34:55.577-05:00">INTERIM</status_change>
            <status_change date="2012-01-30T04:00:57.549-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Media Player 7.1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1066"/>
        <criterion comment="the version of Wmpui.dll is less than 7.10.0.3077" negate="false" test_ref="oval:org.mitre.oval:tst:846"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15779" version="5" class="vulnerability">
      <metadata>
        <title>XSS Vulnerability - MS12-061</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Vista</platform>
          <product>Microsoft Visual Studio Team Foundation Server 2010</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-1892" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1892"/>
        <description>Cross-site scripting (XSS) vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "XSS Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2012-09-13T18:42:57">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-09-13T12:41:55.325-04:00">DRAFT</status_change>
            <status_change date="2012-10-01T04:00:30.276-04:00">INTERIM</status_change>
            <status_change date="2012-10-22T04:06:43.861-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:var:1065 - Added &quot;\&quot; symbol before every &quot;.&quot; symbol." date="2014-07-25T11:52:00.286-04:00">
              <contributor organization="ALTX-SOFT">Evgeniy Pavlov</contributor>
            </modified>
            <status_change date="2014-07-25T11:54:00.659-04:00">INTERIM</status_change>
            <status_change date="2014-08-11T04:00:12.942-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft Visual Studio Team Foundation Server 2010 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:15187"/>
        <criterion comment="Check if the version of Microsoft.TeamFoundation.WebAccess.dll is less than 10.0.40219.417" test_ref="oval:org.mitre.oval:tst:79715"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15187" version="3" class="inventory">
      <metadata>
        <title>Microsoft Visual Studio Team Foundation Server 2010 Service Pack 1 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Vista</platform>
          <product>Microsoft Visual Studio Team Foundation Server 2010</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:visual_studio_team_foundation_server:2010:sp1"/>
        <description>Microsoft Visual Studio Team Foundation Server 2010 Service Pack 1 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2012-09-13T18:42:57">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-09-13T12:41:54.467-04:00">DRAFT</status_change>
            <status_change date="2012-10-01T04:00:07.859-04:00">INTERIM</status_change>
            <status_change date="2012-10-22T04:06:08.202-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft Visual Studio Team Foundation Server 2010 is installed" definition_ref="oval:org.mitre.oval:def:15512"/>
        <criterion comment="Check if Visual Studio Team Foundation Server 2010 SP1 is installed" test_ref="oval:org.mitre.oval:tst:79804"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15512" version="3" class="inventory">
      <metadata>
        <title>Microsoft Visual Studio Team Foundation Server 2010 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Vista</platform>
          <product>Microsoft Visual Studio Team Foundation Server 2010</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:visual_studio_team_foundation_server:2010"/>
        <description>Microsoft Visual Studio Team Foundation Server 2010 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2012-09-13T18:42:57">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-09-13T12:41:53.623-04:00">DRAFT</status_change>
            <status_change date="2012-10-01T04:00:12.698-04:00">INTERIM</status_change>
            <status_change date="2012-10-22T04:06:25.083-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Visual Studio Team Foundation Server 2010 is installed" test_ref="oval:org.mitre.oval:tst:80166"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1577" version="4" class="vulnerability">
      <metadata>
        <title>HP-UX Shared Library Privilege Escalation Vulnerability (B.11.00)</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0436"/>
        <description>Unspecified vulnerability in HP HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain privileges via unknown attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-01-30T07:20:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-02-01T09:08:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-03-09T12:19:00.000-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:28.348-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:09.738-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1577 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:48.117-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:14.689-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.00">
          <criteria operator="AND" comment="700 Series OS Release 11.00">
            <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:2515"/>
            <criterion comment="HP Release B.11.00" test_ref="oval:org.mitre.oval:tst:2512"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 11.00">
            <criterion comment="800-series HP" test_ref="oval:org.mitre.oval:tst:2513"/>
            <criterion comment="HP Release B.11.00" test_ref="oval:org.mitre.oval:tst:2512"/>
          </criteria>
        </criteria>
        <criterion negate="true" comment="Patch PHCO_29249 is installed" test_ref="oval:org.mitre.oval:tst:847"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15763" version="8" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4.0, 4.1, and 4.2</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>VirtualBox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2013-0420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0420"/>
        <description>Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4.0, 4.1, and 4.2 allows local users to affect integrity and availability via unknown vectors related to Core.  NOTE: The previous information was obtained from the January 2013 Oracle CPU. Oracle has not commented on claims from another vendor that this issue is related to an incorrect comparison in the vga_draw_text function in Devices/Graphics/DevVGA.cpp, which can cause VirtualBox to "draw more lines than necessary."</description>
        <oval_repository>
          <dates>
            <submitted date="2013-04-26T14:33:26.748+04:00">
              <contributor organization="ALTX-SOFT">Sergey Artykhov</contributor>
            </submitted>
            <status_change date="2013-05-15T15:01:32.094-04:00">DRAFT</status_change>
            <status_change date="2013-06-03T04:02:41.713-04:00">INTERIM</status_change>
            <status_change date="2013-06-24T04:00:05.202-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:15297 - modificated vulnerabilities for VirtualBox" date="2013-12-05T10:43:00.197-05:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-12-05T10:45:12.446-05:00">INTERIM</status_change>
            <status_change date="2013-12-23T04:00:31.967-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:15763 - New vulnerability(CVE-2013-5892) added and modified existing criteria" date="2014-01-30T14:45:00.034-05:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2014-01-30T14:49:22.119-05:00">INTERIM</status_change>
            <status_change date="2014-02-17T04:00:10.655-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="VirtualBox is installed" definition_ref="oval:org.mitre.oval:def:11581"/>
        <criterion comment="Check if Oracle VM VirtualBox is installed" test_ref="oval:org.mitre.oval:tst:42006"/>
        <criteria operator="OR" comment="Check versions of VirtualBox">
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.0.0" test_ref="oval:org.mitre.oval:tst:88607"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than or equals to 4.0.6" test_ref="oval:org.mitre.oval:tst:88945"/>
          </criteria>
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version  is greater than or equals to 4.0.8" test_ref="oval:org.mitre.oval:tst:88912"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than 4.3.0" test_ref="oval:org.mitre.oval:tst:99835"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15760" version="3" class="vulnerability">
      <metadata>
        <title>System Center Operations Manager Web Console XSS Vulnerability-I - MS13-003</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft System Center Operations Manager 2007</product>
          <product>Microsoft System Center Operations Manager 2007 R2</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2013-0009" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0009"/>
        <description>Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Center Operations Manager Web Console XSS Vulnerability," a different vulnerability than CVE-2013-0010.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-01-10T16:59:36">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-01-10T11:18:30.481-05:00">DRAFT</status_change>
            <status_change date="2013-01-28T04:00:58.210-05:00">INTERIM</status_change>
            <status_change date="2013-02-18T04:00:09.934-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="SCOM 2007 is installed and vuln file">
          <extend_definition comment="Microsoft System Center Operations Manager 2007 SP1 is installed" definition_ref="oval:org.mitre.oval:def:16286"/>
          <criterion comment="Check if the version of AuditingMessages.dll is less than or equal to 6.0.6278.0" test_ref="oval:org.mitre.oval:tst:80576"/>
        </criteria>
        <criteria operator="AND" comment="2007 R2 and vulnerable file version">
          <extend_definition comment="Microsoft System Center Operations Manager 2007 R2 is installed" definition_ref="oval:org.mitre.oval:def:16190"/>
          <criterion comment="Check if the version of AuditingMessages.dll is less than 6.1.7221.110" test_ref="oval:org.mitre.oval:tst:80122"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16286" version="3" class="inventory">
      <metadata>
        <title>Microsoft System Center Operations Manager 2007 SP1 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft System Center Operations Manager 2007</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:system_center_operations_manager:2007:sp1"/>
        <description>Microsoft System Center Operations Manager 2007 SP1 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2013-01-10T16:59:36">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-01-10T11:18:29.856-05:00">DRAFT</status_change>
            <status_change date="2013-01-28T04:01:01.380-05:00">INTERIM</status_change>
            <status_change date="2013-02-18T04:00:13.488-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft System Center Operations Manager 2007 is installed" definition_ref="oval:org.mitre.oval:def:16114"/>
        <criterion comment="Check if the version of Microsoft System Center Operations Manager 2007 is greater than or equal to 6.0.6278.0" test_ref="oval:org.mitre.oval:tst:80567"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16114" version="3" class="inventory">
      <metadata>
        <title>Microsoft System Center Operations Manager 2007 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft System Center Operations Manager 2007</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:system_center_operations_manager:2007"/>
        <description>Microsoft System Center Operations Manager 2007 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2013-01-10T16:59:36">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-01-10T11:18:29.640-05:00">DRAFT</status_change>
            <status_change date="2013-01-28T04:00:59.476-05:00">INTERIM</status_change>
            <status_change date="2013-02-18T04:00:11.611-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Microsoft System Center Operations Manager 2007 is installed" test_ref="oval:org.mitre.oval:tst:80596"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16190" version="3" class="inventory">
      <metadata>
        <title>Microsoft System Center Operations Manager 2007 R2 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft System Center Operations Manager 2007 R2</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:system_center_operations_manager:2007:r2"/>
        <description>Microsoft System Center Operations Manager 2007 R2 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2013-01-10T16:59:36">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-01-10T11:18:30.157-05:00">DRAFT</status_change>
            <status_change date="2013-01-28T04:00:59.738-05:00">INTERIM</status_change>
            <status_change date="2013-02-18T04:00:11.821-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Microsoft System Center Operations Manager 2007 R2 is installed" test_ref="oval:org.mitre.oval:tst:80638"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15758" version="3" class="vulnerability">
      <metadata>
        <title>Vulnerability in SharePoint could allow information disclosure - MS13-030</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Vista</platform>
          <product>Microsoft SharePoint Server 2013</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2013-1290" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1290"/>
        <description>Microsoft SharePoint Server 2013, in certain configurations involving legacy My Sites, does not properly establish default access controls for a SharePoint list, which allows remote authenticated users to bypass intended restrictions on reading list items via a direct request for a list's location, aka "Incorrect Access Rights Information Disclosure Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2013-04-12T10:24:08">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-04-15T21:05:35.219-04:00">DRAFT</status_change>
            <status_change date="2013-05-06T04:01:41.010-04:00">INTERIM</status_change>
            <status_change date="2013-05-27T04:00:05.120-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft SharePoint Server 2013 is installed" definition_ref="oval:org.mitre.oval:def:16325"/>
        <criterion comment="Check if the version of Microsoft.office.server.dll is less than 15.0.4481.1507" test_ref="oval:org.mitre.oval:tst:81077"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16325" version="3" class="inventory">
      <metadata>
        <title>Microsoft SharePoint Server 2013 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows Vista</platform>
          <product>Microsoft SharePoint Server 2013</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:sharepoint_server:2013"/>
        <description>Microsoft SharePoint Server 2013 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2013-04-12T10:24:08">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2013-04-15T21:05:34.844-04:00">DRAFT</status_change>
            <status_change date="2013-05-06T04:02:05.965-04:00">INTERIM</status_change>
            <status_change date="2013-05-27T04:00:08.177-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if SharePoint Server 2013 is installed" test_ref="oval:org.mitre.oval:tst:80504"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15747" version="5" class="vulnerability">
      <metadata>
        <title>Oracle Outside In contains multiple exploitable vulnerabilities - XIII</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Exchange Server 2007</product>
          <product>Microsoft Exchange Server 2010</product>
          <product>Microsoft FAST Search Server 2010 for SharePoint</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-3110" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3110"/>
        <description>Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-08-20T10:24:13">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-08-20T16:06:09.655-04:00">DRAFT</status_change>
            <status_change date="2012-09-10T04:00:33.715-04:00">INTERIM</status_change>
            <status_change date="2012-10-01T04:00:29.186-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:19493 - New Microsoft Patch Tuesday October 2012 definitions." date="2012-10-19T16:09:00.069-04:00">
              <contributor organization="SecPod Technologies">Chandan S</contributor>
            </modified>
            <status_change date="2012-10-19T16:39:07.568-04:00">INTERIM</status_change>
            <status_change date="2012-11-05T04:00:18.553-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2007 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2007 SP3 is installed" definition_ref="oval:org.mitre.oval:def:15784"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 8.3.279.4" test_ref="oval:org.mitre.oval:tst:80087"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP1 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP1 is installed" definition_ref="oval:org.mitre.oval:def:15339"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 14.1.421.2" test_ref="oval:org.mitre.oval:tst:80199"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP2">
          <extend_definition comment="Microsoft Exchange Server 2010 SP2 is installed" definition_ref="oval:org.mitre.oval:def:14151"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 14.2.318.4" test_ref="oval:org.mitre.oval:tst:79908"/>
        </criteria>
        <criteria operator="AND" comment="FAST Search Server 2010 for SharePoint vulnerable version">
          <extend_definition comment="Microsoft FAST Search Server 2010 for SharePoint is installed" definition_ref="oval:org.mitre.oval:def:15918"/>
          <criterion comment="Check if the version of Microsoft.sharepoint.search.extended.administration.dll is less than 14.0.334.11" test_ref="oval:org.mitre.oval:tst:80085"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1573" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability May Allow Users With the "File System Management" RBAC Profile to Gain Elevated Privileges</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4307" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4307"/>
        <description>Unspecified vulnerability in the format command in Sun Solaris 8 and 9 before 20060821 allows local users to modify arbitrary files via unspecified vectors involving profiles that permit running format with elevated privileges, a different issue than CVE-2006-4306 and CVE-2006-4319.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-10T12:25:25.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-13T13:57:13.830-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:27.463-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:40.578-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102514" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 108975-10 or later installed" test_ref="oval:org.mitre.oval:tst:3837" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102514" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 113072-08 or later installed" test_ref="oval:org.mitre.oval:tst:4119" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102514" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 108976-10 or later installed" test_ref="oval:org.mitre.oval:tst:3332" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102514" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 114423-07 or later installed" test_ref="oval:org.mitre.oval:tst:3870" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15724" version="5" class="vulnerability">
      <metadata>
        <title>Oracle Outside In contains multiple exploitable vulnerabilities - I</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Exchange Server 2007</product>
          <product>Microsoft Exchange Server 2010</product>
          <product>Microsoft FAST Search Server 2010 for SharePoint</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-1766" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1766"/>
        <description>Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-08-20T10:24:13">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-08-20T16:06:06.610-04:00">DRAFT</status_change>
            <status_change date="2012-09-10T04:00:31.458-04:00">INTERIM</status_change>
            <status_change date="2012-10-01T04:00:25.740-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:19493 - New Microsoft Patch Tuesday October 2012 definitions." date="2012-10-19T16:09:00.069-04:00">
              <contributor organization="SecPod Technologies">Chandan S</contributor>
            </modified>
            <status_change date="2012-10-19T16:39:07.223-04:00">INTERIM</status_change>
            <status_change date="2012-11-05T04:00:15.227-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2007 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2007 SP3 is installed" definition_ref="oval:org.mitre.oval:def:15784"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 8.3.279.4" test_ref="oval:org.mitre.oval:tst:80087"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP1 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP1 is installed" definition_ref="oval:org.mitre.oval:def:15339"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 14.1.421.2" test_ref="oval:org.mitre.oval:tst:80199"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP2">
          <extend_definition comment="Microsoft Exchange Server 2010 SP2 is installed" definition_ref="oval:org.mitre.oval:def:14151"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 14.2.318.4" test_ref="oval:org.mitre.oval:tst:79908"/>
        </criteria>
        <criteria operator="AND" comment="FAST Search Server 2010 for SharePoint vulnerable version">
          <extend_definition comment="Microsoft FAST Search Server 2010 for SharePoint is installed" definition_ref="oval:org.mitre.oval:def:15918"/>
          <criterion comment="Check if the version of Microsoft.sharepoint.search.extended.administration.dll is less than 14.0.334.11" test_ref="oval:org.mitre.oval:tst:80085"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15721" version="5" class="vulnerability">
      <metadata>
        <title>Oracle Outside In contains multiple exploitable vulnerabilities - IV</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Exchange Server 2007</product>
          <product>Microsoft Exchange Server 2010</product>
          <product>Microsoft FAST Search Server 2010 for SharePoint</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-1769" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1769"/>
        <description>Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-08-20T10:24:13">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-08-20T16:06:07.410-04:00">DRAFT</status_change>
            <status_change date="2012-09-10T04:00:31.140-04:00">INTERIM</status_change>
            <status_change date="2012-10-01T04:00:25.212-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:19493 - New Microsoft Patch Tuesday October 2012 definitions." date="2012-10-19T16:09:00.069-04:00">
              <contributor organization="SecPod Technologies">Chandan S</contributor>
            </modified>
            <status_change date="2012-10-19T16:39:06.688-04:00">INTERIM</status_change>
            <status_change date="2012-11-05T04:00:14.432-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2007 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2007 SP3 is installed" definition_ref="oval:org.mitre.oval:def:15784"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 8.3.279.4" test_ref="oval:org.mitre.oval:tst:80087"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP1 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP1 is installed" definition_ref="oval:org.mitre.oval:def:15339"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 14.1.421.2" test_ref="oval:org.mitre.oval:tst:80199"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP2">
          <extend_definition comment="Microsoft Exchange Server 2010 SP2 is installed" definition_ref="oval:org.mitre.oval:def:14151"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 14.2.318.4" test_ref="oval:org.mitre.oval:tst:79908"/>
        </criteria>
        <criteria operator="AND" comment="FAST Search Server 2010 for SharePoint vulnerable version">
          <extend_definition comment="Microsoft FAST Search Server 2010 for SharePoint is installed" definition_ref="oval:org.mitre.oval:def:15918"/>
          <criterion comment="Check if the version of Microsoft.sharepoint.search.extended.administration.dll is less than 14.0.334.11" test_ref="oval:org.mitre.oval:tst:80085"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1570" version="1" class="vulnerability">
      <metadata>
        <title>Excel Viewer 2003 Remote Code Execution via Malformed Description</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Office</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0029" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0029"/>
        <description>Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed description, which leads to memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-03-15T10:53:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-03-15T07:17:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-04-06T06:31:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Xlview.exe is installed with a version less than 11.0.8012.0" negate="false" test_ref="oval:org.mitre.oval:tst:881"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1568" version="4" class="vulnerability">
      <metadata>
        <title>Server 2003 Media Player PNG Processing Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Windows Media Player 9</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1244"/>
        <description>Windows Media Player 9 allows remote attackers to execute arbitrary code via a PNG file containing large (1) width or (2) height values, aka the "PNG Processing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-02-22T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2005-02-23T08:48:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-03-23T08:09:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-04-13T12:15:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-08-28T12:00:00.000-04:00" comment="modified objects 733, 734, 735, 736, 738, and 739 to use xsi:nil instead of a .* pattern match">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-08-28T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:28:47.969-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:895. Set datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-12T20:40:00.220-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-12T20:42:15.744-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:51.712-05:00">ACCEPTED</status_change>
            <modified comment="Removed the leading &quot;\&quot; from the key." date="2008-02-04T10:03:00.486-05:00">
              <contributor organization="Hewlett-Packard">Jeff Cheng</contributor>
            </modified>
            <status_change date="2008-02-04T10:08:42.556-05:00">INTERIM</status_change>
            <modified comment="Removed the leading &quot;\&quot; from the key." date="2008-02-04T10:03:00.093-05:00">
              <contributor organization="Hewlett-Packard">Jeff Cheng</contributor>
            </modified>
            <modified comment="Removed the leading &quot;\&quot; from the key." date="2008-02-04T10:03:00.139-05:00">
              <contributor organization="Hewlett-Packard">Jeff Cheng</contributor>
            </modified>
            <modified comment="Removed the leading &quot;\&quot; from the key." date="2008-02-04T10:03:00.121-05:00">
              <contributor organization="Hewlett-Packard">Jeff Cheng</contributor>
            </modified>
            <modified comment="Removed the leading &quot;\&quot; from the key." date="2008-02-04T10:03:00.237-05:00">
              <contributor organization="Hewlett-Packard">Jeff Cheng</contributor>
            </modified>
            <modified comment="Removed the leading &quot;\&quot; from the key." date="2008-02-04T10:03:00.221-05:00">
              <contributor organization="Hewlett-Packard">Jeff Cheng</contributor>
            </modified>
            <modified comment="Removed the leading &quot;\&quot; from the key." date="2008-02-04T10:03:00.557-05:00">
              <contributor organization="Hewlett-Packard">Jeff Cheng</contributor>
            </modified>
            <status_change date="2008-02-25T04:00:07.189-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Software section">
          <criterion comment="Windows Media Player 9.0 installed" test_ref="oval:org.mitre.oval:tst:1004"/>
          <criterion comment="the version of wmp.dll is les than 9.0.0.3250" test_ref="oval:org.mitre.oval:tst:1003"/>
          <criterion negate="true" comment="The patch KB885492 is installed on Windows Server 2003" test_ref="oval:org.mitre.oval:tst:853"/>
        </criteria>
        <criteria operator="AND" comment="Configuration section">
          <criteria operator="AND" comment="The files .asx, .wax, .wvx, .wpl, .wmx, .wms, .wmz EXIST">
            <criterion comment=".asx EXISTS" test_ref="oval:org.mitre.oval:tst:1001"/>
            <criterion comment=".wax EXISTS" test_ref="oval:org.mitre.oval:tst:1000"/>
            <criterion comment=".wvx EXISTS" test_ref="oval:org.mitre.oval:tst:999"/>
            <criterion comment=".wpl EXISTS" test_ref="oval:org.mitre.oval:tst:998"/>
            <criterion comment=".wmx EXISTS" test_ref="oval:org.mitre.oval:tst:997"/>
            <criterion comment=".wms EXISTS" test_ref="oval:org.mitre.oval:tst:996"/>
            <criterion comment=".wmz EXISTS" test_ref="oval:org.mitre.oval:tst:995"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1567" version="8" class="vulnerability">
      <metadata>
        <title>Address Bar Spoofing Vulnerability (Win2K)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2384" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2384"/>
        <description>Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to conduct spoofing and phishing attacks by using a modal browser window in a way that preserves the original address bar and trusted UI of a trusted site, even after the browser has been navigated to a malicious site, aka the "Address Bar Spoofing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:21.998-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:08.495-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:42.822-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:51.521-05:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:08.993-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:54.306-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:20.831-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:20.620-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:55.580-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:20.181-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
        <criterion comment="the version of mshtml.dll is less than 5.0.3841.1900" negate="false" test_ref="oval:org.mitre.oval:tst:957"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15668" version="5" class="vulnerability">
      <metadata>
        <title>Oracle Outside In contains multiple exploitable vulnerabilities - VI</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Exchange Server 2007</product>
          <product>Microsoft Exchange Server 2010</product>
          <product>Microsoft FAST Search Server 2010 for SharePoint</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-1771" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1771"/>
        <description>Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-08-20T10:24:13">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-08-20T16:06:07.854-04:00">DRAFT</status_change>
            <status_change date="2012-09-10T04:00:27.438-04:00">INTERIM</status_change>
            <status_change date="2012-10-01T04:00:19.288-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:19493 - New Microsoft Patch Tuesday October 2012 definitions." date="2012-10-19T16:09:00.069-04:00">
              <contributor organization="SecPod Technologies">Chandan S</contributor>
            </modified>
            <status_change date="2012-10-19T16:39:05.609-04:00">INTERIM</status_change>
            <status_change date="2012-11-05T04:00:12.027-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2007 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2007 SP3 is installed" definition_ref="oval:org.mitre.oval:def:15784"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 8.3.279.4" test_ref="oval:org.mitre.oval:tst:80087"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP1 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP1 is installed" definition_ref="oval:org.mitre.oval:def:15339"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 14.1.421.2" test_ref="oval:org.mitre.oval:tst:80199"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP2">
          <extend_definition comment="Microsoft Exchange Server 2010 SP2 is installed" definition_ref="oval:org.mitre.oval:def:14151"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 14.2.318.4" test_ref="oval:org.mitre.oval:tst:79908"/>
        </criteria>
        <criteria operator="AND" comment="FAST Search Server 2010 for SharePoint vulnerable version">
          <extend_definition comment="Microsoft FAST Search Server 2010 for SharePoint is installed" definition_ref="oval:org.mitre.oval:def:15918"/>
          <criterion comment="Check if the version of Microsoft.sharepoint.search.extended.administration.dll is less than 14.0.334.11" test_ref="oval:org.mitre.oval:tst:80085"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15667" version="5" class="vulnerability">
      <metadata>
        <title>TrueType Font Parsing Vulnerability (CVE-2012-0159)</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Lync 2010</product>
          <product>Microsoft Lync 2010 Attendee</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-0159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0159"/>
        <description>Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview; Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Silverlight 4 before 4.1.10329; and Silverlight 5 before 5.1.10411 allow remote attackers to execute arbitrary code via a crafted TrueType font (TTF) file, aka "TrueType Font Parsing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2012-06-18T15:13:15">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-06-19T12:05:11.640-04:00">DRAFT</status_change>
            <status_change date="2012-07-09T04:00:32.648-04:00">INTERIM</status_change>
            <status_change date="2012-07-30T04:00:35.156-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:23843 - In some &quot;pattern match&quot; strings added &quot;\&quot; before &quot;.&quot; to clarify if &quot;point&quot; or &quot;any symbol&quot; needed." date="2014-07-28T18:11:00.493-04:00">
              <contributor organization="ALTX-SOFT">Evgeniy Pavlov</contributor>
            </modified>
            <status_change date="2014-07-28T18:12:39.185-04:00">INTERIM</status_change>
            <status_change date="2014-08-18T04:01:22.478-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Check for vulnerable lync 2010">
          <extend_definition comment="Microsoft Lync 2010 is installed" definition_ref="oval:org.mitre.oval:def:15099"/>
          <criterion comment="Check if version of Communicator.exe (Lync 2010) is less than 4.0.7577.4098" test_ref="oval:org.mitre.oval:tst:79972"/>
        </criteria>
        <criteria operator="AND" comment="Check for vulnerable lync 2010 attendee (admin)">
          <extend_definition comment="Microsoft Lync 2010 Attendee (user level install) is installed" definition_ref="oval:org.mitre.oval:def:15641"/>
          <criterion comment="Check if version of ogl.dll (Lync 2010 Attendee for admin) is less than 4.0.7577.4098" test_ref="oval:org.mitre.oval:tst:79522"/>
        </criteria>
        <criteria operator="AND" comment="Check for vulnerable lync 2010 attendee (user)">
          <extend_definition comment="Microsoft Lync 2010 Attendee (admin level install) is installed" definition_ref="oval:org.mitre.oval:def:15556"/>
          <criterion comment="Check if version of ogl.dll (Lync 2010 Attendee for user) is less than 4.0.7577.4098" test_ref="oval:org.mitre.oval:tst:79686"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1566" version="1" class="vulnerability">
      <metadata>
        <title>Leaking GSSAPI Credentials Vulnerability (B.11.00/B.11.11)</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
          <product>SecureShell</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2798" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2798"/>
        <description>sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods, which could cause those credentials to be exposed to untrusted users or hosts.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-01-11T12:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-01-12T09:18:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-02-01T09:08:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.00 or 11.11">
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.11">
            <criteria operator="AND" comment="700 Series OS Release 11.11">
              <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
              <criterion comment="HP Release B.11.11" negate="false" test_ref="oval:org.mitre.oval:tst:2514"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.11">
              <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
              <criterion comment="HP Release B.11.11" negate="false" test_ref="oval:org.mitre.oval:tst:2514"/>
            </criteria>
          </criteria>
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.00">
            <criteria operator="AND" comment="700 Series OS Release 11.00">
              <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
              <criterion comment="HP Release B.11.00" negate="false" test_ref="oval:org.mitre.oval:tst:2512"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.00">
              <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
              <criterion comment="HP Release B.11.00" negate="false" test_ref="oval:org.mitre.oval:tst:2512"/>
            </criteria>
          </criteria>
        </criteria>
        <criterion comment="Secure_Shell.SECURE_SHELL is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1033"/>
        <criterion comment="Secure_Shell.SECURE_SHELL with version less than A.04.20.004 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:869"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15648" version="5" class="vulnerability">
      <metadata>
        <title>Oracle Outside In contains multiple exploitable vulnerabilities - X</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Exchange Server 2007</product>
          <product>Microsoft Exchange Server 2010</product>
          <product>Microsoft FAST Search Server 2010 for SharePoint</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-3107" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3107"/>
        <description>Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-08-20T10:24:13">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-08-20T16:06:08.808-04:00">DRAFT</status_change>
            <status_change date="2012-09-10T04:00:26.871-04:00">INTERIM</status_change>
            <status_change date="2012-10-01T04:00:18.282-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:19493 - New Microsoft Patch Tuesday October 2012 definitions." date="2012-10-19T16:09:00.069-04:00">
              <contributor organization="SecPod Technologies">Chandan S</contributor>
            </modified>
            <status_change date="2012-10-19T16:39:03.414-04:00">INTERIM</status_change>
            <status_change date="2012-11-05T04:00:11.145-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2007 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2007 SP3 is installed" definition_ref="oval:org.mitre.oval:def:15784"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 8.3.279.4" test_ref="oval:org.mitre.oval:tst:80087"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP1 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP1 is installed" definition_ref="oval:org.mitre.oval:def:15339"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 14.1.421.2" test_ref="oval:org.mitre.oval:tst:80199"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP2">
          <extend_definition comment="Microsoft Exchange Server 2010 SP2 is installed" definition_ref="oval:org.mitre.oval:def:14151"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 14.2.318.4" test_ref="oval:org.mitre.oval:tst:79908"/>
        </criteria>
        <criteria operator="AND" comment="FAST Search Server 2010 for SharePoint vulnerable version">
          <extend_definition comment="Microsoft FAST Search Server 2010 for SharePoint is installed" definition_ref="oval:org.mitre.oval:def:15918"/>
          <criterion comment="Check if the version of Microsoft.sharepoint.search.extended.administration.dll is less than 14.0.334.11" test_ref="oval:org.mitre.oval:tst:80085"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1563" version="5" class="vulnerability">
      <metadata>
        <title>IE v6.0,SP1 Drag-and-Drop Code Execution Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0839" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0839"/>
        <description>Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by "wottapoop.html".</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-25T04:59:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-10-27T01:04:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-17T10:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-27T10:50:00.000-04:00" comment="modified wft-564 - Changed test to match comment">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:45:56.455-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:51.240-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:55.954-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:20.002-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2800.1476" negate="false" test_ref="oval:org.mitre.oval:tst:856"/>
          <criterion comment="the patch kb834707 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:855"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1561" version="7" class="vulnerability">
      <metadata>
        <title>Windows Kernel LPC Privilege Escalation Vulnerability (Windows 2000)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Windows kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0893" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0893"/>
        <description>The Local Procedure Call (LPC) interface of the Windows Kernel for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the lengths of messages sent to the LPC port, which allows local users to gain privileges, aka "Windows Kernel Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-12-16T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2005-01-12T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-02T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-23T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-06-17T12:00:00.000-04:00" comment="modified cmp-1106 - Replaced the test that checks for the service pack level, instead of checking for sp4 or ealier (did not check for GOLD edition) it is now negating the test that checks for sp5 for later.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2005-06-22T12:35:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected and tightened regular expression in ste:2610" date="2010-12-02T11:46:00.307-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-12-02T11:47:26.441-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:34.310-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:15.727-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:19.923-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 (sp4 or earlier) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 5 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2790"/>
        </criteria>
        <criterion comment="The version of Ntoskrnl.exe is less than 5.0.2195.6992" negate="false" test_ref="oval:org.mitre.oval:tst:857"/>
        <criterion comment="the patch kb885835is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2622"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15608" version="5" class="vulnerability">
      <metadata>
        <title>Oracle Outside In contains multiple exploitable vulnerabilities - IX</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Exchange Server 2007</product>
          <product>Microsoft Exchange Server 2010</product>
          <product>Microsoft FAST Search Server 2010 for SharePoint</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-3106" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3106"/>
        <description>Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-08-20T10:24:13">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-08-20T16:06:08.587-04:00">DRAFT</status_change>
            <status_change date="2012-09-10T04:00:26.236-04:00">INTERIM</status_change>
            <status_change date="2012-10-01T04:00:16.648-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:19493 - New Microsoft Patch Tuesday October 2012 definitions." date="2012-10-19T16:09:00.069-04:00">
              <contributor organization="SecPod Technologies">Chandan S</contributor>
            </modified>
            <status_change date="2012-10-19T16:39:04.504-04:00">INTERIM</status_change>
            <status_change date="2012-11-05T04:00:10.367-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2007 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2007 SP3 is installed" definition_ref="oval:org.mitre.oval:def:15784"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 8.3.279.4" test_ref="oval:org.mitre.oval:tst:80087"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP1 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP1 is installed" definition_ref="oval:org.mitre.oval:def:15339"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 14.1.421.2" test_ref="oval:org.mitre.oval:tst:80199"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP2">
          <extend_definition comment="Microsoft Exchange Server 2010 SP2 is installed" definition_ref="oval:org.mitre.oval:def:14151"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 14.2.318.4" test_ref="oval:org.mitre.oval:tst:79908"/>
        </criteria>
        <criteria operator="AND" comment="FAST Search Server 2010 for SharePoint vulnerable version">
          <extend_definition comment="Microsoft FAST Search Server 2010 for SharePoint is installed" definition_ref="oval:org.mitre.oval:def:15918"/>
          <criterion comment="Check if the version of Microsoft.sharepoint.search.extended.administration.dll is less than 14.0.334.11" test_ref="oval:org.mitre.oval:tst:80085"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:156" version="4" class="vulnerability">
      <metadata>
        <title>Apache Linefeed Allocation Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0132" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0132"/>
        <description>A memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a denial of service (memory consumption) via large chunks of linefeed characters, which causes Apache to allocate 80 bytes for each linefeed.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-17T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:57.345-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:17.673-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.149-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:55:38.185-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:14.769-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="httpd version is less than 2.0.40-21.1" negate="false" test_ref="oval:org.mitre.oval:tst:2866"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="httpd listening on the network" negate="false" test_ref="oval:org.mitre.oval:tst:2865"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15589" version="5" class="vulnerability">
      <metadata>
        <title>XSS scriptresx.ashx Vulnerability - MS12-050</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft SharePoint Foundation 2010</product>
          <product>Microsoft SharePoint Server 2010</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-1859" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1859"/>
        <description>Cross-site scripting (XSS) vulnerability in scriptresx.ashx in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "XSS scriptresx.ashx Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2012-07-16T12:35:55">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-07-19T12:32:14.134-04:00">DRAFT</status_change>
            <status_change date="2012-08-06T04:00:12.193-04:00">INTERIM</status_change>
            <status_change date="2012-08-27T04:00:28.676-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:var:1390 - November 2014 bulletins." date="2014-11-17T17:25:00.386-05:00">
              <contributor organization="SecPod Technologies">Kumarswamy S</contributor>
            </modified>
            <status_change date="2014-11-17T17:29:49.494-05:00">INTERIM</status_change>
            <status_change date="2014-12-08T04:00:11.970-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="sharepoint server 2010">
          <criterion comment="Check if the version of Microsoft.office.server.native.dll is less than 14.0.6108.5000" test_ref="oval:org.mitre.oval:tst:79844"/>
          <criteria operator="OR" comment="shrepoint server 2010/sp1">
            <extend_definition comment="Microsoft Office SharePoint Server 2010 is installed." definition_ref="oval:org.mitre.oval:def:12880"/>
            <extend_definition comment="Microsoft SharePoint Server 2010 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:15614"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="sharepoint foundation 2010">
          <criterion comment="Check if the version of Onfda.dll is less than 14.0.6106.5000" test_ref="oval:org.mitre.oval:tst:79803"/>
          <criteria operator="OR" comment="sharepoint foundation 2010/sp1">
            <extend_definition comment="Microsoft SharePoint Foundation 2010 is installed" definition_ref="oval:org.mitre.oval:def:12224"/>
            <extend_definition comment="Microsoft SharePoint Foundation 2010 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:15661"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1558" version="8" class="vulnerability">
      <metadata>
        <title>Win2K,SP4 COM Object Instantiation Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2831" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2831"/>
        <description>Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, aka a variant of the "COM Object Instantiation Memory Corruption Vulnerability," a different vulnerability than CVE-2005-2127.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-12-13T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-12-16T01:03:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-01-04T08:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-01-25T07:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:42.445-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:50.963-05:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:13.318-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:53.639-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:24.697-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:19.562-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:38.519-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:19.872-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
        <criterion comment="the version of mshtml.dll is less than 5.0.3835.2200" negate="false" test_ref="oval:org.mitre.oval:tst:893"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15568" version="5" class="vulnerability">
      <metadata>
        <title>Oracle Outside In contains multiple exploitable vulnerabilities - VIII</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Exchange Server 2007</product>
          <product>Microsoft Exchange Server 2010</product>
          <product>Microsoft FAST Search Server 2010 for SharePoint</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-1773" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1773"/>
        <description>Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-08-20T10:24:13">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-08-20T16:06:08.358-04:00">DRAFT</status_change>
            <status_change date="2012-09-10T04:00:25.341-04:00">INTERIM</status_change>
            <status_change date="2012-10-01T04:00:14.915-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:19493 - New Microsoft Patch Tuesday October 2012 definitions." date="2012-10-19T16:09:00.069-04:00">
              <contributor organization="SecPod Technologies">Chandan S</contributor>
            </modified>
            <status_change date="2012-10-19T16:39:04.156-04:00">INTERIM</status_change>
            <status_change date="2012-11-05T04:00:09.667-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2007 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2007 SP3 is installed" definition_ref="oval:org.mitre.oval:def:15784"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 8.3.279.4" test_ref="oval:org.mitre.oval:tst:80087"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP1 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP1 is installed" definition_ref="oval:org.mitre.oval:def:15339"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 14.1.421.2" test_ref="oval:org.mitre.oval:tst:80199"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP2">
          <extend_definition comment="Microsoft Exchange Server 2010 SP2 is installed" definition_ref="oval:org.mitre.oval:def:14151"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 14.2.318.4" test_ref="oval:org.mitre.oval:tst:79908"/>
        </criteria>
        <criteria operator="AND" comment="FAST Search Server 2010 for SharePoint vulnerable version">
          <extend_definition comment="Microsoft FAST Search Server 2010 for SharePoint is installed" definition_ref="oval:org.mitre.oval:def:15918"/>
          <criterion comment="Check if the version of Microsoft.sharepoint.search.extended.administration.dll is less than 14.0.334.11" test_ref="oval:org.mitre.oval:tst:80085"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15544" version="6" class="vulnerability">
      <metadata>
        <title>SharePoint Script in Username Vulnerability - MS12-050</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft SharePoint Foundation 2010</product>
          <product>Microsoft SharePoint Server 2010</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-1861" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1861"/>
        <description>Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Script in Username Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2012-07-16T12:35:55">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-07-19T12:32:14.785-04:00">DRAFT</status_change>
            <status_change date="2012-08-06T04:00:11.853-04:00">INTERIM</status_change>
            <status_change date="2012-08-27T04:00:27.812-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:var:1390 - November 2014 bulletins." date="2014-11-17T17:25:00.386-05:00">
              <contributor organization="SecPod Technologies">Kumarswamy S</contributor>
            </modified>
            <status_change date="2014-11-17T17:29:47.728-05:00">INTERIM</status_change>
            <status_change date="2014-12-08T04:00:11.785-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="sharepoint server 2010">
          <criterion comment="Check if the version of Microsoft.office.server.native.dll is less than 14.0.6108.5000" test_ref="oval:org.mitre.oval:tst:79844"/>
          <criteria operator="OR" comment="sharepoint server 2010/sp1">
            <extend_definition comment="Microsoft SharePoint Server 2010 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:15614"/>
            <extend_definition comment="Microsoft Office SharePoint Server 2010 is installed." definition_ref="oval:org.mitre.oval:def:12880"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="sharepoint foundation 2010">
          <criterion comment="Check if the version of Onfda.dll is less than 14.0.6106.5000" test_ref="oval:org.mitre.oval:tst:79803"/>
          <criteria operator="OR" comment="sharepoint foundation 2010/sp1">
            <extend_definition comment="Microsoft SharePoint Foundation 2010 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:15661"/>
            <extend_definition comment="Microsoft SharePoint Foundation 2010 is installed" definition_ref="oval:org.mitre.oval:def:12224"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15661" version="7" class="inventory">
      <metadata>
        <title>Microsoft SharePoint Foundation 2010 Service Pack 1 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows 8</platform>
          <product>Microsoft SharePoint Foundation 2010</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:sharepoint_foundation:2010:sp1"/>
        <description>Microsoft SharePoint Foundation 2010 SP1 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2012-07-16T12:35:55">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-07-19T12:32:12.759-04:00">DRAFT</status_change>
            <status_change date="2012-08-06T04:00:14.532-04:00">INTERIM</status_change>
            <status_change date="2012-08-27T04:00:33.335-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:15661 - Microsoft Bulletins: MS13-024 and MS13-025 (March 2013)" date="2013-03-18T14:50:00.119-04:00">
              <contributor organization="SecPod Technologies">Bhavya K</contributor>
            </modified>
            <status_change date="2013-03-18T14:53:12.547-04:00">INTERIM</status_change>
            <status_change date="2013-04-08T04:00:12.383-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:24020 - Symbol \ (backslash) is not needed because symbol _ (underscore) isn't a metacharacter." date="2013-08-29T09:21:00.244-04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-08-29T09:22:48.716-04:00">INTERIM</status_change>
            <status_change date="2013-09-16T04:00:21.018-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft SharePoint Foundation 2010 is installed" definition_ref="oval:org.mitre.oval:def:12224"/>
        <criterion comment="Check if Microsoft SharePoint Foundation 2010 Service Pack 1 is installed" test_ref="oval:org.mitre.oval:tst:79390"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15614" version="7" class="inventory">
      <metadata>
        <title>Microsoft SharePoint Server 2010 Service Pack 1 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft SharePoint Server 2010</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:sharepoint_server:2010:sp1"/>
        <description>Microsoft SharePoint Server 2010 SP1 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2012-07-16T12:35:55">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-07-19T12:32:13.329-04:00">DRAFT</status_change>
            <status_change date="2012-08-06T04:00:12.930-04:00">INTERIM</status_change>
            <status_change date="2012-08-27T04:00:29.799-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:24062 - corrected regex (symbol '\' not needed before symbol '_')" date="2013-09-06T14:20:00.865-04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-09-06T14:21:25.926-04:00">INTERIM</status_change>
            <status_change date="2013-09-23T04:00:08.343-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:19908 - ms14-001, new registry tst to detect SP's properly, def:18921 15614 updated to check display version" date="2014-01-21T16:50:00.071-05:00">
              <contributor organization="SecPod Technologies">Pooja Shetty</contributor>
            </modified>
            <status_change date="2014-01-21T17:03:44.381-05:00">INTERIM</status_change>
            <status_change date="2014-02-10T04:00:06.288-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft Office SharePoint Server 2010 is installed." definition_ref="oval:org.mitre.oval:def:12880"/>
        <criterion comment="Check if Microsoft SharePoint Server 2010 Service Pack 1 is installed" test_ref="oval:org.mitre.oval:tst:80093"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1552" version="3" class="vulnerability">
      <metadata>
        <title>HP-UX PMTUD Remote DoS (B.11.22)</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1192" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1192"/>
        <description>Unknown vulnerability in HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23, when running TCP/IP on IPv4, allows remote attackers to cause a denial of service via certain packets, related to the PMTU, a different vulnerability than CVE-2004-1060.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-02-01T11:45:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-03-09T12:19:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-04-06T06:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1552 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:45.743-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:13.193-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="700 Series OS Release 11.22">
          <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:2515"/>
          <criterion comment="HP Release B.11.22" test_ref="oval:org.mitre.oval:tst:1015"/>
        </criteria>
        <criterion comment="Networking.NET2-KRN is installed" test_ref="oval:org.mitre.oval:tst:1442"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1550" version="5" class="vulnerability">
      <metadata>
        <title>TIP Request Validation Process Permits Denial of Service (Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>TIP</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1979" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1979"/>
        <description>Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service exception and exit) via an "unexpected protocol command during the reconnection request," which is not properly handled by the Transaction Internet Protocol (TIP) functionality.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-10-12T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-10-19T05:46:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:56.557-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:50.446-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:29.557-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:18.337-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="Win2K/XP/2003 is patched" negate="true" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criteria operator="OR" comment="Either ole32.dll or rpcss.dll has a version less than 5.2.3790.374">
          <criterion comment="the version of ole32.dll is less than 5.2.3790.374" negate="false" test_ref="oval:org.mitre.oval:tst:959"/>
          <criterion comment="the version of rpcss.dll is less than 5.2.3790.374" negate="false" test_ref="oval:org.mitre.oval:tst:958"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1548" version="3" class="vulnerability">
      <metadata>
        <title>Mozilla Downloading Executables with "Save Image As..."</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1736" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1736"/>
        <description>Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to trick users into downloading and saving an executable file via an image that is overlaid by a transparent image link that points to the executable, which causes the executable to be saved when the user clicks the "Save image as..." option.  NOTE: this attack is made easier due to a GUI truncation issue that prevents the user from seeing the malicious extension when there is extra whitespace in the filename.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-05-07T09:05:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-05-10T08:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:21.133-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:1133" date="2007-02-26T08:08:00.208-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-26T08:09:14.571-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:1138" date="2007-02-26T08:25:00.405-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:2283" date="2007-02-26T08:29:00.407-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:2284" date="2007-02-26T08:30:00.724-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:53.268-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:881" date="2007-04-23T12:05:00.811-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:12:52.572-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:883" date="2007-04-23T12:05:00.804-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:1385" date="2007-04-23T12:05:00.430-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:54.838-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.7 or earlier is installed">
          <criterion comment="Mozilla Firefox version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1268"/>
          <criterion comment="Firefox version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1267"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.12 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.12 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1264"/>
          <criterion comment="Mozilla Suite version 1.7.12 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1263"/>
        </criteria>
        <criteria operator="AND" comment="A pre-release of SeaMonkey 1.0 is installed">
          <criterion comment="A pre-release of SeaMonkey 1.0 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2439"/>
          <criterion comment="A pre-release of SeaMonkey 1.0 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2438"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1547" version="6" class="vulnerability">
      <metadata>
        <title>WebClient Service Unchecked Buffer Remote Code Execution (Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0013" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0013"/>
        <description>Buffer overflow in the Web Client service (WebClnt.dll) for Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote authenticated users or Guests to execute arbitrary code via crafted RPC requests, a different vulnerability than CVE-2005-1207.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-02-17T07:36:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-02-22T08:27:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-03-09T12:19:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-04-06T06:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:09:02.709-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:50.227-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1547 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:18.182-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:17.934-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of webclnt.dll is less than 5.2.3790.453 (S03-Gold)" test_ref="oval:org.mitre.oval:tst:867"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1544" version="5" class="vulnerability">
      <metadata>
        <title>CSNW Remote Buffer Overflow via Network Messages (Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>NetWare</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1985" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1985"/>
        <description>The Client Service for NetWare (CSNW) on Microsoft Windows 2000 SP4, XP SP1 and Sp2, and Server 2003 SP1 and earlier, allows remote attackers to execute arbitrary code due to an "unchecked buffer" when processing certain crafted network messages.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-10-12T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-10-19T05:46:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:57.088-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:50.064-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:20.252-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:17.285-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="Win2K/XP/2003 is patched" negate="true" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="nwwks.dll is less than 5.2.3790.386" negate="false" test_ref="oval:org.mitre.oval:tst:868"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1542" version="1" class="vulnerability">
      <metadata>
        <title>zlib Compression Remote DoS Vulnerability (B.11.00/B.11.11)</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
          <product>SecureShell</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2096" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2096"/>
        <description>zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-01-11T12:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-01-12T09:18:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-02-01T09:08:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.00 or 11.11">
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.11">
            <criteria operator="AND" comment="700 Series OS Release 11.11">
              <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
              <criterion comment="HP Release B.11.11" negate="false" test_ref="oval:org.mitre.oval:tst:2514"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.11">
              <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
              <criterion comment="HP Release B.11.11" negate="false" test_ref="oval:org.mitre.oval:tst:2514"/>
            </criteria>
          </criteria>
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.00">
            <criteria operator="AND" comment="700 Series OS Release 11.00">
              <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
              <criterion comment="HP Release B.11.00" negate="false" test_ref="oval:org.mitre.oval:tst:2512"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.00">
              <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
              <criterion comment="HP Release B.11.00" negate="false" test_ref="oval:org.mitre.oval:tst:2512"/>
            </criteria>
          </criteria>
        </criteria>
        <criterion comment="Secure_Shell.SECURE_SHELL is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1033"/>
        <criterion comment="Secure_Shell.SECURE_SHELL with version less than A.04.20.004 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:869"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1537" version="6" class="vulnerability">
      <metadata>
        <title>.lnk File-Open Remote Code Execution Vulnerability (Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2122" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2122"/>
        <description>Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to execute arbitrary commands via a shortcut (.lnk) file with long font properties that lead to a buffer overflow in the Client/Server Runtime Server Subsystem (CSRSS), a different vulnerability than CVE-2005-2118.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-10-12T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-10-19T05:46:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:09:01.842-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:49.385-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1537 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:26.351-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:16.010-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="shell32.dll is less than 6.0.3790.413" test_ref="oval:org.mitre.oval:tst:872"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1536" version="5" class="vulnerability">
      <metadata>
        <title>CSNW Remote Buffer Overflow via Network Messages (Win2k,SP4)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>NetWare</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1985" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1985"/>
        <description>The Client Service for NetWare (CSNW) on Microsoft Windows 2000 SP4, XP SP1 and Sp2, and Server 2003 SP1 and earlier, allows remote attackers to execute arbitrary code due to an "unchecked buffer" when processing certain crafted network messages.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-10-12T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-10-19T05:46:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-08-31T12:00:00.000-04:00" comment="removed an incorrect leading ^ from the value entity of ste:2402">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-08-31T00:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:20.941-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:12.497-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:15.712-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="Win2K/XP/2003 service pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2569"/>
        <criterion comment="nwwks.dll is less than 5.0.2195.7065" negate="false" test_ref="oval:org.mitre.oval:tst:873"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1535" version="5" class="vulnerability">
      <metadata>
        <title>Win2k,SP4 DDS Library Shape Control Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2127" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2127"/>
        <description>Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, as originally demonstrated using the (1) DDS Library Shape Control (Msdds.dll) COM object, and other objects including (2) Blnmgrps.dll, (3) Ciodm.dll, (4) Comsvcs.dll, (5) Danim.dll, (6) Htmlmarq.ocx, (7) Mdt2dd.dll (as demonstrated using a heap corruption attack with uninitialized memory), (8) Mdt2qd.dll, (9) Mpg4ds32.ax, (10) Msadds32.ax, (11) Msb1esen.dll, (12) Msb1fren.dll, (13) Msb1geen.dll, (14) Msdtctm.dll, (15) Mshtml.dll, (16) Msoeacct.dll, (17) Msosvfbr.dll, (18) Mswcrun.dll, (19) Netshell.dll, (20) Ole2disp.dll, (21) Outllib.dll, (22) Psisdecd.dll, (23) Qdvd.dll, (24) Repodbc.dll, (25) Shdocvw.dll, (26) Shell32.dll, (27) Soa.dll, (28) Srchui.dll, (29) Stobject.dll, (30) Vdt70.dll, (31) Vmhelper.dll, and (32) Wbemads.dll, aka a variant of the "COM Object Instantiation Memory Corruption vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-10-12T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-10-19T05:46:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-08-31T12:00:00.000-04:00" comment="removed an incorrect leading ^ from the value entity of ste:2402">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-08-31T00:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:20.767-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:13.440-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:15.424-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="Win2K/XP/2003 service pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2569"/>
        <criterion comment="mshtml.dll is less than 5.0.3833.200" negate="false" test_ref="oval:org.mitre.oval:tst:874"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1534" version="4" class="vulnerability">
      <metadata>
        <title>uucp/uustat Privilege Escalation Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0161" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0161"/>
        <description>Unspecified vulnerability in uucp in Sun Solaris 8 and 9 has unknown impact and attack vectors.  NOTE: due to the vagueness of the vendor advisory, it is not clear whether this is related to CVE-2004-0780.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-01-11T12:56:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-01-12T09:18:00.000-04:00">DRAFT</status_change>
            <modified date="2006-01-17T01:07:00.000-04:00" comment="Updated reference to CVE-2006-0161, per Rob Hollis.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:08:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1534 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:06.989-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:12.324-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert ID 101933 criteria.">
          <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Installed architecture is sparc" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion negate="true" comment="Patch 111570-04 or later installed" test_ref="oval:org.mitre.oval:tst:878"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert ID 101933 criteria.">
          <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion negate="true" comment="Patch 111571-04 or later installed" test_ref="oval:org.mitre.oval:tst:877"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert ID 101933 criteria.">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="Installed architecture is sparc" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion negate="true" comment="Patch 113322-03 or later installed" test_ref="oval:org.mitre.oval:tst:876"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert ID 101933 criteria.">
          <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion negate="true" comment="Patch 115880-02 or later installed" test_ref="oval:org.mitre.oval:tst:875"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1533" version="3" class="vulnerability">
      <metadata>
        <title>HP-UX PMTUD Remote DoS (B.11.11-IPSEC)</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1192" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1192"/>
        <description>Unknown vulnerability in HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23, when running TCP/IP on IPv4, allows remote attackers to cause a denial of service via certain packets, related to the PMTU, a different vulnerability than CVE-2004-1060.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-02-01T11:45:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-03-09T12:19:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-04-06T06:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1533 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:44.308-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:11.998-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.11">
          <criteria operator="AND" comment="700 Series OS Release 11.11">
            <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:2515"/>
            <criterion comment="HP Release B.11.11" test_ref="oval:org.mitre.oval:tst:2514"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 11.11">
            <criterion comment="800-series HP" test_ref="oval:org.mitre.oval:tst:2513"/>
            <criterion comment="HP Release B.11.11" test_ref="oval:org.mitre.oval:tst:2514"/>
          </criteria>
        </criteria>
        <criterion comment="IPSec.IPSEC2-KRN is installed" test_ref="oval:org.mitre.oval:tst:966"/>
        <criteria operator="OR" comment="IPSec.IPSEC2-KRN version is under A.2.00.01 or TOUR version is under 3.0">
          <criterion comment="IPSec.IPSEC2-KRN with version less than A.2.00.01 is installed" test_ref="oval:org.mitre.oval:tst:965"/>
          <criterion comment="TOUR_PRODUCT.T-NET2-KRN with version less than A.03.00 is installed" test_ref="oval:org.mitre.oval:tst:964"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15323" version="5" class="vulnerability">
      <metadata>
        <title>Oracle Outside In contains multiple exploitable vulnerabilities - VII</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Exchange Server 2007</product>
          <product>Microsoft Exchange Server 2010</product>
          <product>Microsoft FAST Search Server 2010 for SharePoint</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-1772" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1772"/>
        <description>Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-08-20T10:24:13">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-08-20T16:06:08.136-04:00">DRAFT</status_change>
            <status_change date="2012-09-10T04:00:19.422-04:00">INTERIM</status_change>
            <status_change date="2012-10-01T04:00:10.113-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:19493 - New Microsoft Patch Tuesday October 2012 definitions." date="2012-10-19T16:09:00.069-04:00">
              <contributor organization="SecPod Technologies">Chandan S</contributor>
            </modified>
            <status_change date="2012-10-19T16:39:06.336-04:00">INTERIM</status_change>
            <status_change date="2012-11-05T04:00:07.023-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2007 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2007 SP3 is installed" definition_ref="oval:org.mitre.oval:def:15784"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 8.3.279.4" test_ref="oval:org.mitre.oval:tst:80087"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP1 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP1 is installed" definition_ref="oval:org.mitre.oval:def:15339"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 14.1.421.2" test_ref="oval:org.mitre.oval:tst:80199"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP2">
          <extend_definition comment="Microsoft Exchange Server 2010 SP2 is installed" definition_ref="oval:org.mitre.oval:def:14151"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 14.2.318.4" test_ref="oval:org.mitre.oval:tst:79908"/>
        </criteria>
        <criteria operator="AND" comment="FAST Search Server 2010 for SharePoint vulnerable version">
          <extend_definition comment="Microsoft FAST Search Server 2010 for SharePoint is installed" definition_ref="oval:org.mitre.oval:def:15918"/>
          <criterion comment="Check if the version of Microsoft.sharepoint.search.extended.administration.dll is less than 14.0.334.11" test_ref="oval:org.mitre.oval:tst:80085"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1530" version="8" class="vulnerability">
      <metadata>
        <title>Windows XP HtmlHelp Heap Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>HTML Help Facility</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0201" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0201"/>
        <description>Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-07-14T12:00:00.000-04:00" comment="added the unregistered HTML Help criterion to the configuration section of the criteria">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-08-04T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-08-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2004-09-13T11:37:00.000-04:00" comment="cmp-66 added">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2004-09-15T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-29T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected obj:964. Changed registry key name from a pattern match of .* to nil." date="2007-02-12T13:46:00.470-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T13:47:38.002-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:52.924-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2656" date="2010-11-29T16:12:00.873-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:13:00.591-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:33.908-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:15.453-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:14.620-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="the version of itss.dll is less than 5.2.3790.185" negate="false" test_ref="oval:org.mitre.oval:tst:1406"/>
          <criterion comment="the patch kb840315 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1405"/>
          <criteria operator="AND" comment="Windows XP (sp1 or earlier) is installed">
            <criterion comment="Windows XP is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2838"/>
            <criterion comment="Win2K/XP/2003 service pack 2 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2837"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="HTML Help is registered" negate="true" test_ref="oval:org.mitre.oval:tst:1404"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15290" version="5" class="vulnerability">
      <metadata>
        <title>TrueType Font Parsing Vulnerability (CVE-2011-3402)</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Lync 2010</product>
          <product>Microsoft Lync 2010 Attendee</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2011-3402" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3402"/>
        <description>Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via crafted font data in a Word document or web page, as exploited in the wild in November 2011 by Duqu, aka "TrueType Font Parsing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2012-06-18T15:13:15">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-06-19T12:05:11.377-04:00">DRAFT</status_change>
            <status_change date="2012-07-09T04:00:13.948-04:00">INTERIM</status_change>
            <status_change date="2012-07-30T04:00:17.824-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:23843 - In some &quot;pattern match&quot; strings added &quot;\&quot; before &quot;.&quot; to clarify if &quot;point&quot; or &quot;any symbol&quot; needed." date="2014-07-28T18:11:00.493-04:00">
              <contributor organization="ALTX-SOFT">Evgeniy Pavlov</contributor>
            </modified>
            <status_change date="2014-07-28T18:12:39.239-04:00">INTERIM</status_change>
            <status_change date="2014-08-18T04:01:12.393-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Check for vulnerable lync 2010">
          <extend_definition comment="Microsoft Lync 2010 is installed" definition_ref="oval:org.mitre.oval:def:15099"/>
          <criterion comment="Check if version of Communicator.exe (Lync 2010) is less than 4.0.7577.4098" test_ref="oval:org.mitre.oval:tst:79972"/>
        </criteria>
        <criteria operator="AND" comment="Check for vulnerable lync 2010 attendee (admin)">
          <extend_definition comment="Microsoft Lync 2010 Attendee (user level install) is installed" definition_ref="oval:org.mitre.oval:def:15641"/>
          <criterion comment="Check if version of ogl.dll (Lync 2010 Attendee for admin) is less than 4.0.7577.4098" test_ref="oval:org.mitre.oval:tst:79522"/>
        </criteria>
        <criteria operator="AND" comment="Check for vulnerable lync 2010 attendee (user)">
          <extend_definition comment="Microsoft Lync 2010 Attendee (admin level install) is installed" definition_ref="oval:org.mitre.oval:def:15556"/>
          <criterion comment="Check if version of ogl.dll (Lync 2010 Attendee for user) is less than 4.0.7577.4098" test_ref="oval:org.mitre.oval:tst:79686"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1528" version="2" class="vulnerability">
      <metadata>
        <title>ls-F Privilege Escalation Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>TENEX C Shell (tcsh)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1024" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1024"/>
        <description>Unknown vulnerability in the ls-F builtin function in tcsh on Solaris 8 allows local users to create or delete files as other users, and gain privileges.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-04-13T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-04-20T04:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-05-11T04:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T04:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-08-22T04:00:00.000-04:00" comment="Affected product changed to tcsh; mistakenly was .NET framework">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2005-08-25T10:03:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-25T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
        <criterion comment="Patch 110943-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:880"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15275" version="6" class="vulnerability">
      <metadata>
        <title>Oracle Outside In contains multiple exploitable vulnerabilities - III</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Exchange Server 2007</product>
          <product>Microsoft Exchange Server 2010</product>
          <product>Microsoft FAST Search Server 2010 for SharePoint</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-1768" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1768"/>
        <description>Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-08-20T10:24:13">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-08-20T16:06:07.187-04:00">DRAFT</status_change>
            <status_change date="2012-09-10T04:00:18.597-04:00">INTERIM</status_change>
            <status_change date="2012-10-01T04:00:09.738-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:19493 - New Microsoft Patch Tuesday October 2012 definitions." date="2012-10-19T16:09:00.069-04:00">
              <contributor organization="SecPod Technologies">Chandan S</contributor>
            </modified>
            <status_change date="2012-10-19T16:39:05.951-04:00">INTERIM</status_change>
            <status_change date="2012-11-05T04:00:06.582-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2007 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2007 SP3 is installed" definition_ref="oval:org.mitre.oval:def:15784"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 8.3.279.4" test_ref="oval:org.mitre.oval:tst:80087"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP1 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP1 is installed" definition_ref="oval:org.mitre.oval:def:15339"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 14.1.421.2" test_ref="oval:org.mitre.oval:tst:80199"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP2">
          <extend_definition comment="Microsoft Exchange Server 2010 SP2 is installed" definition_ref="oval:org.mitre.oval:def:14151"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 14.2.318.4" test_ref="oval:org.mitre.oval:tst:79908"/>
        </criteria>
        <criteria operator="AND" comment="FAST Search Server 2010 for SharePoint vulnerable version">
          <extend_definition comment="Microsoft FAST Search Server 2010 for SharePoint is installed" definition_ref="oval:org.mitre.oval:def:15918"/>
          <criterion comment="Check if the version of Microsoft.sharepoint.search.extended.administration.dll is less than 14.0.334.11" test_ref="oval:org.mitre.oval:tst:80085"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1527" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability May Allow Users With the "File System Management" RBAC Profile to Gain Elevated Privileges</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4306" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4306"/>
        <description>Unspecified vulnerability in Sun Solaris 8 and 9 before 20060821 allows local users to execute arbitrary commands via unspecified vectors, involving the default Role-Based Access Control (RBAC) settings in the "File System Management" profile.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-10T12:25:26.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-13T13:57:13.873-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:27.303-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:40.395-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102514" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 108975-10 or later installed" test_ref="oval:org.mitre.oval:tst:3837" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102514" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 113072-08 or later installed" test_ref="oval:org.mitre.oval:tst:4119" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102514" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 108976-10 or later installed" test_ref="oval:org.mitre.oval:tst:3332" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102514" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 114423-07 or later installed" test_ref="oval:org.mitre.oval:tst:3870" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1526" version="2" class="vulnerability">
      <metadata>
        <title>VirusVault HTTP Request Smuggling</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2088"/>
        <description>The Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy, allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Apache to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."</description>
        <oval_repository>
          <dates>
            <submitted date="2006-03-18T07:24:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-03-22T11:10:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-04-06T06:31:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:28.125-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:09.431-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="700 Series OS Release 11.04">
          <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
          <criterion comment="HP Release B.11.04" negate="false" test_ref="oval:org.mitre.oval:tst:1276"/>
        </criteria>
        <criterion comment="VirusVault is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1040"/>
        <criterion comment="Patch PHSS_34123 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1039"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1525" version="1" class="vulnerability">
      <metadata>
        <title>Excel Viewer 2003 Remote Code Execution via Malformed Record</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Office</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0031" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0031"/>
        <description>Stack-based buffer overflow in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed record with a modified length value, which leads to memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-03-15T10:53:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-03-15T07:17:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-04-06T06:31:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Xlview.exe is installed with a version less than 11.0.8012.0" negate="false" test_ref="oval:org.mitre.oval:tst:881"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1523" version="10" class="vulnerability">
      <metadata>
        <title>Unsupported Version of Windows</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
        </affected>
        <reference source="MISC" ref_id="http://support.microsoft.com/default.aspx?scid=fh;EN-US;sp" ref_url="http://support.microsoft.com/default.aspx?scid=fh;EN-US;sp"/>
        <description>'As Service Packs released by Microsoft mature, earlier versions and releases become unsupported. This equates to a cessation in software and security patches for that baseline. Using an unsupported version of Windows represents a severe security risk.'</description>
        <oval_repository>
          <dates>
            <submitted date="2005-10-12T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-10-19T05:46:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:59.774-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:49.040-05:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:09.389-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:52.430-04:00">ACCEPTED</status_change>
            <modified comment="Corrected url to reference. Implemented by Jon Baker of The MITRE Corporation." date="2007-05-07T11:51:00.078-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-05-07T11:52:59.131-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:28.970-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1523 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:21.263-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:13.693-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1523 - Typo corrections" date="2014-05-23T10:35:00.266-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-05-23T10:37:26.513-04:00">INTERIM</status_change>
            <status_change date="2014-06-09T04:00:13.420-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="An unsupported version of Windows XP is installed">
          <criterion comment="Windows XP is installed" test_ref="oval:org.mitre.oval:tst:2838"/>
          <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
        </criteria>
        <criteria operator="AND" comment="Windows 2000 (sp3 or earlier) is installed">
          <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion negate="true" comment="Win2K/XP/2003 service pack 4 (or later) is installed" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1521" version="8" class="vulnerability">
      <metadata>
        <title>Win2K,SP4 HTTPS Proxy Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2830" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2830"/>
        <description>Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext, which allows remote attackers to obtain sensitive information, aka "HTTPS Proxy Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-12-13T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-12-16T01:03:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-01-04T08:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-01-25T07:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:40.749-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:48.781-05:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:06.763-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:52.152-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:04.389-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:13.356-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:33.261-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:19.447-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
        <criterion comment="the version of mshtml.dll is less than 5.0.3835.2200" negate="false" test_ref="oval:org.mitre.oval:tst:893"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:152" version="3" class="vulnerability">
      <metadata>
        <title>Solaris 7 X Font Server Remote Buffer Overrun</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>fs.auto, xfs</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1317" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1317"/>
        <description>Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a certain XFS query.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-08T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified comment="fixed the service_name entity used in the inetd_object" date="2007-04-10T15:16:00.255-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-04-10T15:16:47.568-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:17.491-04:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:54.067-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:14.407-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="File fs.auto exists" negate="false" test_ref="oval:org.mitre.oval:tst:2873"/>
          <criterion comment="File xfs exists" negate="false" test_ref="oval:org.mitre.oval:tst:2872"/>
          <criterion comment="Patch 108117-06 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:2864"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="inetd.conf contains fs.auto" negate="false" test_ref="oval:org.mitre.oval:tst:2870"/>
          <criterion comment="inetd running" negate="false" test_ref="oval:org.mitre.oval:tst:3135"/>
          <criteria operator="OR" comment="File xfs executable">
            <criterion comment="File xfs executable" negate="false" test_ref="oval:org.mitre.oval:tst:2869"/>
            <criterion comment="File xfs executable" negate="false" test_ref="oval:org.mitre.oval:tst:2868"/>
            <criterion comment="File xfs executable" negate="false" test_ref="oval:org.mitre.oval:tst:2867"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:151" version="4" class="vulnerability">
      <metadata>
        <title>Apache Terminal Escape Sequence Vulnerability II</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0083"/>
        <description>Apache 1.3 before 1.3.25 and Apache 2.0 before version 2.0.46 does not filter terminal escape sequences from its access logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences, a different vulnerability than CVE-2003-0020.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-17T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:52.521-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:17.297-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.149-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:55:38.127-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:14.074-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="httpd version is less than 2.0.40-21.1" negate="false" test_ref="oval:org.mitre.oval:tst:2866"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="httpd listening on the network" negate="false" test_ref="oval:org.mitre.oval:tst:2865"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1506" version="4" class="vulnerability">
      <metadata>
        <title>IE6,SP1 Java Proxy COM Object Instantiation Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2087"/>
        <description>Internet Explorer 5.01 SP4 up to 6 on various Windows operating systems, including IE 6.0.2900.2180 on Windows XP, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not ActiveX controls, as demonstrated using the JVIEW Profiler (Javaprxy.dll).  NOTE: the researcher says that the vendor could not reproduce this problem.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-12-26T09:36:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-01-04T08:04:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-01-25T07:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:46:02.075-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:47.418-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:42.366-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:18.533-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
        <criteria operator="OR" comment="the version of mshtml.dll is less than 6.0.2800.1515 or 6.0.2800.1516">
          <criterion comment="the version of mshtml.dll is less than 6.0.2800.1515 (RTMGDR)" negate="false" test_ref="oval:org.mitre.oval:tst:2418"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2800.1516 (RTMQFE)" negate="false" test_ref="oval:org.mitre.oval:tst:2417"/>
        </criteria>
        <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
          <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
            <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
            <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
            <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
          </criteria>
          <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
            <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
            <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
            <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1503" version="2" class="vulnerability">
      <metadata>
        <title>Windows 2000 HtmlHelp Heap Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>HTML Help Facility</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0201" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0201"/>
        <description>Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-14T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-08-04T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-08-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected obj:964. Changed registry key name from a pattern match of .* to nil." date="2007-02-12T13:46:00.470-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T13:47:37.659-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:51.623-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="the version of itss.dll is less than 5.2.3790.185" negate="false" test_ref="oval:org.mitre.oval:tst:1406"/>
          <criterion comment="the patch kb840315 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1405"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="HTML Help is registered" negate="true" test_ref="oval:org.mitre.oval:tst:1404"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:150" version="4" class="vulnerability">
      <metadata>
        <title>Apache Terminal Escape Sequence Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0020"/>
        <description>Apache does not filter terminal escape sequences from its error logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-17T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:42:05.140-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:17.141-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.149-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:55:38.067-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:13.693-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="httpd version is less than 2.0.40-21.1" negate="false" test_ref="oval:org.mitre.oval:tst:2866"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="httpd listening on the network" negate="false" test_ref="oval:org.mitre.oval:tst:2865"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15" version="3" class="vulnerability">
      <metadata>
        <title>Solaris 8 CDE ToolTalk Database Null Write Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>Common Desktop Environment</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0677" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0677"/>
        <description>CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is used as a table index by the _TT_ISCLOSE procedure.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-01-31T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified comment="fixed the service_name entity used in the inetd_object" date="2007-04-10T15:17:00.627-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-04-10T15:17:28.303-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:16.975-04:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:53.604-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:13.345-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="File rpc.ttdbserverd exists" negate="false" test_ref="oval:org.mitre.oval:tst:3105"/>
          <criterion comment="Patch 110286-09 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3104"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="inetd.conf contains rpc.ttdbserverd" negate="false" test_ref="oval:org.mitre.oval:tst:3103"/>
          <criterion comment="inetd running" negate="false" test_ref="oval:org.mitre.oval:tst:3135"/>
          <criteria operator="OR" comment="File rpc.ttdbserverd executable">
            <criterion comment="File rpc.ttdbserverd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3102"/>
            <criterion comment="File rpc.ttdbserverd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3101"/>
            <criterion comment="File rpc.ttdbserverd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3100"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1498" version="5" class="vulnerability">
      <metadata>
        <title>IE6 Address Bar Spoofing Vulnerability (Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1192" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1192"/>
        <description>Microsoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by spoofing the address bar and other parts of the trust UI via unknown methods that allow "window content to persist" after the user has navigated to another site, aka the "Address Bar Spoofing Vulnerability."  NOTE: this is a different vulnerability than CVE-2006-1626.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-04-12T12:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-04-12T05:16:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:09:00.280-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:46.639-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:09.259-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:08.899-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="Win2K/XP/2003 is patched" negate="true" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.3790.507" negate="false" test_ref="oval:org.mitre.oval:tst:1100"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1497" version="2" deprecated="true" class="vulnerability">
      <metadata>
        <title>Mozilla Application Suite has reached End-of-Life</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="MISC" ref_id="http://www.mozilla.org/projects/seamonkey/"/>
        <description>'mozilla.org has launched and delivered SeaMonkey, a community effort to deliver production-quality releases of code derived from the \"Mozilla Application Suite\".  This equates to a cessation in software and security patches for that baseline.  Using an unsupported software represents a high security risk because no fixes or patches will be made available in response to new vulnerabilities.'</description>
        <oval_repository>
          <dates>
            <submitted date="2006-02-07T06:13:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-02-22T08:27:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-03-09T12:19:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-04-06T06:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed reference to ste:2286 and deprectated ste:2286" date="2007-02-12T10:30:00.540-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T10:32:01.704-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:2285" date="2007-03-06T08:03:00.800-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:51.349-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:1386" date="2007-04-23T12:05:00.444-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-07T12:23:25.957-04:00">INTERIM</status_change>
            <modified comment="Deprected because Mozilla Suite has not reached end of life. Implemented by Jon Baker of The MITRE Corporation." date="2007-05-07T12:05:00.444-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-05-07T12:23:25.957-04:00">DEPRECATED</status_change>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Suite is installed">
          <criterion comment="Mozilla Suite installed" negate="false" test_ref="oval:org.mitre.oval:tst:2441"/>
          <criterion comment="Mozilla Suite is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2440"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1496" version="2" class="vulnerability">
      <metadata>
        <title>Webproxy Integer Overflow in pcre_compile</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2491" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2491"/>
        <description>Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-03-18T07:24:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-03-22T11:10:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-04-06T06:31:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:28.056-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:09.337-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="700 Series OS Release 11.04">
          <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
          <criterion comment="HP Release B.11.04" negate="false" test_ref="oval:org.mitre.oval:tst:1276"/>
        </criteria>
        <criterion comment="Webproxy is installed" negate="false" test_ref="oval:org.mitre.oval:tst:890"/>
        <criterion comment="Patch PHSS_34163 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:889"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1495" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the kcms_calibrate(1) Command</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0503" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0503"/>
        <description>Unspecified vulnerability in kcms_calibrate in Sun Solaris 8 and 9 before 20071122 allows local users to execute arbitrary commands via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-10T12:25:20.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-13T13:57:11.677-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:27.207-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:40.285-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102728" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 111400-04 or later installed" test_ref="oval:org.mitre.oval:tst:4123" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102728" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 114636-04 or later installed" test_ref="oval:org.mitre.oval:tst:3416" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102728" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 111401-04 or later installed" test_ref="oval:org.mitre.oval:tst:3456" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102728" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 114637-04 or later installed" test_ref="oval:org.mitre.oval:tst:3583" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1490" version="8" class="vulnerability">
      <metadata>
        <title>Win2K,SP4 File Download Dialog Box Manipulation Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2829" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2829"/>
        <description>Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by (1) overlaying a malicious new window above a file download box, then (2) using a keyboard shortcut and delaying the display of the file download box until the user hits a shortcut that activates the "Run" button, aka "File Download Dialog Box Manipulation Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-12-13T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-12-16T01:03:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-01-04T08:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-01-25T07:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:46.384-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:46.431-05:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:16.136-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:50.508-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:06.953-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:07.867-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:53.270-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:18.180-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
        <criterion comment="the version of mshtml.dll is less than 5.0.3835.2200" negate="false" test_ref="oval:org.mitre.oval:tst:893"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:149" version="3" class="vulnerability">
      <metadata>
        <title>Solaris 8 X Font Server Remote Buffer Overrun</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>fs.auto, xfs</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1317" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1317"/>
        <description>Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a certain XFS query.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-08T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified comment="fixed the service_name entity used in the inetd_object" date="2007-04-10T15:16:00.255-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-04-10T15:16:47.778-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:16.773-04:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:53.406-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:12.919-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="File fs.auto exists" negate="false" test_ref="oval:org.mitre.oval:tst:2873"/>
          <criterion comment="File xfs exists" negate="false" test_ref="oval:org.mitre.oval:tst:2872"/>
          <criterion comment="Patch 109862-03 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:2871"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="inetd.conf contains fs.auto" negate="false" test_ref="oval:org.mitre.oval:tst:2870"/>
          <criterion comment="inetd running" negate="false" test_ref="oval:org.mitre.oval:tst:3135"/>
          <criteria operator="OR" comment="File xfs executable">
            <criterion comment="File xfs executable" negate="false" test_ref="oval:org.mitre.oval:tst:2869"/>
            <criterion comment="File xfs executable" negate="false" test_ref="oval:org.mitre.oval:tst:2868"/>
            <criterion comment="File xfs executable" negate="false" test_ref="oval:org.mitre.oval:tst:2867"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1489" version="8" class="vulnerability">
      <metadata>
        <title>Win2k,SP4 IE Mismatched Document Object Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1790" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1790"/>
        <description>Microsoft Internet Explorer 6 SP2 6.0.2900.2180 and 6.0.2800.1106, and earlier versions, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a Javascript BODY onload event that calls the window function, aka "Mismatched Document Object Model Objects Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-11-11T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-12-12T10:00:00.000-04:00">DRAFT</status_change>
            <modified date="2005-12-14T12:00:00.000-04:00" comment="Updated with newly available information.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-04T08:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-01-25T07:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:45.552-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:46.220-05:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:11.224-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:50.216-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:59.985-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:07.495-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:51.396-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:17.981-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
        <criterion comment="the version of mshtml.dll is less than 5.0.3835.2200" negate="false" test_ref="oval:org.mitre.oval:tst:893"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14882" version="5" class="vulnerability">
      <metadata>
        <title>Oracle Outside In contains multiple exploitable vulnerabilities - V</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Exchange Server 2007</product>
          <product>Microsoft Exchange Server 2010</product>
          <product>Microsoft FAST Search Server 2010 for SharePoint</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-1770" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1770"/>
        <description>Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-08-20T10:24:13">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-08-20T16:06:07.632-04:00">DRAFT</status_change>
            <status_change date="2012-09-10T04:00:09.543-04:00">INTERIM</status_change>
            <status_change date="2012-10-01T04:00:05.498-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:19493 - New Microsoft Patch Tuesday October 2012 definitions." date="2012-10-19T16:09:00.069-04:00">
              <contributor organization="SecPod Technologies">Chandan S</contributor>
            </modified>
            <status_change date="2012-10-19T16:39:05.266-04:00">INTERIM</status_change>
            <status_change date="2012-11-05T04:00:04.838-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2007 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2007 SP3 is installed" definition_ref="oval:org.mitre.oval:def:15784"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 8.3.279.4" test_ref="oval:org.mitre.oval:tst:80087"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP1 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP1 is installed" definition_ref="oval:org.mitre.oval:def:15339"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 14.1.421.2" test_ref="oval:org.mitre.oval:tst:80199"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP2">
          <extend_definition comment="Microsoft Exchange Server 2010 SP2 is installed" definition_ref="oval:org.mitre.oval:def:14151"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 14.2.318.4" test_ref="oval:org.mitre.oval:tst:79908"/>
        </criteria>
        <criteria operator="AND" comment="FAST Search Server 2010 for SharePoint vulnerable version">
          <extend_definition comment="Microsoft FAST Search Server 2010 for SharePoint is installed" definition_ref="oval:org.mitre.oval:def:15918"/>
          <criterion comment="Check if the version of Microsoft.sharepoint.search.extended.administration.dll is less than 14.0.334.11" test_ref="oval:org.mitre.oval:tst:80085"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1488" version="6" class="vulnerability">
      <metadata>
        <title>.lnk File-Open Remote Code Execution Vulnerability (Windows 2000,SP4)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2122" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2122"/>
        <description>Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to execute arbitrary commands via a shortcut (.lnk) file with long font properties that lead to a buffer overflow in the Client/Server Runtime Server Subsystem (CSRSS), a different vulnerability than CVE-2005-2118.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-10-12T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-10-19T05:46:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-08-31T12:00:00.000-04:00" comment="removed an incorrect leading ^ from the value entity of ste:2402">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-08-31T00:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:19.681-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1488 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:04:53.514-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:07.188-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="Win2K/XP/2003 service pack 4 is installed" test_ref="oval:org.mitre.oval:tst:2569"/>
        <criterion comment="shell32.dll is less than 5.0.3900.7071" test_ref="oval:org.mitre.oval:tst:1086"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14874" version="5" class="vulnerability">
      <metadata>
        <title>Lync Insecure Library Loading Vulnerability (CVE-2012-1849)</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Lync 2010</product>
          <product>Microsoft Lync 2010 Attendant</product>
          <product>Microsoft Lync 2010 Attendee</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-1849" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1849"/>
        <description>Untrusted search path vulnerability in Microsoft Lync 2010, 2010 Attendee, and 2010 Attendant allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .ocsmeet file, aka "Lync Insecure Library Loading Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2012-06-18T15:13:15">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-06-19T12:05:11.993-04:00">DRAFT</status_change>
            <status_change date="2012-07-09T04:00:07.855-04:00">INTERIM</status_change>
            <status_change date="2012-07-30T04:00:11.569-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:23843 - In some &quot;pattern match&quot; strings added &quot;\&quot; before &quot;.&quot; to clarify if &quot;point&quot; or &quot;any symbol&quot; needed." date="2014-07-28T18:11:00.493-04:00">
              <contributor organization="ALTX-SOFT">Evgeniy Pavlov</contributor>
            </modified>
            <status_change date="2014-07-28T18:12:38.326-04:00">INTERIM</status_change>
            <status_change date="2014-08-18T04:01:09.686-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Check for vulnerable lync 2010">
          <extend_definition comment="Microsoft Lync 2010 is installed" definition_ref="oval:org.mitre.oval:def:15099"/>
          <criterion comment="Check if version of Communicator.exe (Lync 2010) is less than 4.0.7577.4098" test_ref="oval:org.mitre.oval:tst:79972"/>
        </criteria>
        <criteria operator="AND" comment="Check for vulnerable lync 2010 attendee (admin)">
          <extend_definition comment="Microsoft Lync 2010 Attendee (user level install) is installed" definition_ref="oval:org.mitre.oval:def:15641"/>
          <criterion comment="Check if version of ogl.dll (Lync 2010 Attendee for admin) is less than 4.0.7577.4098" test_ref="oval:org.mitre.oval:tst:79522"/>
        </criteria>
        <criteria operator="AND" comment="Check for vulnerable lync 2010 attendee (user)">
          <extend_definition comment="Microsoft Lync 2010 Attendee (admin level install) is installed" definition_ref="oval:org.mitre.oval:def:15556"/>
          <criterion comment="Check if version of ogl.dll (Lync 2010 Attendee for user) is less than 4.0.7577.4098" test_ref="oval:org.mitre.oval:tst:79686"/>
        </criteria>
        <criteria operator="AND" comment="Check for vulnerable lync 2010 attendant">
          <extend_definition comment="Microsoft Lync 2010 Attendant is installed" definition_ref="oval:org.mitre.oval:def:15600"/>
          <criterion comment="Check if version of Attendantconsole.exe is less than 4.0.7577.4098" test_ref="oval:org.mitre.oval:tst:80016"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15641" version="5" class="inventory">
      <metadata>
        <title>Microsoft Lync 2010 Attendee (user level install) is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Lync 2010 Attendee</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:lync_attendee:2010:user_level"/>
        <description>Microsoft Lync 2010 Attendee (user level install) is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-06-18T12:17:53">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-06-19T12:05:00.354-04:00">DRAFT</status_change>
            <status_change date="2012-07-09T04:00:30.916-04:00">INTERIM</status_change>
            <status_change date="2012-07-30T04:00:31.701-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:23843 - In some &quot;pattern match&quot; strings added &quot;\&quot; before &quot;.&quot; to clarify if &quot;point&quot; or &quot;any symbol&quot; needed." date="2014-07-28T18:11:00.493-04:00">
              <contributor organization="ALTX-SOFT">Evgeniy Pavlov</contributor>
            </modified>
            <status_change date="2014-07-28T18:12:39.291-04:00">INTERIM</status_change>
            <status_change date="2014-08-18T04:01:21.988-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Microsoft Lync 2010 Attendee (user level install) is installed" test_ref="oval:org.mitre.oval:tst:79595"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15600" version="3" class="inventory">
      <metadata>
        <title>Microsoft Lync 2010 Attendant is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Lync 2010 Attendant</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:lync_attendant:2010"/>
        <description>Microsoft Lync 2010 Attendant is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-06-18T12:17:53">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-06-19T12:05:11.139-04:00">DRAFT</status_change>
            <status_change date="2012-07-09T04:00:28.478-04:00">INTERIM</status_change>
            <status_change date="2012-07-30T04:00:28.919-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Microsoft Lync 2010 Attendant is installed" test_ref="oval:org.mitre.oval:tst:79186"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15556" version="3" class="inventory">
      <metadata>
        <title>Microsoft Lync 2010 Attendee (admin level install) is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Lync 2010 Attendee</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:lync_attendee:2010:admin_level"/>
        <description>Microsoft Lync 2010 Attendee (admin level install) is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-06-18T12:17:53">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-06-19T12:05:00.736-04:00">DRAFT</status_change>
            <status_change date="2012-07-09T04:00:25.415-04:00">INTERIM</status_change>
            <status_change date="2012-07-30T04:00:25.527-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Microsoft Lync 2010 Attendee (admin level install) is installed" test_ref="oval:org.mitre.oval:tst:79499"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15099" version="3" class="inventory">
      <metadata>
        <title>Microsoft Lync 2010 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Lync 2010</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:lync:2010"/>
        <description>Microsoft Lync 2010 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-06-18T12:17:53">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-06-19T12:05:00.126-04:00">DRAFT</status_change>
            <status_change date="2012-07-09T04:00:12.234-04:00">INTERIM</status_change>
            <status_change date="2012-07-30T04:00:16.183-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Microsoft Lync 2010 is installed" test_ref="oval:org.mitre.oval:tst:79642"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14842" version="4" class="vulnerability" deprecated="true">
      <metadata>
        <title>DEPRECATED: Integer signedness error in the db2dasrrm process in the DB2 Administration Server (DAS) in IBM DB2 9.1 through FP11, 9.5 before FP9, and 9.7 through FP5 on UNIX platforms allows remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow.</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>IBM DB2 UDB</product>
        </affected>
        <reference ref_id="CVE-2012-0711" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0711" source="CVE"/>
        <description>Integer signedness error in the db2dasrrm process in the DB2 Administration Server (DAS) in IBM DB2 9.1 through FP11, 9.5 before FP9, and 9.7 through FP5 on UNIX platforms allows remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-03-26T11:21:43.000-05:00">
              <contributor organization="DTCC">Scott Quint</contributor>
            </submitted>
            <status_change date="2012-03-27T14:24:42.994-04:00">DRAFT</status_change>
            <status_change date="2012-04-16T04:06:04.211-04:00">INTERIM</status_change>
            <status_change date="2012-05-07T04:00:34.220-04:00">ACCEPTED</status_change>
            <modified comment="Title indicates UNIX but Win platform defined" date="2013-07-26T14:29:45.664-04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-07-26T14:29:45.664-04:00">DEPRECATED</status_change>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Determine if the version of IBM DB2 UDB is less than or equal to 9.7 and is greater than or equal to 9.1">
          <extend_definition comment="IBM DB2 UDB is installed" definition_ref="oval:org.mitre.oval:def:12505"/>
          <criterion comment="Determine if the version of IBM DB2 UDB is less than or equal to 9.7" test_ref="oval:org.mitre.oval:tst:77686"/>
          <criterion comment="Determine if the version of IBM DB2 UDB is greater than or equal to 9.1" test_ref="oval:org.mitre.oval:tst:77532"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1484" version="5" class="vulnerability">
      <metadata>
        <title>IE6 Double Byte Character Parsing Memory Corruption(Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1189" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1189"/>
        <description>Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via a crafted URL with an International Domain Name (IDN) using double-byte character sets (DBCS), aka the "Double Byte Character Parsing Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2006-04-12T12:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-04-12T05:16:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:56.194-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:45.759-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:58.141-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:06.834-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="Win2K/XP/2003 is patched" negate="true" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.3790.507" negate="false" test_ref="oval:org.mitre.oval:tst:1100"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14834" version="6" class="vulnerability">
      <metadata>
        <title>Oracle Outside In contains multiple exploitable vulnerabilities - XII</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Exchange Server 2007</product>
          <product>Microsoft Exchange Server 2010</product>
          <product>Microsoft FAST Search Server 2010 for SharePoint</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-3109" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3109"/>
        <description>Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-08-20T10:24:13">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-08-20T16:06:09.434-04:00">DRAFT</status_change>
            <status_change date="2012-09-10T04:00:08.592-04:00">INTERIM</status_change>
            <status_change date="2012-10-01T04:00:04.092-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:19493 - New Microsoft Patch Tuesday October 2012 definitions." date="2012-10-19T16:09:00.069-04:00">
              <contributor organization="SecPod Technologies">Chandan S</contributor>
            </modified>
            <status_change date="2012-10-19T16:39:04.876-04:00">INTERIM</status_change>
            <status_change date="2012-11-05T04:00:04.297-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Exchange Server 2007 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2007 SP3 is installed" definition_ref="oval:org.mitre.oval:def:15784"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 8.3.279.4" test_ref="oval:org.mitre.oval:tst:80087"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP1 vulnerable version">
          <extend_definition comment="Microsoft Exchange Server 2010 SP1 is installed" definition_ref="oval:org.mitre.oval:def:15339"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 14.1.421.2" test_ref="oval:org.mitre.oval:tst:80199"/>
        </criteria>
        <criteria operator="AND" comment="Exchange Server 2010 SP2">
          <extend_definition comment="Microsoft Exchange Server 2010 SP2 is installed" definition_ref="oval:org.mitre.oval:def:14151"/>
          <criterion comment="Check if the version of transcodingservice.exe is less than 14.2.318.4" test_ref="oval:org.mitre.oval:tst:79908"/>
        </criteria>
        <criteria operator="AND" comment="FAST Search Server 2010 for SharePoint vulnerable version">
          <extend_definition comment="Microsoft FAST Search Server 2010 for SharePoint is installed" definition_ref="oval:org.mitre.oval:def:15918"/>
          <criterion comment="Check if the version of Microsoft.sharepoint.search.extended.administration.dll is less than 14.0.334.11" test_ref="oval:org.mitre.oval:tst:80085"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15918" version="3" class="inventory">
      <metadata>
        <title>Microsoft FAST Search Server 2010 for SharePoint is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft FAST Search Server 2010 for SharePoint</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:fast_search_server_for_sharepoint:2010"/>
        <description>Microsoft FAST Search Server 2010 for SharePoint is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-10-17T11:11:47">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-10-19T16:37:56.218-04:00">DRAFT</status_change>
            <status_change date="2012-11-05T04:00:25.264-05:00">INTERIM</status_change>
            <status_change date="2012-11-26T04:00:17.344-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if FAST Search Server 2010 for SharePoint is installed" test_ref="oval:org.mitre.oval:tst:79536"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15784" version="7" class="inventory">
      <metadata>
        <title>Microsoft Exchange Server 2007 SP3 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Exchange Server 2007</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:exchange_server:2007:sp3"/>
        <description>Microsoft Exchange Server 2007 SP3 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-08-09T05:34:23">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2012-08-20T16:06:05.785-04:00">DRAFT</status_change>
            <status_change date="2012-09-10T04:00:34.873-04:00">INTERIM</status_change>
            <status_change date="2012-10-01T04:00:30.928-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:15784 - The attached file contains new inventories and vulnerabilities for Oracle products." date="2013-06-19T16:04:00.140-04:00">
              <contributor organization="ALTX-SOFT">Sergey Artykhov</contributor>
            </modified>
            <status_change date="2013-06-19T16:24:10.413-04:00">INTERIM</status_change>
            <status_change date="2013-07-08T04:01:27.811-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:tst:80116 - Microsoft bulletin for the month of August 2013 MS13-061" date="2013-08-19T14:39:00.335-04:00">
              <contributor organization="SecPod Technologies">Sharath S</contributor>
            </modified>
            <status_change date="2013-08-19T14:41:15.490-04:00">INTERIM</status_change>
            <status_change date="2013-09-09T04:00:07.178-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Exchange Server 2007 is installed." test_ref="oval:org.mitre.oval:tst:8521"/>
        <criterion comment="Check if Exchange Server 2007 SP3 is installed" test_ref="oval:org.mitre.oval:tst:80116"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15339" version="3" class="inventory">
      <metadata>
        <title>Microsoft Exchange Server 2010 SP1 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Exchange Server 2010</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:exchange:2010:sp1"/>
        <description>Microsoft Exchange Server 2010 SP1 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2012-04-04T12:52:26.748+04:00">
              <contributor organization="ALTX-SOFT">Sergey Artykhov</contributor>
            </submitted>
            <status_change date="2012-04-06T11:34:18.828-04:00">DRAFT</status_change>
            <status_change date="2012-04-23T04:00:17.466-04:00">INTERIM</status_change>
            <status_change date="2012-05-14T04:00:10.465-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Microsoft Exchange Server 2010 is installed" test_ref="oval:org.mitre.oval:tst:77602"/>
        <criterion comment="Microsoft Exchange Server 2010 SP1 is installed" test_ref="oval:org.mitre.oval:tst:78247"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14151" version="3" class="inventory">
      <metadata>
        <title>Microsoft Exchange Server 2010 SP2 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Exchange Server 2010</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:exchange:2010:sp2"/>
        <description>Microsoft Exchange Server 2010 SP2 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2012-03-27T12:52:26.748+04:00">
              <contributor organization="ALTX-SOFT">Sergey Artykhov</contributor>
            </submitted>
            <status_change date="2012-03-27T14:18:30.473-04:00">DRAFT</status_change>
            <status_change date="2012-04-16T04:02:22.437-04:00">INTERIM</status_change>
            <status_change date="2012-05-07T04:00:04.488-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Microsoft Exchange Server 2010 is installed" test_ref="oval:org.mitre.oval:tst:77602"/>
        <criterion comment="Microsoft Exchange Server 2010 SP2 is installed" test_ref="oval:org.mitre.oval:tst:78176"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14826" version="3" class="vulnerability">
      <metadata>
        <title>XSS in wizardlist.aspx Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft SharePoint Server 2010</product>
          <product>Microsoft SharePoint Foundation 2010</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-0145" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0145"/>
        <description>Cross-site scripting (XSS) vulnerability in wizardlist.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in wizardlist.aspx Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2012-02-14T13:00:00">
              <contributor organization="Symantec Corporation">Josh Turpin</contributor>
            </submitted>
            <status_change date="2012-02-21T12:28:22.834-05:00">DRAFT</status_change>
            <status_change date="2012-03-12T04:00:29.462-04:00">INTERIM</status_change>
            <status_change date="2012-04-02T04:00:22.963-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria comment="Vulnerable Microsoft Office SharePoint Server 2010">
          <extend_definition comment="Microsoft Office SharePoint Server 2010 is installed." definition_ref="oval:org.mitre.oval:def:12880"/>
          <criterion comment="Microsoft.SharePoint.Taxonomy.dll version is less than 14.0.6113.5000" test_ref="oval:org.mitre.oval:tst:78074"/>
        </criteria>
        <criteria comment="Vulnerable Microsoft SharePoint Foundation 2010">
          <extend_definition comment="Microsoft SharePoint Foundation 2010 is installed" definition_ref="oval:org.mitre.oval:def:12224"/>
          <criterion comment="OWSSVR.DLL version is less than 14.0.6114.5001" test_ref="oval:org.mitre.oval:tst:77961"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14822" version="7" class="vulnerability">
      <metadata>
        <title>Buffer overflow in kpprzrdr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted .prz attachment.  NOTE: some of these details are obtained from third party information.</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Lotus Notes</product>
        </affected>
        <reference ref_id="CVE-2011-1217" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1217" source="CVE"/>
        <description>Buffer overflow in kpprzrdr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted .prz attachment.  NOTE: some of these details are obtained from third party information.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-12-16T09:51:51.000-05:00">
              <contributor organization="DTCC">Scott Quint</contributor>
            </submitted>
            <status_change date="2011-12-19T15:44:17.088-05:00">DRAFT</status_change>
            <status_change date="2012-01-09T04:00:40.739-05:00">INTERIM</status_change>
            <status_change date="2012-01-30T04:00:54.547-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.altx-soft.oval:ste:18430 - contains tests with modified comments and all dependences" date="2014-02-13T12:19:00.287-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-13T12:22:40.813-05:00">INTERIM</status_change>
            <status_change date="2014-03-03T04:00:47.396-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:14822 - registry_tests replaced with file_tests because registry path was compared with version" date="2015-05-29T11:02:00.629-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-05-29T11:05:02.806-04:00">INTERIM</status_change>
            <status_change date="2015-06-15T04:00:10.166-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 8.5.2.2 and is greater than or equal to 8.0.0">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 8.5.2.2" test_ref="oval:org.mitre.oval:tst:138913"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 8.0.0" test_ref="oval:org.mitre.oval:tst:138507"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 7.0.4 and is greater than or equal to 7.0.0">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 7.0.4" test_ref="oval:org.mitre.oval:tst:138653"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 7.0.0" test_ref="oval:org.mitre.oval:tst:138900"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 6.5.6 and is greater than or equal to 6.0.1">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 6.5.6" test_ref="oval:org.mitre.oval:tst:138776"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 6.0.1" test_ref="oval:org.mitre.oval:tst:138813"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 5.2 and is greater than or equal to 5:0a">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 5.2" test_ref="oval:org.mitre.oval:tst:138910"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 5:0a" test_ref="oval:org.mitre.oval:tst:138741"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 4.6 and is greater than or equal to 4.2.1">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 4.6" test_ref="oval:org.mitre.oval:tst:138685"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 4.2.1" test_ref="oval:org.mitre.oval:tst:138657"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 3.0.0.2 and is greater than or equal to 3.0.0.1">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 3.0.0.2" test_ref="oval:org.mitre.oval:tst:138223"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 3.0.0.1" test_ref="oval:org.mitre.oval:tst:138612"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1482" version="2" class="vulnerability">
      <metadata>
        <title>Management Console Directory Traversal Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>Solaris Management Console (SMC)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1354" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1354"/>
        <description>The Solaris Management Console (SMC) in Sun Solaris 8 and 9 generates different 404 error messages when a file does not exist versus when a file exists but is otherwise inacessible, which could allow remote attackers to obtain sensitive information in conjunction with a directory traversal (..) attack.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-04-13T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-04-20T04:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-05-11T04:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T04:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-08-22T04:00:00.000-04:00" comment="Affected product changed to Sun Management Console (SMC); mistakenly was .NET framework">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2005-08-25T10:03:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="OR" comment="Solaris 8 or 9 installed">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          </criteria>
          <criterion comment="Solaris Management Console Web Components (SUNWwbmc) installed" negate="false" test_ref="oval:org.mitre.oval:tst:900"/>
          <criterion comment="Patch 111313-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:899"/>
          <criterion comment="Patch 116807-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:898"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="smcboot running" negate="false" test_ref="oval:org.mitre.oval:tst:897"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1480" version="3" class="vulnerability">
      <metadata>
        <title>Heap Overrun in XBM Image Processing</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2701" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2701"/>
        <description>Heap-based buffer overflow in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to execute arbitrary code via an XBM image file that ends in a large number of spaces instead of the expected end tag.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-11-11T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-12-12T10:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:2367" date="2007-02-26T08:32:00.241-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-26T08:32:38.207-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:2370" date="2007-03-06T07:46:00.064-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:49.989-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:1444" date="2007-04-23T12:05:00.911-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:19:58.245-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:1445" date="2007-04-23T12:05:00.720-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:54.113-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Suite version 1.7.10 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.10 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2535"/>
          <criterion comment="Mozilla Suite version 1.7.10 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2534"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.6 or earlier is installed">
          <criterion comment="Firefox version 1.0.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2533"/>
          <criterion comment="Mozilla Firefox version 1.0.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2532"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:148" version="2" class="vulnerability">
      <metadata>
        <title>Evolution GtkHTML DoS via null Pointer Dereference</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>GtkHTML</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0541" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0541"/>
        <description>gtkhtml before 1.1.10, as used in Evolution, allows remote attackers to cause a denial of service (crash) via a malformed message that causes a null pointer dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-10T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:54.285-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:16.578-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="gtkhtml version is less than 1.1.9-0.9.1" negate="false" test_ref="oval:org.mitre.oval:tst:2877"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/bin/evolution is executable">
            <criterion comment="/usr/bin/evolution is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2876"/>
            <criterion comment="/usr/bin/evolution is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2875"/>
            <criterion comment="/usr/bin/evolution is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2874"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1479" version="1" class="vulnerability">
      <metadata>
        <title>Integer Overflow in libpng via Malformed PNG Image</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>libpng</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0599" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0599"/>
        <description>Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) progressive display image reading capability in libpng 1.2.5 and earlier allow remote attackers to cause a denial of service (application crash) via a malformed PNG image.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-12-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-24T12:04:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 7,8,or 9 installed">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
        </criteria>
        <criterion comment="Netscape installed" negate="false" test_ref="oval:org.mitre.oval:tst:901"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1478" version="5" class="vulnerability">
      <metadata>
        <title>Address Bar Spoofing Vulnerability (WinS03)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2384" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2384"/>
        <description>Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to conduct spoofing and phishing attacks by using a modal browser window in a way that preserves the original address bar and trusted UI of a trusted site, even after the browser has been navigated to a malicious site, aka the "Address Bar Spoofing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:19.103-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:07.144-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:59.446-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:45.567-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:27.499-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:06.191-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="Win2K/XP/2003 is patched" negate="true" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.3790.536" negate="false" test_ref="oval:org.mitre.oval:tst:952"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1477" version="6" class="vulnerability">
      <metadata>
        <title>MSDTC Invalid Memory Access Vulnerability (Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0034" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0034"/>
        <description>Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or BuildContext opcode, which triggers a bug in the NdrAllocate function, aka the MSDTC Invalid Memory Access Vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-05-10T03:16:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-05-10T08:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:18.947-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:09:00.804-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:45.380-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1477 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:38.908-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:05.842-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of Msdtctm.dll is less than 2001.12.4720.480" test_ref="oval:org.mitre.oval:tst:902"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1475" version="7" class="vulnerability">
      <metadata>
        <title>Server 2003 COM Object Instantiation Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2831" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2831"/>
        <description>Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, aka a variant of the "COM Object Instantiation Memory Corruption Vulnerability," a different vulnerability than CVE-2005-2127.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-12-13T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-12-16T01:03:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-01-04T08:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-01-25T07:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:1051" date="2007-01-24T21:34:00.609-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-24T21:35:06.361-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:45.186-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:25.864-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:05.518-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:56.530-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:17.833-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Software section">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="Internet Explorer 6 is installed" test_ref="oval:org.mitre.oval:tst:1177"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.3790.449" test_ref="oval:org.mitre.oval:tst:1176"/>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14725" version="5" class="vulnerability">
      <metadata>
        <title>IBM Lotus Notes 7.0, 8.0, and 8.5 stores administrative credentials in cleartext in SURunAs.exe, which allows local users to obtain sensitive information by examining this file, aka SPR JSTN837SEG.</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Lotus Notes</product>
        </affected>
        <reference ref_id="CVE-2010-1487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1487" source="CVE"/>
        <description>IBM Lotus Notes 7.0, 8.0, and 8.5 stores administrative credentials in cleartext in SURunAs.exe, which allows local users to obtain sensitive information by examining this file, aka SPR JSTN837SEG.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-12-16T09:51:32.000-05:00">
              <contributor organization="DTCC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2011-12-19T15:44:07.703-05:00">DRAFT</status_change>
            <status_change date="2012-01-09T04:00:35.879-05:00">INTERIM</status_change>
            <status_change date="2012-01-30T04:00:48.476-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:14725 - registry_tests replaced with file_tests because registry path was compared with version" date="2015-05-29T11:02:00.629-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-05-29T11:05:01.415-04:00">INTERIM</status_change>
            <status_change date="2015-06-15T04:00:09.976-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is equal to 7.0">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is equal to 7.0" test_ref="oval:org.mitre.oval:tst:138810"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 8.5 and is greater than or equal to 8.0">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 8.5" test_ref="oval:org.mitre.oval:tst:138551"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 8.0" test_ref="oval:org.mitre.oval:tst:138897"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14720" version="4" class="vulnerability" deprecated="true">
      <metadata>
        <title>DEPRECATED: Unspecified vulnerability in IBM DB2 9.7 before FP5 on UNIX, when the Self Tuning Memory Manager (STMM) feature and the AUTOMATIC DATABASE_MEMORY setting are configured, allows local users to cause a denial of service (daemon crash) via unknown vectors.</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>IBM DB2 UDB</product>
        </affected>
        <reference ref_id="CVE-2011-1373" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1373" source="CVE"/>
        <description>Unspecified vulnerability in IBM DB2 9.7 before FP5 on UNIX, when the Self Tuning Memory Manager (STMM) feature and the AUTOMATIC DATABASE_MEMORY setting are configured, allows local users to cause a denial of service (daemon crash) via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-12-16T09:51:56.000-05:00">
              <contributor organization="DTCC">Scott Quint</contributor>
            </submitted>
            <status_change date="2011-12-19T15:44:08.693-05:00">DRAFT</status_change>
            <status_change date="2012-01-09T04:00:35.597-05:00">INTERIM</status_change>
            <status_change date="2012-01-30T04:00:48.168-05:00">ACCEPTED</status_change>
            <modified comment="Title indicates UNIX but Win platform defined" date="2013-07-26T13:52:39.416-04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-07-26T13:52:39.416-04:00">DEPRECATED</status_change>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Determine if the version of IBM DB2 UDB is less than or equal to 9.7.0.4 and is greater than or equal to 9.7.0.1">
          <extend_definition comment="IBM DB2 UDB is installed" definition_ref="oval:org.mitre.oval:def:12505"/>
          <criterion comment="Determine if the version of IBM DB2 UDB is less than or equal to 9.7.0.4" test_ref="oval:org.mitre.oval:tst:77830"/>
          <criterion comment="Determine if the version of IBM DB2 UDB is greater than or equal to 9.7.0.1" test_ref="oval:org.mitre.oval:tst:77780"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1470" version="2" class="vulnerability">
      <metadata>
        <title>Alternate ps Command Information Disclosure Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-1999-1587" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-1587"/>
        <description>/usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environment variables and values of arbitrary processes via the -e option.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-03-28T09:02:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-04-06T06:30:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">ACCEPTED</status_change>
            <modified comment="added CVE reference" date="2007-02-05T10:31:00.086-05:00">
              <contributor organization="Security-Database">Nabil Ouchn</contributor>
            </modified>
            <status_change date="2007-02-05T10:31:46.117-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:44.948-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert ID 102215 criteria.">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Patch 109023-05 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:910"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert ID 102215 criteria.">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Patch 120240-01 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:909"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert ID 102215 criteria.">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Patch 109024-05 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:908"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert ID 102215 criteria.">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Patch 120239-01 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:907"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:147" version="5" class="vulnerability">
      <metadata>
        <title>Windows 2000 Shell Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Windows Shell</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0070" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0070"/>
        <description>Buffer overflow in Windows Shell (used as the Windows Desktop) allows local and possibly remote attackers to execute arbitrary code via a custom URL handler that has not been removed for an application that has been improperly uninstalled.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <modified date="2005-09-26T10:58:00.000-04:00" comment="modified wft-244 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:12.901-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:49.543-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:31.269-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:05.213-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 (sp3 or earlier) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="the version of shell32.dll is less than 5.0.3502.4718" negate="false" test_ref="oval:org.mitre.oval:tst:2878"/>
        <criterion comment="Patch Q313829 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3087"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1467" version="1" class="vulnerability">
      <metadata>
        <title>Samba Encrypted Password DoS</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <product>Samba</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1318" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1318"/>
        <description>Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the overflow during decryption in which a DOS codepage string is converted to a little-endian UCS2 unicode string.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-19T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-24T03:40:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="Samba - Usr (SUNWsmbau) installed" negate="false" test_ref="oval:org.mitre.oval:tst:914"/>
          <criterion comment="Patch 114684-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:913"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="smbd running" negate="false" test_ref="oval:org.mitre.oval:tst:912"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1466" version="6" class="vulnerability">
      <metadata>
        <title>COM+ Memory Structures Process Permits Remote Code Execution (Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1978" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1978"/>
        <description>COM+ in Microsoft Windows does not properly "create and use memory structures," which allows local users or remote attackers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-10-12T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-10-19T05:46:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:09:00.971-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:44.745-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1466 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:00.292-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:04.545-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criteria operator="OR" comment="Either ole32.dll or rpcss.dll has a version less than 5.2.3790.374">
          <criterion comment="the version of ole32.dll is less than 5.2.3790.374" test_ref="oval:org.mitre.oval:tst:959"/>
          <criterion comment="the version of rpcss.dll is less than 5.2.3790.374" test_ref="oval:org.mitre.oval:tst:958"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14650" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in mw8sr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted link in a Microsoft Office document attachment, aka SPR PRAD8823ND.</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Lotus Notes</product>
        </affected>
        <reference ref_id="CVE-2011-1215" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1215" source="CVE"/>
        <description>Stack-based buffer overflow in mw8sr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted link in a Microsoft Office document attachment, aka SPR PRAD8823ND.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-12-16T09:51:48.000-05:00">
              <contributor organization="DTCC">Scott Quint</contributor>
            </submitted>
            <status_change date="2011-12-19T15:44:08.907-05:00">DRAFT</status_change>
            <status_change date="2012-01-09T04:00:30.961-05:00">INTERIM</status_change>
            <status_change date="2012-01-30T04:00:43.467-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:14650 - registry_tests replaced with file_tests because registry path was compared with version" date="2015-05-29T11:02:00.629-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-05-29T11:05:02.530-04:00">INTERIM</status_change>
            <status_change date="2015-06-15T04:00:09.753-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 8.5.2.2 and is greater than or equal to 8.0.0">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 8.5.2.2" test_ref="oval:org.mitre.oval:tst:138913"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 8.0.0" test_ref="oval:org.mitre.oval:tst:138507"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 7.0.4 and is greater than or equal to 7.0.0">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 7.0.4" test_ref="oval:org.mitre.oval:tst:138653"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 7.0.0" test_ref="oval:org.mitre.oval:tst:138900"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14637" version="3" class="vulnerability">
      <metadata>
        <title>XSS in inplview.aspx Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft SharePoint Foundation 2010</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-0017" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0017"/>
        <description>Cross-site scripting (XSS) vulnerability in inplview.aspx in Microsoft SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in inplview.aspx Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2012-02-14T13:00:00">
              <contributor organization="Symantec Corporation">Josh Turpin</contributor>
            </submitted>
            <status_change date="2012-02-21T12:28:22.209-05:00">DRAFT</status_change>
            <status_change date="2012-03-12T04:00:21.224-04:00">INTERIM</status_change>
            <status_change date="2012-04-02T04:00:15.016-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft SharePoint Foundation 2010 is installed" definition_ref="oval:org.mitre.oval:def:12224"/>
        <criterion comment="OWSSVR.DLL version is less than 14.0.6114.5001" test_ref="oval:org.mitre.oval:tst:77961"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14634" version="7" class="vulnerability">
      <metadata>
        <title>Integer underflow in lzhsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted header in a .lzh attachment that triggers a stack-based buffer overflow, aka SPR PRAD88MJ2W.</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Lotus Notes</product>
        </affected>
        <reference ref_id="CVE-2011-1213" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1213" source="CVE"/>
        <description>Integer underflow in lzhsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted header in a .lzh attachment that triggers a stack-based buffer overflow, aka SPR PRAD88MJ2W.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-12-16T09:51:42.000-05:00">
              <contributor organization="DTCC">Scott Quint</contributor>
            </submitted>
            <status_change date="2011-12-19T15:44:15.775-05:00">DRAFT</status_change>
            <status_change date="2012-01-09T04:00:29.684-05:00">INTERIM</status_change>
            <status_change date="2012-01-30T04:00:42.152-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.altx-soft.oval:ste:18430 - contains tests with modified comments and all dependences" date="2014-02-13T12:19:00.287-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-13T12:22:41.346-05:00">INTERIM</status_change>
            <status_change date="2014-03-03T04:00:45.890-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:14634 - registry_tests replaced with file_tests because registry path was compared with version" date="2015-05-29T11:02:00.629-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-05-29T11:05:01.700-04:00">INTERIM</status_change>
            <status_change date="2015-06-15T04:00:09.460-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 8.5.2.2 and is greater than or equal to 8.0.0">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 8.5.2.2" test_ref="oval:org.mitre.oval:tst:138913"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 8.0.0" test_ref="oval:org.mitre.oval:tst:138507"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 7.0.4 and is greater than or equal to 7.0.0">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 7.0.4" test_ref="oval:org.mitre.oval:tst:138653"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 7.0.0" test_ref="oval:org.mitre.oval:tst:138900"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 6.5.6 and is greater than or equal to 6.0.1">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 6.5.6" test_ref="oval:org.mitre.oval:tst:138776"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 6.0.1" test_ref="oval:org.mitre.oval:tst:138813"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 5.2 and is greater than or equal to 5:0a">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 5.2" test_ref="oval:org.mitre.oval:tst:138910"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 5:0a" test_ref="oval:org.mitre.oval:tst:138741"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 4.6 and is greater than or equal to 4.2.1">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 4.6" test_ref="oval:org.mitre.oval:tst:138685"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 4.2.1" test_ref="oval:org.mitre.oval:tst:138657"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 3.0.0.2 and is greater than or equal to 3.0.0.1">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 3.0.0.2" test_ref="oval:org.mitre.oval:tst:138223"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 3.0.0.1" test_ref="oval:org.mitre.oval:tst:138612"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1461" version="4" class="vulnerability">
      <metadata>
        <title>HP-UX xterm Privilege Escalation Vulnerability (B.11.11)</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3779" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3779"/>
        <description>Unspecified vulnerability in xterm for HP-UX 11.00, 11.11, and 11.23 allows local users to gain privileges via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-01-11T12:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-01-12T09:18:00.000-04:00">DRAFT</status_change>
            <modified date="2006-01-26T01:55:00.000-04:00" comment="Updated to CVE-2005-3779.  HP is so vague that it's not completely certain.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-22T08:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-03-09T12:19:00.000-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:27.897-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:09.141-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1461 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:46.706-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:11.319-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.11">
          <criteria operator="AND" comment="700 Series OS Release 11.11">
            <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:2515"/>
            <criterion comment="HP Release B.11.11" test_ref="oval:org.mitre.oval:tst:2514"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 11.11">
            <criterion comment="800-series HP" test_ref="oval:org.mitre.oval:tst:2513"/>
            <criterion comment="HP Release B.11.11" test_ref="oval:org.mitre.oval:tst:2514"/>
          </criteria>
        </criteria>
        <criterion negate="true" comment="Patch PHSS_34102 is installed" test_ref="oval:org.mitre.oval:tst:915"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1459" version="1" class="vulnerability">
      <metadata>
        <title>HP-Samba DACL Remote Integer Overflow Vulnerability (CIFS A.01)</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
          <product>Samba</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1154" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1154"/>
        <description>Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a Samba request with a large number of security descriptors that triggers a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-01-13T02:24:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-01-25T07:30:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-03-09T12:19:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.00, 11.11, 11.22, or 11.23">
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.00">
            <criteria operator="AND" comment="700 Series OS Release 11.00">
              <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
              <criterion comment="HP Release B.11.00" negate="false" test_ref="oval:org.mitre.oval:tst:2512"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.00">
              <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
              <criterion comment="HP Release B.11.00" negate="false" test_ref="oval:org.mitre.oval:tst:2512"/>
            </criteria>
          </criteria>
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.11">
            <criteria operator="AND" comment="700 Series OS Release 11.11">
              <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
              <criterion comment="HP Release B.11.11" negate="false" test_ref="oval:org.mitre.oval:tst:2514"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.11">
              <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
              <criterion comment="HP Release B.11.11" negate="false" test_ref="oval:org.mitre.oval:tst:2514"/>
            </criteria>
          </criteria>
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.22">
            <criteria operator="AND" comment="700 Series OS Release 11.22">
              <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
              <criterion comment="HP Release B.11.22" negate="false" test_ref="oval:org.mitre.oval:tst:1015"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.22">
              <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
              <criterion comment="HP Release B.11.22" negate="false" test_ref="oval:org.mitre.oval:tst:1015"/>
            </criteria>
          </criteria>
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.23">
            <criteria operator="AND" comment="700 Series OS Release 11.23">
              <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
              <criterion comment="HP Release B.11.23" negate="false" test_ref="oval:org.mitre.oval:tst:2511"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.23">
              <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
              <criterion comment="HP Release B.11.23" negate="false" test_ref="oval:org.mitre.oval:tst:2511"/>
            </criteria>
          </criteria>
        </criteria>
        <criteria operator="OR" comment="Any of the CIFS components has a version less than A.01.11.04">
          <criterion comment="CIFS-Server.CIFS-RUN with version less than A.01.11.04 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:920"/>
          <criterion comment="CIFS-Server.CIFS-UTIL with version less than A.01.11.04 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:919"/>
          <criterion comment="CIFS-Server.CIFS-ADMIN with version less than A.01.11.04 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:918"/>
          <criterion comment="CIFS-Server.CIFS-LIB with version less than A.01.11.04 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:917"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1458" version="7" class="vulnerability">
      <metadata>
        <title>Server 2003 File Download Dialog Box Manipulation Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2829" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2829"/>
        <description>Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by (1) overlaying a malicious new window above a file download box, then (2) using a keyboard shortcut and delaying the display of the file download box until the user hits a shortcut that activates the "Run" button, aka "File Download Dialog Box Manipulation Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-12-13T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-12-16T01:03:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-01-04T08:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-01-25T07:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:1051" date="2007-01-24T21:34:00.609-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-24T21:35:05.793-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:44.548-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:40.969-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:03.202-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:58.799-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:17.699-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Software section">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="Internet Explorer 6 is installed" test_ref="oval:org.mitre.oval:tst:1177"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.3790.449" test_ref="oval:org.mitre.oval:tst:1176"/>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1454" version="5" class="vulnerability">
      <metadata>
        <title>Server 2003 DDS Library Shape Control Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2127" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2127"/>
        <description>Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, as originally demonstrated using the (1) DDS Library Shape Control (Msdds.dll) COM object, and other objects including (2) Blnmgrps.dll, (3) Ciodm.dll, (4) Comsvcs.dll, (5) Danim.dll, (6) Htmlmarq.ocx, (7) Mdt2dd.dll (as demonstrated using a heap corruption attack with uninitialized memory), (8) Mdt2qd.dll, (9) Mpg4ds32.ax, (10) Msadds32.ax, (11) Msb1esen.dll, (12) Msb1fren.dll, (13) Msb1geen.dll, (14) Msdtctm.dll, (15) Mshtml.dll, (16) Msoeacct.dll, (17) Msosvfbr.dll, (18) Mswcrun.dll, (19) Netshell.dll, (20) Ole2disp.dll, (21) Outllib.dll, (22) Psisdecd.dll, (23) Qdvd.dll, (24) Repodbc.dll, (25) Shdocvw.dll, (26) Shell32.dll, (27) Soa.dll, (28) Srchui.dll, (29) Stobject.dll, (30) Vdt70.dll, (31) Vmhelper.dll, and (32) Wbemads.dll, aka a variant of the "COM Object Instantiation Memory Corruption vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-10-12T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-10-19T05:46:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:09:00.453-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:44.179-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:42.837-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:02.858-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="Win2K/XP/2003 is patched" negate="true" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="mshtml.dll is less than 6.0.3790.418" negate="false" test_ref="oval:org.mitre.oval:tst:923"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1453" version="4" class="vulnerability">
      <metadata>
        <title>HP-UX Shared Library Privilege Escalation Vulnerability (B.11.11)</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0436"/>
        <description>Unspecified vulnerability in HP HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain privileges via unknown attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-01-30T07:20:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-02-01T09:08:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-03-09T12:19:00.000-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:27.825-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:09.049-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1453 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:46.218-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:10.925-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.11">
          <criteria operator="AND" comment="700 Series OS Release 11.11">
            <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:2515"/>
            <criterion comment="HP Release B.11.11" test_ref="oval:org.mitre.oval:tst:2514"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 11.11">
            <criterion comment="800-series HP" test_ref="oval:org.mitre.oval:tst:2513"/>
            <criterion comment="HP Release B.11.11" test_ref="oval:org.mitre.oval:tst:2514"/>
          </criteria>
        </criteria>
        <criterion negate="true" comment="Patch PHCO_30402 is installed" test_ref="oval:org.mitre.oval:tst:924"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14526" version="5" class="vulnerability" deprecated="true">
      <metadata>
        <title>DEPRECATED: Unspecified vulnerability in IBM Tivoli Monitoring Agent (ITMA), as used in IBM DB2 9.5 before FP9 on UNIX, allows local users to gain privileges via unknown vectors.</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>IBM DB2 UDB</product>
        </affected>
        <reference ref_id="CVE-2012-1796" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1796" source="CVE"/>
        <description>Unspecified vulnerability in IBM Tivoli Monitoring Agent (ITMA), as used in IBM DB2 9.5 before FP9 on UNIX, allows local users to gain privileges via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2012-03-26T11:21:44.000-05:00">
              <contributor organization="DTCC">Scott Quint</contributor>
            </submitted>
            <status_change date="2012-03-27T14:24:34.554-04:00">DRAFT</status_change>
            <status_change date="2012-04-16T04:04:35.799-04:00">INTERIM</status_change>
            <status_change date="2012-05-07T04:00:11.756-04:00">ACCEPTED</status_change>
            <modified comment="Title indicates UNIX but Win platform defined" date="2013-07-26T13:41:27.190-04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-07-26T13:41:27.190-04:00">DEPRECATED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:18040 - modified states" date="2014-02-13T12:23:00.044-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Determine if the version of IBM DB2 UDB is equal to 9.5">
          <extend_definition comment="IBM DB2 UDB is installed" definition_ref="oval:org.mitre.oval:def:12505"/>
          <criterion comment="Determine if the version of IBM DB2 UDB is equal to 9.5" test_ref="oval:org.mitre.oval:tst:77406"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1452" version="5" class="vulnerability">
      <metadata>
        <title>MSDTC Unchecked Buffer Permits Remote Code Execution or Privilege Elevation (Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>MSDTC</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2119" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2119"/>
        <description>The MIDL_user_allocate function in the Microsoft Distributed Transaction Coordinator (MSDTC) proxy (MSDTCPRX.DLL) allocates a 4K page of memory regardless of the required size, which allows attackers to overwrite arbitrary memory locations using an incorrect size value that is provided to the NdrAllocate function, which writes management data to memory outside of the allocated buffer.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-10-12T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-10-19T05:46:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:55.835-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:43.983-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:41.936-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:02.533-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="Win2K/XP/2003 is patched" negate="true" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criteria operator="OR" comment="Either ole32.dll or rpcss.dll has a version less than 5.2.3790.374">
          <criterion comment="the version of ole32.dll is less than 5.2.3790.374" negate="false" test_ref="oval:org.mitre.oval:tst:959"/>
          <criterion comment="the version of rpcss.dll is less than 5.2.3790.374" negate="false" test_ref="oval:org.mitre.oval:tst:958"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1451" version="8" class="vulnerability">
      <metadata>
        <title>IE5 Multiple Event Handler Memory Corruption (Win2K)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1245" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1245"/>
        <description>Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote attackers to execute arbitrary code via an HTML tag with a large number of script action handlers such as onload and onmouseover, as demonstrated using onclick, aka the "Multiple Event Handler Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2006-04-12T12:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-04-12T05:16:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Modified ste:831: altered regex to match on a double zero in the minor field of the version, and also added an initial anchor.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:27:00.230-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:28:36.308-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:43.805-05:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:05.654-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:49.318-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:44.537-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:02.159-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:59.737-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:17.520-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="Internet Explorer 5.01 (any patch level) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:927"/>
        <criterion comment="the version of mshtml.dll is less than 5.0.3839.2200" negate="false" test_ref="oval:org.mitre.oval:tst:926"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14489" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in IBM Lotus Notes 8.5 and 8.5fp1, and possibly other versions, allows remote attackers to execute arbitrary code via unknown attack vectors, as demonstrated by the vd_ln module in VulnDisco 9.0.  NOTE: as of 20100222, this disclosure has no actionable information. However, because the VulnDisco author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Lotus Notes</product>
        </affected>
        <reference ref_id="CVE-2010-1608" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1608" source="CVE"/>
        <description>Stack-based buffer overflow in IBM Lotus Notes 8.5 and 8.5fp1, and possibly other versions, allows remote attackers to execute arbitrary code via unknown attack vectors, as demonstrated by the vd_ln module in VulnDisco 9.0.  NOTE: as of 20100222, this disclosure has no actionable information. However, because the VulnDisco author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-12-16T09:51:34.000-05:00">
              <contributor organization="DTCC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2011-12-19T15:44:15.335-05:00">DRAFT</status_change>
            <status_change date="2012-01-09T04:00:19.379-05:00">INTERIM</status_change>
            <status_change date="2012-01-30T04:00:33.111-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:14489 - registry_tests replaced with file_tests because registry path was compared with version" date="2015-05-29T11:02:00.629-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-05-29T11:05:01.542-04:00">INTERIM</status_change>
            <status_change date="2015-06-15T04:00:09.205-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is equal to 8.5">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is equal to 8.5" test_ref="oval:org.mitre.oval:tst:138693"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1446" version="8" class="vulnerability">
      <metadata>
        <title>IE5 COM Object Instantiation Memory Corruption (Win2K)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1186" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1186"/>
        <description>Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via by instantiating the (1) Mdt2gddr.dll, (2) Mdt2dd.dll, and (3) Mdt2gddo.dll COM objects as ActiveX controls, which leads to memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-04-12T12:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-04-12T05:16:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Modified ste:831: altered regex to match on a double zero in the minor field of the version, and also added an initial anchor.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:27:00.230-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:28:36.483-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:43.608-05:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:15.178-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:49.034-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:31.676-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:01.408-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:58.164-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:17.202-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="Internet Explorer 5.01 (any patch level) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:927"/>
        <criterion comment="the version of mshtml.dll is less than 5.0.3839.2200" negate="false" test_ref="oval:org.mitre.oval:tst:926"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1445" version="1" class="vulnerability">
      <metadata>
        <title>SMC TRACE HTTP Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
          <product>Solaris Management Console</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3398" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3398"/>
        <description>The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method, which could allow remote attackers to obtain sensitive information such as cookies and authentication data from HTTP headers.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-01-11T12:56:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-01-12T09:18:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-02-01T09:08:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert ID 102016 criteria.">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Patch 111313-03 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:933"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert ID 102016 criteria.">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Patch 111314-03 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:932"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert ID 102016 criteria.">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Patch 116807-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:931"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert ID 102016 criteria.">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Patch 116808-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:930"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert ID 102016 criteria.">
          <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:2459"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Patch 121308-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:929"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert ID 102016 criteria.">
          <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:2459"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Patch 121309-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:928"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1444" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in IPv6 Implementation (ip6(7p)) Related to the Handling of IPsec Packets may Lead to a System Panic, Resulting in a Denial of Service (DoS)</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3248"/>
        <description>Unspecified vulnerability in Sun Solaris 10 before 20070614, when IPv6 interfaces are present but not configured for IPsec, allows remote attackers to cause a denial of service (system crash) via certain network traffic.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-19T14:30:00.000-04:00">
              <contributor organization="Opsware, Inc.">Nicholas Hansen</contributor>
            </submitted>
            <status_change date="2007-06-19T14:30:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-07-10T21:08:47.681-04:00">INTERIM</status_change>
            <status_change date="2007-08-01T22:26:14.078-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102919" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 125100-09 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:4134"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102919" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 125101-09 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:4040"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1443" version="3" class="vulnerability">
      <metadata>
        <title>Firefox/Mozilla Suite about: Scheme Privilege Escalation Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2706" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2706"/>
        <description>Firefox before 1.0.7 and Mozilla before Suite 1.7.12 allows remote attackers to execute Javascript with chrome privileges via an about: page such as about:mozilla.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-11-11T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-12-12T10:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:2367" date="2007-02-26T08:32:00.241-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-26T08:32:39.463-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:2370" date="2007-03-06T07:46:00.064-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:48.755-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:1444" date="2007-04-23T12:05:00.911-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:19:59.086-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:1445" date="2007-04-23T12:05:00.720-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:53.630-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Suite version 1.7.10 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.10 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2535"/>
          <criterion comment="Mozilla Suite version 1.7.10 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2534"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.6 or earlier is installed">
          <criterion comment="Firefox version 1.0.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2533"/>
          <criterion comment="Mozilla Firefox version 1.0.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2532"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:144" version="4" class="vulnerability">
      <metadata>
        <title>Windows 2000 SNMPv1 Trap Handling DoS and Privilege Escalation (Test 1)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Simple Network Management Protocol (SNMP)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0012" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0012"/>
        <description>Vulnerabilities in a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via SNMPv1 trap handling, as demonstrated by the PROTOS c06-SNMPv1 test suite.  NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one or more for each vendor.  This and other SNMP-related candidates will be updated when more accurate information is available.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:07.344-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:48.570-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:30.710-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:01:00.630-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="AND" comment="Windows 2000 (sp3 or earlier) is installed">
            <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
            <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:3084"/>
          </criteria>
          <criterion comment="the version of snmp.exe is less than 5.0.2195.4919" negate="false" test_ref="oval:org.mitre.oval:tst:2883"/>
          <criterion comment="Patch Q314147 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2959"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="the SNMP service is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2958"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14386" version="3" class="vulnerability">
      <metadata>
        <title>XSS in themeweb.aspx Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft SharePoint Server 2010</product>
          <product>Microsoft SharePoint Foundation 2010</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-0144" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0144"/>
        <description>Cross-site scripting (XSS) vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in themeweb.aspx Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2012-02-14T13:00:00">
              <contributor organization="Symantec Corporation">Josh Turpin</contributor>
            </submitted>
            <status_change date="2012-02-21T12:28:23.117-05:00">DRAFT</status_change>
            <status_change date="2012-03-12T04:00:16.211-04:00">INTERIM</status_change>
            <status_change date="2012-04-02T04:00:09.824-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria comment="Vulnerable Microsoft Office SharePoint Server 2010">
          <extend_definition comment="Microsoft Office SharePoint Server 2010 is installed." definition_ref="oval:org.mitre.oval:def:12880"/>
          <criterion comment="Microsoft.SharePoint.Taxonomy.dll version is less than 14.0.6113.5000" test_ref="oval:org.mitre.oval:tst:78074"/>
        </criteria>
        <criteria comment="Vulnerable Microsoft SharePoint Foundation 2010">
          <extend_definition comment="Microsoft SharePoint Foundation 2010 is installed" definition_ref="oval:org.mitre.oval:def:12224"/>
          <criterion comment="OWSSVR.DLL version is less than 14.0.6114.5001" test_ref="oval:org.mitre.oval:tst:77961"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14375" version="3" class="vulnerability">
      <metadata>
        <title>Microsoft Malware Protection Engine Vulnerability-II</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Antigen for Exchange</product>
          <product>Microsoft Antigen for SMTP Gateway</product>
          <product>Microsoft Forefront Security for Exchange Server</product>
          <product>Microsoft Forefront Security for SharePoint</product>
          <product>Microsoft Windows Defender</product>
          <product>Windows Live OneCare</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1438" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1438"/>
        <description>Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (disk space exhaustion) via a file with "crafted data structures" that trigger the creation of large temporary files, a different vulnerability than CVE-2008-1437.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-12-09T18:23:43">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2011-12-09T17:34:55.550-05:00">DRAFT</status_change>
            <status_change date="2011-12-26T04:02:10.341-05:00">INTERIM</status_change>
            <status_change date="2012-01-16T04:02:25.976-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Windows Live OneCare">
          <extend_definition comment="Microsoft Windows Live OneCare is installed" definition_ref="oval:org.mitre.oval:def:14185"/>
          <criterion comment="Check if Live OneCare EngineVersion is less than 1.1.3520.0" test_ref="oval:org.mitre.oval:tst:77776"/>
        </criteria>
        <criteria operator="AND" comment="Microsoft Windows Defender">
          <extend_definition comment="Microsoft Windows Defender is installed" definition_ref="oval:org.mitre.oval:def:14263"/>
          <criterion comment="Check if Windows Defender EngineVersion is less than 1.1.3520.0" test_ref="oval:org.mitre.oval:tst:77823"/>
        </criteria>
        <criteria operator="AND" comment="Microsoft Forefront Security for SharePoint">
          <extend_definition comment="Microsoft Forefront Security for SharePoint is installed" definition_ref="oval:org.mitre.oval:def:14529"/>
          <criterion comment="Check if Forefront Security for SharePoint EngineVersion is less than 0.1.13.192" test_ref="oval:org.mitre.oval:tst:77719"/>
        </criteria>
        <criteria operator="AND" comment="Microsoft Forefront Security for Exchange Server">
          <extend_definition comment="Microsoft Forefront Security for Exchange Server is installed" definition_ref="oval:org.mitre.oval:def:14468"/>
          <criterion comment="Check if Forefront Security for Exchange Server EngineVersion is less than 0.1.13.192" test_ref="oval:org.mitre.oval:tst:77774"/>
        </criteria>
        <criteria operator="AND" comment="Microsoft Antigen for Exchange">
          <extend_definition comment="Microsoft Antigen for Exchange is installed" definition_ref="oval:org.mitre.oval:def:14520"/>
          <criterion comment="Check if Antigen for Exchange EngineVersion is less than 0.1.13.192" test_ref="oval:org.mitre.oval:tst:77829"/>
        </criteria>
        <criteria operator="AND" comment="Microsoft Antigen for SMTP Gateway">
          <extend_definition comment="Microsoft Antigen for SMTP Gateway is installed" definition_ref="oval:org.mitre.oval:def:14251"/>
          <criterion comment="Check if Antigen for SMTP Gateway EngineVersion is less than 0.1.13.192" test_ref="oval:org.mitre.oval:tst:77570"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1436" version="2" class="vulnerability">
      <metadata>
        <title>Solaris CDE DTLogin XDMCP Parser Remote Double Free Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>Common Desktop Environment</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0368" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0368"/>
        <description>Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-12T12:37:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <modified date="2004-10-12T12:47:00.000-04:00" comment="Added patch 107180-31 test for Solaris 7.  Changed vulnerable software test logic a little">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </modified>
            <status_change date="2004-10-13T01:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-10-27T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-11-17T10:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected datatype on base element. Datatype must be int." date="2007-01-04T08:54:00.038-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-04T08:56:47.173-05:00">INTERIM</status_change>
            <modified comment="Corrected datatype on version element in ste:841. Datatype must be int." date="2007-01-04T09:48:00.458-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-20T13:39:43.377-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Software section">
          <criterion comment="File /usr/dt/bin/dtlogin exists" test_ref="oval:org.mitre.oval:tst:939"/>
          <criteria operator="OR" comment="Solaris 7,8,or 9 installed">
            <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="Solaris 7 Installed" test_ref="oval:org.mitre.oval:tst:3045"/>
            <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
          </criteria>
          <criterion comment="Patch 108919-21 or later installed" test_ref="oval:org.mitre.oval:tst:937"/>
          <criterion comment="Patch 112807-09 or later installed" test_ref="oval:org.mitre.oval:tst:936"/>
          <criterion comment="Patch 107180-31 or later installed" test_ref="oval:org.mitre.oval:tst:935"/>
        </criteria>
        <criteria operator="AND" comment="Configuration section">
          <criterion comment="dtlogin running" test_ref="oval:org.mitre.oval:tst:938"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14348" version="5" class="vulnerability">
      <metadata>
        <title>Argument injection vulnerability in IBM Lotus Notes 8.0.x before 8.0.2 FP6 and 8.5.x before 8.5.1 FP5 allows remote attackers to execute arbitrary code via a cai:// URL containing a --launcher.library option that specifies a UNC share pathname for a DLL file, aka SPR PRAD82YJW2.</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Lotus Notes</product>
        </affected>
        <reference ref_id="CVE-2011-0912" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0912" source="CVE"/>
        <description>Argument injection vulnerability in IBM Lotus Notes 8.0.x before 8.0.2 FP6 and 8.5.x before 8.5.1 FP5 allows remote attackers to execute arbitrary code via a cai:// URL containing a --launcher.library option that specifies a UNC share pathname for a DLL file, aka SPR PRAD82YJW2.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-12-16T09:51:41.000-05:00">
              <contributor organization="DTCC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2011-12-19T15:44:08.369-05:00">DRAFT</status_change>
            <status_change date="2012-01-09T04:00:17.643-05:00">INTERIM</status_change>
            <status_change date="2012-01-30T04:00:31.598-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:14348 - registry_tests replaced with file_tests because registry path was compared with version" date="2015-05-29T11:02:00.629-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-05-29T11:05:02.656-04:00">INTERIM</status_change>
            <status_change date="2015-06-15T04:00:08.958-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 8.5.1.4 and is greater than or equal to 8.0.1">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 8.5.1.4" test_ref="oval:org.mitre.oval:tst:138083"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 8.0.1" test_ref="oval:org.mitre.oval:tst:138392"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14314" version="5" class="vulnerability">
      <metadata>
        <title>AntiXSS Library Bypass Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Anti-Cross Site Scripting Library V3.x</product>
          <product>Microsoft Anti-Cross Site Scripting Library V4.0</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2012-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0007"/>
        <description>The Microsoft Anti-Cross Site Scripting (AntiXSS) Library 3.x and 4.0 does not properly evaluate characters after the detection of a Cascading Style Sheets (CSS) escaped character, which allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML input, aka "AntiXSS Library Bypass Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2012-01-10T13:00:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2012-01-13T18:25:32.666-05:00">DRAFT</status_change>
            <status_change date="2012-01-30T04:00:30.169-05:00">INTERIM</status_change>
            <status_change date="2012-02-20T04:00:04.880-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:1436 - vulnerabilities for VMware and inventories for VMware Workstation, VMware View and VMware Player." date="2013-06-21T12:00:00.019-04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-06-21T12:13:31.428-04:00">INTERIM</status_change>
            <status_change date="2013-07-08T04:01:10.476-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Anti-Cross Site Scripting Library 3.x or 4.0 is installed" test_ref="oval:org.mitre.oval:tst:77867"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1431" version="6" class="vulnerability">
      <metadata>
        <title>Win2K Graphics Rendering Engine Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-4560" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4560"/>
        <description>The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbitrary code via a Windows Metafile (WMF) format image with a crafted SETABORTPROC GDI Escape function call, related to the Windows Picture and Fax Viewer (SHIMGVW.DLL), a different vulnerability than CVE-2005-2123 and CVE-2005-2124, and as originally discovered in the wild on unionseek.com.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-01-07T07:15:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-01-12T09:25:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-02-01T09:08:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:15.598-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:48.356-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1431 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:41.063-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:59.302-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="the version of Gdi32.dll is less than 5.0.2195.7073" test_ref="oval:org.mitre.oval:tst:943"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14309" version="7" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in rtfsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted link in a .rtf attachment, aka SPR PRAD8823JQ.</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Lotus Notes</product>
        </affected>
        <reference ref_id="CVE-2011-1214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1214" source="CVE"/>
        <description>Stack-based buffer overflow in rtfsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted link in a .rtf attachment, aka SPR PRAD8823JQ.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-12-16T09:51:46.000-05:00">
              <contributor organization="DTCC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2011-12-19T15:44:13.930-05:00">DRAFT</status_change>
            <status_change date="2012-01-09T04:00:15.269-05:00">INTERIM</status_change>
            <status_change date="2012-01-30T04:00:29.654-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.altx-soft.oval:ste:18430 - contains tests with modified comments and all dependences" date="2014-02-13T12:19:00.287-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-13T12:22:40.167-05:00">INTERIM</status_change>
            <status_change date="2014-03-03T04:00:43.061-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:14309 - registry_tests replaced with file_tests because registry path was compared with version" date="2015-05-29T11:02:00.629-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-05-29T11:05:02.149-04:00">INTERIM</status_change>
            <status_change date="2015-06-15T04:00:08.643-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 8.5.2.2 and is greater than or equal to 8.0.0">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 8.5.2.2" test_ref="oval:org.mitre.oval:tst:138913"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 8.0.0" test_ref="oval:org.mitre.oval:tst:138507"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 7.0.4 and is greater than or equal to 7.0.0">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 7.0.4" test_ref="oval:org.mitre.oval:tst:138653"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 7.0.0" test_ref="oval:org.mitre.oval:tst:138900"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 6.5.6 and is greater than or equal to 6.0.1">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 6.5.6" test_ref="oval:org.mitre.oval:tst:138776"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 6.0.1" test_ref="oval:org.mitre.oval:tst:138813"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 5.2 and is greater than or equal to 5:0a">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 5.2" test_ref="oval:org.mitre.oval:tst:138910"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 5:0a" test_ref="oval:org.mitre.oval:tst:138741"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 4.6 and is greater than or equal to 4.2.1">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 4.6" test_ref="oval:org.mitre.oval:tst:138685"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 4.2.1" test_ref="oval:org.mitre.oval:tst:138657"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 3.0.0.2 and is greater than or equal to 3.0.0.1">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 3.0.0.2" test_ref="oval:org.mitre.oval:tst:138223"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 3.0.0.1" test_ref="oval:org.mitre.oval:tst:138612"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:143" version="3" class="vulnerability">
      <metadata>
        <title>Microsoft IE Encoded Characters Information Disclosure</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1186" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1186"/>
        <description>Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded characters within a URL, which allows a remote attacker to steal potentially sensitive information from a user by redirecting the user to another site that has that information, aka "Encoded Characters Information Disclosure."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-27T05:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="Changed IE registry test to wrt-18">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:39.232-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:16.674-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="the version of mshtml.dll is less than 6.0.2722.900" negate="false" test_ref="oval:org.mitre.oval:tst:2884"/>
        <criterion comment="the patch q328970 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3117"/>
        <criterion comment="the patch q324929 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3116"/>
        <criterion comment="the patch q810847 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3115"/>
        <criterion comment="the patch q813489 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3114"/>
        <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14289" version="4" class="vulnerability" deprecated="true">
      <metadata>
        <title>DEPRECATED: kuddb2 in Tivoli Monitoring for DB2, as distributed in IBM DB2 9.7 FP1 on Linux, allows remote attackers to cause a denial of service (daemon crash) via a certain byte sequence.</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>IBM DB2 UDB</product>
        </affected>
        <reference ref_id="CVE-2010-0472" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0472" source="CVE"/>
        <description>kuddb2 in Tivoli Monitoring for DB2, as distributed in IBM DB2 9.7 FP1 on Linux, allows remote attackers to cause a denial of service (daemon crash) via a certain byte sequence.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-12-16T09:51:32.000-05:00">
              <contributor organization="DTCC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2011-12-19T15:44:13.207-05:00">DRAFT</status_change>
            <status_change date="2012-01-09T04:00:13.273-05:00">INTERIM</status_change>
            <status_change date="2012-01-30T04:00:28.126-05:00">ACCEPTED</status_change>
            <modified comment="Linux vulnerability being checked on Windows platform." date="2013-07-18T09:09:13.004-04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-07-18T09:09:13.004-04:00">DEPRECATED</status_change>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Determine if the version of IBM DB2 UDB is equal to 9.7.0.1">
          <extend_definition comment="IBM DB2 UDB is installed" definition_ref="oval:org.mitre.oval:def:12505"/>
          <criterion comment="Determine if the version of IBM DB2 UDB is equal to 9.7.0.1" test_ref="oval:org.mitre.oval:tst:77535"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12505" version="3" class="inventory">
      <metadata>
        <title>IBM DB2 UDB is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>IBM DB2</product>
        </affected>
        <reference ref_id="cpe:/a:ibm:db2" source="CPE"/>
        <description>IBM DB2 UDB is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2011-02-25T10:21:36">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2011-02-28T09:40:31.670-05:00">DRAFT</status_change>
            <status_change date="2011-03-21T04:00:12.165-04:00">INTERIM</status_change>
            <status_change date="2011-04-11T04:00:09.587-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if IBM DB2 UDB is installed" test_ref="oval:org.mitre.oval:tst:42372"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1424" version="6" class="vulnerability">
      <metadata>
        <title>Server 2003 DirectShow Malicious avi File Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>DirectX</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2128" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2128"/>
        <description>QUARTZ.DLL in Microsoft Windows Media Player 9 allows remote attackers to write a null byte to arbitrary memory via an AVI file with a crafted strn element with a modified length value.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-10-12T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-10-19T05:46:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:06.257-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:57.861-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:1047 - obj/ste updates to conform to authoring style guide" date="2013-03-26T09:53:00.500-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-03-26T09:56:05.770-04:00">INTERIM</status_change>
            <status_change date="2013-04-15T04:00:10.357-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software section">
        <criteria operator="AND" comment="DirectX packaged with Windows Server 2003 has DirectShow Vulnerability">
          <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
          <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
          <criterion comment="the version of Quartz.dll is greater than or equal to 6.4.3790.0" test_ref="oval:org.mitre.oval:tst:951"/>
          <criterion comment="the version of Quartz.dll is less than 6.4.3790.399" test_ref="oval:org.mitre.oval:tst:950"/>
        </criteria>
        <criteria operator="AND" comment="Standalone DirectX 8 has DirectShow Vulnerability">
          <criterion comment="DirectX 8.x Installed" test_ref="oval:org.mitre.oval:tst:1173"/>
          <criterion comment="the version of Quartz.dll is less than 6.3.1.889" test_ref="oval:org.mitre.oval:tst:1121"/>
        </criteria>
        <criteria operator="AND" comment="Standalone DirectX 9 has DirectShow Vulnerability">
          <criterion comment="DirectX 9.x Installed" test_ref="oval:org.mitre.oval:tst:1120"/>
          <criterion comment="the version of Quartz.dll is less than 6.3.1.889" test_ref="oval:org.mitre.oval:tst:1121"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14238" version="7" class="vulnerability">
      <metadata>
        <title>Buffer overflow in kvarcve.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted .zip attachment, aka SPR PRAD8E3NSP. NOTE: some of these details are obtained from third party information.</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Lotus Notes</product>
        </affected>
        <reference ref_id="CVE-2011-1218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1218" source="CVE"/>
        <description>Buffer overflow in kvarcve.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a crafted .zip attachment, aka SPR PRAD8E3NSP. NOTE: some of these details are obtained from third party information.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-12-16T09:51:54.000-05:00">
              <contributor organization="DTCC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2011-12-19T15:44:07.172-05:00">DRAFT</status_change>
            <status_change date="2012-01-09T04:00:11.745-05:00">INTERIM</status_change>
            <status_change date="2012-01-30T04:00:26.951-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.altx-soft.oval:ste:18430 - contains tests with modified comments and all dependences" date="2014-02-13T12:19:00.287-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-13T12:22:41.660-05:00">INTERIM</status_change>
            <status_change date="2014-03-03T04:00:42.240-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:14238 - registry_tests replaced with file_tests because registry path was compared with version" date="2015-05-29T11:02:00.629-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-05-29T11:05:01.916-04:00">INTERIM</status_change>
            <status_change date="2015-06-15T04:00:08.338-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 8.5.2.2 and is greater than or equal to 8.0.0">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 8.5.2.2" test_ref="oval:org.mitre.oval:tst:138913"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 8.0.0" test_ref="oval:org.mitre.oval:tst:138507"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 7.0.4 and is greater than or equal to 7.0.0">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 7.0.4" test_ref="oval:org.mitre.oval:tst:138653"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 7.0.0" test_ref="oval:org.mitre.oval:tst:138900"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 6.5.6 and is greater than or equal to 6.0.1">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 6.5.6" test_ref="oval:org.mitre.oval:tst:138776"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 6.0.1" test_ref="oval:org.mitre.oval:tst:138813"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 5.2 and is greater than or equal to 5:0a">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 5.2" test_ref="oval:org.mitre.oval:tst:138910"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 5:0a" test_ref="oval:org.mitre.oval:tst:138741"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 4.6 and is greater than or equal to 4.2.1">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 4.6" test_ref="oval:org.mitre.oval:tst:138685"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 4.2.1" test_ref="oval:org.mitre.oval:tst:138657"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 3.0.0.2 and is greater than or equal to 3.0.0.1">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 3.0.0.2" test_ref="oval:org.mitre.oval:tst:138223"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 3.0.0.1" test_ref="oval:org.mitre.oval:tst:138612"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1423" version="5" class="vulnerability">
      <metadata>
        <title>MHT Memory Corruption Vulnerability (WinS03)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2385" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2385"/>
        <description>Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows user-assisted remote attackers to execute arbitrary code via a crafted web page that triggers memory corruption when it is saved as a multipart HTML (.mht) file.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:18.563-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:06.736-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:54.392-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:42.751-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:06.527-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:57.571-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="Win2K/XP/2003 is patched" negate="true" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.3790.536" negate="false" test_ref="oval:org.mitre.oval:tst:952"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14203" version="7" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in xlssr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a malformed BIFF record in a .xls Excel spreadsheet attachment, aka SPR PRAD8E3HKR.</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Lotus Notes</product>
        </affected>
        <reference ref_id="CVE-2011-1512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1512" source="CVE"/>
        <description>Heap-based buffer overflow in xlssr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a malformed BIFF record in a .xls Excel spreadsheet attachment, aka SPR PRAD8E3HKR.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-12-16T09:51:57.000-05:00">
              <contributor organization="DTCC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2011-12-19T15:44:12.711-05:00">DRAFT</status_change>
            <status_change date="2012-01-09T04:00:10.856-05:00">INTERIM</status_change>
            <status_change date="2012-01-30T04:00:26.236-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.altx-soft.oval:ste:18430 - contains tests with modified comments and all dependences" date="2014-02-13T12:19:00.287-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-13T12:22:41.573-05:00">INTERIM</status_change>
            <status_change date="2014-03-03T04:00:42.019-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:14203 - registry_tests replaced with file_tests because registry path was compared with version" date="2015-05-29T11:02:00.629-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-05-29T11:05:02.978-04:00">INTERIM</status_change>
            <status_change date="2015-06-15T04:00:08.022-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 8.5.2.2 and is greater than or equal to 8.0.0">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 8.5.2.2" test_ref="oval:org.mitre.oval:tst:138913"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 8.0.0" test_ref="oval:org.mitre.oval:tst:138507"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 7.0.4 and is greater than or equal to 7.0.0">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 7.0.4" test_ref="oval:org.mitre.oval:tst:138653"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 7.0.0" test_ref="oval:org.mitre.oval:tst:138900"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 6.5.6 and is greater than or equal to 6.0.1">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 6.5.6" test_ref="oval:org.mitre.oval:tst:138776"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 6.0.1" test_ref="oval:org.mitre.oval:tst:138813"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 5.2 and is greater than or equal to 5:0a">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 5.2" test_ref="oval:org.mitre.oval:tst:138910"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 5:0a" test_ref="oval:org.mitre.oval:tst:138741"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 4.6 and is greater than or equal to 4.2.1">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 4.6" test_ref="oval:org.mitre.oval:tst:138685"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 4.2.1" test_ref="oval:org.mitre.oval:tst:138657"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 3.0.0.2 and is greater than or equal to 3.0.0.1">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 3.0.0.2" test_ref="oval:org.mitre.oval:tst:138223"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 3.0.0.1" test_ref="oval:org.mitre.oval:tst:138612"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1420" version="6" class="vulnerability">
      <metadata>
        <title>Buffer Overflow in CDOSYS Message Processing (Win2K,SP4)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1987" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1987"/>
        <description>Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type" string.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-10-12T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-10-19T05:46:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-08-31T12:00:00.000-04:00" comment="removed an incorrect leading ^ from the value entity of ste:2402">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-08-31T00:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:18.350-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1420 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:37.292-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:57.283-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="Win2K/XP/2003 service pack 4 is installed" test_ref="oval:org.mitre.oval:tst:2569"/>
        <criterion comment="cdosys.dll is less than 6.1.3940.42" test_ref="oval:org.mitre.oval:tst:953"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1415" version="5" class="vulnerability">
      <metadata>
        <title>RHE4 Mozilla top.focus() Cross-Site Scripting Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2266" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2266"/>
        <description>Firefox before 1.0.5 and Mozilla before 1.7.9 allows a child frame to call top.focus and other methods in a parent frame, even when the parent is in a different domain, which violates the same origin policy and allows remote attackers to steal sensitive information such as cookies and passwords from web sites whose child frames do not verify that they are in the same domain as their parents.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-15T04:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-08-19T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11366 - Updated CPE reference, updated regular expression" date="2011-02-17T13:29:00.547-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2011-02-17T13:31:09.693-05:00">INTERIM</status_change>
            <status_change date="2011-03-07T04:00:12.313-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11366 - Corrected - right version for brlapi and brlapi-devel as specified by RHSA-2010:0181-5" date="2013-03-18T12:26:00.995-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-03-18T12:31:13.492-04:00">INTERIM</status_change>
            <status_change date="2013-04-08T04:00:10.390-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2652"/>
          <criterion comment="mozilla RPM is earlier than 37:1.7.10-1.4.1" negate="false" test_ref="oval:org.mitre.oval:tst:2651"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/mozilla is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2650"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1414" version="8" class="vulnerability">
      <metadata>
        <title>HTML Decoding Memory Corruption Vulnerability (Win2K)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2382" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2382"/>
        <description>Heap-based buffer overflow in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code via crafted UTF-8 encoded HTML that results in size discrepancies during conversion to Unicode, aka "HTML Decoding Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:18.013-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:05.786-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:40.114-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:42.558-05:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:11.835-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:48.126-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:28.349-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:56.599-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:38.742-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:16.320-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
        <criterion comment="the version of mshtml.dll is less than 5.0.3841.1900" negate="false" test_ref="oval:org.mitre.oval:tst:957"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1413" version="5" class="vulnerability">
      <metadata>
        <title>Distributed TIP Request Validation Process Permits Denial of Service (Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>TIP</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1980" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1980"/>
        <description>Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service hang) via a crafted Transaction Internet Protocol (TIP) message that causes DTC to repeatedly connect to a target IP and port number after an error occurs, aka the "Distributed TIP Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-10-12T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-10-19T05:46:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:57.292-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:42.378-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:28.656-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:56.274-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="Win2K/XP/2003 is patched" negate="true" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criteria operator="OR" comment="Either ole32.dll or rpcss.dll has a version less than 5.2.3790.374">
          <criterion comment="the version of ole32.dll is less than 5.2.3790.374" negate="false" test_ref="oval:org.mitre.oval:tst:959"/>
          <criterion comment="the version of rpcss.dll is less than 5.2.3790.374" negate="false" test_ref="oval:org.mitre.oval:tst:958"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1409" version="1" class="vulnerability">
      <metadata>
        <title>PC Netlink 2.0 Privilege Escalation Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>Solaris Management Console</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-4552" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4552"/>
        <description>The (1) slsmgr and (2) slsadmin programs in Sun Solaris PC NetLink 2.0 create temporary files insecurely, which allows local users to gain privileges.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-01-11T12:56:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-01-12T09:18:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-02-01T09:08:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 7,8,or 9 installed">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
        </criteria>
        <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
        <criterion comment="the SUNWlzas package (for slsadmin) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:963"/>
        <criterion comment="Patch 121332-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:962"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1407" version="4" class="vulnerability">
      <metadata>
        <title>HP-UX PMTUD Remote DoS (B.11.23-IPSEC)</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1192" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1192"/>
        <description>Unknown vulnerability in HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23, when running TCP/IP on IPv4, allows remote attackers to cause a denial of service via certain packets, related to the PMTU, a different vulnerability than CVE-2004-1060.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-02-01T11:45:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-03-09T12:19:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-04-06T06:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:27.446-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:08.618-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1407 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:05.915-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:10.558-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="700 Series OS Release 11.22">
          <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:2515"/>
          <criterion comment="HP Release B.11.22" test_ref="oval:org.mitre.oval:tst:1015"/>
        </criteria>
        <criterion comment="IPSec.IPSEC2-KRN is installed" test_ref="oval:org.mitre.oval:tst:966"/>
        <criteria operator="OR" comment="IPSec.IPSEC2-KRN version is under A.2.00.01 or TOUR version is under 3.0 or patch PHNE_32606 is not installed">
          <criterion comment="IPSec.IPSEC2-KRN with version less than A.2.00.01 is installed" test_ref="oval:org.mitre.oval:tst:965"/>
          <criterion comment="TOUR_PRODUCT.T-NET2-KRN with version less than A.03.00 is installed" test_ref="oval:org.mitre.oval:tst:964"/>
          <criterion negate="true" comment="Patch PHNE_32606 is installed" test_ref="oval:org.mitre.oval:tst:1441"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14052" version="4" class="vulnerability">
      <metadata>
        <title>Convert Buffer Overrun Vulnerability in SQL Server</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <product>Microsoft SQL Server 2000</product>
          <product>Microsoft SQL Server 2000 Desktop Engine (WMSDE)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0086" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0086"/>
        <description>Buffer overflow in the convert function in Microsoft SQL Server 2000 SP4, 2000 Desktop Engine (MSDE 2000) SP4, and 2000 Desktop Engine (WMSDE) allows remote authenticated users to execute arbitrary code via a crafted SQL expression.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-11-15T14:16:37">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2011-11-15T14:48:17.655-05:00">DRAFT</status_change>
            <modified comment="EDITED oval:org.mitre.oval:tst:9191 - Submitting 4 CVE definitions for MS08-040 bulletin that were missed in oval repo" date="2011-11-15T14:47:00.058-05:00">
              <contributor organization="SecPod Technologies">Pradeep R B</contributor>
            </modified>
            <status_change date="2011-12-05T04:00:22.151-05:00">INTERIM</status_change>
            <status_change date="2011-12-26T04:00:50.298-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="SQL Server 2000 SP4 - GDR">
          <criterion comment="SQL Server 2000 is installed" test_ref="oval:org.mitre.oval:tst:2977"/>
          <criterion comment="SQL Server 2000 GDR - the version of sqlservr.exe is greater than 2000.80.2000.0" test_ref="oval:org.mitre.oval:tst:9683"/>
          <criterion comment="Check if version of Sqlservr.exe is less than 2000.80.2050.0" test_ref="oval:org.mitre.oval:tst:77466"/>
        </criteria>
        <criteria operator="AND" comment="SQL Server 2000 SP4- QFE">
          <criterion comment="SQL Server 2000 is installed" test_ref="oval:org.mitre.oval:tst:2977"/>
          <criterion comment="SQL Server 2000 QFE - the version of sqlservr.exe is greater than 2000.80.2000.0" test_ref="oval:org.mitre.oval:tst:9191"/>
          <criterion comment="Check if version of Sqlservr.exe is less than 2000.80.2273.0" test_ref="oval:org.mitre.oval:tst:77541"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1405" version="6" class="vulnerability">
      <metadata>
        <title>Server 2003 Print Spooler Service Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Print Spooler Service</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1984" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1984"/>
        <description>Buffer overflow in the Print Spooler service (Spoolsv.exe) for Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via a malicious message.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-09-19T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Matthew Burton</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrections and update to POSIX compatibility for ste:868" date="2010-11-29T16:09:00.337-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:12:03.244-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:33.649-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:17.928-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:55.008-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="Win2K/XP/2003 service pack 1 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:969"/>
        <criterion comment="the version of Spoolsv.exe is less than 5.2.3790.346" negate="false" test_ref="oval:org.mitre.oval:tst:968"/>
        <criterion comment="the patch KB896423 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1245"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14" version="1" class="vulnerability">
      <metadata>
        <title>Sun Solaris 8 XSun Color Database File Heap Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>Xsun</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0158" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0158"/>
        <description>Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a long -co (color database) command line argument.</description>
        <oval_repository>
          <dates>
            <submitted date="2002-08-23T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="File Xsun exists" negate="false" test_ref="oval:org.mitre.oval:tst:3109"/>
          <criterion comment="Patch 108652-52 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3108"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="File Xsun SGID and executable">
            <criterion comment="File Xsun SGID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:3107"/>
            <criterion comment="File Xsun SGID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:3106"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:13981" version="3" class="vulnerability">
      <metadata>
        <title>Microsoft Malware Protection Engine Vulnerability-I</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Antigen for Exchange</product>
          <product>Microsoft Antigen for SMTP Gateway</product>
          <product>Microsoft Forefront Security for Exchange Server</product>
          <product>Microsoft Forefront Security for SharePoint</product>
          <product>Microsoft Windows Defender</product>
          <product>Windows Live OneCare</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1437" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1437"/>
        <description>Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (engine hang and restart) via a crafted file, a different vulnerability than CVE-2008-1438.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-12-09T18:23:43">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2011-12-09T17:34:55.155-05:00">DRAFT</status_change>
            <status_change date="2011-12-26T04:00:37.472-05:00">INTERIM</status_change>
            <status_change date="2012-01-16T04:00:46.641-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Windows Live OneCare">
          <extend_definition comment="Microsoft Windows Live OneCare is installed" definition_ref="oval:org.mitre.oval:def:14185"/>
          <criterion comment="Check if Live OneCare EngineVersion is less than 1.1.3520.0" test_ref="oval:org.mitre.oval:tst:77776"/>
        </criteria>
        <criteria operator="AND" comment="Microsoft Windows Defender">
          <extend_definition comment="Microsoft Windows Defender is installed" definition_ref="oval:org.mitre.oval:def:14263"/>
          <criterion comment="Check if Windows Defender EngineVersion is less than 1.1.3520.0" test_ref="oval:org.mitre.oval:tst:77823"/>
        </criteria>
        <criteria operator="AND" comment="Microsoft Forefront Security for SharePoint">
          <extend_definition comment="Microsoft Forefront Security for SharePoint is installed" definition_ref="oval:org.mitre.oval:def:14529"/>
          <criterion comment="Check if Forefront Security for SharePoint EngineVersion is less than 0.1.13.192" test_ref="oval:org.mitre.oval:tst:77719"/>
        </criteria>
        <criteria operator="AND" comment="Microsoft Forefront Security for Exchange Server">
          <extend_definition comment="Microsoft Forefront Security for Exchange Server is installed" definition_ref="oval:org.mitre.oval:def:14468"/>
          <criterion comment="Check if Forefront Security for Exchange Server EngineVersion is less than 0.1.13.192" test_ref="oval:org.mitre.oval:tst:77774"/>
        </criteria>
        <criteria operator="AND" comment="Microsoft Antigen for Exchange">
          <extend_definition comment="Microsoft Antigen for Exchange is installed" definition_ref="oval:org.mitre.oval:def:14520"/>
          <criterion comment="Check if Antigen for Exchange EngineVersion is less than 0.1.13.192" test_ref="oval:org.mitre.oval:tst:77829"/>
        </criteria>
        <criteria operator="AND" comment="Microsoft Antigen for SMTP Gateway">
          <extend_definition comment="Microsoft Antigen for SMTP Gateway is installed" definition_ref="oval:org.mitre.oval:def:14251"/>
          <criterion comment="Check if Antigen for SMTP Gateway EngineVersion is less than 0.1.13.192" test_ref="oval:org.mitre.oval:tst:77570"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14529" version="3" class="inventory">
      <metadata>
        <title>Microsoft Forefront Security for SharePoint is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Forefront Security for SharePoint</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:forefront_security_for_sharepoint"/>
        <description>Microsoft Forefront Security for SharePoint is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-12-09T16:11:37">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2011-12-09T17:34:54.386-05:00">DRAFT</status_change>
            <status_change date="2011-12-26T04:02:48.347-05:00">INTERIM</status_change>
            <status_change date="2012-01-16T04:03:00.910-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Microsoft Forefront Security for SharePoint is installed" test_ref="oval:org.mitre.oval:tst:77468"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14520" version="3" class="inventory">
      <metadata>
        <title>Microsoft Antigen for Exchange is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Antigen for Exchange</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:antigen_for_exchange"/>
        <description>Microsoft Antigen for Exchange is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-12-09T10:57:56">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2011-12-09T17:34:53.185-05:00">DRAFT</status_change>
            <status_change date="2011-12-26T04:02:46.082-05:00">INTERIM</status_change>
            <status_change date="2012-01-16T04:02:58.754-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Microsoft Antigen for Exchange is installed" test_ref="oval:org.mitre.oval:tst:77816"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14468" version="3" class="inventory">
      <metadata>
        <title>Microsoft Forefront Security for Exchange Server is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Forefront Security for Exchange Server</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:forefront_security_for_exchange_server"/>
        <description>Microsoft Forefront Security for Exchange Server is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-12-09T18:41:38">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2011-12-09T17:34:54.644-05:00">DRAFT</status_change>
            <status_change date="2011-12-26T04:02:33.855-05:00">INTERIM</status_change>
            <status_change date="2012-01-16T04:02:48.886-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Microsoft Forefront Security for Exchange Server is installed" test_ref="oval:org.mitre.oval:tst:77631"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14263" version="5" class="inventory">
      <metadata>
        <title>Microsoft Windows Defender is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows 8</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <product>Microsoft Windows Defender</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:windows_defender"/>
        <description>Microsoft Windows Defender is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-12-09T17:29:19">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2011-12-09T17:34:54.128-05:00">DRAFT</status_change>
            <status_change date="2011-12-26T04:01:39.741-05:00">INTERIM</status_change>
            <status_change date="2012-01-16T04:01:51.984-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:14263 - Submission on Microsoft Bulletins for the month April-2013." date="2013-04-15T21:05:00.274-04:00">
              <contributor organization="SecPod Technologies">Bhavya K</contributor>
            </modified>
            <status_change date="2013-04-15T21:11:36.704-04:00">INTERIM</status_change>
            <status_change date="2013-05-06T04:01:16.560-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Microsoft Windows Defender is installed" test_ref="oval:org.mitre.oval:tst:77748"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14251" version="3" class="inventory">
      <metadata>
        <title>Microsoft Antigen for SMTP Gateway is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Antigen for SMTP Gateway</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:antigen_for_smtp_gateway"/>
        <description>Microsoft Antigen for SMTP Gateway is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-12-09T10:57:56">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2011-12-09T17:34:54.896-05:00">DRAFT</status_change>
            <status_change date="2011-12-26T04:01:35.292-05:00">INTERIM</status_change>
            <status_change date="2012-01-16T04:01:47.978-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Microsoft Antigen for SMTP Gateway is installed" test_ref="oval:org.mitre.oval:tst:77523"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:14185" version="3" class="inventory">
      <metadata>
        <title>Microsoft Windows Live OneCare is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Windows Live OneCare</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:windows_live_onecare"/>
        <description>Microsoft Windows Live OneCare is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-12-09T15:46:11">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2011-12-09T17:34:53.852-05:00">DRAFT</status_change>
            <status_change date="2011-12-26T04:01:16.172-05:00">INTERIM</status_change>
            <status_change date="2012-01-16T04:01:27.846-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Microsoft Windows Live OneCare is installed" test_ref="oval:org.mitre.oval:tst:77777"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1381" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability With Loading Arbitrary Kernel Modules in Solaris Kernel</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 2.6</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-2686" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2686"/>
        <description>Directory traversal vulnerability in the vfs_getvfssw function in Solaris 2.6, 7, 8, and 9 allows local users to load arbitrary kernel modules via crafted (1) mount or (2) sysfs system calls.  NOTE: this might be the same issue as CVE-2004-1767, but there are insufficient details to be sure.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-09-25T11:24:50.000-04:00">
              <contributor organization="Opsware, Inc.">Nicholas Hansen</contributor>
            </submitted>
            <status_change date="2007-09-27T10:35:10.155-04:00">DRAFT</status_change>
            <status_change date="2007-10-12T07:56:13.245-04:00">INTERIM</status_change>
            <status_change date="2007-10-28T20:27:10.742-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 7 (SPARC) meets Sun Alert 57479" negate="false">
          <extend_definition comment="Solaris 7 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:2107"/>
          <criterion comment="Patch 106541-29 or later installed" test_ref="oval:org.mitre.oval:tst:4002" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 57479" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 108528-27 or later installed" test_ref="oval:org.mitre.oval:tst:4228" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 57479" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 112233-11 or later installed" test_ref="oval:org.mitre.oval:tst:3814" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 7 (x86) meets Sun Alert 57479" negate="false">
          <extend_definition comment="Solaris 7 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2036"/>
          <criterion comment="Patch 106542-29 or later installed" test_ref="oval:org.mitre.oval:tst:3686" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 57479" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 108529-27 or later installed" test_ref="oval:org.mitre.oval:tst:4247" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 57479" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 112234-11 or later installed" test_ref="oval:org.mitre.oval:tst:3937" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 2.6 (SPARC) meets Sun Alert 57479" negate="false">
          <extend_definition comment="Solaris 2.6 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1361"/>
          <criterion comment="Patch 105181-37 or later installed" test_ref="oval:org.mitre.oval:tst:3794" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 2.6 (x86) meets Sun Alert 57479" negate="false">
          <extend_definition comment="Solaris 2.6 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1967"/>
          <criterion comment="Patch 105182-37 or later installed" test_ref="oval:org.mitre.oval:tst:3479" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2107" version="1" class="inventory">
      <metadata>
        <title>Solaris 7 (SPARC) is installed</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:sun:sunos:5.7::sparc"/>
        <description>The operating system installed on the system is Sun Solaris 7 for SPARC.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-12T08:00:00.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-07-16T08:59:43.660-04:00">DRAFT</status_change>
            <status_change date="2007-08-01T22:26:15.690-04:00">INTERIM</status_change>
            <status_change date="2007-08-20T08:04:40.447-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Solaris 7 Installed" test_ref="oval:org.mitre.oval:tst:3576"/>
        <criterion comment="sparc architecture" test_ref="oval:org.mitre.oval:tst:3237"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2036" version="1" class="inventory">
      <metadata>
        <title>Solaris 7 (x86) is installed</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:sun:sunos:5.7::ix86"/>
        <description>The operating system installed on the system is Sun Solaris 7 for x86.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-12T08:00:00.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-07-16T08:59:43.497-04:00">DRAFT</status_change>
            <status_change date="2007-08-01T22:26:15.456-04:00">INTERIM</status_change>
            <status_change date="2007-08-20T08:04:39.997-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Solaris 7 Installed" test_ref="oval:org.mitre.oval:tst:3576"/>
        <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3912"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1967" version="1" class="inventory">
      <metadata>
        <title>Solaris 2.6 (x86) is installed</title>
        <affected family="unix">
          <platform>Sun Solaris 2.6</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:sun:sunos:5.6::ix86"/>
        <description>The operating system installed on the system is Sun Solaris 2.6 for x86.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-09-25T11:24:50.000-04:00">
              <contributor organization="Opsware, Inc.">Nicholas Hansen</contributor>
            </submitted>
            <status_change date="2007-09-27T10:35:09.992-04:00">DRAFT</status_change>
            <status_change date="2007-10-12T07:56:13.373-04:00">INTERIM</status_change>
            <status_change date="2007-10-28T20:27:10.989-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Solaris 2.6 Installed" test_ref="oval:org.mitre.oval:tst:4234"/>
        <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3912"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1361" version="1" class="inventory">
      <metadata>
        <title>Solaris 2.6 (SPARC) is installed</title>
        <affected family="unix">
          <platform>Sun Solaris 2.6</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:sun:sunos:5.6::sparc"/>
        <description>The operating system installed on the system is Sun Solaris 2.6 for SPARC.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-09-25T11:24:50.000-04:00">
              <contributor organization="Opsware, Inc.">Nicholas Hansen</contributor>
            </submitted>
            <status_change date="2007-09-27T10:35:09.808-04:00">DRAFT</status_change>
            <status_change date="2007-10-12T07:56:12.824-04:00">INTERIM</status_change>
            <status_change date="2007-10-28T20:27:10.225-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Solaris 2.6 Installed" test_ref="oval:org.mitre.oval:tst:4234"/>
        <criterion comment="sparc architecture" test_ref="oval:org.mitre.oval:tst:3237"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:138" version="2" class="vulnerability">
      <metadata>
        <title>Evolution GtkHTML DoS via Malformed Message</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>GtkHTML</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0133" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0133"/>
        <description>GtkHTML, as included in Evolution before 1.2.4, allows remote attackers to cause a denial of service (crash) via certain malformed messages.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-02T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-05T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:41.366-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:16.094-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="gtkhtml version is less than 1.1.9-0.9" negate="false" test_ref="oval:org.mitre.oval:tst:2897"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:13796" version="7" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in assr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via crafted tag data in an Applix spreadsheet attachment, aka SPR PRAD8823A7.</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Lotus Notes</product>
        </affected>
        <reference ref_id="CVE-2011-1216" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1216" source="CVE"/>
        <description>Stack-based buffer overflow in assr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via crafted tag data in an Applix spreadsheet attachment, aka SPR PRAD8823A7.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-12-16T09:51:49.000-05:00">
              <contributor organization="DTCC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2011-12-19T15:44:14.657-05:00">DRAFT</status_change>
            <status_change date="2012-01-09T04:00:06.377-05:00">INTERIM</status_change>
            <status_change date="2012-01-30T04:00:22.085-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.altx-soft.oval:ste:18430 - contains tests with modified comments and all dependences" date="2014-02-13T12:19:00.287-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-13T12:22:42.073-05:00">INTERIM</status_change>
            <status_change date="2014-03-03T04:00:40.043-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:13796 - registry_tests replaced with file_tests because registry path was compared with version" date="2015-05-29T11:02:00.629-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-05-29T11:05:02.339-04:00">INTERIM</status_change>
            <status_change date="2015-06-15T04:00:07.569-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 8.5.2.2 and is greater than or equal to 8.0.0">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 8.5.2.2" test_ref="oval:org.mitre.oval:tst:138913"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 8.0.0" test_ref="oval:org.mitre.oval:tst:138507"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 7.0.4 and is greater than or equal to 7.0.0">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 7.0.4" test_ref="oval:org.mitre.oval:tst:138653"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 7.0.0" test_ref="oval:org.mitre.oval:tst:138900"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 6.5.6 and is greater than or equal to 6.0.1">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 6.5.6" test_ref="oval:org.mitre.oval:tst:138776"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 6.0.1" test_ref="oval:org.mitre.oval:tst:138813"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 5.2 and is greater than or equal to 5:0a">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 5.2" test_ref="oval:org.mitre.oval:tst:138910"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 5:0a" test_ref="oval:org.mitre.oval:tst:138741"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 4.6 and is greater than or equal to 4.2.1">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 4.6" test_ref="oval:org.mitre.oval:tst:138685"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 4.2.1" test_ref="oval:org.mitre.oval:tst:138657"/>
        </criteria>
        <criteria operator="AND" comment="Determine if the version of Lotus Notes is less than or equal to 3.0.0.2 and is greater than or equal to 3.0.0.1">
          <extend_definition comment="IBM Lotus Notes is installed" definition_ref="oval:org.mitre.oval:def:11999"/>
          <criterion comment="Determine if the version of Lotus Notes is less than or equal to 3.0.0.2" test_ref="oval:org.mitre.oval:tst:138223"/>
          <criterion comment="Determine if the version of Lotus Notes is greater than or equal to 3.0.0.1" test_ref="oval:org.mitre.oval:tst:138612"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11999" version="3" class="inventory">
      <metadata>
        <title>IBM Lotus Notes is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>IBM Lotus Notes</product>
        </affected>
        <reference ref_id="cpe:/a:ibm:lotus_notes" source="CPE"/>
        <description>IBM Lotus Notes is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2011-02-25T20:15:39">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2011-02-28T09:39:49.571-05:00">DRAFT</status_change>
            <status_change date="2011-03-21T04:00:04.256-04:00">INTERIM</status_change>
            <status_change date="2011-04-11T04:00:04.578-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if IBM Lotus Notes is installed" test_ref="oval:org.mitre.oval:tst:41876"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1374" version="1" class="vulnerability">
      <metadata>
        <title>Solaris Hosts are Vulnerable to a Denial of Service Induced by an Internet Transmission Control Protocol (TCP) "ACK Storm"</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3920" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3920"/>
        <description>The TCP implementation in Sun Solaris 8, 9, and 10 before 20060726 allows remote attackers to cause a denial of service (resource exhaustion) via a TCP packet with an incorrect sequence number, which triggers an ACK storm.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-10T12:25:26.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-13T13:57:13.981-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:27.040-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:40.046-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102206" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 116965-17 or later installed" test_ref="oval:org.mitre.oval:tst:3268" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102206" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 118305-07 or later installed" test_ref="oval:org.mitre.oval:tst:4029" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102206" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 118833-12 or later installed" test_ref="oval:org.mitre.oval:tst:3185" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102206" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 116966-16 or later installed" test_ref="oval:org.mitre.oval:tst:3767" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102206" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 117470-06 or later installed" test_ref="oval:org.mitre.oval:tst:3792" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102206" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 118855-10 or later installed" test_ref="oval:org.mitre.oval:tst:4131" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1372" version="1" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability in the Solaris 10 Loopback FileSystem (LOFS) May Allow Files in a Non-global Zone to be Moved or Renamed From a Read-Only Fileystem</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0668" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0668"/>
        <description>The Loopback Filesystem (LOFS) in Sun Solaris 10 allows local users in a non-global zone to move and rename files in a read-only filesystem, which could lead to a denial of service.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-10T12:25:20.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-13T13:57:11.515-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:26.948-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:39.943-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102699" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 118833-28 or later installed" test_ref="oval:org.mitre.oval:tst:3688" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102699" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 118855-28 or later installed" test_ref="oval:org.mitre.oval:tst:3526" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1371" class="vulnerability" version="2">
      <metadata>
        <title>Outlook Web Access Script Injection Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Exchange Server</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0220" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0220"/>
        <description>Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2000 SP3, and 2003 SP1 and SP2 allows remote attackers to execute arbitrary scripts, spoof content, or obtain sensitive information via certain UTF-encoded, script-based e-mail attachments, involving an "incorrectly handled UTF character set label".</description>
        <oval_repository>
          <dates>
            <submitted date="2007-05-09T10:04:48">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2007-05-09T12:53:06-04:00">DRAFT</status_change>
            <status_change date="2007-05-31T15:26:32.784-04:00">INTERIM</status_change>
            <status_change date="2007-06-15T11:07:34.618-04:00">ACCEPTED</status_change>
            <modified comment="References registry value for Common Files directory due to multilingual support" date="2008-04-14T11:07:00.679-04:00">
              <contributor organization="GFI Software">Clifford Farrugia</contributor>
            </modified>
            <status_change date="2008-04-14T12:26:45.813-04:00">INTERIM</status_change>
            <status_change date="2008-05-05T04:00:09.995-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria comment="Microsoft Exchange 2000 Server Service Pack 3" operator="AND">
          <extend_definition comment="Microsoft Exchange 2000 Server Service Pack 3 is installed" definition_ref="oval:org.mitre.oval:def:1858"/>
          <criterion comment="the version of Cdoex.dll is less than 6.0.6619.12" test_ref="oval:org.mitre.oval:tst:3975"/>
        </criteria>
        <criteria comment="Microsoft Exchange Server 2003 Service Pack 1" operator="AND">
          <extend_definition comment="Microsoft Exchange Server 2003 Service Pack 1 is installed" definition_ref="oval:org.mitre.oval:def:1672"/>
          <criterion comment="the version of Cdoex.dll is less than 6.5.7235.2" test_ref="oval:org.mitre.oval:tst:3925"/>
        </criteria>
        <criteria comment="Microsoft Exchange Server 2003 Service Pack 2" operator="AND">
          <extend_definition comment="Microsoft Exchange Server 2003 Service Pack 2 is installed" definition_ref="oval:org.mitre.oval:def:1869"/>
          <criterion comment="the version of Cdoex.dll is less than 6.5.7652.24" test_ref="oval:org.mitre.oval:tst:3618"/>
        </criteria>
        <criteria comment="Microsoft Exchange Server 2007" operator="AND">
          <extend_definition comment="Microsoft Exchange Server 2007 is installed" definition_ref="oval:org.mitre.oval:def:1641"/>
          <criterion comment="the version of Cdoex.dll is less than 8.0.709.0" test_ref="oval:org.mitre.oval:tst:4122"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1869" version="6" class="inventory">
      <metadata>
        <title>Microsoft Exchange Server 2003 Service Pack 2 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Exchange Server 2003</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:exchange_server:2003:sp2"/>
        <description>Exchange Server 2003 SP2 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-05-09T10:04:48">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2007-05-09T12:53:06-04:00">DRAFT</status_change>
            <status_change date="2007-05-31T15:26:36.384-04:00">INTERIM</status_change>
            <status_change date="2007-06-15T11:07:36.442-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.345-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:48:05.799-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:03.015-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1869 - Updated CPEs for Microsoft Exchange Server." date="2011-03-29T13:58:00.209-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-03-29T13:58:51.723-04:00">INTERIM</status_change>
            <status_change date="2011-04-18T04:00:35.205-04:00">ACCEPTED</status_change>
            <status_change date="2012-03-05T14:24:02.087-05:00">INTERIM</status_change>
            <modified comment="Added Windows Server 2008 R2 platform" date="2012-03-05T14:24:02.087-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2012-03-26T04:02:58.827-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Exchange Server 2003,SP2 is installed." test_ref="oval:org.mitre.oval:tst:1202"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1858" version="4" class="inventory">
      <metadata>
        <title>Microsoft Exchange Server 2000 Service Pack 3 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:exchange_server:2000:sp3"/>
        <description>Exchange Server 2000SP3 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-05-09T10:04:48">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2007-05-09T12:53:06-04:00">DRAFT</status_change>
            <status_change date="2007-05-31T15:26:36.002-04:00">INTERIM</status_change>
            <status_change date="2007-06-15T11:07:36.100-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.427-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:50:41.823-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:02.829-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1858 - Updated CPEs for Microsoft Exchange Server." date="2011-03-29T13:58:00.209-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-03-29T13:58:53.580-04:00">INTERIM</status_change>
            <status_change date="2011-04-18T04:00:34.580-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Exchange Server 2000,SP3 is installed." test_ref="oval:org.mitre.oval:tst:992"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1672" version="4" class="inventory">
      <metadata>
        <title>Microsoft Exchange Server 2003 Service Pack 1 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:exchange_server:2003:sp1"/>
        <description>Exchange Server 2003 SP1 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-05-09T10:04:48">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2007-05-09T12:53:06-04:00">DRAFT</status_change>
            <status_change date="2007-05-31T15:26:34.555-04:00">INTERIM</status_change>
            <status_change date="2007-06-15T11:07:35.265-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.055-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:50:01.619-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:01.150-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1672 - Updated CPEs for Microsoft Exchange Server." date="2011-03-29T13:58:00.209-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-03-29T13:58:53.101-04:00">INTERIM</status_change>
            <status_change date="2011-04-18T04:00:34.286-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Exchange Server 2003,SP1 is installed." test_ref="oval:org.mitre.oval:tst:1108"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1641" version="5" class="inventory">
      <metadata>
        <title>Microsoft Exchange Server 2007 (no Service Pack) is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:exchange_server:2007:gold"/>
        <description>Exchange Server 2007 (no Service Pack) is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-05-09T10:04:48">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2007-05-09T12:53:06-04:00">DRAFT</status_change>
            <status_change date="2007-05-31T15:26:34.310-04:00">INTERIM</status_change>
            <status_change date="2007-06-15T11:07:35.112-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.621-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:51:06.842-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:00.696-05:00">ACCEPTED</status_change>
            <modified comment="The method it was using to check for lack of a service pack is not valid for Exchange 2007." date="2008-07-11T11:14:00.045-04:00">
              <contributor organization="Secure Elements, Inc.">Jeff Ito</contributor>
            </modified>
            <status_change date="2008-07-11T11:18:44.060-04:00">INTERIM</status_change>
            <status_change date="2008-07-28T04:00:05.662-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1641 - Updated CPEs for Microsoft Exchange Server." date="2011-03-29T13:58:00.209-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-03-29T13:58:54.126-04:00">INTERIM</status_change>
            <status_change date="2011-04-18T04:00:33.435-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Exchange Server 2007 is installed." test_ref="oval:org.mitre.oval:tst:8521"/>
        <criterion comment="No Exchange Server 2007 SP is installed." test_ref="oval:org.mitre.oval:tst:8498"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:137" version="3" class="vulnerability" deprecated="true">
      <metadata>
        <title>DEPRECATED: Windows NT IIS HTTP Header Field Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0150" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0150"/>
        <description>Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to spoof the safety check for HTTP headers and cause a denial of service or execute arbitrary code via HTTP header field values.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-14T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected to use a forward slash as the separator in the key." date="2007-05-07T15:59:00.430-04:00">
              <contributor organization="Secure Elements, Inc.">Glenn Strickland</contributor>
            </modified>
            <status_change date="2007-05-07T16:06:10.553-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:27.660-04:00">ACCEPTED</status_change>
            <modified comment="Use def:12124 instead" date="2011-01-20T10:07:59.672-05:00">
              <contributor organization="Symantec Corporation">Josh Turpin</contributor>
            </modified>
            <status_change date="2011-01-20T10:07:59.672-05:00">DEPRECATED</status_change>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="IIS 4.0 Major Version" negate="false" test_ref="oval:org.mitre.oval:tst:3099"/>
          <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
          <criterion comment="this is an NT Terminal Server" negate="true" test_ref="oval:org.mitre.oval:tst:3097"/>
          <criterion comment="the version of w3svc.dll is less than 4.2.775.1" negate="false" test_ref="oval:org.mitre.oval:tst:3096"/>
          <criterion comment="Patch Q319733 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3095"/>
          <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
          <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="asp.dll mapping exists" negate="false" test_ref="oval:org.mitre.oval:tst:3092"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:136" version="1" class="vulnerability">
      <metadata>
        <title>Microsoft Java Virtual Machine Security Bypass</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Virtual Machine (VM)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0111" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0111"/>
        <description>The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windows and Internet Explorer, allows remote attackers to bypass security checks and execute arbitrary code via a malicious Java applet, aka "Flaw in Microsoft VM Could Enable System Compromise."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="the version of msjava.dll is less than 5.0.3810.0" negate="false" test_ref="oval:org.mitre.oval:tst:2898"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:135" version="2" class="vulnerability">
      <metadata>
        <title>GnuPG Invalid User ID Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>GnuPG</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0255" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0255"/>
        <description>The key validation code in GnuPG before 1.2.2 does not properly determine the validity of keys with multiple user IDs and assigns the greatest validity of the most valid user ID, which prevents GnuPG from warning the encrypting user when a user ID does not have a trusted path.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-19T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:25.989-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:15.914-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="gnupg version is less than 1.2.1-4" negate="false" test_ref="oval:org.mitre.oval:tst:2901"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/bin/gnupg is executable">
            <criterion comment="/usr/bin/gnupg is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2900"/>
            <criterion comment="/usr/bin/gnupg is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2899"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1349" version="1" class="vulnerability">
      <metadata>
        <title>Server 2003 IE HTML Help ActiveX control Cross Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>HTML Help ActiveX Control</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1043" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1043"/>
        <description>Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help ActiveX Control (hhctrl.ocx) to open a Help popup window containing the PCHealth tools.htm file in the local zone and injecting Javascript to be executed, as demonstrated using "writehta.txt" and the ADODB recordset, which saves a .HTA file to the local system, aka the "HTML Help ActiveX control Cross Domain Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-03-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Matthew Burton</contributor>
            </submitted>
            <status_change date="2005-04-12T08:26:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-27T12:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
          <criterion comment="the patch kb890175 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:972"/>
          <criterion comment="the version of hhctrl.ocx is less than 5.2.3790.233" negate="false" test_ref="oval:org.mitre.oval:tst:971"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1348" version="1" class="vulnerability">
      <metadata>
        <title>RHE3 XBL Script Security Bypass Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2261" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2261"/>
        <description>Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts even when Javascript has been disabled, which makes it easier for remote attackers to bypass such protection.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-15T04:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-08-19T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2483"/>
          <criterion comment="mozilla RPM is earlier than 37:1.7.10-1.1.3.1" negate="false" test_ref="oval:org.mitre.oval:tst:2482"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/mozilla is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2650"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1347" version="3" class="vulnerability">
      <metadata>
        <title>FreeRADIUS Ascend-Send-Secret Server Crash</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>FreeRADIUS</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0938" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0938"/>
        <description>FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (server crash) by sending an Ascend-Send-Secret attribute without the required leading packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-11-22T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-01-12T12:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-02T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-23T09:25:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.853-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:54:56.468-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:11.346-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="FreeRADIUS rpm older than 1.0.1-1" negate="false" test_ref="oval:org.mitre.oval:tst:974"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="radiusd is listening on the network" negate="false" test_ref="oval:org.mitre.oval:tst:973"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1346" version="1" class="vulnerability">
      <metadata>
        <title>Apache mod_ssl CRL off-by-one DoS</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1268"/>
        <description>Off-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache, when configured to use a CRL, allows remote attackers to cause a denial of service (child process crash) via a CRL that causes a buffer overflow of one null byte.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-11-30T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-12-20T11:03:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-01-04T08:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-01-25T07:30:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.00, 11.11, or 11.23">
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.11">
            <criteria operator="AND" comment="700 Series OS Release 11.11">
              <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
              <criterion comment="HP Release B.11.11" negate="false" test_ref="oval:org.mitre.oval:tst:2514"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.11">
              <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
              <criterion comment="HP Release B.11.11" negate="false" test_ref="oval:org.mitre.oval:tst:2514"/>
            </criteria>
          </criteria>
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.00">
            <criteria operator="AND" comment="700 Series OS Release 11.00">
              <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
              <criterion comment="HP Release B.11.00" negate="false" test_ref="oval:org.mitre.oval:tst:2512"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.00">
              <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
              <criterion comment="HP Release B.11.00" negate="false" test_ref="oval:org.mitre.oval:tst:2512"/>
            </criteria>
          </criteria>
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.23">
            <criteria operator="AND" comment="700 Series OS Release 11.23">
              <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
              <criterion comment="HP Release B.11.23" negate="false" test_ref="oval:org.mitre.oval:tst:2511"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.23">
              <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
              <criterion comment="HP Release B.11.23" negate="false" test_ref="oval:org.mitre.oval:tst:2511"/>
            </criteria>
          </criteria>
        </criteria>
        <criterion comment="hpuxwsAPACHE is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2388"/>
        <criterion comment="hpuxwsAPACHE has a version greater than or equal (A|B).2.0.55.0" negate="true" test_ref="oval:org.mitre.oval:tst:2387"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1345" version="1" class="vulnerability">
      <metadata>
        <title>Leaking GSSAPI Credentials Vulnerability (B.11.23)</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
          <product>SecureShell</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2798" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2798"/>
        <description>sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods, which could cause those credentials to be exposed to untrusted users or hosts.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-01-11T12:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-01-12T09:18:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-02-01T09:08:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.23">
          <criteria operator="AND" comment="700 Series OS Release 11.23">
            <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
            <criterion comment="HP Release B.11.23" negate="false" test_ref="oval:org.mitre.oval:tst:2511"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 11.23">
            <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
            <criterion comment="HP Release B.11.23" negate="false" test_ref="oval:org.mitre.oval:tst:2511"/>
          </criteria>
        </criteria>
        <criterion comment="Secure_Shell.SECURE_SHELL is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1033"/>
        <criterion comment="Secure_Shell.SECURE_SHELL with version less than A.04.20.005 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1032"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1341" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the Authentication Mechanism for Solaris Management Console (SMC) May Lead to Escalation of Privileges</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3094" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3094"/>
        <description>Unspecified vulnerability in the authentication mechanism in Solaris Management Console (SMC) on Sun Solaris 8 through 10 before 20070605 allows remote authenticated users to execute arbitrary code via unspecified vectors, related to the WBEM server.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-08T14:30:00.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-06-08T21:28:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-06-26T20:49:49.371-04:00">INTERIM</status_change>
            <status_change date="2007-07-11T15:17:31.878-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="OR">
          <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102902" negate="false">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3437"/>
            <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
            <criterion comment="Patch 111313-05 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3715"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102902" negate="false">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3437"/>
            <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
            <criterion comment="Patch 111314-05 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3352"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102902" negate="false">
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3172"/>
            <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
            <criterion comment="Patch 112945-45 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3891"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102902" negate="false">
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3172"/>
            <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
            <criterion comment="Patch 114193-35 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3909"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102902" negate="false">
            <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3680"/>
            <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
            <criterion comment="Patch 121308-09 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3783"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102902" negate="false">
            <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3680"/>
            <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
            <criterion comment="Patch 121309-09 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3261"/>
          </criteria>
        </criteria>
        <criterion comment="Package SUNWwbmc installed" negate="false" test_ref="oval:org.mitre.oval:tst:3160"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:134" version="5" class="vulnerability">
      <metadata>
        <title>Windows Script Engine Heap Overflow (Test 4)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Windows Script Engine for Jscript</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0010" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0010"/>
        <description>Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript (JScript.dll) on various Windows operating system allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail that uses a large array index value that enables a heap-based buffer overflow attack.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-11-02T12:00:00.000-04:00"/>
            <status_change date="2004-11-03T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-12-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-01-06T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-06-02T12:00:00.000-04:00" comment="Added product">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-06-08T03:17:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-29T06:49:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-07-03T12:56:00.000-04:00" comment="Added negate=true attribute to criteria sub-block to fix conversion error from OVAL 4.2 to OVAL 5.0">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-07-03T12:56:00.000-04:00">INTERIM</status_change>
            <modified date="2006-09-06T15:59:00.000-04:00" comment="changed criteria operator to OR when checking file version and patch installation">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2006-09-27T12:28:40.970-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:134 - Consolidated def:200, 794, and 795 into def:134." date="2011-01-13T14:16:00.023-05:00">
              <contributor organization="The MITRE Corporation">Nate Przybyszewski</contributor>
            </modified>
            <status_change date="2011-01-13T14:17:24.364-05:00">INTERIM</status_change>
            <status_change date="2011-01-31T04:00:13.534-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="detected unpatched jscript.dll v5.1">
          <criterion comment="Jscript.dll for JScript 5.1 or later is installed" test_ref="oval:org.mitre.oval:tst:10504"/>
          <criterion comment="the version of jscript.dll is less than 5.1.0.8513" test_ref="oval:org.mitre.oval:tst:2907"/>
        </criteria>
        <criteria operator="AND" comment="detected unpatched jscript.dll v5.5">
          <criterion comment="the version of Jscript.dll is greater than or equal to 5.5.0.0" test_ref="oval:org.mitre.oval:tst:42062"/>
          <criterion comment="the version of jscript.dll is less than 5.5.0.8513" test_ref="oval:org.mitre.oval:tst:2906"/>
        </criteria>
        <criteria operator="AND" comment="detected unpatched jscript.dll v5.6">
          <criterion comment="the version of Jscript.dll is greater than or equal to 5.6.0.0" test_ref="oval:org.mitre.oval:tst:719"/>
          <criterion comment="the version of jscript.dll is less than 5.6.0.8513" test_ref="oval:org.mitre.oval:tst:2905"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1338" version="4" class="vulnerability">
      <metadata>
        <title>TIP Request Validation Process Permits Denial of Service (Win2k,SP4)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>TIP</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1979" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1979"/>
        <description>Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service exception and exit) via an "unexpected protocol command during the reconnection request," which is not properly handled by the Transaction Internet Protocol (TIP) functionality.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-10-12T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-10-19T05:46:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:56.417-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:53.864-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="Win2K/XP/2003 service pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2569"/>
        <criteria operator="OR" comment="Either ole32.dll or rpcss.dll has a version less than 5.0.2195.7059">
          <criterion comment="the version of ole32.dll is less than 5.0.2195.7059" negate="false" test_ref="oval:org.mitre.oval:tst:2568"/>
          <criterion comment="the version of rpcss.dll is less than 5.0.2195.7059" negate="false" test_ref="oval:org.mitre.oval:tst:2567"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1337" version="5" class="vulnerability">
      <metadata>
        <title>IE5.01,SP4 COM Object Instantiation Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1990" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1990"/>
        <description>Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not ActiveX controls, including (1) devenum.dll, (2) diactfrm.dll, (3) wmm2filt.dll, (4) fsusd.dll, (5) dmdskmgr.dll, (6) browsewm.dll, (7) browseui.dll, (8) shell32.dll, (9) mshtml.dll, (10) inetcfg.dll, (11) infosoft.dll, (12) query.dll, (13) syncui.dll, (14) clbcatex.dll, (15) clbcatq.dll, (16) comsvcs.dll, and (17) msconf.dll, which causes memory corruption, aka "COM Object Instantiation Memory Corruption Vulnerability," a different vulnerability than CVE-2005-2087.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-23T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-08-25T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed reference to patch kb896727 from criteria">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:42.633-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:41.634-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:50.012-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:15.136-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3831.1800" negate="false" test_ref="oval:org.mitre.oval:tst:2664"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1335" version="4" class="vulnerability">
      <metadata>
        <title>IE6 for XP,SP2 JPEG Image Rendering Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1988"/>
        <description>Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to execute arbitrary code via a web site or an HTML e-mail containing a crafted JPEG image that causes memory corruption, aka "JPEG Image Rendering Memory Corruption Vulnerability".</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-23T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-08-25T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed reference to patch kb896727 from criteria.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:49.704-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:14.793-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Internet Explorer 6.0 Installed XP SP2" negate="false" test_ref="oval:org.mitre.oval:tst:2403"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.2900.2722" negate="false" test_ref="oval:org.mitre.oval:tst:2331"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1334" version="7" class="vulnerability">
      <metadata>
        <title>IE6 for Server 2003 Drag-and-Drop Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0053" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0053"/>
        <description>Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the "Drag-and-Drop Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-03-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-03-23T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-13T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2005-04-21T10:35:00.000-04:00" comment="modified wrt-158 - removed note">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <modified date="2005-04-21T12:00:00.000-04:00" comment="modified wrt-158 - removed value to check against">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <modified date="2005-05-10T12:00:00.000-04:00" comment="modified wrt-51 - Comment updated to indicate IE 6.">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-06-01T03:30:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed test to check kb867282.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2621. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T20:21:00.819-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T20:22:31.621-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:41.132-05:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.795-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:47:48.069-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:00:58.856-05:00">ACCEPTED</status_change>
            <modified comment="Fix for regular expression" date="2010-01-13T14:40:00.667-05:00">
              <contributor organization="The MITRE Corporation">Dan Haynes</contributor>
            </modified>
            <status_change date="2010-01-13T14:41:04.867-05:00">INTERIM</status_change>
            <status_change date="2010-02-01T04:00:03.677-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:50.605-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:14.543-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6  for Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2801"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.3790.259" negate="false" test_ref="oval:org.mitre.oval:tst:978"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="Check for Drag&amp;Drop enabled and the patch kb834707(wildcard*)  missing">
            <criterion comment="Drag-and-Drop disabled when set to 3" negate="true" test_ref="oval:org.mitre.oval:tst:1316"/>
            <criterion comment="the patch kb834707(wildcard*) is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:977"/>
          </criteria>
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1333" version="2" class="vulnerability">
      <metadata>
        <title>WU-FTPD "glob-*" Remote DoS Vulnerability (B.11.00)</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
          <product>ftpd</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0256" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0256"/>
        <description>The wu_fnmatch function in wu_fnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service (CPU exhaustion by recursion) via a glob pattern with a large number of * (wildcard) characters, as demonstrated using the dir command.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-04-06T06:39:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-04-12T05:16:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:27.368-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:08.517-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.00">
          <criteria operator="AND" comment="700 Series OS Release 11.00">
            <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
            <criterion comment="HP Release B.11.00" negate="false" test_ref="oval:org.mitre.oval:tst:2512"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 11.00">
            <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
            <criterion comment="HP Release B.11.00" negate="false" test_ref="oval:org.mitre.oval:tst:2512"/>
          </criteria>
        </criteria>
        <criteria operator="OR" comment="INETSVCS-RUN without patch PHNE_34543 or later, OR WUFTP-26.INETSVCS-FTP with version less than B.11.11.01.006 is installed">
          <criteria operator="AND" comment="INETSVCS-RUN without patch PHNE_34543 or later">
            <criterion comment="InternetSrvcs.INETSVCS-RUN is installed" negate="false" test_ref="oval:org.mitre.oval:tst:981"/>
            <criterion comment="Patch PHNE_34543 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:980"/>
          </criteria>
          <criterion comment="WUFTP-26.INETSVCS-FTP with version less than B.11.11.01.006 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:979"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1332" version="8" class="vulnerability">
      <metadata>
        <title>Windows 2000 Certificate Validation Identity Spoofing Vulnerability (Test 1)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Certificate Validation</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0862" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0862"/>
        <description>The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Windows 98 through XP, Office for Mac, Internet Explorer for Mac, and Outlook Express for Mac, do not properly verify the Basic Constraints of intermediate CA-signed X.509 certificates, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack for SSL sessions, as originally reported for Internet Explorer and IIS.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <modified date="2004-07-13T12:00:00.000-04:00" comment="Added superceding patch info.">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2004-07-14T12:00:00.000-04:00" comment="Changed to DRAFT">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2004-08-04T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-08-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-03-07T12:00:00.000-04:00" comment="modified wrt-222 - changed pattern match">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-29T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-06-02T12:00:00.000-04:00" comment="Added product">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-06-08T03:17:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-29T06:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2878" date="2010-11-29T16:13:00.904-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:05.554-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:32.671-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:57.090-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:52.883-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="SP4 or later Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3073"/>
        </criteria>
        <criterion comment="the version of cryptdlg.dll is less than 5.0.1558.6608" negate="false" test_ref="oval:org.mitre.oval:tst:982"/>
        <criterion comment="the patch Q329115 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1231"/>
        <criterion comment="the patch kb835732 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1510"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1330" version="7" class="vulnerability">
      <metadata>
        <title>Windows 2000 IIS WebDAV Message Handler Denial of Service Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0718" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0718"/>
        <description>The WebDAV Message Handler for Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows remote attackers to cause a denial of service (memory and CPU exhaustion, application crash) via a PROPFIND request with an XML message containing XML elements with a large number of attributes.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-13T09:30:00.000-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </submitted>
            <status_change date="2004-10-13T01:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-10-27T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-11-17T10:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.950-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:50:55.656-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:00:58.541-05:00">ACCEPTED</status_change>
            <modified comment="Corrected and tightened regular expression in ste:2610" date="2010-12-02T11:46:00.307-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-12-02T11:47:27.969-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:32.316-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:53.552-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:52.485-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="AND" comment="Windows 2000 (sp5 or earlier) is installed">
            <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
            <criterion comment="Win2K/XP/2003 service pack 5 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2790"/>
          </criteria>
          <criterion comment="the version of httpext.dll is less than 5.0.2195.6958" negate="false" test_ref="oval:org.mitre.oval:tst:985"/>
          <criterion comment="the patch KB824151 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:984"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="WebDav is disabled(for iis 5.0)" negate="true" test_ref="oval:org.mitre.oval:tst:2953"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:133" version="2" class="vulnerability">
      <metadata>
        <title>GNU Ghostscript -dSAFER Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>GNU Ghostscript</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0354" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0354"/>
        <description>Unknown vulnerability in GNU Ghostscript before 7.07 allows attackers to execute arbitrary commands, even when -dSAFER is enabled, via a PostScript file that causes the commands to be executed from a malicious print job.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:42.628-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:15.718-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="ghostscript version is less than 7.05-32.1" negate="false" test_ref="oval:org.mitre.oval:tst:2911"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/bin/gs is executable">
            <criterion comment="/usr/bin/gs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2910"/>
            <criterion comment="/usr/bin/gs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2909"/>
            <criterion comment="/usr/bin/gs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2908"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1326" version="5" class="vulnerability">
      <metadata>
        <title>IE5.01,SP4 Java Proxy COM Object Instantiation Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2087"/>
        <description>Internet Explorer 5.01 SP4 up to 6 on various Windows operating systems, including IE 6.0.2900.2180 on Windows XP, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not ActiveX controls, as demonstrated using the JVIEW Profiler (Javaprxy.dll).  NOTE: the researcher says that the vendor could not reproduce this problem.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-18T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-08-25T04:00:00.000-04:00">DRAFT</status_change>
            <modified date="2005-09-08T04:00:00.000-04:00" comment="modified wet-2 - Corrected structure of path components.">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2005-09-28T01:05:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="This is fixed by MS05-038, which provides better test criteria. Changed test criteria accordingly.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:41.881-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:40.859-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:47.430-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:14.351-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3831.1800" negate="false" test_ref="oval:org.mitre.oval:tst:2664"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:13243" version="1" class="vulnerability">
      <metadata>
        <title>Multiple vulnerabilities in libfreetype, Xsun(1) and Xorg(1)</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1352" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1352"/>
        <description>Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which results in a heap overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-30T08:16:45.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-01T22:21:20.865-04:00">DRAFT</status_change>
            <status_change date="2007-08-20T08:04:38.404-04:00">INTERIM</status_change>
            <status_change date="2007-09-06T09:13:26.771-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion comment="Patch 119067-07 or later installed" test_ref="oval:org.mitre.oval:tst:3167" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 119060-24 or later installed" test_ref="oval:org.mitre.oval:tst:3231" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 125720-03 or later installed" test_ref="oval:org.mitre.oval:tst:4003" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion comment="Patch 112785-61 or later installed" test_ref="oval:org.mitre.oval:tst:3874" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 119059-25 or later installed" test_ref="oval:org.mitre.oval:tst:3577" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion comment="Patch 119068-07 or later installed" test_ref="oval:org.mitre.oval:tst:3216" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 112786-50 or later installed" test_ref="oval:org.mitre.oval:tst:3471" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert 102886" negate="false">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion comment="Patch 124833-02 or later installed" test_ref="oval:org.mitre.oval:tst:3278" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1323" version="6" class="vulnerability">
      <metadata>
        <title>Server 2003 Microsoft Data Access Components RDS.Dataspace Remote Code Execution Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Data Access Components</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0003" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0003"/>
        <description>Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsoft Data Access Components (MDAC) 2.7 and 2.8, allows remote attackers to execute arbitrary code via unknown attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-04-12T12:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-04-12T05:16:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:09:01.675-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:40.578-05:00">ACCEPTED</status_change>
            <modified comment="References registry value for Common Files directory due to multilingual support" date="2008-04-14T11:07:00.270-04:00">
              <contributor organization="GFI Software">Clifford Farrugia</contributor>
            </modified>
            <status_change date="2008-04-14T12:27:05.341-04:00">INTERIM</status_change>
            <status_change date="2008-05-05T04:00:09.544-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:50.477-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:51.262-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="Win2K/XP/2003 is patched" negate="true" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of msadco.dll is less than 2.80.1062.0" negate="false" test_ref="oval:org.mitre.oval:tst:987"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:132" version="3" class="vulnerability" deprecated="true">
      <metadata>
        <title>DEPRECATED: Windows NT IIS ASP Server-Side Include Function Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0149" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0149"/>
        <description>Buffer overflow in ASP Server-Side Include Function in IIS 4.0, 5.0 and 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via long file names.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-14T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected to use a forward slash as the separator in the key." date="2007-05-07T15:59:00.430-04:00">
              <contributor organization="Secure Elements, Inc.">Glenn Strickland</contributor>
            </modified>
            <status_change date="2007-05-07T16:06:11.194-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:27.371-04:00">ACCEPTED</status_change>
            <modified comment="Use def:12407 instead" date="2011-01-20T10:09:02.412-05:00">
              <contributor organization="Symantec Corporation">Josh Turpin</contributor>
            </modified>
            <status_change date="2011-01-20T10:09:02.412-05:00">DEPRECATED</status_change>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="IIS 4.0 Major Version" negate="false" test_ref="oval:org.mitre.oval:tst:3099"/>
          <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
          <criterion comment="this is an NT Terminal Server" negate="true" test_ref="oval:org.mitre.oval:tst:3097"/>
          <criterion comment="the version of w3svc.dll is less than 4.2.775.1" negate="false" test_ref="oval:org.mitre.oval:tst:3096"/>
          <criterion comment="Patch Q319733 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3095"/>
          <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
          <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="asp.dll mapping exists" negate="false" test_ref="oval:org.mitre.oval:tst:3092"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1319" version="4" class="vulnerability">
      <metadata>
        <title>IE6:XP,SP2 Web Folder Behaviors Cross-Domain Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1989" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1989"/>
        <description>Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to obtain information and possibly execute code when browsing from a web site to a web folder view using WebDAV, aka "Web Folder Behaviors Cross-Domain Vulnerability".</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-23T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-08-25T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed reference to patch kb896727 from criteria.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:45.327-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:14.128-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6.0 Installed XP SP2" negate="false" test_ref="oval:org.mitre.oval:tst:2403"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2900.2722" negate="false" test_ref="oval:org.mitre.oval:tst:2331"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1317" version="7" class="vulnerability">
      <metadata>
        <title>Server 2003 HTTPS Proxy Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2830" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2830"/>
        <description>Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext, which allows remote attackers to obtain sensitive information, aka "HTTPS Proxy Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-12-13T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-12-16T01:03:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-01-04T08:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-01-25T07:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:1051" date="2007-01-24T21:34:00.609-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-24T21:35:05.066-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:40.349-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:42.929-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:50.896-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:45.521-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:13.966-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Software section">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="Internet Explorer 6 is installed" test_ref="oval:org.mitre.oval:tst:1177"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.3790.449" test_ref="oval:org.mitre.oval:tst:1176"/>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1316" version="1" class="vulnerability">
      <metadata>
        <title>Exchange Server 5.0 TNEF Decoding Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Outlook</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0002" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0002"/>
        <description>Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-01-11T12:56:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-01-12T09:25:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-02-01T09:08:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="the version of Mdbmsg.dll greater than or equal 5.0.1460.9 (Exchange Server 5.0,SP2 is installed)." negate="false" test_ref="oval:org.mitre.oval:tst:990"/>
        <criterion comment="the version of Mdbmsg.dll is less than 5.0.1462.22" negate="false" test_ref="oval:org.mitre.oval:tst:989"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:13148" version="15" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Oracle VM VirtualBox related to Guest Additions for Windows</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Oracle VirtualBox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2011-2300" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2300"/>
        <description>Unspecified vulnerability in Oracle VM VirtualBox 4.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Guest Additions for Windows.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-10-11T15:20:33.178-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </submitted>
            <status_change date="2011-10-17T13:06:24.137-04:00">DRAFT</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:15629 - Found a few issues with the current inventory definition for VirtualBox and the vulnerability definition which uses it, and the fixes plus a bit more are attached. The core issue is that the registry key where the relevant information is stored has had 4 different values since version 3.0.0, with the most recent change causing the vulnerability definition to throw an error." date="2011-10-17T13:02:00.116-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-11-07T04:00:55.894-05:00">INTERIM</status_change>
            <status_change date="2011-11-28T04:00:32.967-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:13148 - Virtual Box Object fix." date="2013-04-26T15:19:00.059-04:00">
              <contributor organization="ALTX-SOFT">Sergey Artykhov</contributor>
            </modified>
            <status_change date="2013-04-26T15:20:57.822-04:00">INTERIM</status_change>
            <status_change date="2013-05-13T04:00:04.978-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:13148 - modified vulnerabilities of Oracle Virtualbox (part 1)" date="2013-09-03T10:20:00.215-04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-09-03T10:22:45.707-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:12025 - modified vulnerabilities of Oracle Virtualbox (part 3)" date="2013-09-03T10:59:00.280-04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-09-23T04:00:07.493-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:15297 - modificated vulnerabilities for VirtualBox" date="2013-12-05T10:43:00.197-05:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-12-05T10:45:12.122-05:00">INTERIM</status_change>
            <status_change date="2013-12-23T04:00:15.302-05:00">ACCEPTED</status_change>
            <status_change date="2013-12-23T04:00:11.465-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:13148 - New vulnerability(CVE-2013-5892) added and modified existing criteria" date="2014-01-30T14:45:00.034-05:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2014-01-30T14:49:21.695-05:00">INTERIM</status_change>
            <status_change date="2014-02-17T04:00:10.099-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="VirtualBox is installed" definition_ref="oval:org.mitre.oval:def:11581"/>
        <criterion comment="Check if Oracle VM VirtualBox is installed" test_ref="oval:org.mitre.oval:tst:42006"/>
        <criteria operator="AND" comment="Affected versions of VirtualBox">
          <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.0.0" test_ref="oval:org.mitre.oval:tst:88607"/>
          <criterion comment="Check if Oracle VM VirtualBox version is less than 4.1.0" test_ref="oval:org.mitre.oval:tst:100062"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1313" version="5" class="vulnerability">
      <metadata>
        <title>RHE4 Firefox and Mozilla Javascript Dialog Box Spoofing</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2268"/>
        <description>Firefox before 1.0.5 and Mozilla before 1.7.9 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-15T04:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-08-19T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11366 - Updated CPE reference, updated regular expression" date="2011-02-17T13:29:00.547-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2011-02-17T13:31:08.090-05:00">INTERIM</status_change>
            <status_change date="2011-03-07T04:00:11.701-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11366 - Corrected - right version for brlapi and brlapi-devel as specified by RHSA-2010:0181-5" date="2013-03-18T12:26:00.995-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-03-18T12:31:11.108-04:00">INTERIM</status_change>
            <status_change date="2013-04-08T04:00:09.503-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2652"/>
          <criterion comment="mozilla RPM is earlier than 37:1.7.10-1.4.1" negate="false" test_ref="oval:org.mitre.oval:tst:2651"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/mozilla is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2650"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1311" version="5" class="vulnerability">
      <metadata>
        <title>RHE4 Firefox InstallTrigger Callback Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2263" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2263"/>
        <description>The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of the new page and results in a same origin violation.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-15T04:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-08-19T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11366 - Updated CPE reference, updated regular expression" date="2011-02-17T13:29:00.547-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2011-02-17T13:31:07.180-05:00">INTERIM</status_change>
            <status_change date="2011-03-07T04:00:11.430-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11366 - Corrected - right version for brlapi and brlapi-devel as specified by RHSA-2010:0181-5" date="2013-03-18T12:26:00.995-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-03-18T12:31:09.730-04:00">INTERIM</status_change>
            <status_change date="2013-04-08T04:00:09.184-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2652"/>
          <criterion comment="mozilla RPM is earlier than 37:1.7.10-1.4.1" negate="false" test_ref="oval:org.mitre.oval:tst:2651"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/mozilla is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2650"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1310" version="7" class="vulnerability">
      <metadata>
        <title>TCP/IP IGMP v3 Denial of Service (Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0021" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0021"/>
        <description>Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang) via an IGMP packet with an invalid IP option, aka the "IGMP v3 DoS Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2006-02-17T07:36:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-02-22T08:27:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-03-09T12:19:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-04-06T06:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:59.951-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:40.171-05:00">ACCEPTED</status_change>
            <modified comment="Changing deprecated obj:563 to obj:588" date="2010-01-12T15:25:00.649-05:00">
              <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2010-01-12T15:25:47.845-05:00">INTERIM</status_change>
            <status_change date="2010-02-01T04:00:03.170-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1310 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:38.292-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:50.548-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of Tcpip.sys is less than 5.2.3790.468 (S03-Gold)" test_ref="oval:org.mitre.oval:tst:993"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:131" version="1" class="vulnerability">
      <metadata>
        <title>Heap Overflow in Solaris 7 xlock</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>xlock</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0652" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0652"/>
        <description>Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long (1) XFILESEARCHPATH or (2) XUSERFILESEARCHPATH environmental variable.</description>
        <oval_repository>
          <dates>
            <submitted date="2002-10-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="File xlock exists" negate="false" test_ref="oval:org.mitre.oval:tst:3130"/>
          <criterion comment="Patch 108376-30 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:2912"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="File xlock SUID and executable">
            <criterion comment="File xlock SUID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:3128"/>
            <criterion comment="File xlock SUID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:3127"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1308" version="5" class="vulnerability">
      <metadata>
        <title>IE5.01,SP4 Security Zone Restriction Bypass Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0054" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0054"/>
        <description>Internet Explorer 5.01, 5.5, and 6 allows remote attackers to spoof a less restrictive security zone and execute arbitrary code via an HTML page containing URLs that contain hostnames that have been double hex encoded, which are decoded twice to generate a malicious hostname, aka the "URL Decoding Zone Spoofing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-03-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-03-23T08:09:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-13T12:15:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-05-04T12:33:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed test to check kb867282.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:39.172-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:39.934-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:43.827-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:13.744-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3825.700" negate="false" test_ref="oval:org.mitre.oval:tst:994"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1307" version="3" class="vulnerability">
      <metadata>
        <title>Firefox/Mozilla Suite JavaScript Integer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2705" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2705"/>
        <description>Integer overflow in the JavaScript engine in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 might allow remote attackers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-11-11T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-12-12T10:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:2367" date="2007-02-26T08:32:00.241-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-26T08:32:39.676-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:2370" date="2007-03-06T07:46:00.064-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:47.593-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:1444" date="2007-04-23T12:05:00.911-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:19:59.289-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:1445" date="2007-04-23T12:05:00.720-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:53.182-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Suite version 1.7.10 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.10 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2535"/>
          <criterion comment="Mozilla Suite version 1.7.10 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2534"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.6 or earlier is installed">
          <criterion comment="Firefox version 1.0.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2533"/>
          <criterion comment="Mozilla Firefox version 1.0.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2532"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1306" version="4" class="vulnerability">
      <metadata>
        <title>Windows XP Media Player PNG Processing Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Windows Media Player 9</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1244"/>
        <description>Windows Media Player 9 allows remote attackers to execute arbitrary code via a PNG file containing large (1) width or (2) height values, aka the "PNG Processing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-02-16T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2005-02-18T12:00:00.000-04:00">DRAFT</status_change>
            <modified date="2005-02-22T10:00:00.000-04:00" comment="Added vulnerable configuration">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-03-09T07:56:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-29T07:59:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-08-28T12:00:00.000-04:00" comment="modified objects 733, 734, 735, 736, 738, and 739 to use xsi:nil instead of a .* pattern match">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-08-28T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:28:38.693-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:895. Set datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-12T20:40:00.220-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-12T20:42:15.361-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:39.669-05:00">ACCEPTED</status_change>
            <modified comment="Removed the leading &quot;\&quot; from the key." date="2008-02-04T10:03:00.486-05:00">
              <contributor organization="Hewlett-Packard">Jeff Cheng</contributor>
            </modified>
            <status_change date="2008-02-04T10:08:41.892-05:00">INTERIM</status_change>
            <modified comment="Removed the leading &quot;\&quot; from the key." date="2008-02-04T10:03:00.093-05:00">
              <contributor organization="Hewlett-Packard">Jeff Cheng</contributor>
            </modified>
            <modified comment="Removed the leading &quot;\&quot; from the key." date="2008-02-04T10:03:00.139-05:00">
              <contributor organization="Hewlett-Packard">Jeff Cheng</contributor>
            </modified>
            <modified comment="Removed the leading &quot;\&quot; from the key." date="2008-02-04T10:03:00.121-05:00">
              <contributor organization="Hewlett-Packard">Jeff Cheng</contributor>
            </modified>
            <modified comment="Removed the leading &quot;\&quot; from the key." date="2008-02-04T10:03:00.237-05:00">
              <contributor organization="Hewlett-Packard">Jeff Cheng</contributor>
            </modified>
            <modified comment="Removed the leading &quot;\&quot; from the key." date="2008-02-04T10:03:00.221-05:00">
              <contributor organization="Hewlett-Packard">Jeff Cheng</contributor>
            </modified>
            <modified comment="Removed the leading &quot;\&quot; from the key." date="2008-02-04T10:03:00.557-05:00">
              <contributor organization="Hewlett-Packard">Jeff Cheng</contributor>
            </modified>
            <status_change date="2008-02-25T04:00:05.690-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Software section">
          <criterion comment="Windows Media Player 9.0 installed" test_ref="oval:org.mitre.oval:tst:1004"/>
          <criterion comment="the version of wmp.dll is les than 9.0.0.3250" test_ref="oval:org.mitre.oval:tst:1003"/>
          <criterion negate="true" comment="The patch KB885492 is installed on Windows XP" test_ref="oval:org.mitre.oval:tst:1002"/>
        </criteria>
        <criteria operator="AND" comment="Configuration section">
          <criteria operator="AND" comment="The files .asx, .wax, .wvx, .wpl, .wmx, .wms, .wmz EXIST">
            <criterion comment=".asx EXISTS" test_ref="oval:org.mitre.oval:tst:1001"/>
            <criterion comment=".wax EXISTS" test_ref="oval:org.mitre.oval:tst:1000"/>
            <criterion comment=".wvx EXISTS" test_ref="oval:org.mitre.oval:tst:999"/>
            <criterion comment=".wpl EXISTS" test_ref="oval:org.mitre.oval:tst:998"/>
            <criterion comment=".wmx EXISTS" test_ref="oval:org.mitre.oval:tst:997"/>
            <criterion comment=".wms EXISTS" test_ref="oval:org.mitre.oval:tst:996"/>
            <criterion comment=".wmz EXISTS" test_ref="oval:org.mitre.oval:tst:995"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:13040" version="3" class="vulnerability">
      <metadata>
        <title>Endless Loop DoS in snabase.exe Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Host Integration Server 2004</product>
          <product>Microsoft Host Integration Server 2006</product>
          <product>Microsoft Host Integration Server 2009</product>
          <product>Microsoft Host Integration Server 2010</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2011-2007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2007"/>
        <description>Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server service outage) via crafted TCP or UDP traffic, aka "Endless Loop DoS in snabase.exe Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2011-10-11T13:00:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2011-10-17T09:26:40.283-04:00">DRAFT</status_change>
            <status_change date="2011-11-07T04:00:49.179-05:00">INTERIM</status_change>
            <status_change date="2011-11-28T04:00:23.557-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Microsoft Host Integration Server 2004 SP1">
          <extend_definition comment="Microsoft Host Integration Server 2004 SP1 is installed" definition_ref="oval:org.mitre.oval:def:5430"/>
          <criterion comment="Snadmod.dll version is less than 6.0.2445.0" test_ref="oval:org.mitre.oval:tst:43888"/>
        </criteria>
        <criteria operator="AND" comment="Microsoft Host Integration Server 2006">
          <extend_definition comment="Microsoft Host Integration Server 2006 is installed" definition_ref="oval:org.mitre.oval:def:5373"/>
          <criterion comment="Snadmod.dll version is less than 7.0.4220.0" test_ref="oval:org.mitre.oval:tst:44254"/>
        </criteria>
        <criteria operator="AND" comment="Microsoft Host Integration Server 2009">
          <extend_definition comment="Microsoft Host Integration Server 2009 is installed" definition_ref="oval:org.mitre.oval:def:12766"/>
          <criteria operator="OR" comment="GDR or LDR Service branch">
            <criterion comment="Snadmod.dll version is less than 8.0.3850.1" test_ref="oval:org.mitre.oval:tst:44027"/>
            <criteria operator="AND" comment="LDR">
              <criterion comment="Snadmod.dll version is less than 8.0.3872.2" test_ref="oval:org.mitre.oval:tst:43857"/>
              <criterion comment="Snadmod.dll version is greater than or equal to 8.0.3870.0" test_ref="oval:org.mitre.oval:tst:44243"/>
            </criteria>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Microsoft Host Integration Server 2010">
          <extend_definition comment="Microsoft Host Integration Server 2010 is installed" definition_ref="oval:org.mitre.oval:def:12165"/>
          <criteria operator="OR" comment="GDR or LDR Service branch">
            <criterion comment="Snadmod.dll version is less than 8.5.4317.1" test_ref="oval:org.mitre.oval:tst:44232"/>
            <criteria operator="AND" comment="LDR">
              <criterion comment="Snadmod.dll version is less than 8.5.4369.2" test_ref="oval:org.mitre.oval:tst:44184"/>
              <criterion comment="Snadmod.dll version is greater than or equal to 8.5.4360.0" test_ref="oval:org.mitre.oval:tst:43281"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:130" version="7" class="vulnerability" deprecated="true">
      <metadata>
        <title>DEPRECATED: Windows 2000 HTR ISAPI Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0071" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0071"/>
        <description>Buffer overflow in the ism.dll ISAPI extension that implements HTR scripting in Internet Information Server (IIS) 4.0 and 5.0 allows attackers to cause a denial of service or execute arbitrary code via HTR requests with long variable names.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-14T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected to use a forward slash as the separator in the key." date="2007-05-07T15:59:00.150-04:00">
              <contributor organization="Secure Elements, Inc.">Glenn Strickland</contributor>
            </modified>
            <status_change date="2007-05-07T16:04:54.795-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:27.002-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2884" date="2010-11-29T16:14:00.692-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:39.209-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:31.897-05:00">ACCEPTED</status_change>
            <modified comment="Use def:12413 instead" date="2011-01-20T10:11:28.209-05:00">
              <contributor organization="Symantec Corporation">Josh Turpin</contributor>
            </modified>
            <status_change date="2011-01-20T10:11:28.209-05:00">DEPRECATED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="IIS major version equals 5" negate="false" test_ref="oval:org.mitre.oval:tst:3081"/>
          <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
          <criterion comment="the version of w3svc.dll is less than 5.0.2195.5269" negate="false" test_ref="oval:org.mitre.oval:tst:3080"/>
          <criterion comment="Patch Q319733 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3095"/>
          <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
          <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
          <criterion comment="Win2K/XP/2003 service pack 3 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:3079"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="ism.dll mapping exists" negate="false" test_ref="oval:org.mitre.oval:tst:3057"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12983" version="13" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Oracle VM VirtualBox</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Oracle VirtualBox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2011-2305" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2305"/>
        <description>Unspecified vulnerability in Oracle VM VirtualBox 3.0, 3.1, 3.2, and 4.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-10-11T15:20:33.178-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </submitted>
            <status_change date="2011-10-17T13:06:24.384-04:00">DRAFT</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:15629 - Found a few issues with the current inventory definition for VirtualBox and the vulnerability definition which uses it, and the fixes plus a bit more are attached. The core issue is that the registry key where the relevant information is stored has had 4 different values since version 3.0.0, with the most recent change causing the vulnerability definition to throw an error." date="2011-10-17T13:02:00.116-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-11-07T04:00:46.970-05:00">INTERIM</status_change>
            <status_change date="2011-11-28T04:00:19.930-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:12983 - modified vulnerabilities of Oracle Virtualbox (part 2)" date="2013-09-03T10:22:00.388-04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-09-03T10:59:52.337-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:12025 - modified vulnerabilities of Oracle Virtualbox (part 3)" date="2013-09-03T10:59:00.280-04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-09-23T04:00:07.009-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:15297 - modificated vulnerabilities for VirtualBox" date="2013-12-05T10:43:00.197-05:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-12-05T10:45:12.286-05:00">INTERIM</status_change>
            <status_change date="2013-12-23T04:00:14.881-05:00">ACCEPTED</status_change>
            <status_change date="2013-12-23T04:00:11.098-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:12983 - New vulnerability(CVE-2013-5892) added and modified existing criteria" date="2014-01-30T14:45:00.034-05:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2014-01-30T14:49:21.982-05:00">INTERIM</status_change>
            <status_change date="2014-02-17T04:00:09.037-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="VirtualBox is installed" definition_ref="oval:org.mitre.oval:def:11581"/>
        <criteria operator="OR" comment="Affected versions of VirtualBox">
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Sun xVM VirtualBox is installed" test_ref="oval:org.mitre.oval:tst:41938"/>
            <criterion comment="Check if Sun xVM VirtualBox version is greater than or equals to 3.0.0" test_ref="oval:org.mitre.oval:tst:88496"/>
            <criterion comment="Check if Sun xVM VirtualBox version is less than or equals to 3.0.4" test_ref="oval:org.mitre.oval:tst:89093"/>
          </criteria>
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Sun VirtualBox is installed" test_ref="oval:org.mitre.oval:tst:44050"/>
            <criterion comment="Check if Sun VirtualBox version is greater than or equals to 3.0.6" test_ref="oval:org.mitre.oval:tst:88483"/>
            <criterion comment="Check if Sun VirtualBox version is less than or equals to 3.1.8" test_ref="oval:org.mitre.oval:tst:88393"/>
          </criteria>
          <criteria operator="AND" comment="Affected versions of VirtualBox">
            <criterion comment="Check if Oracle VM VirtualBox version is greater than or equals to 3.2.0" test_ref="oval:org.mitre.oval:tst:88842"/>
            <criterion comment="Check if Oracle VM VirtualBox version is less than 4.1.0" test_ref="oval:org.mitre.oval:tst:100062"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1296" version="5" class="vulnerability">
      <metadata>
        <title>IE6 HTML Tag Memory Corruption (Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1188" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1188"/>
        <description>Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via HTML elements with a certain crafted tag, which leads to memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-04-12T12:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-04-12T05:16:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:58.469-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:39.013-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:43:54.465-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:48.592-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="Win2K/XP/2003 is patched" negate="true" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.3790.507" negate="false" test_ref="oval:org.mitre.oval:tst:1100"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1294" version="7" class="vulnerability">
      <metadata>
        <title>IFRAME Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1050" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1050"/>
        <description>Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-05T05:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2005-01-12T05:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-02T05:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-23T05:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-06-02T04:00:00.000-04:00" comment="modified wrt-24 - corrected hotfix key">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2005-06-08T04:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-29T04:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="modified wrt-18 - Changed value element to include pattern match">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-07-03T12:56:00.000-04:00" comment="Added negate=true attribute to criteria sub-block to fix conversion error from OVAL 4.2 to OVAL 5.0">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-07-03T12:56:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:28:36.634-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:46:04.441-05:00">INTERIM</status_change>
            <modified comment="Added Microsoft Windows 2000 and Microsoft Windows XP to the affected platforms. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-22T20:00:00.869-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-02-20T13:39:38.746-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:36.570-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:13.078-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Internet Explorer 6.0 or IE 6.0 SP1 is installed">
          <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
          <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
        </criteria>
        <criteria operator="OR" comment="patch kb889293 is installed (hotfix or ID)" negate="true">
          <criterion comment="the patch kb889293 is installed (Installed Components key)" negate="false" test_ref="oval:org.mitre.oval:tst:1010"/>
          <criterion comment="the patch kb889293 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1009"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12915" version="3" class="vulnerability">
      <metadata>
        <title>Access of Unallocated Memory DoS Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Host Integration Server 2004</product>
          <product>Microsoft Host Integration Server 2006</product>
          <product>Microsoft Host Integration Server 2009</product>
          <product>Microsoft Host Integration Server 2010</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2011-2008" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2008"/>
        <description>Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server service outage) via crafted TCP or UDP traffic, aka "Access of Unallocated Memory DoS Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2011-10-11T13:00:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2011-10-17T09:26:40.632-04:00">DRAFT</status_change>
            <status_change date="2011-11-07T04:00:44.214-05:00">INTERIM</status_change>
            <status_change date="2011-11-28T04:00:16.447-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Microsoft Host Integration Server 2004 SP1">
          <extend_definition comment="Microsoft Host Integration Server 2004 SP1 is installed" definition_ref="oval:org.mitre.oval:def:5430"/>
          <criterion comment="Snadmod.dll version is less than 6.0.2445.0" test_ref="oval:org.mitre.oval:tst:43888"/>
        </criteria>
        <criteria operator="AND" comment="Microsoft Host Integration Server 2006">
          <extend_definition comment="Microsoft Host Integration Server 2006 is installed" definition_ref="oval:org.mitre.oval:def:5373"/>
          <criterion comment="Snadmod.dll version is less than 7.0.4220.0" test_ref="oval:org.mitre.oval:tst:44254"/>
        </criteria>
        <criteria operator="AND" comment="Microsoft Host Integration Server 2009">
          <extend_definition comment="Microsoft Host Integration Server 2009 is installed" definition_ref="oval:org.mitre.oval:def:12766"/>
          <criteria operator="OR" comment="GDR or LDR Service branch">
            <criterion comment="Snadmod.dll version is less than 8.0.3850.1" test_ref="oval:org.mitre.oval:tst:44027"/>
            <criteria operator="AND" comment="LDR">
              <criterion comment="Snadmod.dll version is less than 8.0.3872.2" test_ref="oval:org.mitre.oval:tst:43857"/>
              <criterion comment="Snadmod.dll version is greater than or equal to 8.0.3870.0" test_ref="oval:org.mitre.oval:tst:44243"/>
            </criteria>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Microsoft Host Integration Server 2010">
          <extend_definition comment="Microsoft Host Integration Server 2010 is installed" definition_ref="oval:org.mitre.oval:def:12165"/>
          <criteria operator="OR" comment="GDR or LDR Service branch">
            <criterion comment="Snadmod.dll version is less than 8.5.4317.1" test_ref="oval:org.mitre.oval:tst:44232"/>
            <criteria operator="AND" comment="LDR">
              <criterion comment="Snadmod.dll version is less than 8.5.4369.2" test_ref="oval:org.mitre.oval:tst:44184"/>
              <criterion comment="Snadmod.dll version is greater than or equal to 8.5.4360.0" test_ref="oval:org.mitre.oval:tst:43281"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5430" version="6" class="inventory">
      <metadata>
        <title>Microsoft Host Integration Server 2004 SP1 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Host Integration Server 2004</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:host_integration_server:2004:sp1"/>
        <description>A version of Microsoft Host Integration Server 2004 SP1 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2008-10-14T13:33:00">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </submitted>
            <status_change date="2008-10-16T14:01:44.282-04:00">DRAFT</status_change>
            <modified comment="Corrected a misspelled title." date="2008-10-31T15:30:00.283-04:00">
              <contributor organization="Hewlett-Packard">Todd Dolinsky</contributor>
            </modified>
            <modified comment="Corrected a misspelled title." date="2008-10-31T15:30:00.180-04:00">
              <contributor organization="Hewlett-Packard">Todd Dolinsky</contributor>
            </modified>
            <modified comment="Corrected a misspelled title." date="2008-10-31T15:30:00.453-04:00">
              <contributor organization="Hewlett-Packard">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2008-11-17T04:00:26.911-05:00">INTERIM</status_change>
            <status_change date="2008-12-08T04:00:51.015-05:00">ACCEPTED</status_change>
            <modified date="2009-06-15T04:44:54" comment="Added CPE">
              <contributor organization="The MITRE Corporation">Brendan Miles</contributor>
            </modified>
            <status_change date="2009-06-22T04:00:52.696-04:00">INTERIM</status_change>
            <status_change date="2009-07-13T04:00:37.030-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:6633 - Several updates including updated criterias, comments and CPE names." date="2011-10-21T10:01:00.242-04:00">
              <contributor organization="Secure Elements, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2011-10-21T10:10:01.691-04:00">INTERIM</status_change>
            <status_change date="2011-11-07T04:00:59.875-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:16103 - def:6075, Edited var:620 &amp; obj:6408 to use regex &amp; match different MS HIS version directories" date="2011-11-15T14:52:00.918-05:00">
              <contributor organization="SecPod Technologies">Pradeep R B</contributor>
            </modified>
            <status_change date="2011-11-15T14:53:31.906-05:00">INTERIM</status_change>
            <status_change date="2011-12-05T04:00:26.402-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Microsoft Host Integration Server 2004 is installed" test_ref="oval:org.mitre.oval:tst:8356"/>
        <criterion comment="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Host Integration Server\6.0!ProductVersion = 6.0.2403.0" test_ref="oval:org.mitre.oval:tst:44390"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:5373" version="4" class="inventory">
      <metadata>
        <title>Microsoft Host Integration Server 2006 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Host Integration Server 2006</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:host_integration_server:2006"/>
        <description>A version of Microsoft Host Integration Server 2006 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2008-10-14T13:33:00">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </submitted>
            <status_change date="2008-10-16T14:01:43.227-04:00">DRAFT</status_change>
            <modified comment="Corrected a misspelled title." date="2008-10-31T15:30:00.045-04:00">
              <contributor organization="Hewlett-Packard">Todd Dolinsky</contributor>
            </modified>
            <modified comment="Corrected a misspelled title." date="2008-10-31T15:30:00.198-04:00">
              <contributor organization="Hewlett-Packard">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2008-11-17T04:00:26.562-05:00">INTERIM</status_change>
            <status_change date="2008-12-08T04:00:50.571-05:00">ACCEPTED</status_change>
            <modified date="2009-06-15T04:44:54" comment="Added CPE">
              <contributor organization="The MITRE Corporation">Brendan Miles</contributor>
            </modified>
            <status_change date="2009-06-22T04:00:52.167-04:00">INTERIM</status_change>
            <status_change date="2009-07-13T04:00:35.416-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:5373 - Updated CPE name" date="2011-10-21T10:13:00.283-04:00">
              <contributor organization="Secure Elements, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2011-10-21T10:27:10.002-04:00">INTERIM</status_change>
            <status_change date="2011-11-07T04:00:59.515-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Microsoft Host Integration Server 2006 is installed" test_ref="oval:org.mitre.oval:tst:9310"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12766" version="4" class="inventory">
      <metadata>
        <title>Microsoft Host Integration Server 2009 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Host Integration Server 2009</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:host_integration_server:2009"/>
        <description>A version of Microsoft Host Integration Server 2009 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2011-10-11T13:00:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2011-10-17T09:26:39.882-04:00">DRAFT</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:12766 - Updated CPE name" date="2011-10-21T10:13:00.283-04:00">
              <contributor organization="Secure Elements, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2011-11-07T04:00:40.794-05:00">INTERIM</status_change>
            <status_change date="2011-11-28T04:00:11.269-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Microsoft Host Integration Server 2009 is installed" test_ref="oval:org.mitre.oval:tst:44117"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12165" version="4" class="inventory">
      <metadata>
        <title>Microsoft Host Integration Server 2010 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Host Integration Server 2010</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:host_integration_server:2010"/>
        <description>A version of Microsoft Host Integration Server 2010 is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2011-10-11T13:00:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2011-10-17T09:26:40.129-04:00">DRAFT</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:12165 - Updated CPE name" date="2011-10-21T10:13:00.283-04:00">
              <contributor organization="Secure Elements, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2011-11-07T04:00:32.862-05:00">INTERIM</status_change>
            <status_change date="2011-11-28T04:00:04.165-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Microsoft Host Integration Server 2010 is installed" test_ref="oval:org.mitre.oval:tst:43549"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1291" version="6" class="vulnerability">
      <metadata>
        <title>Windows Explorer Web View Script Injection Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2117" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2117"/>
        <description>Web View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle certain HTML characters in preview fields, which allows remote user-assisted attackers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-10-12T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-10-19T05:46:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-08-31T12:00:00.000-04:00" comment="removed an incorrect leading ^ from the value entity of ste:2402">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-08-31T00:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:16.554-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1291 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:43.804-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:47.926-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="Win2K/XP/2003 service pack 4 is installed" test_ref="oval:org.mitre.oval:tst:2569"/>
        <criterion comment="shell32.dll is less than 5.0.3900.7071" test_ref="oval:org.mitre.oval:tst:1086"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:129" version="2" class="vulnerability">
      <metadata>
        <title>GDM X Display Manager Authorization Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>GDM</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0549" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0549"/>
        <description>The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) via a short authorization key name.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-04T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-05T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:33.855-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:15.558-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="gdm version is less than 2.4.1.3-5.1" negate="false" test_ref="oval:org.mitre.oval:tst:2936"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1289" version="6" class="vulnerability">
      <metadata>
        <title>Network Connection Manager Interruption of Service (Windows 2000)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2307" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2307"/>
        <description>netman.dll in Microsoft Windows Connections Manager Library allows local users to cause a denial of service (Network Connections Service crash) via a large integer argument to a particular function, aka "Network Connection Manager Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-10-12T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-10-19T05:46:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-08-31T12:00:00.000-04:00" comment="removed an incorrect leading ^ from the value entity of ste:2402">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-08-31T00:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:16.291-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1289 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:45.310-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:47.211-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="Win2K/XP/2003 service pack 4 is installed" test_ref="oval:org.mitre.oval:tst:2569"/>
        <criterion comment="netman.dll is less than 5.0.2195.7061" test_ref="oval:org.mitre.oval:tst:1011"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1288" version="5" class="vulnerability">
      <metadata>
        <title>Win2k Land Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0688" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0688"/>
        <description>Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destination and source address and port, aka a reoccurrence of the "Land" vulnerability (CVE-1999-0016).</description>
        <oval_repository>
          <dates>
            <submitted date="2005-04-22T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Matthew Burton</contributor>
            </submitted>
            <status_change date="2005-04-27T12:06:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-22T12:38:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-11-06T04:13:00.000-04:00" comment="Replaced reference to var:200 with reference to var:201 in obj:588 since tcpip.sys is located in \system32\drivers and not \system32.  Modified by Harvey Rubinovitz">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-11-21T04:13:00.000-04:00">INTERIM</status_change>
            <status_change date="2007-01-03T13:53:49.217-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:43:59.317-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:46.822-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="Win2K/XP/2003 service pack 4 (or earlier) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1247"/>
        <criterion comment="the version of Tcpip.sys is less than 5.0.2195.7035" negate="false" test_ref="oval:org.mitre.oval:tst:1012"/>
        <criterion comment="the patch KB893066 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2353"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1287" version="1" class="vulnerability">
      <metadata>
        <title>Mozilla IDN heap overrun using soft-hyphens</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2871" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2871"/>
        <description>Buffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6 and earlier, and Netscape 8.0.3.3 and 7.2, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a hostname with all "soft" hyphens (character 0xAD), which is not properly handled by the NormalizeIDN call in nsStandardURL::BuildNormalizedSpec.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-11-30T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-12-27T08:49:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-01-12T08:59:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-01T09:08:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.00, 11.11, 11.22, or 11.23">
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.00">
            <criteria operator="AND" comment="700 Series OS Release 11.00">
              <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
              <criterion comment="HP Release B.11.00" negate="false" test_ref="oval:org.mitre.oval:tst:2512"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.00">
              <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
              <criterion comment="HP Release B.11.00" negate="false" test_ref="oval:org.mitre.oval:tst:2512"/>
            </criteria>
          </criteria>
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.11">
            <criteria operator="AND" comment="700 Series OS Release 11.11">
              <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
              <criterion comment="HP Release B.11.11" negate="false" test_ref="oval:org.mitre.oval:tst:2514"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.11">
              <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
              <criterion comment="HP Release B.11.11" negate="false" test_ref="oval:org.mitre.oval:tst:2514"/>
            </criteria>
          </criteria>
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.22">
            <criteria operator="AND" comment="700 Series OS Release 11.22">
              <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
              <criterion comment="HP Release B.11.22" negate="false" test_ref="oval:org.mitre.oval:tst:1015"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.22">
              <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
              <criterion comment="HP Release B.11.22" negate="false" test_ref="oval:org.mitre.oval:tst:1015"/>
            </criteria>
          </criteria>
          <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.23">
            <criteria operator="AND" comment="700 Series OS Release 11.23">
              <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
              <criterion comment="HP Release B.11.23" negate="false" test_ref="oval:org.mitre.oval:tst:2511"/>
            </criteria>
            <criteria operator="AND" comment="800 Series OS Release 11.23">
              <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
              <criterion comment="HP Release B.11.23" negate="false" test_ref="oval:org.mitre.oval:tst:2511"/>
            </criteria>
          </criteria>
        </criteria>
        <criterion comment="Mozilla is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1014"/>
        <criterion comment="Mozilla v1.7.12 (1.7.12.0.00) or later is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1013"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12864" version="5" class="vulnerability">
      <metadata>
        <title>Contact Details Reflected XSS Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Windows SharePoint Services 3.0</product>
          <product>Microsoft SharePoint Foundation 2010</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2011-1891" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1891"/>
        <description>Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in a request to a script, aka "Contact Details Reflected XSS Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2011-09-13T13:00:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2011-09-20T09:24:29.926-04:00">DRAFT</status_change>
            <status_change date="2011-10-10T04:00:33.744-04:00">INTERIM</status_change>
            <status_change date="2011-10-31T04:00:58.408-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:12311 - MS13-084, 085 and 067 bulletins" date="2013-10-23T11:46:00.610-04:00">
              <contributor organization="SecPod Technologies">Chandan S</contributor>
            </modified>
            <status_change date="2013-10-23T11:49:37.786-04:00">INTERIM</status_change>
            <status_change date="2013-11-11T04:00:06.785-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria comment="Vulnerable Microsoft Windows SharePoint Services 3.0">
          <criterion comment="Microsoft Windows SharePoint Services 3.0 are installed" test_ref="oval:org.mitre.oval:tst:27622"/>
          <criterion comment="the version of Onetutil.dll is less than 12.0.6565.5001" test_ref="oval:org.mitre.oval:tst:42957"/>
        </criteria>
        <criteria comment="Vulnerable Microsoft SharePoint Foundation 2010">
          <extend_definition comment="Microsoft SharePoint Foundation 2010 is installed" definition_ref="oval:org.mitre.oval:def:12224"/>
          <criterion comment="OWSSVR.DLL version is less than 14.0.6106.5008" test_ref="oval:org.mitre.oval:tst:43889"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1284" version="3" class="vulnerability">
      <metadata>
        <title>FTP Download Destination Tampering Vulnerability (Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2126" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2126"/>
        <description>The FTP client in Windows XP SP1 and Server 2003, and Internet Explorer 6 SP1 on Windows 2000 SP4, when "Enable Folder View for FTP Sites" is enabled and the user manually initiates a file transfer, allows user-assisted, remote FTP servers to overwrite files in arbitrary locations via crafted filenames.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-10-12T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-10-19T05:46:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1284 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:20.049-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:01:09.506-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="msieftp.dll is less than 6.0.3790.383" test_ref="oval:org.mitre.oval:tst:1016"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12835" version="3" class="vulnerability">
      <metadata>
        <title>XSS in SharePoint Calendar Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft SharePoint Server 2010</product>
          <product>Microsoft SharePoint Foundation 2010</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2011-0653" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0653"/>
        <description>Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010 Gold and SP1, and SharePoint Foundation 2010, allows remote attackers to inject arbitrary web script or HTML via the URI, aka "XSS in SharePoint Calendar Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2011-09-13T13:00:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2011-09-20T09:24:27.187-04:00">DRAFT</status_change>
            <status_change date="2011-10-10T04:00:30.316-04:00">INTERIM</status_change>
            <status_change date="2011-10-31T04:00:53.708-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria comment="Vulnerable Microsoft Office SharePoint Server 2010 (osrchwfe)">
          <extend_definition comment="Microsoft Office SharePoint Server 2010 is installed." definition_ref="oval:org.mitre.oval:def:12880"/>
          <criterion comment="Microsoft.SharePoint.Taxonomy.dll version is less than 14.0.6106.5001" test_ref="oval:org.mitre.oval:tst:43686"/>
        </criteria>
        <criteria comment="Vulnerable Microsoft Office SharePoint Server 2010 (osrv/wosrv)">
          <extend_definition comment="Microsoft Office SharePoint Server 2010 is installed." definition_ref="oval:org.mitre.oval:def:12880"/>
          <criterion comment="Microsoft.office.server.dll version is less than 14.0.6106.5001" test_ref="oval:org.mitre.oval:tst:43358"/>
        </criteria>
        <criteria comment="Vulnerable Microsoft Office SharePoint Server 2010 (ppsmawfe)">
          <extend_definition comment="Microsoft Office SharePoint Server 2010 is installed." definition_ref="oval:org.mitre.oval:def:12880"/>
          <criterion comment="Eawfap.dll version is less than 14.0.6106.5001" test_ref="oval:org.mitre.oval:tst:43900"/>
        </criteria>
        <criteria comment="Vulnerable Microsoft Office SharePoint Server 2010 (dlc)">
          <extend_definition comment="Microsoft Office SharePoint Server 2010 is installed." definition_ref="oval:org.mitre.oval:def:12880"/>
          <criterion comment="Microsoft.office.policy.dll version is less than 14.0.6106.5001" test_ref="oval:org.mitre.oval:tst:43892"/>
        </criteria>
        <criteria comment="Vulnerable Microsoft Office SharePoint Server 2010 (ppsmamui)">
          <extend_definition comment="Microsoft Office SharePoint Server 2010 is installed." definition_ref="oval:org.mitre.oval:def:12880"/>
          <criterion comment="Microsoft.SharePoint.Client.dll version is less than 14.0.6106.5001" test_ref="oval:org.mitre.oval:tst:43419"/>
        </criteria>
        <criteria comment="Vulnerable Microsoft SharePoint Foundation 2010">
          <extend_definition comment="Microsoft SharePoint Foundation 2010 is installed" definition_ref="oval:org.mitre.oval:def:12224"/>
          <criterion comment="OWSSVR.DLL version is less than 14.0.6106.5008" test_ref="oval:org.mitre.oval:tst:43889"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12829" version="3" class="vulnerability">
      <metadata>
        <title>Microsoft Internet Explorer 'AddFavorite' Method Denial of Service Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <product>Microsoft Internet Explorer 7</product>
          <product>Microsoft Internet Explorer 8</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2433" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2433"/>
        <description>Stack-based buffer overflow in the AddFavorite method in Microsoft Internet Explorer allows remote attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a long URL in the first argument.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-06-28T13:00:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2011-07-05T22:14:56.520-04:00">DRAFT</status_change>
            <status_change date="2011-07-25T04:00:10.289-04:00">INTERIM</status_change>
            <status_change date="2011-08-15T04:00:09.528-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <extend_definition comment="Microsoft Internet Explorer 7 is installed" definition_ref="oval:org.mitre.oval:def:627"/>
        <extend_definition comment="Microsoft Internet Explorer 8 is installed" definition_ref="oval:org.mitre.oval:def:6210"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12817" version="3" class="vulnerability">
      <metadata>
        <title>Microsoft Internet Explorer 6 through 8 spoofing vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <product>Microsoft Internet Explorer 6</product>
          <product>Microsoft Internet Explorer 7</product>
          <product>Microsoft Internet Explorer 8</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3003" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3003"/>
        <description>Microsoft Internet Explorer 6 through 8 allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site containing that page.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-06-28T13:00:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2011-07-05T22:14:57.504-04:00">DRAFT</status_change>
            <status_change date="2011-07-25T04:00:09.907-04:00">INTERIM</status_change>
            <status_change date="2011-08-15T04:00:09.212-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <extend_definition comment="Microsoft Internet Explorer 6 is installed" definition_ref="oval:org.mitre.oval:def:563"/>
        <extend_definition comment="Microsoft Internet Explorer 7 is installed" definition_ref="oval:org.mitre.oval:def:627"/>
        <extend_definition comment="Microsoft Internet Explorer 8 is installed" definition_ref="oval:org.mitre.oval:def:6210"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1281" version="1" class="vulnerability">
      <metadata>
        <title>RHE3 Firefox InstallTrigger Callback Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2263" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2263"/>
        <description>The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of the new page and results in a same origin violation.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-15T04:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-08-19T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2483"/>
          <criterion comment="mozilla RPM is earlier than 37:1.7.10-1.1.3.1" negate="false" test_ref="oval:org.mitre.oval:tst:2482"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/mozilla is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2650"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1280" version="6" class="vulnerability">
      <metadata>
        <title>Windows 2000 Color Management Module Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Color Management Module</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1219" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1219"/>
        <description>Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with crafted ICC profile format tags.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-02T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2005-08-03T11:30:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected and tightened regular expression in ste:2610" date="2010-12-02T11:46:00.307-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-12-02T11:47:27.708-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:31.613-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:43:59.841-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:46.156-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 (sp4 or earlier) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 5 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2790"/>
        </criteria>
        <criterion comment="the version of mscms.dll is less than 5.0.2195.7054" negate="false" test_ref="oval:org.mitre.oval:tst:1017"/>
        <criterion comment="the patch KB901214 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2697"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1279" version="1" class="vulnerability">
      <metadata>
        <title>Windows 98 Program Group Converter Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <product>Program Group Converter</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0572" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0572"/>
        <description>Buffer overflow in the Windows Program Group Converter (grpconv.exe) may allow remote attackers to execute arbitrary code via a shell: URL with a long filename and a .grp extension, which is not properly handled when the shell capability launches grpconv.exe.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-14T03:38:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-10-20T02:35:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 98 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:1345"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12788" version="3" class="vulnerability">
      <metadata>
        <title>Editform Script Injection Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft SharePoint Server 2010</product>
          <product>Microsoft SharePoint Foundation 2010</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2011-1890" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1890"/>
        <description>Cross-site scripting (XSS) vulnerability in EditForm.aspx in Microsoft Office SharePoint Server 2010 and SharePoint Foundation 2010 allows remote attackers to inject arbitrary web script or HTML via a post, aka "Editform Script Injection Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2011-09-13T13:00:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2011-09-20T09:24:29.615-04:00">DRAFT</status_change>
            <status_change date="2011-10-10T04:00:26.156-04:00">INTERIM</status_change>
            <status_change date="2011-10-31T04:00:48.722-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria comment="Vulnerable Microsoft Office SharePoint Server 2010 (osrchwfe)">
          <extend_definition comment="Microsoft Office SharePoint Server 2010 is installed." definition_ref="oval:org.mitre.oval:def:12880"/>
          <criterion comment="Microsoft.SharePoint.Taxonomy.dll version is less than 14.0.6106.5001" test_ref="oval:org.mitre.oval:tst:43686"/>
        </criteria>
        <criteria comment="Vulnerable Microsoft Office SharePoint Server 2010 (osrv/wosrv)">
          <extend_definition comment="Microsoft Office SharePoint Server 2010 is installed." definition_ref="oval:org.mitre.oval:def:12880"/>
          <criterion comment="Microsoft.office.server.dll version is less than 14.0.6106.5001" test_ref="oval:org.mitre.oval:tst:43358"/>
        </criteria>
        <criteria comment="Vulnerable Microsoft Office SharePoint Server 2010 (ppsmawfe)">
          <extend_definition comment="Microsoft Office SharePoint Server 2010 is installed." definition_ref="oval:org.mitre.oval:def:12880"/>
          <criterion comment="Eawfap.dll version is less than 14.0.6106.5001" test_ref="oval:org.mitre.oval:tst:43900"/>
        </criteria>
        <criteria comment="Vulnerable Microsoft Office SharePoint Server 2010 (dlc)">
          <extend_definition comment="Microsoft Office SharePoint Server 2010 is installed." definition_ref="oval:org.mitre.oval:def:12880"/>
          <criterion comment="Microsoft.office.policy.dll version is less than 14.0.6106.5001" test_ref="oval:org.mitre.oval:tst:43892"/>
        </criteria>
        <criteria comment="Vulnerable Microsoft Office SharePoint Server 2010 (ppsmamui)">
          <extend_definition comment="Microsoft Office SharePoint Server 2010 is installed." definition_ref="oval:org.mitre.oval:def:12880"/>
          <criterion comment="Microsoft.SharePoint.Client.dll version is less than 14.0.6106.5001" test_ref="oval:org.mitre.oval:tst:43419"/>
        </criteria>
        <criteria comment="Vulnerable Microsoft SharePoint Foundation 2010">
          <extend_definition comment="Microsoft SharePoint Foundation 2010 is installed" definition_ref="oval:org.mitre.oval:def:12224"/>
          <criterion comment="OWSSVR.DLL version is less than 14.0.6106.5008" test_ref="oval:org.mitre.oval:tst:43889"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12880" version="5" class="inventory">
      <metadata>
        <title>Microsoft Office SharePoint Server 2010 is installed.</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Office SharePoint Server 2010</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:sharepoint:2010"/>
        <description>Microsoft Office SharePoint Server 2010 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-09-13T13:00:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2011-09-20T09:24:26.061-04:00">DRAFT</status_change>
            <status_change date="2011-10-10T04:00:35.882-04:00">INTERIM</status_change>
            <status_change date="2011-10-31T04:01:00.596-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:16204 - New Microsoft Patch Tuesday October 2012 definitions." date="2012-10-19T16:09:00.822-04:00">
              <contributor organization="SecPod Technologies">Chandan S</contributor>
            </modified>
            <status_change date="2012-10-19T16:30:25.998-04:00">INTERIM</status_change>
            <status_change date="2012-11-05T04:00:03.694-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="SharePoint Server 2010 is installed." test_ref="oval:org.mitre.oval:tst:43555"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12224" version="5" class="inventory">
      <metadata>
        <title>Microsoft SharePoint Foundation 2010 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2012</platform>
          <platform>Microsoft Windows 8</platform>
          <product>Microsoft SharePoint Foundation 2010</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:sharepoint_foundation:2010"/>
        <description>Microsoft SharePoint Foundation 2010 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-09-13T13:00:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2011-09-20T09:24:26.985-04:00">DRAFT</status_change>
            <status_change date="2011-10-10T04:00:07.602-04:00">INTERIM</status_change>
            <status_change date="2011-10-31T04:00:15.672-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:12224 - Microsoft Bulletins: MS13-024 and MS13-025 (March 2013)" date="2013-03-18T14:50:00.119-04:00">
              <contributor organization="SecPod Technologies">Bhavya K</contributor>
            </modified>
            <status_change date="2013-03-18T14:53:11.905-04:00">INTERIM</status_change>
            <status_change date="2013-04-08T04:00:07.906-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="SharePoint Foundation 2010 is installed." test_ref="oval:org.mitre.oval:tst:43939"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1273" version="5" class="vulnerability">
      <metadata>
        <title>Solaris SAdmin Client Credentials Remote Administrative Access Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>Sadmin</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0722" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0722"/>
        <description>The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-15T02:06:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <modified date="2004-10-15T02:21:00.000-04:00" comment="Added check for sadmind called with strong authentication">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </modified>
            <status_change date="2004-10-20T02:35:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T08:46:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected datatype on version element of patch state. Datatype must be int." date="2007-01-04T08:56:00.454-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-04T08:58:16.556-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:38.256-05:00">ACCEPTED</status_change>
            <modified comment="fixed the service_name entity used in the inetd_object" date="2007-04-10T15:09:00.555-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-04-10T15:13:41.722-04:00">INTERIM</status_change>
            <modified comment="fixed the service_name entity used in the inetd_object" date="2007-04-10T15:13:00.562-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-04-25T19:52:15.291-04:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:54.819-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:10.757-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="OR" comment="Solaris 7,8,or 9 installed">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          </criteria>
          <criterion comment="System and Network Administration Framework Installed" negate="false" test_ref="oval:org.mitre.oval:tst:1024"/>
          <criterion comment="Patch 116457-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1022"/>
          <criterion comment="Patch 116442-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1021"/>
          <criterion comment="Patch 116454-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1020"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="inetd running" negate="false" test_ref="oval:org.mitre.oval:tst:3135"/>
          <criterion comment="inetd.conf contains sadmind" negate="false" test_ref="oval:org.mitre.oval:tst:1023"/>
          <criterion comment="Sadmin called using strong authentication" negate="true" test_ref="oval:org.mitre.oval:tst:1019"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1272" version="3" class="vulnerability">
      <metadata>
        <title>Object Spoofing using XBL &lt;implements> Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2704" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2704"/>
        <description>Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spoof DOM objects via an XBL control that implements an internal XPCOM interface.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-11-11T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-12-12T10:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:2367" date="2007-02-26T08:32:00.241-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-26T08:32:37.808-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:2370" date="2007-03-06T07:46:00.064-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:47.362-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:1444" date="2007-04-23T12:05:00.911-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:19:58.010-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:1445" date="2007-04-23T12:05:00.720-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:52.971-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Suite version 1.7.10 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.10 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2535"/>
          <criterion comment="Mozilla Suite version 1.7.10 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2534"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.6 or earlier is installed">
          <criterion comment="Firefox version 1.0.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2533"/>
          <criterion comment="Mozilla Firefox version 1.0.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2532"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1271" version="1" class="vulnerability">
      <metadata>
        <title>Server 2003 Object Management Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Windows kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0550" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0550"/>
        <description>Buffer overflow in Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to cause a denial of service (i.e., system crash) via a malformed request, aka "Object Management Vulnerability".</description>
        <oval_repository>
          <dates>
            <submitted date="2005-05-02T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2005-05-04T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2005-06-02T12:00:00.000-04:00" comment="Added product">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-06-22T12:38:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="The version of Ntoskrnl.exe is less than 5.2.3790.280" negate="false" test_ref="oval:org.mitre.oval:tst:1025"/>
        <criterion comment="the patch KB890859 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:2737"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12701" version="3" class="vulnerability">
      <metadata>
        <title>Security bypass vulnerability in Apache Tomcat 7.0.11</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Apache Tomcat</product>
        </affected>
        <reference ref_id="CVE-2011-1183" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1183" source="CVE"/>
        <description>Apache Tomcat 7.0.11, when web.xml has no login configuration, does not follow security constraints, which allows remote attackers to bypass intended access restrictions via HTTP requests to a meta-data complete web application.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1088 and CVE-2011-1419.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-05-04T09:29:28-05:00">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2011-05-06T15:23:46.860-04:00">DRAFT</status_change>
            <status_change date="2011-05-23T04:00:17.269-04:00">INTERIM</status_change>
            <status_change date="2011-06-13T04:00:13.294-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Apache Tomcat is installed" definition_ref="oval:org.mitre.oval:def:12401"/>
        <criterion comment="Check if Apache Tomcat version is equal to 7.0.11" test_ref="oval:org.mitre.oval:tst:42572"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:127" version="6" class="vulnerability">
      <metadata>
        <title>RPCSS DCOM Buffer Overflow (Windows 2000)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Remote Procedure Call (RPC)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0528" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0528"/>
        <description>Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed RPC request with a long filename parameter, a different vulnerability than CVE-2003-0352 (Blaster/Nachi) and CVE-2003-0715.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-15T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2884" date="2010-11-29T16:14:00.692-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:38.619-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:31.348-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:37.108-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:45.782-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="the version of rpcrt4.dll is less than 5.0.2195.6802" negate="false" test_ref="oval:org.mitre.oval:tst:2914"/>
          <criterion comment="the patch kb824146 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:3082"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="DCOM is enabled on systems with SP3 or later">
            <criterion comment="Win2K/XP/2003 service pack 3 (or later) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3079"/>
            <criterion comment="DCOM is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2913"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1268" version="1" class="vulnerability">
      <metadata>
        <title>RHE3 Firefox and Mozilla Javascript Dialog Box Spoofing</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2268"/>
        <description>Firefox before 1.0.5 and Mozilla before 1.7.9 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-15T04:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-08-19T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2483"/>
          <criterion comment="mozilla RPM is earlier than 37:1.7.10-1.1.3.1" negate="false" test_ref="oval:org.mitre.oval:tst:2482"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/mozilla is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2650"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1267" version="8" class="vulnerability">
      <metadata>
        <title>Win2k,SP4 DirectShow Malicious avi File Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>DirectX</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2128" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2128"/>
        <description>QUARTZ.DLL in Microsoft Windows Media Player 9 allows remote attackers to write a null byte to arbitrary memory via an AVI file with a crafted strn element with a modified length value.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-10-12T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-10-19T05:46:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2878" date="2010-11-29T16:13:00.904-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:14:05.186-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:30.953-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:24.005-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:45.104-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:1047 - obj/ste updates to conform to authoring style guide" date="2013-03-26T09:53:00.500-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-03-26T09:56:05.377-04:00">INTERIM</status_change>
            <status_change date="2013-04-15T04:00:09.433-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="DirectX packaged with Windows 2000,SP4 has DirectShow Vulnerability">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="SP4 or later Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3073"/>
          <criterion comment="the version of Quartz.dll is greater than or equal to 6.1.9.726" negate="false" test_ref="oval:org.mitre.oval:tst:1027"/>
          <criterion comment="the version of Quartz.dll is less than 6.1.9.732" negate="false" test_ref="oval:org.mitre.oval:tst:1026"/>
        </criteria>
        <criteria operator="AND" comment="Standalone DirectX 8 has DirectShow Vulnerability">
          <criterion comment="DirectX 8.x Installed" negate="false" test_ref="oval:org.mitre.oval:tst:1173"/>
          <criterion comment="the version of Quartz.dll is less than 6.3.1.889" negate="false" test_ref="oval:org.mitre.oval:tst:1121"/>
        </criteria>
        <criteria operator="AND" comment="Standalone DirectX 9 has DirectShow Vulnerability">
          <criterion comment="DirectX 9.x Installed" negate="false" test_ref="oval:org.mitre.oval:tst:1120"/>
          <criterion comment="the version of Quartz.dll is less than 6.3.1.889" negate="false" test_ref="oval:org.mitre.oval:tst:1121"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1266" version="2" class="vulnerability">
      <metadata>
        <title>Mozilla Crashes with Evidence of Memory Corruption (Firefox Regression Fix)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1790" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1790"/>
        <description>A regression fix in Mozilla Firefox 1.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the InstallTrigger.install method, which leads to memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-05-07T09:05:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-05-10T08:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:16.094-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:917" date="2007-03-06T08:02:00.303-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-06T08:03:16.386-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:47.157-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.7 is installed">
          <criterion comment="Mozilla Firefox version 1.0.7 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1029"/>
          <criterion comment="Firefox version 1.0.7 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1028"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1265" version="2" class="vulnerability">
      <metadata>
        <title>WU-FTPD "glob-*" Remote DoS Vulnerability (B.11.23)</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
          <product>ftpd</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0256" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0256"/>
        <description>The wu_fnmatch function in wu_fnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service (CPU exhaustion by recursion) via a glob pattern with a large number of * (wildcard) characters, as demonstrated using the dir command.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-04-06T06:39:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-04-12T05:16:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:27.213-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:08.109-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.23">
          <criteria operator="AND" comment="700 Series OS Release 11.23">
            <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
            <criterion comment="HP Release B.11.23" negate="false" test_ref="oval:org.mitre.oval:tst:2511"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 11.23">
            <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
            <criterion comment="HP Release B.11.23" negate="false" test_ref="oval:org.mitre.oval:tst:2511"/>
          </criteria>
        </criteria>
        <criterion comment="Patch PHNE_34306 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1030"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12642" version="6" class="vulnerability">
      <metadata>
        <title>TMG Firewall Client Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Forefront Threat Management Gateway 2010 Client</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2011-1889" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1889"/>
        <description>The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors involving unspecified requests, aka "TMG Firewall Client Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2011-06-14T13:00:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2011-06-20T17:29:05.936-04:00">DRAFT</status_change>
            <status_change date="2011-07-11T04:00:19.976-04:00">INTERIM</status_change>
            <status_change date="2011-08-01T04:00:35.460-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:12642 - check that The registry key that holds the location of Threat Management Gateway exists was added." date="2013-07-11T13:33:00.157-04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-07-11T13:36:42.261-04:00">INTERIM</status_change>
            <status_change date="2013-07-29T04:00:06.227-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Fwcmgmt.exe version is less than 7.0.7734.182" test_ref="oval:org.mitre.oval:tst:42607"/>
        <criterion comment="The registry key that holds the location of Threat Management Gateway exists" test_ref="oval:org.mitre.oval:tst:81733"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12638" version="4" class="vulnerability">
      <metadata>
        <title>Microsoft Internet Explorer cross-site scripting (XSS) vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <product>Microsoft Internet Explorer 8</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1489" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1489"/>
        <description>The XSS Filter in Microsoft Internet Explorer 8 does not properly perform neutering for the SCRIPT tag, which allows remote attackers to conduct cross-site scripting (XSS) attacks against web sites that have no inherent XSS vulnerabilities, a different issue than CVE-2009-4074.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-06-28T13:00:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2011-07-05T22:14:57.974-04:00">DRAFT</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:12638 - Fixed typo in title." date="2011-07-22T14:49:00.513-04:00">
              <contributor organization="Digital Defense, Inc.">Brandon Shilling</contributor>
            </modified>
            <status_change date="2011-08-08T04:00:27.166-04:00">INTERIM</status_change>
            <status_change date="2011-08-29T04:00:06.577-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="Microsoft Internet Explorer 8 is installed" definition_ref="oval:org.mitre.oval:def:6210"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1263" version="6" class="vulnerability">
      <metadata>
        <title>WMF Rendering Code Execution Vulnerability (64-bit Windows XP and Server 2003,Unpatched)</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2123" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2123"/>
        <description>Multiple integer overflows in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allow remote attackers to execute arbitrary code via crafted Windows Metafile (WMF) and Enhanced Metafile (EMF) format images that lead to heap-based buffer overflows, as demonstrated using MRBP16::bCheckRecord.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-11-09T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-11-10T07:06:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-16T01:04:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:58.200-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:37.874-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1263 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:56.154-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:43.924-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="64-bit XP or Server 2003 is installed">
          <criteria operator="AND" comment="64-bit XP is installed">
            <criterion comment="Windows XP is installed" test_ref="oval:org.mitre.oval:tst:2838"/>
            <criterion comment="64-Bit (x64 architecture) version of Windows is installed" test_ref="oval:org.mitre.oval:tst:2744"/>
          </criteria>
          <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        </criteria>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of Gdi32.dll is less than 5.2.3790.419" test_ref="oval:org.mitre.oval:tst:2436"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12620" version="3" class="vulnerability">
      <metadata>
        <title>SQL Injection vulnerability in PHP 5.3.2 and 5.3.3, when the MySQLi extension is used.</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>PHP</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-4700" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4700"/>
        <description>The set_magic_quotes_runtime function in PHP 5.3.2 and 5.3.3, when the MySQLi extension is used, does not properly interact with use of the mysqli_fetch_assoc function, which might make it easier for context-dependent attackers to conduct SQL injection attacks via crafted input that had been properly handled in earlier PHP versions.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-03-22T15:12:59">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2011-03-22T13:47:56.314-04:00">DRAFT</status_change>
            <status_change date="2011-04-11T04:00:13.337-04:00">INTERIM</status_change>
            <status_change date="2011-05-02T04:00:09.234-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="PHP is installed" definition_ref="oval:org.mitre.oval:def:12410"/>
        <criterion comment="Check if the version of PHP is equal to 5.3.2 or equal to 5.3.3" test_ref="oval:org.mitre.oval:tst:42438"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1262" version="1" class="vulnerability">
      <metadata>
        <title>zlib Compression Remote DoS Vulnerability (B.11.23)</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
          <product>SecureShell</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2096" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2096"/>
        <description>zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-01-11T12:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-01-12T09:18:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-02-01T09:08:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.23">
          <criteria operator="AND" comment="700 Series OS Release 11.23">
            <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
            <criterion comment="HP Release B.11.23" negate="false" test_ref="oval:org.mitre.oval:tst:2511"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 11.23">
            <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
            <criterion comment="HP Release B.11.23" negate="false" test_ref="oval:org.mitre.oval:tst:2511"/>
          </criteria>
        </criteria>
        <criterion comment="Secure_Shell.SECURE_SHELL is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1033"/>
        <criterion comment="Secure_Shell.SECURE_SHELL with version less than A.04.20.005 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1032"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1260" version="1" class="vulnerability">
      <metadata>
        <title>Integer Overflow in libgd2</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>libgd</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0990" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0990"/>
        <description>Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function, a different set of vulnerabilities than CVE-2004-0941.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-06-27T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-06-29T06:49:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criteria operator="AND" comment="libgd or libgd-devel RPM is earlier than 0:1.8.4-12.3.1">
          <criterion comment="libgd RPM is earlier than 0:1.8.4-12.3.1" negate="false" test_ref="oval:org.mitre.oval:tst:1085"/>
          <criterion comment="libgd-devel RPM is earlier than 0:1.8.4-12.3.1" negate="false" test_ref="oval:org.mitre.oval:tst:1084"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:126" version="3" class="vulnerability">
      <metadata>
        <title>IE v6.0 Improper Cross Domain Security Validation with Dialog Box</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1326" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1326"/>
        <description>Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model to run malicious script or arbitrary programs via dialog boxes, aka "Improper Cross Domain Security Validation with dialog box."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-01-27T05:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="Changed IE registry test to wrt-18">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:43.064-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:11.754-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="the version of mshtml.dll is less than 6.0.2723.2500" negate="false" test_ref="oval:org.mitre.oval:tst:3003"/>
        <criterion comment="the patch q810847 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3115"/>
        <criterion comment="the patch q813489 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3114"/>
        <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12589" version="4" class="vulnerability">
      <metadata>
        <title>Integer overflow vulnerability in the mt_rand function in PHP before 5.3.4</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <product>PHP</product>
        </affected>
        <reference ref_id="CVE-2011-0755" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0755" source="CVE"/>
        <description>Integer overflow in the mt_rand function in PHP before 5.3.4 might make it easier for context-dependent attackers to predict the return values by leveraging a script's use of a large max parameter, as demonstrated by a value that exceeds mt_getrandmax.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-03-29T09:34:18-05:00">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2011-03-29T14:26:02.162-04:00">DRAFT</status_change>
            <status_change date="2011-04-18T04:00:29.392-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:12589 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-09T04:00:59.972-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="PHP is installed" definition_ref="oval:org.mitre.oval:def:12410"/>
        <criterion comment="Check if the version of PHP is less than 5.3.4" test_ref="oval:org.mitre.oval:tst:41865"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1258" version="1" class="vulnerability">
      <metadata>
        <title>RHE3 Firefox and Mozilla DOM Node Spoofing</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2269" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2269"/>
        <description>Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM node names within the context of their namespaces, which allows remote attackers to modify certain tag properties, possibly leading to execution of arbitrary script or code, as demonstrated using an XHTML document with IMG tags with custom properties ("XHTML node spoofing").</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-15T04:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-08-19T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2483"/>
          <criterion comment="mozilla RPM is earlier than 37:1.7.10-1.1.3.1" negate="false" test_ref="oval:org.mitre.oval:tst:2482"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/mozilla is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2650"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12576" version="10" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Oracle VM VirtualBox 4.0</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Oracle VM VirtualBox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-4414" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4414"/>
        <description>Unspecified vulnerability in Oracle VM VirtualBox 4.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Extensions.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-03-16T16:16:20">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2011-03-18T16:57:25.382-04:00">DRAFT</status_change>
            <status_change date="2011-04-04T04:00:22.590-04:00">INTERIM</status_change>
            <status_change date="2011-04-25T04:00:17.396-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:tst:42349 - Found a few issues with the current inventory definition for VirtualBox and the vulnerability definition which uses it, and the fixes plus a bit more are attached. The core issue is that the registry key where the relevant information is stored has had 4 different values since version 3.0.0, with the most recent change causing the vulnerability definition to throw an error." date="2011-10-17T13:02:00.116-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-10-17T13:24:14.993-04:00">INTERIM</status_change>
            <status_change date="2011-11-07T04:00:37.998-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:12025 - modified vulnerabilities of Oracle Virtualbox (part 3)" date="2013-09-03T10:59:00.280-04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-09-03T11:01:14.619-04:00">INTERIM</status_change>
            <status_change date="2013-09-23T04:00:06.496-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:15297 - modificated vulnerabilities for VirtualBox" date="2013-12-05T10:43:00.197-05:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-12-05T10:45:12.217-05:00">INTERIM</status_change>
            <status_change date="2013-12-23T04:00:14.534-05:00">ACCEPTED</status_change>
            <status_change date="2013-12-23T04:00:10.810-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="VirtualBox is installed" definition_ref="oval:org.mitre.oval:def:11581"/>
        <criterion comment="Check if Oracle VM VirtualBox is installed" test_ref="oval:org.mitre.oval:tst:42006"/>
        <criterion comment="Check if Oracle VM VirtualBox version equal to 4.0.0" test_ref="oval:org.mitre.oval:tst:88790"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11581" version="9" class="inventory">
      <metadata>
        <title>VirtualBox is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>VirtualBox</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:oracle:xvm_virtualbox"/>
        <description>VirtualBox is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2010-12-17T19:26:32">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2010-12-21T11:27:26.795-05:00">DRAFT</status_change>
            <status_change date="2011-01-10T04:00:04.930-05:00">INTERIM</status_change>
            <status_change date="2011-01-31T04:00:03.574-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11581 - Modified inventory definition CPE IDs to match the CPE IDs found in the official CPE dictionary" date="2011-03-29T13:53:00.154-04:00">
              <contributor organization="Symantec Corporation">Josh Turpin</contributor>
            </modified>
            <status_change date="2011-03-29T13:54:37.133-04:00">INTERIM</status_change>
            <status_change date="2011-04-18T04:00:03.500-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11581 - Found a few issues with the current inventory definition for VirtualBox and the vulnerability definition which uses it, and the fixes plus a bit more are attached. The core issue is that the registry key where the relevant information is stored has had 4 different values since version 3.0.0, with the most recent change causing the vulnerability definition to throw an error." date="2011-10-17T13:02:00.116-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-10-17T13:24:26.817-04:00">INTERIM</status_change>
            <status_change date="2011-11-07T04:00:09.278-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:15297 - modificated vulnerabilities for VirtualBox" date="2013-12-05T10:43:00.197-05:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-12-05T10:45:12.057-05:00">INTERIM</status_change>
            <status_change date="2013-12-23T04:00:06.821-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criterion comment="Check if Sun xVM VirtualBox is installed" test_ref="oval:org.mitre.oval:tst:41938"/>
        <criterion comment="Check if Sun VirtualBox is installed" test_ref="oval:org.mitre.oval:tst:44050"/>
        <criterion comment="Check if Oracle VM VirtualBox is installed" test_ref="oval:org.mitre.oval:tst:42006"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12569" version="3" class="vulnerability">
      <metadata>
        <title>NULL byte injection vulnerability in PHP before 5.3.4</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>PHP</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-7243" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-7243"/>
        <description>PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intended access restrictions by placing a safe file extension after this character, as demonstrated by .php\0.jpg at the end of the argument to the file_exists function.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-03-22T16:21:49">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2011-03-22T13:47:57.444-04:00">DRAFT</status_change>
            <status_change date="2011-04-11T04:00:12.473-04:00">INTERIM</status_change>
            <status_change date="2011-05-02T04:00:08.860-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="PHP is installed" definition_ref="oval:org.mitre.oval:def:12410"/>
        <criterion comment="Check if the version of PHP is less than 5.3.4" test_ref="oval:org.mitre.oval:tst:42273"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1256" version="4" class="vulnerability">
      <metadata>
        <title>Windows Media Player 8 Bitmap Remote Code Execution</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Windows Media Player</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0006" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0006"/>
        <description>Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on Windows 2000 SP4 and XP SP1, and Media Player 10 on XP SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted bitmap (.BMP) file that specifies a size of 0 but contains additional data.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-02-17T07:36:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-02-22T08:27:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-03-09T12:19:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-04-06T06:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Modified ste:923: altered regex to match on a double zero in the minor field of the version, and also added an initial anchor.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:29:00.341-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:29:39.436-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:37.740-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:923 - obj/ste updates to conform to authoring style guide" date="2013-03-26T09:53:00.500-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-03-26T09:56:01.746-04:00">INTERIM</status_change>
            <status_change date="2013-04-15T04:00:08.960-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Media Player 8 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1035"/>
        <criterion comment="the version of Wmpui.dll is less than 8.0.0.4495" negate="false" test_ref="oval:org.mitre.oval:tst:1034"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1253" version="4" class="vulnerability">
      <metadata>
        <title>Distributed TIP Request Validation Process Permits Denial of Service (Win2k,SP4)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>TIP</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1980" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1980"/>
        <description>Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service hang) via a crafted Transaction Internet Protocol (TIP) message that causes DTC to repeatedly connect to a target IP and port number after an error occurs, aka the "Distributed TIP Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-10-12T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-10-19T05:46:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:48.575-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:41.434-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="Win2K/XP/2003 service pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2569"/>
        <criteria operator="OR" comment="Either ole32.dll or rpcss.dll has a version less than 5.0.2195.7059">
          <criterion comment="the version of ole32.dll is less than 5.0.2195.7059" negate="false" test_ref="oval:org.mitre.oval:tst:2568"/>
          <criterion comment="the version of rpcss.dll is less than 5.0.2195.7059" negate="false" test_ref="oval:org.mitre.oval:tst:2567"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12528" version="3" class="vulnerability">
      <metadata>
        <title>Use-after-free vulnerability in the Zend engine in PHP before 5.2.15 and 5.3.x before 5.3.4</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>PHP</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-4697" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4697"/>
        <description>Use-after-free vulnerability in the Zend engine in PHP before 5.2.15 and 5.3.x before 5.3.4 might allow context-dependent attackers to cause a denial of service (heap memory corruption) or have unspecified other impact via vectors related to use of __set, __get, __isset, and __unset methods on objects accessed by a reference.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-03-22T16:21:49">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2011-03-22T13:47:57.132-04:00">DRAFT</status_change>
            <status_change date="2011-04-11T04:00:10.780-04:00">INTERIM</status_change>
            <status_change date="2011-05-02T04:00:08.188-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="PHP is installed" definition_ref="oval:org.mitre.oval:def:12410"/>
        <criterion comment="Check if the version of PHP is less than 5.2.15 or 5.3.x before 5.3.4" test_ref="oval:org.mitre.oval:tst:42457"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1252" version="2" class="vulnerability">
      <metadata>
        <title>Format string vulnerability in Sun Java Web Console</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1681" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1681"/>
        <description>Format string vulnerability in libwebconsole_services.so in Sun Java Web Console 2.2.2 through 2.2.5 allows remote attackers to cause a denial of service (application crash), obtain sensitive information, and possibly execute arbitrary code via unspecified vectors during a failed login attempt, related to syslog.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-15T09:00:00.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-06-15T11:20:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-07-03T14:05:54.056-04:00">INTERIM</status_change>
            <status_change date="2007-07-18T15:57:48.718-04:00">ACCEPTED</status_change>
            <modified comment="Add criteria to check for affected version of Sun Java Web Console" date="2009-07-20T21:58:00.890-04:00">
              <contributor organization="Hewlett-Packard">Pai Peng</contributor>
            </modified>
            <status_change date="2009-07-21T07:46:12.813-04:00">INTERIM</status_change>
            <status_change date="2009-08-10T04:00:02.535-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Sun Alert 201387 for Solaris 10 (SPARC)">
          <criterion comment="Solaris 10 Installed" test_ref="oval:org.mitre.oval:tst:3680"/>
          <criterion comment="sparc architecture" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criterion negate="true" comment="Patch 121211-02 or later installed" test_ref="oval:org.mitre.oval:tst:3537"/>
          <criterion comment="Sun Java Web Console version is 2.2.2, 2.2.3, 2.2.4 or 2.2.5" test_ref="oval:org.mitre.oval:tst:10318"/>
        </criteria>
        <criteria operator="AND" comment="Sun Alert 201387 for Solaris 10 (x86)">
          <criterion comment="Solaris 10 Installed" test_ref="oval:org.mitre.oval:tst:3680"/>
          <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criterion negate="true" comment="Patch 121212-02 or later installed" test_ref="oval:org.mitre.oval:tst:3315"/>
          <criterion comment="Sun Java Web Console version is 2.2.2, 2.2.3, 2.2.4 or 2.2.5" test_ref="oval:org.mitre.oval:tst:10318"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1250" version="6" class="vulnerability">
      <metadata>
        <title>Network Connection Manager Interruption of Service (Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2307" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2307"/>
        <description>netman.dll in Microsoft Windows Connections Manager Library allows local users to cause a denial of service (Network Connections Service crash) via a large integer argument to a particular function, aka "Network Connection Manager Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-10-12T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-10-19T05:46:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:09:00.634-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:37.596-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1250 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:08.977-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:40.336-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="netman.dll is less than 5.2.3790.396" test_ref="oval:org.mitre.oval:tst:1038"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1249" version="1" class="vulnerability">
      <metadata>
        <title>A Security Vulnerability in Solaris 10 ICMP Handling May Allow a SystemPanic and Result in Denial of Service (DoS)</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0634" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0634"/>
        <description>Unspecified vulnerability in Sun Solaris 10 before 20070130 allows remote attackers to cause a denial of service (system crash) via certain ICMP packets.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-08-10T12:25:20.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-08-13T13:57:11.559-04:00">DRAFT</status_change>
            <status_change date="2007-09-06T09:13:26.664-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:39.476-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software Section">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102697" negate="false">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion comment="Patch 118833-28 or later installed" test_ref="oval:org.mitre.oval:tst:3688" negate="true"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102697" negate="false">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion comment="Patch 118855-28 or later installed" test_ref="oval:org.mitre.oval:tst:3526" negate="true"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12489" version="3" class="vulnerability">
      <metadata>
        <title>Denial of service vulnerability in PHP 5.2 before 5.2.15 and 5.3 before 5.3.4 in IMAP extension</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>PHP</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-4150" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4150"/>
        <description>Double free vulnerability in the imap_do_open function in the IMAP extension (ext/imap/php_imap.c) in PHP 5.2 before 5.2.15 and 5.3 before 5.3.4 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-03-22T16:21:49">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2011-03-22T13:47:57.717-04:00">DRAFT</status_change>
            <status_change date="2011-04-11T04:00:09.200-04:00">INTERIM</status_change>
            <status_change date="2011-05-02T04:00:07.444-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="PHP is installed" definition_ref="oval:org.mitre.oval:def:12410"/>
        <criterion comment="Check if the version of PHP is 5.2 before 5.2.15 or 5.3 before 5.3.4" test_ref="oval:org.mitre.oval:tst:42069"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1247" version="3" class="vulnerability">
      <metadata>
        <title>Mozilla Privilege Escalation Using a JavaScript Function's Cloned Parent</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1734" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1734"/>
        <description>Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to execute arbitrary code by using the Object.watch method to access the "clone parent" internal function.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-05-07T09:05:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-05-10T08:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:15.909-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:1133" date="2007-02-26T08:08:00.208-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-26T08:09:14.985-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:1135" date="2007-02-26T08:21:00.993-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:1136" date="2007-02-26T08:24:00.848-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:1138" date="2007-02-26T08:25:00.405-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:2283" date="2007-02-26T08:29:00.407-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:2284" date="2007-02-26T08:30:00.724-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:46.565-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:881" date="2007-04-23T12:05:00.811-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:12:53.062-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:882" date="2007-04-23T12:05:00.939-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:883" date="2007-04-23T12:05:00.804-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:1385" date="2007-04-23T12:05:00.430-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:52.674-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.7 or earlier is installed">
          <criterion comment="Mozilla Firefox version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1268"/>
          <criterion comment="Firefox version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1267"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Thunderbird version 1.0.7 or earlier is installed">
          <criterion comment="Mozilla Thunderbird version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1266"/>
          <criterion comment="Mozilla Thunderbird version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1265"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.12 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.12 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1264"/>
          <criterion comment="Mozilla Suite version 1.7.12 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1263"/>
        </criteria>
        <criteria operator="AND" comment="A pre-release of SeaMonkey 1.0 is installed">
          <criterion comment="A pre-release of SeaMonkey 1.0 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2439"/>
          <criterion comment="A pre-release of SeaMonkey 1.0 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2438"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1246" version="2" class="vulnerability">
      <metadata>
        <title>VirusVault CGI Byterange Request DoS</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2728" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2728"/>
        <description>The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-03-18T07:24:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-03-22T11:10:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-04-06T06:31:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:27.140-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:08.010-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="700 Series OS Release 11.04">
          <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
          <criterion comment="HP Release B.11.04" negate="false" test_ref="oval:org.mitre.oval:tst:1276"/>
        </criteria>
        <criterion comment="VirusVault is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1040"/>
        <criterion comment="Patch PHSS_34123 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1039"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1245" version="2" class="vulnerability">
      <metadata>
        <title>gedit Format String Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>gedit</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1686" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1686"/>
        <description>Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a bin file with format string specifiers in the filename.  NOTE: while this issue is triggered on the command line by the gedit user, it has been reported that web browsers and email clients could be configured to provide a file name as an argument to gedit, so there is a valid attack that crosses security boundaries.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-07-11T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-07-27T10:36:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected version string in ste:929. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-12T13:34:00.798-05:00">
              <contributor organization="Independent Contributor">Bob Towbes</contributor>
            </modified>
            <status_change date="2007-01-12T13:37:39.951-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:37.408-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="gedit RPM earlier than 1:2.2.2-4rhel3" negate="false" test_ref="oval:org.mitre.oval:tst:1042"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/gedit is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1041"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1244" version="6" class="vulnerability">
      <metadata>
        <title>Plug and Play User Data Validation Vulnerability (Windows 2000)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2120" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2120"/>
        <description>Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "\" (backslash) characters in a registry key name, which triggers the overflow in a wsprintfW function call.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-10-12T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-10-19T05:46:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-08-31T12:00:00.000-04:00" comment="removed an incorrect leading ^ from the value entity of ste:2402">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-08-31T00:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:15.640-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1244 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:27.402-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:39.436-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="Win2K/XP/2003 service pack 4 is installed" test_ref="oval:org.mitre.oval:tst:2569"/>
        <criterion comment="umpnpmgr.dll is less than 5.0.2195.7069" test_ref="oval:org.mitre.oval:tst:1043"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1242" version="1" class="vulnerability">
      <metadata>
        <title>sudo Symlink Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>sudo</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1993" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1993"/>
        <description>Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-07-18T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-07-27T10:36:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <notes>
        <note>It appears that we can't parse the vulnerable configuration condition (an ALL in the second field of a line after a line that has no ALL in the second field) with our existing regexp.</note>
      </notes>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="sudo RPM earlier than 0:1.6.7p5-1.1" negate="false" test_ref="oval:org.mitre.oval:tst:1046"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/etc/sudoers exists" negate="false" test_ref="oval:org.mitre.oval:tst:1045"/>
          <criterion comment="/usr/bin/sudo is executable by everyone" negate="false" test_ref="oval:org.mitre.oval:tst:1044"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1240" version="7" class="vulnerability">
      <metadata>
        <title>EMF Rendering Denial of Service Vulnerability (Windows 2000)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0803" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0803"/>
        <description>The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to cause a denial of service (application crash) via a crafted Enhanced Metafile (EMF) file that causes invalid (1) end, (2) emreof, or (3) palent offsets to be used, aka "Enhanced Metafile Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-11-09T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-11-10T07:06:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-16T01:04:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:08.346-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:46.368-04:00">ACCEPTED</status_change>
            <modified date="2009-10-09T16:16:46.368-04:00" comment="Removed use of deprecated test">
              <contributor organization="The MITRE Corporation">Mike Lah</contributor>
            </modified>
            <status_change date="2009-10-12T04:00:20.441-04:00">INTERIM</status_change>
            <status_change date="2009-11-02T04:00:02.336-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1240 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:30.413-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:39.048-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criteria operator="OR" comment="version of Gdi32.dll is less than 5.0.2195.7069 OR the version of Mf3216.dll is less than 5.0.2195.6898">
          <criterion comment="the version of Gdi32.dll is less than 5.0.2195.7069" test_ref="oval:org.mitre.oval:tst:1227"/>
          <criterion comment="the version of mf3216.dll is less than 5.0.2195.6898" test_ref="oval:org.mitre.oval:tst:1398"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:124" version="4" class="vulnerability">
      <metadata>
        <title>Solaris 7 cachefsd Heap Overflow Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>cachefsd</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0033" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0033"/>
        <description>Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name.</description>
        <oval_repository>
          <dates>
            <submitted date="2002-10-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified date="2005-01-28T12:00:00.000-04:00" comment="Added patch test">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </modified>
            <status_change date="2005-02-01T08:29:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="fixed the service_name entity used in the inetd_object" date="2007-04-10T15:17:00.350-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-04-10T15:17:46.093-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:15.088-04:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:53.548-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:10.335-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="File cachefsd exists" negate="false" test_ref="oval:org.mitre.oval:tst:3053"/>
          <criterion comment="Patch 108800-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3024"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="inetd.conf contains cachefsd" negate="false" test_ref="oval:org.mitre.oval:tst:3049"/>
          <criterion comment="inetd running" negate="false" test_ref="oval:org.mitre.oval:tst:3135"/>
          <criteria operator="OR" comment="File cachefsd executable">
            <criterion comment="File cachefsd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3048"/>
            <criterion comment="File cachefsd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3047"/>
            <criterion comment="File cachefsd executable" negate="false" test_ref="oval:org.mitre.oval:tst:3046"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12393" version="3" class="vulnerability">
      <metadata>
        <title>Vulnerability in the iconv_mime_decode_headers function in the Iconv extension in PHP before 5.3.4</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>PHP</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-4699" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4699"/>
        <description>The iconv_mime_decode_headers function in the Iconv extension in PHP before 5.3.4 does not properly handle encodings that are unrecognized by the iconv and mbstring (aka Multibyte String) implementations, which allows remote attackers to trigger an incomplete output array, and possibly bypass spam detection or have unspecified other impact, via a crafted Subject header in an e-mail message, as demonstrated by the ks_c_5601-1987 character set.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-03-22T16:21:49">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2011-03-22T13:47:56.885-04:00">DRAFT</status_change>
            <status_change date="2011-04-11T04:00:08.515-04:00">INTERIM</status_change>
            <status_change date="2011-05-02T04:00:07.109-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="PHP is installed" definition_ref="oval:org.mitre.oval:def:12410"/>
        <criterion comment="Check if the version of PHP is less than 5.3.4" test_ref="oval:org.mitre.oval:tst:42273"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1239" version="5" class="vulnerability">
      <metadata>
        <title>IE5.01,SP4 PNG Image Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1211"/>
        <description>Buffer overflow in the PNG image rendering component of Microsoft Internet Explorer allows remote attackers to execute arbitrary code via a crafted PNG file.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-06-22T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-06-22T12:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-10-17T04:13:00.000-04:00" comment="Fixed registry_object obj:1557 by moving PNGFilter.CoPNGFilter from name to end of key, and setting xsi:nil to true on name.  Modified by Harvey Rubinovitz">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2006-10-17T04:13:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-11-14T08:57:51.888-05:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:2614: set datatype to version.  Implemented by Harvey Rubinovitz." date="2007-01-25T16:54:00.319-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-25T16:59:43.350-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:37.230-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:49.509-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:11.624-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2794"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3828.2700" negate="false" test_ref="oval:org.mitre.oval:tst:2359"/>
          <criterion comment="the patch kb883939 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2750"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="PNG image rendering enabled in Internet Explorer" negate="false" test_ref="oval:org.mitre.oval:tst:2749"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12374" version="3" class="vulnerability">
      <metadata>
        <title>Information disclosure vulnerability in HTTP BIO connector in Apache Tomcat 7.0.x through 7.0.11</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Apache Tomcat</product>
        </affected>
        <reference ref_id="CVE-2011-1475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1475" source="CVE"/>
        <description>The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers to read responses intended for other clients in opportunistic circumstances by examining the application data in HTTP packets, related to "a mix-up of responses for requests from different users."</description>
        <oval_repository>
          <dates>
            <submitted date="2011-05-04T09:29:30-05:00">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2011-05-06T15:23:47.149-04:00">DRAFT</status_change>
            <status_change date="2011-05-23T04:00:10.509-04:00">INTERIM</status_change>
            <status_change date="2011-06-13T04:00:05.510-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Apache Tomcat is installed" definition_ref="oval:org.mitre.oval:def:12401"/>
        <criterion comment="Check if Apache Tomcat version is in range 7.0 through 7.0.11" test_ref="oval:org.mitre.oval:tst:42406"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12401" version="3" class="inventory">
      <metadata>
        <title>Apache Tomcat is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Apache Tomcat</product>
        </affected>
        <reference ref_id="cpe:/a:apache:tomcat" source="CPE"/>
        <description>Apache Tomcat is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2010-12-17T14:41:13">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2010-12-21T11:26:47.171-05:00">DRAFT</status_change>
            <status_change date="2011-01-10T04:00:16.630-05:00">INTERIM</status_change>
            <status_change date="2011-01-31T04:00:10.533-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Apache Tomcat is installed" test_ref="oval:org.mitre.oval:tst:41921"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12355" version="3" class="vulnerability">
      <metadata>
        <title>Microsoft Internet Explorer PDF Printing Information Disclosure</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <product>Microsoft Internet Explorer 6</product>
          <product>Microsoft Internet Explorer 7</product>
          <product>Microsoft Internet Explorer 8</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4073" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4073"/>
        <description>The printing functionality in Microsoft Internet Explorer 8 allows remote attackers to discover a local pathname, and possibly a local username, by reading the dc:title element of a PDF document that was generated from a local web page.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-06-28T13:00:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2011-07-05T22:14:57.740-04:00">DRAFT</status_change>
            <status_change date="2011-07-25T04:00:08.947-04:00">INTERIM</status_change>
            <status_change date="2011-08-15T04:00:05.923-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <extend_definition comment="Microsoft Internet Explorer 6 is installed" definition_ref="oval:org.mitre.oval:def:563"/>
        <extend_definition comment="Microsoft Internet Explorer 7 is installed" definition_ref="oval:org.mitre.oval:def:627"/>
        <extend_definition comment="Microsoft Internet Explorer 8 is installed" definition_ref="oval:org.mitre.oval:def:6210"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:627" version="6" class="inventory">
      <metadata>
        <title>Microsoft Internet Explorer 7 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <product>Microsoft Internet Explorer 7</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:ie:7"/>
        <description>A version of Microsoft Internet Explorer 7 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-01-09T06:00:00">
              <contributor organization="Secure Elements, Inc.">Sudhir Gandhe</contributor>
            </submitted>
            <status_change date="2007-01-11T15:30:00-04:00">DRAFT</status_change>
            <status_change date="2007-02-20T13:40:49.320-05:00">INTERIM</status_change>
            <modified comment="Added Microsoft Windows Vista to the list of affected platforms." date="2007-03-05T09:10:00.104-05:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2007-03-21T16:17:23.092-04:00">ACCEPTED</status_change>
            <modified comment="Added Microsoft Internet Explorer 7 product. Removed Microsoft reference" date="2009-06-01T16:05:28.035-04:00">
              <contributor organization="The MITRE Corporation">Brendan Miles</contributor>
            </modified>
            <status_change date="2009-06-08T04:01:04.886-04:00">INTERIM</status_change>
            <status_change date="2009-06-29T04:01:07.843-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:47.971-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:24.527-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:115 - pattern match update for IE 7 inventory def (replaced the greedy pattern" date="2015-02-16T13:23:00.322-05:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2015-02-16T13:25:05.019-05:00">INTERIM</status_change>
            <status_change date="2015-03-09T04:01:53.613-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Internet Explorer 7 is installed" test_ref="oval:org.mitre.oval:tst:178"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:563" version="8" class="inventory">
      <metadata>
        <title>Microsoft Internet Explorer 6 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer 6</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:ie:6"/>
        <description>The application Microsoft Internet Explorer 6 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-08-11T12:53:40">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-08T11:26:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-09-27T12:29:31.086-04:00">INTERIM</status_change>
            <status_change date="2006-10-16T15:58:44.500-04:00">ACCEPTED</status_change>
            <modified comment="Added an anchor to the regex used to check for Internet Explorer 6." date="2007-01-11T20:38:00.950-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-01-11T20:49:17.329-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:40:46.580-05:00">ACCEPTED</status_change>
            <modified comment="Added CPE reference." date="2007-04-30T07:48:00.756-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-30T07:54:07.779-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:48.577-04:00">ACCEPTED</status_change>
            <modified comment="Added Microsoft Internet Explorer 6 to products. Removed Microsoft reference" date="2009-06-01T16:05:28.035-04:00">
              <contributor organization="The MITRE Corporation">Brendan Miles</contributor>
            </modified>
            <status_change date="2009-06-08T04:00:43.851-04:00">INTERIM</status_change>
            <status_change date="2009-06-29T04:00:29.720-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:2185 - Anchored regular expression" date="2011-02-22T12:51:00.261-05:00">
              <contributor organization="SecPod Technologies">Preeti Subramanian</contributor>
            </modified>
            <status_change date="2011-02-22T12:52:28.729-05:00">INTERIM</status_change>
            <status_change date="2011-03-14T04:00:52.517-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:56.991-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:03:23.596-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Internet Explorer 6 (any patch level) is installed" test_ref="oval:org.mitre.oval:tst:2333"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1235" version="4" class="vulnerability">
      <metadata>
        <title>IE6,SP1 COM Object Instantiation Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1990" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1990"/>
        <description>Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not ActiveX controls, including (1) devenum.dll, (2) diactfrm.dll, (3) wmm2filt.dll, (4) fsusd.dll, (5) dmdskmgr.dll, (6) browsewm.dll, (7) browseui.dll, (8) shell32.dll, (9) mshtml.dll, (10) inetcfg.dll, (11) infosoft.dll, (12) query.dll, (13) syncui.dll, (14) clbcatex.dll, (15) clbcatq.dll, (16) comsvcs.dll, and (17) msconf.dll, which causes memory corruption, aka "COM Object Instantiation Memory Corruption Vulnerability," a different vulnerability than CVE-2005-2087.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-23T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-08-25T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:46:00.254-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:37.050-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:49.198-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:11.471-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
          <criteria operator="OR" comment="the version of mshtml.dll is less than 6.0.2800.1515 or 6.0.2800.1516">
            <criterion comment="the version of mshtml.dll is less than 6.0.2800.1515 (RTMGDR)" negate="false" test_ref="oval:org.mitre.oval:tst:2418"/>
            <criterion comment="the version of mshtml.dll is less than 6.0.2800.1516 (RTMQFE)" negate="false" test_ref="oval:org.mitre.oval:tst:2417"/>
          </criteria>
          <criterion comment="the patch kb896727 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1129"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12334" version="3" class="vulnerability">
      <metadata>
        <title>Vulnerability in the Standard PHP Library (SPL) extension in PHP before 5.3.4</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>PHP</product>
        </affected>
        <reference ref_id="CVE-2011-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0754" source="CVE"/>
        <description>The SplFileInfo::getType function in the Standard PHP Library (SPL) extension in PHP before 5.3.4 on Windows does not properly detect symbolic links, which might make it easier for local users to conduct symlink attacks by leveraging cross-platform differences in the stat structure, related to lack of a FILE_ATTRIBUTE_REPARSE_POINT check.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-03-29T09:34:15-05:00">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2011-03-29T14:26:01.373-04:00">DRAFT</status_change>
            <status_change date="2011-04-18T04:00:16.652-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:00:33.804-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="PHP is installed" definition_ref="oval:org.mitre.oval:def:12410"/>
        <criterion comment="Check if the version of PHP is less than 5.3.4" test_ref="oval:org.mitre.oval:tst:41865"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1230" version="6" class="vulnerability">
      <metadata>
        <title>Windows Media Player PNG Vulnerability (v7.1)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Media Player</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0025"/>
        <description>Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to execute arbitrary code via a PNG image with a large chunk size.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:15.443-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:04.887-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:952" date="2007-01-24T21:37:00.382-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-24T21:38:24.489-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:36.883-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:952 - def:5942 &amp; def:5689, Enhanced to cover WinVista, 2008, 2003 &amp; also 64-bit with service packs" date="2011-11-15T14:56:00.873-05:00">
              <contributor organization="SecPod Technologies">Pradeep R B</contributor>
            </modified>
            <status_change date="2011-11-15T14:58:49.961-05:00">INTERIM</status_change>
            <status_change date="2011-12-05T04:00:04.603-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:952 - Updated series of States to escape .(period) character." date="2012-01-13T17:30:00.463-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2012-01-13T17:34:55.886-05:00">INTERIM</status_change>
            <status_change date="2012-01-30T04:00:09.182-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Media Player 7.1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1066"/>
        <criterion comment="the version of wmpui.dll is less than 7.10.0.3076" negate="false" test_ref="oval:org.mitre.oval:tst:1065"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:123" version="5" class="vulnerability">
      <metadata>
        <title>IE Improper Object Tag Handling</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0809" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0809"/>
        <description>Internet Explorer 5.01 through 6.0 does not properly handle object tags returned from a Web server during XML data binding, which allows remote attackers to execute arbitrary code via an HTML e-mail message or web page.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T05:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified date="2004-03-04T05:00:00.000-04:00" comment="Added the configuration check to see if ActiveX controls are enabled by the current user when local machine settings are not in use.">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </modified>
            <status_change date="2004-03-25T05:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="modified wrt-18 - Changed value element to include pattern match">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:45:58.068-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:36.692-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:43.349-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:11.283-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="OR" comment="Internet Explorer 6.0 or IE 6.0 SP1 is installed">
            <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
            <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
          </criteria>
          <criterion comment="the version of mshtml.dll is less than 6.0.2800.1264" negate="false" test_ref="oval:org.mitre.oval:tst:2918"/>
          <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
            </criteria>
          </criteria>
          <criterion comment=".hta applications are enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2915"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12271" version="3" class="vulnerability">
      <metadata>
        <title>Race condition vulnerability in the PCNTL extension in PHP before 5.3.4</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>PHP</product>
        </affected>
        <reference ref_id="CVE-2011-0753" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0753" source="CVE"/>
        <description>Race condition in the PCNTL extension in PHP before 5.3.4, when a user-defined signal handler exists, might allow context-dependent attackers to cause a denial of service (memory corruption) via a large number of concurrent signals.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-03-29T09:34:17-05:00">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2011-03-29T14:26:01.891-04:00">DRAFT</status_change>
            <status_change date="2011-04-18T04:00:14.909-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:00:31.174-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="PHP is installed" definition_ref="oval:org.mitre.oval:def:12410"/>
        <criterion comment="Check if the version of PHP is less than 5.3.4" test_ref="oval:org.mitre.oval:tst:41865"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1227" version="1" class="vulnerability">
      <metadata>
        <title>Mozilla FTP URI MIME Type Exploit Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0760" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0760"/>
        <description>Mozilla allows remote attackers to cause Mozilla to open a URI as a different MIME type than expected via a null character (%00) in an FTP URI.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-19T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-01-24T03:40:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 8 or 9 installed">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
        </criteria>
        <criteria operator="OR" comment="Mozilla components (any SUNWmoznav/SUNWmozmail) installed">
          <criterion comment="Mozilla (SUNWmoznav) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1070"/>
          <criterion comment="Mozilla Mail (SUNWmozmail) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1069"/>
        </criteria>
        <criterion comment="Patch 117765-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1068"/>
        <criterion comment="Patch 117767-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1067"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1226" version="5" class="vulnerability">
      <metadata>
        <title>RHE4 Improper Handling of Synthetic Events in Mozilla</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2260"/>
        <description>The browser user interface in Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 does not properly distinguish between user-generated events and untrusted synthetic events, which makes it easier for remote attackers to perform dangerous actions that normally could only be performed manually by the user.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-15T04:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-08-19T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11366 - Updated CPE reference, updated regular expression" date="2011-02-17T13:29:00.547-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2011-02-17T13:31:09.243-05:00">INTERIM</status_change>
            <status_change date="2011-03-07T04:00:07.406-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11366 - Corrected - right version for brlapi and brlapi-devel as specified by RHSA-2010:0181-5" date="2013-03-18T12:26:00.995-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-03-18T12:31:12.861-04:00">INTERIM</status_change>
            <status_change date="2013-04-08T04:00:08.333-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2652"/>
          <criterion comment="mozilla RPM is earlier than 37:1.7.10-1.4.1" negate="false" test_ref="oval:org.mitre.oval:tst:2651"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/mozilla is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2650"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1225" version="1" class="vulnerability">
      <metadata>
        <title>Linux Kernel shmctl() Memory Swap Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>Linux kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0176"/>
        <description>The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could cause sensitive memory to be swapped to disk, which could allow it to be read by other users once it has been released.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-06-29T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-06-29T06:49:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criteria operator="OR" comment="kernel, kernel-smp or kernel-hugemem RPM earlier than 0:2.4.21-32.0.1.EL">
          <criterion comment="kernel RPM earlier than 0:2.4.21-32.0.1.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1148"/>
          <criterion comment="kernel-hugemem RPM earlier than 0:2.4.21-32.0.1.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1147"/>
          <criterion comment="kernel-smp RPM earlier than 0:2.4.21-32.0.1.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1146"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1224" version="2" class="vulnerability">
      <metadata>
        <title>Step-by-Step Interactive Training Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Interactive Training</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1212" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1212"/>
        <description>Buffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe) allows remote attackers to execute arbitrary code via a bookmark link file (.cbo, cbl, or .cbm extension) with a long User field.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-08T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2005-08-09T07:56:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-08-24T09:56:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-08-28T12:00:00.000-04:00" comment="modified obj 1072 to use xsi:nil instead of a .* pattern match">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-08-28T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:28:32.053-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Microsoft Interactive Training is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1073"/>
        <criterion comment="the version of Orun32.exe is less than 3.5.0.117" negate="false" test_ref="oval:org.mitre.oval:tst:1072"/>
        <criterion comment="the patch kb898458  is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1071"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1222" version="6" class="vulnerability">
      <metadata>
        <title>MSDTC Invalid Memory Access Vulnerability (Win2K)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0034" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0034"/>
        <description>Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or BuildContext opcode, which triggers a bug in the NdrAllocate function, aka the MSDTC Invalid Memory Access Vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-05-10T03:16:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-05-10T08:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:15.295-04:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:15.023-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:46.195-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1222 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:19.719-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:35.773-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="the version of Msdtctm.dll is less than 2000.2.3535.0" test_ref="oval:org.mitre.oval:tst:1074"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1213" version="6" class="vulnerability">
      <metadata>
        <title>Windows 2000 TAPI Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Telephony Service</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0058" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0058"/>
        <description>Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000, Windows XP, and Windows Server 2003 allows attackers elevate privileges or execute arbitrary code via a crafted message.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-11T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2005-08-19T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected and tightened regular expression in ste:2610" date="2010-12-02T11:46:00.307-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-12-02T11:47:28.226-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:23.444-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:11.511-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:33.867-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="AND" comment="Windows 2000 (sp4 or earlier) is installed">
            <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
            <criterion comment="Win2K/XP/2003 service pack 5 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2790"/>
          </criteria>
          <criterion comment="the version of tapisrv.dll is less than 5.0.2195.7057" negate="false" test_ref="oval:org.mitre.oval:tst:1075"/>
          <criterion comment="the patch kb893756 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:1192"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="the Telephony service is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:1191"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1212" version="2" class="vulnerability">
      <metadata>
        <title>HP-UX ftpd Remote Unauthorized Data Access (B.10.24)</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
          <product>ftpd</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3296" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3296"/>
        <description>The FTP server in HP-UX 10.20, B.11.00, and B.11.11, allows remote attackers to list arbitrary directories as root by running the LIST command before logging in.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-11-30T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-12-20T11:03:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-01-04T08:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-01-25T07:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:26.911-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:07.720-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 10.24">
          <criteria operator="AND" comment="700 Series OS Release 10.24">
            <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
            <criterion comment="HP Release B.10.24" negate="false" test_ref="oval:org.mitre.oval:tst:1077"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 10.24">
            <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
            <criterion comment="HP Release B.10.24" negate="false" test_ref="oval:org.mitre.oval:tst:1077"/>
          </criteria>
        </criteria>
        <criterion comment="Patch PHNE_24394 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1076"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:121" version="3" class="vulnerability">
      <metadata>
        <title>Microsoft SQL Server Extended Stored Procedure Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft SQL Server 2000</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0154" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0154"/>
        <description>Buffer overflows in extended stored procedures for Microsoft SQL Server 7.0 and 2000 allow remote attackers to cause a denial of service or execute arbitrary code via a database query with certain long arguments.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Yi-Fang Koh</contributor>
            </submitted>
            <modified date="2005-04-08T10:31:00.000-04:00" comment="modified wft-237 - literal string corrected">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:31:00.000-04:00" comment="modified wft-236 - corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:31:00.000-04:00" comment="modified wft-65 - Corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:31:00.000-04:00" comment="modified wft-66 - corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:31:00.000-04:00" comment="modified wft-67 - Corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:32:00.000-04:00" comment="modified wft-68 - Corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:33:00.000-04:00" comment="modified wft-69 - corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2005-04-11T08:48:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-04-27T12:07:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:121 - SQL Server 2000 has been replaced by Microsoft SQL Server 2000" date="2014-06-02T14:59:00.848-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-06-02T15:00:55.121-04:00">INTERIM</status_change>
            <status_change date="2014-06-23T04:00:23.692-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="SQL Server 2000 is installed" test_ref="oval:org.mitre.oval:tst:2977"/>
        <criterion comment="the version of sqlservr.exe is less than 2000.80.608.0" test_ref="oval:org.mitre.oval:tst:2926"/>
        <criterion comment="the version of odsole70.dll is less than 2000.80.606.0" test_ref="oval:org.mitre.oval:tst:2925"/>
        <criterion comment="the version of xpqueue.dll is less than 2000.80.606.0" test_ref="oval:org.mitre.oval:tst:2924"/>
        <criterion comment="the version of xprepl.dll is less than 2000.80.606.0" test_ref="oval:org.mitre.oval:tst:2923"/>
        <criterion comment="the version of xplog70.dll is less than 2000.80.606.0" test_ref="oval:org.mitre.oval:tst:2922"/>
        <criterion comment="the version of xpweb70.dll is less than 2000.80.606.0" test_ref="oval:org.mitre.oval:tst:2921"/>
        <criterion comment="the version of xpstar.dll is less than 2000.80.628.0" test_ref="oval:org.mitre.oval:tst:2920"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1207" version="4" class="vulnerability">
      <metadata>
        <title>IE6,SP1 File Disclosure via Redirects Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0648" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0648"/>
        <description>The legacy &lt;script> data-island capability for XML in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to read arbitrary XML files, and portions of other files, via a URL whose "src" attribute redirects to a local file.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-06-22T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-06-22T12:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:46:06.502-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:35.449-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:51.802-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:10.519-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
          <criteria operator="OR" comment="the version of mshtml.dll is less than 6.0.2800.1505 or 6.0.2800.1506">
            <criterion comment="the version of mshtml.dll is less than 6.0.2800.1505 (RTMGDR)" negate="false" test_ref="oval:org.mitre.oval:tst:2365"/>
            <criterion comment="the version of mshtml.dll is less than 6.0.2800.1506 (RTMQFE)" negate="false" test_ref="oval:org.mitre.oval:tst:2364"/>
          </criteria>
          <criterion comment="the patch kb883939 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2750"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12064" version="3" class="vulnerability">
      <metadata>
        <title>Stack based buffer overflow vulnerability in Novell File Reporter (NFR) before 1.0.2</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Novell File Reporter</product>
        </affected>
        <reference ref_id="CVE-2011-0994" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0994" source="CVE"/>
        <description>Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter (NFR) before 1.0.2 allows remote attackers to execute arbitrary code via unspecified XML data.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-05-04T09:37:17-05:00">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2011-05-12T10:52:53.161-04:00">DRAFT</status_change>
            <status_change date="2011-05-30T04:00:17.688-04:00">INTERIM</status_change>
            <status_change date="2011-06-20T04:00:04.558-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Novell File Reporter is installed" definition_ref="oval:org.mitre.oval:def:12513"/>
        <criterion comment="Check if Novell File Reporter version is less than 1.0.4.2" test_ref="oval:org.mitre.oval:tst:41915"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12513" version="5" class="inventory">
      <metadata>
        <title>Novell File Reporter is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Novell File Reporter</product>
        </affected>
        <reference ref_id="cpe:/a:novell:file_reporter" source="CPE"/>
        <description>Novell File Reporter is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2011-04-19T12:54:13">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2011-05-12T10:52:52.776-04:00">DRAFT</status_change>
            <status_change date="2011-05-30T04:00:39.445-04:00">INTERIM</status_change>
            <status_change date="2011-06-20T04:00:06.486-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:12513 - modified inventories for Microsoft Expression Design." date="2013-07-05T09:53:00.264-04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2013-07-05T09:58:02.119-04:00">INTERIM</status_change>
            <status_change date="2013-07-22T04:00:07.818-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check if Novell File Reporter is installed" test_ref="oval:org.mitre.oval:tst:42124"/>
        <criterion comment="The registry key that holds the install path of Novell File Reporter exists" test_ref="oval:org.mitre.oval:tst:81589"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12019" version="4" class="vulnerability">
      <metadata>
        <title>Exchange Server Infinite Loop Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <product>Microsoft Exchange Server</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-3937" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3937"/>
        <description>Microsoft Exchange Server 2007 SP2 on the x64 platform allows remote authenticated users to cause a denial of service (infinite loop and MSExchangeIS outage) via a crafted RPC request, aka "Exchange Server Infinite Loop Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-12-14T14:00:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2010-12-17T20:55:34.981-05:00">DRAFT</status_change>
            <status_change date="2011-01-03T04:00:12.541-05:00">INTERIM</status_change>
            <status_change date="2011-01-24T04:00:12.829-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft Exchange Server 2007 SP2 is installed" definition_ref="oval:org.mitre.oval:def:12396"/>
        <criterion comment="the version of cdoex.dll is less than 8.2.301.0" test_ref="oval:org.mitre.oval:tst:40974"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12396" version="5" class="inventory">
      <metadata>
        <title>Microsoft Exchange Server 2007 SP2 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:exchange_server:2007:sp2"/>
        <description>Exchange Server 2007 SP2 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-12-14T14:00:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2010-12-17T20:55:34.798-05:00">DRAFT</status_change>
            <status_change date="2011-01-03T04:00:31.527-05:00">INTERIM</status_change>
            <status_change date="2011-01-24T04:00:30.320-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:12396 - Updated CPEs for Microsoft Exchange Server." date="2011-03-29T13:58:00.209-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-03-29T13:58:52.620-04:00">INTERIM</status_change>
            <status_change date="2011-04-18T04:00:18.209-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Exchange Server 2007 is installed." test_ref="oval:org.mitre.oval:tst:8521"/>
        <criterion comment="Exchange Server 2007 SP2 is installed." test_ref="oval:org.mitre.oval:tst:41731"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12016" version="3" class="vulnerability">
      <metadata>
        <title>Security bypass vulnerability in the extract function in PHP before 5.2.15</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>PHP</product>
        </affected>
        <reference ref_id="CVE-2011-0752" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0752" source="CVE"/>
        <description>The extract function in PHP before 5.2.15 does not prevent use of the EXTR_OVERWRITE parameter to overwrite (1) the GLOBALS superglobal array and (2) the this variable, which allows context-dependent attackers to bypass intended access restrictions by modifying data structures that were not intended to depend on external input, a related issue to CVE-2005-2691 and CVE-2006-3758.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-03-29T09:34:16-05:00">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2011-03-29T14:26:01.666-04:00">DRAFT</status_change>
            <status_change date="2011-04-18T04:00:07.338-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:00:19.425-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="PHP is installed" definition_ref="oval:org.mitre.oval:def:12410"/>
        <criterion comment="Check if the version of PHP is less than 5.2.15" test_ref="oval:org.mitre.oval:tst:42097"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:120" version="2" class="vulnerability" deprecated="true">
      <metadata>
        <title>Solaris 7 KCMS Arbitrary File Access Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>kcms_server</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0027"/>
        <description>Directory traversal vulnerability in Sun Kodak Color Management System (KCMS) library service daemon (kcms_server) allows remote attackers to read arbitrary files via the KCS_OPEN_PROFILE procedure.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-01-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified comment="fixed the service_name entity used in the inetd_object" date="2007-04-10T15:15:00.237-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-04-10T15:15:57.513-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:14.919-04:00">ACCEPTED</status_change>
            <modified comment="Deprecated. Superseded by def:2592 (same CVE-2003-0027)." date="2008-12-19T11:22:00.311-05:00">
              <contributor organization="Secure Elements, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2008-12-19T11:23:14.326-05:00">DEPRECATED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Software section">
          <criterion comment="Solaris 7 Installed" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="File kcms_server exists" test_ref="oval:org.mitre.oval:tst:2931"/>
        </criteria>
        <criteria operator="AND" comment="Configuration section">
          <criterion comment="inetd.conf contains kcms_server" test_ref="oval:org.mitre.oval:tst:2930"/>
          <criterion comment="inetd running" test_ref="oval:org.mitre.oval:tst:3135"/>
          <criteria operator="OR" comment="File kcms_server executable and SUID or SGID">
            <criterion comment="File kcms_server executable and SUID or SGID" test_ref="oval:org.mitre.oval:tst:2929"/>
            <criterion comment="File kcms_server executable and SUID or SGID" test_ref="oval:org.mitre.oval:tst:2928"/>
            <criterion comment="File kcms_server executable and SUID or SGID" test_ref="oval:org.mitre.oval:tst:2927"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12" version="3" class="vulnerability">
      <metadata>
        <title>IE v5.5,SP2 Forced Script Execution</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0026" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0026"/>
        <description>Internet Explorer 5.5 and 6.0 allows remote attackers to bypass restrictions for executing scripts via an object that processes asynchronous events after the initial security checks have been made.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-11-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:44.205-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:10.389-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
        <criterion comment="the version of mshtml.dll is less than 5.50.4913.1100" negate="false" test_ref="oval:org.mitre.oval:tst:3122"/>
        <criterion comment="the patch q316059 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3121"/>
        <criterion comment="the patch q319282 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3120"/>
        <criterion comment="the patch q321232 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3119"/>
        <criterion comment="the patch q323759 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3118"/>
        <criterion comment="the patch q328970 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3117"/>
        <criterion comment="the patch q324929 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3116"/>
        <criterion comment="the patch q810847 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3115"/>
        <criterion comment="the patch q813489 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3114"/>
        <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1197" version="3" class="vulnerability">
      <metadata>
        <title>Firefox/Mozilla Suite Chrome Window Spoofing Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2707" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2707"/>
        <description>Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spawn windows without user interface components such as the address and status bar, which could be used to conduct spoofing or phishing attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-11-11T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-12-12T10:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:2367" date="2007-02-26T08:32:00.241-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-26T08:32:39.928-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:2370" date="2007-03-06T07:46:00.064-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:45.364-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:1444" date="2007-04-23T12:05:00.911-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:19:59.493-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:1445" date="2007-04-23T12:05:00.720-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:52.378-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Suite version 1.7.10 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.10 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2535"/>
          <criterion comment="Mozilla Suite version 1.7.10 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2534"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.6 or earlier is installed">
          <criterion comment="Firefox version 1.0.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2533"/>
          <criterion comment="Mozilla Firefox version 1.0.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2532"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1196" version="4" class="vulnerability">
      <metadata>
        <title>URL Parsing Memory Corruption Vulnerability (IE5.01,SP3)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0554" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0554"/>
        <description>Buffer overflow in the URL processor of Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL with a long hostname, aka "URL Parsing Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-05-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-05-11T05:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-06-01T03:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-22T12:38:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2824. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:48:00.494-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:52:28.261-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:35.079-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:49.394-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:10.022-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3015"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3539.2400" negate="false" test_ref="oval:org.mitre.oval:tst:1083"/>
          <criterion comment="the patch kb890923  is installed (Win2K SP3  Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:1082"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1195" version="1" class="vulnerability">
      <metadata>
        <title>Multiple Buffer Overflows in libgd</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>libgd</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0941" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0941"/>
        <description>Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the overflows due to improper calls to the gdMalloc function, a different set of vulnerabilities than CVE-2004-0990.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-06-27T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-06-29T06:49:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criteria operator="AND" comment="libgd or libgd-devel RPM is earlier than 0:1.8.4-12.3.1">
          <criterion comment="libgd RPM is earlier than 0:1.8.4-12.3.1" negate="false" test_ref="oval:org.mitre.oval:tst:1085"/>
          <criterion comment="libgd-devel RPM is earlier than 0:1.8.4-12.3.1" negate="false" test_ref="oval:org.mitre.oval:tst:1084"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11947" version="3" class="vulnerability">
      <metadata>
        <title>MSO Large SPID Read AV Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Office XP</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-3336" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3336"/>
        <description>Microsoft Office XP SP3, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "MSO Large SPID Read AV Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-03-09T13:00:00">
              <contributor organization="Symantec Corporation">Josh Turpin</contributor>
            </submitted>
            <status_change date="2010-11-12T11:25:34.833-05:00">DRAFT</status_change>
            <status_change date="2010-11-29T04:00:07.613-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:19.612-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft Office XP is installed" definition_ref="oval:org.mitre.oval:def:663"/>
        <criterion comment="Mso.dll version is less than 10.0.6867.0" test_ref="oval:org.mitre.oval:tst:41798"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:663" version="11" class="inventory">
      <metadata>
        <title>Microsoft Office XP is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:office:xp"/>
        <description>The application Microsoft Office XP is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-07-25T12:05:33">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-10-07T09:15:51.244-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:58.628-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:1339" date="2007-04-23T12:05:00.247-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:26:29.609-04:00">INTERIM</status_change>
            <modified comment="Added CPE reference." date="2007-04-30T07:48:00.390-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-23T15:05:49.843-04:00">ACCEPTED</status_change>
            <modified comment="Now detects the non-OEM versions of Office XP." date="2008-11-10T10:51:00.927-05:00">
              <contributor organization="Secure Elements, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2008-11-10T10:57:34.946-05:00">INTERIM</status_change>
            <status_change date="2008-12-01T04:00:19.113-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:2179 - Fixed some regular expressions to conform to the Authoring style guide." date="2011-10-03T15:44:00.952-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-10-03T15:45:21.258-04:00">INTERIM</status_change>
            <status_change date="2011-10-24T04:00:27.403-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:1339 - Fixed several false positives by setting negate = true.  Also fixed several style issues." date="2011-12-28T21:13:00.551-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2011-12-28T21:21:41.130-05:00">INTERIM</status_change>
            <status_change date="2012-01-16T04:03:18.840-05:00">ACCEPTED</status_change>
            <status_change date="2012-03-05T14:23:58.775-05:00">INTERIM</status_change>
            <modified comment="Added Windows Server 2008 R2 platform" date="2012-03-05T14:23:58.775-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2012-03-26T04:03:17.314-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:4586 - modified comments" date="2014-02-28T15:13:00.247-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-28T15:16:15.050-05:00">INTERIM</status_change>
            <status_change date="2014-03-17T04:00:30.146-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criterion comment="Microsoft Office XP OEM is installed" test_ref="oval:org.mitre.oval:tst:2327"/>
        <criterion comment="Microsoft Office XP is installed" test_ref="oval:org.mitre.oval:tst:9294"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11939" version="4" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the GD extension in PHP before 5.2.15 and 5.3.x before 5.3.4</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>PHP</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-4698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4698"/>
        <description>Stack-based buffer overflow in the GD extension in PHP before 5.2.15 and 5.3.x before 5.3.4 allows context-dependent attackers to cause a denial of service (application crash) via a large number of anti-aliasing steps in an argument to the imagepstext function.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-03-22T16:21:49">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2011-03-22T13:47:56.600-04:00">DRAFT</status_change>
            <status_change date="2011-04-11T04:00:03.928-04:00">INTERIM</status_change>
            <status_change date="2011-05-02T04:00:05.128-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="PHP is installed" definition_ref="oval:org.mitre.oval:def:12410"/>
        <criterion comment="Check if the version of PHP is less than 5.2.15 or 5.3.x before 5.3.4" test_ref="oval:org.mitre.oval:tst:42457"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:12410" version="4" class="inventory">
      <metadata>
        <title>PHP is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>PHP</product>
        </affected>
        <reference ref_id="cpe:/a:php:php" source="CPE"/>
        <description>PHP is installed</description>
        <oval_repository>
          <dates>
            <submitted date="2010-12-23T15:27:18">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2010-12-27T20:21:09.434-05:00">DRAFT</status_change>
            <status_change date="2011-01-17T04:00:16.671-05:00">INTERIM</status_change>
            <modified comment="Added a registry test to support for lower versions of PHP" date="2011-02-08T16:21:49.575+05:30">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </modified>
            <status_change date="2011-04-04T04:00:17.011-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criterion comment="Check if PHP is installed" test_ref="oval:org.mitre.oval:tst:41246"/>
        <criterion comment="Check if PHP lower versions are installed" test_ref="oval:org.mitre.oval:tst:42177"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1193" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in the sshd(1M) Protocol Version 1 Implementation May Allow a Denial of Service to the Host</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4924" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4924"/>
        <description>sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service (CPU consumption) via an SSH packet that contains duplicate blocks, which is not properly handled by the CRC compensation attack detector.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-07-03T09:00:00.000-04:00">
              <contributor organization="Opsware, Inc.">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2007-07-03T21:46:27.109-04:00">DRAFT</status_change>
            <status_change date="2007-07-18T15:57:48.515-04:00">INTERIM</status_change>
            <status_change date="2007-08-02T14:47:15.104-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software and Configuration sections" operator="AND">
        <criteria comment="Software section" operator="OR">
          <criteria operator="AND" comment="Solaris 9 (SPARC)" negate="false">
            <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
            <criterion comment="Patch 113273-15 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3729"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (x86)" negate="false">
            <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
            <criterion comment="Patch 114858-12 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3276"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (SPARC)" negate="false">
            <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
            <criterion comment="Patch 123324-03 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3582"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (x86)" negate="false">
            <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
            <criterion comment="Patch 123325-03 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3239"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="OR">
          <criterion comment="sshd is configured to use version 1 of the protocol" negate="false" test_ref="oval:org.mitre.oval:tst:3385"/>
          <criterion comment="sshd is configured to use default versions (including version 1)" negate="true" test_ref="oval:org.mitre.oval:tst:3689"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1192" version="6" class="vulnerability">
      <metadata>
        <title>.lnk File-Properties Remote Code Execution Vulnerability (Windows 2000)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2118" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2118"/>
        <description>Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote user-assisted attackers to execute arbitrary commands via a crafted shortcut (.lnk) file with long font properties that lead to a buffer overflow when the user views the file's properties using Windows Explorer, a different vulnerability than CVE-2005-2122.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-10-12T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-10-19T05:46:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-08-31T12:00:00.000-04:00" comment="removed an incorrect leading ^ from the value entity of ste:2402">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-08-31T00:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:15.115-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1192 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:47.594-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:30.541-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="Win2K/XP/2003 service pack 4 is installed" test_ref="oval:org.mitre.oval:tst:2569"/>
        <criterion comment="shell32.dll is less than 5.0.3900.7071" test_ref="oval:org.mitre.oval:tst:1086"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11911" version="5" class="vulnerability">
      <metadata>
        <title>The add_to_history function in svr_principal.c in libkadm5srv for MIT Kerberos 5 (krb5) up to 1.3.5, when performing a password change, does not properly track the password policy's history count and the maximum number of keys, which can cause an array index out-of-bounds error and may allow authenticated users to execute arbitrary code via a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1189" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1189"/>
        <description>The add_to_history function in svr_principal.c in libkadm5srv for MIT Kerberos 5 (krb5) up to 1.3.5, when performing a password change, does not properly track the password policy's history count and the maximum number of keys, which can cause an array index out-of-bounds error and may allow authenticated users to execute arbitrary code via a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:21.594-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:47.293-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:42.258-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11911 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:06.185-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:16:03.095-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.2.7-38" test_ref="oval:org.mitre.oval:tst:31249"/>
            <criterion comment="krb5 is earlier than 0:1.2.7-38" test_ref="oval:org.mitre.oval:tst:31238"/>
            <criterion comment="krb5-libs is earlier than 0:1.2.7-38" test_ref="oval:org.mitre.oval:tst:30907"/>
            <criterion comment="krb5-server is earlier than 0:1.2.7-38" test_ref="oval:org.mitre.oval:tst:30640"/>
            <criterion comment="krb5-devel is earlier than 0:1.2.7-38" test_ref="oval:org.mitre.oval:tst:30935"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.3.4-10" test_ref="oval:org.mitre.oval:tst:30987"/>
            <criterion comment="krb5 is earlier than 0:1.3.4-10" test_ref="oval:org.mitre.oval:tst:31115"/>
            <criterion comment="krb5-libs is earlier than 0:1.3.4-10" test_ref="oval:org.mitre.oval:tst:31053"/>
            <criterion comment="krb5-server is earlier than 0:1.3.4-10" test_ref="oval:org.mitre.oval:tst:31212"/>
            <criterion comment="krb5-devel is earlier than 0:1.3.4-10" test_ref="oval:org.mitre.oval:tst:31085"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1191" version="6" class="vulnerability">
      <metadata>
        <title>Win2K COM object Remote Code Execution Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0012" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0012"/>
        <description>Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via attack vectors involving COM objects and "crafted files and directories," aka the "Windows Shell Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2006-04-12T12:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-04-12T05:16:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:05.834-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:45.156-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1191 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:20.223-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:30.217-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="the version of shell32.dll is less than 5.0.3900.7078" test_ref="oval:org.mitre.oval:tst:1087"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11892" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1179"/>
        <description>Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:08.382-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:46.642-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:41.612-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11892 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:44.859-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:16:02.186-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="xpdf is earlier than 1:2.02-14.el3" test_ref="oval:org.mitre.oval:tst:38322"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40095"/>
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-13.el4" test_ref="oval:org.mitre.oval:tst:38126"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:39528"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-13.el4" test_ref="oval:org.mitre.oval:tst:38230"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40473"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38481"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40316"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-7.7.2.el4_7.4" test_ref="oval:org.mitre.oval:tst:38436"/>
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38145"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40209"/>
            <criterion comment="xpdf is earlier than 1:3.00-20.el4" test_ref="oval:org.mitre.oval:tst:38649"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40364"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40077"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38607"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.5.4-12.el5_3" test_ref="oval:org.mitre.oval:tst:38618"/>
            <criterion comment="cups-lpd is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38471"/>
            <criterion comment="tetex-dvips is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40312"/>
            <criterion comment="kdegraphics is earlier than 7:3.5.4-12.el5_3" test_ref="oval:org.mitre.oval:tst:38271"/>
            <criterion comment="poppler is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38760"/>
            <criterion comment="tetex-fonts is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40122"/>
            <criterion comment="cups-libs is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38541"/>
            <criterion comment="tetex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40413"/>
            <criterion comment="tetex-doc is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40398"/>
            <criterion comment="poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38500"/>
            <criterion comment="tetex-latex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40444"/>
            <criterion comment="poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38512"/>
            <criterion comment="cups-devel is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:37935"/>
            <criterion comment="tetex-afm is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40008"/>
            <criterion comment="tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:39920"/>
            <criterion comment="cups is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38334"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11881" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy and conduct cross-site scripting (XSS) attacks via an XBL binding to an "unloaded document."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5511"/>
        <description>Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy and conduct cross-site scripting (XSS) attacks via an XBL binding to an "unloaded document."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:16.954-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:45.975-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:40.940-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11881 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:39.676-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:16:01.257-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38137"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37886"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37999"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37907"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37709"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38092"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37745"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38039"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38062"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38073"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nspr is earlier than 0:4.7.3-1.el4" test_ref="oval:org.mitre.oval:tst:37574"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:38071"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-1.el4" test_ref="oval:org.mitre.oval:tst:37857"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-18.el4" test_ref="oval:org.mitre.oval:tst:37200"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.3-1.el4" test_ref="oval:org.mitre.oval:tst:37918"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37812"/>
            <criterion comment="firefox is earlier than 0:3.0.5-1.el4" test_ref="oval:org.mitre.oval:tst:38080"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-1.el4" test_ref="oval:org.mitre.oval:tst:37139"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37869"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37789"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37395"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:38118"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:38072"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38037"/>
            <criterion comment="nspr is earlier than 0:4.7.3-2.el5" test_ref="oval:org.mitre.oval:tst:37420"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37854"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.19-1.el5_2" test_ref="oval:org.mitre.oval:tst:38053"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.3-2.el5" test_ref="oval:org.mitre.oval:tst:37419"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38083"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:37631"/>
            <criterion comment="firefox is earlier than 0:3.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38114"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37737"/>
            <criterion comment="nss-tools is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37403"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11874" version="3" class="vulnerability">
      <metadata>
        <title>ActionScript 3 (AS3) in Adobe Flash Player 9.0.47.0, and other versions and other 9.0.124.0 and earlier versions, allows remote attackers to bypass the Security Sandbox Model, obtain sensitive information, and port scan arbitrary hosts via a Flash (SWF) movie that specifies a connection to make, then uses timing discrepancies from the SecurityErrorEvent error to determine whether a port is open or not.  NOTE: 9.0.115.0 introduces support for a workaround, but does not fix the vulnerability.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4324" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4324"/>
        <description>ActionScript 3 (AS3) in Adobe Flash Player 9.0.47.0, and other versions and other 9.0.124.0 and earlier versions, allows remote attackers to bypass the Security Sandbox Model, obtain sensitive information, and port scan arbitrary hosts via a Flash (SWF) movie that specifies a connection to make, then uses timing discrepancies from the SecurityErrorEvent error to determine whether a port is open or not.  NOTE: 9.0.115.0 introduces support for a workaround, but does not fix the vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:58.326-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:45.730-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:40.544-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criterion comment="flash-plugin is earlier than 0:9.0.115.0-1.el3.with.oss" test_ref="oval:org.mitre.oval:tst:35926"/>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criterion comment="flash-plugin is earlier than 0:9.0.115.0-1.el4" test_ref="oval:org.mitre.oval:tst:35400"/>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criterion comment="flash-plugin is earlier than 0:9.0.115.0-1.el5" test_ref="oval:org.mitre.oval:tst:35776"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11868" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unknown vulnerabilities in the (1) TZSP, (2) MGCP, (3) ISUP, (4) SMB, or (5) Bittorrent dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (segmentation fault) via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0402" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0402"/>
        <description>Firefox before 1.0.2 allows remote attackers to execute arbitrary code by tricking a user into saving a page as a Firefox sidebar panel, then using the sidebar panel to inject Javascript into a privileged page.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:22.906-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:45.292-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:40.088-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11868 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:40.959-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:16:00.909-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="firefox is earlier than 0:1.0.2-1.4.1" test_ref="oval:org.mitre.oval:tst:31302"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11864" version="5" class="vulnerability">
      <metadata>
        <title>The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service (segmentation fault).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0751" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0751"/>
        <description>The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service (segmentation fault).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:02.499-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:45.087-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:39.836-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11864 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:39.655-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:16:00.602-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="httpd-devel is earlier than 0:2.0.46-40.ent" test_ref="oval:org.mitre.oval:tst:30894"/>
          <criterion comment="mod_ssl is earlier than 1:2.0.46-40.ent" test_ref="oval:org.mitre.oval:tst:30928"/>
          <criterion comment="httpd is earlier than 0:2.0.46-40.ent" test_ref="oval:org.mitre.oval:tst:30979"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1186" version="8" class="vulnerability">
      <metadata>
        <title>IE .chm Directory Traversal Windows XP Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>HTML Help Facility</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1041" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1041"/>
        <description>Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL containing ".." (dot dot) sequences and a filename that ends in "::" which is treated as a .chm file even if it does not have a .chm extension.  NOTE: this bug may overlap CVE-2004-0475.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2004-07-14T12:00:00.000-04:00" comment="added the unregistered HTML Help criterion to the configuration section of the criteria">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2004-08-04T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-08-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2004-09-13T11:36:00.000-04:00" comment="cmp-66 added">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2004-09-15T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-29T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected obj:964. Changed registry key name from a pattern match of .* to nil." date="2007-02-12T13:46:00.470-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T13:47:37.231-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:44.190-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2656" date="2010-11-29T16:12:00.873-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:12:59.431-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:16.964-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:48.399-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:29.743-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="the version of itss.dll is less than 5.2.3790.185" negate="false" test_ref="oval:org.mitre.oval:tst:1406"/>
          <criterion comment="the patch kb840315 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1405"/>
          <criteria operator="AND" comment="Windows XP (sp1 or earlier) is installed">
            <criterion comment="Windows XP is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2838"/>
            <criterion comment="Win2K/XP/2003 service pack 2 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2837"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="HTML Help is registered" negate="true" test_ref="oval:org.mitre.oval:tst:1404"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11858" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the encodeURI and decodeURI functions in the kjs JavaScript interpreter engine in KDE 3.2.0 through 3.5.0 allows remote attackers to execute arbitrary code via a crafted, UTF-8 encoded URI.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0019" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0019"/>
        <description>Heap-based buffer overflow in the encodeURI and decodeURI functions in the kjs JavaScript interpreter engine in KDE 3.2.0 through 3.5.0 allows remote attackers to execute arbitrary code via a crafted, UTF-8 encoded URI.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:58.190-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:44.847-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:39.631-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11858 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:58.361-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:16:00.303-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kdelibs is earlier than 6:3.3.1-3.14" test_ref="oval:org.mitre.oval:tst:31891"/>
          <criterion comment="kdelibs-devel is earlier than 6:3.3.1-3.14" test_ref="oval:org.mitre.oval:tst:32320"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11857" version="5" class="vulnerability">
      <metadata>
        <title>Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in a database name in a (1) COM_CREATE_DB or (2) COM_DROP_DB request.  NOTE: some of these details are obtained from third party information.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2446" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2446"/>
        <description>Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in a database name in a (1) COM_CREATE_DB or (2) COM_DROP_DB request.  NOTE: some of these details are obtained from third party information.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:04.374-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:44.536-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:39.321-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11857 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:36:09.483-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:59.603-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mysql is earlier than 0:4.1.22-2.el4_8.3" test_ref="oval:org.mitre.oval:tst:39929"/>
            <criterion comment="mysql-devel is earlier than 0:4.1.22-2.el4_8.3" test_ref="oval:org.mitre.oval:tst:39985"/>
            <criterion comment="mysql-bench is earlier than 0:4.1.22-2.el4_8.3" test_ref="oval:org.mitre.oval:tst:40068"/>
            <criterion comment="mysql-server is earlier than 0:4.1.22-2.el4_8.3" test_ref="oval:org.mitre.oval:tst:40047"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mysql is earlier than 0:5.0.77-3.el5" test_ref="oval:org.mitre.oval:tst:39025"/>
            <criterion comment="mysql-devel is earlier than 0:5.0.77-3.el5" test_ref="oval:org.mitre.oval:tst:39228"/>
            <criterion comment="mysql-test is earlier than 0:5.0.77-3.el5" test_ref="oval:org.mitre.oval:tst:38934"/>
            <criterion comment="mysql-bench is earlier than 0:5.0.77-3.el5" test_ref="oval:org.mitre.oval:tst:39199"/>
            <criterion comment="mysql-server is earlier than 0:5.0.77-3.el5" test_ref="oval:org.mitre.oval:tst:39156"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11855" version="5" class="vulnerability">
      <metadata>
        <title>The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a denial of service (cupsd daemon outage or crash) via manipulations of the timing of CUPS browse packets, related to a "pointer use-after-delete flaw."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0209"/>
        <description>Netfilter in Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) via crafted IP packet fragments.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:56.842-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:44.283-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:39.047-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11855 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:45.485-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:59.089-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31783"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31876"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31592"/>
          <criterion comment="kernel is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31714"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31522"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31902"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31817"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11852" version="5" class="vulnerability">
      <metadata>
        <title>The msn_slp_sip_recv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an SLP invite message that lacks certain required fields, as demonstrated by a malformed message from a KMess client.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3083"/>
        <description>The msn_slp_sip_recv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an SLP invite message that lacks certain required fields, as demonstrated by a malformed message from a KMess client.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:05.090-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:43.788-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:37.533-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11852 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:18.376-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:58.266-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="pidgin is earlier than 0:1.5.1-6.el3" test_ref="oval:org.mitre.oval:tst:39353"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39474"/>
            <criterion comment="libpurple is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39423"/>
            <criterion comment="libpurple-perl is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39307"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39264"/>
            <criterion comment="pidgin-devel is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39332"/>
            <criterion comment="libpurple-devel is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39395"/>
            <criterion comment="finch is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39376"/>
            <criterion comment="pidgin-perl is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39381"/>
            <criterion comment="pidgin is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39450"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39246"/>
            <criterion comment="libpurple is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39428"/>
            <criterion comment="libpurple-perl is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39414"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39006"/>
            <criterion comment="pidgin-devel is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:38683"/>
            <criterion comment="libpurple-devel is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39404"/>
            <criterion comment="finch is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39139"/>
            <criterion comment="pidgin-perl is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39341"/>
            <criterion comment="pidgin is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39169"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11847" version="5" class="vulnerability">
      <metadata>
        <title>The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to spoof HMAC-based digital signatures, and possibly bypass authentication, via unspecified vectors related to "timing attack vulnerabilities," aka Bug Id 6863503.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3875" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3875"/>
        <description>The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to spoof HMAC-based digital signatures, and possibly bypass authentication, via unspecified vectors related to "timing attack vulnerabilities," aka Bug Id 6863503.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:17.609-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:43.412-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:37.290-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11847 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:47:04.345-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:57.837-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:38878"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39616"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39115"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39531"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39655"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11843" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in the directory notification subsystem (dnotify) in Linux kernel 2.6.x before 2.6.24.6, and 2.6.25 before 2.6.25.1, allows local users to cause a denial of service (OOPS) and possibly gain privileges via unspecified vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1375" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1375"/>
        <description>Race condition in the directory notification subsystem (dnotify) in Linux kernel 2.6.x before 2.6.24.6, and 2.6.25 before 2.6.25.1, allows local users to cause a denial of service (OOPS) and possibly gain privileges via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:02.655-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:42.753-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:35.774-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11843 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:19.073-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:56.709-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:35915"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:35794"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36513"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36264"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36161"/>
            <criterion comment="kernel is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36518"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36597"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36612"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36171"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36201"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36534"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36373"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36702"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36615"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36490"/>
            <criterion comment="kernel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36370"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:35738"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36249"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36731"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:35733"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36107"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36600"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36529"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36526"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36442"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36238"/>
            <criterion comment="kernel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36463"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36480"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:35876"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36532"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36278"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:35724"/>
            <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36560"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11840" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verification that authentication has been successful, which might allow attackers to bypass authentication. NOTE: as of 20061108, it is believed that this issue is only exploitable by leveraging vulnerabilities in the unprivileged process, which are not known to exist.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5794" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5794"/>
        <description>Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verification that authentication has been successful, which might allow attackers to bypass authentication. NOTE: as of 20061108, it is believed that this issue is only exploitable by leveraging vulnerabilities in the unprivileged process, which are not known to exist.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:59.347-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:42.438-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:35.437-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11840 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:16.815-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:56.162-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssh is earlier than 0:3.6.1p2-33.30.13" test_ref="oval:org.mitre.oval:tst:33000"/>
            <criterion comment="openssh-askpass is earlier than 0:3.6.1p2-33.30.13" test_ref="oval:org.mitre.oval:tst:33245"/>
            <criterion comment="openssh-server is earlier than 0:3.6.1p2-33.30.13" test_ref="oval:org.mitre.oval:tst:33139"/>
            <criterion comment="openssh-clients is earlier than 0:3.6.1p2-33.30.13" test_ref="oval:org.mitre.oval:tst:33141"/>
            <criterion comment="openssh-askpass-gnome is earlier than 0:3.6.1p2-33.30.13" test_ref="oval:org.mitre.oval:tst:32291"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssh is earlier than 0:3.9p1-8.RHEL4.17.1" test_ref="oval:org.mitre.oval:tst:33097"/>
            <criterion comment="openssh-askpass is earlier than 0:3.9p1-8.RHEL4.17.1" test_ref="oval:org.mitre.oval:tst:32553"/>
            <criterion comment="openssh-server is earlier than 0:3.9p1-8.RHEL4.17.1" test_ref="oval:org.mitre.oval:tst:33044"/>
            <criterion comment="openssh-clients is earlier than 0:3.9p1-8.RHEL4.17.1" test_ref="oval:org.mitre.oval:tst:33197"/>
            <criterion comment="openssh-askpass-gnome is earlier than 0:3.9p1-8.RHEL4.17.1" test_ref="oval:org.mitre.oval:tst:33036"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11838" version="4" class="vulnerability" deprecated="true">
      <metadata>
        <title>DEPRECATED: Use-after-free vulnerability in the ReleaseInterface function in MSHTML.DLL in Microsoft Internet Explorer 8.0.7600.16385</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows 7</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2011-0346" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0346"/>
        <description>Use-after-free vulnerability in the ReleaseInterface function in MSHTML.DLL in Microsoft Internet Explorer 8.0.7600.16385 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to the DOM implementation and the BreakAASpecial and BreakCircularMemoryReferences functions, as demonstrated by cross_fuzz, involving circular memory references.</description>
        <oval_repository>
          <dates>
            <submitted date="2011-03-18T13:10:08">
              <contributor organization="SecPod Technologies">SecPod Team</contributor>
            </submitted>
            <status_change date="2011-03-18T16:57:55.813-04:00">DRAFT</status_change>
            <status_change date="2011-04-04T04:00:05.750-04:00">INTERIM</status_change>
            <modified comment="Deprecated due to April 2011 Patch Tuesday" date="2011-04-18T00:26:44.052-04:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2011-04-18T00:26:44.052-04:00">DEPRECATED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft Internet Explorer 8 is installed" definition_ref="oval:org.mitre.oval:def:6210"/>
        <criterion comment="Check if Microsoft Internet Explorer version is equal to 8.0.7600.16385" test_ref="oval:org.mitre.oval:tst:42050"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:6210" version="7" class="inventory">
      <metadata>
        <title>Microsoft Internet Explorer 8 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Vista</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <platform>Microsoft Windows 7</platform>
          <product>Microsoft Internet Explorer 8</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:ie:8"/>
        <description>A version of Microsoft Internet Explorer 8 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2009-03-23T10:00:00">
              <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2009-03-23T10:43:47.804-04:00">DRAFT</status_change>
            <status_change date="2009-04-13T04:00:28.239-04:00">INTERIM</status_change>
            <status_change date="2009-05-04T04:00:36.679-04:00">ACCEPTED</status_change>
            <modified comment="Added additional affected platfroms" date="2009-09-24T11:17:00.434-04:00">
              <contributor organization="Gideon Technologies, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2009-09-28T04:00:32.351-04:00">INTERIM</status_change>
            <status_change date="2009-10-26T04:00:04.951-04:00">ACCEPTED</status_change>
            <status_change date="2012-03-05T14:24:09.728-05:00">INTERIM</status_change>
            <modified comment="Added Windows Server 2008 R2 platform" date="2012-03-05T14:24:09.728-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2012-03-26T04:03:10.344-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:6210 - modified inventory of Internet Explorer 8" date="2014-01-21T17:03:00.601-05:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </modified>
            <status_change date="2014-01-21T17:05:26.764-05:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-24T04:03:24.451-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Internet Explorer 8 is installed" test_ref="oval:org.mitre.oval:tst:9082"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11824" version="5" class="vulnerability">
      <metadata>
        <title>The Linux kernel before 2.6.32.4 allows local users to gain privileges or cause a denial of service (panic) by calling the (1) mmap or (2) mremap function, aka the "do_mremap() mess" or "mremap/mmap mess."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0291" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0291"/>
        <description>The Linux kernel before 2.6.32.4 allows local users to gain privileges or cause a denial of service (panic) by calling the (1) mmap or (2) mremap function, aka the "do_mremap() mess" or "mremap/mmap mess."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:19.123-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:41.922-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:33.859-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11824 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:05.547-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:55.649-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40501"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40283"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40807"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40842"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40793"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40732"/>
          <criterion comment="kernel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40830"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40349"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:39978"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:39896"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40791"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40580"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11816" version="5" class="vulnerability">
      <metadata>
        <title>The scm_send function in the scm layer for Linux kernel 2.4.x up to 2.4.28, and 2.6.x up to 2.6.9, allows local users to cause a denial of service (system hang) via crafted auxiliary messages that are passed to the sendmsg function, which causes a deadlock condition.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1016" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1016"/>
        <description>The scm_send function in the scm layer for Linux kernel 2.4.x up to 2.4.28, and 2.6.x up to 2.6.9, allows local users to cause a denial of service (system hang) via crafted auxiliary messages that are passed to the sendmsg function, which causes a deadlock condition.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:19.090-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:41.646-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:33.565-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11816 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:08.255-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:55.198-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:31101"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30944"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30205"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30752"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30999"/>
          <criterion comment="kernel is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30940"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:31177"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30903"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30786"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11813" version="3" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the Java Plug-in for Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier, and 1.3.1_21 and earlier; allows remote attackers to bypass the same origin policy and "execute local applications" via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1192" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1192"/>
        <description>Unspecified vulnerability in the Java Plug-in for Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier, and 1.3.1_21 and earlier; allows remote attackers to bypass the same origin policy and "execute local applications" via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:49.468-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:41.007-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:32.914-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36548"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36455"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36422"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36295"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36406"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36334"/>
            <criterion comment="java-1.5.0-ibm is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36155"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36267"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35708"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35618"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36613"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36614"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36509"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36558"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36485"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35872"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36582"/>
            <criterion comment="java-1.6.0-ibm-accessibility is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36555"/>
            <criterion comment="java-1.6.0-ibm-jdbc is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36414"/>
            <criterion comment="java-1.6.0-ibm-src is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36622"/>
            <criterion comment="java-1.6.0-ibm-javacomm is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36688"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36265"/>
            <criterion comment="java-1.6.0-ibm is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36319"/>
            <criterion comment="java-1.6.0-ibm-plugin is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36706"/>
            <criterion comment="java-1.6.0-ibm-devel is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36205"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36535"/>
            <criterion comment="java-1.6.0-ibm-demo is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36515"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36523"/>
            <criterion comment="java-1.5.0-ibm-accessibility is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36323"/>
            <criterion comment="java-1.5.0-ibm is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35890"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35698"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35719"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36340"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36068"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36568"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11810" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly implement JAR signing, which allows remote attackers to execute arbitrary code via (1) injection of JavaScript into documents within a JAR archive or (2) a JAR archive that uses relative URLs to JavaScript files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2801" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2801"/>
        <description>Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly implement JAR signing, which allows remote attackers to execute arbitrary code via (1) injection of JavaScript into documents within a JAR archive or (2) a JAR archive that uses relative URLs to JavaScript files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:59.614-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:40.427-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:32.316-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11810 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:43.623-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:54.309-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37286"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37033"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37126"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37105"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37271"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37279"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37060"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37189"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:36476"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:36916"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37236"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37192"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-14.el4" test_ref="oval:org.mitre.oval:tst:36999"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36886"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37331"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36365"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.19.el4" test_ref="oval:org.mitre.oval:tst:37174"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37226"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36766"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37320"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36826"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37274"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-17.el5" test_ref="oval:org.mitre.oval:tst:37107"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:37351"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.16-1.el5" test_ref="oval:org.mitre.oval:tst:37363"/>
            <criterion comment="xulrunner is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:36984"/>
            <criterion comment="devhelp is earlier than 0:0.12-17.el5" test_ref="oval:org.mitre.oval:tst:37234"/>
            <criterion comment="yelp is earlier than 0:2.16.0-19.el5" test_ref="oval:org.mitre.oval:tst:37291"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:36436"/>
            <criterion comment="firefox is earlier than 0:3.0-2.el5" test_ref="oval:org.mitre.oval:tst:36814"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11808" version="5" class="vulnerability">
      <metadata>
        <title>The JavaScript engine in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 does not properly handle temporary variables that are not garbage collected, which might allow remote attackers to trigger operations on freed memory and cause memory corruption.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1742" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1742"/>
        <description>The JavaScript engine in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 does not properly handle temporary variables that are not garbage collected, which might allow remote attackers to trigger operations on freed memory and cause memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:41.602-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:39.895-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:31.772-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11808 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:24.003-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:51.552-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32663"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32326"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31987"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32451"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32697"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32558"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32427"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32671"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32666"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32561"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32593"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32679"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32133"/>
            <criterion comment="thunderbird is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32204"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32701"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32428"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32557"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32229"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32349"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32644"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32440"/>
            <criterion comment="firefox is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32219"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32598"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32717"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11807" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in the (1) recognize_eps_file function (src/psgen.c) and (2) tilde_subst function (src/util.c) in GNU enscript 1.6.1, and possibly earlier, might allow remote attackers to execute arbitrary code via an epsf escape sequence with a long filename.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5078" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5078"/>
        <description>Multiple buffer overflows in the (1) recognize_eps_file function (src/psgen.c) and (2) tilde_subst function (src/util.c) in GNU enscript 1.6.1, and possibly earlier, might allow remote attackers to execute arbitrary code via an epsf escape sequence with a long filename.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:33.632-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:39.676-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:31.541-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11807 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:09.657-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:50.367-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="enscript is earlier than 0:1.6.1-24.7" test_ref="oval:org.mitre.oval:tst:37704"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="enscript is earlier than 0:1.6.1-33.el4_7.1" test_ref="oval:org.mitre.oval:tst:37804"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11806" version="5" class="vulnerability">
      <metadata>
        <title>The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via unspecified vectors involving a gdImageCreate failure.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3473" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3473"/>
        <description>The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via unspecified vectors involving a gdImageCreate failure.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:26.986-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:39.412-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:31.259-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11806 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:36:03.664-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:49.876-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gd is earlier than 0:2.0.28-5.4E.el4_6.1" test_ref="oval:org.mitre.oval:tst:36386"/>
            <criterion comment="gd-devel is earlier than 0:2.0.28-5.4E.el4_6.1" test_ref="oval:org.mitre.oval:tst:36408"/>
            <criterion comment="gd-progs is earlier than 0:2.0.28-5.4E.el4_6.1" test_ref="oval:org.mitre.oval:tst:35731"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gd is earlier than 0:2.0.33-9.4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36297"/>
            <criterion comment="gd-devel is earlier than 0:2.0.33-9.4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36448"/>
            <criterion comment="gd-progs is earlier than 0:2.0.33-9.4.el5_1.1" test_ref="oval:org.mitre.oval:tst:35759"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11804" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unknown vulnerabilities in the (1) TZSP, (2) MGCP, (3) ISUP, (4) SMB, or (5) Bittorrent dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (segmentation fault) via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1470" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1470"/>
        <description>Multiple unknown vulnerabilities in the (1) TZSP, (2) MGCP, (3) ISUP, (4) SMB, or (5) Bittorrent dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (segmentation fault) via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:47.280-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:39.171-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:30.971-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11804 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:43.007-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:49.503-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31458"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31546"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31674"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31865"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11803" version="5" class="vulnerability">
      <metadata>
        <title>The XULDocument.persist function in Mozilla, Firefox before 1.5.0.1, and SeaMonkey before 1.0 does not validate the attribute name, which allows remote attackers to execute arbitrary Javascript by injecting RDF data into the user's localstore.rdf file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0296" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0296"/>
        <description>The XULDocument.persist function in Mozilla, Firefox before 1.5.0.1, and SeaMonkey before 1.0 does not validate the attribute name, which allows remote attackers to execute arbitrary Javascript by injecting RDF data into the user's localstore.rdf file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:42.017-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:38.670-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:30.499-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11803 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:46.954-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:48.831-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:32492"/>
            <criterion comment="mozilla is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:32486"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:32176"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31856"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:32548"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31980"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:32519"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:32478"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31709"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31881"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:32504"/>
            <criterion comment="mozilla is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:32502"/>
            <criterion comment="thunderbird is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32204"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:31570"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:31656"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:32458"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:32216"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:32359"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:32540"/>
            <criterion comment="firefox is earlier than 0:1.0.7-1.4.3" test_ref="oval:org.mitre.oval:tst:32384"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:32647"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:32454"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11801" version="5" class="vulnerability">
      <metadata>
        <title>The SSCOP dissector in Wireshark (formerly Ethereal) before 0.99.3 allows remote attackers to cause a denial of service (resource consumption) via malformed packets that cause the Q.2391 dissector to use excessive memory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4333" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4333"/>
        <description>The SSCOP dissector in Wireshark (formerly Ethereal) before 0.99.3 allows remote attackers to cause a denial of service (resource consumption) via malformed packets that cause the Q.2391 dissector to use excessive memory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:27.288-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:38.425-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:30.244-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11801 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:15.851-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:48.444-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.3-EL3.2" test_ref="oval:org.mitre.oval:tst:33011"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.3-EL3.2" test_ref="oval:org.mitre.oval:tst:32323"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.3-EL4.2" test_ref="oval:org.mitre.oval:tst:33025"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.3-EL4.2" test_ref="oval:org.mitre.oval:tst:32974"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:118" version="5" class="vulnerability">
      <metadata>
        <title>Windows 2000 SMB Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>SMB (Server Message Block)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0345"/>
        <description>Buffer overflow in the SMB capability for Microsoft Windows XP, 2000, and NT allows remote attackers to cause a denial of service and possibly execute arbitrary code via an SMB packet that specifies a smaller buffer length than is required.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-08T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:10.300-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:43.972-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:13.698-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:28.046-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 (sp3 or earlier) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="File %windir%\system32\Drivers\SRV.SYS is less than 5.0.2195.6699" negate="false" test_ref="oval:org.mitre.oval:tst:2933"/>
        <criterion comment="Patch Windows2000-KB817606-x86-ENU.exe Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2932"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11796" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0688" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0688"/>
        <description>Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:34.905-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:37.774-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:29.429-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11796 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:04.289-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:47.744-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30914"/>
          <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30029"/>
          <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30748"/>
          <criterion comment="XFree86-libs is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30779"/>
          <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30003"/>
          <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30783"/>
          <criterion comment="XFree86-twm is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30052"/>
          <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30925"/>
          <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:31001"/>
          <criterion comment="XFree86-doc is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30889"/>
          <criterion comment="openmotif21 is earlier than 0:2.1.30-9.RHEL3.4" test_ref="oval:org.mitre.oval:tst:30867"/>
          <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30841"/>
          <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30838"/>
          <criterion comment="openmotif is earlier than 0:2.2.3-4.RHEL3.4" test_ref="oval:org.mitre.oval:tst:31105"/>
          <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30875"/>
          <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30347"/>
          <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30599"/>
          <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30544"/>
          <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30612"/>
          <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30933"/>
          <criterion comment="XFree86-xdm is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30902"/>
          <criterion comment="XFree86-sdk is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30619"/>
          <criterion comment="XFree86 is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30899"/>
          <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30943"/>
          <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30747"/>
          <criterion comment="XFree86-xfs is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30145"/>
          <criterion comment="XFree86-tools is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30701"/>
          <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30805"/>
          <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30951"/>
          <criterion comment="openmotif-devel is earlier than 0:2.2.3-4.RHEL3.4" test_ref="oval:org.mitre.oval:tst:30744"/>
          <criterion comment="XFree86-xauth is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30843"/>
          <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30963"/>
          <criterion comment="XFree86-devel is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30677"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11790" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an "unexpected sequence of MSNSLP messages" that results in an unbounded copy operation that writes to the wrong buffer.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0891" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0891"/>
        <description>Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an "unexpected sequence of MSNSLP messages" that results in an unbounded copy operation that writes to the wrong buffer.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:20.623-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:37.588-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:29.237-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11790 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:27.758-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:47.477-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="gaim is earlier than 1:1.0.1-1.RHEL3" test_ref="oval:org.mitre.oval:tst:30983"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11788" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to the layout engine.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1236" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1236"/>
        <description>Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to the layout engine.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:36.009-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:37.072-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:28.179-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11788 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:29.876-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:46.165-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36547"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36570"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36574"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:35661"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36605"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:35672"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:35874"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36533"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36355"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36379"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36587"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:35752"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-10.el4" test_ref="oval:org.mitre.oval:tst:36259"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36586"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36333"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36500"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.14.el4" test_ref="oval:org.mitre.oval:tst:35884"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36540"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36602"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36557"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36511"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36221"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-14.el5_1" test_ref="oval:org.mitre.oval:tst:36566"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-14.el5_1" test_ref="oval:org.mitre.oval:tst:36305"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-11.el5_1" test_ref="oval:org.mitre.oval:tst:36619"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11786" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the usb_host_handle_control function in the USB passthrough handling implementation in usb-linux.c in QEMU before 0.11.1 allows guest OS users to cause a denial of service (guest OS crash or hang) or possibly execute arbitrary code on the host OS via a crafted USB packet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0297" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0297"/>
        <description>Buffer overflow in the usb_host_handle_control function in the USB passthrough handling implementation in usb-linux.c in QEMU before 0.11.1 allows guest OS users to cause a denial of service (guest OS crash or hang) or possibly execute arbitrary code on the host OS via a crafted USB packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:21.341-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:36.814-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:27.521-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11786 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:09.820-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:45.784-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kmod-kvm is earlier than 0:83-105.el5_4.22" test_ref="oval:org.mitre.oval:tst:39907"/>
          <criterion comment="kvm-qemu-img is earlier than 0:83-105.el5_4.22" test_ref="oval:org.mitre.oval:tst:39965"/>
          <criterion comment="kvm-tools is earlier than 0:83-105.el5_4.22" test_ref="oval:org.mitre.oval:tst:40075"/>
          <criterion comment="kvm is earlier than 0:83-105.el5_4.22" test_ref="oval:org.mitre.oval:tst:39881"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11785" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the SMB dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service via unknown vectors.  NOTE: this identifier originally included MP3 and NCP, but those issues are already covered by CVE-2007-6111.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6438" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6438"/>
        <description>Unspecified vulnerability in the SMB dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service via unknown vectors.  NOTE: this identifier originally included MP3 and NCP, but those issues are already covered by CVE-2007-6111.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:14.333-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:36.524-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:27.219-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11785 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:23.854-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:45.342-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:36051"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:35980"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35669"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35941"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:35709"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:36120"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35712"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35801"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11781" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PDF file that causes the boundaries of a maskColors array to be exceeded.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0064" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0064"/>
        <description>Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:20.538-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:35.826-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:26.560-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11781 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:18.336-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:44.748-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.24" test_ref="oval:org.mitre.oval:tst:31296"/>
            <criterion comment="xpdf is earlier than 1:2.02-9.5" test_ref="oval:org.mitre.oval:tst:30886"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.24" test_ref="oval:org.mitre.oval:tst:31027"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.24" test_ref="oval:org.mitre.oval:tst:31314"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.EL4.4" test_ref="oval:org.mitre.oval:tst:31002"/>
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-3.3" test_ref="oval:org.mitre.oval:tst:31263"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.EL4.4" test_ref="oval:org.mitre.oval:tst:31187"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-3.3" test_ref="oval:org.mitre.oval:tst:31323"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.EL4.4" test_ref="oval:org.mitre.oval:tst:31257"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.6" test_ref="oval:org.mitre.oval:tst:31093"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.EL4.4" test_ref="oval:org.mitre.oval:tst:30716"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-4.3" test_ref="oval:org.mitre.oval:tst:30790"/>
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.6" test_ref="oval:org.mitre.oval:tst:30919"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.EL4.4" test_ref="oval:org.mitre.oval:tst:31111"/>
            <criterion comment="xpdf is earlier than 1:3.00-11.5" test_ref="oval:org.mitre.oval:tst:30331"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.EL4.4" test_ref="oval:org.mitre.oval:tst:30846"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.EL4.4" test_ref="oval:org.mitre.oval:tst:31305"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.6" test_ref="oval:org.mitre.oval:tst:31056"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11780" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow.  NOTE: some of these details are obtained from third party information.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0723" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0723"/>
        <description>Multiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow.  NOTE: some of these details are obtained from third party information.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:17.822-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:35.558-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:26.282-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11780 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:25.436-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:44.367-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="python-lcms is earlier than 0:1.18-0.1.beta1.el5_3.2" test_ref="oval:org.mitre.oval:tst:38555"/>
          <criterion comment="lcms-devel is earlier than 0:1.18-0.1.beta1.el5_3.2" test_ref="oval:org.mitre.oval:tst:37972"/>
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:38276"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37661"/>
          <criterion comment="lcms is earlier than 0:1.18-0.1.beta1.el5_3.2" test_ref="oval:org.mitre.oval:tst:38260"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37652"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37769"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:38561"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1178" version="5" class="vulnerability">
      <metadata>
        <title>IE6 DHTML Method Call Memory Corruption (Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1359" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1359"/>
        <description>Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbox object, which results in a dereference of an invalid table pointer.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-04-12T12:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-04-12T05:16:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:59.126-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:34.523-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:13.735-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:27.712-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="Win2K/XP/2003 is patched" negate="true" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.3790.507" negate="false" test_ref="oval:org.mitre.oval:tst:1100"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11776" version="5" class="vulnerability">
      <metadata>
        <title>Format string vulnerability in GnomeMeeting 1.0.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in the name, which is not properly handled in a call to the gnomemeeting_log_insert function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1007"/>
        <description>Format string vulnerability in GnomeMeeting 1.0.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in the name, which is not properly handled in a call to the gnomemeeting_log_insert function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:52.633-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:35.330-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:26.044-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11776 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:14.654-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:42.704-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gnomemeeting is earlier than 0:0.96.0-5" test_ref="oval:org.mitre.oval:tst:32840"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gnomemeeting is earlier than 0:1.0.2-9" test_ref="oval:org.mitre.oval:tst:33628"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11772" version="5" class="vulnerability">
      <metadata>
        <title>Firefox 1.0 allows remote attackers to execute arbitrary code via plugins that load "privileged content" into frames, as demonstrated using certain XUL events when a user drags a scrollbar two times, aka "Firescrolling."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0527" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0527"/>
        <description>Firefox 1.0 allows remote attackers to execute arbitrary code via plugins that load "privileged content" into frames, as demonstrated using certain XUL events when a user drags a scrollbar two times, aka "Firescrolling."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:33.376-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:34.941-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:25.354-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11772 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:08.012-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:40.769-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31283"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31520"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31645"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31516"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31569"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31143"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31512"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31785"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31695"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31626"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:1.0.1-1.4.3" test_ref="oval:org.mitre.oval:tst:31118"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1177" version="8" class="vulnerability">
      <metadata>
        <title>HP-UX 11.11 Blind Connection Reset Attack Vulnerability</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0790" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0790"/>
        <description>Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error messages, aka the "blind connection-reset attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:48:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:14.323-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:04.370-04:00">ACCEPTED</status_change>
            <modified comment="Added title. Implemented by Jon Baker of The MITRE Corporation." date="2007-02-13T14:07:00.724-05:00">
              <contributor organization="Security-Database">Nabil Ouchn</contributor>
            </modified>
            <status_change date="2007-02-13T14:09:38.747-05:00">INTERIM</status_change>
            <modified comment="Standardized title." date="2007-02-26T00:59:00.698-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:43.707-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:26.785-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:07.606-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1177 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:44.840-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:00:08.869-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:tst:3704 - HP-UX Security Advisories published in February 2014" date="2014-03-05T13:28:00.446-05:00">
              <contributor organization="Hewlett-Packard">Sushant Kumar Singh</contributor>
            </modified>
            <status_change date="2014-03-05T13:33:04.333-05:00">INTERIM</status_change>
            <status_change date="2014-03-24T04:00:12.352-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.11">
          <criteria operator="AND" comment="700 Series OS Release 11.11">
            <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:3443"/>
            <criterion comment="HP Release B.11.11" test_ref="oval:org.mitre.oval:tst:3704"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 11.11">
            <criterion comment="800-series HP" test_ref="oval:org.mitre.oval:tst:4124"/>
            <criterion comment="HP Release B.11.11" test_ref="oval:org.mitre.oval:tst:3704"/>
          </criteria>
        </criteria>
        <criterion negate="true" comment="Patch PHNE_33159 is installed" test_ref="oval:org.mitre.oval:tst:3779"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11764" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 use the HTTP Host header to determine the context of a document provided in a non-200 CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" attack.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1836" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1836"/>
        <description>Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 use the HTTP Host header to determine the context of a document provided in a non-200 CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" attack.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:07.640-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:34.676-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:24.696-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11764 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:14.613-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:40.130-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.11-4.el4" test_ref="oval:org.mitre.oval:tst:38689"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38771"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38371"/>
            <criterion comment="firefox is earlier than 0:3.0.11-2.el5_3" test_ref="oval:org.mitre.oval:tst:38682"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.22-2.el5_3" test_ref="oval:org.mitre.oval:tst:38801"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38718"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11760" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a long XML entity name.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3529" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3529"/>
        <description>Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a long XML entity name.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:30.537-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:34.347-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:24.342-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11760 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:28.521-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:39.568-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libxml2-devel is earlier than 0:2.5.10-13" test_ref="oval:org.mitre.oval:tst:36760"/>
            <criterion comment="libxml2-python is earlier than 0:2.5.10-13" test_ref="oval:org.mitre.oval:tst:37705"/>
            <criterion comment="libxml2 is earlier than 0:2.5.10-13" test_ref="oval:org.mitre.oval:tst:37156"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libxml2-devel is earlier than 0:2.6.16-12.5" test_ref="oval:org.mitre.oval:tst:37713"/>
            <criterion comment="libxml2-python is earlier than 0:2.6.16-12.5" test_ref="oval:org.mitre.oval:tst:37446"/>
            <criterion comment="libxml2 is earlier than 0:2.6.16-12.5" test_ref="oval:org.mitre.oval:tst:37341"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libxml2-devel is earlier than 0:2.6.26-2.1.2.6" test_ref="oval:org.mitre.oval:tst:36730"/>
            <criterion comment="libxml2-python is earlier than 0:2.6.26-2.1.2.6" test_ref="oval:org.mitre.oval:tst:37719"/>
            <criterion comment="libxml2 is earlier than 0:2.6.26-2.1.2.6" test_ref="oval:org.mitre.oval:tst:37620"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11755" version="5" class="vulnerability">
      <metadata>
        <title>OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0081" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0081"/>
        <description>OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:29.408-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:34.128-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:24.101-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11755 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:14.083-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:39.270-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="openssl-perl is earlier than 0:0.9.7a-33.4" test_ref="oval:org.mitre.oval:tst:30638"/>
          <criterion comment="openssl-devel is earlier than 0:0.9.7a-33.4" test_ref="oval:org.mitre.oval:tst:30381"/>
          <criterion comment="openssl is earlier than 0:0.9.7a-33.4" test_ref="oval:org.mitre.oval:tst:30673"/>
          <criterion comment="openssl096b is earlier than 0:0.9.6b-16" test_ref="oval:org.mitre.oval:tst:30479"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11754" version="5" class="vulnerability">
      <metadata>
        <title>The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to read the contents of arbitrary memory locations via a request containing a 32-bit value that is improperly used as an array index.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6428" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6428"/>
        <description>The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to read the contents of arbitrary memory locations via a request containing a 32-bit value that is improperly used as an array index.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:33.811-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:33.007-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:23.152-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11754 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:12.235-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:38.122-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35923"/>
            <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35665"/>
            <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:36014"/>
            <criterion comment="XFree86-libs is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35929"/>
            <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:36011"/>
            <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35836"/>
            <criterion comment="XFree86-twm is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35726"/>
            <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35715"/>
            <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35610"/>
            <criterion comment="XFree86-doc is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:36025"/>
            <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35789"/>
            <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35804"/>
            <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35865"/>
            <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35793"/>
            <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35903"/>
            <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35965"/>
            <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35922"/>
            <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35504"/>
            <criterion comment="XFree86-xdm is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35045"/>
            <criterion comment="XFree86-sdk is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35914"/>
            <criterion comment="XFree86 is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35831"/>
            <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35998"/>
            <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35975"/>
            <criterion comment="XFree86-xfs is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:36031"/>
            <criterion comment="XFree86-tools is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35971"/>
            <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35711"/>
            <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35933"/>
            <criterion comment="XFree86-xauth is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35826"/>
            <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35753"/>
            <criterion comment="XFree86-devel is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35678"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35795"/>
            <criterion comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35934"/>
            <criterion comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35467"/>
            <criterion comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35946"/>
            <criterion comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36116"/>
            <criterion comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35116"/>
            <criterion comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36004"/>
            <criterion comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35483"/>
            <criterion comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36103"/>
            <criterion comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36060"/>
            <criterion comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36074"/>
            <criterion comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35895"/>
            <criterion comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35905"/>
            <criterion comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36012"/>
            <criterion comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35984"/>
            <criterion comment="xorg-x11 is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35857"/>
            <criterion comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35681"/>
            <criterion comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35909"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-server-sdk is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35517"/>
            <criterion comment="xorg-x11-server-Xnest is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35690"/>
            <criterion comment="xorg-x11-server-Xvfb is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35399"/>
            <criterion comment="xorg-x11-server-Xdmx is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35908"/>
            <criterion comment="xorg-x11-server-Xephyr is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35987"/>
            <criterion comment="xorg-x11-server is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35861"/>
            <criterion comment="xorg-x11-server-Xorg is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35935"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11753" version="5" class="vulnerability">
      <metadata>
        <title>ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta handles out-of-bailiwick data accompanying a secure response without re-fetching from the original source, which allows remote attackers to have an unspecified impact via a crafted response, aka Bug 20819.  NOTE: this vulnerability exists because of a regression during the fix for CVE-2009-4022.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0382" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0382"/>
        <description>ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta handles out-of-bailiwick data accompanying a secure response without re-fetching from the original source, which allows remote attackers to have an unspecified impact via a crafted response, aka Bug 20819.  NOTE: this vulnerability exists because of a regression during the fix for CVE-2009-4022.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:22.082-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:32.723-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:22.808-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11753 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:55.162-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:37.668-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="bind-utils is earlier than 30:9.3.6-4.P1.el5_4.2" test_ref="oval:org.mitre.oval:tst:40044"/>
          <criterion comment="bind-libbind-devel is earlier than 30:9.3.6-4.P1.el5_4.2" test_ref="oval:org.mitre.oval:tst:39542"/>
          <criterion comment="bind-devel is earlier than 30:9.3.6-4.P1.el5_4.2" test_ref="oval:org.mitre.oval:tst:39904"/>
          <criterion comment="bind-chroot is earlier than 30:9.3.6-4.P1.el5_4.2" test_ref="oval:org.mitre.oval:tst:39693"/>
          <criterion comment="caching-nameserver is earlier than 30:9.3.6-4.P1.el5_4.2" test_ref="oval:org.mitre.oval:tst:39892"/>
          <criterion comment="bind-sdb is earlier than 30:9.3.6-4.P1.el5_4.2" test_ref="oval:org.mitre.oval:tst:40054"/>
          <criterion comment="bind is earlier than 30:9.3.6-4.P1.el5_4.2" test_ref="oval:org.mitre.oval:tst:39489"/>
          <criterion comment="bind-libs is earlier than 30:9.3.6-4.P1.el5_4.2" test_ref="oval:org.mitre.oval:tst:39885"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11751" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0.5 and Mozilla before 1.7.9 does not properly clone base objects, which allows remote attackers to execute arbitrary code by navigating the prototype chain to reach a privileged object.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2270" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2270"/>
        <description>Firefox before 1.0.5 and Mozilla before 1.7.9 does not properly clone base objects, which allows remote attackers to execute arbitrary code by navigating the prototype chain to reach a privileged object.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:39.093-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:32.241-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:22.313-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11751 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:19.395-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:36.855-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32142"/>
            <criterion comment="mozilla is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32131"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32154"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32001"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32171"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32162"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31782"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32041"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32004"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31353"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32120"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.6" test_ref="oval:org.mitre.oval:tst:31633"/>
            <criterion comment="mozilla is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31837"/>
            <criterion comment="thunderbird is earlier than 0:1.0.6-1.4.1" test_ref="oval:org.mitre.oval:tst:32113"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32100"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31821"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31904"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.6" test_ref="oval:org.mitre.oval:tst:31814"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31951"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31554"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32149"/>
            <criterion comment="firefox is earlier than 0:1.0.6-1.4.1" test_ref="oval:org.mitre.oval:tst:32167"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31998"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32061"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11749" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0.0.5 allows remote attackers to inject arbitrary web script "into another site's context" via a "timing issue" involving the (1) addEventListener or (2) setTimeout function, probably by setting events that activate after the context has changed.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3736" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3736"/>
        <description>Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0.0.5 allows remote attackers to inject arbitrary web script "into another site's context" via a "timing issue" involving the (1) addEventListener or (2) setTimeout function, probably by setting events that activate after the context has changed.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:38.269-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:31.669-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:21.731-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11749 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:37.221-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:35.807-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:33986"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34827"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34839"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34762"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34814"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34694"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34925"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34684"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34723"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34747"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34968"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34971"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-0.3.el4" test_ref="oval:org.mitre.oval:tst:34888"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34868"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34492"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34775"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.3.el4" test_ref="oval:org.mitre.oval:tst:34828"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34981"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34335"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34957"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34550"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34608"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-3.el5" test_ref="oval:org.mitre.oval:tst:34810"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-3.el5" test_ref="oval:org.mitre.oval:tst:34667"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-3.el5" test_ref="oval:org.mitre.oval:tst:34869"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11747" version="5" class="vulnerability">
      <metadata>
        <title>The procfs code (proc_misc.c) in Linux 2.6.14.3 and other versions before 2.6.15 allows attackers to read sensitive kernel memory via unspecified vectors in which a signed value is added to an unsigned value.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-4605" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4605"/>
        <description>The procfs code (proc_misc.c) in Linux 2.6.14.3 and other versions before 2.6.15 allows attackers to read sensitive kernel memory via unspecified vectors in which a signed value is added to an unsigned value.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:28.280-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:31.414-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:21.465-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11747 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:19.450-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:35.438-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32415"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32137"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32528"/>
          <criterion comment="kernel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32205"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:31866"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32446"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32450"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11744" version="5" class="vulnerability">
      <metadata>
        <title>The netlink subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.13-rc1 does not initialize certain padding fields in structures, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors, related to the (1) tc_fill_qdisc, (2) tcf_fill_node, (3) neightbl_fill_info, (4) neightbl_fill_param_info, (5) neigh_fill_info, (6) rtnetlink_fill_ifinfo, (7) rtnetlink_fill_iwinfo, (8) vif_delete, (9) ipmr_destroy_unres, (10) ipmr_cache_alloc_unres, (11) ipmr_cache_resolve, (12) inet6_fill_ifinfo, (13) tca_get_fill, (14) tca_action_flush, (15) tcf_add_notify, (16) tc_dump_action, (17) cbq_dump_police, (18) __nlmsg_put, (19) __rta_fill, (20) __rta_reserve, (21) inet6_fill_prefix, (22) rsvp_dump, and (23) cbq_dump_ovl functions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-4881" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4881"/>
        <description>The netlink subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.13-rc1 does not initialize certain padding fields in structures, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors, related to the (1) tc_fill_qdisc, (2) tcf_fill_node, (3) neightbl_fill_info, (4) neightbl_fill_param_info, (5) neigh_fill_info, (6) rtnetlink_fill_ifinfo, (7) rtnetlink_fill_iwinfo, (8) vif_delete, (9) ipmr_destroy_unres, (10) ipmr_cache_alloc_unres, (11) ipmr_cache_resolve, (12) inet6_fill_ifinfo, (13) tca_get_fill, (14) tca_action_flush, (15) tcf_add_notify, (16) tc_dump_action, (17) cbq_dump_police, (18) __nlmsg_put, (19) __rta_fill, (20) __rta_reserve, (21) inet6_fill_prefix, (22) rsvp_dump, and (23) cbq_dump_ovl functions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:31.673-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:31.099-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:21.152-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11744 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:18:03.357-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:34.931-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:39477"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:38676"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:39556"/>
          <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:39526"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:38895"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:39250"/>
          <criterion comment="kernel is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:39485"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:39492"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:39608"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:39456"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:39277"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11743" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to graphics rendering and (1) handling of a long alert messagebox in the cairo_surface_set_device_offset function, (2) integer overflows when handling animated PNG data in the info_callback function in nsPNGDecoder.cpp, and (3) an integer overflow when handling SVG data in the nsSVGFEGaussianBlurElement::SetupPredivide function in nsSVGFilters.cpp.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4064" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4064"/>
        <description>Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to graphics rendering and (1) handling of a long alert messagebox in the cairo_surface_set_device_offset function, (2) integer overflows when handling animated PNG data in the info_callback function in nsPNGDecoder.cpp, and (3) an integer overflow when handling SVG data in the nsSVGFEGaussianBlurElement::SetupPredivide function in nsSVGFilters.cpp.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:38.736-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:30.712-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:20.768-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11743 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:17.686-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:34.432-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.2-3.el4" test_ref="oval:org.mitre.oval:tst:37195"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-19.el5" test_ref="oval:org.mitre.oval:tst:37248"/>
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37486"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37495"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37044"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37578"/>
            <criterion comment="yelp is earlier than 0:2.16.0-21.el5" test_ref="oval:org.mitre.oval:tst:37584"/>
            <criterion comment="devhelp is earlier than 0:0.12-19.el5" test_ref="oval:org.mitre.oval:tst:37353"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37406"/>
            <criterion comment="firefox is earlier than 0:3.0.2-3.el5" test_ref="oval:org.mitre.oval:tst:37225"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:36664"/>
            <criterion comment="nss-tools is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37664"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11737" version="4" class="vulnerability">
      <metadata>
        <title>Malformed Request Code Execution Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <product>Microsoft Office SharePoint Server 2007</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-3964" ref_url="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3964"/>
        <description>Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka "Malformed Request Code Execution Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-06-08T13:00:00">
              <contributor organization="Symantec Corporation">Josh Turpin</contributor>
            </submitted>
            <status_change date="2010-12-17T20:55:25.448-05:00">DRAFT</status_change>
            <status_change date="2011-01-03T04:00:06.869-05:00">INTERIM</status_change>
            <status_change date="2011-01-24T04:00:07.602-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="Microsoft Office SharePoint Server 2007 is installed." definition_ref="oval:org.mitre.oval:def:2313"/>
        <criterion comment="microsoft.office.server.conversions.launcher.exe version is less than 12.0.6547.5000" test_ref="oval:org.mitre.oval:tst:41953"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2313" version="12" class="inventory">
      <metadata>
        <title>Microsoft Office SharePoint Server 2007 is installed.</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <platform>Microsoft Windows Server 2008</platform>
          <platform>Microsoft Windows Server 2008 R2</platform>
          <product>Microsoft Office SharePoint Server 2007</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:sharepoint_server:2007"/>
        <description>Microsoft Office SharePoint Server 2007 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-10-10T04:39:42">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2007-10-11T10:02:51.975-04:00">DRAFT</status_change>
            <status_change date="2007-10-26T10:00:30.934-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:01:08.127-05:00">ACCEPTED</status_change>
            <modified comment="Changed datatype from version to string." date="2008-08-28T13:32:00.278-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2008-08-28T13:44:16.491-04:00">INTERIM</status_change>
            <status_change date="2008-09-15T04:00:21.134-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:2313 - Modifications vary from minor OVAL title/description changes to suggesting an alternative CPE name to use." date="2011-09-28T11:29:00.976-04:00">
              <contributor organization="The MITRE Corporation">David Rothenberg</contributor>
            </modified>
            <status_change date="2011-09-28T11:33:38.747-04:00">INTERIM</status_change>
            <status_change date="2011-10-17T04:00:18.536-04:00">ACCEPTED</status_change>
            <status_change date="2012-03-05T14:24:07.072-05:00">INTERIM</status_change>
            <modified comment="Added Windows Server 2008 R2 platform" date="2012-03-05T14:24:07.072-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2012-03-26T04:03:00.785-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:2686 - MS13-084, 085 and 067 bulletins" date="2013-10-23T11:46:00.610-04:00">
              <contributor organization="SecPod Technologies">Chandan S</contributor>
            </modified>
            <status_change date="2013-10-23T11:49:25.573-04:00">INTERIM</status_change>
            <status_change date="2013-11-11T04:02:03.519-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:2686 - In some &quot;pattern match&quot; strings added &quot;\&quot; before &quot;.&quot; to clarify if &quot;point&quot; or &quot;any symbol&quot; needed." date="2014-07-28T18:11:00.493-04:00">
              <contributor organization="ALTX-SOFT">Evgeniy Pavlov</contributor>
            </modified>
            <status_change date="2014-07-28T18:12:36.194-04:00">INTERIM</status_change>
            <status_change date="2014-08-18T04:02:26.510-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:2313 - removed Microsoft Exchange Server 2003 from inventory" date="2015-06-05T09:04:00.152-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-06-05T09:06:27.662-04:00">INTERIM</status_change>
            <status_change date="2015-06-22T04:00:42.619-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="SharePoint Server 2007 is installed." test_ref="oval:org.mitre.oval:tst:4279"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11734" version="5" class="vulnerability">
      <metadata>
        <title>Multiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject arbitrary Javascript into privileged pages using the _search target of the Firefox sidebar.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1158" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1158"/>
        <description>Multiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject arbitrary Javascript into privileged pages using the _search target of the Firefox sidebar.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:26.874-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:30.523-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:20.574-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11734 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:45.379-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:34.147-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="firefox is earlier than 0:1.0.3-1.4.1" test_ref="oval:org.mitre.oval:tst:31646"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11732" version="5" class="vulnerability">
      <metadata>
        <title>The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service (service hang) via a certain UDP packet to the IPP port.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0558" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0558"/>
        <description>The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service (service hang) via a certain UDP packet to the IPP port.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:46.682-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:30.319-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:20.358-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11732 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:57:47.239-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:33.804-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.13" test_ref="oval:org.mitre.oval:tst:30809"/>
          <criterion comment="cups is earlier than 1:1.1.17-13.3.13" test_ref="oval:org.mitre.oval:tst:30723"/>
          <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.13" test_ref="oval:org.mitre.oval:tst:29988"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1173" version="1" class="vulnerability">
      <metadata>
        <title>Multiple Buffer Overflows in libXML2</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>libxml2</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0989" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0989"/>
        <description>Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that is not properly handled by the xmlNanoFTPScanProxy function, and other overflows related to manipulation of DNS length values, including (3) xmlNanoFTPConnect, (4) xmlNanoHTTPConnectHost, and (5) xmlNanoHTTPConnectHost.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-06-27T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-06-29T06:49:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criteria operator="OR" comment="libxml or libxml-devel RPM is earlier than 1:1.8.17-9.2">
          <criterion comment="libxml RPM is earlier than 1:1.8.17-9.2" negate="false" test_ref="oval:org.mitre.oval:tst:1102"/>
          <criterion comment="libxml-devel RPM is earlier than 1:1.8.17-9.2" negate="false" test_ref="oval:org.mitre.oval:tst:1101"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11728" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allow remote attackers to cause a denial of service (crash), corrupt memory, and possibly execute arbitrary code via unspecified vectors, some of which involve JavaScript, and possibly large images or plugin data.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4571" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4571"/>
        <description>Multiple unspecified vulnerabilities in Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allow remote attackers to cause a denial of service (crash), corrupt memory, and possibly execute arbitrary code via unspecified vectors, some of which involve JavaScript, and possibly large images or plugin data.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:00.202-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:29.793-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:19.242-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11728 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:06.383-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:33.174-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32759"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32989"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32809"/>
            <criterion comment="seamonkey is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32779"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32954"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32668"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:33010"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32811"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32981"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:33061"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.4.el4" test_ref="oval:org.mitre.oval:tst:32072"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:33120"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32842"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:32910"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32677"/>
            <criterion comment="seamonkey is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32933"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32243"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.4.el4" test_ref="oval:org.mitre.oval:tst:33062"/>
            <criterion comment="firefox is earlier than 0:1.5.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:32951"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32978"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:33072"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:33079"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32121"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:33077"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11724" version="5" class="vulnerability">
      <metadata>
        <title>Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3257" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3257"/>
        <description>Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:22.437-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:29.504-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:18.907-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11724 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:03.916-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:32.632-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="evolution is earlier than 0:1.4.5-21.el3" test_ref="oval:org.mitre.oval:tst:33987"/>
            <criterion comment="evolution-devel is earlier than 0:1.4.5-21.el3" test_ref="oval:org.mitre.oval:tst:34669"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="evolution is earlier than 0:2.0.2-35.0.4.el4" test_ref="oval:org.mitre.oval:tst:34459"/>
            <criterion comment="evolution-devel is earlier than 0:2.0.2-35.0.4.el4" test_ref="oval:org.mitre.oval:tst:33713"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="evolution-data-server-devel is earlier than 0:1.8.0-15.0.4.el5" test_ref="oval:org.mitre.oval:tst:34172"/>
            <criterion comment="evolution-data-server is earlier than 0:1.8.0-15.0.4.el5" test_ref="oval:org.mitre.oval:tst:34388"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11723" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in ip_vs_conn_flush in Linux 2.6 before 2.6.13 and 2.4 before 2.4.32-pre2, when running on SMP systems, allows local users to cause a denial of service (null dereference) by causing a connection timer to expire while the connection table is being flushed before the appropriate lock is acquired.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3274" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3274"/>
        <description>Race condition in ip_vs_conn_flush in Linux 2.6 before 2.6.13 and 2.4 before 2.4.32-pre2, when running on SMP systems, allows local users to cause a denial of service (null dereference) by causing a connection timer to expire while the connection table is being flushed before the appropriate lock is acquired.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:50.987-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:29.119-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:18.510-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11723 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:29.978-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:32.104-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31411"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31953"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31879"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31990"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31485"/>
            <criterion comment="kernel is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32093"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31968"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32148"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31741"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31896"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31885"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31861"/>
            <criterion comment="kernel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31550"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31914"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31924"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:32023"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11722" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1772" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1772"/>
        <description>Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:32.247-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:28.842-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:18.280-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11722 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:00.847-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:31.675-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="sharutils is earlier than 0:4.2.1-16.2" test_ref="oval:org.mitre.oval:tst:31587"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="sharutils is earlier than 0:4.2.1-22.2" test_ref="oval:org.mitre.oval:tst:31528"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11721" version="5" class="vulnerability">
      <metadata>
        <title>neon before 0.28.6, when OpenSSL or GnuTLS is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2474" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2474"/>
        <description>neon before 0.28.6, when OpenSSL or GnuTLS is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:48.734-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:28.602-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:17.993-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11721 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:12:55.102-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:30.491-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="neon is earlier than 0:0.24.7-4.el4_8.2" test_ref="oval:org.mitre.oval:tst:38525"/>
            <criterion comment="neon-devel is earlier than 0:0.24.7-4.el4_8.2" test_ref="oval:org.mitre.oval:tst:38882"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="neon is earlier than 0:0.25.5-10.el5_4.1" test_ref="oval:org.mitre.oval:tst:39020"/>
            <criterion comment="neon-devel is earlier than 0:0.25.5-10.el5_4.1" test_ref="oval:org.mitre.oval:tst:39410"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11720" version="5" class="vulnerability">
      <metadata>
        <title>sql_select.cc in MySQL 5.0.x before 5.0.32 and 5.1.x before 5.1.14 allows remote authenticated users to cause a denial of service (crash) via an EXPLAIN SELECT FROM on the INFORMATION_SCHEMA table, as originally demonstrated using ORDER BY.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-7232" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-7232"/>
        <description>sql_select.cc in MySQL 5.0.x before 5.0.32 and 5.1.x before 5.1.14 allows remote authenticated users to cause a denial of service (crash) via an EXPLAIN SELECT FROM on the INFORMATION_SCHEMA table, as originally demonstrated using ORDER BY.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:28.964-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:28.366-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:17.586-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11720 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:51.954-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:30.142-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mysql is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36197"/>
          <criterion comment="mysql-devel is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36749"/>
          <criterion comment="mysql-test is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36750"/>
          <criterion comment="mysql-bench is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36831"/>
          <criterion comment="mysql-server is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36646"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1172" version="1" class="vulnerability">
      <metadata>
        <title>RHE3 Firefox External App Code Acceptance Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2267" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2267"/>
        <description>Firefox before 1.0.5 allows remote attackers to steal information and possibly execute arbitrary code by using standalone applications such as Flash and QuickTime to open a javascript: URL, which is run in the context of the previous page, and may lead to code execution if the standalone application loads a privileged chrome: URL.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-15T04:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-08-19T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2483"/>
          <criterion comment="mozilla RPM is earlier than 37:1.7.10-1.4.1" negate="false" test_ref="oval:org.mitre.oval:tst:2651"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/mozilla is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2650"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11719" version="5" class="vulnerability">
      <metadata>
        <title>The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users to gain privileges via (1) socket or (2) socketpair call with a negative protocol value.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0750" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0750"/>
        <description>The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users to gain privileges via (1) socket or (2) socketpair call with a negative protocol value.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:55.823-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:27.933-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:17.175-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11719 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:39.875-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:29.557-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31148"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31473"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31178"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31282"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31565"/>
            <criterion comment="kernel is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31562"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31582"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:30730"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31534"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31545"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31539"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31661"/>
            <criterion comment="kernel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31482"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31112"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31605"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31330"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11718" version="5" class="vulnerability">
      <metadata>
        <title>Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via a PassMessage request containing a large array index.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5760" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5760"/>
        <description>Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via a PassMessage request containing a large array index.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:06.905-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:27.427-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:16.618-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11718 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:14:01.902-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:28.818-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35795"/>
            <criterion comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35934"/>
            <criterion comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35467"/>
            <criterion comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35946"/>
            <criterion comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36116"/>
            <criterion comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35116"/>
            <criterion comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36004"/>
            <criterion comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35483"/>
            <criterion comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36103"/>
            <criterion comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36060"/>
            <criterion comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36074"/>
            <criterion comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35895"/>
            <criterion comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35905"/>
            <criterion comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36012"/>
            <criterion comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35984"/>
            <criterion comment="xorg-x11 is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35857"/>
            <criterion comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35681"/>
            <criterion comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35909"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-server-sdk is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35517"/>
            <criterion comment="xorg-x11-server-Xnest is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35690"/>
            <criterion comment="xorg-x11-server-Xvfb is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35399"/>
            <criterion comment="xorg-x11-server-Xdmx is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35908"/>
            <criterion comment="xorg-x11-server-Xephyr is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35987"/>
            <criterion comment="xorg-x11-server is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35861"/>
            <criterion comment="xorg-x11-server-Xorg is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35935"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11717" version="5" class="vulnerability">
      <metadata>
        <title>The (1) dist or (2) distcheck rules in GNU Automake 1.11.1, 1.10.3, and release branches branch-1-4 through branch-1-9, when producing a distribution tarball for a package that uses Automake, assign insecure permissions (777) to directories in the build tree, which introduces a race condition that allows local users to modify the contents of package files, introduce Trojan horse programs, or conduct other attacks before the build is complete.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4029" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4029"/>
        <description>The (1) dist or (2) distcheck rules in GNU Automake 1.11.1, 1.10.3, and release branches branch-1-4 through branch-1-9, when producing a distribution tarball for a package that uses Automake, assign insecure permissions (777) to directories in the build tree, which introduces a race condition that allows local users to modify the contents of package files, introduce Trojan horse programs, or conduct other attacks before the build is complete.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:45.790-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:27.196-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:16.376-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11717 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:35.659-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:28.467-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="automake15 is earlier than 0:1.5-16.el5.2" test_ref="oval:org.mitre.oval:tst:40083"/>
          <criterion comment="automake is earlier than 0:1.9.6-2.3.el5" test_ref="oval:org.mitre.oval:tst:40330"/>
          <criterion comment="automake17 is earlier than 0:1.7.9-7.el5.2" test_ref="oval:org.mitre.oval:tst:39860"/>
          <criterion comment="automake16 is earlier than 0:1.6.3-8.el5.1" test_ref="oval:org.mitre.oval:tst:39807"/>
          <criterion comment="automake14 is earlier than 0:1.4p6-13.el5.1" test_ref="oval:org.mitre.oval:tst:40371"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11716" version="5" class="vulnerability">
      <metadata>
        <title>Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2052" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2052"/>
        <description>Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:44.203-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:26.783-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:15.956-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11716 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:38.073-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:27.797-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.2.3-6.8" test_ref="oval:org.mitre.oval:tst:35717"/>
            <criterion comment="tkinter is earlier than 0:2.2.3-6.8" test_ref="oval:org.mitre.oval:tst:35704"/>
            <criterion comment="python-tools is earlier than 0:2.2.3-6.8" test_ref="oval:org.mitre.oval:tst:35616"/>
            <criterion comment="python is earlier than 0:2.2.3-6.8" test_ref="oval:org.mitre.oval:tst:35688"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.3.4-14.4.el4_6.1" test_ref="oval:org.mitre.oval:tst:35282"/>
            <criterion comment="tkinter is earlier than 0:2.3.4-14.4.el4_6.1" test_ref="oval:org.mitre.oval:tst:35468"/>
            <criterion comment="python-tools is earlier than 0:2.3.4-14.4.el4_6.1" test_ref="oval:org.mitre.oval:tst:35783"/>
            <criterion comment="python is earlier than 0:2.3.4-14.4.el4_6.1" test_ref="oval:org.mitre.oval:tst:35573"/>
            <criterion comment="python-docs is earlier than 0:2.3.4-14.4.el4_6.1" test_ref="oval:org.mitre.oval:tst:35259"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38889"/>
            <criterion comment="tkinter is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38958"/>
            <criterion comment="python-tools is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38827"/>
            <criterion comment="python is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38282"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11712" version="5" class="vulnerability">
      <metadata>
        <title>Multiple cross-site scripting (XSS) vulnerabilities in the HTML filter in SquirrelMail 1.4.0 through 1.4.9a allow remote attackers to inject arbitrary web script or HTML via the (1) data: URI in an HTML e-mail attachment or (2) various non-ASCII character sets that are not properly filtered when viewed with Microsoft Internet Explorer.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1262" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1262"/>
        <description>Multiple cross-site scripting (XSS) vulnerabilities in the HTML filter in SquirrelMail 1.4.0 through 1.4.9a allow remote attackers to inject arbitrary web script or HTML via the (1) data: URI in an HTML e-mail attachment or (2) various non-ASCII character sets that are not properly filtered when viewed with Microsoft Internet Explorer.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:04.112-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:26.242-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:14.989-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11712 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:03.817-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:27.341-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-6.el3" test_ref="oval:org.mitre.oval:tst:33850"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-4.0.1.el4" test_ref="oval:org.mitre.oval:tst:33871"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-4.0.1.el5" test_ref="oval:org.mitre.oval:tst:34227"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11711" version="5" class="vulnerability">
      <metadata>
        <title>Vulnerability in tif_dirread.c for libtiff allows remote attackers to cause a denial of service (application crash) via a TIFF image that causes a divide-by-zero error when the number of row bytes is zero, a different vulnerability than CVE-2005-2452.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0804" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0804"/>
        <description>Vulnerability in tif_dirread.c for libtiff allows remote attackers to cause a denial of service (application crash) via a TIFF image that causes a divide-by-zero error when the number of row bytes is zero, a different vulnerability than CVE-2005-2452.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:51.743-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:25.899-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:14.689-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11711 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:25.664-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:26.905-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="tetex-latex is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31559"/>
          <criterion comment="kdegraphics-devel is earlier than 7:3.1.3-3.7" test_ref="oval:org.mitre.oval:tst:30890"/>
          <criterion comment="libtiff is earlier than 0:3.5.7-20.1" test_ref="oval:org.mitre.oval:tst:31042"/>
          <criterion comment="tetex-dvips is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31693"/>
          <criterion comment="kdegraphics is earlier than 7:3.1.3-3.7" test_ref="oval:org.mitre.oval:tst:31096"/>
          <criterion comment="tetex-fonts is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31615"/>
          <criterion comment="tetex is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31603"/>
          <criterion comment="libtiff-devel is earlier than 0:3.5.7-20.1" test_ref="oval:org.mitre.oval:tst:31022"/>
          <criterion comment="tetex-afm is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31685"/>
          <criterion comment="tetex-xdvi is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31747"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11710" version="5" class="vulnerability">
      <metadata>
        <title>The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0421" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0421"/>
        <description>The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:53.403-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:25.682-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:14.461-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11710 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:30.189-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:26.599-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="libpng10-devel is earlier than 0:1.0.13-12" test_ref="oval:org.mitre.oval:tst:30075"/>
          <criterion comment="libpng-devel is earlier than 2:1.2.2-21" test_ref="oval:org.mitre.oval:tst:30629"/>
          <criterion comment="libpng is earlier than 2:1.2.2-21" test_ref="oval:org.mitre.oval:tst:30587"/>
          <criterion comment="libpng10 is earlier than 0:1.0.13-12" test_ref="oval:org.mitre.oval:tst:30412"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11707" version="5" class="vulnerability">
      <metadata>
        <title>nfs2acl.c in the Linux kernel 2.6.14.4 does not check for MAY_SATTR privilege before setting access controls (ACL) on files on exported NFS filesystems, which allows remote attackers to bypass ACLs for readonly mounted NFS filesystems.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3623" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3623"/>
        <description>nfs2acl.c in the Linux kernel 2.6.14.4 does not check for MAY_SATTR privilege before setting access controls (ACL) on files on exported NFS filesystems, which allows remote attackers to bypass ACLs for readonly mounted NFS filesystems.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:03.533-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:25.407-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:14.165-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11707 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:12:54.307-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:26.208-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32335"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32833"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32825"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32836"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32736"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:31931"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32361"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32793"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32795"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11706" version="5" class="vulnerability">
      <metadata>
        <title>The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0989" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0989"/>
        <description>The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:24.357-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:24.863-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:13.621-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11706 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:16.248-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:25.392-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31283"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31520"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31645"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31516"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31569"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31143"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31512"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31785"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31695"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31626"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31478"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.4" test_ref="oval:org.mitre.oval:tst:31488"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31751"/>
            <criterion comment="thunderbird is earlier than 0:1.0.6-1.4.1" test_ref="oval:org.mitre.oval:tst:32113"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31647"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:30850"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31749"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.4" test_ref="oval:org.mitre.oval:tst:31658"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31636"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31780"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:30828"/>
            <criterion comment="firefox is earlier than 0:1.0.3-1.4.1" test_ref="oval:org.mitre.oval:tst:31646"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31716"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31758"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11704" version="5" class="vulnerability">
      <metadata>
        <title>nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors involving a "particular sequence of HTML tags" that leads to memory corruption.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0749" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0749"/>
        <description>nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors involving a "particular sequence of HTML tags" that leads to memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:00.640-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:24.375-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:13.123-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11704 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:18.322-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:24.719-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32663"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32326"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31987"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32451"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32697"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32558"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32427"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32671"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32666"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32561"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32593"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32679"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32133"/>
            <criterion comment="thunderbird is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32204"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32701"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32428"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32557"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32229"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32349"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32644"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32440"/>
            <criterion comment="firefox is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32219"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32598"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32717"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11703" version="5" class="vulnerability">
      <metadata>
        <title>The php_next_marker function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP function, allows remote attackers to cause a denial of service (infinite loop) via a JPEG image with an invalid marker value, which causes a negative length value to be passed to php_stream_seek.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0525" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0525"/>
        <description>The php_next_marker function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP function, allows remote attackers to cause a denial of service (infinite loop) via a JPEG image with an invalid marker value, which causes a negative length value to be passed to php_stream_seek.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:18.413-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:23.888-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:12.570-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11703 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:20.153-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:24.134-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31759"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:30948"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31858"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31704"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31679"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31505"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31819"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31329"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31673"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31737"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31787"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31830"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31383"/>
            <criterion comment="php is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31557"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31541"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31697"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31847"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31523"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31779"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31261"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31733"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11702" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3070" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3070"/>
        <description>Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:26.485-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:23.575-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:12.256-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11702 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:26.945-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:23.611-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nspr is earlier than 0:4.7.5-1.el4_8" test_ref="oval:org.mitre.oval:tst:39088"/>
            <criterion comment="firefox is earlier than 0:3.0.14-1.el4" test_ref="oval:org.mitre.oval:tst:39195"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.5-1.el4_8" test_ref="oval:org.mitre.oval:tst:39351"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39208"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39001"/>
            <criterion comment="nspr is earlier than 0:4.7.5-1.el5_4" test_ref="oval:org.mitre.oval:tst:39223"/>
            <criterion comment="firefox is earlier than 0:3.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39097"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.5-1.el5_4" test_ref="oval:org.mitre.oval:tst:39150"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39206"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11701" version="5" class="vulnerability">
      <metadata>
        <title>The __block_prepare_write function in fs/buffer.c for Linux kernel 2.6.x before 2.6.13 does not properly clear buffers during certain error conditions, which allows local users to read portions of files that have been unlinked.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4813" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4813"/>
        <description>The __block_prepare_write function in fs/buffer.c for Linux kernel 2.6.x before 2.6.13 does not properly clear buffers during certain error conditions, which allows local users to read portions of files that have been unlinked.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:37.992-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:23.298-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:11.932-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11701 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:12:39.549-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:23.194-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33204"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33278"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33306"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32378"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33145"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33107"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32620"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32645"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33057"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11700" version="3" class="vulnerability">
      <metadata>
        <title>Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_20 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (JVM crash) via a crafted JPEG or BMP file that triggers a buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2788" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2788"/>
        <description>Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_20 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (JVM crash) via a crafted JPEG or BMP file that triggers a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:05.991-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:22.207-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:10.970-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criteria operator="OR">
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.9-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:35071"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.9-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:35018"/>
            <criterion comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:36020"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.9-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:34754"/>
            <criterion comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:36131"/>
            <criterion comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:35578"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.9-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:34851"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.9-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:34906"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.9-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:35020"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34859"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34890"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.9-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35030"/>
            <criterion comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35850"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.9-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35025"/>
            <criterion comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36067"/>
            <criterion comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35854"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.9-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:34400"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34949"/>
            <criterion comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35322"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.9-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:34941"/>
            <criterion comment="java-1.5.0-bea is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34920"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34613"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35015"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.9-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35093"/>
            <criterion comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.9-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:34845"/>
            <criterion comment="java-1.5.0-bea-src is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35346"/>
            <criterion comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35349"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34956"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35062"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.9-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35075"/>
            <criterion comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35189"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34825"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34270"/>
            <criterion comment="java-1.4.2-bea-missioncontrol is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35296"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.9-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35013"/>
            <criterion comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35192"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.9-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35014"/>
            <criterion comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36087"/>
            <criterion comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35972"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.9-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34995"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34955"/>
            <criterion comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35247"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.9-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34621"/>
            <criterion comment="java-1.5.0-bea is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35253"/>
            <criterion comment="java-1.4.2-bea-demo is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36127"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:35124"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:35140"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.9-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34974"/>
            <criterion comment="java-1.5.0-bea-src is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34479"/>
            <criterion comment="java-1.5.0-bea-missioncontrol is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35180"/>
            <criterion comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.9-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34528"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34724"/>
            <criterion comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35169"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34692"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.9-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35103"/>
            <criterion comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35150"/>
            <criterion comment="java-1.4.2-bea-src is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36128"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:117" version="4" class="vulnerability">
      <metadata>
        <title>Microsoft ISA Server Cross-Site Scripting</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Security and Acceleration Server 2000</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0526" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0526"/>
        <description>Cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to inject arbitrary web script via a URL containing the script in the domain name portion, which is not properly cleansed in the default error pages (1) 500.htm for "500 Internal Server error" or (2) 404.htm for "404 Not Found."</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-03T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.657-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:50:13.833-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:00:57.765-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:117 - Corrected capitalization and extra spacing errors in product names" date="2011-04-08T16:13:00.153-04:00">
              <contributor organization="AIST">Akihito Nakamura</contributor>
            </modified>
            <status_change date="2011-04-08T16:17:44.043-04:00">INTERIM</status_change>
            <status_change date="2011-04-25T04:00:04.930-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="ISA Server 2000 is installed" test_ref="oval:org.mitre.oval:tst:2935"/>
        <criterion negate="true" comment="ISA2000-KB816456-x86.exe" test_ref="oval:org.mitre.oval:tst:2934"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11698" version="3" class="vulnerability">
      <metadata>
        <title>Adobe Reader and Acrobat 7.0.8 and earlier allows user-assisted remote attackers to execute code via a crafted PDF file that triggers memory corruption and overwrites a subroutine pointer during rendering.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5857" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5857"/>
        <description>Adobe Reader and Acrobat 7.0.8 and earlier allows user-assisted remote attackers to execute code via a crafted PDF file that triggers memory corruption and overwrites a subroutine pointer during rendering.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:58.140-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:21.844-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:10.652-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criteria operator="OR">
            <criterion comment="acroread-libs-atk is earlier than 0:1.8.0-1.el3" test_ref="oval:org.mitre.oval:tst:32952"/>
            <criterion comment="acroread-plugin is earlier than 0:7.0.9-1.1.1.EL3" test_ref="oval:org.mitre.oval:tst:33372"/>
            <criterion comment="acroread-libs-glib2 is earlier than 0:2.4.7-1" test_ref="oval:org.mitre.oval:tst:33249"/>
            <criterion comment="acroread-libs-gtk2 is earlier than 0:2.4.13-1.el3" test_ref="oval:org.mitre.oval:tst:33161"/>
            <criterion comment="acroread-libs-pango is earlier than 0:1.6.0-1.el3" test_ref="oval:org.mitre.oval:tst:33353"/>
            <criterion comment="acroread-libs-gtk2-engines is earlier than 0:2.2.0-1.el3" test_ref="oval:org.mitre.oval:tst:32853"/>
            <criterion comment="acroread is earlier than 0:7.0.9-1.1.1.EL3" test_ref="oval:org.mitre.oval:tst:32959"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="acroread-plugin is earlier than 0:7.0.9-1.2.0.EL4" test_ref="oval:org.mitre.oval:tst:33267"/>
            <criterion comment="acroread is earlier than 0:7.0.9-1.2.0.EL4" test_ref="oval:org.mitre.oval:tst:32938"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11695" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin before 2.4.3 and Adium before 1.3 allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, a different vulnerability than CVE-2008-2955.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2927" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2927"/>
        <description>Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin before 2.4.3 and Adium before 1.3 allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, a different vulnerability than CVE-2008-2955.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:18.742-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:21.479-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:10.284-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11695 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:14:13.574-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:22.620-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="pidgin is earlier than 0:1.5.1-2.el3" test_ref="oval:org.mitre.oval:tst:36472"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="pidgin is earlier than 0:1.5.1-2.el4" test_ref="oval:org.mitre.oval:tst:37369"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.3.1-2.el5_2" test_ref="oval:org.mitre.oval:tst:37440"/>
            <criterion comment="libpurple is earlier than 0:2.3.1-2.el5_2" test_ref="oval:org.mitre.oval:tst:36524"/>
            <criterion comment="libpurple-perl is earlier than 0:2.3.1-2.el5_2" test_ref="oval:org.mitre.oval:tst:37413"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.3.1-2.el5_2" test_ref="oval:org.mitre.oval:tst:36776"/>
            <criterion comment="pidgin-devel is earlier than 0:2.3.1-2.el5_2" test_ref="oval:org.mitre.oval:tst:37512"/>
            <criterion comment="libpurple-devel is earlier than 0:2.3.1-2.el5_2" test_ref="oval:org.mitre.oval:tst:37332"/>
            <criterion comment="finch is earlier than 0:2.3.1-2.el5_2" test_ref="oval:org.mitre.oval:tst:37243"/>
            <criterion comment="pidgin-perl is earlier than 0:2.3.1-2.el5_2" test_ref="oval:org.mitre.oval:tst:37347"/>
            <criterion comment="pidgin is earlier than 0:2.3.1-2.el5_2" test_ref="oval:org.mitre.oval:tst:37098"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11692" version="5" class="vulnerability">
      <metadata>
        <title>ftutil.c in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a crafted font file that triggers a null dereference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2661" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2661"/>
        <description>ftutil.c in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a crafted font file that triggers a null dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:14.117-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:21.207-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:09.540-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11692 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:14:00.828-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:22.215-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="freetype is earlier than 0:2.1.4-4.0.rhel3.2" test_ref="oval:org.mitre.oval:tst:32599"/>
            <criterion comment="freetype-devel is earlier than 0:2.1.4-4.0.rhel3.2" test_ref="oval:org.mitre.oval:tst:32616"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="freetype is earlier than 0:2.1.9-1.rhel4.4" test_ref="oval:org.mitre.oval:tst:32106"/>
            <criterion comment="freetype-demos is earlier than 0:2.1.9-1.rhel4.4" test_ref="oval:org.mitre.oval:tst:32605"/>
            <criterion comment="freetype-utils is earlier than 0:2.1.9-1.rhel4.4" test_ref="oval:org.mitre.oval:tst:32417"/>
            <criterion comment="freetype-devel is earlier than 0:2.1.9-1.rhel4.4" test_ref="oval:org.mitre.oval:tst:32653"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11691" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in the layout engine for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allow remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown attack vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6497"/>
        <description>Multiple unspecified vulnerabilities in the layout engine for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allow remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:27.600-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:20.693-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:08.990-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11691 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:37.000-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:21.560-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:32785"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33227"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33266"/>
            <criterion comment="seamonkey is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33146"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:32352"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33183"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33095"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33300"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:32996"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33263"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.6.el4" test_ref="oval:org.mitre.oval:tst:33195"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33236"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33229"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.9-0.1.el4" test_ref="oval:org.mitre.oval:tst:32844"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33273"/>
            <criterion comment="seamonkey is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33259"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33239"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.6.el4" test_ref="oval:org.mitre.oval:tst:33284"/>
            <criterion comment="firefox is earlier than 0:1.5.0.9-0.1.el4" test_ref="oval:org.mitre.oval:tst:32815"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33153"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33015"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33251"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33336"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:32408"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11690" version="5" class="vulnerability">
      <metadata>
        <title>The coda_pioctl function in the coda functionality (pioctl.c) for Linux kernel 2.6.9 and 2.4.x before 2.4.29 may allow local users to cause a denial of service (crash) or execute arbitrary code via negative vi.in_size or vi.out_size values, which may trigger a buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0124" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0124"/>
        <description>The coda_pioctl function in the coda functionality (pioctl.c) for Linux kernel 2.6.9 and 2.4.x before 2.4.29 may allow local users to cause a denial of service (crash) or execute arbitrary code via negative vi.in_size or vi.out_size values, which may trigger a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:29.559-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:20.414-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:08.693-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11690 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:03.262-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:21.186-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31411"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31953"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31879"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31990"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31485"/>
          <criterion comment="kernel is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32093"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31968"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32148"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31741"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1169" version="1" class="vulnerability">
      <metadata>
        <title>gzip Hard Link Attack</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>gzip</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0988"/>
        <description>Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-06-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-06-22T12:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="gzip RPM earlier than 0:1.3.3-12rhel3" negate="false" test_ref="oval:org.mitre.oval:tst:2667"/>
        </criteria>
        <criteria comment="Configuration section" operator="OR">
          <criterion comment="/usr/bin/gunzip is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2665"/>
          <criterion comment="/usr/bin/gzip is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2666"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11687" version="6" class="vulnerability">
      <metadata>
        <title>ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3736" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3736"/>
        <description>ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:15.108-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:19.244-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:07.497-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11687 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:02:16.372-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:19.827-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gcc-ppc32 is earlier than 0:3.2.3-60" test_ref="oval:org.mitre.oval:tst:39888"/>
            <criterion comment="gcc-java is earlier than 0:3.2.3-60" test_ref="oval:org.mitre.oval:tst:39446"/>
            <criterion comment="gcc-g77 is earlier than 0:3.2.3-60" test_ref="oval:org.mitre.oval:tst:39829"/>
            <criterion comment="libgcj is earlier than 0:3.2.3-60" test_ref="oval:org.mitre.oval:tst:38894"/>
            <criterion comment="gcc-c++ is earlier than 0:3.2.3-60" test_ref="oval:org.mitre.oval:tst:39648"/>
            <criterion comment="libobjc is earlier than 0:3.2.3-60" test_ref="oval:org.mitre.oval:tst:39643"/>
            <criterion comment="libstdc++ is earlier than 0:3.2.3-60" test_ref="oval:org.mitre.oval:tst:39297"/>
            <criterion comment="libf2c is earlier than 0:3.2.3-60" test_ref="oval:org.mitre.oval:tst:39324"/>
            <criterion comment="gcc-c++-ppc32 is earlier than 0:3.2.3-60" test_ref="oval:org.mitre.oval:tst:39622"/>
            <criterion comment="gcc-objc is earlier than 0:3.2.3-60" test_ref="oval:org.mitre.oval:tst:39791"/>
            <criterion comment="libgnat is earlier than 0:3.2.3-60" test_ref="oval:org.mitre.oval:tst:39571"/>
            <criterion comment="libtool-libs is earlier than 0:1.4.3-7" test_ref="oval:org.mitre.oval:tst:39400"/>
            <criterion comment="libstdc++-devel is earlier than 0:3.2.3-60" test_ref="oval:org.mitre.oval:tst:39577"/>
            <criterion comment="gcc-gnat is earlier than 0:3.2.3-60" test_ref="oval:org.mitre.oval:tst:39778"/>
            <criterion comment="cpp is earlier than 0:3.2.3-60" test_ref="oval:org.mitre.oval:tst:39694"/>
            <criterion comment="libgcj-devel is earlier than 0:3.2.3-60" test_ref="oval:org.mitre.oval:tst:39836"/>
            <criterion comment="gcc is earlier than 0:3.2.3-60" test_ref="oval:org.mitre.oval:tst:39781"/>
            <criterion comment="libgcc is earlier than 0:3.2.3-60" test_ref="oval:org.mitre.oval:tst:39401"/>
            <criterion comment="libtool is earlier than 0:1.4.3-7" test_ref="oval:org.mitre.oval:tst:39314"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gcc-ppc32 is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:org.mitre.oval:tst:39986"/>
            <criterion comment="gcc4-gfortran is earlier than 0:4.1.2-44.EL4_8.1" test_ref="oval:org.mitre.oval:tst:39498"/>
            <criterion comment="gcc-java is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:org.mitre.oval:tst:39736"/>
            <criterion comment="gcc-g77 is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:org.mitre.oval:tst:39013"/>
            <criterion comment="libgcj is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:org.mitre.oval:tst:39960"/>
            <criterion comment="gcc-c++ is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:org.mitre.oval:tst:39305"/>
            <criterion comment="libobjc is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:org.mitre.oval:tst:39783"/>
            <criterion comment="libgomp is earlier than 0:4.1.2-44.EL4_8.1" test_ref="oval:org.mitre.oval:tst:39491"/>
            <criterion comment="libstdc++ is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:org.mitre.oval:tst:39254"/>
            <criterion comment="libgcj4-src is earlier than 0:4.1.2-44.EL4_8.1" test_ref="oval:org.mitre.oval:tst:39874"/>
            <criterion comment="libmudflap-devel is earlier than 0:4.1.2-44.EL4_8.1" test_ref="oval:org.mitre.oval:tst:39639"/>
            <criterion comment="libf2c is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:org.mitre.oval:tst:39768"/>
            <criterion comment="gcc-c++-ppc32 is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:org.mitre.oval:tst:38996"/>
            <criterion comment="gcc-objc is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:org.mitre.oval:tst:39661"/>
            <criterion comment="gcc4-c++ is earlier than 0:4.1.2-44.EL4_8.1" test_ref="oval:org.mitre.oval:tst:39597"/>
            <criterion comment="libgnat is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:org.mitre.oval:tst:39878"/>
            <criterion comment="gcc4 is earlier than 0:4.1.2-44.EL4_8.1" test_ref="oval:org.mitre.oval:tst:39462"/>
            <criterion comment="libtool-libs is earlier than 0:1.5.6-5.el4_8" test_ref="oval:org.mitre.oval:tst:39563"/>
            <criterion comment="libgfortran is earlier than 0:4.1.2-44.EL4_8.1" test_ref="oval:org.mitre.oval:tst:39690"/>
            <criterion comment="gcc4-java is earlier than 0:4.1.2-44.EL4_8.1" test_ref="oval:org.mitre.oval:tst:39853"/>
            <criterion comment="libmudflap is earlier than 0:4.1.2-44.EL4_8.1" test_ref="oval:org.mitre.oval:tst:38912"/>
            <criterion comment="libstdc++-devel is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:org.mitre.oval:tst:39809"/>
            <criterion comment="libgcj4-devel is earlier than 0:4.1.2-44.EL4_8.1" test_ref="oval:org.mitre.oval:tst:39596"/>
            <criterion comment="libgcj-devel is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:org.mitre.oval:tst:39567"/>
            <criterion comment="gcc-gnat is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:org.mitre.oval:tst:39750"/>
            <criterion comment="cpp is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:org.mitre.oval:tst:39937"/>
            <criterion comment="gcc is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:org.mitre.oval:tst:39370"/>
            <criterion comment="libgcc is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:org.mitre.oval:tst:38965"/>
            <criterion comment="libtool is earlier than 0:1.5.6-5.el4_8" test_ref="oval:org.mitre.oval:tst:39452"/>
            <criterion comment="libgcj4 is earlier than 0:4.1.2-44.EL4_8.1" test_ref="oval:org.mitre.oval:tst:39599"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libtool-ltdl-devel is earlier than 0:1.5.22-7.el5_4" test_ref="oval:org.mitre.oval:tst:39632"/>
            <criterion comment="gcc-gfortran is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:org.mitre.oval:tst:39424"/>
            <criterion comment="gcc-java is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:org.mitre.oval:tst:39841"/>
            <criterion comment="libgcj is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:org.mitre.oval:tst:39777"/>
            <criterion comment="gcc-c++ is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:org.mitre.oval:tst:39779"/>
            <criterion comment="libobjc is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:org.mitre.oval:tst:39790"/>
            <criterion comment="libstdc++ is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:org.mitre.oval:tst:39808"/>
            <criterion comment="libmudflap-devel is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:org.mitre.oval:tst:39820"/>
            <criterion comment="gcc-objc is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:org.mitre.oval:tst:39409"/>
            <criterion comment="libgnat is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:org.mitre.oval:tst:39459"/>
            <criterion comment="libgcj-src is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:org.mitre.oval:tst:39523"/>
            <criterion comment="libgfortran is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:org.mitre.oval:tst:39689"/>
            <criterion comment="libtool-ltdl is earlier than 0:1.5.22-7.el5_4" test_ref="oval:org.mitre.oval:tst:39601"/>
            <criterion comment="libmudflap is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:org.mitre.oval:tst:39540"/>
            <criterion comment="libstdc++-devel is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:org.mitre.oval:tst:39676"/>
            <criterion comment="gcc-objc++ is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:org.mitre.oval:tst:39863"/>
            <criterion comment="gcc-gnat is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:org.mitre.oval:tst:39537"/>
            <criterion comment="cpp is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:org.mitre.oval:tst:39594"/>
            <criterion comment="libgcj-devel is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:org.mitre.oval:tst:39638"/>
            <criterion comment="gcc is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:org.mitre.oval:tst:39483"/>
            <criterion comment="libgcc is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:org.mitre.oval:tst:38946"/>
            <criterion comment="libtool is earlier than 0:1.5.22-7.el5_4" test_ref="oval:org.mitre.oval:tst:39774"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11686" version="5" class="vulnerability">
      <metadata>
        <title>The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files, aka Bug Id 6824265.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3884" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3884"/>
        <description>The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files, aka Bug Id 6824265.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:10.324-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:18.936-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:07.210-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11686 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:06.310-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:19.468-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:38878"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39616"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39115"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39531"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39655"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11682" version="5" class="vulnerability">
      <metadata>
        <title>wget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a redirection URL containing a ".." that resolves to the IP address of the malicious server, which bypasses wget's filtering for ".." sequences.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1487"/>
        <description>wget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a redirection URL containing a ".." that resolves to the IP address of the malicious server, which bypasses wget's filtering for ".." sequences.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:31.480-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:18.468-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:06.651-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11682 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:02.761-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:19.110-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="wget is earlier than 0:1.10.1-1.30E.1" test_ref="oval:org.mitre.oval:tst:31680"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="wget is earlier than 0:1.10.1-2.4E.1" test_ref="oval:org.mitre.oval:tst:31717"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1168" version="2" class="vulnerability" deprecated="true">
      <metadata>
        <title>Suppressed: Duplicate of OVAL3743</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Word for Windows 6.0 Converter</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0571" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0571"/>
        <description>Microsoft Word for Windows 6.0 Converter does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Table Conversion Vulnerability," a different vulnerability than CVE-2004-0901.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-05T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2005-01-12T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-02T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-23T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-04-08T12:00:00.000-04:00" comment="modified wrt-35 - wrt-35 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2005-04-11T08:48:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-04-27T12:07:00.000-04:00">ACCEPTED</status_change>
            <modified date="2007-03-01T12:01:01" comment="Deprecated in favor of oval:org.mitre.oval:def:3743.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-03-01T12:01:01">DEPRECATED</status_change>
            <modified comment="References registry value for Common Files directory due to multilingual support" date="2008-04-14T11:07:00.928-04:00">
              <contributor organization="GFI Software">Clifford Farrugia</contributor>
            </modified>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="the patch kb885836 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:1104"/>
          <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
          <criterion comment="the version of mswrd632.wpc is less than 2004.10.25.0" negate="false" test_ref="oval:org.mitre.oval:tst:1103"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="Word for Windows 6.0 Converter is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:2421"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11679" version="5" class="vulnerability">
      <metadata>
        <title>The dev_queue_xmit function in Linux kernel 2.6 can fail before calling the local_bh_disable function, which could lead to data corruption and "node lockups."  NOTE: it is not clear whether this issue is exploitable.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6535" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6535"/>
        <description>The dev_queue_xmit function in Linux kernel 2.6 can fail before calling the local_bh_disable function, which could lead to data corruption and "node lockups."  NOTE: it is not clear whether this issue is exploitable.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:39.847-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:18.192-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:06.363-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11679 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:30.458-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:18.670-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33204"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33278"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33306"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32378"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33145"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33107"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32620"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32645"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33057"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11678" version="5" class="vulnerability">
      <metadata>
        <title>The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASL_PATH environment variable to find all available SASL plug-ins, which allows local users to execute arbitrary code by modifying the SASL_PATH to point to malicious programs.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0884" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0884"/>
        <description>The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASL_PATH environment variable to find all available SASL plug-ins, which allows local users to execute arbitrary code by modifying the SASL_PATH to point to malicious programs.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:23.673-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:17.910-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:06.112-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11678 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:56.646-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:18.355-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="cyrus-sasl-plain is earlier than 0:2.1.15-10" test_ref="oval:org.mitre.oval:tst:30998"/>
          <criterion comment="cyrus-sasl-md5 is earlier than 0:2.1.15-10" test_ref="oval:org.mitre.oval:tst:30879"/>
          <criterion comment="cyrus-sasl-gssapi is earlier than 0:2.1.15-10" test_ref="oval:org.mitre.oval:tst:30974"/>
          <criterion comment="cyrus-sasl-devel is earlier than 0:2.1.15-10" test_ref="oval:org.mitre.oval:tst:30854"/>
          <criterion comment="cyrus-sasl is earlier than 0:2.1.15-10" test_ref="oval:org.mitre.oval:tst:30727"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11674" version="5" class="vulnerability">
      <metadata>
        <title>The VFAT compat ioctls in the Linux kernel before 2.6.21.2, when run on a 64-bit system, allow local users to corrupt a kernel_dirent struct and cause a denial of service (system crash) via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2878" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2878"/>
        <description>The VFAT compat ioctls in the Linux kernel before 2.6.21.2, when run on a 64-bit system, allow local users to corrupt a kernel_dirent struct and cause a denial of service (system crash) via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:45.971-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:17.449-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:05.506-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11674 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:47.288-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:17.703-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34864"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35017"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35145"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34442"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35258"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35254"/>
            <criterion comment="kernel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35373"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34480"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34911"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34923"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35327"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34804"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34557"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34837"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34795"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34562"/>
            <criterion comment="kernel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34357"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34379"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34873"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34870"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34374"/>
            <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34337"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11672" version="5" class="vulnerability">
      <metadata>
        <title>Wireshark 0.99.5 allows remote attackers to cause a denial of service (memory consumption) via a malformed DCP ETSI packet that triggers an infinite loop.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3391" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3391"/>
        <description>Wireshark 0.99.5 allows remote attackers to cause a denial of service (memory consumption) via a malformed DCP ETSI packet that triggers an infinite loop.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:01.791-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:17.136-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:05.181-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11672 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:02:06.650-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:17.190-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-EL3.1" test_ref="oval:org.mitre.oval:tst:36111"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-EL3.1" test_ref="oval:org.mitre.oval:tst:36043"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-3.el3" test_ref="oval:org.mitre.oval:tst:35411"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-3.el3" test_ref="oval:org.mitre.oval:tst:36140"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.6-EL4.1" test_ref="oval:org.mitre.oval:tst:34755"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.6-EL4.1" test_ref="oval:org.mitre.oval:tst:34881"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.6-1.el5" test_ref="oval:org.mitre.oval:tst:34336"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.6-1.el5" test_ref="oval:org.mitre.oval:tst:34784"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11670" version="5" class="vulnerability">
      <metadata>
        <title>** DISPUTED **  PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the plugins array parameter.  NOTE: this issue has been disputed by third parties, who state that Squirrelmail provides prominent warnings to the administrator when register_globals is enabled.  Since the varieties of administrator negligence are uncountable, perhaps this type of issue should not be included in CVE.  However, the original developer has posted a security advisory, so there might be relevant real-world environments under which this vulnerability is applicable.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2842" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2842"/>
        <description>** DISPUTED **  PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the plugins array parameter.  NOTE: this issue has been disputed by third parties, who state that Squirrelmail provides prominent warnings to the administrator when register_globals is enabled.  Since the varieties of administrator negligence are uncountable, perhaps this type of issue should not be included in CVE.  However, the original developer has posted a security advisory, so there might be relevant real-world environments under which this vulnerability is applicable.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:49.710-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:16.871-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:04.908-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11670 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:33.710-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:16.795-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.6-7.el3" test_ref="oval:org.mitre.oval:tst:32403"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.6-7.el4" test_ref="oval:org.mitre.oval:tst:32654"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11668" version="5" class="vulnerability">
      <metadata>
        <title>The XPInstall installer in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 sets insecure permissions for certain installed files within xpi packages, which could allow local users to overwrite arbitrary files or execute arbitrary code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0906" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0906"/>
        <description>The XPInstall installer in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 sets insecure permissions for certain installed files within xpi packages, which could allow local users to overwrite arbitrary files or execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:14.694-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:16.563-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:04.602-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11668 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:28.620-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:16.411-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mozilla-js-debugger is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:30819"/>
          <criterion comment="mozilla is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31515"/>
          <criterion comment="mozilla-chat is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31278"/>
          <criterion comment="mozilla-mail is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31465"/>
          <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31606"/>
          <criterion comment="mozilla-devel is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31480"/>
          <criterion comment="mozilla-nss is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31417"/>
          <criterion comment="mozilla-nss-devel is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31313"/>
          <criterion comment="mozilla-nspr is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31469"/>
          <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31598"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11667" version="5" class="vulnerability">
      <metadata>
        <title>The XWD Decoder in ImageMagick before 6.2.2.3, and GraphicsMagick before 1.1.6-r1, allows remote attackers to cause a denial of service (infinite loop) via an image with a zero color mask.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1739" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1739"/>
        <description>The XWD Decoder in ImageMagick before 6.2.2.3, and GraphicsMagick before 1.1.6-r1, allows remote attackers to cause a denial of service (infinite loop) via an image with a zero color mask.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:43.365-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:16.242-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:04.267-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11667 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:08.263-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:15.922-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:5.5.6-15" test_ref="oval:org.mitre.oval:tst:31831"/>
            <criterion comment="ImageMagick is earlier than 0:5.5.6-15" test_ref="oval:org.mitre.oval:tst:31900"/>
            <criterion comment="ImageMagick-perl is earlier than 0:5.5.6-15" test_ref="oval:org.mitre.oval:tst:31493"/>
            <criterion comment="ImageMagick-devel is earlier than 0:5.5.6-15" test_ref="oval:org.mitre.oval:tst:31810"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:5.5.6-15" test_ref="oval:org.mitre.oval:tst:31915"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-12" test_ref="oval:org.mitre.oval:tst:31946"/>
            <criterion comment="ImageMagick is earlier than 0:6.0.7.1-12" test_ref="oval:org.mitre.oval:tst:31973"/>
            <criterion comment="ImageMagick-perl is earlier than 0:6.0.7.1-12" test_ref="oval:org.mitre.oval:tst:31596"/>
            <criterion comment="ImageMagick-devel is earlier than 0:6.0.7.1-12" test_ref="oval:org.mitre.oval:tst:31676"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:6.0.7.1-12" test_ref="oval:org.mitre.oval:tst:31629"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11665" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 do not properly implement JavaScript onUnload handlers, which allows remote attackers to run certain JavaScript code and access the location DOM hierarchy in the context of the next web site that is visited by a client.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1095" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1095"/>
        <description>Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 do not properly implement JavaScript onUnload handlers, which allows remote attackers to run certain JavaScript code and access the location DOM hierarchy in the context of the next web site that is visited by a client.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:25.946-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:15.675-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:03.676-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11665 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:16.013-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:14.709-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35512"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35540"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35394"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35541"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35241"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35553"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35552"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:34924"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35155"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35441"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35489"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35324"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-0.5.el4" test_ref="oval:org.mitre.oval:tst:35240"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35182"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35311"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35454"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.7.el4" test_ref="oval:org.mitre.oval:tst:35398"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35351"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35482"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:34790"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35291"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:34577"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-6.el5" test_ref="oval:org.mitre.oval:tst:35262"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-6.el5" test_ref="oval:org.mitre.oval:tst:35202"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-5.el5" test_ref="oval:org.mitre.oval:tst:35177"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11659" version="5" class="vulnerability">
      <metadata>
        <title>fixproc in Net-snmp 5.x before 5.2.1-r1 creates temporary files insecurely, which allows local users to modify the contents of those files to execute arbitrary commands, or overwrite arbitrary files via a symlink attack.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1740" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1740"/>
        <description>fixproc in Net-snmp 5.x before 5.2.1-r1 creates temporary files insecurely, which allows local users to modify the contents of those files to execute arbitrary commands, or overwrite arbitrary files via a symlink attack.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:31.920-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:15.344-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:02.719-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11659 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:29.977-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:14.250-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="net-snmp-utils is earlier than 0:5.0.9-2.30E.19" test_ref="oval:org.mitre.oval:tst:31395"/>
            <criterion comment="net-snmp is earlier than 0:5.0.9-2.30E.19" test_ref="oval:org.mitre.oval:tst:30763"/>
            <criterion comment="net-snmp-libs is earlier than 0:5.0.9-2.30E.19" test_ref="oval:org.mitre.oval:tst:31684"/>
            <criterion comment="net-snmp-perl is earlier than 0:5.0.9-2.30E.19" test_ref="oval:org.mitre.oval:tst:31547"/>
            <criterion comment="net-snmp-devel is earlier than 0:5.0.9-2.30E.19" test_ref="oval:org.mitre.oval:tst:31390"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="net-snmp-utils is earlier than 0:5.1.2-11.EL4.6" test_ref="oval:org.mitre.oval:tst:31408"/>
            <criterion comment="net-snmp is earlier than 0:5.1.2-11.EL4.6" test_ref="oval:org.mitre.oval:tst:30993"/>
            <criterion comment="net-snmp-libs is earlier than 0:5.1.2-11.EL4.6" test_ref="oval:org.mitre.oval:tst:31414"/>
            <criterion comment="net-snmp-perl is earlier than 0:5.1.2-11.EL4.6" test_ref="oval:org.mitre.oval:tst:31691"/>
            <criterion comment="net-snmp-devel is earlier than 0:5.1.2-11.EL4.6" test_ref="oval:org.mitre.oval:tst:31766"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11658" version="5" class="vulnerability">
      <metadata>
        <title>Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4829" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4829"/>
        <description>Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:20.962-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:15.109-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:02.484-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11658 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:10.419-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:13.812-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="perl-Archive-Tar is earlier than 0:1.39.1-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40767"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="perl-Archive-Tar is earlier than 1:1.39.1-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40875"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11656" version="3" class="vulnerability">
      <metadata>
        <title>OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents OpenSSL from correctly verifying X.509 and other certificates that use PKCS #1.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4339" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4339"/>
        <description>OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents OpenSSL from correctly verifying X.509 and other certificates that use PKCS #1.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:37.304-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:14.471-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:01.787-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <criteria operator="OR">
            <criterion comment="openssl-perl is earlier than 0:0.9.7a-33.18" test_ref="oval:org.mitre.oval:tst:32805"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.7a-33.18" test_ref="oval:org.mitre.oval:tst:33042"/>
            <criterion comment="openssl is earlier than 0:0.9.7a-33.18" test_ref="oval:org.mitre.oval:tst:32520"/>
            <criterion comment="openssl096b is earlier than 0:0.9.6b-16.43" test_ref="oval:org.mitre.oval:tst:32845"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <criteria operator="OR">
            <criterion comment="openssl-perl is earlier than 0:0.9.7a-43.11" test_ref="oval:org.mitre.oval:tst:32332"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.7a-43.11" test_ref="oval:org.mitre.oval:tst:32884"/>
            <criterion comment="openssl is earlier than 0:0.9.7a-43.11" test_ref="oval:org.mitre.oval:tst:32770"/>
            <criterion comment="openssl096b is earlier than 0:0.9.6b-22.43" test_ref="oval:org.mitre.oval:tst:32336"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criteria operator="OR">
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33298"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33521"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33376"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33428"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33515"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33417"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:32803"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33585"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33064"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33481"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33563"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33479"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33472"/>
            <criterion comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:32903"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33667"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33199"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33754"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33366"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33073"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33547"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11654" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the decrypt_out function in Pidgin (formerly Gaim) before 2.5.6 allows remote attackers to cause a denial of service (application crash) via a QQ packet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1374" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1374"/>
        <description>Buffer overflow in the decrypt_out function in Pidgin (formerly Gaim) before 2.5.6 allows remote attackers to cause a denial of service (application crash) via a QQ packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:04.688-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:13.998-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:01.350-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11654 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:34.243-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:13.225-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38580"/>
            <criterion comment="libpurple is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38729"/>
            <criterion comment="libpurple-perl is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38659"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38675"/>
            <criterion comment="pidgin-devel is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38361"/>
            <criterion comment="libpurple-devel is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38431"/>
            <criterion comment="finch is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38593"/>
            <criterion comment="pidgin-perl is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38640"/>
            <criterion comment="pidgin is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38775"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38564"/>
            <criterion comment="libpurple is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38579"/>
            <criterion comment="libpurple-perl is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38686"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38687"/>
            <criterion comment="pidgin-devel is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38223"/>
            <criterion comment="libpurple-devel is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38606"/>
            <criterion comment="finch is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38749"/>
            <criterion comment="pidgin-perl is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38576"/>
            <criterion comment="pidgin is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38730"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11653" version="5" class="vulnerability">
      <metadata>
        <title>The sock_getsockopt function in net/core/sock.c in the Linux kernel before 2.6.28.6 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel memory via an SO_BSDCOMPAT getsockopt request.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0676" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0676"/>
        <description>The sock_getsockopt function in net/core/sock.c in the Linux kernel before 2.6.28.6 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel memory via an SO_BSDCOMPAT getsockopt request.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:47.318-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:13.513-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:00.824-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11653 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:19.997-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:12.557-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38437"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38348"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:37805"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38116"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38721"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38384"/>
            <criterion comment="kernel is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38346"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38490"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38262"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38289"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38302"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38113"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38107"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38167"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38064"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38380"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:37672"/>
            <criterion comment="kernel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38093"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38127"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38109"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38430"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:37764"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38397"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11652" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows remote attackers to steal navigation history and cause a denial of service (crash) via images in a page that uses designMode frames, which triggers memory corruption related to resize handles.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0419" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0419"/>
        <description>Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows remote attackers to steal navigation history and cause a denial of service (crash) via images in a page that uses designMode frames, which triggers memory corruption related to resize handles.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:44.160-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:12.956-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:00.275-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11652 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:47.538-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:11.783-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36256"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36236"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:35996"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36279"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36046"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36052"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36034"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36284"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:35748"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:35994"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36164"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36050"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-8.el4" test_ref="oval:org.mitre.oval:tst:36202"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36193"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36093"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36053"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.10.el4" test_ref="oval:org.mitre.oval:tst:35919"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:35600"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36141"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:35397"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:35684"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36203"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-9.el5" test_ref="oval:org.mitre.oval:tst:36281"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-9.el5" test_ref="oval:org.mitre.oval:tst:35480"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-8.el5" test_ref="oval:org.mitre.oval:tst:35675"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11650" version="5" class="vulnerability">
      <metadata>
        <title>The _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2.6.1 trusts certificate chains in which the last certificate is an arbitrary trusted, self-signed certificate, which allows man-in-the-middle attackers to insert a spoofed certificate for any Distinguished Name (DN).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4989" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4989"/>
        <description>The _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2.6.1 trusts certificate chains in which the last certificate is an arbitrary trusted, self-signed certificate, which allows man-in-the-middle attackers to insert a spoofed certificate for any Distinguished Name (DN).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:08.171-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:12.593-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:59.750-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11650 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:30.912-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:11.466-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="gnutls is earlier than 0:1.4.1-3.el5_2.1" test_ref="oval:org.mitre.oval:tst:37768"/>
          <criterion comment="gnutls-devel is earlier than 0:1.4.1-3.el5_2.1" test_ref="oval:org.mitre.oval:tst:37721"/>
          <criterion comment="gnutls-utils is earlier than 0:1.4.1-3.el5_2.1" test_ref="oval:org.mitre.oval:tst:37986"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11648" version="5" class="vulnerability">
      <metadata>
        <title>Ethereal 0.9.15 and earlier, and Tethereal, allows remote attackers to cause a denial of service (crash) via certain malformed (1) ISAKMP or (2) MEGACO packets.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0926"/>
        <description>Ethereal 0.9.15 and earlier, and Tethereal, allows remote attackers to cause a denial of service (crash) via certain malformed (1) ISAKMP or (2) MEGACO packets.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:27.243-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:12.392-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:59.545-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11648 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:15.276-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:11.185-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="ethereal-gnome is earlier than 0:0.9.16-0.30E.1" test_ref="oval:org.mitre.oval:tst:30378"/>
          <criterion comment="ethereal is earlier than 0:0.9.16-0.30E.1" test_ref="oval:org.mitre.oval:tst:29663"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11647" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when running on x86 with the hugemem kernel, allows local users to cause a denial of service (crash).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0092"/>
        <description>Unknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when running on x86 with the hugemem kernel, allows local users to cause a denial of service (crash).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:26.182-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:12.134-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:59.276-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11647 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:48.635-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:10.762-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30633"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:31009"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30369"/>
          <criterion comment="kernel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:31205"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30421"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30594"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30616"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11646" version="5" class="vulnerability">
      <metadata>
        <title>The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via a malformed NTLM type 3 message that triggers a NULL dereference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0097" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0097"/>
        <description>The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via a malformed NTLM type 3 message that triggers a NULL dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:26.715-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:11.858-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:58.987-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11646 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:42.933-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:10.409-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE3-6.3E.7" test_ref="oval:org.mitre.oval:tst:30954"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE6-3.4E.3" test_ref="oval:org.mitre.oval:tst:31281"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11645" version="5" class="vulnerability">
      <metadata>
        <title>pstopnm in netpbm does not properly use the "-dSAFER" option when calling Ghostscript to convert a PostScript file into a (1) PBM, (2) PGM, or (3) PNM file, which allows external user-assisted attackers to execute arbitrary commands.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2471" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2471"/>
        <description>pstopnm in netpbm does not properly use the "-dSAFER" option when calling Ghostscript to convert a PostScript file into a (1) PBM, (2) PGM, or (3) PNM file, which allows external user-assisted attackers to execute arbitrary commands.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:49.333-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:11.537-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:58.700-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11645 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:59.125-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:09.921-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="netpbm is earlier than 0:9.24-11.30.2" test_ref="oval:org.mitre.oval:tst:32033"/>
            <criterion comment="netpbm-progs is earlier than 0:9.24-11.30.2" test_ref="oval:org.mitre.oval:tst:31648"/>
            <criterion comment="netpbm-devel is earlier than 0:9.24-11.30.2" test_ref="oval:org.mitre.oval:tst:32153"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="netpbm is earlier than 0:10.25-2.EL4.1" test_ref="oval:org.mitre.oval:tst:32140"/>
            <criterion comment="netpbm-progs is earlier than 0:10.25-2.EL4.1" test_ref="oval:org.mitre.oval:tst:32026"/>
            <criterion comment="netpbm-devel is earlier than 0:10.25-2.EL4.1" test_ref="oval:org.mitre.oval:tst:32045"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11643" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the AFS dissector in Wireshark 0.9.2 through 1.2.0 allows remote attackers to cause a denial of service (crash) via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2562" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2562"/>
        <description>Unspecified vulnerability in the AFS dissector in Wireshark 0.9.2 through 1.2.0 allows remote attackers to cause a denial of service (crash) via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:03.298-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:11.240-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:58.394-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11643 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:31.273-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:09.444-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.11-EL3.6" test_ref="oval:org.mitre.oval:tst:39600"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.11-EL3.6" test_ref="oval:org.mitre.oval:tst:40430"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.11-1.el4_8.5" test_ref="oval:org.mitre.oval:tst:40437"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.11-1.el4_8.5" test_ref="oval:org.mitre.oval:tst:39877"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.11-1.el5_5.5" test_ref="oval:org.mitre.oval:tst:40351"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.11-1.el5_5.5" test_ref="oval:org.mitre.oval:tst:40208"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11642" version="5" class="vulnerability">
      <metadata>
        <title>Multiple format string vulnerabilities in the gm_main_window_flash_message function in Ekiga before 2.0.5 allow attackers to cause a denial of service and possibly execute arbitrary code via a crafted Q.931 SETUP packet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1006" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1006"/>
        <description>Multiple format string vulnerabilities in the gm_main_window_flash_message function in Ekiga before 2.0.5 allow attackers to cause a denial of service and possibly execute arbitrary code via a crafted Q.931 SETUP packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:20.158-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:10.975-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:58.197-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11642 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:47.311-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:09.141-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="ekiga is earlier than 0:2.0.2-7.0.2" test_ref="oval:org.mitre.oval:tst:33701"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11635" version="5" class="vulnerability">
      <metadata>
        <title>The hfsplus_block_allocate function in fs/hfsplus/bitmap.c in the Linux kernel before 2.6.28-rc1 does not check a certain return value from the read_mapping_page function before calling kmap, which allows attackers to cause a denial of service (system crash) via a crafted hfsplus filesystem image.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4934" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4934"/>
        <description>The hfsplus_block_allocate function in fs/hfsplus/bitmap.c in the Linux kernel before 2.6.28-rc1 does not check a certain return value from the read_mapping_page function before calling kmap, which allows attackers to cause a denial of service (system crash) via a crafted hfsplus filesystem image.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:20.723-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:10.503-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:57.677-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11635 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:49.873-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:08.457-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37830"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37968"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37984"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37633"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37352"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:38043"/>
            <criterion comment="kernel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37989"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37908"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37748"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37825"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:38002"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:37732"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38060"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38354"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38313"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38198"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:37887"/>
            <criterion comment="kernel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38174"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38191"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38124"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38417"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:37779"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38257"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11633" version="5" class="vulnerability">
      <metadata>
        <title>The SNMP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1071" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1071"/>
        <description>The SNMP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:25.709-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:10.208-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:57.304-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11633 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:39.873-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:07.934-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-EL3.3" test_ref="oval:org.mitre.oval:tst:37624"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-EL3.3" test_ref="oval:org.mitre.oval:tst:37207"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-3.el4_7" test_ref="oval:org.mitre.oval:tst:37249"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-3.el4_7" test_ref="oval:org.mitre.oval:tst:37725"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37542"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37460"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11632" version="5" class="vulnerability">
      <metadata>
        <title>The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in (1) hamradio/6pack.c, (2) hamradio/mkiss.c, (3) irda/irtty-sir.c, (4) ppp_async.c, (5) ppp_synctty.c, (6) slip.c, (7) wan/x25_asy.c, and (8) wireless/strip.c in drivers/net/.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2812" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2812"/>
        <description>The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in (1) hamradio/6pack.c, (2) hamradio/mkiss.c, (3) irda/irtty-sir.c, (4) ppp_async.c, (5) ppp_synctty.c, (6) slip.c, (7) wan/x25_asy.c, and (8) wireless/strip.c in drivers/net/.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:42.138-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:09.531-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:56.579-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11632 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:53:02.557-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:06.973-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37931"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37846"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37817"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37663"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37799"/>
            <criterion comment="kernel is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37028"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37885"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37981"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37117"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-78.EL" test_ref="oval:org.mitre.oval:tst:37213"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-78.EL" test_ref="oval:org.mitre.oval:tst:37299"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-78.EL" test_ref="oval:org.mitre.oval:tst:36859"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-78.EL" test_ref="oval:org.mitre.oval:tst:37581"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-78.EL" test_ref="oval:org.mitre.oval:tst:37124"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-78.EL" test_ref="oval:org.mitre.oval:tst:37535"/>
            <criterion comment="kernel is earlier than 0:2.6.9-78.EL" test_ref="oval:org.mitre.oval:tst:37548"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-78.EL" test_ref="oval:org.mitre.oval:tst:37152"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-78.EL" test_ref="oval:org.mitre.oval:tst:37393"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-78.EL" test_ref="oval:org.mitre.oval:tst:37071"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-78.EL" test_ref="oval:org.mitre.oval:tst:37024"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:36537"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:36954"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:37079"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:36957"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:37527"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:37262"/>
            <criterion comment="kernel is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:37410"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:37323"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:37508"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:37153"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:37180"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:37188"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1163" version="1" class="vulnerability" deprecated="true">
      <metadata>
        <title>Deprecated in favor of oval:org.mitre.oval:def:219.</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
          <product>Operating System</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0516" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0516"/>
        <description>Unspecified vulnerability in the kernel processing in Solaris 10 64 bit platform, when running in 64-bit mode, allows local users to cause a denial of service (system panic) via unknown attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:52:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:13.671-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:03.356-04:00">ACCEPTED</status_change>
            <modified date="2007-03-01T12:01:01" comment="Deprecated in favor of oval:org.mitre.oval:def:219.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-03-01T12:01:01">DEPRECATED</status_change>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Solaris 10 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3680"/>
        <criterion comment="x86" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
        <criterion comment="Patch 118844-14 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3960"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11629" version="5" class="vulnerability">
      <metadata>
        <title>The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of the new page and results in a same origin violation.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2263" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2263"/>
        <description>The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of the new page and results in a same origin violation.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:46.835-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:09.005-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:56.085-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11629 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:52.669-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:03.274-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32142"/>
            <criterion comment="mozilla is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32131"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32154"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32001"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32171"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32162"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31782"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32041"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32004"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31353"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32120"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.6" test_ref="oval:org.mitre.oval:tst:31633"/>
            <criterion comment="mozilla is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31837"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32100"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31821"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31904"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.6" test_ref="oval:org.mitre.oval:tst:31814"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31951"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31554"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32149"/>
            <criterion comment="firefox is earlier than 0:1.0.6-1.4.1" test_ref="oval:org.mitre.oval:tst:32167"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31998"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32061"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11628" version="5" class="vulnerability">
      <metadata>
        <title>The Linux kernel before 2.6.11 on the Itanium IA64 platform has certain "ptrace corner cases" that allow local users to cause a denial of service (crash) via crafted syscalls, possibly related to MCA/INIT, a different vulnerability than CVE-2005-1761.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0136" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0136"/>
        <description>The Linux kernel before 2.6.11 on the Itanium IA64 platform has certain "ptrace corner cases" that allow local users to cause a denial of service (crash) via crafted syscalls, possibly related to MCA/INIT, a different vulnerability than CVE-2005-1761.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:27.790-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:08.600-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:55.649-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11628 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:34.359-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:02.678-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31411"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31953"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31879"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31990"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31485"/>
            <criterion comment="kernel is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32093"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31968"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32148"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31741"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31783"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31876"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31592"/>
            <criterion comment="kernel is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31714"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31522"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31902"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31817"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11626" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execute arbitrary code via a long URL.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0110" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0110"/>
        <description>Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execute arbitrary code via a long URL.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:54.304-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:08.368-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:55.403-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11626 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:36.294-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:02.176-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="libxml2-devel is earlier than 0:2.5.10-6" test_ref="oval:org.mitre.oval:tst:30643"/>
          <criterion comment="libxml2-python is earlier than 0:2.5.10-6" test_ref="oval:org.mitre.oval:tst:30458"/>
          <criterion comment="libxml-devel is earlier than 1:1.8.17-9.2" test_ref="oval:org.mitre.oval:tst:31134"/>
          <criterion comment="libxml is earlier than 1:1.8.17-9.2" test_ref="oval:org.mitre.oval:tst:30957"/>
          <criterion comment="libxml2 is earlier than 0:2.5.10-6" test_ref="oval:org.mitre.oval:tst:30657"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11625" version="3" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealPlayer Enterprise allows remote attackers to execute arbitrary code via a crafted RM file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5081" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5081"/>
        <description>Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealPlayer Enterprise allows remote attackers to execute arbitrary code via a crafted RM file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:03.009-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:08.121-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:54.833-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criterion comment="realplayer is earlier than 0:10.0.9-0.rhel3.4" test_ref="oval:org.mitre.oval:tst:34710"/>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criterion comment="RealPlayer is earlier than 0:10.0.9-2" test_ref="oval:org.mitre.oval:tst:34808"/>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criterion comment="RealPlayer is earlier than 0:10.0.9-3.el5" test_ref="oval:org.mitre.oval:tst:35065"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11624" version="5" class="vulnerability">
      <metadata>
        <title>Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail before 1.7 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) certain encrypted strings in e-mail headers, related to contrib/decrypt_headers.php; (2) PHP_SELF; and (3) the query string (aka QUERY_STRING).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1578" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1578"/>
        <description>Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail before 1.7 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) certain encrypted strings in e-mail headers, related to contrib/decrypt_headers.php; (2) PHP_SELF; and (3) the query string (aka QUERY_STRING).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:01.407-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:07.804-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:54.563-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11624 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:35.123-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:01.672-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-13.el3" test_ref="oval:org.mitre.oval:tst:38027"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-5.el4_8.5" test_ref="oval:org.mitre.oval:tst:38669"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:37946"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11621" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0095" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0095"/>
        <description>Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:41.371-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:07.567-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:54.309-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11621 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:33.635-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:01.321-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39831"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39445"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40225"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40023"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40307"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11618" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 2.0.0.16, and 3.x before 3.0.1, interprets '' (pipe) characters in a command-line URI as requests to open multiple tabs, which allows remote attackers to access chrome:i URIs, or read arbitrary local files via manipulations involving a series of URIs that is not entirely handled by a vector application, as exploited in conjunction with CVE-2008-2540.  NOTE: this issue exists because of an insufficient fix for CVE-2005-2267.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2933" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2933"/>
        <description>Mozilla Firefox before 2.0.0.16, and 3.x before 3.0.1, interprets '|' (pipe) characters in a command-line URI as requests to open multiple tabs, which allows remote attackers to access chrome:i URIs, or read arbitrary local files via manipulations involving a series of URIs that is not entirely handled by a vector application, as exploited in conjunction with CVE-2008-2540.  NOTE: this issue exists because of an insufficient fix for CVE-2005-2267.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:04.440-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:07.250-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:53.899-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11618 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:30.498-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:00.828-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:1.5.0.12-0.21.el4" test_ref="oval:org.mitre.oval:tst:36910"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-18.el5" test_ref="oval:org.mitre.oval:tst:37176"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.1-1.el5" test_ref="oval:org.mitre.oval:tst:37474"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.1-1.el5" test_ref="oval:org.mitre.oval:tst:37409"/>
            <criterion comment="devhelp is earlier than 0:0.12-18.el5" test_ref="oval:org.mitre.oval:tst:37522"/>
            <criterion comment="yelp is earlier than 0:2.16.0-20.el5" test_ref="oval:org.mitre.oval:tst:37008"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.1-1.el5" test_ref="oval:org.mitre.oval:tst:37414"/>
            <criterion comment="firefox is earlier than 0:3.0.1-1.el5" test_ref="oval:org.mitre.oval:tst:37297"/>
            <criterion comment="nspluginwrapper is earlier than 0:0.9.91.5-22.el5" test_ref="oval:org.mitre.oval:tst:37422"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11616" version="5" class="vulnerability">
      <metadata>
        <title>The nl_fib_lookup function in net/ipv4/fib_frontend.c in Linux Kernel before 2.6.20.8 allows attackers to cause a denial of service (kernel panic) via NETLINK_FIB_LOOKUP replies, which trigger infinite recursion and a stack overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1861" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1861"/>
        <description>The nl_fib_lookup function in net/ipv4/fib_frontend.c in Linux Kernel before 2.6.20.8 allows attackers to cause a denial of service (kernel panic) via NETLINK_FIB_LOOKUP replies, which trigger infinite recursion and a stack overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:21.577-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:06.493-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:53.583-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11616 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:32.404-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:15:00.415-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34146"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34219"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34205"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:33862"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34224"/>
          <criterion comment="kernel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:33837"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34231"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34073"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:33861"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:33594"/>
          <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34059"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11615" version="5" class="vulnerability">
      <metadata>
        <title>Perl-Compatible Regular Expression (PCRE) library before 6.2 does not properly count the number of named capturing subpatterns, which allows context-dependent attackers to cause a denial of service (crash) via a regular expression with a large number of named subpatterns, which triggers a buffer overflow.  NOTE: this issue was originally subsumed by CVE-2006-7224, but that CVE has been REJECTED and split.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-4872" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4872"/>
        <description>Perl-Compatible Regular Expression (PCRE) library before 6.2 does not properly count the number of named capturing subpatterns, which allows context-dependent attackers to cause a denial of service (crash) via a regular expression with a large number of named subpatterns, which triggers a buffer overflow.  NOTE: this issue was originally subsumed by CVE-2006-7224, but that CVE has been REJECTED and split.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:18.843-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:06.253-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:53.331-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11615 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:47.576-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:59.971-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="pcre-devel is earlier than 0:4.5-4.el4_5.4" test_ref="oval:org.mitre.oval:tst:35582"/>
            <criterion comment="pcre is earlier than 0:4.5-4.el4_5.4" test_ref="oval:org.mitre.oval:tst:35771"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="pcre-devel is earlier than 0:6.6-2.el5_1.1" test_ref="oval:org.mitre.oval:tst:35756"/>
            <criterion comment="pcre is earlier than 0:6.6-2.el5_1.1" test_ref="oval:org.mitre.oval:tst:35778"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11613" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the stapusr group to insert arbitrary SystemTap kernel modules and gain privileges via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0784" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0784"/>
        <description>Race condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the stapusr group to insert arbitrary SystemTap kernel modules and gain privileges via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:24.560-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:05.871-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:52.985-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11613 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:03.159-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:59.522-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="systemtap-runtime is earlier than 0:0.6.2-2.el4_7" test_ref="oval:org.mitre.oval:tst:37988"/>
            <criterion comment="systemtap-testsuite is earlier than 0:0.6.2-2.el4_7" test_ref="oval:org.mitre.oval:tst:38474"/>
            <criterion comment="systemtap is earlier than 0:0.6.2-2.el4_7" test_ref="oval:org.mitre.oval:tst:38353"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="systemtap-runtime is earlier than 0:0.7.2-3.el5_3" test_ref="oval:org.mitre.oval:tst:38454"/>
            <criterion comment="systemtap-testsuite is earlier than 0:0.7.2-3.el5_3" test_ref="oval:org.mitre.oval:tst:38427"/>
            <criterion comment="systemtap-client is earlier than 0:0.7.2-3.el5_3" test_ref="oval:org.mitre.oval:tst:38210"/>
            <criterion comment="systemtap is earlier than 0:0.7.2-3.el5_3" test_ref="oval:org.mitre.oval:tst:38233"/>
            <criterion comment="systemtap-server is earlier than 0:0.7.2-3.el5_3" test_ref="oval:org.mitre.oval:tst:38404"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11611" version="5" class="vulnerability">
      <metadata>
        <title>The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows local users to read the contents of some kernel memory locations by calling getsockname on (1) an AF_APPLETALK socket, related to the atalk_getname function in net/appletalk/ddp.c; (2) an AF_IRDA socket, related to the irda_getname function in net/irda/af_irda.c; (3) an AF_ECONET socket, related to the econet_getname function in net/econet/af_econet.c; (4) an AF_NETROM socket, related to the nr_getname function in net/netrom/af_netrom.c; (5) an AF_ROSE socket, related to the rose_getname function in net/rose/af_rose.c; or (6) a raw CAN socket, related to the raw_getname function in net/can/raw.c.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3002" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3002"/>
        <description>The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows local users to read the contents of some kernel memory locations by calling getsockname on (1) an AF_APPLETALK socket, related to the atalk_getname function in net/appletalk/ddp.c; (2) an AF_IRDA socket, related to the irda_getname function in net/irda/af_irda.c; (3) an AF_ECONET socket, related to the econet_getname function in net/econet/af_econet.c; (4) an AF_NETROM socket, related to the nr_getname function in net/netrom/af_netrom.c; (5) an AF_ROSE socket, related to the rose_getname function in net/rose/af_rose.c; or (6) a raw CAN socket, related to the raw_getname function in net/can/raw.c.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:01.605-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:05.593-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:52.299-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11611 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:34.239-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:59.155-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39591"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39396"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39586"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39171"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39299"/>
          <criterion comment="kernel is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39151"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39468"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39460"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:38810"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11609" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Unicode sequences with "zero-width non-joiner" characters.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2702" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2702"/>
        <description>Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Unicode sequences with "zero-width non-joiner" characters.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:32.686-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:05.101-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:51.748-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11609 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:12.549-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:58.462-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32169"/>
            <criterion comment="mozilla is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:31729"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32242"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32151"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32014"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32144"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32068"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32248"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32293"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32044"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32244"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.7" test_ref="oval:org.mitre.oval:tst:32012"/>
            <criterion comment="mozilla is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:31897"/>
            <criterion comment="thunderbird is earlier than 0:1.0.7-1.4.1" test_ref="oval:org.mitre.oval:tst:31477"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32300"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32226"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32289"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.7" test_ref="oval:org.mitre.oval:tst:32170"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32150"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32302"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32090"/>
            <criterion comment="firefox is earlier than 0:1.0.7-1.4.1" test_ref="oval:org.mitre.oval:tst:32147"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32209"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32088"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11607" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to create documents that lack script-handling objects, and execute arbitrary code with chrome privileges, via vectors related to (1) the document.loadBindingDocument function and (2) XSLT.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4060" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4060"/>
        <description>Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to create documents that lack script-handling objects, and execute arbitrary code with chrome privileges, via vectors related to (1) the document.loadBindingDocument function and (2) XSLT.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:02.444-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:04.453-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:51.122-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11607 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:42.526-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:57.610-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37411"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36691"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37031"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37528"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36726"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37435"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37680"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36725"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37449"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37356"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.10.el4" test_ref="oval:org.mitre.oval:tst:37564"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:36913"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-16.el4" test_ref="oval:org.mitre.oval:tst:37634"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37609"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.10.el4" test_ref="oval:org.mitre.oval:tst:37306"/>
            <criterion comment="firefox is earlier than 0:3.0.2-3.el4" test_ref="oval:org.mitre.oval:tst:37195"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37499"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37444"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37543"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37552"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-19.el5" test_ref="oval:org.mitre.oval:tst:37248"/>
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37486"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37495"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37044"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.17-1.el5" test_ref="oval:org.mitre.oval:tst:37230"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37578"/>
            <criterion comment="yelp is earlier than 0:2.16.0-21.el5" test_ref="oval:org.mitre.oval:tst:37584"/>
            <criterion comment="devhelp is earlier than 0:0.12-19.el5" test_ref="oval:org.mitre.oval:tst:37353"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37406"/>
            <criterion comment="firefox is earlier than 0:3.0.2-3.el5" test_ref="oval:org.mitre.oval:tst:37225"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:36664"/>
            <criterion comment="nss-tools is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37664"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11605" version="5" class="vulnerability">
      <metadata>
        <title>Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0175" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0175"/>
        <description>Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:01.628-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:04.233-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:50.858-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11605 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:29:39.139-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:57.241-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE3-6.3E.7" test_ref="oval:org.mitre.oval:tst:30954"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE6-3.4E.3" test_ref="oval:org.mitre.oval:tst:31281"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11604" version="5" class="vulnerability">
      <metadata>
        <title>The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5 (aka krb5) through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for invalid GSS-API tokens, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an AP-REQ message in which the authenticator's checksum field is missing.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1321" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1321"/>
        <description>The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5 (aka krb5) through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for invalid GSS-API tokens, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an AP-REQ message in which the authenticator's checksum field is missing.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:13.733-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:03.789-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:50.450-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11604 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:04.121-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:56.151-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.2.7-72" test_ref="oval:org.mitre.oval:tst:40084"/>
            <criterion comment="krb5 is earlier than 0:1.2.7-72" test_ref="oval:org.mitre.oval:tst:40256"/>
            <criterion comment="krb5-libs is earlier than 0:1.2.7-72" test_ref="oval:org.mitre.oval:tst:40497"/>
            <criterion comment="krb5-server is earlier than 0:1.2.7-72" test_ref="oval:org.mitre.oval:tst:39569"/>
            <criterion comment="krb5-devel is earlier than 0:1.2.7-72" test_ref="oval:org.mitre.oval:tst:40456"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.3.4-62.el4_8.2" test_ref="oval:org.mitre.oval:tst:40540"/>
            <criterion comment="krb5 is earlier than 0:1.3.4-62.el4_8.2" test_ref="oval:org.mitre.oval:tst:39992"/>
            <criterion comment="krb5-libs is earlier than 0:1.3.4-62.el4_8.2" test_ref="oval:org.mitre.oval:tst:40545"/>
            <criterion comment="krb5-server is earlier than 0:1.3.4-62.el4_8.2" test_ref="oval:org.mitre.oval:tst:40034"/>
            <criterion comment="krb5-devel is earlier than 0:1.3.4-62.el4_8.2" test_ref="oval:org.mitre.oval:tst:40469"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.6.1-36.el5_5.4" test_ref="oval:org.mitre.oval:tst:40475"/>
            <criterion comment="krb5 is earlier than 0:1.6.1-36.el5_5.4" test_ref="oval:org.mitre.oval:tst:39803"/>
            <criterion comment="krb5-libs is earlier than 0:1.6.1-36.el5_5.4" test_ref="oval:org.mitre.oval:tst:40429"/>
            <criterion comment="krb5-server is earlier than 0:1.6.1-36.el5_5.4" test_ref="oval:org.mitre.oval:tst:40211"/>
            <criterion comment="krb5-devel is earlier than 0:1.6.1-36.el5_5.4" test_ref="oval:org.mitre.oval:tst:40461"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11602" version="5" class="vulnerability">
      <metadata>
        <title>Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does not properly restrict access to critical variables and methods at various safe levels, which allows context-dependent attackers to bypass intended access restrictions via (1) untrace_var, (2) $PROGRAM_NAME, and (3) syslog at safe level 4, and (4) insecure methods at safe levels 1 through 3.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3655" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3655"/>
        <description>Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does not properly restrict access to critical variables and methods at various safe levels, which allows context-dependent attackers to bypass intended access restrictions via (1) untrace_var, (2) $PROGRAM_NAME, and (3) syslog at safe level 4, and (4) insecure methods at safe levels 1 through 3.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:23.007-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:03.291-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:49.886-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11602 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:01.961-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:55.426-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.6.8-13.el3" test_ref="oval:org.mitre.oval:tst:37606"/>
            <criterion comment="ruby-docs is earlier than 0:1.6.8-13.el3" test_ref="oval:org.mitre.oval:tst:37736"/>
            <criterion comment="ruby-devel is earlier than 0:1.6.8-13.el3" test_ref="oval:org.mitre.oval:tst:37427"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.6.8-13.el3" test_ref="oval:org.mitre.oval:tst:37760"/>
            <criterion comment="ruby is earlier than 0:1.6.8-13.el3" test_ref="oval:org.mitre.oval:tst:37497"/>
            <criterion comment="irb is earlier than 0:1.6.8-13.el3" test_ref="oval:org.mitre.oval:tst:37751"/>
            <criterion comment="ruby-libs is earlier than 0:1.6.8-13.el3" test_ref="oval:org.mitre.oval:tst:36770"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37462"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37630"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:36810"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:36902"/>
            <criterion comment="ruby is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37678"/>
            <criterion comment="irb is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37674"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37720"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-ri is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37735"/>
            <criterion comment="ruby-mode is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37344"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37697"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37273"/>
            <criterion comment="ruby is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37563"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37438"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37757"/>
            <criterion comment="ruby-irb is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37463"/>
            <criterion comment="ruby-rdoc is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37172"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11601" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in the rb_str_buf_append function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2 allow context-dependent attackers to execute arbitrary code or cause a denial of service via unknown vectors that trigger memory corruption, a different issue than CVE-2008-2663, CVE-2008-2664, and CVE-2008-2725.  NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. This CVE description should be regarded as authoritative, although it is likely to change.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2662" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2662"/>
        <description>Multiple integer overflows in the rb_str_buf_append function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2 allow context-dependent attackers to execute arbitrary code or cause a denial of service via unknown vectors that trigger memory corruption, a different issue than CVE-2008-2663, CVE-2008-2664, and CVE-2008-2725.  NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. This CVE description should be regarded as authoritative, although it is likely to change.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:44.622-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:02.840-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:49.476-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11601 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:16:54.972-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:54.827-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:37171"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:37242"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:36569"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:37296"/>
            <criterion comment="ruby is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:36468"/>
            <criterion comment="irb is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:36808"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:37219"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-ri is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37199"/>
            <criterion comment="ruby-mode is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:36604"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:36516"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:36870"/>
            <criterion comment="ruby is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:36738"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37119"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37289"/>
            <criterion comment="ruby-irb is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37148"/>
            <criterion comment="ruby-rdoc is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37203"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11600" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified format string vulnerabilities in Dia have unspecified impact and attack vectors, a different set of issues than CVE-2006-2480.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2453" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2453"/>
        <description>Multiple unspecified format string vulnerabilities in Dia have unspecified impact and attack vectors, a different set of issues than CVE-2006-2480.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:31.240-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:02.521-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:49.281-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11600 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:35.627-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:54.529-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="dia is earlier than 1:0.94-5.7.1" test_ref="oval:org.mitre.oval:tst:32057"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1160" version="3" class="vulnerability">
      <metadata>
        <title>Safe.PM Unsafe Code Execution Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>Perl</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1323" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1323"/>
        <description>Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not reset between successive calls.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:52:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:13.239-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:02.270-04:00">ACCEPTED</status_change>
            <modified comment="Added title. Implemented by Jon Baker of The MITRE Corporation." date="2007-02-13T14:04:00.485-05:00">
              <contributor organization="Security-Database">Nabil Ouchn</contributor>
            </modified>
            <status_change date="2007-02-13T14:05:50.516-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:43.305-04:00">ACCEPTED</status_change>
            <modified comment="Updated criteria for Solaris 9 and updated comments." date="2008-06-16T16:47:00.258-04:00">
              <contributor organization="Secure Elements, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2008-06-16T16:51:33.274-04:00">INTERIM</status_change>
            <status_change date="2008-07-07T04:00:13.994-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software section">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert ID 200205 (formerly 101426) criteria.">
          <extend_definition comment="Solaris 8 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1539"/>
          <criterion negate="true" comment="Patch 122091-01 or later installed" test_ref="oval:org.mitre.oval:tst:7098"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert ID 200205 (formerly 101426) criteria.">
          <extend_definition comment="Solaris 8 (x86) is installed" definition_ref="oval:org.mitre.oval:def:2059"/>
          <criterion negate="true" comment="Patch 122092-01 or later installed" test_ref="oval:org.mitre.oval:tst:7522"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets  Sun Alert ID 200205 (formerly 101426) criteria.">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 119449-01 or later installed" test_ref="oval:org.mitre.oval:tst:3644"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets  Sun Alert ID 200205 (formerly 101426) criteria.">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 119450-01 or later installed" test_ref="oval:org.mitre.oval:tst:3771"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:2059" version="1" class="inventory">
      <metadata>
        <title>Solaris 8 (x86) is installed</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:sun:sunos:5.8::ix86"/>
        <description>The operating system installed on the system is Sun Solaris 8 for x86.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-22T08:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </submitted>
            <status_change date="2007-06-22T08:20:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-07-10T21:08:51.544-04:00">INTERIM</status_change>
            <status_change date="2007-08-01T22:26:15.624-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3437"/>
        <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3912"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1539" version="1" class="inventory">
      <metadata>
        <title>Solaris 8 (SPARC) is installed</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:sun:sunos:5.8::sparc"/>
        <description>The operating system installed on the system is Sun Solaris 8 for SPARC.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-22T08:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </submitted>
            <status_change date="2007-06-22T08:20:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-07-10T21:08:48.692-04:00">INTERIM</status_change>
            <status_change date="2007-08-01T22:26:14.211-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3437"/>
        <criterion comment="sparc architecture" test_ref="oval:org.mitre.oval:tst:3237"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11599" version="5" class="vulnerability">
      <metadata>
        <title>The swap_char2b function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values that specify an arbitrary number of bytes to be swapped on the heap, which triggers heap corruption.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4990" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4990"/>
        <description>The swap_char2b function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values that specify an arbitrary number of bytes to be swapped on the heap, which triggers heap corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:21.837-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:01.706-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:48.456-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11599 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:57.125-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:53.412-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35923"/>
            <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35665"/>
            <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:36014"/>
            <criterion comment="XFree86-libs is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35929"/>
            <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:36011"/>
            <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35836"/>
            <criterion comment="XFree86-twm is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35726"/>
            <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35715"/>
            <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35610"/>
            <criterion comment="XFree86-doc is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:36025"/>
            <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35789"/>
            <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35804"/>
            <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35865"/>
            <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35793"/>
            <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35903"/>
            <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35965"/>
            <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35922"/>
            <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35504"/>
            <criterion comment="XFree86-xdm is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35045"/>
            <criterion comment="XFree86-sdk is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35914"/>
            <criterion comment="XFree86 is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35831"/>
            <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35998"/>
            <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35975"/>
            <criterion comment="XFree86-xfs is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:36031"/>
            <criterion comment="XFree86-tools is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35971"/>
            <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35711"/>
            <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35933"/>
            <criterion comment="XFree86-xauth is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35826"/>
            <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35753"/>
            <criterion comment="XFree86-devel is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35678"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35795"/>
            <criterion comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35934"/>
            <criterion comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35467"/>
            <criterion comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35946"/>
            <criterion comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36116"/>
            <criterion comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35116"/>
            <criterion comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36004"/>
            <criterion comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35483"/>
            <criterion comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36103"/>
            <criterion comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36060"/>
            <criterion comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36074"/>
            <criterion comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35895"/>
            <criterion comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35905"/>
            <criterion comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36012"/>
            <criterion comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35984"/>
            <criterion comment="xorg-x11 is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35857"/>
            <criterion comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35681"/>
            <criterion comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35909"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11598" version="5" class="vulnerability">
      <metadata>
        <title>Integer underflow in the e1000_clean_rx_irq function in drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel before 2.6.30-rc8, the e1000e driver in the Linux kernel, and Intel Wired Ethernet (aka e1000) before 7.5.5 allows remote attackers to cause a denial of service (panic) via a crafted frame size.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1385" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1385"/>
        <description>Integer underflow in the e1000_clean_rx_irq function in drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel before 2.6.30-rc8, the e1000e driver in the Linux kernel, and Intel Wired Ethernet (aka e1000) before 7.5.5 allows remote attackers to cause a denial of service (panic) via a crafted frame size.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:34.836-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:00.930-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:47.773-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11598 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:36.962-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:52.557-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39591"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39396"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39586"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39171"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39299"/>
            <criterion comment="kernel is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39151"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39468"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39460"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:38810"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38892"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38222"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:37924"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38847"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38834"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38158"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38513"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38317"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38277"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38667"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38814"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38128"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38668"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38883"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38948"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38732"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38969"/>
            <criterion comment="kernel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38991"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:39056"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38817"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:39009"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38672"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38983"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11597" version="5" class="vulnerability">
      <metadata>
        <title>The configtest function in the Red Hat dhcpd init script for DHCP 3.0.1 in Red Hat Enterprise Linux (RHEL) 3 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file, related to the "dhcpd -t" command.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1893" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1893"/>
        <description>The configtest function in the Red Hat dhcpd init script for DHCP 3.0.1 in Red Hat Enterprise Linux (RHEL) 3 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file, related to the "dhcpd -t" command.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:17.209-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:00.702-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:47.545-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11597 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:05.264-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:52.240-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="dhclient is earlier than 7:3.0.1-10.2_EL3" test_ref="oval:org.mitre.oval:tst:38360"/>
          <criterion comment="dhcp is earlier than 7:3.0.1-10.2_EL3" test_ref="oval:org.mitre.oval:tst:38535"/>
          <criterion comment="dhcp-devel is earlier than 7:3.0.1-10.2_EL3" test_ref="oval:org.mitre.oval:tst:38243"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11595" version="5" class="vulnerability">
      <metadata>
        <title>usr/mgmt_ipc.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 checks the client's UID on the listening AF_LOCAL socket instead of the new connection, which allows remote attackers to access the management interface and cause a denial of service (iscsid exit or iSCSI connection loss).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3099" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3099"/>
        <description>usr/mgmt_ipc.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 checks the client's UID on the listening AF_LOCAL socket instead of the new connection, which allows remote attackers to access the management interface and cause a denial of service (iscsid exit or iSCSI connection loss).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:45.184-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:00.522-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:47.342-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11595 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:28.984-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:51.928-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="iscsi-initiator-utils is earlier than 0:6.2.0.742-0.6.el5" test_ref="oval:org.mitre.oval:tst:34477"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11594" version="5" class="vulnerability">
      <metadata>
        <title>The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service (infinite loop) via XML containing invalid UTF-8 sequences.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6284" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6284"/>
        <description>The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service (infinite loop) via XML containing invalid UTF-8 sequences.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:51.134-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:00.182-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:46.862-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11594 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:23.628-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:51.422-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libxml2-devel is earlier than 0:2.5.10-8" test_ref="oval:org.mitre.oval:tst:36021"/>
            <criterion comment="libxml2-python is earlier than 0:2.5.10-8" test_ref="oval:org.mitre.oval:tst:35780"/>
            <criterion comment="libxml2 is earlier than 0:2.5.10-8" test_ref="oval:org.mitre.oval:tst:36040"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libxml2-devel is earlier than 0:2.6.16-10.1" test_ref="oval:org.mitre.oval:tst:35997"/>
            <criterion comment="libxml2-python is earlier than 0:2.6.16-10.1" test_ref="oval:org.mitre.oval:tst:36010"/>
            <criterion comment="libxml2 is earlier than 0:2.6.16-10.1" test_ref="oval:org.mitre.oval:tst:36108"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libxml2-devel is earlier than 0:2.6.26-2.1.2.1" test_ref="oval:org.mitre.oval:tst:36081"/>
            <criterion comment="libxml2-python is earlier than 0:2.6.26-2.1.2.1" test_ref="oval:org.mitre.oval:tst:36005"/>
            <criterion comment="libxml2 is earlier than 0:2.6.26-2.1.2.1" test_ref="oval:org.mitre.oval:tst:35956"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11592" version="3" class="vulnerability">
      <metadata>
        <title>Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to obtain sensitive information (the Java Web Start cache location) via an untrusted application, aka "three vulnerabilities."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5238"/>
        <description>Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to obtain sensitive information (the Java Web Start cache location) via an untrusted application, aka "three vulnerabilities."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:19.392-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:59.369-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:46.009-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criteria operator="OR">
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:35718"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:36338"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:35438"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:36312"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:36170"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:35439"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35617"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34688"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35272"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35892"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:34849"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36357"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35532"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35673"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36219"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35110"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35478"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35875"/>
            <criterion comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35815"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34668"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35191"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35384"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35413"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36292"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35465"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35057"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35644"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35584"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34760"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36198"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35317"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36227"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36003"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35429"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36350"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35624"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35144"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35886"/>
            <criterion comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36301"/>
            <criterion comment="java-1.5.0-ibm-accessibility is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35633"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35280"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35437"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35256"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35392"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35822"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35453"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34772"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11591" version="5" class="vulnerability">
      <metadata>
        <title>The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2692" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2692"/>
        <description>The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:46.738-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:58.682-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:45.381-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11591 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:06.342-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:50.572-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-60.EL" test_ref="oval:org.mitre.oval:tst:39011"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-60.EL" test_ref="oval:org.mitre.oval:tst:38739"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-60.EL" test_ref="oval:org.mitre.oval:tst:38992"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-60.EL" test_ref="oval:org.mitre.oval:tst:38800"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-60.EL" test_ref="oval:org.mitre.oval:tst:39114"/>
            <criterion comment="kernel is earlier than 0:2.4.21-60.EL" test_ref="oval:org.mitre.oval:tst:39044"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-60.EL" test_ref="oval:org.mitre.oval:tst:39194"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-60.EL" test_ref="oval:org.mitre.oval:tst:38832"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-60.EL" test_ref="oval:org.mitre.oval:tst:38859"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.9.EL" test_ref="oval:org.mitre.oval:tst:39007"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.9.EL" test_ref="oval:org.mitre.oval:tst:38642"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.9.EL" test_ref="oval:org.mitre.oval:tst:38673"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.9.EL" test_ref="oval:org.mitre.oval:tst:39035"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.9.EL" test_ref="oval:org.mitre.oval:tst:38510"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.9.EL" test_ref="oval:org.mitre.oval:tst:38920"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.9.EL" test_ref="oval:org.mitre.oval:tst:39188"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.9.EL" test_ref="oval:org.mitre.oval:tst:39065"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.9.EL" test_ref="oval:org.mitre.oval:tst:39182"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.9.EL" test_ref="oval:org.mitre.oval:tst:39164"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.9.EL" test_ref="oval:org.mitre.oval:tst:38624"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.7.1.el5" test_ref="oval:org.mitre.oval:tst:39175"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-128.7.1.el5" test_ref="oval:org.mitre.oval:tst:38848"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-128.7.1.el5" test_ref="oval:org.mitre.oval:tst:39017"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-128.7.1.el5" test_ref="oval:org.mitre.oval:tst:38949"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.7.1.el5" test_ref="oval:org.mitre.oval:tst:39066"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.7.1.el5" test_ref="oval:org.mitre.oval:tst:38199"/>
            <criterion comment="kernel is earlier than 0:2.6.18-128.7.1.el5" test_ref="oval:org.mitre.oval:tst:39057"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.7.1.el5" test_ref="oval:org.mitre.oval:tst:39072"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-128.7.1.el5" test_ref="oval:org.mitre.oval:tst:38868"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.7.1.el5" test_ref="oval:org.mitre.oval:tst:39155"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.7.1.el5" test_ref="oval:org.mitre.oval:tst:38973"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-128.7.1.el5" test_ref="oval:org.mitre.oval:tst:38459"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1159" version="7" class="vulnerability">
      <metadata>
        <title>Windows 2000 COM Structured Storage Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>COM Internet Services</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0047" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0047"/>
        <description>Windows 2000, XP, and Server 2003 does not properly "validate the use of memory regions" for COM structured storage files, which allows attackers to execute arbitrary code, aka the "COM Structured Storage Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-02-15T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2005-02-18T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-03-09T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-29T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-06-17T12:00:00.000-04:00" comment="modified cmp-1106 - Replaced the test that checks for the service pack level, instead of checking for sp4 or ealier (did not check for GOLD edition) it is now negating the test that checks for sp5 for later.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2005-06-22T12:35:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected and tightened regular expression in ste:2610" date="2010-12-02T11:46:00.307-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-12-02T11:47:26.501-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:13.319-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:02.527-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:26.376-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 (sp4 or earlier) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 5 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2790"/>
        </criteria>
        <criterion comment="the version of ole32.dll is less than 5.0.2195.7021" negate="false" test_ref="oval:org.mitre.oval:tst:1109"/>
        <criterion comment="the patch KB873333 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1485"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11589" version="5" class="vulnerability">
      <metadata>
        <title>Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by modifying the worker_score and process_score arrays to reference an arbitrary process ID, which is sent a SIGUSR1 signal from the master process, aka "SIGUSR1 killer."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3304" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3304"/>
        <description>Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by modifying the worker_score and process_score arrays to reference an arbitrary process ID, which is sent a SIGUSR1 signal from the master process, aka "SIGUSR1 killer."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:17.516-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:58.318-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:44.958-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11589 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:08.621-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:49.970-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-devel is earlier than 0:2.0.46-68.ent" test_ref="oval:org.mitre.oval:tst:34512"/>
            <criterion comment="mod_ssl is earlier than 1:2.0.46-68.ent" test_ref="oval:org.mitre.oval:tst:33919"/>
            <criterion comment="httpd is earlier than 0:2.0.46-68.ent" test_ref="oval:org.mitre.oval:tst:34654"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-suexec is earlier than 0:2.0.52-32.3.ent" test_ref="oval:org.mitre.oval:tst:34770"/>
            <criterion comment="httpd-manual is earlier than 0:2.0.52-32.3.ent" test_ref="oval:org.mitre.oval:tst:33780"/>
            <criterion comment="httpd-devel is earlier than 0:2.0.52-32.3.ent" test_ref="oval:org.mitre.oval:tst:34746"/>
            <criterion comment="mod_ssl is earlier than 1:2.0.52-32.3.ent" test_ref="oval:org.mitre.oval:tst:34650"/>
            <criterion comment="httpd is earlier than 0:2.0.52-32.3.ent" test_ref="oval:org.mitre.oval:tst:34520"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-manual is earlier than 0:2.2.3-7.el5" test_ref="oval:org.mitre.oval:tst:34730"/>
            <criterion comment="httpd-devel is earlier than 0:2.2.3-7.el5" test_ref="oval:org.mitre.oval:tst:34677"/>
            <criterion comment="mod_ssl is earlier than 1:2.2.3-7.el5" test_ref="oval:org.mitre.oval:tst:34399"/>
            <criterion comment="httpd is earlier than 0:2.2.3-7.el5" test_ref="oval:org.mitre.oval:tst:34605"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11584" version="5" class="vulnerability">
      <metadata>
        <title>Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute arbitrary code via a document with a SVGPathList data structure containing a negative index in the (1) SVGTransformList, (2) SVGStringList, (3) SVGNumberList, (4) SVGPathSegList, (5) SVGPointList, or (6) SVGLengthList SVGList object, which triggers memory corruption.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0945" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0945"/>
        <description>Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute arbitrary code via a document with a SVGPathList data structure containing a negative index in the (1) SVGTransformList, (2) SVGStringList, (3) SVGNumberList, (4) SVGPathSegList, (5) SVGPointList, or (6) SVGLengthList SVGList object, which triggers memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:43.388-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:58.125-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:44.493-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11584 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:24.900-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:49.664-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kdegraphics-devel is earlier than 7:3.5.4-13.el5_3" test_ref="oval:org.mitre.oval:tst:38867"/>
          <criterion comment="kdegraphics is earlier than 7:3.5.4-13.el5_3" test_ref="oval:org.mitre.oval:tst:38855"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11583" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in the mac80211 subsystem in the Linux kernel before 2.6.32-rc8-next-20091201 allows remote attackers to cause a denial of service (system crash) via a Delete Block ACK (aka DELBA) packet that triggers a certain state change in the absence of an aggregation session.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4027"/>
        <description>Race condition in the mac80211 subsystem in the Linux kernel before 2.6.32-rc8-next-20091201 allows remote attackers to cause a denial of service (system crash) via a Delete Block ACK (aka DELBA) packet that triggers a certain state change in the absence of an aggregation session.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:56.581-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:57.760-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:44.169-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11583 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:47:00.538-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:49.245-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:39718"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:40363"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:40151"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:40182"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:40070"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:40313"/>
          <criterion comment="kernel is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:40302"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:39440"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:39472"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:40090"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:39519"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:39840"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11580" version="5" class="vulnerability">
      <metadata>
        <title>Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service (daemon restart).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2917" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2917"/>
        <description>Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service (daemon restart).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:40.342-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:57.543-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:43.907-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11580 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:29:49.195-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:48.859-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE3-6.3E.16" test_ref="oval:org.mitre.oval:tst:32217"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE6-3.4E.12" test_ref="oval:org.mitre.oval:tst:32319"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11579" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to execute arbitrary code via a crafted UTF-8 URL in a link.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0016" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0016"/>
        <description>Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to execute arbitrary code via a crafted UTF-8 URL in a link.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:29.592-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:57.074-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:43.434-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11579 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:33.630-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:48.210-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37411"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36691"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37031"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37528"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36726"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37435"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37680"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36725"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37449"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37356"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.10.el4" test_ref="oval:org.mitre.oval:tst:37564"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:36913"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-16.el4" test_ref="oval:org.mitre.oval:tst:37634"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37609"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.10.el4" test_ref="oval:org.mitre.oval:tst:37306"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37499"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37444"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37543"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37552"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="thunderbird is earlier than 0:2.0.0.17-1.el5" test_ref="oval:org.mitre.oval:tst:37230"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11576" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0082" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0082"/>
        <description>Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:10.720-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:56.792-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:43.191-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11576 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:45.905-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:47.819-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39831"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39445"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40225"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40023"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40307"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11575" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unserialize function, which triggers the overflow in the ZVAL reference counter.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1286" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1286"/>
        <description>Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unserialize function, which triggers the overflow in the ZVAL reference counter.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:21.505-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:56.342-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:42.671-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11575 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:41.137-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:47.231-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33776"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33817"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33769"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33528"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33915"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33822"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33351"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:34016"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33395"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33957"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33405"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33642"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33024"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33690"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33995"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33892"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33945"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33711"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33857"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33644"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33920"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11572" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON logon request.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6015" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6015"/>
        <description>Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON logon request.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:16.004-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:55.935-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:42.298-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11572 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:43.732-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:46.631-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.9-1.3E.14.3" test_ref="oval:org.mitre.oval:tst:35741"/>
            <criterion comment="samba-swat is earlier than 0:3.0.9-1.3E.14.3" test_ref="oval:org.mitre.oval:tst:35374"/>
            <criterion comment="samba-client is earlier than 0:3.0.9-1.3E.14.3" test_ref="oval:org.mitre.oval:tst:35870"/>
            <criterion comment="samba is earlier than 0:3.0.9-1.3E.14.3" test_ref="oval:org.mitre.oval:tst:35978"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.25b-1.el4_6.4" test_ref="oval:org.mitre.oval:tst:35595"/>
            <criterion comment="samba-swat is earlier than 0:3.0.25b-1.el4_6.4" test_ref="oval:org.mitre.oval:tst:35306"/>
            <criterion comment="samba-client is earlier than 0:3.0.25b-1.el4_6.4" test_ref="oval:org.mitre.oval:tst:35481"/>
            <criterion comment="samba is earlier than 0:3.0.25b-1.el4_6.4" test_ref="oval:org.mitre.oval:tst:35294"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.25b-1.el5_1.4" test_ref="oval:org.mitre.oval:tst:35516"/>
            <criterion comment="samba-swat is earlier than 0:3.0.25b-1.el5_1.4" test_ref="oval:org.mitre.oval:tst:35751"/>
            <criterion comment="samba-client is earlier than 0:3.0.25b-1.el5_1.4" test_ref="oval:org.mitre.oval:tst:35112"/>
            <criterion comment="samba is earlier than 0:3.0.25b-1.el5_1.4" test_ref="oval:org.mitre.oval:tst:35677"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11571" version="5" class="vulnerability">
      <metadata>
        <title>arch/x86_64/lib/copy_user.S in the Linux kernel before 2.6.19 on some AMD64 systems does not erase destination memory locations after an exception during kernel memory copy, which allows local users to obtain sensitive information.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2729" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2729"/>
        <description>arch/x86_64/lib/copy_user.S in the Linux kernel before 2.6.19 on some AMD64 systems does not erase destination memory locations after an exception during kernel memory copy, which allows local users to obtain sensitive information.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:52.798-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:55.430-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:41.776-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11571 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:49.537-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:45.969-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36972"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36412"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36840"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36741"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36936"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36433"/>
            <criterion comment="kernel is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36961"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36949"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36894"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36367"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:37020"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:36992"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:37039"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:36460"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:36799"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:37005"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:37063"/>
            <criterion comment="kernel is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:36981"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:36704"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:36937"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:36703"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:36996"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:36869"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11570" version="5" class="vulnerability">
      <metadata>
        <title>Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Remote Desktop Protocol (RDP) request with a small length field.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1801" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1801"/>
        <description>Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Remote Desktop Protocol (RDP) request with a small length field.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:03.711-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:55.177-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:41.510-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11570 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:23.248-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:45.530-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="rdesktop is earlier than 0:1.2.0-3" test_ref="oval:org.mitre.oval:tst:37386"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="rdesktop is earlier than 0:1.3.1-9" test_ref="oval:org.mitre.oval:tst:37567"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="rdesktop is earlier than 0:1.4.1-6" test_ref="oval:org.mitre.oval:tst:37100"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1157" version="1" class="vulnerability">
      <metadata>
        <title>Crystal Reports Business Objects Directory Traversal</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Crystal Enterprise</product>
          <product>Crystal Reports</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0204" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0204"/>
        <description>Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers to read and delete arbitrary files via ".." sequences in the dynamicimag argument to crystalimagehandler.aspx.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-06-09T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <modified date="2005-01-18T12:00:00.000-04:00" comment="modified wrt-400 - Changed datatype to int was incorrectly set to binary">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
          </dates>
          <status>INTERIM</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Software section">
          <criterion comment="the version of CrystalDecisions.Web.dll is less than 9.1.9800.9" test_ref="oval:org.mitre.oval:tst:1113"/>
        </criteria>
        <criteria operator="AND" comment="Configuration section">
          <criterion comment="the w3svc service is enabled" test_ref="oval:org.mitre.oval:tst:1112"/>
          <criterion comment="a website linked to the Crystal Reports Viewer is active" test_ref="oval:org.mitre.oval:tst:1111"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11569" version="5" class="vulnerability">
      <metadata>
        <title>The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted regular expression.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4772" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4772"/>
        <description>The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted regular expression.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:41.545-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:54.555-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:40.862-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11569 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:26.160-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:44.715-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tix is earlier than 0:8.1.4-92.8" test_ref="oval:org.mitre.oval:tst:36200"/>
            <criterion comment="tclx is earlier than 0:8.3-92.8" test_ref="oval:org.mitre.oval:tst:35800"/>
            <criterion comment="tcl-devel is earlier than 0:8.3.5-92.8" test_ref="oval:org.mitre.oval:tst:35961"/>
            <criterion comment="expect-devel is earlier than 0:5.38.0-92.8" test_ref="oval:org.mitre.oval:tst:36175"/>
            <criterion comment="tcltk is earlier than 0:8.3.5-92.8" test_ref="oval:org.mitre.oval:tst:36169"/>
            <criterion comment="itcl is earlier than 0:3.2-92.8" test_ref="oval:org.mitre.oval:tst:35879"/>
            <criterion comment="tcl is earlier than 0:8.3.5-92.8" test_ref="oval:org.mitre.oval:tst:36313"/>
            <criterion comment="expect is earlier than 0:5.38.0-92.8" test_ref="oval:org.mitre.oval:tst:35369"/>
            <criterion comment="tk-devel is earlier than 0:8.3.5-92.8" test_ref="oval:org.mitre.oval:tst:36316"/>
            <criterion comment="tk is earlier than 0:8.3.5-92.8" test_ref="oval:org.mitre.oval:tst:36018"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35948"/>
            <criterion comment="postgresql-docs is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35993"/>
            <criterion comment="postgresql-pl is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36045"/>
            <criterion comment="postgresql-tcl is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35949"/>
            <criterion comment="postgresql-libs is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36098"/>
            <criterion comment="postgresql-contrib is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36066"/>
            <criterion comment="postgresql-python is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35942"/>
            <criterion comment="postgresql-test is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36105"/>
            <criterion comment="postgresql-jdbc is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35835"/>
            <criterion comment="postgresql-server is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35597"/>
            <criterion comment="postgresql-devel is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36094"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35261"/>
            <criterion comment="postgresql-docs is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35907"/>
            <criterion comment="postgresql-pl is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35319"/>
            <criterion comment="postgresql-tcl is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35123"/>
            <criterion comment="postgresql-libs is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35894"/>
            <criterion comment="postgresql-contrib is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35781"/>
            <criterion comment="postgresql-python is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:36109"/>
            <criterion comment="postgresql-test is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35308"/>
            <criterion comment="postgresql-server is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35856"/>
            <criterion comment="postgresql-devel is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:36044"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11568" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to execute arbitrary JavaScript with chrome privileges by leveraging a reference to a chrome window from a content window, related to the window.opener property.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3986" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3986"/>
        <description>Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to execute arbitrary JavaScript with chrome privileges by leveraging a reference to a chrome window from a content window, related to the window.opener property.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:34.714-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:54.298-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:40.584-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11568 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:40.925-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:44.297-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.16-4.el4" test_ref="oval:org.mitre.oval:tst:39002"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.16-2.el5_4" test_ref="oval:org.mitre.oval:tst:39838"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.16-2.el5_4" test_ref="oval:org.mitre.oval:tst:39032"/>
            <criterion comment="firefox is earlier than 0:3.0.16-1.el5_4" test_ref="oval:org.mitre.oval:tst:39721"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.16-2.el5_4" test_ref="oval:org.mitre.oval:tst:39558"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11567" version="5" class="vulnerability">
      <metadata>
        <title>Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or cause a denial of service (application crash) via crafted input.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1956" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1956"/>
        <description>Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or cause a denial of service (application crash) via crafted input.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:22.284-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:53.928-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:40.254-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11567 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:16.713-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:43.643-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-devel is earlier than 0:2.0.46-73.ent" test_ref="oval:org.mitre.oval:tst:38833"/>
            <criterion comment="mod_ssl is earlier than 0:2.0.46-73.ent" test_ref="oval:org.mitre.oval:tst:38794"/>
            <criterion comment="httpd is earlier than 0:2.0.46-73.ent" test_ref="oval:org.mitre.oval:tst:38826"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="apr-util-devel is earlier than 0:0.9.4-22.el4_8.1" test_ref="oval:org.mitre.oval:tst:38152"/>
            <criterion comment="apr-util is earlier than 0:0.9.4-22.el4_8.1" test_ref="oval:org.mitre.oval:tst:38886"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="apr-util-docs is earlier than 0:1.2.7-7.el5_3.1" test_ref="oval:org.mitre.oval:tst:38344"/>
            <criterion comment="apr-util-devel is earlier than 0:1.2.7-7.el5_3.1" test_ref="oval:org.mitre.oval:tst:38871"/>
            <criterion comment="apr-util is earlier than 0:1.2.7-7.el5_3.1" test_ref="oval:org.mitre.oval:tst:38788"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11566" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via large subsample dimensions in a JPEG file that triggers a heap-based buffer overflow, aka Bug Id 6874643.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3874" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3874"/>
        <description>Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via large subsample dimensions in a JPEG file that triggers a heap-based buffer overflow, aka Bug Id 6874643.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:22.732-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:53.686-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:39.972-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11566 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:51.629-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:43.303-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:38878"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39616"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39115"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39531"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39655"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11565" version="5" class="vulnerability">
      <metadata>
        <title>Multiple heap-based buffer overflows in Mozilla Thunderbird before 1.5.0.9 and SeaMonkey before 1.0.7 allow remote attackers to execute arbitrary code via (1) external message modies with long Content-Type headers or (2) long RFC2047-encoded (MIME non-ASCII) headers.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6505"/>
        <description>Multiple heap-based buffer overflows in Mozilla Thunderbird before 1.5.0.9 and SeaMonkey before 1.0.7 allow remote attackers to execute arbitrary code via (1) external message modies with long Content-Type headers or (2) long RFC2047-encoded (MIME non-ASCII) headers.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:16.339-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:53.202-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:39.488-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11565 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:39.393-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:42.608-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:32785"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33227"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33266"/>
            <criterion comment="seamonkey is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33146"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:32352"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33183"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33095"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33300"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:32996"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33263"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.6.el4" test_ref="oval:org.mitre.oval:tst:33195"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33236"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33229"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.9-0.1.el4" test_ref="oval:org.mitre.oval:tst:32844"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33273"/>
            <criterion comment="seamonkey is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33259"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33239"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.6.el4" test_ref="oval:org.mitre.oval:tst:33284"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33153"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33015"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33251"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33336"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:32408"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11562" version="5" class="vulnerability">
      <metadata>
        <title>Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (segmentation fault) by aborting the connection during a (1) PUT or (2) POST request, which causes Squid to access previously freed memory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0718" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0718"/>
        <description>Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (segmentation fault) by aborting the connection during a (1) PUT or (2) POST request, which causes Squid to access previously freed memory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:47.467-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:52.947-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:39.257-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11562 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:20.607-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:42.263-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE3-6.3E.13" test_ref="oval:org.mitre.oval:tst:31246"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE6-3.4E.9" test_ref="oval:org.mitre.oval:tst:31854"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11561" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a .htaccess file that causes the overflow during expansion of environment variables.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0747" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0747"/>
        <description>Buffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a .htaccess file that causes the overflow during expansion of environment variables.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:56.557-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:52.742-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:38.988-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11561 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:26.192-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:41.942-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="httpd-devel is earlier than 0:2.0.46-40.ent" test_ref="oval:org.mitre.oval:tst:30894"/>
          <criterion comment="mod_ssl is earlier than 1:2.0.46-40.ent" test_ref="oval:org.mitre.oval:tst:30928"/>
          <criterion comment="httpd is earlier than 0:2.0.46-40.ent" test_ref="oval:org.mitre.oval:tst:30979"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11558" version="5" class="vulnerability">
      <metadata>
        <title>The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a (1) COPY or (2) APPEND command.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4211"/>
        <description>The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a (1) COPY or (2) APPEND command.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:23.172-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:52.567-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:38.794-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11558 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:17.494-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:41.649-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="dovecot is earlier than 0:1.0.7-2.el5" test_ref="oval:org.mitre.oval:tst:36019"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11557" version="5" class="vulnerability">
      <metadata>
        <title>mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0381" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0381"/>
        <description>mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:21.313-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:52.219-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:38.578-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11557 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:32.006-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:41.367-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mysql is earlier than 0:3.23.58-2.3" test_ref="oval:org.mitre.oval:tst:31033"/>
          <criterion comment="mysql-devel is earlier than 0:3.23.58-2.3" test_ref="oval:org.mitre.oval:tst:30615"/>
          <criterion comment="mysql-bench is earlier than 0:3.23.58-2.3" test_ref="oval:org.mitre.oval:tst:31039"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11556" version="5" class="vulnerability">
      <metadata>
        <title>The rw_vm function in usercopy.c in the 4GB split patch for the Linux kernel in Red Hat Enterprise Linux 4 does not perform proper bounds checking, which allows local users to cause a denial of service (crash).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2100" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2100"/>
        <description>The rw_vm function in usercopy.c in the 4GB split patch for the Linux kernel in Red Hat Enterprise Linux 4 does not perform proper bounds checking, which allows local users to cause a denial of service (crash).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:11.926-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:51.932-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:38.300-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11556 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:01.439-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:40.948-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31896"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31885"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31861"/>
          <criterion comment="kernel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31550"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31914"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31924"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:32023"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11549" version="5" class="vulnerability">
      <metadata>
        <title>Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the helptags command.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2953" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2953"/>
        <description>Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the helptags command.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:47.802-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:51.537-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:37.848-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11549 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:55.895-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:40.356-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="vim-minimal is earlier than 1:6.3.046-0.30E.11" test_ref="oval:org.mitre.oval:tst:37217"/>
            <criterion comment="vim-enhanced is earlier than 1:6.3.046-0.30E.11" test_ref="oval:org.mitre.oval:tst:37049"/>
            <criterion comment="vim is earlier than 1:6.3.046-0.30E.11" test_ref="oval:org.mitre.oval:tst:37429"/>
            <criterion comment="vim-X11 is earlier than 1:6.3.046-0.30E.11" test_ref="oval:org.mitre.oval:tst:37390"/>
            <criterion comment="vim-common is earlier than 1:6.3.046-0.30E.11" test_ref="oval:org.mitre.oval:tst:37492"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="vim-minimal is earlier than 1:6.3.046-1.el4_7.5z" test_ref="oval:org.mitre.oval:tst:37521"/>
            <criterion comment="vim-enhanced is earlier than 1:6.3.046-1.el4_7.5z" test_ref="oval:org.mitre.oval:tst:37326"/>
            <criterion comment="vim is earlier than 1:6.3.046-1.el4_7.5z" test_ref="oval:org.mitre.oval:tst:36926"/>
            <criterion comment="vim-X11 is earlier than 1:6.3.046-1.el4_7.5z" test_ref="oval:org.mitre.oval:tst:37520"/>
            <criterion comment="vim-common is earlier than 1:6.3.046-1.el4_7.5z" test_ref="oval:org.mitre.oval:tst:37284"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="vim-minimal is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37412"/>
            <criterion comment="vim-enhanced is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37218"/>
            <criterion comment="vim is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37405"/>
            <criterion comment="vim-X11 is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37384"/>
            <criterion comment="vim-common is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37365"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11546" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a crafted TIFF image, which is not properly handled by the (1) _cupsImageReadTIFF function in the imagetops filter and (2) imagetoraster filter, leading to a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0163" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0163"/>
        <description>Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a crafted TIFF image, which is not properly handled by the (1) _cupsImageReadTIFF function in the imagetops filter and (2) imagetoraster filter, leading to a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:09.649-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:51.199-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:37.499-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11546 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:02.789-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:39.780-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.58" test_ref="oval:org.mitre.oval:tst:38537"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.58" test_ref="oval:org.mitre.oval:tst:38572"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.58" test_ref="oval:org.mitre.oval:tst:38543"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38145"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38607"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38481"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-lpd is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38471"/>
            <criterion comment="cups-devel is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:37935"/>
            <criterion comment="cups is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38334"/>
            <criterion comment="cups-libs is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38541"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11545" version="5" class="vulnerability">
      <metadata>
        <title>Perl-Compatible Regular Expression (PCRE) library before 6.7 does not properly calculate the compiled memory allocation for regular expressions that involve a quantified "subpattern containing a named recursion or subroutine reference," which allows context-dependent attackers to cause a denial of service (error or crash).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-7226" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-7226"/>
        <description>Perl-Compatible Regular Expression (PCRE) library before 6.7 does not properly calculate the compiled memory allocation for regular expressions that involve a quantified "subpattern containing a named recursion or subroutine reference," which allows context-dependent attackers to cause a denial of service (error or crash).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:20.287-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:50.894-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:37.245-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11545 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:16:48.690-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:39.381-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="pcre-devel is earlier than 0:4.5-4.el4_6.6" test_ref="oval:org.mitre.oval:tst:35615"/>
            <criterion comment="pcre is earlier than 0:4.5-4.el4_6.6" test_ref="oval:org.mitre.oval:tst:35501"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="pcre-devel is earlier than 0:6.6-2.el5_1.7" test_ref="oval:org.mitre.oval:tst:35251"/>
            <criterion comment="pcre is earlier than 0:6.6-2.el5_1.7" test_ref="oval:org.mitre.oval:tst:35032"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11544" version="6" class="vulnerability">
      <metadata>
        <title>nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4552" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4552"/>
        <description>The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:52.695-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:50.712-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:37.008-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11544 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:47:20.247-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:39.097-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="nfs-utils is earlier than 1:1.0.9-42.el5" test_ref="oval:org.mitre.oval:tst:38647"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11542" version="5" class="vulnerability">
      <metadata>
        <title>The i915 driver in (1) drivers/char/drm/i915_dma.c in the Linux kernel 2.6.24 on Debian GNU/Linux and (2) sys/dev/pci/drm/i915_drv.c in OpenBSD does not restrict the DRM_I915_HWS_ADDR ioctl to the Direct Rendering Manager (DRM) master, which allows local users to cause a denial of service (memory corruption) via a crafted ioctl call, related to absence of the DRM_MASTER and DRM_ROOT_ONLY flags in the ioctl's configuration.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3831" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3831"/>
        <description>The i915 driver in (1) drivers/char/drm/i915_dma.c in the Linux kernel 2.6.24 on Debian GNU/Linux and (2) sys/dev/pci/drm/i915_drv.c in OpenBSD does not restrict the DRM_I915_HWS_ADDR ioctl to the Direct Rendering Manager (DRM) master, which allows local users to cause a denial of service (memory corruption) via a crafted ioctl call, related to absence of the DRM_MASTER and DRM_ROOT_ONLY flags in the ioctl's configuration.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:18.587-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:50.400-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:36.621-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11542 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:16.088-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:38.618-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:37458"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:38105"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:38024"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:38100"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:37636"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:38034"/>
          <criterion comment="kernel is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:37781"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:38076"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:37945"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:38013"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:37261"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:37532"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11541" version="5" class="vulnerability">
      <metadata>
        <title>sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly signal the non-privileged process when a session has been terminated after exceeding the LoginGraceTime setting, which leaves the connection open and allows remote attackers to cause a denial of service (connection consumption).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-2069" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2069"/>
        <description>sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly signal the non-privileged process when a session has been terminated after exceeding the LoginGraceTime setting, which leaves the connection open and allows remote attackers to cause a denial of service (connection consumption).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:18.224-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:49.824-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:36.378-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11541 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:28.390-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:38.280-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="openssh is earlier than 0:3.6.1p2-33.30.6" test_ref="oval:org.mitre.oval:tst:31887"/>
          <criterion comment="openssh-askpass is earlier than 0:3.6.1p2-33.30.6" test_ref="oval:org.mitre.oval:tst:31483"/>
          <criterion comment="openssh-server is earlier than 0:3.6.1p2-33.30.6" test_ref="oval:org.mitre.oval:tst:31809"/>
          <criterion comment="openssh-clients is earlier than 0:3.6.1p2-33.30.6" test_ref="oval:org.mitre.oval:tst:31979"/>
          <criterion comment="openssh-askpass-gnome is earlier than 0:3.6.1p2-33.30.6" test_ref="oval:org.mitre.oval:tst:31909"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1154" version="1" class="vulnerability">
      <metadata>
        <title>bzip2 Arbitrary File Permission Modification Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>bzip2</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0953" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0953"/>
        <description>Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by bzip2 after the decompression is complete.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-07-11T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-07-27T10:36:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="bzip2 RPM earlier than 0:1.0.2-11.EL3.4" negate="false" test_ref="oval:org.mitre.oval:tst:2386"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/bzip2 is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2385"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11539" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in pixbuf_create_from_xpm (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, allows remote attackers to execute arbitrary code via certain n_col and cpp values that enable a heap-based buffer overflow.  NOTE: this identifier is ONLY for gtk+.  It was incorrectly referenced in an advisory for a different issue (CVE-2004-0687).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0782" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0782"/>
        <description>Integer overflow in pixbuf_create_from_xpm (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, allows remote attackers to execute arbitrary code via certain n_col and cpp values that enable a heap-based buffer overflow.  NOTE: this identifier is ONLY for gtk+.  It was incorrectly referenced in an advisory for a different issue (CVE-2004-0687).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:05.573-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:49.595-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:35.719-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11539 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:59.723-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:37.937-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="gdk-pixbuf-devel is earlier than 1:0.22.0-11.3.3" test_ref="oval:org.mitre.oval:tst:30887"/>
          <criterion comment="gtk2 is earlier than 0:2.2.4-8.1" test_ref="oval:org.mitre.oval:tst:30146"/>
          <criterion comment="gdk-pixbuf-gnome is earlier than 1:0.22.0-11.3.3" test_ref="oval:org.mitre.oval:tst:30822"/>
          <criterion comment="gdk-pixbuf is earlier than 1:0.22.0-11.3.3" test_ref="oval:org.mitre.oval:tst:30571"/>
          <criterion comment="gtk2-devel is earlier than 0:2.2.4-8.1" test_ref="oval:org.mitre.oval:tst:30817"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11536" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in NFS readlink handling in the Linux Kernel 2.4 up to 2.4.31 allows remote NFS servers to cause a denial of service (crash) via a long symlink, which is not properly handled in (1) nfs2xdr.c or (2) nfs3xdr.c and causes a crash in the NFS client.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-4798" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4798"/>
        <description>Buffer overflow in NFS readlink handling in the Linux Kernel 2.4 up to 2.4.31 allows remote NFS servers to cause a denial of service (crash) via a long symlink, which is not properly handled in (1) nfs2xdr.c or (2) nfs3xdr.c and causes a crash in the NFS client.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:05.106-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:49.319-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:35.431-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11536 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:55.459-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:37.584-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:32345"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:32444"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:32109"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:32476"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:32343"/>
          <criterion comment="kernel is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:31877"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:32362"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:32190"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:31899"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11535" version="5" class="vulnerability">
      <metadata>
        <title>Multiple heap-based buffer overflows in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allow user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted WordPerfect file in which values to loop counters are not properly handled in the (1) WP3TablesGroup::_readContents and (2) WP5DefinitionGroup_DefineTablesSubGroup::WP5DefinitionGroup_DefineTablesSubGroup functions.  NOTE: the integer overflow has been split into CVE-2007-1466.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0002" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0002"/>
        <description>Multiple heap-based buffer overflows in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allow user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted WordPerfect file in which values to loop counters are not properly handled in the (1) WP3TablesGroup::_readContents and (2) WP5DefinitionGroup_DefineTablesSubGroup::WP5DefinitionGroup_DefineTablesSubGroup functions.  NOTE: the integer overflow has been split into CVE-2007-1466.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:24.796-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:49.114-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:35.214-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11535 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:47:01.823-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:37.254-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="libwpd-tools is earlier than 0:0.8.7-3.el5" test_ref="oval:org.mitre.oval:tst:33392"/>
          <criterion comment="libwpd-devel is earlier than 0:0.8.7-3.el5" test_ref="oval:org.mitre.oval:tst:33359"/>
          <criterion comment="libwpd is earlier than 0:0.8.7-3.el5" test_ref="oval:org.mitre.oval:tst:33398"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11534" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1947" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1947"/>
        <description>Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:26.386-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:48.754-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:34.858-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11534 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:28.372-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:36.779-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37489"/>
          <criterion comment="tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:36583"/>
          <criterion comment="tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37182"/>
          <criterion comment="tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37266"/>
          <criterion comment="tomcat5-webapps is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37452"/>
          <criterion comment="tomcat5 is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37501"/>
          <criterion comment="tomcat5-jasper is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37524"/>
          <criterion comment="tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37275"/>
          <criterion comment="tomcat5-server-lib is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37396"/>
          <criterion comment="tomcat5-common-lib is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37498"/>
          <criterion comment="tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37415"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11533" version="5" class="vulnerability">
      <metadata>
        <title>Dynamic variable evaluation vulnerability in compose.php in SquirrelMail 1.4.0 to 1.4.7 allows remote attackers to overwrite arbitrary program variables and read or write the attachments and preferences of other users.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4019" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4019"/>
        <description>Dynamic variable evaluation vulnerability in compose.php in SquirrelMail 1.4.0 to 1.4.7 allows remote attackers to overwrite arbitrary program variables and read or write the attachments and preferences of other users.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:22.836-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:48.533-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:34.629-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11533 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:56.120-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:36.438-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-2.el3" test_ref="oval:org.mitre.oval:tst:33056"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-2.el4" test_ref="oval:org.mitre.oval:tst:33006"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11530" version="5" class="vulnerability">
      <metadata>
        <title>The Safe (aka Safe.pm) module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2, allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving subroutine references and delayed execution.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1447" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1447"/>
        <description>The Safe (aka Safe.pm) module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2, allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving subroutine references and delayed execution.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:11.685-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:48.209-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:34.292-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11530 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:22.892-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:35.870-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="perl-suidperl is earlier than 2:5.8.0-101.EL3" test_ref="oval:org.mitre.oval:tst:40554"/>
            <criterion comment="perl is earlier than 2:5.8.0-101.EL3" test_ref="oval:org.mitre.oval:tst:40615"/>
            <criterion comment="perl-CPAN is earlier than 2:5.8.0-101.EL3" test_ref="oval:org.mitre.oval:tst:39713"/>
            <criterion comment="perl-CGI is earlier than 2:5.8.0-101.EL3" test_ref="oval:org.mitre.oval:tst:40065"/>
            <criterion comment="perl-DB_File is earlier than 2:5.8.0-101.EL3" test_ref="oval:org.mitre.oval:tst:40367"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="perl-suidperl is earlier than 3:5.8.5-53.el4" test_ref="oval:org.mitre.oval:tst:40654"/>
            <criterion comment="perl is earlier than 3:5.8.5-53.el4" test_ref="oval:org.mitre.oval:tst:40417"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="perl-suidperl is earlier than 4:5.8.8-32.el5_5.1" test_ref="oval:org.mitre.oval:tst:40657"/>
            <criterion comment="perl is earlier than 4:5.8.8-32.el5_5.1" test_ref="oval:org.mitre.oval:tst:39926"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11529" version="5" class="vulnerability">
      <metadata>
        <title>The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFP_CLR_STATS requests only when the CAP_NET_ADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics, related to an "inverted logic" issue.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0675" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0675"/>
        <description>The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFP_CLR_STATS requests only when the CAP_NET_ADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics, related to an "inverted logic" issue.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:20.474-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:47.847-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:33.909-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11529 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:10.003-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:35.440-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38113"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38107"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38167"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38064"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38380"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:37672"/>
          <criterion comment="kernel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38093"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38127"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38109"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38430"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:37764"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38397"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11528" version="5" class="vulnerability">
      <metadata>
        <title>CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0977" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0977"/>
        <description>CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:32.355-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:47.666-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:33.712-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11528 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:38.541-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:35.172-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="cvs is earlier than 0:1.11.2-14" test_ref="oval:org.mitre.oval:tst:29623"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11523" version="5" class="vulnerability">
      <metadata>
        <title>ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause a denial of service (exit) via a type * (ANY) DNS query response that contains multiple RRsets, which triggers an assertion error, aka the "DNSSEC Validation" vulnerability.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0494"/>
        <description>ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause a denial of service (exit) via a type * (ANY) DNS query response that contains multiple RRsets, which triggers an assertion error, aka the "DNSSEC Validation" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:52.203-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:47.228-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:33.255-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11523 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:10:01.385-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:34.492-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="bind-utils is earlier than 20:9.2.4-20.EL3" test_ref="oval:org.mitre.oval:tst:32461"/>
            <criterion comment="bind-devel is earlier than 20:9.2.4-20.EL3" test_ref="oval:org.mitre.oval:tst:33429"/>
            <criterion comment="bind-chroot is earlier than 20:9.2.4-20.EL3" test_ref="oval:org.mitre.oval:tst:33177"/>
            <criterion comment="bind is earlier than 20:9.2.4-20.EL3" test_ref="oval:org.mitre.oval:tst:33126"/>
            <criterion comment="bind-libs is earlier than 20:9.2.4-20.EL3" test_ref="oval:org.mitre.oval:tst:33256"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="bind-utils is earlier than 20:9.2.4-24.EL4" test_ref="oval:org.mitre.oval:tst:32727"/>
            <criterion comment="bind-devel is earlier than 20:9.2.4-24.EL4" test_ref="oval:org.mitre.oval:tst:33357"/>
            <criterion comment="bind-chroot is earlier than 20:9.2.4-24.EL4" test_ref="oval:org.mitre.oval:tst:32675"/>
            <criterion comment="bind is earlier than 20:9.2.4-24.EL4" test_ref="oval:org.mitre.oval:tst:33136"/>
            <criterion comment="bind-libs is earlier than 20:9.2.4-24.EL4" test_ref="oval:org.mitre.oval:tst:33404"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="bind-utils is earlier than 30:9.3.3-8.el5" test_ref="oval:org.mitre.oval:tst:33237"/>
            <criterion comment="bind-libbind-devel is earlier than 30:9.3.3-8.el5" test_ref="oval:org.mitre.oval:tst:32565"/>
            <criterion comment="bind-devel is earlier than 30:9.3.3-8.el5" test_ref="oval:org.mitre.oval:tst:33314"/>
            <criterion comment="bind-chroot is earlier than 30:9.3.3-8.el5" test_ref="oval:org.mitre.oval:tst:32936"/>
            <criterion comment="caching-nameserver is earlier than 30:9.3.3-8.el5" test_ref="oval:org.mitre.oval:tst:33164"/>
            <criterion comment="bind-sdb is earlier than 30:9.3.3-8.el5" test_ref="oval:org.mitre.oval:tst:33109"/>
            <criterion comment="bind is earlier than 30:9.3.3-8.el5" test_ref="oval:org.mitre.oval:tst:33115"/>
            <criterion comment="bind-libs is earlier than 30:9.3.3-8.el5" test_ref="oval:org.mitre.oval:tst:33331"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11520" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in the MozSearch plugin implementation in Mozilla Firefox before 3.0.9 allows user-assisted remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SearchForm element.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1310" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1310"/>
        <description>Cross-site scripting (XSS) vulnerability in the MozSearch plugin implementation in Mozilla Firefox before 3.0.9 allows user-assisted remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SearchForm element.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:11.182-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:46.905-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:32.945-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11520 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:16:57.771-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:34.073-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.9-1.el4" test_ref="oval:org.mitre.oval:tst:38379"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38308"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38633"/>
            <criterion comment="firefox is earlier than 0:3.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38370"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38462"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11516" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2491" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2491"/>
        <description>Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:56.006-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:46.505-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:32.530-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11516 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:05.929-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:32.292-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.2.3-6.2" test_ref="oval:org.mitre.oval:tst:32462"/>
            <criterion comment="tkinter is earlier than 0:2.2.3-6.2" test_ref="oval:org.mitre.oval:tst:32283"/>
            <criterion comment="python-tools is earlier than 0:2.2.3-6.2" test_ref="oval:org.mitre.oval:tst:32535"/>
            <criterion comment="python is earlier than 0:2.2.3-6.2" test_ref="oval:org.mitre.oval:tst:32198"/>
            <criterion comment="pcre-devel is earlier than 0:3.9-10.2" test_ref="oval:org.mitre.oval:tst:31703"/>
            <criterion comment="pcre is earlier than 0:3.9-10.2" test_ref="oval:org.mitre.oval:tst:31925"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.3.4-14.2" test_ref="oval:org.mitre.oval:tst:32327"/>
            <criterion comment="python-tools is earlier than 0:2.3.4-14.2" test_ref="oval:org.mitre.oval:tst:32549"/>
            <criterion comment="python is earlier than 0:2.3.4-14.2" test_ref="oval:org.mitre.oval:tst:32523"/>
            <criterion comment="pcre-devel is earlier than 0:4.5-3.2.RHEL4" test_ref="oval:org.mitre.oval:tst:32184"/>
            <criterion comment="python-docs is earlier than 0:2.3.4-14.2" test_ref="oval:org.mitre.oval:tst:31757"/>
            <criterion comment="pcre is earlier than 0:4.5-3.2.RHEL4" test_ref="oval:org.mitre.oval:tst:32077"/>
            <criterion comment="exim-sa is earlier than 0:4.43-1.RHEL4.5" test_ref="oval:org.mitre.oval:tst:31688"/>
            <criterion comment="exim-doc is earlier than 0:4.43-1.RHEL4.5" test_ref="oval:org.mitre.oval:tst:31599"/>
            <criterion comment="tkinter is earlier than 0:2.3.4-14.2" test_ref="oval:org.mitre.oval:tst:32020"/>
            <criterion comment="exim is earlier than 0:4.43-1.RHEL4.5" test_ref="oval:org.mitre.oval:tst:31631"/>
            <criterion comment="exim-mon is earlier than 0:4.43-1.RHEL4.5" test_ref="oval:org.mitre.oval:tst:31475"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11515" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in htsearch in htdig 3.2.0b6 allows remote attackers to inject arbitrary web script or HTML via the sort parameter.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6110" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6110"/>
        <description>Cross-site scripting (XSS) vulnerability in htsearch in htdig 3.2.0b6 allows remote attackers to inject arbitrary web script or HTML via the sort parameter.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:08.197-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:46.243-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:32.266-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11515 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:36.294-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:31.791-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="htdig-web is earlier than 3:3.2.0b6-4.el4_6" test_ref="oval:org.mitre.oval:tst:35695"/>
            <criterion comment="htdig is earlier than 3:3.2.0b6-4.el4_6" test_ref="oval:org.mitre.oval:tst:35833"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="htdig-web is earlier than 3:3.2.0b6-9.0.1.el5_1" test_ref="oval:org.mitre.oval:tst:35790"/>
            <criterion comment="htdig is earlier than 3:3.2.0b6-9.0.1.el5_1" test_ref="oval:org.mitre.oval:tst:35868"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11510" version="5" class="vulnerability">
      <metadata>
        <title>The UTF-8 decoder in codecs/qutfcodec.cpp in Qt 3.3.8 and 4.2.3 does not reject long UTF-8 sequences as required by the standard, which allows remote attackers to conduct cross-site scripting (XSS) and directory traversal attacks via long sequences that decode to dangerous metacharacters.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0242" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0242"/>
        <description>The UTF-8 decoder in codecs/qutfcodec.cpp in Qt 3.3.8 and 4.2.3 does not reject long UTF-8 sequences as required by the standard, which allows remote attackers to conduct cross-site scripting (XSS) and directory traversal attacks via long sequences that decode to dangerous metacharacters.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:35.629-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:45.671-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:31.665-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11510 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:51.909-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:31.060-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="qt-config is earlier than 1:3.1.2-17.RHEL3" test_ref="oval:org.mitre.oval:tst:34921"/>
            <criterion comment="qt is earlier than 1:3.1.2-17.RHEL3" test_ref="oval:org.mitre.oval:tst:35117"/>
            <criterion comment="qt-devel is earlier than 1:3.1.2-17.RHEL3" test_ref="oval:org.mitre.oval:tst:35255"/>
            <criterion comment="qt-MySQL is earlier than 1:3.1.2-17.RHEL3" test_ref="oval:org.mitre.oval:tst:35041"/>
            <criterion comment="qt-ODBC is earlier than 1:3.1.2-17.RHEL3" test_ref="oval:org.mitre.oval:tst:34922"/>
            <criterion comment="qt-designer is earlier than 1:3.1.2-17.RHEL3" test_ref="oval:org.mitre.oval:tst:35004"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="qt-config is earlier than 1:3.3.3-13.RHEL4" test_ref="oval:org.mitre.oval:tst:35085"/>
            <criterion comment="qt is earlier than 1:3.3.3-13.RHEL4" test_ref="oval:org.mitre.oval:tst:35125"/>
            <criterion comment="qt-MySQL is earlier than 1:3.3.3-13.RHEL4" test_ref="oval:org.mitre.oval:tst:34568"/>
            <criterion comment="qt-ODBC is earlier than 1:3.3.3-13.RHEL4" test_ref="oval:org.mitre.oval:tst:34886"/>
            <criterion comment="qt-designer is earlier than 1:3.3.3-13.RHEL4" test_ref="oval:org.mitre.oval:tst:35054"/>
            <criterion comment="qt-devel is earlier than 1:3.3.3-13.RHEL4" test_ref="oval:org.mitre.oval:tst:35050"/>
            <criterion comment="qt-PostgreSQL is earlier than 1:3.3.3-13.RHEL4" test_ref="oval:org.mitre.oval:tst:35175"/>
            <criterion comment="kdelibs is earlier than 6:3.3.1-9.el4" test_ref="oval:org.mitre.oval:tst:35165"/>
            <criterion comment="kdelibs-devel is earlier than 6:3.3.1-9.el4" test_ref="oval:org.mitre.oval:tst:35252"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="qt-config is earlier than 1:3.3.6-23.el5" test_ref="oval:org.mitre.oval:tst:34806"/>
            <criterion comment="qt is earlier than 1:3.3.6-23.el5" test_ref="oval:org.mitre.oval:tst:34816"/>
            <criterion comment="qt-MySQL is earlier than 1:3.3.6-23.el5" test_ref="oval:org.mitre.oval:tst:34466"/>
            <criterion comment="kdelibs-apidocs is earlier than 6:3.5.4-13.el5" test_ref="oval:org.mitre.oval:tst:35316"/>
            <criterion comment="qt-ODBC is earlier than 1:3.3.6-23.el5" test_ref="oval:org.mitre.oval:tst:35271"/>
            <criterion comment="qt-designer is earlier than 1:3.3.6-23.el5" test_ref="oval:org.mitre.oval:tst:34736"/>
            <criterion comment="qt-devel is earlier than 1:3.3.6-23.el5" test_ref="oval:org.mitre.oval:tst:35097"/>
            <criterion comment="qt-PostgreSQL is earlier than 1:3.3.6-23.el5" test_ref="oval:org.mitre.oval:tst:35149"/>
            <criterion comment="kdelibs is earlier than 6:3.5.4-13.el5" test_ref="oval:org.mitre.oval:tst:35293"/>
            <criterion comment="qt-devel-docs is earlier than 1:3.3.6-23.el5" test_ref="oval:org.mitre.oval:tst:35114"/>
            <criterion comment="kdelibs-devel is earlier than 6:3.5.4-13.el5" test_ref="oval:org.mitre.oval:tst:34994"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11509" version="5" class="vulnerability">
      <metadata>
        <title>The do_ipv6_setsockopt function in net/ipv6/ipv6_sockglue.c in Linux kernel before 2.6.20, and possibly other versions, allows local users to cause a denial of service (oops) by calling setsockopt with the IPV6_RTHDR option name and possibly a zero option length or invalid option value, which triggers a NULL pointer dereference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1388" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1388"/>
        <description>The do_ipv6_setsockopt function in net/ipv6/ipv6_sockglue.c in Linux kernel before 2.6.20, and possibly other versions, allows local users to cause a denial of service (oops) by calling setsockopt with the IPV6_RTHDR option name and possibly a zero option length or invalid option value, which triggers a NULL pointer dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:53.275-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:45.357-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:31.338-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11509 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:57.528-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:30.612-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:33503"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:34071"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:33478"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:33985"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:34055"/>
          <criterion comment="kernel is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:34011"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:33805"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:33899"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:33709"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:34058"/>
          <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:34043"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11508" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the HTTP dissector for Wireshark (formerly Ethereal) 0.10.14 to 0.99.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted chunked messages.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6117" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6117"/>
        <description>Unspecified vulnerability in the HTTP dissector for Wireshark (formerly Ethereal) 0.10.14 to 0.99.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted chunked messages.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:26.630-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:44.930-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:30.922-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11508 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:04.729-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:30.004-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-EL3.1" test_ref="oval:org.mitre.oval:tst:36111"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-EL3.1" test_ref="oval:org.mitre.oval:tst:36043"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-3.el3" test_ref="oval:org.mitre.oval:tst:35411"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-3.el3" test_ref="oval:org.mitre.oval:tst:36140"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:36051"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:35980"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35669"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35941"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:35709"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:36120"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35712"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35801"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11507" version="5" class="vulnerability">
      <metadata>
        <title>lppasswd in CUPS 1.1.22, when run in environments that do not ensure that file descriptors 0, 1, and 2 are open when lppasswd is called, does not verify that the passwd.new file is different from STDERR, which allows local users to control output to passwd.new via certain user input that triggers an error message.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1270" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1270"/>
        <description>lppasswd in CUPS 1.1.22, when run in environments that do not ensure that file descriptors 0, 1, and 2 are open when lppasswd is called, does not verify that the passwd.new file is different from STDERR, which allows local users to control output to passwd.new via certain user input that triggers an error message.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:28.598-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:44.661-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:30.566-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11507 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:24.982-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:29.604-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.22" test_ref="oval:org.mitre.oval:tst:30882"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.22" test_ref="oval:org.mitre.oval:tst:31108"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.22" test_ref="oval:org.mitre.oval:tst:31170"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.6" test_ref="oval:org.mitre.oval:tst:30919"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.6" test_ref="oval:org.mitre.oval:tst:31056"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.6" test_ref="oval:org.mitre.oval:tst:31093"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11506" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the dccp_setsockopt_change function in net/dccp/proto.c in the Datagram Congestion Control Protocol (DCCP) subsystem in the Linux kernel 2.6.17-rc1 through 2.6.26.2 allows remote attackers to cause a denial of service (panic) via a crafted integer value, related to Change L and Change R options without at least one byte in the dccpsf_val field.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3276" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3276"/>
        <description>Integer overflow in the dccp_setsockopt_change function in net/dccp/proto.c in the Datagram Congestion Control Protocol (DCCP) subsystem in the Linux kernel 2.6.17-rc1 through 2.6.26.2 allows remote attackers to cause a denial of service (panic) via a crafted integer value, related to Change L and Change R options without at least one byte in the dccpsf_val field.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:19.655-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:44.341-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:30.239-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11506 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:30.324-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:29.177-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37778"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37855"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37870"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37881"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37504"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37738"/>
          <criterion comment="kernel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37774"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37247"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37715"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37954"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37668"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37947"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11505" version="3" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0657" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0657"/>
        <description>Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:54.621-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:43.639-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:29.495-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36548"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36455"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.14-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35652"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.14-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36255"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36614"/>
            <criterion comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.14-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36263"/>
            <criterion comment="java-1.5.0-bea is earlier than 0:1.5.0.14-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36444"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36422"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36406"/>
            <criterion comment="java-1.5.0-bea-src is earlier than 0:1.5.0.14-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36470"/>
            <criterion comment="java-1.5.0-ibm is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36155"/>
            <criterion comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.14-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36435"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.14-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36147"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.14-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36268"/>
            <criterion comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.14-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36151"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36613"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.14-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35767"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.14-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36038"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36558"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36485"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.14-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35342"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.14-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36088"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36265"/>
            <criterion comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36261"/>
            <criterion comment="java-1.5.0-bea is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36374"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36535"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36523"/>
            <criterion comment="java-1.5.0-bea-missioncontrol is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36452"/>
            <criterion comment="java-1.5.0-bea-src is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36372"/>
            <criterion comment="java-1.5.0-ibm-accessibility is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36323"/>
            <criterion comment="java-1.5.0-ibm is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35890"/>
            <criterion comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36290"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.14-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35947"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.14-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36042"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.14-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36298"/>
            <criterion comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36337"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36340"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.14-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36135"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11503" version="5" class="vulnerability">
      <metadata>
        <title>The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by using the interpreter (PT_INTERP) functionality.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1073" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1073"/>
        <description>The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by using the interpreter (PT_INTERP) functionality.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:52.963-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:43.355-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:29.194-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11503 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:29.572-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:28.779-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31148"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31473"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31178"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31282"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31565"/>
          <criterion comment="kernel is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31562"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31582"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:30730"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31534"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11502" version="5" class="vulnerability">
      <metadata>
        <title>The crypt_gensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in crypt_blowfish 0.4.7 and earlier do not evenly and randomly distribute salts, which makes it easier for attackers to guess passwords from a stolen password file due to the increased number of collisions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0591" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0591"/>
        <description>The crypt_gensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in crypt_blowfish 0.4.7 and earlier do not evenly and randomly distribute salts, which makes it easier for attackers to guess passwords from a stolen password file due to the increased number of collisions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:39.701-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:42.844-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:28.674-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11502 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:19.682-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:28.194-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="rh-postgresql-devel is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32465"/>
            <criterion comment="rh-postgresql-server is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32618"/>
            <criterion comment="rh-postgresql-python is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32497"/>
            <criterion comment="rh-postgresql-libs is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32527"/>
            <criterion comment="rh-postgresql-docs is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32392"/>
            <criterion comment="rh-postgresql-test is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32719"/>
            <criterion comment="rh-postgresql-pl is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32621"/>
            <criterion comment="rh-postgresql-tcl is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32195"/>
            <criterion comment="rh-postgresql is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32628"/>
            <criterion comment="rh-postgresql-contrib is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32601"/>
            <criterion comment="rh-postgresql-jdbc is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:31936"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32101"/>
            <criterion comment="postgresql-docs is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31976"/>
            <criterion comment="postgresql-pl is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32564"/>
            <criterion comment="postgresql-tcl is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32038"/>
            <criterion comment="postgresql-libs is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32648"/>
            <criterion comment="postgresql-contrib is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31768"/>
            <criterion comment="postgresql-python is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32626"/>
            <criterion comment="postgresql-test is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31950"/>
            <criterion comment="postgresql-jdbc is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32604"/>
            <criterion comment="postgresql-server is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32472"/>
            <criterion comment="postgresql-devel is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32278"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11501" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not properly clear a JavaScript reference to a frame or window, which leaves a pointer to a deleted object that allows remote attackers to execute arbitrary native code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3801" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3801"/>
        <description>Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not properly clear a JavaScript reference to a frame or window, which leaves a pointer to a deleted object that allows remote attackers to execute arbitrary native code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:37.159-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:42.349-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:28.168-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11501 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:34.528-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:27.377-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32342"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32877"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:31982"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32816"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32080"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32904"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32915"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32924"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32822"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32555"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32873"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32693"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32886"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32810"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32418"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32496"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32929"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32777"/>
            <criterion comment="firefox is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32896"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32722"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32906"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32905"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32925"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32624"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11500" version="5" class="vulnerability">
      <metadata>
        <title>zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2096" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2096"/>
        <description>zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:19.287-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:41.955-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:27.893-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11500 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:34.595-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:27.080-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="zlib-devel is earlier than 0:1.2.1.2-1.1" test_ref="oval:org.mitre.oval:tst:31702"/>
          <criterion comment="zlib is earlier than 0:1.2.1.2-1.1" test_ref="oval:org.mitre.oval:tst:32083"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1150" version="3" class="vulnerability">
      <metadata>
        <title>Crash on "zero-width non-joiner" Sequence</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2702" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2702"/>
        <description>Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Unicode sequences with "zero-width non-joiner" characters.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-11-11T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-12-12T10:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:2367" date="2007-02-26T08:32:00.241-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-26T08:32:38.875-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:2370" date="2007-03-06T07:46:00.064-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:43.054-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:1444" date="2007-04-23T12:05:00.911-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:19:58.449-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:1445" date="2007-04-23T12:05:00.720-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:51.641-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Suite version 1.7.10 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.10 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2535"/>
          <criterion comment="Mozilla Suite version 1.7.10 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2534"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.6 or earlier is installed">
          <criterion comment="Firefox version 1.0.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2533"/>
          <criterion comment="Mozilla Firefox version 1.0.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2532"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11499" version="5" class="vulnerability">
      <metadata>
        <title>The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not reject the "localhost.localdomain" domain name for e-mail messages that come from external hosts, which might allow remote attackers to spoof messages.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-7176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-7176"/>
        <description>The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not reject the "localhost.localdomain" domain name for e-mail messages that come from external hosts, which might allow remote attackers to spoof messages.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:57.346-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:41.653-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:27.590-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11499 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:38.316-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:26.597-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="sendmail is earlier than 0:8.13.1-3.2.el4" test_ref="oval:org.mitre.oval:tst:34035"/>
            <criterion comment="sendmail-doc is earlier than 0:8.13.1-3.2.el4" test_ref="oval:org.mitre.oval:tst:33657"/>
            <criterion comment="sendmail-cf is earlier than 0:8.13.1-3.2.el4" test_ref="oval:org.mitre.oval:tst:33996"/>
            <criterion comment="sendmail-devel is earlier than 0:8.13.1-3.2.el4" test_ref="oval:org.mitre.oval:tst:33824"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="sendmail is earlier than 0:8.13.8-8.el5" test_ref="oval:org.mitre.oval:tst:40026"/>
            <criterion comment="sendmail-doc is earlier than 0:8.13.8-8.el5" test_ref="oval:org.mitre.oval:tst:40111"/>
            <criterion comment="sendmail-cf is earlier than 0:8.13.8-8.el5" test_ref="oval:org.mitre.oval:tst:40318"/>
            <criterion comment="sendmail-devel is earlier than 0:8.13.8-8.el5" test_ref="oval:org.mitre.oval:tst:39935"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11497" version="5" class="vulnerability">
      <metadata>
        <title>Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent attackers to execute arbitrary code or cause a denial of service via unspecified vectors, including a large tdir_count value in the TIFFFetchShortPair function in tif_dirread.c.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3459" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3459"/>
        <description>Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent attackers to execute arbitrary code or cause a denial of service via unspecified vectors, including a large tdir_count value in the TIFFFetchShortPair function in tif_dirread.c.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:08.733-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:41.385-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:27.301-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11497 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:40.883-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:26.186-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.1.3-3.10" test_ref="oval:org.mitre.oval:tst:32819"/>
            <criterion comment="libtiff is earlier than 0:3.5.7-25.el3.4" test_ref="oval:org.mitre.oval:tst:32069"/>
            <criterion comment="kdegraphics is earlier than 7:3.1.3-3.10" test_ref="oval:org.mitre.oval:tst:33012"/>
            <criterion comment="libtiff-devel is earlier than 0:3.5.7-25.el3.4" test_ref="oval:org.mitre.oval:tst:32843"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libtiff is earlier than 0:3.6.1-12" test_ref="oval:org.mitre.oval:tst:32922"/>
            <criterion comment="libtiff-devel is earlier than 0:3.6.1-12" test_ref="oval:org.mitre.oval:tst:32413"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11496" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allows remote attackers to execute arbitrary code via the XML.prototype.hasOwnProperty JavaScript function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5747" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5747"/>
        <description>Unspecified vulnerability in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allows remote attackers to execute arbitrary code via the XML.prototype.hasOwnProperty JavaScript function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:00.103-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:40.825-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:26.707-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11496 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:03.257-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:25.491-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:32940"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:33113"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:32275"/>
            <criterion comment="seamonkey is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:33128"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:32259"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:32596"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:33188"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:32780"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:33131"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:33022"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.5.el4" test_ref="oval:org.mitre.oval:tst:33198"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33241"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33268"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.8-0.1.el4" test_ref="oval:org.mitre.oval:tst:33216"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:32752"/>
            <criterion comment="seamonkey is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:32536"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:32857"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.5.el4" test_ref="oval:org.mitre.oval:tst:33185"/>
            <criterion comment="firefox is earlier than 0:1.5.0.8-0.1.el4" test_ref="oval:org.mitre.oval:tst:33140"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33088"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33118"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33171"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:32856"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33214"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11494" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unknown vulnerabilities in the (1) WSP, (2) BER, (3) SMB, (4) NDPS, (5) IAX2, (6) RADIUS, (7) TCAP, (8) MRDISC, (9) 802.3 Slow, (10) SMBMailslot, or (11) SMB PIPE dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (assert error).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1459" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1459"/>
        <description>Multiple unknown vulnerabilities in the (1) WSP, (2) BER, (3) SMB, (4) NDPS, (5) IAX2, (6) RADIUS, (7) TCAP, (8) MRDISC, (9) 802.3 Slow, (10) SMBMailslot, or (11) SMB PIPE dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (assert error).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:18.401-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:40.580-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:26.356-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11494 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:09.979-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:25.109-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31458"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31546"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31674"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31865"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11493" version="3" class="vulnerability">
      <metadata>
        <title>Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a (1) Long string or (2) XML variable type in a crafted (a) FLV or (b) SWF file, related to an "input validation error," including a signed comparison of values that are assumed to be non-negative.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3456"/>
        <description>Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a (1) Long string or (2) XML variable type in a crafted (a) FLV or (b) SWF file, related to an "input validation error," including a signed comparison of values that are assumed to be non-negative.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:07.691-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:40.331-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:26.100-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criterion comment="flash-plugin is earlier than 0:9.0.48.0-1.el3.with.oss" test_ref="oval:org.mitre.oval:tst:34879"/>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criterion comment="flash-plugin is earlier than 0:9.0.48.0-1.el4" test_ref="oval:org.mitre.oval:tst:34473"/>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criterion comment="flash-plugin is earlier than 0:9.0.48.0-1.el5" test_ref="oval:org.mitre.oval:tst:34699"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1149" version="6" class="vulnerability">
      <metadata>
        <title>Server 2003,SP1 DirectShow Malicious avi File Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>DirectX</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2128" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2128"/>
        <description>QUARTZ.DLL in Microsoft Windows Media Player 9 allows remote attackers to write a null byte to arbitrary memory via an AVI file with a crafted strn element with a modified length value.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-10-12T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-10-19T05:46:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:08.254-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:25.366-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:1047 - obj/ste updates to conform to authoring style guide" date="2013-03-26T09:53:00.500-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-03-26T09:56:04.532-04:00">INTERIM</status_change>
            <status_change date="2013-04-15T04:00:06.793-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR" comment="Software section">
        <criteria operator="AND" comment="DirectX packaged with Windows Server 2003,SP1 has DirectShow Vulnerability">
          <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
          <criterion comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
          <criterion comment="the version of Quartz.dll is greater than or equal to 6.5.3790.0" test_ref="oval:org.mitre.oval:tst:1123"/>
          <criterion comment="the version of Quartz.dll is less than 6.5.3790.2519" test_ref="oval:org.mitre.oval:tst:1122"/>
        </criteria>
        <criteria operator="AND" comment="Standalone DirectX 8 has DirectShow Vulnerability">
          <criterion comment="DirectX 8.x Installed" test_ref="oval:org.mitre.oval:tst:1173"/>
          <criterion comment="the version of Quartz.dll is less than 6.3.1.889" test_ref="oval:org.mitre.oval:tst:1121"/>
        </criteria>
        <criteria operator="AND" comment="Standalone DirectX 9 has DirectShow Vulnerability">
          <criterion comment="DirectX 9.x Installed" test_ref="oval:org.mitre.oval:tst:1120"/>
          <criterion comment="the version of Quartz.dll is less than 6.3.1.889" test_ref="oval:org.mitre.oval:tst:1121"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11489" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer underflows in the (1) LZWDecode, (2) LZWDecodeCompat, and (3) LZWDecodeVector functions in tif_lzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary code via a crafted TIFF file, related to improper handling of the CODE_CLEAR code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2327" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2327"/>
        <description>Multiple buffer underflows in the (1) LZWDecode, (2) LZWDecodeCompat, and (3) LZWDecodeVector functions in tif_lzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary code via a crafted TIFF file, related to improper handling of the CODE_CLEAR code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:57.905-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:39.690-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:24.981-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11489 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:55.736-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:24.604-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libtiff is earlier than 0:3.5.7-31.el3" test_ref="oval:org.mitre.oval:tst:37373"/>
            <criterion comment="libtiff-devel is earlier than 0:3.5.7-31.el3" test_ref="oval:org.mitre.oval:tst:37614"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libtiff is earlier than 0:3.6.1-12.el4_7.2" test_ref="oval:org.mitre.oval:tst:37555"/>
            <criterion comment="libtiff-devel is earlier than 0:3.6.1-12.el4_7.2" test_ref="oval:org.mitre.oval:tst:37573"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libtiff is earlier than 0:3.8.2-7.el5_2.2" test_ref="oval:org.mitre.oval:tst:37340"/>
            <criterion comment="libtiff-devel is earlier than 0:3.8.2-7.el5_2.2" test_ref="oval:org.mitre.oval:tst:37515"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11487" version="5" class="vulnerability">
      <metadata>
        <title>The JavaScript engine in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) js_LeaveSharpObject, (2) ParseXMLSource, and (3) a certain assertion in jsinterp.c; and other vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1833" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1833"/>
        <description>The JavaScript engine in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) js_LeaveSharpObject, (2) ParseXMLSource, and (3) a certain assertion in jsinterp.c; and other vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:49.877-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:39.172-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:24.456-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11487 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:35:00.282-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:23.851-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38336"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38452"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38736"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38742"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38069"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38264"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38724"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38791"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38432"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:37902"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38793"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-23.el4" test_ref="oval:org.mitre.oval:tst:38562"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38213"/>
            <criterion comment="firefox is earlier than 0:3.0.11-4.el4" test_ref="oval:org.mitre.oval:tst:38689"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38280"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38531"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38828"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38655"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38771"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38371"/>
            <criterion comment="firefox is earlier than 0:3.0.11-2.el5_3" test_ref="oval:org.mitre.oval:tst:38682"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.22-2.el5_3" test_ref="oval:org.mitre.oval:tst:38801"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38718"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11486" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in ImageMagick before 6.2.9 allows user-assisted attackers to execute arbitrary code via crafted Sun Rasterfile (bitmap) images that trigger heap-based buffer overflows.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3744" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3744"/>
        <description>Multiple integer overflows in ImageMagick before 6.2.9 allows user-assisted attackers to execute arbitrary code via crafted Sun Rasterfile (bitmap) images that trigger heap-based buffer overflows.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:41.145-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:38.803-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:24.130-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11486 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:22.428-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:23.404-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:5.5.6-20" test_ref="oval:org.mitre.oval:tst:32037"/>
            <criterion comment="ImageMagick is earlier than 0:5.5.6-20" test_ref="oval:org.mitre.oval:tst:32699"/>
            <criterion comment="ImageMagick-perl is earlier than 0:5.5.6-20" test_ref="oval:org.mitre.oval:tst:32588"/>
            <criterion comment="ImageMagick-devel is earlier than 0:5.5.6-20" test_ref="oval:org.mitre.oval:tst:32852"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:5.5.6-20" test_ref="oval:org.mitre.oval:tst:32735"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-16" test_ref="oval:org.mitre.oval:tst:32383"/>
            <criterion comment="ImageMagick is earlier than 0:6.0.7.1-16" test_ref="oval:org.mitre.oval:tst:32971"/>
            <criterion comment="ImageMagick-perl is earlier than 0:6.0.7.1-16" test_ref="oval:org.mitre.oval:tst:32748"/>
            <criterion comment="ImageMagick-devel is earlier than 0:6.0.7.1-16" test_ref="oval:org.mitre.oval:tst:32946"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:6.0.7.1-16" test_ref="oval:org.mitre.oval:tst:32537"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11485" version="5" class="vulnerability">
      <metadata>
        <title>libpurple in Finch in Pidgin before 2.6.6, when an XMPP multi-user chat (MUC) room is used, does not properly parse nicknames containing br sequences, which allows remote attackers to cause a denial of service (application crash) via a crafted nickname.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0420"/>
        <description>libpurple in Finch in Pidgin before 2.6.6, when an XMPP multi-user chat (MUC) room is used, does not properly parse nicknames containing &lt;br> sequences, which allows remote attackers to cause a denial of service (application crash) via a crafted nickname.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:20.906-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:38.385-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:23.651-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11485 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:56.335-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:22.659-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.6.6-1.el4" test_ref="oval:org.mitre.oval:tst:39911"/>
            <criterion comment="libpurple is earlier than 0:2.6.6-1.el4" test_ref="oval:org.mitre.oval:tst:40093"/>
            <criterion comment="libpurple-perl is earlier than 0:2.6.6-1.el4" test_ref="oval:org.mitre.oval:tst:40218"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.6.6-1.el4" test_ref="oval:org.mitre.oval:tst:40181"/>
            <criterion comment="pidgin-devel is earlier than 0:2.6.6-1.el4" test_ref="oval:org.mitre.oval:tst:40052"/>
            <criterion comment="libpurple-devel is earlier than 0:2.6.6-1.el4" test_ref="oval:org.mitre.oval:tst:39983"/>
            <criterion comment="finch is earlier than 0:2.6.6-1.el4" test_ref="oval:org.mitre.oval:tst:39933"/>
            <criterion comment="pidgin-perl is earlier than 0:2.6.6-1.el4" test_ref="oval:org.mitre.oval:tst:40004"/>
            <criterion comment="pidgin is earlier than 0:2.6.6-1.el4" test_ref="oval:org.mitre.oval:tst:40214"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.6.6-1.el5" test_ref="oval:org.mitre.oval:tst:39974"/>
            <criterion comment="libpurple is earlier than 0:2.6.6-1.el5" test_ref="oval:org.mitre.oval:tst:40080"/>
            <criterion comment="libpurple-perl is earlier than 0:2.6.6-1.el5" test_ref="oval:org.mitre.oval:tst:40176"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.6.6-1.el5" test_ref="oval:org.mitre.oval:tst:40248"/>
            <criterion comment="pidgin-devel is earlier than 0:2.6.6-1.el5" test_ref="oval:org.mitre.oval:tst:40202"/>
            <criterion comment="libpurple-devel is earlier than 0:2.6.6-1.el5" test_ref="oval:org.mitre.oval:tst:40141"/>
            <criterion comment="finch is earlier than 0:2.6.6-1.el5" test_ref="oval:org.mitre.oval:tst:39917"/>
            <criterion comment="pidgin-perl is earlier than 0:2.6.6-1.el5" test_ref="oval:org.mitre.oval:tst:40306"/>
            <criterion comment="pidgin is earlier than 0:2.6.6-1.el5" test_ref="oval:org.mitre.oval:tst:39993"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11484" version="5" class="vulnerability">
      <metadata>
        <title>Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the existence of children of a resurrected ClassLoader, which allows remote attackers to gain privileges via unspecified vectors, related to an "information leak vulnerability," aka Bug Id 6636650.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3881" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3881"/>
        <description>Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the existence of children of a resurrected ClassLoader, which allows remote attackers to gain privileges via unspecified vectors, related to an "information leak vulnerability," aka Bug Id 6636650.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:07.822-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:38.152-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:23.402-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11484 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:50.112-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:22.319-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:38878"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39616"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39115"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39531"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39655"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11483" version="5" class="vulnerability">
      <metadata>
        <title>pam_console does not properly restore ownership for certain console devices when there are multiple users logged into the console and one user logs out, which might allow local users to gain privileges.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1716" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1716"/>
        <description>pam_console does not properly restore ownership for certain console devices when there are multiple users logged into the console and one user logs out, which might allow local users to gain privileges.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:53.432-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:37.779-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:23.001-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11483 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:29.341-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:21.777-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="pam-devel is earlier than 0:0.75-72" test_ref="oval:org.mitre.oval:tst:34483"/>
            <criterion comment="pam is earlier than 0:0.75-72" test_ref="oval:org.mitre.oval:tst:34274"/>
            <criterion comment="mkisofs is earlier than 8:2.01.0.a32-0.EL3.6" test_ref="oval:org.mitre.oval:tst:34392"/>
            <criterion comment="cdrecord is earlier than 8:2.01.0.a32-0.EL3.6" test_ref="oval:org.mitre.oval:tst:34405"/>
            <criterion comment="cdrtools is earlier than 8:2.01.0.a32-0.EL3.6" test_ref="oval:org.mitre.oval:tst:33947"/>
            <criterion comment="cdrecord-devel is earlier than 8:2.01.0.a32-0.EL3.6" test_ref="oval:org.mitre.oval:tst:34263"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="pam-devel is earlier than 0:0.77-66.23" test_ref="oval:org.mitre.oval:tst:34850"/>
            <criterion comment="pam is earlier than 0:0.77-66.23" test_ref="oval:org.mitre.oval:tst:34954"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="pam-devel is earlier than 0:0.99.6.2-3.26.el5" test_ref="oval:org.mitre.oval:tst:34670"/>
            <criterion comment="pam is earlier than 0:0.99.6.2-3.26.el5" test_ref="oval:org.mitre.oval:tst:34359"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11482" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 can hide the Window's titlebar when displaying XUL markup language documents, which makes it easier for remote attackers to conduct phishing and spoofing attacks by setting the hidechrome attribute.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5334" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5334"/>
        <description>Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 can hide the Window's titlebar when displaying XUL markup language documents, which makes it easier for remote attackers to conduct phishing and spoofing attacks by setting the hidechrome attribute.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:13.871-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:37.252-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:22.467-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11482 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:26.559-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:21.069-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35512"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35540"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35394"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35541"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35241"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35553"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35552"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:34924"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35155"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35441"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35489"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35324"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-0.5.el4" test_ref="oval:org.mitre.oval:tst:35240"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35182"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35311"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35454"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.7.el4" test_ref="oval:org.mitre.oval:tst:35398"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35351"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35482"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:34790"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35291"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:34577"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-6.el5" test_ref="oval:org.mitre.oval:tst:35262"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-6.el5" test_ref="oval:org.mitre.oval:tst:35202"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-5.el5" test_ref="oval:org.mitre.oval:tst:35177"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11481" version="5" class="vulnerability">
      <metadata>
        <title>The parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one parameter, allows remote attackers to enable the register_globals directive via inputs that cause a request to be terminated due to the memory_limit setting, which causes PHP to set an internal flag that enables register_globals and allows attackers to exploit vulnerabilities in PHP applications that would otherwise be protected.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3389" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3389"/>
        <description>The parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one parameter, allows remote attackers to enable the register_globals directive via inputs that cause a request to be terminated due to the memory_limit setting, which causes PHP to set an internal flag that enables register_globals and allows attackers to exploit vulnerabilities in PHP applications that would otherwise be protected.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:33.771-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:36.742-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:21.962-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11481 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:09.701-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:20.431-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-26.ent" test_ref="oval:org.mitre.oval:tst:32105"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-26.ent" test_ref="oval:org.mitre.oval:tst:32433"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-26.ent" test_ref="oval:org.mitre.oval:tst:32429"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-26.ent" test_ref="oval:org.mitre.oval:tst:32322"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-26.ent" test_ref="oval:org.mitre.oval:tst:32301"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-26.ent" test_ref="oval:org.mitre.oval:tst:32253"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-26.ent" test_ref="oval:org.mitre.oval:tst:32050"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32261"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32003"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32346"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32114"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32325"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32420"/>
            <criterion comment="php is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32337"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32287"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32016"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32405"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32397"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32321"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32207"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:31926"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1148" version="3" class="vulnerability">
      <metadata>
        <title>IE6 Installed XP,SP2 File Disclosure via Redirects Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0648" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0648"/>
        <description>The legacy &lt;script> data-island capability for XML in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to read arbitrary XML files, and portions of other files, via a URL whose "src" attribute redirects to a local file.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-06-22T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-06-22T12:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:40.296-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:09.649-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6.0 Installed XP SP2" negate="false" test_ref="oval:org.mitre.oval:tst:2403"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2900.2668" negate="false" test_ref="oval:org.mitre.oval:tst:1150"/>
          <criterion comment="the patch kb883939 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2750"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11479" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the gif_read_lzw function in CUPS 1.3.6 allows remote attackers to have an unknown impact via a GIF file with a large code_size value, a similar issue to CVE-2006-4484.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1373" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1373"/>
        <description>Buffer overflow in the gif_read_lzw function in CUPS 1.3.6 allows remote attackers to have an unknown impact via a GIF file with a large code_size value, a similar issue to CVE-2006-4484.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:31.547-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:36.394-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:21.612-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11479 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:00.680-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:19.874-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.52" test_ref="oval:org.mitre.oval:tst:36146"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.52" test_ref="oval:org.mitre.oval:tst:36214"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.52" test_ref="oval:org.mitre.oval:tst:36403"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.6" test_ref="oval:org.mitre.oval:tst:36474"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.6" test_ref="oval:org.mitre.oval:tst:35913"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.6" test_ref="oval:org.mitre.oval:tst:36036"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-lpd is earlier than 1:1.2.4-11.14.el5_1.6" test_ref="oval:org.mitre.oval:tst:36593"/>
            <criterion comment="cups-devel is earlier than 1:1.2.4-11.14.el5_1.6" test_ref="oval:org.mitre.oval:tst:36521"/>
            <criterion comment="cups is earlier than 1:1.2.4-11.14.el5_1.6" test_ref="oval:org.mitre.oval:tst:36179"/>
            <criterion comment="cups-libs is earlier than 1:1.2.4-11.14.el5_1.6" test_ref="oval:org.mitre.oval:tst:36567"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11478" version="5" class="vulnerability">
      <metadata>
        <title>Off-by-one overflow in the CVS PreservePermissions of rcs.c for CVSD before 1.11.2 allows local users to execute arbitrary code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0844" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0844"/>
        <description>Off-by-one overflow in the CVS PreservePermissions of rcs.c for CVSD before 1.11.2 allows local users to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:47.454-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:36.201-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:21.418-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11478 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:14.101-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:19.610-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="cvs is earlier than 0:1.11.2-14" test_ref="oval:org.mitre.oval:tst:29623"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11477" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an away message with a large number of AIM substitution strings, such as %t or %n.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2103" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2103"/>
        <description>Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an away message with a large number of AIM substitution strings, such as %t or %n.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:44.885-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:35.943-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:21.191-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11477 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:39.764-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:19.264-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gaim is earlier than 1:1.3.1-0.el3.3" test_ref="oval:org.mitre.oval:tst:32063"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gaim is earlier than 1:1.3.1-0.el4.3" test_ref="oval:org.mitre.oval:tst:31738"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11476" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the SSH dissector in Wireshark (aka Ethereal) 0.9.10 to 0.99.0 allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3631" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3631"/>
        <description>Unspecified vulnerability in the SSH dissector in Wireshark (aka Ethereal) 0.9.10 to 0.99.0 allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:09.899-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:35.698-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:20.897-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11476 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:30.727-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:18.827-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.2-EL3.1" test_ref="oval:org.mitre.oval:tst:32882"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.2-EL3.1" test_ref="oval:org.mitre.oval:tst:32738"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.2-EL4.1" test_ref="oval:org.mitre.oval:tst:32917"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.2-EL4.1" test_ref="oval:org.mitre.oval:tst:32447"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11474" version="5" class="vulnerability">
      <metadata>
        <title>Multiple drivers in Linux kernel 2.4.19 and earlier do not properly mark memory with the VM_IO flag, which causes incorrect reference counts and may lead to a denial of service (kernel panic) when accessing freed kernel pages.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1057" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1057"/>
        <description>Multiple drivers in Linux kernel 2.4.19 and earlier do not properly mark memory with the VM_IO flag, which causes incorrect reference counts and may lead to a denial of service (kernel panic) when accessing freed kernel pages.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:39.894-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:35.415-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:20.609-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11474 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:35:02.744-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:18.451-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32525"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32366"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32381"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32215"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32464"/>
          <criterion comment="kernel is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32288"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:31978"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32438"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32070"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11473" version="5" class="vulnerability">
      <metadata>
        <title>fs/exec.c in Linux 2.6, when one thread is tracing another thread that shares the same memory map, might allow local users to cause a denial of service (deadlock) by forcing a core dump when the traced thread is in the TASK_TRACED state.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3107" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3107"/>
        <description>fs/exec.c in Linux 2.6, when one thread is tracing another thread that shares the same memory map, might allow local users to cause a denial of service (deadlock) by forcing a core dump when the traced thread is in the TASK_TRACED state.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:19.325-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:34.978-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:20.214-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11473 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:38.922-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:17.866-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32158"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32589"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32704"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32562"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32078"/>
            <criterion comment="kernel is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32513"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32231"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32097"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32708"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31783"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31876"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31592"/>
            <criterion comment="kernel is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31714"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31522"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31902"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31817"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11471" version="5" class="vulnerability">
      <metadata>
        <title>Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass "restrictions imposed on local HTML files," and obtain sensitive information and prompt users to write this information into a file, via directory traversal sequences in a resource: URI.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4068" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4068"/>
        <description>Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass "restrictions imposed on local HTML files," and obtain sensitive information and prompt users to write this information into a file, via directory traversal sequences in a resource: URI.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:56.709-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:34.358-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:19.104-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11471 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:45.304-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:17.015-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37411"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36691"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37031"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37528"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36726"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37435"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37680"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36725"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37449"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37356"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.10.el4" test_ref="oval:org.mitre.oval:tst:37564"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:36913"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-16.el4" test_ref="oval:org.mitre.oval:tst:37634"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37609"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.10.el4" test_ref="oval:org.mitre.oval:tst:37306"/>
            <criterion comment="firefox is earlier than 0:3.0.2-3.el4" test_ref="oval:org.mitre.oval:tst:37195"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37499"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37444"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37543"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37552"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-19.el5" test_ref="oval:org.mitre.oval:tst:37248"/>
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37486"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37495"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37044"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.17-1.el5" test_ref="oval:org.mitre.oval:tst:37230"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37578"/>
            <criterion comment="yelp is earlier than 0:2.16.0-21.el5" test_ref="oval:org.mitre.oval:tst:37584"/>
            <criterion comment="devhelp is earlier than 0:0.12-19.el5" test_ref="oval:org.mitre.oval:tst:37353"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37406"/>
            <criterion comment="firefox is earlier than 0:3.0.2-3.el5" test_ref="oval:org.mitre.oval:tst:37225"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:36664"/>
            <criterion comment="nss-tools is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37664"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11470" version="5" class="vulnerability">
      <metadata>
        <title>CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary IMAP commands via newline characters in the mailbox parameter of the sqimap_mailbox_select command, aka "IMAP injection."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0377" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0377"/>
        <description>CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary IMAP commands via newline characters in the mailbox parameter of the sqimap_mailbox_select command, aka "IMAP injection."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:44.957-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:34.129-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:18.818-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11470 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:13.503-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:16.657-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.6-5.el3" test_ref="oval:org.mitre.oval:tst:32265"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.6-5.el4" test_ref="oval:org.mitre.oval:tst:32721"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1147" version="1" class="vulnerability">
      <metadata>
        <title>HP-UX wuftpd Privilege Escalation Vulnerability (B.11.11)</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
          <product>ftpd</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0148" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0148"/>
        <description>wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-01-30T07:20:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-02-01T09:08:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-03-09T12:19:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.11">
          <criteria operator="AND" comment="700 Series OS Release 11.11">
            <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
            <criterion comment="HP Release B.11.11" negate="false" test_ref="oval:org.mitre.oval:tst:2514"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 11.11">
            <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
            <criterion comment="HP Release B.11.11" negate="false" test_ref="oval:org.mitre.oval:tst:2514"/>
          </criteria>
        </criteria>
        <criterion comment="WUFTP-26.INETSVCS-FTP with version less than B.11.00.01.004 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1124"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11468" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2) teTeX might allow user-assisted remote attackers to execute arbitrary code via a crafted DVI file that triggers a heap-based buffer overflow.  NOTE: some of these details are obtained from third party information.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0739" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0739"/>
        <description>Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2) teTeX might allow user-assisted remote attackers to execute arbitrary code via a crafted DVI file that triggers a heap-based buffer overflow.  NOTE: some of these details are obtained from third party information.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:39.281-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:33.623-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:18.334-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11468 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:45.677-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:15.964-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:39543"/>
            <criterion comment="tetex-afm is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40329"/>
            <criterion comment="tetex-xdvi is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40000"/>
            <criterion comment="tetex-dvips is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40032"/>
            <criterion comment="tetex-doc is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40150"/>
            <criterion comment="tetex-fonts is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40389"/>
            <criterion comment="tetex is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40303"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40095"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40209"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40364"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:39528"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40077"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40473"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40316"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40444"/>
            <criterion comment="tetex-afm is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40008"/>
            <criterion comment="tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:39920"/>
            <criterion comment="tetex-dvips is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40312"/>
            <criterion comment="tetex-doc is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40398"/>
            <criterion comment="tetex-fonts is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40122"/>
            <criterion comment="tetex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40413"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11467" version="5" class="vulnerability">
      <metadata>
        <title>mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error page, allows remote attackers to cause a denial of service (application crash) via a non-SSL request to an SSL port, which triggers a NULL pointer dereference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3357" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3357"/>
        <description>mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error page, allows remote attackers to cause a denial of service (application crash) via a non-SSL request to an SSL port, which triggers a NULL pointer dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:52.641-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:33.333-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:17.978-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11467 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:49.890-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:15.535-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-devel is earlier than 0:2.0.46-56.ent" test_ref="oval:org.mitre.oval:tst:32315"/>
            <criterion comment="mod_ssl is earlier than 1:2.0.46-56.ent" test_ref="oval:org.mitre.oval:tst:32356"/>
            <criterion comment="httpd is earlier than 0:2.0.46-56.ent" test_ref="oval:org.mitre.oval:tst:32098"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-suexec is earlier than 0:2.0.52-22.ent" test_ref="oval:org.mitre.oval:tst:32426"/>
            <criterion comment="httpd-manual is earlier than 0:2.0.52-22.ent" test_ref="oval:org.mitre.oval:tst:31907"/>
            <criterion comment="httpd-devel is earlier than 0:2.0.52-22.ent" test_ref="oval:org.mitre.oval:tst:31584"/>
            <criterion comment="mod_ssl is earlier than 1:2.0.52-22.ent" test_ref="oval:org.mitre.oval:tst:32282"/>
            <criterion comment="httpd is earlier than 0:2.0.52-22.ent" test_ref="oval:org.mitre.oval:tst:32132"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11466" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicode_resize function and the PyMem_RESIZE macro.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3142" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3142"/>
        <description>Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicode_resize function and the PyMem_RESIZE macro.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:01.314-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:32.908-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:17.570-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11466 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:16.225-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:14.904-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38704"/>
            <criterion comment="tkinter is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38695"/>
            <criterion comment="python-tools is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38872"/>
            <criterion comment="python is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38617"/>
            <criterion comment="python-docs is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:37965"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38916"/>
            <criterion comment="tkinter is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38703"/>
            <criterion comment="python-tools is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38787"/>
            <criterion comment="python is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38939"/>
            <criterion comment="python-docs is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38081"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38889"/>
            <criterion comment="tkinter is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38958"/>
            <criterion comment="python-tools is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38827"/>
            <criterion comment="python is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38282"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11465" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows that trigger a heap-based buffer overflow, a related issue to CVE-2009-2412.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2411" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2411"/>
        <description>Multiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows that trigger a heap-based buffer overflow, a related issue to CVE-2009-2412.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:33.378-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:32.194-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:17.241-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11465 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:12:48.249-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:14.421-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="subversion-devel is earlier than 0:1.1.4-3.el4_8.2" test_ref="oval:org.mitre.oval:tst:38517"/>
            <criterion comment="mod_dav_svn is earlier than 0:1.1.4-3.el4_8.2" test_ref="oval:org.mitre.oval:tst:38702"/>
            <criterion comment="subversion-perl is earlier than 0:1.1.4-3.el4_8.2" test_ref="oval:org.mitre.oval:tst:39100"/>
            <criterion comment="subversion is earlier than 0:1.1.4-3.el4_8.2" test_ref="oval:org.mitre.oval:tst:38928"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="subversion-ruby is earlier than 0:1.4.2-4.el5_3.1" test_ref="oval:org.mitre.oval:tst:38842"/>
            <criterion comment="subversion-javahl is earlier than 0:1.4.2-4.el5_3.1" test_ref="oval:org.mitre.oval:tst:38861"/>
            <criterion comment="subversion-devel is earlier than 0:1.4.2-4.el5_3.1" test_ref="oval:org.mitre.oval:tst:38978"/>
            <criterion comment="mod_dav_svn is earlier than 0:1.4.2-4.el5_3.1" test_ref="oval:org.mitre.oval:tst:38984"/>
            <criterion comment="subversion-perl is earlier than 0:1.4.2-4.el5_3.1" test_ref="oval:org.mitre.oval:tst:39069"/>
            <criterion comment="subversion is earlier than 0:1.4.2-4.el5_3.1" test_ref="oval:org.mitre.oval:tst:38651"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11464" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the read_rle16 function in imagetops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via an SGI image with malformed Run Length Encoded (RLE) data containing a small image and a large row count.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3639" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3639"/>
        <description>Heap-based buffer overflow in the read_rle16 function in imagetops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via an SGI image with malformed Run Length Encoded (RLE) data containing a small image and a large row count.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:50.274-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:31.687-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:16.855-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11464 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:31.596-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:13.807-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.54" test_ref="oval:org.mitre.oval:tst:37294"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.54" test_ref="oval:org.mitre.oval:tst:37772"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.54" test_ref="oval:org.mitre.oval:tst:37394"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.1" test_ref="oval:org.mitre.oval:tst:37546"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.1" test_ref="oval:org.mitre.oval:tst:37714"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.1" test_ref="oval:org.mitre.oval:tst:37699"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-lpd is earlier than 1:1.2.4-11.18.el5_2.2" test_ref="oval:org.mitre.oval:tst:37215"/>
            <criterion comment="cups-devel is earlier than 1:1.2.4-11.18.el5_2.2" test_ref="oval:org.mitre.oval:tst:37378"/>
            <criterion comment="cups is earlier than 1:1.2.4-11.18.el5_2.2" test_ref="oval:org.mitre.oval:tst:37794"/>
            <criterion comment="cups-libs is earlier than 1:1.2.4-11.18.el5_2.2" test_ref="oval:org.mitre.oval:tst:37702"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11463" version="5" class="vulnerability">
      <metadata>
        <title>Vixie Cron before 4.1-r10 on Gentoo Linux is installed with insecure permissions, which allows local users to cause a denial of service (cron failure) by creating hard links, which results in a failed st_nlink check in database.c.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1856" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1856"/>
        <description>Vixie Cron before 4.1-r10 on Gentoo Linux is installed with insecure permissions, which allows local users to cause a denial of service (cron failure) by creating hard links, which results in a failed st_nlink check in database.c.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:25.917-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:31.425-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:16.591-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11463 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:17.997-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:13.362-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="vixie-cron is earlier than 0:4.1-19.EL3" test_ref="oval:org.mitre.oval:tst:33912"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="vixie-cron is earlier than 4:4.1-47.EL4" test_ref="oval:org.mitre.oval:tst:33630"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="vixie-cron is earlier than 4:4.1-70.el5" test_ref="oval:org.mitre.oval:tst:34161"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11462" version="5" class="vulnerability">
      <metadata>
        <title>Multiple vulnerabilities in multiple vendor implementations of the Secure/Multipurpose Internet Mail Extensions (S/MIME) protocol allow remote attackers to cause a denial of service and possibly execute arbitrary code via an S/MIME email message containing certain unexpected ASN.1 constructs, as demonstrated using the NISSC test suite.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0564" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0564"/>
        <description>Multiple vulnerabilities in multiple vendor implementations of the Secure/Multipurpose Internet Mail Extensions (S/MIME) protocol allow remote attackers to cause a denial of service and possibly execute arbitrary code via an S/MIME email message containing certain unexpected ASN.1 constructs, as demonstrated using the NISSC test suite.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:44.514-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:31.134-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:16.187-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11462 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:50.312-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:12.944-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mozilla-js-debugger is earlier than 37:1.4.2-3.0.2" test_ref="oval:org.mitre.oval:tst:30703"/>
          <criterion comment="mozilla is earlier than 37:1.4.2-3.0.2" test_ref="oval:org.mitre.oval:tst:30682"/>
          <criterion comment="mozilla-chat is earlier than 37:1.4.2-3.0.2" test_ref="oval:org.mitre.oval:tst:29813"/>
          <criterion comment="mozilla-mail is earlier than 37:1.4.2-3.0.2" test_ref="oval:org.mitre.oval:tst:29961"/>
          <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.2-3.0.2" test_ref="oval:org.mitre.oval:tst:30646"/>
          <criterion comment="mozilla-nss is earlier than 37:1.4.2-3.0.2" test_ref="oval:org.mitre.oval:tst:30390"/>
          <criterion comment="mozilla-nss-devel is earlier than 37:1.4.2-3.0.2" test_ref="oval:org.mitre.oval:tst:30528"/>
          <criterion comment="mozilla-nspr is earlier than 37:1.4.2-3.0.2" test_ref="oval:org.mitre.oval:tst:30482"/>
          <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.2-3.0.2" test_ref="oval:org.mitre.oval:tst:30659"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1146" version="9" class="vulnerability">
      <metadata>
        <title>FTP Download Destination Tampering Vulnerability (Windows 2000)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2126" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2126"/>
        <description>The FTP client in Windows XP SP1 and Server 2003, and Internet Explorer 6 SP1 on Windows 2000 SP4, when "Enable Folder View for FTP Sites" is enabled and the user manually initiates a file transfer, allows user-assisted, remote FTP servers to overwrite files in arbitrary locations via crafted filenames.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-10-12T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-10-19T05:46:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-08-31T12:00:00.000-04:00" comment="removed an incorrect leading ^ from the value entity of ste:2402">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-08-31T00:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:12.684-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:45:56.043-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:33.467-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1146 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:04:42.834-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:24.976-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:40.547-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:09.447-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="Win2K/XP/2003 service pack 4 is installed" test_ref="oval:org.mitre.oval:tst:2569"/>
        <criterion comment="Internet Explorer 6 Service Pack 1 is installed" test_ref="oval:org.mitre.oval:tst:2919"/>
        <criterion comment="msieftp.dll is less than 5.50.4956.500" test_ref="oval:org.mitre.oval:tst:1125"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11459" version="5" class="vulnerability">
      <metadata>
        <title>XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the getpwuid function in drivers/lock.c when there is no network connectivity, which causes XScreenSaver to crash and unlock the screen and allows local users to bypass authentication.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1859" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1859"/>
        <description>XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the getpwuid function in drivers/lock.c when there is no network connectivity, which causes XScreenSaver to crash and unlock the screen and allows local users to bypass authentication.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:22.739-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:30.869-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:15.911-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11459 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:23.190-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:12.417-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="xscreensaver is earlier than 1:4.10-21.el3" test_ref="oval:org.mitre.oval:tst:33474"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="xscreensaver is earlier than 1:4.18-5.rhel4.14" test_ref="oval:org.mitre.oval:tst:33891"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11458" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0488" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0488"/>
        <description>Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:50.122-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:30.664-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:15.694-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11458 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:46.966-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:12.127-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="httpd-devel is earlier than 0:2.0.46-32.ent.3" test_ref="oval:org.mitre.oval:tst:30694"/>
          <criterion comment="mod_ssl is earlier than 1:2.0.46-32.ent.3" test_ref="oval:org.mitre.oval:tst:30285"/>
          <criterion comment="httpd is earlier than 0:2.0.46-32.ent.3" test_ref="oval:org.mitre.oval:tst:30628"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11457" version="5" class="vulnerability">
      <metadata>
        <title>The default configuration for autofs 5 (autofs5) in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 4 and 5, does not specify the nodev mount option for the -hosts map, which allows local users to access "important devices" by operating a remote NFS server and creating special device files on that server, as demonstrated by the /dev/mem device.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6285" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6285"/>
        <description>The default configuration for autofs 5 (autofs5) in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 4 and 5, does not specify the nodev mount option for the -hosts map, which allows local users to access "important devices" by operating a remote NFS server and creating special device files on that server, as demonstrated by the /dev/mem device.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:45.683-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:30.449-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:15.466-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11457 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:32.123-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:11.685-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="autofs5 is earlier than 1:5.0.1-0.rc2.55.el4_6.2" test_ref="oval:org.mitre.oval:tst:35487"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="autofs is earlier than 1:5.0.1-0.rc2.55.el5.2" test_ref="oval:org.mitre.oval:tst:35727"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11456" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in the command-line client in MySQL 5.0.26 through 5.0.45, and other versions including versions later than 5.0.45, when the --html option is enabled, allows attackers to inject arbitrary web script or HTML by placing it in a database cell, which might be accessed by this client when composing an HTML document.  NOTE: as of 20081031, the issue has not been fixed in MySQL 5.0.67.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4456"/>
        <description>Cross-site scripting (XSS) vulnerability in the command-line client in MySQL 5.0.26 through 5.0.45, and other versions including versions later than 5.0.45, when the --html option is enabled, allows attackers to inject arbitrary web script or HTML by placing it in a database cell, which might be accessed by this client when composing an HTML document.  NOTE: as of 20081031, the issue has not been fixed in MySQL 5.0.67.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:41.009-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:30.148-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:15.144-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11456 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:12:41.260-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:11.217-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mysql is earlier than 0:4.1.22-2.el4_8.3" test_ref="oval:org.mitre.oval:tst:39929"/>
            <criterion comment="mysql-devel is earlier than 0:4.1.22-2.el4_8.3" test_ref="oval:org.mitre.oval:tst:39985"/>
            <criterion comment="mysql-bench is earlier than 0:4.1.22-2.el4_8.3" test_ref="oval:org.mitre.oval:tst:40068"/>
            <criterion comment="mysql-server is earlier than 0:4.1.22-2.el4_8.3" test_ref="oval:org.mitre.oval:tst:40047"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mysql is earlier than 0:5.0.77-3.el5" test_ref="oval:org.mitre.oval:tst:39025"/>
            <criterion comment="mysql-devel is earlier than 0:5.0.77-3.el5" test_ref="oval:org.mitre.oval:tst:39228"/>
            <criterion comment="mysql-test is earlier than 0:5.0.77-3.el5" test_ref="oval:org.mitre.oval:tst:38934"/>
            <criterion comment="mysql-bench is earlier than 0:5.0.77-3.el5" test_ref="oval:org.mitre.oval:tst:39199"/>
            <criterion comment="mysql-server is earlier than 0:5.0.77-3.el5" test_ref="oval:org.mitre.oval:tst:39156"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11455" version="5" class="vulnerability">
      <metadata>
        <title>mm/mmap.c in the hugetlb kernel, when run on PowerPC systems, does not prevent stack expansion from entering into reserved kernel page memory, which allows local users to cause a denial of service (OOPS) via unspecified vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3739" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3739"/>
        <description>mm/mmap.c in the hugetlb kernel, when run on PowerPC systems, does not prevent stack expansion from entering into reserved kernel page memory, which allows local users to cause a denial of service (OOPS) via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:57.557-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:29.509-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:14.502-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11455 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:11.117-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:10.320-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35660"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35620"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35663"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35627"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35653"/>
            <criterion comment="kernel is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35769"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35035"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35699"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:34809"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34864"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35017"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35145"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34442"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35258"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35254"/>
            <criterion comment="kernel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35373"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34480"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34911"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34923"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35327"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34804"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34557"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34837"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34795"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34562"/>
            <criterion comment="kernel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34357"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34379"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34873"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34870"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34374"/>
            <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34337"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11454" version="5" class="vulnerability">
      <metadata>
        <title>The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote attackers to force a client and server to use a weaker protocol than needed via a man-in-the-middle attack.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2969" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2969"/>
        <description>The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote attackers to force a client and server to use a weaker protocol than needed via a man-in-the-middle attack.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:02.259-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:29.213-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:14.201-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11454 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:48.326-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:09.450-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.7a-33.17" test_ref="oval:org.mitre.oval:tst:32376"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.7a-33.17" test_ref="oval:org.mitre.oval:tst:32370"/>
            <criterion comment="openssl is earlier than 0:0.9.7a-33.17" test_ref="oval:org.mitre.oval:tst:32357"/>
            <criterion comment="openssl096b is earlier than 0:0.9.6b-16.22.4" test_ref="oval:org.mitre.oval:tst:32193"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.7a-43.4" test_ref="oval:org.mitre.oval:tst:31576"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.7a-43.4" test_ref="oval:org.mitre.oval:tst:31826"/>
            <criterion comment="openssl is earlier than 0:0.9.7a-43.4" test_ref="oval:org.mitre.oval:tst:32196"/>
            <criterion comment="openssl096b is earlier than 0:0.9.6b-22.4" test_ref="oval:org.mitre.oval:tst:32241"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11453" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in Xiph.Org libvorbis before 1.2.0 allow context-dependent attackers to cause a denial of service or have other unspecified impact via a crafted OGG file, aka trac Changesets 13162, 13168, 13169, 13170, 13172, 13211, and 13215, as demonstrated by an overflow in oggenc.exe related to the _psy_noiseguards_8 array.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4066" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4066"/>
        <description>Multiple buffer overflows in Xiph.Org libvorbis before 1.2.0 allow context-dependent attackers to cause a denial of service or have other unspecified impact via a crafted OGG file, aka trac Changesets 13162, 13168, 13169, 13170, 13172, 13211, and 13215, as demonstrated by an overflow in oggenc.exe related to the _psy_noiseguards_8 array.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:26.945-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:28.887-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:13.485-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11453 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:51.949-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:08.930-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libvorbis-devel is earlier than 1:1.0-8.el3" test_ref="oval:org.mitre.oval:tst:35005"/>
            <criterion comment="libvorbis is earlier than 1:1.0-8.el3" test_ref="oval:org.mitre.oval:tst:35016"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libvorbis-devel is earlier than 1:1.1.0-2.el4.5" test_ref="oval:org.mitre.oval:tst:34951"/>
            <criterion comment="libvorbis is earlier than 1:1.1.0-2.el4.5" test_ref="oval:org.mitre.oval:tst:34625"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libvorbis-devel is earlier than 1:1.1.2-3.el5.0" test_ref="oval:org.mitre.oval:tst:35046"/>
            <criterion comment="libvorbis is earlier than 1:1.1.2-3.el5.0" test_ref="oval:org.mitre.oval:tst:34551"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11452" version="5" class="vulnerability">
      <metadata>
        <title>The Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy, allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Apache to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2088"/>
        <description>The Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy, allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Apache to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:46.366-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:28.601-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:13.179-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11452 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:17.205-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:08.508-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-devel is earlier than 0:2.0.46-46.2.ent" test_ref="oval:org.mitre.oval:tst:31786"/>
            <criterion comment="mod_ssl is earlier than 1:2.0.46-46.2.ent" test_ref="oval:org.mitre.oval:tst:31975"/>
            <criterion comment="httpd is earlier than 0:2.0.46-46.2.ent" test_ref="oval:org.mitre.oval:tst:31650"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-suexec is earlier than 0:2.0.52-12.1.ent" test_ref="oval:org.mitre.oval:tst:31790"/>
            <criterion comment="httpd-manual is earlier than 0:2.0.52-12.1.ent" test_ref="oval:org.mitre.oval:tst:31890"/>
            <criterion comment="httpd-devel is earlier than 0:2.0.52-12.1.ent" test_ref="oval:org.mitre.oval:tst:31948"/>
            <criterion comment="mod_ssl is earlier than 1:2.0.52-12.1.ent" test_ref="oval:org.mitre.oval:tst:31906"/>
            <criterion comment="httpd is earlier than 0:2.0.52-12.1.ent" test_ref="oval:org.mitre.oval:tst:32146"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11451" version="5" class="vulnerability">
      <metadata>
        <title>Use-after-free vulnerability in the gss_indicate_mechs function in lib/gssapi/mechglue/g_initialize.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors.  NOTE: this might be the result of a typo in the source code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5901" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5901"/>
        <description>Use-after-free vulnerability in the gss_indicate_mechs function in lib/gssapi/mechglue/g_initialize.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors.  NOTE: this might be the result of a typo in the source code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:48.362-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:28.370-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:12.883-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11451 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:48.367-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:08.176-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="krb5-workstation is earlier than 0:1.6.1-17.el5_1.1" test_ref="oval:org.mitre.oval:tst:36318"/>
          <criterion comment="krb5 is earlier than 0:1.6.1-17.el5_1.1" test_ref="oval:org.mitre.oval:tst:36285"/>
          <criterion comment="krb5-libs is earlier than 0:1.6.1-17.el5_1.1" test_ref="oval:org.mitre.oval:tst:36069"/>
          <criterion comment="krb5-server is earlier than 0:1.6.1-17.el5_1.1" test_ref="oval:org.mitre.oval:tst:36233"/>
          <criterion comment="krb5-devel is earlier than 0:1.6.1-17.el5_1.1" test_ref="oval:org.mitre.oval:tst:36199"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11450" version="5" class="vulnerability">
      <metadata>
        <title>ext/openssl/ossl_ocsp.c in Ruby 1.8 and 1.9 does not properly check the return value from the OCSP_basic_verify function, which might allow remote attackers to successfully present an invalid X.509 certificate, possibly involving a revoked certificate.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0642" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0642"/>
        <description>ext/openssl/ossl_ocsp.c in Ruby 1.8 and 1.9 does not properly check the return value from the OCSP_basic_verify function, which might allow remote attackers to successfully present an invalid X.509 certificate, possibly involving a revoked certificate.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:24.949-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:27.936-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:12.485-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11450 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:09.106-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:07.568-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.8.1-7.el4_8.3" test_ref="oval:org.mitre.oval:tst:38694"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.1-7.el4_8.3" test_ref="oval:org.mitre.oval:tst:38591"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.1-7.el4_8.3" test_ref="oval:org.mitre.oval:tst:38715"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.1-7.el4_8.3" test_ref="oval:org.mitre.oval:tst:38523"/>
            <criterion comment="ruby is earlier than 0:1.8.1-7.el4_8.3" test_ref="oval:org.mitre.oval:tst:38864"/>
            <criterion comment="irb is earlier than 0:1.8.1-7.el4_8.3" test_ref="oval:org.mitre.oval:tst:38549"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.1-7.el4_8.3" test_ref="oval:org.mitre.oval:tst:38837"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-ri is earlier than 0:1.8.5-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:38178"/>
            <criterion comment="ruby-mode is earlier than 0:1.8.5-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:38751"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.5-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:38045"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.5-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:38362"/>
            <criterion comment="ruby is earlier than 0:1.8.5-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:38133"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.5-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:38911"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.5-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:38738"/>
            <criterion comment="ruby-irb is earlier than 0:1.8.5-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:38574"/>
            <criterion comment="ruby-rdoc is earlier than 0:1.8.5-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:38762"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1145" version="4" class="vulnerability">
      <metadata>
        <title>ISA Server Poison Cache Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Security and Acceleration Server 2000</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1215" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1215"/>
        <description>Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP request packet containing multiple Content-Length headers.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-06-23T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2005-06-29T04:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-07-27T04:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T04:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-19T04:00:00.000-04:00" comment="modified wft-81 - Removed extra trailing \\ on registry component.">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1145 - Corrected capitalization and extra spacing errors in product names" date="2011-04-08T16:13:00.153-04:00">
              <contributor organization="AIST">Akihito Nakamura</contributor>
            </modified>
            <status_change date="2011-04-08T16:17:38.277-04:00">INTERIM</status_change>
            <status_change date="2011-04-25T04:00:03.443-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="ISA Server 2000 SP2 (or earlier) is installed" test_ref="oval:org.mitre.oval:tst:2611"/>
        <criterion comment="the version of w3proxy.exe is less than 3.0.1200.430" test_ref="oval:org.mitre.oval:tst:2610"/>
        <criterion negate="true" comment="the patch KB899753 is installed" test_ref="oval:org.mitre.oval:tst:2609"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11449" version="5" class="vulnerability">
      <metadata>
        <title>lib/info.c in libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via invalid (1) blocksize_0 and (2) blocksize_1 values, which trigger a "heap overwrite" in the _01inverse function in res0.c.  NOTE: this issue has been RECAST so that CVE-2007-4029 handles additional vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3106" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3106"/>
        <description>lib/info.c in libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via invalid (1) blocksize_0 and (2) blocksize_1 values, which trigger a "heap overwrite" in the _01inverse function in res0.c.  NOTE: this issue has been RECAST so that CVE-2007-4029 handles additional vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:08.943-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:27.632-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:12.181-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11449 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:47.447-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:07.087-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libvorbis-devel is earlier than 1:1.0-8.el3" test_ref="oval:org.mitre.oval:tst:35005"/>
            <criterion comment="libvorbis is earlier than 1:1.0-8.el3" test_ref="oval:org.mitre.oval:tst:35016"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libvorbis-devel is earlier than 1:1.1.0-2.el4.5" test_ref="oval:org.mitre.oval:tst:34951"/>
            <criterion comment="libvorbis is earlier than 1:1.1.0-2.el4.5" test_ref="oval:org.mitre.oval:tst:34625"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libvorbis-devel is earlier than 1:1.1.2-3.el5.0" test_ref="oval:org.mitre.oval:tst:35046"/>
            <criterion comment="libvorbis is earlier than 1:1.1.2-3.el5.0" test_ref="oval:org.mitre.oval:tst:34551"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11448" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail 1.4.0 through 1.4.9a allows remote attackers to send e-mails from arbitrary users via certain data in the SRC attribute of an IMG element.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2589" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2589"/>
        <description>Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail 1.4.0 through 1.4.9a allows remote attackers to send e-mails from arbitrary users via certain data in the SRC attribute of an IMG element.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:41.401-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:27.378-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:11.881-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11448 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:37.375-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:06.581-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-6.el3" test_ref="oval:org.mitre.oval:tst:33850"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-4.0.1.el4" test_ref="oval:org.mitre.oval:tst:33871"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-4.0.1.el5" test_ref="oval:org.mitre.oval:tst:34227"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11446" version="5" class="vulnerability">
      <metadata>
        <title>SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, with unknown impact, probably via abook_database.php.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0521" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0521"/>
        <description>SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, with unknown impact, probably via abook_database.php.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:56.419-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:27.203-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:11.688-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11446 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:38.519-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:06.298-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="squirrelmail is earlier than 0:1.4.3-0.e3.1" test_ref="oval:org.mitre.oval:tst:29772"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11445" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0600" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0600"/>
        <description>Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:44.723-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:26.952-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:11.459-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11445 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:18:51.618-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:05.944-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="samba-common is earlier than 0:3.0.4-6.3E" test_ref="oval:org.mitre.oval:tst:30711"/>
          <criterion comment="samba-swat is earlier than 0:3.0.4-6.3E" test_ref="oval:org.mitre.oval:tst:30328"/>
          <criterion comment="samba-client is earlier than 0:3.0.4-6.3E" test_ref="oval:org.mitre.oval:tst:30674"/>
          <criterion comment="samba is earlier than 0:3.0.4-6.3E" test_ref="oval:org.mitre.oval:tst:30601"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11444" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the embedded player in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, and Helix Player allows remote malicious servers to cause a denial of service (crash) and possibly execute arbitrary code via a chunked Transfer-Encoding HTTP response in which either (1) the chunk header length is specified as -1, (2) the chunk header with a length that is less than the actual amount of sent data, or (3) a missing chunk header.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2922" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2922"/>
        <description>Heap-based buffer overflow in the embedded player in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, and Helix Player allows remote malicious servers to cause a denial of service (crash) and possibly execute arbitrary code via a chunked Transfer-Encoding HTTP response in which either (1) the chunk header length is specified as -1, (2) the chunk header with a length that is less than the actual amount of sent data, or (3) a missing chunk header.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:34.199-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:26.766-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:11.267-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11444 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:35.174-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:05.657-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="HelixPlayer is earlier than 1:1.0.6-0.EL4.1" test_ref="oval:org.mitre.oval:tst:31952"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11443" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5, when running on Linux systems with gnome-vfs support, might allow remote attackers to read arbitrary files on SSH/sftp servers that accept key authentication by creating a web page on the target server, in which the web page contains URIs with (1) smb: or (2) sftp: schemes that access other files from the server.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5337" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5337"/>
        <description>Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5, when running on Linux systems with gnome-vfs support, might allow remote attackers to read arbitrary files on SSH/sftp servers that accept key authentication by creating a web page on the target server, in which the web page contains URIs with (1) smb: or (2) sftp: schemes that access other files from the server.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:00.169-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:26.137-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:10.659-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11443 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:42.239-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:04.901-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35512"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35540"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35394"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35541"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35241"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35553"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35552"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:34924"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35155"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35441"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35489"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35324"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-0.5.el4" test_ref="oval:org.mitre.oval:tst:35240"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35182"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35311"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35454"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.7.el4" test_ref="oval:org.mitre.oval:tst:35398"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35351"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35482"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:34790"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35291"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:34577"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-6.el5" test_ref="oval:org.mitre.oval:tst:35262"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-6.el5" test_ref="oval:org.mitre.oval:tst:35202"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-5.el5" test_ref="oval:org.mitre.oval:tst:35177"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11442" version="5" class="vulnerability">
      <metadata>
        <title>The RPL dissector in Wireshark (formerly Ethereal) 0.9.8 to 0.99.6 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6450" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6450"/>
        <description>The RPL dissector in Wireshark (formerly Ethereal) 0.9.8 to 0.99.6 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:48.565-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:25.728-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:10.279-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11442 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:33.996-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:04.349-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-EL3.1" test_ref="oval:org.mitre.oval:tst:36111"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-EL3.1" test_ref="oval:org.mitre.oval:tst:36043"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-3.el3" test_ref="oval:org.mitre.oval:tst:35411"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-3.el3" test_ref="oval:org.mitre.oval:tst:36140"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:36051"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:35980"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35669"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35941"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:35709"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:36120"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35712"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35801"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11441" version="5" class="vulnerability">
      <metadata>
        <title>Certain patches for kpdf do not include all relevant patches from xpdf that were associated with CVE-2005-3627, which allows context-dependent attackers to exploit vulnerabilities that were present in CVE-2005-3627.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0746" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0746"/>
        <description>Certain patches for kpdf do not include all relevant patches from xpdf that were associated with CVE-2005-3627, which allows context-dependent attackers to exploit vulnerabilities that were present in CVE-2005-3627.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:18.276-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:25.535-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:10.076-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11441 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:27.719-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:04.040-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-3.9" test_ref="oval:org.mitre.oval:tst:32530"/>
          <criterion comment="kdegraphics is earlier than 7:3.3.1-3.9" test_ref="oval:org.mitre.oval:tst:32495"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11440" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code (JPXStream.c) for xpdf 3.01 and earlier, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, (4) CUPS, and (5) libextractor allows user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with large size values that cause insufficient memory to be allocated.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3193" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3193"/>
        <description>Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code (JPXStream.c) for xpdf 3.01 and earlier, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, (4) CUPS, and (5) libextractor allows user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with large size values that cause insufficient memory to be allocated.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:43.505-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:25.001-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:09.546-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11440 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:07.128-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:03.402-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32436"/>
            <criterion comment="tetex-dvips is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32311"/>
            <criterion comment="tetex-fonts is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32279"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.34" test_ref="oval:org.mitre.oval:tst:32490"/>
            <criterion comment="tetex is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32507"/>
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.34" test_ref="oval:org.mitre.oval:tst:32463"/>
            <criterion comment="tetex-afm is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32377"/>
            <criterion comment="xpdf is earlier than 1:2.02-9.8" test_ref="oval:org.mitre.oval:tst:31474"/>
            <criterion comment="tetex-xdvi is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:31613"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.34" test_ref="oval:org.mitre.oval:tst:31538"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32260"/>
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-3.6" test_ref="oval:org.mitre.oval:tst:32395"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32095"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-3.6" test_ref="oval:org.mitre.oval:tst:31805"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32489"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.9" test_ref="oval:org.mitre.oval:tst:31551"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32199"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-7.3" test_ref="oval:org.mitre.oval:tst:32230"/>
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.9" test_ref="oval:org.mitre.oval:tst:32368"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32308"/>
            <criterion comment="xpdf is earlier than 1:3.00-11.10" test_ref="oval:org.mitre.oval:tst:32152"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32333"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32317"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.9" test_ref="oval:org.mitre.oval:tst:32431"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11437" version="5" class="vulnerability">
      <metadata>
        <title>The Linux kernel 2.6.9 before 2.6.9-67 in Red Hat Enterprise Linux (RHEL) 4 on Itanium (ia64) does not properly handle page faults during NUMA memory access, which allows local users to cause a denial of service (panic) via invalid arguments to set_mempolicy in an MPOL_BIND operation.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4130" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4130"/>
        <description>The Linux kernel 2.6.9 before 2.6.9-67 in Red Hat Enterprise Linux (RHEL) 4 on Itanium (ia64) does not properly handle page faults during NUMA memory access, which allows local users to cause a denial of service (panic) via invalid arguments to set_mempolicy in an MPOL_BIND operation.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:05.736-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:24.676-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:09.230-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11437 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:46.185-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:02.922-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-xenU is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:36090"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35525"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35832"/>
          <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35126"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35901"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:36007"/>
          <criterion comment="kernel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35982"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:36072"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:36041"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35364"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35662"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11436" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in xpcom/io/nsEscape.cpp in the browser engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5017"/>
        <description>Integer overflow in xpcom/io/nsEscape.cpp in the browser engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:02.186-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:24.071-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:08.543-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11436 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:01.656-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:01.894-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37159"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37875"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37293"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37934"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37671"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37932"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37970"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37357"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37852"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37844"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37232"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-3.el4" test_ref="oval:org.mitre.oval:tst:38065"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-17.el4" test_ref="oval:org.mitre.oval:tst:37872"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37914"/>
            <criterion comment="firefox is earlier than 0:3.0.4-1.el4" test_ref="oval:org.mitre.oval:tst:37904"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-3.el4" test_ref="oval:org.mitre.oval:tst:37840"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37991"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37955"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37777"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:38009"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-20.el5" test_ref="oval:org.mitre.oval:tst:37773"/>
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37531"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37899"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37454"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.18-1.el5" test_ref="oval:org.mitre.oval:tst:38015"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:38021"/>
            <criterion comment="yelp is earlier than 0:2.16.0-22.el5" test_ref="oval:org.mitre.oval:tst:37645"/>
            <criterion comment="devhelp is earlier than 0:0.12-20.el5" test_ref="oval:org.mitre.oval:tst:37958"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37388"/>
            <criterion comment="firefox is earlier than 0:3.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37066"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37648"/>
            <criterion comment="nss-tools is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37936"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11433" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to spoof or hide the browser chrome, such as the location bar, by placing XUL popups outside of the browser's content pane.  NOTE: this issue can be leveraged for phishing and other attacks.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2871" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2871"/>
        <description>Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to spoof or hide the browser chrome, such as the location bar, by placing XUL popups outside of the browser's content pane.  NOTE: this issue can be leveraged for phishing and other attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:41.326-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:23.152-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:07.638-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11433 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:17.849-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:01.113-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34409"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34257"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34432"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33988"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33721"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33693"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34313"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34281"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33894"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34228"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.8.el4" test_ref="oval:org.mitre.oval:tst:33625"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:33931"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:33844"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-0.1.el4" test_ref="oval:org.mitre.oval:tst:34331"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34334"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34021"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34249"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.8.el4" test_ref="oval:org.mitre.oval:tst:34293"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.1.el4" test_ref="oval:org.mitre.oval:tst:34371"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34446"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34262"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34366"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:33994"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34322"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-1.el5" test_ref="oval:org.mitre.oval:tst:34445"/>
            <criterion comment="yelp is earlier than 0:2.16.0-15.el5" test_ref="oval:org.mitre.oval:tst:33445"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-11.el5" test_ref="oval:org.mitre.oval:tst:34323"/>
            <criterion comment="devhelp is earlier than 0:0.12-11.el5" test_ref="oval:org.mitre.oval:tst:34204"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-1.el5" test_ref="oval:org.mitre.oval:tst:34162"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-1.el5" test_ref="oval:org.mitre.oval:tst:33979"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11432" version="3" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in RealNetworks RealPlayer 10.0, 10.1, and possibly 10.5, RealOne Player, and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an SWF (Flash) file with malformed record headers.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2263" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2263"/>
        <description>Heap-based buffer overflow in RealNetworks RealPlayer 10.0, 10.1, and possibly 10.5, RealOne Player, and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an SWF (Flash) file with malformed record headers.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:42.681-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:22.819-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:07.381-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criterion comment="realplayer is earlier than 0:10.0.9-0.rhel3.4" test_ref="oval:org.mitre.oval:tst:34710"/>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criterion comment="RealPlayer is earlier than 0:10.0.9-2" test_ref="oval:org.mitre.oval:tst:34808"/>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criterion comment="RealPlayer is earlier than 0:10.0.9-3.el5" test_ref="oval:org.mitre.oval:tst:35065"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11431" version="5" class="vulnerability">
      <metadata>
        <title>The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows remote attackers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1562" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1562"/>
        <description>The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows remote attackers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:34.326-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:22.247-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:06.767-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11431 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:18:50.478-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:14:00.295-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34409"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34257"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34432"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33988"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33721"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33693"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34313"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34281"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33894"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34228"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.8.el4" test_ref="oval:org.mitre.oval:tst:33625"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:33931"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:33844"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34334"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34021"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34249"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.8.el4" test_ref="oval:org.mitre.oval:tst:34293"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.1.el4" test_ref="oval:org.mitre.oval:tst:34371"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34446"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34262"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34366"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:33994"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34322"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-1.el5" test_ref="oval:org.mitre.oval:tst:34445"/>
            <criterion comment="yelp is earlier than 0:2.16.0-15.el5" test_ref="oval:org.mitre.oval:tst:33445"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-11.el5" test_ref="oval:org.mitre.oval:tst:34323"/>
            <criterion comment="devhelp is earlier than 0:0.12-11.el5" test_ref="oval:org.mitre.oval:tst:34204"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-1.el5" test_ref="oval:org.mitre.oval:tst:34162"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11430" version="5" class="vulnerability">
      <metadata>
        <title>The MMIO instruction decoder in the Xen hypervisor in the Linux kernel 2.6.18 in Red Hat Enterprise Linux (RHEL) 5 allows guest OS users to cause a denial of service (32-bit guest OS crash) via vectors that trigger an unspecified instruction emulation.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0730" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0730"/>
        <description>The MMIO instruction decoder in the Xen hypervisor in the Linux kernel 2.6.18 in Red Hat Enterprise Linux (RHEL) 5 allows guest OS users to cause a denial of service (32-bit guest OS crash) via vectors that trigger an unspecified instruction emulation.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:36.196-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:21.878-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:06.439-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11430 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:20.693-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:59.780-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:39968"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40459"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40373"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40487"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40332"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40331"/>
          <criterion comment="kernel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40445"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40493"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40458"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40390"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:39921"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:39890"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11425" version="5" class="vulnerability">
      <metadata>
        <title>backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handled during a "MIN/MAX index optimization."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5540" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5540"/>
        <description>backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handled during a "MIN/MAX index optimization."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:11.954-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:21.124-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:05.187-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11425 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:07.495-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:58.930-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="rh-postgresql-devel is earlier than 0:7.3.18-1" test_ref="oval:org.mitre.oval:tst:33558"/>
            <criterion comment="rh-postgresql-server is earlier than 0:7.3.18-1" test_ref="oval:org.mitre.oval:tst:33220"/>
            <criterion comment="rh-postgresql-python is earlier than 0:7.3.18-1" test_ref="oval:org.mitre.oval:tst:33285"/>
            <criterion comment="rh-postgresql-libs is earlier than 0:7.3.18-1" test_ref="oval:org.mitre.oval:tst:33432"/>
            <criterion comment="rh-postgresql-docs is earlier than 0:7.3.18-1" test_ref="oval:org.mitre.oval:tst:33464"/>
            <criterion comment="rh-postgresql-test is earlier than 0:7.3.18-1" test_ref="oval:org.mitre.oval:tst:33104"/>
            <criterion comment="rh-postgresql-pl is earlier than 0:7.3.18-1" test_ref="oval:org.mitre.oval:tst:33317"/>
            <criterion comment="rh-postgresql-tcl is earlier than 0:7.3.18-1" test_ref="oval:org.mitre.oval:tst:33537"/>
            <criterion comment="rh-postgresql is earlier than 0:7.3.18-1" test_ref="oval:org.mitre.oval:tst:33539"/>
            <criterion comment="rh-postgresql-contrib is earlier than 0:7.3.18-1" test_ref="oval:org.mitre.oval:tst:33243"/>
            <criterion comment="rh-postgresql-jdbc is earlier than 0:7.3.18-1" test_ref="oval:org.mitre.oval:tst:33246"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33442"/>
            <criterion comment="postgresql-docs is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33531"/>
            <criterion comment="postgresql-pl is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33065"/>
            <criterion comment="postgresql-tcl is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32982"/>
            <criterion comment="postgresql-libs is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33144"/>
            <criterion comment="postgresql-contrib is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33007"/>
            <criterion comment="postgresql-python is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33534"/>
            <criterion comment="postgresql-test is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33427"/>
            <criterion comment="postgresql-jdbc is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33173"/>
            <criterion comment="postgresql-server is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33069"/>
            <criterion comment="postgresql-devel is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33496"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33181"/>
            <criterion comment="postgresql-docs is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33488"/>
            <criterion comment="postgresql-pl is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33593"/>
            <criterion comment="postgresql-tcl is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33121"/>
            <criterion comment="postgresql-libs is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33568"/>
            <criterion comment="postgresql-contrib is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33396"/>
            <criterion comment="postgresql-python is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33603"/>
            <criterion comment="postgresql-test is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:32610"/>
            <criterion comment="postgresql-server is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:32997"/>
            <criterion comment="postgresql-devel is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33536"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11424" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a DOM node with a long text value that triggers a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1196"/>
        <description>Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a DOM node with a long text value that triggers a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:53.562-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:20.665-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:04.744-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11424 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:42.666-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:58.370-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.6.4-8.el4" test_ref="oval:org.mitre.oval:tst:40755"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gnome-python2-extras is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40435"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-21.el5" test_ref="oval:org.mitre.oval:tst:40552"/>
            <criterion comment="gnome-python2-libegg is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40721"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.2.4-10.el5" test_ref="oval:org.mitre.oval:tst:40480"/>
            <criterion comment="gnome-python2-gtkhtml2 is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40813"/>
            <criterion comment="totem is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40749"/>
            <criterion comment="xulrunner is earlier than 0:1.9.2.4-10.el5" test_ref="oval:org.mitre.oval:tst:40221"/>
            <criterion comment="gnome-python2-gtkspell is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40385"/>
            <criterion comment="yelp is earlier than 0:2.16.0-26.el5" test_ref="oval:org.mitre.oval:tst:40828"/>
            <criterion comment="devhelp is earlier than 0:0.12-21.el5" test_ref="oval:org.mitre.oval:tst:40814"/>
            <criterion comment="firefox is earlier than 0:3.6.4-8.el5" test_ref="oval:org.mitre.oval:tst:40524"/>
            <criterion comment="totem-mozplugin is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40620"/>
            <criterion comment="gnome-python2-gtkmozembed is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40722"/>
            <criterion comment="esc is earlier than 0:1.1.0-12.el5" test_ref="oval:org.mitre.oval:tst:40273"/>
            <criterion comment="totem-devel is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40637"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11423" version="5" class="vulnerability">
      <metadata>
        <title>The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not perform any security checks related to the same-domain policy, which allows remote attackers to read or access data from other domains via crafted XBL bindings.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5503" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5503"/>
        <description>The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not perform any security checks related to the same-domain policy, which allows remote attackers to read or access data from other domains via crafted XBL bindings.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:51.973-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:20.225-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:04.296-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11423 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:22.808-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:57.693-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38137"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37886"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37999"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37907"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37709"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38092"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37745"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38039"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38062"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38073"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37869"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:38071"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-18.el4" test_ref="oval:org.mitre.oval:tst:37200"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37789"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37395"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:38118"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37812"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="thunderbird is earlier than 0:2.0.0.19-1.el5_2" test_ref="oval:org.mitre.oval:tst:38053"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11422" version="5" class="vulnerability">
      <metadata>
        <title>OpenOffice.org (OOo) Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0239" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0239"/>
        <description>OpenOffice.org (OOo) Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:06.438-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:18.840-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:02.953-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11422 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:32.472-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:56.246-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-38.2.0.EL3" test_ref="oval:org.mitre.oval:tst:33440"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.2-38.2.0.EL3" test_ref="oval:org.mitre.oval:tst:33125"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-38.2.0.EL3" test_ref="oval:org.mitre.oval:tst:33421"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.EL4" test_ref="oval:org.mitre.oval:tst:33334"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.5-10.6.0.EL4" test_ref="oval:org.mitre.oval:tst:33202"/>
            <criterion comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.EL4" test_ref="oval:org.mitre.oval:tst:33265"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.EL4" test_ref="oval:org.mitre.oval:tst:33436"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-langpack-sk_SK is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33388"/>
            <criterion comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33424"/>
            <criterion comment="openoffice.org-langpack-pa_IN is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33485"/>
            <criterion comment="openoffice.org-langpack-hi_IN is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33323"/>
            <criterion comment="openoffice.org-langpack-et_EE is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33367"/>
            <criterion comment="openoffice.org-langpack-kn_IN is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33452"/>
            <criterion comment="openoffice.org is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33446"/>
            <criterion comment="openoffice.org-langpack-zh_TW is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33301"/>
            <criterion comment="openoffice.org-writer is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33679"/>
            <criterion comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33157"/>
            <criterion comment="openoffice.org-langpack-ga_IE is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33463"/>
            <criterion comment="openoffice.org-langpack-ta_IN is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33142"/>
            <criterion comment="openoffice.org-langpack-ko_KR is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33606"/>
            <criterion comment="openoffice.org-langpack-or_IN is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33009"/>
            <criterion comment="openoffice.org-langpack-da_DK is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33302"/>
            <criterion comment="openoffice.org-langpack-sr_CS is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33387"/>
            <criterion comment="openoffice.org-langpack-pl_PL is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33013"/>
            <criterion comment="openoffice.org-langpack-fr is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33611"/>
            <criterion comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33638"/>
            <criterion comment="openoffice.org-javafilter is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33048"/>
            <criterion comment="openoffice.org-langpack-as_IN is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33513"/>
            <criterion comment="openoffice.org-testtools is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33756"/>
            <criterion comment="openoffice.org-langpack-hr_HR is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33355"/>
            <criterion comment="openoffice.org-langpack-de is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33147"/>
            <criterion comment="openoffice.org-emailmerge is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33448"/>
            <criterion comment="openoffice.org-xsltfilter is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33749"/>
            <criterion comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33529"/>
            <criterion comment="openoffice.org-langpack-te_IN is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33254"/>
            <criterion comment="openoffice.org-langpack-sv is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33659"/>
            <criterion comment="openoffice.org-base is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33060"/>
            <criterion comment="openoffice.org-langpack-ca_ES is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33039"/>
            <criterion comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33271"/>
            <criterion comment="openoffice.org-core is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33389"/>
            <criterion comment="openoffice.org-langpack-nl is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33476"/>
            <criterion comment="openoffice.org-langpack-ur is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33477"/>
            <criterion comment="openoffice.org-langpack-nn_NO is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33051"/>
            <criterion comment="openoffice.org-langpack-ar is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33313"/>
            <criterion comment="openoffice.org-langpack-ja_JP is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33511"/>
            <criterion comment="openoffice.org-langpack-gu_IN is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:32740"/>
            <criterion comment="openoffice.org-langpack-tr_TR is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33552"/>
            <criterion comment="openoffice.org-langpack-eu_ES is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33490"/>
            <criterion comment="openoffice.org-langpack-fi_FI is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33514"/>
            <criterion comment="openoffice.org-graphicfilter is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33365"/>
            <criterion comment="openoffice.org-pyuno is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33599"/>
            <criterion comment="openoffice.org-langpack-ml_IN is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33533"/>
            <criterion comment="openoffice.org-langpack-gl_ES is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33023"/>
            <criterion comment="openoffice.org-langpack-zh_CN is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33160"/>
            <criterion comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33553"/>
            <criterion comment="openoffice.org-langpack-it is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33401"/>
            <criterion comment="openoffice.org-langpack-es is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33480"/>
            <criterion comment="openoffice.org-langpack-nb_NO is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33168"/>
            <criterion comment="openoffice.org-langpack-sl_SI is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33643"/>
            <criterion comment="openoffice.org-draw is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33451"/>
            <criterion comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33201"/>
            <criterion comment="openoffice.org-langpack-ms_MY is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33486"/>
            <criterion comment="openoffice.org-langpack-el_GR is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:32762"/>
            <criterion comment="openoffice.org-langpack-hu_HU is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33450"/>
            <criterion comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33579"/>
            <criterion comment="openoffice.org-langpack-bn is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33544"/>
            <criterion comment="openoffice.org-langpack-he_IL is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33358"/>
            <criterion comment="openoffice.org-langpack-pt_PT is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33604"/>
            <criterion comment="openoffice.org-langpack-lt_LT is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33212"/>
            <criterion comment="openoffice.org-langpack-af_ZA is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33377"/>
            <criterion comment="openoffice.org-langpack-bg_BG is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33364"/>
            <criterion comment="openoffice.org-calc is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33111"/>
            <criterion comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33324"/>
            <criterion comment="openoffice.org-langpack-cy_GB is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33471"/>
            <criterion comment="openoffice.org-langpack-mr_IN is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33420"/>
            <criterion comment="openoffice.org-langpack-th_TH is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33670"/>
            <criterion comment="openoffice.org-langpack-pt_BR is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:32682"/>
            <criterion comment="openoffice.org-langpack-ru is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33543"/>
            <criterion comment="openoffice.org-math is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33517"/>
            <criterion comment="openoffice.org-impress is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33393"/>
            <criterion comment="openoffice.org-langpack-st_ZA is earlier than 1:2.0.4-5.4.17.1" test_ref="oval:org.mitre.oval:tst:33484"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11421" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a JavaScript regular expression with a "minimal quantifier."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4565" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4565"/>
        <description>Heap-based buffer overflow in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a JavaScript regular expression with a "minimal quantifier."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:00.538-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:18.329-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:02.435-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11421 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:46.294-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:55.523-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32759"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32989"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32809"/>
            <criterion comment="seamonkey is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32779"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32954"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32668"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:33010"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32811"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32981"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:33061"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.4.el4" test_ref="oval:org.mitre.oval:tst:32072"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:33120"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32842"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:32910"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32677"/>
            <criterion comment="seamonkey is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32933"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32243"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.4.el4" test_ref="oval:org.mitre.oval:tst:33062"/>
            <criterion comment="firefox is earlier than 0:1.5.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:32951"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32978"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:33072"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:33079"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32121"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:33077"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11419" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1, allows remote attackers to execute arbitrary code via .WAV files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0611" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0611"/>
        <description>Heap-based buffer overflow in RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1, allows remote attackers to execute arbitrary code via .WAV files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:21.187-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:18.140-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:02.242-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11419 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:58.150-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:55.223-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="HelixPlayer is earlier than 1:1.0.3-1" test_ref="oval:org.mitre.oval:tst:31595"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11417" version="5" class="vulnerability">
      <metadata>
        <title>stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in stap command-line arguments in a request.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4273" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4273"/>
        <description>stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in stap command-line arguments in a request.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:08.318-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:17.840-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:01.911-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11417 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:55.471-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:54.794-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="systemtap-initscript is earlier than 0:0.9.7-5.el5_4.3" test_ref="oval:org.mitre.oval:tst:39973"/>
          <criterion comment="systemtap-runtime is earlier than 0:0.9.7-5.el5_4.3" test_ref="oval:org.mitre.oval:tst:39856"/>
          <criterion comment="systemtap-testsuite is earlier than 0:0.9.7-5.el5_4.3" test_ref="oval:org.mitre.oval:tst:40046"/>
          <criterion comment="systemtap-client is earlier than 0:0.9.7-5.el5_4.3" test_ref="oval:org.mitre.oval:tst:40146"/>
          <criterion comment="systemtap-sdt-devel is earlier than 0:0.9.7-5.el5_4.3" test_ref="oval:org.mitre.oval:tst:39433"/>
          <criterion comment="systemtap is earlier than 0:0.9.7-5.el5_4.3" test_ref="oval:org.mitre.oval:tst:39868"/>
          <criterion comment="systemtap-server is earlier than 0:0.9.7-5.el5_4.3" test_ref="oval:org.mitre.oval:tst:39484"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11416" version="5" class="vulnerability">
      <metadata>
        <title>The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remote attackers to cause a denial of service (system crash) via an SCTPChunkInit packet containing multiple invalid parameters that require a large amount of error data.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1173" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1173"/>
        <description>The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remote attackers to cause a denial of service (system crash) via an SCTPChunkInit packet containing multiple invalid parameters that require a large amount of error data.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:35.767-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:17.344-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:01.412-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11416 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:19.521-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:54.157-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40810"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40798"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40737"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40705"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40784"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40711"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40801"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40491"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40523"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40665"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.26.EL" test_ref="oval:org.mitre.oval:tst:40648"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40501"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40283"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40807"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40842"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40793"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40732"/>
            <criterion comment="kernel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40830"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40349"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:39978"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:39896"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40791"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40580"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11415" version="5" class="vulnerability">
      <metadata>
        <title>Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving (1) DFSEnum (netdfs_io_dfs_EnumInfo_d), (2) RFNPCNEX (smb_io_notify_option_type_data), (3) LsarAddPrivilegesToAccount (lsa_io_privilege_set), (4) NetSetFileSecurity (sec_io_acl), or (5) LsarLookupSids/LsarLookupSids2 (lsa_io_trans_names).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2446" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2446"/>
        <description>Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving (1) DFSEnum (netdfs_io_dfs_EnumInfo_d), (2) RFNPCNEX (smb_io_notify_option_type_data), (3) LsarAddPrivilegesToAccount (lsa_io_privilege_set), (4) NetSetFileSecurity (sec_io_acl), or (5) LsarLookupSids/LsarLookupSids2 (lsa_io_trans_names).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:35.221-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:16.918-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:01.001-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11415 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:30.070-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:53.562-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.9-1.3E.13.2" test_ref="oval:org.mitre.oval:tst:34247"/>
            <criterion comment="samba-swat is earlier than 0:3.0.9-1.3E.13.2" test_ref="oval:org.mitre.oval:tst:33727"/>
            <criterion comment="samba-client is earlier than 0:3.0.9-1.3E.13.2" test_ref="oval:org.mitre.oval:tst:33913"/>
            <criterion comment="samba is earlier than 0:3.0.9-1.3E.13.2" test_ref="oval:org.mitre.oval:tst:33962"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.10-1.4E.12.2" test_ref="oval:org.mitre.oval:tst:34121"/>
            <criterion comment="samba-swat is earlier than 0:3.0.10-1.4E.12.2" test_ref="oval:org.mitre.oval:tst:34199"/>
            <criterion comment="samba-client is earlier than 0:3.0.10-1.4E.12.2" test_ref="oval:org.mitre.oval:tst:34107"/>
            <criterion comment="samba is earlier than 0:3.0.10-1.4E.12.2" test_ref="oval:org.mitre.oval:tst:34156"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.23c-2.el5.2.0.2" test_ref="oval:org.mitre.oval:tst:34266"/>
            <criterion comment="samba-swat is earlier than 0:3.0.23c-2.el5.2.0.2" test_ref="oval:org.mitre.oval:tst:33487"/>
            <criterion comment="samba-client is earlier than 0:3.0.23c-2.el5.2.0.2" test_ref="oval:org.mitre.oval:tst:33303"/>
            <criterion comment="samba is earlier than 0:3.0.23c-2.el5.2.0.2" test_ref="oval:org.mitre.oval:tst:34130"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11413" version="5" class="vulnerability">
      <metadata>
        <title>CoolKey 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files in the /tmp/.pk11ipc1/ directory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4129" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4129"/>
        <description>CoolKey 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files in the /tmp/.pk11ipc1/ directory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:10.182-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:16.548-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:00.621-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11413 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:28.348-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:53.255-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="coolkey-devel is earlier than 0:1.1.0-5.el5" test_ref="oval:org.mitre.oval:tst:33897"/>
          <criterion comment="coolkey is earlier than 0:1.1.0-5.el5" test_ref="oval:org.mitre.oval:tst:34738"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11410" version="5" class="vulnerability">
      <metadata>
        <title>A regression error in the restore_all code path of the 4/4GB split support for non-hugemem Linux kernels on Red Hat Linux Desktop and Enterprise Linux 4 allows local users to cause a denial of service (panic) via unspecified vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2932" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2932"/>
        <description>A regression error in the restore_all code path of the 4/4GB split support for non-hugemem Linux kernels on Red Hat Linux Desktop and Enterprise Linux 4 allows local users to cause a denial of service (panic) via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:14.510-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:16.273-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:00.327-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11410 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:41.548-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:52.799-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32576"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32814"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32958"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32801"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32865"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32880"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32747"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32200"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32838"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11409" version="3" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Java Runtime Environment Image Parsing Library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allows remote attackers to gain privileges via an untrusted application.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1193" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1193"/>
        <description>Unspecified vulnerability in Java Runtime Environment Image Parsing Library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allows remote attackers to gain privileges via an untrusted application.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:36.226-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:15.341-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:59.427-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36548"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36455"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36295"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36334"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36614"/>
            <criterion comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.14-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36678"/>
            <criterion comment="java-1.5.0-bea is earlier than 0:1.5.0.14-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36732"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36422"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36406"/>
            <criterion comment="java-1.5.0-bea-src is earlier than 0:1.5.0.14-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36696"/>
            <criterion comment="java-1.5.0-ibm is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36155"/>
            <criterion comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.14-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36210"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36267"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35708"/>
            <criterion comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.14-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36565"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36613"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35618"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36509"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36558"/>
            <criterion comment="java-1.6.0-bea-src is earlier than 1:1.6.0.03-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36590"/>
            <criterion comment="java-1.6.0-ibm-accessibility is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36555"/>
            <criterion comment="java-1.6.0-ibm-jdbc is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36414"/>
            <criterion comment="java-1.6.0-ibm-src is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36622"/>
            <criterion comment="java-1.6.0-ibm is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36319"/>
            <criterion comment="java-1.5.0-bea is earlier than 0:1.5.0.14-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36686"/>
            <criterion comment="java-1.6.0-bea-devel is earlier than 1:1.6.0.03-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36423"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36535"/>
            <criterion comment="java-1.6.0-ibm-demo is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36515"/>
            <criterion comment="java-1.6.0-bea-missioncontrol is earlier than 1:1.6.0.03-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36683"/>
            <criterion comment="java-1.6.0-bea-demo is earlier than 1:1.6.0.03-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36331"/>
            <criterion comment="java-1.5.0-ibm-accessibility is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36323"/>
            <criterion comment="java-1.5.0-ibm is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35890"/>
            <criterion comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.14-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36343"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35719"/>
            <criterion comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.14-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36079"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36340"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36485"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35872"/>
            <criterion comment="java-1.6.0-bea is earlier than 1:1.6.0.03-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36195"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36582"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36265"/>
            <criterion comment="java-1.6.0-ibm-javacomm is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36688"/>
            <criterion comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.14-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36494"/>
            <criterion comment="java-1.6.0-ibm-plugin is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36706"/>
            <criterion comment="java-1.6.0-ibm-devel is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36205"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36523"/>
            <criterion comment="java-1.5.0-bea-src is earlier than 0:1.5.0.14-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36580"/>
            <criterion comment="java-1.5.0-bea-missioncontrol is earlier than 0:1.5.0.14-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36047"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35698"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36068"/>
            <criterion comment="java-1.6.0-bea-jdbc is earlier than 1:1.6.0.03-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36658"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36568"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11408" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger memory corruption.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5748" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5748"/>
        <description>Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:58.890-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:14.761-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:58.877-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11408 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:09.436-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:51.881-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:32940"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:33113"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:32275"/>
            <criterion comment="seamonkey is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:33128"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:32259"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:32596"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:33188"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:32780"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:33131"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:33022"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.5.el4" test_ref="oval:org.mitre.oval:tst:33198"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33241"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33268"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.8-0.1.el4" test_ref="oval:org.mitre.oval:tst:33216"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:32752"/>
            <criterion comment="seamonkey is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:32536"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:32857"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.5.el4" test_ref="oval:org.mitre.oval:tst:33185"/>
            <criterion comment="firefox is earlier than 0:1.5.0.8-0.1.el4" test_ref="oval:org.mitre.oval:tst:33140"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33088"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33118"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33171"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:32856"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33214"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11407" version="5" class="vulnerability">
      <metadata>
        <title>Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers bypass the user's intended privacy and security policy by using cookies in e-mail messages.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0149" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0149"/>
        <description>Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers bypass the user's intended privacy and security policy by using cookies in e-mail messages.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:52.110-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:14.250-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:58.365-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11407 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:18:46.940-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:51.247-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:30819"/>
            <criterion comment="mozilla is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31515"/>
            <criterion comment="mozilla-chat is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31278"/>
            <criterion comment="mozilla-mail is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31465"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31606"/>
            <criterion comment="mozilla-devel is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31480"/>
            <criterion comment="mozilla-nss is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31417"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31313"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31469"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31598"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:30665"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.3" test_ref="oval:org.mitre.oval:tst:31499"/>
            <criterion comment="mozilla is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31604"/>
            <criterion comment="thunderbird is earlier than 0:1.0-1.1.EL4" test_ref="oval:org.mitre.oval:tst:31099"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31381"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31622"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:30651"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.3" test_ref="oval:org.mitre.oval:tst:31560"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31110"/>
            <criterion comment="evolution is earlier than 0:2.0.2-14" test_ref="oval:org.mitre.oval:tst:31003"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31404"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31375"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31106"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31418"/>
            <criterion comment="evolution-devel is earlier than 0:2.0.2-14" test_ref="oval:org.mitre.oval:tst:31558"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11406" version="5" class="vulnerability">
      <metadata>
        <title>The xattr file system code, as backported in Red Hat Enterprise Linux 3 on 64-bit systems, does not properly handle certain offsets, which allows local users to cause a denial of service (system crash) via certain actions on an ext3 file system with extended attributes enabled.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0757" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0757"/>
        <description>The xattr file system code, as backported in Red Hat Enterprise Linux 3 on 64-bit systems, does not properly handle certain offsets, which allows local users to cause a denial of service (system crash) via certain actions on an ext3 file system with extended attributes enabled.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:40.872-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:13.890-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:58.074-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11406 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:18:49.270-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:50.790-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-32.EL" test_ref="oval:org.mitre.oval:tst:31430"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-32.EL" test_ref="oval:org.mitre.oval:tst:31530"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-32.EL" test_ref="oval:org.mitre.oval:tst:31347"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-32.EL" test_ref="oval:org.mitre.oval:tst:31236"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-32.EL" test_ref="oval:org.mitre.oval:tst:31051"/>
          <criterion comment="kernel is earlier than 0:2.4.21-32.EL" test_ref="oval:org.mitre.oval:tst:31597"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-32.EL" test_ref="oval:org.mitre.oval:tst:31518"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-32.EL" test_ref="oval:org.mitre.oval:tst:31511"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-32.EL" test_ref="oval:org.mitre.oval:tst:31413"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11405" version="3" class="vulnerability">
      <metadata>
        <title>CRLF injection vulnerability in Adobe Flash Player plugin 9.0.16 and earlier for Windows, 7.0.63 and earlier for Linux, 7.x before 7.0 r67 for Solaris, and before 9.0.28.0 for Mac OS X, allows remote attackers to modify HTTP headers of client requests and conduct HTTP Request Splitting attacks via CRLF sequences in arguments to the ActionScript functions (1) XML.addRequestHeader and (2) XML.contentType.  NOTE: the flexibility of the attack varies depending on the type of web browser being used.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5330" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5330"/>
        <description>CRLF injection vulnerability in Adobe Flash Player plugin 9.0.16 and earlier for Windows, 7.0.63 and earlier for Linux, 7.x before 7.0 r67 for Solaris, and before 9.0.28.0 for Mac OS X, allows remote attackers to modify HTTP headers of client requests and conduct HTTP Request Splitting attacks via CRLF sequences in arguments to the ActionScript functions (1) XML.addRequestHeader and (2) XML.contentType.  NOTE: the flexibility of the attack varies depending on the type of web browser being used.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:19.635-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:13.674-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:57.797-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criterion comment="flash-plugin is earlier than 0:7.0.69-1.el3" test_ref="oval:org.mitre.oval:tst:32385"/>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criterion comment="flash-plugin is earlier than 0:7.0.69-1.el4" test_ref="oval:org.mitre.oval:tst:33332"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11404" version="5" class="vulnerability">
      <metadata>
        <title>Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager) before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-6552" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6552"/>
        <description>Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager) before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:13.095-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:13.453-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:57.569-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11404 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:49.104-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:50.444-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="cman-devel is earlier than 0:2.0.115-1.el5" test_ref="oval:org.mitre.oval:tst:39125"/>
          <criterion comment="gfs2-utils is earlier than 0:0.1.62-1.el5" test_ref="oval:org.mitre.oval:tst:38338"/>
          <criterion comment="rgmanager is earlier than 0:2.0.52-1.el5" test_ref="oval:org.mitre.oval:tst:39198"/>
          <criterion comment="cman is earlier than 0:2.0.115-1.el5" test_ref="oval:org.mitre.oval:tst:39064"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11403" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in ebtables netfilter module (ebtables.c) in Linux 2.6, when running on an SMP system that is operating under a heavy load, might allow remote attackers to cause a denial of service (crash) via a series of packets that cause a value to be modified after it has been read but before it has been locked.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3110" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3110"/>
        <description>Race condition in ebtables netfilter module (ebtables.c) in Linux 2.6, when running on an SMP system that is operating under a heavy load, might allow remote attackers to cause a denial of service (crash) via a series of packets that cause a value to be modified after it has been read but before it has been locked.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:59.360-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:13.192-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:57.304-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11403 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:38.984-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:50.075-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32382"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32096"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32404"/>
          <criterion comment="kernel is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32387"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32210"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32355"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32373"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11402" version="5" class="vulnerability">
      <metadata>
        <title>inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1849" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1849"/>
        <description>inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:59.963-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:12.945-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:57.094-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11402 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:14:11.256-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:49.717-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="zlib-devel is earlier than 0:1.2.1.2-1.2" test_ref="oval:org.mitre.oval:tst:31912"/>
          <criterion comment="zlib is earlier than 0:1.2.1.2-1.2" test_ref="oval:org.mitre.oval:tst:31730"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11401" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent attackers to execute arbitrary code via a long string that is converted either (1) from or (2) to a base64 representation.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4316" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4316"/>
        <description>Multiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent attackers to execute arbitrary code via a long string that is converted either (1) from or (2) to a base64 representation.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:37.553-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:12.750-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:56.824-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11401 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:41:02.317-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:49.410-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="glib2-devel is earlier than 0:2.12.3-4.el5_3.1" test_ref="oval:org.mitre.oval:tst:38292"/>
          <criterion comment="glib2 is earlier than 0:2.12.3-4.el5_3.1" test_ref="oval:org.mitre.oval:tst:38341"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1140" version="4" class="vulnerability">
      <metadata>
        <title>IE6,SP1 JPEG Image Rendering Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1988"/>
        <description>Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to execute arbitrary code via a web site or an HTML e-mail containing a crafted JPEG image that causes memory corruption, aka "JPEG Image Rendering Memory Corruption Vulnerability".</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-23T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-08-25T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:45:57.656-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:32.964-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:40.727-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:09.128-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
        <criteria operator="OR" comment="the version of mshtml.dll is less than 6.0.2800.1515 or 6.0.2800.1516">
          <criterion comment="the version of mshtml.dll is less than 6.0.2800.1515 (RTMGDR)" negate="false" test_ref="oval:org.mitre.oval:tst:2418"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2800.1516 (RTMQFE)" negate="false" test_ref="oval:org.mitre.oval:tst:2417"/>
        </criteria>
        <criterion comment="the patch kb896727 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1129"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:114" version="1" class="vulnerability">
      <metadata>
        <title>String Format Vulnerability in Solaris 7 snmpdx</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>snmpdx</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0796" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0796"/>
        <description>Format string vulnerability in the logging component of snmpdx for Solaris 5.6 through 8 allows remote attackers to gain root privileges.</description>
        <oval_repository>
          <dates>
            <submitted date="2002-10-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="File snmpdx exists" negate="false" test_ref="oval:org.mitre.oval:tst:3126"/>
          <criterion comment="Patch 107709-19 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:2994"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="snmpdx running" negate="false" test_ref="oval:org.mitre.oval:tst:3124"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11399" version="5" class="vulnerability">
      <metadata>
        <title>Untrusted search path vulnerability in libbrlttybba.so in brltty 3.7.2 allows local users to gain privileges via a crafted library, related to an incorrect RPATH setting.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3279" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3279"/>
        <description>Untrusted search path vulnerability in libbrlttybba.so in brltty 3.7.2 allows local users to gain privileges via a crafted library, related to an incorrect RPATH setting.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:43.353-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:12.537-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:56.608-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:tst:39539 - Corrected - right version for brlapi and brlapi-devel as specified by RHSA-2010:0181-5" date="2013-03-18T12:26:00.995-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-03-18T12:31:18.550-04:00">INTERIM</status_change>
            <status_change date="2013-04-08T04:00:06.560-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
        <criteria operator="OR" comment="file checks">
          <criterion comment="brlapi-devel is earlier than 0:0.4.1-4.el5" test_ref="oval:org.mitre.oval:tst:40017"/>
          <criterion comment="brlapi is earlier than 0:0.4.1-4.el5" test_ref="oval:org.mitre.oval:tst:39539"/>
          <criterion comment="brltty is earlier than 0:3.7.2-4.el5" test_ref="oval:org.mitre.oval:tst:39476"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11398" version="5" class="vulnerability">
      <metadata>
        <title>The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to cause a denial of service (crash) via an invalid Content-Length header field in Session Initiation Protocol (SIP) packets, which causes a \0 byte to be written to an "attacker-controlled address."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4924" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4924"/>
        <description>The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to cause a denial of service (crash) via an invalid Content-Length header field in Session Initiation Protocol (SIP) packets, which causes a \0 byte to be written to an "attacker-controlled address."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:02.305-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:12.342-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:56.407-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11398 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:25.214-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:49.096-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="opal is earlier than 0:2.2.2-1.1.0.1" test_ref="oval:org.mitre.oval:tst:35402"/>
          <criterion comment="opal-devel is earlier than 0:2.2.2-1.1.0.1" test_ref="oval:org.mitre.oval:tst:35464"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11396" version="5" class="vulnerability">
      <metadata>
        <title>The Internationalized Domain Names (IDN) blacklist in Mozilla Firefox 3.0.6 and other versions before 3.0.9; Thunderbird before 2.0.0.21; and SeaMonkey before 1.1.15 does not include box-drawing characters, which allows remote attackers to spoof URLs and conduct phishing attacks, as demonstrated by homoglyphs of the / (slash) and ? (question mark) characters in a subdomain of a .cn domain name, a different vulnerability than CVE-2005-0233.  NOTE: some third parties claim that 3.0.6 is not affected, but much older versions perhaps are affected.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0652" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0652"/>
        <description>The Internationalized Domain Names (IDN) blacklist in Mozilla Firefox 3.0.6 and other versions before 3.0.9; Thunderbird before 2.0.0.21; and SeaMonkey before 1.1.15 does not include box-drawing characters, which allows remote attackers to spoof URLs and conduct phishing attacks, as demonstrated by homoglyphs of the / (slash) and ? (question mark) characters in a subdomain of a .cn domain name, a different vulnerability than CVE-2005-0233.  NOTE: some third parties claim that 3.0.6 is not affected, but much older versions perhaps are affected.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:03.909-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:11.823-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:55.722-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11396 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:15.546-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:48.392-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38597"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38375"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38403"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38521"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38542"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:37726"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38677"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38096"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38577"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38540"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox is earlier than 0:3.0.9-1.el4" test_ref="oval:org.mitre.oval:tst:38379"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38716"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38634"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38190"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38596"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38685"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38697"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38308"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38633"/>
            <criterion comment="firefox is earlier than 0:3.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38370"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38462"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11395" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in Mozilla Thunderbird before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of service (crash) via a VCard attachment with a malformed base64 field, which copies more data than expected due to an integer underflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3804" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3804"/>
        <description>Heap-based buffer overflow in Mozilla Thunderbird before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of service (crash) via a VCard attachment with a malformed base64 field, which copies more data than expected due to an integer underflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:38.659-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:11.203-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:55.230-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11395 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:28.133-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:47.696-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32342"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32877"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:31982"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32816"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32080"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32904"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32915"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32924"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32822"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32555"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32873"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32693"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32886"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32810"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32418"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32496"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32929"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32777"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32722"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32906"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32905"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32925"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32624"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11394" version="5" class="vulnerability">
      <metadata>
        <title>The ipt_recent kernel module (ipt_recent.c) in Linux kernel before 2.6.12, when running on 64-bit processors such as AMD64, allows remote attackers to cause a denial of service (kernel panic) via certain attacks such as SSH brute force, which leads to memset calls using a length based on the u_int32_t type, acting on an array of unsigned long elements, a different vulnerability than CVE-2005-2873.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2872" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2872"/>
        <description>The ipt_recent kernel module (ipt_recent.c) in Linux kernel before 2.6.12, when running on 64-bit processors such as AMD64, allows remote attackers to cause a denial of service (kernel panic) via certain attacks such as SSH brute force, which leads to memset calls using a length based on the u_int32_t type, acting on an array of unsigned long elements, a different vulnerability than CVE-2005-2873.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:30.637-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:10.891-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:54.908-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11394 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:12:49.103-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:47.309-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31896"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31885"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31861"/>
          <criterion comment="kernel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31550"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31914"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31924"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:32023"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11393" version="5" class="vulnerability">
      <metadata>
        <title>Integer signedness error in the _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in libgnutls in GnuTLS before 2.2.4 allows remote attackers to cause a denial of service (buffer over-read and crash) via a certain integer value in the Random field in an encrypted Client Hello message within a TLS record with an invalid Record Length, which leads to an invalid cipher padding length, aka GNUTLS-SA-2008-1-3.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1950" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1950"/>
        <description>Integer signedness error in the _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in libgnutls in GnuTLS before 2.2.4 allows remote attackers to cause a denial of service (buffer over-read and crash) via a certain integer value in the Random field in an encrypted Client Hello message within a TLS record with an invalid Record Length, which leads to an invalid cipher padding length, aka GNUTLS-SA-2008-1-3.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:02.740-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:10.628-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:54.638-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11393 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:12:50.726-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:46.851-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gnutls is earlier than 0:1.0.20-4.el4_6" test_ref="oval:org.mitre.oval:tst:36194"/>
            <criterion comment="gnutls-devel is earlier than 0:1.0.20-4.el4_6" test_ref="oval:org.mitre.oval:tst:36609"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gnutls is earlier than 0:1.4.1-3.el5_1" test_ref="oval:org.mitre.oval:tst:36294"/>
            <criterion comment="gnutls-devel is earlier than 0:1.4.1-3.el5_1" test_ref="oval:org.mitre.oval:tst:35940"/>
            <criterion comment="gnutls-utils is earlier than 0:1.4.1-3.el5_1" test_ref="oval:org.mitre.oval:tst:36811"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11392" version="5" class="vulnerability">
      <metadata>
        <title>The gfs2_lock function in the Linux kernel before 2.6.34-rc1-next-20100312, and the gfs_lock function in the Linux kernel on Red Hat Enterprise Linux (RHEL) 5 and 6, does not properly remove POSIX locks on files that are setgid without group-execute permission, which allows local users to cause a denial of service (BUG and system crash) by locking a file on a (1) GFS or (2) GFS2 filesystem, and then changing this file's permissions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0727" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0727"/>
        <description>The gfs2_lock function in the Linux kernel before 2.6.34-rc1-next-20100312, and the gfs_lock function in the Linux kernel on Red Hat Enterprise Linux (RHEL) 5 and 6, does not properly remove POSIX locks on files that are setgid without group-execute permission, which allows local users to cause a denial of service (BUG and system crash) by locking a file on a (1) GFS or (2) GFS2 filesystem, and then changing this file's permissions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:01.101-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:10.261-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:54.260-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11392 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:23.863-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:46.373-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kmod-gfs is earlier than 0:0.1.34-12.el5" test_ref="oval:org.mitre.oval:tst:39864"/>
          <criterion comment="kmod-gfs-xen is earlier than 0:0.1.34-12.el5" test_ref="oval:org.mitre.oval:tst:40161"/>
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:39718"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:40363"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:40151"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:40182"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:40070"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:40313"/>
          <criterion comment="kernel is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:40302"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:39440"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:39472"/>
          <criterion comment="gfs-kmod is earlier than 0:0.1.34-12.el5" test_ref="oval:org.mitre.oval:tst:40319"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:40090"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:39519"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-194.el5" test_ref="oval:org.mitre.oval:tst:39840"/>
          <criterion comment="kmod-gfs-PAE is earlier than 0:0.1.34-12.el5" test_ref="oval:org.mitre.oval:tst:40126"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11391" version="5" class="vulnerability">
      <metadata>
        <title>The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 changes the case of certain strings in a stylesheet before adding this stylesheet to the XUL cache, which might allow remote attackers to modify the browser's font and other CSS attributes, and potentially disrupt rendering of a web page, by forcing the browser to perform this erroneous stylesheet caching.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0169" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0169"/>
        <description>The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 changes the case of certain strings in a stylesheet before adding this stylesheet to the XUL cache, which might allow remote attackers to modify the browser's font and other CSS attributes, and potentially disrupt rendering of a web page, by forcing the browser to perform this erroneous stylesheet caching.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:37.711-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:09.723-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:53.703-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11391 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:33.863-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:45.620-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:39910"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:40282"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:40001"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:40160"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:39327"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:39963"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:39749"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:40277"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:39865"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:40145"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-52.el4_8" test_ref="oval:org.mitre.oval:tst:40087"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-25.el4" test_ref="oval:org.mitre.oval:tst:40299"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-52.el4_8" test_ref="oval:org.mitre.oval:tst:40185"/>
            <criterion comment="firefox is earlier than 0:3.0.18-1.el4" test_ref="oval:org.mitre.oval:tst:39897"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-52.el4_8" test_ref="oval:org.mitre.oval:tst:40258"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-52.el4_8" test_ref="oval:org.mitre.oval:tst:40130"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-52.el4_8" test_ref="oval:org.mitre.oval:tst:40147"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-52.el4_8" test_ref="oval:org.mitre.oval:tst:40264"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:39323"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:40174"/>
            <criterion comment="firefox is earlier than 0:3.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:40301"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.24-2.el5_4" test_ref="oval:org.mitre.oval:tst:40249"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:39533"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11390" version="5" class="vulnerability">
      <metadata>
        <title>The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows remote authenticated users to cause a denial of service (database crash) via a certain CONTAINS operation on an indexed column, which triggers an assertion error.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5925" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5925"/>
        <description>The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows remote authenticated users to cause a denial of service (database crash) via a certain CONTAINS operation on an indexed column, which triggers an assertion error.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:05.328-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:09.414-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:53.388-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11390 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:12.097-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:45.146-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mysql is earlier than 0:4.1.20-3.RHEL4.1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35955"/>
            <criterion comment="mysql-devel is earlier than 0:4.1.20-3.RHEL4.1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35904"/>
            <criterion comment="mysql-bench is earlier than 0:4.1.20-3.RHEL4.1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35382"/>
            <criterion comment="mysql-server is earlier than 0:4.1.20-3.RHEL4.1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35917"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mysql is earlier than 0:5.0.22-2.2.el5_1.1" test_ref="oval:org.mitre.oval:tst:35902"/>
            <criterion comment="mysql-devel is earlier than 0:5.0.22-2.2.el5_1.1" test_ref="oval:org.mitre.oval:tst:35707"/>
            <criterion comment="mysql-test is earlier than 0:5.0.22-2.2.el5_1.1" test_ref="oval:org.mitre.oval:tst:35488"/>
            <criterion comment="mysql-bench is earlier than 0:5.0.22-2.2.el5_1.1" test_ref="oval:org.mitre.oval:tst:35838"/>
            <criterion comment="mysql-server is earlier than 0:5.0.22-2.2.el5_1.1" test_ref="oval:org.mitre.oval:tst:35066"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1139" version="1" class="vulnerability">
      <metadata>
        <title>Telnet Client Information Disclosure Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>telnet</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0488" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0488"/>
        <description>Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-07-11T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-07-27T10:36:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="telnet RPM earlier than 1:0.17-20.EL3.3" negate="false" test_ref="oval:org.mitre.oval:tst:1131"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/telnet is executable by any user" negate="false" test_ref="oval:org.mitre.oval:tst:1130"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11389" version="5" class="vulnerability">
      <metadata>
        <title>Double free vulnerability in tif_jpeg.c in libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image that triggers errors related to "setfield/getfield methods in cleanup functions."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2026" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2026"/>
        <description>Double free vulnerability in tif_jpeg.c in libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image that triggers errors related to "setfield/getfield methods in cleanup functions."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:26.803-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:09.168-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:53.136-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11389 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:51.157-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:44.736-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libtiff is earlier than 0:3.5.7-25.el3.1" test_ref="oval:org.mitre.oval:tst:32689"/>
            <criterion comment="libtiff-devel is earlier than 0:3.5.7-25.el3.1" test_ref="oval:org.mitre.oval:tst:32435"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libtiff is earlier than 0:3.6.1-10" test_ref="oval:org.mitre.oval:tst:32329"/>
            <criterion comment="libtiff-devel is earlier than 0:3.6.1-10" test_ref="oval:org.mitre.oval:tst:32637"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11388" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the ncp_lookup function for ncpfs in Linux kernel 2.4.x allows local users to gain privileges.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0010" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0010"/>
        <description>Stack-based buffer overflow in the ncp_lookup function for ncpfs in Linux kernel 2.4.x allows local users to gain privileges.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:08.517-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:08.833-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:52.782-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11388 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:17.373-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:44.372-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30346"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30006"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30702"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30513"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30280"/>
          <criterion comment="kernel is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30056"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30508"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30654"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30307"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11387" version="5" class="vulnerability">
      <metadata>
        <title>Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5051" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5051"/>
        <description>Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:09.505-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:08.514-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:52.451-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11387 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:57.937-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:43.866-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssh is earlier than 0:3.6.1p2-33.30.12" test_ref="oval:org.mitre.oval:tst:33091"/>
            <criterion comment="openssh-askpass is earlier than 0:3.6.1p2-33.30.12" test_ref="oval:org.mitre.oval:tst:33089"/>
            <criterion comment="openssh-server is earlier than 0:3.6.1p2-33.30.12" test_ref="oval:org.mitre.oval:tst:32651"/>
            <criterion comment="openssh-clients is earlier than 0:3.6.1p2-33.30.12" test_ref="oval:org.mitre.oval:tst:32799"/>
            <criterion comment="openssh-askpass-gnome is earlier than 0:3.6.1p2-33.30.12" test_ref="oval:org.mitre.oval:tst:32173"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssh is earlier than 0:3.9p1-8.RHEL4.17" test_ref="oval:org.mitre.oval:tst:32994"/>
            <criterion comment="openssh-askpass is earlier than 0:3.9p1-8.RHEL4.17" test_ref="oval:org.mitre.oval:tst:32813"/>
            <criterion comment="openssh-server is earlier than 0:3.9p1-8.RHEL4.17" test_ref="oval:org.mitre.oval:tst:33151"/>
            <criterion comment="openssh-clients is earlier than 0:3.9p1-8.RHEL4.17" test_ref="oval:org.mitre.oval:tst:33040"/>
            <criterion comment="openssh-askpass-gnome is earlier than 0:3.9p1-8.RHEL4.17" test_ref="oval:org.mitre.oval:tst:33167"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11386" version="5" class="vulnerability">
      <metadata>
        <title>Memory leak in the keyctl_join_session_keyring function (security/keys/keyctl.c) in Linux kernel 2.6.29-rc2 and earlier allows local users to cause a denial of service (kernel memory consumption) via unknown vectors related to a "missing kfree."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0031" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0031"/>
        <description>Memory leak in the keyctl_join_session_keyring function (security/keys/keyctl.c) in Linux kernel 2.6.29-rc2 and earlier allows local users to cause a denial of service (kernel memory consumption) via unknown vectors related to a "missing kfree."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:38.238-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:07.982-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:51.924-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11386 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:14:12.229-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:43.219-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:37961"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38169"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38048"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38359"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38449"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38416"/>
            <criterion comment="kernel is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38237"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:37920"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38429"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38339"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38155"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:37732"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38060"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38354"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38313"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38198"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:37887"/>
            <criterion comment="kernel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38174"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38191"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38124"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38417"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:37779"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38257"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11385" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in Evolution Data Server (aka evolution-data-server) before 2.24.5 allow context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation in (1) addressbook/libebook/e-vcard.c in evc or (2) camel/camel-mime-utils.c in libcamel.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0587" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0587"/>
        <description>Multiple integer overflows in Evolution Data Server (aka evolution-data-server) before 2.24.5 allow context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation in (1) addressbook/libebook/e-vcard.c in evc or (2) camel/camel-mime-utils.c in libcamel.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:45.842-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:07.627-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:51.558-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11385 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:43.752-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:42.259-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="evolution is earlier than 0:1.4.5-25.el3" test_ref="oval:org.mitre.oval:tst:38285"/>
            <criterion comment="evolution-devel is earlier than 0:1.4.5-25.el3" test_ref="oval:org.mitre.oval:tst:38422"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="evolution28-evolution-data-server-devel is earlier than 0:1.8.0-37.el4_7.2" test_ref="oval:org.mitre.oval:tst:38140"/>
            <criterion comment="evolution-data-server-devel is earlier than 0:1.0.2-14.el4_7.1" test_ref="oval:org.mitre.oval:tst:38464"/>
            <criterion comment="evolution-data-server is earlier than 0:1.0.2-14.el4_7.1" test_ref="oval:org.mitre.oval:tst:38477"/>
            <criterion comment="evolution is earlier than 0:2.0.2-41.el4_7.2" test_ref="oval:org.mitre.oval:tst:38489"/>
            <criterion comment="evolution28-evolution-data-server is earlier than 0:1.8.0-37.el4_7.2" test_ref="oval:org.mitre.oval:tst:38193"/>
            <criterion comment="evolution-devel is earlier than 0:2.0.2-41.el4_7.2" test_ref="oval:org.mitre.oval:tst:38059"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="evolution-data-server-devel is earlier than 0:1.12.3-10.el5_3.3" test_ref="oval:org.mitre.oval:tst:38514"/>
            <criterion comment="evolution-data-server is earlier than 0:1.12.3-10.el5_3.3" test_ref="oval:org.mitre.oval:tst:37983"/>
            <criterion comment="evolution-data-server-doc is earlier than 0:1.12.3-10.el5_3.3" test_ref="oval:org.mitre.oval:tst:37891"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11384" version="5" class="vulnerability">
      <metadata>
        <title>A "missing serialization" error in the unix_dgram_recvmsg function in Linux 2.4.27 and earlier, and 2.6.x up to 2.6.9, allows local users to gain privileges via a race condition.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1068" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1068"/>
        <description>A "missing serialization" error in the unix_dgram_recvmsg function in Linux 2.4.27 and earlier, and 2.6.x up to 2.6.9, allows local users to gain privileges via a race condition.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:57.745-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:07.335-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:51.268-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11384 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:34.161-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:41.688-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30934"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30708"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30577"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30874"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30794"/>
          <criterion comment="kernel is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30892"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30873"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:31080"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30866"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11383" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via byte order mark (BOM) characters that are removed from JavaScript code before execution, aka "Stripped BOM characters bug."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4065" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4065"/>
        <description>Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via byte order mark (BOM) characters that are removed from JavaScript code before execution, aka "Stripped BOM characters bug."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:00.449-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:06.656-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:50.610-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11383 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:23.810-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:40.733-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37411"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36691"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37031"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37528"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36726"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37435"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37680"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36725"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37449"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37356"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.10.el4" test_ref="oval:org.mitre.oval:tst:37564"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:36913"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-16.el4" test_ref="oval:org.mitre.oval:tst:37634"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37609"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.10.el4" test_ref="oval:org.mitre.oval:tst:37306"/>
            <criterion comment="firefox is earlier than 0:3.0.2-3.el4" test_ref="oval:org.mitre.oval:tst:37195"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37499"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37444"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37543"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37552"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-19.el5" test_ref="oval:org.mitre.oval:tst:37248"/>
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37486"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37495"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37044"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.17-1.el5" test_ref="oval:org.mitre.oval:tst:37230"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37578"/>
            <criterion comment="yelp is earlier than 0:2.16.0-21.el5" test_ref="oval:org.mitre.oval:tst:37584"/>
            <criterion comment="devhelp is earlier than 0:0.12-19.el5" test_ref="oval:org.mitre.oval:tst:37353"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37406"/>
            <criterion comment="firefox is earlier than 0:3.0.2-3.el5" test_ref="oval:org.mitre.oval:tst:37225"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:36664"/>
            <criterion comment="nss-tools is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37664"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11382" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service (CPU consumption and delayed application startup) via a web site with a large title, which is recorded in history.dat but not processed efficiently during startup.  NOTE: despite initial reports, the Mozilla vendor does not believe that this issue can be used to trigger a crash or buffer overflow in Firefox.  Also, it has been independently reported that Netscape 8.1 does not have this issue.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-4134" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4134"/>
        <description>Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service (CPU consumption and delayed application startup) via a web site with a large title, which is recorded in history.dat but not processed efficiently during startup.  NOTE: despite initial reports, the Mozilla vendor does not believe that this issue can be used to trigger a crash or buffer overflow in Firefox.  Also, it has been independently reported that Netscape 8.1 does not have this issue.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:44.003-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:06.197-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:50.142-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11382 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:29.602-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:40.132-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:32492"/>
            <criterion comment="mozilla is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:32486"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:32176"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31856"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:32548"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31980"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:32519"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:32478"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31709"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31881"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:32504"/>
            <criterion comment="mozilla is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:32502"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:31570"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:31656"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:32458"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:32216"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:32359"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:32540"/>
            <criterion comment="firefox is earlier than 0:1.0.7-1.4.3" test_ref="oval:org.mitre.oval:tst:32384"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:32647"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:32454"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11381" version="5" class="vulnerability">
      <metadata>
        <title>Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed SMB packet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0007"/>
        <description>Unknown vulnerability in the DLSw dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (application crash from assertion).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:01.737-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:05.914-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:49.837-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11381 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:39.522-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:39.724-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.9-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31265"/>
            <criterion comment="ethereal is earlier than 0:0.10.9-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31218"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.9-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31097"/>
            <criterion comment="ethereal is earlier than 0:0.10.9-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31103"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11380" version="5" class="vulnerability">
      <metadata>
        <title>The IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote attackers to cause a denial of service (child process crash) via a certain URI, as demonstrated using the Codenomicon HTTP Test Tool.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0786" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0786"/>
        <description>The IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote attackers to cause a denial of service (child process crash) via a certain URI, as demonstrated using the Codenomicon HTTP Test Tool.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:28.807-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:05.711-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:49.620-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11380 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:35.678-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:39.431-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="httpd-devel is earlier than 0:2.0.46-40.ent" test_ref="oval:org.mitre.oval:tst:30894"/>
          <criterion comment="mod_ssl is earlier than 1:2.0.46-40.ent" test_ref="oval:org.mitre.oval:tst:30928"/>
          <criterion comment="httpd is earlier than 0:2.0.46-40.ent" test_ref="oval:org.mitre.oval:tst:30979"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1138" version="3" class="vulnerability">
      <metadata>
        <title>Security Vulnerability Relating to scp(1) Command May Allow Attackers to Execute Arbitrary Commands</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0225" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0225"/>
        <description>scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-28T09:00:00.000-04:00">
              <contributor organization="Opsware, Inc.">Yuzheng Zhou</contributor>
            </submitted>
            <status_change date="2007-06-29T09:24:18.236-04:00">DRAFT</status_change>
            <status_change date="2007-07-16T09:55:06.726-04:00">INTERIM</status_change>
            <status_change date="2007-08-01T22:26:13.876-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1138 - Typo Corrections" date="2014-05-22T11:06:00.498-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-05-22T11:07:55.908-04:00">INTERIM</status_change>
            <status_change date="2014-06-09T04:00:06.911-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Solaris 9 (SPARC)">
          <extend_definition comment="Solaris 9 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1457"/>
          <criterion negate="true" comment="Patch 114356-12 or later installed" test_ref="oval:org.mitre.oval:tst:3383"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86)">
          <extend_definition comment="Solaris 9 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1683"/>
          <criterion negate="true" comment="Patch 114357-11 or later installed" test_ref="oval:org.mitre.oval:tst:3976"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC)">
          <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
          <criterion negate="true" comment="Patch 123324-03 or later installed" test_ref="oval:org.mitre.oval:tst:3920"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86)">
          <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
          <criterion negate="true" comment="Patch 123325-03 or later installed" test_ref="oval:org.mitre.oval:tst:4058"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1683" version="1" class="inventory">
      <metadata>
        <title>Solaris 9 (x86) is installed</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:sun:sunos:5.9::ix86"/>
        <description>The operating system installed on the system is Sun Solaris 9 for x86.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-22T08:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </submitted>
            <status_change date="2007-06-22T08:20:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-07-10T21:08:49.960-04:00">INTERIM</status_change>
            <status_change date="2007-08-01T22:26:14.277-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3172"/>
        <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3912"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1457" version="1" class="inventory">
      <metadata>
        <title>Solaris 9 (SPARC) is installed</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:sun:sunos:5.9::sparc"/>
        <description>The operating system installed on the system is Sun Solaris 9 for SPARC.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-22T08:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </submitted>
            <status_change date="2007-06-22T08:20:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-07-10T21:08:48.350-04:00">INTERIM</status_change>
            <status_change date="2007-08-01T22:26:14.151-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3172"/>
        <criterion comment="sparc architecture" test_ref="oval:org.mitre.oval:tst:3237"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11379" version="5" class="vulnerability">
      <metadata>
        <title>libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service (NULL pointer dereference and application crash) via a TOPIC message that lacks a topic string.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2703" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2703"/>
        <description>libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service (NULL pointer dereference and application crash) via a TOPIC message that lacks a topic string.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:40.168-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:05.238-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:49.160-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11379 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:31.889-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:38.745-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="pidgin is earlier than 0:1.5.1-6.el3" test_ref="oval:org.mitre.oval:tst:39353"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39474"/>
            <criterion comment="libpurple is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39423"/>
            <criterion comment="libpurple-perl is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39307"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39264"/>
            <criterion comment="pidgin-devel is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39332"/>
            <criterion comment="libpurple-devel is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39395"/>
            <criterion comment="finch is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39376"/>
            <criterion comment="pidgin-perl is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39381"/>
            <criterion comment="pidgin is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39450"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39246"/>
            <criterion comment="libpurple is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39428"/>
            <criterion comment="libpurple-perl is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39414"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39006"/>
            <criterion comment="pidgin-devel is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:38683"/>
            <criterion comment="libpurple-devel is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39404"/>
            <criterion comment="finch is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39139"/>
            <criterion comment="pidgin-perl is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39341"/>
            <criterion comment="pidgin is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39169"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11378" version="5" class="vulnerability">
      <metadata>
        <title>The SCTP dissector in Wireshark (formerly Ethereal) 0.99.5 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1070" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1070"/>
        <description>The SCTP dissector in Wireshark (formerly Ethereal) 0.99.5 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:08.857-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:04.888-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:48.823-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11378 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:40.456-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:38.251-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-EL3.3" test_ref="oval:org.mitre.oval:tst:37624"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-EL3.3" test_ref="oval:org.mitre.oval:tst:37207"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-3.el4_7" test_ref="oval:org.mitre.oval:tst:37249"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-3.el4_7" test_ref="oval:org.mitre.oval:tst:37725"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37542"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37460"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11377" version="5" class="vulnerability">
      <metadata>
        <title>The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files, aka Bug Id 6824265.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0399" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0399"/>
        <description>Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer size.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:21.170-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:04.374-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:48.302-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11377 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:18.928-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:37.578-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:30819"/>
            <criterion comment="mozilla is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31515"/>
            <criterion comment="mozilla-chat is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31278"/>
            <criterion comment="mozilla-mail is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31465"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31606"/>
            <criterion comment="mozilla-devel is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31480"/>
            <criterion comment="mozilla-nss is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31417"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31313"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31469"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31598"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-chat is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31381"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31110"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31375"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31106"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31418"/>
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:30665"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.3" test_ref="oval:org.mitre.oval:tst:31499"/>
            <criterion comment="mozilla is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31604"/>
            <criterion comment="thunderbird is earlier than 0:1.0.2-1.4.1" test_ref="oval:org.mitre.oval:tst:31382"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31622"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:30651"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.3" test_ref="oval:org.mitre.oval:tst:31560"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31404"/>
            <criterion comment="evolution is earlier than 0:2.0.2-14" test_ref="oval:org.mitre.oval:tst:31003"/>
            <criterion comment="firefox is earlier than 0:1.0.2-1.4.1" test_ref="oval:org.mitre.oval:tst:31302"/>
            <criterion comment="evolution-devel is earlier than 0:2.0.2-14" test_ref="oval:org.mitre.oval:tst:31558"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11376" version="5" class="vulnerability">
      <metadata>
        <title>The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial of service (process exit) via unknown vectors that cause an array to shrink to 0 entries, which triggers an assert error.  NOTE: this issue is due to an incorrect fix for CVE-2007-6239.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1612" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1612"/>
        <description>The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial of service (process exit) via unknown vectors that cause an array to shrink to 0 entries, which triggers an assert error.  NOTE: this issue is due to an incorrect fix for CVE-2007-6239.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:59.682-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:04.113-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:47.994-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11376 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:38.730-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:37.142-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squid is earlier than 0:2.5.STABLE3-9.3E" test_ref="oval:org.mitre.oval:tst:36413"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squid is earlier than 0:2.5.STABLE14-1.4E.el4_6.2" test_ref="oval:org.mitre.oval:tst:36396"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="squid is earlier than 0:2.6.STABLE6-5.el5_1.3" test_ref="oval:org.mitre.oval:tst:36064"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11375" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in the Linux kernel before 2.4.23, on the AMD AMD64 and Intel EM64T architectures, associated with "setting up TSS limits," allows local users to cause a denial of service (crash) and possibly execute arbitrary code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0812" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0812"/>
        <description>Unknown vulnerability in the Linux kernel before 2.4.23, on the AMD AMD64 and Intel EM64T architectures, associated with "setting up TSS limits," allows local users to cause a denial of service (crash) and possibly execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:10.615-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:03.787-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:47.694-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11375 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:16.688-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:36.740-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30934"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30708"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30577"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30874"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30794"/>
          <criterion comment="kernel is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30892"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30873"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:31080"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30866"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11374" version="5" class="vulnerability">
      <metadata>
        <title>Wireshark (formerly Ethereal) 0.8.16 to 0.99.6 allows remote attackers to cause a denial of service (crash) via a malformed RPC Portmap packet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6121" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6121"/>
        <description>Wireshark (formerly Ethereal) 0.8.16 to 0.99.6 allows remote attackers to cause a denial of service (crash) via a malformed RPC Portmap packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:06.949-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:03.416-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:47.322-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11374 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:47.691-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:36.192-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-EL3.1" test_ref="oval:org.mitre.oval:tst:36111"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-EL3.1" test_ref="oval:org.mitre.oval:tst:36043"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-3.el3" test_ref="oval:org.mitre.oval:tst:35411"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-3.el3" test_ref="oval:org.mitre.oval:tst:36140"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:36051"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:35980"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35669"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35941"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:35709"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:36120"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35712"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35801"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11373" version="5" class="vulnerability">
      <metadata>
        <title>Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0488" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0488"/>
        <description>Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:26.562-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:03.116-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:46.955-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11373 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:30.726-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:35.713-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.2.7-47" test_ref="oval:org.mitre.oval:tst:31712"/>
            <criterion comment="krb5 is earlier than 0:1.2.7-47" test_ref="oval:org.mitre.oval:tst:31065"/>
            <criterion comment="krb5-libs is earlier than 0:1.2.7-47" test_ref="oval:org.mitre.oval:tst:31933"/>
            <criterion comment="telnet is earlier than 1:0.17-26.EL3.3" test_ref="oval:org.mitre.oval:tst:31911"/>
            <criterion comment="krb5-server is earlier than 0:1.2.7-47" test_ref="oval:org.mitre.oval:tst:31927"/>
            <criterion comment="telnet-server is earlier than 1:0.17-26.EL3.3" test_ref="oval:org.mitre.oval:tst:31044"/>
            <criterion comment="krb5-devel is earlier than 0:1.2.7-47" test_ref="oval:org.mitre.oval:tst:31772"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="telnet is earlier than 1:0.17-31.EL4.3" test_ref="oval:org.mitre.oval:tst:32031"/>
            <criterion comment="telnet-server is earlier than 1:0.17-31.EL4.3" test_ref="oval:org.mitre.oval:tst:31637"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11372" version="5" class="vulnerability">
      <metadata>
        <title>The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XML file with a crafted XSLT transform.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1169" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1169"/>
        <description>The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XML file with a crafted XSLT transform.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:16.790-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:02.601-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:46.483-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11372 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:52.141-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:35.069-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.36.el3" test_ref="oval:org.mitre.oval:tst:38227"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.36.el3" test_ref="oval:org.mitre.oval:tst:38356"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.36.el3" test_ref="oval:org.mitre.oval:tst:38435"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.36.el3" test_ref="oval:org.mitre.oval:tst:38265"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.36.el3" test_ref="oval:org.mitre.oval:tst:38483"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.36.el3" test_ref="oval:org.mitre.oval:tst:38434"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.36.el3" test_ref="oval:org.mitre.oval:tst:38650"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.36.el3" test_ref="oval:org.mitre.oval:tst:38550"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.36.el3" test_ref="oval:org.mitre.oval:tst:38352"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.36.el3" test_ref="oval:org.mitre.oval:tst:38301"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox is earlier than 0:3.0.7-3.el4" test_ref="oval:org.mitre.oval:tst:38636"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-40.el4" test_ref="oval:org.mitre.oval:tst:38297"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-40.el4" test_ref="oval:org.mitre.oval:tst:38205"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-40.el4" test_ref="oval:org.mitre.oval:tst:38583"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-40.el4" test_ref="oval:org.mitre.oval:tst:38616"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-40.el4" test_ref="oval:org.mitre.oval:tst:38657"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-40.el4" test_ref="oval:org.mitre.oval:tst:38632"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.7-3.el5" test_ref="oval:org.mitre.oval:tst:38281"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.7-3.el5" test_ref="oval:org.mitre.oval:tst:38646"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.7-3.el5" test_ref="oval:org.mitre.oval:tst:37687"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11371" version="5" class="vulnerability">
      <metadata>
        <title>Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0721"/>
        <description>Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:40.740-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:02.381-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:46.251-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11371 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:14.290-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:34.730-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kdebase is earlier than 6:3.1.3-5.4" test_ref="oval:org.mitre.oval:tst:30731"/>
          <criterion comment="kdebase-devel is earlier than 6:3.1.3-5.4" test_ref="oval:org.mitre.oval:tst:29837"/>
          <criterion comment="kdelibs is earlier than 6:3.1.3-6.6" test_ref="oval:org.mitre.oval:tst:30063"/>
          <criterion comment="kdelibs-devel is earlier than 6:3.1.3-6.6" test_ref="oval:org.mitre.oval:tst:30768"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11370" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in io-xpm.c in gdk-pixbuf 0.22.0 in GTK+ before 2.8.7 allows attackers to cause a denial of service (crash) or execute arbitrary code via an XPM file with large height, width, and colour values, a different vulnerability than CVE-2005-3186.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2976" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2976"/>
        <description>Integer overflow in io-xpm.c in gdk-pixbuf 0.22.0 in GTK+ before 2.8.7 allows attackers to cause a denial of service (crash) or execute arbitrary code via an XPM file with large height, width, and colour values, a different vulnerability than CVE-2005-3186.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:28.082-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:02.124-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:45.946-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11370 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:19.288-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:34.343-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gdk-pixbuf-devel is earlier than 1:0.22.0-13.el3.3" test_ref="oval:org.mitre.oval:tst:32203"/>
            <criterion comment="gdk-pixbuf-gnome is earlier than 1:0.22.0-13.el3.3" test_ref="oval:org.mitre.oval:tst:32393"/>
            <criterion comment="gdk-pixbuf is earlier than 1:0.22.0-13.el3.3" test_ref="oval:org.mitre.oval:tst:32388"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gdk-pixbuf-devel is earlier than 1:0.22.0-17.el4.3" test_ref="oval:org.mitre.oval:tst:32239"/>
            <criterion comment="gdk-pixbuf is earlier than 1:0.22.0-17.el4.3" test_ref="oval:org.mitre.oval:tst:32331"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11369" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in secure locate (slocate) before 2.7 allows local users to execute arbitrary code via a long (1) -c or (2) -r command line argument.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0056" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0056"/>
        <description>Buffer overflow in secure locate (slocate) before 2.7 allows local users to execute arbitrary code via a long (1) -c or (2) -r command line argument.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:19.992-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:01.882-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:45.729-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11369 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:53.876-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:34.070-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="slocate is earlier than 0:2.7-3" test_ref="oval:org.mitre.oval:tst:30343"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11368" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the _moveToEdgeShift XUL tree method, which triggers garbage collection on objects that are still in use, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1044" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1044"/>
        <description>Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the _moveToEdgeShift XUL tree method, which triggers garbage collection on objects that are still in use, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:31.118-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:01.408-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:45.098-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11368 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:40.664-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:33.381-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.36.el3" test_ref="oval:org.mitre.oval:tst:38227"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.36.el3" test_ref="oval:org.mitre.oval:tst:38356"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.36.el3" test_ref="oval:org.mitre.oval:tst:38435"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.36.el3" test_ref="oval:org.mitre.oval:tst:38265"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.36.el3" test_ref="oval:org.mitre.oval:tst:38483"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.36.el3" test_ref="oval:org.mitre.oval:tst:38434"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.36.el3" test_ref="oval:org.mitre.oval:tst:38650"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.36.el3" test_ref="oval:org.mitre.oval:tst:38550"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.36.el3" test_ref="oval:org.mitre.oval:tst:38352"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.36.el3" test_ref="oval:org.mitre.oval:tst:38301"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox is earlier than 0:3.0.7-3.el4" test_ref="oval:org.mitre.oval:tst:38636"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-40.el4" test_ref="oval:org.mitre.oval:tst:38297"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-40.el4" test_ref="oval:org.mitre.oval:tst:38205"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-40.el4" test_ref="oval:org.mitre.oval:tst:38583"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-40.el4" test_ref="oval:org.mitre.oval:tst:38616"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-40.el4" test_ref="oval:org.mitre.oval:tst:38657"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-40.el4" test_ref="oval:org.mitre.oval:tst:38632"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.7-3.el5" test_ref="oval:org.mitre.oval:tst:38281"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.7-3.el5" test_ref="oval:org.mitre.oval:tst:38646"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.7-3.el5" test_ref="oval:org.mitre.oval:tst:37687"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11367" version="3" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in javaws.exe in Sun Java Web Start in JRE 5.0 Update 11 and earlier, and 6.0 Update 1 and earlier, allows remote attackers to execute arbitrary code via a long codebase attribute in a JNLP file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3655" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3655"/>
        <description>Stack-based buffer overflow in javaws.exe in Sun Java Web Start in JRE 5.0 Update 11 and earlier, and 6.0 Update 1 and earlier, allows remote attackers to execute arbitrary code via a long codebase attribute in a JNLP file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:09.920-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:00.856-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:44.624-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34859"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34890"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34613"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.12-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34910"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35015"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.12-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34327"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34956"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.12-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34363"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.12-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35033"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.12-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34884"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35062"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34949"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.12-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35121"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34825"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34270"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34724"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:35124"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34955"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34692"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:35140"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11366" version="5" class="vulnerability">
      <metadata>
        <title>International Components for Unicode (ICU) 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Fedora 9 and 10, and possibly other operating systems, does not properly handle invalid byte sequences during Unicode conversion, which might allow remote attackers to conduct cross-site scripting (XSS) attacks.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0153" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0153"/>
        <description>International Components for Unicode (ICU) 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Fedora 9 and 10, and possibly other operating systems, does not properly handle invalid byte sequences during Unicode conversion, which might allow remote attackers to conduct cross-site scripting (XSS) attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:01.379-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:00.639-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:44.395-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11366 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:12.647-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:33.042-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="libicu-doc is earlier than 0:3.6-5.11.4" test_ref="oval:org.mitre.oval:tst:38818"/>
          <criterion comment="icu is earlier than 0:3.6-5.11.4" test_ref="oval:org.mitre.oval:tst:38160"/>
          <criterion comment="libicu is earlier than 0:3.6-5.11.4" test_ref="oval:org.mitre.oval:tst:38843"/>
          <criterion comment="libicu-devel is earlier than 0:3.6-5.11.4" test_ref="oval:org.mitre.oval:tst:38626"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11365" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to use of mutable strings in the js_StringReplaceHelper function in js/src/jsstr.cpp, and unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3075" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3075"/>
        <description>Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to use of mutable strings in the js_StringReplaceHelper function in js/src/jsstr.cpp, and unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:07.451-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:00.096-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:43.799-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11365 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:27.620-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:32.294-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39378"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39359"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39036"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39270"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39397"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39118"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:38444"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39284"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:38466"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39389"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nspr is earlier than 0:4.7.5-1.el4_8" test_ref="oval:org.mitre.oval:tst:39088"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:39081"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-25.el4" test_ref="oval:org.mitre.oval:tst:40299"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.5-1.el4_8" test_ref="oval:org.mitre.oval:tst:39351"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:38976"/>
            <criterion comment="firefox is earlier than 0:3.0.14-1.el4" test_ref="oval:org.mitre.oval:tst:39195"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:39181"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:39320"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:39364"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:39293"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39208"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39001"/>
            <criterion comment="nspr is earlier than 0:4.7.5-1.el5_4" test_ref="oval:org.mitre.oval:tst:39223"/>
            <criterion comment="firefox is earlier than 0:3.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39097"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.24-2.el5_4" test_ref="oval:org.mitre.oval:tst:40249"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.5-1.el5_4" test_ref="oval:org.mitre.oval:tst:39150"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39206"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11364" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in common/util/rlstate.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a RuleBook structure with a large number of rule-separator characters that trigger heap memory corruption.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0417" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0417"/>
        <description>Buffer overflow in common/util/rlstate.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a RuleBook structure with a large number of rule-separator characters that trigger heap memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:02.574-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:59.857-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:43.539-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11364 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:48.835-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:31.911-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="HelixPlayer is earlier than 1:1.0.6-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39912"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11361" version="5" class="vulnerability">
      <metadata>
        <title>Untrusted search path vulnerability in a certain Red Hat build script for OpenOffice.org (OOo) 1.1.x on Red Hat Enterprise Linux (RHEL) 3 and 4 allows local users to gain privileges via a malicious library in the current working directory, related to incorrect quoting of the ORIGIN symbol for use in the RPATH library path.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2366" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2366"/>
        <description>Untrusted search path vulnerability in a certain Red Hat build script for OpenOffice.org (OOo) 1.1.x on Red Hat Enterprise Linux (RHEL) 3 and 4 allows local users to gain privileges via a malicious library in the current working directory, related to incorrect quoting of the ORIGIN symbol for use in the RPATH library path.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:11.050-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:59.583-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:43.241-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11361 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:34.436-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:31.500-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-42.2.0.EL3" test_ref="oval:org.mitre.oval:tst:37041"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.2-42.2.0.EL3" test_ref="oval:org.mitre.oval:tst:37101"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-42.2.0.EL3" test_ref="oval:org.mitre.oval:tst:37231"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.5.EL4" test_ref="oval:org.mitre.oval:tst:37258"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.5-10.6.0.5.EL4" test_ref="oval:org.mitre.oval:tst:37327"/>
            <criterion comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.5.EL4" test_ref="oval:org.mitre.oval:tst:36748"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.5.EL4" test_ref="oval:org.mitre.oval:tst:37002"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11360" version="5" class="vulnerability">
      <metadata>
        <title>The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0977" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0977"/>
        <description>The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:09.788-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:59.268-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:42.879-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11360 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:05.647-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:30.900-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="rh-postgresql-devel is earlier than 0:7.3.8-2" test_ref="oval:org.mitre.oval:tst:30824"/>
          <criterion comment="rh-postgresql-server is earlier than 0:7.3.8-2" test_ref="oval:org.mitre.oval:tst:30911"/>
          <criterion comment="rh-postgresql-python is earlier than 0:7.3.8-2" test_ref="oval:org.mitre.oval:tst:30996"/>
          <criterion comment="rh-postgresql-libs is earlier than 0:7.3.8-2" test_ref="oval:org.mitre.oval:tst:31081"/>
          <criterion comment="rh-postgresql-docs is earlier than 0:7.3.8-2" test_ref="oval:org.mitre.oval:tst:30917"/>
          <criterion comment="rh-postgresql-test is earlier than 0:7.3.8-2" test_ref="oval:org.mitre.oval:tst:30961"/>
          <criterion comment="rh-postgresql-pl is earlier than 0:7.3.8-2" test_ref="oval:org.mitre.oval:tst:30966"/>
          <criterion comment="rh-postgresql-tcl is earlier than 0:7.3.8-2" test_ref="oval:org.mitre.oval:tst:30232"/>
          <criterion comment="rh-postgresql is earlier than 0:7.3.8-2" test_ref="oval:org.mitre.oval:tst:31030"/>
          <criterion comment="rh-postgresql-contrib is earlier than 0:7.3.8-2" test_ref="oval:org.mitre.oval:tst:30959"/>
          <criterion comment="rh-postgresql-jdbc is earlier than 0:7.3.8-2" test_ref="oval:org.mitre.oval:tst:30916"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11358" version="5" class="vulnerability">
      <metadata>
        <title>The vmsplice_to_pipe function in Linux kernel 2.6.17 through 2.6.24.1 does not validate a certain userspace pointer before dereference, which allows local users to gain root privileges via crafted arguments in a vmsplice system call, a different vulnerability than CVE-2008-0009 and CVE-2008-0010.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0600" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0600"/>
        <description>The vmsplice_to_pipe function in Linux kernel 2.6.17 through 2.6.24.1 does not validate a certain userspace pointer before dereference, which allows local users to gain root privileges via crafted arguments in a vmsplice system call, a different vulnerability than CVE-2008-0009 and CVE-2008-0010.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:11.906-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:58.906-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:42.543-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11358 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:37.664-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:30.467-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-53.1.13.el5" test_ref="oval:org.mitre.oval:tst:35356"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-53.1.13.el5" test_ref="oval:org.mitre.oval:tst:36182"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-53.1.13.el5" test_ref="oval:org.mitre.oval:tst:36291"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-53.1.13.el5" test_ref="oval:org.mitre.oval:tst:36317"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.13.el5" test_ref="oval:org.mitre.oval:tst:35976"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.13.el5" test_ref="oval:org.mitre.oval:tst:35952"/>
          <criterion comment="kernel is earlier than 0:2.6.18-53.1.13.el5" test_ref="oval:org.mitre.oval:tst:36274"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.13.el5" test_ref="oval:org.mitre.oval:tst:35988"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-53.1.13.el5" test_ref="oval:org.mitre.oval:tst:36258"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-53.1.13.el5" test_ref="oval:org.mitre.oval:tst:36222"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.13.el5" test_ref="oval:org.mitre.oval:tst:35729"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-53.1.13.el5" test_ref="oval:org.mitre.oval:tst:35846"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11356" version="5" class="vulnerability">
      <metadata>
        <title>The layout engine in Mozilla Firefox 3.x before 3.0.4, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via multiple vectors that trigger an assertion failure or other consequences.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5016" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5016"/>
        <description>The layout engine in Mozilla Firefox 3.x before 3.0.4, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via multiple vectors that trigger an assertion failure or other consequences.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:05.842-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:58.300-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:41.883-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11356 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:48.383-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:29.630-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37159"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37875"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37293"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37934"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37671"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37932"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37970"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37357"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37852"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37844"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37232"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-3.el4" test_ref="oval:org.mitre.oval:tst:38065"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-17.el4" test_ref="oval:org.mitre.oval:tst:37872"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37914"/>
            <criterion comment="firefox is earlier than 0:3.0.4-1.el4" test_ref="oval:org.mitre.oval:tst:37904"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-3.el4" test_ref="oval:org.mitre.oval:tst:37840"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37991"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37955"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37777"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:38009"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-20.el5" test_ref="oval:org.mitre.oval:tst:37773"/>
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37531"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37899"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37454"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.18-1.el5" test_ref="oval:org.mitre.oval:tst:38015"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:38021"/>
            <criterion comment="yelp is earlier than 0:2.16.0-22.el5" test_ref="oval:org.mitre.oval:tst:37645"/>
            <criterion comment="devhelp is earlier than 0:0.12-20.el5" test_ref="oval:org.mitre.oval:tst:37958"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37388"/>
            <criterion comment="firefox is earlier than 0:3.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37066"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37648"/>
            <criterion comment="nss-tools is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37936"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11355" version="5" class="vulnerability">
      <metadata>
        <title>The smdb daemon (smbd/service.c) in Samba 3.0.1 through 3.0.22 allows remote attackers to cause a denial of service (memory consumption) via a large number of share connection requests.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3403" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3403"/>
        <description>The smdb daemon (smbd/service.c) in Samba 3.0.1 through 3.0.22 allows remote attackers to cause a denial of service (memory consumption) via a large number of share connection requests.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:55.581-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:57.967-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:41.575-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11355 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:52.245-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:29.186-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.9-1.3E.10" test_ref="oval:org.mitre.oval:tst:32912"/>
            <criterion comment="samba-swat is earlier than 0:3.0.9-1.3E.10" test_ref="oval:org.mitre.oval:tst:32281"/>
            <criterion comment="samba-client is earlier than 0:3.0.9-1.3E.10" test_ref="oval:org.mitre.oval:tst:32746"/>
            <criterion comment="samba is earlier than 0:3.0.9-1.3E.10" test_ref="oval:org.mitre.oval:tst:32584"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.10-1.4E.6.2" test_ref="oval:org.mitre.oval:tst:32794"/>
            <criterion comment="samba-swat is earlier than 0:3.0.10-1.4E.6.2" test_ref="oval:org.mitre.oval:tst:32921"/>
            <criterion comment="samba-client is earlier than 0:3.0.10-1.4E.6.2" test_ref="oval:org.mitre.oval:tst:32338"/>
            <criterion comment="samba is earlier than 0:3.0.10-1.4E.6.2" test_ref="oval:org.mitre.oval:tst:32826"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11354" version="5" class="vulnerability">
      <metadata>
        <title>The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a URL with a NULL ("%00") characterm, which causes Squid to use only a portion of the requested URL when comparing it against the access control lists.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0189" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0189"/>
        <description>The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a URL with a NULL ("%00") characterm, which causes Squid to use only a portion of the requested URL when comparing it against the access control lists.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:38.887-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:57.785-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:41.376-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11354 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:31.531-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:28.835-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="squid is earlier than 7:2.5.STABLE3-5.3E" test_ref="oval:org.mitre.oval:tst:30351"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11353" version="5" class="vulnerability">
      <metadata>
        <title>The query planner in PostgreSQL before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 does not verify that a table is compatible with a "previously made query plan," which allows remote authenticated users to cause a denial of service (server crash) and possibly access database content via an "ALTER COLUMN TYPE" SQL statement, which can be leveraged to read arbitrary memory from the server.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0556"/>
        <description>The query planner in PostgreSQL before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 does not verify that a table is compatible with a "previously made query plan," which allows remote authenticated users to cause a denial of service (server crash) and possibly access database content via an "ALTER COLUMN TYPE" SQL statement, which can be leveraged to read arbitrary memory from the server.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:57.295-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:57.497-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:41.060-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11353 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:47:11.325-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:28.441-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="postgresql is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33181"/>
          <criterion comment="postgresql-docs is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33488"/>
          <criterion comment="postgresql-pl is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33593"/>
          <criterion comment="postgresql-tcl is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33121"/>
          <criterion comment="postgresql-libs is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33568"/>
          <criterion comment="postgresql-contrib is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33396"/>
          <criterion comment="postgresql-python is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33603"/>
          <criterion comment="postgresql-test is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:32610"/>
          <criterion comment="postgresql-server is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:32997"/>
          <criterion comment="postgresql-devel is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33536"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11351" version="5" class="vulnerability">
      <metadata>
        <title>Wireshark 1.0.4 and earlier allows remote attackers to cause a denial of service via a long SMTP request, which triggers an infinite loop.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5285" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5285"/>
        <description>Wireshark 1.0.4 and earlier allows remote attackers to cause a denial of service via a long SMTP request, which triggers an infinite loop.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:07.927-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:57.210-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:40.704-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11351 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:53.098-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:27.560-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-EL3.3" test_ref="oval:org.mitre.oval:tst:38023"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-EL3.3" test_ref="oval:org.mitre.oval:tst:38321"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-2.el4_7" test_ref="oval:org.mitre.oval:tst:38000"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-2.el4_7" test_ref="oval:org.mitre.oval:tst:38041"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-2.el5_3" test_ref="oval:org.mitre.oval:tst:38236"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-2.el5_3" test_ref="oval:org.mitre.oval:tst:38085"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11350" version="5" class="vulnerability">
      <metadata>
        <title>Multiple off-by-one errors in Wireshark (aka Ethereal) 0.9.7 to 0.99.0 have unknown impact and remote attack vectors via the (1) NCP NMAS and (2) NDPS dissectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3630" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3630"/>
        <description>Multiple off-by-one errors in Wireshark (aka Ethereal) 0.9.7 to 0.99.0 have unknown impact and remote attack vectors via the (1) NCP NMAS and (2) NDPS dissectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:49.270-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:56.891-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:40.438-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11350 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:46.500-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:27.174-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.2-EL3.1" test_ref="oval:org.mitre.oval:tst:32882"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.2-EL3.1" test_ref="oval:org.mitre.oval:tst:32738"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.2-EL4.1" test_ref="oval:org.mitre.oval:tst:32917"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.2-EL4.1" test_ref="oval:org.mitre.oval:tst:32447"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11349" version="5" class="vulnerability">
      <metadata>
        <title>mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4019" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4019"/>
        <description>mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:12.285-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:56.656-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:40.195-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11349 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:24.335-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:26.751-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mysql is earlier than 0:5.0.77-4.el5_4.2" test_ref="oval:org.mitre.oval:tst:40085"/>
          <criterion comment="mysql-devel is earlier than 0:5.0.77-4.el5_4.2" test_ref="oval:org.mitre.oval:tst:39585"/>
          <criterion comment="mysql-test is earlier than 0:5.0.77-4.el5_4.2" test_ref="oval:org.mitre.oval:tst:40252"/>
          <criterion comment="mysql-bench is earlier than 0:5.0.77-4.el5_4.2" test_ref="oval:org.mitre.oval:tst:40320"/>
          <criterion comment="mysql-server is earlier than 0:5.0.77-4.el5_4.2" test_ref="oval:org.mitre.oval:tst:39916"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11348" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unknown "other problems" in the KINK dissector in Ethereal before 0.10.11 have unknown impact and attack vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1458" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1458"/>
        <description>Multiple unknown "other problems" in the KINK dissector in Ethereal before 0.10.11 have unknown impact and attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:41.442-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:56.416-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:39.898-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11348 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:27.735-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:26.385-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31458"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31546"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31674"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31865"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11347" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in parse_comment in GnuPG (gpg) 1.4.4 allows remote attackers to cause a denial of service (segmentation fault) via a crafted message.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3746" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3746"/>
        <description>Integer overflow in parse_comment in GnuPG (gpg) 1.4.4 allows remote attackers to cause a denial of service (segmentation fault) via a crafted message.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:36.638-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:56.200-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:39.664-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11347 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:22.767-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:26.007-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gnupg is earlier than 0:1.2.1-17" test_ref="oval:org.mitre.oval:tst:32266"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gnupg is earlier than 0:1.2.6-6" test_ref="oval:org.mitre.oval:tst:32119"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11346" version="5" class="vulnerability">
      <metadata>
        <title>Memory leak in the icmp_push_reply function in Linux 2.6 before 2.6.12.6 and 2.6.13 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted packets that cause the ip_append_data function to fail, aka "DST leak in icmp_push_reply."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3848" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3848"/>
        <description>Memory leak in the icmp_push_reply function in Linux 2.6 before 2.6.12.6 and 2.6.13 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted packets that cause the ip_append_data function to fail, aka "DST leak in icmp_push_reply."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:56.225-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:55.770-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:39.263-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11346 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:34.944-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:25.493-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32525"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32366"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32381"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32215"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32464"/>
            <criterion comment="kernel is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32288"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:31978"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32438"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32070"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32415"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32137"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32528"/>
            <criterion comment="kernel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32205"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:31866"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32446"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32450"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11345" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1, on 64-bit platforms, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted document, related to a "numeric truncation error," a different vulnerability than CVE-2008-2152.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3282" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3282"/>
        <description>Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1, on 64-bit platforms, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted document, related to a "numeric truncation error," a different vulnerability than CVE-2008-2152.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:19.399-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:54.554-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:38.062-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11345 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:14.413-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:24.208-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="openoffice.org-langpack-sk_SK is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37013"/>
          <criterion comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:36640"/>
          <criterion comment="openoffice.org-langpack-pa_IN is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37314"/>
          <criterion comment="openoffice.org-langpack-hi_IN is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37376"/>
          <criterion comment="openoffice.org-langpack-et_EE is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37566"/>
          <criterion comment="openoffice.org-langpack-kn_IN is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:36758"/>
          <criterion comment="openoffice.org is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37549"/>
          <criterion comment="openoffice.org-langpack-zh_TW is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37565"/>
          <criterion comment="openoffice.org-writer is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37526"/>
          <criterion comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:36628"/>
          <criterion comment="openoffice.org-langpack-ga_IE is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37209"/>
          <criterion comment="openoffice.org-langpack-ta_IN is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37029"/>
          <criterion comment="openoffice.org-langpack-ko_KR is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37469"/>
          <criterion comment="openoffice.org-langpack-or_IN is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37590"/>
          <criterion comment="openoffice.org-langpack-da_DK is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:36998"/>
          <criterion comment="openoffice.org-langpack-sr_CS is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37570"/>
          <criterion comment="openoffice.org-langpack-pl_PL is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37081"/>
          <criterion comment="openoffice.org-langpack-fr is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37309"/>
          <criterion comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37477"/>
          <criterion comment="openoffice.org-javafilter is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37074"/>
          <criterion comment="openoffice.org-langpack-as_IN is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37380"/>
          <criterion comment="openoffice.org-testtools is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37301"/>
          <criterion comment="openoffice.org-langpack-hr_HR is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37585"/>
          <criterion comment="openoffice.org-langpack-de is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37560"/>
          <criterion comment="openoffice.org-emailmerge is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37622"/>
          <criterion comment="openoffice.org-xsltfilter is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37537"/>
          <criterion comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37623"/>
          <criterion comment="openoffice.org-langpack-te_IN is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37387"/>
          <criterion comment="openoffice.org-langpack-sv is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37385"/>
          <criterion comment="openoffice.org-base is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37608"/>
          <criterion comment="openoffice.org-langpack-ca_ES is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37559"/>
          <criterion comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37094"/>
          <criterion comment="openoffice.org-core is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37336"/>
          <criterion comment="openoffice.org-langpack-nl is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37197"/>
          <criterion comment="openoffice.org-langpack-ur is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37571"/>
          <criterion comment="openoffice.org-langpack-nn_NO is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37576"/>
          <criterion comment="openoffice.org-langpack-ar is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37591"/>
          <criterion comment="openoffice.org-langpack-ja_JP is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37478"/>
          <criterion comment="openoffice.org-langpack-gu_IN is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37500"/>
          <criterion comment="openoffice.org-langpack-tr_TR is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37550"/>
          <criterion comment="openoffice.org-langpack-eu_ES is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37442"/>
          <criterion comment="openoffice.org-langpack-fi_FI is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37473"/>
          <criterion comment="openoffice.org-graphicfilter is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37586"/>
          <criterion comment="openoffice.org-pyuno is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37476"/>
          <criterion comment="openoffice.org-langpack-ml_IN is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37513"/>
          <criterion comment="openoffice.org-langpack-gl_ES is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:36893"/>
          <criterion comment="openoffice.org-sdk-doc is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:36950"/>
          <criterion comment="openoffice.org-langpack-zh_CN is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37547"/>
          <criterion comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37089"/>
          <criterion comment="openoffice.org-langpack-it is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37572"/>
          <criterion comment="openoffice.org-sdk is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37317"/>
          <criterion comment="openoffice.org-langpack-es is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37482"/>
          <criterion comment="openoffice.org-langpack-nb_NO is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37503"/>
          <criterion comment="openoffice.org-langpack-sl_SI is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:36796"/>
          <criterion comment="openoffice.org-draw is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37616"/>
          <criterion comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37530"/>
          <criterion comment="openoffice.org-langpack-ms_MY is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37451"/>
          <criterion comment="openoffice.org-langpack-el_GR is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37540"/>
          <criterion comment="openoffice.org-langpack-hu_HU is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37519"/>
          <criterion comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37539"/>
          <criterion comment="openoffice.org-langpack-bn is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37237"/>
          <criterion comment="openoffice.org-langpack-he_IL is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37494"/>
          <criterion comment="openoffice.org-langpack-pt_PT is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37364"/>
          <criterion comment="openoffice.org-langpack-lt_LT is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37558"/>
          <criterion comment="openoffice.org-langpack-af_ZA is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37096"/>
          <criterion comment="openoffice.org-langpack-bg_BG is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37253"/>
          <criterion comment="openoffice.org-calc is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:36965"/>
          <criterion comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37541"/>
          <criterion comment="openoffice.org-langpack-cy_GB is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37437"/>
          <criterion comment="openoffice.org-langpack-mr_IN is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37516"/>
          <criterion comment="openoffice.org-headless is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37173"/>
          <criterion comment="openoffice.org-langpack-th_TH is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37222"/>
          <criterion comment="openoffice.org-langpack-pt_BR is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37381"/>
          <criterion comment="openoffice.org-langpack-ru is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37145"/>
          <criterion comment="openoffice.org-math is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:36829"/>
          <criterion comment="openoffice.org-impress is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:37246"/>
          <criterion comment="openoffice.org-langpack-st_ZA is earlier than 1:2.3.0-6.5.2.el5_2" test_ref="oval:org.mitre.oval:tst:36952"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11344" version="5" class="vulnerability">
      <metadata>
        <title>Buffer underflow in the ibwdt_ioctl function in drivers/watchdog/ib700wdt.c in the Linux kernel before 2.6.28-rc1 might allow local users to have an unknown impact via a certain /dev/watchdog WDIOC_SETTIMEOUT IOCTL call.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5702" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5702"/>
        <description>Buffer underflow in the ibwdt_ioctl function in drivers/watchdog/ib700wdt.c in the Linux kernel before 2.6.28-rc1 might allow local users to have an unknown impact via a certain /dev/watchdog WDIOC_SETTIMEOUT IOCTL call.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:21.653-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:54.224-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:37.693-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11344 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:49.331-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:23.742-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-xenU is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37830"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37968"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37984"/>
          <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37633"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37352"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:38043"/>
          <criterion comment="kernel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37989"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37908"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37748"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37825"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:38002"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11343" version="5" class="vulnerability">
      <metadata>
        <title>LdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier does not close the connection when initialization fails, which allows remote attackers to cause a denial of service (LDAP service hang).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1093" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1093"/>
        <description>LdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier does not close the connection when initialization fails, which allows remote attackers to cause a denial of service (LDAP service hang).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:37.829-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:53.932-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:37.447-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11343 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:52.813-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:23.411-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:38276"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37661"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37652"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37769"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:38561"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11342" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the LLT dissector in Wireshark (formerly Ethereal) 0.99.3 and 0.99.4 allows remote attackers to cause a denial of service (application crash) via unspecified vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0456"/>
        <description>Unspecified vulnerability in the LLT dissector in Wireshark (formerly Ethereal) 0.99.3 and 0.99.4 allows remote attackers to cause a denial of service (application crash) via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:35.603-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:53.619-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:37.142-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11342 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:33.719-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:22.906-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.5-EL3.1" test_ref="oval:org.mitre.oval:tst:33506"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.5-EL3.1" test_ref="oval:org.mitre.oval:tst:33535"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.5-EL4.1" test_ref="oval:org.mitre.oval:tst:33380"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.5-EL4.1" test_ref="oval:org.mitre.oval:tst:33530"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.5-1.el5" test_ref="oval:org.mitre.oval:tst:33509"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.5-1.el5" test_ref="oval:org.mitre.oval:tst:33591"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11341" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1993" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1993"/>
        <description>Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:51.982-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:53.401-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:36.873-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11341 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:03.606-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:22.554-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="sudo is earlier than 0:1.6.7p5-1.1" test_ref="oval:org.mitre.oval:tst:31628"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="sudo is earlier than 0:1.6.7p5-30.1.1" test_ref="oval:org.mitre.oval:tst:31653"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11340" version="5" class="vulnerability">
      <metadata>
        <title>cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted image that triggers execution of incorrect code for "transformations of monochrome profiles."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0793" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0793"/>
        <description>cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted image that triggers execution of incorrect code for "transformations of monochrome profiles."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:22.563-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:53.172-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:36.629-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11340 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:33.262-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:22.205-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:38276"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37661"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37652"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37769"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:38561"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11339" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the X render (Xrender) extension in X.org X server 6.8.0 up to allows attackers to cause a denial of service (crash), as demonstrated by the (1) XRenderCompositeTriStrip and (2) XRenderCompositeTriFan requests in the rendertest from XCB xcb/xcb-demo, which leads to an incorrect memory allocation due to a typo in an expression that uses a "" instead of a "*" operator. NOTE: the subject line of the original announcement used an incorrect CVE number for this issue.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0337" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0337"/>
        <description>Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in smtpd_recipient_restrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:43.255-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:52.881-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:36.423-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11339 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:10.963-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:21.852-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="postfix-pflogsumm is earlier than 2:2.1.5-4.2.RHEL4" test_ref="oval:org.mitre.oval:tst:30929"/>
          <criterion comment="postfix is earlier than 2:2.1.5-4.2.RHEL4" test_ref="oval:org.mitre.oval:tst:31211"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11338" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x (aka StarOffice) up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox and conduct unauthorized activities via certain applets in OpenOffice documents.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2199" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2199"/>
        <description>Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x (aka StarOffice) up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox and conduct unauthorized activities via certain applets in OpenOffice documents.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:57.430-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:52.600-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:36.123-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11338 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:30.895-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:21.438-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-34.2.0.EL3" test_ref="oval:org.mitre.oval:tst:32211"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.2-34.2.0.EL3" test_ref="oval:org.mitre.oval:tst:32773"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-34.2.0.EL3" test_ref="oval:org.mitre.oval:tst:31834"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-34.6.0.EL4" test_ref="oval:org.mitre.oval:tst:32763"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.2-34.6.0.EL4" test_ref="oval:org.mitre.oval:tst:32657"/>
            <criterion comment="openoffice.org-kde is earlier than 0:1.1.2-34.6.0.EL4" test_ref="oval:org.mitre.oval:tst:32835"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-34.6.0.EL4" test_ref="oval:org.mitre.oval:tst:32791"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11337" version="5" class="vulnerability">
      <metadata>
        <title>The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0859" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0859"/>
        <description>The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:34.072-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:52.329-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:35.787-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11337 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:51.429-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:21.088-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="glibc is earlier than 0:2.3.2-95.6" test_ref="oval:org.mitre.oval:tst:30414"/>
          <criterion comment="glibc-utils is earlier than 0:2.3.2-95.6" test_ref="oval:org.mitre.oval:tst:30269"/>
          <criterion comment="glibc-devel is earlier than 0:2.3.2-95.6" test_ref="oval:org.mitre.oval:tst:29718"/>
          <criterion comment="nptl-devel is earlier than 0:2.3.2-95.6" test_ref="oval:org.mitre.oval:tst:30380"/>
          <criterion comment="nscd is earlier than 0:2.3.2-95.6" test_ref="oval:org.mitre.oval:tst:30097"/>
          <criterion comment="glibc-profile is earlier than 0:2.3.2-95.6" test_ref="oval:org.mitre.oval:tst:30446"/>
          <criterion comment="glibc-common is earlier than 0:2.3.2-95.6" test_ref="oval:org.mitre.oval:tst:30585"/>
          <criterion comment="glibc-headers is earlier than 0:2.3.2-95.6" test_ref="oval:org.mitre.oval:tst:30030"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11336" version="5" class="vulnerability">
      <metadata>
        <title>The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of service (disk consumption) and possibly gain privileges via the PR_SET_DUMPABLE argument of the prctl function and a program that causes a core dump file to be created in a directory for which the user does not have permissions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2451" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2451"/>
        <description>The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of service (disk consumption) and possibly gain privileges via the PR_SET_DUMPABLE argument of the prctl function and a program that causes a core dump file to be created in a directory for which the user does not have permissions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:24.344-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:51.999-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:35.490-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11336 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:36:27.506-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:20.485-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-34.0.2.EL" test_ref="oval:org.mitre.oval:tst:31895"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-34.0.2.EL" test_ref="oval:org.mitre.oval:tst:32477"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-34.0.2.EL" test_ref="oval:org.mitre.oval:tst:32641"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-34.0.2.EL" test_ref="oval:org.mitre.oval:tst:32569"/>
          <criterion comment="kernel is earlier than 0:2.6.9-34.0.2.EL" test_ref="oval:org.mitre.oval:tst:31838"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-34.0.2.EL" test_ref="oval:org.mitre.oval:tst:32186"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-34.0.2.EL" test_ref="oval:org.mitre.oval:tst:32797"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-34.0.2.EL" test_ref="oval:org.mitre.oval:tst:32539"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-34.0.2.EL" test_ref="oval:org.mitre.oval:tst:32419"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11335" version="5" class="vulnerability">
      <metadata>
        <title>The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) in determining the memory access available to CPL3 code, which allows guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, a related issue to CVE-2010-0306.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0298" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0298"/>
        <description>The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) in determining the memory access available to CPL3 code, which allows guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, a related issue to CVE-2010-0306.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:56.815-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:51.756-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:35.108-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11335 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:08.754-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:20.161-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kmod-kvm is earlier than 0:83-105.el5_4.22" test_ref="oval:org.mitre.oval:tst:39907"/>
          <criterion comment="kvm-qemu-img is earlier than 0:83-105.el5_4.22" test_ref="oval:org.mitre.oval:tst:39965"/>
          <criterion comment="kvm-tools is earlier than 0:83-105.el5_4.22" test_ref="oval:org.mitre.oval:tst:40075"/>
          <criterion comment="kvm is earlier than 0:83-105.el5_4.22" test_ref="oval:org.mitre.oval:tst:39881"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11334" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0.5 allows remote attackers to steal information and possibly execute arbitrary code by using standalone applications such as Flash and QuickTime to open a javascript: URL, which is run in the context of the previous page, and may lead to code execution if the standalone application loads a privileged chrome: URL.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2267" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2267"/>
        <description>Firefox before 1.0.5 allows remote attackers to steal information and possibly execute arbitrary code by using standalone applications such as Flash and QuickTime to open a javascript: URL, which is run in the context of the previous page, and may lead to code execution if the standalone application loads a privileged chrome: URL.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:32.128-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:51.280-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:34.580-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11334 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:30.496-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:19.491-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32142"/>
            <criterion comment="mozilla is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32131"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32154"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32001"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32171"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32162"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31782"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32041"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32004"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31353"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32120"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.6" test_ref="oval:org.mitre.oval:tst:31633"/>
            <criterion comment="mozilla is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31837"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32100"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31821"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31904"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.6" test_ref="oval:org.mitre.oval:tst:31814"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31951"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31554"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32149"/>
            <criterion comment="firefox is earlier than 0:1.0.6-1.4.1" test_ref="oval:org.mitre.oval:tst:32167"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31998"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32061"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11332" version="5" class="vulnerability">
      <metadata>
        <title>The Orinoco driver (orinoco.c) in Linux kernel 2.6.13 and earlier does not properly clear memory from a previously used packet whose length is increased, which allows remote attackers to obtain sensitive information.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3180" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3180"/>
        <description>The Orinoco driver (orinoco.c) in Linux kernel 2.6.13 and earlier does not properly clear memory from a previously used packet whose length is increased, which allows remote attackers to obtain sensitive information.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:39.512-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:50.590-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:34.178-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11332 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:27.983-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:18.927-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32525"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32366"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32381"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32215"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32464"/>
            <criterion comment="kernel is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32288"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:31978"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32438"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32070"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32382"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32096"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32404"/>
            <criterion comment="kernel is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32387"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32210"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32355"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32373"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11331" version="5" class="vulnerability">
      <metadata>
        <title>The JavaScript engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain vectors that trigger memory corruption.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0777" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0777"/>
        <description>The JavaScript engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain vectors that trigger memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:45.140-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:49.931-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:33.491-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11331 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:10.778-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:18.096-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33391"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33688"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33675"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33724"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33510"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33409"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33467"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33658"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33649"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33381"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:32760"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33554"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33648"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.10-0.1.el4" test_ref="oval:org.mitre.oval:tst:32765"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33712"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33705"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33379"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:33400"/>
            <criterion comment="firefox is earlier than 0:1.5.0.10-0.1.el4" test_ref="oval:org.mitre.oval:tst:33759"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33678"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33695"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33697"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33244"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33645"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.10-2.el5" test_ref="oval:org.mitre.oval:tst:33461"/>
            <criterion comment="yelp is earlier than 0:2.16.0-14.0.1.el5" test_ref="oval:org.mitre.oval:tst:33761"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-10.0.1.el5" test_ref="oval:org.mitre.oval:tst:33744"/>
            <criterion comment="devhelp is earlier than 0:0.12-10.0.1.el5" test_ref="oval:org.mitre.oval:tst:33415"/>
            <criterion comment="firefox is earlier than 0:1.5.0.10-2.el5" test_ref="oval:org.mitre.oval:tst:33616"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.10-1.el5" test_ref="oval:org.mitre.oval:tst:33493"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1133" version="5" class="vulnerability">
      <metadata>
        <title>Scob and Toofer Internet Explorer v6.0,SP1 Vulnerabilities</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0549" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0549"/>
        <description>The WebBrowser ActiveX control, or the Internet Explorer HTML rendering engine (MSHTML), as used in Internet Explorer 6, allows remote attackers to execute arbitrary code in the Local Security context by using the showModalDialog method and modifying the location to execute code such as Javascript, as demonstrated using (1) delayed HTTP redirect operations, and an HTTP response with a Location: header containing a "URL:" prepended to a "ms-its" protocol URI, or (2) modifying the location attribute of the window, as exploited by the Download.ject (aka Scob aka Toofer) using the ADODB.Stream object.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-08-02T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-08-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T11:01:00.000-04:00" comment="modified wft-267 - Changed comment to match test">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:46:06.728-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:32.598-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:42.193-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:08.969-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2800.1458" negate="false" test_ref="oval:org.mitre.oval:tst:2765"/>
          <criterion comment="the patch kb832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2802"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11329" version="5" class="vulnerability">
      <metadata>
        <title>Linux kernel before 2.4.21 allows local users to cause a denial of service (kernel panic) via asynchronous input or output on a FIFO special file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5001" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5001"/>
        <description>Linux kernel before 2.4.21 allows local users to cause a denial of service (kernel panic) via asynchronous input or output on a FIFO special file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:22.891-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:49.627-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:33.199-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11329 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:50.422-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:17.687-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:35915"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:35794"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36513"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36264"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36161"/>
          <criterion comment="kernel is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36518"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36597"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36612"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36171"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11328" version="5" class="vulnerability">
      <metadata>
        <title>The kvm_emulate_hypercall function in arch/x86/kvm/x86.c in KVM in the Linux kernel 2.6.25-rc1, and other versions before 2.6.31, when running on x86 systems, does not prevent access to MMU hypercalls from ring 0, which allows local guest OS users to cause a denial of service (guest kernel crash) and read or write guest kernel memory via unspecified "random addresses."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3290" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3290"/>
        <description>The kvm_emulate_hypercall function in arch/x86/kvm/x86.c in KVM in the Linux kernel 2.6.25-rc1, and other versions before 2.6.31, when running on x86 systems, does not prevent access to MMU hypercalls from ring 0, which allows local guest OS users to cause a denial of service (guest kernel crash) and read or write guest kernel memory via unspecified "random addresses."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:00.279-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:49.403-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:32.911-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11328 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:10.700-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:17.261-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kmod-kvm is earlier than 0:83-105.el5_4.7" test_ref="oval:org.mitre.oval:tst:39281"/>
          <criterion comment="kvm-qemu-img is earlier than 0:83-105.el5_4.7" test_ref="oval:org.mitre.oval:tst:39372"/>
          <criterion comment="kvm-tools is earlier than 0:83-105.el5_4.7" test_ref="oval:org.mitre.oval:tst:39441"/>
          <criterion comment="kvm is earlier than 0:83-105.el5_4.7" test_ref="oval:org.mitre.oval:tst:39186"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11327" version="5" class="vulnerability">
      <metadata>
        <title>Directory traversal vulnerability in smbfs in Linux 2.6.16 and earlier allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences, a similar vulnerability to CVE-2006-1863.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1864" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1864"/>
        <description>Directory traversal vulnerability in smbfs in Linux 2.6.16 and earlier allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences, a similar vulnerability to CVE-2006-1863.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:28.349-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:48.942-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:32.487-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11327 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:21.152-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:16.674-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33074"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:32633"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33103"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33001"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:32937"/>
            <criterion comment="kernel is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:32280"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33127"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:32855"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33021"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32235"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32371"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32703"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32314"/>
            <criterion comment="kernel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32614"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32295"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32310"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32611"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32305"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11326" version="5" class="vulnerability">
      <metadata>
        <title>The audio system in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by (1) untrusted applets and (2) Java Web Start applications, which allows context-dependent attackers to obtain sensitive information by reading these properties.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2670"/>
        <description>The audio system in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by (1) untrusted applets and (2) Java Web Start applications, which allows context-dependent attackers to obtain sensitive information by reading these properties.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:08.214-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:48.712-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:32.190-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11326 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:29.591-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:16.342-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38942"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38825"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38972"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38267"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:39037"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11325" version="5" class="vulnerability">
      <metadata>
        <title>Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arbitrary code via a crafted TTF image with a negative n_points value, which leads to an integer overflow and heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2754"/>
        <description>Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arbitrary code via a crafted TTF image with a negative n_points value, which leads to an integer overflow and heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:38.831-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:48.365-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:31.752-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11325 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:14.862-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:15.770-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="freetype is earlier than 0:2.1.4-12.el3" test_ref="oval:org.mitre.oval:tst:37450"/>
            <criterion comment="freetype-devel is earlier than 0:2.1.4-12.el3" test_ref="oval:org.mitre.oval:tst:38245"/>
            <criterion comment="freetype-demos is earlier than 0:2.1.4-12.el3" test_ref="oval:org.mitre.oval:tst:38284"/>
            <criterion comment="freetype-utils is earlier than 0:2.1.4-12.el3" test_ref="oval:org.mitre.oval:tst:38008"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="freetype is earlier than 0:2.1.9-10.el4.7" test_ref="oval:org.mitre.oval:tst:38414"/>
            <criterion comment="freetype-demos is earlier than 0:2.1.9-10.el4.7" test_ref="oval:org.mitre.oval:tst:38395"/>
            <criterion comment="freetype-devel is earlier than 0:2.1.9-10.el4.7" test_ref="oval:org.mitre.oval:tst:38442"/>
            <criterion comment="freetype-utils is earlier than 0:2.1.9-10.el4.7" test_ref="oval:org.mitre.oval:tst:38234"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="freetype is earlier than 0:2.2.1-19.el5" test_ref="oval:org.mitre.oval:tst:33863"/>
            <criterion comment="freetype-demos is earlier than 0:2.2.1-19.el5" test_ref="oval:org.mitre.oval:tst:34305"/>
            <criterion comment="freetype-devel is earlier than 0:2.2.1-19.el5" test_ref="oval:org.mitre.oval:tst:33877"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11324" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the RMI dissector in Wireshark (formerly Ethereal) 0.9.5 through 1.0.0 allows remote attackers to read system memory via unspecified vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3141" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3141"/>
        <description>Unspecified vulnerability in the RMI dissector in Wireshark (formerly Ethereal) 0.9.5 through 1.0.0 allows remote attackers to read system memory via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:08.873-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:48.077-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:31.446-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11324 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:19.559-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:15.294-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-EL3.3" test_ref="oval:org.mitre.oval:tst:37624"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-EL3.3" test_ref="oval:org.mitre.oval:tst:37207"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-3.el4_7" test_ref="oval:org.mitre.oval:tst:37249"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-3.el4_7" test_ref="oval:org.mitre.oval:tst:37725"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37542"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37460"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11323" version="5" class="vulnerability">
      <metadata>
        <title>Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0800" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0800"/>
        <description>Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:55.795-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:47.430-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:30.788-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11323 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:49.330-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:14.435-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="xpdf is earlier than 1:2.02-14.el3" test_ref="oval:org.mitre.oval:tst:38322"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40095"/>
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-13.el4" test_ref="oval:org.mitre.oval:tst:38126"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:39528"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-13.el4" test_ref="oval:org.mitre.oval:tst:38230"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40473"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38481"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40316"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-7.7.2.el4_7.4" test_ref="oval:org.mitre.oval:tst:38436"/>
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38145"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40209"/>
            <criterion comment="xpdf is earlier than 1:3.00-20.el4" test_ref="oval:org.mitre.oval:tst:38649"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40364"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40077"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38607"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.5.4-12.el5_3" test_ref="oval:org.mitre.oval:tst:38618"/>
            <criterion comment="cups-lpd is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38471"/>
            <criterion comment="tetex-dvips is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40312"/>
            <criterion comment="kdegraphics is earlier than 7:3.5.4-12.el5_3" test_ref="oval:org.mitre.oval:tst:38271"/>
            <criterion comment="poppler is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38760"/>
            <criterion comment="tetex-fonts is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40122"/>
            <criterion comment="cups-libs is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38541"/>
            <criterion comment="tetex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40413"/>
            <criterion comment="tetex-doc is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40398"/>
            <criterion comment="poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38500"/>
            <criterion comment="tetex-latex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40444"/>
            <criterion comment="poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38512"/>
            <criterion comment="cups-devel is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:37935"/>
            <criterion comment="tetex-afm is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40008"/>
            <criterion comment="tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:39920"/>
            <criterion comment="cups is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38334"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11322" version="5" class="vulnerability">
      <metadata>
        <title>mm/ioremap.c in Linux 2.6 on 64-bit x86 systems allows local users to cause a denial of service or an information leak via an ioremap on a certain memory map that causes the iounmap to perform a lookup of a page that does not exist.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3108" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3108"/>
        <description>mm/ioremap.c in Linux 2.6 on 64-bit x86 systems allows local users to cause a denial of service or an information leak via an ioremap on a certain memory map that causes the iounmap to perform a lookup of a page that does not exist.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:25.312-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:47.170-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:30.520-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11322 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:36:14.760-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:14.019-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32382"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32096"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32404"/>
          <criterion comment="kernel is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32387"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32210"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32355"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32373"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11321" version="5" class="vulnerability">
      <metadata>
        <title>Buffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via unspecified vectors involving the sapi_header_op function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0907" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0907"/>
        <description>Buffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via unspecified vectors involving the sapi_header_op function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:28.725-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:46.434-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:29.751-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11321 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:55.255-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:13.129-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33459"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33371"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33748"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33090"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33419"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33665"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33475"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33282"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33636"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33548"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33156"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33407"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33562"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33500"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33725"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33105"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33501"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33691"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33662"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33087"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33640"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:32784"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33240"/>
            <criterion comment="php-common is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33527"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33617"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33561"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33385"/>
            <criterion comment="php is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33615"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33526"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33747"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33735"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33403"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33686"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33502"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33666"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33508"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33652"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33676"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33784"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33706"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11319" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in the DICOM dissector in Ethereal 0.10.4 through 0.10.7 allows remote attackers to cause a denial of service (application crash).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1139" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1139"/>
        <description>Unknown vulnerability in the DICOM dissector in Ethereal 0.10.4 through 0.10.7 allows remote attackers to cause a denial of service (application crash).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:35.776-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:46.190-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:29.492-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11319 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:20.923-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:12.680-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.9-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31265"/>
            <criterion comment="ethereal is earlier than 0:0.10.9-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31218"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.9-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31097"/>
            <criterion comment="ethereal is earlier than 0:0.10.9-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31103"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11318" version="5" class="vulnerability">
      <metadata>
        <title>The snmp_trap_decode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service (crash) via unspecified remote attack vectors that cause failures in snmp_trap_decode that trigger (1) frees of random memory or (2) frees of previously-freed memory (double-free) by snmp_trap_decode as well as its calling function, as demonstrated via certain test cases of the PROTOS SNMP test suite.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2444" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2444"/>
        <description>The snmp_trap_decode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service (crash) via unspecified remote attack vectors that cause failures in snmp_trap_decode that trigger (1) frees of random memory or (2) frees of previously-freed memory (double-free) by snmp_trap_decode as well as its calling function, as demonstrated via certain test cases of the PROTOS SNMP test suite.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:25.828-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:45.726-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:29.055-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11318 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:46.131-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:12.126-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32158"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32589"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32704"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32562"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32078"/>
            <criterion comment="kernel is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32513"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32231"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32097"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32708"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32576"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32814"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32958"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32801"/>
            <criterion comment="kernel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32865"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32880"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32747"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32200"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32838"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11317" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0.7 and Mozilla before Suite 1.7.12 allows remote attackers to execute Javascript with chrome privileges via an about: page such as about:mozilla.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2706" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2706"/>
        <description>Firefox before 1.0.7 and Mozilla before Suite 1.7.12 allows remote attackers to execute Javascript with chrome privileges via an about: page such as about:mozilla.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:44.795-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:45.241-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:28.510-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11317 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:53.822-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:11.438-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32169"/>
            <criterion comment="mozilla is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:31729"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32242"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32151"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32014"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32144"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32068"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32248"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32293"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32044"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32244"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.7" test_ref="oval:org.mitre.oval:tst:32012"/>
            <criterion comment="mozilla is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:31897"/>
            <criterion comment="thunderbird is earlier than 0:1.0.7-1.4.1" test_ref="oval:org.mitre.oval:tst:31477"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32300"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32226"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32289"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.7" test_ref="oval:org.mitre.oval:tst:32170"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32150"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32302"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32090"/>
            <criterion comment="firefox is earlier than 0:1.0.7-1.4.1" test_ref="oval:org.mitre.oval:tst:32147"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32209"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32088"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11316" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in the mod_proxy_ftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote attackers to inject arbitrary web script or HTML via a wildcard in the last directory component in the pathname in an FTP URI.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2939" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2939"/>
        <description>Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in the mod_proxy_ftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote attackers to inject arbitrary web script or HTML via a wildcard in the last directory component in the pathname in an FTP URI.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:06.880-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:44.807-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:28.125-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11316 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:52.378-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:10.856-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-devel is earlier than 0:2.0.46-71.ent" test_ref="oval:org.mitre.oval:tst:37941"/>
            <criterion comment="mod_ssl is earlier than 0:2.0.46-71.ent" test_ref="oval:org.mitre.oval:tst:37561"/>
            <criterion comment="httpd is earlier than 0:2.0.46-71.ent" test_ref="oval:org.mitre.oval:tst:37595"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-suexec is earlier than 0:2.0.52-41.ent.2" test_ref="oval:org.mitre.oval:tst:37897"/>
            <criterion comment="httpd-manual is earlier than 0:2.0.52-41.ent.2" test_ref="oval:org.mitre.oval:tst:37670"/>
            <criterion comment="httpd-devel is earlier than 0:2.0.52-41.ent.2" test_ref="oval:org.mitre.oval:tst:37862"/>
            <criterion comment="mod_ssl is earlier than 0:2.0.52-41.ent.2" test_ref="oval:org.mitre.oval:tst:37679"/>
            <criterion comment="httpd is earlier than 0:2.0.52-41.ent.2" test_ref="oval:org.mitre.oval:tst:37575"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-manual is earlier than 0:2.2.3-11.el5_2.4" test_ref="oval:org.mitre.oval:tst:37895"/>
            <criterion comment="httpd-devel is earlier than 0:2.2.3-11.el5_2.4" test_ref="oval:org.mitre.oval:tst:37730"/>
            <criterion comment="mod_ssl is earlier than 0:2.2.3-11.el5_2.4" test_ref="oval:org.mitre.oval:tst:36990"/>
            <criterion comment="httpd is earlier than 0:2.2.3-11.el5_2.4" test_ref="oval:org.mitre.oval:tst:37803"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11315" version="5" class="vulnerability">
      <metadata>
        <title>NetworkManager (NM) 0.7.2 does not ensure that the configured Certification Authority (CA) certificate file for a (1) WPA Enterprise or (2) 802.1x network remains present upon a connection attempt, which might allow remote attackers to obtain sensitive information or cause a denial of service (connectivity disruption) by spoofing the identity of a wireless network.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4144" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4144"/>
        <description>NetworkManager (NM) 0.7.2 does not ensure that the configured Certification Authority (CA) certificate file for a (1) WPA Enterprise or (2) 802.1x network remains present upon a connection attempt, which might allow remote attackers to obtain sensitive information or cause a denial of service (connectivity disruption) by spoofing the identity of a wireless network.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:25.506-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:44.577-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:27.841-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11315 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:47:15.736-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:10.510-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="NetworkManager-gnome is earlier than 1:0.7.0-9.el5_4" test_ref="oval:org.mitre.oval:tst:40322"/>
          <criterion comment="NetworkManager-glib-devel is earlier than 1:0.7.0-9.el5_4" test_ref="oval:org.mitre.oval:tst:40269"/>
          <criterion comment="NetworkManager-glib is earlier than 1:0.7.0-9.el5_4" test_ref="oval:org.mitre.oval:tst:39697"/>
          <criterion comment="NetworkManager-devel is earlier than 1:0.7.0-9.el5_4" test_ref="oval:org.mitre.oval:tst:40305"/>
          <criterion comment="NetworkManager is earlier than 1:0.7.0-9.el5_4" test_ref="oval:org.mitre.oval:tst:39987"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11314" version="5" class="vulnerability">
      <metadata>
        <title>The layout engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain vectors that trigger memory corruption and assertion failures.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0771" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0771"/>
        <description>The layout engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain vectors that trigger memory corruption and assertion failures.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:53.900-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:44.325-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:27.577-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11314 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:36:02.123-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:09.892-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.7-1.el4" test_ref="oval:org.mitre.oval:tst:38405"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:38168"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:37685"/>
            <criterion comment="firefox is earlier than 0:3.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:38372"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:38365"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11313" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in Mozilla Thunderbird before 1.5.0.10 and SeaMonkey before 1.0.8 allows remote attackers to trigger a buffer overflow and possibly execute arbitrary code via a text/enhanced or text/richtext e-mail message with an extremely long line.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1282" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1282"/>
        <description>Integer overflow in Mozilla Thunderbird before 1.5.0.10 and SeaMonkey before 1.0.8 allows remote attackers to trigger a buffer overflow and possibly execute arbitrary code via a text/enhanced or text/richtext e-mail message with an extremely long line.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:25.307-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:43.771-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:26.954-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11313 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:19.242-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:09.201-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33391"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33688"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33675"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33724"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33510"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33409"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33467"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33658"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33649"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33381"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:32760"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33554"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33648"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.10-0.1.el4" test_ref="oval:org.mitre.oval:tst:32765"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33712"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33705"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33379"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:33400"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33678"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33695"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33697"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33244"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33645"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="thunderbird is earlier than 0:1.5.0.10-1.el5" test_ref="oval:org.mitre.oval:tst:33493"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11312" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0409" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0409"/>
        <description>Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:40.612-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:43.591-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:26.752-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11312 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:51.591-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:08.861-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="xchat is earlier than 1:2.0.4-4.EL" test_ref="oval:org.mitre.oval:tst:30897"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11311" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary code via a DVI file with a long href tag.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5935" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5935"/>
        <description>Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary code via a DVI file with a long href tag.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:59.422-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:43.232-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:26.375-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11311 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:49.957-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:08.362-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:39543"/>
            <criterion comment="tetex-afm is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40329"/>
            <criterion comment="tetex-xdvi is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40000"/>
            <criterion comment="tetex-dvips is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40032"/>
            <criterion comment="tetex-doc is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40150"/>
            <criterion comment="tetex-fonts is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40389"/>
            <criterion comment="tetex is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40303"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40095"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40209"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40364"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:39528"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40077"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40473"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40316"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11309" version="5" class="vulnerability">
      <metadata>
        <title>Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to cause a denial of service (memory consumption) via DTLS records that (1) are duplicates or (2) have sequence numbers much greater than current sequence numbers, aka "DTLS fragment handling memory leak."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1378" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1378"/>
        <description>Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to cause a denial of service (memory consumption) via DTLS records that (1) are duplicates or (2) have sequence numbers much greater than current sequence numbers, aka "DTLS fragment handling memory leak."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:07.300-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:42.960-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:26.158-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11309 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:12.094-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:07.986-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="openssl-perl is earlier than 0:0.9.8e-12.el5" test_ref="oval:org.mitre.oval:tst:39059"/>
          <criterion comment="openssl-devel is earlier than 0:0.9.8e-12.el5" test_ref="oval:org.mitre.oval:tst:38295"/>
          <criterion comment="openssl is earlier than 0:0.9.8e-12.el5" test_ref="oval:org.mitre.oval:tst:38660"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11307" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the GSM BSSMAP dissector in Wireshark (aka Ethereal) 0.10.11 to 0.99.0 allows remote attackers to cause a denial of service (crash) via unspecified vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3627" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3627"/>
        <description>Unspecified vulnerability in the GSM BSSMAP dissector in Wireshark (aka Ethereal) 0.10.11 to 0.99.0 allows remote attackers to cause a denial of service (crash) via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:01.925-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:42.702-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:25.858-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11307 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:22.885-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:07.614-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.2-EL3.1" test_ref="oval:org.mitre.oval:tst:32882"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.2-EL3.1" test_ref="oval:org.mitre.oval:tst:32738"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.2-EL4.1" test_ref="oval:org.mitre.oval:tst:32917"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.2-EL4.1" test_ref="oval:org.mitre.oval:tst:32447"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11306" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related to the font escape sequence.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0198" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0198"/>
        <description>A logic error in the CRAM-MD5 code for the University of Washington IMAP (UW-IMAP) server, when Challenge-Response Authentication Mechanism with MD5 (CRAM-MD5) is enabled, does not properly enforce all the required conditions for successful authentication, which allows remote attackers to authenticate as arbitrary users.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:59.077-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:42.490-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:25.642-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11306 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:40.846-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:07.330-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="imap-utils is earlier than 1:2002d-11" test_ref="oval:org.mitre.oval:tst:30984"/>
          <criterion comment="imap is earlier than 1:2002d-11" test_ref="oval:org.mitre.oval:tst:31122"/>
          <criterion comment="imap-devel is earlier than 1:2002d-11" test_ref="oval:org.mitre.oval:tst:31094"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11305" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via "jsstr tagify," which leads to memory corruption.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2780" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2780"/>
        <description>Integer overflow in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via "jsstr tagify," which leads to memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:58.684-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:41.960-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:24.688-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11305 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:05.395-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:06.692-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32575"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32674"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32918"/>
            <criterion comment="seamonkey is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32919"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32864"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32659"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32859"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32511"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32902"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32837"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32873"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32693"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32886"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32810"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32418"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32496"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32929"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32777"/>
            <criterion comment="firefox is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32896"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32722"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32906"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32905"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32925"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32624"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11303" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0455" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0455"/>
        <description>Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:42.200-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:41.181-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:23.842-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11303 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:13.355-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:05.695-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33776"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33817"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33769"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33528"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33915"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33822"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33351"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33405"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33642"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33024"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33995"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33690"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33892"/>
            <criterion comment="gd-progs is earlier than 0:2.0.28-5.4E.el4_6.1" test_ref="oval:org.mitre.oval:tst:35731"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33711"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33857"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33644"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33920"/>
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:34016"/>
            <criterion comment="gd-devel is earlier than 0:2.0.28-5.4E.el4_6.1" test_ref="oval:org.mitre.oval:tst:36408"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33957"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33395"/>
            <criterion comment="gd is earlier than 0:2.0.28-5.4E.el4_6.1" test_ref="oval:org.mitre.oval:tst:36386"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33945"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33809"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33997"/>
            <criterion comment="php-common is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33290"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33828"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33441"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:34008"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33560"/>
            <criterion comment="php is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33959"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33722"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33941"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33880"/>
            <criterion comment="gd-progs is earlier than 0:2.0.33-9.4.el5_1.1" test_ref="oval:org.mitre.oval:tst:35759"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33878"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33960"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33923"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33551"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33939"/>
            <criterion comment="gd-devel is earlier than 0:2.0.33-9.4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36448"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33626"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33770"/>
            <criterion comment="gd is earlier than 0:2.0.33-9.4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36297"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:34005"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11302" version="5" class="vulnerability">
      <metadata>
        <title>vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculating fold levels.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2368" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2368"/>
        <description>vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculating fold levels.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:03.905-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:40.830-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:23.515-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11302 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:01.468-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:05.232-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="vim-minimal is earlier than 1:6.3.046-0.30E.4" test_ref="oval:org.mitre.oval:tst:31943"/>
            <criterion comment="vim-enhanced is earlier than 1:6.3.046-0.30E.4" test_ref="oval:org.mitre.oval:tst:31844"/>
            <criterion comment="vim is earlier than 1:6.3.046-0.30E.4" test_ref="oval:org.mitre.oval:tst:32110"/>
            <criterion comment="vim-X11 is earlier than 1:6.3.046-0.30E.4" test_ref="oval:org.mitre.oval:tst:31611"/>
            <criterion comment="vim-common is earlier than 1:6.3.046-0.30E.4" test_ref="oval:org.mitre.oval:tst:31602"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="vim-minimal is earlier than 1:6.3.046-0.40E.7" test_ref="oval:org.mitre.oval:tst:32111"/>
            <criterion comment="vim-enhanced is earlier than 1:6.3.046-0.40E.7" test_ref="oval:org.mitre.oval:tst:32128"/>
            <criterion comment="vim is earlier than 1:6.3.046-0.40E.7" test_ref="oval:org.mitre.oval:tst:31668"/>
            <criterion comment="vim-X11 is earlier than 1:6.3.046-0.40E.7" test_ref="oval:org.mitre.oval:tst:32143"/>
            <criterion comment="vim-common is earlier than 1:6.3.046-0.40E.7" test_ref="oval:org.mitre.oval:tst:31994"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11301" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors involving decoding large RLE images.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3462" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3462"/>
        <description>Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors involving decoding large RLE images.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:05.478-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:40.370-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:23.239-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11301 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:59.834-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:04.456-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.1.3-3.10" test_ref="oval:org.mitre.oval:tst:32819"/>
            <criterion comment="libtiff is earlier than 0:3.5.7-25.el3.4" test_ref="oval:org.mitre.oval:tst:32069"/>
            <criterion comment="kdegraphics is earlier than 7:3.1.3-3.10" test_ref="oval:org.mitre.oval:tst:33012"/>
            <criterion comment="libtiff-devel is earlier than 0:3.5.7-25.el3.4" test_ref="oval:org.mitre.oval:tst:32843"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libtiff is earlier than 0:3.6.1-12" test_ref="oval:org.mitre.oval:tst:32922"/>
            <criterion comment="libtiff-devel is earlier than 0:3.6.1-12" test_ref="oval:org.mitre.oval:tst:32413"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11300" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in the HSQLDB component in JBoss 3.2.1 and 3.0.8 on Java 1.4.x platforms, when running in the default configuration, allows remote attackers to conduct unauthorized activities and possibly execute arbitrary code via certain SQL statements to (1) TCP port 1701 in JBoss 3.2.1, and (2) port 1476 in JBoss 3.0.8.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0845" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0845"/>
        <description>Unknown vulnerability in the HSQLDB component in JBoss 3.2.1 and 3.0.8 on Java 1.4.x platforms, when running in the default configuration, allows remote attackers to conduct unauthorized activities and possibly execute arbitrary code via certain SQL statements to (1) TCP port 1701 in JBoss 3.2.1, and (2) port 1476 in JBoss 3.0.8.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:29.707-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:39.220-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:22.012-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11300 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:18.984-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:03.177-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="hsqldb-manual is earlier than 1:1.8.0.4-3jpp.6" test_ref="oval:org.mitre.oval:tst:35558"/>
          <criterion comment="openoffice.org-langpack-sk_SK is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35630"/>
          <criterion comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35740"/>
          <criterion comment="openoffice.org-langpack-pa_IN is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35642"/>
          <criterion comment="openoffice.org-langpack-hi_IN is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35485"/>
          <criterion comment="openoffice.org-langpack-et_EE is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:34700"/>
          <criterion comment="openoffice.org-langpack-kn_IN is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35161"/>
          <criterion comment="openoffice.org is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35539"/>
          <criterion comment="openoffice.org-langpack-zh_TW is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35703"/>
          <criterion comment="openoffice.org-writer is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:34780"/>
          <criterion comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35623"/>
          <criterion comment="openoffice.org-langpack-ga_IE is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35604"/>
          <criterion comment="openoffice.org-langpack-ta_IN is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35273"/>
          <criterion comment="openoffice.org-langpack-ko_KR is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35746"/>
          <criterion comment="openoffice.org-langpack-or_IN is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35772"/>
          <criterion comment="openoffice.org-langpack-da_DK is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35599"/>
          <criterion comment="openoffice.org-langpack-sr_CS is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35649"/>
          <criterion comment="openoffice.org-langpack-pl_PL is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35450"/>
          <criterion comment="openoffice.org-langpack-fr is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35383"/>
          <criterion comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35749"/>
          <criterion comment="openoffice.org-javafilter is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35680"/>
          <criterion comment="openoffice.org-langpack-as_IN is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35556"/>
          <criterion comment="openoffice.org-testtools is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35350"/>
          <criterion comment="openoffice.org-langpack-hr_HR is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35565"/>
          <criterion comment="openoffice.org-langpack-de is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:34836"/>
          <criterion comment="openoffice.org-emailmerge is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35590"/>
          <criterion comment="openoffice.org-xsltfilter is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35694"/>
          <criterion comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35416"/>
          <criterion comment="openoffice.org-langpack-te_IN is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:34933"/>
          <criterion comment="openoffice.org-langpack-sv is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35646"/>
          <criterion comment="openoffice.org-base is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35589"/>
          <criterion comment="openoffice.org-langpack-ca_ES is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35133"/>
          <criterion comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35513"/>
          <criterion comment="openoffice.org-core is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35385"/>
          <criterion comment="openoffice.org-langpack-nl is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35647"/>
          <criterion comment="openoffice.org-langpack-ur is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35475"/>
          <criterion comment="openoffice.org-langpack-nn_NO is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35713"/>
          <criterion comment="openoffice.org-langpack-ar is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35685"/>
          <criterion comment="openoffice.org-langpack-ja_JP is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35451"/>
          <criterion comment="openoffice.org-langpack-gu_IN is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35638"/>
          <criterion comment="openoffice.org-langpack-tr_TR is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35670"/>
          <criterion comment="openoffice.org-langpack-eu_ES is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:34908"/>
          <criterion comment="openoffice.org-langpack-fi_FI is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35268"/>
          <criterion comment="openoffice.org-graphicfilter is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35368"/>
          <criterion comment="openoffice.org-pyuno is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35592"/>
          <criterion comment="openoffice.org-langpack-ml_IN is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35183"/>
          <criterion comment="openoffice.org-langpack-gl_ES is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35650"/>
          <criterion comment="hsqldb-javadoc is earlier than 1:1.8.0.4-3jpp.6" test_ref="oval:org.mitre.oval:tst:35547"/>
          <criterion comment="openoffice.org-langpack-zh_CN is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35562"/>
          <criterion comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35645"/>
          <criterion comment="openoffice.org-langpack-it is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35197"/>
          <criterion comment="openoffice.org-langpack-es is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35493"/>
          <criterion comment="openoffice.org-langpack-nb_NO is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35596"/>
          <criterion comment="openoffice.org-langpack-sl_SI is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35779"/>
          <criterion comment="openoffice.org-draw is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35568"/>
          <criterion comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35691"/>
          <criterion comment="openoffice.org-langpack-ms_MY is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35770"/>
          <criterion comment="openoffice.org-langpack-el_GR is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35362"/>
          <criterion comment="openoffice.org-langpack-hu_HU is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:34778"/>
          <criterion comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35577"/>
          <criterion comment="hsqldb is earlier than 1:1.8.0.4-3jpp.6" test_ref="oval:org.mitre.oval:tst:35682"/>
          <criterion comment="openoffice.org-langpack-bn is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35535"/>
          <criterion comment="openoffice.org-langpack-he_IL is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35519"/>
          <criterion comment="openoffice.org-langpack-pt_PT is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35720"/>
          <criterion comment="openoffice.org-langpack-lt_LT is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35701"/>
          <criterion comment="openoffice.org-langpack-af_ZA is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35244"/>
          <criterion comment="openoffice.org-langpack-bg_BG is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35667"/>
          <criterion comment="openoffice.org-calc is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35563"/>
          <criterion comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35524"/>
          <criterion comment="openoffice.org-langpack-cy_GB is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35448"/>
          <criterion comment="openoffice.org-langpack-mr_IN is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35388"/>
          <criterion comment="openoffice.org-langpack-th_TH is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35687"/>
          <criterion comment="openoffice.org-langpack-pt_BR is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35417"/>
          <criterion comment="openoffice.org-langpack-ru is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35566"/>
          <criterion comment="hsqldb-demo is earlier than 1:1.8.0.4-3jpp.6" test_ref="oval:org.mitre.oval:tst:35571"/>
          <criterion comment="openoffice.org-math is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35576"/>
          <criterion comment="openoffice.org-impress is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35626"/>
          <criterion comment="openoffice.org-langpack-st_ZA is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:34965"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1130" version="6" class="vulnerability">
      <metadata>
        <title>Buffer Overflow in CDOSYS Message Processing (Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1987" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1987"/>
        <description>Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type" string.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-10-12T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-10-19T05:46:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:09:01.493-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:31.910-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1130 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:04:52.417-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:21.543-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="cdosys.dll is less than 6.5.6749.0" test_ref="oval:org.mitre.oval:tst:1136"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:113" version="2" class="vulnerability">
      <metadata>
        <title>X Display Manager Control Protocol Denial of Service</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>GDM</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0548" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0548"/>
        <description>The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) when a chosen host expires, a different issue than CVE-2003-0549.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-04T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-05T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:38.828-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:14.680-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="gdm version is less than 2.4.1.3-5.1" negate="false" test_ref="oval:org.mitre.oval:tst:2936"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11299" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the error function in preproc.c for NASM 0.98.38 1.2 allows attackers to execute arbitrary code via a crafted asm file, a different vulnerability than CVE-2005-1194.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1287" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1287"/>
        <description>Buffer overflow in the error function in preproc.c for NASM 0.98.38 1.2 allows attackers to execute arbitrary code via a crafted asm file, a different vulnerability than CVE-2005-1194.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:23.638-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:38.906-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:21.743-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11299 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:47.531-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:02.763-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="nasm is earlier than 0:0.98.35-3.EL3" test_ref="oval:org.mitre.oval:tst:31348"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nasm-doc is earlier than 0:0.98.38-3.EL4" test_ref="oval:org.mitre.oval:tst:31776"/>
            <criterion comment="nasm is earlier than 0:0.98.38-3.EL4" test_ref="oval:org.mitre.oval:tst:31746"/>
            <criterion comment="nasm-rdoff is earlier than 0:0.98.38-3.EL4" test_ref="oval:org.mitre.oval:tst:31654"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11298" version="5" class="vulnerability">
      <metadata>
        <title>Integer underflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Quattro Pro (QPRO) file with crafted values that trigger an excessive loop and a stack-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5747" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5747"/>
        <description>Integer underflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Quattro Pro (QPRO) file with crafted values that trigger an excessive loop and a stack-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:14.951-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:36.643-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:19.718-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11298 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:16.135-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:13:00.694-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org2-langpack-lt_LT is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36006"/>
            <criterion comment="openoffice.org2-langpack-nn_NO is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35494"/>
            <criterion comment="openoffice.org2-langpack-ga_IE is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36190"/>
            <criterion comment="openoffice.org2-langpack-zh_CN is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36501"/>
            <criterion comment="openoffice.org2-javafilter is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35931"/>
            <criterion comment="openoffice.org2-langpack-he_IL is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36114"/>
            <criterion comment="openoffice.org2-draw is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36163"/>
            <criterion comment="openoffice.org2-langpack-ko_KR is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36172"/>
            <criterion comment="openoffice.org2-langpack-ca_ES is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36000"/>
            <criterion comment="openoffice.org2-base is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36287"/>
            <criterion comment="openoffice.org2-langpack-fr is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36118"/>
            <criterion comment="openoffice.org2-langpack-pa_IN is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36384"/>
            <criterion comment="openoffice.org2-langpack-da_DK is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36302"/>
            <criterion comment="openoffice.org2-emailmerge is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35683"/>
            <criterion comment="openoffice.org2-langpack-pt_PT is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36473"/>
            <criterion comment="openoffice.org2-langpack-es is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36223"/>
            <criterion comment="openoffice.org2-langpack-sv is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36224"/>
            <criterion comment="openoffice.org2-langpack-ms_MY is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36154"/>
            <criterion comment="openoffice.org2-langpack-cs_CZ is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36091"/>
            <criterion comment="openoffice.org2-xsltfilter is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35963"/>
            <criterion comment="openoffice.org2-langpack-ja_JP is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36083"/>
            <criterion comment="openoffice.org2-langpack-hu_HU is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36271"/>
            <criterion comment="openoffice.org2-langpack-zh_TW is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35954"/>
            <criterion comment="openoffice.org2-langpack-sl_SI is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35495"/>
            <criterion comment="openoffice.org2-langpack-de is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36299"/>
            <criterion comment="openoffice.org2-pyuno is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36417"/>
            <criterion comment="openoffice.org2 is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35864"/>
            <criterion comment="openoffice.org2-langpack-tr_TR is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35957"/>
            <criterion comment="openoffice.org2-impress is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36286"/>
            <criterion comment="openoffice.org2-langpack-ar is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36345"/>
            <criterion comment="openoffice.org2-langpack-bn is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36181"/>
            <criterion comment="openoffice.org2-langpack-pt_BR is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35811"/>
            <criterion comment="openoffice.org2-langpack-af_ZA is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35640"/>
            <criterion comment="openoffice.org2-langpack-pl_PL is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36248"/>
            <criterion comment="openoffice.org2-calc is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36212"/>
            <criterion comment="openoffice.org2-langpack-zu_ZA is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36434"/>
            <criterion comment="openoffice.org2-langpack-fi_FI is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36159"/>
            <criterion comment="openoffice.org2-langpack-sk_SK is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36411"/>
            <criterion comment="openoffice.org2-langpack-hi_IN is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36382"/>
            <criterion comment="openoffice.org2-langpack-nb_NO is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36148"/>
            <criterion comment="openoffice.org2-langpack-th_TH is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36144"/>
            <criterion comment="openoffice.org2-langpack-et_EE is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36401"/>
            <criterion comment="openoffice.org2-langpack-gl_ES is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36185"/>
            <criterion comment="openoffice.org2-langpack-it is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36254"/>
            <criterion comment="openoffice.org2-langpack-hr_HR is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36289"/>
            <criterion comment="openoffice.org2-langpack-ta_IN is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36009"/>
            <criterion comment="openoffice.org2-langpack-gu_IN is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36216"/>
            <criterion comment="openoffice.org2-testtools is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36498"/>
            <criterion comment="openoffice.org2-langpack-eu_ES is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36314"/>
            <criterion comment="openoffice.org2-langpack-el_GR is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36332"/>
            <criterion comment="openoffice.org2-core is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36253"/>
            <criterion comment="openoffice.org2-langpack-ru is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35829"/>
            <criterion comment="openoffice.org2-langpack-bg_BG is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36429"/>
            <criterion comment="openoffice.org2-langpack-nl is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36073"/>
            <criterion comment="openoffice.org2-langpack-sr_CS is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35502"/>
            <criterion comment="openoffice.org2-langpack-cy_GB is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36174"/>
            <criterion comment="openoffice.org2-math is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36366"/>
            <criterion comment="openoffice.org2-graphicfilter is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36276"/>
            <criterion comment="openoffice.org2-writer is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36057"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-langpack-sk_SK is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36162"/>
            <criterion comment="openoffice.org-langpack-zu_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36101"/>
            <criterion comment="openoffice.org-langpack-pa_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35841"/>
            <criterion comment="openoffice.org-langpack-hi_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36520"/>
            <criterion comment="openoffice.org-langpack-et_EE is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36441"/>
            <criterion comment="openoffice.org-langpack-kn_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35845"/>
            <criterion comment="openoffice.org is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36307"/>
            <criterion comment="openoffice.org-langpack-zh_TW is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36505"/>
            <criterion comment="openoffice.org-writer is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36145"/>
            <criterion comment="openoffice.org-langpack-ve_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36546"/>
            <criterion comment="openoffice.org-langpack-ga_IE is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36168"/>
            <criterion comment="openoffice.org-langpack-ta_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36283"/>
            <criterion comment="openoffice.org-langpack-ko_KR is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36322"/>
            <criterion comment="openoffice.org-langpack-or_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36206"/>
            <criterion comment="openoffice.org-langpack-da_DK is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36244"/>
            <criterion comment="openoffice.org-langpack-sr_CS is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36471"/>
            <criterion comment="openoffice.org-langpack-pl_PL is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36483"/>
            <criterion comment="openoffice.org-langpack-fr is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36328"/>
            <criterion comment="openoffice.org-langpack-ts_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35810"/>
            <criterion comment="openoffice.org-javafilter is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36481"/>
            <criterion comment="openoffice.org-langpack-as_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36465"/>
            <criterion comment="openoffice.org-testtools is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36378"/>
            <criterion comment="openoffice.org-langpack-hr_HR is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36013"/>
            <criterion comment="openoffice.org-langpack-de is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36191"/>
            <criterion comment="openoffice.org-emailmerge is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35521"/>
            <criterion comment="openoffice.org-xsltfilter is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36257"/>
            <criterion comment="openoffice.org-langpack-tn_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35797"/>
            <criterion comment="openoffice.org-langpack-te_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36391"/>
            <criterion comment="openoffice.org-langpack-sv is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36398"/>
            <criterion comment="openoffice.org-base is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36329"/>
            <criterion comment="openoffice.org-langpack-ca_ES is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36437"/>
            <criterion comment="openoffice.org-langpack-nr_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36130"/>
            <criterion comment="openoffice.org-core is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35843"/>
            <criterion comment="openoffice.org-langpack-nl is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36220"/>
            <criterion comment="openoffice.org-langpack-ur is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36466"/>
            <criterion comment="openoffice.org-langpack-nn_NO is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36032"/>
            <criterion comment="openoffice.org-langpack-ar is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36187"/>
            <criterion comment="openoffice.org-langpack-ja_JP is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36058"/>
            <criterion comment="openoffice.org-langpack-gu_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36160"/>
            <criterion comment="openoffice.org-langpack-tr_TR is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36457"/>
            <criterion comment="openoffice.org-langpack-eu_ES is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36341"/>
            <criterion comment="openoffice.org-langpack-fi_FI is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36232"/>
            <criterion comment="openoffice.org-graphicfilter is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36089"/>
            <criterion comment="openoffice.org-pyuno is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36514"/>
            <criterion comment="openoffice.org-langpack-ml_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36486"/>
            <criterion comment="openoffice.org-langpack-gl_ES is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36508"/>
            <criterion comment="openoffice.org-langpack-zh_CN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36507"/>
            <criterion comment="openoffice.org-langpack-xh_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36348"/>
            <criterion comment="openoffice.org-langpack-it is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36559"/>
            <criterion comment="openoffice.org-langpack-es is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36282"/>
            <criterion comment="openoffice.org-langpack-nb_NO is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36405"/>
            <criterion comment="openoffice.org-langpack-sl_SI is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36492"/>
            <criterion comment="openoffice.org-draw is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36369"/>
            <criterion comment="openoffice.org-langpack-nso_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36308"/>
            <criterion comment="openoffice.org-langpack-ms_MY is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36358"/>
            <criterion comment="openoffice.org-langpack-el_GR is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35561"/>
            <criterion comment="openoffice.org-langpack-hu_HU is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36070"/>
            <criterion comment="openoffice.org-langpack-ss_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36189"/>
            <criterion comment="openoffice.org-langpack-bn is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35657"/>
            <criterion comment="openoffice.org-langpack-he_IL is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36204"/>
            <criterion comment="openoffice.org-langpack-pt_PT is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36544"/>
            <criterion comment="openoffice.org-langpack-lt_LT is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36218"/>
            <criterion comment="openoffice.org-langpack-af_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36400"/>
            <criterion comment="openoffice.org-langpack-bg_BG is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36037"/>
            <criterion comment="openoffice.org-calc is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35732"/>
            <criterion comment="openoffice.org-langpack-cs_CZ is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36117"/>
            <criterion comment="openoffice.org-langpack-cy_GB is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36303"/>
            <criterion comment="openoffice.org-langpack-mr_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36306"/>
            <criterion comment="openoffice.org-langpack-th_TH is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35966"/>
            <criterion comment="openoffice.org-langpack-pt_BR is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36467"/>
            <criterion comment="openoffice.org-langpack-ru is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35570"/>
            <criterion comment="openoffice.org-math is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36376"/>
            <criterion comment="openoffice.org-impress is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36339"/>
            <criterion comment="openoffice.org-langpack-st_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35999"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11297" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0 and Mozilla before 1.7.5 display the SSL lock icon when an insecure page loads a binary file from a trusted site, which could facilitate phishing attacks.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0143" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0143"/>
        <description>Firefox before 1.0 and Mozilla before 1.7.5 display the SSL lock icon when an insecure page loads a binary file from a trusted site, which could facilitate phishing attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:32.846-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:36.120-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:19.192-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11297 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:21.289-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:59.826-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31283"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31520"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31645"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31516"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31569"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31143"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31512"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31785"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31695"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31626"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:30665"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.3" test_ref="oval:org.mitre.oval:tst:31499"/>
            <criterion comment="mozilla is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31604"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31381"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31622"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:30651"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.3" test_ref="oval:org.mitre.oval:tst:31560"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31110"/>
            <criterion comment="evolution is earlier than 0:2.0.2-14" test_ref="oval:org.mitre.oval:tst:31003"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31404"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31375"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31106"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31418"/>
            <criterion comment="evolution-devel is earlier than 0:2.0.2-14" test_ref="oval:org.mitre.oval:tst:31558"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11295" version="5" class="vulnerability">
      <metadata>
        <title>Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (deadlock) via a large number of small messages to a receiver application that cannot process the messages quickly enough, which leads to "spillover of the receive buffer."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2275" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2275"/>
        <description>Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (deadlock) via a large number of small messages to a receiver application that cannot process the messages quickly enough, which leads to "spillover of the receive buffer."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:10.895-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:35.788-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:18.866-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11295 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:43.705-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:59.446-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32335"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32833"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32825"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32836"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32736"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:31931"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32361"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32793"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32795"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11294" version="5" class="vulnerability">
      <metadata>
        <title>Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) MailWatch, (6) TikiWiki, (7) phpWebSite, (8) Ampache, and others, allows remote attackers to execute arbitrary PHP code via an XML file, which is not properly sanitized before being used in an eval statement.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1921" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1921"/>
        <description>Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) MailWatch, (6) TikiWiki, (7) phpWebSite, (8) Ampache, and others, allows remote attackers to execute arbitrary PHP code via an XML file, which is not properly sanitized before being used in an eval statement.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:22.739-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:35.330-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:18.407-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11294 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:43.539-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:58.707-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-24.ent" test_ref="oval:org.mitre.oval:tst:31903"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-24.ent" test_ref="oval:org.mitre.oval:tst:31997"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-24.ent" test_ref="oval:org.mitre.oval:tst:32058"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-24.ent" test_ref="oval:org.mitre.oval:tst:32011"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-24.ent" test_ref="oval:org.mitre.oval:tst:31769"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-24.ent" test_ref="oval:org.mitre.oval:tst:31610"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-24.ent" test_ref="oval:org.mitre.oval:tst:32022"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.7" test_ref="oval:org.mitre.oval:tst:31993"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.7" test_ref="oval:org.mitre.oval:tst:31996"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.7" test_ref="oval:org.mitre.oval:tst:32047"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.7" test_ref="oval:org.mitre.oval:tst:31303"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.7" test_ref="oval:org.mitre.oval:tst:31718"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.7" test_ref="oval:org.mitre.oval:tst:31829"/>
            <criterion comment="php is earlier than 0:4.3.9-3.7" test_ref="oval:org.mitre.oval:tst:31181"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.7" test_ref="oval:org.mitre.oval:tst:32064"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.7" test_ref="oval:org.mitre.oval:tst:31623"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.7" test_ref="oval:org.mitre.oval:tst:31882"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.7" test_ref="oval:org.mitre.oval:tst:31988"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.7" test_ref="oval:org.mitre.oval:tst:32010"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.7" test_ref="oval:org.mitre.oval:tst:31662"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.7" test_ref="oval:org.mitre.oval:tst:31873"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11293" version="5" class="vulnerability">
      <metadata>
        <title>Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via regex patterns containing unmatched "\Q\E" sequences with orphan "\E" codes.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0022" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0022"/>
        <description>Buffer overflow in the spa_base64_to_bits function in Exim before 4.43, as originally obtained from Samba code, and as called by the auth_spa_client function, may allow attackers to execute arbitrary code during SPA authentication.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:01.987-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:35.097-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:18.175-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11293 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:36:17.852-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:58.382-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="exim-doc is earlier than 0:4.43-1.RHEL4.3" test_ref="oval:org.mitre.oval:tst:31133"/>
          <criterion comment="exim-mon is earlier than 0:4.43-1.RHEL4.3" test_ref="oval:org.mitre.oval:tst:30769"/>
          <criterion comment="exim is earlier than 0:4.43-1.RHEL4.3" test_ref="oval:org.mitre.oval:tst:31290"/>
          <criterion comment="exim-sa is earlier than 0:4.43-1.RHEL4.3" test_ref="oval:org.mitre.oval:tst:30863"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11292" version="5" class="vulnerability">
      <metadata>
        <title>The gaim_markup_strip_html function in Gaim 1.2.0, and possibly earlier versions, allows remote attackers to cause a denial of service (application crash) via a string that contains malformed HTML, which causes an out-of-bounds read.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0965" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0965"/>
        <description>The gaim_markup_strip_html function in Gaim 1.2.0, and possibly earlier versions, allows remote attackers to cause a denial of service (application crash) via a string that contains malformed HTML, which causes an out-of-bounds read.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:39.121-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:34.845-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:17.899-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11292 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:32.075-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:57.969-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gaim is earlier than 1:1.2.1-4.el3" test_ref="oval:org.mitre.oval:tst:31686"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gaim is earlier than 1:1.2.1-4.el4" test_ref="oval:org.mitre.oval:tst:31403"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11291" version="5" class="vulnerability">
      <metadata>
        <title>The privileged "chrome" UI code in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to gain privileges by overriding certain properties or methods of DOM nodes, as demonstrated using multiple attacks involving the eval function or the Script object.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1160" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1160"/>
        <description>The privileged "chrome" UI code in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to gain privileges by overriding certain properties or methods of DOM nodes, as demonstrated using multiple attacks involving the eval function or the Script object.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:29.286-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:34.365-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:17.397-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11291 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:57.923-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:57.359-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31283"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31520"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31645"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31516"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31569"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31143"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31512"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31785"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31695"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31626"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31478"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.4" test_ref="oval:org.mitre.oval:tst:31488"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31751"/>
            <criterion comment="thunderbird is earlier than 0:1.0.6-1.4.1" test_ref="oval:org.mitre.oval:tst:32113"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31647"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:30850"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31749"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.4" test_ref="oval:org.mitre.oval:tst:31658"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31636"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31780"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:30828"/>
            <criterion comment="firefox is earlier than 0:1.0.3-1.4.1" test_ref="oval:org.mitre.oval:tst:31646"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31716"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31758"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11290" version="5" class="vulnerability">
      <metadata>
        <title>unlzh.c in the LHZ component in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted GZIP archive.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4338" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4338"/>
        <description>unlzh.c in the LHZ component in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted GZIP archive.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:27.350-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:34.149-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:17.167-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11290 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:49.346-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:56.972-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gzip is earlier than 0:1.3.3-13.rhel3" test_ref="oval:org.mitre.oval:tst:32961"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gzip is earlier than 0:1.3.3-16.rhel4" test_ref="oval:org.mitre.oval:tst:32979"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11289" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3606" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3606"/>
        <description>Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:32.592-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:33.788-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:16.806-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11289 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:11.439-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:56.458-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="xpdf is earlier than 1:2.02-17.el3" test_ref="oval:org.mitre.oval:tst:39361"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gpdf is earlier than 0:2.8.2-7.7.2.el4_7.4" test_ref="oval:org.mitre.oval:tst:38436"/>
            <criterion comment="xpdf is earlier than 1:3.00-22.el4_8.1" test_ref="oval:org.mitre.oval:tst:38963"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.5.4-15.el5_4.2" test_ref="oval:org.mitre.oval:tst:39062"/>
            <criterion comment="poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38512"/>
            <criterion comment="poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38500"/>
            <criterion comment="kdegraphics is earlier than 7:3.5.4-15.el5_4.2" test_ref="oval:org.mitre.oval:tst:39529"/>
            <criterion comment="poppler is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38760"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11288" version="5" class="vulnerability">
      <metadata>
        <title>net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service (kernel infinite loop) by making two calls to svc_listen for the same socket, and then reading a /proc/net/atm/*vc file, related to corruption of the vcc table.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5079"/>
        <description>net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service (kernel infinite loop) by making two calls to svc_listen for the same socket, and then reading a /proc/net/atm/*vc file, related to corruption of the vcc table.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:07.564-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:33.469-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:16.481-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11288 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:31.706-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:56.006-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38161"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:37996"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38259"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:37366"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:37939"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38003"/>
          <criterion comment="kernel is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38294"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38054"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:37318"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38086"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38226"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38094"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11287" version="5" class="vulnerability">
      <metadata>
        <title>Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web applications in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote authenticated users to inject arbitrary web script or HTML via a parameter name to manager/html/upload, and other unspecified vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2450" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2450"/>
        <description>Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web applications in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote authenticated users to inject arbitrary web script or HTML via a parameter name to manager/html/upload, and other unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:36.628-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:33.163-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:16.139-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11287 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:47:05.005-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:55.601-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.1.0.4.el5" test_ref="oval:org.mitre.oval:tst:34526"/>
          <criterion comment="tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.1.0.4.el5" test_ref="oval:org.mitre.oval:tst:33925"/>
          <criterion comment="tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.1.0.4.el5" test_ref="oval:org.mitre.oval:tst:34673"/>
          <criterion comment="tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.1.0.4.el5" test_ref="oval:org.mitre.oval:tst:34509"/>
          <criterion comment="tomcat5-webapps is earlier than 0:5.5.23-0jpp.1.0.4.el5" test_ref="oval:org.mitre.oval:tst:34682"/>
          <criterion comment="tomcat5 is earlier than 0:5.5.23-0jpp.1.0.4.el5" test_ref="oval:org.mitre.oval:tst:34534"/>
          <criterion comment="tomcat5-jasper is earlier than 0:5.5.23-0jpp.1.0.4.el5" test_ref="oval:org.mitre.oval:tst:34133"/>
          <criterion comment="tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.1.0.4.el5" test_ref="oval:org.mitre.oval:tst:34765"/>
          <criterion comment="tomcat5-server-lib is earlier than 0:5.5.23-0jpp.1.0.4.el5" test_ref="oval:org.mitre.oval:tst:34601"/>
          <criterion comment="tomcat5-common-lib is earlier than 0:5.5.23-0jpp.1.0.4.el5" test_ref="oval:org.mitre.oval:tst:34681"/>
          <criterion comment="tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.1.0.4.el5" test_ref="oval:org.mitre.oval:tst:34549"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11286" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the dissect_ospf_v3_address_prefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly other versions, allows remote attackers to execute arbitrary code via crafted packets.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3651" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3651"/>
        <description>Stack-based buffer overflow in the dissect_ospf_v3_address_prefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly other versions, allows remote attackers to execute arbitrary code via crafted packets.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:29.222-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:32.888-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:15.833-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11286 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:20.383-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:55.230-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.14-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32303"/>
            <criterion comment="ethereal is earlier than 0:0.10.14-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32466"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.14-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32538"/>
            <criterion comment="ethereal is earlier than 0:0.10.14-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32039"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11284" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tRNS) data, or the (2) png_handle_sBIT or (3) png_handle_hIST functions do not perform sufficient bounds checking.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0597" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0597"/>
        <description>Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tRNS) data, or the (2) png_handle_sBIT or (3) png_handle_hIST functions do not perform sufficient bounds checking.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:07.272-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:32.550-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:15.449-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11284 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:19.632-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:54.766-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mozilla-js-debugger is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30799"/>
          <criterion comment="libpng10-devel is earlier than 0:1.0.13-15" test_ref="oval:org.mitre.oval:tst:29821"/>
          <criterion comment="mozilla is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30278"/>
          <criterion comment="mozilla-chat is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30755"/>
          <criterion comment="libpng-devel is earlier than 2:1.2.2-25" test_ref="oval:org.mitre.oval:tst:30405"/>
          <criterion comment="mozilla-mail is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30570"/>
          <criterion comment="libpng10 is earlier than 0:1.0.13-15" test_ref="oval:org.mitre.oval:tst:30512"/>
          <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30230"/>
          <criterion comment="mozilla-nss is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30323"/>
          <criterion comment="mozilla-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30288"/>
          <criterion comment="mozilla-nss-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30339"/>
          <criterion comment="mozilla-nspr is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30813"/>
          <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30660"/>
          <criterion comment="libpng is earlier than 2:1.2.2-25" test_ref="oval:org.mitre.oval:tst:30788"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11283" version="5" class="vulnerability">
      <metadata>
        <title>The mprotect code (mprotect.c) in Linux 2.6 on Itanium IA64 Montecito processors does not properly maintain cache coherency as required by the architecture, which allows local users to cause a denial of service and possibly corrupt data by modifying PTE protections.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3105" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3105"/>
        <description>The mprotect code (mprotect.c) in Linux 2.6 on Itanium IA64 Montecito processors does not properly maintain cache coherency as required by the architecture, which allows local users to cause a denial of service and possibly corrupt data by modifying PTE protections.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:19.795-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:32.297-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:15.173-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11283 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:42.232-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:54.408-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31896"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31885"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31861"/>
          <criterion comment="kernel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31550"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31914"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31924"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:32023"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11282" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in the system call filtering code in the audit subsystem for Red Hat Enterprise Linux 3 allows local users to cause a denial of service (system crash) via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1237"/>
        <description>Unknown vulnerability in the system call filtering code in the audit subsystem for Red Hat Enterprise Linux 3 allows local users to cause a denial of service (system crash) via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:36.998-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:31.979-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:14.782-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11282 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:56.985-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:54.007-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31090"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31317"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31165"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31297"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31259"/>
          <criterion comment="kernel is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:30906"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31029"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31014"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:30920"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11281" version="5" class="vulnerability">
      <metadata>
        <title>Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0746" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0746"/>
        <description>Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:06.311-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:31.766-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:14.433-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11281 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:51.567-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:53.708-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kdebase is earlier than 6:3.1.3-5.4" test_ref="oval:org.mitre.oval:tst:30731"/>
          <criterion comment="kdebase-devel is earlier than 6:3.1.3-5.4" test_ref="oval:org.mitre.oval:tst:29837"/>
          <criterion comment="kdelibs is earlier than 6:3.1.3-6.6" test_ref="oval:org.mitre.oval:tst:30063"/>
          <criterion comment="kdelibs-devel is earlier than 6:3.1.3-6.6" test_ref="oval:org.mitre.oval:tst:30768"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11280" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c.  NOTE: this vulnerability reportedly exists because of an incomplete fix for CVE-2008-2315.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5031" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5031"/>
        <description>Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c.  NOTE: this vulnerability reportedly exists because of an incomplete fix for CVE-2008-2315.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:44.735-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:31.367-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:13.966-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11280 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:33.759-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:53.143-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38704"/>
            <criterion comment="tkinter is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38695"/>
            <criterion comment="python-tools is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38872"/>
            <criterion comment="python is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38617"/>
            <criterion comment="python-docs is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:37965"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38916"/>
            <criterion comment="tkinter is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38703"/>
            <criterion comment="python-tools is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38787"/>
            <criterion comment="python is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38939"/>
            <criterion comment="python-docs is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38081"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38889"/>
            <criterion comment="tkinter is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38958"/>
            <criterion comment="python-tools is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38827"/>
            <criterion comment="python is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38282"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11279" version="5" class="vulnerability">
      <metadata>
        <title>Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.4; Server for Linux on IBM System z 6.0.4; Server for IBM z/OS 5.5.1 and earlier, 6.0.0, and 6.0.1; and Client 4.0-J through 4.3.3-J and 4.0-K through 4.3.10-K; and (2) OpenSSH 4.7p1 and possibly other versions, when using a block cipher algorithm in Cipher Block Chaining (CBC) mode, makes it easier for remote attackers to recover certain plaintext data from an arbitrary block of ciphertext in an SSH session via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5161" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5161"/>
        <description>Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.4; Server for Linux on IBM System z 6.0.4; Server for IBM z/OS 5.5.1 and earlier, 6.0.0, and 6.0.1; and Client 4.0-J through 4.3.3-J and 4.0-K through 4.3.10-K; and (2) OpenSSH 4.7p1 and possibly other versions, when using a block cipher algorithm in Cipher Block Chaining (CBC) mode, makes it easier for remote attackers to recover certain plaintext data from an arbitrary block of ciphertext in an SSH session via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:56.999-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:31.144-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:13.737-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11279 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:26.920-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:52.731-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="openssh is earlier than 0:4.3p2-36.el5" test_ref="oval:org.mitre.oval:tst:39180"/>
          <criterion comment="openssh-askpass is earlier than 0:4.3p2-36.el5" test_ref="oval:org.mitre.oval:tst:39201"/>
          <criterion comment="openssh-server is earlier than 0:4.3p2-36.el5" test_ref="oval:org.mitre.oval:tst:39045"/>
          <criterion comment="openssh-clients is earlier than 0:4.3p2-36.el5" test_ref="oval:org.mitre.oval:tst:39089"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11278" version="5" class="vulnerability">
      <metadata>
        <title>Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed SMB packet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1142" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1142"/>
        <description>Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed SMB packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:00.669-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:30.862-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:13.478-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11278 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:45.498-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:52.347-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.9-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31265"/>
            <criterion comment="ethereal is earlier than 0:0.10.9-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31218"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.9-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31097"/>
            <criterion comment="ethereal is earlier than 0:0.10.9-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31103"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11277" version="5" class="vulnerability">
      <metadata>
        <title>Integer signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a negative length value.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2443" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2443"/>
        <description>Integer signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a negative length value.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:44.451-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:30.468-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:12.987-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11277 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:08.120-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:51.725-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.2.7-66" test_ref="oval:org.mitre.oval:tst:33627"/>
            <criterion comment="krb5 is earlier than 0:1.2.7-66" test_ref="oval:org.mitre.oval:tst:34238"/>
            <criterion comment="krb5-libs is earlier than 0:1.2.7-66" test_ref="oval:org.mitre.oval:tst:34171"/>
            <criterion comment="krb5-server is earlier than 0:1.2.7-66" test_ref="oval:org.mitre.oval:tst:33767"/>
            <criterion comment="krb5-devel is earlier than 0:1.2.7-66" test_ref="oval:org.mitre.oval:tst:34147"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.3.4-49" test_ref="oval:org.mitre.oval:tst:34640"/>
            <criterion comment="krb5 is earlier than 0:1.3.4-49" test_ref="oval:org.mitre.oval:tst:34202"/>
            <criterion comment="krb5-libs is earlier than 0:1.3.4-49" test_ref="oval:org.mitre.oval:tst:34749"/>
            <criterion comment="krb5-server is earlier than 0:1.3.4-49" test_ref="oval:org.mitre.oval:tst:34767"/>
            <criterion comment="krb5-devel is earlier than 0:1.3.4-49" test_ref="oval:org.mitre.oval:tst:34660"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.5-26" test_ref="oval:org.mitre.oval:tst:34728"/>
            <criterion comment="krb5 is earlier than 0:1.5-26" test_ref="oval:org.mitre.oval:tst:34350"/>
            <criterion comment="krb5-libs is earlier than 0:1.5-26" test_ref="oval:org.mitre.oval:tst:34575"/>
            <criterion comment="krb5-server is earlier than 0:1.5-26" test_ref="oval:org.mitre.oval:tst:34729"/>
            <criterion comment="krb5-devel is earlier than 0:1.5-26" test_ref="oval:org.mitre.oval:tst:34195"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11276" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that contains a large (1) width or (2) height value.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2949" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2949"/>
        <description>Integer overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that contains a large (1) width or (2) height value.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:10.364-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:29.991-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:12.629-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11276 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:37.652-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:51.227-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gimp-devel is earlier than 0:1.2.3-20.9.el3" test_ref="oval:org.mitre.oval:tst:34383"/>
            <criterion comment="gimp-perl is earlier than 0:1.2.3-20.9.el3" test_ref="oval:org.mitre.oval:tst:34552"/>
            <criterion comment="gimp is earlier than 0:1.2.3-20.9.el3" test_ref="oval:org.mitre.oval:tst:34504"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gimp-devel is earlier than 0:2.0.5-7.0.7.el4" test_ref="oval:org.mitre.oval:tst:34679"/>
            <criterion comment="gimp is earlier than 0:2.0.5-7.0.7.el4" test_ref="oval:org.mitre.oval:tst:34499"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gimp-libs is earlier than 0:2.2.13-2.0.7.el5" test_ref="oval:org.mitre.oval:tst:34469"/>
            <criterion comment="gimp-devel is earlier than 0:2.2.13-2.0.7.el5" test_ref="oval:org.mitre.oval:tst:34574"/>
            <criterion comment="gimp is earlier than 0:2.2.13-2.0.7.el5" test_ref="oval:org.mitre.oval:tst:34697"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11274" version="3" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the JAX-WS client and service in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows remote attackers to access URLs or cause a denial of service via unknown vectors involving "processing of XML data" by a trusted application.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3105" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3105"/>
        <description>Unspecified vulnerability in the JAX-WS client and service in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows remote attackers to access URLs or cause a denial of service via unknown vectors involving "processing of XML data" by a trusted application.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:09.161-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:29.758-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:12.374-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
        <criteria operator="OR">
          <criterion comment="java-1.6.0-sun-devel is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36649"/>
          <criterion comment="java-1.6.0-sun is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37229"/>
          <criterion comment="java-1.6.0-sun-src is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37035"/>
          <criterion comment="java-1.6.0-sun-demo is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37509"/>
          <criterion comment="java-1.6.0-sun-plugin is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37441"/>
          <criterion comment="java-1.6.0-sun-jdbc is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37490"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11273" version="5" class="vulnerability">
      <metadata>
        <title>Wireshark (formerly Ethereal) 0.9.7 through 1.0.2 allows attackers to cause a denial of service (hang) via a crafted NCP packet that triggers an infinite loop.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3932" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3932"/>
        <description>Wireshark (formerly Ethereal) 0.9.7 through 1.0.2 allows attackers to cause a denial of service (hang) via a crafted NCP packet that triggers an infinite loop.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:10.486-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:29.463-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:12.067-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11273 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:27.330-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:50.722-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-EL3.3" test_ref="oval:org.mitre.oval:tst:37624"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-EL3.3" test_ref="oval:org.mitre.oval:tst:37207"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-3.el4_7" test_ref="oval:org.mitre.oval:tst:37249"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-3.el4_7" test_ref="oval:org.mitre.oval:tst:37725"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37542"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37460"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11272" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto library in MIT Kerberos 5 (aka krb5) 1.3 through 1.6.3, and 1.7 before 1.7.1, allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by providing ciphertext with a length that is too short to be valid.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4212" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4212"/>
        <description>Multiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto library in MIT Kerberos 5 (aka krb5) 1.3 through 1.6.3, and 1.7 before 1.7.1, allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by providing ciphertext with a length that is too short to be valid.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:33.098-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:29.008-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:11.614-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11272 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:54.431-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:50.141-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.2.7-71" test_ref="oval:org.mitre.oval:tst:39799"/>
            <criterion comment="krb5 is earlier than 0:1.2.7-71" test_ref="oval:org.mitre.oval:tst:39761"/>
            <criterion comment="krb5-libs is earlier than 0:1.2.7-71" test_ref="oval:org.mitre.oval:tst:39227"/>
            <criterion comment="krb5-server is earlier than 0:1.2.7-71" test_ref="oval:org.mitre.oval:tst:39626"/>
            <criterion comment="krb5-devel is earlier than 0:1.2.7-71" test_ref="oval:org.mitre.oval:tst:39771"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.3.4-62.el4_8.1" test_ref="oval:org.mitre.oval:tst:39242"/>
            <criterion comment="krb5 is earlier than 0:1.3.4-62.el4_8.1" test_ref="oval:org.mitre.oval:tst:39546"/>
            <criterion comment="krb5-libs is earlier than 0:1.3.4-62.el4_8.1" test_ref="oval:org.mitre.oval:tst:39236"/>
            <criterion comment="krb5-server is earlier than 0:1.3.4-62.el4_8.1" test_ref="oval:org.mitre.oval:tst:39715"/>
            <criterion comment="krb5-devel is earlier than 0:1.3.4-62.el4_8.1" test_ref="oval:org.mitre.oval:tst:39679"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.6.1-36.el5_4.1" test_ref="oval:org.mitre.oval:tst:39207"/>
            <criterion comment="krb5 is earlier than 0:1.6.1-36.el5_4.1" test_ref="oval:org.mitre.oval:tst:39532"/>
            <criterion comment="krb5-libs is earlier than 0:1.6.1-36.el5_4.1" test_ref="oval:org.mitre.oval:tst:39769"/>
            <criterion comment="krb5-server is earlier than 0:1.6.1-36.el5_4.1" test_ref="oval:org.mitre.oval:tst:39828"/>
            <criterion comment="krb5-devel is earlier than 0:1.6.1-36.el5_4.1" test_ref="oval:org.mitre.oval:tst:39572"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11271" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in the (1) SMPP dissector, (2) 802.3 dissector, (3) DHCP, (4) MEGACO dissector, or (5) H1 dissector in Ethereal 0.8.15 through 0.10.11 allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2363" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2363"/>
        <description>Unknown vulnerability in the (1) SMPP dissector, (2) 802.3 dissector, (3) DHCP, (4) MEGACO dissector, or (5) H1 dissector in Ethereal 0.8.15 through 0.10.11 allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:31.295-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:28.760-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:11.351-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11271 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:12.192-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:49.583-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.12-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31966"/>
            <criterion comment="ethereal is earlier than 0:0.10.12-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32076"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.12-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32122"/>
            <criterion comment="ethereal is earlier than 0:0.10.12-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32035"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11270" version="5" class="vulnerability">
      <metadata>
        <title>lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denial of service (assertion failure) via a crafted DNS packet that only contains a header.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0308" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0308"/>
        <description>lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denial of service (assertion failure) via a crafted DNS packet that only contains a header.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:37.581-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:28.573-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:11.136-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11270 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:51.864-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:49.294-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="squid is earlier than 7:2.6.STABLE21-6.el5" test_ref="oval:org.mitre.oval:tst:40327"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1127" version="2" class="vulnerability">
      <metadata>
        <title>Buffer Overflows in uucp</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>uucp</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1359" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1359"/>
        <description>Multiple buffer overflows in uucp for Sun Solaris 2.6, 7, 8, and 9 allow local users to execute arbitrary code as the uucp user.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-04-13T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-04-20T04:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-05-11T04:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-01T04:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-08-22T04:00:00.000-04:00" comment="Product set to uucp; was mistakenly .NET framework">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2005-08-25T10:03:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Solaris 7,8,or 9 installed">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
        </criteria>
        <criterion comment="Networking UUCP Utilities - Usr (SUNWbnuu) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1140"/>
        <criterion comment="Patch 106952-04 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1139"/>
        <criterion comment="Patch 111570-03 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1138"/>
        <criterion comment="Patch 113322-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1137"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11269" version="5" class="vulnerability">
      <metadata>
        <title>Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes ("'") as delimiters in cookies, which might cause sensitive information such as session IDs to be leaked and allow remote attackers to conduct session hijacking attacks.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3382" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3382"/>
        <description>Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes ("'") as delimiters in cookies, which might cause sensitive information such as session IDs to be leaked and allow remote attackers to conduct session hijacking attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:20.636-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:28.273-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:10.753-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11269 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:57.618-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:48.848-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:35173"/>
          <criterion comment="tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:35009"/>
          <criterion comment="tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:34829"/>
          <criterion comment="tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:34843"/>
          <criterion comment="tomcat5-webapps is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:35076"/>
          <criterion comment="tomcat5 is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:34950"/>
          <criterion comment="tomcat5-jasper is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:35160"/>
          <criterion comment="tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:34831"/>
          <criterion comment="tomcat5-server-lib is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:35047"/>
          <criterion comment="tomcat5-common-lib is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:34953"/>
          <criterion comment="tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:35000"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11267" version="5" class="vulnerability">
      <metadata>
        <title>The Linux kernel before 2.6.9-42.0.8 in Red Hat 4.4 allows local users to cause a denial of service (kernel OOPS from null dereference) via fput in a 32-bit ioctl on 64-bit x86 systems, an incomplete fix of CVE-2005-3044.1.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0773" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0773"/>
        <description>The Linux kernel before 2.6.9-42.0.8 in Red Hat 4.4 allows local users to cause a denial of service (kernel OOPS from null dereference) via fput in a 32-bit ioctl on 64-bit x86 systems, an incomplete fix of CVE-2005-3044.1.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:32.411-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:27.938-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:10.410-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11267 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:33.792-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:48.424-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-xenU is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34475"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34659"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34630"/>
          <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34375"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34496"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34560"/>
          <criterion comment="kernel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34493"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34302"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34295"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34662"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:33694"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11266" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1351" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1351"/>
        <description>Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:18.598-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:26.931-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:09.401-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11266 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:52.679-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:47.231-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33447"/>
            <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33884"/>
            <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33550"/>
            <criterion comment="XFree86-libs is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33984"/>
            <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33936"/>
            <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33976"/>
            <criterion comment="XFree86-twm is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33799"/>
            <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33867"/>
            <criterion comment="freetype-devel is earlier than 0:2.1.4-6.el3" test_ref="oval:org.mitre.oval:tst:33835"/>
            <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33958"/>
            <criterion comment="XFree86-doc is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33791"/>
            <criterion comment="freetype is earlier than 0:2.1.4-6.el3" test_ref="oval:org.mitre.oval:tst:33906"/>
            <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33929"/>
            <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33764"/>
            <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33070"/>
            <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33716"/>
            <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33788"/>
            <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33928"/>
            <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33930"/>
            <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33951"/>
            <criterion comment="XFree86-xdm is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33950"/>
            <criterion comment="XFree86-sdk is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33932"/>
            <criterion comment="XFree86 is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33656"/>
            <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33963"/>
            <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33466"/>
            <criterion comment="XFree86-xfs is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33846"/>
            <criterion comment="XFree86-tools is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33660"/>
            <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33687"/>
            <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33689"/>
            <criterion comment="XFree86-xauth is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33499"/>
            <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33719"/>
            <criterion comment="XFree86-devel is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33696"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33811"/>
            <criterion comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33258"/>
            <criterion comment="freetype-devel is earlier than 0:2.1.9-5.el4" test_ref="oval:org.mitre.oval:tst:33866"/>
            <criterion comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33567"/>
            <criterion comment="freetype is earlier than 0:2.1.9-5.el4" test_ref="oval:org.mitre.oval:tst:33796"/>
            <criterion comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33738"/>
            <criterion comment="freetype-demos is earlier than 0:2.1.9-5.el4" test_ref="oval:org.mitre.oval:tst:33869"/>
            <criterion comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33938"/>
            <criterion comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33663"/>
            <criterion comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33066"/>
            <criterion comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33875"/>
            <criterion comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33789"/>
            <criterion comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33829"/>
            <criterion comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33790"/>
            <criterion comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33434"/>
            <criterion comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33704"/>
            <criterion comment="freetype-utils is earlier than 0:2.1.9-5.el4" test_ref="oval:org.mitre.oval:tst:33977"/>
            <criterion comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33886"/>
            <criterion comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33982"/>
            <criterion comment="xorg-x11 is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33715"/>
            <criterion comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33856"/>
            <criterion comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33815"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="freetype is earlier than 0:2.2.1-17.el5" test_ref="oval:org.mitre.oval:tst:33677"/>
            <criterion comment="libXfont is earlier than 0:1.2.2-1.0.2.el5" test_ref="oval:org.mitre.oval:tst:33903"/>
            <criterion comment="freetype-demos is earlier than 0:2.2.1-17.el5" test_ref="oval:org.mitre.oval:tst:33827"/>
            <criterion comment="libXfont-devel is earlier than 0:1.2.2-1.0.2.el5" test_ref="oval:org.mitre.oval:tst:33674"/>
            <criterion comment="freetype-devel is earlier than 0:2.2.1-17.el5" test_ref="oval:org.mitre.oval:tst:34015"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11265" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the JPEG decoder in the TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an encoded JPEG stream that is longer than the scan line size (TiffScanLineSize).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3460" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3460"/>
        <description>Heap-based buffer overflow in the JPEG decoder in the TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an encoded JPEG stream that is longer than the scan line size (TiffScanLineSize).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:50.665-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:26.647-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:09.095-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11265 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:20.422-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:46.773-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.1.3-3.10" test_ref="oval:org.mitre.oval:tst:32819"/>
            <criterion comment="libtiff is earlier than 0:3.5.7-25.el3.4" test_ref="oval:org.mitre.oval:tst:32069"/>
            <criterion comment="kdegraphics is earlier than 7:3.1.3-3.10" test_ref="oval:org.mitre.oval:tst:33012"/>
            <criterion comment="libtiff-devel is earlier than 0:3.5.7-25.el3.4" test_ref="oval:org.mitre.oval:tst:32843"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libtiff is earlier than 0:3.6.1-12" test_ref="oval:org.mitre.oval:tst:32922"/>
            <criterion comment="libtiff-devel is earlier than 0:3.6.1-12" test_ref="oval:org.mitre.oval:tst:32413"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11264" version="5" class="vulnerability">
      <metadata>
        <title>Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0446" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0446"/>
        <description>Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:30.465-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:26.424-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:08.806-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11264 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:39.214-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:46.429-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE3-6.3E.8" test_ref="oval:org.mitre.oval:tst:31374"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE6-3.4E.5" test_ref="oval:org.mitre.oval:tst:31315"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11263" version="5" class="vulnerability">
      <metadata>
        <title>Multiple "endianness errors" in libgadu in ekg before 1.6rc2 allow remote attackers to cause a denial of service (invalid behavior in applications) on big-endian systems.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2448" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2448"/>
        <description>Multiple "endianness errors" in libgadu in ekg before 1.6rc2 allow remote attackers to cause a denial of service (invalid behavior in applications) on big-endian systems.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:25.680-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:26.207-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:08.575-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11263 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:44.294-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:46.109-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kdenetwork-nowlistening is earlier than 7:3.3.1-2.3" test_ref="oval:org.mitre.oval:tst:32125"/>
          <criterion comment="kdenetwork-devel is earlier than 7:3.3.1-2.3" test_ref="oval:org.mitre.oval:tst:32141"/>
          <criterion comment="kdenetwork is earlier than 7:3.3.1-2.3" test_ref="oval:org.mitre.oval:tst:31965"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11261" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the __snprint_value function in snmp_get in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large OCTETSTRING in an attribute value pair (AVP).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2292" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2292"/>
        <description>Buffer overflow in the __snprint_value function in snmp_get in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large OCTETSTRING in an attribute value pair (AVP).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:51.710-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:25.771-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:07.755-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11261 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:53:06.750-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:45.477-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="net-snmp-utils is earlier than 0:5.0.9-2.30E.24" test_ref="oval:org.mitre.oval:tst:36837"/>
            <criterion comment="net-snmp is earlier than 0:5.0.9-2.30E.24" test_ref="oval:org.mitre.oval:tst:37027"/>
            <criterion comment="net-snmp-libs is earlier than 0:5.0.9-2.30E.24" test_ref="oval:org.mitre.oval:tst:37070"/>
            <criterion comment="net-snmp-perl is earlier than 0:5.0.9-2.30E.24" test_ref="oval:org.mitre.oval:tst:36912"/>
            <criterion comment="net-snmp-devel is earlier than 0:5.0.9-2.30E.24" test_ref="oval:org.mitre.oval:tst:36958"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="net-snmp-utils is earlier than 0:5.1.2-11.el4_6.11.3" test_ref="oval:org.mitre.oval:tst:36843"/>
            <criterion comment="net-snmp is earlier than 0:5.1.2-11.el4_6.11.3" test_ref="oval:org.mitre.oval:tst:36880"/>
            <criterion comment="net-snmp-libs is earlier than 0:5.1.2-11.el4_6.11.3" test_ref="oval:org.mitre.oval:tst:36663"/>
            <criterion comment="net-snmp-perl is earlier than 0:5.1.2-11.el4_6.11.3" test_ref="oval:org.mitre.oval:tst:37050"/>
            <criterion comment="net-snmp-devel is earlier than 0:5.1.2-11.el4_6.11.3" test_ref="oval:org.mitre.oval:tst:36948"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="net-snmp-utils is earlier than 1:5.3.1-24.el5_2.1" test_ref="oval:org.mitre.oval:tst:36969"/>
            <criterion comment="net-snmp is earlier than 1:5.3.1-24.el5_2.1" test_ref="oval:org.mitre.oval:tst:37054"/>
            <criterion comment="net-snmp-libs is earlier than 1:5.3.1-24.el5_2.1" test_ref="oval:org.mitre.oval:tst:36883"/>
            <criterion comment="net-snmp-perl is earlier than 1:5.3.1-24.el5_2.1" test_ref="oval:org.mitre.oval:tst:36847"/>
            <criterion comment="net-snmp-devel is earlier than 1:5.3.1-24.el5_2.1" test_ref="oval:org.mitre.oval:tst:36887"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11260" version="5" class="vulnerability">
      <metadata>
        <title>Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows remote attackers to cause a denial of service (memory consumption) via vectors that trigger incorrect calls to the CRYPTO_cleanup_all_ex_data function, as demonstrated by use of SSLv3 and PHP with the Apache HTTP Server, a related issue to CVE-2008-1678.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4355" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4355"/>
        <description>Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows remote attackers to cause a denial of service (memory consumption) via vectors that trigger incorrect calls to the CRYPTO_cleanup_all_ex_data function, as demonstrated by use of SSLv3 and PHP with the Apache HTTP Server, a related issue to CVE-2008-1678.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:39.526-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:25.558-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:07.521-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11260 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:15.854-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:45.154-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="openssl-perl is earlier than 0:0.9.8e-12.el5_4.1" test_ref="oval:org.mitre.oval:tst:39135"/>
          <criterion comment="openssl-devel is earlier than 0:0.9.8e-12.el5_4.1" test_ref="oval:org.mitre.oval:tst:40074"/>
          <criterion comment="openssl is earlier than 0:0.9.8e-12.el5_4.1" test_ref="oval:org.mitre.oval:tst:39755"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1126" version="6" class="vulnerability">
      <metadata>
        <title>Server 2003 Embedded Web Font Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0010" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0010"/>
        <description>Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type (EOT) web font that triggers the overflow during decompression.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-01-11T12:56:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-01-12T09:18:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-02-01T09:08:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:56.016-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:31.656-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1126 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:00.130-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:21.203-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criteria operator="OR" comment="Fontsub.dll &lt; 5.2.3790.426 or T2embed.dll &lt;5.2.3790.426 (S03-Gold)">
          <criterion comment="the version of Fontsub.dll is less than 5.2.3790.426" test_ref="oval:org.mitre.oval:tst:1142"/>
          <criterion comment="the version of T2embed.dll is less than 5.2.3790.426" test_ref="oval:org.mitre.oval:tst:1141"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11259" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XCF file with a large num_axes value in the VECTORS property.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3404" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3404"/>
        <description>Buffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XCF file with a large num_axes value in the VECTORS property.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:13.509-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:25.356-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:07.300-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11259 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:10.333-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:44.806-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="gimp-devel is earlier than 1:2.0.5-6" test_ref="oval:org.mitre.oval:tst:32652"/>
          <criterion comment="gimp is earlier than 1:2.0.5-6" test_ref="oval:org.mitre.oval:tst:32460"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11258" version="5" class="vulnerability">
      <metadata>
        <title>The SNMP agent (snmp_agent.c) in net-snmp before 5.4.1 allows remote attackers to cause a denial of service (CPU and memory consumption) via a GETBULK request with a large max-repeaters value.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5846" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5846"/>
        <description>The SNMP agent (snmp_agent.c) in net-snmp before 5.4.1 allows remote attackers to cause a denial of service (CPU and memory consumption) via a GETBULK request with a large max-repeaters value.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:51.133-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:24.860-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:06.805-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11258 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:43.008-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:44.214-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="net-snmp-utils is earlier than 0:5.0.9-2.30E.23" test_ref="oval:org.mitre.oval:tst:35500"/>
            <criterion comment="net-snmp is earlier than 0:5.0.9-2.30E.23" test_ref="oval:org.mitre.oval:tst:35214"/>
            <criterion comment="net-snmp-libs is earlier than 0:5.0.9-2.30E.23" test_ref="oval:org.mitre.oval:tst:35679"/>
            <criterion comment="net-snmp-perl is earlier than 0:5.0.9-2.30E.23" test_ref="oval:org.mitre.oval:tst:35260"/>
            <criterion comment="net-snmp-devel is earlier than 0:5.0.9-2.30E.23" test_ref="oval:org.mitre.oval:tst:35401"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="net-snmp-utils is earlier than 0:5.1.2-11.el4_6.11.1" test_ref="oval:org.mitre.oval:tst:35099"/>
            <criterion comment="net-snmp is earlier than 0:5.1.2-11.el4_6.11.1" test_ref="oval:org.mitre.oval:tst:35223"/>
            <criterion comment="net-snmp-libs is earlier than 0:5.1.2-11.el4_6.11.1" test_ref="oval:org.mitre.oval:tst:35674"/>
            <criterion comment="net-snmp-perl is earlier than 0:5.1.2-11.el4_6.11.1" test_ref="oval:org.mitre.oval:tst:35414"/>
            <criterion comment="net-snmp-devel is earlier than 0:5.1.2-11.el4_6.11.1" test_ref="oval:org.mitre.oval:tst:35387"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="net-snmp-utils is earlier than 1:5.3.1-19.el5_1.1" test_ref="oval:org.mitre.oval:tst:35497"/>
            <criterion comment="net-snmp is earlier than 1:5.3.1-19.el5_1.1" test_ref="oval:org.mitre.oval:tst:35534"/>
            <criterion comment="net-snmp-libs is earlier than 1:5.3.1-19.el5_1.1" test_ref="oval:org.mitre.oval:tst:35376"/>
            <criterion comment="net-snmp-perl is earlier than 1:5.3.1-19.el5_1.1" test_ref="oval:org.mitre.oval:tst:35426"/>
            <criterion comment="net-snmp-devel is earlier than 1:5.3.1-19.el5_1.1" test_ref="oval:org.mitre.oval:tst:35655"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11257" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has unknown impact and remote attack vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1864" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1864"/>
        <description>Buffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has unknown impact and remote attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:57.130-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:24.259-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:06.132-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11257 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:36:22.229-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:43.404-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.5" test_ref="oval:org.mitre.oval:tst:34251"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.5" test_ref="oval:org.mitre.oval:tst:33540"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.5" test_ref="oval:org.mitre.oval:tst:33681"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.5" test_ref="oval:org.mitre.oval:tst:34104"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.5" test_ref="oval:org.mitre.oval:tst:34225"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.5" test_ref="oval:org.mitre.oval:tst:33981"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.5" test_ref="oval:org.mitre.oval:tst:33655"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.5" test_ref="oval:org.mitre.oval:tst:34240"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.5" test_ref="oval:org.mitre.oval:tst:33911"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.5" test_ref="oval:org.mitre.oval:tst:34150"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.5" test_ref="oval:org.mitre.oval:tst:33287"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.5" test_ref="oval:org.mitre.oval:tst:34209"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.5" test_ref="oval:org.mitre.oval:tst:34018"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.5" test_ref="oval:org.mitre.oval:tst:34253"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34211"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34207"/>
            <criterion comment="php-common is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34065"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34113"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34217"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34013"/>
            <criterion comment="php is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34180"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:33453"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34056"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:33924"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34226"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:33397"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34129"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34250"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:33993"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34061"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34151"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34139"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34097"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11256" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the ieee_putascii function for nasm 0.98 and earlier allows attackers to execute arbitrary code via a crafted asm file, a different vulnerability than CVE-2004-1287.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1194" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1194"/>
        <description>Stack-based buffer overflow in the ieee_putascii function for nasm 0.98 and earlier allows attackers to execute arbitrary code via a crafted asm file, a different vulnerability than CVE-2004-1287.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:09.718-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:23.926-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:05.781-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11256 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:46.797-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:42.971-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="nasm is earlier than 0:0.98.35-3.EL3" test_ref="oval:org.mitre.oval:tst:31348"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nasm-doc is earlier than 0:0.98.38-3.EL4" test_ref="oval:org.mitre.oval:tst:31776"/>
            <criterion comment="nasm is earlier than 0:0.98.38-3.EL4" test_ref="oval:org.mitre.oval:tst:31746"/>
            <criterion comment="nasm-rdoff is earlier than 0:0.98.38-3.EL4" test_ref="oval:org.mitre.oval:tst:31654"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11255" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the parse_tag_3_packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving a crafted eCryptfs file, related to a large encrypted key size in a Tag 3 packet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2407" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2407"/>
        <description>Heap-based buffer overflow in the parse_tag_3_packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving a crafted eCryptfs file, related to a large encrypted key size in a Tag 3 packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:48.264-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:23.608-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:05.438-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11255 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:59.558-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:42.404-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38128"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38668"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38883"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38948"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38732"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38969"/>
          <criterion comment="kernel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38991"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:39056"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38817"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:39009"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38672"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38983"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11254" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in the LDAP dissector in Ethereal 0.8.5 through 0.10.11 allows remote attackers to cause a denial of service (free static memory and application crash) via unknown attack vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2360" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2360"/>
        <description>Unknown vulnerability in the LDAP dissector in Ethereal 0.8.5 through 0.10.11 allows remote attackers to cause a denial of service (free static memory and application crash) via unknown attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:01.006-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:23.361-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:05.156-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11254 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:02:21.958-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:41.997-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.12-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31966"/>
            <criterion comment="ethereal is earlier than 0:0.10.12-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32076"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.12-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32122"/>
            <criterion comment="ethereal is earlier than 0:0.10.12-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32035"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11253" version="5" class="vulnerability">
      <metadata>
        <title>Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during the recursive mime8to7 function for performing 8-bit to 7-bit conversion, which prevents Sendmail from delivering queued messages and might lead to disk consumption by core dump files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1173" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1173"/>
        <description>Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during the recursive mime8to7 function for performing 8-bit to 7-bit conversion, which prevents Sendmail from delivering queued messages and might lead to disk consumption by core dump files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:25.469-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:23.053-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:04.785-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11253 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:02:03.000-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:41.573-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="sendmail is earlier than 0:8.12.11-4.RHEL3.6" test_ref="oval:org.mitre.oval:tst:32636"/>
            <criterion comment="sendmail-doc is earlier than 0:8.12.11-4.RHEL3.6" test_ref="oval:org.mitre.oval:tst:32247"/>
            <criterion comment="sendmail-cf is earlier than 0:8.12.11-4.RHEL3.6" test_ref="oval:org.mitre.oval:tst:32182"/>
            <criterion comment="sendmail-devel is earlier than 0:8.12.11-4.RHEL3.6" test_ref="oval:org.mitre.oval:tst:32742"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="sendmail is earlier than 0:8.13.1-3.RHEL4.5" test_ref="oval:org.mitre.oval:tst:32406"/>
            <criterion comment="sendmail-doc is earlier than 0:8.13.1-3.RHEL4.5" test_ref="oval:org.mitre.oval:tst:32603"/>
            <criterion comment="sendmail-cf is earlier than 0:8.13.1-3.RHEL4.5" test_ref="oval:org.mitre.oval:tst:32526"/>
            <criterion comment="sendmail-devel is earlier than 0:8.13.1-3.RHEL4.5" test_ref="oval:org.mitre.oval:tst:32452"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11252" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary code via a long filename command line argument.  NOTE: since the overflow occurs in a non-setuid program, there are not many scenarios under which it poses a vulnerability, unless unzip is passed long arguments when it is invoked from other programs.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-4667" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4667"/>
        <description>Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary code via a long filename command line argument.  NOTE: since the overflow occurs in a non-setuid program, there are not many scenarios under which it poses a vulnerability, unless unzip is passed long arguments when it is invoked from other programs.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:40.461-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:22.795-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:04.398-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11252 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:02:03.822-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:41.217-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="unzip is earlier than 0:5.50-35.EL3" test_ref="oval:org.mitre.oval:tst:30464"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="unzip is earlier than 0:5.51-9.EL4.5" test_ref="oval:org.mitre.oval:tst:33619"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11251" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in Cairo before 1.4.12 might allow remote attackers to execute arbitrary code, as demonstrated using a crafted PNG image with large width and height values, which is not properly handled by the read_png function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5503" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5503"/>
        <description>Multiple integer overflows in Cairo before 1.4.12 might allow remote attackers to execute arbitrary code, as demonstrated using a crafted PNG image with large width and height values, which is not properly handled by the read_png function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:29.144-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:22.593-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:04.182-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11251 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:09.355-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:40.867-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="cairo-devel is earlier than 0:1.2.4-3.el5_1" test_ref="oval:org.mitre.oval:tst:35609"/>
          <criterion comment="cairo is earlier than 0:1.2.4-3.el5_1" test_ref="oval:org.mitre.oval:tst:35639"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11250" version="5" class="vulnerability">
      <metadata>
        <title>The perfmonctl system call (sys_perfmonctl) in Linux kernel 2.4.x and 2.6 before 2.6.18, when running on Itanium systems, does not properly track the reference count for file descriptors, which allows local users to cause a denial of service (file descriptor consumption).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3741" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3741"/>
        <description>The perfmonctl system call (sys_perfmonctl) in Linux kernel 2.4.x and 2.6 before 2.6.18, when running on Itanium systems, does not properly track the reference count for file descriptors, which allows local users to cause a denial of service (file descriptor consumption).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:28.911-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:22.315-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:03.817-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11250 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:36:07.171-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:40.463-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32678"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32900"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:33014"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32947"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32944"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32956"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32602"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:33081"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32892"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1125" version="1" class="vulnerability">
      <metadata>
        <title>Server 2003 Color Management Module Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Color Management Module</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1219" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1219"/>
        <description>Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with crafted ICC profile format tags.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-02T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2005-08-03T11:30:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="the version of mscms.dll is less than 5.2.3790.359" negate="false" test_ref="oval:org.mitre.oval:tst:1143"/>
        <criterion comment="the patch KB901214 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2697"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11249" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute arbitrary code by manipulating the VMA descriptor.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0091" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0091"/>
        <description>Unknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when using the hugemem kernel, allows local users to read and write to arbitrary kernel memory and gain privileges via certain syscalls.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:47.506-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:22.008-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:03.547-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11249 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:45.547-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:40.088-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30633"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:31009"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30369"/>
          <criterion comment="kernel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:31205"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30421"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30594"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30616"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11248" version="5" class="vulnerability">
      <metadata>
        <title>Multiple format string vulnerabilities in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) 1.0.3, 0.9.5, and earlier and (2) iSCSI Enterprise Target (aka iscsitarget) 0.4.16 allow remote attackers to cause a denial of service (tgtd daemon crash) or possibly have unspecified other impact via vectors that involve the isns_attr_query and qry_rsp_handle functions, and are related to (a) client appearance and (b) client disappearance messages.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0743" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0743"/>
        <description>Multiple format string vulnerabilities in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) 1.0.3, 0.9.5, and earlier and (2) iSCSI Enterprise Target (aka iscsitarget) 0.4.16 allow remote attackers to cause a denial of service (tgtd daemon crash) or possibly have unspecified other impact via vectors that involve the isns_attr_query and qry_rsp_handle functions, and are related to (a) client appearance and (b) client disappearance messages.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:29.914-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:21.832-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:03.334-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11248 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:41:09.521-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:39.733-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="scsi-target-utils is earlier than 0:0.0-6.20091205snap.el5_5.2" test_ref="oval:org.mitre.oval:tst:39982"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11247" version="5" class="vulnerability">
      <metadata>
        <title>The Netrw plugin (netrw.vim) in Vim 7.0 and 7.1 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a filename used by the (1) "D" (delete) command or (2) b:netrw_curdir variable, as demonstrated using the netrw.v4 and netrw.v5 test cases.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-6235" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6235"/>
        <description>The Netrw plugin (netrw.vim) in Vim 7.0 and 7.1 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a filename used by the (1) "D" (delete) command or (2) b:netrw_curdir variable, as demonstrated using the netrw.v4 and netrw.v5 test cases.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:51.375-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:21.595-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:03.073-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11247 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:51.678-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:39.250-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="vim-minimal is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37412"/>
          <criterion comment="vim-enhanced is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37218"/>
          <criterion comment="vim is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37405"/>
          <criterion comment="vim-X11 is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37384"/>
          <criterion comment="vim-common is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37365"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11246" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in the Render extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via a (1) SProcRenderCreateLinearGradient, (2) SProcRenderCreateRadialGradient, or (3) SProcRenderCreateConicalGradient request with an invalid field specifying the number of bytes to swap in the request data, which triggers heap memory corruption.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2362" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2362"/>
        <description>Multiple integer overflows in the Render extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via a (1) SProcRenderCreateLinearGradient, (2) SProcRenderCreateRadialGradient, or (3) SProcRenderCreateConicalGradient request with an invalid field specifying the number of bytes to swap in the request data, which triggers heap memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:15.356-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:21.319-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:02.736-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11246 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:55.828-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:38.817-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="xorg-x11-server-randr-source is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:37018"/>
          <criterion comment="xorg-x11-server-Xnest is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36836"/>
          <criterion comment="xorg-x11-server-Xvfb is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36063"/>
          <criterion comment="xorg-x11-server-Xdmx is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36029"/>
          <criterion comment="xorg-x11-server is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36986"/>
          <criterion comment="xorg-x11-server-sdk is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36380"/>
          <criterion comment="xorg-x11-server-Xephyr is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36055"/>
          <criterion comment="xorg-x11-server-Xorg is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36359"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11245" version="5" class="vulnerability">
      <metadata>
        <title>A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a function pointer from deallocated stack memory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6235" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6235"/>
        <description>A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a function pointer from deallocated stack memory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:35.845-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:21.101-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:02.482-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11245 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:18:59.205-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:38.470-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gnupg is earlier than 0:1.2.1-19" test_ref="oval:org.mitre.oval:tst:32348"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gnupg is earlier than 0:1.2.6-8" test_ref="oval:org.mitre.oval:tst:33174"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11243" version="5" class="vulnerability">
      <metadata>
        <title>Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kernel panic) via incoming IP fragmented (1) COOKIE_ECHO and (2) HEARTBEAT SCTP control chunks.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2272" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2272"/>
        <description>Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kernel panic) via incoming IP fragmented (1) COOKIE_ECHO and (2) HEARTBEAT SCTP control chunks.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:36.109-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:20.789-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:02.167-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11243 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:28:48.485-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:38.013-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32235"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32371"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32703"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32314"/>
          <criterion comment="kernel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32614"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32295"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32310"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32611"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32305"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11242" version="5" class="vulnerability">
      <metadata>
        <title>serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0418" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0418"/>
        <description>serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:27.485-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:20.610-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:01.893-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11242 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:08.557-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:37.748-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="cvs is earlier than 0:1.11.2-24" test_ref="oval:org.mitre.oval:tst:30480"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11241" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allow remote attackers to access files or execute arbitrary code via (1) a crafted PNG image that triggers an integer overflow during memory allocation for display on the splash screen, aka CR 6804996; and (2) a crafted GIF image from which unspecified values are used in calculation of offsets, leading to object-pointer corruption, aka CR 6804997.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1097" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1097"/>
        <description>Multiple buffer overflows in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allow remote attackers to access files or execute arbitrary code via (1) a crafted PNG image that triggers an integer overflow during memory allocation for display on the splash screen, aka CR 6804996; and (2) a crafted GIF image from which unspecified values are used in calculation of offsets, leading to object-pointer corruption, aka CR 6804997.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:46.203-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:20.380-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:01.635-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11241 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:23.263-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:37.406-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:38276"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37661"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37652"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37769"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:38561"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11240" version="5" class="vulnerability">
      <metadata>
        <title>pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4993" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4993"/>
        <description>pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:59.474-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:19.982-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:01.394-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11240 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:58.518-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:37.093-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="xen-libs is earlier than 0:3.0.3-25.0.4.el5" test_ref="oval:org.mitre.oval:tst:34182"/>
          <criterion comment="xen is earlier than 0:3.0.3-25.0.4.el5" test_ref="oval:org.mitre.oval:tst:33194"/>
          <criterion comment="xen-devel is earlier than 0:3.0.3-25.0.4.el5" test_ref="oval:org.mitre.oval:tst:34003"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1124" version="5" class="vulnerability">
      <metadata>
        <title>RHE4 Fetchmail Buffer Overflow via Long UIDL Responses</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <product>fetchmail</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2335" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2335"/>
        <description>Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service and possibly execute arbitrary code via long UIDL responses.  NOTE: a typo in an advisory accidentally used the wrong CVE identifier for the Fetchmail issue. This is the correct identifier.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-15T04:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-08-19T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11366 - Updated CPE reference, updated regular expression" date="2011-02-17T13:29:00.547-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2011-02-17T13:31:07.419-05:00">INTERIM</status_change>
            <status_change date="2011-03-07T04:00:03.563-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11366 - Corrected - right version for brlapi and brlapi-devel as specified by RHSA-2010:0181-5" date="2013-03-18T12:26:00.995-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-03-18T12:31:10.189-04:00">INTERIM</status_change>
            <status_change date="2013-04-08T04:00:06.192-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2652"/>
          <criterion comment="fetchmail RPM earlier than 0:6.2.5-6.el4.2" negate="false" test_ref="oval:org.mitre.oval:tst:1144"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/fetchmail is executable by any user" negate="false" test_ref="oval:org.mitre.oval:tst:1261"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11239" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in the BER dissector in Ethereal 0.10.11 allows remote attackers to cause a denial of service (abort or infinite loop) via unknown attack vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2366" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2366"/>
        <description>Unknown vulnerability in the BER dissector in Ethereal 0.10.11 allows remote attackers to cause a denial of service (abort or infinite loop) via unknown attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:59.230-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:19.737-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:01.115-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11239 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:11.211-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:36.692-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.12-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31966"/>
            <criterion comment="ethereal is earlier than 0:0.10.12-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32076"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.12-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32122"/>
            <criterion comment="ethereal is earlier than 0:0.10.12-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32035"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11238" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in the (1) read and (2) write handlers in the Omnikey CardMan 4040 driver in the Linux kernel before 2.6.21-rc3 allow local users to gain privileges.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0005" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0005"/>
        <description>Multiple buffer overflows in the (1) read and (2) write handlers in the Omnikey CardMan 4040 driver in the Linux kernel before 2.6.21-rc3 allow local users to gain privileges.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:22.764-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:19.424-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:00.742-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11238 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:22.188-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:36.264-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33717"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33839"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33412"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33730"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33902"/>
          <criterion comment="kernel is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33740"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33736"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33914"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33489"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33621"/>
          <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33879"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11237" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the ReadPCXImage function in the PCX coder in coders/pcx.c in (1) ImageMagick 6.2.4-5 and 6.2.8-0 and (2) GraphicsMagick (aka gm) 1.1.7 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted .pcx file that triggers incorrect memory allocation for the scanline array, leading to memory corruption.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1097" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1097"/>
        <description>Heap-based buffer overflow in the ReadPCXImage function in the PCX coder in coders/pcx.c in (1) ImageMagick 6.2.4-5 and 6.2.8-0 and (2) GraphicsMagick (aka gm) 1.1.7 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted .pcx file that triggers incorrect memory allocation for the scanline array, leading to memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:57.378-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:18.987-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:09:00.299-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11237 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:04.256-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:35.608-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36023"/>
            <criterion comment="ImageMagick is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36184"/>
            <criterion comment="ImageMagick-perl is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36260"/>
            <criterion comment="ImageMagick-devel is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36208"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36056"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:36311"/>
            <criterion comment="ImageMagick is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:36459"/>
            <criterion comment="ImageMagick-perl is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:36349"/>
            <criterion comment="ImageMagick-devel is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:35927"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:36106"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36419"/>
            <criterion comment="ImageMagick is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36360"/>
            <criterion comment="ImageMagick-perl is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36388"/>
            <criterion comment="ImageMagick-devel is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:35921"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36133"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11236" version="5" class="vulnerability">
      <metadata>
        <title>Memory leak in the request_key_auth_destroy function in request_key_auth in Linux kernel 2.6.10 up to 2.6.13 allows local users to cause a denial of service (memory consumption) via a large number of authorization token keys.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3119" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3119"/>
        <description>Memory leak in the request_key_auth_destroy function in request_key_auth in Linux kernel 2.6.10 up to 2.6.13 allows local users to cause a denial of service (memory consumption) via a large number of authorization token keys.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:04.334-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:18.727-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:59.954-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11236 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:29.880-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:35.244-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32382"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32096"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32404"/>
          <criterion comment="kernel is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32387"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32210"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32355"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32373"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11235" version="5" class="vulnerability">
      <metadata>
        <title>choose_new_parent in Linux kernel before 2.6.11.12 includes certain debugging code, which allows local users to cause a denial of service (panic) by causing certain circumstances involving termination of a parent process.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1855" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1855"/>
        <description>choose_new_parent in Linux kernel before 2.6.11.12 includes certain debugging code, which allows local users to cause a denial of service (panic) by causing certain circumstances involving termination of a parent process.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:28.681-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:18.448-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:59.636-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11235 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:30:20.575-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:34.811-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32235"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32371"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32703"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32314"/>
          <criterion comment="kernel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32614"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32295"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32310"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32611"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32305"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11234" version="5" class="vulnerability">
      <metadata>
        <title>The aio_setup_ring function in Linux kernel does not properly initialize a variable, which allows local users to cause a denial of service (crash) via an unspecified error path that causes an incorrect free operation.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5754"/>
        <description>The aio_setup_ring function in Linux kernel does not properly initialize a variable, which allows local users to cause a denial of service (crash) via an unspecified error path that causes an incorrect free operation.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:48.900-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:17.836-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:59.319-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11234 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:30:46.846-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:34.421-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33204"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33278"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33306"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32378"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33145"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33107"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32620"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32645"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33057"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11233" version="5" class="vulnerability">
      <metadata>
        <title>The sysfs_readdir function in the Linux kernel 2.6, as used in Red Hat Enterprise Linux (RHEL) 4.5 and other distributions, allows users to cause a denial of service (kernel OOPS) by dereferencing a null pointer to an inode in a dentry.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3104" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3104"/>
        <description>The sysfs_readdir function in the Linux kernel 2.6, as used in Red Hat Enterprise Linux (RHEL) 4.5 and other distributions, allows users to cause a denial of service (kernel OOPS) by dereferencing a null pointer to an inode in a dentry.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:56.004-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:17.343-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:58.710-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11233 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:28:55.650-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:33.737-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34475"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34659"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34630"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34375"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34496"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34560"/>
            <criterion comment="kernel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34493"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34302"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34295"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34662"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:33694"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36030"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:35766"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36138"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36062"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:35611"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:35990"/>
            <criterion comment="kernel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:35969"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36085"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36026"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36084"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36097"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36035"/>
            <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:35648"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11232" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving (1) long strings in the toSource method of the Object, Array, and String objects; and (2) unspecified "string function arguments."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3806" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3806"/>
        <description>Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving (1) long strings in the toSource method of the Object, Array, and String objects; and (2) unspecified "string function arguments."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:06.178-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:16.791-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:58.168-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11232 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:12.223-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:33.105-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32342"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32877"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:31982"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32816"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32080"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32904"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32915"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32924"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32822"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32555"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32873"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32693"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32886"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32810"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32418"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32496"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32929"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32777"/>
            <criterion comment="firefox is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32896"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32722"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32906"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32905"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32925"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32624"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11231" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1252"/>
        <description>Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:23.729-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:16.559-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:57.895-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11231 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:10.519-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:32.681-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="ntp is earlier than 0:4.2.0.a.20040617-8.el4_7.2" test_ref="oval:org.mitre.oval:tst:38589"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="ntp is earlier than 0:4.2.2p1-9.el5_3.2" test_ref="oval:org.mitre.oval:tst:38719"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11230" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to execute arbitrary script and code via a new search plugin using sidebar.addSearchEngine, aka "Firesearching 1."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1156" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1156"/>
        <description>Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to execute arbitrary script and code via a new search plugin using sidebar.addSearchEngine, aka "Firesearching 1."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:29.378-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:15.988-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:57.370-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11230 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:29.576-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:32.074-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31283"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31520"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31645"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31516"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31569"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31143"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31512"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31785"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31695"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31626"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31478"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.4" test_ref="oval:org.mitre.oval:tst:31488"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31751"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31647"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:30850"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31749"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.4" test_ref="oval:org.mitre.oval:tst:31658"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31636"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31780"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:30828"/>
            <criterion comment="firefox is earlier than 0:1.0.3-1.4.1" test_ref="oval:org.mitre.oval:tst:31646"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31716"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31758"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11229" version="5" class="vulnerability">
      <metadata>
        <title>The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0233" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0233"/>
        <description>The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:18.804-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:15.650-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:56.934-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11229 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:16.126-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:31.569-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31283"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31520"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31645"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31516"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31569"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31143"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31512"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31785"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31695"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31626"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:1.0.1-1.4.3" test_ref="oval:org.mitre.oval:tst:31118"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11228" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with "C-escape" expansions, which cause the make_printable_string function to return a longer string than expected while constructing a prompt.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6169" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6169"/>
        <description>Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with "C-escape" expansions, which cause the make_printable_string function to return a longer string than expected while constructing a prompt.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:08.707-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:15.430-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:56.688-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11228 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:10.450-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:31.217-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gnupg is earlier than 0:1.2.1-19" test_ref="oval:org.mitre.oval:tst:32348"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gnupg is earlier than 0:1.2.6-8" test_ref="oval:org.mitre.oval:tst:33174"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11227" version="5" class="vulnerability">
      <metadata>
        <title>Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory situations.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1571" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1571"/>
        <description>Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory situations.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:30.801-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:14.864-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:56.143-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11227 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:54.103-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:30.487-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:39910"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:40282"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:40001"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:40160"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:39327"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:39963"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:39749"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:40277"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:39865"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:40145"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-52.el4_8" test_ref="oval:org.mitre.oval:tst:40087"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-25.el4" test_ref="oval:org.mitre.oval:tst:40299"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-52.el4_8" test_ref="oval:org.mitre.oval:tst:40185"/>
            <criterion comment="firefox is earlier than 0:3.0.18-1.el4" test_ref="oval:org.mitre.oval:tst:39897"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-52.el4_8" test_ref="oval:org.mitre.oval:tst:40258"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-52.el4_8" test_ref="oval:org.mitre.oval:tst:40130"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-52.el4_8" test_ref="oval:org.mitre.oval:tst:40147"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-52.el4_8" test_ref="oval:org.mitre.oval:tst:40264"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:39323"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:40174"/>
            <criterion comment="firefox is earlier than 0:3.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:40301"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.24-2.el5_4" test_ref="oval:org.mitre.oval:tst:40249"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:39533"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11226" version="5" class="vulnerability">
      <metadata>
        <title>The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other applications, does not properly handle embedded fonts in PDF files, which allows remote attackers to execute arbitrary code via a crafted font object, related to dereferencing a function pointer associated with the type of this font object.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1693" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1693"/>
        <description>The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other applications, does not properly handle embedded fonts in PDF files, which allows remote attackers to execute arbitrary code via a crafted font object, related to dereferencing a function pointer associated with the type of this font object.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:08.656-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:14.575-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:55.788-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11226 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:01.218-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:29.997-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 0:3.3.1-9.el4_6" test_ref="oval:org.mitre.oval:tst:36440"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-7.7.2" test_ref="oval:org.mitre.oval:tst:36630"/>
            <criterion comment="xpdf is earlier than 1:3.00-16.el4" test_ref="oval:org.mitre.oval:tst:36487"/>
            <criterion comment="kdegraphics is earlier than 0:3.3.1-9.el4_6" test_ref="oval:org.mitre.oval:tst:36266"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="poppler-utils is earlier than 0:0.5.4-4.4.el5_1" test_ref="oval:org.mitre.oval:tst:36674"/>
            <criterion comment="poppler-devel is earlier than 0:0.5.4-4.4.el5_1" test_ref="oval:org.mitre.oval:tst:36617"/>
            <criterion comment="poppler is earlier than 0:0.5.4-4.4.el5_1" test_ref="oval:org.mitre.oval:tst:36491"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11225" version="5" class="vulnerability">
      <metadata>
        <title>ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by using MODE_PRIVATE to send a spoofed (1) request or (2) response packet that triggers a continuous exchange of MODE_PRIVATE error responses between two NTP daemons.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3563" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3563"/>
        <description>ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by using MODE_PRIVATE to send a spoofed (1) request or (2) response packet that triggers a continuous exchange of MODE_PRIVATE error responses between two NTP daemons.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:02.078-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:14.316-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:55.506-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11225 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:39.605-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:29.559-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="ntp is earlier than 0:4.1.2-6.el3" test_ref="oval:org.mitre.oval:tst:39300"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="ntp is earlier than 0:4.2.0.a.20040617-8.el4_8.1" test_ref="oval:org.mitre.oval:tst:39285"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="ntp is earlier than 0:4.2.2p1-9.el5_4.1" test_ref="oval:org.mitre.oval:tst:38798"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11224" version="5" class="vulnerability">
      <metadata>
        <title>Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename.  NOTE: the original exploit was demonstrated through a command line argument, but there are other mechanisms for input that are automatically processed by Dia, such as a crafted .dia file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2480"/>
        <description>Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename.  NOTE: the original exploit was demonstrated through a command line argument, but there are other mechanisms for input that are automatically processed by Dia, such as a crafted .dia file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:30.146-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:14.129-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:55.293-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11224 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:30.727-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:29.095-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="dia is earlier than 1:0.94-5.7.1" test_ref="oval:org.mitre.oval:tst:32057"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11223" version="5" class="vulnerability">
      <metadata>
        <title>The XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ stanza during an attempted fetch of a custom smiley, which allows remote attackers to cause a denial of service (application crash) via XHTML-IM content with cid: images.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3085" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3085"/>
        <description>The XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ stanza during an attempted fetch of a custom smiley, which allows remote attackers to cause a denial of service (application crash) via XHTML-IM content with cid: images.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:17.350-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:13.669-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:54.809-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11223 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:44.226-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:28.480-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39474"/>
            <criterion comment="libpurple is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39423"/>
            <criterion comment="libpurple-perl is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39307"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39264"/>
            <criterion comment="pidgin-devel is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39332"/>
            <criterion comment="libpurple-devel is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39395"/>
            <criterion comment="finch is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39376"/>
            <criterion comment="pidgin-perl is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39381"/>
            <criterion comment="pidgin is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39450"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39246"/>
            <criterion comment="libpurple is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39428"/>
            <criterion comment="libpurple-perl is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39414"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39006"/>
            <criterion comment="pidgin-devel is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:38683"/>
            <criterion comment="libpurple-devel is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39404"/>
            <criterion comment="finch is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39139"/>
            <criterion comment="pidgin-perl is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39341"/>
            <criterion comment="pidgin is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39169"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11222" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 decode invisible characters when they are displayed in the location bar, which causes an incorrect address to be displayed and makes it easier for remote attackers to spoof URLs and conduct phishing attacks.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0777" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0777"/>
        <description>Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 decode invisible characters when they are displayed in the location bar, which causes an incorrect address to be displayed and makes it easier for remote attackers to spoof URLs and conduct phishing attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:00.670-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:13.410-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:54.512-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11222 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:30:17.471-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:28.068-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.7-1.el4" test_ref="oval:org.mitre.oval:tst:38405"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:38168"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:37685"/>
            <criterion comment="firefox is earlier than 0:3.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:38372"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:38365"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11220" version="5" class="vulnerability">
      <metadata>
        <title>Racoon before 20040408a allows remote attackers to cause a denial of service (memory consumption) via an ISAKMP packet with a large length field.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0403" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0403"/>
        <description>Racoon before 20040408a allows remote attackers to cause a denial of service (memory consumption) via an ISAKMP packet with a large length field.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:21.462-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:13.224-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:54.133-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11220 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:14.346-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:27.755-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="ipsec-tools is earlier than 0:0.2.5-0.4" test_ref="oval:org.mitre.oval:tst:30611"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1122" version="1" class="vulnerability">
      <metadata>
        <title>Linux Kernel elf_core_dump() Buffer Overflow</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>Linux kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1263" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1263"/>
        <description>The elf_core_dump function in binfmt_elf.c for Linux kernel 2.x.x to 2.2.27-rc2, 2.4.x to 2.4.31-pre1, and 2.6.x to 2.6.12-rc4 allows local users to execute arbitrary code via an ELF binary that, in certain conditions involving the create_elf_tables function, causes a negative length argument to pass a signed integer comparison, leading to a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-06-29T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-06-29T06:49:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criteria operator="OR" comment="kernel, kernel-smp or kernel-hugemem RPM earlier than 0:2.4.21-32.0.1.EL">
          <criterion comment="kernel RPM earlier than 0:2.4.21-32.0.1.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1148"/>
          <criterion comment="kernel-hugemem RPM earlier than 0:2.4.21-32.0.1.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1147"/>
          <criterion comment="kernel-smp RPM earlier than 0:2.4.21-32.0.1.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1146"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11219" version="5" class="vulnerability">
      <metadata>
        <title>layout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 does not properly handle first-letter frames, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3382" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3382"/>
        <description>layout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 does not properly handle first-letter frames, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:24.337-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:12.865-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:53.762-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11219 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:13.577-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:27.299-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nspr is earlier than 0:4.7.6-1.el4_8" test_ref="oval:org.mitre.oval:tst:39525"/>
            <criterion comment="firefox is earlier than 0:3.0.15-3.el4" test_ref="oval:org.mitre.oval:tst:39710"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.6-1.el4_8" test_ref="oval:org.mitre.oval:tst:38755"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39602"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39541"/>
            <criterion comment="nspr is earlier than 0:4.7.6-1.el5_4" test_ref="oval:org.mitre.oval:tst:39168"/>
            <criterion comment="firefox is earlier than 0:3.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39294"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.6-1.el5_4" test_ref="oval:org.mitre.oval:tst:39579"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39636"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11218" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or U+202E) Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displaying a non-executable extension for an executable file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3376" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3376"/>
        <description>Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or U+202E) Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displaying a non-executable extension for an executable file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:55.320-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:12.306-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:53.187-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11218 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:57.500-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:26.506-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39570"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39466"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39720"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39691"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39583"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39280"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39727"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39550"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39575"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39724"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nspr is earlier than 0:4.7.6-1.el4_8" test_ref="oval:org.mitre.oval:tst:39525"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39481"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-25.el4" test_ref="oval:org.mitre.oval:tst:40299"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.6-1.el4_8" test_ref="oval:org.mitre.oval:tst:38755"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39675"/>
            <criterion comment="firefox is earlier than 0:3.0.15-3.el4" test_ref="oval:org.mitre.oval:tst:39710"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39683"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39031"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39547"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39753"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39602"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39541"/>
            <criterion comment="nspr is earlier than 0:4.7.6-1.el5_4" test_ref="oval:org.mitre.oval:tst:39168"/>
            <criterion comment="firefox is earlier than 0:3.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39294"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.24-2.el5_4" test_ref="oval:org.mitre.oval:tst:40249"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.6-1.el5_4" test_ref="oval:org.mitre.oval:tst:39579"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39636"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11217" version="5" class="vulnerability">
      <metadata>
        <title>The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a denial of service (cupsd daemon outage or crash) via manipulations of the timing of CUPS browse packets, related to a "pointer use-after-delete flaw."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1196"/>
        <description>The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a denial of service (cupsd daemon outage or crash) via manipulations of the timing of CUPS browse packets, related to a "pointer use-after-delete flaw."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:57.218-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:11.979-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:52.818-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11217 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:02.965-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:26.079-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.62" test_ref="oval:org.mitre.oval:tst:38765"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.62" test_ref="oval:org.mitre.oval:tst:37797"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.62" test_ref="oval:org.mitre.oval:tst:38735"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3" test_ref="oval:org.mitre.oval:tst:38351"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3" test_ref="oval:org.mitre.oval:tst:38503"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3" test_ref="oval:org.mitre.oval:tst:38748"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11216" version="5" class="vulnerability">
      <metadata>
        <title>Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS before 1.4.4, when kqueue or epoll is used, allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-3553.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0302" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0302"/>
        <description>Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS before 1.4.4, when kqueue or epoll is used, allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-3553.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:02.172-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:11.757-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:52.578-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11216 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:41:12.474-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:25.705-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="cups-lpd is earlier than 1:1.3.7-11.el5_4.6" test_ref="oval:org.mitre.oval:tst:40009"/>
          <criterion comment="cups-devel is earlier than 1:1.3.7-11.el5_4.6" test_ref="oval:org.mitre.oval:tst:39827"/>
          <criterion comment="cups is earlier than 1:1.3.7-11.el5_4.6" test_ref="oval:org.mitre.oval:tst:40281"/>
          <criterion comment="cups-libs is earlier than 1:1.3.7-11.el5_4.6" test_ref="oval:org.mitre.oval:tst:40315"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11215" version="5" class="vulnerability">
      <metadata>
        <title>The chrp_show_cpuinfo function (chrp/setup.c) in Linux kernel 2.4.21 through 2.6.18-53, when running on PowerPC, might allow local users to cause a denial of service (crash) via unknown vectors that cause the of_get_property function to fail, which triggers a NULL pointer dereference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6694" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6694"/>
        <description>The chrp_show_cpuinfo function (chrp/setup.c) in Linux kernel 2.4.21 through 2.6.18-53, when running on PowerPC, might allow local users to cause a denial of service (crash) via unknown vectors that cause the of_get_property function to fail, which triggers a NULL pointer dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:28.228-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:11.282-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:51.978-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11215 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:27.743-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:25.071-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:36090"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35525"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35832"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35126"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35901"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:36007"/>
            <criterion comment="kernel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35982"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:36072"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:36041"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35364"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35662"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36192"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36176"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36335"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36430"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:35944"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36215"/>
            <criterion comment="kernel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36409"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:35484"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:35974"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:35791"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36150"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36251"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11214" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket option.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0424" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0424"/>
        <description>Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket option.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:24.625-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:10.952-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:51.670-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11214 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:53.053-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:24.661-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-9.0.3.EL" test_ref="oval:org.mitre.oval:tst:30491"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-9.0.3.EL" test_ref="oval:org.mitre.oval:tst:30516"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-9.0.3.EL" test_ref="oval:org.mitre.oval:tst:30538"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-9.0.3.EL" test_ref="oval:org.mitre.oval:tst:30296"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-9.0.3.EL" test_ref="oval:org.mitre.oval:tst:30632"/>
          <criterion comment="kernel is earlier than 0:2.4.21-9.0.3.EL" test_ref="oval:org.mitre.oval:tst:30666"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-9.0.3.EL" test_ref="oval:org.mitre.oval:tst:30053"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-9.0.3.EL" test_ref="oval:org.mitre.oval:tst:30608"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-9.0.3.EL" test_ref="oval:org.mitre.oval:tst:30645"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11213" version="5" class="vulnerability">
      <metadata>
        <title>Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5925" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5925"/>
        <description>Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:37.739-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:10.772-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:51.471-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11213 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:31.927-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:24.365-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="elinks is earlier than 0:0.9.2-3.3" test_ref="oval:org.mitre.oval:tst:33186"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11212" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the make_table function in the LHZ component in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted decoding table in a GZIP archive.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4337" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4337"/>
        <description>Buffer overflow in the make_table function in the LHZ component in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted decoding table in a GZIP archive.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:09.238-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:10.556-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:51.232-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11212 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:35.753-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:23.925-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gzip is earlier than 0:1.3.3-13.rhel3" test_ref="oval:org.mitre.oval:tst:32961"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gzip is earlier than 0:1.3.3-16.rhel4" test_ref="oval:org.mitre.oval:tst:32979"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11211" version="5" class="vulnerability">
      <metadata>
        <title>The output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION attribute references a non-local URL, which allows remote attackers to obtain potentially sensitive information by reading the requests for this URL, as demonstrated by a rewritten form containing a local session ID.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5899" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5899"/>
        <description>The output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION attribute references a non-local URL, which allows remote attackers to obtain potentially sensitive information by reading the requests for this URL, as demonstrated by a rewritten form containing a local session ID.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:54.204-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:09.628-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:50.448-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11211 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:22.457-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:22.970-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:37185"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:36983"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:36761"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:37254"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:37280"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:36584"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:37255"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37302"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37269"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:36771"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:36854"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37155"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37143"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:36781"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37125"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37202"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37223"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37010"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37319"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37113"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37239"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:36927"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37138"/>
            <criterion comment="php-common is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37146"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37179"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37204"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:36955"/>
            <criterion comment="php is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37260"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37282"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:36878"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37114"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:36634"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37118"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37283"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37127"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37086"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37328"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37036"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37144"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37165"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11210" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the Infiniband dissector in Wireshark 1.0.6 through 1.2.0, when running on unspecified platforms, allows remote attackers to cause a denial of service (crash) via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2563" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2563"/>
        <description>Unspecified vulnerability in the Infiniband dissector in Wireshark 1.0.6 through 1.2.0, when running on unspecified platforms, allows remote attackers to cause a denial of service (crash) via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:48.928-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:09.320-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:50.133-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11210 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:28.543-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:22.397-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.11-EL3.6" test_ref="oval:org.mitre.oval:tst:39600"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.11-EL3.6" test_ref="oval:org.mitre.oval:tst:40430"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.11-1.el4_8.5" test_ref="oval:org.mitre.oval:tst:40437"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.11-1.el4_8.5" test_ref="oval:org.mitre.oval:tst:39877"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.11-1.el5_5.5" test_ref="oval:org.mitre.oval:tst:40351"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.11-1.el5_5.5" test_ref="oval:org.mitre.oval:tst:40208"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11209" version="3" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in the useEncodingDecl function in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allow remote attackers to execute arbitrary code via a JNLP file with (1) a long key name in the xml header or (2) a long charset value, different issues than CVE-2008-1189, aka "The first two issues."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1188" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1188"/>
        <description>Multiple buffer overflows in the useEncodingDecl function in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allow remote attackers to execute arbitrary code via a JNLP file with (1) a long key name in the xml header or (2) a long charset value, different issues than CVE-2008-1189, aka "The first two issues."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:26.993-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:08.684-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:49.416-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36548"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36455"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36422"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36295"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36406"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36334"/>
            <criterion comment="java-1.5.0-ibm is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36155"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36267"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35708"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35618"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36613"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36614"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36509"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36558"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36485"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35872"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36582"/>
            <criterion comment="java-1.6.0-ibm-accessibility is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36555"/>
            <criterion comment="java-1.6.0-ibm-jdbc is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36414"/>
            <criterion comment="java-1.6.0-ibm-src is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36622"/>
            <criterion comment="java-1.6.0-ibm-javacomm is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36688"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36265"/>
            <criterion comment="java-1.6.0-ibm is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36319"/>
            <criterion comment="java-1.6.0-ibm-plugin is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36706"/>
            <criterion comment="java-1.6.0-ibm-devel is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36205"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36535"/>
            <criterion comment="java-1.6.0-ibm-demo is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36515"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36523"/>
            <criterion comment="java-1.5.0-ibm-accessibility is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36323"/>
            <criterion comment="java-1.5.0-ibm is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35890"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35698"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35719"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36340"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36068"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36568"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11208" version="5" class="vulnerability">
      <metadata>
        <title>The form autocomplete feature in Mozilla Firefox 1.5.x before 1.5.0.12, 2.x before 2.0.0.4, and possibly earlier versions, allows remote attackers to cause a denial of service (persistent temporary CPU consumption) via a large number of characters in a submitted form.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2869" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2869"/>
        <description>The form autocomplete feature in Mozilla Firefox 1.5.x before 1.5.0.12, 2.x before 2.0.0.4, and possibly earlier versions, allows remote attackers to cause a denial of service (persistent temporary CPU consumption) via a large number of characters in a submitted form.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:24.696-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:08.102-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:48.742-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11208 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:42.706-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:21.581-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34409"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34257"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34432"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33988"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33721"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33693"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34313"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34281"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33894"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34228"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.8.el4" test_ref="oval:org.mitre.oval:tst:33625"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:33931"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:33844"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-0.1.el4" test_ref="oval:org.mitre.oval:tst:34331"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34334"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34021"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34249"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.8.el4" test_ref="oval:org.mitre.oval:tst:34293"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.1.el4" test_ref="oval:org.mitre.oval:tst:34371"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34446"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34262"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34366"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:33994"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34322"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-1.el5" test_ref="oval:org.mitre.oval:tst:34445"/>
            <criterion comment="yelp is earlier than 0:2.16.0-15.el5" test_ref="oval:org.mitre.oval:tst:33445"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-11.el5" test_ref="oval:org.mitre.oval:tst:34323"/>
            <criterion comment="devhelp is earlier than 0:0.12-11.el5" test_ref="oval:org.mitre.oval:tst:34204"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-1.el5" test_ref="oval:org.mitre.oval:tst:34162"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-1.el5" test_ref="oval:org.mitre.oval:tst:33979"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11207" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images.  NOTE: this issue exists because of an incomplete fix for CVE-2009-0583.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0792" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0792"/>
        <description>Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images.  NOTE: this issue exists because of an incomplete fix for CVE-2009-0583.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:23.169-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:07.710-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:48.392-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11207 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:51.177-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:20.992-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="hpijs is earlier than 0:7.05-32.1.20" test_ref="oval:org.mitre.oval:tst:38025"/>
            <criterion comment="ghostscript-devel is earlier than 0:7.05-32.1.20" test_ref="oval:org.mitre.oval:tst:38598"/>
            <criterion comment="ghostscript is earlier than 0:7.05-32.1.20" test_ref="oval:org.mitre.oval:tst:38506"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ghostscript-devel is earlier than 0:7.07-33.2.el4_7.8" test_ref="oval:org.mitre.oval:tst:38482"/>
            <criterion comment="ghostscript is earlier than 0:7.07-33.2.el4_7.8" test_ref="oval:org.mitre.oval:tst:38656"/>
            <criterion comment="ghostscript-gtk is earlier than 0:7.07-33.2.el4_7.8" test_ref="oval:org.mitre.oval:tst:38408"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ghostscript-devel is earlier than 0:8.15.2-9.4.el5_3.7" test_ref="oval:org.mitre.oval:tst:38588"/>
            <criterion comment="ghostscript is earlier than 0:8.15.2-9.4.el5_3.7" test_ref="oval:org.mitre.oval:tst:38629"/>
            <criterion comment="ghostscript-gtk is earlier than 0:8.15.2-9.4.el5_3.7" test_ref="oval:org.mitre.oval:tst:38457"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11206" version="5" class="vulnerability">
      <metadata>
        <title>The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exit_signal field and then uses an exec system call to launch a setuid application.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1337" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1337"/>
        <description>The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exit_signal field and then uses an exec system call to launch a setuid application.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:09.211-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:07.092-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:47.687-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11206 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:26.849-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:20.173-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39591"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39396"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39586"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39171"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39299"/>
            <criterion comment="kernel is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39151"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39468"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39460"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:38810"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.EL" test_ref="oval:org.mitre.oval:tst:38666"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.EL" test_ref="oval:org.mitre.oval:tst:38450"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.EL" test_ref="oval:org.mitre.oval:tst:38769"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.EL" test_ref="oval:org.mitre.oval:tst:37790"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.EL" test_ref="oval:org.mitre.oval:tst:38592"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.EL" test_ref="oval:org.mitre.oval:tst:38678"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.EL" test_ref="oval:org.mitre.oval:tst:38363"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.EL" test_ref="oval:org.mitre.oval:tst:38714"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.EL" test_ref="oval:org.mitre.oval:tst:38581"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.EL" test_ref="oval:org.mitre.oval:tst:38538"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.EL" test_ref="oval:org.mitre.oval:tst:38439"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38663"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38680"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38674"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38654"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38700"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38368"/>
            <criterion comment="kernel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38726"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38390"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38547"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38412"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38701"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38129"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11205" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player before 10.0.4, and RealOne Player v1 and v2 allows remote attackers to execute arbitrary code via a long hostname in a RAM file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0755" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0755"/>
        <description>Heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player before 10.0.4, and RealOne Player v1 and v2 allows remote attackers to execute arbitrary code via a long hostname in a RAM file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:35.503-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:06.850-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:47.484-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11205 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:28:52.095-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:19.809-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="HelixPlayer is earlier than 1:1.0.4-1.1.EL4.2" test_ref="oval:org.mitre.oval:tst:31609"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11204" version="5" class="vulnerability">
      <metadata>
        <title>lynx 2.8.6dev.15 and earlier, when advanced mode is enabled and lynx is configured as a URL handler, allows remote attackers to execute arbitrary commands via a crafted lynxcgi: URL, a related issue to CVE-2005-2929.  NOTE: this might only be a vulnerability in limited deployments that have defined a lynxcgi: handler.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4690" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4690"/>
        <description>lynx 2.8.6dev.15 and earlier, when advanced mode is enabled and lynx is configured as a URL handler, allows remote attackers to execute arbitrary commands via a crafted lynxcgi: URL, a related issue to CVE-2005-2929.  NOTE: this might only be a vulnerability in limited deployments that have defined a lynxcgi: handler.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:37.886-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:06.598-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:47.196-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11204 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:40.411-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:19.376-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="lynx is earlier than 0:2.8.5-11.3" test_ref="oval:org.mitre.oval:tst:37424"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="lynx is earlier than 0:2.8.5-18.2.el4_7.1" test_ref="oval:org.mitre.oval:tst:37925"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="lynx is earlier than 0:2.8.5-28.1.el5_2.1" test_ref="oval:org.mitre.oval:tst:37898"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11203" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the mch_expand_wildcards function in os_unix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3432" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3432"/>
        <description>Heap-based buffer overflow in the mch_expand_wildcards function in os_unix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:50.812-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:06.286-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:46.823-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11203 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:48.487-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:18.694-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="vim-minimal is earlier than 1:6.3.046-0.30E.11" test_ref="oval:org.mitre.oval:tst:37217"/>
            <criterion comment="vim-enhanced is earlier than 1:6.3.046-0.30E.11" test_ref="oval:org.mitre.oval:tst:37049"/>
            <criterion comment="vim is earlier than 1:6.3.046-0.30E.11" test_ref="oval:org.mitre.oval:tst:37429"/>
            <criterion comment="vim-X11 is earlier than 1:6.3.046-0.30E.11" test_ref="oval:org.mitre.oval:tst:37390"/>
            <criterion comment="vim-common is earlier than 1:6.3.046-0.30E.11" test_ref="oval:org.mitre.oval:tst:37492"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="vim-minimal is earlier than 1:6.3.046-1.el4_7.5z" test_ref="oval:org.mitre.oval:tst:37521"/>
            <criterion comment="vim-enhanced is earlier than 1:6.3.046-1.el4_7.5z" test_ref="oval:org.mitre.oval:tst:37326"/>
            <criterion comment="vim is earlier than 1:6.3.046-1.el4_7.5z" test_ref="oval:org.mitre.oval:tst:36926"/>
            <criterion comment="vim-X11 is earlier than 1:6.3.046-1.el4_7.5z" test_ref="oval:org.mitre.oval:tst:37520"/>
            <criterion comment="vim-common is earlier than 1:6.3.046-1.el4_7.5z" test_ref="oval:org.mitre.oval:tst:37284"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11202" version="5" class="vulnerability">
      <metadata>
        <title>A regression fix in Mozilla Firefox 1.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the InstallTrigger.install method, which leads to memory corruption.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1790" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1790"/>
        <description>A regression fix in Mozilla Firefox 1.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the InstallTrigger.install method, which leads to memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:14.826-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:05.747-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:46.308-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11202 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:31.990-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:18.063-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32663"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32326"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31987"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32451"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32697"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32558"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32427"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32671"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32666"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32561"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32593"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32679"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32133"/>
            <criterion comment="thunderbird is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32204"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32701"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32428"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32557"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32229"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32349"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32644"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32440"/>
            <criterion comment="firefox is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32219"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32598"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32717"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11201" version="5" class="vulnerability">
      <metadata>
        <title>Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via (1) the "Send page" functionality, (2) certain responses from a malicious POP3 server, or (3) a link containing a non-ASCII hostname.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0902" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0902"/>
        <description>Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via (1) the "Send page" functionality, (2) certain responses from a malicious POP3 server, or (3) a link containing a non-ASCII hostname.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:59.569-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:05.450-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:45.958-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11201 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:32.968-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:17.638-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mozilla-js-debugger is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30915"/>
          <criterion comment="mozilla is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30964"/>
          <criterion comment="mozilla-chat is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30905"/>
          <criterion comment="mozilla-mail is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30635"/>
          <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:31000"/>
          <criterion comment="mozilla-devel is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30111"/>
          <criterion comment="mozilla-nss is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30762"/>
          <criterion comment="mozilla-nss-devel is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:31048"/>
          <criterion comment="mozilla-nspr is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30856"/>
          <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30834"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:112" version="2" class="vulnerability">
      <metadata>
        <title>GDM Examine Errors Symlink Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>GDM</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0547"/>
        <description>GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the ~/.xsession-errors file.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-09-04T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-05T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:43.511-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:14.522-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="gdm version is less than 2.4.1.3-5.1" negate="false" test_ref="oval:org.mitre.oval:tst:2936"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11199" version="5" class="vulnerability">
      <metadata>
        <title>The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546"/>
        <description>The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:17.629-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:04.632-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:44.931-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11199 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:32.242-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:16.577-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39717"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39629"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39915"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39741"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:40003"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39901"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39326"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39619"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39111"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39417"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39642"/>
            <criterion comment="php is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39899"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39821"/>
            <criterion comment="gd-progs is earlier than 0:2.0.28-5.4E.el4_8.1" test_ref="oval:org.mitre.oval:tst:39615"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39627"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39886"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39848"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39908"/>
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39580"/>
            <criterion comment="gd-devel is earlier than 0:2.0.28-5.4E.el4_8.1" test_ref="oval:org.mitre.oval:tst:39670"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39927"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:40010"/>
            <criterion comment="gd is earlier than 0:2.0.28-5.4E.el4_8.1" test_ref="oval:org.mitre.oval:tst:39559"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39461"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39883"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39544"/>
            <criterion comment="php-common is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39804"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39875"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39748"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39802"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39854"/>
            <criterion comment="php is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39053"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39980"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39581"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39954"/>
            <criterion comment="gd-progs is earlier than 0:2.0.33-9.4.el5_4.2" test_ref="oval:org.mitre.oval:tst:39488"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39018"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39463"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39634"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39436"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39969"/>
            <criterion comment="gd-devel is earlier than 0:2.0.33-9.4.el5_4.2" test_ref="oval:org.mitre.oval:tst:39698"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39664"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39913"/>
            <criterion comment="gd is earlier than 0:2.0.33-9.4.el5_4.2" test_ref="oval:org.mitre.oval:tst:39431"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39765"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11198" version="5" class="vulnerability">
      <metadata>
        <title>initscripts in Red Hat Enterprise Linux 4 does not properly handle certain environment variables when /sbin/service is executed, which allows local users with sudo permissions for /sbin/service to gain root privileges via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3629" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3629"/>
        <description>initscripts in Red Hat Enterprise Linux 4 does not properly handle certain environment variables when /sbin/service is executed, which allows local users with sudo permissions for /sbin/service to gain root privileges via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:54.685-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:04.398-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:44.674-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11198 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:24.987-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:16.197-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="initscripts is earlier than 0:7.31.30.EL-1" test_ref="oval:org.mitre.oval:tst:32225"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="initscripts is earlier than 0:7.93.24.EL-1.1" test_ref="oval:org.mitre.oval:tst:32220"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11197" version="5" class="vulnerability">
      <metadata>
        <title>The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via malformed ISAKMP packets that cause invalid "len" or "loc" values to be used in a loop, a different vulnerability than CVE-2003-0989.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0057" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0057"/>
        <description>The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via malformed ISAKMP packets that cause invalid "len" or "loc" values to be used in a loop, a different vulnerability than CVE-2003-0989.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:14.383-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:04.212-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:44.457-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11197 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:22.375-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:15.847-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="libpcap is earlier than 14:0.7.2-7.E3.1" test_ref="oval:org.mitre.oval:tst:30562"/>
          <criterion comment="tcpdump is earlier than 14:3.7.2-7.E3.1" test_ref="oval:org.mitre.oval:tst:30488"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11196" version="5" class="vulnerability">
      <metadata>
        <title>The drm/i915 component in the Linux kernel before 2.6.22.2, when used with i965G and later chipsets, allows local users with access to an X11 session and Direct Rendering Manager (DRM) to write to arbitrary memory locations and gain privileges via a crafted batchbuffer.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3851" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3851"/>
        <description>The drm/i915 component in the Linux kernel before 2.6.22.2, when used with i965G and later chipsets, allows local users with access to an X11 session and Direct Rendering Manager (DRM) to write to arbitrary memory locations and gain privileges via a crafted batchbuffer.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:31.712-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:03.852-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:43.941-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11196 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:59.529-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:15.440-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34804"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34557"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34837"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34795"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34562"/>
          <criterion comment="kernel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34357"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34379"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34873"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34870"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34374"/>
          <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34337"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11195" version="5" class="vulnerability">
      <metadata>
        <title>The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, may create an interpreter name string that is not NULL terminated, which could cause strings longer than PATH_MAX to be used, leading to buffer overflows that allow local users to cause a denial of service (hang) and possibly execute arbitrary code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1072"/>
        <description>The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, may create an interpreter name string that is not NULL terminated, which could cause strings longer than PATH_MAX to be used, leading to buffer overflows that allow local users to cause a denial of service (hang) and possibly execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:51.743-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:03.576-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:43.640-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11195 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:30.837-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:15.085-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30934"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30708"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30577"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30874"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30794"/>
          <criterion comment="kernel is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30892"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30873"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:31080"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30866"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11194" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the Bluetooth RFCOMM dissector in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via unknown packets.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4681" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4681"/>
        <description>Unspecified vulnerability in the Bluetooth RFCOMM dissector in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via unknown packets.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:54.111-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:03.284-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:43.292-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11194 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:05.700-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:14.585-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-EL3.3" test_ref="oval:org.mitre.oval:tst:38023"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-EL3.3" test_ref="oval:org.mitre.oval:tst:38321"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-2.el4_7" test_ref="oval:org.mitre.oval:tst:38000"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-2.el4_7" test_ref="oval:org.mitre.oval:tst:38041"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-2.el5_3" test_ref="oval:org.mitre.oval:tst:38236"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-2.el5_3" test_ref="oval:org.mitre.oval:tst:38085"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11193" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the JavaScript engine.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0353"/>
        <description>Unspecified vulnerability in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the JavaScript engine.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:26.641-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:02.290-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:42.273-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11193 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:14.818-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:13.762-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38173"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38181"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38221"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38323"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38241"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38337"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:37355"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38135"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38326"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38186"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-35.el4" test_ref="oval:org.mitre.oval:tst:38184"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-3.el4" test_ref="oval:org.mitre.oval:tst:38343"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-19.el4" test_ref="oval:org.mitre.oval:tst:38238"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-35.el4" test_ref="oval:org.mitre.oval:tst:38228"/>
            <criterion comment="firefox is earlier than 0:3.0.6-1.el4" test_ref="oval:org.mitre.oval:tst:37823"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-3.el4" test_ref="oval:org.mitre.oval:tst:37923"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-35.el4" test_ref="oval:org.mitre.oval:tst:37943"/>
            <criterion comment="nss-tools is earlier than 0:3.12.2.0-3.el4" test_ref="oval:org.mitre.oval:tst:38172"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-35.el4" test_ref="oval:org.mitre.oval:tst:37433"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-35.el4" test_ref="oval:org.mitre.oval:tst:38309"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-35.el4" test_ref="oval:org.mitre.oval:tst:38278"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.2.0-4.el5" test_ref="oval:org.mitre.oval:tst:37933"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.6-1.el5" test_ref="oval:org.mitre.oval:tst:37808"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-4.el5" test_ref="oval:org.mitre.oval:tst:37350"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.21-1.el5" test_ref="oval:org.mitre.oval:tst:37944"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.6-1.el5" test_ref="oval:org.mitre.oval:tst:37835"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.6-1.el5" test_ref="oval:org.mitre.oval:tst:37556"/>
            <criterion comment="firefox is earlier than 0:3.0.6-1.el5" test_ref="oval:org.mitre.oval:tst:38272"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-4.el5" test_ref="oval:org.mitre.oval:tst:38040"/>
            <criterion comment="nss-tools is earlier than 0:3.12.2.0-4.el5" test_ref="oval:org.mitre.oval:tst:37867"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11192" version="5" class="vulnerability">
      <metadata>
        <title>dm-crypt in Linux kernel 2.6.15 and earlier does not clear a structure before it is freed, which leads to a memory disclosure that could allow local users to obtain sensitive information about a cryptographic key.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0095" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0095"/>
        <description>dm-crypt in Linux kernel 2.6.15 and earlier does not clear a structure before it is freed, which leads to a memory disclosure that could allow local users to obtain sensitive information about a cryptographic key.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:26.327-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:01.962-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:41.935-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11192 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:30:04.359-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:13.361-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-34.EL" test_ref="oval:org.mitre.oval:tst:32212"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-34.EL" test_ref="oval:org.mitre.oval:tst:31918"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-34.EL" test_ref="oval:org.mitre.oval:tst:32469"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-34.EL" test_ref="oval:org.mitre.oval:tst:32434"/>
          <criterion comment="kernel is earlier than 0:2.6.9-34.EL" test_ref="oval:org.mitre.oval:tst:32401"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-34.EL" test_ref="oval:org.mitre.oval:tst:32060"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-34.EL" test_ref="oval:org.mitre.oval:tst:32347"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-34.EL" test_ref="oval:org.mitre.oval:tst:32240"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-34.EL" test_ref="oval:org.mitre.oval:tst:32399"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11191" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do not change the focus to the tab that generated the prompt, which could facilitate spoofing and phishing attacks.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0584" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0584"/>
        <description>Firefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do not change the focus to the tab that generated the prompt, which could facilitate spoofing and phishing attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:14.514-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:01.638-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:41.587-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11191 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:30.868-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:12.389-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31283"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31520"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31645"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31516"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31569"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31143"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31512"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31785"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31695"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31626"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:1.0.1-1.4.3" test_ref="oval:org.mitre.oval:tst:31118"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11189" version="5" class="vulnerability">
      <metadata>
        <title>The backend for XenSource Xen Para Virtualized Frame Buffer (PVFB) in Xen ioemu does not properly restrict the frame buffer size, which allows attackers to cause a denial of service (crash) by mapping an arbitrary amount of guest memory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1952" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1952"/>
        <description>The backend for XenSource Xen Para Virtualized Frame Buffer (PVFB) in Xen ioemu does not properly restrict the frame buffer size, which allows attackers to cause a denial of service (crash) by mapping an arbitrary amount of guest memory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:04.160-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:01.431-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:41.355-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11189 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:38.107-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:12.003-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="xen-libs is earlier than 0:3.0.3-64.el5_2.3" test_ref="oval:org.mitre.oval:tst:37651"/>
          <criterion comment="xen is earlier than 0:3.0.3-64.el5_2.3" test_ref="oval:org.mitre.oval:tst:37731"/>
          <criterion comment="xen-devel is earlier than 0:3.0.3-64.el5_2.3" test_ref="oval:org.mitre.oval:tst:37638"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11188" version="5" class="vulnerability">
      <metadata>
        <title>Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via (1) a crafted table in a Printer Font Binary (PFB) file or (2) a crafted SHC instruction in a TrueType Font (TTF) file, which triggers a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1808" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1808"/>
        <description>Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via (1) a crafted table in a Printer Font Binary (PFB) file or (2) a crafted SHC instruction in a TrueType Font (TTF) file, which triggers a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:37.690-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:01.084-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:40.918-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11188 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:15.113-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:11.463-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="freetype is earlier than 0:2.1.4-12.el3" test_ref="oval:org.mitre.oval:tst:37450"/>
            <criterion comment="freetype-demos is earlier than 0:2.1.4-12.el3" test_ref="oval:org.mitre.oval:tst:38284"/>
            <criterion comment="freetype-utils is earlier than 0:2.1.4-12.el3" test_ref="oval:org.mitre.oval:tst:38008"/>
            <criterion comment="freetype-devel is earlier than 0:2.1.4-12.el3" test_ref="oval:org.mitre.oval:tst:38245"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="freetype is earlier than 0:2.1.9-10.el4.7" test_ref="oval:org.mitre.oval:tst:38414"/>
            <criterion comment="freetype-demos is earlier than 0:2.1.9-10.el4.7" test_ref="oval:org.mitre.oval:tst:38395"/>
            <criterion comment="freetype-devel is earlier than 0:2.1.9-10.el4.7" test_ref="oval:org.mitre.oval:tst:38442"/>
            <criterion comment="freetype-utils is earlier than 0:2.1.9-10.el4.7" test_ref="oval:org.mitre.oval:tst:38234"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="freetype is earlier than 0:2.2.1-20.el5_2" test_ref="oval:org.mitre.oval:tst:37321"/>
            <criterion comment="freetype-demos is earlier than 0:2.2.1-20.el5_2" test_ref="oval:org.mitre.oval:tst:37312"/>
            <criterion comment="freetype-devel is earlier than 0:2.2.1-20.el5_2" test_ref="oval:org.mitre.oval:tst:37160"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11187" version="5" class="vulnerability">
      <metadata>
        <title>The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an additional child process with the CLONE_PARENT flag, and then letting this new process exit.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0028"/>
        <description>The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an additional child process with the CLONE_PARENT flag, and then letting this new process exit.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:19.536-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:08:00.545-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:40.385-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11187 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:30:29.532-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:10.772-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38437"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38348"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:37805"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38116"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38721"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38384"/>
            <criterion comment="kernel is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38346"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38490"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38262"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38289"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-78.0.22.EL" test_ref="oval:org.mitre.oval:tst:38302"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38113"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38107"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38167"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38064"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38380"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:37672"/>
            <criterion comment="kernel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38093"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38127"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38109"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38430"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:37764"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38397"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11186" version="5" class="vulnerability">
      <metadata>
        <title>The nsXMLHttpRequest::NotifyEventListeners method in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the same-origin policy and execute arbitrary script via multiple listeners, which bypass the inner window check.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5022" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5022"/>
        <description>The nsXMLHttpRequest::NotifyEventListeners method in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the same-origin policy and execute arbitrary script via multiple listeners, which bypass the inner window check.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:51.102-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:59.903-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:39.682-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11186 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:41.838-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:09.942-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37159"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37875"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37293"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37934"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37671"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37932"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37970"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37357"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37852"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37844"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37232"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-3.el4" test_ref="oval:org.mitre.oval:tst:38065"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-17.el4" test_ref="oval:org.mitre.oval:tst:37872"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37914"/>
            <criterion comment="firefox is earlier than 0:3.0.4-1.el4" test_ref="oval:org.mitre.oval:tst:37904"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-3.el4" test_ref="oval:org.mitre.oval:tst:37840"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37991"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37955"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37777"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:38009"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-20.el5" test_ref="oval:org.mitre.oval:tst:37773"/>
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37531"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37899"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37454"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.18-1.el5" test_ref="oval:org.mitre.oval:tst:38015"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:38021"/>
            <criterion comment="yelp is earlier than 0:2.16.0-22.el5" test_ref="oval:org.mitre.oval:tst:37645"/>
            <criterion comment="devhelp is earlier than 0:0.12-20.el5" test_ref="oval:org.mitre.oval:tst:37958"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37388"/>
            <criterion comment="firefox is earlier than 0:3.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37066"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37648"/>
            <criterion comment="nss-tools is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37936"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11185" version="5" class="vulnerability">
      <metadata>
        <title>The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize the key_length variable for a numerical key, which allows context-dependent attackers to read stack memory via a wddxPacket element that contains a variable with a string name before a numerical variable.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0908" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0908"/>
        <description>The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize the key_length variable for a numerical key, which allows context-dependent attackers to read stack memory via a wddxPacket element that contains a variable with a string name before a numerical variable.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:00.858-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:58.990-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:38.886-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11185 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:03.783-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:08.999-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33459"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33371"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33748"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33090"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33419"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33665"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33475"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33282"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33636"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33548"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33156"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33407"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33562"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33500"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33725"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33105"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33501"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33691"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33662"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33087"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33640"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:32784"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33240"/>
            <criterion comment="php-common is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33527"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33617"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33561"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33385"/>
            <criterion comment="php is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33615"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33526"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33747"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33735"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33403"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33686"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33502"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33666"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33508"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33652"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33676"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33784"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33706"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11184" version="5" class="vulnerability">
      <metadata>
        <title>The TIFF decoder in ImageMagick before 6.0 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0760" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0760"/>
        <description>The TIFF decoder in ImageMagick before 6.0 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:51.555-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:58.760-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:38.624-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11184 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:27.523-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:08.541-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="ImageMagick-c++-devel is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30471"/>
          <criterion comment="ImageMagick is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30355"/>
          <criterion comment="ImageMagick-perl is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30877"/>
          <criterion comment="ImageMagick-devel is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30918"/>
          <criterion comment="ImageMagick-c++ is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30938"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11183" version="5" class="vulnerability">
      <metadata>
        <title>Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count.  NOTE: some of these details are obtained from third party information.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3553" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3553"/>
        <description>Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count.  NOTE: some of these details are obtained from third party information.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:28.172-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:58.537-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:38.382-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11183 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:54.988-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:08.204-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="cups-lpd is earlier than 1:1.3.7-11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39673"/>
          <criterion comment="cups-devel is earlier than 1:1.3.7-11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39211"/>
          <criterion comment="cups is earlier than 1:1.3.7-11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39680"/>
          <criterion comment="cups-libs is earlier than 1:1.3.7-11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39517"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11182" version="5" class="vulnerability">
      <metadata>
        <title>The snd_seq_oss_synth_make_info function in sound/core/seq/oss/seq_oss_synth.c in the sound subsystem in the Linux kernel before 2.6.27-rc2 does not verify that the device number is within the range defined by max_synthdev before returning certain data to the caller, which allows local users to obtain sensitive information.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3272" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3272"/>
        <description>The snd_seq_oss_synth_make_info function in sound/core/seq/oss/seq_oss_synth.c in the sound subsystem in the Linux kernel before 2.6.27-rc2 does not verify that the device number is within the range defined by max_synthdev before returning certain data to the caller, which allows local users to obtain sensitive information.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:02.357-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:58.058-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:37.829-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11182 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:28:53.239-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:07.407-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37470"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37734"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37826"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37656"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37782"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37432"/>
            <criterion comment="kernel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37747"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37811"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37951"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37485"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37662"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37589"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37288"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37600"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37692"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37104"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37681"/>
            <criterion comment="kernel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37688"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37710"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37698"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37703"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37665"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37649"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11181" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via a crafted string that is used in the message argument to the HttpServletResponse.sendError method.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1232" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1232"/>
        <description>Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via a crafted string that is used in the message argument to the HttpServletResponse.sendError method.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:58.655-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:57.712-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:37.481-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11181 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:51.199-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:06.924-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37489"/>
          <criterion comment="tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:36583"/>
          <criterion comment="tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37182"/>
          <criterion comment="tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37266"/>
          <criterion comment="tomcat5-webapps is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37452"/>
          <criterion comment="tomcat5 is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37501"/>
          <criterion comment="tomcat5-jasper is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37524"/>
          <criterion comment="tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37275"/>
          <criterion comment="tomcat5-server-lib is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37396"/>
          <criterion comment="tomcat5-common-lib is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37498"/>
          <criterion comment="tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37415"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11180" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary code via long directory names that are processed by the ls or rels commands.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0963" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0963"/>
        <description>Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary code via long directory names that are processed by the ls or rels commands.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:51.586-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:57.522-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:37.291-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11180 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:06.712-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:06.659-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="lftp is earlier than 0:2.6.3-5" test_ref="oval:org.mitre.oval:tst:30427"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1118" version="7" class="vulnerability">
      <metadata>
        <title>MS Windows RPC DCOM DoS-based Privilege Escalation Vulnerability (Test 2)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Remote Procedure Call (RPC)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0605" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0605"/>
        <description>The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via certain messages to the __RemoteGetClassObject interface that cause a NULL pointer to be passed to the PerformScmStage function.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-01-18T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2005-01-20T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-06-17T12:00:00.000-04:00" comment="modified cmp-1106 - Replaced the test that checks for the service pack level, instead of checking for sp4 or ealier (did not check for GOLD edition) it is now negating the test that checks for sp5 for later.">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2005-06-22T12:35:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected and tightened regular expression in ste:2610" date="2010-12-02T11:46:00.307-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-12-02T11:47:26.757-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:08.954-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:43:50.391-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:20.426-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 (sp4 or earlier) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 5 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2790"/>
        </criteria>
        <criterion comment="the version of rpcrt4.dll is less than 5.0.2195.6802" negate="false" test_ref="oval:org.mitre.oval:tst:2914"/>
        <criterion comment="the patch kb824146 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:3082"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11179" version="5" class="vulnerability">
      <metadata>
        <title>ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1386" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1386"/>
        <description>ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:50.448-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:57.310-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:37.004-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11179 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:53.828-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:05.974-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="openssl-perl is earlier than 0:0.9.8e-12.el5" test_ref="oval:org.mitre.oval:tst:39059"/>
          <criterion comment="openssl-devel is earlier than 0:0.9.8e-12.el5" test_ref="oval:org.mitre.oval:tst:38295"/>
          <criterion comment="openssl is earlier than 0:0.9.8e-12.el5" test_ref="oval:org.mitre.oval:tst:38660"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11178" version="5" class="vulnerability">
      <metadata>
        <title>libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3767" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3767"/>
        <description>libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:49.815-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:57.005-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:36.713-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11178 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:42.879-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:05.615-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="compat-openldap is earlier than 0:2.3.43-12.el5" test_ref="oval:org.mitre.oval:tst:39447"/>
          <criterion comment="openldap-servers-overlays is earlier than 0:2.3.43-12.el5" test_ref="oval:org.mitre.oval:tst:40201"/>
          <criterion comment="openldap-devel is earlier than 0:2.3.43-12.el5" test_ref="oval:org.mitre.oval:tst:40105"/>
          <criterion comment="openldap-clients is earlier than 0:2.3.43-12.el5" test_ref="oval:org.mitre.oval:tst:40368"/>
          <criterion comment="openldap is earlier than 0:2.3.43-12.el5" test_ref="oval:org.mitre.oval:tst:40337"/>
          <criterion comment="openldap-servers-sql is earlier than 0:2.3.43-12.el5" test_ref="oval:org.mitre.oval:tst:39375"/>
          <criterion comment="openldap-servers is earlier than 0:2.3.43-12.el5" test_ref="oval:org.mitre.oval:tst:40204"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11177" version="5" class="vulnerability">
      <metadata>
        <title>Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (") characters or (2) %5C (encoded backslash) sequences in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.  NOTE: this issue exists because of an incomplete fix for CVE-2007-3385.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5333" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5333"/>
        <description>Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (") characters or (2) %5C (encoded backslash) sequences in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks.  NOTE: this issue exists because of an incomplete fix for CVE-2007-3385.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:43.461-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:56.704-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:36.385-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11177 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:21.664-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:05.207-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38108"/>
          <criterion comment="tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:37963"/>
          <criterion comment="tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38333"/>
          <criterion comment="tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38944"/>
          <criterion comment="tomcat5-webapps is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38805"/>
          <criterion comment="tomcat5 is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38688"/>
          <criterion comment="tomcat5-jasper is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38891"/>
          <criterion comment="tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38239"/>
          <criterion comment="tomcat5-server-lib is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38824"/>
          <criterion comment="tomcat5-common-lib is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38955"/>
          <criterion comment="tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38428"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11176" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the overflows due to improper calls to the gdMalloc function, a different set of vulnerabilities than CVE-2004-0990.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0941" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0941"/>
        <description>Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the overflows due to improper calls to the gdMalloc function, a different set of vulnerabilities than CVE-2004-0990.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:08.149-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:56.440-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:36.093-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11176 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:59.168-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:04.751-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gd is earlier than 0:1.8.4-12.3.1" test_ref="oval:org.mitre.oval:tst:31045"/>
            <criterion comment="gd-devel is earlier than 0:1.8.4-12.3.1" test_ref="oval:org.mitre.oval:tst:31109"/>
            <criterion comment="gd-progs is earlier than 0:1.8.4-12.3.1" test_ref="oval:org.mitre.oval:tst:31083"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gd is earlier than 0:2.0.28-4.4E.1" test_ref="oval:org.mitre.oval:tst:32218"/>
            <criterion comment="gd-devel is earlier than 0:2.0.28-4.4E.1" test_ref="oval:org.mitre.oval:tst:32334"/>
            <criterion comment="gd-progs is earlier than 0:2.0.28-4.4E.1" test_ref="oval:org.mitre.oval:tst:32294"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11175" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1307" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1307"/>
        <description>Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:39.982-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:56.247-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:35.816-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11175 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:12.207-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:04.478-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="libtiff is earlier than 0:3.5.7-20.1" test_ref="oval:org.mitre.oval:tst:31042"/>
          <criterion comment="libtiff-devel is earlier than 0:3.5.7-20.1" test_ref="oval:org.mitre.oval:tst:31022"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11174" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long domain name in the subject's Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2404" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2404"/>
        <description>Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long domain name in the subject's Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:05.764-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:55.704-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:35.304-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11174 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:36.941-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:03.787-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.41.el3" test_ref="oval:org.mitre.oval:tst:38261"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.41.el3" test_ref="oval:org.mitre.oval:tst:38777"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.41.el3" test_ref="oval:org.mitre.oval:tst:38528"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.41.el3" test_ref="oval:org.mitre.oval:tst:38998"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.41.el3" test_ref="oval:org.mitre.oval:tst:38804"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.41.el3" test_ref="oval:org.mitre.oval:tst:38780"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.41.el3" test_ref="oval:org.mitre.oval:tst:38691"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.41.el3" test_ref="oval:org.mitre.oval:tst:38019"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.41.el3" test_ref="oval:org.mitre.oval:tst:38293"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.41.el3" test_ref="oval:org.mitre.oval:tst:38982"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nss-devel is earlier than 0:3.12.3.99.3-1.el4_8.2" test_ref="oval:org.mitre.oval:tst:38342"/>
            <criterion comment="nspr is earlier than 0:4.7.4-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:38829"/>
            <criterion comment="nss is earlier than 0:3.12.3.99.3-1.el4_8.2" test_ref="oval:org.mitre.oval:tst:38630"/>
            <criterion comment="nss-tools is earlier than 0:3.12.3.99.3-1.el4_8.2" test_ref="oval:org.mitre.oval:tst:38960"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.4-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:38731"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.3.99.3-1.el5_3.2" test_ref="oval:org.mitre.oval:tst:38999"/>
            <criterion comment="nss-devel is earlier than 0:3.12.3.99.3-1.el5_3.2" test_ref="oval:org.mitre.oval:tst:38609"/>
            <criterion comment="nspr is earlier than 0:4.7.4-1.el5_3.1" test_ref="oval:org.mitre.oval:tst:38995"/>
            <criterion comment="nss is earlier than 0:3.12.3.99.3-1.el5_3.2" test_ref="oval:org.mitre.oval:tst:38950"/>
            <criterion comment="nss-tools is earlier than 0:3.12.3.99.3-1.el5_3.2" test_ref="oval:org.mitre.oval:tst:38841"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.4-1.el5_3.1" test_ref="oval:org.mitre.oval:tst:38823"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11173" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0088"/>
        <description>Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:01.392-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:55.472-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:34.999-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11173 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:36.824-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:03.451-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39831"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39445"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40225"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40023"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40307"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11172" version="5" class="vulnerability">
      <metadata>
        <title>libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group zero (aka \0), which might allow context-dependent attackers to read from, or write to, out-of-bounds memory locations, related to corruption of REStackFrames.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4770" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4770"/>
        <description>libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group zero (aka \0), which might allow context-dependent attackers to read from, or write to, out-of-bounds memory locations, related to corruption of REStackFrames.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:29.433-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:55.257-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:34.758-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11172 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:38.662-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:03.133-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="libicu-doc is earlier than 0:3.6-5.11.1" test_ref="oval:org.mitre.oval:tst:35820"/>
          <criterion comment="icu is earlier than 0:3.6-5.11.1" test_ref="oval:org.mitre.oval:tst:35887"/>
          <criterion comment="libicu is earlier than 0:3.6-5.11.1" test_ref="oval:org.mitre.oval:tst:36028"/>
          <criterion comment="libicu-devel is earlier than 0:3.6-5.11.1" test_ref="oval:org.mitre.oval:tst:35153"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11171" version="5" class="vulnerability">
      <metadata>
        <title>The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to cause a denial of service (daemon crash and restart) via a crafted (1) R_U_THERE or (2) R_U_THERE_ACK Dead Peer Detection (DPD) IPsec IKE Notification message that triggers a NULL pointer dereference related to inconsistent ISAKMP state and the lack of a phase2 state association in DPD.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0790" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0790"/>
        <description>The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to cause a denial of service (daemon crash and restart) via a crafted (1) R_U_THERE or (2) R_U_THERE_ACK Dead Peer Detection (DPD) IPsec IKE Notification message that triggers a NULL pointer dereference related to inconsistent ISAKMP state and the lack of a phase2 state association in DPD.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:38.826-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:54.999-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:34.542-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11171 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:32.344-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:02.808-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="openswan is earlier than 0:2.6.14-1.el5_3.2" test_ref="oval:org.mitre.oval:tst:38176"/>
          <criterion comment="openswan-doc is earlier than 0:2.6.14-1.el5_3.2" test_ref="oval:org.mitre.oval:tst:38620"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1117" version="1" class="vulnerability">
      <metadata>
        <title>mlock Memory Page Tracking Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>Linux kernel</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0491" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0491"/>
        <description>The linux-2.4.21-mlock.patch in Red Hat Enterprise Linux 3 does not properly maintain the mlock page count when one process unlocks pages that belong to another process, which allows local users to mlock more memory than specified by the rlimit.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-06-29T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-06-29T06:49:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criteria operator="OR" comment="kernel, kernel-smp or kernel-hugemem RPM earlier than 0:2.4.21-32.0.1.EL">
          <criterion comment="kernel RPM earlier than 0:2.4.21-32.0.1.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1148"/>
          <criterion comment="kernel-hugemem RPM earlier than 0:2.4.21-32.0.1.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1147"/>
          <criterion comment="kernel-smp RPM earlier than 0:2.4.21-32.0.1.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1146"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11169" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0626"/>
        <description>Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:43.701-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:54.783-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:34.301-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11169 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:31.620-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:02.461-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE3-6.3E.13" test_ref="oval:org.mitre.oval:tst:31246"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE6-3.4E.9" test_ref="oval:org.mitre.oval:tst:31854"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11168" version="5" class="vulnerability">
      <metadata>
        <title>The get_random_int function in drivers/char/random.c in the Linux kernel before 2.6.30 produces insufficiently random numbers, which allows attackers to predict the return value, and possibly defeat protection mechanisms based on randomization, via vectors that leverage the function's tendency to "return the same value over and over again for long stretches of time."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3238"/>
        <description>The get_random_int function in drivers/char/random.c in the Linux kernel before 2.6.30 produces insufficiently random numbers, which allows attackers to predict the return value, and possibly defeat protection mechanisms based on randomization, via vectors that leverage the function's tendency to "return the same value over and over again for long stretches of time."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:38.968-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:54.311-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:33.589-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11168 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:13.522-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:01.789-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39101"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39357"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:38568"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39331"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39316"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39054"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39274"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39407"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39435"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39442"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:38473"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:37971"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38820"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38641"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38838"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38699"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38813"/>
            <criterion comment="kernel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38840"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38890"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38529"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38350"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38066"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38388"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11167" version="5" class="vulnerability">
      <metadata>
        <title>A certain Red Hat patch for net/ipv4/route.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 allows remote attackers to cause a denial of service (deadlock) via crafted packets that force collisions in the IPv4 routing hash table, and trigger a routing "emergency" in which a hash chain is too long.  NOTE: this is related to an issue in the Linux kernel before 2.6.31, when the kernel routing cache is disabled, involving an uninitialized pointer and a panic.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4272" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4272"/>
        <description>A certain Red Hat patch for net/ipv4/route.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 allows remote attackers to cause a denial of service (deadlock) via crafted packets that force collisions in the IPv4 routing hash table, and trigger a routing "emergency" in which a hash chain is too long.  NOTE: this is related to an issue in the Linux kernel before 2.6.31, when the kernel routing cache is disabled, involving an uninitialized pointer and a panic.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:47.594-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:53.931-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:33.235-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11167 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:25.850-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:01.355-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40050"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39464"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39090"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40063"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39443"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39703"/>
          <criterion comment="kernel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39080"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39862"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40057"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40029"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39849"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40039"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11166" version="5" class="vulnerability">
      <metadata>
        <title>The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0160" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0160"/>
        <description>The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:07.597-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:53.666-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:32.916-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11166 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:09.558-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:00.914-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.18-1.el4" test_ref="oval:org.mitre.oval:tst:39897"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:39323"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:40174"/>
            <criterion comment="firefox is earlier than 0:3.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:40301"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:39533"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11165" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in pnmtopng in netpbm 10.0 and earlier allow attackers to execute arbitrary code via a crafted PNM file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3632" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3632"/>
        <description>Multiple buffer overflows in pnmtopng in netpbm 10.0 and earlier allow attackers to execute arbitrary code via a crafted PNM file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:22.713-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:53.461-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:32.682-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11165 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:13.083-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:12:00.628-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="netpbm is earlier than 0:9.24-11.30.4" test_ref="oval:org.mitre.oval:tst:32233"/>
          <criterion comment="netpbm-progs is earlier than 0:9.24-11.30.4" test_ref="oval:org.mitre.oval:tst:32304"/>
          <criterion comment="netpbm-devel is earlier than 0:9.24-11.30.4" test_ref="oval:org.mitre.oval:tst:32108"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11164" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to execute arbitrary code via "an invalid and non-sensical ordering of table-related tags" that results in a negative array index.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0748" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0748"/>
        <description>Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to execute arbitrary code via "an invalid and non-sensical ordering of table-related tags" that results in a negative array index.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:21.571-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:52.918-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:32.161-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11164 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:44.213-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:59.925-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32663"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32326"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31987"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32451"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32697"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32558"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32427"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32671"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32666"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32561"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32593"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32679"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32133"/>
            <criterion comment="thunderbird is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32204"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32701"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32428"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32557"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32229"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32349"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32644"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32440"/>
            <criterion comment="firefox is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32219"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32598"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32717"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11163" version="5" class="vulnerability">
      <metadata>
        <title>GUI overlay vulnerability in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 allows remote attackers to spoof form elements and redirect user inputs via a borderless XUL pop-up window from a background tab.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1241" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1241"/>
        <description>GUI overlay vulnerability in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 allows remote attackers to spoof form elements and redirect user inputs via a borderless XUL pop-up window from a background tab.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:58.188-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:52.385-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:31.501-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11163 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:51.548-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:59.210-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36547"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36570"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36574"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:35661"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36605"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:35672"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:35874"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36533"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36355"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36379"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36587"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:35752"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-10.el4" test_ref="oval:org.mitre.oval:tst:36259"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36586"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36333"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36500"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.14.el4" test_ref="oval:org.mitre.oval:tst:35884"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36540"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36602"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36557"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36511"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36221"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-14.el5_1" test_ref="oval:org.mitre.oval:tst:36566"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-14.el5_1" test_ref="oval:org.mitre.oval:tst:36305"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-11.el5_1" test_ref="oval:org.mitre.oval:tst:36619"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11162" version="5" class="vulnerability">
      <metadata>
        <title>The cert_TestHostName function in Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, only checks the hostname portion of a certificate when the hostname portion of the URI is not a fully qualified domain name (FQDN), which allows remote attackers to spoof trusted certificates.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0765" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0765"/>
        <description>The cert_TestHostName function in Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, only checks the hostname portion of a certificate when the hostname portion of the URI is not a fully qualified domain name (FQDN), which allows remote attackers to spoof trusted certificates.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:38.596-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:52.087-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:31.169-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11162 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:43.257-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:58.808-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mozilla-js-debugger is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30799"/>
          <criterion comment="mozilla is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30278"/>
          <criterion comment="mozilla-chat is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30755"/>
          <criterion comment="mozilla-mail is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30570"/>
          <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30230"/>
          <criterion comment="mozilla-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30288"/>
          <criterion comment="mozilla-nss is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30323"/>
          <criterion comment="mozilla-nss-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30339"/>
          <criterion comment="mozilla-nspr is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30813"/>
          <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30660"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11161" version="3" class="vulnerability">
      <metadata>
        <title>Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.1 and earlier allows local users to execute arbitrary code via a malicious Security Provider library in the reader's current working directory.  NOTE: this issue might be subsumed by CVE-2008-0655.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5666" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5666"/>
        <description>Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.1 and earlier allows local users to execute arbitrary code via a malicious Security Provider library in the reader's current working directory.  NOTE: this issue might be subsumed by CVE-2008-0655.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:19.912-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:51.741-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:30.813-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criteria operator="OR">
            <criterion comment="acroread-plugin is earlier than 0:8.1.2-1.el3.6" test_ref="oval:org.mitre.oval:tst:36324"/>
            <criterion comment="acroread is earlier than 0:8.1.2-1.el3.6" test_ref="oval:org.mitre.oval:tst:36153"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="acroread-plugin is earlier than 0:8.1.2-1.el4.2" test_ref="oval:org.mitre.oval:tst:36156"/>
            <criterion comment="acroread is earlier than 0:8.1.2-1.el4.2" test_ref="oval:org.mitre.oval:tst:36293"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="acroread-plugin is earlier than 0:8.1.2-1.el5.3" test_ref="oval:org.mitre.oval:tst:35792"/>
            <criterion comment="acroread is earlier than 0:8.1.2-1.el5.3" test_ref="oval:org.mitre.oval:tst:35912"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11160" version="5" class="vulnerability">
      <metadata>
        <title>The sctp_rcv_ootb function in the SCTP implementation in the Linux kernel before 2.6.23 allows remote attackers to cause a denial of service (infinite loop) via (1) an Out Of The Blue (OOTB) chunk or (2) a chunk of zero length.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0008" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0008"/>
        <description>The sctp_rcv_ootb function in the SCTP implementation in the Linux kernel before 2.6.23 allows remote attackers to cause a denial of service (infinite loop) via (1) an Out Of The Blue (OOTB) chunk or (2) a chunk of zero length.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:01.576-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:51.259-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:30.299-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11160 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:04.191-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:58.012-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40241"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40097"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40139"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40308"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40210"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40082"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40354"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40326"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:39940"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:39363"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:39805"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40228"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40098"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40231"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:39918"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:39938"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40088"/>
            <criterion comment="kernel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40237"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:39997"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40240"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40352"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:39930"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40055"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11159" version="5" class="vulnerability">
      <metadata>
        <title>Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context-dependent attackers to cause a denial of service (crash) via a crafted Unicode string that triggers a heap-based buffer overflow.  NOTE: Qt 4 has the same error in the QUtf8Codec::convertToUnicode function, but it is not exploitable.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4137" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4137"/>
        <description>Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context-dependent attackers to cause a denial of service (crash) via a crafted Unicode string that triggers a heap-based buffer overflow.  NOTE: Qt 4 has the same error in the QUtf8Codec::convertToUnicode function, but it is not exploitable.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:04.004-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:50.732-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:29.690-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11159 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:05.687-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:57.345-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="qt-config is earlier than 1:3.1.2-17.RHEL3" test_ref="oval:org.mitre.oval:tst:34921"/>
            <criterion comment="qt is earlier than 1:3.1.2-17.RHEL3" test_ref="oval:org.mitre.oval:tst:35117"/>
            <criterion comment="qt-devel is earlier than 1:3.1.2-17.RHEL3" test_ref="oval:org.mitre.oval:tst:35255"/>
            <criterion comment="qt-MySQL is earlier than 1:3.1.2-17.RHEL3" test_ref="oval:org.mitre.oval:tst:35041"/>
            <criterion comment="qt-ODBC is earlier than 1:3.1.2-17.RHEL3" test_ref="oval:org.mitre.oval:tst:34922"/>
            <criterion comment="qt-designer is earlier than 1:3.1.2-17.RHEL3" test_ref="oval:org.mitre.oval:tst:35004"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="qt-config is earlier than 1:3.3.3-13.RHEL4" test_ref="oval:org.mitre.oval:tst:35085"/>
            <criterion comment="qt is earlier than 1:3.3.3-13.RHEL4" test_ref="oval:org.mitre.oval:tst:35125"/>
            <criterion comment="qt-devel is earlier than 1:3.3.3-13.RHEL4" test_ref="oval:org.mitre.oval:tst:35050"/>
            <criterion comment="qt-PostgreSQL is earlier than 1:3.3.3-13.RHEL4" test_ref="oval:org.mitre.oval:tst:35175"/>
            <criterion comment="qt-MySQL is earlier than 1:3.3.3-13.RHEL4" test_ref="oval:org.mitre.oval:tst:34568"/>
            <criterion comment="qt-ODBC is earlier than 1:3.3.3-13.RHEL4" test_ref="oval:org.mitre.oval:tst:34886"/>
            <criterion comment="qt-designer is earlier than 1:3.3.3-13.RHEL4" test_ref="oval:org.mitre.oval:tst:35054"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="qt-config is earlier than 1:3.3.6-23.el5" test_ref="oval:org.mitre.oval:tst:34806"/>
            <criterion comment="qt is earlier than 1:3.3.6-23.el5" test_ref="oval:org.mitre.oval:tst:34816"/>
            <criterion comment="qt-MySQL is earlier than 1:3.3.6-23.el5" test_ref="oval:org.mitre.oval:tst:34466"/>
            <criterion comment="qt-ODBC is earlier than 1:3.3.6-23.el5" test_ref="oval:org.mitre.oval:tst:35271"/>
            <criterion comment="qt-designer is earlier than 1:3.3.6-23.el5" test_ref="oval:org.mitre.oval:tst:34736"/>
            <criterion comment="qt-devel is earlier than 1:3.3.6-23.el5" test_ref="oval:org.mitre.oval:tst:35097"/>
            <criterion comment="qt-PostgreSQL is earlier than 1:3.3.6-23.el5" test_ref="oval:org.mitre.oval:tst:35149"/>
            <criterion comment="qt-devel-docs is earlier than 1:3.3.6-23.el5" test_ref="oval:org.mitre.oval:tst:35114"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11158" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 1.5.0.9 and 2.0.0.1, and SeaMonkey before 1.0.8 allow remote attackers to execute arbitrary code via JavaScript onUnload handlers that modify the structure of a document, wich triggers memory corruption due to the lack of a finalize hook on DOM window objects.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1092"/>
        <description>Mozilla Firefox 1.5.0.9 and 2.0.0.1, and SeaMonkey before 1.0.8 allow remote attackers to execute arbitrary code via JavaScript onUnload handlers that modify the structure of a document, wich triggers memory corruption due to the lack of a finalize hook on DOM window objects.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:53.627-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:50.231-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:29.164-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11158 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:06.964-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:56.684-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33391"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33688"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33675"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33724"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33510"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33409"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33467"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33658"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33649"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33381"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:32760"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33554"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33648"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.10-0.1.el4" test_ref="oval:org.mitre.oval:tst:32765"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33712"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33705"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33379"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:33400"/>
            <criterion comment="firefox is earlier than 0:1.5.0.10-0.1.el4" test_ref="oval:org.mitre.oval:tst:33759"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33678"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33695"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33697"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33244"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33645"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11156" version="5" class="vulnerability">
      <metadata>
        <title>Memory leak in freeRADIUS 1.1.5 and earlier allows remote attackers to cause a denial of service (memory consumption) via a large number of EAP-TTLS tunnel connections using malformed Diameter format attributes, which causes the authentication request to be rejected but does not reclaim VALUE_PAIR data structures.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2028"/>
        <description>Memory leak in freeRADIUS 1.1.5 and earlier allows remote attackers to cause a denial of service (memory consumption) via a large number of EAP-TTLS tunnel connections using malformed Diameter format attributes, which causes the authentication request to be rejected but does not reclaim VALUE_PAIR data structures.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:22.220-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:49.853-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:28.743-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11156 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:45.344-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:56.175-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="freeradius is earlier than 0:1.0.1-2.RHEL3.4" test_ref="oval:org.mitre.oval:tst:33848"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="freeradius-mysql is earlier than 0:1.0.1-3.RHEL4.5" test_ref="oval:org.mitre.oval:tst:33896"/>
            <criterion comment="freeradius-unixODBC is earlier than 0:1.0.1-3.RHEL4.5" test_ref="oval:org.mitre.oval:tst:33347"/>
            <criterion comment="freeradius is earlier than 0:1.0.1-3.RHEL4.5" test_ref="oval:org.mitre.oval:tst:34215"/>
            <criterion comment="freeradius-postgresql is earlier than 0:1.0.1-3.RHEL4.5" test_ref="oval:org.mitre.oval:tst:33852"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="freeradius-mysql is earlier than 0:1.1.3-1.2.el5" test_ref="oval:org.mitre.oval:tst:34157"/>
            <criterion comment="freeradius-unixODBC is earlier than 0:1.1.3-1.2.el5" test_ref="oval:org.mitre.oval:tst:33406"/>
            <criterion comment="freeradius is earlier than 0:1.1.3-1.2.el5" test_ref="oval:org.mitre.oval:tst:34112"/>
            <criterion comment="freeradius-postgresql is earlier than 0:1.1.3-1.2.el5" test_ref="oval:org.mitre.oval:tst:33854"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11155" version="5" class="vulnerability">
      <metadata>
        <title>The collect_rx_frame function in drivers/isdn/hisax/hfc_usb.c in the Linux kernel before 2.6.32-rc7 allows attackers to have an unspecified impact via a crafted HDLC packet that arrives over ISDN and triggers a buffer under-read.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4005" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4005"/>
        <description>The collect_rx_frame function in drivers/isdn/hisax/hfc_usb.c in the Linux kernel before 2.6.32-rc7 allows attackers to have an unspecified impact via a crafted HDLC packet that arrives over ISDN and triggers a buffer under-read.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:10.157-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:49.544-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:28.399-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11155 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:30:00.529-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:55.726-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39984"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:40053"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39873"/>
          <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39932"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39894"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39858"/>
          <criterion comment="kernel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:40016"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39833"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39555"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39325"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:40011"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11154" version="5" class="vulnerability">
      <metadata>
        <title>CRLF injection vulnerability in Mozilla Firefox before 2.0.0.12 allows remote user-assisted web sites to corrupt the user's password store via newlines that are not properly handled when the user saves a password.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0417" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0417"/>
        <description>CRLF injection vulnerability in Mozilla Firefox before 2.0.0.12 allows remote user-assisted web sites to corrupt the user's password store via newlines that are not properly handled when the user saves a password.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:28.349-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:48.789-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:27.800-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11154 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:03.513-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:55.017-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36256"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36236"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:35996"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36279"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36046"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36052"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36034"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36284"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:35748"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:35994"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36164"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36050"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36193"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36093"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36053"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.10.el4" test_ref="oval:org.mitre.oval:tst:35919"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:35600"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36141"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:35397"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:35684"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36203"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-9.el5" test_ref="oval:org.mitre.oval:tst:36281"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-9.el5" test_ref="oval:org.mitre.oval:tst:35480"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11153" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla before 1.7 allows remote web servers to read arbitrary files via Javascript that sets the value of an input type="file" tag.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0759" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0759"/>
        <description>Mozilla before 1.7 allows remote web servers to read arbitrary files via Javascript that sets the value of an &lt;input type="file"> tag.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:04.854-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:48.495-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:27.468-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11153 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:34.666-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:54.638-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mozilla-js-debugger is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30799"/>
          <criterion comment="mozilla is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30278"/>
          <criterion comment="mozilla-chat is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30755"/>
          <criterion comment="mozilla-mail is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30570"/>
          <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30230"/>
          <criterion comment="mozilla-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30288"/>
          <criterion comment="mozilla-nss is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30323"/>
          <criterion comment="mozilla-nss-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30339"/>
          <criterion comment="mozilla-nspr is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30813"/>
          <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30660"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11152" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to spoof the extensions of files to download via the Content-Disposition header, which could be used to trick users into downloading dangerous content.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0586" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0586"/>
        <description>Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to spoof the extensions of files to download via the Content-Disposition header, which could be used to trick users into downloading dangerous content.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:05.608-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:48.160-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:27.101-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11152 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:17.472-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:54.184-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31283"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31520"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31645"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31516"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31569"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31143"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31512"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31785"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31695"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31626"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:1.0.1-1.4.3" test_ref="oval:org.mitre.oval:tst:31118"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11151" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the layout engine and (1) a zero value of the "this" variable in the nsContentList::Item function; (2) interaction of the indic IME extension, a Hindi language selection, and the "g" character; and (3) interaction of the nsFrameList::SortByContentOrder function with a certain insufficient protection of inline frames.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4063"/>
        <description>Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the layout engine and (1) a zero value of the "this" variable in the nsContentList::Item function; (2) interaction of the indic IME extension, a Hindi language selection, and the "g" character; and (3) interaction of the nsFrameList::SortByContentOrder function with a certain insufficient protection of inline frames.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:08.872-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:47.752-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:26.664-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11151 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:28:46.430-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:53.657-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.2-3.el4" test_ref="oval:org.mitre.oval:tst:37195"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-19.el5" test_ref="oval:org.mitre.oval:tst:37248"/>
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37486"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37495"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37044"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37578"/>
            <criterion comment="yelp is earlier than 0:2.16.0-21.el5" test_ref="oval:org.mitre.oval:tst:37584"/>
            <criterion comment="devhelp is earlier than 0:0.12-19.el5" test_ref="oval:org.mitre.oval:tst:37353"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37406"/>
            <criterion comment="firefox is earlier than 0:3.0.2-3.el5" test_ref="oval:org.mitre.oval:tst:37225"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:36664"/>
            <criterion comment="nss-tools is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37664"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11150" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in ImageMagick before 6.1.8 allows remote attackers to cause a denial of service (application crash) via a crafted PSD file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0761" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0761"/>
        <description>Unknown vulnerability in ImageMagick before 6.1.8 allows remote attackers to cause a denial of service (application crash) via a crafted PSD file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:52.821-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:47.506-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:26.392-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11150 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:02:58.767-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:53.346-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="ImageMagick-c++-devel is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30471"/>
          <criterion comment="ImageMagick is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30355"/>
          <criterion comment="ImageMagick-perl is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30877"/>
          <criterion comment="ImageMagick-devel is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30918"/>
          <criterion comment="ImageMagick-c++ is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30938"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1115" version="4" class="vulnerability">
      <metadata>
        <title>IE6,SP2 PNG Image Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1211"/>
        <description>Buffer overflow in the PNG image rendering component of Microsoft Internet Explorer allows remote attackers to execute arbitrary code via a crafted PNG file.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-06-22T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-06-22T02:13:00.000-04:00">DRAFT</status_change>
            <modified date="2005-06-24T12:00:00.000-04:00" comment="added description">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2005-07-27T10:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-10-17T04:13:00.000-04:00" comment="Fixed registry_object obj:1557 by moving PNGFilter.CoPNGFilter from name to end of key, and setting xsi:nil to true on name.  Modified by Harvey Rubinovitz">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2006-10-17T04:13:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-11-14T08:57:50.374-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:33.098-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:08.434-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6.0 Installed XP SP2" negate="false" test_ref="oval:org.mitre.oval:tst:2403"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2900.2668" negate="false" test_ref="oval:org.mitre.oval:tst:1150"/>
          <criterion comment="the patch kb883939 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2750"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="PNG image rendering enabled in Internet Explorer" negate="false" test_ref="oval:org.mitre.oval:tst:2749"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11149" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a stack-based buffer overflow in the StreamPredictor::getNextLine function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3387" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3387"/>
        <description>Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a stack-based buffer overflow in the StreamPredictor::getNextLine function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:34.576-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:46.730-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:25.586-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11149 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:57:49.102-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:52.378-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:1.0.7-67.10" test_ref="oval:org.mitre.oval:tst:34658"/>
            <criterion comment="tetex-dvips is earlier than 0:1.0.7-67.10" test_ref="oval:org.mitre.oval:tst:34842"/>
            <criterion comment="tetex-fonts is earlier than 0:1.0.7-67.10" test_ref="oval:org.mitre.oval:tst:34798"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.45" test_ref="oval:org.mitre.oval:tst:34753"/>
            <criterion comment="tetex is earlier than 0:1.0.7-67.10" test_ref="oval:org.mitre.oval:tst:34413"/>
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.45" test_ref="oval:org.mitre.oval:tst:34436"/>
            <criterion comment="tetex-afm is earlier than 0:1.0.7-67.10" test_ref="oval:org.mitre.oval:tst:34841"/>
            <criterion comment="xpdf is earlier than 1:2.02-10.RHEL3" test_ref="oval:org.mitre.oval:tst:34945"/>
            <criterion comment="tetex-xdvi is earlier than 0:1.0.7-67.10" test_ref="oval:org.mitre.oval:tst:34721"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.45" test_ref="oval:org.mitre.oval:tst:34745"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.8" test_ref="oval:org.mitre.oval:tst:34583"/>
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-4.RHEL4" test_ref="oval:org.mitre.oval:tst:34861"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.8" test_ref="oval:org.mitre.oval:tst:34394"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-4.RHEL4" test_ref="oval:org.mitre.oval:tst:34314"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.8" test_ref="oval:org.mitre.oval:tst:34143"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.20.2" test_ref="oval:org.mitre.oval:tst:34428"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.0.1.EL4.8" test_ref="oval:org.mitre.oval:tst:34900"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-7.7" test_ref="oval:org.mitre.oval:tst:34693"/>
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.20.2" test_ref="oval:org.mitre.oval:tst:34799"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.8" test_ref="oval:org.mitre.oval:tst:34822"/>
            <criterion comment="xpdf is earlier than 1:3.00-12.RHEL4" test_ref="oval:org.mitre.oval:tst:34599"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.8" test_ref="oval:org.mitre.oval:tst:34702"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.8" test_ref="oval:org.mitre.oval:tst:34643"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.20.2" test_ref="oval:org.mitre.oval:tst:34757"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.5.4-2.el5" test_ref="oval:org.mitre.oval:tst:34637"/>
            <criterion comment="cups-lpd is earlier than 1:1.2.4-11.5.3.el5" test_ref="oval:org.mitre.oval:tst:34703"/>
            <criterion comment="tetex-dvips is earlier than 0:3.0-33.1.el5" test_ref="oval:org.mitre.oval:tst:34259"/>
            <criterion comment="kdegraphics is earlier than 7:3.5.4-2.el5" test_ref="oval:org.mitre.oval:tst:34899"/>
            <criterion comment="poppler is earlier than 0:0.5.4-4.1.el5" test_ref="oval:org.mitre.oval:tst:34090"/>
            <criterion comment="tetex-fonts is earlier than 0:3.0-33.1.el5" test_ref="oval:org.mitre.oval:tst:34876"/>
            <criterion comment="cups-libs is earlier than 1:1.2.4-11.5.3.el5" test_ref="oval:org.mitre.oval:tst:34847"/>
            <criterion comment="tetex is earlier than 0:3.0-33.1.el5" test_ref="oval:org.mitre.oval:tst:34952"/>
            <criterion comment="tetex-doc is earlier than 0:3.0-33.1.el5" test_ref="oval:org.mitre.oval:tst:34695"/>
            <criterion comment="poppler-devel is earlier than 0:0.5.4-4.1.el5" test_ref="oval:org.mitre.oval:tst:34785"/>
            <criterion comment="tetex-latex is earlier than 0:3.0-33.1.el5" test_ref="oval:org.mitre.oval:tst:34961"/>
            <criterion comment="poppler-utils is earlier than 0:0.5.4-4.1.el5" test_ref="oval:org.mitre.oval:tst:34926"/>
            <criterion comment="cups-devel is earlier than 1:1.2.4-11.5.3.el5" test_ref="oval:org.mitre.oval:tst:34800"/>
            <criterion comment="tetex-afm is earlier than 0:3.0-33.1.el5" test_ref="oval:org.mitre.oval:tst:34882"/>
            <criterion comment="tetex-xdvi is earlier than 0:3.0-33.1.el5" test_ref="oval:org.mitre.oval:tst:34652"/>
            <criterion comment="cups is earlier than 1:1.2.4-11.5.3.el5" test_ref="oval:org.mitre.oval:tst:34651"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11148" version="5" class="vulnerability">
      <metadata>
        <title>The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted BGP packet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1267" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1267"/>
        <description>The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted BGP packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:00.136-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:46.509-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:25.347-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11148 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:20.320-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:51.588-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="arpwatch is earlier than 14:2.1a13-10.RHEL4" test_ref="oval:org.mitre.oval:tst:32040"/>
          <criterion comment="libpcap is earlier than 14:0.8.3-10.RHEL4" test_ref="oval:org.mitre.oval:tst:31954"/>
          <criterion comment="tcpdump is earlier than 14:3.8.2-10.RHEL4" test_ref="oval:org.mitre.oval:tst:31923"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11147" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx (width) value to the (b) gdImageCreate or the (c) gdImageCreateTrueColor function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3996" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3996"/>
        <description>Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx (width) value to the (b) gdImageCreate or the (c) gdImageCreateTrueColor function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:42.998-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:45.748-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:24.522-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11147 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:32.821-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:50.664-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35216"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35012"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:34787"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35164"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:34818"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35171"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:34820"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35008"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:34796"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35363"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35010"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35249"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:34683"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:34365"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:34976"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35087"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35298"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35289"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35309"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35263"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35044"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35279"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34964"/>
            <criterion comment="php-common is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34896"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35084"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35078"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34802"/>
            <criterion comment="php is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35270"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35361"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34769"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35108"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35037"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34943"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34689"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35221"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35077"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34934"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35170"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34376"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34764"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11146" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote malicious Gopher servers to cause a denial of service (crash) via crafted responses.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0094" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0094"/>
        <description>Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote malicious Gopher servers to cause a denial of service (crash) via crafted responses.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:05.957-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:45.521-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:24.265-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11146 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:47.092-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:50.298-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE3-6.3E.7" test_ref="oval:org.mitre.oval:tst:30954"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE6-3.4E.3" test_ref="oval:org.mitre.oval:tst:31281"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11145" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0417" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0417"/>
        <description>Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:02.783-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:45.334-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:24.060-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11145 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:23.906-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:50.001-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="cvs is earlier than 0:1.11.2-24" test_ref="oval:org.mitre.oval:tst:30480"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11144" version="5" class="vulnerability">
      <metadata>
        <title>Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers to cause a denial of service or execute arbitrary code via (1) the ip_mc_source function, which decrements a counter to -1, or (2) the igmp_marksources function, which does not properly validate IGMP message parameters and performs an out-of-bounds read.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1137" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1137"/>
        <description>Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers to cause a denial of service or execute arbitrary code via (1) the ip_mc_source function, which decrements a counter to -1, or (2) the igmp_marksources function, which does not properly validate IGMP message parameters and performs an out-of-bounds read.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:43.621-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:44.886-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:23.582-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11144 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:59:00.368-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:49.488-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:31101"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30944"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30205"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30752"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30999"/>
            <criterion comment="kernel is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30940"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:31177"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30903"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30786"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30633"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:31009"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30369"/>
            <criterion comment="kernel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:31205"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30421"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30594"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30616"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11143" version="5" class="vulnerability">
      <metadata>
        <title>The virtio_net_bad_features function in hw/virtio-net.c in the virtio-net driver in the Linux kernel before 2.6.26, when used on a guest OS in conjunction with qemu-kvm 0.11.0 or KVM 83, allows remote attackers to cause a denial of service (guest OS crash, and an associated qemu-kvm process exit) by sending a large amount of network traffic to a TCP port on the guest OS, related to a virtio-net whitelist that includes an improper implementation of TCP Segment Offloading (TSO).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0741" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0741"/>
        <description>The virtio_net_bad_features function in hw/virtio-net.c in the virtio-net driver in the Linux kernel before 2.6.26, when used on a guest OS in conjunction with qemu-kvm 0.11.0 or KVM 83, allows remote attackers to cause a denial of service (guest OS crash, and an associated qemu-kvm process exit) by sending a large amount of network traffic to a TCP port on the guest OS, related to a virtio-net whitelist that includes an improper implementation of TCP Segment Offloading (TSO).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:47.630-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:44.664-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:23.262-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11143 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:29.279-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:49.161-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kmod-kvm is earlier than 0:83-164.el5" test_ref="oval:org.mitre.oval:tst:40219"/>
          <criterion comment="kvm-qemu-img is earlier than 0:83-164.el5" test_ref="oval:org.mitre.oval:tst:40317"/>
          <criterion comment="kvm-tools is earlier than 0:83-164.el5" test_ref="oval:org.mitre.oval:tst:40168"/>
          <criterion comment="kvm is earlier than 0:83-164.el5" test_ref="oval:org.mitre.oval:tst:39953"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11142" version="5" class="vulnerability">
      <metadata>
        <title>The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the O_APPEND flag set, which allows local users to bypass append mode and make arbitrary changes to other locations in the file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4554" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4554"/>
        <description>The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the O_APPEND flag set, which allows local users to bypass append mode and make arbitrary changes to other locations in the file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:39.004-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:44.336-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:22.813-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11142 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:02.547-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:48.700-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:37458"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:38105"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:38024"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:38100"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:37636"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:38034"/>
          <criterion comment="kernel is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:37781"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:38076"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:37945"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:38013"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:37261"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-92.1.22.el5" test_ref="oval:org.mitre.oval:tst:37532"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11141" version="5" class="vulnerability">
      <metadata>
        <title>Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via certain malformed requests that cause new processes to be spawned and enter an infinite loop.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0807" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0807"/>
        <description>Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via certain malformed requests that cause new processes to be spawned and enter an infinite loop.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:58.809-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:44.108-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:22.570-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11141 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:26.513-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:48.407-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="samba-common is earlier than 0:3.0.7-1.3E" test_ref="oval:org.mitre.oval:tst:30580"/>
          <criterion comment="samba-swat is earlier than 0:3.0.7-1.3E" test_ref="oval:org.mitre.oval:tst:30191"/>
          <criterion comment="samba-client is earlier than 0:3.0.7-1.3E" test_ref="oval:org.mitre.oval:tst:30913"/>
          <criterion comment="samba is earlier than 0:3.0.7-1.3E" test_ref="oval:org.mitre.oval:tst:30778"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1114" version="5" class="vulnerability">
      <metadata>
        <title>IE AbusiveParent Vulnerability (32-bit Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1319" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1319"/>
        <description>The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a window, opening a child page whose target is the window with the given name, then injecting the script from the parent into the child using execScript, as demonstrated by "AbusiveParent" in Internet Explorer 6.0.2900.2180.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-02-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </submitted>
            <status_change date="2005-02-11T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-03-02T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-23T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-06-02T12:00:00.000-04:00" comment="Added product">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-06-08T03:17:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-29T06:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed obj:823: Removed HKEY_LOCAL_MACHINE\ from the key, as it's specified as the hive.  Implemented by Harvey Rubinovitz." date="2007-01-22T00:37:00.710-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T00:38:34.806-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:31.375-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:var:206 - modified vulnerabilities ofÂ MS Visual C++ Â  (winsxs folder checks were modified)" date="2014-04-17T13:09:00.881-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-04-17T13:11:49.638-04:00">INTERIM</status_change>
            <status_change date="2014-05-05T04:00:06.169-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Microsoft Windows Server 2003 32-Bit Edition">
          <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
          <criterion comment="32-Bit version of Windows is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2748"/>
        </criteria>
        <criterion comment="the version of dhtmled.ocx is less than 6.1.0.9231" negate="false" test_ref="oval:org.mitre.oval:tst:1152"/>
        <criterion comment="the patch kb891781 is installed (Hotfix key)" negate="true" test_ref="oval:org.mitre.oval:tst:1151"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11139" version="5" class="vulnerability">
      <metadata>
        <title>The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, uses a random number generator that is seeded only once per browser session, which makes it easier for remote attackers to track a user, or trick a user into acting upon a spoofed pop-up message, by calculating the seed value, related to a "temporary footprint" and an "in-session phishing attack."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5913" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5913"/>
        <description>The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, uses a random number generator that is seeded only once per browser session, which makes it easier for remote attackers to track a user, or trick a user into acting upon a spoofed pop-up message, by calculating the seed value, related to a "temporary footprint" and an "in-session phishing attack."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:05.090-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:43.663-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:22.119-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11139 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:30:39.546-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:47.665-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.6.4-8.el4" test_ref="oval:org.mitre.oval:tst:40755"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gnome-python2-extras is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40435"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-21.el5" test_ref="oval:org.mitre.oval:tst:40552"/>
            <criterion comment="gnome-python2-libegg is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40721"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.2.4-10.el5" test_ref="oval:org.mitre.oval:tst:40480"/>
            <criterion comment="gnome-python2-gtkhtml2 is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40813"/>
            <criterion comment="totem is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40749"/>
            <criterion comment="xulrunner is earlier than 0:1.9.2.4-10.el5" test_ref="oval:org.mitre.oval:tst:40221"/>
            <criterion comment="gnome-python2-gtkspell is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40385"/>
            <criterion comment="yelp is earlier than 0:2.16.0-26.el5" test_ref="oval:org.mitre.oval:tst:40828"/>
            <criterion comment="devhelp is earlier than 0:0.12-21.el5" test_ref="oval:org.mitre.oval:tst:40814"/>
            <criterion comment="firefox is earlier than 0:3.6.4-8.el5" test_ref="oval:org.mitre.oval:tst:40524"/>
            <criterion comment="totem-mozplugin is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40620"/>
            <criterion comment="gnome-python2-gtkmozembed is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40722"/>
            <criterion comment="esc is earlier than 0:1.1.0-12.el5" test_ref="oval:org.mitre.oval:tst:40273"/>
            <criterion comment="totem-devel is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40637"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11138" version="5" class="vulnerability">
      <metadata>
        <title>The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to gczeal, a different vulnerability than CVE-2009-0773.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0774" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0774"/>
        <description>The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to gczeal, a different vulnerability than CVE-2009-0773.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:12.555-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:43.154-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:21.546-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11138 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:59:18.142-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:46.934-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38413"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38419"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38110"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38217"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:37995"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:37833"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38347"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38410"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:37953"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38386"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:37842"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-19.el4" test_ref="oval:org.mitre.oval:tst:38238"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:38355"/>
            <criterion comment="firefox is earlier than 0:3.0.7-1.el4" test_ref="oval:org.mitre.oval:tst:38405"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:38148"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:38132"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:38204"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:38364"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:38168"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:37685"/>
            <criterion comment="firefox is earlier than 0:3.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:38372"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.21-1.el5" test_ref="oval:org.mitre.oval:tst:37944"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:38365"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11137" version="5" class="vulnerability">
      <metadata>
        <title>The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0077" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0077"/>
        <description>The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:44.662-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:42.790-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:21.232-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11137 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:57:38.806-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:46.562-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-9.0.1.EL" test_ref="oval:org.mitre.oval:tst:30613"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-9.0.1.EL" test_ref="oval:org.mitre.oval:tst:30096"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-9.0.1.EL" test_ref="oval:org.mitre.oval:tst:30089"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-9.0.1.EL" test_ref="oval:org.mitre.oval:tst:30548"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-9.0.1.EL" test_ref="oval:org.mitre.oval:tst:30520"/>
          <criterion comment="kernel is earlier than 0:2.4.21-9.0.1.EL" test_ref="oval:org.mitre.oval:tst:30661"/>
          <criterion comment="s390utils is earlier than 2:1.2.4-3" test_ref="oval:org.mitre.oval:tst:30656"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-9.0.1.EL" test_ref="oval:org.mitre.oval:tst:30187"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-9.0.1.EL" test_ref="oval:org.mitre.oval:tst:30188"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-9.0.1.EL" test_ref="oval:org.mitre.oval:tst:30573"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11136" version="5" class="vulnerability">
      <metadata>
        <title>The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory.  NOTE: this issue was originally incorrectly reported as a "buffer overflow" by some sources.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0535" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0535"/>
        <description>The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory.  NOTE: this issue was originally incorrectly reported as a "buffer overflow" by some sources.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:23.934-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:42.506-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:20.871-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11136 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:59:14.291-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:46.195-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30827"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30622"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30627"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30676"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30823"/>
          <criterion comment="kernel is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30750"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30596"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30833"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30830"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11135" version="5" class="vulnerability">
      <metadata>
        <title>Double free vulnerability in the GSS-API library (lib/gssapi/krb5/k5unseal.c), as used by the Kerberos administration daemon (kadmind) in MIT krb5 before 1.6.1, when used with the authentication method provided by the RPCSEC_GSS RPC library, allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via a message with an "an invalid direction encoding".</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1216" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1216"/>
        <description>Double free vulnerability in the GSS-API library (lib/gssapi/krb5/k5unseal.c), as used by the Kerberos administration daemon (kadmind) in MIT krb5 before 1.6.1, when used with the authentication method provided by the RPCSEC_GSS RPC library, allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via a message with an "an invalid direction encoding".</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:24.913-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:42.096-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:20.451-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11135 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:37.628-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:45.539-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.2.7-61" test_ref="oval:org.mitre.oval:tst:33590"/>
            <criterion comment="krb5 is earlier than 0:1.2.7-61" test_ref="oval:org.mitre.oval:tst:33826"/>
            <criterion comment="krb5-libs is earlier than 0:1.2.7-61" test_ref="oval:org.mitre.oval:tst:32858"/>
            <criterion comment="krb5-server is earlier than 0:1.2.7-61" test_ref="oval:org.mitre.oval:tst:33622"/>
            <criterion comment="krb5-devel is earlier than 0:1.2.7-61" test_ref="oval:org.mitre.oval:tst:33700"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.3.4-46" test_ref="oval:org.mitre.oval:tst:33804"/>
            <criterion comment="krb5 is earlier than 0:1.3.4-46" test_ref="oval:org.mitre.oval:tst:33812"/>
            <criterion comment="krb5-libs is earlier than 0:1.3.4-46" test_ref="oval:org.mitre.oval:tst:33795"/>
            <criterion comment="krb5-server is earlier than 0:1.3.4-46" test_ref="oval:org.mitre.oval:tst:32895"/>
            <criterion comment="krb5-devel is earlier than 0:1.3.4-46" test_ref="oval:org.mitre.oval:tst:33816"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.5-23" test_ref="oval:org.mitre.oval:tst:33344"/>
            <criterion comment="krb5 is earlier than 0:1.5-23" test_ref="oval:org.mitre.oval:tst:33714"/>
            <criterion comment="krb5-libs is earlier than 0:1.5-23" test_ref="oval:org.mitre.oval:tst:33831"/>
            <criterion comment="krb5-server is earlier than 0:1.5-23" test_ref="oval:org.mitre.oval:tst:33885"/>
            <criterion comment="krb5-devel is earlier than 0:1.5-23" test_ref="oval:org.mitre.oval:tst:33785"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11134" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service (application crash).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1186" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1186"/>
        <description>Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service (application crash).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:59.882-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:41.817-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:20.209-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11134 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:57:47.828-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:45.194-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="enscript is earlier than 0:1.6.1-24.4" test_ref="oval:org.mitre.oval:tst:30796"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="enscript is earlier than 0:1.6.1-28.3" test_ref="oval:org.mitre.oval:tst:31274"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11133" version="5" class="vulnerability">
      <metadata>
        <title>mod_disk_cache in Apache 2.0 through 2.0.49 stores client headers, including authentication information, on the hard disk, which could allow local users to gain sensitive information.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1834" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1834"/>
        <description>mod_disk_cache in Apache 2.0 through 2.0.49 stores client headers, including authentication information, on the hard disk, which could allow local users to gain sensitive information.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:56.428-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:41.570-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:19.928-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11133 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:59:05.406-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:44.867-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="httpd-devel is earlier than 0:2.0.46-44.ent" test_ref="oval:org.mitre.oval:tst:30849"/>
          <criterion comment="mod_ssl is earlier than 1:2.0.46-44.ent" test_ref="oval:org.mitre.oval:tst:30832"/>
          <criterion comment="httpd is earlier than 0:2.0.46-44.ent" test_ref="oval:org.mitre.oval:tst:30989"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11132" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in nmbd in Samba 3.0.0 through 3.0.26a, when configured as a Primary or Backup Domain controller, allows remote attackers to have an unknown impact via crafted GETDC mailslot requests, related to handling of GETDC logon server requests.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4572" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4572"/>
        <description>Stack-based buffer overflow in nmbd in Samba 3.0.0 through 3.0.26a, when configured as a Primary or Backup Domain controller, allows remote attackers to have an unknown impact via crafted GETDC mailslot requests, related to handling of GETDC logon server requests.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:24.872-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:41.104-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:19.527-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11132 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:57:39.684-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:44.333-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.9-1.3E.14.1" test_ref="oval:org.mitre.oval:tst:35031"/>
            <criterion comment="samba-swat is earlier than 0:3.0.9-1.3E.14.1" test_ref="oval:org.mitre.oval:tst:35544"/>
            <criterion comment="samba-client is earlier than 0:3.0.9-1.3E.14.1" test_ref="oval:org.mitre.oval:tst:35435"/>
            <criterion comment="samba is earlier than 0:3.0.9-1.3E.14.1" test_ref="oval:org.mitre.oval:tst:35042"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.25b-1.el4_6.2" test_ref="oval:org.mitre.oval:tst:35587"/>
            <criterion comment="samba-swat is earlier than 0:3.0.25b-1.el4_6.2" test_ref="oval:org.mitre.oval:tst:35430"/>
            <criterion comment="samba-client is earlier than 0:3.0.25b-1.el4_6.2" test_ref="oval:org.mitre.oval:tst:35567"/>
            <criterion comment="samba is earlier than 0:3.0.25b-1.el4_6.2" test_ref="oval:org.mitre.oval:tst:35285"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.25b-1.el5_1.2" test_ref="oval:org.mitre.oval:tst:34598"/>
            <criterion comment="samba-swat is earlier than 0:3.0.25b-1.el5_1.2" test_ref="oval:org.mitre.oval:tst:35588"/>
            <criterion comment="samba-client is earlier than 0:3.0.25b-1.el5_1.2" test_ref="oval:org.mitre.oval:tst:35579"/>
            <criterion comment="samba is earlier than 0:3.0.25b-1.el5_1.2" test_ref="oval:org.mitre.oval:tst:35226"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11131" version="6" class="vulnerability">
      <metadata>
        <title>The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors.  NOTE: this issue exists because of an incomplete fix for CVE-2007-3278.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0430" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0430"/>
        <description>libspice, as used in QEMU-KVM in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 and possibly other products, allows guest OS users to read from or write to arbitrary QEMU memory by modifying the address that is used by Cairo for memory mappings.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:24.843-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:40.826-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:19.268-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11131 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:33.575-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:43.968-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kmod-kvm is earlier than 0:83-164.el5" test_ref="oval:org.mitre.oval:tst:40219"/>
          <criterion comment="kvm-qemu-img is earlier than 0:83-164.el5" test_ref="oval:org.mitre.oval:tst:40317"/>
          <criterion comment="kvm-tools is earlier than 0:83-164.el5" test_ref="oval:org.mitre.oval:tst:40168"/>
          <criterion comment="kvm is earlier than 0:83-164.el5" test_ref="oval:org.mitre.oval:tst:39953"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11130" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spawn windows without user interface components such as the address and status bar, which could be used to conduct spoofing or phishing attacks.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2707" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2707"/>
        <description>Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spawn windows without user interface components such as the address and status bar, which could be used to conduct spoofing or phishing attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:23.848-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:40.325-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:18.688-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11130 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:59:10.970-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:43.353-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32169"/>
            <criterion comment="mozilla is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:31729"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32242"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32151"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32014"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32144"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32068"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32248"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32293"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32044"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32244"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.7" test_ref="oval:org.mitre.oval:tst:32012"/>
            <criterion comment="mozilla is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:31897"/>
            <criterion comment="thunderbird is earlier than 0:1.0.7-1.4.1" test_ref="oval:org.mitre.oval:tst:31477"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32300"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32226"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32289"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.7" test_ref="oval:org.mitre.oval:tst:32170"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32150"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32302"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32090"/>
            <criterion comment="firefox is earlier than 0:1.0.7-1.4.1" test_ref="oval:org.mitre.oval:tst:32147"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32209"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32088"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11129" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via large (1) bytes_per_pixel, (2) columns, and (3) rows values, which trigger a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4144" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4144"/>
        <description>Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via large (1) bytes_per_pixel, (2) columns, and (3) rows values, which trigger a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:16.244-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:39.933-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:18.339-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11129 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:03.261-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:42.877-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:5.5.6-20" test_ref="oval:org.mitre.oval:tst:32037"/>
            <criterion comment="ImageMagick is earlier than 0:5.5.6-20" test_ref="oval:org.mitre.oval:tst:32699"/>
            <criterion comment="ImageMagick-perl is earlier than 0:5.5.6-20" test_ref="oval:org.mitre.oval:tst:32588"/>
            <criterion comment="ImageMagick-devel is earlier than 0:5.5.6-20" test_ref="oval:org.mitre.oval:tst:32852"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:5.5.6-20" test_ref="oval:org.mitre.oval:tst:32735"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-16" test_ref="oval:org.mitre.oval:tst:32383"/>
            <criterion comment="ImageMagick is earlier than 0:6.0.7.1-16" test_ref="oval:org.mitre.oval:tst:32971"/>
            <criterion comment="ImageMagick-perl is earlier than 0:6.0.7.1-16" test_ref="oval:org.mitre.oval:tst:32748"/>
            <criterion comment="ImageMagick-devel is earlier than 0:6.0.7.1-16" test_ref="oval:org.mitre.oval:tst:32946"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:6.0.7.1-16" test_ref="oval:org.mitre.oval:tst:32537"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11128" version="5" class="vulnerability">
      <metadata>
        <title>The FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates files with insecure permissions, which can allow local users to steal session information and hijack sessions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0755" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0755"/>
        <description>The FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates files with insecure permissions, which can allow local users to steal session information and hijack sessions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:21.096-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:39.716-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:18.091-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11128 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:08:41.833-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:42.580-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="ruby-mode is earlier than 0:1.6.8-9.EL3.2" test_ref="oval:org.mitre.oval:tst:30648"/>
          <criterion comment="ruby-devel is earlier than 0:1.6.8-9.EL3.2" test_ref="oval:org.mitre.oval:tst:30909"/>
          <criterion comment="ruby is earlier than 0:1.6.8-9.EL3.2" test_ref="oval:org.mitre.oval:tst:30352"/>
          <criterion comment="ruby-libs is earlier than 0:1.6.8-9.EL3.2" test_ref="oval:org.mitre.oval:tst:30845"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11127" version="5" class="vulnerability">
      <metadata>
        <title>The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors.  NOTE: this issue exists because of an incomplete fix for CVE-2007-3278.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6601" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6601"/>
        <description>The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors.  NOTE: this issue exists because of an incomplete fix for CVE-2007-3278.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:40.542-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:38.919-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:17.374-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11127 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:08:56.924-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:41.689-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="rh-postgresql-devel is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:36102"/>
            <criterion comment="rh-postgresql-server is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35807"/>
            <criterion comment="rh-postgresql-python is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35304"/>
            <criterion comment="rh-postgresql-libs is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35743"/>
            <criterion comment="rh-postgresql-docs is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35830"/>
            <criterion comment="rh-postgresql-test is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35938"/>
            <criterion comment="rh-postgresql-pl is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35951"/>
            <criterion comment="rh-postgresql-tcl is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35406"/>
            <criterion comment="rh-postgresql is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35943"/>
            <criterion comment="rh-postgresql-contrib is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35867"/>
            <criterion comment="rh-postgresql-jdbc is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35930"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35948"/>
            <criterion comment="postgresql-docs is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35993"/>
            <criterion comment="postgresql-pl is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36045"/>
            <criterion comment="postgresql-tcl is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35949"/>
            <criterion comment="postgresql-libs is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36098"/>
            <criterion comment="postgresql-contrib is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36066"/>
            <criterion comment="postgresql-python is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35942"/>
            <criterion comment="postgresql-test is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36105"/>
            <criterion comment="postgresql-jdbc is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35835"/>
            <criterion comment="postgresql-server is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35597"/>
            <criterion comment="postgresql-devel is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36094"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35261"/>
            <criterion comment="postgresql-docs is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35907"/>
            <criterion comment="postgresql-pl is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35319"/>
            <criterion comment="postgresql-tcl is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35123"/>
            <criterion comment="postgresql-libs is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35894"/>
            <criterion comment="postgresql-contrib is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35781"/>
            <criterion comment="postgresql-python is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:36109"/>
            <criterion comment="postgresql-test is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35308"/>
            <criterion comment="postgresql-server is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35856"/>
            <criterion comment="postgresql-devel is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:36044"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11126" version="5" class="vulnerability">
      <metadata>
        <title>mod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU consumption) by aborting an SSL connection in a way that causes an Apache child process to enter an infinite loop.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0748" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0748"/>
        <description>mod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU consumption) by aborting an SSL connection in a way that causes an Apache child process to enter an infinite loop.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:36.645-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:38.675-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:17.140-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11126 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:08:53.158-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:41.379-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="httpd-devel is earlier than 0:2.0.46-38.ent" test_ref="oval:org.mitre.oval:tst:30679"/>
          <criterion comment="mod_ssl is earlier than 1:2.0.46-38.ent" test_ref="oval:org.mitre.oval:tst:30662"/>
          <criterion comment="httpd is earlier than 0:2.0.46-38.ent" test_ref="oval:org.mitre.oval:tst:30443"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11125" version="5" class="vulnerability">
      <metadata>
        <title>SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients ("To" addresses), which triggers a bus error in Perl.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3351" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3351"/>
        <description>SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients ("To" addresses), which triggers a bus error in Perl.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:50.295-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:38.494-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:16.895-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11125 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:18:00.420-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:41.085-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="spamassassin is earlier than 0:3.0.5-3.el4" test_ref="oval:org.mitre.oval:tst:32493"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11124" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the linux_audit_record_event function in OpenSSH 4.3p2, as used on Fedora Core 6 and possibly other systems, allows remote attackers to write arbitrary characters to an audit log via a crafted username.  NOTE: some of these details are obtained from third party information.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3102" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3102"/>
        <description>Unspecified vulnerability in the linux_audit_record_event function in OpenSSH 4.3p2, as used on Fedora Core 6 and possibly other systems, allows remote attackers to write arbitrary characters to an audit log via a crafted username.  NOTE: some of these details are obtained from third party information.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:34.432-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:38.143-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:16.495-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11124 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:57.454-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:40.524-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssh is earlier than 0:3.9p1-8.RHEL4.24" test_ref="oval:org.mitre.oval:tst:34791"/>
            <criterion comment="pam-devel is earlier than 0:0.77-66.23" test_ref="oval:org.mitre.oval:tst:34850"/>
            <criterion comment="pam is earlier than 0:0.77-66.23" test_ref="oval:org.mitre.oval:tst:34954"/>
            <criterion comment="openssh-askpass is earlier than 0:3.9p1-8.RHEL4.24" test_ref="oval:org.mitre.oval:tst:34819"/>
            <criterion comment="openssh-server is earlier than 0:3.9p1-8.RHEL4.24" test_ref="oval:org.mitre.oval:tst:34393"/>
            <criterion comment="openssh-clients is earlier than 0:3.9p1-8.RHEL4.24" test_ref="oval:org.mitre.oval:tst:34713"/>
            <criterion comment="openssh-askpass-gnome is earlier than 0:3.9p1-8.RHEL4.24" test_ref="oval:org.mitre.oval:tst:34877"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssh is earlier than 0:4.3p2-24.el5" test_ref="oval:org.mitre.oval:tst:34395"/>
            <criterion comment="pam-devel is earlier than 0:0.99.6.2-3.26.el5" test_ref="oval:org.mitre.oval:tst:34670"/>
            <criterion comment="pam is earlier than 0:0.99.6.2-3.26.el5" test_ref="oval:org.mitre.oval:tst:34359"/>
            <criterion comment="openssh-askpass is earlier than 0:4.3p2-24.el5" test_ref="oval:org.mitre.oval:tst:34563"/>
            <criterion comment="openssh-server is earlier than 0:4.3p2-24.el5" test_ref="oval:org.mitre.oval:tst:34696"/>
            <criterion comment="openssh-clients is earlier than 0:4.3p2-24.el5" test_ref="oval:org.mitre.oval:tst:34627"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11123" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0827" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0827"/>
        <description>Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:41.528-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:37.846-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:16.235-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11123 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:10:00.489-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:40.213-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="ImageMagick-c++-devel is earlier than 0:5.5.6-7" test_ref="oval:org.mitre.oval:tst:30831"/>
          <criterion comment="ImageMagick is earlier than 0:5.5.6-7" test_ref="oval:org.mitre.oval:tst:31150"/>
          <criterion comment="ImageMagick-perl is earlier than 0:5.5.6-7" test_ref="oval:org.mitre.oval:tst:30857"/>
          <criterion comment="ImageMagick-devel is earlier than 0:5.5.6-7" test_ref="oval:org.mitre.oval:tst:31132"/>
          <criterion comment="ImageMagick-c++ is earlier than 0:5.5.6-7" test_ref="oval:org.mitre.oval:tst:30848"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11122" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the "promiscuous IFRAME access bug," a related issue to CVE-2006-4568.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3089" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3089"/>
        <description>Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the "promiscuous IFRAME access bug," a related issue to CVE-2006-4568.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:56.533-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:37.322-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:15.602-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11122 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:07.298-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:39.469-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:33986"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34827"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34839"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34762"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34814"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34694"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34925"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34684"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34723"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34747"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34968"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34971"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-0.3.el4" test_ref="oval:org.mitre.oval:tst:34888"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34868"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34492"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34775"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.3.el4" test_ref="oval:org.mitre.oval:tst:34828"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34981"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34335"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34957"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34550"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34608"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-3.el5" test_ref="oval:org.mitre.oval:tst:34810"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-3.el5" test_ref="oval:org.mitre.oval:tst:34667"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-3.el5" test_ref="oval:org.mitre.oval:tst:34869"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11121" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers to execute arbitrary code via an XUL document that includes a script from a chrome: URI that points to a fastload file, related to this file's "privilege level."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2802" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2802"/>
        <description>Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers to execute arbitrary code via an XUL document that includes a script from a chrome: URI that points to a fastload file, related to this file's "privilege level."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:45.704-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:36.685-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:14.924-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11121 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:08:46.873-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:38.658-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37286"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37033"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37126"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37105"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37271"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37279"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37060"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37189"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:36476"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:36916"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37236"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37192"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-14.el4" test_ref="oval:org.mitre.oval:tst:36999"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36886"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37331"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36365"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.19.el4" test_ref="oval:org.mitre.oval:tst:37174"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37226"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36766"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37320"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36826"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37274"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-17.el5" test_ref="oval:org.mitre.oval:tst:37107"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:37351"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.16-1.el5" test_ref="oval:org.mitre.oval:tst:37363"/>
            <criterion comment="xulrunner is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:36984"/>
            <criterion comment="devhelp is earlier than 0:0.12-17.el5" test_ref="oval:org.mitre.oval:tst:37234"/>
            <criterion comment="yelp is earlier than 0:2.16.0-19.el5" test_ref="oval:org.mitre.oval:tst:37291"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:36436"/>
            <criterion comment="firefox is earlier than 0:3.0-2.el5" test_ref="oval:org.mitre.oval:tst:36814"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11120" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0084" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0084"/>
        <description>Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:59.278-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:36.453-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:14.659-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11120 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:40.788-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:38.322-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39831"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39445"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40225"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40023"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40307"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1112" version="6" class="vulnerability">
      <metadata>
        <title>HP-UX 11.04 ICMP Source Quench Attack Vulnerability</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0791" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0791"/>
        <description>Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via a blind throughput-reduction attack using spoofed Source Quench packets, aka the "ICMP Source Quench attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-09-22T05:48:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-09-22T20:15:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:12.194-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:15:00.625-04:00">ACCEPTED</status_change>
            <modified comment="Added title. Implemented by Jon Baker of The MITRE Corporation." date="2007-02-13T14:09:00.867-05:00">
              <contributor organization="Security-Database">Nabil Ouchn</contributor>
            </modified>
            <status_change date="2007-02-13T14:10:38.893-05:00">INTERIM</status_change>
            <modified comment="Standardized title." date="2007-02-23T13:00:00.713-05:00">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:41.884-04:00">ACCEPTED</status_change>
            <modified comment="modified patch test to only check for specific patch, checking for supersedence was incorrect and need a language change" date="2007-09-13T00:00:00.000-05:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-09-13T14:05:26.604-04:00">INTERIM</status_change>
            <status_change date="2007-10-02T08:08:07.376-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1112 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:05:23.143-04:00">INTERIM</status_change>
            <status_change date="2011-05-09T04:00:04.824-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.04">
          <criteria operator="AND" comment="700 Series OS Release 11.04">
            <criterion comment="700-series HP" test_ref="oval:org.mitre.oval:tst:3443"/>
            <criterion comment="HP Release B.11.04" test_ref="oval:org.mitre.oval:tst:3294"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 11.04">
            <criterion comment="800-series HP" test_ref="oval:org.mitre.oval:tst:4124"/>
            <criterion comment="HP Release B.11.04" test_ref="oval:org.mitre.oval:tst:3294"/>
          </criteria>
        </criteria>
        <criterion negate="true" comment="Patch PHNE_33427 is installed" test_ref="oval:org.mitre.oval:tst:3468"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11119" version="5" class="vulnerability">
      <metadata>
        <title>ptrace in Linux kernel 2.6.8.1 does not properly verify addresses on the amd64 platform, which allows local users to cause a denial of service (kernel crash).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0756" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0756"/>
        <description>ptrace in Linux kernel 2.6.8.1 does not properly verify addresses on the amd64 platform, which allows local users to cause a denial of service (kernel crash).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:30.835-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:36.010-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:14.231-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11119 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:36.411-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:37.629-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31411"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31953"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31879"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31990"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31485"/>
            <criterion comment="kernel is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32093"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31968"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32148"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31741"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31896"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31885"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31861"/>
            <criterion comment="kernel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31550"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31914"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31924"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:32023"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11117" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in the ia32 compatibility code for the execve system call in Linux kernel 2.4 before 2.4.31 and 2.6 before 2.6.6 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code via a concurrent thread that increments a pointer count after the nargs function has counted the pointers, but before the count is copied from user space to kernel space, which leads to a buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1768" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1768"/>
        <description>Race condition in the ia32 compatibility code for the execve system call in Linux kernel 2.4 before 2.4.31 and 2.6 before 2.6.6 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code via a concurrent thread that increments a pointer count after the nargs function has counted the pointers, but before the count is copied from user space to kernel space, which leads to a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:36.926-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:35.732-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:13.862-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11117 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:35.576-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:37.252-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31411"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31953"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31879"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31990"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31485"/>
          <criterion comment="kernel is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32093"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31968"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32148"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31741"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11116" version="5" class="vulnerability">
      <metadata>
        <title>MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL data home directory, related to incorrect calculation of the mysql_unpacked_real_data_home value.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4098 and CVE-2008-2079.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4030" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4030"/>
        <description>MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL data home directory, related to incorrect calculation of the mysql_unpacked_real_data_home value.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4098 and CVE-2008-2079.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:13.003-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:35.426-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:13.537-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11116 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:16:46.576-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:36.708-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mysql is earlier than 0:4.1.22-2.el4_8.3" test_ref="oval:org.mitre.oval:tst:39929"/>
            <criterion comment="mysql-devel is earlier than 0:4.1.22-2.el4_8.3" test_ref="oval:org.mitre.oval:tst:39985"/>
            <criterion comment="mysql-bench is earlier than 0:4.1.22-2.el4_8.3" test_ref="oval:org.mitre.oval:tst:40068"/>
            <criterion comment="mysql-server is earlier than 0:4.1.22-2.el4_8.3" test_ref="oval:org.mitre.oval:tst:40047"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mysql is earlier than 0:5.0.77-4.el5_4.2" test_ref="oval:org.mitre.oval:tst:40085"/>
            <criterion comment="mysql-devel is earlier than 0:5.0.77-4.el5_4.2" test_ref="oval:org.mitre.oval:tst:39585"/>
            <criterion comment="mysql-test is earlier than 0:5.0.77-4.el5_4.2" test_ref="oval:org.mitre.oval:tst:40252"/>
            <criterion comment="mysql-bench is earlier than 0:5.0.77-4.el5_4.2" test_ref="oval:org.mitre.oval:tst:40320"/>
            <criterion comment="mysql-server is earlier than 0:5.0.77-4.el5_4.2" test_ref="oval:org.mitre.oval:tst:39916"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11115" version="5" class="vulnerability">
      <metadata>
        <title>The SOCKS proxy implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to discover the username of the account that invoked an untrusted (1) applet or (2) Java Web Start application via unspecified vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2671" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2671"/>
        <description>The SOCKS proxy implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to discover the username of the account that invoked an untrusted (1) applet or (2) Java Web Start application via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:05.792-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:35.197-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:13.249-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11115 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:36.944-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:36.374-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38942"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38825"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38972"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38267"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:39037"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11113" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via a URL, which is not properly escaped in the resulting error page.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1177" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1177"/>
        <description>Cross-site scripting (XSS) vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via a URL, which is not properly escaped in the resulting error page.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:41.207-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:34.909-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:12.852-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11113 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:53.695-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:35.986-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="mailman is earlier than 3:2.1.5-25.rhel3" test_ref="oval:org.mitre.oval:tst:31464"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="mailman is earlier than 3:2.1.5-33.rhel4" test_ref="oval:org.mitre.oval:tst:31552"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11111" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font files, a different set of vulnerabilities than CVE-2004-0083 and CVE-2004-0084.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0106" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0106"/>
        <description>Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font files, a different set of vulnerabilities than CVE-2004-0083 and CVE-2004-0084.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:33.384-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:34.376-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:12.288-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11111 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:10:21.530-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:35.380-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30567"/>
          <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30064"/>
          <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30460"/>
          <criterion comment="XFree86-libs is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:29952"/>
          <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30100"/>
          <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30258"/>
          <criterion comment="XFree86-twm is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30560"/>
          <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30714"/>
          <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30316"/>
          <criterion comment="XFree86-doc is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30669"/>
          <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:29808"/>
          <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:29998"/>
          <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30273"/>
          <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30537"/>
          <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:29649"/>
          <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30610"/>
          <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30489"/>
          <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30530"/>
          <criterion comment="XFree86-xdm is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30518"/>
          <criterion comment="XFree86 is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30588"/>
          <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30206"/>
          <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30113"/>
          <criterion comment="XFree86-xfs is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30525"/>
          <criterion comment="XFree86-tools is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30631"/>
          <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30636"/>
          <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30500"/>
          <criterion comment="XFree86-xauth is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30123"/>
          <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30593"/>
          <criterion comment="XFree86-devel is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30503"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11110" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in datatype/smil/common/smlpkt.cpp in smlrender.dll in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10 and 11.0.0, and Helix Player 10.x and 11.0.0 allows remote attackers to execute arbitrary code via an SMIL file with crafted string lengths.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4257" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4257"/>
        <description>Heap-based buffer overflow in datatype/smil/common/smlpkt.cpp in smlrender.dll in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10 and 11.0.0, and Helix Player 10.x and 11.0.0 allows remote attackers to execute arbitrary code via an SMIL file with crafted string lengths.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:24.562-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:34.193-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:12.080-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11110 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:48.546-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:35.072-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="HelixPlayer is earlier than 1:1.0.6-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39912"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11109" version="5" class="vulnerability">
      <metadata>
        <title>Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly sanitize inputs before invoking the execute or system functions, as demonstrated using (1) filetype.vim, (3) xpm.vim, (4) gzip_vim, and (5) netrw.  NOTE: the originally reported version was 7.1.314, but the researcher actually found this set of issues in 7.1.298.  NOTE: the zipplugin issue (originally vector 2 in this identifier) has been subsumed by CVE-2008-3075.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2712"/>
        <description>Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly sanitize inputs before invoking the execute or system functions, as demonstrated using (1) filetype.vim, (3) xpm.vim, (4) gzip_vim, and (5) netrw.  NOTE: the originally reported version was 7.1.314, but the researcher actually found this set of issues in 7.1.298.  NOTE: the zipplugin issue (originally vector 2 in this identifier) has been subsumed by CVE-2008-3075.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:31.199-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:33.704-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:11.611-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11109 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:50.552-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:34.446-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="vim-minimal is earlier than 1:6.3.046-0.30E.11" test_ref="oval:org.mitre.oval:tst:37217"/>
            <criterion comment="vim-enhanced is earlier than 1:6.3.046-0.30E.11" test_ref="oval:org.mitre.oval:tst:37049"/>
            <criterion comment="vim is earlier than 1:6.3.046-0.30E.11" test_ref="oval:org.mitre.oval:tst:37429"/>
            <criterion comment="vim-X11 is earlier than 1:6.3.046-0.30E.11" test_ref="oval:org.mitre.oval:tst:37390"/>
            <criterion comment="vim-common is earlier than 1:6.3.046-0.30E.11" test_ref="oval:org.mitre.oval:tst:37492"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="vim-minimal is earlier than 1:6.3.046-1.el4_7.5z" test_ref="oval:org.mitre.oval:tst:37521"/>
            <criterion comment="vim-enhanced is earlier than 1:6.3.046-1.el4_7.5z" test_ref="oval:org.mitre.oval:tst:37326"/>
            <criterion comment="vim is earlier than 1:6.3.046-1.el4_7.5z" test_ref="oval:org.mitre.oval:tst:36926"/>
            <criterion comment="vim-X11 is earlier than 1:6.3.046-1.el4_7.5z" test_ref="oval:org.mitre.oval:tst:37520"/>
            <criterion comment="vim-common is earlier than 1:6.3.046-1.el4_7.5z" test_ref="oval:org.mitre.oval:tst:37284"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="vim-minimal is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37412"/>
            <criterion comment="vim-enhanced is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37218"/>
            <criterion comment="vim is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37405"/>
            <criterion comment="vim-X11 is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37384"/>
            <criterion comment="vim-common is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37365"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11108" version="5" class="vulnerability">
      <metadata>
        <title>gcc 4.3.x does not generate a cld instruction while compiling functions used for string manipulation such as memcpy and memmove on x86 and i386, which can prevent the direction flag (DF) from being reset in violation of ABI conventions and cause data to be copied in the wrong direction during signal handling in the Linux kernel, which might allow context-dependent attackers to trigger memory corruption. NOTE: this issue was originally reported for CPU consumption in SBCL.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1367" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1367"/>
        <description>gcc 4.3.x does not generate a cld instruction while compiling functions used for string manipulation such as memcpy and memmove on x86 and i386, which can prevent the direction flag (DF) from being reset in violation of ABI conventions and cause data to be copied in the wrong direction during signal handling in the Linux kernel, which might allow context-dependent attackers to trigger memory corruption. NOTE: this issue was originally reported for CPU consumption in SBCL.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:06.236-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:33.076-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:10.892-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11108 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:24.097-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:33.596-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:35915"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:35794"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36513"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36264"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36161"/>
            <criterion comment="kernel is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36518"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36597"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36612"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36171"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36972"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36412"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36840"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36741"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36936"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36433"/>
            <criterion comment="kernel is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36961"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36949"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36894"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36367"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:37020"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36107"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36600"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36529"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36526"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36442"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36238"/>
            <criterion comment="kernel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36463"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36480"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:35876"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36532"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36278"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:35724"/>
            <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36560"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11107" version="5" class="vulnerability">
      <metadata>
        <title>The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0206" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0206"/>
        <description>The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:04.796-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:32.717-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:10.496-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11107 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:28.803-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:33.152-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.27" test_ref="oval:org.mitre.oval:tst:30818"/>
            <criterion comment="xpdf is earlier than 1:2.02-9.6" test_ref="oval:org.mitre.oval:tst:30695"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.27" test_ref="oval:org.mitre.oval:tst:31392"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.27" test_ref="oval:org.mitre.oval:tst:31250"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gpdf is earlier than 0:2.8.2-4.3" test_ref="oval:org.mitre.oval:tst:30790"/>
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.6" test_ref="oval:org.mitre.oval:tst:30919"/>
            <criterion comment="xpdf is earlier than 1:3.00-11.5" test_ref="oval:org.mitre.oval:tst:30331"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.6" test_ref="oval:org.mitre.oval:tst:31056"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.6" test_ref="oval:org.mitre.oval:tst:31093"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11105" version="5" class="vulnerability">
      <metadata>
        <title>Firefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell metacharacters in a URL that is provided to the browser on the command line, which is sent unfiltered to bash.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2968" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2968"/>
        <description>Firefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell metacharacters in a URL that is provided to the browser on the command line, which is sent unfiltered to bash.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:02.894-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:32.517-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:09.608-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11105 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:46.720-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:32.819-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="firefox is earlier than 0:1.0.7-1.4.1" test_ref="oval:org.mitre.oval:tst:32147"/>
          <criterion comment="thunderbird is earlier than 0:1.0.7-1.4.1" test_ref="oval:org.mitre.oval:tst:31477"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11104" version="5" class="vulnerability">
      <metadata>
        <title>crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink.  NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1038" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1038"/>
        <description>crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink.  NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:22.616-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:32.296-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:09.372-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11104 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:36.701-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:32.347-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="vixie-cron is earlier than 0:4.1-10.EL3" test_ref="oval:org.mitre.oval:tst:32494"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="vixie-cron is earlier than 4:4.1-36.EL4" test_ref="oval:org.mitre.oval:tst:31057"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11103" version="5" class="vulnerability">
      <metadata>
        <title>The ext4_decode_error function in fs/ext4/super.c in the ext4 filesystem in the Linux kernel before 2.6.32 allows user-assisted remote attackers to cause a denial of service (NULL pointer dereference), and possibly have unspecified other impact, via a crafted read-only filesystem that lacks a journal.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4308" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4308"/>
        <description>The ext4_decode_error function in fs/ext4/super.c in the ext4 filesystem in the Linux kernel before 2.6.32 allows user-assisted remote attackers to cause a denial of service (NULL pointer dereference), and possibly have unspecified other impact, via a crafted read-only filesystem that lacks a journal.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:58.973-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:31.954-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:08.991-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11103 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:38.469-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:31.883-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40228"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40098"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40231"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:39918"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:39938"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40088"/>
          <criterion comment="kernel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40237"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:39997"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40240"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40352"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:39930"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40055"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11102" version="3" class="vulnerability">
      <metadata>
        <title>Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create arbitrary files via the writeManifest method in the CacheEntry class, aka CR 6703909.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3112"/>
        <description>Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create arbitrary files via the writeManifest method in the CacheEntry class, aka CR 6703909.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:13.900-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:31.535-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:08.550-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37481"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36778"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37475"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37445"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37487"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37483"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.6.0-sun-devel is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36649"/>
            <criterion comment="java-1.6.0-sun is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37229"/>
            <criterion comment="java-1.6.0-sun-demo is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37509"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37426"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37368"/>
            <criterion comment="java-1.6.0-sun-src is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37035"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37181"/>
            <criterion comment="java-1.6.0-sun-plugin is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37441"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37315"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37359"/>
            <criterion comment="java-1.6.0-sun-jdbc is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37490"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37461"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11101" version="5" class="vulnerability">
      <metadata>
        <title>traps.c in the Linux kernel 2.6.x and 2.4.x executes stack segment faults on an exception stack, which allows local users to cause a denial of service (oops and stack fault exception).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1767" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1767"/>
        <description>traps.c in the Linux kernel 2.6.x and 2.4.x executes stack segment faults on an exception stack, which allows local users to cause a denial of service (oops and stack fault exception).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:06.813-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:31.256-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:08.231-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11101 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:53.847-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:31.520-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31411"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31953"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31879"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31990"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31485"/>
          <criterion comment="kernel is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32093"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31968"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32148"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31741"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11100" version="5" class="vulnerability">
      <metadata>
        <title>The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1931" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1931"/>
        <description>The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:39.695-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:30.932-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:07.915-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11100 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:16:44.325-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:31.157-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="ruby-mode is earlier than 0:1.8.1-7.EL4.3" test_ref="oval:org.mitre.oval:tst:32572"/>
          <criterion comment="ruby-docs is earlier than 0:1.8.1-7.EL4.3" test_ref="oval:org.mitre.oval:tst:32552"/>
          <criterion comment="ruby-devel is earlier than 0:1.8.1-7.EL4.3" test_ref="oval:org.mitre.oval:tst:32367"/>
          <criterion comment="ruby-tcltk is earlier than 0:1.8.1-7.EL4.3" test_ref="oval:org.mitre.oval:tst:32099"/>
          <criterion comment="ruby is earlier than 0:1.8.1-7.EL4.3" test_ref="oval:org.mitre.oval:tst:32685"/>
          <criterion comment="irb is earlier than 0:1.8.1-7.EL4.3" test_ref="oval:org.mitre.oval:tst:32714"/>
          <criterion comment="ruby-libs is earlier than 0:1.8.1-7.EL4.3" test_ref="oval:org.mitre.oval:tst:32276"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1110" version="1" class="vulnerability">
      <metadata>
        <title>Kerberos V5 Null Pointer DoS Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>Solaris Enterprise Authentication Mechanism (SEAM)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0058" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0058"/>
        <description>MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows remote authenticated attackers to cause a denial of service (crash) on KDCs within the same realm via a certain protocol request that causes a null dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-02-01T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-02-01T08:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="OR" comment="Solaris 7 and Solaris Enterprise Authentication Mechanism OR Solaris 8 or 9 installed">
            <criteria operator="AND" comment="Solaris 7 AND Solaris Enterprise Authentication Mechanism installed">
              <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
              <criteria operator="OR" comment="Solaris Enterprise Authentication Mechanism (ANY SUNWkr5sl/SUNWkr5sv/SUNWkrgdo/SUNWkrggl)">
                <criterion comment="Sun Enterprise Authentication Mechanism (SEAM, SUNWkr5sv) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1161"/>
                <criterion comment=" Sun Enterprise Authentication Mechanism (SEAM, SUNWkr5sl) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1160"/>
                <criterion comment=" Sun Enterprise Authentication Mechanism (SEAM, SUNWkrgdo) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1159"/>
                <criterion comment=" Sun Enterprise Authentication Mechanism (SEAM, SUNWkrggl) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1158"/>
              </criteria>
            </criteria>
            <criteria operator="OR" comment="Solaris 8 or 9 installed">
              <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
              <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
            </criteria>
          </criteria>
          <criterion comment="Patch 112536-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1157"/>
          <criterion comment="Patch 112908-04 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1156"/>
          <criterion comment="Patch 112237-07 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1155"/>
          <criterion comment="Patch 112390-07 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1154"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/etc/krb5/krb5.conf is configured with a kerberos domain" negate="false" test_ref="oval:org.mitre.oval:tst:1153"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:111" version="2" class="vulnerability">
      <metadata>
        <title>Ximian Evolution MIME-encoded Image Buffer Overflow</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Ximian Evolution</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0130" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0130"/>
        <description>The handle_image function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier does not properly escape HTML characters, which allows remote attackers inject arbitrary data and HTML via a MIME Content-ID header in a MIME-encoded image.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-11T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:45.083-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:14.348-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="evolution version is less than 1.2.2-5" negate="false" test_ref="oval:org.mitre.oval:tst:2939"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11099" version="5" class="vulnerability">
      <metadata>
        <title>GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3490" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3490"/>
        <description>GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:35.586-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:30.680-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:07.633-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11099 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:30.522-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:30.659-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="wget is earlier than 0:1.10.2-0.30E.1" test_ref="oval:org.mitre.oval:tst:39672"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="wget is earlier than 0:1.10.2-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39136"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="wget is earlier than 0:1.11.4-2.el5_4.1" test_ref="oval:org.mitre.oval:tst:39024"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11098" version="5" class="vulnerability">
      <metadata>
        <title>Directory traversal vulnerability in extract.c in star before 1.5a84 allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR archive.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4134" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4134"/>
        <description>Directory traversal vulnerability in extract.c in star before 1.5a84 allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR archive.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:29.140-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:30.426-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:07.360-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11098 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:35.791-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:30.216-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="star is earlier than 0:1.5a08-5" test_ref="oval:org.mitre.oval:tst:35154"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="star is earlier than 0:1.5a25-8" test_ref="oval:org.mitre.oval:tst:34243"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="star is earlier than 0:1.5a75-2" test_ref="oval:org.mitre.oval:tst:34991"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11097" version="5" class="vulnerability">
      <metadata>
        <title>Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user into using the "Set As Wallpaper" (in Firefox) or "Set as Background" (in Netscape) context menu on an image URL that is really a javascript: URL with an eval statement, aka "Firewalling."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2262" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2262"/>
        <description>Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user into using the "Set As Wallpaper" (in Firefox) or "Set as Background" (in Netscape) context menu on an image URL that is really a javascript: URL with an eval statement, aka "Firewalling."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:11.330-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:30.228-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:07.154-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11097 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:26.706-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:29.864-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="firefox is earlier than 0:1.0.6-1.4.1" test_ref="oval:org.mitre.oval:tst:32167"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11095" version="5" class="vulnerability">
      <metadata>
        <title>The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly use the pit_state data structure, which allows guest OS users to cause a denial of service (host OS crash or hang) by attempting to read the /dev/port file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0309" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0309"/>
        <description>The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly use the pit_state data structure, which allows guest OS users to cause a denial of service (host OS crash or hang) by attempting to read the /dev/port file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:31.375-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:29.970-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:06.860-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11095 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:40.163-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:29.534-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kmod-kvm is earlier than 0:83-105.el5_4.22" test_ref="oval:org.mitre.oval:tst:39907"/>
          <criterion comment="kvm-qemu-img is earlier than 0:83-105.el5_4.22" test_ref="oval:org.mitre.oval:tst:39965"/>
          <criterion comment="kvm-tools is earlier than 0:83-105.el5_4.22" test_ref="oval:org.mitre.oval:tst:40075"/>
          <criterion comment="kvm is earlier than 0:83-105.el5_4.22" test_ref="oval:org.mitre.oval:tst:39881"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11094" version="5" class="vulnerability">
      <metadata>
        <title>The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring (1) Options Includes, (2) Options +Includes, or (3) Options +IncludesNOEXEC in a .htaccess file, and then inserting an exec element in a .shtml file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1195" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1195"/>
        <description>The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring (1) Options Includes, (2) Options +Includes, or (3) Options +IncludesNOEXEC in a .htaccess file, and then inserting an exec element in a .shtml file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:21.254-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:29.754-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:06.620-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11094 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:51.011-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:29.205-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="httpd-manual is earlier than 0:2.2.3-22.el5_3.1" test_ref="oval:org.mitre.oval:tst:38708"/>
          <criterion comment="httpd-devel is earlier than 0:2.2.3-22.el5_3.1" test_ref="oval:org.mitre.oval:tst:38006"/>
          <criterion comment="mod_ssl is earlier than 0:2.2.3-22.el5_3.1" test_ref="oval:org.mitre.oval:tst:38104"/>
          <criterion comment="httpd is earlier than 0:2.2.3-22.el5_3.1" test_ref="oval:org.mitre.oval:tst:38358"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11093" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1773" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1773"/>
        <description>Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:10.690-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:29.533-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:06.360-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11093 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:26.394-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:28.821-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="sharutils is earlier than 0:4.2.1-16.2" test_ref="oval:org.mitre.oval:tst:31587"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="sharutils is earlier than 0:4.2.1-22.2" test_ref="oval:org.mitre.oval:tst:31528"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11092" version="5" class="vulnerability">
      <metadata>
        <title>The zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attackers to cause a denial of service (infinite loop) by unserializing certain integer expressions, which only cause 32-bit arguments to be used after the check for a negative value, as demonstrated by an "a:2147483649:{" argument.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0988"/>
        <description>The zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attackers to cause a denial of service (infinite loop) by unserializing certain integer expressions, which only cause 32-bit arguments to be used after the check for a negative value, as demonstrated by an "a:2147483649:{" argument.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:34.294-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:28.655-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:05.536-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11092 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:21.597-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:27.897-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33459"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33371"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33748"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33090"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33419"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33665"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33475"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33282"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33636"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33548"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33156"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33407"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33562"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33500"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33725"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33105"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33501"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33691"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33662"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33087"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33640"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:32784"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33240"/>
            <criterion comment="php-common is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33527"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33617"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33561"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33385"/>
            <criterion comment="php is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33615"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33526"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33747"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33735"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33403"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33686"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33502"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33666"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33508"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33652"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33676"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33784"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33706"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11091" version="5" class="vulnerability">
      <metadata>
        <title>OpenOffice.org 2.x and 3.0 before 3.2.1 allows user-assisted remote attackers to bypass Python macro security restrictions and execute arbitrary Python code via a crafted OpenDocument Text (ODT) file that triggers code execution when the macro directory structure is previewed.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0395" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0395"/>
        <description>OpenOffice.org 2.x and 3.0 before 3.2.1 allows user-assisted remote attackers to bypass Python macro security restrictions and execute arbitrary Python code via a crafted OpenDocument Text (ODT) file that triggers code execution when the macro directory structure is previewed.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:54.795-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:26.620-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:03.444-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11091 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:03.299-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:25.583-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40734"/>
            <criterion comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40777"/>
            <criterion comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40693"/>
            <criterion comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40128"/>
            <criterion comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40760"/>
            <criterion comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40400"/>
            <criterion comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40127"/>
            <criterion comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40611"/>
            <criterion comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40762"/>
            <criterion comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:39852"/>
            <criterion comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40397"/>
            <criterion comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40779"/>
            <criterion comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40506"/>
            <criterion comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40652"/>
            <criterion comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40384"/>
            <criterion comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40416"/>
            <criterion comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:39970"/>
            <criterion comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40764"/>
            <criterion comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40757"/>
            <criterion comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40750"/>
            <criterion comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40647"/>
            <criterion comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40730"/>
            <criterion comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40460"/>
            <criterion comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40680"/>
            <criterion comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40656"/>
            <criterion comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40735"/>
            <criterion comment="openoffice.org2 is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40567"/>
            <criterion comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40690"/>
            <criterion comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:39981"/>
            <criterion comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40634"/>
            <criterion comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40375"/>
            <criterion comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40471"/>
            <criterion comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40748"/>
            <criterion comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40382"/>
            <criterion comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40355"/>
            <criterion comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:39994"/>
            <criterion comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40569"/>
            <criterion comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40806"/>
            <criterion comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40544"/>
            <criterion comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40642"/>
            <criterion comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40018"/>
            <criterion comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40489"/>
            <criterion comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40298"/>
            <criterion comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:39801"/>
            <criterion comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40608"/>
            <criterion comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40702"/>
            <criterion comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40482"/>
            <criterion comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40595"/>
            <criterion comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40610"/>
            <criterion comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40752"/>
            <criterion comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40410"/>
            <criterion comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40629"/>
            <criterion comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40518"/>
            <criterion comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40507"/>
            <criterion comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:39822"/>
            <criterion comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40613"/>
            <criterion comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40769"/>
            <criterion comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40288"/>
            <criterion comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" test_ref="oval:org.mitre.oval:tst:40778"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-langpack-sk_SK is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40536"/>
            <criterion comment="openoffice.org-langpack-zu_ZA is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40230"/>
            <criterion comment="openoffice.org-langpack-pa_IN is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40632"/>
            <criterion comment="openoffice.org-langpack-hi_IN is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40739"/>
            <criterion comment="openoffice.org-langpack-et_EE is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40728"/>
            <criterion comment="openoffice.org-langpack-kn_IN is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40741"/>
            <criterion comment="openoffice.org is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40522"/>
            <criterion comment="openoffice.org-langpack-zh_TW is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40718"/>
            <criterion comment="openoffice.org-writer is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40407"/>
            <criterion comment="openoffice.org-langpack-ve_ZA is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40113"/>
            <criterion comment="openoffice.org-langpack-ga_IE is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40685"/>
            <criterion comment="openoffice.org-langpack-ta_IN is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40740"/>
            <criterion comment="openoffice.org-langpack-ko_KR is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40733"/>
            <criterion comment="openoffice.org-langpack-or_IN is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40742"/>
            <criterion comment="openoffice.org-langpack-da_DK is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40583"/>
            <criterion comment="openoffice.org-langpack-sr_CS is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40420"/>
            <criterion comment="openoffice.org-langpack-pl_PL is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40691"/>
            <criterion comment="openoffice.org-langpack-fr is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40334"/>
            <criterion comment="openoffice.org-langpack-ts_ZA is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40447"/>
            <criterion comment="openoffice.org-javafilter is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40590"/>
            <criterion comment="openoffice.org-langpack-as_IN is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40383"/>
            <criterion comment="openoffice.org-testtools is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40394"/>
            <criterion comment="openoffice.org-langpack-hr_HR is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40568"/>
            <criterion comment="openoffice.org-langpack-de is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40599"/>
            <criterion comment="openoffice.org-emailmerge is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40411"/>
            <criterion comment="openoffice.org-xsltfilter is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40036"/>
            <criterion comment="openoffice.org-langpack-tn_ZA is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40346"/>
            <criterion comment="openoffice.org-langpack-te_IN is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40708"/>
            <criterion comment="openoffice.org-langpack-sv is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40499"/>
            <criterion comment="openoffice.org-base is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40678"/>
            <criterion comment="openoffice.org-langpack-ca_ES is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40579"/>
            <criterion comment="openoffice.org-langpack-nr_ZA is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40121"/>
            <criterion comment="openoffice.org-core is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40688"/>
            <criterion comment="openoffice.org-langpack-nl is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40768"/>
            <criterion comment="openoffice.org-langpack-ur is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40321"/>
            <criterion comment="openoffice.org-langpack-nn_NO is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40621"/>
            <criterion comment="openoffice.org-langpack-ar is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40618"/>
            <criterion comment="openoffice.org-langpack-ja_JP is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40713"/>
            <criterion comment="openoffice.org-langpack-gu_IN is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40633"/>
            <criterion comment="openoffice.org-langpack-tr_TR is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40649"/>
            <criterion comment="openoffice.org-langpack-eu_ES is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40041"/>
            <criterion comment="openoffice.org-langpack-fi_FI is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40191"/>
            <criterion comment="openoffice.org-graphicfilter is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40457"/>
            <criterion comment="openoffice.org-pyuno is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40412"/>
            <criterion comment="openoffice.org-langpack-ml_IN is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40594"/>
            <criterion comment="openoffice.org-langpack-gl_ES is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40659"/>
            <criterion comment="openoffice.org-sdk-doc is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40478"/>
            <criterion comment="openoffice.org-langpack-zh_CN is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40715"/>
            <criterion comment="openoffice.org-langpack-xh_ZA is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40571"/>
            <criterion comment="openoffice.org-langpack-it is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40614"/>
            <criterion comment="openoffice.org-sdk is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40681"/>
            <criterion comment="openoffice.org-langpack-es is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40623"/>
            <criterion comment="openoffice.org-langpack-nb_NO is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40463"/>
            <criterion comment="openoffice.org-langpack-sl_SI is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40587"/>
            <criterion comment="openoffice.org-draw is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40454"/>
            <criterion comment="openoffice.org-langpack-nso_ZA is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40602"/>
            <criterion comment="openoffice.org-langpack-ms_MY is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40564"/>
            <criterion comment="openoffice.org-langpack-el_GR is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40612"/>
            <criterion comment="openoffice.org-langpack-hu_HU is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40051"/>
            <criterion comment="openoffice.org-langpack-ss_ZA is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40578"/>
            <criterion comment="openoffice.org-langpack-bn is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40575"/>
            <criterion comment="openoffice.org-langpack-he_IL is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40707"/>
            <criterion comment="openoffice.org-langpack-pt_PT is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40662"/>
            <criterion comment="openoffice.org-langpack-lt_LT is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40585"/>
            <criterion comment="openoffice.org-langpack-af_ZA is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40091"/>
            <criterion comment="openoffice.org-langpack-bg_BG is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40650"/>
            <criterion comment="openoffice.org-calc is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40531"/>
            <criterion comment="openoffice.org-langpack-cs_CZ is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40205"/>
            <criterion comment="openoffice.org-ure is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40774"/>
            <criterion comment="openoffice.org-langpack-cy_GB is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40434"/>
            <criterion comment="openoffice.org-langpack-mr_IN is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:39780"/>
            <criterion comment="openoffice.org-headless is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40584"/>
            <criterion comment="openoffice.org-langpack-th_TH is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:39884"/>
            <criterion comment="openoffice.org-langpack-pt_BR is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40706"/>
            <criterion comment="openoffice.org-langpack-ru is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40472"/>
            <criterion comment="openoffice.org-math is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40645"/>
            <criterion comment="openoffice.org-impress is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40692"/>
            <criterion comment="openoffice.org-langpack-st_ZA is earlier than 1:3.1.1-19.5.el5_5.1" test_ref="oval:org.mitre.oval:tst:40388"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11090" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla allows remote attackers to cause Mozilla to open a URI as a different MIME type than expected via a null character (%00) in an FTP URI.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0760" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0760"/>
        <description>Mozilla allows remote attackers to cause Mozilla to open a URI as a different MIME type than expected via a null character (%00) in an FTP URI.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:33.153-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:26.289-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:03.011-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11090 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:30.763-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:25.159-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mozilla-js-debugger is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30799"/>
          <criterion comment="mozilla is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30278"/>
          <criterion comment="mozilla-chat is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30755"/>
          <criterion comment="mozilla-mail is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30570"/>
          <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30230"/>
          <criterion comment="mozilla-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30288"/>
          <criterion comment="mozilla-nss is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30323"/>
          <criterion comment="mozilla-nss-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30339"/>
          <criterion comment="mozilla-nspr is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30813"/>
          <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30660"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11089" version="5" class="vulnerability">
      <metadata>
        <title>The do_insn_fetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20091125 tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to cause a denial of service (increased scheduling latency) on the host OS via unspecified manipulations related to SMP support.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4031" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4031"/>
        <description>The do_insn_fetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20091125 tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to cause a denial of service (increased scheduling latency) on the host OS via unspecified manipulations related to SMP support.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:20.327-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:26.064-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:02.673-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11089 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:18.575-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:24.775-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kmod-kvm is earlier than 0:83-105.el5_4.13" test_ref="oval:org.mitre.oval:tst:39486"/>
          <criterion comment="kvm-qemu-img is earlier than 0:83-105.el5_4.13" test_ref="oval:org.mitre.oval:tst:39692"/>
          <criterion comment="kvm-tools is earlier than 0:83-105.el5_4.13" test_ref="oval:org.mitre.oval:tst:39425"/>
          <criterion comment="kvm is earlier than 0:83-105.el5_4.13" test_ref="oval:org.mitre.oval:tst:39465"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11088" version="5" class="vulnerability">
      <metadata>
        <title>LHA 1.14 and earlier allows attackers to execute arbitrary commands via a directory with shell metacharacters in its name.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0745" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0745"/>
        <description>LHA 1.14 and earlier allows attackers to execute arbitrary commands via a directory with shell metacharacters in its name.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:05.523-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:25.818-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:02.468-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11088 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:09:05.218-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:24.510-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="lha is earlier than 0:1.14i-10.4" test_ref="oval:org.mitre.oval:tst:29793"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11087" version="3" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 5 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_10 and earlier 1.4.x versions, and SDK and JRE 1.3.1_18 and earlier allows attackers to use untrusted applets to "access data in other applets," aka "The first issue."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6737" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6737"/>
        <description>Unspecified vulnerability in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 5 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_10 and earlier 1.4.x versions, and SDK and JRE 1.3.1_18 and earlier allows attackers to use untrusted applets to "access data in other applets," aka "The first issue."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:22.815-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:25.390-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:01.963-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criteria operator="OR">
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33298"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33521"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33376"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33428"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33515"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33417"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:32803"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33585"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33064"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33481"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33563"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33479"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33472"/>
            <criterion comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:32903"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33667"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33199"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33754"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33366"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33073"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33547"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11086" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to bypass the memory_limit restriction.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4486" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4486"/>
        <description>Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to bypass the memory_limit restriction.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:45.691-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:24.909-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:01.487-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11086 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:33.983-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:23.846-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32928"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32870"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32829"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32485"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32258"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32491"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32860"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32985"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32962"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32808"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32175"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32788"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:33059"/>
            <criterion comment="php is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32754"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32876"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:33047"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32483"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:33052"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32964"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32700"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32272"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11085" version="5" class="vulnerability">
      <metadata>
        <title>Memory leak in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of service (memory consumption) by repeatedly calling the ip_cmsg_send function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1335" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1335"/>
        <description>Memory leak in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of service (memory consumption) by repeatedly calling the ip_cmsg_send function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:43.736-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:24.631-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:01.172-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11085 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:36.291-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:23.450-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:31101"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30944"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30205"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30752"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30999"/>
          <criterion comment="kernel is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30940"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:31177"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30903"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30786"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11084" version="5" class="vulnerability">
      <metadata>
        <title>PHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary data sent to a script that processes user input in the html_entity_decode function and sends the encoded results back to the client, aka a "binary safety" issue.  NOTE: this issue has been referred to as a "memory leak," but it is an information leak that discloses memory contents.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1490" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1490"/>
        <description>PHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary data sent to a script that processes user input in the html_entity_decode function and sends the encoded results back to the client, aka a "binary safety" issue.  NOTE: this issue has been referred to as a "memory leak," but it is an information leak that discloses memory contents.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:47.600-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:24.182-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:00.664-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11084 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:11.970-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:22.811-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32579"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32613"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32711"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32425"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32166"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32107"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32695"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:31742"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32509"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32606"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32503"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32185"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32639"/>
            <criterion comment="php is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32546"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32577"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32236"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32578"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32591"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32707"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32547"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:31727"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11083" version="5" class="vulnerability">
      <metadata>
        <title>The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-by-hop IPv6 extended header, which allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted IPv6 packet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4567" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4567"/>
        <description>The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-by-hop IPv6 extended header, which allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted IPv6 packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:39.795-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:23.796-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:08:00.307-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11083 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:39.401-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:22.374-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39645"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39650"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39813"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39095"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39770"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39099"/>
          <criterion comment="kernel is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39700"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39408"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39590"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39719"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39789"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:38905"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11082" version="5" class="vulnerability">
      <metadata>
        <title>OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to conduct unauthorized activities via an OpenOffice document with a malicious BASIC macro, which is executed without prompting the user.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2198" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2198"/>
        <description>OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to conduct unauthorized activities via an OpenOffice document with a malicious BASIC macro, which is executed without prompting the user.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:45.260-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:23.521-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:59.934-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11082 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:23.296-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:21.883-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-34.2.0.EL3" test_ref="oval:org.mitre.oval:tst:32211"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.2-34.2.0.EL3" test_ref="oval:org.mitre.oval:tst:32773"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-34.2.0.EL3" test_ref="oval:org.mitre.oval:tst:31834"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-34.6.0.EL4" test_ref="oval:org.mitre.oval:tst:32763"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.2-34.6.0.EL4" test_ref="oval:org.mitre.oval:tst:32657"/>
            <criterion comment="openoffice.org-kde is earlier than 0:1.1.2-34.6.0.EL4" test_ref="oval:org.mitre.oval:tst:32835"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-34.6.0.EL4" test_ref="oval:org.mitre.oval:tst:32791"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11081" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the kimgio library for KDE 3.4.0 allows remote attackers to execute arbitrary code via a crafted PCX image file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1046" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1046"/>
        <description>Buffer overflow in the kimgio library for KDE 3.4.0 allows remote attackers to execute arbitrary code via a crafted PCX image file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:08.164-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:23.325-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:59.717-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11081 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:09.187-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:21.574-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kdelibs is earlier than 6:3.3.1-3.10" test_ref="oval:org.mitre.oval:tst:31670"/>
          <criterion comment="kdelibs-devel is earlier than 6:3.3.1-3.10" test_ref="oval:org.mitre.oval:tst:31753"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11080" version="5" class="vulnerability">
      <metadata>
        <title>The garbage-collection implementation in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 sets an element's owner document to null in unspecified circumstances, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted event handler, related to an incorrect context for this event handler.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1838" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1838"/>
        <description>The garbage-collection implementation in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 sets an element's owner document to null in unspecified circumstances, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted event handler, related to an incorrect context for this event handler.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:25.004-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:22.776-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:59.180-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11080 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:42.859-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:20.800-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38336"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38452"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38736"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38742"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38069"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38264"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38724"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38791"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:38432"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.38.el3" test_ref="oval:org.mitre.oval:tst:37902"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38793"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-23.el4" test_ref="oval:org.mitre.oval:tst:38562"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38213"/>
            <criterion comment="firefox is earlier than 0:3.0.11-4.el4" test_ref="oval:org.mitre.oval:tst:38689"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38280"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38531"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38828"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-43.el4_8" test_ref="oval:org.mitre.oval:tst:38655"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38771"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38371"/>
            <criterion comment="firefox is earlier than 0:3.0.11-2.el5_3" test_ref="oval:org.mitre.oval:tst:38682"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.22-2.el5_3" test_ref="oval:org.mitre.oval:tst:38801"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38718"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11079" version="5" class="vulnerability">
      <metadata>
        <title>The ASN.1 parser (pluto/asn1.c, libstrongswan/asn1/asn1.c, libstrongswan/asn1/asn1_parser.c) in (a) strongSwan 2.8 before 2.8.10, 4.2 before 4.2.16, and 4.3 before 4.3.2; and (b) openSwan 2.6 before 2.6.22 and 2.4 before 2.4.15 allows remote attackers to cause a denial of service (pluto IKE daemon crash) via an X.509 certificate with (1) crafted Relative Distinguished Names (RDNs), (2) a crafted UTCTIME string, or (3) a crafted GENERALIZEDTIME string.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2185" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2185"/>
        <description>The ASN.1 parser (pluto/asn1.c, libstrongswan/asn1/asn1.c, libstrongswan/asn1/asn1_parser.c) in (a) strongSwan 2.8 before 2.8.10, 4.2 before 4.2.16, and 4.3 before 4.3.2; and (b) openSwan 2.6 before 2.6.22 and 2.4 before 2.4.15 allows remote attackers to cause a denial of service (pluto IKE daemon crash) via an X.509 certificate with (1) crafted Relative Distinguished Names (RDNs), (2) a crafted UTCTIME string, or (3) a crafted GENERALIZEDTIME string.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:31.706-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:22.580-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:58.901-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11079 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:48.735-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:20.489-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="openswan is earlier than 0:2.6.14-1.el5_3.3" test_ref="oval:org.mitre.oval:tst:38779"/>
          <criterion comment="openswan-doc is earlier than 0:2.6.14-1.el5_3.3" test_ref="oval:org.mitre.oval:tst:38863"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11078" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to execute arbitrary code via "XPCNativeWrapper pollution."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1233" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1233"/>
        <description>Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to execute arbitrary code via "XPCNativeWrapper pollution."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:01.629-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:21.996-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:58.344-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11078 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:31.792-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:19.737-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36547"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36570"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36574"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:35661"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36605"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:35672"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:35874"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36533"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36355"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36379"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36587"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:35752"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-10.el4" test_ref="oval:org.mitre.oval:tst:36259"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36586"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36333"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36500"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.14.el4" test_ref="oval:org.mitre.oval:tst:35884"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36540"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36602"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36557"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36511"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36221"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-14.el5_1" test_ref="oval:org.mitre.oval:tst:36566"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-14.el5_1" test_ref="oval:org.mitre.oval:tst:36305"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-11.el5_1" test_ref="oval:org.mitre.oval:tst:36619"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11077" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to execute arbitrary code by appending an SVG comment DOM node to another type of document, which triggers memory corruption.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6504" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6504"/>
        <description>Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to execute arbitrary code by appending an SVG comment DOM node to another type of document, which triggers memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:51.318-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:21.488-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:57.784-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11077 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:54.549-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:19.099-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:32785"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33227"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33266"/>
            <criterion comment="seamonkey is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33146"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:32352"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33183"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33095"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33300"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:32996"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33263"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.6.el4" test_ref="oval:org.mitre.oval:tst:33195"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33236"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33229"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.9-0.1.el4" test_ref="oval:org.mitre.oval:tst:32844"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33273"/>
            <criterion comment="seamonkey is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33259"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33239"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.6.el4" test_ref="oval:org.mitre.oval:tst:33284"/>
            <criterion comment="firefox is earlier than 0:1.5.0.9-0.1.el4" test_ref="oval:org.mitre.oval:tst:32815"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33153"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33015"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33251"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33336"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:32408"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11076" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in the rmtree function in File::Path 1.08 and 2.07 (lib/File/Path.pm) in Perl 5.8.8 and 5.10.0 allows local users to create arbitrary setuid binaries via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error related to CVE-2005-0448.  It is different from CVE-2008-5303 due to affected versions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5302" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5302"/>
        <description>Race condition in the rmtree function in File::Path 1.08 and 2.07 (lib/File/Path.pm) in Perl 5.8.8 and 5.10.0 allows local users to create arbitrary setuid binaries via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error related to CVE-2005-0448.  It is different from CVE-2008-5303 due to affected versions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:20.491-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:21.285-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:57.568-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11076 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:48.219-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:18.738-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="perl-suidperl is earlier than 4:5.8.8-32.el5_5.1" test_ref="oval:org.mitre.oval:tst:40657"/>
          <criterion comment="perl is earlier than 4:5.8.8-32.el5_5.1" test_ref="oval:org.mitre.oval:tst:39926"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11075" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0304" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0304"/>
        <description>Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:42.281-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:21.009-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:57.320-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11075 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:23:58.786-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:18.352-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="thunderbird is earlier than 0:1.5.0.12-8.el4" test_ref="oval:org.mitre.oval:tst:36202"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="thunderbird is earlier than 0:1.5.0.12-8.el5" test_ref="oval:org.mitre.oval:tst:35675"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11074" version="5" class="vulnerability">
      <metadata>
        <title>Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0058" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0058"/>
        <description>Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:48.506-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:20.716-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:56.944-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11074 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:26.762-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:17.848-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="sendmail is earlier than 0:8.12.11-4.RHEL3.4" test_ref="oval:org.mitre.oval:tst:32623"/>
            <criterion comment="sendmail-doc is earlier than 0:8.12.11-4.RHEL3.4" test_ref="oval:org.mitre.oval:tst:32643"/>
            <criterion comment="sendmail-cf is earlier than 0:8.12.11-4.RHEL3.4" test_ref="oval:org.mitre.oval:tst:31735"/>
            <criterion comment="sendmail-devel is earlier than 0:8.12.11-4.RHEL3.4" test_ref="oval:org.mitre.oval:tst:32467"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="sendmail is earlier than 0:8.13.1-3.RHEL4.3" test_ref="oval:org.mitre.oval:tst:32556"/>
            <criterion comment="sendmail-doc is earlier than 0:8.13.1-3.RHEL4.3" test_ref="oval:org.mitre.oval:tst:32379"/>
            <criterion comment="sendmail-cf is earlier than 0:8.13.1-3.RHEL4.3" test_ref="oval:org.mitre.oval:tst:32409"/>
            <criterion comment="sendmail-devel is earlier than 0:8.13.1-3.RHEL4.3" test_ref="oval:org.mitre.oval:tst:31921"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11073" version="3" class="vulnerability">
      <metadata>
        <title>Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and JRE 1.4.2_12 and earlier, and SDK and JRE 1.3.1_18 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0243" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0243"/>
        <description>Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and JRE 1.4.2_12 and earlier, and SDK and JRE 1.3.1_18 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:39.252-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:19.903-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:56.133-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criteria operator="OR">
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.8-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:33444"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.8-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:33309"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.8-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:34027"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.8-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:33723"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.8-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:33733"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.8-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:33728"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.4-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33618"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.4-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33943"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.8-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:33702"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.8-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:33845"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.8-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:33083"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.4-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33836"/>
            <criterion comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35322"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.8-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:33682"/>
            <criterion comment="java-1.5.0-bea is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34920"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.4-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33708"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.4-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33998"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.8-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:34082"/>
            <criterion comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.8-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:33765"/>
            <criterion comment="java-1.5.0-bea-src is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35346"/>
            <criterion comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35349"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.4-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33948"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.4-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33137"/>
            <criterion comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35189"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.8-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:33956"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.4-1jpp.3.el5" test_ref="oval:org.mitre.oval:tst:33762"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.4-1jpp.3.el5" test_ref="oval:org.mitre.oval:tst:33853"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.8-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34064"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.8-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34078"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.8-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34067"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.4-1jpp.3.el5" test_ref="oval:org.mitre.oval:tst:33991"/>
            <criterion comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35247"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.8-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:33411"/>
            <criterion comment="java-1.5.0-bea is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35253"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.4-1jpp.3.el5" test_ref="oval:org.mitre.oval:tst:33566"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.4-1jpp.3.el5" test_ref="oval:org.mitre.oval:tst:33572"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.8-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:33614"/>
            <criterion comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.8-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34040"/>
            <criterion comment="java-1.5.0-bea-missioncontrol is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35180"/>
            <criterion comment="java-1.5.0-bea-src is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34479"/>
            <criterion comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35169"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.4-1jpp.3.el5" test_ref="oval:org.mitre.oval:tst:34068"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.4-1jpp.3.el5" test_ref="oval:org.mitre.oval:tst:34074"/>
            <criterion comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35150"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.8-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:33972"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11072" version="5" class="vulnerability">
      <metadata>
        <title>gdb before 6.3 searches the current working directory to load the .gdbinit configuration file, which allows local users to execute arbitrary commands as the user running gdb.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1705" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1705"/>
        <description>gdb before 6.3 searches the current working directory to load the .gdbinit configuration file, which allows local users to execute arbitrary commands as the user running gdb.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:09.762-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:19.664-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:55.839-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11072 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:08.973-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:17.497-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gdb is earlier than 0:6.3.0.0-1.62" test_ref="oval:org.mitre.oval:tst:29887"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gdb is earlier than 0:6.3.0.0-1.63" test_ref="oval:org.mitre.oval:tst:32136"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11071" version="5" class="vulnerability">
      <metadata>
        <title>Ethereal 0.10.1 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a zero-length Presentation protocol selector.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0367" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0367"/>
        <description>Ethereal 0.10.1 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a zero-length Presentation protocol selector.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:40.335-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:19.474-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:55.627-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11071 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:44.829-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:17.010-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="ethereal-gnome is earlier than 0:0.10.3-0.30E.1" test_ref="oval:org.mitre.oval:tst:29720"/>
          <criterion comment="ethereal is earlier than 0:0.10.3-0.30E.1" test_ref="oval:org.mitre.oval:tst:30448"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11070" version="5" class="vulnerability">
      <metadata>
        <title>protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the "require TLS/SSL" preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption and allows remote attackers to sniff sessions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3026" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3026"/>
        <description>protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the "require TLS/SSL" preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption and allows remote attackers to sniff sessions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:47.251-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:19.005-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:55.176-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11070 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:38.766-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:16.436-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39474"/>
            <criterion comment="libpurple is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39423"/>
            <criterion comment="libpurple-perl is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39307"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39264"/>
            <criterion comment="pidgin-devel is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39332"/>
            <criterion comment="libpurple-devel is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39395"/>
            <criterion comment="finch is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39376"/>
            <criterion comment="pidgin-perl is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39381"/>
            <criterion comment="pidgin is earlier than 0:2.6.2-2.el4" test_ref="oval:org.mitre.oval:tst:39450"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39246"/>
            <criterion comment="libpurple is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39428"/>
            <criterion comment="libpurple-perl is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39414"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39006"/>
            <criterion comment="pidgin-devel is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:38683"/>
            <criterion comment="libpurple-devel is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39404"/>
            <criterion comment="finch is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39139"/>
            <criterion comment="pidgin-perl is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39341"/>
            <criterion comment="pidgin is earlier than 0:2.6.2-2.el5" test_ref="oval:org.mitre.oval:tst:39169"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1107" version="1" class="vulnerability">
      <metadata>
        <title>gzip zgrep Sanitation Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>gzip</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0758" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0758"/>
        <description>zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-06-20T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-06-22T12:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="gzip RPM earlier than 0:1.3.3-12rhel3" negate="false" test_ref="oval:org.mitre.oval:tst:2667"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/zgrep is executable by any user" negate="false" test_ref="oval:org.mitre.oval:tst:1162"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11069" version="3" class="vulnerability">
      <metadata>
        <title>Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 does not sufficiently restrict the interpretation and usage of cross-domain policy files, which makes it easier for remote attackers to conduct cross-domain and cross-site scripting (XSS) attacks.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6243" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6243"/>
        <description>Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 does not sufficiently restrict the interpretation and usage of cross-domain policy files, which makes it easier for remote attackers to conduct cross-domain and cross-site scripting (XSS) attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:15.943-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:18.755-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:54.847-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criterion comment="flash-plugin is earlier than 0:9.0.124.0-1.el3.with.oss" test_ref="oval:org.mitre.oval:tst:36002"/>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criterion comment="flash-plugin is earlier than 0:9.0.124.0-1.el4" test_ref="oval:org.mitre.oval:tst:36397"/>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criterion comment="flash-plugin is earlier than 0:9.0.124.0-1.el5" test_ref="oval:org.mitre.oval:tst:36022"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11068" version="5" class="vulnerability">
      <metadata>
        <title>The ecryptfs_write_metadata_to_contents function in the eCryptfs functionality in the Linux kernel 2.6.28 before 2.6.28.9 uses an incorrect size when writing kernel memory to an eCryptfs file header, which triggers an out-of-bounds read and allows local users to obtain portions of kernel memory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0787"/>
        <description>The ecryptfs_write_metadata_to_contents function in the eCryptfs functionality in the Linux kernel 2.6.28 before 2.6.28.9 uses an incorrect size when writing kernel memory to an eCryptfs file header, which triggers an out-of-bounds read and allows local users to obtain portions of kernel memory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:15.620-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:18.350-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:54.509-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11068 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:34.932-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:15.952-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38663"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38680"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38674"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38654"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38700"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38368"/>
          <criterion comment="kernel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38726"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38390"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38547"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38412"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38701"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38129"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11067" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in gdImageCreateTrueColor function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to have unspecified attack vectors and impact.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3472" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3472"/>
        <description>Integer overflow in gdImageCreateTrueColor function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to have unspecified attack vectors and impact.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:03.082-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:18.086-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:54.210-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11067 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:23:57.866-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:15.512-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gd is earlier than 0:2.0.28-5.4E.el4_6.1" test_ref="oval:org.mitre.oval:tst:36386"/>
            <criterion comment="gd-devel is earlier than 0:2.0.28-5.4E.el4_6.1" test_ref="oval:org.mitre.oval:tst:36408"/>
            <criterion comment="gd-progs is earlier than 0:2.0.28-5.4E.el4_6.1" test_ref="oval:org.mitre.oval:tst:35731"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gd is earlier than 0:2.0.33-9.4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36297"/>
            <criterion comment="gd-devel is earlier than 0:2.0.33-9.4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36448"/>
            <criterion comment="gd-progs is earlier than 0:2.0.33-9.4.el5_1.1" test_ref="oval:org.mitre.oval:tst:35759"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11066" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 2.0.0.5 and Thunderbird before 2.0.0.5 allow remote attackers to cause a denial of service (crash) via unspecified vectors that trigger memory corruption.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3735" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3735"/>
        <description>Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 2.0.0.5 and Thunderbird before 2.0.0.5 allow remote attackers to cause a denial of service (crash) via unspecified vectors that trigger memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:06.477-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:17.530-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:53.625-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11066 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:12:37.656-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:14.738-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:33986"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34827"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34839"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34762"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34814"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34694"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34925"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34684"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34723"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34747"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34968"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34971"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-0.3.el4" test_ref="oval:org.mitre.oval:tst:34888"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34868"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34492"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34775"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.3.el4" test_ref="oval:org.mitre.oval:tst:34828"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34981"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34335"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34957"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34550"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34608"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-3.el5" test_ref="oval:org.mitre.oval:tst:34810"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-3.el5" test_ref="oval:org.mitre.oval:tst:34667"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-3.el5" test_ref="oval:org.mitre.oval:tst:34869"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11065" version="5" class="vulnerability">
      <metadata>
        <title>Double free vulnerability in the getRawDER function for nsIX509Cert in Firefox allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via certain Javascript code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2788" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2788"/>
        <description>Double free vulnerability in the getRawDER function for nsIX509Cert in Firefox allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via certain Javascript code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:43.949-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:16.958-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:53.106-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11065 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:30.818-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:14.110-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32575"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32674"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32918"/>
            <criterion comment="seamonkey is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32919"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32864"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32659"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32859"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32511"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32902"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32837"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32873"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32693"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32886"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32810"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32418"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32496"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32929"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32777"/>
            <criterion comment="firefox is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32896"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32722"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32906"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32905"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32925"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32624"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11064" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the LDAP implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier allows remote LDAP servers to execute arbitrary code via unknown vectors related to serialized data.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1094" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1094"/>
        <description>Unspecified vulnerability in the LDAP implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier allows remote LDAP servers to execute arbitrary code via unknown vectors related to serialized data.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:08.354-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:16.728-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:52.773-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11064 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:07.560-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:13.666-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:38276"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37661"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37652"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37769"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:38561"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11063" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 3.x before 3.0.4 assigns chrome privileges to a file: URI when it is accessed in the same tab from a chrome or privileged about: page, which makes it easier for user-assisted attackers to execute arbitrary JavaScript with chrome privileges via malicious code in a file that has already been saved on the local system.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5015" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5015"/>
        <description>Mozilla Firefox 3.x before 3.0.4 assigns chrome privileges to a file: URI when it is accessed in the same tab from a chrome or privileged about: page, which makes it easier for user-assisted attackers to execute arbitrary JavaScript with chrome privileges via malicious code in a file that has already been saved on the local system.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:53.319-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:16.369-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:51.905-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11063 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:21.761-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:13.141-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-3.el4" test_ref="oval:org.mitre.oval:tst:37840"/>
            <criterion comment="firefox is earlier than 0:3.0.4-1.el4" test_ref="oval:org.mitre.oval:tst:37904"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-3.el4" test_ref="oval:org.mitre.oval:tst:38065"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-20.el5" test_ref="oval:org.mitre.oval:tst:37773"/>
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37531"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37899"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37454"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:38021"/>
            <criterion comment="yelp is earlier than 0:2.16.0-22.el5" test_ref="oval:org.mitre.oval:tst:37645"/>
            <criterion comment="devhelp is earlier than 0:0.12-20.el5" test_ref="oval:org.mitre.oval:tst:37958"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37388"/>
            <criterion comment="firefox is earlier than 0:3.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37066"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37648"/>
            <criterion comment="nss-tools is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37936"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11062" version="5" class="vulnerability">
      <metadata>
        <title>scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code via a sscanf PHP function call that performs argument swapping, which increments an index past the end of an array and triggers a buffer over-read.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4020"/>
        <description>scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code via a sscanf PHP function call that performs argument swapping, which increments an index past the end of an array and triggers a buffer over-read.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:29.467-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:15.855-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:51.401-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11062 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:12:59.996-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:12.491-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32928"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32870"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32829"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32485"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32258"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32491"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32860"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32985"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32962"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32808"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32175"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32788"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:33059"/>
            <criterion comment="php is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32754"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32876"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:33047"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32483"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:33052"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32964"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32700"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32272"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11061" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the hfsplus_find_cat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service (memory corruption or system crash) via an hfsplus filesystem image with an invalid catalog namelength field, related to the hfsplus_cat_build_key_uni function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4933" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4933"/>
        <description>Buffer overflow in the hfsplus_find_cat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service (memory corruption or system crash) via an hfsplus filesystem image with an invalid catalog namelength field, related to the hfsplus_cat_build_key_uni function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:11.293-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:15.378-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:50.824-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11061 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:06.938-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:11.804-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37830"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37968"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37984"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37633"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37352"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:38043"/>
            <criterion comment="kernel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37989"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37908"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37748"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37825"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:38002"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:37732"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38060"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38354"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38313"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38198"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:37887"/>
            <criterion comment="kernel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38174"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38191"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38124"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38417"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:37779"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38257"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11060" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the ONC RPC dissector in Ethereal 0.10.3 to 0.10.12, when the "Dissect unknown RPC program numbers" option is enabled, allows remote attackers to cause a denial of service (memory consumption).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3245" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3245"/>
        <description>Unspecified vulnerability in the ONC RPC dissector in Ethereal 0.10.3 to 0.10.12, when the "Dissect unknown RPC program numbers" option is enabled, allows remote attackers to cause a denial of service (memory consumption).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:04.521-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:15.137-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:50.546-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11060 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:59.452-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:11.414-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.13-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32189"/>
            <criterion comment="ethereal is earlier than 0:0.10.13-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32138"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.13-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32341"/>
            <criterion comment="ethereal is earlier than 0:0.10.13-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32202"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11059" version="5" class="vulnerability">
      <metadata>
        <title>socket.c in fetchmail before 6.3.11 does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2666" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2666"/>
        <description>socket.c in fetchmail before 6.3.11 does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:53.233-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:14.835-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:50.253-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11059 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:12:47.336-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:10.925-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="fetchmail is earlier than 0:6.2.0-3.el3.5" test_ref="oval:org.mitre.oval:tst:38901"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="fetchmail is earlier than 0:6.2.5-6.0.1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39046"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="fetchmail is earlier than 0:6.3.6-1.1.el5_3.1" test_ref="oval:org.mitre.oval:tst:39380"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11058" version="5" class="vulnerability">
      <metadata>
        <title>MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3780" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3780"/>
        <description>MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:58.556-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:14.532-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:49.869-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11058 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:14.527-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:10.459-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mysql is earlier than 0:4.1.20-2.RHEL4.1.0.1" test_ref="oval:org.mitre.oval:tst:35230"/>
            <criterion comment="mysql-devel is earlier than 0:4.1.20-2.RHEL4.1.0.1" test_ref="oval:org.mitre.oval:tst:34993"/>
            <criterion comment="mysql-bench is earlier than 0:4.1.20-2.RHEL4.1.0.1" test_ref="oval:org.mitre.oval:tst:34731"/>
            <criterion comment="mysql-server is earlier than 0:4.1.20-2.RHEL4.1.0.1" test_ref="oval:org.mitre.oval:tst:34256"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mysql is earlier than 0:5.0.22-2.1.0.1" test_ref="oval:org.mitre.oval:tst:35229"/>
            <criterion comment="mysql-devel is earlier than 0:5.0.22-2.1.0.1" test_ref="oval:org.mitre.oval:tst:34268"/>
            <criterion comment="mysql-test is earlier than 0:5.0.22-2.1.0.1" test_ref="oval:org.mitre.oval:tst:34271"/>
            <criterion comment="mysql-bench is earlier than 0:5.0.22-2.1.0.1" test_ref="oval:org.mitre.oval:tst:34535"/>
            <criterion comment="mysql-server is earlier than 0:5.0.22-2.1.0.1" test_ref="oval:org.mitre.oval:tst:35148"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11057" version="5" class="vulnerability">
      <metadata>
        <title>Directory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote attackers to write to arbitrary directories via a .. (dot dot) in the original filename within a compressed file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1228" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1228"/>
        <description>Directory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote attackers to write to arbitrary directories via a .. (dot dot) in the original filename within a compressed file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:42.949-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:14.313-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:49.621-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11057 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:53.081-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:10.109-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gzip is earlier than 0:1.3.3-12.rhel3" test_ref="oval:org.mitre.oval:tst:30880"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gzip is earlier than 0:1.3.3-15.rhel4" test_ref="oval:org.mitre.oval:tst:31566"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11056" version="5" class="vulnerability">
      <metadata>
        <title>Konqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window or tab whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1158" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1158"/>
        <description>Konqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window or tab whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:01.149-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:14.098-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:49.381-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11056 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:49.094-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:09.761-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kdebase is earlier than 6:3.1.3-5.8" test_ref="oval:org.mitre.oval:tst:31113"/>
          <criterion comment="kdebase-devel is earlier than 6:3.1.3-5.8" test_ref="oval:org.mitre.oval:tst:31092"/>
          <criterion comment="kdelibs is earlier than 6:3.1.3-6.9" test_ref="oval:org.mitre.oval:tst:30244"/>
          <criterion comment="kdelibs-devel is earlier than 6:3.1.3-6.9" test_ref="oval:org.mitre.oval:tst:30826"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11054" version="5" class="vulnerability">
      <metadata>
        <title>The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts arbitrary Location values, which might allow remote HTTP servers to (1) trigger arbitrary requests to intranet servers, (2) read or overwrite arbitrary files via a redirect to a file: URL, or (3) execute arbitrary commands via a redirect to an scp: URL.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0037" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0037"/>
        <description>The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts arbitrary Location values, which might allow remote HTTP servers to (1) trigger arbitrary requests to intranet servers, (2) read or overwrite arbitrary files via a redirect to a file: URL, or (3) execute arbitrary commands via a redirect to an scp: URL.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:59.987-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:13.739-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:48.999-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11054 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:47.694-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:09.282-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="curl-devel is earlier than 0:7.10.6-9.rhel3" test_ref="oval:org.mitre.oval:tst:38524"/>
            <criterion comment="curl is earlier than 0:7.10.6-9.rhel3" test_ref="oval:org.mitre.oval:tst:37776"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="curl-devel is earlier than 0:7.12.1-11.1.el4_7.1" test_ref="oval:org.mitre.oval:tst:38532"/>
            <criterion comment="curl is earlier than 0:7.12.1-11.1.el4_7.1" test_ref="oval:org.mitre.oval:tst:38496"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="curl-devel is earlier than 0:7.15.5-2.1.el5_3.4" test_ref="oval:org.mitre.oval:tst:38443"/>
            <criterion comment="curl is earlier than 0:7.15.5-2.1.el5_3.4" test_ref="oval:org.mitre.oval:tst:38312"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11053" version="5" class="vulnerability">
      <metadata>
        <title>The layout engine in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to (1) a reachable assertion or (2) an integer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5500" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5500"/>
        <description>The layout engine in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to (1) a reachable assertion or (2) an integer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:04.718-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:13.115-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:48.312-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11053 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:25.208-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:08.384-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38137"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37886"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37999"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37907"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37709"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38092"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37745"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38039"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38062"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38073"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nspr is earlier than 0:4.7.3-1.el4" test_ref="oval:org.mitre.oval:tst:37574"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:38071"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-1.el4" test_ref="oval:org.mitre.oval:tst:37857"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-18.el4" test_ref="oval:org.mitre.oval:tst:37200"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.3-1.el4" test_ref="oval:org.mitre.oval:tst:37918"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37812"/>
            <criterion comment="firefox is earlier than 0:3.0.5-1.el4" test_ref="oval:org.mitre.oval:tst:38080"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-1.el4" test_ref="oval:org.mitre.oval:tst:37139"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37869"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37789"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37395"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:38118"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:38072"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38037"/>
            <criterion comment="nspr is earlier than 0:4.7.3-2.el5" test_ref="oval:org.mitre.oval:tst:37420"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37854"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.19-1.el5_2" test_ref="oval:org.mitre.oval:tst:38053"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.3-2.el5" test_ref="oval:org.mitre.oval:tst:37419"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38083"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:37631"/>
            <criterion comment="firefox is earlier than 0:3.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38114"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37737"/>
            <criterion comment="nss-tools is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37403"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11052" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0176"/>
        <description>Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:01.337-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:12.598-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:47.738-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11052 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:28.661-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:07.667-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:40246"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:39934"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:40184"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:40133"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:39775"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:40360"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:40059"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:39946"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:40114"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:39403"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox is earlier than 0:3.0.19-1.el4" test_ref="oval:org.mitre.oval:tst:40284"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-54.el4_8" test_ref="oval:org.mitre.oval:tst:40081"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-54.el4_8" test_ref="oval:org.mitre.oval:tst:40250"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-54.el4_8" test_ref="oval:org.mitre.oval:tst:40304"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-54.el4_8" test_ref="oval:org.mitre.oval:tst:40345"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-54.el4_8" test_ref="oval:org.mitre.oval:tst:40183"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-54.el4_8" test_ref="oval:org.mitre.oval:tst:39945"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.19-1.el5_5" test_ref="oval:org.mitre.oval:tst:40265"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.19-1.el5_5" test_ref="oval:org.mitre.oval:tst:39621"/>
            <criterion comment="firefox is earlier than 0:3.0.19-1.el5_5" test_ref="oval:org.mitre.oval:tst:40064"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.19-1.el5_5" test_ref="oval:org.mitre.oval:tst:40164"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11050" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the GIFLZWDecompressor::GIFLZWDecompressor function in filter.vcl/lgif/decode.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted GIF file, related to LZW decompression.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2950" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2950"/>
        <description>Heap-based buffer overflow in the GIFLZWDecompressor::GIFLZWDecompressor function in filter.vcl/lgif/decode.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted GIF file, related to LZW decompression.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:04.502-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:10.512-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:45.517-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11050 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:14:05.178-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:05.197-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-46.2.0.EL3" test_ref="oval:org.mitre.oval:tst:40232"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.2-46.2.0.EL3" test_ref="oval:org.mitre.oval:tst:39552"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-46.2.0.EL3" test_ref="oval:org.mitre.oval:tst:39893"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39898"/>
            <criterion comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39574"/>
            <criterion comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40086"/>
            <criterion comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39814"/>
            <criterion comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39321"/>
            <criterion comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40079"/>
            <criterion comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40187"/>
            <criterion comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40069"/>
            <criterion comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40280"/>
            <criterion comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39823"/>
            <criterion comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39422"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.5-10.6.0.7.EL4.3" test_ref="oval:org.mitre.oval:tst:39760"/>
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.7.EL4.3" test_ref="oval:org.mitre.oval:tst:40078"/>
            <criterion comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40135"/>
            <criterion comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40217"/>
            <criterion comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39726"/>
            <criterion comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40076"/>
            <criterion comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39500"/>
            <criterion comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40206"/>
            <criterion comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39998"/>
            <criterion comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40006"/>
            <criterion comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39847"/>
            <criterion comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39962"/>
            <criterion comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39762"/>
            <criterion comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40163"/>
            <criterion comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39819"/>
            <criterion comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39506"/>
            <criterion comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40275"/>
            <criterion comment="openoffice.org2 is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40058"/>
            <criterion comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40104"/>
            <criterion comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39977"/>
            <criterion comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40138"/>
            <criterion comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40155"/>
            <criterion comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40266"/>
            <criterion comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40024"/>
            <criterion comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40188"/>
            <criterion comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40123"/>
            <criterion comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39776"/>
            <criterion comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40262"/>
            <criterion comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39872"/>
            <criterion comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39958"/>
            <criterion comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40178"/>
            <criterion comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39976"/>
            <criterion comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40092"/>
            <criterion comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39695"/>
            <criterion comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40167"/>
            <criterion comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39830"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.7.EL4.3" test_ref="oval:org.mitre.oval:tst:40242"/>
            <criterion comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39851"/>
            <criterion comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39818"/>
            <criterion comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40038"/>
            <criterion comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.7.EL4.3" test_ref="oval:org.mitre.oval:tst:40279"/>
            <criterion comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39959"/>
            <criterion comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40197"/>
            <criterion comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40245"/>
            <criterion comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39845"/>
            <criterion comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39936"/>
            <criterion comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39966"/>
            <criterion comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39879"/>
            <criterion comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40025"/>
            <criterion comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39786"/>
            <criterion comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40213"/>
            <criterion comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39767"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-langpack-sk_SK is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40143"/>
            <criterion comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40027"/>
            <criterion comment="openoffice.org-langpack-pa_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39796"/>
            <criterion comment="openoffice.org-langpack-hi_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39900"/>
            <criterion comment="openoffice.org-langpack-et_EE is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40033"/>
            <criterion comment="openoffice.org-langpack-kn_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39999"/>
            <criterion comment="openoffice.org is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39861"/>
            <criterion comment="openoffice.org-langpack-zh_TW is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39384"/>
            <criterion comment="openoffice.org-writer is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39209"/>
            <criterion comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40293"/>
            <criterion comment="openoffice.org-langpack-ga_IE is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40186"/>
            <criterion comment="openoffice.org-langpack-ta_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40207"/>
            <criterion comment="openoffice.org-langpack-ko_KR is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39941"/>
            <criterion comment="openoffice.org-langpack-or_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39835"/>
            <criterion comment="openoffice.org-langpack-da_DK is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39870"/>
            <criterion comment="openoffice.org-langpack-sr_CS is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40043"/>
            <criterion comment="openoffice.org-langpack-pl_PL is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40061"/>
            <criterion comment="openoffice.org-langpack-fr is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40019"/>
            <criterion comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39923"/>
            <criterion comment="openoffice.org-javafilter is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40169"/>
            <criterion comment="openoffice.org-langpack-as_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39889"/>
            <criterion comment="openoffice.org-testtools is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39388"/>
            <criterion comment="openoffice.org-langpack-hr_HR is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40015"/>
            <criterion comment="openoffice.org-langpack-de is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39455"/>
            <criterion comment="openoffice.org-emailmerge is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40278"/>
            <criterion comment="openoffice.org-xsltfilter is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39903"/>
            <criterion comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39905"/>
            <criterion comment="openoffice.org-langpack-te_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39522"/>
            <criterion comment="openoffice.org-langpack-sv is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40195"/>
            <criterion comment="openoffice.org-base is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39480"/>
            <criterion comment="openoffice.org-langpack-ca_ES is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40157"/>
            <criterion comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39989"/>
            <criterion comment="openoffice.org-core is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39975"/>
            <criterion comment="openoffice.org-langpack-nl is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40101"/>
            <criterion comment="openoffice.org-langpack-ur is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39119"/>
            <criterion comment="openoffice.org-langpack-nn_NO is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39682"/>
            <criterion comment="openoffice.org-langpack-ar is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39653"/>
            <criterion comment="openoffice.org-langpack-ja_JP is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39800"/>
            <criterion comment="openoffice.org-langpack-gu_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40203"/>
            <criterion comment="openoffice.org-langpack-tr_TR is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40119"/>
            <criterion comment="openoffice.org-langpack-eu_ES is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40002"/>
            <criterion comment="openoffice.org-langpack-fi_FI is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39764"/>
            <criterion comment="openoffice.org-graphicfilter is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39979"/>
            <criterion comment="openoffice.org-pyuno is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39996"/>
            <criterion comment="openoffice.org-langpack-ml_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40060"/>
            <criterion comment="openoffice.org-langpack-gl_ES is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40192"/>
            <criterion comment="openoffice.org-sdk-doc is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39688"/>
            <criterion comment="openoffice.org-langpack-zh_CN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39612"/>
            <criterion comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39939"/>
            <criterion comment="openoffice.org-langpack-it is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39687"/>
            <criterion comment="openoffice.org-sdk is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40190"/>
            <criterion comment="openoffice.org-langpack-es is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39972"/>
            <criterion comment="openoffice.org-langpack-nb_NO is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39792"/>
            <criterion comment="openoffice.org-langpack-sl_SI is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39914"/>
            <criterion comment="openoffice.org-draw is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39723"/>
            <criterion comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40100"/>
            <criterion comment="openoffice.org-langpack-ms_MY is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40158"/>
            <criterion comment="openoffice.org-langpack-el_GR is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39416"/>
            <criterion comment="openoffice.org-langpack-hu_HU is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39496"/>
            <criterion comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39922"/>
            <criterion comment="openoffice.org-langpack-bn is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40120"/>
            <criterion comment="openoffice.org-langpack-he_IL is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39301"/>
            <criterion comment="openoffice.org-langpack-pt_PT is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40236"/>
            <criterion comment="openoffice.org-langpack-lt_LT is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40042"/>
            <criterion comment="openoffice.org-langpack-af_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39239"/>
            <criterion comment="openoffice.org-langpack-bg_BG is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40048"/>
            <criterion comment="openoffice.org-calc is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39842"/>
            <criterion comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39995"/>
            <criterion comment="openoffice.org-langpack-cy_GB is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39641"/>
            <criterion comment="openoffice.org-langpack-mr_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39754"/>
            <criterion comment="openoffice.org-headless is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40170"/>
            <criterion comment="openoffice.org-langpack-th_TH is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39951"/>
            <criterion comment="openoffice.org-langpack-pt_BR is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40166"/>
            <criterion comment="openoffice.org-langpack-ru is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40110"/>
            <criterion comment="openoffice.org-math is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40223"/>
            <criterion comment="openoffice.org-impress is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40173"/>
            <criterion comment="openoffice.org-langpack-st_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39745"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1105" version="2" class="vulnerability">
      <metadata>
        <title>GDI+ JPEG Parsing Engine Buffer Overflow (Server 2003)</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>GDI+</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0200"/>
        <description>Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-09-20T03:22:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2004-09-22T02:10:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-10-06T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-10-20T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-20T07:05:00.000-04:00" comment="Changed criteria to filter out 32-bit XP consideration.  wft-493 will always be positive on 32-bit machines.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-04T08:04:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="64-bit XP or Server 2003 is installed">
          <criteria operator="AND" comment="64-bit XP is installed">
            <criterion comment="Windows XP is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2838"/>
            <criterion comment="64-Bit (x64 architecture) version of Windows is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2744"/>
          </criteria>
          <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        </criteria>
        <criterion comment="the version of sxs.dll is less than 5.2.3790.121" negate="false" test_ref="oval:org.mitre.oval:tst:1164"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11049" version="5" class="vulnerability">
      <metadata>
        <title>vsftpd before 1.2.2, when under heavy load, allows attackers to cause a denial of service (crash) via a SIGCHLD signal during a malloc or free call, which is not re-entrant.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-2259" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2259"/>
        <description>vsftpd before 1.2.2, when under heavy load, allows attackers to cause a denial of service (crash) via a SIGCHLD signal during a malloc or free call, which is not re-entrant.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:51.194-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:10.294-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:45.284-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11049 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:25.628-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:04.850-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="vsftpd is earlier than 0:1.2.1-3" test_ref="oval:org.mitre.oval:tst:30385"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11048" version="5" class="vulnerability">
      <metadata>
        <title>bgpd/bgp_attr.c in Quagga 0.98.6 and earlier, and 0.99.6 and earlier 0.99 versions, does not validate length values in the MP_REACH_NLRI and MP_UNREACH_NLRI attributes, which allows remote attackers to cause a denial of service (daemon crash or exit) via crafted UPDATE messages that trigger an assertion error or out of bounds read.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1995" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1995"/>
        <description>bgpd/bgp_attr.c in Quagga 0.98.6 and earlier, and 0.99.6 and earlier 0.99 versions, does not validate length values in the MP_REACH_NLRI and MP_UNREACH_NLRI attributes, which allows remote attackers to cause a denial of service (daemon crash or exit) via crafted UPDATE messages that trigger an assertion error or out of bounds read.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:20.816-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:09.953-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:44.931-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11048 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:34.719-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:04.355-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="quagga is earlier than 0:0.96.2-12.3E" test_ref="oval:org.mitre.oval:tst:34316"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="quagga-devel is earlier than 0:0.98.3-2.4.0.1.el4" test_ref="oval:org.mitre.oval:tst:34117"/>
            <criterion comment="quagga is earlier than 0:0.98.3-2.4.0.1.el4" test_ref="oval:org.mitre.oval:tst:34370"/>
            <criterion comment="quagga-contrib is earlier than 0:0.98.3-2.4.0.1.el4" test_ref="oval:org.mitre.oval:tst:34203"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="quagga-devel is earlier than 0:0.98.6-2.1.0.1.el5" test_ref="oval:org.mitre.oval:tst:34212"/>
            <criterion comment="quagga is earlier than 0:0.98.6-2.1.0.1.el5" test_ref="oval:org.mitre.oval:tst:34264"/>
            <criterion comment="quagga-contrib is earlier than 0:0.98.6-2.1.0.1.el5" test_ref="oval:org.mitre.oval:tst:34361"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11047" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in LHA allows remote attackers to execute arbitrary code via long pathnames in LHarc format 2 headers for a .LHZ archive, as originally demonstrated using the "x" option but also exploitable through "l" and "v", and fixed in header.c, a different issue than CVE-2004-0771.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0769" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0769"/>
        <description>Buffer overflow in LHA allows remote attackers to execute arbitrary code via long pathnames in LHarc format 2 headers for a .LHZ archive, as originally demonstrated using the "x" option but also exploitable through "l" and "v", and fixed in header.c, a different issue than CVE-2004-0771.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:41.408-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:09.766-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:44.725-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11047 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:11.576-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:04.075-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="lha is earlier than 0:1.14i-10.4" test_ref="oval:org.mitre.oval:tst:29793"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11046" version="5" class="vulnerability">
      <metadata>
        <title>The CUPS service on multiple platforms allows remote attackers to cause a denial of service (service hang) via a "partially-negotiated" SSL connection, which prevents other requests from being accepted.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0720" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0720"/>
        <description>The CUPS service on multiple platforms allows remote attackers to cause a denial of service (service hang) via a "partially-negotiated" SSL connection, which prevents other requests from being accepted.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:58.340-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:09.423-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:44.361-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11046 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:58.535-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:03.502-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.42" test_ref="oval:org.mitre.oval:tst:33418"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.42" test_ref="oval:org.mitre.oval:tst:33293"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.42" test_ref="oval:org.mitre.oval:tst:33872"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 0:1.1.22-0.rc1.9.18" test_ref="oval:org.mitre.oval:tst:33504"/>
            <criterion comment="cups is earlier than 0:1.1.22-0.rc1.9.18" test_ref="oval:org.mitre.oval:tst:33974"/>
            <criterion comment="cups-libs is earlier than 0:1.1.22-0.rc1.9.18" test_ref="oval:org.mitre.oval:tst:33999"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-lpd is earlier than 0:1.2.4-11.5.1.el5" test_ref="oval:org.mitre.oval:tst:33766"/>
            <criterion comment="cups-devel is earlier than 0:1.2.4-11.5.1.el5" test_ref="oval:org.mitre.oval:tst:33927"/>
            <criterion comment="cups is earlier than 0:1.2.4-11.5.1.el5" test_ref="oval:org.mitre.oval:tst:33887"/>
            <criterion comment="cups-libs is earlier than 0:1.2.4-11.5.1.el5" test_ref="oval:org.mitre.oval:tst:33961"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11045" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code via (1) a GetVisualInfo request containing a 32-bit value that is improperly used to calculate an amount of memory for allocation by the EVI extension, or (2) a request containing values related to pixmap size that are improperly used in management of shared memory by the MIT-SHM extension.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6429" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6429"/>
        <description>Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code via (1) a GetVisualInfo request containing a 32-bit value that is improperly used to calculate an amount of memory for allocation by the EVI extension, or (2) a request containing values related to pixmap size that are improperly used in management of shared memory by the MIT-SHM extension.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:20.712-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:08.478-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:43.334-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11045 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:32.588-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:02.244-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35923"/>
            <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35665"/>
            <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:36014"/>
            <criterion comment="XFree86-libs is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35929"/>
            <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:36011"/>
            <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35836"/>
            <criterion comment="XFree86-twm is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35726"/>
            <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35715"/>
            <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35610"/>
            <criterion comment="XFree86-doc is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:36025"/>
            <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35789"/>
            <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35804"/>
            <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35865"/>
            <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35793"/>
            <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35903"/>
            <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35965"/>
            <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35922"/>
            <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35504"/>
            <criterion comment="XFree86-xdm is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35045"/>
            <criterion comment="XFree86-sdk is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35914"/>
            <criterion comment="XFree86 is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35831"/>
            <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35998"/>
            <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35975"/>
            <criterion comment="XFree86-xfs is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:36031"/>
            <criterion comment="XFree86-tools is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35971"/>
            <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35711"/>
            <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35933"/>
            <criterion comment="XFree86-xauth is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35826"/>
            <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35753"/>
            <criterion comment="XFree86-devel is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35678"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35795"/>
            <criterion comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35934"/>
            <criterion comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35467"/>
            <criterion comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35946"/>
            <criterion comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36116"/>
            <criterion comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35116"/>
            <criterion comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36004"/>
            <criterion comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35483"/>
            <criterion comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36103"/>
            <criterion comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36060"/>
            <criterion comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36074"/>
            <criterion comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35895"/>
            <criterion comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35905"/>
            <criterion comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36012"/>
            <criterion comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35984"/>
            <criterion comment="xorg-x11 is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35857"/>
            <criterion comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35681"/>
            <criterion comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35909"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-server-sdk is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35517"/>
            <criterion comment="xorg-x11-server-Xnest is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35690"/>
            <criterion comment="xorg-x11-server-Xvfb is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35399"/>
            <criterion comment="xorg-x11-server-Xdmx is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35908"/>
            <criterion comment="xorg-x11-server-Xephyr is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35987"/>
            <criterion comment="xorg-x11-server is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35861"/>
            <criterion comment="xorg-x11-server-Xorg is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35935"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11043" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service (application crash) via a crafted PDF document that triggers a NULL pointer dereference or buffer over-read.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3609" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3609"/>
        <description>Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service (application crash) via a crafted PDF document that triggers a NULL pointer dereference or buffer over-read.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:23.242-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:07.686-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:41.954-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11043 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:39.176-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:01.359-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:39543"/>
            <criterion comment="tetex-dvips is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40032"/>
            <criterion comment="tetex-fonts is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40389"/>
            <criterion comment="tetex is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40303"/>
            <criterion comment="tetex-afm is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40329"/>
            <criterion comment="tetex-doc is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40150"/>
            <criterion comment="tetex-xdvi is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40000"/>
            <criterion comment="xpdf is earlier than 1:2.02-17.el3" test_ref="oval:org.mitre.oval:tst:39361"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40095"/>
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-15.el4_8.2" test_ref="oval:org.mitre.oval:tst:39438"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:39528"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-15.el4_8.2" test_ref="oval:org.mitre.oval:tst:39094"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40473"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40316"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-7.7.2.el4_8.5" test_ref="oval:org.mitre.oval:tst:39221"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40209"/>
            <criterion comment="xpdf is earlier than 1:3.00-22.el4_8.1" test_ref="oval:org.mitre.oval:tst:38963"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40364"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40077"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.5.4-15.el5_4.2" test_ref="oval:org.mitre.oval:tst:39062"/>
            <criterion comment="cups-lpd is earlier than 1:1.3.7-11.el5_4.3" test_ref="oval:org.mitre.oval:tst:39430"/>
            <criterion comment="tetex-dvips is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40312"/>
            <criterion comment="kdegraphics is earlier than 7:3.5.4-15.el5_4.2" test_ref="oval:org.mitre.oval:tst:39529"/>
            <criterion comment="poppler is earlier than 0:0.5.4-4.4.el5_4.11" test_ref="oval:org.mitre.oval:tst:39290"/>
            <criterion comment="tetex-fonts is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40122"/>
            <criterion comment="cups-libs is earlier than 1:1.3.7-11.el5_4.3" test_ref="oval:org.mitre.oval:tst:38854"/>
            <criterion comment="tetex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40413"/>
            <criterion comment="tetex-doc is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40398"/>
            <criterion comment="poppler-devel is earlier than 0:0.5.4-4.4.el5_4.11" test_ref="oval:org.mitre.oval:tst:39346"/>
            <criterion comment="tetex-latex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40444"/>
            <criterion comment="poppler-utils is earlier than 0:0.5.4-4.4.el5_4.11" test_ref="oval:org.mitre.oval:tst:39383"/>
            <criterion comment="cups-devel is earlier than 1:1.3.7-11.el5_4.3" test_ref="oval:org.mitre.oval:tst:38836"/>
            <criterion comment="tetex-afm is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40008"/>
            <criterion comment="tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:39920"/>
            <criterion comment="cups is earlier than 1:1.3.7-11.el5_4.3" test_ref="oval:org.mitre.oval:tst:39511"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11042" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the SendUidl in the POP3 capability for Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, may allow remote POP3 mail servers to execute arbitrary code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0757" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0757"/>
        <description>Heap-based buffer overflow in the SendUidl in the POP3 capability for Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, may allow remote POP3 mail servers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:22.492-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:07.394-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:41.617-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11042 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:12.386-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:00.903-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mozilla-js-debugger is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30799"/>
          <criterion comment="mozilla is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30278"/>
          <criterion comment="mozilla-chat is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30755"/>
          <criterion comment="mozilla-mail is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30570"/>
          <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30230"/>
          <criterion comment="mozilla-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30288"/>
          <criterion comment="mozilla-nss is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30323"/>
          <criterion comment="mozilla-nss-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30339"/>
          <criterion comment="mozilla-nspr is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30813"/>
          <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30660"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11041" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to "invalid HTML."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0781" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0781"/>
        <description>Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to "invalid HTML."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:30.810-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:07.094-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:41.259-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11041 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:01.516-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:11:00.485-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38108"/>
          <criterion comment="tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:37963"/>
          <criterion comment="tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38333"/>
          <criterion comment="tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38944"/>
          <criterion comment="tomcat5-webapps is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38805"/>
          <criterion comment="tomcat5 is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38688"/>
          <criterion comment="tomcat5-jasper is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38891"/>
          <criterion comment="tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38239"/>
          <criterion comment="tomcat5-server-lib is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38824"/>
          <criterion comment="tomcat5-common-lib is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38955"/>
          <criterion comment="tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38428"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11040" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not properly parse URLs with leading whitespace or control characters, which might allow remote attackers to misrepresent URLs and simplify phishing attacks.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5508"/>
        <description>Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not properly parse URLs with leading whitespace or control characters, which might allow remote attackers to misrepresent URLs and simplify phishing attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:16.413-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:05.963-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:40.527-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11040 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:41.124-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:59.643-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38137"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37886"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37999"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37907"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37709"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38092"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37745"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38039"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38062"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38073"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nspr is earlier than 0:4.7.3-1.el4" test_ref="oval:org.mitre.oval:tst:37574"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:38071"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-1.el4" test_ref="oval:org.mitre.oval:tst:37857"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-18.el4" test_ref="oval:org.mitre.oval:tst:37200"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.3-1.el4" test_ref="oval:org.mitre.oval:tst:37918"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37812"/>
            <criterion comment="firefox is earlier than 0:3.0.5-1.el4" test_ref="oval:org.mitre.oval:tst:38080"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-1.el4" test_ref="oval:org.mitre.oval:tst:37139"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37869"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37789"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37395"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:38118"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:38072"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38037"/>
            <criterion comment="nspr is earlier than 0:4.7.3-2.el5" test_ref="oval:org.mitre.oval:tst:37420"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37854"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.19-1.el5_2" test_ref="oval:org.mitre.oval:tst:38053"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.3-2.el5" test_ref="oval:org.mitre.oval:tst:37419"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38083"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:37631"/>
            <criterion comment="firefox is earlier than 0:3.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38114"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37737"/>
            <criterion comment="nss-tools is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37403"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1104" version="3" class="vulnerability">
      <metadata>
        <title>DirectX 9 DirectShow Malicious MIDI File Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>DirectX</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0346" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0346"/>
        <description>Multiple integer overflows in a Microsoft Windows DirectX MIDI library (QUARTZ.DLL) allow remote attackers to execute arbitrary code via a MIDI (.mid) file with (1) large length for a Text or Copyright string, or (2) a large number of tracks, which leads to a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-10-12T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-10-19T05:46:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-01-31T06:03:00.000-04:00" comment="Updated reference to CVE-2003-0346.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected obj:832 to look for the q number under the hot fix registry key." date="2007-09-05T16:29:00.747-04:00">
              <contributor organization="Secure Elements, Inc.">Jeff Ito</contributor>
            </modified>
            <status_change date="2007-09-05T16:39:26.942-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:38.999-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="DirectX 9.0 or 9.0a installed.">
          <criterion comment="DirectX 9.0-gold Installed" negate="false" test_ref="oval:org.mitre.oval:tst:1166"/>
          <criterion comment="DirectX 9.0a Installed" negate="false" test_ref="oval:org.mitre.oval:tst:1165"/>
        </criteria>
        <criterion comment="Patch Windows2000-KB819696-x86-ENU.EXE Installed" negate="true" test_ref="oval:org.mitre.oval:tst:1172"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11039" version="5" class="vulnerability">
      <metadata>
        <title>The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by using the interpreter (PT_INTERP) functionality.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0137" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0137"/>
        <description>Linux kernel 2.6 on Itanium (ia64) architectures allows local users to cause a denial of service via a "missing Itanium syscall table entry."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:43.232-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:05.672-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:40.204-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11039 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:36.289-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:59.255-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31148"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31473"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31178"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31282"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31565"/>
          <criterion comment="kernel is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31562"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31582"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:30730"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31534"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11038" version="5" class="vulnerability">
      <metadata>
        <title>Memory leak in the ipip6_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attackers to cause a denial of service (memory consumption) via network traffic to a Simple Internet Transition (SIT) tunnel interface, related to the pskb_may_pull and kfree_skb functions, and management of an skb reference count.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2136" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2136"/>
        <description>Memory leak in the ipip6_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attackers to cause a denial of service (memory consumption) via network traffic to a Simple Internet Transition (SIT) tunnel interface, related to the pskb_may_pull and kfree_skb functions, and management of an skb reference count.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:53.457-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:05.002-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:39.481-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11038 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:37.260-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:58.369-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37931"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37846"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37817"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37663"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37799"/>
            <criterion comment="kernel is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37028"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37885"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37981"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37117"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-67.0.22.EL" test_ref="oval:org.mitre.oval:tst:37193"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-67.0.22.EL" test_ref="oval:org.mitre.oval:tst:37447"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-67.0.22.EL" test_ref="oval:org.mitre.oval:tst:37178"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-67.0.22.EL" test_ref="oval:org.mitre.oval:tst:37392"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-67.0.22.EL" test_ref="oval:org.mitre.oval:tst:37398"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-67.0.22.EL" test_ref="oval:org.mitre.oval:tst:37465"/>
            <criterion comment="kernel is earlier than 0:2.6.9-67.0.22.EL" test_ref="oval:org.mitre.oval:tst:37240"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-67.0.22.EL" test_ref="oval:org.mitre.oval:tst:37091"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-67.0.22.EL" test_ref="oval:org.mitre.oval:tst:37431"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-67.0.22.EL" test_ref="oval:org.mitre.oval:tst:37233"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-67.0.22.EL" test_ref="oval:org.mitre.oval:tst:37493"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:36537"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:36954"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:37079"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:36957"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:37527"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:37262"/>
            <criterion comment="kernel is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:37410"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:37323"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:37508"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:37153"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:37180"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:37188"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11037" version="5" class="vulnerability">
      <metadata>
        <title>Linux kernel before 2.6.13 allows local users to cause a denial of service (crash) via a dio transfer from the sg driver to memory mapped (mmap) IO space.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1528" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1528"/>
        <description>Linux kernel before 2.6.13 allows local users to cause a denial of service (crash) via a dio transfer from the sg driver to memory mapped (mmap) IO space.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:09.741-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:04.710-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:39.166-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11037 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:43.453-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:57.924-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32235"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32371"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32703"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32314"/>
          <criterion comment="kernel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32614"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32295"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32310"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32611"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32305"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11036" version="5" class="vulnerability">
      <metadata>
        <title>sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to obtain sensitive information via a COM_TABLE_DUMP request with an incorrect packet length, which includes portions of memory in an error message.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1517" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1517"/>
        <description>sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to obtain sensitive information via a COM_TABLE_DUMP request with an incorrect packet length, which includes portions of memory in an error message.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:34.848-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:04.484-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:38.819-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11036 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:34.113-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:57.600-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mysql is earlier than 0:4.1.20-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32252"/>
          <criterion comment="mysql-devel is earlier than 0:4.1.20-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32551"/>
          <criterion comment="mysql-bench is earlier than 0:4.1.20-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32245"/>
          <criterion comment="mysql-server is earlier than 0:4.1.20-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32560"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11035" version="5" class="vulnerability">
      <metadata>
        <title>PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on the same server.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754"/>
        <description>PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on the same server.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:55.309-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:03.735-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:38.010-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11035 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:02:18.924-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:56.367-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:38010"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37683"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37468"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37994"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37569"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37746"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37938"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38324"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38288"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38029"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:37974"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38154"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38499"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38401"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38018"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38505"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38494"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38075"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38387"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38058"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38202"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38147"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38305"/>
            <criterion comment="php-common is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38268"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38298"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:37882"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:37952"/>
            <criterion comment="php is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38099"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38415"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38511"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38115"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38367"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38569"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38440"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38536"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38507"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38316"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38493"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:37667"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38421"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11034" version="5" class="vulnerability">
      <metadata>
        <title>PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling session_decode on a string beginning with "_SESSIONs:39:".</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1701" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1701"/>
        <description>PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling session_decode on a string beginning with "_SESSION|s:39:".</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:17.534-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:02.967-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:37.241-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11034 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:29.706-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:55.412-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33459"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33371"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33748"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33090"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33419"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33665"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33475"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33282"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33636"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33548"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33156"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33407"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33562"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33500"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33725"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33105"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33501"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33691"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33662"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33087"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33640"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:32784"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33240"/>
            <criterion comment="php-common is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33527"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33617"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33561"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33385"/>
            <criterion comment="php is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33615"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33526"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33747"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33735"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33403"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33686"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33502"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33666"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33508"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33652"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33676"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33784"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33706"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11033" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in main.c of slocate 2.6, and possibly other versions, may allow local users to gain privileges via a modified slocate database that causes a negative "pathlen" value to be used.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0848" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0848"/>
        <description>Heap-based buffer overflow in main.c of slocate 2.6, and possibly other versions, may allow local users to gain privileges via a modified slocate database that causes a negative "pathlen" value to be used.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:13.111-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:02.780-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:36.972-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11033 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:24.086-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:55.131-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="slocate is earlier than 0:2.7-3" test_ref="oval:org.mitre.oval:tst:30343"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11032" version="5" class="vulnerability">
      <metadata>
        <title>The exif_read_data function in the Exif module in PHP before 4.4.1 allows remote attackers to cause a denial of service (infinite loop) via a malformed JPEG image.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3353"/>
        <description>The exif_read_data function in the Exif module in PHP before 4.4.1 allows remote attackers to cause a denial of service (infinite loop) via a malformed JPEG image.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:06.485-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:02.315-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:36.470-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11032 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:53.598-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:54.510-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-26.ent" test_ref="oval:org.mitre.oval:tst:32105"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-26.ent" test_ref="oval:org.mitre.oval:tst:32433"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-26.ent" test_ref="oval:org.mitre.oval:tst:32429"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-26.ent" test_ref="oval:org.mitre.oval:tst:32322"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-26.ent" test_ref="oval:org.mitre.oval:tst:32301"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-26.ent" test_ref="oval:org.mitre.oval:tst:32253"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-26.ent" test_ref="oval:org.mitre.oval:tst:32050"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32261"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32003"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32346"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32114"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32325"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32420"/>
            <criterion comment="php is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32337"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32287"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32016"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32405"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32397"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32321"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32207"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:31926"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11031" version="5" class="vulnerability">
      <metadata>
        <title>The raw_sendmsg function in the Linux kernel 2.6 before 2.6.13.1 allows local users to cause a denial of service (change hardware state) or read from arbitrary memory via crafted input.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2492" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2492"/>
        <description>The raw_sendmsg function in the Linux kernel 2.6 before 2.6.13.1 allows local users to cause a denial of service (change hardware state) or read from arbitrary memory via crafted input.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:46.620-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:02.055-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:36.188-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11031 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:25.194-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:54.145-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31896"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31885"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31861"/>
          <criterion comment="kernel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31550"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31914"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31924"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:32023"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11030" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in Ethereal 0.9.x up to 0.10.14 allow remote attackers to cause a denial of service (crash from null dereference) via (1) an invalid display filter, or the (2) GSM SMS, (3) ASN.1-based, (4) DCERPC NT, (5) PER, (6) RPC, (7) DCERPC, and (8) ASN.1 dissectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1939" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1939"/>
        <description>Multiple unspecified vulnerabilities in Ethereal 0.9.x up to 0.10.14 allow remote attackers to cause a denial of service (crash from null dereference) via (1) an invalid display filter, or the (2) GSM SMS, (3) ASN.1-based, (4) DCERPC NT, (5) PER, (6) RPC, (7) DCERPC, and (8) ASN.1 dissectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:43.949-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:01.779-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:35.868-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11030 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:53.739-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:53.701-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.99.0-EL3.2" test_ref="oval:org.mitre.oval:tst:32590"/>
            <criterion comment="ethereal is earlier than 0:0.99.0-EL3.2" test_ref="oval:org.mitre.oval:tst:32631"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.99.0-EL4.2" test_ref="oval:org.mitre.oval:tst:32299"/>
            <criterion comment="ethereal is earlier than 0:0.99.0-EL4.2" test_ref="oval:org.mitre.oval:tst:32238"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11029" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.c.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6352" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6352"/>
        <description>Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.c.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:28.084-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:01.525-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:35.528-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11029 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:27.417-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:53.296-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libexif-devel is earlier than 0:0.5.12-5.1.0.2.el4_6.1" test_ref="oval:org.mitre.oval:tst:35881"/>
            <criterion comment="libexif is earlier than 0:0.5.12-5.1.0.2.el4_6.1" test_ref="oval:org.mitre.oval:tst:35851"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libexif-devel is earlier than 0:0.6.13-4.0.2.el5_1.1" test_ref="oval:org.mitre.oval:tst:35024"/>
            <criterion comment="libexif is earlier than 0:0.6.13-4.0.2.el5_1.1" test_ref="oval:org.mitre.oval:tst:35823"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11028" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in PHP before 5.2.4 has unknown impact and attack vectors, related to an "Improved fix for MOPB-03-2007," probably a variant of CVE-2007-1285.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4670"/>
        <description>Unspecified vulnerability in PHP before 5.2.4 has unknown impact and attack vectors, related to an "Improved fix for MOPB-03-2007," probably a variant of CVE-2007-1285.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:38.467-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:00.738-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:34.426-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11028 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:55.476-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:52.362-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35216"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35012"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:34787"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35164"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:34818"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35171"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:34820"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35008"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:34796"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35363"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35010"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35249"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:34683"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:34365"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:34976"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35087"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35298"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35289"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35309"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35263"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35044"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35279"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34964"/>
            <criterion comment="php-common is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34896"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35084"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35078"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34802"/>
            <criterion comment="php is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35270"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35361"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34769"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35108"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35037"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34943"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34689"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35221"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35077"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34934"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35170"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34376"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34764"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11027" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the slc_add_reply function in various BSD-based Telnet clients, when handling LINEMODE suboptions, allows remote attackers to execute arbitrary code via a reply with a large number of Set Local Character (SLC) commands.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0086"/>
        <description>Heap-based buffer overflow in less in Red Hat Enterprise Linux 3 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted file, as demonstrated using the UTF-8 locale.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:23.903-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:00.547-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:34.211-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11027 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:41.943-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:52.092-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="less is earlier than 0:378-12" test_ref="oval:org.mitre.oval:tst:31193"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11026" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the MMSE dissector for Ethereal 0.10.1 to 0.10.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0507"/>
        <description>Buffer overflow in the MMSE dissector for Ethereal 0.10.1 to 0.10.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:32.229-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:07:00.355-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:33.946-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11026 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:50.566-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:51.765-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="ethereal-gnome is earlier than 0:0.10.3-0.30E.2" test_ref="oval:org.mitre.oval:tst:30484"/>
          <criterion comment="ethereal is earlier than 0:0.10.3-0.30E.2" test_ref="oval:org.mitre.oval:tst:30678"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11025" version="5" class="vulnerability">
      <metadata>
        <title>The (1) Net::ftptls, (2) Net::telnets, (3) Net::imap, (4) Net::pop, and (5) Net::smtp libraries in Ruby 1.8.5 and 1.8.6 do not verify that the commonName (CN) field in a server certificate matches the domain name in a request sent over SSL, which makes it easier for remote attackers to intercept SSL transmissions via a man-in-the-middle attack or spoofed web site, different components than CVE-2007-5162.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5770" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5770"/>
        <description>The (1) Net::ftptls, (2) Net::telnets, (3) Net::imap, (4) Net::pop, and (5) Net::smtp libraries in Ruby 1.8.5 and 1.8.6 do not verify that the commonName (CN) field in a server certificate matches the domain name in a request sent over SSL, which makes it easier for remote attackers to intercept SSL transmissions via a man-in-the-middle attack or spoofed web site, different components than CVE-2007-5162.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:07.308-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:59.888-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:33.515-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11025 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:14.808-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:51.219-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.8.1-7.EL4.8.1" test_ref="oval:org.mitre.oval:tst:35449"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.1-7.EL4.8.1" test_ref="oval:org.mitre.oval:tst:35355"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.1-7.EL4.8.1" test_ref="oval:org.mitre.oval:tst:35320"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.1-7.EL4.8.1" test_ref="oval:org.mitre.oval:tst:35295"/>
            <criterion comment="ruby is earlier than 0:1.8.1-7.EL4.8.1" test_ref="oval:org.mitre.oval:tst:35444"/>
            <criterion comment="irb is earlier than 0:1.8.1-7.EL4.8.1" test_ref="oval:org.mitre.oval:tst:35440"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.1-7.EL4.8.1" test_ref="oval:org.mitre.oval:tst:34852"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-ri is earlier than 0:1.8.5-5.el5_1.1" test_ref="oval:org.mitre.oval:tst:35269"/>
            <criterion comment="ruby-mode is earlier than 0:1.8.5-5.el5_1.1" test_ref="oval:org.mitre.oval:tst:35003"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.5-5.el5_1.1" test_ref="oval:org.mitre.oval:tst:34553"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.5-5.el5_1.1" test_ref="oval:org.mitre.oval:tst:35433"/>
            <criterion comment="ruby is earlier than 0:1.8.5-5.el5_1.1" test_ref="oval:org.mitre.oval:tst:34894"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.5-5.el5_1.1" test_ref="oval:org.mitre.oval:tst:35159"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.5-5.el5_1.1" test_ref="oval:org.mitre.oval:tst:35370"/>
            <criterion comment="ruby-irb is earlier than 0:1.8.5-5.el5_1.1" test_ref="oval:org.mitre.oval:tst:35472"/>
            <criterion comment="ruby-rdoc is earlier than 0:1.8.5-5.el5_1.1" test_ref="oval:org.mitre.oval:tst:35510"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11024" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in the DICOM dissector in Ethereal before 0.10.11 allows remote attackers to cause a denial of service (large memory allocation) via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1466" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1466"/>
        <description>Unknown vulnerability in the DICOM dissector in Ethereal before 0.10.11 allows remote attackers to cause a denial of service (large memory allocation) via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:14.296-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:59.639-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:33.250-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11024 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:50.481-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:50.796-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31458"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31546"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31674"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31865"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11023" version="5" class="vulnerability">
      <metadata>
        <title>FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (core dump) via malformed USR vendor-specific attributes (VSA) that cause a memcpy operation with a -1 argument.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0960" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0960"/>
        <description>FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (core dump) via malformed USR vendor-specific attributes (VSA) that cause a memcpy operation with a -1 argument.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:12.978-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:59.452-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:33.003-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11023 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:11.188-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:50.531-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="freeradius is earlier than 0:1.0.1-1.RHEL3" test_ref="oval:org.mitre.oval:tst:31016"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11022" version="5" class="vulnerability">
      <metadata>
        <title>ImageMagick before 6.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image with an invalid tag.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0759" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0759"/>
        <description>ImageMagick before 6.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image with an invalid tag.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:16.907-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:59.217-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:32.752-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11022 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:46.439-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:50.223-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="ImageMagick-c++-devel is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30471"/>
          <criterion comment="ImageMagick is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30355"/>
          <criterion comment="ImageMagick-perl is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30877"/>
          <criterion comment="ImageMagick-devel is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30918"/>
          <criterion comment="ImageMagick-c++ is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30938"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11021" version="5" class="vulnerability">
      <metadata>
        <title>The drive_init function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2004" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2004"/>
        <description>The drive_init function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:44.498-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:58.959-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:32.529-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11021 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:47.587-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:49.864-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="xen-libs is earlier than 0:3.0.3-41.el5_1.5" test_ref="oval:org.mitre.oval:tst:36530"/>
          <criterion comment="xen is earlier than 0:3.0.3-41.el5_1.5" test_ref="oval:org.mitre.oval:tst:36543"/>
          <criterion comment="xen-devel is earlier than 0:3.0.3-41.el5_1.5" test_ref="oval:org.mitre.oval:tst:35758"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11019" version="5" class="vulnerability">
      <metadata>
        <title>The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3720" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3720"/>
        <description>The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:41.785-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:58.615-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:31.301-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11019 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:45.643-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:49.340-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="expat is earlier than 0:1.95.5-6.2" test_ref="oval:org.mitre.oval:tst:39654"/>
            <criterion comment="expat-devel is earlier than 0:1.95.5-6.2" test_ref="oval:org.mitre.oval:tst:39129"/>
            <criterion comment="4Suite is earlier than 0:0.11.1-15" test_ref="oval:org.mitre.oval:tst:39666"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="expat is earlier than 0:1.95.7-4.el4_8.2" test_ref="oval:org.mitre.oval:tst:39733"/>
            <criterion comment="PyXML is earlier than 0:0.8.3-6.el4_8.2" test_ref="oval:org.mitre.oval:tst:39810"/>
            <criterion comment="expat-devel is earlier than 0:1.95.7-4.el4_8.2" test_ref="oval:org.mitre.oval:tst:39660"/>
            <criterion comment="4Suite is earlier than 0:1.0-3.el4_8.1" test_ref="oval:org.mitre.oval:tst:39576"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="expat is earlier than 0:1.95.8-8.3.el5_4.2" test_ref="oval:org.mitre.oval:tst:39521"/>
            <criterion comment="PyXML is earlier than 0:0.8.4-4.el5_4.2" test_ref="oval:org.mitre.oval:tst:39204"/>
            <criterion comment="expat-devel is earlier than 0:1.95.8-8.3.el5_4.2" test_ref="oval:org.mitre.oval:tst:39647"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11018" version="5" class="vulnerability">
      <metadata>
        <title>The dbg_lvl file for the megaraid_sas driver in the Linux kernel before 2.6.27 has world-writable permissions, which allows local users to change the (1) behavior and (2) logging level of the driver by modifying this file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3889" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3889"/>
        <description>The dbg_lvl file for the megaraid_sas driver in the Linux kernel before 2.6.27 has world-writable permissions, which allows local users to change the (1) behavior and (2) logging level of the driver by modifying this file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:37.834-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:58.135-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:30.717-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11018 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:40.542-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:48.661-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39984"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:40053"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39873"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39932"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39894"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39858"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:40016"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39833"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39555"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39325"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:40011"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40050"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39464"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39090"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40063"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39443"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39703"/>
            <criterion comment="kernel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39080"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39862"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40057"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40029"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39849"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40039"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11017" version="5" class="vulnerability">
      <metadata>
        <title>The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable destruction routines.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1285" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1285"/>
        <description>The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable destruction routines.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:32.075-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:57.264-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:29.907-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11017 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:09:00.458-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:47.724-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33776"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33817"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33769"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33528"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33915"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33822"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33351"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:34016"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33395"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33957"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33405"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33642"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33024"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33690"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33995"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33892"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33945"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33711"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33857"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33644"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33920"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:32784"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33240"/>
            <criterion comment="php-common is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33527"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33617"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33561"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33385"/>
            <criterion comment="php is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33615"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33526"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33747"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33735"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33403"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33686"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33502"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33666"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33508"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33652"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33676"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33784"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33706"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11016" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows and facilitate phishing attacks, aka the "Dialog Box Spoofing Vulnerability."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0144" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0144"/>
        <description>Firefox before 1.0 and Mozilla before 1.7.5 display the secure site lock icon when a view-source: URL references a secure SSL site while an insecure page is being loaded, which could facilitate phishing attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:01.864-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:56.728-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:29.382-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11016 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:25.731-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:47.084-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:30819"/>
            <criterion comment="mozilla is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31515"/>
            <criterion comment="mozilla-chat is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31278"/>
            <criterion comment="mozilla-mail is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31465"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31606"/>
            <criterion comment="mozilla-devel is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31480"/>
            <criterion comment="mozilla-nss is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31417"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31313"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31469"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31598"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:30665"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.3" test_ref="oval:org.mitre.oval:tst:31499"/>
            <criterion comment="mozilla is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31604"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31381"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31622"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:30651"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.3" test_ref="oval:org.mitre.oval:tst:31560"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31110"/>
            <criterion comment="evolution is earlier than 0:2.0.2-14" test_ref="oval:org.mitre.oval:tst:31003"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31404"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31375"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31106"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31418"/>
            <criterion comment="evolution-devel is earlier than 0:2.0.2-14" test_ref="oval:org.mitre.oval:tst:31558"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11015" version="5" class="vulnerability">
      <metadata>
        <title>Format string vulnerability in Real HelixPlayer and RealPlayer 10 allows remote attackers to execute arbitrary code via the (1) image handle or (2) timeformat attribute in a RealPix (.rp) or RealText (.rt) file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2710" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2710"/>
        <description>Format string vulnerability in Real HelixPlayer and RealPlayer 10 allows remote attackers to execute arbitrary code via the (1) image handle or (2) timeformat attribute in a RealPix (.rp) or RealText (.rt) file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:47.355-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:56.545-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:29.170-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11015 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:04.630-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:46.741-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="HelixPlayer is earlier than 1:1.0.6-0.EL4.1" test_ref="oval:org.mitre.oval:tst:31952"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11014" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger memory corruption.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5959" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5959"/>
        <description>Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:32.803-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:55.961-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:28.582-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11014 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:32.728-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:45.827-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35246"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35338"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35812"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35754"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35763"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35809"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35651"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35146"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35423"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.7.el3" test_ref="oval:org.mitre.oval:tst:35775"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:35664"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:35628"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-7.el4" test_ref="oval:org.mitre.oval:tst:35520"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:35267"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:35702"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:35858"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.8.el4" test_ref="oval:org.mitre.oval:tst:34811"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:35499"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:35523"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:35602"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:35697"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-7.el4" test_ref="oval:org.mitre.oval:tst:34917"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-7.el5" test_ref="oval:org.mitre.oval:tst:35421"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-7.el5" test_ref="oval:org.mitre.oval:tst:35528"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-7.el5" test_ref="oval:org.mitre.oval:tst:35742"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11013" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to reference remote files and possibly load chrome: URLs by tricking the user into copying or dragging links.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3812" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3812"/>
        <description>Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to reference remote files and possibly load chrome: URLs by tricking the user into copying or dragging links.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:45.554-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:55.488-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:28.061-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11013 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:34.420-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:44.749-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32342"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32877"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:31982"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32816"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32080"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32904"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32915"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32924"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32822"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32555"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32873"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32693"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32886"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32418"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32496"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32929"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32777"/>
            <criterion comment="firefox is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32896"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32722"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32906"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32905"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32925"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32624"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11012" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the "file" program 4.20, when running on 32-bit systems, as used in products including The Sleuth Kit, might allow user-assisted attackers to execute arbitrary code via a large file that triggers an overflow that bypasses an assert() statement.  NOTE: this issue is due to an incorrect patch for CVE-2007-1536.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2799" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2799"/>
        <description>Integer overflow in the "file" program 4.20, when running on 32-bit systems, as used in products including The Sleuth Kit, might allow user-assisted attackers to execute arbitrary code via a large file that triggers an overflow that bypasses an assert() statement.  NOTE: this issue is due to an incorrect patch for CVE-2007-1536.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:14.321-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:55.264-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:27.778-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11012 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:17.705-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:44.370-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="file is earlier than 0:4.10-3.0.2.el4" test_ref="oval:org.mitre.oval:tst:34414"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="file is earlier than 0:4.17-9.0.1.el5" test_ref="oval:org.mitre.oval:tst:33605"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11011" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the ProcDbeSwapBuffers function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of unspecified data structures.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6103" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6103"/>
        <description>Integer overflow in the ProcDbeSwapBuffers function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of unspecified data structures.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:23.417-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:54.446-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:26.882-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11011 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:58.559-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:43.407-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33279"/>
            <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33033"/>
            <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33135"/>
            <criterion comment="XFree86-libs is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:32975"/>
            <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33134"/>
            <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:32756"/>
            <criterion comment="XFree86-twm is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33026"/>
            <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33238"/>
            <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33343"/>
            <criterion comment="XFree86-doc is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:32868"/>
            <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:32574"/>
            <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33217"/>
            <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33260"/>
            <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33106"/>
            <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33262"/>
            <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33329"/>
            <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:32993"/>
            <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33159"/>
            <criterion comment="XFree86-xdm is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33053"/>
            <criterion comment="XFree86-sdk is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33163"/>
            <criterion comment="XFree86 is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33308"/>
            <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:32484"/>
            <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33294"/>
            <criterion comment="XFree86-xfs is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33176"/>
            <criterion comment="XFree86-tools is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:32802"/>
            <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:32909"/>
            <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33270"/>
            <criterion comment="XFree86-xauth is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33234"/>
            <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33180"/>
            <criterion comment="XFree86-devel is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:32796"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33158"/>
            <criterion comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33322"/>
            <criterion comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33297"/>
            <criterion comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33211"/>
            <criterion comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33206"/>
            <criterion comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33346"/>
            <criterion comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33222"/>
            <criterion comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33340"/>
            <criterion comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33228"/>
            <criterion comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33187"/>
            <criterion comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33289"/>
            <criterion comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33242"/>
            <criterion comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33068"/>
            <criterion comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33283"/>
            <criterion comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33337"/>
            <criterion comment="xorg-x11 is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:32984"/>
            <criterion comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33352"/>
            <criterion comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33122"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11010" version="5" class="vulnerability">
      <metadata>
        <title>Off-by-one error in the DHCP/BOOTP dissector in Wireshark before 0.99.6 allows remote attackers to cause a denial of service (crash) via crafted DHCP-over-DOCSIS packets.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3393" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3393"/>
        <description>Off-by-one error in the DHCP/BOOTP dissector in Wireshark before 0.99.6 allows remote attackers to cause a denial of service (crash) via crafted DHCP-over-DOCSIS packets.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:48.870-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:54.113-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:26.528-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11010 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:22.181-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:42.876-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-EL3.1" test_ref="oval:org.mitre.oval:tst:36111"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-EL3.1" test_ref="oval:org.mitre.oval:tst:36043"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-3.el3" test_ref="oval:org.mitre.oval:tst:35411"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-3.el3" test_ref="oval:org.mitre.oval:tst:36140"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.6-EL4.1" test_ref="oval:org.mitre.oval:tst:34755"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.6-EL4.1" test_ref="oval:org.mitre.oval:tst:34881"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.6-1.el5" test_ref="oval:org.mitre.oval:tst:34336"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.6-1.el5" test_ref="oval:org.mitre.oval:tst:34784"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11009" version="5" class="vulnerability">
      <metadata>
        <title>Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome 1.0.154.53, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by setting an unspecified property of an HTML tag that causes child elements to be freed and later accessed when an HTML error occurs, related to "recursion in certain DOM event handlers."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1690" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1690"/>
        <description>Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome 1.0.154.53, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by setting an unspecified property of an HTML tag that causes child elements to be freed and later accessed when an HTML error occurs, related to "recursion in certain DOM event handlers."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:16.970-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:53.805-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:26.252-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11009 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:57.416-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:42.458-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdelibs is earlier than 6:3.3.1-14.el4" test_ref="oval:org.mitre.oval:tst:37977"/>
            <criterion comment="kdelibs-devel is earlier than 6:3.3.1-14.el4" test_ref="oval:org.mitre.oval:tst:38299"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdelibs-apidocs is earlier than 6:3.5.4-22.el5_3" test_ref="oval:org.mitre.oval:tst:38102"/>
            <criterion comment="kdelibs is earlier than 6:3.5.4-22.el5_3" test_ref="oval:org.mitre.oval:tst:38389"/>
            <criterion comment="kdelibs-devel is earlier than 6:3.5.4-22.el5_3" test_ref="oval:org.mitre.oval:tst:38720"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11007" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5, when using an RSA key with exponent 3, does not properly handle extra data in a signature, which allows remote attackers to forge signatures for SSL/TLS and email certificates, a similar vulnerability to CVE-2006-4339.  NOTE: on 20061107, Mozilla released an advisory stating that these versions were not completely patched by MFSA2006-60. The newer fixes for 1.5.0.7 are covered by CVE-2006-5462.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4340" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4340"/>
        <description>Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5, when using an RSA key with exponent 3, does not properly handle extra data in a signature, which allows remote attackers to forge signatures for SSL/TLS and email certificates, a similar vulnerability to CVE-2006-4339.  NOTE: on 20061107, Mozilla released an advisory stating that these versions were not completely patched by MFSA2006-60. The newer fixes for 1.5.0.7 are covered by CVE-2006-5462.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:46.381-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:53.315-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:25.700-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11007 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:00.262-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:41.791-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32759"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32989"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32809"/>
            <criterion comment="seamonkey is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32779"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32954"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32668"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:33010"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32811"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32981"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:33061"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.4.el4" test_ref="oval:org.mitre.oval:tst:32072"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:33120"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32842"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:32910"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32677"/>
            <criterion comment="seamonkey is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32933"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32243"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.4.el4" test_ref="oval:org.mitre.oval:tst:33062"/>
            <criterion comment="firefox is earlier than 0:1.5.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:32951"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32978"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:33072"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:33079"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32121"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:33077"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11006" version="5" class="vulnerability">
      <metadata>
        <title>Multiple heap-based buffer overflows in OpenOffice.org before 2.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Quattro Pro (QPRO) file with crafted (1) Attribute and (2) Font Description records.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5745" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5745"/>
        <description>Multiple heap-based buffer overflows in OpenOffice.org before 2.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Quattro Pro (QPRO) file with crafted (1) Attribute and (2) Font Description records.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:12.572-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:51.339-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:23.659-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11006 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:14:18.219-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:39.735-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org2-langpack-lt_LT is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36006"/>
            <criterion comment="openoffice.org2-langpack-nn_NO is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35494"/>
            <criterion comment="openoffice.org2-langpack-ga_IE is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36190"/>
            <criterion comment="openoffice.org2-langpack-zh_CN is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36501"/>
            <criterion comment="openoffice.org2-javafilter is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35931"/>
            <criterion comment="openoffice.org2-langpack-he_IL is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36114"/>
            <criterion comment="openoffice.org2-draw is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36163"/>
            <criterion comment="openoffice.org2-langpack-ko_KR is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36172"/>
            <criterion comment="openoffice.org2-langpack-ca_ES is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36000"/>
            <criterion comment="openoffice.org2-base is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36287"/>
            <criterion comment="openoffice.org2-langpack-fr is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36118"/>
            <criterion comment="openoffice.org2-langpack-pa_IN is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36384"/>
            <criterion comment="openoffice.org2-langpack-da_DK is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36302"/>
            <criterion comment="openoffice.org2-emailmerge is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35683"/>
            <criterion comment="openoffice.org2-langpack-pt_PT is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36473"/>
            <criterion comment="openoffice.org2-langpack-es is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36223"/>
            <criterion comment="openoffice.org2-langpack-sv is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36224"/>
            <criterion comment="openoffice.org2-langpack-ms_MY is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36154"/>
            <criterion comment="openoffice.org2-langpack-cs_CZ is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36091"/>
            <criterion comment="openoffice.org2-xsltfilter is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35963"/>
            <criterion comment="openoffice.org2-langpack-ja_JP is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36083"/>
            <criterion comment="openoffice.org2-langpack-hu_HU is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36271"/>
            <criterion comment="openoffice.org2-langpack-zh_TW is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35954"/>
            <criterion comment="openoffice.org2-langpack-sl_SI is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35495"/>
            <criterion comment="openoffice.org2-langpack-de is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36299"/>
            <criterion comment="openoffice.org2-pyuno is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36417"/>
            <criterion comment="openoffice.org2 is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35864"/>
            <criterion comment="openoffice.org2-langpack-tr_TR is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35957"/>
            <criterion comment="openoffice.org2-impress is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36286"/>
            <criterion comment="openoffice.org2-langpack-ar is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36345"/>
            <criterion comment="openoffice.org2-langpack-bn is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36181"/>
            <criterion comment="openoffice.org2-langpack-pt_BR is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35811"/>
            <criterion comment="openoffice.org2-langpack-af_ZA is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35640"/>
            <criterion comment="openoffice.org2-langpack-pl_PL is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36248"/>
            <criterion comment="openoffice.org2-calc is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36212"/>
            <criterion comment="openoffice.org2-langpack-zu_ZA is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36434"/>
            <criterion comment="openoffice.org2-langpack-fi_FI is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36159"/>
            <criterion comment="openoffice.org2-langpack-sk_SK is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36411"/>
            <criterion comment="openoffice.org2-langpack-hi_IN is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36382"/>
            <criterion comment="openoffice.org2-langpack-nb_NO is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36148"/>
            <criterion comment="openoffice.org2-langpack-th_TH is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36144"/>
            <criterion comment="openoffice.org2-langpack-et_EE is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36401"/>
            <criterion comment="openoffice.org2-langpack-gl_ES is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36185"/>
            <criterion comment="openoffice.org2-langpack-it is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36254"/>
            <criterion comment="openoffice.org2-langpack-hr_HR is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36289"/>
            <criterion comment="openoffice.org2-langpack-ta_IN is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36009"/>
            <criterion comment="openoffice.org2-langpack-gu_IN is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36216"/>
            <criterion comment="openoffice.org2-testtools is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36498"/>
            <criterion comment="openoffice.org2-langpack-eu_ES is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36314"/>
            <criterion comment="openoffice.org2-langpack-el_GR is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36332"/>
            <criterion comment="openoffice.org2-core is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36253"/>
            <criterion comment="openoffice.org2-langpack-ru is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35829"/>
            <criterion comment="openoffice.org2-langpack-bg_BG is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36429"/>
            <criterion comment="openoffice.org2-langpack-nl is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36073"/>
            <criterion comment="openoffice.org2-langpack-sr_CS is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35502"/>
            <criterion comment="openoffice.org2-langpack-cy_GB is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36174"/>
            <criterion comment="openoffice.org2-math is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36366"/>
            <criterion comment="openoffice.org2-graphicfilter is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36276"/>
            <criterion comment="openoffice.org2-writer is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36057"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-langpack-sk_SK is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36162"/>
            <criterion comment="openoffice.org-langpack-zu_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36101"/>
            <criterion comment="openoffice.org-langpack-pa_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35841"/>
            <criterion comment="openoffice.org-langpack-hi_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36520"/>
            <criterion comment="openoffice.org-langpack-et_EE is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36441"/>
            <criterion comment="openoffice.org-langpack-kn_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35845"/>
            <criterion comment="openoffice.org is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36307"/>
            <criterion comment="openoffice.org-langpack-zh_TW is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36505"/>
            <criterion comment="openoffice.org-writer is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36145"/>
            <criterion comment="openoffice.org-langpack-ve_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36546"/>
            <criterion comment="openoffice.org-langpack-ga_IE is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36168"/>
            <criterion comment="openoffice.org-langpack-ta_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36283"/>
            <criterion comment="openoffice.org-langpack-ko_KR is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36322"/>
            <criterion comment="openoffice.org-langpack-or_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36206"/>
            <criterion comment="openoffice.org-langpack-da_DK is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36244"/>
            <criterion comment="openoffice.org-langpack-sr_CS is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36471"/>
            <criterion comment="openoffice.org-langpack-pl_PL is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36483"/>
            <criterion comment="openoffice.org-langpack-fr is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36328"/>
            <criterion comment="openoffice.org-langpack-ts_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35810"/>
            <criterion comment="openoffice.org-javafilter is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36481"/>
            <criterion comment="openoffice.org-langpack-as_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36465"/>
            <criterion comment="openoffice.org-testtools is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36378"/>
            <criterion comment="openoffice.org-langpack-hr_HR is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36013"/>
            <criterion comment="openoffice.org-langpack-de is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36191"/>
            <criterion comment="openoffice.org-emailmerge is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35521"/>
            <criterion comment="openoffice.org-xsltfilter is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36257"/>
            <criterion comment="openoffice.org-langpack-tn_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35797"/>
            <criterion comment="openoffice.org-langpack-te_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36391"/>
            <criterion comment="openoffice.org-langpack-sv is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36398"/>
            <criterion comment="openoffice.org-base is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36329"/>
            <criterion comment="openoffice.org-langpack-ca_ES is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36437"/>
            <criterion comment="openoffice.org-langpack-nr_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36130"/>
            <criterion comment="openoffice.org-core is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35843"/>
            <criterion comment="openoffice.org-langpack-nl is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36220"/>
            <criterion comment="openoffice.org-langpack-ur is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36466"/>
            <criterion comment="openoffice.org-langpack-nn_NO is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36032"/>
            <criterion comment="openoffice.org-langpack-ar is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36187"/>
            <criterion comment="openoffice.org-langpack-ja_JP is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36058"/>
            <criterion comment="openoffice.org-langpack-gu_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36160"/>
            <criterion comment="openoffice.org-langpack-tr_TR is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36457"/>
            <criterion comment="openoffice.org-langpack-eu_ES is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36341"/>
            <criterion comment="openoffice.org-langpack-fi_FI is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36232"/>
            <criterion comment="openoffice.org-graphicfilter is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36089"/>
            <criterion comment="openoffice.org-pyuno is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36514"/>
            <criterion comment="openoffice.org-langpack-ml_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36486"/>
            <criterion comment="openoffice.org-langpack-gl_ES is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36508"/>
            <criterion comment="openoffice.org-langpack-zh_CN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36507"/>
            <criterion comment="openoffice.org-langpack-xh_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36348"/>
            <criterion comment="openoffice.org-langpack-it is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36559"/>
            <criterion comment="openoffice.org-langpack-es is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36282"/>
            <criterion comment="openoffice.org-langpack-nb_NO is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36405"/>
            <criterion comment="openoffice.org-langpack-sl_SI is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36492"/>
            <criterion comment="openoffice.org-draw is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36369"/>
            <criterion comment="openoffice.org-langpack-nso_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36308"/>
            <criterion comment="openoffice.org-langpack-ms_MY is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36358"/>
            <criterion comment="openoffice.org-langpack-el_GR is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35561"/>
            <criterion comment="openoffice.org-langpack-hu_HU is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36070"/>
            <criterion comment="openoffice.org-langpack-ss_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36189"/>
            <criterion comment="openoffice.org-langpack-bn is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35657"/>
            <criterion comment="openoffice.org-langpack-he_IL is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36204"/>
            <criterion comment="openoffice.org-langpack-pt_PT is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36544"/>
            <criterion comment="openoffice.org-langpack-lt_LT is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36218"/>
            <criterion comment="openoffice.org-langpack-af_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36400"/>
            <criterion comment="openoffice.org-langpack-bg_BG is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36037"/>
            <criterion comment="openoffice.org-calc is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35732"/>
            <criterion comment="openoffice.org-langpack-cs_CZ is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36117"/>
            <criterion comment="openoffice.org-langpack-cy_GB is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36303"/>
            <criterion comment="openoffice.org-langpack-mr_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36306"/>
            <criterion comment="openoffice.org-langpack-th_TH is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35966"/>
            <criterion comment="openoffice.org-langpack-pt_BR is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36467"/>
            <criterion comment="openoffice.org-langpack-ru is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35570"/>
            <criterion comment="openoffice.org-math is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36376"/>
            <criterion comment="openoffice.org-impress is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36339"/>
            <criterion comment="openoffice.org-langpack-st_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35999"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11005" version="5" class="vulnerability">
      <metadata>
        <title>The http-index-format MIME type parser (nsDirIndexParser) in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 does not check for an allocation failure, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP index response with a crafted 200 header, which triggers memory corruption and a buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0017"/>
        <description>The http-index-format MIME type parser (nsDirIndexParser) in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 does not check for an allocation failure, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP index response with a crafted 200 header, which triggers memory corruption and a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:48.212-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:50.616-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:22.968-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11005 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:10.650-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:38.893-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37159"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37875"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37293"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37934"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37671"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37932"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37970"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37357"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37852"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37844"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37232"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-3.el4" test_ref="oval:org.mitre.oval:tst:38065"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37914"/>
            <criterion comment="firefox is earlier than 0:3.0.4-1.el4" test_ref="oval:org.mitre.oval:tst:37904"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-3.el4" test_ref="oval:org.mitre.oval:tst:37840"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37991"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37955"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37777"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:38009"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-20.el5" test_ref="oval:org.mitre.oval:tst:37773"/>
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37531"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37899"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37454"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:38021"/>
            <criterion comment="yelp is earlier than 0:2.16.0-22.el5" test_ref="oval:org.mitre.oval:tst:37645"/>
            <criterion comment="devhelp is earlier than 0:0.12-20.el5" test_ref="oval:org.mitre.oval:tst:37958"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37388"/>
            <criterion comment="firefox is earlier than 0:3.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37066"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37648"/>
            <criterion comment="nss-tools is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37936"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11004" version="5" class="vulnerability">
      <metadata>
        <title>PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, and 8.4 before 8.4.4 does not properly check privileges during certain RESET ALL operations, which allows remote authenticated users to remove arbitrary parameter settings via a (1) ALTER USER or (2) ALTER DATABASE statement.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1975" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1975"/>
        <description>PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, and 8.4 before 8.4.4 does not properly check privileges during certain RESET ALL operations, which allows remote authenticated users to remove arbitrary parameter settings via a (1) ALTER USER or (2) ALTER DATABASE statement.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:00.511-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:49.972-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:22.330-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11004 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:12:43.153-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:37.743-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40486"/>
            <criterion comment="postgresql-docs is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40521"/>
            <criterion comment="postgresql-pl is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40292"/>
            <criterion comment="postgresql-tcl is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40516"/>
            <criterion comment="postgresql-libs is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40066"/>
            <criterion comment="postgresql-contrib is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40399"/>
            <criterion comment="postgresql-python is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40512"/>
            <criterion comment="postgresql-test is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40314"/>
            <criterion comment="postgresql-jdbc is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40428"/>
            <criterion comment="postgresql-server is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40366"/>
            <criterion comment="postgresql-devel is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40465"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql84-server is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40291"/>
            <criterion comment="postgresql84-plpython is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40396"/>
            <criterion comment="postgresql84-libs is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40193"/>
            <criterion comment="postgresql84-devel is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40369"/>
            <criterion comment="postgresql84-python is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40555"/>
            <criterion comment="postgresql84-plperl is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40294"/>
            <criterion comment="postgresql-server is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40509"/>
            <criterion comment="postgresql84-test is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40470"/>
            <criterion comment="postgresql-devel is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40309"/>
            <criterion comment="postgresql is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40401"/>
            <criterion comment="postgresql84-tcl is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40455"/>
            <criterion comment="postgresql-docs is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40402"/>
            <criterion comment="postgresql-pl is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40538"/>
            <criterion comment="postgresql-libs is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40515"/>
            <criterion comment="postgresql-tcl is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:39839"/>
            <criterion comment="postgresql84-pltcl is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40452"/>
            <criterion comment="postgresql-contrib is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40505"/>
            <criterion comment="postgresql-python is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40251"/>
            <criterion comment="postgresql84-contrib is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40108"/>
            <criterion comment="postgresql-test is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40253"/>
            <criterion comment="postgresql84-docs is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40257"/>
            <criterion comment="postgresql84 is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40379"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11003" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the IEEE 802.11 dissector in Wireshark (formerly Ethereal) 0.10.14 through 0.99.4 allows remote attackers to cause a denial of service (application crash) via unspecified vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0457" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0457"/>
        <description>Unspecified vulnerability in the IEEE 802.11 dissector in Wireshark (formerly Ethereal) 0.10.14 through 0.99.4 allows remote attackers to cause a denial of service (application crash) via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:18.706-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:49.670-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:21.975-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11003 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:39.975-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:37.273-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.5-EL3.1" test_ref="oval:org.mitre.oval:tst:33506"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.5-EL3.1" test_ref="oval:org.mitre.oval:tst:33535"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.5-EL4.1" test_ref="oval:org.mitre.oval:tst:33380"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.5-EL4.1" test_ref="oval:org.mitre.oval:tst:33530"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.5-1.el5" test_ref="oval:org.mitre.oval:tst:33509"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.5-1.el5" test_ref="oval:org.mitre.oval:tst:33591"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11002" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the X11 dissector in Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (divide-by-zero) via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3248"/>
        <description>Unspecified vulnerability in the X11 dissector in Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (divide-by-zero) via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:10.837-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:49.427-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:21.710-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11002 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:59.304-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:36.855-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.13-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32189"/>
            <criterion comment="ethereal is earlier than 0:0.10.13-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32138"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.13-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32341"/>
            <criterion comment="ethereal is earlier than 0:0.10.13-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32202"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11001" version="5" class="vulnerability">
      <metadata>
        <title>Lynx 2.8.5, and other versions before 2.8.6dev.15, allows remote attackers to execute arbitrary commands via (1) lynxcgi:, (2) lynxexec, and (3) lynxprog links, which are not properly restricted in the default configuration in some environments.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0207"/>
        <description>Unknown vulnerability in Linux kernel 2.4.x, 2.5.x, and 2.6.x allows NFS clients to cause a denial of service via O_DIRECT.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:12.695-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:49.163-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:21.321-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11001 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:12:38.706-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:36.500-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31545"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31539"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31661"/>
          <criterion comment="kernel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31482"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31112"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31605"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31330"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11000" version="5" class="vulnerability">
      <metadata>
        <title>The XBM decoder in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to read uninitialized memory, and possibly obtain sensitive information in opportunistic circumstances, via a crafted XBM image file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4069" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4069"/>
        <description>The XBM decoder in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to read uninitialized memory, and possibly obtain sensitive information in opportunistic circumstances, via a crafted XBM image file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:22.192-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:48.674-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:20.834-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11000 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:15.668-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:35.726-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37411"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36691"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37031"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37528"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36726"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37435"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37680"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36725"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37449"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37356"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.10.el4" test_ref="oval:org.mitre.oval:tst:37564"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:36913"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37609"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.10.el4" test_ref="oval:org.mitre.oval:tst:37306"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37499"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37444"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37543"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37552"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11" version="1" class="vulnerability">
      <metadata>
        <title>String Format Vulnerability in Solaris 8 snmpdx</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>snmpdx</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0796" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0796"/>
        <description>Format string vulnerability in the logging component of snmpdx for Solaris 5.6 through 8 allows remote attackers to gain root privileges.</description>
        <oval_repository>
          <dates>
            <submitted date="2002-09-25T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="File snmpdx exists" negate="false" test_ref="oval:org.mitre.oval:tst:3126"/>
          <criterion comment="Patch 108869-16 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3125"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="snmpdx running" negate="false" test_ref="oval:org.mitre.oval:tst:3124"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10999" version="3" class="vulnerability">
      <metadata>
        <title>Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, allows remote attackers to perform unauthorized actions via an application that grants privileges to itself, related to "Incorrect Use of System Classes" and probably related to support for JNLP files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2435" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2435"/>
        <description>Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, allows remote attackers to perform unauthorized actions via an application that grants privileges to itself, related to "Incorrect Use of System Classes" and probably related to support for JNLP files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:56.197-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:47.981-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:20.168-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criteria operator="OR">
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.9-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:34851"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.9-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:34906"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.9-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:35071"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.9-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:35018"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.9-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:34754"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.9-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:35020"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34859"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34890"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34613"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35015"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.9-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35030"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.9-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35093"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.9-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35025"/>
            <criterion comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.9-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:34845"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34956"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.9-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:34400"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34949"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35062"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.9-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35075"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.9-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:34941"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34825"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34270"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:35124"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:35140"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.9-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35013"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.9-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34974"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.9-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35014"/>
            <criterion comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.9-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34528"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34724"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.9-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34995"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34955"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34692"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.9-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35103"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.9-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34621"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10998" version="5" class="vulnerability">
      <metadata>
        <title>Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0241" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0241"/>
        <description>The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling "oversized" HTTP reply headers, which might allow remote attackers to poison the cache or bypass access controls based on header size.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:18.490-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:47.629-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:19.872-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10998 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:30.336-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:35.366-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE3-6.3E.7" test_ref="oval:org.mitre.oval:tst:30954"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE6-3.4E.3" test_ref="oval:org.mitre.oval:tst:31281"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10997" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote attackers to inject arbitrary web script or HTML via long array variables, including (1) a large number of dimensions or (2) long values, which prevents HTML tags from being removed.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0996" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0996"/>
        <description>Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote attackers to inject arbitrary web script or HTML via long array variables, including (1) a large number of dimensions or (2) long values, which prevents HTML tags from being removed.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:17.079-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:47.185-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:19.393-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10997 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:56.286-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:34.748-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32579"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32613"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32711"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32425"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32166"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32107"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32695"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:31742"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32509"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32606"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32503"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32185"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32639"/>
            <criterion comment="php is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32546"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32577"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32236"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32578"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32591"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32707"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32547"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:31727"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10996" version="5" class="vulnerability">
      <metadata>
        <title>The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly other libraries and versions, does not check the return value of the getNextLine function, which allows context-dependent attackers to execute arbitrary code via a PDF file with a crafted Type 1 font that can produce a negative value, leading to a signed-to-unsigned integer conversion error and a buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4035" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4035"/>
        <description>The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly other libraries and versions, does not check the return value of the getNextLine function, which allows context-dependent attackers to execute arbitrary code via a PDF file with a crafted Type 1 font that can produce a negative value, leading to a signed-to-unsigned integer conversion error and a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:35.153-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:46.913-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:19.163-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10996 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:06.002-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:34.427-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-17.el4_8.1" test_ref="oval:org.mitre.oval:tst:39837"/>
          <criterion comment="gpdf is earlier than 0:2.8.2-7.7.2.el4_8.6" test_ref="oval:org.mitre.oval:tst:39815"/>
          <criterion comment="xpdf is earlier than 1:3.00-23.el4_8.1" test_ref="oval:org.mitre.oval:tst:39216"/>
          <criterion comment="kdegraphics is earlier than 7:3.3.1-17.el4_8.1" test_ref="oval:org.mitre.oval:tst:38931"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10995" version="5" class="vulnerability">
      <metadata>
        <title>Directory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when using the zlib plugin, allows remote attackers to read arbitrary gzipped (.gz) mailboxes (mbox files) via a .. (dot dot) sequence in the mailbox name.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2231" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2231"/>
        <description>Directory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when using the zlib plugin, allows remote attackers to read arbitrary gzipped (.gz) mailboxes (mbox files) via a .. (dot dot) sequence in the mailbox name.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:22.583-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:46.732-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:18.910-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10995 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:46.242-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:34.145-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="dovecot is earlier than 0:1.0.7-2.el5" test_ref="oval:org.mitre.oval:tst:36019"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10994" version="5" class="vulnerability">
      <metadata>
        <title>libungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF file that triggers a null dereference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2974" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2974"/>
        <description>libungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF file that triggers a null dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:39.726-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:46.422-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:18.564-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10994 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:02.197-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:33.614-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libungif is earlier than 0:4.1.0-15.el3.3" test_ref="oval:org.mitre.oval:tst:32066"/>
            <criterion comment="libungif-devel is earlier than 0:4.1.0-15.el3.3" test_ref="oval:org.mitre.oval:tst:31940"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libungif is earlier than 0:4.1.3-1.el4.2" test_ref="oval:org.mitre.oval:tst:31956"/>
            <criterion comment="libungif-progs is earlier than 0:4.1.3-1.el4.2" test_ref="oval:org.mitre.oval:tst:32398"/>
            <criterion comment="libungif-devel is earlier than 0:4.1.3-1.el4.2" test_ref="oval:org.mitre.oval:tst:31871"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="giflib-devel is earlier than 0:4.1.3-7.1.el5_3.1" test_ref="oval:org.mitre.oval:tst:38143"/>
            <criterion comment="giflib-utils is earlier than 0:4.1.3-7.1.el5_3.1" test_ref="oval:org.mitre.oval:tst:38622"/>
            <criterion comment="giflib is earlier than 0:4.1.3-7.1.el5_3.1" test_ref="oval:org.mitre.oval:tst:38639"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10993" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in libvorbis, as used in Mozilla Firefox 3.5.x before 3.5.4, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.  NOTE: this might overlap CVE-2009-2663.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3379" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3379"/>
        <description>Multiple unspecified vulnerabilities in libvorbis, as used in Mozilla Firefox 3.5.x before 3.5.4, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.  NOTE: this might overlap CVE-2009-2663.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:32.451-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:46.125-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:18.240-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10993 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:13.899-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:33.140-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libvorbis-devel is earlier than 1:1.0-12.el3" test_ref="oval:org.mitre.oval:tst:39336"/>
            <criterion comment="libvorbis is earlier than 1:1.0-12.el3" test_ref="oval:org.mitre.oval:tst:39681"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libvorbis-devel is earlier than 1:1.1.0-3.el4_8.3" test_ref="oval:org.mitre.oval:tst:39730"/>
            <criterion comment="libvorbis is earlier than 1:1.1.0-3.el4_8.3" test_ref="oval:org.mitre.oval:tst:39644"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libvorbis-devel is earlier than 1:1.1.2-3.el5_4.4" test_ref="oval:org.mitre.oval:tst:39068"/>
            <criterion comment="libvorbis is earlier than 1:1.1.2-3.el5_4.4" test_ref="oval:org.mitre.oval:tst:39104"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10992" version="5" class="vulnerability">
      <metadata>
        <title>The ext3fs_dirhash function in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via an ext3 stream with malformed data structures.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6053" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6053"/>
        <description>The ext3fs_dirhash function in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via an ext3 stream with malformed data structures.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:24.689-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:45.773-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:17.895-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10992 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:12.532-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:32.709-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33204"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33278"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33306"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32378"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33145"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33107"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32620"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32645"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33057"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10991" version="5" class="vulnerability">
      <metadata>
        <title>X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5958" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5958"/>
        <description>X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:50.364-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:44.843-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:16.891-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10991 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:22.518-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:31.561-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35923"/>
            <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35665"/>
            <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:36014"/>
            <criterion comment="XFree86-libs is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35929"/>
            <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:36011"/>
            <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35836"/>
            <criterion comment="XFree86-twm is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35726"/>
            <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35715"/>
            <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35610"/>
            <criterion comment="XFree86-doc is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:36025"/>
            <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35789"/>
            <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35804"/>
            <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35865"/>
            <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35793"/>
            <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35903"/>
            <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35965"/>
            <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35922"/>
            <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35504"/>
            <criterion comment="XFree86-xdm is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35045"/>
            <criterion comment="XFree86-sdk is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35914"/>
            <criterion comment="XFree86 is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35831"/>
            <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35998"/>
            <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35975"/>
            <criterion comment="XFree86-xfs is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:36031"/>
            <criterion comment="XFree86-tools is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35971"/>
            <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35711"/>
            <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35933"/>
            <criterion comment="XFree86-xauth is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35826"/>
            <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35753"/>
            <criterion comment="XFree86-devel is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35678"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35795"/>
            <criterion comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35934"/>
            <criterion comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35467"/>
            <criterion comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35946"/>
            <criterion comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36116"/>
            <criterion comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35116"/>
            <criterion comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36004"/>
            <criterion comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35483"/>
            <criterion comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36103"/>
            <criterion comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36060"/>
            <criterion comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36074"/>
            <criterion comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35895"/>
            <criterion comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35905"/>
            <criterion comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36012"/>
            <criterion comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35984"/>
            <criterion comment="xorg-x11 is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35857"/>
            <criterion comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35681"/>
            <criterion comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35909"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-server-sdk is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35517"/>
            <criterion comment="xorg-x11-server-Xnest is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35690"/>
            <criterion comment="xorg-x11-server-Xvfb is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35399"/>
            <criterion comment="xorg-x11-server-Xdmx is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35908"/>
            <criterion comment="xorg-x11-server-Xephyr is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35987"/>
            <criterion comment="xorg-x11-server is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35861"/>
            <criterion comment="xorg-x11-server-Xorg is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35935"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10990" version="5" class="vulnerability">
      <metadata>
        <title>Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via vectors involving multiple plugin instances.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1198" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1198"/>
        <description>Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via vectors involving multiple plugin instances.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:58.396-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:44.219-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:16.239-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10990 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:53:08.673-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:30.691-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40598"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40703"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:39947"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40593"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40651"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:39843"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40800"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40736"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:39844"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40686"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox is earlier than 0:3.6.4-8.el4" test_ref="oval:org.mitre.oval:tst:40755"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:40296"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:39850"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:40624"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:40782"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:40431"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:40449"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gnome-python2-extras is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40435"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-21.el5" test_ref="oval:org.mitre.oval:tst:40552"/>
            <criterion comment="gnome-python2-libegg is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40721"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.2.4-10.el5" test_ref="oval:org.mitre.oval:tst:40480"/>
            <criterion comment="gnome-python2-gtkhtml2 is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40813"/>
            <criterion comment="totem is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40749"/>
            <criterion comment="xulrunner is earlier than 0:1.9.2.4-10.el5" test_ref="oval:org.mitre.oval:tst:40221"/>
            <criterion comment="gnome-python2-gtkspell is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40385"/>
            <criterion comment="yelp is earlier than 0:2.16.0-26.el5" test_ref="oval:org.mitre.oval:tst:40828"/>
            <criterion comment="devhelp is earlier than 0:0.12-21.el5" test_ref="oval:org.mitre.oval:tst:40814"/>
            <criterion comment="firefox is earlier than 0:3.6.4-8.el5" test_ref="oval:org.mitre.oval:tst:40524"/>
            <criterion comment="totem-mozplugin is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40620"/>
            <criterion comment="gnome-python2-gtkmozembed is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40722"/>
            <criterion comment="esc is earlier than 0:1.1.0-12.el5" test_ref="oval:org.mitre.oval:tst:40273"/>
            <criterion comment="totem-devel is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40637"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1099" version="5" class="vulnerability">
      <metadata>
        <title>Solaris 9 CDE ToolTalk Database Null Write Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
          <product>Common Desktop Environment</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0677" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0677"/>
        <description>CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is used as a table index by the _TT_ISCLOSE procedure.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-10-15T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2004-10-20T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-11-03T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-12-09T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-01-11T12:00:00.000-04:00" comment="modified sat-6 - Changed test to pattern match and added check for 64bit version">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </modified>
            <modified date="2005-01-14T12:00:00.000-04:00" comment="modified sat-6 - Changed regular expression test to properly check for 64bit package">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </modified>
            <status_change date="2005-01-24T02:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="fixed the service_name entity used in the inetd_object" date="2007-04-10T15:17:00.627-04:00">
              <contributor organization="Opsware, Inc.">Todd Dolinsky</contributor>
            </modified>
            <status_change date="2007-04-10T15:17:29.433-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:14.145-04:00">ACCEPTED</status_change>
            <modified comment="Fixed incorrect user_id element value in process_state.  Incorrect value was 'root', updated to value of '0'." date="2010-09-02T15:11:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T15:13:54.729-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:05.204-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="Toolktalk (SUNWtltk/SUNWtltkx) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1169"/>
          <criterion comment="Patch 112808-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1168"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="inetd.conf contains rpc.ttdbserverd" negate="false" test_ref="oval:org.mitre.oval:tst:3103"/>
          <criterion comment="inetd running" negate="false" test_ref="oval:org.mitre.oval:tst:3135"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10989" version="5" class="vulnerability">
      <metadata>
        <title>Array index error in the gdth_read_event function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a negative event index in an IOCTL request.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3080" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3080"/>
        <description>Array index error in the gdth_read_event function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a negative event index in an IOCTL request.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:40.931-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:43.678-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:15.657-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10989 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:40.390-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:30.047-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39984"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:40053"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39873"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39932"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39894"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39858"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:40016"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39833"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39555"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39325"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:40011"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40050"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39464"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39090"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40063"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39443"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39703"/>
            <criterion comment="kernel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39080"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39862"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40057"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40029"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39849"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40039"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10988" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to execute arbitrary code via a TIFF image with large (1) width and (2) height values, which triggers a heap-based buffer overflow in the (a) cvt_whole_image function in tiff2rgba and (b) tiffcvt function in rgb2ycbcr.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2347" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2347"/>
        <description>Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to execute arbitrary code via a TIFF image with large (1) width and (2) height values, which triggers a heap-based buffer overflow in the (a) cvt_whole_image function in tiff2rgba and (b) tiffcvt function in rgb2ycbcr.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:13.633-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:43.382-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:15.338-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10988 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:15.943-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:29.553-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libtiff is earlier than 0:3.5.7-33.el3" test_ref="oval:org.mitre.oval:tst:38552"/>
            <criterion comment="libtiff-devel is earlier than 0:3.5.7-33.el3" test_ref="oval:org.mitre.oval:tst:38921"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libtiff is earlier than 0:3.6.1-12.el4_8.4" test_ref="oval:org.mitre.oval:tst:38786"/>
            <criterion comment="libtiff-devel is earlier than 0:3.6.1-12.el4_8.4" test_ref="oval:org.mitre.oval:tst:38925"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libtiff is earlier than 0:3.8.2-7.el5_3.4" test_ref="oval:org.mitre.oval:tst:38773"/>
            <criterion comment="libtiff-devel is earlier than 0:3.8.2-7.el5_3.4" test_ref="oval:org.mitre.oval:tst:37937"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10987" version="5" class="vulnerability">
      <metadata>
        <title>PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular expression, which allows remote attackers to cause a denial of service (resource consumption) via a crafted URI.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1349" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1349"/>
        <description>PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular expression, which allows remote attackers to cause a denial of service (resource consumption) via a crafted URI.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:31.377-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:43.087-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:14.984-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10987 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:50.748-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:29.086-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mod_perl-devel is earlier than 0:1.99_09-12.ent" test_ref="oval:org.mitre.oval:tst:34145"/>
            <criterion comment="mod_perl is earlier than 0:1.99_09-12.ent" test_ref="oval:org.mitre.oval:tst:34220"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mod_perl-devel is earlier than 0:1.99_16-4.5" test_ref="oval:org.mitre.oval:tst:34277"/>
            <criterion comment="mod_perl is earlier than 0:1.99_16-4.5" test_ref="oval:org.mitre.oval:tst:34069"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mod_perl-devel is earlier than 0:2.0.2-6.3.el5" test_ref="oval:org.mitre.oval:tst:34267"/>
            <criterion comment="mod_perl is earlier than 0:2.0.2-6.3.el5" test_ref="oval:org.mitre.oval:tst:34307"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10986" version="5" class="vulnerability">
      <metadata>
        <title>The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.18 and NaSMail before 1.7 allows remote attackers to execute arbitrary commands via shell metacharacters in a username string that is used by the ypmatch program.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1579" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1579"/>
        <description>The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.18 and NaSMail before 1.7 allows remote attackers to execute arbitrary commands via shell metacharacters in a username string that is used by the ypmatch program.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:13.366-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:42.762-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:14.707-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10986 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:34.931-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:28.592-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-13.el3" test_ref="oval:org.mitre.oval:tst:38027"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-5.el4_8.5" test_ref="oval:org.mitre.oval:tst:38669"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:37946"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10985" version="5" class="vulnerability">
      <metadata>
        <title>Perl-Compatible Regular Expression (PCRE) library before 6.7 allows context-dependent attackers to cause a denial of service (error or crash) via a regular expression that involves a "malformed POSIX character class", as demonstrated via an invalid character after a [[ sequence.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-7225" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-7225"/>
        <description>Perl-Compatible Regular Expression (PCRE) library before 6.7 allows context-dependent attackers to cause a denial of service (error or crash) via a regular expression that involves a "malformed POSIX character class", as demonstrated via an invalid character after a [[ sequence.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:47.952-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:42.521-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:14.442-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10985 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:23:59.588-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:28.195-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="pcre-devel is earlier than 0:4.5-4.el4_6.6" test_ref="oval:org.mitre.oval:tst:35615"/>
            <criterion comment="pcre is earlier than 0:4.5-4.el4_6.6" test_ref="oval:org.mitre.oval:tst:35501"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="pcre-devel is earlier than 0:6.6-2.el5_1.7" test_ref="oval:org.mitre.oval:tst:35251"/>
            <criterion comment="pcre is earlier than 0:6.6-2.el5_1.7" test_ref="oval:org.mitre.oval:tst:35032"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10984" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4 through 1.6.3 allows remote attackers to execute arbitrary code by triggering a large number of open file descriptors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0947" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0947"/>
        <description>Buffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4 through 1.6.3 allows remote attackers to execute arbitrary code by triggering a large number of open file descriptors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:47.152-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:42.293-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:14.190-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10984 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:47:09.811-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:27.825-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="krb5-workstation is earlier than 0:1.6.1-17.el5_1.1" test_ref="oval:org.mitre.oval:tst:36318"/>
          <criterion comment="krb5 is earlier than 0:1.6.1-17.el5_1.1" test_ref="oval:org.mitre.oval:tst:36285"/>
          <criterion comment="krb5-libs is earlier than 0:1.6.1-17.el5_1.1" test_ref="oval:org.mitre.oval:tst:36069"/>
          <criterion comment="krb5-server is earlier than 0:1.6.1-17.el5_1.1" test_ref="oval:org.mitre.oval:tst:36233"/>
          <criterion comment="krb5-devel is earlier than 0:1.6.1-17.el5_1.1" test_ref="oval:org.mitre.oval:tst:36199"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10982" version="5" class="vulnerability">
      <metadata>
        <title>GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, which allows attackers to determine the private key from a signature.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0971" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0971"/>
        <description>GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, which allows attackers to determine the private key from a signature.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:39.937-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:42.114-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:13.918-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10982 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:17.859-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:27.560-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="gnupg is earlier than 0:1.2.1-10" test_ref="oval:org.mitre.oval:tst:30485"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10981" version="5" class="vulnerability">
      <metadata>
        <title>The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3094" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3094"/>
        <description>The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the Apache HTTP Server 2.0.63 and 2.2.13 allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:28.271-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:41.706-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:13.509-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10981 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:34.841-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:26.972-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-devel is earlier than 0:2.0.46-77.ent" test_ref="oval:org.mitre.oval:tst:39637"/>
            <criterion comment="mod_ssl is earlier than 0:2.0.46-77.ent" test_ref="oval:org.mitre.oval:tst:39671"/>
            <criterion comment="httpd is earlier than 0:2.0.46-77.ent" test_ref="oval:org.mitre.oval:tst:39611"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-suexec is earlier than 0:2.0.52-41.ent.6" test_ref="oval:org.mitre.oval:tst:39448"/>
            <criterion comment="httpd-manual is earlier than 0:2.0.52-41.ent.6" test_ref="oval:org.mitre.oval:tst:39501"/>
            <criterion comment="httpd-devel is earlier than 0:2.0.52-41.ent.6" test_ref="oval:org.mitre.oval:tst:38802"/>
            <criterion comment="mod_ssl is earlier than 0:2.0.52-41.ent.6" test_ref="oval:org.mitre.oval:tst:39716"/>
            <criterion comment="httpd is earlier than 0:2.0.52-41.ent.6" test_ref="oval:org.mitre.oval:tst:39551"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-manual is earlier than 0:2.2.3-31.el5_4.2" test_ref="oval:org.mitre.oval:tst:39267"/>
            <criterion comment="httpd-devel is earlier than 0:2.2.3-31.el5_4.2" test_ref="oval:org.mitre.oval:tst:39640"/>
            <criterion comment="mod_ssl is earlier than 0:2.2.3-31.el5_4.2" test_ref="oval:org.mitre.oval:tst:39613"/>
            <criterion comment="httpd is earlier than 0:2.2.3-31.el5_4.2" test_ref="oval:org.mitre.oval:tst:39756"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10980" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to execute arbitrary code via unknown vectors that cause JavaScript to execute with the wrong principal, aka "Privilege escalation via incorrect principals."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1235" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1235"/>
        <description>Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to execute arbitrary code via unknown vectors that cause JavaScript to execute with the wrong principal, aka "Privilege escalation via incorrect principals."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:20.143-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:41.175-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:12.863-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10980 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:45.495-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:26.261-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36547"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36570"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36574"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:35661"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36605"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:35672"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:35874"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36533"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36355"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.16.el3" test_ref="oval:org.mitre.oval:tst:36379"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36587"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:35752"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-10.el4" test_ref="oval:org.mitre.oval:tst:36259"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36586"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36333"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36500"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.14.el4" test_ref="oval:org.mitre.oval:tst:35884"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36540"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36602"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36557"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36511"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-15.el4" test_ref="oval:org.mitre.oval:tst:36221"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-14.el5_1" test_ref="oval:org.mitre.oval:tst:36566"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-14.el5_1" test_ref="oval:org.mitre.oval:tst:36305"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-11.el5_1" test_ref="oval:org.mitre.oval:tst:36619"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1098" version="2" class="vulnerability">
      <metadata>
        <title>usermod Recursive Ownership Error (B.11.23)</title>
        <affected family="unix">
          <platform>HP-UX 11</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1248"/>
        <description>Unspecified vulnerability in usermod in HP-UX B.11.00, B.11.11, and B.11.23, when run with certain options that involve a new home directory, might cause usermod to change the ownership of all directories and files under the new directory, which might result in less secure permissions than intended.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-03-18T07:24:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-03-22T11:10:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-04-06T06:31:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">ACCEPTED</status_change>
            <modified comment="added CVE reference" date="2007-02-05T10:23:00.400-05:00">
              <contributor organization="Security-Database">Nabil Ouchn</contributor>
            </modified>
            <status_change date="2007-02-05T10:25:21.449-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:29.984-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="700 Series or 800 Series OS Release 11.23">
          <criteria operator="AND" comment="700 Series OS Release 11.23">
            <criterion comment="700-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2515"/>
            <criterion comment="HP Release B.11.23" negate="false" test_ref="oval:org.mitre.oval:tst:2511"/>
          </criteria>
          <criteria operator="AND" comment="800 Series OS Release 11.23">
            <criterion comment="800-series HP" negate="false" test_ref="oval:org.mitre.oval:tst:2513"/>
            <criterion comment="HP Release B.11.23" negate="false" test_ref="oval:org.mitre.oval:tst:2511"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10979" version="5" class="vulnerability">
      <metadata>
        <title>The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3532" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3532"/>
        <description>The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:38.276-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:40.710-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:12.391-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10979 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:18.805-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:25.565-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.5.2-6.el4" test_ref="oval:org.mitre.oval:tst:37980"/>
            <criterion comment="libpurple is earlier than 0:2.5.2-6.el4" test_ref="oval:org.mitre.oval:tst:37625"/>
            <criterion comment="libpurple-perl is earlier than 0:2.5.2-6.el4" test_ref="oval:org.mitre.oval:tst:37827"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.5.2-6.el4" test_ref="oval:org.mitre.oval:tst:37120"/>
            <criterion comment="pidgin-devel is earlier than 0:2.5.2-6.el4" test_ref="oval:org.mitre.oval:tst:37969"/>
            <criterion comment="libpurple-devel is earlier than 0:2.5.2-6.el4" test_ref="oval:org.mitre.oval:tst:38038"/>
            <criterion comment="finch is earlier than 0:2.5.2-6.el4" test_ref="oval:org.mitre.oval:tst:37822"/>
            <criterion comment="pidgin-perl is earlier than 0:2.5.2-6.el4" test_ref="oval:org.mitre.oval:tst:38119"/>
            <criterion comment="pidgin is earlier than 0:2.5.2-6.el4" test_ref="oval:org.mitre.oval:tst:38052"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:38103"/>
            <criterion comment="libpurple is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:38090"/>
            <criterion comment="libpurple-perl is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:37997"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:38020"/>
            <criterion comment="pidgin-devel is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:37865"/>
            <criterion comment="libpurple-devel is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:37809"/>
            <criterion comment="finch is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:37973"/>
            <criterion comment="pidgin-perl is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:38050"/>
            <criterion comment="pidgin-docs is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:37775"/>
            <criterion comment="pidgin is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:37838"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10978" version="5" class="vulnerability">
      <metadata>
        <title>netpbm 9.25 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0924" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0924"/>
        <description>netpbm 9.25 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:14.566-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:40.503-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:12.156-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10978 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:48.527-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:25.271-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="netpbm is earlier than 0:9.24-11.30.1" test_ref="oval:org.mitre.oval:tst:30423"/>
          <criterion comment="netpbm-progs is earlier than 0:9.24-11.30.1" test_ref="oval:org.mitre.oval:tst:30524"/>
          <criterion comment="netpbm-devel is earlier than 0:9.24-11.30.1" test_ref="oval:org.mitre.oval:tst:29931"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10977" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via a crafted regular expression in a Proxy Auto-configuration (PAC) file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3372" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3372"/>
        <description>Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via a crafted regular expression in a Proxy Auto-configuration (PAC) file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:41.856-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:40.203-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:11.778-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10977 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:50.874-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:24.776-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nspr is earlier than 0:4.7.6-1.el4_8" test_ref="oval:org.mitre.oval:tst:39525"/>
            <criterion comment="firefox is earlier than 0:3.0.15-3.el4" test_ref="oval:org.mitre.oval:tst:39710"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.6-1.el4_8" test_ref="oval:org.mitre.oval:tst:38755"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39602"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39541"/>
            <criterion comment="nspr is earlier than 0:4.7.6-1.el5_4" test_ref="oval:org.mitre.oval:tst:39168"/>
            <criterion comment="firefox is earlier than 0:3.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39294"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.6-1.el5_4" test_ref="oval:org.mitre.oval:tst:39579"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39636"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10976" version="5" class="vulnerability">
      <metadata>
        <title>The hugepage code (hugetlb.c) in Linux kernel 2.6, possibly 2.6.12 and 2.6.13, in certain configurations, allows local users to cause a denial of service (crash) by triggering an mmap error before a prefault, which causes an error in the unmap_hugepage_area function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-4811" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4811"/>
        <description>The hugepage code (hugetlb.c) in Linux kernel 2.6, possibly 2.6.12 and 2.6.13, in certain configurations, allows local users to cause a denial of service (crash) by triggering an mmap error before a prefault, which causes an error in the unmap_hugepage_area function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:13.453-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:39.872-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:11.344-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10976 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:00.911-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:23.969-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32678"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32900"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:33014"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32947"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32944"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32956"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32602"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:33081"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32892"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10975" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the readImageData function in giftopnm.c in netpbm before 10.27 in netpbm before 10.27 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0554" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0554"/>
        <description>Buffer overflow in the readImageData function in giftopnm.c in netpbm before 10.27 in netpbm before 10.27 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:39.644-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:39.609-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:10.977-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10975 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:10.807-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:23.574-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="netpbm is earlier than 0:9.24-11.30.5" test_ref="oval:org.mitre.oval:tst:36235"/>
            <criterion comment="netpbm-progs is earlier than 0:9.24-11.30.5" test_ref="oval:org.mitre.oval:tst:36177"/>
            <criterion comment="netpbm-devel is earlier than 0:9.24-11.30.5" test_ref="oval:org.mitre.oval:tst:35689"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="netpbm is earlier than 0:10.25-2.EL4.6.el4_6.1" test_ref="oval:org.mitre.oval:tst:36288"/>
            <criterion comment="netpbm-progs is earlier than 0:10.25-2.EL4.6.el4_6.1" test_ref="oval:org.mitre.oval:tst:36136"/>
            <criterion comment="netpbm-devel is earlier than 0:10.25-2.EL4.6.el4_6.1" test_ref="oval:org.mitre.oval:tst:36139"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10974" version="5" class="vulnerability">
      <metadata>
        <title>Linux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set RLIMIT_CPU to 0 until after the change is made, which allows local users to bypass intended resource limits.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1294" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1294"/>
        <description>Linux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set RLIMIT_CPU to 0 until after the change is made, which allows local users to bypass intended resource limits.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:41.171-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:39.297-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:10.621-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10974 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:11.200-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:23.148-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:36537"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:36954"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:37079"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:36957"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:37527"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:37262"/>
          <criterion comment="kernel is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:37410"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:37323"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:37508"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:37153"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:37180"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-92.1.10.el5" test_ref="oval:org.mitre.oval:tst:37188"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10973" version="5" class="vulnerability">
      <metadata>
        <title>D-BUS (dbus) before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0201" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0201"/>
        <description>D-BUS (dbus) before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:22.929-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:39.056-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:09.933-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10973 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:50.055-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:22.793-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="dbus-glib is earlier than 0:0.22-12.EL.2" test_ref="oval:org.mitre.oval:tst:31335"/>
          <criterion comment="dbus-devel is earlier than 0:0.22-12.EL.2" test_ref="oval:org.mitre.oval:tst:30912"/>
          <criterion comment="dbus-x11 is earlier than 0:0.22-12.EL.2" test_ref="oval:org.mitre.oval:tst:31135"/>
          <criterion comment="dbus-python is earlier than 0:0.22-12.EL.2" test_ref="oval:org.mitre.oval:tst:31344"/>
          <criterion comment="dbus is earlier than 0:0.22-12.EL.2" test_ref="oval:org.mitre.oval:tst:30814"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10972" version="5" class="vulnerability">
      <metadata>
        <title>The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to (1) bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file; (2) read, create, or modify Local Shared Objects via a Flash file; or (3) bypass unspecified restrictions and render content via vectors involving a jar: URI.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1307" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1307"/>
        <description>The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to (1) bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file; (2) read, create, or modify Local Shared Objects via a Flash file; or (3) bypass unspecified restrictions and render content via vectors involving a jar: URI.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:30.183-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:38.512-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:09.388-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10972 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:19.353-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:21.981-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38597"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38375"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38403"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38521"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38542"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:37726"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38677"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38096"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38577"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38540"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38634"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-23.el4" test_ref="oval:org.mitre.oval:tst:38562"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38697"/>
            <criterion comment="firefox is earlier than 0:3.0.9-1.el4" test_ref="oval:org.mitre.oval:tst:38379"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38716"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38190"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38685"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38596"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38308"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38633"/>
            <criterion comment="firefox is earlier than 0:3.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38370"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.22-2.el5_3" test_ref="oval:org.mitre.oval:tst:38801"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38462"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10971" version="5" class="vulnerability">
      <metadata>
        <title>The isdn_ioctl function in isdn_common.c in Linux kernel 2.6.23 allows local users to cause a denial of service via a crafted ioctl struct in which iocts is not null terminated, which triggers a buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6151" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6151"/>
        <description>The isdn_ioctl function in isdn_common.c in Linux kernel 2.6.23 allows local users to cause a denial of service via a crafted ioctl struct in which iocts is not null terminated, which triggers a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:00.278-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:38.072-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:08.857-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10971 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:53:00.419-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:21.408-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:35915"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:35794"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36513"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36264"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36161"/>
            <criterion comment="kernel is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36518"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36597"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36612"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36171"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:36090"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35525"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35832"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35126"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35901"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:36007"/>
            <criterion comment="kernel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35982"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:36072"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:36041"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35364"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35662"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10969" version="5" class="vulnerability">
      <metadata>
        <title>The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document that triggers a NULL pointer dereference or a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3604" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3604"/>
        <description>The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document that triggers a NULL pointer dereference or a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:51.243-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:37.699-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:08.472-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10969 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:43.388-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:20.840-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="xpdf is earlier than 1:2.02-17.el3" test_ref="oval:org.mitre.oval:tst:39361"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-15.el4_8.2" test_ref="oval:org.mitre.oval:tst:39438"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-7.7.2.el4_8.5" test_ref="oval:org.mitre.oval:tst:39221"/>
            <criterion comment="xpdf is earlier than 1:3.00-22.el4_8.1" test_ref="oval:org.mitre.oval:tst:38963"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-15.el4_8.2" test_ref="oval:org.mitre.oval:tst:39094"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.5.4-15.el5_4.2" test_ref="oval:org.mitre.oval:tst:39062"/>
            <criterion comment="poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38512"/>
            <criterion comment="poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38500"/>
            <criterion comment="kdegraphics is earlier than 7:3.5.4-15.el5_4.2" test_ref="oval:org.mitre.oval:tst:39529"/>
            <criterion comment="poppler is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38760"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10968" version="5" class="vulnerability">
      <metadata>
        <title>The apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service (daemon crash) via crafted input involving (1) a .htaccess file used with the Apache HTTP Server, (2) the SVNMasterURI directive in the mod_dav_svn module in the Apache HTTP Server, (3) the mod_apreq2 module for the Apache HTTP Server, or (4) an application that uses the libapreq2 library, which triggers a heap-based buffer underflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0023" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0023"/>
        <description>The apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service (daemon crash) via crafted input involving (1) a .htaccess file used with the Apache HTTP Server, (2) the SVNMasterURI directive in the mod_dav_svn module in the Apache HTTP Server, (3) the mod_apreq2 module for the Apache HTTP Server, or (4) an application that uses the libapreq2 library, which triggers a heap-based buffer underflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:14.853-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:37.278-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:08.124-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10968 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:35.970-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:20.345-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-devel is earlier than 0:2.0.46-73.ent" test_ref="oval:org.mitre.oval:tst:38833"/>
            <criterion comment="mod_ssl is earlier than 0:2.0.46-73.ent" test_ref="oval:org.mitre.oval:tst:38794"/>
            <criterion comment="httpd is earlier than 0:2.0.46-73.ent" test_ref="oval:org.mitre.oval:tst:38826"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="apr-util-devel is earlier than 0:0.9.4-22.el4_8.1" test_ref="oval:org.mitre.oval:tst:38152"/>
            <criterion comment="apr-util is earlier than 0:0.9.4-22.el4_8.1" test_ref="oval:org.mitre.oval:tst:38886"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="apr-util-docs is earlier than 0:1.2.7-7.el5_3.1" test_ref="oval:org.mitre.oval:tst:38344"/>
            <criterion comment="apr-util-devel is earlier than 0:1.2.7-7.el5_3.1" test_ref="oval:org.mitre.oval:tst:38871"/>
            <criterion comment="apr-util is earlier than 0:1.2.7-7.el5_3.1" test_ref="oval:org.mitre.oval:tst:38788"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10967" version="5" class="vulnerability">
      <metadata>
        <title>Firefox 1.0 does not invoke the Javascript Security Manager when a user drags a javascript: or data: URL to a tab, which allows remote attackers to bypass the security model, aka "firetabbing."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0232" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0232"/>
        <description>Firefox 1.0 allows remote attackers to modify Boolean configuration parameters for the about:config site by using a plugin such as Flash, and the -moz-opacity filter, to display the about:config site then cause the user to double-click at a certain screen position, aka "Fireflashing."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:08.926-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:36.882-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:07.727-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10967 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:29.447-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:19.851-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31283"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31520"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31645"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31516"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31569"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31143"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31512"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31785"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31695"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31626"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:1.0.1-1.4.3" test_ref="oval:org.mitre.oval:tst:31118"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10966" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the HTTP dissector in Wireshark (formerly Ethereal) 0.99.3 and 0.99.4 allows remote attackers to cause a denial of service (application crash) via unspecified vectors, a different issue than CVE-2006-5468.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0458" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0458"/>
        <description>Unspecified vulnerability in the HTTP dissector in Wireshark (formerly Ethereal) 0.99.3 and 0.99.4 allows remote attackers to cause a denial of service (application crash) via unspecified vectors, a different issue than CVE-2006-5468.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:13.680-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:36.582-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:07.396-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10966 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:34.229-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:19.380-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.5-EL3.1" test_ref="oval:org.mitre.oval:tst:33506"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.5-EL3.1" test_ref="oval:org.mitre.oval:tst:33535"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.5-EL4.1" test_ref="oval:org.mitre.oval:tst:33380"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.5-EL4.1" test_ref="oval:org.mitre.oval:tst:33530"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.5-1.el5" test_ref="oval:org.mitre.oval:tst:33509"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.5-1.el5" test_ref="oval:org.mitre.oval:tst:33591"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10965" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote attackers to execute arbitrary Javascript with user privileges by using the Script object to modify XPCNativeWrappers in a way that causes the script to be executed when a chrome action is performed.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5338" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5338"/>
        <description>Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote attackers to execute arbitrary Javascript with user privileges by using the Script object to modify XPCNativeWrappers in a way that causes the script to be executed when a chrome action is performed.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:04.498-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:36.006-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:06.741-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10965 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:53:11.910-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:18.634-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35512"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35540"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35394"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35541"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35241"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35553"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35552"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:34924"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35155"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35441"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35489"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35324"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-0.5.el4" test_ref="oval:org.mitre.oval:tst:35240"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35182"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35311"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35454"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.7.el4" test_ref="oval:org.mitre.oval:tst:35398"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35351"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35482"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:34790"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35291"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:34577"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-6.el5" test_ref="oval:org.mitre.oval:tst:35262"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-6.el5" test_ref="oval:org.mitre.oval:tst:35202"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-5.el5" test_ref="oval:org.mitre.oval:tst:35177"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10963" version="5" class="vulnerability">
      <metadata>
        <title>GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPE_NAMES record with a symbolic link, which is not properly handled by the extract_archive function in extract.c and extract_mangle function in mangle.c, a variant of CVE-2002-1216.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6097" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6097"/>
        <description>GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPE_NAMES record with a symbolic link, which is not properly handled by the extract_archive function in extract.c and extract_mangle function in mangle.c, a variant of CVE-2002-1216.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:13.829-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:35.788-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:06.494-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10963 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:30.955-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:18.270-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="tar is earlier than 0:1.13.25-15.RHEL3" test_ref="oval:org.mitre.oval:tst:32733"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="tar is earlier than 0:1.14-12.RHEL4" test_ref="oval:org.mitre.oval:tst:33274"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10962" version="5" class="vulnerability">
      <metadata>
        <title>Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0942" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0942"/>
        <description>Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:16.139-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:35.584-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:06.247-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10962 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:53:07.615-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:17.950-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="httpd-devel is earlier than 0:2.0.46-44.ent" test_ref="oval:org.mitre.oval:tst:30849"/>
          <criterion comment="mod_ssl is earlier than 1:2.0.46-44.ent" test_ref="oval:org.mitre.oval:tst:30832"/>
          <criterion comment="httpd is earlier than 0:2.0.46-44.ent" test_ref="oval:org.mitre.oval:tst:30989"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10961" version="5" class="vulnerability">
      <metadata>
        <title>rfc1867.c in PHP before 5.0.2 allows local users to upload files to arbitrary locations via a PHP script with a certain MIME header that causes the "$_FILES" array to be modified.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0959" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0959"/>
        <description>rfc1867.c in PHP before 5.0.2 allows local users to upload files to arbitrary locations via a PHP script with a certain MIME header that causes the "$_FILES" array to be modified.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:54.474-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:35.331-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:05.929-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10961 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:42.688-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:17.608-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="php is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:31183"/>
          <criterion comment="php-pgsql is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:31119"/>
          <criterion comment="php-mysql is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:30756"/>
          <criterion comment="php-ldap is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:30361"/>
          <criterion comment="php-imap is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:31078"/>
          <criterion comment="php-odbc is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:31082"/>
          <criterion comment="php-devel is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:30937"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10960" version="5" class="vulnerability">
      <metadata>
        <title>Signedness error in the copy_from_read_buf function in n_tty.c for Linux kernel 2.6.10 and 2.6.11rc1 allows local users to read kernel memory via a negative argument.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0530" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0530"/>
        <description>Signedness error in the copy_from_read_buf function in n_tty.c for Linux kernel 2.6.10 and 2.6.11rc1 allows local users to read kernel memory via a negative argument.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:34.523-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:35.013-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:05.634-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10960 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:07.964-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:17.248-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31545"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31539"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31661"/>
          <criterion comment="kernel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31482"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31112"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31605"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31330"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1096" version="3" class="vulnerability">
      <metadata>
        <title>IE Web Page Spoofing Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0339" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0339"/>
        <description>Internet Explorer 5.5 and earlier allows remote attackers to display a URL in the address bar that is different than the URL that is actually being displayed, which could be used in web site spoofing attacks, aka the "Web page spoofing vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-29T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:57.288-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:07.894-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Internet Explorer 5.5 Installed">
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:1466"/>
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:1465"/>
          <criterion comment="Internet Explorer 5.5 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:1464"/>
        </criteria>
        <criterion comment="File %windir%\system32\mshtml.dll version is less than 5.50.4616.200" negate="false" test_ref="oval:org.mitre.oval:tst:1171"/>
        <criterion comment="File %windir%\system32\urlmon.dll version is less than 5.50.4701.2400" negate="false" test_ref="oval:org.mitre.oval:tst:1170"/>
        <criterion comment="Patch Q295106 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:1461"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10959" version="5" class="vulnerability">
      <metadata>
        <title>Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WMF file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1364" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1364"/>
        <description>Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WMF file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:16.306-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:34.767-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:05.365-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10959 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:04.769-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:16.812-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libwmf is earlier than 0:0.2.8.3-5.8" test_ref="oval:org.mitre.oval:tst:38423"/>
            <criterion comment="libwmf-devel is earlier than 0:0.2.8.3-5.8" test_ref="oval:org.mitre.oval:tst:38315"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libwmf is earlier than 0:0.2.8.4-10.2" test_ref="oval:org.mitre.oval:tst:38125"/>
            <criterion comment="libwmf-devel is earlier than 0:0.2.8.4-10.2" test_ref="oval:org.mitre.oval:tst:38728"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10957" version="3" class="vulnerability">
      <metadata>
        <title>Integer overflow in Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via crafted arguments to the printSepsWithParams, which triggers memory corruption.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0726" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0726"/>
        <description>Integer overflow in Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via crafted arguments to the printSepsWithParams, which triggers memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:54.950-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:34.484-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:05.010-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criteria operator="OR">
            <criterion comment="acroread-plugin is earlier than 0:8.1.2-1.el3.6" test_ref="oval:org.mitre.oval:tst:36324"/>
            <criterion comment="acroread is earlier than 0:8.1.2-1.el3.6" test_ref="oval:org.mitre.oval:tst:36153"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="acroread-plugin is earlier than 0:8.1.2-1.el4.2" test_ref="oval:org.mitre.oval:tst:36156"/>
            <criterion comment="acroread is earlier than 0:8.1.2-1.el4.2" test_ref="oval:org.mitre.oval:tst:36293"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="acroread-plugin is earlier than 0:8.1.2-1.el5.3" test_ref="oval:org.mitre.oval:tst:35792"/>
            <criterion comment="acroread is earlier than 0:8.1.2-1.el5.3" test_ref="oval:org.mitre.oval:tst:35912"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10956" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3979" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3979"/>
        <description>Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:26.791-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:33.952-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:04.474-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10956 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:41.967-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:16.130-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:39610"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:39451"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:39678"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:39628"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:39624"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:39524"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:39588"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:39651"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:38845"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:39752"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-51.el4_8" test_ref="oval:org.mitre.oval:tst:39735"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-25.el4" test_ref="oval:org.mitre.oval:tst:40299"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-51.el4_8" test_ref="oval:org.mitre.oval:tst:39656"/>
            <criterion comment="firefox is earlier than 0:3.0.16-4.el4" test_ref="oval:org.mitre.oval:tst:39002"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-51.el4_8" test_ref="oval:org.mitre.oval:tst:39832"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-51.el4_8" test_ref="oval:org.mitre.oval:tst:39283"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-51.el4_8" test_ref="oval:org.mitre.oval:tst:39176"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-51.el4_8" test_ref="oval:org.mitre.oval:tst:39646"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.16-2.el5_4" test_ref="oval:org.mitre.oval:tst:39838"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.16-2.el5_4" test_ref="oval:org.mitre.oval:tst:39032"/>
            <criterion comment="firefox is earlier than 0:3.0.16-1.el5_4" test_ref="oval:org.mitre.oval:tst:39721"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.24-2.el5_4" test_ref="oval:org.mitre.oval:tst:40249"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.16-2.el5_4" test_ref="oval:org.mitre.oval:tst:39558"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10955" version="5" class="vulnerability">
      <metadata>
        <title>wtap.c in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application abort) via a malformed Tamos CommView capture file (aka .ncf file) with an "unknown/unexpected packet type" that triggers a failed assertion.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4682" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4682"/>
        <description>wtap.c in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application abort) via a malformed Tamos CommView capture file (aka .ncf file) with an "unknown/unexpected packet type" that triggers a failed assertion.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:03.300-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:33.662-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:04.133-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10955 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:45.683-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:15.630-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-EL3.3" test_ref="oval:org.mitre.oval:tst:38023"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-EL3.3" test_ref="oval:org.mitre.oval:tst:38321"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-2.el4_7" test_ref="oval:org.mitre.oval:tst:38000"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-2.el4_7" test_ref="oval:org.mitre.oval:tst:38041"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-2.el5_3" test_ref="oval:org.mitre.oval:tst:38236"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-2.el5_3" test_ref="oval:org.mitre.oval:tst:38085"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10954" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0.1 and Mozilla Suite before 1.7.6 use a predictable filename for the plugin temporary directory, which allows local users to delete arbitrary files of other users via a symlink attack on the plugtmp directory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0578" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0578"/>
        <description>Firefox before 1.0.1 and Mozilla Suite before 1.7.6 use a predictable filename for the plugin temporary directory, which allows local users to delete arbitrary files of other users via a symlink attack on the plugtmp directory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:11.250-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:33.337-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:03.713-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10954 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:49.617-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:15.071-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31283"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31520"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31645"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31516"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31569"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31143"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31512"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31785"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31695"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31626"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:1.0.1-1.4.3" test_ref="oval:org.mitre.oval:tst:31118"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10953" version="5" class="vulnerability">
      <metadata>
        <title>The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) to restrict instruction execution, which allows guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, and replacing an instruction in between emulator entry and instruction fetch, a related issue to CVE-2010-0298.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0306" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0306"/>
        <description>The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) to restrict instruction execution, which allows guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, and replacing an instruction in between emulator entry and instruction fetch, a related issue to CVE-2010-0298.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:00.345-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:33.117-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:03.473-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10953 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:54.951-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:14.707-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kmod-kvm is earlier than 0:83-105.el5_4.22" test_ref="oval:org.mitre.oval:tst:39907"/>
          <criterion comment="kvm-qemu-img is earlier than 0:83-105.el5_4.22" test_ref="oval:org.mitre.oval:tst:39965"/>
          <criterion comment="kvm-tools is earlier than 0:83-105.el5_4.22" test_ref="oval:org.mitre.oval:tst:40075"/>
          <criterion comment="kvm is earlier than 0:83-105.el5_4.22" test_ref="oval:org.mitre.oval:tst:39881"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10952" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0904" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0904"/>
        <description>Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:45.970-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:32.780-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:03.155-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10952 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:03.390-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:14.341-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mozilla-js-debugger is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30915"/>
          <criterion comment="mozilla is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30964"/>
          <criterion comment="mozilla-chat is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30905"/>
          <criterion comment="mozilla-mail is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30635"/>
          <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:31000"/>
          <criterion comment="mozilla-devel is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30111"/>
          <criterion comment="mozilla-nss is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30762"/>
          <criterion comment="mozilla-nss-devel is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:31048"/>
          <criterion comment="mozilla-nspr is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30856"/>
          <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30834"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10951" version="5" class="vulnerability">
      <metadata>
        <title>CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows remote attackers to inject arbitrary e-mail headers and possibly conduct spam attacks via a control character immediately following folding of the (1) Subject or (2) To parameter, as demonstrated by a parameter containing a "\r\n\t\n" sequence, related to an increment bug in the SKIP_LONG_HEADER_SEP macro.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1718" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1718"/>
        <description>CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows remote attackers to inject arbitrary e-mail headers and possibly conduct spam attacks via a control character immediately following folding of the (1) Subject or (2) To parameter, as demonstrated by a parameter containing a "\r\n\t\n" sequence, related to an increment bug in the SKIP_LONG_HEADER_SEP macro.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:05.133-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:31.720-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:02.357-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10951 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:52.717-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:13.378-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33776"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33817"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33769"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33528"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33915"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33822"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33351"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:34016"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33395"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33957"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33405"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33642"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33024"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33690"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33995"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33892"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33945"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33711"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33857"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33644"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33920"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33809"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33997"/>
            <criterion comment="php-common is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33290"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33828"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33441"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:34008"/>
            <criterion comment="php is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33959"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33560"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33722"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33941"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33880"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33878"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33960"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33923"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33551"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33939"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33626"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33770"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:34005"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10950" version="5" class="vulnerability">
      <metadata>
        <title>fetchmail 6.3.8 and earlier, when running in -v -v (aka verbose) mode, allows remote attackers to cause a denial of service (crash and persistent mail failure) via a malformed mail message with long headers, which triggers an erroneous dereference when using vsnprintf to format log messages.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2711" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2711"/>
        <description>fetchmail 6.3.8 and earlier, when running in -v -v (aka verbose) mode, allows remote attackers to cause a denial of service (crash and persistent mail failure) via a malformed mail message with long headers, which triggers an erroneous dereference when using vsnprintf to format log messages.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:14.492-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:31.462-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:02.071-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10950 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:12.108-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:12.890-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="fetchmail is earlier than 0:6.2.0-3.el3.5" test_ref="oval:org.mitre.oval:tst:38901"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="fetchmail is earlier than 0:6.2.5-6.0.1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39046"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="fetchmail is earlier than 0:6.3.6-1.1.el5_3.1" test_ref="oval:org.mitre.oval:tst:39380"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1095" version="6" class="vulnerability">
      <metadata>
        <title>DirectX 8 DirectShow Malicious MIDI File Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>DirectX</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0346" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0346"/>
        <description>Multiple integer overflows in a Microsoft Windows DirectX MIDI library (QUARTZ.DLL) allow remote attackers to execute arbitrary code via a MIDI (.mid) file with (1) large length for a Text or Copyright string, or (2) a large number of tracks, which leads to a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-10-12T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-10-19T05:46:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-01-31T05:11:00.000-04:00" comment="Updated reference to CVE-2003-0346.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added Microsoft Windows 2003 and Microsoft Windows Server 2003 as affected platfroms. Implemented by Jon Baker of The MITRE Corporation." date="2007-02-12T20:22:00.568-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-02-12T20:25:03.590-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:41.281-04:00">ACCEPTED</status_change>
            <modified comment="Corrected obj:832 to look for the q number under the hot fix registry key." date="2007-09-05T16:29:00.747-04:00">
              <contributor organization="Secure Elements, Inc.">Jeff Ito</contributor>
            </modified>
            <status_change date="2007-09-05T16:39:26.828-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:38.862-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:1047 - obj/ste updates to conform to authoring style guide" date="2013-03-26T09:53:00.500-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-03-26T09:56:04.893-04:00">INTERIM</status_change>
            <status_change date="2013-04-15T04:00:06.203-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="DirectX 8.x Installed" negate="false" test_ref="oval:org.mitre.oval:tst:1173"/>
        <criterion comment="Patch Windows2000-KB819696-x86-ENU.EXE Installed" negate="true" test_ref="oval:org.mitre.oval:tst:1172"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10949" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial of service, or execute arbitrary code via (1) a negative offset value to the shmop_write function, (2) an "integer overflow/underflow" in the pack function, or (3) an "integer overflow/underflow" in the unpack function.  NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute.  This candidate may change significantly in the future as a result of further discussion.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1018" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1018"/>
        <description>Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial of service, or execute arbitrary code via (1) a negative offset value to the shmop_write function, (2) an "integer overflow/underflow" in the pack function, or (3) an "integer overflow/underflow" in the unpack function.  NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute.  This candidate may change significantly in the future as a result of further discussion.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:38.197-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:30.877-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:01.536-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10949 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:02.396-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:12.307-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:31183"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:31119"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:30756"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:30361"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:31078"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:31082"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:30937"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31248"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31271"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31235"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31279"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31087"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31260"/>
            <criterion comment="php is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:30709"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31196"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:30324"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31008"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31291"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31210"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31168"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:30329"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10948" version="5" class="vulnerability">
      <metadata>
        <title>libata in the Linux kernel before 2.6.27.9 does not set minimum timeouts for SG_IO requests, which allows local users to cause a denial of service (Programmed I/O mode on drives) via multiple simultaneous invocations of an unspecified test program.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5700" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5700"/>
        <description>libata in the Linux kernel before 2.6.27.9 does not set minimum timeouts for SG_IO requests, which allows local users to cause a denial of service (Programmed I/O mode on drives) via multiple simultaneous invocations of an unspecified test program.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:33.425-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:30.403-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:00.755-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10948 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:16:56.212-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:11.636-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:37961"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38169"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38048"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38359"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38449"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38416"/>
            <criterion comment="kernel is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38237"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:37920"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38429"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38339"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38155"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38113"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38107"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38167"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38064"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38380"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:37672"/>
            <criterion comment="kernel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38093"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38127"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38109"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38430"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:37764"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38397"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10947" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts even when Javascript has been disabled, which makes it easier for remote attackers to bypass such protection.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2261" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2261"/>
        <description>Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts even when Javascript has been disabled, which makes it easier for remote attackers to bypass such protection.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:56.921-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:29.851-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:07:00.221-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10947 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:07.345-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:10.920-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32142"/>
            <criterion comment="mozilla is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32131"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32154"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32001"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32171"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32162"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31782"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32041"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32004"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31353"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32120"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.6" test_ref="oval:org.mitre.oval:tst:31633"/>
            <criterion comment="mozilla is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31837"/>
            <criterion comment="thunderbird is earlier than 0:1.0.6-1.4.1" test_ref="oval:org.mitre.oval:tst:32113"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32100"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31821"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31904"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.6" test_ref="oval:org.mitre.oval:tst:31814"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31951"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31554"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32149"/>
            <criterion comment="firefox is earlier than 0:1.0.6-1.4.1" test_ref="oval:org.mitre.oval:tst:32167"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31998"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32061"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10946" version="5" class="vulnerability">
      <metadata>
        <title>sudo 1.6.x before 1.6.9p21, when the runas_default option is used, does not properly set group memberships, which allows local users to gain privileges via a sudo command.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0427" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0427"/>
        <description>sudo 1.6.x before 1.6.9p21, when the runas_default option is used, does not properly set group memberships, which allows local users to gain privileges via a sudo command.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:45.633-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:29.662-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:59.953-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10946 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:42.692-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:10.618-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="sudo is earlier than 0:1.6.9p17-6.el5_4" test_ref="oval:org.mitre.oval:tst:39746"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10945" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the do_replace function in netfilter for Linux before 2.6.16-rc3, when using "virtualization solutions" such as OpenVZ, allows local users with CAP_NET_ADMIN rights to cause a buffer overflow in the copy_from_user function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0038" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0038"/>
        <description>Integer overflow in the do_replace function in netfilter for Linux before 2.6.16-rc3, when using "virtualization solutions" such as OpenVZ, allows local users with CAP_NET_ADMIN rights to cause a buffer overflow in the copy_from_user function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:44.881-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:29.386-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:59.636-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10945 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:18:01.110-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:10.227-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32335"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32833"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32825"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32836"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32736"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:31931"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32361"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32793"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32795"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10944" version="5" class="vulnerability">
      <metadata>
        <title>Format string vulnerability in Ekiga 2.0.3, and probably other versions, allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2007-1006.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0999" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0999"/>
        <description>Format string vulnerability in Ekiga 2.0.3, and probably other versions, allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2007-1006.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:01.670-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:29.197-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:59.431-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10944 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:47:09.259-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:09.890-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="ekiga is earlier than 0:2.0.2-7.0.2" test_ref="oval:org.mitre.oval:tst:33701"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10943" version="5" class="vulnerability">
      <metadata>
        <title>The session restore feature in Mozilla Firefox 3.x before 3.0.4 and 2.x before 2.0.0.18 allows remote attackers to violate the same origin policy to conduct cross-site scripting (XSS) attacks and execute arbitrary JavaScript with chrome privileges via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5019" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5019"/>
        <description>The session restore feature in Mozilla Firefox 3.x before 3.0.4 and 2.x before 2.0.0.18 allows remote attackers to violate the same origin policy to conduct cross-site scripting (XSS) attacks and execute arbitrary JavaScript with chrome privileges via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:49.876-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:28.579-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:58.735-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10943 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:33.118-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:09.124-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37159"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37875"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37293"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37934"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37671"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37932"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37970"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37357"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37852"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37844"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37232"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-3.el4" test_ref="oval:org.mitre.oval:tst:38065"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37914"/>
            <criterion comment="firefox is earlier than 0:3.0.4-1.el4" test_ref="oval:org.mitre.oval:tst:37904"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-3.el4" test_ref="oval:org.mitre.oval:tst:37840"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37991"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37955"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37777"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:38009"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-20.el5" test_ref="oval:org.mitre.oval:tst:37773"/>
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37531"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37899"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37454"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:38021"/>
            <criterion comment="yelp is earlier than 0:2.16.0-22.el5" test_ref="oval:org.mitre.oval:tst:37645"/>
            <criterion comment="devhelp is earlier than 0:0.12-20.el5" test_ref="oval:org.mitre.oval:tst:37958"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37388"/>
            <criterion comment="firefox is earlier than 0:3.0.4-1.el5" test_ref="oval:org.mitre.oval:tst:37066"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37648"/>
            <criterion comment="nss-tools is earlier than 0:3.12.1.1-3.el5" test_ref="oval:org.mitre.oval:tst:37936"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10942" version="5" class="vulnerability">
      <metadata>
        <title>The ext4_group_add function in fs/ext4/resize.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not properly initialize the group descriptor during a resize (aka resize2fs) operation, which might allow local users to cause a denial of service (OOPS) by arranging for crafted values to be present in available memory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0745" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0745"/>
        <description>The ext4_group_add function in fs/ext4/resize.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not properly initialize the group descriptor during a resize (aka resize2fs) operation, which might allow local users to cause a denial of service (OOPS) by arranging for crafted values to be present in available memory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:58.236-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:28.261-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:58.381-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10942 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:47:12.727-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:08.653-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38255"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38332"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39122"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39058"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39247"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39145"/>
          <criterion comment="kernel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38795"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38831"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38585"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39130"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38567"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39245"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10941" version="5" class="vulnerability">
      <metadata>
        <title>The compat_sys_mount function in fs/compat.c in Linux kernel 2.6.20 and earlier allows local users to cause a denial of service (NULL pointer dereference and oops) by mounting a smbfs file system in compatibility mode ("mount -t smbfs").</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-7203" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-7203"/>
        <description>The compat_sys_mount function in fs/compat.c in Linux kernel 2.6.20 and earlier allows local users to cause a denial of service (NULL pointer dereference and oops) by mounting a smbfs file system in compatibility mode ("mount -t smbfs").</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:34.723-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:27.441-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:57.824-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10941 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:16:42.117-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:08.002-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34475"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34659"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34630"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34375"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34496"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34560"/>
            <criterion comment="kernel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34493"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34302"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34295"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34662"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:33694"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34290"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34311"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34023"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34185"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34210"/>
            <criterion comment="kernel is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34306"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34033"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34168"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34261"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34155"/>
            <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34278"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10940" version="5" class="vulnerability">
      <metadata>
        <title>The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a crafted certificate, as demonstrated by a certificate presented by a server linked against the yaSSL library.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4028"/>
        <description>The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a crafted certificate, as demonstrated by a certificate presented by a server linked against the yaSSL library.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:18.874-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:27.150-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:57.552-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10940 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:47:01.251-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:07.658-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mysql is earlier than 0:5.0.77-4.el5_4.2" test_ref="oval:org.mitre.oval:tst:40085"/>
          <criterion comment="mysql-devel is earlier than 0:5.0.77-4.el5_4.2" test_ref="oval:org.mitre.oval:tst:39585"/>
          <criterion comment="mysql-test is earlier than 0:5.0.77-4.el5_4.2" test_ref="oval:org.mitre.oval:tst:40252"/>
          <criterion comment="mysql-bench is earlier than 0:5.0.77-4.el5_4.2" test_ref="oval:org.mitre.oval:tst:40320"/>
          <criterion comment="mysql-server is earlier than 0:5.0.77-4.el5_4.2" test_ref="oval:org.mitre.oval:tst:39916"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1094" version="4" class="vulnerability">
      <metadata>
        <title>IE plugin.ocx Heap Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0233" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0233"/>
        <description>Heap-based buffer overflow in plugin.ocx for Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via the Load() method, a different vulnerability than CVE-2003-0115.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-30T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2004-09-22T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-09-22T11:10:00.000-04:00" comment="Replaced IE cumulative patch IDs to correspond to the original IDs">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2004-10-06T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:57.615-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:07.767-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Internet Explorer 5.5 Service Pack 2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3123"/>
        <criterion comment="the version of mshtml.dll is less than 5.50.4926.2500" negate="false" test_ref="oval:org.mitre.oval:tst:1454"/>
        <criterion comment="the patch q813489 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3114"/>
        <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
        <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
        <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
        <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
        <criterion comment="the patch q832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2588"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10939" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to obtain sensitive information via a web page with an embedded frame, which causes POST data from an outer page to be sent to the inner frame's URL during a SAVEMODE_FILEONLY save of the inner frame.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1311" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1311"/>
        <description>Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to obtain sensitive information via a web page with an embedded frame, which causes POST data from an outer page to be sent to the inner frame's URL during a SAVEMODE_FILEONLY save of the inner frame.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:34.361-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:26.630-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:56.995-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10939 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:13.289-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:06.928-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38597"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38375"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38403"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38521"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38542"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:37726"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38677"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38096"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38577"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38540"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox is earlier than 0:3.0.9-1.el4" test_ref="oval:org.mitre.oval:tst:38379"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38716"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38634"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38190"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38596"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38685"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38697"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38308"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38633"/>
            <criterion comment="firefox is earlier than 0:3.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38370"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38462"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10938" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) progressive display image reading capability in libpng 1.2.5 and earlier allow remote attackers to cause a denial of service (application crash) via a malformed PNG image.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0599" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0599"/>
        <description>Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) progressive display image reading capability in libpng 1.2.5 and earlier allow remote attackers to cause a denial of service (application crash) via a malformed PNG image.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:52.112-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:26.282-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:56.621-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10938 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:49.555-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:06.497-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mozilla-js-debugger is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30799"/>
          <criterion comment="libpng10-devel is earlier than 0:1.0.13-15" test_ref="oval:org.mitre.oval:tst:29821"/>
          <criterion comment="mozilla is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30278"/>
          <criterion comment="mozilla-chat is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30755"/>
          <criterion comment="libpng-devel is earlier than 2:1.2.2-25" test_ref="oval:org.mitre.oval:tst:30405"/>
          <criterion comment="mozilla-mail is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30570"/>
          <criterion comment="libpng10 is earlier than 0:1.0.13-15" test_ref="oval:org.mitre.oval:tst:30512"/>
          <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30230"/>
          <criterion comment="mozilla-nss is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30323"/>
          <criterion comment="mozilla-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30288"/>
          <criterion comment="mozilla-nss-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30339"/>
          <criterion comment="mozilla-nspr is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30813"/>
          <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30660"/>
          <criterion comment="libpng is earlier than 2:1.2.2-25" test_ref="oval:org.mitre.oval:tst:30788"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10937" version="5" class="vulnerability">
      <metadata>
        <title>Directory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1.9 through 1.9.0-1, when running on systems that support backslash (\) path separators or case-insensitive file names, allows remote attackers to access arbitrary files via (1) "..%5c" (encoded backslash) sequences or (2) filenames that match patterns in the :NondisclosureName option.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1145" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1145"/>
        <description>Directory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1.9 through 1.9.0-1, when running on systems that support backslash (\) path separators or case-insensitive file names, allows remote attackers to access arbitrary files via (1) "..%5c" (encoded backslash) sequences or (2) filenames that match patterns in the :NondisclosureName option.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:00.963-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:25.825-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:56.202-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10937 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:52.866-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:05.893-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37462"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37630"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:36810"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:36902"/>
            <criterion comment="ruby is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37678"/>
            <criterion comment="irb is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37674"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37720"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-ri is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37735"/>
            <criterion comment="ruby-mode is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37344"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37697"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37273"/>
            <criterion comment="ruby is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37563"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37438"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37757"/>
            <criterion comment="ruby-irb is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37463"/>
            <criterion comment="ruby-rdoc is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37172"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10936" version="5" class="vulnerability">
      <metadata>
        <title>The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a SAMBA request that contains multiple * (wildcard) characters.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0930" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0930"/>
        <description>The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a SAMBA request that contains multiple * (wildcard) characters.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:14.689-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:25.594-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:55.925-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10936 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:37.429-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:05.595-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="samba-common is earlier than 0:3.0.7-1.3E.1" test_ref="oval:org.mitre.oval:tst:30820"/>
          <criterion comment="samba-swat is earlier than 0:3.0.7-1.3E.1" test_ref="oval:org.mitre.oval:tst:31128"/>
          <criterion comment="samba-client is earlier than 0:3.0.7-1.3E.1" test_ref="oval:org.mitre.oval:tst:31144"/>
          <criterion comment="samba is earlier than 0:3.0.7-1.3E.1" test_ref="oval:org.mitre.oval:tst:31136"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10935" version="5" class="vulnerability">
      <metadata>
        <title>The _gnutls_server_name_recv_params function in lib/ext_server_name.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 does not properly calculate the number of Server Names in a TLS 1.0 Client Hello message during extension handling, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a zero value for the length of Server Names, which leads to a buffer overflow in session resumption data in the pack_security_parameters function, aka GNUTLS-SA-2008-1-1.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1948" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1948"/>
        <description>The _gnutls_server_name_recv_params function in lib/ext_server_name.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 does not properly calculate the number of Server Names in a TLS 1.0 Client Hello message during extension handling, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a zero value for the length of Server Names, which leads to a buffer overflow in session resumption data in the pack_security_parameters function, aka GNUTLS-SA-2008-1-1.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:16.749-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:25.330-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:55.612-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10935 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:16:59.880-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:04.965-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gnutls is earlier than 0:1.0.20-4.el4_6" test_ref="oval:org.mitre.oval:tst:36194"/>
            <criterion comment="gnutls-devel is earlier than 0:1.0.20-4.el4_6" test_ref="oval:org.mitre.oval:tst:36609"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gnutls is earlier than 0:1.4.1-3.el5_1" test_ref="oval:org.mitre.oval:tst:36294"/>
            <criterion comment="gnutls-devel is earlier than 0:1.4.1-3.el5_1" test_ref="oval:org.mitre.oval:tst:35940"/>
            <criterion comment="gnutls-utils is earlier than 0:1.4.1-3.el5_1" test_ref="oval:org.mitre.oval:tst:36811"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10934" version="5" class="vulnerability">
      <metadata>
        <title>The ECNE chunk handling in Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kernel panic) via an unexpected chunk when the session is in CLOSED state.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2271" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2271"/>
        <description>The ECNE chunk handling in Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kernel panic) via an unexpected chunk when the session is in CLOSED state.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:25.504-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:24.999-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:55.305-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10934 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:16:54.113-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:04.568-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32235"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32371"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32703"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32314"/>
          <criterion comment="kernel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32614"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32295"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32310"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32611"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32305"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10933" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long header in a news article, related to "canceling [a] newsgroup message" and "cancelled newsgroup messages."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4070" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4070"/>
        <description>Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long header in a news article, related to "canceling [a] newsgroup message" and "cancelled newsgroup messages."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:42.879-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:24.774-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:54.993-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10933 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:16:52.534-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:04.187-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="thunderbird is earlier than 0:1.5.0.12-16.el4" test_ref="oval:org.mitre.oval:tst:37634"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="thunderbird is earlier than 0:2.0.0.17-1.el5" test_ref="oval:org.mitre.oval:tst:37230"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10932" version="5" class="vulnerability">
      <metadata>
        <title>SCTP conntrack (ip_conntrack_proto_sctp.c) in netfilter for Linux kernel 2.6.17 before 2.6.17.3 and 2.6.16 before 2.6.16.23 allows remote attackers to cause a denial of service (crash) via a packet without any chunks, which causes a variable to contain an invalid value that is later used to dereference a pointer.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2934" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2934"/>
        <description>SCTP conntrack (ip_conntrack_proto_sctp.c) in netfilter for Linux kernel 2.6.17 before 2.6.17.3 and 2.6.16 before 2.6.16.23 allows remote attackers to cause a denial of service (crash) via a packet without any chunks, which causes a variable to contain an invalid value that is later used to dereference a pointer.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:40.103-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:24.494-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:54.682-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10932 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:21.118-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:03.751-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32335"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32833"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32825"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32836"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32736"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:31931"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32361"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32793"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32795"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10931" version="5" class="vulnerability">
      <metadata>
        <title>The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a denial of service (server restart) via certain SNMP packets with negative length fields that trigger a memory allocation error.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0918" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0918"/>
        <description>The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a denial of service (server restart) via certain SNMP packets with negative length fields that trigger a memory allocation error.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:06.208-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:24.316-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:54.482-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10931 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:00.333-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:03.491-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="squid is earlier than 7:2.5.STABLE3-6.3E.2" test_ref="oval:org.mitre.oval:tst:31037"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10930" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to execute arbitrary code by using an eval in an XBL method binding (XBL.method.eval) to create Javascript functions that are compiled with extra privileges.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1735" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1735"/>
        <description>Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to execute arbitrary code by using an eval in an XBL method binding (XBL.method.eval) to create Javascript functions that are compiled with extra privileges.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:05.105-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:23.798-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:53.909-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10930 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:47.485-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:02.823-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32663"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32326"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31987"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32451"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32697"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32558"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32427"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32671"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32666"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32561"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32593"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32679"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32133"/>
            <criterion comment="thunderbird is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32204"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32701"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32428"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32557"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32229"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32349"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32644"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32440"/>
            <criterion comment="firefox is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32219"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32598"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32717"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1093" version="2" class="vulnerability">
      <metadata>
        <title>Windows Server 2003 SSL PCT Handshake Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Private Communications Transport (PCT)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0719" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0719"/>
        <description>Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via PCT 1.0 handshake packets.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected to use a forward slash as the separator in the key." date="2007-05-07T15:59:00.528-04:00">
              <contributor organization="Secure Elements, Inc.">Glenn Strickland</contributor>
            </modified>
            <status_change date="2007-05-07T16:06:49.197-04:00">INTERIM</status_change>
            <status_change date="2007-05-23T15:05:26.193-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
          <criterion comment="the version of schannel.dll is less than 5.2.3790.132" negate="false" test_ref="oval:org.mitre.oval:tst:1509"/>
          <criterion comment="the patch kb835732 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1510"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="SSL is enabled" negate="false" test_ref="oval:org.mitre.oval:tst:1508"/>
          <criterion comment="PCT support is disabled" negate="true" test_ref="oval:org.mitre.oval:tst:1503"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10929" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset.  NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4465" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4465"/>
        <description>Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset.  NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:21.678-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:23.434-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:53.527-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10929 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:52.676-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:02.246-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-devel is earlier than 0:2.0.46-70.ent" test_ref="oval:org.mitre.oval:tst:35773"/>
            <criterion comment="mod_ssl is earlier than 0:2.0.46-70.ent" test_ref="oval:org.mitre.oval:tst:36016"/>
            <criterion comment="httpd is earlier than 0:2.0.46-70.ent" test_ref="oval:org.mitre.oval:tst:35281"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-suexec is earlier than 0:2.0.52-38.ent.2" test_ref="oval:org.mitre.oval:tst:35606"/>
            <criterion comment="httpd-manual is earlier than 0:2.0.52-38.ent.2" test_ref="oval:org.mitre.oval:tst:35973"/>
            <criterion comment="httpd-devel is earlier than 0:2.0.52-38.ent.2" test_ref="oval:org.mitre.oval:tst:35916"/>
            <criterion comment="mod_ssl is earlier than 0:2.0.52-38.ent.2" test_ref="oval:org.mitre.oval:tst:35852"/>
            <criterion comment="httpd is earlier than 0:2.0.52-38.ent.2" test_ref="oval:org.mitre.oval:tst:35768"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-manual is earlier than 0:2.2.3-11.el5_1.3" test_ref="oval:org.mitre.oval:tst:35953"/>
            <criterion comment="httpd-devel is earlier than 0:2.2.3-11.el5_1.3" test_ref="oval:org.mitre.oval:tst:35668"/>
            <criterion comment="mod_ssl is earlier than 0:2.2.3-11.el5_1.3" test_ref="oval:org.mitre.oval:tst:35991"/>
            <criterion comment="httpd is earlier than 0:2.2.3-11.el5_1.3" test_ref="oval:org.mitre.oval:tst:35696"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10928" version="5" class="vulnerability">
      <metadata>
        <title>pwlib, as used by Ekiga 2.0.5 and possibly other products, allows remote attackers to cause a denial of service (application crash) via a long argument to the PString::vsprintf function, related to a "memory management flaw". NOTE: this issue was originally reported as being in the SIPURL::GetHostAddress function in Ekiga (formerly GnomeMeeting).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4897" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4897"/>
        <description>pwlib, as used by Ekiga 2.0.5 and possibly other products, allows remote attackers to cause a denial of service (application crash) via a long argument to the PString::vsprintf function, related to a "memory management flaw". NOTE: this issue was originally reported as being in the SIPURL::GetHostAddress function in Ekiga (formerly GnomeMeeting).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:18.730-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:23.242-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:53.310-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10928 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:47:15.184-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:01.852-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="pwlib is earlier than 0:1.10.1-7.0.1.el5" test_ref="oval:org.mitre.oval:tst:35204"/>
          <criterion comment="pwlib-devel is earlier than 0:1.10.1-7.0.1.el5" test_ref="oval:org.mitre.oval:tst:35049"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10927" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the readline function in util/texindex.c, as used by the (1) texi2dvi and (2) texindex commands, in texinfo 4.8 and earlier allows local users to execute arbitrary code via a crafted Texinfo file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0244"/>
        <description>PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using the CREATE AGGREGATE command.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:23.339-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:22.723-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:52.759-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10927 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:39.928-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:01.250-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="rh-postgresql-devel is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:30936"/>
            <criterion comment="rh-postgresql-server is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:30803"/>
            <criterion comment="rh-postgresql-python is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31436"/>
            <criterion comment="rh-postgresql-libs is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31064"/>
            <criterion comment="rh-postgresql-docs is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:30591"/>
            <criterion comment="rh-postgresql-test is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31342"/>
            <criterion comment="rh-postgresql-pl is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31217"/>
            <criterion comment="rh-postgresql-tcl is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31199"/>
            <criterion comment="rh-postgresql is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31415"/>
            <criterion comment="rh-postgresql-contrib is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31005"/>
            <criterion comment="rh-postgresql-jdbc is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31233"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31336"/>
            <criterion comment="postgresql-docs is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31398"/>
            <criterion comment="postgresql-pl is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31229"/>
            <criterion comment="postgresql-tcl is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:30946"/>
            <criterion comment="postgresql-libs is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31215"/>
            <criterion comment="postgresql-contrib is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:30784"/>
            <criterion comment="postgresql-python is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31126"/>
            <criterion comment="postgresql-test is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31318"/>
            <criterion comment="postgresql-jdbc is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31273"/>
            <criterion comment="postgresql-server is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31424"/>
            <criterion comment="postgresql-devel is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31325"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10926" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1 allows remote attackers to execute arbitrary code via a .SMIL file with a large system-screen-size value.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0455" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0455"/>
        <description>Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1 allows remote attackers to execute arbitrary code via a .SMIL file with a large system-screen-size value.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:52.611-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:22.534-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:52.552-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10926 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:58.967-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:00.886-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="HelixPlayer is earlier than 1:1.0.3-1" test_ref="oval:org.mitre.oval:tst:31595"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10925" version="5" class="vulnerability">
      <metadata>
        <title>udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1185" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1185"/>
        <description>udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:30.193-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:22.330-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:52.325-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10925 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:54.392-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:10:00.557-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="libvolume_id-devel is earlier than 0:095-14.20.el5_3" test_ref="oval:org.mitre.oval:tst:38203"/>
          <criterion comment="libvolume_id is earlier than 0:095-14.20.el5_3" test_ref="oval:org.mitre.oval:tst:38455"/>
          <criterion comment="udev is earlier than 0:095-14.20.el5_3" test_ref="oval:org.mitre.oval:tst:38411"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10924" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to another, which allows remote attackers to conduct use-after-free attacks and execute arbitrary code via unspecified vectors involving improper interaction with garbage collection, as demonstrated by Nils during a Pwn2Own competition at CanSecWest 2010.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1121" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1121"/>
        <description>Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to another, which allows remote attackers to conduct use-after-free attacks and execute arbitrary code via unspecified vectors involving improper interaction with garbage collection, as demonstrated by Nils during a Pwn2Own competition at CanSecWest 2010.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:00.684-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:21.877-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:51.875-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10924 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:43.229-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:59.941-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.6.4-8.el4" test_ref="oval:org.mitre.oval:tst:40755"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gnome-python2-extras is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40435"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-21.el5" test_ref="oval:org.mitre.oval:tst:40552"/>
            <criterion comment="gnome-python2-libegg is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40721"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.2.4-10.el5" test_ref="oval:org.mitre.oval:tst:40480"/>
            <criterion comment="gnome-python2-gtkhtml2 is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40813"/>
            <criterion comment="totem is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40749"/>
            <criterion comment="xulrunner is earlier than 0:1.9.2.4-10.el5" test_ref="oval:org.mitre.oval:tst:40221"/>
            <criterion comment="gnome-python2-gtkspell is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40385"/>
            <criterion comment="yelp is earlier than 0:2.16.0-26.el5" test_ref="oval:org.mitre.oval:tst:40828"/>
            <criterion comment="devhelp is earlier than 0:0.12-21.el5" test_ref="oval:org.mitre.oval:tst:40814"/>
            <criterion comment="firefox is earlier than 0:3.6.4-8.el5" test_ref="oval:org.mitre.oval:tst:40524"/>
            <criterion comment="totem-mozplugin is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40620"/>
            <criterion comment="gnome-python2-gtkmozembed is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40722"/>
            <criterion comment="esc is earlier than 0:1.1.0-12.el5" test_ref="oval:org.mitre.oval:tst:40273"/>
            <criterion comment="totem-devel is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40637"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10923" version="5" class="vulnerability">
      <metadata>
        <title>pam_krb5 2.2.14 in Red Hat Enterprise Linux (RHEL) 5 and earlier, when the existing_ticket option is enabled, uses incorrect privileges when reading a Kerberos credential cache, which allows local users to gain privileges by setting the KRB5CCNAME environment variable to an arbitrary cache filename and running the (1) su or (2) sudo program. NOTE: there may be a related vector involving sshd that has limited relevance.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3825" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3825"/>
        <description>pam_krb5 2.2.14 in Red Hat Enterprise Linux (RHEL) 5 and earlier, when the existing_ticket option is enabled, uses incorrect privileges when reading a Kerberos credential cache, which allows local users to gain privileges by setting the KRB5CCNAME environment variable to an arbitrary cache filename and running the (1) su or (2) sudo program. NOTE: there may be a related vector involving sshd that has limited relevance.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:05.403-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:21.691-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:51.670-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10923 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:30.955-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:59.622-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="pam_krb5 is earlier than 0:2.2.14-1.el5_2.1" test_ref="oval:org.mitre.oval:tst:37423"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10922" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to read arbitrary files by (1) inserting the target filename into a text box, then turning that box into a file upload control, or (2) changing the type of the input control that is associated with an event handler.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1729" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1729"/>
        <description>Mozilla Firefox 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to read arbitrary files by (1) inserting the target filename into a text box, then turning that box into a file upload control, or (2) changing the type of the input control that is associated with an event handler.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:47.868-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:20.801-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:51.168-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10922 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:33.356-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:58.963-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32663"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32326"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31987"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32451"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32697"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32558"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32427"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32671"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32666"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32561"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32593"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32679"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32133"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32701"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32428"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32557"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32229"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32349"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32644"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32440"/>
            <criterion comment="firefox is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32219"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32598"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32717"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10921" version="5" class="vulnerability">
      <metadata>
        <title>umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local users with unmount permissions to gain privileges via the -r (remount) option, which causes the file system to be remounted with just the read-only flag, which effectively clears the nosuid, nodev, and other flags.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2876" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2876"/>
        <description>umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local users with unmount permissions to gain privileges via the -r (remount) option, which causes the file system to be remounted with just the read-only flag, which effectively clears the nosuid, nodev, and other flags.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:15.191-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:20.556-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:50.715-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10921 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:53.988-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:58.563-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="util-linux is earlier than 0:2.11y-31.11" test_ref="oval:org.mitre.oval:tst:32222"/>
            <criterion comment="mount is earlier than 0:2.11y-31.11" test_ref="oval:org.mitre.oval:tst:31332"/>
            <criterion comment="losetup is earlier than 0:2.11y-31.11" test_ref="oval:org.mitre.oval:tst:32224"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="util-linux is earlier than 0:2.12a-16.EL4.12" test_ref="oval:org.mitre.oval:tst:31892"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10920" version="3" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the Java Management Extensions (JMX) management agent in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier, when local monitoring is enabled, allows remote attackers to "perform unauthorized operations" via unspecified vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3103" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3103"/>
        <description>Unspecified vulnerability in the Java Management Extensions (JMX) management agent in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier, when local monitoring is enabled, allows remote attackers to "perform unauthorized operations" via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:14.488-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:20.127-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:50.282-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37481"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36778"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37475"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37445"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37487"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37483"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.6.0-sun-devel is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36649"/>
            <criterion comment="java-1.6.0-sun is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37229"/>
            <criterion comment="java-1.6.0-sun-demo is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37509"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37426"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37368"/>
            <criterion comment="java-1.6.0-sun-src is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37035"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37181"/>
            <criterion comment="java-1.6.0-sun-plugin is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37441"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37315"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37359"/>
            <criterion comment="java-1.6.0-sun-jdbc is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37490"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37461"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1092" version="1" class="vulnerability">
      <metadata>
        <title>Security Vulnerability in Solaris 10 NFS XDR Handling May Allow a Denial of Service to NFS Servers</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3223" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3223"/>
        <description>Unspecified vulnerability in the NFS server in Sun Solaris 10 before 20070613 allows remote attackers to cause a denial of service (system crash) via certain XDR data in NFS requests, probably related to processing of data by the xdr_bool and xdrmblk_getint32 functions.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-19T14:30:00.000-04:00">
              <contributor organization="Opsware, Inc.">Nicholas Hansen</contributor>
            </submitted>
            <status_change date="2007-06-19T14:30:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-07-10T21:08:47.178-04:00">INTERIM</status_change>
            <status_change date="2007-08-01T22:26:13.790-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="OR">
          <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert 102965" negate="false">
            <extend_definition comment="Solaris 10 (SPARC) is installed" definition_ref="oval:org.mitre.oval:def:1440"/>
            <criterion comment="Patch 125100-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:4018"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert 102965" negate="false">
            <extend_definition comment="Solaris 10 (x86) is installed" definition_ref="oval:org.mitre.oval:def:1926"/>
            <criterion comment="Patch 125101-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3945"/>
          </criteria>
        </criteria>
        <criterion comment="NFS Server running (nfsd)" negate="false" test_ref="oval:org.mitre.oval:tst:3396"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1926" version="1" class="inventory">
      <metadata>
        <title>Solaris 10 (x86) is installed</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference ref_id="cpe:/o:sun:sunos:5.10::ix86" source="CPE"/>
        <description>The operating system installed on the system is Sun Solaris 10 for x86.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-15T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </submitted>
            <status_change date="2007-06-15T12:20:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-07-03T21:53:53.007-04:00">INTERIM</status_change>
            <status_change date="2007-07-18T15:57:51.357-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Solaris 10 Installed" test_ref="oval:org.mitre.oval:tst:3680"/>
        <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:3912"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1440" version="1" class="inventory">
      <metadata>
        <title>Solaris 10 (SPARC) is installed</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
        </affected>
        <reference ref_id="cpe:/o:sun:sunos:5.10::sparc" source="CPE"/>
        <description>The operating system installed on the system is Sun Solaris 10 for SPARC.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-15T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </submitted>
            <status_change date="2007-06-15T12:20:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-07-03T21:53:52.343-04:00">INTERIM</status_change>
            <status_change date="2007-07-18T15:57:49.640-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Solaris 10 Installed" test_ref="oval:org.mitre.oval:tst:3680"/>
        <criterion comment="sparc architecture" test_ref="oval:org.mitre.oval:tst:3237"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10918" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in Linux before 2.4.26 for IA64 allows local users to cause a denial of service, with unknown impact.  NOTE: due to a typo, this issue was accidentally assigned CVE-2004-0477.  This is the proper candidate to use for the Linux local DoS.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0447" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0447"/>
        <description>Unknown vulnerability in Linux before 2.4.26 for IA64 allows local users to cause a denial of service, with unknown impact.  NOTE: due to a typo, this issue was accidentally assigned CVE-2004-0477.  This is the proper candidate to use for the Linux local DoS.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:53.353-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:19.803-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:49.941-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10918 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:38.987-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:58.197-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30827"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30622"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30627"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30676"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30823"/>
          <criterion comment="kernel is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30750"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30596"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30833"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-15.0.4.EL" test_ref="oval:org.mitre.oval:tst:30830"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10917" version="5" class="vulnerability">
      <metadata>
        <title>rad_decode in FreeRADIUS 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a short RADIUS string attribute with a tag, which causes memcpy to be called with a -1 length argument, as demonstrated using the Tunnel-Password attribute.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0967" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0967"/>
        <description>rad_decode in FreeRADIUS 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a short RADIUS string attribute with a tag, which causes memcpy to be called with a -1 length argument, as demonstrated using the Tunnel-Password attribute.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:46.673-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:19.621-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:49.736-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10917 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:44.374-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:57.832-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="freeradius is earlier than 0:0.9.3-1" test_ref="oval:org.mitre.oval:tst:30495"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10916" version="5" class="vulnerability">
      <metadata>
        <title>TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to pass numeric range checks and possibly execute code, and trigger assert errors, via large offset values in a TIFF directory that lead to an integer overflow and other unspecified vectors involving "unchecked arithmetic operations".</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3464" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3464"/>
        <description>TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to pass numeric range checks and possibly execute code, and trigger assert errors, via large offset values in a TIFF directory that lead to an integer overflow and other unspecified vectors involving "unchecked arithmetic operations".</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:06.148-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:19.358-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:49.447-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10916 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:30.481-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:57.426-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.1.3-3.10" test_ref="oval:org.mitre.oval:tst:32819"/>
            <criterion comment="libtiff is earlier than 0:3.5.7-25.el3.4" test_ref="oval:org.mitre.oval:tst:32069"/>
            <criterion comment="kdegraphics is earlier than 7:3.1.3-3.10" test_ref="oval:org.mitre.oval:tst:33012"/>
            <criterion comment="libtiff-devel is earlier than 0:3.5.7-25.el3.4" test_ref="oval:org.mitre.oval:tst:32843"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libtiff is earlier than 0:3.6.1-12" test_ref="oval:org.mitre.oval:tst:32922"/>
            <criterion comment="libtiff-devel is earlier than 0:3.6.1-12" test_ref="oval:org.mitre.oval:tst:32413"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10915" version="5" class="vulnerability">
      <metadata>
        <title>The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6239" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6239"/>
        <description>The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:22.565-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:19.107-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:49.165-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10915 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:25.301-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:56.913-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE3-8.3E" test_ref="oval:org.mitre.oval:tst:35706"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE14-1.4E.el4_6.1" test_ref="oval:org.mitre.oval:tst:35925"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.6.STABLE6-5.el5_1.2" test_ref="oval:org.mitre.oval:tst:35839"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10914" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4) pdftohtml, (5) KOffice KWord, (6) CUPS, and (7) libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps (number of components) field.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3192" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3192"/>
        <description>Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4) pdftohtml, (5) KOffice KWord, (6) CUPS, and (7) libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps (number of components) field.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:25.487-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:18.554-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:48.567-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10914 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:55.052-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:56.293-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32436"/>
            <criterion comment="tetex-dvips is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32311"/>
            <criterion comment="tetex-fonts is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32279"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.34" test_ref="oval:org.mitre.oval:tst:32490"/>
            <criterion comment="tetex is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32507"/>
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.34" test_ref="oval:org.mitre.oval:tst:32463"/>
            <criterion comment="tetex-afm is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32377"/>
            <criterion comment="xpdf is earlier than 1:2.02-9.8" test_ref="oval:org.mitre.oval:tst:31474"/>
            <criterion comment="tetex-xdvi is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:31613"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.34" test_ref="oval:org.mitre.oval:tst:31538"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32260"/>
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-3.6" test_ref="oval:org.mitre.oval:tst:32395"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32095"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-3.6" test_ref="oval:org.mitre.oval:tst:31805"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32489"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.9" test_ref="oval:org.mitre.oval:tst:31551"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32199"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-7.3" test_ref="oval:org.mitre.oval:tst:32230"/>
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.9" test_ref="oval:org.mitre.oval:tst:32368"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32308"/>
            <criterion comment="xpdf is earlier than 1:3.00-11.10" test_ref="oval:org.mitre.oval:tst:32152"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32333"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32317"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.9" test_ref="oval:org.mitre.oval:tst:32431"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10913" version="5" class="vulnerability">
      <metadata>
        <title>Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversion, and (4) OpenOffice, allow remote malicious WebDAV servers to execute arbitrary code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0179"/>
        <description>Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversion, and (4) OpenOffice, allow remote malicious WebDAV servers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:35:04.912-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:18.335-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:48.331-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10913 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:18.848-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:55.922-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="openoffice.org-libs is earlier than 0:1.1.0-15.EL" test_ref="oval:org.mitre.oval:tst:30342"/>
          <criterion comment="openoffice.org is earlier than 0:1.1.0-15.EL" test_ref="oval:org.mitre.oval:tst:30671"/>
          <criterion comment="openoffice.org-i18n is earlier than 0:1.1.0-15.EL" test_ref="oval:org.mitre.oval:tst:29960"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10912" version="5" class="vulnerability">
      <metadata>
        <title>iproute 2.4.7 and earlier allows local users to cause a denial of service via spoofed messages as other users to the kernel netlink interface.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0856" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0856"/>
        <description>iproute 2.4.7 and earlier allows local users to cause a denial of service via spoofed messages as other users to the kernel netlink interface.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:30.865-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:18.149-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:48.122-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10912 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:35.935-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:55.660-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="iproute is earlier than 0:2.4.7-11.30E.1" test_ref="oval:org.mitre.oval:tst:29928"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10911" version="5" class="vulnerability">
      <metadata>
        <title>Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate the amount of memory needed for a compiled regular expression pattern when the (1) -x or (2) -i UTF-8 options change within the pattern, which allows context-dependent attackers to cause a denial of service (PCRE or glibc crash) via crafted regular expressions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-7230" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-7230"/>
        <description>Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate the amount of memory needed for a compiled regular expression pattern when the (1) -x or (2) -i UTF-8 options change within the pattern, which allows context-dependent attackers to cause a denial of service (PCRE or glibc crash) via crafted regular expressions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:48.115-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:17.870-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:47.809-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10911 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:31.629-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:55.259-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="pcre-devel is earlier than 0:4.5-4.el4_6.6" test_ref="oval:org.mitre.oval:tst:35615"/>
            <criterion comment="pcre is earlier than 0:4.5-4.el4_6.6" test_ref="oval:org.mitre.oval:tst:35501"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="pcre-devel is earlier than 0:6.6-2.el5_1.7" test_ref="oval:org.mitre.oval:tst:35251"/>
            <criterion comment="pcre is earlier than 0:6.6-2.el5_1.7" test_ref="oval:org.mitre.oval:tst:35032"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10910" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in the eflags checking in the 32-bit ptrace emulation for the Linux kernel on AMD64 systems allows local users to gain privileges.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0001" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0001"/>
        <description>Unknown vulnerability in the eflags checking in the 32-bit ptrace emulation for the Linux kernel on AMD64 systems allows local users to gain privileges.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:34.313-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:17.592-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:47.509-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10910 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:47.431-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:54.668-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-9.EL" test_ref="oval:org.mitre.oval:tst:30492"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-9.EL" test_ref="oval:org.mitre.oval:tst:30319"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-9.EL" test_ref="oval:org.mitre.oval:tst:30091"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-9.EL" test_ref="oval:org.mitre.oval:tst:30430"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-9.EL" test_ref="oval:org.mitre.oval:tst:30603"/>
          <criterion comment="kernel is earlier than 0:2.4.21-9.EL" test_ref="oval:org.mitre.oval:tst:30486"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-9.EL" test_ref="oval:org.mitre.oval:tst:30341"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-9.EL" test_ref="oval:org.mitre.oval:tst:30477"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-9.EL" test_ref="oval:org.mitre.oval:tst:30442"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1091" version="8" class="vulnerability">
      <metadata>
        <title>Server 2003 IE Mismatched Document Object Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1790" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1790"/>
        <description>Microsoft Internet Explorer 6 SP2 6.0.2900.2180 and 6.0.2800.1106, and earlier versions, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a Javascript BODY onload event that calls the window function, aka "Mismatched Document Object Model Objects Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-11-11T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-12-12T10:00:00.000-04:00">DRAFT</status_change>
            <modified date="2005-12-14T12:00:00.000-04:00" comment="Updated with newly available information.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-04T08:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-01-25T07:30:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:1051" date="2007-01-24T21:34:00.609-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-24T21:35:04.227-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:29.406-05:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.388-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:49:34.588-04:00">INTERIM</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.922-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-11-13T12:00:57.159-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:19.855-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:18.332-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:55.091-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:07.563-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND" comment="Software section">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="Internet Explorer 6 is installed" test_ref="oval:org.mitre.oval:tst:1177"/>
        <criterion comment="the version of mshtml.dll is less than 6.0.3790.449" test_ref="oval:org.mitre.oval:tst:1176"/>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criteria operator="OR" comment="Server 2003 IE Enhanced Security is installed and set.">
          <criterion comment="Server 2003 IE Enhanced Security (Administror) is installed and set." test_ref="oval:org.mitre.oval:tst:1175"/>
          <criterion comment="Server 2003 IE Enhanced Security (User) is installed and set." test_ref="oval:org.mitre.oval:tst:1174"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10909" version="5" class="vulnerability">
      <metadata>
        <title>The elf_core_dump function in binfmt_elf.c for Linux kernel 2.x.x to 2.2.27-rc2, 2.4.x to 2.4.31-pre1, and 2.6.x to 2.6.12-rc4 allows local users to execute arbitrary code via an ELF binary that, in certain conditions involving the create_elf_tables function, causes a negative length argument to pass a signed integer comparison, leading to a buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1263" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1263"/>
        <description>The elf_core_dump function in binfmt_elf.c for Linux kernel 2.x.x to 2.2.27-rc2, 2.4.x to 2.4.31-pre1, and 2.6.x to 2.6.12-rc4 allows local users to execute arbitrary code via an ELF binary that, in certain conditions involving the create_elf_tables function, causes a negative length argument to pass a signed integer comparison, leading to a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:33.647-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:17.291-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:47.208-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10909 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:00.561-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:54.297-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-32.0.1.EL" test_ref="oval:org.mitre.oval:tst:31870"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-32.0.1.EL" test_ref="oval:org.mitre.oval:tst:31657"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-32.0.1.EL" test_ref="oval:org.mitre.oval:tst:31642"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-32.0.1.EL" test_ref="oval:org.mitre.oval:tst:31984"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-32.0.1.EL" test_ref="oval:org.mitre.oval:tst:31213"/>
          <criterion comment="kernel is earlier than 0:2.4.21-32.0.1.EL" test_ref="oval:org.mitre.oval:tst:31839"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-32.0.1.EL" test_ref="oval:org.mitre.oval:tst:31941"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-32.0.1.EL" test_ref="oval:org.mitre.oval:tst:31760"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-32.0.1.EL" test_ref="oval:org.mitre.oval:tst:31960"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10908" version="3" class="vulnerability">
      <metadata>
        <title>Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when Firefox or Opera is used, allows remote attackers to violate the security model for JavaScript outbound connections via a multi-pin DNS rebinding attack dependent on the LiveConnect API, in which JavaScript download relies on DNS resolution by the browser, but JavaScript socket operations rely on separate DNS resolution by a Java Virtual Machine (JVM), a different issue than CVE-2007-5273.  NOTE: this is similar to CVE-2007-5232.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5274" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5274"/>
        <description>Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when Firefox or Opera is used, allows remote attackers to violate the security model for JavaScript outbound connections via a multi-pin DNS rebinding attack dependent on the LiveConnect API, in which JavaScript download relies on DNS resolution by the browser, but JavaScript socket operations rely on separate DNS resolution by a Java Virtual Machine (JVM), a different issue than CVE-2007-5273.  NOTE: this is similar to CVE-2007-5232.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:23.749-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:16.316-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:46.317-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criteria operator="OR">
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:35718"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:36338"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:35438"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:36312"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:36170"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:35439"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35617"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34688"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35272"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35892"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:34849"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36357"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35532"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35673"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36219"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35110"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35478"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35875"/>
            <criterion comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35815"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34668"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35191"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35384"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35413"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36292"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35465"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35057"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35644"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35584"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34760"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36198"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35317"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36227"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36003"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35429"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36350"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35624"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35144"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35886"/>
            <criterion comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36301"/>
            <criterion comment="java-1.5.0-ibm-accessibility is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35633"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35280"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35437"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35256"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35392"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35822"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35453"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34772"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10907" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in Gaim before 0.82 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) Rich Text Format (RTF) messages, (2) a long hostname for the local system as obtained from DNS, or (3) a long URL that is not properly handled by the URL decoder.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0785" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0785"/>
        <description>Multiple buffer overflows in Gaim before 0.82 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) Rich Text Format (RTF) messages, (2) a long hostname for the local system as obtained from DNS, or (3) a long URL that is not properly handled by the URL decoder.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:39.925-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:16.124-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:46.089-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10907 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:49.272-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:53.975-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="gaim is earlier than 1:0.82.1-0.RHEL3" test_ref="oval:org.mitre.oval:tst:30434"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10906" version="5" class="vulnerability">
      <metadata>
        <title>The browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) the frame chain and synchronous events, (2) a SetMayHaveFrame assertion and nsCSSFrameConstructor::CreateFloatingLetterFrame, (3) nsCSSFrameConstructor::ConstructFrame, (4) the child list and initial reflow, (5) GetLastSpecialSibling, (6) nsFrameManager::GetPrimaryFrameFor and MathML, (7) nsFrame::GetBoxAscent, (8) nsCSSFrameConstructor::AdjustParentFrame, (9) nsDOMOfflineResourceList, and (10) nsContentUtils::ComparePosition.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2462" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2462"/>
        <description>The browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) the frame chain and synchronous events, (2) a SetMayHaveFrame assertion and nsCSSFrameConstructor::CreateFloatingLetterFrame, (3) nsCSSFrameConstructor::ConstructFrame, (4) the child list and initial reflow, (5) GetLastSpecialSibling, (6) nsFrameManager::GetPrimaryFrameFor and MathML, (7) nsFrame::GetBoxAscent, (8) nsCSSFrameConstructor::AdjustParentFrame, (9) nsDOMOfflineResourceList, and (10) nsContentUtils::ComparePosition.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:22.114-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:15.517-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:45.488-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10906 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:07.877-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:53.289-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38881"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38851"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38690"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38366"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38475"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38924"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38923"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38918"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38811"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38644"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-45.el4_8" test_ref="oval:org.mitre.oval:tst:38772"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-25.el4" test_ref="oval:org.mitre.oval:tst:40299"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-45.el4_8" test_ref="oval:org.mitre.oval:tst:37948"/>
            <criterion comment="firefox is earlier than 0:3.0.12-1.el4" test_ref="oval:org.mitre.oval:tst:38809"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-45.el4_8" test_ref="oval:org.mitre.oval:tst:38947"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-45.el4_8" test_ref="oval:org.mitre.oval:tst:38194"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-45.el4_8" test_ref="oval:org.mitre.oval:tst:38876"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-45.el4_8" test_ref="oval:org.mitre.oval:tst:38504"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38249"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38575"/>
            <criterion comment="firefox is earlier than 0:3.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38853"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.24-2.el5_4" test_ref="oval:org.mitre.oval:tst:40249"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38563"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10905" version="5" class="vulnerability">
      <metadata>
        <title>backend/parser/parse_coerce.c in PostgreSQL 7.4.1 through 7.4.14, 8.0.x before 8.0.9, and 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via a coercion of an unknown element to ANYARRAY.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5541" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5541"/>
        <description>backend/parser/parse_coerce.c in PostgreSQL 7.4.1 through 7.4.14, 8.0.x before 8.0.9, and 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via a coercion of an unknown element to ANYARRAY.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:20.007-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:15.214-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:45.160-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10905 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:58.285-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:52.838-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="postgresql is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33181"/>
          <criterion comment="postgresql-docs is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33488"/>
          <criterion comment="postgresql-pl is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33593"/>
          <criterion comment="postgresql-tcl is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33121"/>
          <criterion comment="postgresql-libs is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33568"/>
          <criterion comment="postgresql-contrib is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33396"/>
          <criterion comment="postgresql-python is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33603"/>
          <criterion comment="postgresql-test is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:32610"/>
          <criterion comment="postgresql-server is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:32997"/>
          <criterion comment="postgresql-devel is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33536"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10904" version="5" class="vulnerability">
      <metadata>
        <title>Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that triggers a one-byte buffer underflow.  NOTE: this issue was introduced as a result of a fix for CVE-2006-3738.  As of 20071012, it is unknown whether code execution is possible.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5135" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5135"/>
        <description>Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that triggers a one-byte buffer underflow.  NOTE: this issue was introduced as a result of a fix for CVE-2006-3738.  As of 20071012, it is unknown whether code execution is possible.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:26.761-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:14.825-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:44.770-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10904 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:18.133-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:52.329-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.7a-33.24" test_ref="oval:org.mitre.oval:tst:35001"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.7a-33.24" test_ref="oval:org.mitre.oval:tst:34962"/>
            <criterion comment="openssl is earlier than 0:0.9.7a-33.24" test_ref="oval:org.mitre.oval:tst:34324"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.7a-43.17.el4_6.1" test_ref="oval:org.mitre.oval:tst:35545"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.7a-43.17.el4_6.1" test_ref="oval:org.mitre.oval:tst:35457"/>
            <criterion comment="openssl is earlier than 0:0.9.7a-43.17.el4_6.1" test_ref="oval:org.mitre.oval:tst:35580"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.8b-8.3.el5_0.2" test_ref="oval:org.mitre.oval:tst:35181"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.8b-8.3.el5_0.2" test_ref="oval:org.mitre.oval:tst:35460"/>
            <criterion comment="openssl is earlier than 0:0.9.8b-8.3.el5_0.2" test_ref="oval:org.mitre.oval:tst:35053"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10903" version="5" class="vulnerability">
      <metadata>
        <title>drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and system crash) by sending the kernel many NETLINK_CONNECTOR messages.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0410"/>
        <description>drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and system crash) by sending the kernel many NETLINK_CONNECTOR messages.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:47.689-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:14.442-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:44.439-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10903 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:46.644-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:51.869-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:39968"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40459"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40373"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40487"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40332"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40331"/>
          <criterion comment="kernel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40445"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40493"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40458"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40390"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:39921"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:39890"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10902" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by bzip2 after the decompression is complete.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0953" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0953"/>
        <description>Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by bzip2 after the decompression is complete.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:49.646-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:14.176-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:44.151-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10902 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:45.936-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:51.473-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="bzip2-devel is earlier than 0:1.0.2-11.EL3.4" test_ref="oval:org.mitre.oval:tst:31970"/>
            <criterion comment="bzip2 is earlier than 0:1.0.2-11.EL3.4" test_ref="oval:org.mitre.oval:tst:31944"/>
            <criterion comment="bzip2-libs is earlier than 0:1.0.2-11.EL3.4" test_ref="oval:org.mitre.oval:tst:31594"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="bzip2-devel is earlier than 0:1.0.2-13.EL4.3" test_ref="oval:org.mitre.oval:tst:31440"/>
            <criterion comment="bzip2 is earlier than 0:1.0.2-13.EL4.3" test_ref="oval:org.mitre.oval:tst:31845"/>
            <criterion comment="bzip2-libs is earlier than 0:1.0.2-13.EL4.3" test_ref="oval:org.mitre.oval:tst:30992"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10901" version="5" class="vulnerability">
      <metadata>
        <title>Apache SpamAssassin 3.0.1, 3.0.2, and 3.0.3 allows remote attackers to cause a denial of service (CPU consumption and slowdown) via a message with a long Content-Type header without any boundaries.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1266" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1266"/>
        <description>Apache SpamAssassin 3.0.1, 3.0.2, and 3.0.3 allows remote attackers to cause a denial of service (CPU consumption and slowdown) via a message with a long Content-Type header without any boundaries.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:42.872-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:13.953-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:43.893-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10901 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:43.999-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:51.180-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="spamassassin is earlier than 0:3.0.4-1.el4" test_ref="oval:org.mitre.oval:tst:31857"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10900" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 2.0.0.12 and Thunderbird before 2.0.0.12 does not properly manage a delay timer used in confirmation dialogs, which might allow remote attackers to trick users into confirming an unsafe action, such as remote file execution, by using a timer to change the window focus, aka the "dialog refocus bug" or "ffclick2".</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0591" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0591"/>
        <description>Mozilla Firefox before 2.0.0.12 and Thunderbird before 2.0.0.12 does not properly manage a delay timer used in confirmation dialogs, which might allow remote attackers to trick users into confirming an unsafe action, such as remote file execution, by using a timer to change the window focus, aka the "dialog refocus bug" or "ffclick2".</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:43.423-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:13.419-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:43.320-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10900 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:41.624-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:50.420-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36256"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36236"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:35996"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36279"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36046"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36052"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36034"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36284"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:35748"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:35994"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36164"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36050"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-8.el4" test_ref="oval:org.mitre.oval:tst:36202"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36193"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36093"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36053"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.10.el4" test_ref="oval:org.mitre.oval:tst:35919"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:35600"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36141"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:35397"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:35684"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36203"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-9.el5" test_ref="oval:org.mitre.oval:tst:36281"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-9.el5" test_ref="oval:org.mitre.oval:tst:35480"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-8.el5" test_ref="oval:org.mitre.oval:tst:35675"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:109" version="4" class="vulnerability">
      <metadata>
        <title>Windows ntdll.dll Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0109" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0109"/>
        <description>Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute arbitrary code, as demonstrated via a WebDAV request to IIS 5.0.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-10-10T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:13.134-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:40.706-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:03.319-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:17.953-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 (sp3 or earlier) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="the version of ntdll.dll is less than 5.0.2195.6685" negate="false" test_ref="oval:org.mitre.oval:tst:2938"/>
        <criterion comment="the patch q815021 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2937"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10899" version="5" class="vulnerability">
      <metadata>
        <title>statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service (server process crash) via a TCP connection that is prematurely terminated.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1014" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1014"/>
        <description>statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service (server process crash) via a TCP connection that is prematurely terminated.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:20.177-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:13.232-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:43.111-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10899 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:57:46.687-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:50.150-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="nfs-utils is earlier than 0:1.0.6-33EL" test_ref="oval:org.mitre.oval:tst:31063"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10898" version="5" class="vulnerability">
      <metadata>
        <title>xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0638" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0638"/>
        <description>xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:33.972-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:12.982-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:42.829-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10898 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:53.933-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:49.721-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="xloadimage is earlier than 0:4.1-34.RHEL3" test_ref="oval:org.mitre.oval:tst:31232"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="xloadimage is earlier than 0:4.1-34.RHEL4" test_ref="oval:org.mitre.oval:tst:31621"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10897" version="5" class="vulnerability">
      <metadata>
        <title>PHP before 5.2.3 allows context-dependent attackers to cause a denial of service (application crash) via (1) a long string in the pattern parameter to the glob function; or (2) a long string in the string parameter to the fnmatch function, accompanied by a pattern parameter value with undefined characteristics, as demonstrated by a "*[1]e" value.  NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4782" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4782"/>
        <description>PHP before 5.2.3 allows context-dependent attackers to cause a denial of service (application crash) via (1) a long string in the pattern parameter to the glob function; or (2) a long string in the string parameter to the fnmatch function, accompanied by a pattern parameter value with undefined characteristics, as demonstrated by a "*[1]e" value.  NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:32.540-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:12.284-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:42.008-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10897 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:09.565-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:48.786-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:37185"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:36983"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:36761"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:37254"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:37280"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:36584"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:37255"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37302"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37269"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:36771"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:36854"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37155"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37143"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:36781"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37125"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37202"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37223"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37010"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37319"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37113"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37239"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:36927"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37138"/>
            <criterion comment="php-common is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37146"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37179"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37204"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:36955"/>
            <criterion comment="php is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37260"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37282"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:36878"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37114"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:36634"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37118"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37283"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37127"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37086"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37328"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37036"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37144"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37165"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10896" version="5" class="vulnerability">
      <metadata>
        <title>The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0594" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0594"/>
        <description>The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:39.457-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:11.971-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:41.725-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10896 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:00.555-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:47.707-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="php is earlier than 0:4.3.2-11.1.ent" test_ref="oval:org.mitre.oval:tst:30741"/>
          <criterion comment="php-pgsql is earlier than 0:4.3.2-11.1.ent" test_ref="oval:org.mitre.oval:tst:30765"/>
          <criterion comment="php-mysql is earlier than 0:4.3.2-11.1.ent" test_ref="oval:org.mitre.oval:tst:30773"/>
          <criterion comment="php-ldap is earlier than 0:4.3.2-11.1.ent" test_ref="oval:org.mitre.oval:tst:30554"/>
          <criterion comment="php-imap is earlier than 0:4.3.2-11.1.ent" test_ref="oval:org.mitre.oval:tst:30707"/>
          <criterion comment="php-odbc is earlier than 0:4.3.2-11.1.ent" test_ref="oval:org.mitre.oval:tst:30729"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10895" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to bypass cross-site scripting (XSS) protection by changing the src attribute of an IMG element to a javascript: URI.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6503" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6503"/>
        <description>Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to bypass cross-site scripting (XSS) protection by changing the src attribute of an IMG element to a javascript: URI.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:55.906-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:11.492-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:41.185-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10895 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:24.778-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:46.874-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:32785"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33227"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33266"/>
            <criterion comment="seamonkey is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33146"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:32352"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33183"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33095"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33300"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:32996"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33263"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.6.el4" test_ref="oval:org.mitre.oval:tst:33195"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33236"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33229"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.9-0.1.el4" test_ref="oval:org.mitre.oval:tst:32844"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33273"/>
            <criterion comment="seamonkey is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33259"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33239"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.6.el4" test_ref="oval:org.mitre.oval:tst:33284"/>
            <criterion comment="firefox is earlier than 0:1.5.0.9-0.1.el4" test_ref="oval:org.mitre.oval:tst:32815"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33153"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33015"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33251"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33336"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:32408"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10894" version="5" class="vulnerability">
      <metadata>
        <title>Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) execute arbitrary shell commands by entering a K keystroke on a line that contains a ";" (semicolon) followed by a command, or execute arbitrary Ex commands by entering an argument after a (2) "Ctrl-]" (control close-square-bracket) or (3) "g]" (g close-square-bracket) keystroke sequence, a different issue than CVE-2008-2712.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4101" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4101"/>
        <description>Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) execute arbitrary shell commands by entering a K keystroke on a line that contains a ";" (semicolon) followed by a command, or execute arbitrary Ex commands by entering an argument after a (2) "Ctrl-]" (control close-square-bracket) or (3) "g]" (g close-square-bracket) keystroke sequence, a different issue than CVE-2008-2712.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:39.450-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:11.075-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:40.527-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10894 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:59:09.763-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:46.276-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="vim-minimal is earlier than 1:6.3.046-0.30E.11" test_ref="oval:org.mitre.oval:tst:37217"/>
            <criterion comment="vim-enhanced is earlier than 1:6.3.046-0.30E.11" test_ref="oval:org.mitre.oval:tst:37049"/>
            <criterion comment="vim is earlier than 1:6.3.046-0.30E.11" test_ref="oval:org.mitre.oval:tst:37429"/>
            <criterion comment="vim-X11 is earlier than 1:6.3.046-0.30E.11" test_ref="oval:org.mitre.oval:tst:37390"/>
            <criterion comment="vim-common is earlier than 1:6.3.046-0.30E.11" test_ref="oval:org.mitre.oval:tst:37492"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="vim-minimal is earlier than 1:6.3.046-1.el4_7.5z" test_ref="oval:org.mitre.oval:tst:37521"/>
            <criterion comment="vim-enhanced is earlier than 1:6.3.046-1.el4_7.5z" test_ref="oval:org.mitre.oval:tst:37326"/>
            <criterion comment="vim is earlier than 1:6.3.046-1.el4_7.5z" test_ref="oval:org.mitre.oval:tst:36926"/>
            <criterion comment="vim-X11 is earlier than 1:6.3.046-1.el4_7.5z" test_ref="oval:org.mitre.oval:tst:37520"/>
            <criterion comment="vim-common is earlier than 1:6.3.046-1.el4_7.5z" test_ref="oval:org.mitre.oval:tst:37284"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="vim-minimal is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37412"/>
            <criterion comment="vim-enhanced is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37218"/>
            <criterion comment="vim is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37405"/>
            <criterion comment="vim-X11 is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37384"/>
            <criterion comment="vim-common is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37365"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10893" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the readline function in util/texindex.c, as used by the (1) texi2dvi and (2) texindex commands, in texinfo 4.8 and earlier allows local users to execute arbitrary code via a crafted Texinfo file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4810" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4810"/>
        <description>Buffer overflow in the readline function in util/texindex.c, as used by the (1) texi2dvi and (2) texindex commands, in texinfo 4.8 and earlier allows local users to execute arbitrary code via a crafted Texinfo file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:55.815-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:10.776-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:40.258-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10893 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:59:04.788-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:45.798-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="info is earlier than 0:4.5-3.el3.1" test_ref="oval:org.mitre.oval:tst:33067"/>
            <criterion comment="texinfo is earlier than 0:4.5-3.el3.1" test_ref="oval:org.mitre.oval:tst:33143"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="info is earlier than 0:4.7-5.el4.2" test_ref="oval:org.mitre.oval:tst:33209"/>
            <criterion comment="texinfo is earlier than 0:4.7-5.el4.2" test_ref="oval:org.mitre.oval:tst:32963"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10892" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Thunderbird before 1.5.0.7 and SeaMonkey before 1.0.5, with "Load Images" enabled, allows remote user-assisted attackers to bypass settings that disable JavaScript via a remote XBL file in a message that is loaded when the user views, forwards, or replies to the original message.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4570" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4570"/>
        <description>Mozilla Thunderbird before 1.5.0.7 and SeaMonkey before 1.0.5, with "Load Images" enabled, allows remote user-assisted attackers to bypass settings that disable JavaScript via a remote XBL file in a message that is loaded when the user views, forwards, or replies to the original message.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:59.803-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:10.307-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:39.695-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10892 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:35.464-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:45.178-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32759"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32989"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32809"/>
            <criterion comment="seamonkey is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32779"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32954"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32668"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:33010"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32811"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:32981"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.5-0.1.el3" test_ref="oval:org.mitre.oval:tst:33061"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.4.el4" test_ref="oval:org.mitre.oval:tst:32072"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:33120"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32842"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:32910"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32677"/>
            <criterion comment="seamonkey is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32933"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32243"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.4.el4" test_ref="oval:org.mitre.oval:tst:33062"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32978"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:33072"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:33079"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:32121"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.5-0.1.el4" test_ref="oval:org.mitre.oval:tst:33077"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10891" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in the cmtp_recv_interopmsg function in the Bluetooth driver (net/bluetooth/cmtp/capi.c) in the Linux kernel 2.4.22 up to 2.4.33.4 and 2.6.2 before 2.6.18.6, and 2.6.19.x, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via CAPI messages with a large value for the length of the (1) manu (manufacturer) or (2) serial (serial number) field.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6106" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6106"/>
        <description>Multiple buffer overflows in the cmtp_recv_interopmsg function in the Bluetooth driver (net/bluetooth/cmtp/capi.c) in the Linux kernel 2.4.22 up to 2.4.33.4 and 2.6.2 before 2.6.18.6, and 2.6.19.x, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via CAPI messages with a large value for the length of the (1) manu (manufacturer) or (2) serial (serial number) field.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:07.640-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:09.965-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:39.388-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10891 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:30:05.380-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:44.729-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33204"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33278"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33306"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32378"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33145"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33107"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32620"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32645"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33057"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10890" version="5" class="vulnerability">
      <metadata>
        <title>Untrusted search path vulnerability in opcontrol in OProfile 0.9.1 and earlier allows local users to execute arbitrary commands via a modified PATH that references malicious (1) which or (2) dirname programs.  NOTE: while opcontrol normally is not run setuid, a common configuration suggests accessing opcontrol using sudo.  In such a context, this is a vulnerability.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0576" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0576"/>
        <description>Untrusted search path vulnerability in opcontrol in OProfile 0.9.1 and earlier allows local users to execute arbitrary commands via a modified PATH that references malicious (1) which or (2) dirname programs.  NOTE: while opcontrol normally is not run setuid, a common configuration suggests accessing opcontrol using sudo.  In such a context, this is a vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:09.371-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:09.772-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:39.168-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10890 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:12.280-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:44.301-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="oprofile-devel is earlier than 0:0.8.1-23" test_ref="oval:org.mitre.oval:tst:30483"/>
          <criterion comment="oprofile is earlier than 0:0.8.1-23" test_ref="oval:org.mitre.oval:tst:30429"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1089" version="3" class="vulnerability">
      <metadata>
        <title>XMLHttpRequest Header Spoofing Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2703" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2703"/>
        <description>Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP headers of XML HTTP requests via XMLHttpRequest, and possibly use the client to exploit vulnerabilities in servers or proxies, including HTTP request smuggling and HTTP request splitting.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-11-11T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-12-12T10:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:2367" date="2007-02-26T08:32:00.241-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-26T08:32:39.263-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:2370" date="2007-03-06T07:46:00.064-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:40.416-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:1444" date="2007-04-23T12:05:00.911-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:19:58.867-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:1445" date="2007-04-23T12:05:00.720-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:51.315-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Suite version 1.7.10 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.10 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2535"/>
          <criterion comment="Mozilla Suite version 1.7.10 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2534"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.6 or earlier is installed">
          <criterion comment="Firefox version 1.0.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2533"/>
          <criterion comment="Mozilla Firefox version 1.0.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2532"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10889" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1202" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1202"/>
        <description>Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:08.591-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:09.389-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:38.696-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10889 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:28:38.927-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:43.706-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.6.4-8.el4" test_ref="oval:org.mitre.oval:tst:40755"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gnome-python2-extras is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40435"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-21.el5" test_ref="oval:org.mitre.oval:tst:40552"/>
            <criterion comment="gnome-python2-libegg is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40721"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.2.4-10.el5" test_ref="oval:org.mitre.oval:tst:40480"/>
            <criterion comment="gnome-python2-gtkhtml2 is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40813"/>
            <criterion comment="totem is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40749"/>
            <criterion comment="xulrunner is earlier than 0:1.9.2.4-10.el5" test_ref="oval:org.mitre.oval:tst:40221"/>
            <criterion comment="gnome-python2-gtkspell is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40385"/>
            <criterion comment="yelp is earlier than 0:2.16.0-26.el5" test_ref="oval:org.mitre.oval:tst:40828"/>
            <criterion comment="devhelp is earlier than 0:0.12-21.el5" test_ref="oval:org.mitre.oval:tst:40814"/>
            <criterion comment="firefox is earlier than 0:3.6.4-8.el5" test_ref="oval:org.mitre.oval:tst:40524"/>
            <criterion comment="totem-mozplugin is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40620"/>
            <criterion comment="gnome-python2-gtkmozembed is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40722"/>
            <criterion comment="esc is earlier than 0:1.1.0-12.el5" test_ref="oval:org.mitre.oval:tst:40273"/>
            <criterion comment="totem-devel is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40637"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10888" version="5" class="vulnerability">
      <metadata>
        <title>cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-1999-1572" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-1572"/>
        <description>cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:26.509-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:09.172-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:38.443-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10888 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:57:34.824-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:43.356-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="cpio is earlier than 0:2.5-3e.3" test_ref="oval:org.mitre.oval:tst:30735"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="cpio is earlier than 0:2.5-7.EL4.1" test_ref="oval:org.mitre.oval:tst:30839"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10887" version="5" class="vulnerability">
      <metadata>
        <title>The GDM daemon in GNOME Display Manager (GDM) before 2.14.13, 2.16.x before 2.16.7, 2.18.x before 2.18.4, and 2.19.x before 2.19.5 does not properly handle NULL return values from the g_strsplit function, which allows local users to cause a denial of service (persistent daemon crash) via a crafted command to the daemon's socket, related to (1) gdm.c and (2) gdmconfig.c in daemon/, and (3) gdmconfig.c and (4) gdmflexiserver.c in gui/.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3381" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3381"/>
        <description>The GDM daemon in GNOME Display Manager (GDM) before 2.14.13, 2.16.x before 2.16.7, 2.18.x before 2.18.4, and 2.19.x before 2.19.5 does not properly handle NULL return values from the g_strsplit function, which allows local users to cause a denial of service (persistent daemon crash) via a crafted command to the daemon's socket, related to (1) gdm.c and (2) gdmconfig.c in daemon/, and (3) gdmconfig.c and (4) gdmflexiserver.c in gui/.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:52.101-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:08.938-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:38.225-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10887 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:50.272-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:42.989-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="gdm is earlier than 1:2.16.0-31.0.1.el5" test_ref="oval:org.mitre.oval:tst:34885"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10886" version="5" class="vulnerability">
      <metadata>
        <title>The dvd_read_bca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions, assigns the wrong value to a length variable, which allows local users to execute arbitrary code via a crafted USB Storage device that triggers a buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2935" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2935"/>
        <description>The dvd_read_bca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions, assigns the wrong value to a length variable, which allows local users to execute arbitrary code via a crafted USB Storage device that triggers a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:15.622-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:08.525-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:37.735-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10886 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:57:33.935-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:42.432-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33074"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:32633"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33103"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33001"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:32937"/>
            <criterion comment="kernel is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:32280"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33127"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:32855"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33021"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32576"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32814"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32958"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32801"/>
            <criterion comment="kernel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32865"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32880"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32747"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32200"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32838"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10885" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1199" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1199"/>
        <description>Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:10.225-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:07.880-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:36.992-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10885 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:57:53.414-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:41.583-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40598"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40703"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:39947"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40593"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40651"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:39843"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40800"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40736"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:39844"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40686"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox is earlier than 0:3.6.4-8.el4" test_ref="oval:org.mitre.oval:tst:40755"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:40296"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:39850"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:40624"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:40782"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:40431"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:40449"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gnome-python2-extras is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40435"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-21.el5" test_ref="oval:org.mitre.oval:tst:40552"/>
            <criterion comment="gnome-python2-libegg is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40721"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.2.4-10.el5" test_ref="oval:org.mitre.oval:tst:40480"/>
            <criterion comment="gnome-python2-gtkhtml2 is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40813"/>
            <criterion comment="totem is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40749"/>
            <criterion comment="xulrunner is earlier than 0:1.9.2.4-10.el5" test_ref="oval:org.mitre.oval:tst:40221"/>
            <criterion comment="gnome-python2-gtkspell is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40385"/>
            <criterion comment="yelp is earlier than 0:2.16.0-26.el5" test_ref="oval:org.mitre.oval:tst:40828"/>
            <criterion comment="devhelp is earlier than 0:0.12-21.el5" test_ref="oval:org.mitre.oval:tst:40814"/>
            <criterion comment="firefox is earlier than 0:3.6.4-8.el5" test_ref="oval:org.mitre.oval:tst:40524"/>
            <criterion comment="totem-mozplugin is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40620"/>
            <criterion comment="gnome-python2-gtkmozembed is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40722"/>
            <criterion comment="esc is earlier than 0:1.1.0-12.el5" test_ref="oval:org.mitre.oval:tst:40273"/>
            <criterion comment="totem-devel is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40637"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10884" version="5" class="vulnerability">
      <metadata>
        <title>Memory leak in the Red Hat Content Accelerator kernel patch in Red Hat Enterprise Linux (RHEL) 4 and 5 allows local users to cause a denial of service (memory consumption) via a large number of open requests involving O_ATOMICLOOKUP.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5494"/>
        <description>Memory leak in the Red Hat Content Accelerator kernel patch in Red Hat Enterprise Linux (RHEL) 4 and 5 allows local users to cause a denial of service (memory consumption) via a large number of open requests involving O_ATOMICLOOKUP.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:29.704-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:07.390-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:36.450-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10884 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:30:32.530-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:40.886-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-67.0.1.EL" test_ref="oval:org.mitre.oval:tst:35332"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-67.0.1.EL" test_ref="oval:org.mitre.oval:tst:35637"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-67.0.1.EL" test_ref="oval:org.mitre.oval:tst:35503"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-67.0.1.EL" test_ref="oval:org.mitre.oval:tst:35622"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-67.0.1.EL" test_ref="oval:org.mitre.oval:tst:35705"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-67.0.1.EL" test_ref="oval:org.mitre.oval:tst:35693"/>
            <criterion comment="kernel is earlier than 0:2.6.9-67.0.1.EL" test_ref="oval:org.mitre.oval:tst:35848"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-67.0.1.EL" test_ref="oval:org.mitre.oval:tst:35863"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-67.0.1.EL" test_ref="oval:org.mitre.oval:tst:34990"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-67.0.1.EL" test_ref="oval:org.mitre.oval:tst:35434"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-67.0.1.EL" test_ref="oval:org.mitre.oval:tst:35824"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35219"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35593"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35357"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35021"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35284"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35088"/>
            <criterion comment="kernel is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:34595"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35139"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35215"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35555"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35511"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35474"/>
            <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35543"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10883" version="5" class="vulnerability">
      <metadata>
        <title>The GIF parser in the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of service (application crash) via a malformed image file that triggers a null dereference, a different vulnerability than CVE-2004-0692.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0693" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0693"/>
        <description>The GIF parser in the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of service (application crash) via a malformed image file that triggers a null dereference, a different vulnerability than CVE-2004-0692.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:33.466-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:07.161-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:36.189-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10883 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:59:19.085-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:40.566-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="qt-config is earlier than 1:3.1.2-13.4" test_ref="oval:org.mitre.oval:tst:30825"/>
          <criterion comment="qt is earlier than 1:3.1.2-13.4" test_ref="oval:org.mitre.oval:tst:30487"/>
          <criterion comment="qt-devel is earlier than 1:3.1.2-13.4" test_ref="oval:org.mitre.oval:tst:30732"/>
          <criterion comment="qt-MySQL is earlier than 1:3.1.2-13.4" test_ref="oval:org.mitre.oval:tst:30758"/>
          <criterion comment="qt-designer is earlier than 1:3.1.2-13.4" test_ref="oval:org.mitre.oval:tst:30345"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10882" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the build_range function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values, which triggers a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4568" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4568"/>
        <description>Integer overflow in the build_range function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values, which triggers a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:46.595-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:06.121-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:35.323-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10882 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:42.594-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:39.211-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35923"/>
            <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35665"/>
            <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:36014"/>
            <criterion comment="XFree86-libs is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35929"/>
            <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:36011"/>
            <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35836"/>
            <criterion comment="XFree86-twm is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35726"/>
            <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35715"/>
            <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35610"/>
            <criterion comment="XFree86-doc is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:36025"/>
            <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35789"/>
            <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35804"/>
            <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35865"/>
            <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35793"/>
            <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35903"/>
            <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35965"/>
            <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35922"/>
            <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35504"/>
            <criterion comment="XFree86-xdm is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35045"/>
            <criterion comment="XFree86-sdk is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35914"/>
            <criterion comment="XFree86 is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35831"/>
            <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35998"/>
            <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35975"/>
            <criterion comment="XFree86-xfs is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:36031"/>
            <criterion comment="XFree86-tools is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35971"/>
            <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35711"/>
            <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35933"/>
            <criterion comment="XFree86-xauth is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35826"/>
            <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35753"/>
            <criterion comment="XFree86-devel is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35678"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35795"/>
            <criterion comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35934"/>
            <criterion comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35467"/>
            <criterion comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35946"/>
            <criterion comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36116"/>
            <criterion comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35116"/>
            <criterion comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36004"/>
            <criterion comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35483"/>
            <criterion comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36103"/>
            <criterion comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36060"/>
            <criterion comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36074"/>
            <criterion comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35895"/>
            <criterion comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35905"/>
            <criterion comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36012"/>
            <criterion comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35984"/>
            <criterion comment="xorg-x11 is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35857"/>
            <criterion comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35681"/>
            <criterion comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35909"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10881" version="5" class="vulnerability">
      <metadata>
        <title>Integer underflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via crafted records in the document table of a Word document, leading to a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0200"/>
        <description>Integer underflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via crafted records in the document table of a Word document, leading to a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:53.249-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:03.911-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:33.107-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10881 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:49.815-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:36.887-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-44.2.0.EL3" test_ref="oval:org.mitre.oval:tst:39319"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.2-44.2.0.EL3" test_ref="oval:org.mitre.oval:tst:38381"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-44.2.0.EL3" test_ref="oval:org.mitre.oval:tst:39146"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39278"/>
            <criterion comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39127"/>
            <criterion comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39215"/>
            <criterion comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39334"/>
            <criterion comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39040"/>
            <criterion comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39365"/>
            <criterion comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39261"/>
            <criterion comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38776"/>
            <criterion comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39318"/>
            <criterion comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39214"/>
            <criterion comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38952"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.5-10.6.0.7.EL4.1" test_ref="oval:org.mitre.oval:tst:39352"/>
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.7.EL4.1" test_ref="oval:org.mitre.oval:tst:39055"/>
            <criterion comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39306"/>
            <criterion comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39184"/>
            <criterion comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38980"/>
            <criterion comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39008"/>
            <criterion comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38712"/>
            <criterion comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39379"/>
            <criterion comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39313"/>
            <criterion comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39050"/>
            <criterion comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39230"/>
            <criterion comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39028"/>
            <criterion comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38893"/>
            <criterion comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39235"/>
            <criterion comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38741"/>
            <criterion comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38930"/>
            <criterion comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38961"/>
            <criterion comment="openoffice.org2 is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39333"/>
            <criterion comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39110"/>
            <criterion comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39202"/>
            <criterion comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38885"/>
            <criterion comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38990"/>
            <criterion comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38790"/>
            <criterion comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39268"/>
            <criterion comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39063"/>
            <criterion comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39272"/>
            <criterion comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38888"/>
            <criterion comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39226"/>
            <criterion comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39023"/>
            <criterion comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39288"/>
            <criterion comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39224"/>
            <criterion comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39322"/>
            <criterion comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39338"/>
            <criterion comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39087"/>
            <criterion comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38927"/>
            <criterion comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39243"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.7.EL4.1" test_ref="oval:org.mitre.oval:tst:39262"/>
            <criterion comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39157"/>
            <criterion comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39102"/>
            <criterion comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39308"/>
            <criterion comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.7.EL4.1" test_ref="oval:org.mitre.oval:tst:39367"/>
            <criterion comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39377"/>
            <criterion comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39015"/>
            <criterion comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39232"/>
            <criterion comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38808"/>
            <criterion comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39238"/>
            <criterion comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39358"/>
            <criterion comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39172"/>
            <criterion comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39092"/>
            <criterion comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39190"/>
            <criterion comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39263"/>
            <criterion comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38740"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-langpack-sk_SK is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38936"/>
            <criterion comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38612"/>
            <criterion comment="openoffice.org-langpack-pa_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39210"/>
            <criterion comment="openoffice.org-langpack-hi_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38896"/>
            <criterion comment="openoffice.org-langpack-et_EE is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39200"/>
            <criterion comment="openoffice.org-langpack-kn_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38586"/>
            <criterion comment="openoffice.org is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39248"/>
            <criterion comment="openoffice.org-langpack-zh_TW is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39107"/>
            <criterion comment="openoffice.org-writer is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39229"/>
            <criterion comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39256"/>
            <criterion comment="openoffice.org-langpack-ga_IE is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39275"/>
            <criterion comment="openoffice.org-langpack-ta_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38959"/>
            <criterion comment="openoffice.org-langpack-ko_KR is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39312"/>
            <criterion comment="openoffice.org-langpack-or_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39074"/>
            <criterion comment="openoffice.org-langpack-da_DK is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39052"/>
            <criterion comment="openoffice.org-langpack-sr_CS is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38940"/>
            <criterion comment="openoffice.org-langpack-pl_PL is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39225"/>
            <criterion comment="openoffice.org-langpack-fr is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39073"/>
            <criterion comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38906"/>
            <criterion comment="openoffice.org-javafilter is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38603"/>
            <criterion comment="openoffice.org-langpack-as_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39022"/>
            <criterion comment="openoffice.org-testtools is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38884"/>
            <criterion comment="openoffice.org-langpack-hr_HR is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38711"/>
            <criterion comment="openoffice.org-langpack-de is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39196"/>
            <criterion comment="openoffice.org-emailmerge is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39212"/>
            <criterion comment="openoffice.org-xsltfilter is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39138"/>
            <criterion comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38979"/>
            <criterion comment="openoffice.org-langpack-te_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39282"/>
            <criterion comment="openoffice.org-langpack-sv is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39231"/>
            <criterion comment="openoffice.org-base is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38548"/>
            <criterion comment="openoffice.org-langpack-ca_ES is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39258"/>
            <criterion comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39076"/>
            <criterion comment="openoffice.org-core is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38582"/>
            <criterion comment="openoffice.org-langpack-nl is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38951"/>
            <criterion comment="openoffice.org-langpack-ur is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38975"/>
            <criterion comment="openoffice.org-langpack-nn_NO is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39070"/>
            <criterion comment="openoffice.org-langpack-ar is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38945"/>
            <criterion comment="openoffice.org-langpack-ja_JP is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39010"/>
            <criterion comment="openoffice.org-langpack-gu_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38852"/>
            <criterion comment="openoffice.org-langpack-tr_TR is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39034"/>
            <criterion comment="openoffice.org-langpack-eu_ES is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39279"/>
            <criterion comment="openoffice.org-langpack-fi_FI is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39029"/>
            <criterion comment="openoffice.org-graphicfilter is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39303"/>
            <criterion comment="openoffice.org-pyuno is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39173"/>
            <criterion comment="openoffice.org-langpack-ml_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39086"/>
            <criterion comment="openoffice.org-langpack-gl_ES is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39148"/>
            <criterion comment="openoffice.org-sdk-doc is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39218"/>
            <criterion comment="openoffice.org-langpack-zh_CN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38453"/>
            <criterion comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39191"/>
            <criterion comment="openoffice.org-langpack-it is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38977"/>
            <criterion comment="openoffice.org-sdk is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39140"/>
            <criterion comment="openoffice.org-langpack-es is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38870"/>
            <criterion comment="openoffice.org-langpack-nb_NO is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38717"/>
            <criterion comment="openoffice.org-langpack-sl_SI is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39060"/>
            <criterion comment="openoffice.org-draw is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39287"/>
            <criterion comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39291"/>
            <criterion comment="openoffice.org-langpack-ms_MY is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39038"/>
            <criterion comment="openoffice.org-langpack-el_GR is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38874"/>
            <criterion comment="openoffice.org-langpack-hu_HU is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39067"/>
            <criterion comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38997"/>
            <criterion comment="openoffice.org-langpack-bn is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39154"/>
            <criterion comment="openoffice.org-langpack-he_IL is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39113"/>
            <criterion comment="openoffice.org-langpack-pt_PT is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39241"/>
            <criterion comment="openoffice.org-langpack-lt_LT is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38807"/>
            <criterion comment="openoffice.org-langpack-af_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39085"/>
            <criterion comment="openoffice.org-langpack-bg_BG is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39165"/>
            <criterion comment="openoffice.org-calc is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38745"/>
            <criterion comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38565"/>
            <criterion comment="openoffice.org-langpack-cy_GB is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39311"/>
            <criterion comment="openoffice.org-langpack-mr_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39292"/>
            <criterion comment="openoffice.org-headless is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39144"/>
            <criterion comment="openoffice.org-langpack-th_TH is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39161"/>
            <criterion comment="openoffice.org-langpack-pt_BR is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38378"/>
            <criterion comment="openoffice.org-langpack-ru is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39304"/>
            <criterion comment="openoffice.org-math is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38758"/>
            <criterion comment="openoffice.org-impress is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39315"/>
            <criterion comment="openoffice.org-langpack-st_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39185"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10880" version="5" class="vulnerability">
      <metadata>
        <title>Format string vulnerability in Evolution 1.4 through 2.3.6.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the calendar entries such as task lists, which are not properly handled when the user selects the Calendars tab.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2550" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2550"/>
        <description>Format string vulnerability in Evolution 1.4 through 2.3.6.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the calendar entries such as task lists, which are not properly handled when the user selects the Calendars tab.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:33.233-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:03.647-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:32.765-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10880 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:11.930-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:36.465-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="evolution is earlier than 0:1.4.5-16" test_ref="oval:org.mitre.oval:tst:31035"/>
            <criterion comment="evolution-devel is earlier than 0:1.4.5-16" test_ref="oval:org.mitre.oval:tst:31372"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="evolution is earlier than 0:2.0.2-16.3" test_ref="oval:org.mitre.oval:tst:31247"/>
            <criterion comment="evolution-devel is earlier than 0:2.0.2-16.3" test_ref="oval:org.mitre.oval:tst:31492"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1088" version="1" class="vulnerability">
      <metadata>
        <title>Microsoft Outlook Express 5.5,SP2 News Reading Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Outlook Express</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1213" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1213"/>
        <description>Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP servers to execute arbitrary code via a LIST response with a long second field.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </submitted>
            <status_change date="2005-08-19T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Microsoft Outlook Express 5.5 SP2 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1514"/>
        <criterion comment="the version of inetcomm.dll is less than 5.50.4952.2800" negate="false" test_ref="oval:org.mitre.oval:tst:1178"/>
        <criterion comment="Patch KB897715 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:2853"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10879" version="5" class="vulnerability">
      <metadata>
        <title>BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3, and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0025"/>
        <description>BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3, and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:03.986-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:03.211-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:32.269-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10879 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:11.816-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:35.806-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="bind-utils is earlier than 20:9.2.4-23.el3" test_ref="oval:org.mitre.oval:tst:37741"/>
            <criterion comment="bind-devel is earlier than 20:9.2.4-23.el3" test_ref="oval:org.mitre.oval:tst:38028"/>
            <criterion comment="bind-chroot is earlier than 20:9.2.4-23.el3" test_ref="oval:org.mitre.oval:tst:37979"/>
            <criterion comment="bind is earlier than 20:9.2.4-23.el3" test_ref="oval:org.mitre.oval:tst:37251"/>
            <criterion comment="bind-libs is earlier than 20:9.2.4-23.el3" test_ref="oval:org.mitre.oval:tst:37716"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="bind-utils is earlier than 20:9.2.4-30.el4_7.1" test_ref="oval:org.mitre.oval:tst:38016"/>
            <criterion comment="bind-devel is earlier than 20:9.2.4-30.el4_7.1" test_ref="oval:org.mitre.oval:tst:37959"/>
            <criterion comment="bind-chroot is earlier than 20:9.2.4-30.el4_7.1" test_ref="oval:org.mitre.oval:tst:38139"/>
            <criterion comment="bind is earlier than 20:9.2.4-30.el4_7.1" test_ref="oval:org.mitre.oval:tst:38156"/>
            <criterion comment="bind-libs is earlier than 20:9.2.4-30.el4_7.1" test_ref="oval:org.mitre.oval:tst:38144"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="bind-utils is earlier than 30:9.3.4-6.0.3.P1.el5_2" test_ref="oval:org.mitre.oval:tst:38219"/>
            <criterion comment="bind-libbind-devel is earlier than 30:9.3.4-6.0.3.P1.el5_2" test_ref="oval:org.mitre.oval:tst:38166"/>
            <criterion comment="bind-devel is earlier than 30:9.3.4-6.0.3.P1.el5_2" test_ref="oval:org.mitre.oval:tst:38195"/>
            <criterion comment="bind-chroot is earlier than 30:9.3.4-6.0.3.P1.el5_2" test_ref="oval:org.mitre.oval:tst:37568"/>
            <criterion comment="caching-nameserver is earlier than 30:9.3.4-6.0.3.P1.el5_2" test_ref="oval:org.mitre.oval:tst:37245"/>
            <criterion comment="bind-sdb is earlier than 30:9.3.4-6.0.3.P1.el5_2" test_ref="oval:org.mitre.oval:tst:38183"/>
            <criterion comment="bind is earlier than 30:9.3.4-6.0.3.P1.el5_2" test_ref="oval:org.mitre.oval:tst:37793"/>
            <criterion comment="bind-libs is earlier than 30:9.3.4-6.0.3.P1.el5_2" test_ref="oval:org.mitre.oval:tst:37880"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10878" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0085" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0085"/>
        <description>Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:00.523-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:02.932-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:32.050-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10878 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:32.241-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:35.488-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="htdig-web is earlier than 3:3.2.0b6-3.40.1" test_ref="oval:org.mitre.oval:tst:31243"/>
          <criterion comment="htdig is earlier than 3:3.2.0b6-3.40.1" test_ref="oval:org.mitre.oval:tst:30895"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10877" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1065" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1065"/>
        <description>Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:52.737-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:02.477-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:31.527-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10877 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:57.421-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:34.874-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:31183"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:31119"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:30756"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:30361"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:31078"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:31082"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:30937"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31248"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31271"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31235"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31279"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31087"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31260"/>
            <criterion comment="php is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:30709"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31196"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:30324"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31008"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31291"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31210"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31168"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:30329"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10876" version="5" class="vulnerability">
      <metadata>
        <title>The Check Point High-Availability Protocol (CPHAP) dissector in Wireshark 0.9.6 through 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FWHA_MY_STATE packet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1268"/>
        <description>The Check Point High-Availability Protocol (CPHAP) dissector in Wireshark 0.9.6 through 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FWHA_MY_STATE packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:36.373-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:02.174-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:31.214-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10876 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:01.658-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:34.386-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.8-EL3.1" test_ref="oval:org.mitre.oval:tst:38258"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.8-EL3.1" test_ref="oval:org.mitre.oval:tst:38534"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.8-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:38635"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.8-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:38709"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.8-1.el5_3.1" test_ref="oval:org.mitre.oval:tst:38670"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.8-1.el5_3.1" test_ref="oval:org.mitre.oval:tst:38619"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10875" version="5" class="vulnerability">
      <metadata>
        <title>net/ipv4/netfilter/ip_conntrack_core.c in Linux kernel 2.4 and 2.6, and possibly net/ipv4/netfilter/nf_conntrack_l3proto_ipv4.c in 2.6, does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the getsockopt function with SO_ORIGINAL_DST, which allows local users to obtain portions of potentially sensitive memory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1343" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1343"/>
        <description>net/ipv4/netfilter/ip_conntrack_core.c in Linux kernel 2.4 and 2.6, and possibly net/ipv4/netfilter/nf_conntrack_l3proto_ipv4.c in 2.6, does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the getsockopt function with SO_ORIGINAL_DST, which allows local users to obtain portions of potentially sensitive memory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:10.338-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:01.684-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:30.718-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10875 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:45.731-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:33.664-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32158"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32589"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32704"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32562"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32078"/>
            <criterion comment="kernel is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32513"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32231"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32097"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32708"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32335"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32833"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32825"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32836"/>
            <criterion comment="kernel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32736"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:31931"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32361"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32793"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32795"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10874" version="5" class="vulnerability">
      <metadata>
        <title>PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumption and crash) by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using mismatched encoding conversion requests.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0922" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0922"/>
        <description>PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumption and crash) by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using mismatched encoding conversion requests.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:53.523-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:01.235-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:30.074-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10874 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:30:12.958-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:32.967-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:7.4.26-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39121"/>
            <criterion comment="postgresql-docs is earlier than 0:7.4.26-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39434"/>
            <criterion comment="postgresql-pl is earlier than 0:7.4.26-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39167"/>
            <criterion comment="postgresql-tcl is earlier than 0:7.4.26-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39217"/>
            <criterion comment="postgresql-libs is earlier than 0:7.4.26-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39513"/>
            <criterion comment="postgresql-contrib is earlier than 0:7.4.26-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39478"/>
            <criterion comment="postgresql-python is earlier than 0:7.4.26-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39271"/>
            <criterion comment="postgresql-test is earlier than 0:7.4.26-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39457"/>
            <criterion comment="postgresql-jdbc is earlier than 0:7.4.26-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39453"/>
            <criterion comment="postgresql-server is earlier than 0:7.4.26-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:38533"/>
            <criterion comment="postgresql-devel is earlier than 0:7.4.26-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39266"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:8.1.18-2.el5_4.1" test_ref="oval:org.mitre.oval:tst:39193"/>
            <criterion comment="postgresql-docs is earlier than 0:8.1.18-2.el5_4.1" test_ref="oval:org.mitre.oval:tst:39153"/>
            <criterion comment="postgresql-pl is earlier than 0:8.1.18-2.el5_4.1" test_ref="oval:org.mitre.oval:tst:39152"/>
            <criterion comment="postgresql-tcl is earlier than 0:8.1.18-2.el5_4.1" test_ref="oval:org.mitre.oval:tst:38994"/>
            <criterion comment="postgresql-libs is earlier than 0:8.1.18-2.el5_4.1" test_ref="oval:org.mitre.oval:tst:39091"/>
            <criterion comment="postgresql-contrib is earlier than 0:8.1.18-2.el5_4.1" test_ref="oval:org.mitre.oval:tst:39265"/>
            <criterion comment="postgresql-python is earlier than 0:8.1.18-2.el5_4.1" test_ref="oval:org.mitre.oval:tst:39497"/>
            <criterion comment="postgresql-test is earlier than 0:8.1.18-2.el5_4.1" test_ref="oval:org.mitre.oval:tst:38750"/>
            <criterion comment="postgresql-server is earlier than 0:8.1.18-2.el5_4.1" test_ref="oval:org.mitre.oval:tst:39514"/>
            <criterion comment="postgresql-devel is earlier than 0:8.1.18-2.el5_4.1" test_ref="oval:org.mitre.oval:tst:39530"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10873" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to execute arbitrary code via malformed VCard attachments that are not properly handled when previewing a message.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0903" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0903"/>
        <description>Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to execute arbitrary code via malformed VCard attachments that are not properly handled when previewing a message.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:19.723-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:00.883-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:29.706-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10873 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:08.451-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:32.576-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mozilla-js-debugger is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30915"/>
          <criterion comment="mozilla is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30964"/>
          <criterion comment="mozilla-chat is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30905"/>
          <criterion comment="mozilla-mail is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30635"/>
          <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:31000"/>
          <criterion comment="mozilla-devel is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30111"/>
          <criterion comment="mozilla-nss is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30762"/>
          <criterion comment="mozilla-nss-devel is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:31048"/>
          <criterion comment="mozilla-nspr is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30856"/>
          <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30834"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10872" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN (aka FORWARD-TSN) chunk with a large stream ID.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0065" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0065"/>
        <description>Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN (aka FORWARD-TSN) chunk with a large stream ID.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:03.503-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:00.404-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:29.209-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10872 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:28:59.175-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:31.900-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:37961"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38169"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38048"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38359"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38449"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38416"/>
            <criterion comment="kernel is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38237"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:37920"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38429"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38339"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38155"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:37732"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38060"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38354"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38313"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38198"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:37887"/>
            <criterion comment="kernel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38174"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38191"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38124"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38417"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:37779"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38257"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10871" version="5" class="vulnerability">
      <metadata>
        <title>Visual truncation vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to trigger a vertical scroll and spoof URLs via unspecified Unicode characters with a tall line-height property.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3078" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3078"/>
        <description>Visual truncation vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to trigger a vertical scroll and spoof URLs via unspecified Unicode characters with a tall line-height property.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:20.487-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:06:00.096-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:28.835-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10871 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:30:06.446-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:31.438-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nspr is earlier than 0:4.7.5-1.el4_8" test_ref="oval:org.mitre.oval:tst:39088"/>
            <criterion comment="firefox is earlier than 0:3.0.14-1.el4" test_ref="oval:org.mitre.oval:tst:39195"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.5-1.el4_8" test_ref="oval:org.mitre.oval:tst:39351"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39208"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39001"/>
            <criterion comment="nspr is earlier than 0:4.7.5-1.el5_4" test_ref="oval:org.mitre.oval:tst:39223"/>
            <criterion comment="firefox is earlier than 0:3.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39097"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.5-1.el5_4" test_ref="oval:org.mitre.oval:tst:39150"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39206"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10870" version="5" class="vulnerability">
      <metadata>
        <title>The load_elf_binary function in fs/binfmt_elf.c in the Linux kernel before 2.6.32.8 on the x86_64 platform does not ensure that the ELF interpreter is available before a call to the SET_PERSONALITY macro, which allows local users to cause a denial of service (system crash) via a 32-bit application that attempts to execute a 64-bit application and then triggers a segmentation fault, as demonstrated by amd64_killer, related to the flush_old_exec function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0307" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0307"/>
        <description>The load_elf_binary function in fs/binfmt_elf.c in the Linux kernel before 2.6.32.8 on the x86_64 platform does not ensure that the ELF interpreter is available before a call to the SET_PERSONALITY macro, which allows local users to cause a denial of service (system crash) via a 32-bit application that attempts to execute a 64-bit application and then triggers a segmentation fault, as demonstrated by amd64_killer, related to the flush_old_exec function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:15.553-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:59.538-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:28.328-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10870 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:28:40.496-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:30.724-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40241"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40097"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40139"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40308"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40210"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40082"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40354"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40326"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:39940"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:39363"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:39805"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:39968"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40459"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40373"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40487"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40332"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40331"/>
            <criterion comment="kernel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40445"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40493"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40458"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40390"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:39921"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:39890"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1087" version="3" class="vulnerability">
      <metadata>
        <title>Mozilla JavaScript Garbage-collection Hazard Audit</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1742" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1742"/>
        <description>The JavaScript engine in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 does not properly handle temporary variables that are not garbage collected, which might allow remote attackers to trigger operations on freed memory and cause memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-05-07T09:05:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-05-10T08:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:11.874-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:1133" date="2007-02-26T08:08:00.208-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-26T08:09:15.637-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:1135" date="2007-02-26T08:21:00.993-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:1136" date="2007-02-26T08:24:00.848-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:1138" date="2007-02-26T08:25:00.405-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:2283" date="2007-02-26T08:29:00.407-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:2284" date="2007-02-26T08:30:00.724-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:40.116-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:881" date="2007-04-23T12:05:00.811-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:12:53.801-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:882" date="2007-04-23T12:05:00.939-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:883" date="2007-04-23T12:05:00.804-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:1385" date="2007-04-23T12:05:00.430-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:50.913-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.7 or earlier is installed">
          <criterion comment="Mozilla Firefox version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1268"/>
          <criterion comment="Firefox version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1267"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Thunderbird version 1.0.7 or earlier is installed">
          <criterion comment="Mozilla Thunderbird version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1266"/>
          <criterion comment="Mozilla Thunderbird version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1265"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.12 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.12 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1264"/>
          <criterion comment="Mozilla Suite version 1.7.12 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1263"/>
        </criteria>
        <criteria operator="AND" comment="A pre-release of SeaMonkey 1.0 is installed">
          <criterion comment="A pre-release of SeaMonkey 1.0 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2439"/>
          <criterion comment="A pre-release of SeaMonkey 1.0 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2438"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10869" version="5" class="vulnerability">
      <metadata>
        <title>ImageMagick before 6.3.5-9 allows context-dependent attackers to cause a denial of service via a crafted image file that triggers (1) an infinite loop in the ReadDCMImage function, related to ReadBlobByte function calls; or (2) an infinite loop in the ReadXCFImage function, related to ReadBlobMSBLong function calls.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4985" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4985"/>
        <description>ImageMagick before 6.3.5-9 allows context-dependent attackers to cause a denial of service via a crafted image file that triggers (1) an infinite loop in the ReadDCMImage function, related to ReadBlobByte function calls; or (2) an infinite loop in the ReadXCFImage function, related to ReadBlobMSBLong function calls.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:58.757-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:59.127-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:27.844-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10869 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:24.139-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:30.112-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36023"/>
            <criterion comment="ImageMagick is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36184"/>
            <criterion comment="ImageMagick-perl is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36260"/>
            <criterion comment="ImageMagick-devel is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36208"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36056"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:36311"/>
            <criterion comment="ImageMagick is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:36459"/>
            <criterion comment="ImageMagick-perl is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:36349"/>
            <criterion comment="ImageMagick-devel is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:35927"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:36106"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36419"/>
            <criterion comment="ImageMagick is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36360"/>
            <criterion comment="ImageMagick-perl is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36388"/>
            <criterion comment="ImageMagick-devel is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:35921"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36133"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10868" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the backend framebuffer of XenSource Xen Para-Virtualized Framebuffer (PVFB) Message 3.0 through 3.0.3 allows local users to cause a denial of service (SDL crash) and possibly execute arbitrary code via "bogus screen updates," related to missing validation of the "format of messages."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1944" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1944"/>
        <description>Buffer overflow in the backend framebuffer of XenSource Xen Para-Virtualized Framebuffer (PVFB) Message 3.0 through 3.0.3 allows local users to cause a denial of service (SDL crash) and possibly execute arbitrary code via "bogus screen updates," related to missing validation of the "format of messages."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:07.921-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:58.866-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:27.627-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10868 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:40.686-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:29.741-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="xen-libs is earlier than 0:3.0.3-41.el5_1.5" test_ref="oval:org.mitre.oval:tst:36530"/>
          <criterion comment="xen is earlier than 0:3.0.3-41.el5_1.5" test_ref="oval:org.mitre.oval:tst:36543"/>
          <criterion comment="xen-devel is earlier than 0:3.0.3-41.el5_1.5" test_ref="oval:org.mitre.oval:tst:35758"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10867" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in Linux kernel 2.6 allows local users to overwrite kernel memory by writing to a sysfs file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0867" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0867"/>
        <description>Integer overflow in Linux kernel 2.6 allows local users to overwrite kernel memory by writing to a sysfs file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:52.512-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:58.606-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:27.351-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10867 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:28:47.637-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:29.376-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31545"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31539"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31661"/>
          <criterion comment="kernel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31482"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31112"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31605"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31330"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10866" version="3" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier allows remote attackers to access URLs via unknown vectors involving processing of XML data by an untrusted (1) application or (2) applet, a different vulnerability than CVE-2008-3105.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3106" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3106"/>
        <description>Unspecified vulnerability in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier allows remote attackers to access URLs via unknown vectors involving processing of XML data by an untrusted (1) application or (2) applet, a different vulnerability than CVE-2008-3105.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:27.324-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:58.371-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:27.093-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
        <criteria operator="OR">
          <criterion comment="java-1.6.0-sun-devel is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36649"/>
          <criterion comment="java-1.6.0-sun is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37229"/>
          <criterion comment="java-1.6.0-sun-src is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37035"/>
          <criterion comment="java-1.6.0-sun-demo is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37509"/>
          <criterion comment="java-1.6.0-sun-plugin is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37441"/>
          <criterion comment="java-1.6.0-sun-jdbc is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37490"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10865" version="5" class="vulnerability">
      <metadata>
        <title>Wireshark 0.99.5 and 0.10.x up to 0.10.14, when running on certain systems, allows remote attackers to cause a denial of service (crash) via crafted iSeries capture files that trigger a SIGTRAP.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3390" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3390"/>
        <description>Wireshark 0.99.5 and 0.10.x up to 0.10.14, when running on certain systems, allows remote attackers to cause a denial of service (crash) via crafted iSeries capture files that trigger a SIGTRAP.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:08.323-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:57.982-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:26.694-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10865 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:20.207-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:28.843-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-EL3.1" test_ref="oval:org.mitre.oval:tst:36111"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-EL3.1" test_ref="oval:org.mitre.oval:tst:36043"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-3.el3" test_ref="oval:org.mitre.oval:tst:35411"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-3.el3" test_ref="oval:org.mitre.oval:tst:36140"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.6-EL4.1" test_ref="oval:org.mitre.oval:tst:34755"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.6-EL4.1" test_ref="oval:org.mitre.oval:tst:34881"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.6-1.el5" test_ref="oval:org.mitre.oval:tst:34336"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.6-1.el5" test_ref="oval:org.mitre.oval:tst:34784"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10864" version="5" class="vulnerability">
      <metadata>
        <title>yum-rhn-plugin in Red Hat Enterprise Linux (RHEL) 5 does not verify the SSL certificate for a file download from a Red Hat Network (RHN) server, which makes it easier for remote man-in-the-middle attackers to cause a denial of service (loss of updates) or force the download and installation of official Red Hat packages that were not requested.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3270" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3270"/>
        <description>yum-rhn-plugin in Red Hat Enterprise Linux (RHEL) 5 does not verify the SSL certificate for a file download from a Red Hat Network (RHN) server, which makes it easier for remote man-in-the-middle attackers to cause a denial of service (loss of updates) or force the download and installation of official Red Hat packages that were not requested.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:20.936-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:57.797-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:26.487-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10864 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:11.796-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:28.551-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="yum-rhn-plugin is earlier than 0:0.5.3-12.el5_2.9" test_ref="oval:org.mitre.oval:tst:37479"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10863" version="5" class="vulnerability">
      <metadata>
        <title>php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or (3) COOKIE GPC variables that end in an open bracket character, which causes PHP to calculate an incorrect string length.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0958" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0958"/>
        <description>php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or (3) COOKIE GPC variables that end in an open bracket character, which causes PHP to calculate an incorrect string length.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:50.914-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:57.539-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:26.211-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10863 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:44.842-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:28.221-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="php is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:31183"/>
          <criterion comment="php-pgsql is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:31119"/>
          <criterion comment="php-mysql is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:30756"/>
          <criterion comment="php-ldap is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:30361"/>
          <criterion comment="php-imap is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:31078"/>
          <criterion comment="php-odbc is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:31082"/>
          <criterion comment="php-devel is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:30937"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10862" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the WP6GeneralTextPacket::_readContents function in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted WordPerfect file, a different vulnerability than CVE-2007-0002.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1466" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1466"/>
        <description>Integer overflow in the WP6GeneralTextPacket::_readContents function in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted WordPerfect file, a different vulnerability than CVE-2007-0002.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:29.539-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:57.191-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:25.691-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10862 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:56.237-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:27.650-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-38.2.0.EL3" test_ref="oval:org.mitre.oval:tst:33440"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.2-38.2.0.EL3" test_ref="oval:org.mitre.oval:tst:33125"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-38.2.0.EL3" test_ref="oval:org.mitre.oval:tst:33421"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.EL4" test_ref="oval:org.mitre.oval:tst:33334"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.5-10.6.0.EL4" test_ref="oval:org.mitre.oval:tst:33202"/>
            <criterion comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.EL4" test_ref="oval:org.mitre.oval:tst:33265"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.EL4" test_ref="oval:org.mitre.oval:tst:33436"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libwpd-tools is earlier than 0:0.8.7-3.el5" test_ref="oval:org.mitre.oval:tst:33392"/>
            <criterion comment="libwpd-devel is earlier than 0:0.8.7-3.el5" test_ref="oval:org.mitre.oval:tst:33359"/>
            <criterion comment="libwpd is earlier than 0:0.8.7-3.el5" test_ref="oval:org.mitre.oval:tst:33398"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10861" version="5" class="vulnerability">
      <metadata>
        <title>Gaim 1.2.1 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed MSN message.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1262" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1262"/>
        <description>Gaim 1.2.1 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed MSN message.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:02.656-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:56.912-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:25.436-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10861 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:21.273-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:27.280-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gaim is earlier than 1:1.2.1-6.el3" test_ref="oval:org.mitre.oval:tst:31853"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gaim is earlier than 1:1.2.1-6.el4" test_ref="oval:org.mitre.oval:tst:31563"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10860" version="5" class="vulnerability">
      <metadata>
        <title>The GSM SMS dissector in Wireshark (formerly Ethereal) 0.99.2 through 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3137" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3137"/>
        <description>The GSM SMS dissector in Wireshark (formerly Ethereal) 0.99.2 through 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:50.584-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:56.500-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:25.120-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10860 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:22.132-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:26.753-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-EL3.3" test_ref="oval:org.mitre.oval:tst:37624"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-EL3.3" test_ref="oval:org.mitre.oval:tst:37207"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-3.el4_7" test_ref="oval:org.mitre.oval:tst:37249"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-3.el4_7" test_ref="oval:org.mitre.oval:tst:37725"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37542"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37460"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1086" version="1" class="vulnerability">
      <metadata>
        <title>PostgreSQL tsearch2 "internal" Functions Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>postgresql</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1410"/>
        <description>The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, (3) snb_ru_init, (4) spell_init, and (5) syn_init functions as "internal" even when they do not take an internal argument, which allows attackers to cause a denial of service (application crash) and possibly have other impacts via SQL commands that call other functions that accept internal arguments.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-06-27T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-06-29T06:49:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="rh-postgresql-contrib rpm is earlier than 0:7.3.10-1" negate="false" test_ref="oval:org.mitre.oval:tst:1180"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="postmaster (the PostgreSQL master daemon) is running" negate="false" test_ref="oval:org.mitre.oval:tst:2432"/>
          <criterion comment="/usr/lib/pgsql/tsearch.so (PostgreSQL's tsearch module) exists as a regular file" negate="false" test_ref="oval:org.mitre.oval:tst:1179"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10859" version="5" class="vulnerability">
      <metadata>
        <title>fs/nfs/client.c in the Linux kernel before 2.6.23 does not properly initialize a certain structure member that stores the maximum NFS filename length, which allows local users to cause a denial of service (OOPS) via a long filename, related to the encode_lookup function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1336" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1336"/>
        <description>fs/nfs/client.c in the Linux kernel before 2.6.23 does not properly initialize a certain structure member that stores the maximum NFS filename length, which allows local users to cause a denial of service (OOPS) via a long filename, related to the encode_lookup function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:50.182-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:55.892-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:24.487-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10859 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:28:49.877-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:26.113-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.EL" test_ref="oval:org.mitre.oval:tst:38666"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.EL" test_ref="oval:org.mitre.oval:tst:38450"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.EL" test_ref="oval:org.mitre.oval:tst:38769"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.EL" test_ref="oval:org.mitre.oval:tst:37790"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.EL" test_ref="oval:org.mitre.oval:tst:38592"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.EL" test_ref="oval:org.mitre.oval:tst:38678"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.EL" test_ref="oval:org.mitre.oval:tst:38363"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.EL" test_ref="oval:org.mitre.oval:tst:38714"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.EL" test_ref="oval:org.mitre.oval:tst:38581"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.EL" test_ref="oval:org.mitre.oval:tst:38538"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.EL" test_ref="oval:org.mitre.oval:tst:38439"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38663"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38680"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38674"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38654"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38700"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38368"/>
            <criterion comment="kernel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38726"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38390"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38547"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38412"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38701"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-128.1.10.el5" test_ref="oval:org.mitre.oval:tst:38129"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10858" version="5" class="vulnerability">
      <metadata>
        <title>Array index overflow in the xfrm_sk_policy_insert function in xfrm_user.c in Linux kernel 2.6 allows local users to cause a denial of service (oops or deadlock) and possibly execute arbitrary code via a p-dir value that is larger than XFRM_POLICY_OUT, which is used as an index in the sock-sk_policy array.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2456"/>
        <description>Array index overflow in the xfrm_sk_policy_insert function in xfrm_user.c in Linux kernel 2.6 allows local users to cause a denial of service (oops or deadlock) and possibly execute arbitrary code via a p->dir value that is larger than XFRM_POLICY_OUT, which is used as an index in the sock->sk_policy array.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:10.648-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:55.505-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:24.050-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10858 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:11.311-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:25.515-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31411"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31953"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31879"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31990"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31485"/>
            <criterion comment="kernel is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32093"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31968"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32148"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31741"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31896"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31885"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31861"/>
            <criterion comment="kernel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31550"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31914"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31924"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:32023"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10857" version="5" class="vulnerability">
      <metadata>
        <title>Memory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service (memory consumption and daemon crash) via a large number of requests to add and remove shared printers.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0596" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0596"/>
        <description>Memory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service (memory consumption and daemon crash) via a large number of requests to add and remove shared printers.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:08.107-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:55.241-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:23.725-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10857 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:20.899-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:25.113-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 0:1.1.17-13.3.51" test_ref="oval:org.mitre.oval:tst:36392"/>
            <criterion comment="cups is earlier than 0:1.1.17-13.3.51" test_ref="oval:org.mitre.oval:tst:36393"/>
            <criterion comment="cups-libs is earlier than 0:1.1.17-13.3.51" test_ref="oval:org.mitre.oval:tst:36450"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.5" test_ref="oval:org.mitre.oval:tst:35932"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.5" test_ref="oval:org.mitre.oval:tst:36243"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.5" test_ref="oval:org.mitre.oval:tst:36438"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10856" version="5" class="vulnerability">
      <metadata>
        <title>parse.c in sudo 1.6.9p17 through 1.6.9p19 does not properly interpret a system group (aka %group) in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0034" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0034"/>
        <description>parse.c in sudo 1.6.9p17 through 1.6.9p19 does not properly interpret a system group (aka %group) in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:54.002-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:54.993-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:23.519-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10856 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:36.281-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:24.797-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="sudo is earlier than 0:1.6.9p17-3.el5_3.1" test_ref="oval:org.mitre.oval:tst:38374"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10855" version="5" class="vulnerability">
      <metadata>
        <title>Multiple off-by-one errors in the cURL library (libcurl) 7.11.2 through 7.15.0 allow local users to trigger a buffer overflow and cause a denial of service or bypass PHP security restrictions via certain URLs that (1) are malformed in a way that prevents a terminating null byte from being added to either a hostname or path buffer, or (2) contain a "?"  separator in the hostname portion, which causes a "/" to be prepended to the resulting string.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-4077" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4077"/>
        <description>Multiple off-by-one errors in the cURL library (libcurl) 7.11.2 through 7.15.0 allow local users to trigger a buffer overflow and cause a denial of service or bypass PHP security restrictions via certain URLs that (1) are malformed in a way that prevents a terminating null byte from being added to either a hostname or path buffer, or (2) contain a "?"  separator in the hostname portion, which causes a "/" to be prepended to the resulting string.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:27.652-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:54.801-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:23.303-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10855 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:05.907-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:24.402-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="curl-devel is earlier than 0:7.12.1-8.rhel4" test_ref="oval:org.mitre.oval:tst:32257"/>
          <criterion comment="curl is earlier than 0:7.12.1-8.rhel4" test_ref="oval:org.mitre.oval:tst:32234"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10854" version="5" class="vulnerability">
      <metadata>
        <title>udev does not properly set permissions on certain files in /dev/input, which allows local users to obtain sensitive data that is entered at the console, such as user passwords.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3631" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3631"/>
        <description>udev does not properly set permissions on certain files in /dev/input, which allows local users to obtain sensitive data that is entered at the console, such as user passwords.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:09.828-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:54.615-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:23.081-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10854 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:00.329-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:24.119-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="udev is earlier than 0:039-10.10.EL4.3" test_ref="oval:org.mitre.oval:tst:32249"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10853" version="5" class="vulnerability">
      <metadata>
        <title>Wireshark 0.99.6 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted Tektronix K12 text capture file, as demonstrated by a file with exactly one frame.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0600" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0600"/>
        <description>Wireshark 0.99.6 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted Tektronix K12 text capture file, as demonstrated by a file with exactly one frame.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:00.450-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:54.328-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:22.716-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10853 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:21.288-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:23.488-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-EL3.3" test_ref="oval:org.mitre.oval:tst:38023"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-EL3.3" test_ref="oval:org.mitre.oval:tst:38321"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-2.el4_7" test_ref="oval:org.mitre.oval:tst:38000"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-2.el4_7" test_ref="oval:org.mitre.oval:tst:38041"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-2.el5_3" test_ref="oval:org.mitre.oval:tst:38236"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-2.el5_3" test_ref="oval:org.mitre.oval:tst:38085"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10852" version="5" class="vulnerability">
      <metadata>
        <title>The error-reporting functionality in (1) fs/ext2/dir.c, (2) fs/ext3/dir.c, and possibly (3) fs/ext4/dir.c in the Linux kernel 2.6.26.5 does not limit the number of printk console messages that report directory corruption, which allows physically proximate attackers to cause a denial of service (temporary system hang) by mounting a filesystem that has corrupted dir-i_size and dir-i_blocks values and performing (a) read or (b) write operations.  NOTE: there are limited scenarios in which this crosses privilege boundaries.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3528" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3528"/>
        <description>The error-reporting functionality in (1) fs/ext2/dir.c, (2) fs/ext3/dir.c, and possibly (3) fs/ext4/dir.c in the Linux kernel 2.6.26.5 does not limit the number of printk console messages that report directory corruption, which allows physically proximate attackers to cause a denial of service (temporary system hang) by mounting a filesystem that has corrupted dir->i_size and dir->i_blocks values and performing (a) read or (b) write operations.  NOTE: there are limited scenarios in which this crosses privilege boundaries.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:27.654-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:53.810-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:22.183-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10852 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:22.195-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:22.801-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37470"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37734"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37826"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37656"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37782"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37432"/>
            <criterion comment="kernel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37747"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37811"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37951"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37485"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37662"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38113"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38107"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38167"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38064"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38380"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:37672"/>
            <criterion comment="kernel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38093"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38127"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38109"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38430"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:37764"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38397"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10851" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the March 2010 CPU.  Oracle has not commented on claims from a reliable researcher that this is due to missing privilege checks during deserialization of RMIConnectionImpl objects, which allows remote attackers to call system-level Java functions via the ClassLoader of a constructor that is being deserialized.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0094" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0094"/>
        <description>Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the March 2010 CPU.  Oracle has not commented on claims from a reliable researcher that this is due to missing privilege checks during deserialization of RMIConnectionImpl objects, which allows remote attackers to call system-level Java functions via the ClassLoader of a constructor that is being deserialized.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:35.783-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:53.565-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:21.825-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10851 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:35.010-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:22.443-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39831"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39445"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40225"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40023"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40307"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10850" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in Splash.cc in xpdf, as used in other products such as (1) poppler, (2) kdegraphics, (3) gpdf, (4) pdfkit.framework, and others, allows attackers to cause a denial of service and possibly execute arbitrary code via crafted splash images that produce certain values that exceed the width or height of the associated bitmap.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0301" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0301"/>
        <description>Heap-based buffer overflow in Splash.cc in xpdf, as used in other products such as (1) poppler, (2) kdegraphics, (3) gpdf, (4) pdfkit.framework, and others, allows attackers to cause a denial of service and possibly execute arbitrary code via crafted splash images that produce certain values that exceed the width or height of the associated bitmap.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:27.172-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:53.361-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:21.604-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10850 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:41.974-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:22.131-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-3.7" test_ref="oval:org.mitre.oval:tst:32646"/>
          <criterion comment="xpdf is earlier than 1:3.00-11.12" test_ref="oval:org.mitre.oval:tst:31720"/>
          <criterion comment="kdegraphics is earlier than 7:3.3.1-3.7" test_ref="oval:org.mitre.oval:tst:32365"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1085" version="1" class="vulnerability">
      <metadata>
        <title>Solaris 9 Systems With Solaris Auditing (BSM) Enabled may Panic if Certain Audit Classes are Being Audited</title>
        <affected family="unix">
          <platform>Sun Solaris 9</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2465" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2465"/>
        <description>Unspecified vulnerability in Sun Solaris 9, when Solaris Auditing (BSM) is enabled for file read, write, attribute modify, create, or delete audit classes, allows local users to cause a denial of service (panic) via unknown vectors, possibly related to the audit_savepath function.</description>
        <oval_repository>
          <dates>
            <submitted date="2007-06-15T09:00:00.000-04:00">
              <contributor organization="Opsware, Inc.">Pai Peng</contributor>
            </submitted>
            <status_change date="2007-06-15T11:20:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-07-03T14:05:53.488-04:00">INTERIM</status_change>
            <status_change date="2007-07-18T15:57:48.292-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert ID 102900 criteria." negate="false">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3172"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3237"/>
          <criterion comment="Patch 122300-06 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3900"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert ID 102900 criteria." negate="false">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3172"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3912"/>
          <criterion comment="Patch 122301-06 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3594"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10849" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in OpenOffice.org (OOo) 2.x before 2.4.2 allow remote attackers to execute arbitrary code via crafted EMR records in an EMF file associated with a StarOffice/StarSuite document, which trigger a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2238"/>
        <description>Multiple integer overflows in OpenOffice.org (OOo) 2.x before 2.4.2 allow remote attackers to execute arbitrary code via crafted EMR records in an EMF file associated with a StarOffice/StarSuite document, which trigger a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:16.568-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:51.297-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:18.839-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10849 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:35.528-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:19.806-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-43.2.0.EL3" test_ref="oval:org.mitre.oval:tst:37618"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.2-43.2.0.EL3" test_ref="oval:org.mitre.oval:tst:37523"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-43.2.0.EL3" test_ref="oval:org.mitre.oval:tst:37637"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37727"/>
            <criterion comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37824"/>
            <criterion comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37562"/>
            <criterion comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:36989"/>
            <criterion comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37711"/>
            <criterion comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37858"/>
            <criterion comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37783"/>
            <criterion comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37892"/>
            <criterion comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37058"/>
            <criterion comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37642"/>
            <criterion comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:36956"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.5-10.6.0.7.EL4" test_ref="oval:org.mitre.oval:tst:37848"/>
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.7.EL4" test_ref="oval:org.mitre.oval:tst:37791"/>
            <criterion comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37112"/>
            <criterion comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37613"/>
            <criterion comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37896"/>
            <criterion comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37367"/>
            <criterion comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37603"/>
            <criterion comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37889"/>
            <criterion comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37815"/>
            <criterion comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37744"/>
            <criterion comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37459"/>
            <criterion comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37878"/>
            <criterion comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37660"/>
            <criterion comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37755"/>
            <criterion comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37693"/>
            <criterion comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37695"/>
            <criterion comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37553"/>
            <criterion comment="openoffice.org2 is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37796"/>
            <criterion comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37372"/>
            <criterion comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37901"/>
            <criterion comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37158"/>
            <criterion comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37545"/>
            <criterion comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37853"/>
            <criterion comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37915"/>
            <criterion comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37712"/>
            <criterion comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37583"/>
            <criterion comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37926"/>
            <criterion comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:36922"/>
            <criterion comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37580"/>
            <criterion comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37724"/>
            <criterion comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37765"/>
            <criterion comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37647"/>
            <criterion comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37864"/>
            <criterion comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:36963"/>
            <criterion comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37888"/>
            <criterion comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37505"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.7.EL4" test_ref="oval:org.mitre.oval:tst:37763"/>
            <criterion comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37950"/>
            <criterion comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37037"/>
            <criterion comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37884"/>
            <criterion comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.7.EL4" test_ref="oval:org.mitre.oval:tst:37628"/>
            <criterion comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37813"/>
            <criterion comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37851"/>
            <criterion comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37890"/>
            <criterion comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37871"/>
            <criterion comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37913"/>
            <criterion comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37930"/>
            <criterion comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37788"/>
            <criterion comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37866"/>
            <criterion comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37615"/>
            <criterion comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37434"/>
            <criterion comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37729"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-langpack-sk_SK is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37780"/>
            <criterion comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37466"/>
            <criterion comment="openoffice.org-langpack-pa_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37728"/>
            <criterion comment="openoffice.org-langpack-hi_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37653"/>
            <criterion comment="openoffice.org-langpack-et_EE is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37701"/>
            <criterion comment="openoffice.org-langpack-kn_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37557"/>
            <criterion comment="openoffice.org is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37605"/>
            <criterion comment="openoffice.org-langpack-zh_TW is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37597"/>
            <criterion comment="openoffice.org-writer is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37849"/>
            <criterion comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37488"/>
            <criterion comment="openoffice.org-langpack-ga_IE is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37650"/>
            <criterion comment="openoffice.org-langpack-ta_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37457"/>
            <criterion comment="openoffice.org-langpack-ko_KR is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:36879"/>
            <criterion comment="openoffice.org-langpack-or_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37579"/>
            <criterion comment="openoffice.org-langpack-da_DK is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37767"/>
            <criterion comment="openoffice.org-langpack-sr_CS is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37626"/>
            <criterion comment="openoffice.org-langpack-pl_PL is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37453"/>
            <criterion comment="openoffice.org-langpack-fr is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37506"/>
            <criterion comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37766"/>
            <criterion comment="openoffice.org-javafilter is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37754"/>
            <criterion comment="openoffice.org-langpack-as_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37587"/>
            <criterion comment="openoffice.org-testtools is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37533"/>
            <criterion comment="openoffice.org-langpack-hr_HR is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37843"/>
            <criterion comment="openoffice.org-langpack-de is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37267"/>
            <criterion comment="openoffice.org-emailmerge is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37343"/>
            <criterion comment="openoffice.org-xsltfilter is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37496"/>
            <criterion comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37690"/>
            <criterion comment="openoffice.org-langpack-te_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37810"/>
            <criterion comment="openoffice.org-langpack-sv is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37676"/>
            <criterion comment="openoffice.org-base is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37348"/>
            <criterion comment="openoffice.org-langpack-ca_ES is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37287"/>
            <criterion comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37837"/>
            <criterion comment="openoffice.org-core is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37382"/>
            <criterion comment="openoffice.org-langpack-nl is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37756"/>
            <criterion comment="openoffice.org-langpack-ur is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:36864"/>
            <criterion comment="openoffice.org-langpack-nn_NO is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37816"/>
            <criterion comment="openoffice.org-langpack-ar is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37377"/>
            <criterion comment="openoffice.org-langpack-ja_JP is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37708"/>
            <criterion comment="openoffice.org-langpack-gu_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37354"/>
            <criterion comment="openoffice.org-langpack-tr_TR is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37829"/>
            <criterion comment="openoffice.org-langpack-eu_ES is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37529"/>
            <criterion comment="openoffice.org-langpack-fi_FI is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37399"/>
            <criterion comment="openoffice.org-graphicfilter is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37594"/>
            <criterion comment="openoffice.org-pyuno is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37682"/>
            <criterion comment="openoffice.org-langpack-ml_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37669"/>
            <criterion comment="openoffice.org-langpack-gl_ES is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37814"/>
            <criterion comment="openoffice.org-sdk-doc is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37739"/>
            <criterion comment="openoffice.org-langpack-zh_CN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37677"/>
            <criterion comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37464"/>
            <criterion comment="openoffice.org-langpack-it is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37056"/>
            <criterion comment="openoffice.org-sdk is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37657"/>
            <criterion comment="openoffice.org-langpack-es is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37792"/>
            <criterion comment="openoffice.org-langpack-nb_NO is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37820"/>
            <criterion comment="openoffice.org-langpack-sl_SI is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37582"/>
            <criterion comment="openoffice.org-draw is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37807"/>
            <criterion comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37443"/>
            <criterion comment="openoffice.org-langpack-ms_MY is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37544"/>
            <criterion comment="openoffice.org-langpack-el_GR is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37856"/>
            <criterion comment="openoffice.org-langpack-hu_HU is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:36919"/>
            <criterion comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37012"/>
            <criterion comment="openoffice.org-langpack-bn is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37333"/>
            <criterion comment="openoffice.org-langpack-he_IL is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37795"/>
            <criterion comment="openoffice.org-langpack-pt_PT is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37360"/>
            <criterion comment="openoffice.org-langpack-lt_LT is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37421"/>
            <criterion comment="openoffice.org-langpack-af_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37689"/>
            <criterion comment="openoffice.org-langpack-bg_BG is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37847"/>
            <criterion comment="openoffice.org-calc is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37484"/>
            <criterion comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37761"/>
            <criterion comment="openoffice.org-langpack-cy_GB is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37786"/>
            <criterion comment="openoffice.org-langpack-mr_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37770"/>
            <criterion comment="openoffice.org-headless is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37696"/>
            <criterion comment="openoffice.org-langpack-th_TH is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37611"/>
            <criterion comment="openoffice.org-langpack-pt_BR is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37750"/>
            <criterion comment="openoffice.org-langpack-ru is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37654"/>
            <criterion comment="openoffice.org-math is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37723"/>
            <criterion comment="openoffice.org-impress is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37133"/>
            <criterion comment="openoffice.org-langpack-st_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37752"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10848" version="5" class="vulnerability">
      <metadata>
        <title>Xscreensaver before 4.15 creates temporary files insecurely in (1) driver/passwd-kerberos.c, (2) driver/xscreensaver-getimage-video, (3) driver/xscreensaver.kss.in, and the (4) vidwhacker and (5) webcollage screensavers, which allows local users to overwrite arbitrary files via a symlink attack.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1294" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1294"/>
        <description>Xscreensaver before 4.15 creates temporary files insecurely in (1) driver/passwd-kerberos.c, (2) driver/xscreensaver-getimage-video, (3) driver/xscreensaver.kss.in, and the (4) vidwhacker and (5) webcollage screensavers, which allows local users to overwrite arbitrary files via a symlink attack.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:49.110-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:51.093-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:18.608-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10848 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:28.548-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:19.498-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="xscreensaver is earlier than 1:4.10-20" test_ref="oval:org.mitre.oval:tst:32246"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10847" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the Unescape function in common/util/hxurl.cpp and player/hxclientkit/src/CHXClientSink.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a URL argument containing a % (percent) character that is not followed by two hex digits.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0416" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0416"/>
        <description>Buffer overflow in the Unescape function in common/util/hxurl.cpp and player/hxclientkit/src/CHXClientSink.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a URL argument containing a % (percent) character that is not followed by two hex digits.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:52.114-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:50.860-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:18.394-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10847 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:20.932-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:19.217-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="HelixPlayer is earlier than 1:1.0.6-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39912"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10846" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to execute arbitrary code via a COM_FIELD_LIST command with a long table name.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1850" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1850"/>
        <description>Buffer overflow in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to execute arbitrary code via a COM_FIELD_LIST command with a long table name.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:49.240-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:50.632-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:18.139-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10846 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:13.655-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:18.827-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mysql is earlier than 0:5.0.77-4.el5_5.3" test_ref="oval:org.mitre.oval:tst:40529"/>
          <criterion comment="mysql-devel is earlier than 0:5.0.77-4.el5_5.3" test_ref="oval:org.mitre.oval:tst:40467"/>
          <criterion comment="mysql-test is earlier than 0:5.0.77-4.el5_5.3" test_ref="oval:org.mitre.oval:tst:40387"/>
          <criterion comment="mysql-bench is earlier than 0:5.0.77-4.el5_5.3" test_ref="oval:org.mitre.oval:tst:40525"/>
          <criterion comment="mysql-server is earlier than 0:5.0.77-4.el5_5.3" test_ref="oval:org.mitre.oval:tst:39669"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10845" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote Proxy AutoConfig (PAC) servers to execute code with elevated privileges via a PAC script that sets the FindProxyForURL function to an eval method on a privileged object.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3808" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3808"/>
        <description>Mozilla Firefox before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote Proxy AutoConfig (PAC) servers to execute code with elevated privileges via a PAC script that sets the FindProxyForURL function to an eval method on a privileged object.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:50.224-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:50.143-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:17.548-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10845 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:39.327-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:18.218-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32342"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32877"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:31982"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32816"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32080"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32904"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32915"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32924"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32822"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32555"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32873"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32693"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32886"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32810"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32418"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32496"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32929"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32777"/>
            <criterion comment="firefox is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32896"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32722"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32906"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32905"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32925"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32624"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10844" version="5" class="vulnerability">
      <metadata>
        <title>The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit systems, performs a multiplication that generates a portion of zero bits during conversion due to insufficient precision, which produces 24 bits of entropy and simplifies brute force attacks against protection mechanisms that use the rand and mt_rand functions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2108" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2108"/>
        <description>The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit systems, performs a multiplication that generates a portion of zero bits during conversion due to insufficient precision, which produces 24 bits of entropy and simplifies brute force attacks against protection mechanisms that use the rand and mt_rand functions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:21.820-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:49.389-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:16.712-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10844 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:05.594-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:17.247-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:37185"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:36983"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:36761"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:37254"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:37280"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:36584"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:37255"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37302"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37269"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:36771"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:36854"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37155"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37143"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:36781"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37125"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37202"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37223"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37010"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37319"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37113"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37239"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:36927"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37138"/>
            <criterion comment="php-common is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37146"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37179"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37204"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:36955"/>
            <criterion comment="php is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37260"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37282"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:36878"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37114"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:36634"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37118"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37283"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37127"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37086"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37328"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37036"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37144"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37165"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10843" version="5" class="vulnerability">
      <metadata>
        <title>The load_tile function in the XCF coder in coders/xcf.c in (1) ImageMagick 6.2.8-0 and (2) GraphicsMagick (aka gm) 1.1.7 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted .xcf file that triggers an out-of-bounds heap write, possibly related to the ScaleCharToQuantum function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1096" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1096"/>
        <description>The load_tile function in the XCF coder in coders/xcf.c in (1) ImageMagick 6.2.8-0 and (2) GraphicsMagick (aka gm) 1.1.7 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted .xcf file that triggers an out-of-bounds heap write, possibly related to the ScaleCharToQuantum function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:30.086-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:48.953-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:16.264-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10843 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:58.964-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:16.605-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36023"/>
            <criterion comment="ImageMagick is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36184"/>
            <criterion comment="ImageMagick-perl is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36260"/>
            <criterion comment="ImageMagick-devel is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36208"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:5.5.6-28" test_ref="oval:org.mitre.oval:tst:36056"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:36311"/>
            <criterion comment="ImageMagick is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:36459"/>
            <criterion comment="ImageMagick-perl is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:36349"/>
            <criterion comment="ImageMagick-devel is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:35927"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:36106"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36419"/>
            <criterion comment="ImageMagick is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36360"/>
            <criterion comment="ImageMagick-perl is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36388"/>
            <criterion comment="ImageMagick-devel is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:35921"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36133"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10842" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in (1) DICOM, (2) PNM, (3) PSD, (4) PSP, (5) Sun RAS, (6) XBM, and (7) XWD files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4519" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4519"/>
        <description>Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in (1) DICOM, (2) PNM, (3) PSD, (4) PSP, (5) Sun RAS, (6) XBM, and (7) XWD files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:49.916-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:48.635-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:15.813-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10842 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:30.681-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:16.111-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gimp-devel is earlier than 0:1.2.3-20.9.el3" test_ref="oval:org.mitre.oval:tst:34383"/>
            <criterion comment="gimp-perl is earlier than 0:1.2.3-20.9.el3" test_ref="oval:org.mitre.oval:tst:34552"/>
            <criterion comment="gimp is earlier than 0:1.2.3-20.9.el3" test_ref="oval:org.mitre.oval:tst:34504"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gimp-devel is earlier than 0:2.0.5-7.0.7.el4" test_ref="oval:org.mitre.oval:tst:34679"/>
            <criterion comment="gimp is earlier than 0:2.0.5-7.0.7.el4" test_ref="oval:org.mitre.oval:tst:34499"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gimp-libs is earlier than 0:2.2.13-2.0.7.el5" test_ref="oval:org.mitre.oval:tst:34469"/>
            <criterion comment="gimp-devel is earlier than 0:2.2.13-2.0.7.el5" test_ref="oval:org.mitre.oval:tst:34574"/>
            <criterion comment="gimp is earlier than 0:2.2.13-2.0.7.el5" test_ref="oval:org.mitre.oval:tst:34697"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10841" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service (large or infinite loops) viarafted packets to the (1) UMA and (2) BER dissectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1933" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1933"/>
        <description>Multiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service (large or infinite loops) viarafted packets to the (1) UMA and (2) BER dissectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:51.588-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:48.387-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:15.543-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10841 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:13.343-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:15.657-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.99.0-EL3.2" test_ref="oval:org.mitre.oval:tst:32590"/>
            <criterion comment="ethereal is earlier than 0:0.99.0-EL3.2" test_ref="oval:org.mitre.oval:tst:32631"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.99.0-EL4.2" test_ref="oval:org.mitre.oval:tst:32299"/>
            <criterion comment="ethereal is earlier than 0:0.99.0-EL4.2" test_ref="oval:org.mitre.oval:tst:32238"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10840" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the unpack200 utility in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows context-dependent attackers to gain privileges via unspecified length fields in the header of a Pack200-compressed JAR file, which leads to a heap-based buffer overflow during decompression.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2675" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2675"/>
        <description>Integer overflow in the unpack200 utility in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows context-dependent attackers to gain privileges via unspecified length fields in the header of a Pack200-compressed JAR file, which leads to a heap-based buffer overflow during decompression.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:41.214-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:48.152-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:15.266-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10840 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:37.159-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:15.311-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38942"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38825"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38972"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38267"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:39037"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10839" version="5" class="vulnerability">
      <metadata>
        <title>CRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2 allows remote attackers to inject arbitrary FTP commands via CRLF sequences in the parameters to earlier FTP commands.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2509" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2509"/>
        <description>CRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2 allows remote attackers to inject arbitrary FTP commands via CRLF sequences in the parameters to earlier FTP commands.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:28.772-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:47.379-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:14.470-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10839 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:35.000-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:14.340-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35216"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35012"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:34787"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35164"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:34818"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35171"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:34820"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.5" test_ref="oval:org.mitre.oval:tst:34251"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.5" test_ref="oval:org.mitre.oval:tst:33540"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.5" test_ref="oval:org.mitre.oval:tst:33681"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.5" test_ref="oval:org.mitre.oval:tst:34104"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.5" test_ref="oval:org.mitre.oval:tst:34225"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.5" test_ref="oval:org.mitre.oval:tst:33981"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.5" test_ref="oval:org.mitre.oval:tst:33655"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.5" test_ref="oval:org.mitre.oval:tst:34240"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.5" test_ref="oval:org.mitre.oval:tst:33911"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.5" test_ref="oval:org.mitre.oval:tst:34150"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.5" test_ref="oval:org.mitre.oval:tst:33287"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.5" test_ref="oval:org.mitre.oval:tst:34209"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.5" test_ref="oval:org.mitre.oval:tst:34018"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.5" test_ref="oval:org.mitre.oval:tst:34253"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34211"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34207"/>
            <criterion comment="php-common is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34065"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34113"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34217"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34013"/>
            <criterion comment="php is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34180"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:33453"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34056"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:33924"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34226"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:33397"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34129"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34250"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:33993"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34061"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34151"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34139"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34097"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10838" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page (zombie document) and enable cross-domain and cross-site scripting (XSS) attacks, as demonstrated using onmousemove events.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0191" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0191"/>
        <description>Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page (zombie document) and enable cross-domain and cross-site scripting (XSS) attacks, as demonstrated using onmousemove events.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:49.844-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:47.078-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:14.160-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10838 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:28.908-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:13.898-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mozilla-js-debugger is earlier than 37:1.4.2-3.0.2" test_ref="oval:org.mitre.oval:tst:30703"/>
          <criterion comment="mozilla is earlier than 37:1.4.2-3.0.2" test_ref="oval:org.mitre.oval:tst:30682"/>
          <criterion comment="mozilla-chat is earlier than 37:1.4.2-3.0.2" test_ref="oval:org.mitre.oval:tst:29813"/>
          <criterion comment="mozilla-mail is earlier than 37:1.4.2-3.0.2" test_ref="oval:org.mitre.oval:tst:29961"/>
          <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.2-3.0.2" test_ref="oval:org.mitre.oval:tst:30646"/>
          <criterion comment="mozilla-nss is earlier than 37:1.4.2-3.0.2" test_ref="oval:org.mitre.oval:tst:30390"/>
          <criterion comment="mozilla-nss-devel is earlier than 37:1.4.2-3.0.2" test_ref="oval:org.mitre.oval:tst:30528"/>
          <criterion comment="mozilla-nspr is earlier than 37:1.4.2-3.0.2" test_ref="oval:org.mitre.oval:tst:30482"/>
          <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.2-3.0.2" test_ref="oval:org.mitre.oval:tst:30659"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10837" version="5" class="vulnerability">
      <metadata>
        <title>FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (server crash) by sending an Ascend-Send-Secret attribute without the required leading packet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0938" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0938"/>
        <description>FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (server crash) by sending an Ascend-Send-Secret attribute without the required leading packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:40.896-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:46.866-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:13.903-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10837 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:50.556-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:13.400-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="freeradius is earlier than 0:1.0.1-1.RHEL3" test_ref="oval:org.mitre.oval:tst:31016"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10836" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 3.0.15, and 3.5.x before 3.5.4, allows remote attackers to read form history by forging mouse and keyboard events that leverage the auto-fill feature to populate form fields, in an attacker-readable form, with history entries.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3370" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3370"/>
        <description>Mozilla Firefox before 3.0.15, and 3.5.x before 3.5.4, allows remote attackers to read form history by forging mouse and keyboard events that leverage the auto-fill feature to populate form fields, in an attacker-readable form, with history entries.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:12.894-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:46.405-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:13.576-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10836 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:30:01.952-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:12.886-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nspr is earlier than 0:4.7.6-1.el4_8" test_ref="oval:org.mitre.oval:tst:39525"/>
            <criterion comment="firefox is earlier than 0:3.0.15-3.el4" test_ref="oval:org.mitre.oval:tst:39710"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.6-1.el4_8" test_ref="oval:org.mitre.oval:tst:38755"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39602"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39541"/>
            <criterion comment="nspr is earlier than 0:4.7.6-1.el5_4" test_ref="oval:org.mitre.oval:tst:39168"/>
            <criterion comment="firefox is earlier than 0:3.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39294"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.6-1.el5_4" test_ref="oval:org.mitre.oval:tst:39579"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39636"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10835" version="5" class="vulnerability">
      <metadata>
        <title>cvsbug in CVS 1.12.12 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2693" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2693"/>
        <description>cvsbug in CVS 1.12.12 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:53.572-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:46.182-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:13.342-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10835 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:24.850-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:12.411-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="cvs is earlier than 0:1.11.2-28" test_ref="oval:org.mitre.oval:tst:31934"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="cvs is earlier than 0:1.11.17-8.RHEL4" test_ref="oval:org.mitre.oval:tst:31687"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10834" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified versions of the Linux kernel allow local users to cause a denial of service (unrecoverable zombie process) via a program with certain instructions that prevent init from properly reaping a child whose parent has died.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6921" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6921"/>
        <description>Unspecified versions of the Linux kernel allow local users to cause a denial of service (unrecoverable zombie process) via a program with certain instructions that prevent init from properly reaping a child whose parent has died.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:06.334-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:45.637-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:12.797-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10834 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:30:50.143-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:11.692-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34864"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35017"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35145"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34442"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35258"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35254"/>
            <criterion comment="kernel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35373"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34480"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34911"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34923"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35327"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36192"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36176"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36335"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36430"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:35944"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36215"/>
            <criterion comment="kernel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36409"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:35484"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:35974"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:35791"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36150"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36251"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10833" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0177" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0177"/>
        <description>Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:57.214-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:45.154-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:12.287-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10833 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:21.336-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:10.952-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:40246"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:39934"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:40184"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:40133"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:39775"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:40360"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:40059"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:39946"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:40114"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.52.el3" test_ref="oval:org.mitre.oval:tst:39403"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox is earlier than 0:3.0.19-1.el4" test_ref="oval:org.mitre.oval:tst:40284"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-54.el4_8" test_ref="oval:org.mitre.oval:tst:40081"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-54.el4_8" test_ref="oval:org.mitre.oval:tst:40250"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-54.el4_8" test_ref="oval:org.mitre.oval:tst:40304"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-54.el4_8" test_ref="oval:org.mitre.oval:tst:40345"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-54.el4_8" test_ref="oval:org.mitre.oval:tst:40183"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-54.el4_8" test_ref="oval:org.mitre.oval:tst:39945"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.19-1.el5_5" test_ref="oval:org.mitre.oval:tst:40265"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.19-1.el5_5" test_ref="oval:org.mitre.oval:tst:39621"/>
            <criterion comment="firefox is earlier than 0:3.0.19-1.el5_5" test_ref="oval:org.mitre.oval:tst:40064"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.19-1.el5_5" test_ref="oval:org.mitre.oval:tst:40164"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10832" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0664" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0664"/>
        <description>Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:07.165-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:44.902-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:12.080-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10832 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:31.442-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:10.643-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="libexif-devel is earlier than 0:0.5.12-5.1" test_ref="oval:org.mitre.oval:tst:31456"/>
          <criterion comment="libexif is earlier than 0:0.5.12-5.1" test_ref="oval:org.mitre.oval:tst:31535"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10831" version="5" class="vulnerability">
      <metadata>
        <title>The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate attackers to obtain sensitive information (kernel memory).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1083"/>
        <description>The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate attackers to obtain sensitive information (kernel memory).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:19.076-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:44.602-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:11.706-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10831 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:38.527-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:10.241-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40272"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40483"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40310"/>
          <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40062"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40096"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:39895"/>
          <criterion comment="kernel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40165"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40131"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40380"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:39955"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40115"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10830" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PDF file that causes the boundaries of a maskColors array to be exceeded.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1125" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1125"/>
        <description>Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PDF file that causes the boundaries of a maskColors array to be exceeded.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:37.608-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:44.110-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:11.183-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10830 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:56.190-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:09.578-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31559"/>
            <criterion comment="tetex-dvips is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31693"/>
            <criterion comment="tetex-fonts is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31615"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.22" test_ref="oval:org.mitre.oval:tst:31170"/>
            <criterion comment="tetex is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31603"/>
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.22" test_ref="oval:org.mitre.oval:tst:30882"/>
            <criterion comment="tetex-afm is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31685"/>
            <criterion comment="xpdf is earlier than 1:2.02-9.4" test_ref="oval:org.mitre.oval:tst:31241"/>
            <criterion comment="tetex-xdvi is earlier than 0:1.0.7-67.7" test_ref="oval:org.mitre.oval:tst:31747"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.22" test_ref="oval:org.mitre.oval:tst:31108"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.EL4.4" test_ref="oval:org.mitre.oval:tst:31002"/>
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-3.3" test_ref="oval:org.mitre.oval:tst:31263"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.EL4.4" test_ref="oval:org.mitre.oval:tst:31187"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-3.3" test_ref="oval:org.mitre.oval:tst:31323"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.EL4.4" test_ref="oval:org.mitre.oval:tst:31257"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.6" test_ref="oval:org.mitre.oval:tst:31093"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.EL4.4" test_ref="oval:org.mitre.oval:tst:30716"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-4.3" test_ref="oval:org.mitre.oval:tst:30790"/>
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.6" test_ref="oval:org.mitre.oval:tst:30919"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.EL4.4" test_ref="oval:org.mitre.oval:tst:31111"/>
            <criterion comment="xpdf is earlier than 1:3.00-11.5" test_ref="oval:org.mitre.oval:tst:30331"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.EL4.4" test_ref="oval:org.mitre.oval:tst:30846"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.EL4.4" test_ref="oval:org.mitre.oval:tst:31305"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.6" test_ref="oval:org.mitre.oval:tst:31056"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10829" version="5" class="vulnerability">
      <metadata>
        <title>The PurpleCircBuffer implementation in Pidgin (formerly Gaim) before 2.5.6 does not properly maintain a certain buffer, which allows remote attackers to cause a denial of service (memory corruption and application crash) via vectors involving the (1) XMPP or (2) Sametime protocol.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1375" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1375"/>
        <description>The PurpleCircBuffer implementation in Pidgin (formerly Gaim) before 2.5.6 does not properly maintain a certain buffer, which allows remote attackers to cause a denial of service (memory corruption and application crash) via vectors involving the (1) XMPP or (2) Sametime protocol.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:16.490-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:43.630-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:10.682-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10829 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:28:42.117-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:08.943-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38580"/>
            <criterion comment="libpurple is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38729"/>
            <criterion comment="libpurple-perl is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38659"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38675"/>
            <criterion comment="pidgin-devel is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38361"/>
            <criterion comment="libpurple-devel is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38431"/>
            <criterion comment="finch is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38593"/>
            <criterion comment="pidgin-perl is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38640"/>
            <criterion comment="pidgin is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38775"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38564"/>
            <criterion comment="libpurple is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38579"/>
            <criterion comment="libpurple-perl is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38686"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38687"/>
            <criterion comment="pidgin-devel is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38223"/>
            <criterion comment="libpurple-devel is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38606"/>
            <criterion comment="finch is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38749"/>
            <criterion comment="pidgin-perl is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38576"/>
            <criterion comment="pidgin is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38730"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10828" version="5" class="vulnerability">
      <metadata>
        <title>nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover (1) network connection passwords and (2) pre-shared keys via calls to the GetSecrets method in the dbus request handler.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0365" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0365"/>
        <description>nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover (1) network connection passwords and (2) pre-shared keys via calls to the GetSecrets method in the dbus request handler.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:25.530-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:43.348-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:10.381-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10828 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:26.533-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:08.070-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="NetworkManager-gnome is earlier than 0:0.3.1-5.el4" test_ref="oval:org.mitre.oval:tst:37787"/>
            <criterion comment="NetworkManager is earlier than 0:0.3.1-5.el4" test_ref="oval:org.mitre.oval:tst:38491"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="NetworkManager-gnome is earlier than 1:0.7.0-4.el5_3" test_ref="oval:org.mitre.oval:tst:38177"/>
            <criterion comment="NetworkManager-glib-devel is earlier than 1:0.7.0-4.el5_3" test_ref="oval:org.mitre.oval:tst:38557"/>
            <criterion comment="NetworkManager-glib is earlier than 1:0.7.0-4.el5_3" test_ref="oval:org.mitre.oval:tst:38175"/>
            <criterion comment="NetworkManager-devel is earlier than 1:0.7.0-4.el5_3" test_ref="oval:org.mitre.oval:tst:38098"/>
            <criterion comment="NetworkManager is earlier than 1:0.7.0-4.el5_3" test_ref="oval:org.mitre.oval:tst:38451"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10827" version="5" class="vulnerability">
      <metadata>
        <title>Multiple heap-based buffer overflows in the rc4 (1) encryption (aka exsltCryptoRc4EncryptFunction) and (2) decryption (aka exsltCryptoRc4DecryptFunction) functions in crypto.c in libexslt in libxslt 1.1.8 through 1.1.24 allow context-dependent attackers to execute arbitrary code via an XML file containing a long string as "an argument in the XSL input."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2935" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2935"/>
        <description>Multiple heap-based buffer overflows in the rc4 (1) encryption (aka exsltCryptoRc4EncryptFunction) and (2) decryption (aka exsltCryptoRc4DecryptFunction) functions in crypto.c in libexslt in libxslt 1.1.8 through 1.1.24 allow context-dependent attackers to execute arbitrary code via an XML file containing a long string as "an argument in the XSL input."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:04.157-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:43.065-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:09.840-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10827 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:07.794-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:07.307-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libxslt-devel is earlier than 0:1.1.11-1.el4_7.2" test_ref="oval:org.mitre.oval:tst:37375"/>
            <criterion comment="libxslt-python is earlier than 0:1.1.11-1.el4_7.2" test_ref="oval:org.mitre.oval:tst:37068"/>
            <criterion comment="libxslt is earlier than 0:1.1.11-1.el4_7.2" test_ref="oval:org.mitre.oval:tst:37536"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libxslt-devel is earlier than 0:1.1.17-2.el5_2.2" test_ref="oval:org.mitre.oval:tst:37418"/>
            <criterion comment="libxslt-python is earlier than 0:1.1.17-2.el5_2.2" test_ref="oval:org.mitre.oval:tst:37554"/>
            <criterion comment="libxslt is earlier than 0:1.1.17-2.el5_2.2" test_ref="oval:org.mitre.oval:tst:37304"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10826" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the browse_get_namespace function in imap/browse.c of Mutt 1.4.2.1 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via long namespaces received from the IMAP server.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3242" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3242"/>
        <description>Stack-based buffer overflow in the browse_get_namespace function in imap/browse.c of Mutt 1.4.2.1 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via long namespaces received from the IMAP server.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:27.953-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:42.807-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:09.605-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10826 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:20.357-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:06.927-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="mutt is earlier than 5:1.4.1-3.5.rhel3" test_ref="oval:org.mitre.oval:tst:32916"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="mutt is earlier than 5:1.4.1-11.rhel4" test_ref="oval:org.mitre.oval:tst:32764"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10825" version="5" class="vulnerability">
      <metadata>
        <title>The Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially sensitive information via an input control that monitors the values that are generated by the autocomplete capability.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0589" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0589"/>
        <description>The Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially sensitive information via an input control that monitors the values that are generated by the autocomplete capability.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:28.483-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:42.624-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:09.411-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10825 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:08.724-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:06.643-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="firefox is earlier than 0:1.0.1-1.4.3" test_ref="oval:org.mitre.oval:tst:31118"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10824" version="5" class="vulnerability">
      <metadata>
        <title>The International Components for Unicode (ICU) library in Apple Mac OS X before 10.5.3, Red Hat Enterprise Linux 5, and other operating systems omits some invalid character sequences during conversion of some character encodings, which might allow remote attackers to conduct cross-site scripting (XSS) attacks.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1036" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1036"/>
        <description>The International Components for Unicode (ICU) library in Apple Mac OS X before 10.5.3, Red Hat Enterprise Linux 5, and other operating systems omits some invalid character sequences during conversion of some character encodings, which might allow remote attackers to conduct cross-site scripting (XSS) attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:47.271-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:42.409-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:09.167-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10824 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:56.337-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:06.320-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="libicu-doc is earlier than 0:3.6-5.11.2" test_ref="oval:org.mitre.oval:tst:38306"/>
          <criterion comment="icu is earlier than 0:3.6-5.11.2" test_ref="oval:org.mitre.oval:tst:37894"/>
          <criterion comment="libicu is earlier than 0:3.6-5.11.2" test_ref="oval:org.mitre.oval:tst:38218"/>
          <criterion comment="libicu-devel is earlier than 0:3.6-5.11.2" test_ref="oval:org.mitre.oval:tst:38291"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10823" version="5" class="vulnerability">
      <metadata>
        <title>arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x86_64 platform does not clear certain kernel registers before a return to user mode, which allows local users to read register values from an earlier process by switching an ia32 process to 64-bit mode.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2910" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2910"/>
        <description>arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x86_64 platform does not clear certain kernel registers before a return to user mode, which allows local users to read register values from an earlier process by switching an ia32 process to 64-bit mode.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:27.604-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:41.895-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:08.604-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10823 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:28:57.476-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:05.657-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39504"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39362"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39704"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39759"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39722"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39734"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39394"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39578"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39019"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39604"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39609"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40050"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39464"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39090"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40063"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39443"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39703"/>
            <criterion comment="kernel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39080"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39862"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40057"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40029"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39849"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40039"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10822" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the exif_process_IFD_TAG function in exif.c in PHP before 4.3.11 may allow remote attackers to execute arbitrary code via an IFD tag that leads to a negative byte count.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1042" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1042"/>
        <description>Integer overflow in the exif_process_IFD_TAG function in exif.c in PHP before 4.3.11 may allow remote attackers to execute arbitrary code via an IFD tag that leads to a negative byte count.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:15.374-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:41.450-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:08.112-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10822 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:14.867-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:05.073-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31759"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:30948"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31858"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31704"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31679"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31505"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31819"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31329"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31673"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31737"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31787"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31830"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31383"/>
            <criterion comment="php is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31557"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31541"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31697"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31847"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31523"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31779"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31261"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31733"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10821" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains an Additional section with crafted data, which is not properly handled when the response is processed "at the same time as requesting DNSSEC records (DO)," aka Bug 20438.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4022" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4022"/>
        <description>Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains an Additional section with crafted data, which is not properly handled when the response is processed "at the same time as requesting DNSSEC records (DO)," aka Bug 20438.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:24.721-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:41.185-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:07.786-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10821 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:03.171-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:04.652-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="bind-utils is earlier than 30:9.3.6-4.P1.el5_4.1" test_ref="oval:org.mitre.oval:tst:39685"/>
          <criterion comment="bind-libbind-devel is earlier than 30:9.3.6-4.P1.el5_4.1" test_ref="oval:org.mitre.oval:tst:39711"/>
          <criterion comment="bind-devel is earlier than 30:9.3.6-4.P1.el5_4.1" test_ref="oval:org.mitre.oval:tst:39631"/>
          <criterion comment="bind-chroot is earlier than 30:9.3.6-4.P1.el5_4.1" test_ref="oval:org.mitre.oval:tst:39043"/>
          <criterion comment="caching-nameserver is earlier than 30:9.3.6-4.P1.el5_4.1" test_ref="oval:org.mitre.oval:tst:38819"/>
          <criterion comment="bind-sdb is earlier than 30:9.3.6-4.P1.el5_4.1" test_ref="oval:org.mitre.oval:tst:39252"/>
          <criterion comment="bind is earlier than 30:9.3.6-4.P1.el5_4.1" test_ref="oval:org.mitre.oval:tst:39039"/>
          <criterion comment="bind-libs is earlier than 30:9.3.6-4.P1.el5_4.1" test_ref="oval:org.mitre.oval:tst:39349"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10820" version="5" class="vulnerability">
      <metadata>
        <title>SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 through 2.0.0; (5) NetApp (aka Network Appliance) Data ONTAP 7.3RC1 and 7.3RC2; (6) SNMP Research before 16.2; (7) multiple Cisco IOS, CatOS, ACE, and Nexus products; (8) Ingate Firewall 3.1.0 and later and SIParator 3.1.0 and later; (9) HP OpenView SNMP Emanate Master Agent 15.x; and possibly other products relies on the client to specify the HMAC length, which makes it easier for remote attackers to bypass SNMP authentication via a length value of 1, which only checks the first byte.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0960" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0960"/>
        <description>SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 through 2.0.0; (5) NetApp (aka Network Appliance) Data ONTAP 7.3RC1 and 7.3RC2; (6) SNMP Research before 16.2; (7) multiple Cisco IOS, CatOS, ACE, and Nexus products; (8) Ingate Firewall 3.1.0 and later and SIParator 3.1.0 and later; (9) HP OpenView SNMP Emanate Master Agent 15.x; and possibly other products relies on the client to specify the HMAC length, which makes it easier for remote attackers to bypass SNMP authentication via a length value of 1, which only checks the first byte.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:54.775-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:40.721-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:07.349-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10820 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:12.561-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:04.048-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="net-snmp-utils is earlier than 0:5.0.9-2.30E.24" test_ref="oval:org.mitre.oval:tst:36837"/>
            <criterion comment="net-snmp is earlier than 0:5.0.9-2.30E.24" test_ref="oval:org.mitre.oval:tst:37027"/>
            <criterion comment="net-snmp-libs is earlier than 0:5.0.9-2.30E.24" test_ref="oval:org.mitre.oval:tst:37070"/>
            <criterion comment="net-snmp-perl is earlier than 0:5.0.9-2.30E.24" test_ref="oval:org.mitre.oval:tst:36912"/>
            <criterion comment="net-snmp-devel is earlier than 0:5.0.9-2.30E.24" test_ref="oval:org.mitre.oval:tst:36958"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="net-snmp-utils is earlier than 0:5.1.2-11.el4_6.11.3" test_ref="oval:org.mitre.oval:tst:36843"/>
            <criterion comment="net-snmp is earlier than 0:5.1.2-11.el4_6.11.3" test_ref="oval:org.mitre.oval:tst:36880"/>
            <criterion comment="net-snmp-libs is earlier than 0:5.1.2-11.el4_6.11.3" test_ref="oval:org.mitre.oval:tst:36663"/>
            <criterion comment="net-snmp-perl is earlier than 0:5.1.2-11.el4_6.11.3" test_ref="oval:org.mitre.oval:tst:37050"/>
            <criterion comment="net-snmp-devel is earlier than 0:5.1.2-11.el4_6.11.3" test_ref="oval:org.mitre.oval:tst:36948"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="net-snmp-utils is earlier than 1:5.3.1-24.el5_2.1" test_ref="oval:org.mitre.oval:tst:36969"/>
            <criterion comment="net-snmp is earlier than 1:5.3.1-24.el5_2.1" test_ref="oval:org.mitre.oval:tst:37054"/>
            <criterion comment="net-snmp-libs is earlier than 1:5.3.1-24.el5_2.1" test_ref="oval:org.mitre.oval:tst:36883"/>
            <criterion comment="net-snmp-perl is earlier than 1:5.3.1-24.el5_2.1" test_ref="oval:org.mitre.oval:tst:36847"/>
            <criterion comment="net-snmp-devel is earlier than 1:5.3.1-24.el5_2.1" test_ref="oval:org.mitre.oval:tst:36887"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1082" version="1" class="vulnerability">
      <metadata>
        <title>Exchange 2000 Server TNEF Decoding Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Outlook</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0002" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0002"/>
        <description>Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-01-11T12:56:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-01-12T09:21:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-02-01T09:08:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="the version of Mapi32.dll is greater than or equal 6.0.6603.0 (Exchange 2000 Server,SP3 is installed)" negate="false" test_ref="oval:org.mitre.oval:tst:1182"/>
        <criterion comment="the version of Mapi32.dll is less than 6.0.6617.47" negate="false" test_ref="oval:org.mitre.oval:tst:1181"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10819" version="5" class="vulnerability">
      <metadata>
        <title>The XMLRPC server in utils.rb for the ruby library (libruby) 1.8 sets an invalid default value that prevents "security protection" using handlers, which allows remote attackers to execute arbitrary commands.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1992" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1992"/>
        <description>The XMLRPC server in utils.rb for the ruby library (libruby) 1.8 sets an invalid default value that prevents "security protection" using handlers, which allows remote attackers to execute arbitrary commands.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:54.281-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:40.464-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:07.076-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10819 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:53.520-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:03.665-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="ruby-mode is earlier than 0:1.8.1-7.EL4.1" test_ref="oval:org.mitre.oval:tst:31750"/>
          <criterion comment="ruby-docs is earlier than 0:1.8.1-7.EL4.1" test_ref="oval:org.mitre.oval:tst:31969"/>
          <criterion comment="ruby-devel is earlier than 0:1.8.1-7.EL4.1" test_ref="oval:org.mitre.oval:tst:31607"/>
          <criterion comment="ruby-tcltk is earlier than 0:1.8.1-7.EL4.1" test_ref="oval:org.mitre.oval:tst:31935"/>
          <criterion comment="ruby is earlier than 0:1.8.1-7.EL4.1" test_ref="oval:org.mitre.oval:tst:31778"/>
          <criterion comment="irb is earlier than 0:1.8.1-7.EL4.1" test_ref="oval:org.mitre.oval:tst:31813"/>
          <criterion comment="ruby-libs is earlier than 0:1.8.1-7.EL4.1" test_ref="oval:org.mitre.oval:tst:31402"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10818" version="5" class="vulnerability">
      <metadata>
        <title>CVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in filenames via CVS client requests, a different vulnerability than CVE-2004-0180.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0405" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0405"/>
        <description>CVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in filenames via CVS client requests, a different vulnerability than CVE-2004-0180.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:10.222-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:40.282-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:06.817-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10818 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:43.756-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:03.276-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="cvs is earlier than 0:1.11.2-18" test_ref="oval:org.mitre.oval:tst:30704"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10817" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary bytecode via JavaScript with a large regular expression.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1737" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1737"/>
        <description>Integer overflow in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary bytecode via JavaScript with a large regular expression.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:50.564-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:39.757-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:06.298-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10817 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:38.583-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:02.611-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32663"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32326"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31987"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32451"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32697"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32558"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32427"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32671"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32666"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32561"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32593"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32679"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32133"/>
            <criterion comment="thunderbird is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32204"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32701"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32428"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32557"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32229"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32349"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32644"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32440"/>
            <criterion comment="firefox is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32219"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32598"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32717"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10816" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1200"/>
        <description>Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:34:11.380-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:39.146-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:05.607-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10816 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:57.112-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:01.775-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40598"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40703"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:39947"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40593"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40651"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:39843"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40800"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40736"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:39844"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40686"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox is earlier than 0:3.6.4-8.el4" test_ref="oval:org.mitre.oval:tst:40755"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:40296"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:39850"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:40624"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:40782"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:40431"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:40449"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gnome-python2-extras is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40435"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-21.el5" test_ref="oval:org.mitre.oval:tst:40552"/>
            <criterion comment="gnome-python2-libegg is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40721"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.2.4-10.el5" test_ref="oval:org.mitre.oval:tst:40480"/>
            <criterion comment="gnome-python2-gtkhtml2 is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40813"/>
            <criterion comment="totem is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40749"/>
            <criterion comment="xulrunner is earlier than 0:1.9.2.4-10.el5" test_ref="oval:org.mitre.oval:tst:40221"/>
            <criterion comment="gnome-python2-gtkspell is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40385"/>
            <criterion comment="yelp is earlier than 0:2.16.0-26.el5" test_ref="oval:org.mitre.oval:tst:40828"/>
            <criterion comment="devhelp is earlier than 0:0.12-21.el5" test_ref="oval:org.mitre.oval:tst:40814"/>
            <criterion comment="firefox is earlier than 0:3.6.4-8.el5" test_ref="oval:org.mitre.oval:tst:40524"/>
            <criterion comment="totem-mozplugin is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40620"/>
            <criterion comment="gnome-python2-gtkmozembed is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40722"/>
            <criterion comment="esc is earlier than 0:1.1.0-12.el5" test_ref="oval:org.mitre.oval:tst:40273"/>
            <criterion comment="totem-devel is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40637"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10815" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 does not properly protect the compilation scope of privileged built-in XBL bindings, which allows remote attackers to execute arbitrary code via the (1) valueOf.call or (2) valueOf.apply methods of an XBL binding, or (3) "by inserting an XBL method into the DOM's document.body prototype chain."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1733" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1733"/>
        <description>Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 does not properly protect the compilation scope of privileged built-in XBL bindings, which allows remote attackers to execute arbitrary code via the (1) valueOf.call or (2) valueOf.apply methods of an XBL binding, or (3) "by inserting an XBL method into the DOM's document.body prototype chain."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:38.810-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:38.609-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:05.095-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10815 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:57.555-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:01.151-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32663"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32326"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31987"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32451"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32697"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32558"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32427"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32671"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32666"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32561"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32593"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32679"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32133"/>
            <criterion comment="thunderbird is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32204"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32701"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32428"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32557"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32229"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32349"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32644"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32440"/>
            <criterion comment="firefox is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32219"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32598"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32717"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10814" version="5" class="vulnerability">
      <metadata>
        <title>sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain privileges via a crafted executable file, as demonstrated by a file named sudoedit in a user's home directory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0426" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0426"/>
        <description>sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain privileges via a crafted executable file, as demonstrated by a file named sudoedit in a user's home directory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:59.737-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:38.408-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:04.835-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10814 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:35.737-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:00.800-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="sudo is earlier than 0:1.6.9p17-6.el5_4" test_ref="oval:org.mitre.oval:tst:39746"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10813" version="5" class="vulnerability">
      <metadata>
        <title>gnome-screensaver before 2.22.1, when a remote authentication server is enabled, crashes upon an unlock attempt during a network outage, which allows physically proximate attackers to gain access to the locked session, a related issue to CVE-2007-1859.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0887" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0887"/>
        <description>gnome-screensaver before 2.22.1, when a remote authentication server is enabled, crashes upon an unlock attempt during a network outage, which allows physically proximate attackers to gain access to the locked session, a related issue to CVE-2007-1859.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:26.630-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:38.223-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:04.630-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10813 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:26.131-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:09:00.511-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="gnome-screensaver is earlier than 0:2.16.1-8.el5" test_ref="oval:org.mitre.oval:tst:36594"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10812" version="5" class="vulnerability">
      <metadata>
        <title>mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduct cross-site scripting (XSS) attacks using UTF-7 encoding.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0005" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0005"/>
        <description>mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduct cross-site scripting (XSS) attacks using UTF-7 encoding.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:36.673-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:37.817-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:04.229-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10812 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:24.206-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:59.920-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-devel is earlier than 0:2.0.46-70.ent" test_ref="oval:org.mitre.oval:tst:35773"/>
            <criterion comment="mod_ssl is earlier than 0:2.0.46-70.ent" test_ref="oval:org.mitre.oval:tst:36016"/>
            <criterion comment="httpd is earlier than 0:2.0.46-70.ent" test_ref="oval:org.mitre.oval:tst:35281"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-suexec is earlier than 0:2.0.52-38.ent.2" test_ref="oval:org.mitre.oval:tst:35606"/>
            <criterion comment="httpd-manual is earlier than 0:2.0.52-38.ent.2" test_ref="oval:org.mitre.oval:tst:35973"/>
            <criterion comment="httpd-devel is earlier than 0:2.0.52-38.ent.2" test_ref="oval:org.mitre.oval:tst:35916"/>
            <criterion comment="mod_ssl is earlier than 0:2.0.52-38.ent.2" test_ref="oval:org.mitre.oval:tst:35852"/>
            <criterion comment="httpd is earlier than 0:2.0.52-38.ent.2" test_ref="oval:org.mitre.oval:tst:35768"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-manual is earlier than 0:2.2.3-11.el5_1.3" test_ref="oval:org.mitre.oval:tst:35953"/>
            <criterion comment="httpd-devel is earlier than 0:2.2.3-11.el5_1.3" test_ref="oval:org.mitre.oval:tst:35668"/>
            <criterion comment="mod_ssl is earlier than 0:2.2.3-11.el5_1.3" test_ref="oval:org.mitre.oval:tst:35991"/>
            <criterion comment="httpd is earlier than 0:2.2.3-11.el5_1.3" test_ref="oval:org.mitre.oval:tst:35696"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10811" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in Ethereal 0.9.15 up to 0.10.14 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the COPS dissector.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1935" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1935"/>
        <description>Buffer overflow in Ethereal 0.9.15 up to 0.10.14 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the COPS dissector.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:38.300-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:37.567-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:03.922-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10811 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:46.892-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:59.533-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.99.0-EL3.2" test_ref="oval:org.mitre.oval:tst:32590"/>
            <criterion comment="ethereal is earlier than 0:0.99.0-EL3.2" test_ref="oval:org.mitre.oval:tst:32631"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.99.0-EL4.2" test_ref="oval:org.mitre.oval:tst:32299"/>
            <criterion comment="ethereal is earlier than 0:0.99.0-EL4.2" test_ref="oval:org.mitre.oval:tst:32238"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10810" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 might allow context-dependent attackers to execute arbitrary code via a regular expression that involves large (1) min, (2) max, or (3) duplength values that cause an incorrect length calculation and trigger a buffer overflow, a different vulnerability than CVE-2006-7227.  NOTE: this issue was originally subsumed by CVE-2006-7224, but that CVE has been REJECTED and split.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-7228" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-7228"/>
        <description>Integer overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 might allow context-dependent attackers to execute arbitrary code via a regular expression that involves large (1) min, (2) max, or (3) duplength values that cause an incorrect length calculation and trigger a buffer overflow, a different vulnerability than CVE-2006-7227.  NOTE: this issue was originally subsumed by CVE-2006-7224, but that CVE has been REJECTED and split.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:47.767-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:37.161-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:03.161-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10810 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:41.390-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:58.870-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.2.3-6.8" test_ref="oval:org.mitre.oval:tst:35717"/>
            <criterion comment="tkinter is earlier than 0:2.2.3-6.8" test_ref="oval:org.mitre.oval:tst:35704"/>
            <criterion comment="python-tools is earlier than 0:2.2.3-6.8" test_ref="oval:org.mitre.oval:tst:35616"/>
            <criterion comment="python is earlier than 0:2.2.3-6.8" test_ref="oval:org.mitre.oval:tst:35688"/>
            <criterion comment="pcre-devel is earlier than 0:3.9-10.4" test_ref="oval:org.mitre.oval:tst:35613"/>
            <criterion comment="pcre is earlier than 0:3.9-10.4" test_ref="oval:org.mitre.oval:tst:35598"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.3.4-14.4.el4_6.1" test_ref="oval:org.mitre.oval:tst:35282"/>
            <criterion comment="tkinter is earlier than 0:2.3.4-14.4.el4_6.1" test_ref="oval:org.mitre.oval:tst:35468"/>
            <criterion comment="python-tools is earlier than 0:2.3.4-14.4.el4_6.1" test_ref="oval:org.mitre.oval:tst:35783"/>
            <criterion comment="python is earlier than 0:2.3.4-14.4.el4_6.1" test_ref="oval:org.mitre.oval:tst:35573"/>
            <criterion comment="pcre-devel is earlier than 0:4.5-4.el4_6.6" test_ref="oval:org.mitre.oval:tst:35615"/>
            <criterion comment="python-docs is earlier than 0:2.3.4-14.4.el4_6.1" test_ref="oval:org.mitre.oval:tst:35259"/>
            <criterion comment="pcre is earlier than 0:4.5-4.el4_6.6" test_ref="oval:org.mitre.oval:tst:35501"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="pcre-devel is earlier than 0:6.6-2.el5_1.7" test_ref="oval:org.mitre.oval:tst:35251"/>
            <criterion comment="pcre is earlier than 0:6.6-2.el5_1.7" test_ref="oval:org.mitre.oval:tst:35032"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1081" version="1" class="vulnerability">
      <metadata>
        <title>gzip Argument Sanitation Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>zgrep</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0758" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0758"/>
        <description>zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-07-11T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-07-27T10:36:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="bzip2 RPM earlier than 0:1.0.2-11.EL3.4" negate="false" test_ref="oval:org.mitre.oval:tst:2386"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/bzgrep is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1183"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10809" version="5" class="vulnerability">
      <metadata>
        <title>ssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and uses a trusted X11 cookie instead, which allows attackers to violate intended policy and gain privileges by causing an X client to be treated as trusted.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4752" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4752"/>
        <description>ssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and uses a trusted X11 cookie instead, which allows attackers to violate intended policy and gain privileges by causing an X client to be treated as trusted.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:25.140-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:36.788-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:02.782-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10809 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:28:45.505-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:58.412-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssh is earlier than 0:3.9p1-11.el4_7" test_ref="oval:org.mitre.oval:tst:37404"/>
            <criterion comment="openssh-askpass is earlier than 0:3.9p1-11.el4_7" test_ref="oval:org.mitre.oval:tst:37596"/>
            <criterion comment="openssh-server is earlier than 0:3.9p1-11.el4_7" test_ref="oval:org.mitre.oval:tst:37206"/>
            <criterion comment="openssh-clients is earlier than 0:3.9p1-11.el4_7" test_ref="oval:org.mitre.oval:tst:37607"/>
            <criterion comment="openssh-askpass-gnome is earlier than 0:3.9p1-11.el4_7" test_ref="oval:org.mitre.oval:tst:37491"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssh is earlier than 0:4.3p2-26.el5_2.1" test_ref="oval:org.mitre.oval:tst:37370"/>
            <criterion comment="openssh-askpass is earlier than 0:4.3p2-26.el5_2.1" test_ref="oval:org.mitre.oval:tst:37281"/>
            <criterion comment="openssh-server is earlier than 0:4.3p2-26.el5_2.1" test_ref="oval:org.mitre.oval:tst:36828"/>
            <criterion comment="openssh-clients is earlier than 0:4.3p2-26.el5_2.1" test_ref="oval:org.mitre.oval:tst:36657"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10808" version="5" class="vulnerability">
      <metadata>
        <title>Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1185" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1185"/>
        <description>Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:09.368-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:36.571-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:02.540-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10808 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:27.972-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:58.007-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="enscript is earlier than 0:1.6.1-24.4" test_ref="oval:org.mitre.oval:tst:30796"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="enscript is earlier than 0:1.6.1-28.3" test_ref="oval:org.mitre.oval:tst:31274"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10807" version="5" class="vulnerability">
      <metadata>
        <title>useradd in shadow-utils before 4.0.3, and possibly other versions before 4.0.8, does not provide a required argument to the open function when creating a new user mailbox, which causes the mailbox to be created with unpredictable permissions and possibly allows attackers to read or modify the mailbox.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1174"/>
        <description>useradd in shadow-utils before 4.0.3, and possibly other versions before 4.0.8, does not provide a required argument to the open function when creating a new user mailbox, which causes the mailbox to be created with unpredictable permissions and possibly allows attackers to read or modify the mailbox.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:46.460-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:36.192-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:02.294-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10807 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:54.949-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:57.659-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="shadow-utils is earlier than 2:4.0.3-29.RHEL3" test_ref="oval:org.mitre.oval:tst:34063"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="shadow-utils is earlier than 2:4.0.3-61.RHEL4" test_ref="oval:org.mitre.oval:tst:33184"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10806" version="5" class="vulnerability">
      <metadata>
        <title>mirror --script in lftp before 3.5.9 does not properly quote shell metacharacters, which might allow remote user-assisted attackers to execute shell commands via a malicious script.  NOTE: it is not clear whether this issue crosses security boundaries, since the script already supports commands such as "get" which could overwrite executable files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2348" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2348"/>
        <description>mirror --script in lftp before 3.5.9 does not properly quote shell metacharacters, which might allow remote user-assisted attackers to execute shell commands via a malicious script.  NOTE: it is not clear whether this issue crosses security boundaries, since the script already supports commands such as "get" which could overwrite executable files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:09.402-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:35.927-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:02.096-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10806 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:39.654-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:57.369-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="lftp is earlier than 0:3.7.11-4.el5" test_ref="oval:org.mitre.oval:tst:38835"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10805" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs casts and line termination incorrectly, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted message, related to message indexing.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0163" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0163"/>
        <description>Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs casts and line termination incorrectly, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted message, related to message indexing.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:25.771-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:35.492-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:01.576-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10805 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:36.532-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:56.709-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40598"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40703"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:39947"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40593"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40651"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:39843"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40800"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40736"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:39844"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40686"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:40296"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:39850"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-25.el4" test_ref="oval:org.mitre.oval:tst:40299"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:40624"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:40782"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:40431"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:40449"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="thunderbird is earlier than 0:2.0.0.24-2.el5_4" test_ref="oval:org.mitre.oval:tst:40249"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10804" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4965" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4965"/>
        <description>Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:38.195-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:35.105-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:01.157-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10804 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:41.690-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:56.150-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.2.3-6.8" test_ref="oval:org.mitre.oval:tst:35717"/>
            <criterion comment="tkinter is earlier than 0:2.2.3-6.8" test_ref="oval:org.mitre.oval:tst:35704"/>
            <criterion comment="python-tools is earlier than 0:2.2.3-6.8" test_ref="oval:org.mitre.oval:tst:35616"/>
            <criterion comment="python is earlier than 0:2.2.3-6.8" test_ref="oval:org.mitre.oval:tst:35688"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.3.4-14.4.el4_6.1" test_ref="oval:org.mitre.oval:tst:35282"/>
            <criterion comment="tkinter is earlier than 0:2.3.4-14.4.el4_6.1" test_ref="oval:org.mitre.oval:tst:35468"/>
            <criterion comment="python-tools is earlier than 0:2.3.4-14.4.el4_6.1" test_ref="oval:org.mitre.oval:tst:35783"/>
            <criterion comment="python is earlier than 0:2.3.4-14.4.el4_6.1" test_ref="oval:org.mitre.oval:tst:35573"/>
            <criterion comment="python-docs is earlier than 0:2.3.4-14.4.el4_6.1" test_ref="oval:org.mitre.oval:tst:35259"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38889"/>
            <criterion comment="tkinter is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38958"/>
            <criterion comment="python-tools is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38827"/>
            <criterion comment="python is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38282"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10803" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG variable and executing a Perl script whose full pathname contains a long directory tree.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0156" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0156"/>
        <description>Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG variable and executing a Perl script whose full pathname contains a long directory tree.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:02.370-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:34.781-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:00.788-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10803 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:39.564-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:55.654-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="perl-suidperl is earlier than 2:5.8.0-89.10" test_ref="oval:org.mitre.oval:tst:31361"/>
            <criterion comment="perl is earlier than 2:5.8.0-89.10" test_ref="oval:org.mitre.oval:tst:30931"/>
            <criterion comment="perl-CPAN is earlier than 2:1.61-89.10" test_ref="oval:org.mitre.oval:tst:30901"/>
            <criterion comment="perl-CGI is earlier than 2:2.81-89.10" test_ref="oval:org.mitre.oval:tst:31227"/>
            <criterion comment="perl-DB_File is earlier than 2:1.804-89.10" test_ref="oval:org.mitre.oval:tst:30945"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="perl-suidperl is earlier than 3:5.8.5-12.1.1" test_ref="oval:org.mitre.oval:tst:31049"/>
            <criterion comment="perl is earlier than 3:5.8.5-12.1" test_ref="oval:org.mitre.oval:tst:31120"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10802" version="5" class="vulnerability">
      <metadata>
        <title>The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3103" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3103"/>
        <description>The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:37.439-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:34.335-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:00.312-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10802 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:34.565-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:54.963-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.19" test_ref="oval:org.mitre.oval:tst:34708"/>
            <criterion comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.19" test_ref="oval:org.mitre.oval:tst:34616"/>
            <criterion comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.19" test_ref="oval:org.mitre.oval:tst:34661"/>
            <criterion comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.19" test_ref="oval:org.mitre.oval:tst:34588"/>
            <criterion comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.19" test_ref="oval:org.mitre.oval:tst:34401"/>
            <criterion comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.19" test_ref="oval:org.mitre.oval:tst:34587"/>
            <criterion comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.19" test_ref="oval:org.mitre.oval:tst:34647"/>
            <criterion comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.19" test_ref="oval:org.mitre.oval:tst:34707"/>
            <criterion comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.19" test_ref="oval:org.mitre.oval:tst:34425"/>
            <criterion comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.19" test_ref="oval:org.mitre.oval:tst:34530"/>
            <criterion comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.19" test_ref="oval:org.mitre.oval:tst:34628"/>
            <criterion comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.19" test_ref="oval:org.mitre.oval:tst:34421"/>
            <criterion comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.19" test_ref="oval:org.mitre.oval:tst:34604"/>
            <criterion comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.19" test_ref="oval:org.mitre.oval:tst:34566"/>
            <criterion comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.19" test_ref="oval:org.mitre.oval:tst:34175"/>
            <criterion comment="xorg-x11 is earlier than 0:6.8.2-1.EL.19" test_ref="oval:org.mitre.oval:tst:34634"/>
            <criterion comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.19" test_ref="oval:org.mitre.oval:tst:34572"/>
            <criterion comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.19" test_ref="oval:org.mitre.oval:tst:34299"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-xfs-utils is earlier than 1:1.0.2-4" test_ref="oval:org.mitre.oval:tst:34638"/>
            <criterion comment="xorg-x11-xfs is earlier than 1:1.0.2-4" test_ref="oval:org.mitre.oval:tst:34437"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10801" version="5" class="vulnerability">
      <metadata>
        <title>Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed SMB packet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0006" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0006"/>
        <description>The COPS dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (infinite loop).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:51.144-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:34.085-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:06:00.038-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10801 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:58.516-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:54.560-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.9-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31265"/>
            <criterion comment="ethereal is earlier than 0:0.10.9-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31218"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.9-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31097"/>
            <criterion comment="ethereal is earlier than 0:0.10.9-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31103"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10800" version="3" class="vulnerability">
      <metadata>
        <title>The BMP image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_19 and earlier, when running on Unix/Linux systems, allows remote attackers to cause a denial of service (JVM hang) via untrusted applets or applications that open arbitrary local files via a crafted BMP file, such as /dev/tty.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2789" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2789"/>
        <description>The BMP image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_19 and earlier, when running on Unix/Linux systems, allows remote attackers to cause a denial of service (JVM hang) via untrusted applets or applications that open arbitrary local files via a crafted BMP file, such as /dev/tty.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:11.887-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:33.110-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:58.816-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criteria operator="OR">
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.9-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:35071"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.9-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:35018"/>
            <criterion comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:36020"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.9-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:34754"/>
            <criterion comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:36131"/>
            <criterion comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:35578"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.9-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:34851"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.9-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:34906"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.9-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:35020"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34859"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34890"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.9-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35030"/>
            <criterion comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35850"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.9-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35025"/>
            <criterion comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36067"/>
            <criterion comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35854"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.9-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:34400"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34949"/>
            <criterion comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35322"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.9-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:34941"/>
            <criterion comment="java-1.5.0-bea is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34920"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34613"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35015"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.9-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35093"/>
            <criterion comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.9-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:34845"/>
            <criterion comment="java-1.5.0-bea-src is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35346"/>
            <criterion comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35349"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34956"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35062"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.9-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35075"/>
            <criterion comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35189"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34825"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34270"/>
            <criterion comment="java-1.4.2-bea-missioncontrol is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35296"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.9-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35013"/>
            <criterion comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35192"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.9-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35014"/>
            <criterion comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36087"/>
            <criterion comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35972"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.9-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34995"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34955"/>
            <criterion comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35247"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.9-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34621"/>
            <criterion comment="java-1.5.0-bea is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35253"/>
            <criterion comment="java-1.4.2-bea-demo is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36127"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:35124"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:35140"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.9-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34974"/>
            <criterion comment="java-1.5.0-bea-src is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34479"/>
            <criterion comment="java-1.5.0-bea-missioncontrol is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35180"/>
            <criterion comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.9-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34528"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34724"/>
            <criterion comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35169"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34692"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.9-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35103"/>
            <criterion comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35150"/>
            <criterion comment="java-1.4.2-bea-src is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36128"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:108" version="2" class="vulnerability">
      <metadata>
        <title>Ximian Evolution User Agent Multiple uuencoding Denial of Service</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Ximian Evolution</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0129" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0129"/>
        <description>Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to cause a denial of service (memory consumption) via a mail message that is uuencoded multiple times.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-11T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:53.657-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:13.970-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="evolution version is less than 1.2.2-5" negate="false" test_ref="oval:org.mitre.oval:tst:2939"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10799" version="5" class="vulnerability">
      <metadata>
        <title>The (1) fence_apc and (2) fence_apc_snmp programs, as used in (a) fence 2.02.00-r1 and possibly (b) cman, when running in verbose mode, allows local users to append to arbitrary files via a symlink attack on the apclog temporary file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4579" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4579"/>
        <description>The (1) fence_apc and (2) fence_apc_snmp programs, as used in (a) fence 2.02.00-r1 and possibly (b) cman, when running in verbose mode, allows local users to append to arbitrary files via a symlink attack on the apclog temporary file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:23.101-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:32.851-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:58.593-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10799 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:27.514-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:54.249-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="cman-devel is earlier than 0:2.0.115-1.el5" test_ref="oval:org.mitre.oval:tst:39125"/>
          <criterion comment="cman is earlier than 0:2.0.115-1.el5" test_ref="oval:org.mitre.oval:tst:39064"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10798" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in the (1) user_info_callback, (2) user_endrow_callback, and (3) gst_pngdec_task functions (ext/libpng/gstpngdec.c) in GStreamer Good Plug-ins (aka gst-plugins-good or gstreamer-plugins-good) 0.10.15 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted PNG file, which triggers a buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1932" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1932"/>
        <description>Multiple integer overflows in the (1) user_info_callback, (2) user_endrow_callback, and (3) gst_pngdec_task functions (ext/libpng/gstpngdec.c) in GStreamer Good Plug-ins (aka gst-plugins-good or gstreamer-plugins-good) 0.10.15 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted PNG file, which triggers a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:32.006-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:32.643-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:58.377-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10798 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:14.550-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:53.875-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="gstreamer-plugins-good-devel is earlier than 0:0.10.9-1.el5_3.2" test_ref="oval:org.mitre.oval:tst:38658"/>
          <criterion comment="gstreamer-plugins-good is earlier than 0:0.10.9-1.el5_3.2" test_ref="oval:org.mitre.oval:tst:38206"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10797" version="5" class="vulnerability">
      <metadata>
        <title>The do_coredump function in fs/exec.c in the Linux kernel 2.6.19 sets the flag variable to O_EXCL but does not use it, which allows context-dependent attackers to modify arbitrary files via a rewrite attack during a core dump.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6304" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6304"/>
        <description>The do_coredump function in fs/exec.c in the Linux kernel 2.6.19 sets the flag variable to O_EXCL but does not use it, which allows context-dependent attackers to modify arbitrary files via a rewrite attack during a core dump.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:46.101-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:32.317-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:57.999-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10797 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:46.866-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:53.423-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40050"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39464"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39090"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40063"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39443"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39703"/>
          <criterion comment="kernel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39080"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39862"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40057"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40029"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39849"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40039"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10796" version="5" class="vulnerability">
      <metadata>
        <title>The Universal Disk Format (UDF) filesystem driver in Linux kernel 2.6.17 and earlier allows local users to cause a denial of service (hang and crash) via certain operations involving truncated files, as demonstrated via the dd command.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4145" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4145"/>
        <description>The Universal Disk Format (UDF) filesystem driver in Linux kernel 2.6.17 and earlier allows local users to cause a denial of service (hang and crash) via certain operations involving truncated files, as demonstrated via the dd command.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:31.488-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:31.952-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:57.670-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10796 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:25.724-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:52.753-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-xenU is earlier than 0:2.6.9-78.EL" test_ref="oval:org.mitre.oval:tst:37213"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-78.EL" test_ref="oval:org.mitre.oval:tst:37299"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-78.EL" test_ref="oval:org.mitre.oval:tst:36859"/>
          <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-78.EL" test_ref="oval:org.mitre.oval:tst:37581"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-78.EL" test_ref="oval:org.mitre.oval:tst:37124"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-78.EL" test_ref="oval:org.mitre.oval:tst:37535"/>
          <criterion comment="kernel is earlier than 0:2.6.9-78.EL" test_ref="oval:org.mitre.oval:tst:37548"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-78.EL" test_ref="oval:org.mitre.oval:tst:37152"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-78.EL" test_ref="oval:org.mitre.oval:tst:37393"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-78.EL" test_ref="oval:org.mitre.oval:tst:37071"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-78.EL" test_ref="oval:org.mitre.oval:tst:37024"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10795" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0583" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0583"/>
        <description>Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:25.499-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:31.621-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:57.322-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10795 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:26.660-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:52.161-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="hpijs is earlier than 0:7.05-32.1.17" test_ref="oval:org.mitre.oval:tst:38448"/>
            <criterion comment="ghostscript-devel is earlier than 0:7.05-32.1.17" test_ref="oval:org.mitre.oval:tst:38527"/>
            <criterion comment="ghostscript is earlier than 0:7.05-32.1.17" test_ref="oval:org.mitre.oval:tst:37828"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ghostscript-devel is earlier than 0:7.07-33.2.el4_7.5" test_ref="oval:org.mitre.oval:tst:38438"/>
            <criterion comment="ghostscript is earlier than 0:7.07-33.2.el4_7.5" test_ref="oval:org.mitre.oval:tst:38369"/>
            <criterion comment="ghostscript-gtk is earlier than 0:7.07-33.2.el4_7.5" test_ref="oval:org.mitre.oval:tst:38244"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ghostscript-devel is earlier than 0:8.15.2-9.4.el5_3.4" test_ref="oval:org.mitre.oval:tst:38396"/>
            <criterion comment="ghostscript is earlier than 0:8.15.2-9.4.el5_3.4" test_ref="oval:org.mitre.oval:tst:37905"/>
            <criterion comment="ghostscript-gtk is earlier than 0:8.15.2-9.4.el5_3.4" test_ref="oval:org.mitre.oval:tst:38418"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10794" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the MathML component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via an mtd element with a large integer value in the rowspan attribute, related to the layout engine.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4061" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4061"/>
        <description>Integer overflow in the MathML component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via an mtd element with a large integer value in the rowspan attribute, related to the layout engine.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:52.894-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:30.932-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:56.590-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10794 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:32.996-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:51.248-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37411"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36691"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37031"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37528"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36726"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37435"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37680"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36725"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37449"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37356"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.10.el4" test_ref="oval:org.mitre.oval:tst:37564"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:36913"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-16.el4" test_ref="oval:org.mitre.oval:tst:37634"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37609"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.10.el4" test_ref="oval:org.mitre.oval:tst:37306"/>
            <criterion comment="firefox is earlier than 0:3.0.2-3.el4" test_ref="oval:org.mitre.oval:tst:37195"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37499"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37444"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37543"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37552"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-19.el5" test_ref="oval:org.mitre.oval:tst:37248"/>
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37486"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37495"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37044"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.17-1.el5" test_ref="oval:org.mitre.oval:tst:37230"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37578"/>
            <criterion comment="yelp is earlier than 0:2.16.0-21.el5" test_ref="oval:org.mitre.oval:tst:37584"/>
            <criterion comment="devhelp is earlier than 0:0.12-19.el5" test_ref="oval:org.mitre.oval:tst:37353"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37406"/>
            <criterion comment="firefox is earlier than 0:3.0.2-3.el5" test_ref="oval:org.mitre.oval:tst:37225"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:36664"/>
            <criterion comment="nss-tools is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37664"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10793" version="5" class="vulnerability">
      <metadata>
        <title>The eHCA driver in Linux kernel 2.6 before 2.6.22, when running on PowerPC, does not properly map userspace resources, which allows local users to read portions of physical address space.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3850" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3850"/>
        <description>The eHCA driver in Linux kernel 2.6 before 2.6.22, when running on PowerPC, does not properly map userspace resources, which allows local users to read portions of physical address space.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:02.270-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:30.623-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:56.265-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10793 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:04.160-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:50.692-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35330"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35339"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35337"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35227"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35043"/>
          <criterion comment="kernel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35276"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:34448"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35366"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35208"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35326"/>
          <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35345"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10792" version="5" class="vulnerability">
      <metadata>
        <title>The php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before 5.2.1, allows context-dependent attackers to obtain sensitive information (memory contents) via a serialized variable entry with a large length value, which triggers a buffer over-read.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1380"/>
        <description>The php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before 5.2.1, allows context-dependent attackers to obtain sensitive information (memory contents) via a serialized variable entry with a large length value, which triggers a buffer over-read.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:37.273-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:29.870-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:55.438-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10792 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:53:13.532-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:49.673-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33459"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33371"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33748"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33090"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33419"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33665"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33475"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33282"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33636"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33548"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33156"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33407"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33562"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33500"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33725"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33105"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33501"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33691"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33662"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33087"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33640"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:32784"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33240"/>
            <criterion comment="php-common is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33527"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33617"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33561"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33385"/>
            <criterion comment="php is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33615"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33526"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33747"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33735"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33403"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33686"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33502"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33666"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33508"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33652"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33676"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33784"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33706"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10791" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via "non-DOM property overrides," a variant of CVE-2005-1160.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1532" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1532"/>
        <description>Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via "non-DOM property overrides," a variant of CVE-2005-1160.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:36.885-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:29.382-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:54.854-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10791 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:53:10.155-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:48.862-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31531"/>
            <criterion comment="mozilla is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31619"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31225"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31917"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31644"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31625"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31435"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31816"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31450"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31901"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31590"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.5" test_ref="oval:org.mitre.oval:tst:31571"/>
            <criterion comment="mozilla is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31860"/>
            <criterion comment="thunderbird is earlier than 0:1.0.6-1.4.1" test_ref="oval:org.mitre.oval:tst:32113"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31894"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31245"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31913"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.5" test_ref="oval:org.mitre.oval:tst:31692"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31986"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31365"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31868"/>
            <criterion comment="firefox is earlier than 0:1.0.4-1.4.1" test_ref="oval:org.mitre.oval:tst:31311"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:30985"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31723"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10790" version="5" class="vulnerability">
      <metadata>
        <title>The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1888" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1888"/>
        <description>The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:13.348-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:29.090-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:54.528-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10790 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:50.273-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:48.377-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.33-0.18.el4_8" test_ref="oval:org.mitre.oval:tst:39162"/>
            <criterion comment="samba-swat is earlier than 0:3.0.33-0.18.el4_8" test_ref="oval:org.mitre.oval:tst:39589"/>
            <criterion comment="samba-client is earlier than 0:3.0.33-0.18.el4_8" test_ref="oval:org.mitre.oval:tst:39603"/>
            <criterion comment="samba is earlier than 0:3.0.33-0.18.el4_8" test_ref="oval:org.mitre.oval:tst:39658"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.33-3.15.el5_4" test_ref="oval:org.mitre.oval:tst:39633"/>
            <criterion comment="samba-swat is earlier than 0:3.0.33-3.15.el5_4" test_ref="oval:org.mitre.oval:tst:39222"/>
            <criterion comment="samba-client is earlier than 0:3.0.33-3.15.el5_4" test_ref="oval:org.mitre.oval:tst:39493"/>
            <criterion comment="samba is earlier than 0:3.0.33-3.15.el5_4" test_ref="oval:org.mitre.oval:tst:39205"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10789" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4980" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4980"/>
        <description>Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:03.799-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:28.715-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:54.188-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10789 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:12.279-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:47.803-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.2.3-6.5" test_ref="oval:org.mitre.oval:tst:33017"/>
            <criterion comment="tkinter is earlier than 0:2.2.3-6.5" test_ref="oval:org.mitre.oval:tst:33032"/>
            <criterion comment="python-tools is earlier than 0:2.2.3-6.5" test_ref="oval:org.mitre.oval:tst:32889"/>
            <criterion comment="python is earlier than 0:2.2.3-6.5" test_ref="oval:org.mitre.oval:tst:32998"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.3.4-14.3" test_ref="oval:org.mitre.oval:tst:33099"/>
            <criterion comment="tkinter is earlier than 0:2.3.4-14.3" test_ref="oval:org.mitre.oval:tst:32724"/>
            <criterion comment="python-tools is earlier than 0:2.3.4-14.3" test_ref="oval:org.mitre.oval:tst:32432"/>
            <criterion comment="python is earlier than 0:2.3.4-14.3" test_ref="oval:org.mitre.oval:tst:33133"/>
            <criterion comment="python-docs is earlier than 0:2.3.4-14.3" test_ref="oval:org.mitre.oval:tst:32973"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10788" version="5" class="vulnerability">
      <metadata>
        <title>Use-after-free vulnerability in the dissect_q931_cause_ie function in packet-q931.c in the Q.931 dissector in Wireshark 0.10.3 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via certain packets that trigger an exception.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4685" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4685"/>
        <description>Use-after-free vulnerability in the dissect_q931_cause_ie function in packet-q931.c in the Q.931 dissector in Wireshark 0.10.3 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via certain packets that trigger an exception.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:11.519-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:28.426-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:53.827-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10788 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:37.645-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:47.294-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-EL3.3" test_ref="oval:org.mitre.oval:tst:38023"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-EL3.3" test_ref="oval:org.mitre.oval:tst:38321"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-2.el4_7" test_ref="oval:org.mitre.oval:tst:38000"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-2.el4_7" test_ref="oval:org.mitre.oval:tst:38041"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-2.el5_3" test_ref="oval:org.mitre.oval:tst:38236"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-2.el5_3" test_ref="oval:org.mitre.oval:tst:38085"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10787" version="5" class="vulnerability">
      <metadata>
        <title>The iwl_set_rate function in compatible/iwl3945-base.c in iwlwifi 1.1.21 and earlier dereferences an iwl_get_hw_mode return value without checking for NULL, which might allow remote attackers to cause a denial of service (kernel panic) via unspecified vectors during module initialization.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5938" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5938"/>
        <description>The iwl_set_rate function in compatible/iwl3945-base.c in iwlwifi 1.1.21 and earlier dereferences an iwl_get_hw_mode return value without checking for NULL, which might allow remote attackers to cause a denial of service (kernel panic) via unspecified vectors during module initialization.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:30.988-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:28.111-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:53.485-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10787 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:43.395-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:46.772-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36192"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36176"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36335"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36430"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:35944"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36215"/>
          <criterion comment="kernel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36409"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:35484"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:35974"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:35791"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36150"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-53.1.14.el5" test_ref="oval:org.mitre.oval:tst:36251"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10786" version="5" class="vulnerability">
      <metadata>
        <title>Multiple heap-based buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1025"/>
        <description>Multiple heap-based buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:07.442-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:27.866-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:53.254-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10786 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:36.866-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:46.459-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="imlib is earlier than 1:1.9.13-13.4" test_ref="oval:org.mitre.oval:tst:30893"/>
          <criterion comment="imlib-devel is earlier than 1:1.9.13-13.4" test_ref="oval:org.mitre.oval:tst:30971"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10785" version="5" class="vulnerability">
      <metadata>
        <title>inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 allows remote attackers to cause a denial of service (kernel crash) via a compressed file with "improper tables".</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2458" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2458"/>
        <description>inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 allows remote attackers to cause a denial of service (kernel crash) via a compressed file with "improper tables".</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:46.404-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:27.481-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:52.784-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10785 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:54.583-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:44.562-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:32345"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:32444"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:32109"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:32476"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:32343"/>
            <criterion comment="kernel is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:31877"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:32362"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:32190"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:31899"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32415"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32137"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32528"/>
            <criterion comment="kernel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32205"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:31866"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32446"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32450"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10784" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in OpenOffice.org (OOo) 2.x before 2.4.2 allows remote attackers to execute arbitrary code via a crafted WMF file associated with a StarOffice/StarSuite document.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2237"/>
        <description>Heap-based buffer overflow in OpenOffice.org (OOo) 2.x before 2.4.2 allows remote attackers to execute arbitrary code via a crafted WMF file associated with a StarOffice/StarSuite document.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:19.465-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:25.275-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:50.485-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10784 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:26.936-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:41.925-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-43.2.0.EL3" test_ref="oval:org.mitre.oval:tst:37618"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.2-43.2.0.EL3" test_ref="oval:org.mitre.oval:tst:37523"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-43.2.0.EL3" test_ref="oval:org.mitre.oval:tst:37637"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37727"/>
            <criterion comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37824"/>
            <criterion comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37562"/>
            <criterion comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:36989"/>
            <criterion comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37711"/>
            <criterion comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37858"/>
            <criterion comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37783"/>
            <criterion comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37892"/>
            <criterion comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37058"/>
            <criterion comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37642"/>
            <criterion comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:36956"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.5-10.6.0.7.EL4" test_ref="oval:org.mitre.oval:tst:37848"/>
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.7.EL4" test_ref="oval:org.mitre.oval:tst:37791"/>
            <criterion comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37112"/>
            <criterion comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37613"/>
            <criterion comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37896"/>
            <criterion comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37367"/>
            <criterion comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37603"/>
            <criterion comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37889"/>
            <criterion comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37815"/>
            <criterion comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37744"/>
            <criterion comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37459"/>
            <criterion comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37878"/>
            <criterion comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37660"/>
            <criterion comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37755"/>
            <criterion comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37693"/>
            <criterion comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37695"/>
            <criterion comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37553"/>
            <criterion comment="openoffice.org2 is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37796"/>
            <criterion comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37372"/>
            <criterion comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37901"/>
            <criterion comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37158"/>
            <criterion comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37545"/>
            <criterion comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37853"/>
            <criterion comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37915"/>
            <criterion comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37712"/>
            <criterion comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37583"/>
            <criterion comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37926"/>
            <criterion comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:36922"/>
            <criterion comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37580"/>
            <criterion comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37724"/>
            <criterion comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37765"/>
            <criterion comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37647"/>
            <criterion comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37864"/>
            <criterion comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:36963"/>
            <criterion comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37888"/>
            <criterion comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37505"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.7.EL4" test_ref="oval:org.mitre.oval:tst:37763"/>
            <criterion comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37950"/>
            <criterion comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37037"/>
            <criterion comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37884"/>
            <criterion comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.7.EL4" test_ref="oval:org.mitre.oval:tst:37628"/>
            <criterion comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37813"/>
            <criterion comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37851"/>
            <criterion comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37890"/>
            <criterion comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37871"/>
            <criterion comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37913"/>
            <criterion comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37930"/>
            <criterion comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37788"/>
            <criterion comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37866"/>
            <criterion comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37615"/>
            <criterion comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37434"/>
            <criterion comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:org.mitre.oval:tst:37729"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-langpack-sk_SK is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37780"/>
            <criterion comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37466"/>
            <criterion comment="openoffice.org-langpack-pa_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37728"/>
            <criterion comment="openoffice.org-langpack-hi_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37653"/>
            <criterion comment="openoffice.org-langpack-et_EE is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37701"/>
            <criterion comment="openoffice.org-langpack-kn_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37557"/>
            <criterion comment="openoffice.org is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37605"/>
            <criterion comment="openoffice.org-langpack-zh_TW is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37597"/>
            <criterion comment="openoffice.org-writer is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37849"/>
            <criterion comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37488"/>
            <criterion comment="openoffice.org-langpack-ga_IE is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37650"/>
            <criterion comment="openoffice.org-langpack-ta_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37457"/>
            <criterion comment="openoffice.org-langpack-ko_KR is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:36879"/>
            <criterion comment="openoffice.org-langpack-or_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37579"/>
            <criterion comment="openoffice.org-langpack-da_DK is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37767"/>
            <criterion comment="openoffice.org-langpack-sr_CS is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37626"/>
            <criterion comment="openoffice.org-langpack-pl_PL is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37453"/>
            <criterion comment="openoffice.org-langpack-fr is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37506"/>
            <criterion comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37766"/>
            <criterion comment="openoffice.org-javafilter is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37754"/>
            <criterion comment="openoffice.org-langpack-as_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37587"/>
            <criterion comment="openoffice.org-testtools is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37533"/>
            <criterion comment="openoffice.org-langpack-hr_HR is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37843"/>
            <criterion comment="openoffice.org-langpack-de is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37267"/>
            <criterion comment="openoffice.org-emailmerge is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37343"/>
            <criterion comment="openoffice.org-xsltfilter is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37496"/>
            <criterion comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37690"/>
            <criterion comment="openoffice.org-langpack-te_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37810"/>
            <criterion comment="openoffice.org-langpack-sv is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37676"/>
            <criterion comment="openoffice.org-base is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37348"/>
            <criterion comment="openoffice.org-langpack-ca_ES is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37287"/>
            <criterion comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37837"/>
            <criterion comment="openoffice.org-core is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37382"/>
            <criterion comment="openoffice.org-langpack-nl is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37756"/>
            <criterion comment="openoffice.org-langpack-ur is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:36864"/>
            <criterion comment="openoffice.org-langpack-nn_NO is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37816"/>
            <criterion comment="openoffice.org-langpack-ar is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37377"/>
            <criterion comment="openoffice.org-langpack-ja_JP is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37708"/>
            <criterion comment="openoffice.org-langpack-gu_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37354"/>
            <criterion comment="openoffice.org-langpack-tr_TR is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37829"/>
            <criterion comment="openoffice.org-langpack-eu_ES is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37529"/>
            <criterion comment="openoffice.org-langpack-fi_FI is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37399"/>
            <criterion comment="openoffice.org-graphicfilter is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37594"/>
            <criterion comment="openoffice.org-pyuno is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37682"/>
            <criterion comment="openoffice.org-langpack-ml_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37669"/>
            <criterion comment="openoffice.org-langpack-gl_ES is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37814"/>
            <criterion comment="openoffice.org-sdk-doc is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37739"/>
            <criterion comment="openoffice.org-langpack-zh_CN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37677"/>
            <criterion comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37464"/>
            <criterion comment="openoffice.org-langpack-it is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37056"/>
            <criterion comment="openoffice.org-sdk is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37657"/>
            <criterion comment="openoffice.org-langpack-es is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37792"/>
            <criterion comment="openoffice.org-langpack-nb_NO is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37820"/>
            <criterion comment="openoffice.org-langpack-sl_SI is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37582"/>
            <criterion comment="openoffice.org-draw is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37807"/>
            <criterion comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37443"/>
            <criterion comment="openoffice.org-langpack-ms_MY is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37544"/>
            <criterion comment="openoffice.org-langpack-el_GR is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37856"/>
            <criterion comment="openoffice.org-langpack-hu_HU is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:36919"/>
            <criterion comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37012"/>
            <criterion comment="openoffice.org-langpack-bn is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37333"/>
            <criterion comment="openoffice.org-langpack-he_IL is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37795"/>
            <criterion comment="openoffice.org-langpack-pt_PT is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37360"/>
            <criterion comment="openoffice.org-langpack-lt_LT is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37421"/>
            <criterion comment="openoffice.org-langpack-af_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37689"/>
            <criterion comment="openoffice.org-langpack-bg_BG is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37847"/>
            <criterion comment="openoffice.org-calc is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37484"/>
            <criterion comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37761"/>
            <criterion comment="openoffice.org-langpack-cy_GB is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37786"/>
            <criterion comment="openoffice.org-langpack-mr_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37770"/>
            <criterion comment="openoffice.org-headless is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37696"/>
            <criterion comment="openoffice.org-langpack-th_TH is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37611"/>
            <criterion comment="openoffice.org-langpack-pt_BR is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37750"/>
            <criterion comment="openoffice.org-langpack-ru is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37654"/>
            <criterion comment="openoffice.org-math is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37723"/>
            <criterion comment="openoffice.org-impress is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37133"/>
            <criterion comment="openoffice.org-langpack-st_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:org.mitre.oval:tst:37752"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10783" version="3" class="vulnerability">
      <metadata>
        <title>Visual truncation vulnerability in the Java Runtime Environment in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier allows remote attackers to circumvent display of the untrusted-code warning banner by creating a window larger than the workstation screen.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5240" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5240"/>
        <description>Visual truncation vulnerability in the Java Runtime Environment in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier allows remote attackers to circumvent display of the untrusted-code warning banner by creating a window larger than the workstation screen.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:41.706-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:24.129-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:49.088-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criteria operator="OR">
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:35438"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:36312"/>
            <criterion comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:36020"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:36170"/>
            <criterion comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:36131"/>
            <criterion comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:35578"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:35718"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:36338"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:35439"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35617"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34688"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35272"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35892"/>
            <criterion comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35850"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:34849"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36357"/>
            <criterion comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36067"/>
            <criterion comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35854"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35532"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35673"/>
            <criterion comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.14-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36263"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36219"/>
            <criterion comment="java-1.5.0-bea is earlier than 0:1.5.0.14-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36444"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35110"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35478"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35875"/>
            <criterion comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35815"/>
            <criterion comment="java-1.5.0-bea-src is earlier than 0:1.5.0.14-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36470"/>
            <criterion comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.14-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36435"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34668"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35191"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35384"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35413"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35465"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36292"/>
            <criterion comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.14-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36151"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35057"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35644"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36198"/>
            <criterion comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35192"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36227"/>
            <criterion comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36087"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36003"/>
            <criterion comment="java-1.5.0-bea is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36374"/>
            <criterion comment="java-1.4.2-bea-demo is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36127"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35624"/>
            <criterion comment="java-1.5.0-ibm-accessibility is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35633"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35280"/>
            <criterion comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36290"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35256"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35453"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35822"/>
            <criterion comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36337"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35584"/>
            <criterion comment="java-1.4.2-bea-missioncontrol is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35296"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34760"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35317"/>
            <criterion comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35972"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35429"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36350"/>
            <criterion comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36261"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35144"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35886"/>
            <criterion comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36301"/>
            <criterion comment="java-1.5.0-bea-missioncontrol is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36452"/>
            <criterion comment="java-1.5.0-bea-src is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36372"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35437"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35392"/>
            <criterion comment="java-1.4.2-bea-src is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36128"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34772"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10782" version="5" class="vulnerability">
      <metadata>
        <title>The WYSIWYG rendering engine ("rich mail" editor) in Mozilla Thunderbird 1.0.7 and earlier allows user-assisted attackers to bypass javascript security settings and obtain sensitive information or cause a crash via an e-mail containing a javascript URI in the SRC attribute of an IFRAME tag, which is executed when the user edits the e-mail.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0884" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0884"/>
        <description>The WYSIWYG rendering engine ("rich mail" editor) in Mozilla Thunderbird 1.0.7 and earlier allows user-assisted attackers to bypass javascript security settings and obtain sensitive information or cause a crash via an e-mail containing a javascript URI in the SRC attribute of an IFRAME tag, which is executed when the user edits the e-mail.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:30.220-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:23.600-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:48.495-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10782 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:39.904-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:41.223-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32663"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32326"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31987"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32451"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32697"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32558"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32427"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32671"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32666"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32561"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32593"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32679"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32133"/>
            <criterion comment="thunderbird is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32204"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32701"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32428"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32557"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32229"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32349"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32644"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32440"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32598"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32717"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10781" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 2.x before 2.0.0.19 allows remote attackers to run arbitrary JavaScript with chrome privileges via vectors related to the feed preview, a different vulnerability than CVE-2008-3836.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5504" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5504"/>
        <description>Mozilla Firefox 2.x before 2.0.0.19 allows remote attackers to run arbitrary JavaScript with chrome privileges via vectors related to the feed preview, a different vulnerability than CVE-2008-3836.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:38.069-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:23.215-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:47.987-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10781 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:48.396-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:40.631-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38137"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37886"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37999"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37907"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37709"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38092"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37745"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38039"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38062"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38073"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37869"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:38071"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37789"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37395"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:38118"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37812"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10780" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the alpha strip capability in libpng 1.2.7 allows context-dependent attackers to cause a denial of service (crash) when the png_do_strip_filler function is used to strip alpha channels out of the image.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0481" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0481"/>
        <description>Heap-based buffer overflow in the alpha strip capability in libpng 1.2.7 allows context-dependent attackers to cause a denial of service (crash) when the png_do_strip_filler function is used to strip alpha channels out of the image.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:46.960-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:22.941-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:47.759-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10780 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:33.388-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:40.312-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="libpng-devel is earlier than 2:1.2.7-1.el4.2" test_ref="oval:org.mitre.oval:tst:32372"/>
          <criterion comment="libpng is earlier than 2:1.2.7-1.el4.2" test_ref="oval:org.mitre.oval:tst:32531"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10779" version="5" class="vulnerability">
      <metadata>
        <title>The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service (CPU consumption) via a crafted PNG image with truncated data, which causes an infinite loop in the png_read_info function in libpng.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2756" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2756"/>
        <description>The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service (CPU consumption) via a crafted PNG image with truncated data, which causes an infinite loop in the png_read_info function in libpng.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:39.482-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:22.167-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:46.850-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10779 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:30.945-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:39.120-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35216"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35012"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:34787"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35164"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:34818"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35171"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:34820"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35010"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35249"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:34683"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:34976"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:34365"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35087"/>
            <criterion comment="gd-progs is earlier than 0:2.0.28-5.4E.el4_6.1" test_ref="oval:org.mitre.oval:tst:35731"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35289"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35309"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35263"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35044"/>
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35008"/>
            <criterion comment="gd-devel is earlier than 0:2.0.28-5.4E.el4_6.1" test_ref="oval:org.mitre.oval:tst:36408"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35363"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:34796"/>
            <criterion comment="gd is earlier than 0:2.0.28-5.4E.el4_6.1" test_ref="oval:org.mitre.oval:tst:36386"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35298"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35279"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34964"/>
            <criterion comment="php-common is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34896"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35084"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35078"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34802"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35361"/>
            <criterion comment="php is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35270"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34769"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35108"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35037"/>
            <criterion comment="gd-progs is earlier than 0:2.0.33-9.4.el5_1.1" test_ref="oval:org.mitre.oval:tst:35759"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34943"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34689"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35221"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35077"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34934"/>
            <criterion comment="gd-devel is earlier than 0:2.0.33-9.4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36448"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35170"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34376"/>
            <criterion comment="gd is earlier than 0:2.0.33-9.4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36297"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34764"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10778" version="5" class="vulnerability">
      <metadata>
        <title>libgnutls in GnuTLS before 2.8.2 does not properly handle a '\0' character in a domain name in the subject's (1) Common Name (CN) or (2) Subject Alternative Name (SAN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2730" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2730"/>
        <description>libgnutls in GnuTLS before 2.8.2 does not properly handle a '\0' character in a domain name in the subject's (1) Common Name (CN) or (2) Subject Alternative Name (SAN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:35.608-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:21.864-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:46.559-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10778 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:54.590-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:38.610-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gnutls is earlier than 0:1.0.20-4.el4_8.3" test_ref="oval:org.mitre.oval:tst:38830"/>
            <criterion comment="gnutls-devel is earlier than 0:1.0.20-4.el4_8.3" test_ref="oval:org.mitre.oval:tst:39134"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gnutls is earlier than 0:1.4.1-3.el5_3.5" test_ref="oval:org.mitre.oval:tst:39082"/>
            <criterion comment="gnutls-devel is earlier than 0:1.4.1-3.el5_3.5" test_ref="oval:org.mitre.oval:tst:38774"/>
            <criterion comment="gnutls-utils is earlier than 0:1.4.1-3.el5_3.5" test_ref="oval:org.mitre.oval:tst:38560"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10777" version="5" class="vulnerability">
      <metadata>
        <title>The HFS and HFS+ (hfsplus) modules in Linux 2.6 allow attackers to cause a denial of service (oops) by using hfsplus to mount a filesystem that is not hfsplus.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3109" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3109"/>
        <description>The HFS and HFS+ (hfsplus) modules in Linux 2.6 allow attackers to cause a denial of service (oops) by using hfsplus to mount a filesystem that is not hfsplus.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:13.150-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:21.610-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:46.269-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10777 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:24.411-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:38.241-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32415"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32137"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32528"/>
          <criterion comment="kernel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32205"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:31866"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32446"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32450"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10776" version="5" class="vulnerability">
      <metadata>
        <title>dovecot 1.0.7 in Red Hat Enterprise Linux (RHEL) 5, and possibly Fedora, uses world-readable permissions for dovecot.conf, which allows local users to obtain the ssl_key_password parameter value.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4870" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4870"/>
        <description>dovecot 1.0.7 in Red Hat Enterprise Linux (RHEL) 5, and possibly Fedora, uses world-readable permissions for dovecot.conf, which allows local users to obtain the ssl_key_password parameter value.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:58.393-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:21.422-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:46.077-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10776 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:24.998-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:37.892-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="dovecot is earlier than 0:1.0.7-7.el5" test_ref="oval:org.mitre.oval:tst:38149"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10775" version="5" class="vulnerability">
      <metadata>
        <title>RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2224" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2224"/>
        <description>RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:14.303-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:21.117-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:45.733-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10775 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:25.249-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:37.401-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="quagga is earlier than 0:0.96.2-11.3E" test_ref="oval:org.mitre.oval:tst:32541"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="quagga-devel is earlier than 0:0.98.3-2.4E" test_ref="oval:org.mitre.oval:tst:32744"/>
            <criterion comment="quagga is earlier than 0:0.98.3-2.4E" test_ref="oval:org.mitre.oval:tst:32471"/>
            <criterion comment="quagga-contrib is earlier than 0:0.98.3-2.4E" test_ref="oval:org.mitre.oval:tst:32544"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10774" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the hrtimer_start function in kernel/hrtimer.c in the Linux kernel before 2.6.23.10 allows local users to execute arbitrary code or cause a denial of service (panic) via a large relative timeout value.  NOTE: some of these details are obtained from third party information.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5966" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5966"/>
        <description>Integer overflow in the hrtimer_start function in kernel/hrtimer.c in the Linux kernel before 2.6.23.10 allows local users to execute arbitrary code or cause a denial of service (panic) via a large relative timeout value.  NOTE: some of these details are obtained from third party information.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:32.677-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:20.757-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:45.373-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10774 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:02.339-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:36.929-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38128"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38668"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38883"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38948"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38732"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38969"/>
          <criterion comment="kernel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38991"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:39056"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38817"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:39009"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38672"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38983"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10773" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allow remote attackers to perform cross-origin keystroke capture, and possibly conduct cross-site scripting (XSS) attacks, by using the addEventListener and setTimeout functions in conjunction with a wrapped object.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2007-3736.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0171" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0171"/>
        <description>Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allow remote attackers to perform cross-origin keystroke capture, and possibly conduct cross-site scripting (XSS) attacks, by using the addEventListener and setTimeout functions in conjunction with a wrapped object.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2007-3736.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:15.128-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:20.263-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:44.776-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10773 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:02:00.135-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:36.233-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:39910"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:40282"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:40001"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:40160"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:39327"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:39963"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:39749"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:40277"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:39865"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.50.el3" test_ref="oval:org.mitre.oval:tst:40145"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-52.el4_8" test_ref="oval:org.mitre.oval:tst:40087"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-25.el4" test_ref="oval:org.mitre.oval:tst:40299"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-52.el4_8" test_ref="oval:org.mitre.oval:tst:40185"/>
            <criterion comment="firefox is earlier than 0:3.0.18-1.el4" test_ref="oval:org.mitre.oval:tst:39897"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-52.el4_8" test_ref="oval:org.mitre.oval:tst:40258"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-52.el4_8" test_ref="oval:org.mitre.oval:tst:40130"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-52.el4_8" test_ref="oval:org.mitre.oval:tst:40147"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-52.el4_8" test_ref="oval:org.mitre.oval:tst:40264"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:39323"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:40174"/>
            <criterion comment="firefox is earlier than 0:3.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:40301"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.24-2.el5_4" test_ref="oval:org.mitre.oval:tst:40249"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:39533"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10772" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox and Thunderbird before 1.5.0.4 strip the Unicode Byte-order-Mark (BOM) from a UTF-8 page before the page is passed to the parser, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a BOM sequence in the middle of a dangerous tag such as SCRIPT.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2783" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2783"/>
        <description>Mozilla Firefox and Thunderbird before 1.5.0.4 strip the Unicode Byte-order-Mark (BOM) from a UTF-8 page before the page is passed to the parser, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a BOM sequence in the middle of a dangerous tag such as SCRIPT.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:50.493-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:19.701-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:44.224-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10772 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:02:23.274-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:35.504-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32575"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32674"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32918"/>
            <criterion comment="seamonkey is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32919"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32864"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32659"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32859"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32511"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32902"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32837"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32873"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32693"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32886"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32810"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32418"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32496"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32929"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32777"/>
            <criterion comment="firefox is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32896"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32722"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32906"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32905"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32925"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32624"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10771" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1026" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1026"/>
        <description>Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:03.452-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:19.507-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:43.933-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10771 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:21.717-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:34.968-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="imlib is earlier than 1:1.9.13-13.4" test_ref="oval:org.mitre.oval:tst:30893"/>
          <criterion comment="imlib-devel is earlier than 1:1.9.13-13.4" test_ref="oval:org.mitre.oval:tst:30971"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10770" version="5" class="vulnerability">
      <metadata>
        <title>Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 on Linux allows remote attackers to read arbitrary files via a .. (dot dot) and URL-encoded / (slash) characters in a resource: URI.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4067" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4067"/>
        <description>Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 on Linux allows remote attackers to read arbitrary files via a .. (dot dot) and URL-encoded / (slash) characters in a resource: URI.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:05.526-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:18.861-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:43.274-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10770 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:45.434-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:33.831-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37411"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36691"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37031"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37528"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36726"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37435"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37680"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36725"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37449"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37356"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.10.el4" test_ref="oval:org.mitre.oval:tst:37564"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:36913"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-16.el4" test_ref="oval:org.mitre.oval:tst:37634"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37609"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.10.el4" test_ref="oval:org.mitre.oval:tst:37306"/>
            <criterion comment="firefox is earlier than 0:3.0.2-3.el4" test_ref="oval:org.mitre.oval:tst:37195"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37499"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37444"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37543"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37552"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-19.el5" test_ref="oval:org.mitre.oval:tst:37248"/>
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37486"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37495"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37044"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.17-1.el5" test_ref="oval:org.mitre.oval:tst:37230"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37578"/>
            <criterion comment="yelp is earlier than 0:2.16.0-21.el5" test_ref="oval:org.mitre.oval:tst:37584"/>
            <criterion comment="devhelp is earlier than 0:0.12-19.el5" test_ref="oval:org.mitre.oval:tst:37353"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37406"/>
            <criterion comment="firefox is earlier than 0:3.0.2-3.el5" test_ref="oval:org.mitre.oval:tst:37225"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:36664"/>
            <criterion comment="nss-tools is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37664"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1077" version="5" class="vulnerability">
      <metadata>
        <title>MS SQL Server 2000 Resolution Service Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <product>Microsoft SQL Server 2000</product>
          <product>Microsoft SQL Server 2000 Desktop Engine (WMSDE)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0649" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0649"/>
        <description>Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which (1) a 0x04 byte that causes the SQL Monitor thread to generate a long registry key name, or (2) a 0x08 byte with a long string causes heap corruption, as exploited by the Slammer/Sapphire worm.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-06-15T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-06-30T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-07-12T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-01-13T12:00:00.000-04:00" comment="modified wft-426 - Added space to registry key. used to say &quot;AppPaths&quot; I changed it to &quot;App Paths&quot;">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2005-01-20T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-04-08T12:00:00.000-04:00" comment="modified wft-426 - wft-426 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:31:00.000-04:00" comment="modified wft-427 - wft-427 correct literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2005-04-11T08:48:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-04-27T12:07:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1077 - SQL Server 2000 has been replaced by Microsoft SQL Server 2000" date="2014-06-02T15:00:00.009-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-06-02T15:02:00.237-04:00">INTERIM</status_change>
            <status_change date="2014-06-23T04:00:09.891-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="SQL Server 2000 installed" test_ref="oval:org.mitre.oval:tst:2591"/>
        <criterion comment="the version of sqlservr.exe is less than 2000.80.636.0" test_ref="oval:org.mitre.oval:tst:1189"/>
        <criterion comment="the version of ssnetlib.dll is less than 2000.80.636.0" test_ref="oval:org.mitre.oval:tst:1188"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10769" version="5" class="vulnerability">
      <metadata>
        <title>The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted PDF file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1183" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1183"/>
        <description>The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted PDF file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:49.204-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:18.266-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:42.580-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10769 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:44.871-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:33.015-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="xpdf is earlier than 1:2.02-14.el3" test_ref="oval:org.mitre.oval:tst:38322"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40095"/>
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-13.el4" test_ref="oval:org.mitre.oval:tst:38126"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:39528"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-13.el4" test_ref="oval:org.mitre.oval:tst:38230"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40473"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38481"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40316"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-7.7.2.el4_7.4" test_ref="oval:org.mitre.oval:tst:38436"/>
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38145"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40209"/>
            <criterion comment="xpdf is earlier than 1:3.00-20.el4" test_ref="oval:org.mitre.oval:tst:38649"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40364"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40077"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38607"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.5.4-12.el5_3" test_ref="oval:org.mitre.oval:tst:38618"/>
            <criterion comment="cups-lpd is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38471"/>
            <criterion comment="tetex-dvips is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40312"/>
            <criterion comment="kdegraphics is earlier than 7:3.5.4-12.el5_3" test_ref="oval:org.mitre.oval:tst:38271"/>
            <criterion comment="poppler is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38760"/>
            <criterion comment="tetex-fonts is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40122"/>
            <criterion comment="cups-libs is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38541"/>
            <criterion comment="tetex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40413"/>
            <criterion comment="tetex-doc is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40398"/>
            <criterion comment="poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38500"/>
            <criterion comment="tetex-latex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40444"/>
            <criterion comment="poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38512"/>
            <criterion comment="cups-devel is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:37935"/>
            <criterion comment="tetex-afm is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40008"/>
            <criterion comment="tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:39920"/>
            <criterion comment="cups is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38334"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10768" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in discdb.c for grip 3.1.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing the cddb lookup to return more matches than expected.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0706" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0706"/>
        <description>Buffer overflow in discdb.c for grip 3.1.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing the cddb lookup to return more matches than expected.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:52.694-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:17.952-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:42.280-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10768 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:13.130-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:32.561-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gnome-vfs2-devel is earlier than 0:2.2.5-2E.3.3" test_ref="oval:org.mitre.oval:tst:38035"/>
            <criterion comment="gnome-vfs2 is earlier than 0:2.2.5-2E.3.3" test_ref="oval:org.mitre.oval:tst:37577"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gnome-vfs2-smb is earlier than 0:2.8.2-8.7.el4_7.2" test_ref="oval:org.mitre.oval:tst:37268"/>
            <criterion comment="gnome-vfs2-devel is earlier than 0:2.8.2-8.7.el4_7.2" test_ref="oval:org.mitre.oval:tst:37162"/>
            <criterion comment="gnome-vfs2 is earlier than 0:2.8.2-8.7.el4_7.2" test_ref="oval:org.mitre.oval:tst:38134"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10767" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP headers of XML HTTP requests via XMLHttpRequest, and possibly use the client to exploit vulnerabilities in servers or proxies, including HTTP request smuggling and HTTP request splitting.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2703" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2703"/>
        <description>Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP headers of XML HTTP requests via XMLHttpRequest, and possibly use the client to exploit vulnerabilities in servers or proxies, including HTTP request smuggling and HTTP request splitting.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:48.632-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:17.458-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:41.684-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10767 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:53:03.914-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:31.671-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32169"/>
            <criterion comment="mozilla is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:31729"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32242"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32151"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32014"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32144"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32068"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32248"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32293"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32044"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32244"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.7" test_ref="oval:org.mitre.oval:tst:32012"/>
            <criterion comment="mozilla is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:31897"/>
            <criterion comment="thunderbird is earlier than 0:1.0.7-1.4.1" test_ref="oval:org.mitre.oval:tst:31477"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32300"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32226"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32289"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.7" test_ref="oval:org.mitre.oval:tst:32170"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32150"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32302"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32090"/>
            <criterion comment="firefox is earlier than 0:1.0.7-1.4.1" test_ref="oval:org.mitre.oval:tst:32147"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32209"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32088"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10766" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote attackers to insert arbitrary HTML and script via the content-type mail header, as demonstrated using read_body.php.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0520" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0520"/>
        <description>Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote attackers to insert arbitrary HTML and script via the content-type mail header, as demonstrated using read_body.php.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:49.119-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:17.271-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:41.479-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10766 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:44.878-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:31.389-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="squirrelmail is earlier than 0:1.4.3-0.e3.1" test_ref="oval:org.mitre.oval:tst:29772"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10765" version="5" class="vulnerability">
      <metadata>
        <title>Format string vulnerability in the proto_item_set_text function in Ethereal 0.9.4 through 0.10.11, as used in multiple dissectors, allows remote attackers to write to arbitrary memory locations and gain privileges via a crafted AFP packet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2367" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2367"/>
        <description>Format string vulnerability in the proto_item_set_text function in Ethereal 0.9.4 through 0.10.11, as used in multiple dissectors, allows remote attackers to write to arbitrary memory locations and gain privileges via a crafted AFP packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:45.872-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:16.990-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:41.212-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10765 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:46.672-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:30.972-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.12-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31966"/>
            <criterion comment="ethereal is earlier than 0:0.10.12-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32076"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.12-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32122"/>
            <criterion comment="ethereal is earlier than 0:0.10.12-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32035"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10764" version="5" class="vulnerability">
      <metadata>
        <title>A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTA_MAX to be used as an array size instead of RTN_MAX, which leads to an "out of bound access" by the (1) dn_fib_props (dn_fib.c, DECNet) and (2) fib_props (fib_semantics.c, IPv4) functions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2172" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2172"/>
        <description>A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTA_MAX to be used as an array size instead of RTN_MAX, which leads to an "out of bound access" by the (1) dn_fib_props (dn_fib.c, DECNet) and (2) fib_props (fib_semantics.c, IPv4) functions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:10.111-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:16.398-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:40.511-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10764 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:11.064-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:30.181-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35660"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35620"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35663"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35627"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35653"/>
            <criterion comment="kernel is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35769"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35035"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35699"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:34809"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34475"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34659"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34630"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34375"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34496"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34560"/>
            <criterion comment="kernel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34493"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34302"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34295"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34662"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:33694"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34146"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34219"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34205"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:33862"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34224"/>
            <criterion comment="kernel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:33837"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34231"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34073"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:33861"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:33594"/>
            <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34059"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10763" version="5" class="vulnerability">
      <metadata>
        <title>The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time.  NOTE: the scope of this issue is currently limited because the amount of computation required is still large.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2409" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2409"/>
        <description>The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time.  NOTE: the scope of this issue is currently limited because the amount of computation required is still large.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:43.120-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:15.510-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:39.716-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10763 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:51.144-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:29.245-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.7a-33.26" test_ref="oval:org.mitre.oval:tst:40028"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39378"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39359"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39036"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39270"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39397"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.7a-33.26" test_ref="oval:org.mitre.oval:tst:40271"/>
            <criterion comment="openssl is earlier than 0:0.9.7a-33.26" test_ref="oval:org.mitre.oval:tst:40261"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39118"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:38444"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39389"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39284"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:38466"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.7a-43.17.el4_8.5" test_ref="oval:org.mitre.oval:tst:39739"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.7a-43.17.el4_8.5" test_ref="oval:org.mitre.oval:tst:40358"/>
            <criterion comment="openssl is earlier than 0:0.9.7a-43.17.el4_8.5" test_ref="oval:org.mitre.oval:tst:39943"/>
            <criterion comment="nss-devel is earlier than 0:3.12.3.99.3-1.el4_8.2" test_ref="oval:org.mitre.oval:tst:38342"/>
            <criterion comment="nspr is earlier than 0:4.7.4-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:38829"/>
            <criterion comment="nss is earlier than 0:3.12.3.99.3-1.el4_8.2" test_ref="oval:org.mitre.oval:tst:38630"/>
            <criterion comment="nss-tools is earlier than 0:3.12.3.99.3-1.el4_8.2" test_ref="oval:org.mitre.oval:tst:38960"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.4-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:38731"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.8e-12.el5_4.1" test_ref="oval:org.mitre.oval:tst:39135"/>
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.3.99.3-1.el5_3.2" test_ref="oval:org.mitre.oval:tst:38999"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.4-1.el5_3.1" test_ref="oval:org.mitre.oval:tst:38823"/>
            <criterion comment="gnutls is earlier than 0:1.4.1-3.el5_4.8" test_ref="oval:org.mitre.oval:tst:40268"/>
            <criterion comment="openssl is earlier than 0:0.9.8e-12.el5_4.1" test_ref="oval:org.mitre.oval:tst:39755"/>
            <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39115"/>
            <criterion comment="nspr is earlier than 0:4.7.4-1.el5_3.1" test_ref="oval:org.mitre.oval:tst:38995"/>
            <criterion comment="nss is earlier than 0:3.12.3.99.3-1.el5_3.2" test_ref="oval:org.mitre.oval:tst:38950"/>
            <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39655"/>
            <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39531"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.8e-12.el5_4.1" test_ref="oval:org.mitre.oval:tst:40074"/>
            <criterion comment="gnutls-devel is earlier than 0:1.4.1-3.el5_4.8" test_ref="oval:org.mitre.oval:tst:40162"/>
            <criterion comment="nss-devel is earlier than 0:3.12.3.99.3-1.el5_3.2" test_ref="oval:org.mitre.oval:tst:38609"/>
            <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:38878"/>
            <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39616"/>
            <criterion comment="nss-tools is earlier than 0:3.12.3.99.3-1.el5_3.2" test_ref="oval:org.mitre.oval:tst:38841"/>
            <criterion comment="gnutls-utils is earlier than 0:1.4.1-3.el5_4.8" test_ref="oval:org.mitre.oval:tst:40073"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10762" version="5" class="vulnerability">
      <metadata>
        <title>GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the use of LD_DEBUG for a setuid program, which allows local users to gain sensitive information, such as the list of symbols used by the program.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1453" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1453"/>
        <description>GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the use of LD_DEBUG for a setuid program, which allows local users to gain sensitive information, such as the list of symbols used by the program.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:11.488-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:15.230-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:39.406-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10762 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:21.113-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:28.778-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="glibc is earlier than 0:2.3.2-95.33" test_ref="oval:org.mitre.oval:tst:31047"/>
          <criterion comment="glibc-utils is earlier than 0:2.3.2-95.33" test_ref="oval:org.mitre.oval:tst:31166"/>
          <criterion comment="glibc-devel is earlier than 0:2.3.2-95.33" test_ref="oval:org.mitre.oval:tst:31542"/>
          <criterion comment="nptl-devel is earlier than 0:2.3.2-95.33" test_ref="oval:org.mitre.oval:tst:31467"/>
          <criterion comment="nscd is earlier than 0:2.3.2-95.33" test_ref="oval:org.mitre.oval:tst:30743"/>
          <criterion comment="glibc-profile is earlier than 0:2.3.2-95.33" test_ref="oval:org.mitre.oval:tst:31462"/>
          <criterion comment="glibc-common is earlier than 0:2.3.2-95.33" test_ref="oval:org.mitre.oval:tst:31600"/>
          <criterion comment="glibc-headers is earlier than 0:2.3.2-95.33" test_ref="oval:org.mitre.oval:tst:31153"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10761" version="5" class="vulnerability">
      <metadata>
        <title>The Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly restrict the objects that may be sent to loggers, which allows attackers to obtain sensitive information via vectors related to the implementation of Component, KeyboardFocusManager, and DefaultKeyboardFocusManager, aka Bug Id 6664512.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3880" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3880"/>
        <description>The Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly restrict the objects that may be sent to loggers, which allows attackers to obtain sensitive information via vectors related to the implementation of Component, KeyboardFocusManager, and DefaultKeyboardFocusManager, aka Bug Id 6664512.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:56.263-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:14.953-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:39.052-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10761 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:38.662-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:28.436-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:38878"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39616"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39115"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39531"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39655"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10760" version="5" class="vulnerability">
      <metadata>
        <title>content_encoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly restrict the amount of callback data sent to an application that requests automatic decompression, which might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact by sending crafted compressed data to an application that relies on the intended data-length limit.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0734" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0734"/>
        <description>content_encoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly restrict the amount of callback data sent to an application that requests automatic decompression, which might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact by sending crafted compressed data to an application that relies on the intended data-length limit.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:04.236-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:14.666-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:38.352-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10760 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:36.907-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:27.883-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="curl-devel is earlier than 0:7.10.6-11.rhel3" test_ref="oval:org.mitre.oval:tst:40007"/>
            <criterion comment="curl is earlier than 0:7.10.6-11.rhel3" test_ref="oval:org.mitre.oval:tst:40171"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="curl-devel is earlier than 0:7.12.1-11.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39393"/>
            <criterion comment="curl is earlier than 0:7.12.1-11.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40040"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="curl-devel is earlier than 0:7.15.5-9.el5" test_ref="oval:org.mitre.oval:tst:39882"/>
            <criterion comment="curl is earlier than 0:7.15.5-9.el5" test_ref="oval:org.mitre.oval:tst:39857"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10759" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to cause a denial of service via (1) a large cookie path parameter, which triggers memory consumption, or (2) an internal delimiter within cookie path or name values, which could trigger a misinterpretation of cookie data, aka "Path Abuse in Cookies."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1362" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1362"/>
        <description>Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to cause a denial of service via (1) a large cookie path parameter, which triggers memory consumption, or (2) an internal delimiter within cookie path or name values, which could trigger a misinterpretation of cookie data, aka "Path Abuse in Cookies."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:47.997-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:14.084-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:37.680-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10759 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:12.203-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:27.092-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34409"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34257"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34432"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33988"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33721"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33693"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34313"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34281"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33894"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34228"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.8.el4" test_ref="oval:org.mitre.oval:tst:33625"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:33931"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:33844"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-0.1.el4" test_ref="oval:org.mitre.oval:tst:34331"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34334"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34021"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34249"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.8.el4" test_ref="oval:org.mitre.oval:tst:34293"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.1.el4" test_ref="oval:org.mitre.oval:tst:34371"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34446"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34262"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34366"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:33994"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34322"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-1.el5" test_ref="oval:org.mitre.oval:tst:34445"/>
            <criterion comment="yelp is earlier than 0:2.16.0-15.el5" test_ref="oval:org.mitre.oval:tst:33445"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-11.el5" test_ref="oval:org.mitre.oval:tst:34323"/>
            <criterion comment="devhelp is earlier than 0:0.12-11.el5" test_ref="oval:org.mitre.oval:tst:34204"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-1.el5" test_ref="oval:org.mitre.oval:tst:34162"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-1.el5" test_ref="oval:org.mitre.oval:tst:33979"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10758" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1, 3.0, and 2.0 allows remote DHCP servers to execute arbitrary code via a crafted subnet-mask option.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0692" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0692"/>
        <description>Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1, 3.0, and 2.0 allows remote DHCP servers to execute arbitrary code via a crafted subnet-mask option.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:23.682-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:13.776-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:37.371-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10758 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:29:48.480-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:26.614-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="dhclient is earlier than 7:3.0.1-10.2_EL3" test_ref="oval:org.mitre.oval:tst:38360"/>
            <criterion comment="dhcp is earlier than 7:3.0.1-10.2_EL3" test_ref="oval:org.mitre.oval:tst:38535"/>
            <criterion comment="dhcp-devel is earlier than 7:3.0.1-10.2_EL3" test_ref="oval:org.mitre.oval:tst:38243"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="dhclient is earlier than 7:3.0.1-65.el4_8.1" test_ref="oval:org.mitre.oval:tst:38216"/>
            <criterion comment="dhcp is earlier than 7:3.0.1-65.el4_8.1" test_ref="oval:org.mitre.oval:tst:38914"/>
            <criterion comment="dhcp-devel is earlier than 7:3.0.1-65.el4_8.1" test_ref="oval:org.mitre.oval:tst:38520"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10757" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0957" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0957"/>
        <description>Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:29.830-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:13.381-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:36.898-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10757 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:43.279-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:25.951-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.2.7-61" test_ref="oval:org.mitre.oval:tst:33590"/>
            <criterion comment="krb5 is earlier than 0:1.2.7-61" test_ref="oval:org.mitre.oval:tst:33826"/>
            <criterion comment="krb5-libs is earlier than 0:1.2.7-61" test_ref="oval:org.mitre.oval:tst:32858"/>
            <criterion comment="krb5-server is earlier than 0:1.2.7-61" test_ref="oval:org.mitre.oval:tst:33622"/>
            <criterion comment="krb5-devel is earlier than 0:1.2.7-61" test_ref="oval:org.mitre.oval:tst:33700"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.3.4-46" test_ref="oval:org.mitre.oval:tst:33804"/>
            <criterion comment="krb5 is earlier than 0:1.3.4-46" test_ref="oval:org.mitre.oval:tst:33812"/>
            <criterion comment="krb5-libs is earlier than 0:1.3.4-46" test_ref="oval:org.mitre.oval:tst:33795"/>
            <criterion comment="krb5-server is earlier than 0:1.3.4-46" test_ref="oval:org.mitre.oval:tst:32895"/>
            <criterion comment="krb5-devel is earlier than 0:1.3.4-46" test_ref="oval:org.mitre.oval:tst:33816"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.5-23" test_ref="oval:org.mitre.oval:tst:33344"/>
            <criterion comment="krb5 is earlier than 0:1.5-23" test_ref="oval:org.mitre.oval:tst:33714"/>
            <criterion comment="krb5-libs is earlier than 0:1.5-23" test_ref="oval:org.mitre.oval:tst:33831"/>
            <criterion comment="krb5-server is earlier than 0:1.5-23" test_ref="oval:org.mitre.oval:tst:33885"/>
            <criterion comment="krb5-devel is earlier than 0:1.5-23" test_ref="oval:org.mitre.oval:tst:33785"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10756" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows and facilitate phishing attacks, aka the "Dialog Box Spoofing Vulnerability."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0141" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0141"/>
        <description>Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to load local files via links "with a custom getter and toString method" that are middle-clicked by the user to be opened in a new tab.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:53.481-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:12.819-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:36.335-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10756 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:41.814-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:25.321-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:30819"/>
            <criterion comment="mozilla is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31515"/>
            <criterion comment="mozilla-chat is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31278"/>
            <criterion comment="mozilla-mail is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31465"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31606"/>
            <criterion comment="mozilla-devel is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31480"/>
            <criterion comment="mozilla-nss is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31417"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31313"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31469"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31598"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:30665"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.3" test_ref="oval:org.mitre.oval:tst:31499"/>
            <criterion comment="mozilla is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31604"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31381"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31622"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:30651"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.3" test_ref="oval:org.mitre.oval:tst:31560"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31110"/>
            <criterion comment="evolution is earlier than 0:2.0.2-14" test_ref="oval:org.mitre.oval:tst:31003"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31404"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31375"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31106"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31418"/>
            <criterion comment="evolution-devel is earlier than 0:2.0.2-14" test_ref="oval:org.mitre.oval:tst:31558"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10755" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to execute arbitrary code by using the Object.watch method to access the "clone parent" internal function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1734" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1734"/>
        <description>Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to execute arbitrary code by using the Object.watch method to access the "clone parent" internal function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:28.266-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:12.282-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:35.781-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10755 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:10.150-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:24.655-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32663"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32326"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31987"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32451"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32697"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32558"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32427"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32671"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32666"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32561"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32593"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32679"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32133"/>
            <criterion comment="thunderbird is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32204"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32701"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32428"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32557"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32229"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32349"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32644"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32440"/>
            <criterion comment="firefox is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32219"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32598"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32717"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10754" version="5" class="vulnerability">
      <metadata>
        <title>The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the "!" (exclamation point) shell metacharacter in (1) the filename of a tar archive and possibly (2) the filename of the first file in a tar archive, which is not properly handled by the VIM TAR plugin (tar.vim) v.10 through v.22, as demonstrated by the shellescape, tarplugin.v2, tarplugin, and tarplugin.updated test cases.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2008-2712. NOTE: this issue has the same root cause as CVE-2008-3075.  NOTE: due to the complexity of the associated disclosures and the incomplete information related to them, there may be inaccuracies in this CVE description and in external mappings to this identifier.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3074" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3074"/>
        <description>The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the "!" (exclamation point) shell metacharacter in (1) the filename of a tar archive and possibly (2) the filename of the first file in a tar archive, which is not properly handled by the VIM TAR plugin (tar.vim) v.10 through v.22, as demonstrated by the shellescape, tarplugin.v2, tarplugin, and tarplugin.updated test cases.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2008-2712. NOTE: this issue has the same root cause as CVE-2008-3075.  NOTE: due to the complexity of the associated disclosures and the incomplete information related to them, there may be inaccuracies in this CVE description and in external mappings to this identifier.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:27.851-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:12.004-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:35.520-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10754 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:22.161-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:24.295-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="vim-minimal is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37412"/>
          <criterion comment="vim-enhanced is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37218"/>
          <criterion comment="vim is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37405"/>
          <criterion comment="vim-X11 is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37384"/>
          <criterion comment="vim-common is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37365"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10753" version="5" class="vulnerability">
      <metadata>
        <title>The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) or bypass firewall rules via crafted packets, which are not properly handled by the skb_checksum_help function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0449" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0449"/>
        <description>The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) or bypass firewall rules via crafted packets, which are not properly handled by the skb_checksum_help function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:13.572-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:11.620-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:35.090-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10753 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:29:55.792-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:23.718-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31148"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31473"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31178"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31282"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31565"/>
            <criterion comment="kernel is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31562"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31582"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:30730"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31534"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31545"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31539"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31661"/>
            <criterion comment="kernel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31482"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31112"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31605"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31330"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10752" version="5" class="vulnerability">
      <metadata>
        <title>The JavaScript engine in Mozilla Firefox before 2.0.0.14, Thunderbird before 2.0.0.14, and SeaMonkey before 1.1.10 allows remote attackers to cause a denial of service (garbage collector crash) and possibly have other impacts via a crafted web page.  NOTE: this is due to an incorrect fix for CVE-2008-1237.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1380"/>
        <description>The JavaScript engine in Mozilla Firefox before 2.0.0.14, Thunderbird before 2.0.0.14, and SeaMonkey before 1.1.10 allows remote attackers to cause a denial of service (garbage collector crash) and possibly have other impacts via a crafted web page.  NOTE: this is due to an incorrect fix for CVE-2008-1237.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:09.708-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:11.097-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:34.469-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10752 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:24.770-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:22.944-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.17.el3" test_ref="oval:org.mitre.oval:tst:36552"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.17.el3" test_ref="oval:org.mitre.oval:tst:36390"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.17.el3" test_ref="oval:org.mitre.oval:tst:35928"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.17.el3" test_ref="oval:org.mitre.oval:tst:36424"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.17.el3" test_ref="oval:org.mitre.oval:tst:36404"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.17.el3" test_ref="oval:org.mitre.oval:tst:36183"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.17.el3" test_ref="oval:org.mitre.oval:tst:36420"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.17.el3" test_ref="oval:org.mitre.oval:tst:36606"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.17.el3" test_ref="oval:org.mitre.oval:tst:36167"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.17.el3" test_ref="oval:org.mitre.oval:tst:36226"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-16.el4" test_ref="oval:org.mitre.oval:tst:36180"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-16.el4" test_ref="oval:org.mitre.oval:tst:36510"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-11.el4" test_ref="oval:org.mitre.oval:tst:36269"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-16.el4" test_ref="oval:org.mitre.oval:tst:36554"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-16.el4" test_ref="oval:org.mitre.oval:tst:36017"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-16.el4" test_ref="oval:org.mitre.oval:tst:36517"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.15.el4" test_ref="oval:org.mitre.oval:tst:36344"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-16.el4" test_ref="oval:org.mitre.oval:tst:36399"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-16.el4" test_ref="oval:org.mitre.oval:tst:36361"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-16.el4" test_ref="oval:org.mitre.oval:tst:36394"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-16.el4" test_ref="oval:org.mitre.oval:tst:36550"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-16.el4" test_ref="oval:org.mitre.oval:tst:36571"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-15.el5_1" test_ref="oval:org.mitre.oval:tst:36431"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-15.el5_1" test_ref="oval:org.mitre.oval:tst:36252"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-12.el5_1" test_ref="oval:org.mitre.oval:tst:36528"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10751" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. NOTE: this was originally reported for Firefox before 3.5.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2408" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2408"/>
        <description>Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. NOTE: this was originally reported for Firefox before 3.5.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:34.081-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:10.547-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:33.902-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10751 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:29:51.298-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:22.117-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39378"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39359"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39036"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39270"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39397"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39118"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:38444"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39284"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:38466"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39389"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nss-devel is earlier than 0:3.12.3.99.3-1.el4_8.2" test_ref="oval:org.mitre.oval:tst:38342"/>
            <criterion comment="nspr is earlier than 0:4.7.4-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:38829"/>
            <criterion comment="nss is earlier than 0:3.12.3.99.3-1.el4_8.2" test_ref="oval:org.mitre.oval:tst:38630"/>
            <criterion comment="nss-tools is earlier than 0:3.12.3.99.3-1.el4_8.2" test_ref="oval:org.mitre.oval:tst:38960"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.4-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:38731"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.3.99.3-1.el5_3.2" test_ref="oval:org.mitre.oval:tst:38999"/>
            <criterion comment="nss-devel is earlier than 0:3.12.3.99.3-1.el5_3.2" test_ref="oval:org.mitre.oval:tst:38609"/>
            <criterion comment="nspr is earlier than 0:4.7.4-1.el5_3.1" test_ref="oval:org.mitre.oval:tst:38995"/>
            <criterion comment="nss is earlier than 0:3.12.3.99.3-1.el5_3.2" test_ref="oval:org.mitre.oval:tst:38950"/>
            <criterion comment="nss-tools is earlier than 0:3.12.3.99.3-1.el5_3.2" test_ref="oval:org.mitre.oval:tst:38841"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.4-1.el5_3.1" test_ref="oval:org.mitre.oval:tst:38823"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10750" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly change the source URI when processing a canvas element and an HTTP redirect, which allows remote attackers to bypass the same origin policy and access arbitrary images that are not directly accessible to the attacker.  NOTE: this issue can be leveraged to enumerate software on the client by performing redirections related to moz-icon.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5012" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5012"/>
        <description>Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly change the source URI when processing a canvas element and an HTTP redirect, which allows remote attackers to bypass the same origin policy and access arbitrary images that are not directly accessible to the attacker.  NOTE: this issue can be leveraged to enumerate software on the client by performing redirections related to moz-icon.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:43.735-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:10.091-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:33.426-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10750 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:18.314-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:21.439-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37159"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37875"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37293"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37934"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37671"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37932"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37970"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37357"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37852"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.25.el3" test_ref="oval:org.mitre.oval:tst:37844"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37991"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37232"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-17.el4" test_ref="oval:org.mitre.oval:tst:37872"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37955"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:38009"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37777"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-28.el4" test_ref="oval:org.mitre.oval:tst:37914"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="thunderbird is earlier than 0:2.0.0.18-1.el5" test_ref="oval:org.mitre.oval:tst:38015"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10749" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux (RHEL) 4, allows local users to cause a denial of service (oops) via a long series of PTRACE_ATTACH ptrace calls to another user's process that trigger a conflict between utrace_detach and report_quiescent, related to "late ptrace_may_attach() check" and "race around dead_engine_ops setting," a different vulnerability than CVE-2007-0771 and CVE-2008-1514.  NOTE: this issue might only affect kernel versions before 2.6.16.x.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2365" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2365"/>
        <description>Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise Linux (RHEL) 4, allows local users to cause a denial of service (oops) via a long series of PTRACE_ATTACH ptrace calls to another user's process that trigger a conflict between utrace_detach and report_quiescent, related to "late ptrace_may_attach() check" and "race around &amp;dead_engine_ops setting," a different vulnerability than CVE-2007-0771 and CVE-2008-1514.  NOTE: this issue might only affect kernel versions before 2.6.16.x.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:30.442-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:09.751-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:33.099-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10749 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:56.176-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:20.989-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-xenU is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36972"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36412"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36840"/>
          <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36741"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36936"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36433"/>
          <criterion comment="kernel is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36961"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36949"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36894"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36367"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:37020"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10748" version="5" class="vulnerability">
      <metadata>
        <title>The BDB backend for slapd in OpenLDAP before 2.3.36 allows remote authenticated users to cause a denial of service (crash) via a potentially-successful modify operation with the NOOP control set to critical, possibly due to a double free vulnerability.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6698"/>
        <description>The BDB backend for slapd in OpenLDAP before 2.3.36 allows remote authenticated users to cause a denial of service (crash) via a potentially-successful modify operation with the NOOP control set to critical, possibly due to a double free vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:21.626-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:09.417-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:32.692-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10748 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:40.342-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:20.485-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="compat-openldap is earlier than 0:2.1.30-8.el4_6.4" test_ref="oval:org.mitre.oval:tst:36122"/>
            <criterion comment="openldap-devel is earlier than 0:2.2.13-8.el4_6.4" test_ref="oval:org.mitre.oval:tst:36157"/>
            <criterion comment="openldap-clients is earlier than 0:2.2.13-8.el4_6.4" test_ref="oval:org.mitre.oval:tst:35412"/>
            <criterion comment="openldap is earlier than 0:2.2.13-8.el4_6.4" test_ref="oval:org.mitre.oval:tst:36270"/>
            <criterion comment="openldap-servers-sql is earlier than 0:2.2.13-8.el4_6.4" test_ref="oval:org.mitre.oval:tst:36239"/>
            <criterion comment="openldap-servers is earlier than 0:2.2.13-8.el4_6.4" test_ref="oval:org.mitre.oval:tst:35877"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="compat-openldap is earlier than 0:2.3.27_2.2.29-8.el5_1.3" test_ref="oval:org.mitre.oval:tst:35700"/>
            <criterion comment="openldap-devel is earlier than 0:2.3.27-8.el5_1.3" test_ref="oval:org.mitre.oval:tst:35900"/>
            <criterion comment="openldap-clients is earlier than 0:2.3.27-8.el5_1.3" test_ref="oval:org.mitre.oval:tst:36273"/>
            <criterion comment="openldap is earlier than 0:2.3.27-8.el5_1.3" test_ref="oval:org.mitre.oval:tst:36158"/>
            <criterion comment="openldap-servers-sql is earlier than 0:2.3.27-8.el5_1.3" test_ref="oval:org.mitre.oval:tst:36065"/>
            <criterion comment="openldap-servers is earlier than 0:2.3.27-8.el5_1.3" test_ref="oval:org.mitre.oval:tst:35300"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10747" version="5" class="vulnerability">
      <metadata>
        <title>The mozIJSSubScriptLoader.LoadScript function in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 does not apply XPCNativeWrappers to scripts loaded from (1) file: URIs, (2) data: URIs, or (3) certain non-canonical chrome: URIs, which allows remote attackers to execute arbitrary code via vectors involving third-party add-ons.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2803" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2803"/>
        <description>The mozIJSSubScriptLoader.LoadScript function in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 does not apply XPCNativeWrappers to scripts loaded from (1) file: URIs, (2) data: URIs, or (3) certain non-canonical chrome: URIs, which allows remote attackers to execute arbitrary code via vectors involving third-party add-ons.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:26.348-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:08.769-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:32.001-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10747 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:21.384-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:19.661-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37286"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37033"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37126"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37105"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37271"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37279"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37060"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37189"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:36476"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:36916"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37236"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37192"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-14.el4" test_ref="oval:org.mitre.oval:tst:36999"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36886"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37331"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36365"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.19.el4" test_ref="oval:org.mitre.oval:tst:37174"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37226"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36766"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37320"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36826"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37274"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-17.el5" test_ref="oval:org.mitre.oval:tst:37107"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:37351"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.16-1.el5" test_ref="oval:org.mitre.oval:tst:37363"/>
            <criterion comment="xulrunner is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:36984"/>
            <criterion comment="devhelp is earlier than 0:0.12-17.el5" test_ref="oval:org.mitre.oval:tst:37234"/>
            <criterion comment="yelp is earlier than 0:2.16.0-19.el5" test_ref="oval:org.mitre.oval:tst:37291"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:36436"/>
            <criterion comment="firefox is earlier than 0:3.0-2.el5" test_ref="oval:org.mitre.oval:tst:36814"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10746" version="5" class="vulnerability">
      <metadata>
        <title>The sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a denial of service (kernel oops) and possibly execute code by opening an interface file in /proc/sys/net/ipv4/conf/, waiting until the interface is unregistered, then obtaining and modifying function pointers in memory that was used for the ctl_table.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2709" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2709"/>
        <description>The sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a denial of service (kernel oops) and possibly execute code by opening an interface file in /proc/sys/net/ipv4/conf/, waiting until the interface is unregistered, then obtaining and modifying function pointers in memory that was used for the ctl_table.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:31.980-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:08.383-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:31.585-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10746 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:30.853-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:19.105-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32525"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32366"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32381"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32215"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32464"/>
            <criterion comment="kernel is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32288"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:31978"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32438"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32070"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32415"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32137"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32528"/>
            <criterion comment="kernel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32205"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:31866"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32446"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32450"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10745" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properties of the window navigator object (window.navigator) that are accessed when Java starts up, which causes a crash that leads to code execution.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3677" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3677"/>
        <description>Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properties of the window navigator object (window.navigator) that are accessed when Java starts up, which causes a crash that leads to code execution.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:04.379-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:07.849-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:31.076-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10745 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:58.892-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:18.435-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32342"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32877"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:31982"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32816"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32080"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32904"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32915"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32924"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32822"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32555"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32873"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32693"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32886"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32810"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32418"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32496"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32929"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32777"/>
            <criterion comment="firefox is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32896"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32722"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32906"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32905"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32925"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32624"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10744" version="5" class="vulnerability">
      <metadata>
        <title>The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted (aka S_DEAD) directory, which allows local users to cause a denial of service ("overflow" of the UBIFS orphan area) via a series of attempted file creations within deleted directories.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3275" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3275"/>
        <description>The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted (aka S_DEAD) directory, which allows local users to cause a denial of service ("overflow" of the UBIFS orphan area) via a series of attempted file creations within deleted directories.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:24.921-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:07.241-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:30.386-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10744 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:14.174-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:17.596-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37931"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37846"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37817"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37663"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37799"/>
            <criterion comment="kernel is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37028"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37885"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37981"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37117"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37830"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37968"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37984"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37633"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37352"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:38043"/>
            <criterion comment="kernel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37989"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37908"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37748"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37825"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:38002"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37589"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37288"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37600"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37692"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37104"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37681"/>
            <criterion comment="kernel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37688"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37710"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37698"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37703"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37665"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37649"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10743" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unknown vectors related to the JavaScript engine.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2799" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2799"/>
        <description>Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unknown vectors related to the JavaScript engine.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:20.309-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:06.618-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:29.718-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10743 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:32.304-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:16.729-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37286"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37033"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37126"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37105"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37271"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37279"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37060"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37189"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:36476"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:36916"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37236"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37192"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-14.el4" test_ref="oval:org.mitre.oval:tst:36999"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36886"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37331"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36365"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.19.el4" test_ref="oval:org.mitre.oval:tst:37174"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37226"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36766"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37320"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36826"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37274"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-17.el5" test_ref="oval:org.mitre.oval:tst:37107"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:37351"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.16-1.el5" test_ref="oval:org.mitre.oval:tst:37363"/>
            <criterion comment="xulrunner is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:36984"/>
            <criterion comment="devhelp is earlier than 0:0.12-17.el5" test_ref="oval:org.mitre.oval:tst:37234"/>
            <criterion comment="yelp is earlier than 0:2.16.0-19.el5" test_ref="oval:org.mitre.oval:tst:37291"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:36436"/>
            <criterion comment="firefox is earlier than 0:3.0-2.el5" test_ref="oval:org.mitre.oval:tst:36814"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10742" version="5" class="vulnerability">
      <metadata>
        <title>The die_if_kernel function in arch/ia64/kernel/unaligned.c in Linux kernel 2.6.x before 2.6.15.6, possibly when compiled with certain versions of gcc, has the "noreturn" attribute set, which allows local users to cause a denial of service by causing user faults on Itanium systems.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0742" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0742"/>
        <description>The die_if_kernel function in arch/ia64/kernel/unaligned.c in Linux kernel 2.6.x before 2.6.15.6, possibly when compiled with certain versions of gcc, has the "noreturn" attribute set, which allows local users to cause a denial of service by causing user faults on Itanium systems.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:25.151-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:06.209-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:29.266-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10742 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:29:38.275-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:16.177-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32158"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32589"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32704"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32562"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32078"/>
            <criterion comment="kernel is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32513"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32231"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32097"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32708"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32335"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32833"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32825"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32836"/>
            <criterion comment="kernel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32736"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:31931"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32361"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32793"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32795"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10741" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a crafted argument, aka Bug Id 6872357.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3869" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3869"/>
        <description>Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a crafted argument, aka Bug Id 6872357.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:00.280-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:05.929-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:28.910-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10741 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:34.883-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:15.735-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:38878"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39616"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39115"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39531"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39655"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10740" version="5" class="vulnerability">
      <metadata>
        <title>The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence DTLS handshake message, related to a "fragment bug."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1387" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1387"/>
        <description>The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence DTLS handshake message, related to a "fragment bug."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:42.326-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:05.718-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:28.688-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10740 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:47:14.608-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:15.416-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="openssl-perl is earlier than 0:0.9.8e-12.el5" test_ref="oval:org.mitre.oval:tst:39059"/>
          <criterion comment="openssl-devel is earlier than 0:0.9.8e-12.el5" test_ref="oval:org.mitre.oval:tst:38295"/>
          <criterion comment="openssl is earlier than 0:0.9.8e-12.el5" test_ref="oval:org.mitre.oval:tst:38660"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1074" version="1" class="vulnerability">
      <metadata>
        <title>Perl Format String Integer Overflow Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 10</platform>
          <product>Perl</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3962" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3962"/>
        <description>Integer overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap and leads to a buffer overflow, as demonstrated using format string vulnerabilities in Perl applications.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-03-02T02:05:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-03-09T12:19:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-04-06T06:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert ID 102192 criteria.">
          <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:2459"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Patch 119985-02 or later installed (SPARC-10)" negate="true" test_ref="oval:org.mitre.oval:tst:1197"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert ID 102192 criteria.">
          <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:2459"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Patch 122082-01 or later installed (x86-10)" negate="true" test_ref="oval:org.mitre.oval:tst:1196"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10739" version="5" class="vulnerability">
      <metadata>
        <title>Dovecot before 1.0.11, when configured to use mail_extra_groups to allow Dovecot to create dotlocks in /var/mail, might allow local users to read sensitive mail files for other users, or modify files or directories that are writable by group, via a symlink attack.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1199" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1199"/>
        <description>Dovecot before 1.0.11, when configured to use mail_extra_groups to allow Dovecot to create dotlocks in /var/mail, might allow local users to read sensitive mail files for other users, or modify files or directories that are writable by group, via a symlink attack.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:57.657-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:05.396-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:28.490-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10739 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:47:17.652-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:15.128-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="dovecot is earlier than 0:1.0.7-2.el5" test_ref="oval:org.mitre.oval:tst:36019"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10738" version="5" class="vulnerability">
      <metadata>
        <title>The connect method in lib/net/http.rb in the (1) Net::HTTP and (2) Net::HTTPS libraries in Ruby 1.8.5 and 1.8.6 does not verify that the commonName (CN) field in a server certificate matches the domain name in an HTTPS request, which makes it easier for remote attackers to intercept SSL transmissions via a man-in-the-middle attack or spoofed web site.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5162" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5162"/>
        <description>The connect method in lib/net/http.rb in the (1) Net::HTTP and (2) Net::HTTPS libraries in Ruby 1.8.5 and 1.8.6 does not verify that the commonName (CN) field in a server certificate matches the domain name in an HTTPS request, which makes it easier for remote attackers to intercept SSL transmissions via a man-in-the-middle attack or spoofed web site.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:05.214-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:04.959-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:28.084-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10738 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:53.403-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:14.521-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.8.1-7.EL4.8.1" test_ref="oval:org.mitre.oval:tst:35449"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.1-7.EL4.8.1" test_ref="oval:org.mitre.oval:tst:35355"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.1-7.EL4.8.1" test_ref="oval:org.mitre.oval:tst:35320"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.1-7.EL4.8.1" test_ref="oval:org.mitre.oval:tst:35295"/>
            <criterion comment="ruby is earlier than 0:1.8.1-7.EL4.8.1" test_ref="oval:org.mitre.oval:tst:35444"/>
            <criterion comment="irb is earlier than 0:1.8.1-7.EL4.8.1" test_ref="oval:org.mitre.oval:tst:35440"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.1-7.EL4.8.1" test_ref="oval:org.mitre.oval:tst:34852"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-ri is earlier than 0:1.8.5-5.el5_1.1" test_ref="oval:org.mitre.oval:tst:35269"/>
            <criterion comment="ruby-mode is earlier than 0:1.8.5-5.el5_1.1" test_ref="oval:org.mitre.oval:tst:35003"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.5-5.el5_1.1" test_ref="oval:org.mitre.oval:tst:34553"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.5-5.el5_1.1" test_ref="oval:org.mitre.oval:tst:35433"/>
            <criterion comment="ruby is earlier than 0:1.8.5-5.el5_1.1" test_ref="oval:org.mitre.oval:tst:34894"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.5-5.el5_1.1" test_ref="oval:org.mitre.oval:tst:35159"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.5-5.el5_1.1" test_ref="oval:org.mitre.oval:tst:35370"/>
            <criterion comment="ruby-irb is earlier than 0:1.8.5-5.el5_1.1" test_ref="oval:org.mitre.oval:tst:35472"/>
            <criterion comment="ruby-rdoc is earlier than 0:1.8.5-5.el5_1.1" test_ref="oval:org.mitre.oval:tst:35510"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10737" version="5" class="vulnerability">
      <metadata>
        <title>The (1) post and (2) trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability than CVE-2004-0108.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0107" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0107"/>
        <description>The (1) post and (2) trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability than CVE-2004-0108.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:38.695-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:04.777-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:27.835-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10737 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:24.485-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:14.244-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="sysstat is earlier than 0:4.0.7-4.EL3.2" test_ref="oval:org.mitre.oval:tst:30549"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10736" version="5" class="vulnerability">
      <metadata>
        <title>The Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast group address, which causes the target to stop sending reports to the router and effectively disconnect the group from the network.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-2185" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2185"/>
        <description>The Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast group address, which causes the target to stop sending reports to the router and effectively disconnect the group from the network.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:01.337-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:04.390-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:27.416-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10736 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:09.127-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:13.642-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32525"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32366"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32381"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32215"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32464"/>
            <criterion comment="kernel is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32288"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:31978"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32438"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32070"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32415"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32137"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32528"/>
            <criterion comment="kernel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32205"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:31866"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32446"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32450"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10735" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1182"/>
        <description>Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:40.811-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:03.737-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:26.745-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10735 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:55.875-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:12.791-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="xpdf is earlier than 1:2.02-14.el3" test_ref="oval:org.mitre.oval:tst:38322"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40095"/>
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-13.el4" test_ref="oval:org.mitre.oval:tst:38126"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:39528"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-13.el4" test_ref="oval:org.mitre.oval:tst:38230"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40473"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38481"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40316"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-7.7.2.el4_7.4" test_ref="oval:org.mitre.oval:tst:38436"/>
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38145"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40209"/>
            <criterion comment="xpdf is earlier than 1:3.00-20.el4" test_ref="oval:org.mitre.oval:tst:38649"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40364"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40077"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38607"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.5.4-12.el5_3" test_ref="oval:org.mitre.oval:tst:38618"/>
            <criterion comment="cups-lpd is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38471"/>
            <criterion comment="tetex-dvips is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40312"/>
            <criterion comment="kdegraphics is earlier than 7:3.5.4-12.el5_3" test_ref="oval:org.mitre.oval:tst:38271"/>
            <criterion comment="poppler is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38760"/>
            <criterion comment="tetex-fonts is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40122"/>
            <criterion comment="cups-libs is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38541"/>
            <criterion comment="tetex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40413"/>
            <criterion comment="tetex-doc is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40398"/>
            <criterion comment="poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38500"/>
            <criterion comment="tetex-latex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40444"/>
            <criterion comment="poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38512"/>
            <criterion comment="cups-devel is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:37935"/>
            <criterion comment="tetex-afm is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40008"/>
            <criterion comment="tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:39920"/>
            <criterion comment="cups is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38334"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10734" version="3" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows remote attackers to obtain sensitive information by using an applet to read information from another applet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3110" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3110"/>
        <description>Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows remote attackers to obtain sensitive information by using an applet to read information from another applet.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:40.151-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:03.507-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:26.485-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
        <criteria operator="OR">
          <criterion comment="java-1.6.0-sun-devel is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36649"/>
          <criterion comment="java-1.6.0-sun is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37229"/>
          <criterion comment="java-1.6.0-sun-src is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37035"/>
          <criterion comment="java-1.6.0-sun-demo is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37509"/>
          <criterion comment="java-1.6.0-sun-plugin is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37441"/>
          <criterion comment="java-1.6.0-sun-jdbc is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37490"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10733" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0109" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0109"/>
        <description>Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:19.596-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:03.223-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:26.173-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10733 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:49.795-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:12.412-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-9.0.3.EL" test_ref="oval:org.mitre.oval:tst:30491"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-9.0.3.EL" test_ref="oval:org.mitre.oval:tst:30516"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-9.0.3.EL" test_ref="oval:org.mitre.oval:tst:30538"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-9.0.3.EL" test_ref="oval:org.mitre.oval:tst:30296"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-9.0.3.EL" test_ref="oval:org.mitre.oval:tst:30632"/>
          <criterion comment="kernel is earlier than 0:2.4.21-9.0.3.EL" test_ref="oval:org.mitre.oval:tst:30666"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-9.0.3.EL" test_ref="oval:org.mitre.oval:tst:30053"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-9.0.3.EL" test_ref="oval:org.mitre.oval:tst:30608"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-9.0.3.EL" test_ref="oval:org.mitre.oval:tst:30645"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10732" version="5" class="vulnerability">
      <metadata>
        <title>The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of length 4.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1280" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1280"/>
        <description>The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of length 4.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:41.222-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:02.610-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:25.855-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10732 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:10.693-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:11.838-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libpcap is earlier than 14:0.7.2-7.E3.5" test_ref="oval:org.mitre.oval:tst:31652"/>
            <criterion comment="tcpdump is earlier than 14:3.7.2-7.E3.5" test_ref="oval:org.mitre.oval:tst:31836"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="arpwatch is earlier than 14:2.1a13-9.RHEL4" test_ref="oval:org.mitre.oval:tst:31864"/>
            <criterion comment="libpcap is earlier than 14:0.8.3-9.RHEL4" test_ref="oval:org.mitre.oval:tst:30922"/>
            <criterion comment="tcpdump is earlier than 14:3.8.2-9.RHEL4" test_ref="oval:org.mitre.oval:tst:31788"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10731" version="5" class="vulnerability">
      <metadata>
        <title>The mq_open system call in Linux kernel 2.6.9, in certain situations, can decrement a counter twice ("double decrement") as a result of multiple calls to the mntput function when the dentry_open function call fails, which allows local users to cause a denial of service (panic) via unspecified attack vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3356" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3356"/>
        <description>The mq_open system call in Linux kernel 2.6.9, in certain situations, can decrement a counter twice ("double decrement") as a result of multiple calls to the mntput function when the dentry_open function call fails, which allows local users to cause a denial of service (panic) via unspecified attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:45.747-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:02.355-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:25.572-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10731 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:44.743-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:11.464-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32415"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32137"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32528"/>
          <criterion comment="kernel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32205"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:31866"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32446"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32450"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10730" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a "dangling pointer vulnerability."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3077" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3077"/>
        <description>Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a "dangling pointer vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:08.379-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:01.734-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:24.915-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10730 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:14.996-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:10.667-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39378"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39359"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39036"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39270"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39397"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39118"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:38444"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39284"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:38466"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39389"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nspr is earlier than 0:4.7.5-1.el4_8" test_ref="oval:org.mitre.oval:tst:39088"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:39081"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-25.el4" test_ref="oval:org.mitre.oval:tst:40299"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.5-1.el4_8" test_ref="oval:org.mitre.oval:tst:39351"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:38976"/>
            <criterion comment="firefox is earlier than 0:3.0.14-1.el4" test_ref="oval:org.mitre.oval:tst:39195"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:39181"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:39320"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:39364"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:39293"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39208"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39001"/>
            <criterion comment="nspr is earlier than 0:4.7.5-1.el5_4" test_ref="oval:org.mitre.oval:tst:39223"/>
            <criterion comment="firefox is earlier than 0:3.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39097"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.24-2.el5_4" test_ref="oval:org.mitre.oval:tst:40249"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.5-1.el5_4" test_ref="oval:org.mitre.oval:tst:39150"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39206"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1073" version="5" class="vulnerability">
      <metadata>
        <title>RHE4 Firefox External App Code Acceptance Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2267" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2267"/>
        <description>Firefox before 1.0.5 allows remote attackers to steal information and possibly execute arbitrary code by using standalone applications such as Flash and QuickTime to open a javascript: URL, which is run in the context of the previous page, and may lead to code execution if the standalone application loads a privileged chrome: URL.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-15T04:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-08-19T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11366 - Updated CPE reference, updated regular expression" date="2011-02-17T13:29:00.547-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2011-02-17T13:31:10.150-05:00">INTERIM</status_change>
            <status_change date="2011-03-07T04:00:03.021-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11366 - Corrected - right version for brlapi and brlapi-devel as specified by RHSA-2010:0181-5" date="2013-03-18T12:26:00.995-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-03-18T12:31:14.104-04:00">INTERIM</status_change>
            <status_change date="2013-04-08T04:00:05.418-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="mozilla RPM is earlier than 37:1.7.10-1.4.1" negate="false" test_ref="oval:org.mitre.oval:tst:2651"/>
          <criterion comment="Red Hat Enterprise 4 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2652"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/mozilla is executable" negate="false" test_ref="oval:org.mitre.oval:tst:2650"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10729" version="5" class="vulnerability">
      <metadata>
        <title>MySQL before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows remote authenticated users to create or access a database when the database name differs only in case from a database for which they have permissions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4226" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4226"/>
        <description>MySQL before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows remote authenticated users to create or access a database when the database name differs only in case from a database for which they have permissions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:45.707-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:01.509-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:24.667-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10729 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:21.392-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:10.329-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mysql is earlier than 0:4.1.20-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33592"/>
          <criterion comment="mysql-devel is earlier than 0:4.1.20-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33842"/>
          <criterion comment="mysql-bench is earlier than 0:4.1.20-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33840"/>
          <criterion comment="mysql-server is earlier than 0:4.1.20-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33576"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10728" version="5" class="vulnerability">
      <metadata>
        <title>Multiple race conditions in the terminal layer in Linux 2.4.x, and 2.6.x before 2.6.9, allow (1) local users to obtain portions of kernel data via a TIOCSETD ioctl call to a terminal interface that is being accessed by another thread, or (2) remote attackers to cause a denial of service (panic) by switching from console to PPP line discipline, then quickly sending data that is received during the switch.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0814"/>
        <description>Multiple race conditions in the terminal layer in Linux 2.4.x, and 2.6.x before 2.6.9, allow (1) local users to obtain portions of kernel data via a TIOCSETD ioctl call to a terminal interface that is being accessed by another thread, or (2) remote attackers to cause a denial of service (panic) by switching from console to PPP line discipline, then quickly sending data that is received during the switch.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:09.952-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:01.227-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:24.347-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10728 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:29.656-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:09.872-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31148"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31473"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31178"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31282"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31565"/>
          <criterion comment="kernel is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31562"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31582"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:30730"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31534"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10727" version="5" class="vulnerability">
      <metadata>
        <title>The Free Software Foundation (FSF) Berkeley DB NSS module (aka libnss-db) 2.2.3pre1 reads the DB_CONFIG file in the current working directory, which allows local users to obtain sensitive information via a symlink attack involving a setgid or setuid application that uses this module.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0826" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0826"/>
        <description>The Free Software Foundation (FSF) Berkeley DB NSS module (aka libnss-db) 2.2.3pre1 reads the DB_CONFIG file in the current working directory, which allows local users to obtain sensitive information via a symlink attack involving a setgid or setuid application that uses this module.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:58.631-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:05:00.989-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:24.142-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10727 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:47:03.210-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:09.575-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="nss_db is earlier than 0:2.2-35.4.el5_5" test_ref="oval:org.mitre.oval:tst:39991"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10726" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via unspecified records in a crafted Word document, related to "table parsing."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0201" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0201"/>
        <description>Heap-based buffer overflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via unspecified records in a crafted Word document, related to "table parsing."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:57.420-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:58.892-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:21.873-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10726 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:30.903-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:07.249-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-44.2.0.EL3" test_ref="oval:org.mitre.oval:tst:39319"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.2-44.2.0.EL3" test_ref="oval:org.mitre.oval:tst:38381"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-44.2.0.EL3" test_ref="oval:org.mitre.oval:tst:39146"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39278"/>
            <criterion comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39127"/>
            <criterion comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39215"/>
            <criterion comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39334"/>
            <criterion comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39040"/>
            <criterion comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39365"/>
            <criterion comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39261"/>
            <criterion comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38776"/>
            <criterion comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39318"/>
            <criterion comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39214"/>
            <criterion comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38952"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.5-10.6.0.7.EL4.1" test_ref="oval:org.mitre.oval:tst:39352"/>
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.7.EL4.1" test_ref="oval:org.mitre.oval:tst:39055"/>
            <criterion comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39306"/>
            <criterion comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39184"/>
            <criterion comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38980"/>
            <criterion comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39008"/>
            <criterion comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38712"/>
            <criterion comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39379"/>
            <criterion comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39313"/>
            <criterion comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39050"/>
            <criterion comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39230"/>
            <criterion comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39028"/>
            <criterion comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38893"/>
            <criterion comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39235"/>
            <criterion comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38741"/>
            <criterion comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38930"/>
            <criterion comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38961"/>
            <criterion comment="openoffice.org2 is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39333"/>
            <criterion comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39110"/>
            <criterion comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39202"/>
            <criterion comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38885"/>
            <criterion comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38990"/>
            <criterion comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38790"/>
            <criterion comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39268"/>
            <criterion comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39063"/>
            <criterion comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39272"/>
            <criterion comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38888"/>
            <criterion comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39226"/>
            <criterion comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39023"/>
            <criterion comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39288"/>
            <criterion comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39224"/>
            <criterion comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39322"/>
            <criterion comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39338"/>
            <criterion comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39087"/>
            <criterion comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38927"/>
            <criterion comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39243"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.7.EL4.1" test_ref="oval:org.mitre.oval:tst:39262"/>
            <criterion comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39157"/>
            <criterion comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39102"/>
            <criterion comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39308"/>
            <criterion comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.7.EL4.1" test_ref="oval:org.mitre.oval:tst:39367"/>
            <criterion comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39377"/>
            <criterion comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39015"/>
            <criterion comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39232"/>
            <criterion comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38808"/>
            <criterion comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39238"/>
            <criterion comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39358"/>
            <criterion comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39172"/>
            <criterion comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39092"/>
            <criterion comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39190"/>
            <criterion comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:39263"/>
            <criterion comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:org.mitre.oval:tst:38740"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-langpack-sk_SK is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38936"/>
            <criterion comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38612"/>
            <criterion comment="openoffice.org-langpack-pa_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39210"/>
            <criterion comment="openoffice.org-langpack-hi_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38896"/>
            <criterion comment="openoffice.org-langpack-et_EE is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39200"/>
            <criterion comment="openoffice.org-langpack-kn_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38586"/>
            <criterion comment="openoffice.org is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39248"/>
            <criterion comment="openoffice.org-langpack-zh_TW is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39107"/>
            <criterion comment="openoffice.org-writer is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39229"/>
            <criterion comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39256"/>
            <criterion comment="openoffice.org-langpack-ga_IE is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39275"/>
            <criterion comment="openoffice.org-langpack-ta_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38959"/>
            <criterion comment="openoffice.org-langpack-ko_KR is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39312"/>
            <criterion comment="openoffice.org-langpack-or_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39074"/>
            <criterion comment="openoffice.org-langpack-da_DK is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39052"/>
            <criterion comment="openoffice.org-langpack-sr_CS is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38940"/>
            <criterion comment="openoffice.org-langpack-pl_PL is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39225"/>
            <criterion comment="openoffice.org-langpack-fr is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39073"/>
            <criterion comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38906"/>
            <criterion comment="openoffice.org-javafilter is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38603"/>
            <criterion comment="openoffice.org-langpack-as_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39022"/>
            <criterion comment="openoffice.org-testtools is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38884"/>
            <criterion comment="openoffice.org-langpack-hr_HR is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38711"/>
            <criterion comment="openoffice.org-langpack-de is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39196"/>
            <criterion comment="openoffice.org-emailmerge is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39212"/>
            <criterion comment="openoffice.org-xsltfilter is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39138"/>
            <criterion comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38979"/>
            <criterion comment="openoffice.org-langpack-te_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39282"/>
            <criterion comment="openoffice.org-langpack-sv is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39231"/>
            <criterion comment="openoffice.org-base is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38548"/>
            <criterion comment="openoffice.org-langpack-ca_ES is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39258"/>
            <criterion comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39076"/>
            <criterion comment="openoffice.org-core is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38582"/>
            <criterion comment="openoffice.org-langpack-nl is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38951"/>
            <criterion comment="openoffice.org-langpack-ur is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38975"/>
            <criterion comment="openoffice.org-langpack-nn_NO is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39070"/>
            <criterion comment="openoffice.org-langpack-ar is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38945"/>
            <criterion comment="openoffice.org-langpack-ja_JP is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39010"/>
            <criterion comment="openoffice.org-langpack-gu_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38852"/>
            <criterion comment="openoffice.org-langpack-tr_TR is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39034"/>
            <criterion comment="openoffice.org-langpack-eu_ES is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39279"/>
            <criterion comment="openoffice.org-langpack-fi_FI is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39029"/>
            <criterion comment="openoffice.org-graphicfilter is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39303"/>
            <criterion comment="openoffice.org-pyuno is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39173"/>
            <criterion comment="openoffice.org-langpack-ml_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39086"/>
            <criterion comment="openoffice.org-langpack-gl_ES is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39148"/>
            <criterion comment="openoffice.org-sdk-doc is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39218"/>
            <criterion comment="openoffice.org-langpack-zh_CN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38453"/>
            <criterion comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39191"/>
            <criterion comment="openoffice.org-langpack-it is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38977"/>
            <criterion comment="openoffice.org-sdk is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39140"/>
            <criterion comment="openoffice.org-langpack-es is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38870"/>
            <criterion comment="openoffice.org-langpack-nb_NO is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38717"/>
            <criterion comment="openoffice.org-langpack-sl_SI is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39060"/>
            <criterion comment="openoffice.org-draw is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39287"/>
            <criterion comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39291"/>
            <criterion comment="openoffice.org-langpack-ms_MY is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39038"/>
            <criterion comment="openoffice.org-langpack-el_GR is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38874"/>
            <criterion comment="openoffice.org-langpack-hu_HU is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39067"/>
            <criterion comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38997"/>
            <criterion comment="openoffice.org-langpack-bn is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39154"/>
            <criterion comment="openoffice.org-langpack-he_IL is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39113"/>
            <criterion comment="openoffice.org-langpack-pt_PT is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39241"/>
            <criterion comment="openoffice.org-langpack-lt_LT is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38807"/>
            <criterion comment="openoffice.org-langpack-af_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39085"/>
            <criterion comment="openoffice.org-langpack-bg_BG is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39165"/>
            <criterion comment="openoffice.org-calc is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38745"/>
            <criterion comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38565"/>
            <criterion comment="openoffice.org-langpack-cy_GB is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39311"/>
            <criterion comment="openoffice.org-langpack-mr_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39292"/>
            <criterion comment="openoffice.org-headless is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39144"/>
            <criterion comment="openoffice.org-langpack-th_TH is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39161"/>
            <criterion comment="openoffice.org-langpack-pt_BR is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38378"/>
            <criterion comment="openoffice.org-langpack-ru is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39304"/>
            <criterion comment="openoffice.org-math is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:38758"/>
            <criterion comment="openoffice.org-impress is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39315"/>
            <criterion comment="openoffice.org-langpack-st_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39185"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10725" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrary code via an instant message (IM) with a large URL.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1261" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1261"/>
        <description>Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrary code via an instant message (IM) with a large URL.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:03.923-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:58.605-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:21.583-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10725 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:06.105-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:06.752-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gaim is earlier than 1:1.2.1-6.el3" test_ref="oval:org.mitre.oval:tst:31853"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gaim is earlier than 1:1.2.1-6.el4" test_ref="oval:org.mitre.oval:tst:31563"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10723" version="5" class="vulnerability">
      <metadata>
        <title>script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script command.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-1494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1494"/>
        <description>script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script command.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:12.758-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:57.759-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:21.001-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10723 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:51.417-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:06.377-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="util-linux is earlier than 0:2.11y-31.11" test_ref="oval:org.mitre.oval:tst:32222"/>
            <criterion comment="mount is earlier than 0:2.11y-31.11" test_ref="oval:org.mitre.oval:tst:31332"/>
            <criterion comment="losetup is earlier than 0:2.11y-31.11" test_ref="oval:org.mitre.oval:tst:32224"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="util-linux is earlier than 0:2.12a-16.EL4.12" test_ref="oval:org.mitre.oval:tst:31892"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10722" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handlers enabled, allows remote attackers to execute arbitrary code via a long password ("pass" variable).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0541" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0541"/>
        <description>Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handlers enabled, allows remote attackers to execute arbitrary code via a long password ("pass" variable).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:58.222-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:57.574-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:20.799-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10722 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:49.782-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:06.097-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="squid is earlier than 7:2.5.STABLE3-6.3E" test_ref="oval:org.mitre.oval:tst:30770"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10721" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the 32-bit and 64-bit emulation in the Linux kernel 2.6.9, 2.6.18, and probably other versions allows local users to read uninitialized memory via unknown vectors involving a crafted binary.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0598" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0598"/>
        <description>Unspecified vulnerability in the 32-bit and 64-bit emulation in the Linux kernel 2.6.9, 2.6.18, and probably other versions allows local users to read uninitialized memory via unknown vectors involving a crafted binary.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:40.885-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:56.873-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:20.142-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10721 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:52.607-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:04.765-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37931"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37846"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37817"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37663"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37799"/>
            <criterion comment="kernel is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37028"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37885"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37981"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-58.EL" test_ref="oval:org.mitre.oval:tst:37117"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36972"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36412"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36840"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36741"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36936"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36433"/>
            <criterion comment="kernel is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36961"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36949"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36894"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:36367"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-67.0.20.EL" test_ref="oval:org.mitre.oval:tst:37020"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:36992"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:37039"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:36460"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:36799"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:37005"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:37063"/>
            <criterion comment="kernel is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:36981"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:36704"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:36937"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:36703"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:36996"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-92.1.6.el5" test_ref="oval:org.mitre.oval:tst:36869"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10720" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the glibtop_get_proc_map_s function in libgtop before 2.14.6 (libgtop2) allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a process with a long filename that is mapped in its address space, which triggers the overflow in gnome-system-monitor.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0235" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0235"/>
        <description>Stack-based buffer overflow in the glibtop_get_proc_map_s function in libgtop before 2.14.6 (libgtop2) allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a process with a long filename that is mapped in its address space, which triggers the overflow in gnome-system-monitor.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:26.642-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:56.660-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:19.889-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10720 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:32.456-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:04.438-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="libgtop2 is earlier than 0:2.8.0-1.0.2" test_ref="oval:org.mitre.oval:tst:34547"/>
          <criterion comment="libgtop2-devel is earlier than 0:2.8.0-1.0.2" test_ref="oval:org.mitre.oval:tst:34794"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1072" version="7" class="vulnerability">
      <metadata>
        <title>DCOM RPC Object Identity Windows XP Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Remote Procedure Call (RPC)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0124" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0124"/>
        <description>The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via an "alter context" call that contains additional data, aka the "Object Identity Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-20T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2004-09-13T11:34:00.000-04:00" comment="cmp-66 added">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2004-09-15T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-29T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2656" date="2010-11-29T16:12:00.873-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:13:02.906-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:08.178-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:12.912-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:16.742-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="the version of comsvcs.dll is less than 2001.12.4414.53" negate="false" test_ref="oval:org.mitre.oval:tst:1198"/>
        <criterion comment="the patch kb828741 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1499"/>
        <criteria operator="AND" comment="Windows XP (sp1 or earlier) is installed">
          <criterion comment="Windows XP is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2838"/>
          <criterion comment="Win2K/XP/2003 service pack 2 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2837"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10719" version="5" class="vulnerability">
      <metadata>
        <title>The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6206" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6206"/>
        <description>The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:46.149-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:55.945-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:19.207-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10719 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:26.606-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:02.947-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:35915"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:35794"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36513"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36264"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36161"/>
            <criterion comment="kernel is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36518"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36597"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36612"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36171"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:36090"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35525"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35832"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35126"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35901"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:36007"/>
            <criterion comment="kernel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35982"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:36072"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:36041"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35364"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-67.0.4.EL" test_ref="oval:org.mitre.oval:tst:35662"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36030"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:35766"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36138"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36062"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:35611"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:35990"/>
            <criterion comment="kernel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:35969"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36085"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36026"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36084"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36097"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:36035"/>
            <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-53.1.6.el5" test_ref="oval:org.mitre.oval:tst:35648"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10718" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related to the font escape sequence.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4306" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4306"/>
        <description>Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related to the font escape sequence.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:23.144-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:55.681-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:18.771-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10718 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:29.135-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:02.346-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="enscript is earlier than 0:1.6.1-24.7" test_ref="oval:org.mitre.oval:tst:37704"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="enscript is earlier than 0:1.6.1-33.el4_7.1" test_ref="oval:org.mitre.oval:tst:37804"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="enscript is earlier than 0:1.6.4-4.1.1.el5_2" test_ref="oval:org.mitre.oval:tst:38101"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10717" version="5" class="vulnerability">
      <metadata>
        <title>Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name, a variant of CVE-2005-0397, and as demonstrated using the convert program.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0082" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0082"/>
        <description>Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name, a variant of CVE-2005-0397, and as demonstrated using the convert program.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:22.164-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:55.354-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:18.412-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10717 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:50.865-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:01.833-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:5.5.6-18" test_ref="oval:org.mitre.oval:tst:32312"/>
            <criterion comment="ImageMagick is earlier than 0:5.5.6-18" test_ref="oval:org.mitre.oval:tst:32501"/>
            <criterion comment="ImageMagick-perl is earlier than 0:5.5.6-18" test_ref="oval:org.mitre.oval:tst:32517"/>
            <criterion comment="ImageMagick-devel is earlier than 0:5.5.6-18" test_ref="oval:org.mitre.oval:tst:32118"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:5.5.6-18" test_ref="oval:org.mitre.oval:tst:32474"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-14" test_ref="oval:org.mitre.oval:tst:32085"/>
            <criterion comment="ImageMagick is earlier than 0:6.0.7.1-14" test_ref="oval:org.mitre.oval:tst:32268"/>
            <criterion comment="ImageMagick-perl is earlier than 0:6.0.7.1-14" test_ref="oval:org.mitre.oval:tst:32445"/>
            <criterion comment="ImageMagick-devel is earlier than 0:6.0.7.1-14" test_ref="oval:org.mitre.oval:tst:32522"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:6.0.7.1-14" test_ref="oval:org.mitre.oval:tst:32456"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10716" version="5" class="vulnerability">
      <metadata>
        <title>Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0783" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0783"/>
        <description>Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:48.187-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:54.839-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:18.088-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10716 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:16.833-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:01.249-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38108"/>
          <criterion comment="tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:37963"/>
          <criterion comment="tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38333"/>
          <criterion comment="tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38944"/>
          <criterion comment="tomcat5-webapps is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38805"/>
          <criterion comment="tomcat5 is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38688"/>
          <criterion comment="tomcat5-jasper is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38891"/>
          <criterion comment="tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38239"/>
          <criterion comment="tomcat5-server-lib is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38824"/>
          <criterion comment="tomcat5-common-lib is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38955"/>
          <criterion comment="tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38428"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10715" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the make_http_soap_request function in PHP before 5.2.2 has unknown impact and remote attack vectors, possibly related to "/" (slash) characters.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2510"/>
        <description>Buffer overflow in the make_http_soap_request function in PHP before 5.2.2 has unknown impact and remote attack vectors, possibly related to "/" (slash) characters.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:45.349-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:54.424-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:17.603-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10715 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:39.376-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:00.681-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="php-bcmath is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34211"/>
          <criterion comment="php-soap is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34207"/>
          <criterion comment="php-common is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34065"/>
          <criterion comment="php-mysql is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34113"/>
          <criterion comment="php-imap is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34217"/>
          <criterion comment="php-gd is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34013"/>
          <criterion comment="php is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34180"/>
          <criterion comment="php-mbstring is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:33453"/>
          <criterion comment="php-pgsql is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34056"/>
          <criterion comment="php-xml is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:33924"/>
          <criterion comment="php-ldap is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34226"/>
          <criterion comment="php-odbc is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:33397"/>
          <criterion comment="php-ncurses is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34129"/>
          <criterion comment="php-devel is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34250"/>
          <criterion comment="php-xmlrpc is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:33993"/>
          <criterion comment="php-snmp is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34061"/>
          <criterion comment="php-pdo is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34151"/>
          <criterion comment="php-dba is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34139"/>
          <criterion comment="php-cli is earlier than 0:5.1.6-12.el5" test_ref="oval:org.mitre.oval:tst:34097"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10714" version="5" class="vulnerability">
      <metadata>
        <title>Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify the FPH owner, which allows local users to read register values of other processes by setting the MFH bit.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0565" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0565"/>
        <description>Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify the FPH owner, which allows local users to read register values of other processes by setting the MFH bit.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:47.674-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:54.126-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:17.300-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10714 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:46.705-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:08:00.317-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:31101"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30944"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30205"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30752"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30999"/>
          <criterion comment="kernel is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30940"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:31177"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30903"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30786"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10713" version="5" class="vulnerability">
      <metadata>
        <title>Multiple format string vulnerabilities in the (1) DHCP and (2) ANSI A dissectors in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1463" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1463"/>
        <description>Multiple format string vulnerabilities in the (1) DHCP and (2) ANSI A dissectors in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:05.421-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:53.843-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:16.952-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10713 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:51.304-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:59.887-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31458"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31546"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31674"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31865"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10712" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0.5 and Mozilla before 1.7.9 allows a child frame to call top.focus and other methods in a parent frame, even when the parent is in a different domain, which violates the same origin policy and allows remote attackers to steal sensitive information such as cookies and passwords from web sites whose child frames do not verify that they are in the same domain as their parents.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2266" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2266"/>
        <description>Firefox before 1.0.5 and Mozilla before 1.7.9 allows a child frame to call top.focus and other methods in a parent frame, even when the parent is in a different domain, which violates the same origin policy and allows remote attackers to steal sensitive information such as cookies and passwords from web sites whose child frames do not verify that they are in the same domain as their parents.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:19.004-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:53.350-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:16.435-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10712 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:38.410-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:58.815-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32142"/>
            <criterion comment="mozilla is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32131"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32154"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32001"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32171"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32162"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31782"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32041"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32004"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31353"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32120"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.6" test_ref="oval:org.mitre.oval:tst:31633"/>
            <criterion comment="mozilla is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31837"/>
            <criterion comment="thunderbird is earlier than 0:1.0.6-1.4.1" test_ref="oval:org.mitre.oval:tst:32113"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32100"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31821"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31904"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.6" test_ref="oval:org.mitre.oval:tst:31814"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31951"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31554"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32149"/>
            <criterion comment="firefox is earlier than 0:1.0.6-1.4.1" test_ref="oval:org.mitre.oval:tst:32167"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31998"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32061"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10711" version="5" class="vulnerability">
      <metadata>
        <title>Multiple vulnerabilities in the JavaScript engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors that trigger memory corruption.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2868" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2868"/>
        <description>Multiple vulnerabilities in the JavaScript engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors that trigger memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:42.093-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:52.718-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:15.673-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10711 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:36.251-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:57.976-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34409"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34257"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34432"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33988"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33721"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33693"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34313"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34281"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33894"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34228"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.8.el4" test_ref="oval:org.mitre.oval:tst:33625"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:33931"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:33844"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-0.1.el4" test_ref="oval:org.mitre.oval:tst:34331"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34334"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34021"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34249"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.8.el4" test_ref="oval:org.mitre.oval:tst:34293"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.1.el4" test_ref="oval:org.mitre.oval:tst:34371"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34446"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34262"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34366"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:33994"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34322"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-1.el5" test_ref="oval:org.mitre.oval:tst:34445"/>
            <criterion comment="yelp is earlier than 0:2.16.0-15.el5" test_ref="oval:org.mitre.oval:tst:33445"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-11.el5" test_ref="oval:org.mitre.oval:tst:34323"/>
            <criterion comment="devhelp is earlier than 0:0.12-11.el5" test_ref="oval:org.mitre.oval:tst:34204"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-1.el5" test_ref="oval:org.mitre.oval:tst:34162"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-1.el5" test_ref="oval:org.mitre.oval:tst:33979"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10710" version="5" class="vulnerability">
      <metadata>
        <title>CUPS 1.1.20 and earlier records authentication information for a device URI in the error_log file, which allows local users to obtain user names and passwords.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0923" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0923"/>
        <description>CUPS 1.1.20 and earlier records authentication information for a device URI in the error_log file, which allows local users to obtain user names and passwords.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:27.107-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:52.498-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:15.436-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10710 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:51.882-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:57.675-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.16" test_ref="oval:org.mitre.oval:tst:31062"/>
          <criterion comment="cups is earlier than 1:1.1.17-13.3.16" test_ref="oval:org.mitre.oval:tst:30949"/>
          <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.16" test_ref="oval:org.mitre.oval:tst:30852"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10709" version="5" class="vulnerability">
      <metadata>
        <title>Double free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key Distribution Center (KDC) library and (2) client library for MIT Kerberos 5 (krb5) 1.3.4 and earlier may allow remote attackers to execute arbitrary code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0642" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0642"/>
        <description>Double free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key Distribution Center (KDC) library and (2) client library for MIT Kerberos 5 (krb5) 1.3.4 and earlier may allow remote attackers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:49.531-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:52.263-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:15.184-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10709 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:32.967-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:57.362-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="krb5-workstation is earlier than 0:1.2.7-28" test_ref="oval:org.mitre.oval:tst:30623"/>
          <criterion comment="krb5 is earlier than 0:1.2.7-28" test_ref="oval:org.mitre.oval:tst:30237"/>
          <criterion comment="krb5-libs is earlier than 0:1.2.7-28" test_ref="oval:org.mitre.oval:tst:30764"/>
          <criterion comment="krb5-server is earlier than 0:1.2.7-28" test_ref="oval:org.mitre.oval:tst:30376"/>
          <criterion comment="krb5-devel is earlier than 0:1.2.7-28" test_ref="oval:org.mitre.oval:tst:30595"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10708" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) the SSL dissector or (2) the iSeries (OS/400) Communication trace file parser.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6114" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6114"/>
        <description>Multiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) the SSL dissector or (2) the iSeries (OS/400) Communication trace file parser.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:36.797-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:51.850-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:14.744-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10708 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:04.465-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:56.773-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-EL3.1" test_ref="oval:org.mitre.oval:tst:36111"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-EL3.1" test_ref="oval:org.mitre.oval:tst:36043"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-3.el3" test_ref="oval:org.mitre.oval:tst:35411"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-3.el3" test_ref="oval:org.mitre.oval:tst:36140"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:36051"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:35980"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35669"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35941"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:35709"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:36120"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35712"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35801"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10707" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the HTTP dissector in Wireshark (formerly Ethereal) 0.99.3 allows remote attackers to cause a denial of service (crash) via unspecified vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5468" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5468"/>
        <description>Unspecified vulnerability in the HTTP dissector in Wireshark (formerly Ethereal) 0.99.3 allows remote attackers to cause a denial of service (crash) via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:38.405-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:51.603-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:14.468-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10707 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:10.418-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:56.378-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.4-EL3.1" test_ref="oval:org.mitre.oval:tst:33205"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.4-EL3.1" test_ref="oval:org.mitre.oval:tst:33170"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.4-EL4.1" test_ref="oval:org.mitre.oval:tst:32550"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.4-EL4.1" test_ref="oval:org.mitre.oval:tst:33152"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10706" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the sctp_make_abort_user function in the SCTP implementation in Linux 2.6.x before 2.6.17.10 and 2.4.23 up to 2.4.33 allows local users to cause a denial of service (panic) and possibly gain root privileges via unknown attack vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3745" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3745"/>
        <description>Unspecified vulnerability in the sctp_make_abort_user function in the SCTP implementation in Linux 2.6.x before 2.6.17.10 and 2.4.23 up to 2.4.33 allows local users to cause a denial of service (panic) and possibly gain root privileges via unknown attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:41.564-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:51.326-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:14.162-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10706 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:02.287-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:55.945-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32576"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32814"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32958"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32801"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32865"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32880"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32747"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32200"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32838"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10705" version="5" class="vulnerability">
      <metadata>
        <title>Directory traversal vulnerability in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8, when using "flat" addons, allows remote attackers to read arbitrary Javascript, image, and stylesheet files via the chrome: URI scheme, as demonstrated by stealing session information from sessionstore.js.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0418" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0418"/>
        <description>Directory traversal vulnerability in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8, when using "flat" addons, allows remote attackers to read arbitrary Javascript, image, and stylesheet files via the chrome: URI scheme, as demonstrated by stealing session information from sessionstore.js.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:49.406-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:50.395-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:13.560-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10705 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:25.008-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:55.247-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36256"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36236"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:35996"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36279"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36046"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36052"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36034"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36284"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:35748"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:35994"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36164"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36050"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-8.el4" test_ref="oval:org.mitre.oval:tst:36202"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36193"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36093"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36053"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.10.el4" test_ref="oval:org.mitre.oval:tst:35919"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:35600"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36141"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:35397"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:35684"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36203"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-9.el5" test_ref="oval:org.mitre.oval:tst:36281"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-9.el5" test_ref="oval:org.mitre.oval:tst:35480"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-8.el5" test_ref="oval:org.mitre.oval:tst:35675"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10704" version="3" class="vulnerability">
      <metadata>
        <title>The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cross-site scripting (XSS) vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3503" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3503"/>
        <description>The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cross-site scripting (XSS) vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:51.960-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:49.765-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:12.901-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34859"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34890"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.12-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34910"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.12-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34327"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34949"/>
            <criterion comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35322"/>
            <criterion comment="java-1.5.0-bea is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34920"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34613"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35015"/>
            <criterion comment="java-1.5.0-bea-src is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35346"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34956"/>
            <criterion comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35349"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.12-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34363"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.12-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35033"/>
            <criterion comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35189"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35062"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.12-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34884"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.12-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35121"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34825"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34270"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:35124"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:35140"/>
            <criterion comment="java-1.5.0-bea-src is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34479"/>
            <criterion comment="java-1.5.0-bea-missioncontrol is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35180"/>
            <criterion comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35169"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34724"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34955"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34692"/>
            <criterion comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35150"/>
            <criterion comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35247"/>
            <criterion comment="java-1.5.0-bea is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35253"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10703" version="5" class="vulnerability">
      <metadata>
        <title>OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow certain authentication schemes to use hashed (crypt) passwords in the userPassword attribute as if they were plaintext passwords, which allows remote attackers to re-use hashed passwords without decrypting them.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0823" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0823"/>
        <description>OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow certain authentication schemes to use hashed (crypt) passwords in the userPassword attribute as if they were plaintext passwords, which allows remote attackers to re-use hashed passwords without decrypting them.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:21.234-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:49.536-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:12.643-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10703 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:32.656-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:54.854-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="openldap-devel is earlier than 0:2.0.27-20" test_ref="oval:org.mitre.oval:tst:32018"/>
          <criterion comment="openldap-clients is earlier than 0:2.0.27-20" test_ref="oval:org.mitre.oval:tst:31815"/>
          <criterion comment="nss_ldap is earlier than 0:207-17" test_ref="oval:org.mitre.oval:tst:32179"/>
          <criterion comment="openldap is earlier than 0:2.0.27-20" test_ref="oval:org.mitre.oval:tst:32086"/>
          <criterion comment="openldap-servers is earlier than 0:2.0.27-20" test_ref="oval:org.mitre.oval:tst:31961"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10702" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different vulnerability than CVE-2007-4965 and CVE-2008-1679.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4864" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4864"/>
        <description>Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different vulnerability than CVE-2007-4965 and CVE-2008-1679.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:24.773-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:49.151-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:12.213-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10702 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:30.084-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:54.291-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38704"/>
            <criterion comment="tkinter is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38695"/>
            <criterion comment="python-tools is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38872"/>
            <criterion comment="python is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38617"/>
            <criterion comment="python-docs is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:37965"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38916"/>
            <criterion comment="tkinter is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38703"/>
            <criterion comment="python-tools is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38787"/>
            <criterion comment="python is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38939"/>
            <criterion comment="python-docs is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38081"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38889"/>
            <criterion comment="tkinter is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38958"/>
            <criterion comment="python-tools is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38827"/>
            <criterion comment="python is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38282"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10701" version="5" class="vulnerability">
      <metadata>
        <title>Format string vulnerability in the emf_multipart_encrypted function in mail/em-format.c in Evolution 2.12.3 and earlier allows remote attackers to execute arbitrary code via a crafted encrypted message, as demonstrated using the Version field.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0072"/>
        <description>Format string vulnerability in the emf_multipart_encrypted function in mail/em-format.c in Evolution 2.12.3 and earlier allows remote attackers to execute arbitrary code via a crafted encrypted message, as demonstrated using the Version field.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:31.771-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:48.840-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:11.532-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10701 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:34.391-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:53.767-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="evolution is earlier than 0:2.0.2-35.0.4.el4_6.1" test_ref="oval:org.mitre.oval:tst:36352"/>
            <criterion comment="evolution28 is earlier than 0:2.8.0-53.el4_6.2" test_ref="oval:org.mitre.oval:tst:36237"/>
            <criterion comment="evolution28-devel is earlier than 0:2.8.0-53.el4_6.2" test_ref="oval:org.mitre.oval:tst:36362"/>
            <criterion comment="evolution-devel is earlier than 0:2.0.2-35.0.4.el4_6.1" test_ref="oval:org.mitre.oval:tst:36296"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="evolution is earlier than 0:2.8.0-40.el5_1.1" test_ref="oval:org.mitre.oval:tst:36496"/>
            <criterion comment="evolution-devel is earlier than 0:2.8.0-40.el5_1.1" test_ref="oval:org.mitre.oval:tst:36545"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10700" version="5" class="vulnerability">
      <metadata>
        <title>bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes an infinite loop (a.k.a "decompression bomb").</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1260"/>
        <description>bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes an infinite loop (a.k.a "decompression bomb").</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:37.392-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:48.576-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:11.238-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10700 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:48.158-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:53.370-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="bzip2-devel is earlier than 0:1.0.2-11.EL3.4" test_ref="oval:org.mitre.oval:tst:31970"/>
            <criterion comment="bzip2 is earlier than 0:1.0.2-11.EL3.4" test_ref="oval:org.mitre.oval:tst:31944"/>
            <criterion comment="bzip2-libs is earlier than 0:1.0.2-11.EL3.4" test_ref="oval:org.mitre.oval:tst:31594"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="bzip2-devel is earlier than 0:1.0.2-13.EL4.3" test_ref="oval:org.mitre.oval:tst:31440"/>
            <criterion comment="bzip2 is earlier than 0:1.0.2-13.EL4.3" test_ref="oval:org.mitre.oval:tst:31845"/>
            <criterion comment="bzip2-libs is earlier than 0:1.0.2-13.EL4.3" test_ref="oval:org.mitre.oval:tst:30992"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:107" version="2" class="vulnerability">
      <metadata>
        <title>Ximian Evolution Mail User Agent uuencoded header Denial of Service</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Ximian Evolution</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0128" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0128"/>
        <description>The try_uudecoding function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a malicious uuencoded (UUE) header, possibly triggering a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-11T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:31.903-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:13.800-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="evolution version is less than 1.2.2-5" negate="false" test_ref="oval:org.mitre.oval:tst:2939"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10699" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the layout engine and destruction of arbitrary layout objects by the nsViewManager::Composite function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0352" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0352"/>
        <description>Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the layout engine and destruction of arbitrary layout objects by the nsViewManager::Composite function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:38.999-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:47.930-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:10.547-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10699 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:57:59.462-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:52.549-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38173"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38181"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38221"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38323"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38241"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38337"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:37355"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38135"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38326"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.32.el3" test_ref="oval:org.mitre.oval:tst:38186"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-35.el4" test_ref="oval:org.mitre.oval:tst:38184"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-3.el4" test_ref="oval:org.mitre.oval:tst:38343"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-19.el4" test_ref="oval:org.mitre.oval:tst:38238"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-35.el4" test_ref="oval:org.mitre.oval:tst:38228"/>
            <criterion comment="firefox is earlier than 0:3.0.6-1.el4" test_ref="oval:org.mitre.oval:tst:37823"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-3.el4" test_ref="oval:org.mitre.oval:tst:37923"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-35.el4" test_ref="oval:org.mitre.oval:tst:37943"/>
            <criterion comment="nss-tools is earlier than 0:3.12.2.0-3.el4" test_ref="oval:org.mitre.oval:tst:38172"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-35.el4" test_ref="oval:org.mitre.oval:tst:37433"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-35.el4" test_ref="oval:org.mitre.oval:tst:38309"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-35.el4" test_ref="oval:org.mitre.oval:tst:38278"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.2.0-4.el5" test_ref="oval:org.mitre.oval:tst:37933"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.6-1.el5" test_ref="oval:org.mitre.oval:tst:37808"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-4.el5" test_ref="oval:org.mitre.oval:tst:37350"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.21-1.el5" test_ref="oval:org.mitre.oval:tst:37944"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.6-1.el5" test_ref="oval:org.mitre.oval:tst:37835"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.6-1.el5" test_ref="oval:org.mitre.oval:tst:37556"/>
            <criterion comment="firefox is earlier than 0:3.0.6-1.el5" test_ref="oval:org.mitre.oval:tst:38272"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-4.el5" test_ref="oval:org.mitre.oval:tst:38040"/>
            <criterion comment="nss-tools is earlier than 0:3.12.2.0-4.el5" test_ref="oval:org.mitre.oval:tst:37867"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10698" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3071" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3071"/>
        <description>Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:50.121-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:47.626-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:10.204-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10698 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:05.610-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:51.832-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nspr is earlier than 0:4.7.5-1.el4_8" test_ref="oval:org.mitre.oval:tst:39088"/>
            <criterion comment="firefox is earlier than 0:3.0.14-1.el4" test_ref="oval:org.mitre.oval:tst:39195"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.5-1.el4_8" test_ref="oval:org.mitre.oval:tst:39351"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39208"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39001"/>
            <criterion comment="nspr is earlier than 0:4.7.5-1.el5_4" test_ref="oval:org.mitre.oval:tst:39223"/>
            <criterion comment="firefox is earlier than 0:3.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39097"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.5-1.el5_4" test_ref="oval:org.mitre.oval:tst:39150"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39206"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10697" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and the EMBED element, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via an embedded SVG document.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0162" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0162"/>
        <description>Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and the EMBED element, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via an embedded SVG document.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:37.209-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:47.363-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:09.867-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10697 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:16:53.314-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:51.317-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.18-1.el4" test_ref="oval:org.mitre.oval:tst:39897"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:39323"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:40174"/>
            <criterion comment="firefox is earlier than 0:3.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:40301"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.18-1.el5_4" test_ref="oval:org.mitre.oval:tst:39533"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10696" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in redhat-config-nfs before 1.0.13, when shares are exported to multiple hosts, can produce incorrect permissions and prevent the all_squash option from being applied.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0750" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0750"/>
        <description>Unknown vulnerability in redhat-config-nfs before 1.0.13, when shares are exported to multiple hosts, can produce incorrect permissions and prevent the all_squash option from being applied.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:11.926-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:47.180-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:09.650-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10696 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:23.461-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:50.797-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="redhat-config-nfs is earlier than 0:1.0.13-6" test_ref="oval:org.mitre.oval:tst:29839"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10695" version="5" class="vulnerability">
      <metadata>
        <title>The exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service (crash) via a malformed JPEG image with invalid offset fields, a different issue than CVE-2005-3353.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2687" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2687"/>
        <description>The exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service (crash) via a malformed JPEG image with invalid offset fields, a different issue than CVE-2005-3353.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:44.369-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:46.440-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:08.835-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10695 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:45.219-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:49.656-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39717"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39629"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39915"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39741"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:40003"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39901"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39326"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39580"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:40010"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39927"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39619"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39111"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39417"/>
            <criterion comment="php is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39899"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39642"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39821"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39461"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39627"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39886"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39848"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39908"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39883"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39544"/>
            <criterion comment="php-common is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39804"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39875"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39748"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39802"/>
            <criterion comment="php is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39053"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39854"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39980"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39581"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39954"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39018"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39463"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39634"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39436"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39969"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39664"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39913"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39765"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10694" version="5" class="vulnerability">
      <metadata>
        <title>The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an invalid DER encoding that triggers a free of an uninitialized pointer.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0846" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0846"/>
        <description>The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an invalid DER encoding that triggers a free of an uninitialized pointer.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:21.103-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:45.879-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:08.273-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10694 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:18.140-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:48.822-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.2.7-70" test_ref="oval:org.mitre.oval:tst:38311"/>
            <criterion comment="krb5 is earlier than 0:1.2.7-70" test_ref="oval:org.mitre.oval:tst:38594"/>
            <criterion comment="krb5-libs is earlier than 0:1.2.7-70" test_ref="oval:org.mitre.oval:tst:38469"/>
            <criterion comment="krb5-server is earlier than 0:1.2.7-70" test_ref="oval:org.mitre.oval:tst:38266"/>
            <criterion comment="krb5-devel is earlier than 0:1.2.7-70" test_ref="oval:org.mitre.oval:tst:38275"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.3.4-60.el4_7.2" test_ref="oval:org.mitre.oval:tst:38566"/>
            <criterion comment="krb5 is earlier than 0:1.3.4-60.el4_7.2" test_ref="oval:org.mitre.oval:tst:38393"/>
            <criterion comment="krb5-libs is earlier than 0:1.3.4-60.el4_7.2" test_ref="oval:org.mitre.oval:tst:38522"/>
            <criterion comment="krb5-server is earlier than 0:1.3.4-60.el4_7.2" test_ref="oval:org.mitre.oval:tst:38185"/>
            <criterion comment="krb5-devel is earlier than 0:1.3.4-60.el4_7.2" test_ref="oval:org.mitre.oval:tst:38628"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.6.1-31.el5_3.3" test_ref="oval:org.mitre.oval:tst:38425"/>
            <criterion comment="krb5 is earlier than 0:1.6.1-31.el5_3.3" test_ref="oval:org.mitre.oval:tst:38479"/>
            <criterion comment="krb5-libs is earlier than 0:1.6.1-31.el5_3.3" test_ref="oval:org.mitre.oval:tst:37893"/>
            <criterion comment="krb5-server is earlier than 0:1.6.1-31.el5_3.3" test_ref="oval:org.mitre.oval:tst:38211"/>
            <criterion comment="krb5-devel is earlier than 0:1.6.1-31.el5_3.3" test_ref="oval:org.mitre.oval:tst:38553"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10693" version="5" class="vulnerability">
      <metadata>
        <title>The mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql-server package, allows local users to overwrite arbitrary files via a symlink attack on temporary files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0457" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0457"/>
        <description>The mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql-server package, allows local users to overwrite arbitrary files via a symlink attack on temporary files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:24.215-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:45.678-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:07.992-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10693 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:46.401-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:48.436-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mysql is earlier than 0:3.23.58-2.3" test_ref="oval:org.mitre.oval:tst:31033"/>
          <criterion comment="mysql-devel is earlier than 0:3.23.58-2.3" test_ref="oval:org.mitre.oval:tst:30615"/>
          <criterion comment="mysql-bench is earlier than 0:3.23.58-2.3" test_ref="oval:org.mitre.oval:tst:31039"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10692" version="5" class="vulnerability">
      <metadata>
        <title>hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5208" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5208"/>
        <description>hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:33.214-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:45.475-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:07.759-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10692 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:04.649-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:47.922-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="hpijs is earlier than 0:1.6.7-4.1.el5_0.3" test_ref="oval:org.mitre.oval:tst:35476"/>
          <criterion comment="libsane-hpaio is earlier than 0:1.6.7-4.1.el5_0.3" test_ref="oval:org.mitre.oval:tst:35432"/>
          <criterion comment="hplip is earlier than 0:1.6.7-4.1.el5_0.3" test_ref="oval:org.mitre.oval:tst:35375"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10691" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5 through 8.5alpha2, allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with many LEFT JOIN clauses, related to certain hashtable size calculations.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0733" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0733"/>
        <description>Integer overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5 through 8.5alpha2, allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with many LEFT JOIN clauses, related to certain hashtable size calculations.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:27.413-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:44.823-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:07.090-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10691 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:58.901-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:46.690-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="rh-postgresql-devel is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40180"/>
            <criterion comment="rh-postgresql-server is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40440"/>
            <criterion comment="rh-postgresql-python is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40426"/>
            <criterion comment="rh-postgresql-libs is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40220"/>
            <criterion comment="rh-postgresql-docs is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:39618"/>
            <criterion comment="rh-postgresql-test is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40140"/>
            <criterion comment="rh-postgresql-pl is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40502"/>
            <criterion comment="rh-postgresql-tcl is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:39925"/>
            <criterion comment="rh-postgresql is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40137"/>
            <criterion comment="rh-postgresql-contrib is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40551"/>
            <criterion comment="rh-postgresql-jdbc is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40106"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40486"/>
            <criterion comment="postgresql-docs is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40521"/>
            <criterion comment="postgresql-pl is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40292"/>
            <criterion comment="postgresql-tcl is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40516"/>
            <criterion comment="postgresql-libs is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40066"/>
            <criterion comment="postgresql-contrib is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40399"/>
            <criterion comment="postgresql-python is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40512"/>
            <criterion comment="postgresql-test is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40314"/>
            <criterion comment="postgresql-jdbc is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40428"/>
            <criterion comment="postgresql-server is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40366"/>
            <criterion comment="postgresql-devel is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40465"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40401"/>
            <criterion comment="postgresql-docs is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40402"/>
            <criterion comment="postgresql-pl is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40538"/>
            <criterion comment="postgresql-tcl is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:39839"/>
            <criterion comment="postgresql-libs is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40515"/>
            <criterion comment="postgresql-contrib is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40505"/>
            <criterion comment="postgresql-python is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40251"/>
            <criterion comment="postgresql-test is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40253"/>
            <criterion comment="postgresql-server is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40509"/>
            <criterion comment="postgresql-devel is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40309"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10690" version="5" class="vulnerability">
      <metadata>
        <title>The Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving garbage collection that causes deletion of a temporary object that is still being used.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3805" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3805"/>
        <description>The Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving garbage collection that causes deletion of a temporary object that is still being used.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:02.823-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:44.265-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:06.488-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10690 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:57:58.009-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:45.985-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32342"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32877"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:31982"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32816"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32080"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32904"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32915"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32924"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32822"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32555"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32873"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32693"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32886"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32810"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32418"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32496"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32929"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32777"/>
            <criterion comment="firefox is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32896"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32722"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32906"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32905"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32925"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32624"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10689" version="5" class="vulnerability">
      <metadata>
        <title>Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed SMB packet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0008" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0008"/>
        <description>Unknown vulnerability in the DNP dissector in Ethereal 0.10.5 through 0.10.8 allows remote attackers to cause "memory corruption."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:15.979-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:43.990-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:06.216-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10689 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:21.011-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:45.611-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.9-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31265"/>
            <criterion comment="ethereal is earlier than 0:0.10.9-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31218"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.9-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31097"/>
            <criterion comment="ethereal is earlier than 0:0.10.9-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31103"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10688" version="5" class="vulnerability">
      <metadata>
        <title>CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0778" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0778"/>
        <description>CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:43.262-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:43.816-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:05.950-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10688 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:59:12.363-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:45.344-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="cvs is earlier than 0:1.11.2-24" test_ref="oval:org.mitre.oval:tst:30480"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10687" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0688" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0688"/>
        <description>Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:04.200-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:43.505-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:05.612-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10687 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:55.880-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:44.817-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="perl-Cyrus is earlier than 0:2.2.12-10.el4_8.1" test_ref="oval:org.mitre.oval:tst:38571"/>
            <criterion comment="cyrus-imapd-devel is earlier than 0:2.2.12-10.el4_8.1" test_ref="oval:org.mitre.oval:tst:38902"/>
            <criterion comment="cyrus-imapd-murder is earlier than 0:2.2.12-10.el4_8.1" test_ref="oval:org.mitre.oval:tst:38744"/>
            <criterion comment="cyrus-imapd-nntp is earlier than 0:2.2.12-10.el4_8.1" test_ref="oval:org.mitre.oval:tst:38783"/>
            <criterion comment="cyrus-imapd is earlier than 0:2.2.12-10.el4_8.1" test_ref="oval:org.mitre.oval:tst:38803"/>
            <criterion comment="cyrus-imapd-utils is earlier than 0:2.2.12-10.el4_8.1" test_ref="oval:org.mitre.oval:tst:38815"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cyrus-imapd-perl is earlier than 0:2.3.7-2.el5_3.2" test_ref="oval:org.mitre.oval:tst:38908"/>
            <criterion comment="cyrus-imapd-devel is earlier than 0:2.3.7-2.el5_3.2" test_ref="oval:org.mitre.oval:tst:38615"/>
            <criterion comment="cyrus-imapd is earlier than 0:2.3.7-2.el5_3.2" test_ref="oval:org.mitre.oval:tst:38737"/>
            <criterion comment="cyrus-imapd-utils is earlier than 0:2.3.7-2.el5_3.2" test_ref="oval:org.mitre.oval:tst:38850"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10686" version="5" class="vulnerability">
      <metadata>
        <title>MySQL before 4.1.13 allows local users to cause a denial of service (persistent replication slave crash) via a query with multiupdate and subselects.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4380"/>
        <description>MySQL before 4.1.13 allows local users to cause a denial of service (persistent replication slave crash) via a query with multiupdate and subselects.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:23.516-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:43.287-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:05.350-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10686 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:09.429-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:44.491-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mysql is earlier than 0:4.1.20-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32252"/>
          <criterion comment="mysql-devel is earlier than 0:4.1.20-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32551"/>
          <criterion comment="mysql-bench is earlier than 0:4.1.20-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32245"/>
          <criterion comment="mysql-server is earlier than 0:4.1.20-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32560"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10685" version="5" class="vulnerability">
      <metadata>
        <title>Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine (aka lcms) before 1.17 allows attackers to have an unknown impact via a file containing a certain "number of entries" value, which is interpreted improperly, leading to an allocation of insufficient memory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5317" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5317"/>
        <description>Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine (aka lcms) before 1.17 allows attackers to have an unknown impact via a file containing a certain "number of entries" value, which is interpreted improperly, leading to an allocation of insufficient memory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:24.741-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:43.083-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:05.116-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10685 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:14.511-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:44.180-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="python-lcms is earlier than 0:1.15-1.2.2.el5_2.2" test_ref="oval:org.mitre.oval:tst:38084"/>
          <criterion comment="lcms-devel is earlier than 0:1.15-1.2.2.el5_2.2" test_ref="oval:org.mitre.oval:tst:38042"/>
          <criterion comment="lcms is earlier than 0:1.15-1.2.2.el5_2.2" test_ref="oval:org.mitre.oval:tst:37821"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10684" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via unspecified vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3373" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3373"/>
        <description>Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:46.352-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:42.706-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:04.714-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10684 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:16:45.661-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:43.665-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nspr is earlier than 0:4.7.6-1.el4_8" test_ref="oval:org.mitre.oval:tst:39525"/>
            <criterion comment="firefox is earlier than 0:3.0.15-3.el4" test_ref="oval:org.mitre.oval:tst:39710"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.6-1.el4_8" test_ref="oval:org.mitre.oval:tst:38755"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39602"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39541"/>
            <criterion comment="nspr is earlier than 0:4.7.6-1.el5_4" test_ref="oval:org.mitre.oval:tst:39168"/>
            <criterion comment="firefox is earlier than 0:3.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39294"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.6-1.el5_4" test_ref="oval:org.mitre.oval:tst:39579"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39636"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10683" version="5" class="vulnerability">
      <metadata>
        <title>The ext4_fill_super function in fs/ext4/super.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not validate the superblock configuration, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) by attempting to mount a crafted ext4 filesystem.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0748" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0748"/>
        <description>The ext4_fill_super function in fs/ext4/super.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not validate the superblock configuration, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) by attempting to mount a crafted ext4 filesystem.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:11.439-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:42.393-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:04.360-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10683 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:48.183-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:43.249-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38255"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38332"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39122"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39058"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39247"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39145"/>
          <criterion comment="kernel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38795"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38831"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38585"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39130"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38567"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39245"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10682" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to the current domain, which allows remote attackers to determine the existence of files on the local system.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0588" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0588"/>
        <description>Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to the current domain, which allows remote attackers to determine the existence of files on the local system.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:41.785-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:42.070-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:03.958-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10682 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:59:01.370-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:42.711-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31283"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31520"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31645"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31516"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31569"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31143"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31512"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31785"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31695"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31626"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:1.0.1-1.4.3" test_ref="oval:org.mitre.oval:tst:31118"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10681" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the "stack unwinder fixes" in kernel in Red Hat Enterprise Linux 5, when running on AMD64 and Intel 64, allows local users to cause a denial of service via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4574" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4574"/>
        <description>Unspecified vulnerability in the "stack unwinder fixes" in kernel in Red Hat Enterprise Linux 5, when running on AMD64 and Intel 64, allows local users to cause a denial of service via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:51.337-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:41.727-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:03.627-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10681 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:03.358-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:42.278-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35330"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35339"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35337"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35227"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35043"/>
          <criterion comment="kernel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35276"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:34448"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35366"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35208"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35326"/>
          <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35345"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10680" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the Pack200 component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0837" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0837"/>
        <description>Unspecified vulnerability in the Pack200 component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:33.855-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:41.498-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:03.374-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10680 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:37.479-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:41.886-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39831"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39445"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40225"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40023"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40307"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1068" version="7" class="vulnerability">
      <metadata>
        <title>Windows 2000 Internet Printing ISAPI Extension Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0241" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0241"/>
        <description>Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to the extension through IIS 5.0.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-01-14T12:00:00.000-04:00" comment="modified wft-340 - added .dll to end of literal string as needed">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2005-01-20T01:23:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2656" date="2010-11-29T16:12:00.873-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:13:01.486-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:07.778-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:46:01.877-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:15.997-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="IIS major version equals 5" negate="false" test_ref="oval:org.mitre.oval:tst:3081"/>
        <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
        <criterion comment="File %windir%\System32\Msw3prt.dll is less than 5.0.2195.2956" negate="false" test_ref="oval:org.mitre.oval:tst:1205"/>
        <criterion comment="Win2K/XP/2003 service pack 2 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2837"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10679" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.34 allows remote attackers to inject arbitrary web script or HTML via crafted "Accept-Language headers that do not conform to RFC 2616".</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1358" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1358"/>
        <description>Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.34 allows remote attackers to inject arbitrary web script or HTML via crafted "Accept-Language headers that do not conform to RFC 2616".</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:43.522-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:41.168-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:02.972-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10679 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:45.419-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:41.359-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:33900"/>
          <criterion comment="tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:33729"/>
          <criterion comment="tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:34201"/>
          <criterion comment="jakarta-commons-modeler is earlier than 0:1.1-8jpp.1.0.2.el5" test_ref="oval:org.mitre.oval:tst:34103"/>
          <criterion comment="tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:34030"/>
          <criterion comment="jakarta-commons-modeler-javadoc is earlier than 0:1.1-8jpp.1.0.2.el5" test_ref="oval:org.mitre.oval:tst:33946"/>
          <criterion comment="tomcat5-webapps is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:34190"/>
          <criterion comment="tomcat5 is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:34110"/>
          <criterion comment="tomcat5-jasper is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:34093"/>
          <criterion comment="tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:33926"/>
          <criterion comment="tomcat5-server-lib is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:33402"/>
          <criterion comment="tomcat5-common-lib is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:33860"/>
          <criterion comment="tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:34091"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10678" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the strip_escapes function in signal.c in GNU ed before 1.0 allows context-dependent or user-assisted attackers to execute arbitrary code via a long filename.  NOTE: since ed itself does not typically run with special privileges, this issue only crosses privilege boundaries when ed is invoked as a third-party component.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3916" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3916"/>
        <description>Heap-based buffer overflow in the strip_escapes function in signal.c in GNU ed before 1.0 allows context-dependent or user-assisted attackers to execute arbitrary code via a long filename.  NOTE: since ed itself does not typically run with special privileges, this issue only crosses privilege boundaries when ed is invoked as a third-party component.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:35.362-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:40.850-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:02.684-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10678 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:21.561-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:40.621-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="ed is earlier than 0:0.2-33.30E.1" test_ref="oval:org.mitre.oval:tst:37238"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="ed is earlier than 0:0.2-36.el4_7.1" test_ref="oval:org.mitre.oval:tst:37191"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="ed is earlier than 0:0.2-39.el5_2" test_ref="oval:org.mitre.oval:tst:37471"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10677" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in protocol/rtsp/rtspclnt.cpp in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.x; RealPlayer SP 1.0.0 and 1.0.1; RealPlayer Enterprise; Mac RealPlayer 10, 10.1, 11.0, and 11.0.1; Linux RealPlayer 10, 11.0.0, and 11.0.1; and Helix Player 10.x, 11.0.0, and 11.0.1 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an ASM RuleBook with a large number of rules, related to an "array overflow."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4247" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4247"/>
        <description>Stack-based buffer overflow in protocol/rtsp/rtspclnt.cpp in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.x; RealPlayer SP 1.0.0 and 1.0.1; RealPlayer Enterprise; Mac RealPlayer 10, 10.1, 11.0, and 11.0.1; Linux RealPlayer 10, 11.0.0, and 11.0.1; and Helix Player 10.x, 11.0.0, and 11.0.1 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an ASM RuleBook with a large number of rules, related to an "array overflow."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:12.683-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:40.669-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:02.472-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10677 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:52.084-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:39.997-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="HelixPlayer is earlier than 1:1.0.6-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39912"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10676" version="5" class="vulnerability">
      <metadata>
        <title>The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0365" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0365"/>
        <description>The dcopidlng script in KDE 3.2.x and 3.3.x creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:05.938-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:40.464-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:02.256-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10676 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:33.319-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:39.700-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kdelibs is earlier than 6:3.3.1-3.6" test_ref="oval:org.mitre.oval:tst:31019"/>
          <criterion comment="kdelibs-devel is earlier than 6:3.3.1-3.6" test_ref="oval:org.mitre.oval:tst:31466"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10675" version="5" class="vulnerability">
      <metadata>
        <title>The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized buffer, which could enable the account with a more easily guessable password.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0082" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0082"/>
        <description>The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized buffer, which could enable the account with a more easily guessable password.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:29.430-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:40.249-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:01.934-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10675 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:14.336-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:39.406-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="samba-common is earlier than 0:3.0.2-6.3E" test_ref="oval:org.mitre.oval:tst:30625"/>
          <criterion comment="samba-swat is earlier than 0:3.0.2-6.3E" test_ref="oval:org.mitre.oval:tst:30618"/>
          <criterion comment="samba-client is earlier than 0:3.0.2-6.3E" test_ref="oval:org.mitre.oval:tst:29955"/>
          <criterion comment="samba is earlier than 0:3.0.2-6.3E" test_ref="oval:org.mitre.oval:tst:30521"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10674" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via (1) an off-by-one error in the imapd annotate extension, (2) an off-by-one error in "cached header handling," (3) a stack-based buffer overflow in fetchnews, or (4) a stack-based buffer overflow in imapd.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0546"/>
        <description>Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via (1) an off-by-one error in the imapd annotate extension, (2) an off-by-one error in "cached header handling," (3) a stack-based buffer overflow in fetchnews, or (4) a stack-based buffer overflow in imapd.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:26.588-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:39.979-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:01.663-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10674 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:53.765-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:38.898-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="perl-Cyrus is earlier than 0:2.2.12-3.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31820"/>
          <criterion comment="cyrus-imapd-devel is earlier than 0:2.2.12-3.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31340"/>
          <criterion comment="cyrus-imapd-murder is earlier than 0:2.2.12-3.RHEL4.1" test_ref="oval:org.mitre.oval:tst:30986"/>
          <criterion comment="cyrus-imapd-nntp is earlier than 0:2.2.12-3.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31770"/>
          <criterion comment="cyrus-imapd is earlier than 0:2.2.12-3.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31833"/>
          <criterion comment="cyrus-imapd-utils is earlier than 0:2.2.12-3.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31719"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10673" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in FreeType before 2.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PCF file, as demonstrated by the Red Hat bad1.pcf test file, due to a partial fix of CVE-2006-1861.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3467" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3467"/>
        <description>Integer overflow in FreeType before 2.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PCF file, as demonstrated by the Red Hat bad1.pcf test file, due to a partial fix of CVE-2006-1861.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:00.940-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:39.129-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:00.702-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10673 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:33.930-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:37.728-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:32112"/>
            <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:32885"/>
            <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:32851"/>
            <criterion comment="XFree86-libs is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:32586"/>
            <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:32627"/>
            <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:32221"/>
            <criterion comment="XFree86-twm is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:33029"/>
            <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:33020"/>
            <criterion comment="freetype-devel is earlier than 0:2.1.4-4.0.rhel3.2" test_ref="oval:org.mitre.oval:tst:32616"/>
            <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:32228"/>
            <criterion comment="XFree86-doc is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:33045"/>
            <criterion comment="freetype is earlier than 0:2.1.4-4.0.rhel3.2" test_ref="oval:org.mitre.oval:tst:32599"/>
            <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:32534"/>
            <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:32778"/>
            <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:32866"/>
            <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:33035"/>
            <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:32582"/>
            <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:32715"/>
            <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:32869"/>
            <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:32939"/>
            <criterion comment="XFree86-xdm is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:32968"/>
            <criterion comment="XFree86-sdk is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:32498"/>
            <criterion comment="XFree86 is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:32970"/>
            <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:32726"/>
            <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:32658"/>
            <criterion comment="XFree86-xfs is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:32524"/>
            <criterion comment="XFree86-tools is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:32991"/>
            <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:32828"/>
            <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:32774"/>
            <criterion comment="XFree86-xauth is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:32354"/>
            <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:32976"/>
            <criterion comment="XFree86-devel is earlier than 0:4.3.0-111.EL" test_ref="oval:org.mitre.oval:tst:32757"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.13.37" test_ref="oval:org.mitre.oval:tst:32309"/>
            <criterion comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.13.37" test_ref="oval:org.mitre.oval:tst:32957"/>
            <criterion comment="freetype-devel is earlier than 0:2.1.9-1.rhel4.4" test_ref="oval:org.mitre.oval:tst:32653"/>
            <criterion comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.13.37" test_ref="oval:org.mitre.oval:tst:33004"/>
            <criterion comment="freetype is earlier than 0:2.1.9-1.rhel4.4" test_ref="oval:org.mitre.oval:tst:32106"/>
            <criterion comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.13.37" test_ref="oval:org.mitre.oval:tst:32948"/>
            <criterion comment="freetype-demos is earlier than 0:2.1.9-1.rhel4.4" test_ref="oval:org.mitre.oval:tst:32605"/>
            <criterion comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.13.37" test_ref="oval:org.mitre.oval:tst:32761"/>
            <criterion comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.13.37" test_ref="oval:org.mitre.oval:tst:32871"/>
            <criterion comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.13.37" test_ref="oval:org.mitre.oval:tst:32625"/>
            <criterion comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.13.37" test_ref="oval:org.mitre.oval:tst:32888"/>
            <criterion comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.13.37" test_ref="oval:org.mitre.oval:tst:32298"/>
            <criterion comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.13.37" test_ref="oval:org.mitre.oval:tst:32051"/>
            <criterion comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.13.37" test_ref="oval:org.mitre.oval:tst:32049"/>
            <criterion comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.13.37" test_ref="oval:org.mitre.oval:tst:32831"/>
            <criterion comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.13.37" test_ref="oval:org.mitre.oval:tst:32898"/>
            <criterion comment="freetype-utils is earlier than 0:2.1.9-1.rhel4.4" test_ref="oval:org.mitre.oval:tst:32417"/>
            <criterion comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.13.37" test_ref="oval:org.mitre.oval:tst:32834"/>
            <criterion comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.13.37" test_ref="oval:org.mitre.oval:tst:32960"/>
            <criterion comment="xorg-x11 is earlier than 0:6.8.2-1.EL.13.37" test_ref="oval:org.mitre.oval:tst:32421"/>
            <criterion comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.13.37" test_ref="oval:org.mitre.oval:tst:32987"/>
            <criterion comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.13.37" test_ref="oval:org.mitre.oval:tst:32767"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10672" version="5" class="vulnerability">
      <metadata>
        <title>The linux-2.4.21-mlock.patch in Red Hat Enterprise Linux 3 does not properly maintain the mlock page count when one process unlocks pages that belong to another process, which allows local users to mlock more memory than specified by the rlimit.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0491" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0491"/>
        <description>The linux-2.4.21-mlock.patch in Red Hat Enterprise Linux 3 does not properly maintain the mlock page count when one process unlocks pages that belong to another process, which allows local users to mlock more memory than specified by the rlimit.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:28.005-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:38.784-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:00.377-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10672 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:36.066-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:37.323-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-32.0.1.EL" test_ref="oval:org.mitre.oval:tst:31870"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-32.0.1.EL" test_ref="oval:org.mitre.oval:tst:31657"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-32.0.1.EL" test_ref="oval:org.mitre.oval:tst:31642"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-32.0.1.EL" test_ref="oval:org.mitre.oval:tst:31984"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-32.0.1.EL" test_ref="oval:org.mitre.oval:tst:31213"/>
          <criterion comment="kernel is earlier than 0:2.4.21-32.0.1.EL" test_ref="oval:org.mitre.oval:tst:31839"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-32.0.1.EL" test_ref="oval:org.mitre.oval:tst:31941"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-32.0.1.EL" test_ref="oval:org.mitre.oval:tst:31760"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-32.0.1.EL" test_ref="oval:org.mitre.oval:tst:31960"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10671" version="5" class="vulnerability">
      <metadata>
        <title>The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0237"/>
        <description>The International Domain Name (IDN) support in Konqueror 3.2.1 on KDE 3.2.1 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:43.959-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:38.585-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:05:00.154-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10671 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:16:51.117-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:36.938-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kdelibs is earlier than 6:3.3.1-3.6" test_ref="oval:org.mitre.oval:tst:31019"/>
          <criterion comment="kdelibs-devel is earlier than 6:3.3.1-3.6" test_ref="oval:org.mitre.oval:tst:31466"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10670" version="5" class="vulnerability">
      <metadata>
        <title>PHP remote file inclusion vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to execute arbitrary PHP code by modifying a URL parameter to reference a URL on a remote web server that contains the code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0103" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0103"/>
        <description>PHP remote file inclusion vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to execute arbitrary PHP code by modifying a URL parameter to reference a URL on a remote web server that contains the code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:39.570-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:38.363-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:59.855-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10670 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:27.544-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:36.585-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.3a-9.EL3" test_ref="oval:org.mitre.oval:tst:30441"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.3a-9.EL4" test_ref="oval:org.mitre.oval:tst:30956"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1067" version="5" class="vulnerability">
      <metadata>
        <title>Microsoft JScript Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1313" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1313"/>
        <description>Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objects early" in certain cases, which results in memory corruption and allows remote attackers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-06-14T09:55:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-06-14T07:51:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-07T09:15:11.115-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:14:58.565-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1067 - Consolidated criteria for def:1067, 1644, 1785, and 2003." date="2011-01-13T14:04:00.159-05:00">
              <contributor organization="The MITRE Corporation">Nate Przybyszewski</contributor>
            </modified>
            <status_change date="2011-01-13T14:14:01.378-05:00">INTERIM</status_change>
            <status_change date="2011-01-31T04:00:03.086-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1067 - Fixed Definitions with missing platforms." date="2012-12-12T17:14:00.907-05:00">
              <contributor organization="SecPod Technologies">Chandan S</contributor>
            </modified>
            <status_change date="2012-12-12T17:21:12.787-05:00">INTERIM</status_change>
            <status_change date="2012-12-31T04:00:05.397-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Software section">
          <criterion comment="the version of Jscript.dll is greater than or equal to 5.5.0.0" test_ref="oval:org.mitre.oval:tst:42119"/>
          <criterion comment="the version of Jscript.dll is less than 5.6.0.8831" test_ref="oval:org.mitre.oval:tst:1206"/>
        </criteria>
        <criterion comment="the version of Jscript.dll is less than 5.1.0.12512" test_ref="oval:org.mitre.oval:tst:792"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10669" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows context-dependent attackers to execute arbitrary code by switching from byte to Unicode (UTF) characters in a regular expression.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5116" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5116"/>
        <description>Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows context-dependent attackers to execute arbitrary code by switching from byte to Unicode (UTF) characters in a regular expression.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:55.897-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:37.986-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:59.488-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10669 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:39.794-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:35.977-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="perl-suidperl is earlier than 2:5.8.0-97.EL3" test_ref="oval:org.mitre.oval:tst:34857"/>
            <criterion comment="perl is earlier than 2:5.8.0-97.EL3" test_ref="oval:org.mitre.oval:tst:35250"/>
            <criterion comment="perl-CPAN is earlier than 2:1.61-97.EL3" test_ref="oval:org.mitre.oval:tst:35122"/>
            <criterion comment="perl-CGI is earlier than 2:2.89-97.EL3" test_ref="oval:org.mitre.oval:tst:35264"/>
            <criterion comment="perl-DB_File is earlier than 2:1.806-97.EL3" test_ref="oval:org.mitre.oval:tst:35486"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="perl-suidperl is earlier than 3:5.8.5-36.el4_5.2" test_ref="oval:org.mitre.oval:tst:35292"/>
            <criterion comment="perl is earlier than 3:5.8.5-36.el4_5.2" test_ref="oval:org.mitre.oval:tst:35335"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="perl-suidperl is earlier than 4:5.8.8-10.el5_0.2" test_ref="oval:org.mitre.oval:tst:35425"/>
            <criterion comment="perl is earlier than 4:5.8.8-10.el5_0.2" test_ref="oval:org.mitre.oval:tst:35039"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10668" version="5" class="vulnerability">
      <metadata>
        <title>Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.19 and earlier, and NaSMail before 1.7, allow remote attackers to hijack the authentication of unspecified victims via features such as send message and change preferences, related to (1) functions/mailbox_display.php, (2) src/addrbook_search_html.php, (3) src/addressbook.php, (4) src/compose.php, (5) src/folders.php, (6) src/folders_create.php, (7) src/folders_delete.php, (8) src/folders_rename_do.php, (9) src/folders_rename_getname.php, (10) src/folders_subscribe.php, (11) src/move_messages.php, (12) src/options.php, (13) src/options_highlight.php, (14) src/options_identities.php, (15) src/options_order.php, (16) src/search.php, and (17) src/vcard.php.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2964" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2964"/>
        <description>Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.19 and earlier, and NaSMail before 1.7, allow remote attackers to hijack the authentication of unspecified victims via features such as send message and change preferences, related to (1) functions/mailbox_display.php, (2) src/addrbook_search_html.php, (3) src/addressbook.php, (4) src/compose.php, (5) src/folders.php, (6) src/folders_create.php, (7) src/folders_delete.php, (8) src/folders_rename_do.php, (9) src/folders_rename_getname.php, (10) src/folders_subscribe.php, (11) src/move_messages.php, (12) src/options.php, (13) src/options_highlight.php, (14) src/options_identities.php, (15) src/options_order.php, (16) src/search.php, and (17) src/vcard.php.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:34.157-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:37.733-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:59.206-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10668 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:04.606-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:35.514-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-16.el3" test_ref="oval:org.mitre.oval:tst:39339"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-5.el4_8.8" test_ref="oval:org.mitre.oval:tst:38987"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-5.el5_4.10" test_ref="oval:org.mitre.oval:tst:38545"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10667" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer signedness errors in the sg_scsi_ioctl function in scsi_ioctl.c for Linux 2.6.x allow local users to read or modify kernel memory via negative integers in arguments to the scsi ioctl, which bypass a maximum length check before calling the copy_from_user and copy_to_user functions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0180" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0180"/>
        <description>Multiple integer signedness errors in the sg_scsi_ioctl function in scsi_ioctl.c for Linux 2.6.x allow local users to read or modify kernel memory via negative integers in arguments to the scsi ioctl, which bypass a maximum length check before calling the copy_from_user and copy_to_user functions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:19.808-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:37.480-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:58.887-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10667 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:39.988-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:35.095-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30633"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:31009"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30369"/>
          <criterion comment="kernel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:31205"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30421"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30594"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30616"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10666" version="5" class="vulnerability">
      <metadata>
        <title>Linux kernel 2.x.6 before 2.6.17.9 and 2.4.x before 2.4.33.1 on PowerPC PPC970 systems allows local users to cause a denial of service (crash) related to the "HID0 attention enable on PPC970 at boot time."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4093" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4093"/>
        <description>Linux kernel 2.x.6 before 2.6.17.9 and 2.4.x before 2.4.33.1 on PowerPC PPC970 systems allows local users to cause a denial of service (crash) related to the "HID0 attention enable on PPC970 at boot time."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:26.129-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:37.202-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:58.569-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10666 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:42.252-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:34.603-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32678"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32900"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:33014"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32947"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32944"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32956"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32602"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:33081"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32892"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10665" version="5" class="vulnerability">
      <metadata>
        <title>Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which could allow local users to obtain sensitive information by reading memory that was not cleared from previous usage.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0685" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0685"/>
        <description>Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which could allow local users to obtain sensitive information by reading memory that was not cleared from previous usage.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:45.947-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:36.891-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:58.174-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10665 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:13.453-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:34.168-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30934"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30708"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30577"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30874"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30794"/>
          <criterion comment="kernel is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30892"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30873"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:31080"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30866"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10664" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in balancer-manager in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) ss, (2) wr, or (3) rr parameters, or (4) the URL.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6421" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6421"/>
        <description>Cross-site scripting (XSS) vulnerability in balancer-manager in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) ss, (2) wr, or (3) rr parameters, or (4) the URL.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:34.162-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:36.675-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:57.837-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10664 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:01.687-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:33.628-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="httpd-manual is earlier than 0:2.2.3-11.el5_1.3" test_ref="oval:org.mitre.oval:tst:35953"/>
          <criterion comment="httpd-devel is earlier than 0:2.2.3-11.el5_1.3" test_ref="oval:org.mitre.oval:tst:35668"/>
          <criterion comment="mod_ssl is earlier than 0:2.2.3-11.el5_1.3" test_ref="oval:org.mitre.oval:tst:35991"/>
          <criterion comment="httpd is earlier than 0:2.2.3-11.el5_1.3" test_ref="oval:org.mitre.oval:tst:35696"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10663" version="5" class="vulnerability">
      <metadata>
        <title>Wireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed (1) SSL or (2) MMS packets that trigger an infinite loop.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3392" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3392"/>
        <description>Wireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed (1) SSL or (2) MMS packets that trigger an infinite loop.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:19.480-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:36.364-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:57.483-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10663 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:48.486-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:33.107-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-EL3.1" test_ref="oval:org.mitre.oval:tst:36111"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-EL3.1" test_ref="oval:org.mitre.oval:tst:36043"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-3.el3" test_ref="oval:org.mitre.oval:tst:35411"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-3.el3" test_ref="oval:org.mitre.oval:tst:36140"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.6-EL4.1" test_ref="oval:org.mitre.oval:tst:34755"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.6-EL4.1" test_ref="oval:org.mitre.oval:tst:34881"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.6-1.el5" test_ref="oval:org.mitre.oval:tst:34336"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.6-1.el5" test_ref="oval:org.mitre.oval:tst:34784"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10662" version="5" class="vulnerability">
      <metadata>
        <title>liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program termination) via crafted ASN.1 BER datagrams that trigger an assertion error.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2952" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2952"/>
        <description>liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program termination) via crafted ASN.1 BER datagrams that trigger an assertion error.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:55.205-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:35.946-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:57.100-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10662 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:06.541-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:32.516-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="compat-openldap is earlier than 0:2.1.30-8.el4_6.5" test_ref="oval:org.mitre.oval:tst:36875"/>
            <criterion comment="openldap-devel is earlier than 0:2.2.13-8.el4_6.5" test_ref="oval:org.mitre.oval:tst:37272"/>
            <criterion comment="openldap-clients is earlier than 0:2.2.13-8.el4_6.5" test_ref="oval:org.mitre.oval:tst:37250"/>
            <criterion comment="openldap is earlier than 0:2.2.13-8.el4_6.5" test_ref="oval:org.mitre.oval:tst:37263"/>
            <criterion comment="openldap-servers-sql is earlier than 0:2.2.13-8.el4_6.5" test_ref="oval:org.mitre.oval:tst:37164"/>
            <criterion comment="openldap-servers is earlier than 0:2.2.13-8.el4_6.5" test_ref="oval:org.mitre.oval:tst:36938"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="compat-openldap is earlier than 0:2.3.27_2.2.29-8.el5_2.4" test_ref="oval:org.mitre.oval:tst:37032"/>
            <criterion comment="openldap-devel is earlier than 0:2.3.27-8.el5_2.4" test_ref="oval:org.mitre.oval:tst:37416"/>
            <criterion comment="openldap-clients is earlier than 0:2.3.27-8.el5_2.4" test_ref="oval:org.mitre.oval:tst:37106"/>
            <criterion comment="openldap is earlier than 0:2.3.27-8.el5_2.4" test_ref="oval:org.mitre.oval:tst:37196"/>
            <criterion comment="openldap-servers-sql is earlier than 0:2.3.27-8.el5_2.4" test_ref="oval:org.mitre.oval:tst:36462"/>
            <criterion comment="openldap-servers is earlier than 0:2.3.27-8.el5_2.4" test_ref="oval:org.mitre.oval:tst:37374"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10661" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in the JavaScript engine for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, SeaMonkey before 1.0.7, and Mozilla 1.7 and probably earlier on Solaris, allow remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown impact and attack vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6498"/>
        <description>Multiple unspecified vulnerabilities in the JavaScript engine for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, SeaMonkey before 1.0.7, and Mozilla 1.7 and probably earlier on Solaris, allow remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown impact and attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:40.334-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:35.454-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:56.526-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10661 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:20.629-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:31.619-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:32785"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33227"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33266"/>
            <criterion comment="seamonkey is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33146"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:32352"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33183"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33095"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33300"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:32996"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.7-0.1.el3" test_ref="oval:org.mitre.oval:tst:33263"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.6.el4" test_ref="oval:org.mitre.oval:tst:33195"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33236"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33229"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.9-0.1.el4" test_ref="oval:org.mitre.oval:tst:32844"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33273"/>
            <criterion comment="seamonkey is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33259"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33239"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.6.el4" test_ref="oval:org.mitre.oval:tst:33284"/>
            <criterion comment="firefox is earlier than 0:1.5.0.9-0.1.el4" test_ref="oval:org.mitre.oval:tst:32815"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33153"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33015"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33251"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:33336"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:32408"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10660" version="5" class="vulnerability">
      <metadata>
        <title>Mailman 2.1.4 through 2.1.6 allows remote attackers to cause a denial of service via a message that causes the server to "fail with an Overflow on bad date data in a processed message," a different vulnerability than CVE-2005-3573.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-4153" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4153"/>
        <description>Mailman 2.1.4 through 2.1.6 allows remote attackers to cause a denial of service via a message that causes the server to "fail with an Overflow on bad date data in a processed message," a different vulnerability than CVE-2005-3573.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:00.999-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:35.232-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:56.275-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10660 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:20.829-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:31.173-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="mailman is earlier than 3:2.1.5.1-25.rhel3.4" test_ref="oval:org.mitre.oval:tst:32690"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="mailman is earlier than 3:2.1.5.1-34.rhel4.2" test_ref="oval:org.mitre.oval:tst:32390"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1066" version="1" class="vulnerability">
      <metadata>
        <title>DCOM RPC Object Identity Windows 2003 Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Remote Procedure Call (RPC)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0124" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0124"/>
        <description>The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via an "alter context" call that contains additional data, aka the "Object Identity Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="the version of comsvcs.dll is less than 2001.12.4720.130" negate="false" test_ref="oval:org.mitre.oval:tst:1207"/>
        <criterion comment="the patch kb828741 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1499"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10659" version="5" class="vulnerability">
      <metadata>
        <title>The MEGACO dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service (long loop and resource consumption) via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6118" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6118"/>
        <description>The MEGACO dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service (long loop and resource consumption) via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:47.309-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:34.821-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:55.802-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10659 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:59.911-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:30.456-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-EL3.1" test_ref="oval:org.mitre.oval:tst:36111"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-EL3.1" test_ref="oval:org.mitre.oval:tst:36043"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-3.el3" test_ref="oval:org.mitre.oval:tst:35411"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-3.el3" test_ref="oval:org.mitre.oval:tst:36140"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:36051"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:35980"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35669"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35941"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:35709"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:36120"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35712"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35801"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10658" version="5" class="vulnerability">
      <metadata>
        <title>Integer underflow in the file_printf function in the "file" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1536"/>
        <description>Integer underflow in the file_printf function in the "file" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:27.619-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:34.598-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:55.537-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10658 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:20.386-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:29.970-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="file is earlier than 0:4.10-3.EL4.5" test_ref="oval:org.mitre.oval:tst:33575"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="file is earlier than 0:4.17-9.el5" test_ref="oval:org.mitre.oval:tst:33865"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10657" version="5" class="vulnerability">
      <metadata>
        <title>dm-crypt in Linux kernel 2.6.15 and earlier does not clear a structure before it is freed, which leads to a memory disclosure that could allow local users to obtain sensitive information about a cryptographic key.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0202" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0202"/>
        <description>Directory traversal vulnerability in the true_path function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via ".../....///" sequences, which are not properly cleansed by regular expressions that are intended to remove "../" and "./" sequences.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:40.400-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:34.282-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:55.290-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10657 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:06.598-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:29.219-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="mailman is earlier than 3:2.1.5-24.rhel3" test_ref="oval:org.mitre.oval:tst:31345"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="mailman is earlier than 3:2.1.5-31.rhel4" test_ref="oval:org.mitre.oval:tst:31357"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10656" version="5" class="vulnerability">
      <metadata>
        <title>Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters that are not part of a CRLF pair, and (3) header names containing whitespace characters.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0174"/>
        <description>Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters that are not part of a CRLF pair, and (3) header names containing whitespace characters.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:22.730-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:34.003-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:54.977-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10656 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:36.470-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:28.795-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE3-6.3E.7" test_ref="oval:org.mitre.oval:tst:30954"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE6-3.4E.3" test_ref="oval:org.mitre.oval:tst:31281"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10655" version="5" class="vulnerability">
      <metadata>
        <title>The favicon functionality in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary code via a LINK rel="icon" tag with a javascript: URL in the href attribute, aka "Firelinking."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1155" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1155"/>
        <description>The favicon functionality in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary code via a &lt;LINK rel="icon"> tag with a javascript: URL in the href attribute, aka "Firelinking."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:02.828-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:33.527-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:54.450-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10655 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:26.906-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:28.183-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31283"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31520"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31645"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31516"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31569"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31143"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31512"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31785"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31695"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31626"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31478"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.4" test_ref="oval:org.mitre.oval:tst:31488"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31751"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31647"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:30850"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31749"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.4" test_ref="oval:org.mitre.oval:tst:31658"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31636"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31780"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:30828"/>
            <criterion comment="firefox is earlier than 0:1.0.3-1.4.1" test_ref="oval:org.mitre.oval:tst:31646"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31716"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31758"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10654" version="5" class="vulnerability">
      <metadata>
        <title>Cross-zone vulnerability in Mozilla Firefox 1.5.0.9 considers blocked popups to have an internal zone origin, which allows user-assisted remote attackers to cross zone restrictions and read arbitrary file:// URIs by convincing a user to show a blocked popup.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0800" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0800"/>
        <description>Cross-zone vulnerability in Mozilla Firefox 1.5.0.9 considers blocked popups to have an internal zone origin, which allows user-assisted remote attackers to cross zone restrictions and read arbitrary file:// URIs by convincing a user to show a blocked popup.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:42.448-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:32.903-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:53.738-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10654 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:19.627-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:27.249-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33391"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33688"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33675"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33724"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33510"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33409"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33467"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33658"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33649"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33381"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:32760"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33554"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33648"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.10-0.1.el4" test_ref="oval:org.mitre.oval:tst:32765"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33712"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33705"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33379"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:33400"/>
            <criterion comment="firefox is earlier than 0:1.5.0.10-0.1.el4" test_ref="oval:org.mitre.oval:tst:33759"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33678"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33695"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33697"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33244"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33645"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.10-2.el5" test_ref="oval:org.mitre.oval:tst:33461"/>
            <criterion comment="yelp is earlier than 0:2.16.0-14.0.1.el5" test_ref="oval:org.mitre.oval:tst:33761"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-10.0.1.el5" test_ref="oval:org.mitre.oval:tst:33744"/>
            <criterion comment="devhelp is earlier than 0:0.12-10.0.1.el5" test_ref="oval:org.mitre.oval:tst:33415"/>
            <criterion comment="firefox is earlier than 0:1.5.0.10-2.el5" test_ref="oval:org.mitre.oval:tst:33616"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.10-1.el5" test_ref="oval:org.mitre.oval:tst:33493"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10653" version="5" class="vulnerability">
      <metadata>
        <title>usr/log.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 uses a semaphore with insecure permissions (world-writable/world-readable) for managing log messages using shared memory, which allows local users to cause a denial of service (hang) by grabbing the semaphore.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3100" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3100"/>
        <description>usr/log.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 uses a semaphore with insecure permissions (world-writable/world-readable) for managing log messages using shared memory, which allows local users to cause a denial of service (hang) by grabbing the semaphore.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:14.959-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:32.720-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:53.528-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10653 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:44.134-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:26.889-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="iscsi-initiator-utils is earlier than 0:6.2.0.742-0.6.el5" test_ref="oval:org.mitre.oval:tst:34477"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10652" version="5" class="vulnerability">
      <metadata>
        <title>gfs2 in the Linux kernel 2.6.18, and possibly other versions, does not properly handle when the gfs2_quota struct occupies two separate pages, which allows local users to cause a denial of service (kernel panic) via certain manipulations that cause an out-of-bounds write, as demonstrated by writing from an ext3 file system to a gfs2 file system.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1436"/>
        <description>gfs2 in the Linux kernel 2.6.18, and possibly other versions, does not properly handle when the gfs2_quota struct occupies two separate pages, which allows local users to cause a denial of service (kernel panic) via certain manipulations that cause an out-of-bounds write, as demonstrated by writing from an ext3 file system to a gfs2 file system.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:56.000-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:32.402-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:53.188-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10652 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:57.918-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:26.470-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40501"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40283"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40807"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40842"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40793"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40732"/>
          <criterion comment="kernel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40830"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40349"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:39978"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:39896"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40791"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40580"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10651" version="5" class="vulnerability">
      <metadata>
        <title>bgpd in Quagga 0.98 and 0.99 before 20060504 allows local users to cause a denial of service (CPU consumption) via a certain sh ip bgp command entered in the telnet interface.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2276" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2276"/>
        <description>bgpd in Quagga 0.98 and 0.99 before 20060504 allows local users to cause a denial of service (CPU consumption) via a certain sh ip bgp command entered in the telnet interface.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:14.731-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:32.158-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:52.856-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10651 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:01.271-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:25.907-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="quagga is earlier than 0:0.96.2-11.3E" test_ref="oval:org.mitre.oval:tst:32541"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="quagga-devel is earlier than 0:0.98.3-2.4E" test_ref="oval:org.mitre.oval:tst:32744"/>
            <criterion comment="quagga is earlier than 0:0.98.3-2.4E" test_ref="oval:org.mitre.oval:tst:32471"/>
            <criterion comment="quagga-contrib is earlier than 0:0.98.3-2.4E" test_ref="oval:org.mitre.oval:tst:32544"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10650" version="5" class="vulnerability">
      <metadata>
        <title>The popup blocker in Mozilla Firefox before 1.5.0.7 opens the "blocked popups" display in the context of the Location bar instead of the subframe from which the popup originated, which might make it easier for remote user-assisted attackers to conduct cross-site scripting (XSS) attacks.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4569" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4569"/>
        <description>The popup blocker in Mozilla Firefox before 1.5.0.7 opens the "blocked popups" display in the context of the Location bar instead of the subframe from which the popup originated, which might make it easier for remote user-assisted attackers to conduct cross-site scripting (XSS) attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:48.501-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:31.910-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:52.651-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10650 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:13.886-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:25.503-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="firefox is earlier than 0:1.5.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:32951"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1065" version="3" class="vulnerability">
      <metadata>
        <title>Multiple Format String Vulnerabilities in neon and Dependent Products</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0179"/>
        <description>Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversion, and (4) OpenOffice, allow remote malicious WebDAV servers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-10T04:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-25T04:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T04:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="modified upt-36 - Fixed typo: oofice should have been ooffice">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <modified date="2005-09-20T04:01:00.000-04:00" comment="modified upt-37 - Fixed typo--oofice should have been ooffice">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <modified date="2005-09-20T04:02:00.000-04:00" comment="modified upt-38 - Fixed typo--oofice should have been ooffice">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <modified date="2005-09-20T04:03:00.000-04:00" comment="modified cmp-940 - Fixed comment typo--oofice should have been ooffice">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:44.747-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:13.451-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="openoffice version is less than 1.1.0-15.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1223"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="OpenOffice Permissions">
            <criteria operator="OR" comment="/usr/bin/oocalc is executable">
              <criterion comment="/usr/bin/oocalc is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1222"/>
              <criterion comment="/usr/bin/oocalc is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1221"/>
              <criterion comment="/usr/bin/oocalc is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1220"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/oodraw is executable">
              <criterion comment="/usr/bin/oodraw is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1219"/>
              <criterion comment="/usr/bin/oodraw is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1218"/>
              <criterion comment="/usr/bin/oodraw is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1217"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ooffice is executable">
              <criterion comment="/usr/bin/ooffice is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1216"/>
              <criterion comment="/usr/bin/ooffice is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1215"/>
              <criterion comment="/usr/bin/ooffice is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1214"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/ooimpress is executable">
              <criterion comment="/usr/bin/ooimpress is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1213"/>
              <criterion comment="/usr/bin/ooimpress is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1212"/>
              <criterion comment="/usr/bin/ooimpress is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1211"/>
            </criteria>
            <criteria operator="OR" comment="/usr/bin/oowriter is executable">
              <criterion comment="/usr/bin/oowriter is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1210"/>
              <criterion comment="/usr/bin/oowriter is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1209"/>
              <criterion comment="/usr/bin/oowriter is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1208"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10649" version="5" class="vulnerability">
      <metadata>
        <title>The search_binary_handler function in exec.c in Linux 2.4 kernel on 64-bit x86 architectures does not check a return code for a particular function call when virtual memory is low, which allows local users to cause a denial of service (panic), as demonstrated by running a process using the bash ulimit -v command.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2708" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2708"/>
        <description>The search_binary_handler function in exec.c in Linux 2.4 kernel on 64-bit x86 architectures does not check a return code for a particular function call when virtual memory is low, which allows local users to cause a denial of service (panic), as demonstrated by running a process using the bash ulimit -v command.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:18.241-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:31.633-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:52.346-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10649 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:35.363-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:24.692-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32525"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32366"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32381"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32215"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32464"/>
          <criterion comment="kernel is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32288"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:31978"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32438"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32070"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10648" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain mail messages.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0078" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0078"/>
        <description>Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain mail messages.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:48.390-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:31.455-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:52.141-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10648 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:42.635-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:24.415-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="mutt is earlier than 5:1.4.1-3.4" test_ref="oval:org.mitre.oval:tst:30107"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10647" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in the setsid function in Linux before 2.6.8.1 allows local users to cause a denial of service (crash) and possibly access portions of kernel memory, related to TTY changes, locking, and semaphores.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0178"/>
        <description>Race condition in the setsid function in Linux before 2.6.8.1 allows local users to cause a denial of service (crash) and possibly access portions of kernel memory, related to TTY changes, locking, and semaphores.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:19.321-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:31.201-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:51.829-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10647 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:13.304-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:23.967-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30633"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:31009"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30369"/>
          <criterion comment="kernel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:31205"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30421"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30594"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30616"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10646" version="5" class="vulnerability">
      <metadata>
        <title>The FTP protocol implementation in Konqueror 3.5.5 allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1564" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1564"/>
        <description>The FTP protocol implementation in Konqueror 3.5.5 allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:30.687-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:30.896-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:51.554-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10646 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:44.691-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:23.549-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdelibs is earlier than 6:3.3.1-9.el4" test_ref="oval:org.mitre.oval:tst:35165"/>
            <criterion comment="kdelibs-devel is earlier than 6:3.3.1-9.el4" test_ref="oval:org.mitre.oval:tst:35252"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdelibs-apidocs is earlier than 6:3.5.4-13.el5" test_ref="oval:org.mitre.oval:tst:35316"/>
            <criterion comment="kdelibs is earlier than 6:3.5.4-13.el5" test_ref="oval:org.mitre.oval:tst:35293"/>
            <criterion comment="kdelibs-devel is earlier than 6:3.5.4-13.el5" test_ref="oval:org.mitre.oval:tst:34994"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10645" version="5" class="vulnerability">
      <metadata>
        <title>PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 does not properly restrict PL/perl procedures, which allows remote authenticated users, with database-creation privileges, to execute arbitrary Perl code via a crafted script, related to the Safe module (aka Safe.pm) for Perl. NOTE: some sources report that this issue is the same as CVE-2010-1447.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1169" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1169"/>
        <description>PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 does not properly restrict PL/perl procedures, which allows remote authenticated users, with database-creation privileges, to execute arbitrary Perl code via a crafted script, related to the Safe module (aka Safe.pm) for Perl. NOTE: some sources report that this issue is the same as CVE-2010-1447.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:52.581-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:30.124-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:50.690-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10645 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:31.198-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:22.541-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="rh-postgresql-devel is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40180"/>
            <criterion comment="rh-postgresql-server is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40440"/>
            <criterion comment="rh-postgresql-python is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40426"/>
            <criterion comment="rh-postgresql-libs is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40220"/>
            <criterion comment="rh-postgresql-docs is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:39618"/>
            <criterion comment="rh-postgresql-test is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40140"/>
            <criterion comment="rh-postgresql-pl is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40502"/>
            <criterion comment="rh-postgresql-tcl is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:39925"/>
            <criterion comment="rh-postgresql is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40137"/>
            <criterion comment="rh-postgresql-contrib is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40551"/>
            <criterion comment="rh-postgresql-jdbc is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40106"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40486"/>
            <criterion comment="postgresql-docs is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40521"/>
            <criterion comment="postgresql-pl is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40292"/>
            <criterion comment="postgresql-tcl is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40516"/>
            <criterion comment="postgresql-libs is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40066"/>
            <criterion comment="postgresql-contrib is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40399"/>
            <criterion comment="postgresql-python is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40512"/>
            <criterion comment="postgresql-test is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40314"/>
            <criterion comment="postgresql-jdbc is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40428"/>
            <criterion comment="postgresql-server is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40366"/>
            <criterion comment="postgresql-devel is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40465"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql84-server is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40291"/>
            <criterion comment="postgresql84-plpython is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40396"/>
            <criterion comment="postgresql84-libs is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40193"/>
            <criterion comment="postgresql84-devel is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40369"/>
            <criterion comment="postgresql84-python is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40555"/>
            <criterion comment="postgresql84-plperl is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40294"/>
            <criterion comment="postgresql-server is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40509"/>
            <criterion comment="postgresql84-test is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40470"/>
            <criterion comment="postgresql-devel is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40309"/>
            <criterion comment="postgresql is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40401"/>
            <criterion comment="postgresql84-tcl is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40455"/>
            <criterion comment="postgresql-docs is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40402"/>
            <criterion comment="postgresql-pl is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40538"/>
            <criterion comment="postgresql-libs is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40515"/>
            <criterion comment="postgresql-tcl is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:39839"/>
            <criterion comment="postgresql84-pltcl is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40452"/>
            <criterion comment="postgresql-contrib is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40505"/>
            <criterion comment="postgresql-python is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40251"/>
            <criterion comment="postgresql84-contrib is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40108"/>
            <criterion comment="postgresql-test is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40253"/>
            <criterion comment="postgresql84-docs is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40257"/>
            <criterion comment="postgresql84 is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40379"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10644" version="5" class="vulnerability">
      <metadata>
        <title>The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit systems, performs a multiplication using values that can produce a zero seed in rare circumstances, which allows context-dependent attackers to predict subsequent values of the rand and mt_rand functions and possibly bypass protection mechanisms that rely on an unknown initial seed.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2107" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2107"/>
        <description>The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit systems, performs a multiplication using values that can produce a zero seed in rare circumstances, which allows context-dependent attackers to predict subsequent values of the rand and mt_rand functions and possibly bypass protection mechanisms that rely on an unknown initial seed.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:56.515-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:29.348-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:49.881-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10644 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:33.402-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:21.570-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:37185"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:36983"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:36761"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:37254"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:37280"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:36584"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:37255"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37302"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37269"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:36771"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:36854"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37155"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37143"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:36781"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37125"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37202"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37223"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37010"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37319"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37113"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37239"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:36927"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37138"/>
            <criterion comment="php-common is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37146"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37179"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37204"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:36955"/>
            <criterion comment="php is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37260"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37282"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:36878"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37114"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:36634"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37118"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37283"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37127"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37086"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37328"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37036"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37144"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37165"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10643" version="5" class="vulnerability">
      <metadata>
        <title>Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, mod_jk), allows remote attackers to read arbitrary files via a .. (dot dot) sequence with combinations of (1) "/" (slash), (2) "\" (backslash), and (3) URL-encoded backslash (%5C) characters in the URL, which are valid separators in Tomcat but not in Apache.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0450" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0450"/>
        <description>Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, mod_jk), allows remote attackers to read arbitrary files via a .. (dot dot) sequence with combinations of (1) "/" (slash), (2) "\" (backslash), and (3) URL-encoded backslash (%5C) characters in the URL, which are valid separators in Tomcat but not in Apache.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:22.761-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:28.943-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:49.528-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10643 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:34.307-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:21.105-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:33900"/>
          <criterion comment="tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:33729"/>
          <criterion comment="tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:34201"/>
          <criterion comment="jakarta-commons-modeler is earlier than 0:1.1-8jpp.1.0.2.el5" test_ref="oval:org.mitre.oval:tst:34103"/>
          <criterion comment="tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:34030"/>
          <criterion comment="jakarta-commons-modeler-javadoc is earlier than 0:1.1-8jpp.1.0.2.el5" test_ref="oval:org.mitre.oval:tst:33946"/>
          <criterion comment="tomcat5-webapps is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:34190"/>
          <criterion comment="tomcat5 is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:34110"/>
          <criterion comment="tomcat5-jasper is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:34093"/>
          <criterion comment="tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:33926"/>
          <criterion comment="tomcat5-server-lib is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:33402"/>
          <criterion comment="tomcat5-common-lib is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:33860"/>
          <criterion comment="tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:34091"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10642" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Wireshark 0.99.6 through 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted Tektronix .rf5 file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1269" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1269"/>
        <description>Unspecified vulnerability in Wireshark 0.99.6 through 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted Tektronix .rf5 file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:49.694-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:28.648-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:49.215-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10642 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:23.718-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:20.544-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.8-EL3.1" test_ref="oval:org.mitre.oval:tst:38258"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.8-EL3.1" test_ref="oval:org.mitre.oval:tst:38534"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.8-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:38635"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.8-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:38709"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.8-1.el5_3.1" test_ref="oval:org.mitre.oval:tst:38670"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.8-1.el5_3.1" test_ref="oval:org.mitre.oval:tst:38619"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10641" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the RTSPProtocol::HandleSetParameterRequest function in client/core/rtspprotocol.cpp in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted RTSP SET_PARAMETER request.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4248"/>
        <description>Buffer overflow in the RTSPProtocol::HandleSetParameterRequest function in client/core/rtspprotocol.cpp in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted RTSP SET_PARAMETER request.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:21.107-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:28.461-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:48.952-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10641 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:32.736-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:20.248-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="HelixPlayer is earlier than 1:1.0.6-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39912"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10640" version="5" class="vulnerability">
      <metadata>
        <title>The load_elf_library in the Linux kernel before 2.6.11.6 allows local users to cause a denial of service (kernel crash) via a crafted ELF library or executable, which causes a free of an invalid pointer.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0749" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0749"/>
        <description>The load_elf_library in the Linux kernel before 2.6.11.6 allows local users to cause a denial of service (kernel crash) via a crafted ELF library or executable, which causes a free of an invalid pointer.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:18.453-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:28.067-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:48.531-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10640 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:29.556-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:19.355-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31148"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31473"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31178"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31282"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31565"/>
            <criterion comment="kernel is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31562"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31582"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:30730"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31534"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31545"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31539"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31661"/>
            <criterion comment="kernel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31482"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31112"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31605"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31330"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10639" version="5" class="vulnerability">
      <metadata>
        <title>The EstimateStripByteCounts function in TIFF library (libtiff) before 3.8.2 uses a 16-bit unsigned short when iterating over an unsigned 32-bit value, which allows context-dependent attackers to cause a denial of service via a large td_nstrips value, which triggers an infinite loop.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3463" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3463"/>
        <description>The EstimateStripByteCounts function in TIFF library (libtiff) before 3.8.2 uses a 16-bit unsigned short when iterating over an unsigned 32-bit value, which allows context-dependent attackers to cause a denial of service via a large td_nstrips value, which triggers an infinite loop.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:45.143-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:27.749-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:48.242-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10639 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:08:55.681-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:18.873-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.1.3-3.10" test_ref="oval:org.mitre.oval:tst:32819"/>
            <criterion comment="libtiff is earlier than 0:3.5.7-25.el3.4" test_ref="oval:org.mitre.oval:tst:32069"/>
            <criterion comment="kdegraphics is earlier than 7:3.1.3-3.10" test_ref="oval:org.mitre.oval:tst:33012"/>
            <criterion comment="libtiff-devel is earlier than 0:3.5.7-25.el3.4" test_ref="oval:org.mitre.oval:tst:32843"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libtiff is earlier than 0:3.6.1-12" test_ref="oval:org.mitre.oval:tst:32922"/>
            <criterion comment="libtiff-devel is earlier than 0:3.6.1-12" test_ref="oval:org.mitre.oval:tst:32413"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10638" version="5" class="vulnerability">
      <metadata>
        <title>A certain Red Hat build script for nfs-utils before 1.0.9-35z.el5_2 on Red Hat Enterprise Linux (RHEL) 5 omits TCP wrappers support, which might allow remote attackers to bypass intended access restrictions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1376" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1376"/>
        <description>A certain Red Hat build script for nfs-utils before 1.0.9-35z.el5_2 on Red Hat Enterprise Linux (RHEL) 5 omits TCP wrappers support, which might allow remote attackers to bypass intended access restrictions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:56.557-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:27.531-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:47.911-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10638 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:16:51.800-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:18.486-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="nfs-utils is earlier than 0:1.0.6-93.EL4" test_ref="oval:org.mitre.oval:tst:37910"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="nfs-utils is earlier than 1:1.0.9-35z.el5_2" test_ref="oval:org.mitre.oval:tst:36762"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10637" version="5" class="vulnerability">
      <metadata>
        <title>The do_sigaltstack function in kernel/signal.c in Linux kernel 2.4 through 2.4.37 and 2.6 before 2.6.31-rc5, when running on 64-bit systems, does not clear certain padding bytes from a structure, which allows local users to obtain sensitive information from the kernel stack via the sigaltstack function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2847"/>
        <description>The do_sigaltstack function in kernel/signal.c in Linux kernel 2.4 through 2.4.37 and 2.6 before 2.6.31-rc5, when running on 64-bit systems, does not clear certain padding bytes from a structure, which allows local users to obtain sensitive information from the kernel stack via the sigaltstack function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:43.890-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:26.945-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:47.304-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10637 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:54.723-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:17.801-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39101"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39357"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:38568"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39331"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39316"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39054"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39274"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39407"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39435"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:39442"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.11.EL" test_ref="oval:org.mitre.oval:tst:38473"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38255"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38332"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39122"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39058"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39247"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39145"/>
            <criterion comment="kernel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38795"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38831"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38585"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39130"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38567"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39245"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10636" version="5" class="vulnerability">
      <metadata>
        <title>The hpssd message parser in hpssd.py in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to cause a denial of service (process stop) via a crafted packet, as demonstrated by sending "msg=0" to TCP port 2207.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2941" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2941"/>
        <description>The hpssd message parser in hpssd.py in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to cause a denial of service (process stop) via a crafted packet, as demonstrated by sending "msg=0" to TCP port 2207.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:24.591-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:26.730-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:47.087-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10636 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:13.910-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:17.474-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="hpijs is earlier than 0:1.6.7-4.1.el5_2.4" test_ref="oval:org.mitre.oval:tst:37257"/>
          <criterion comment="libsane-hpaio is earlier than 0:1.6.7-4.1.el5_2.4" test_ref="oval:org.mitre.oval:tst:37507"/>
          <criterion comment="hplip is earlier than 0:1.6.7-4.1.el5_2.4" test_ref="oval:org.mitre.oval:tst:37514"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10635" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in the JavaScript garbage collection in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code by causing the garbage collector to delete a temporary variable while it is still being used during the creation of a new Function object.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3803" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3803"/>
        <description>Race condition in the JavaScript garbage collection in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code by causing the garbage collector to delete a temporary variable while it is still being used during the creation of a new Function object.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:10.814-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:26.236-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:46.528-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10635 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:08:59.207-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:16.781-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32342"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32877"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:31982"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32816"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32080"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32904"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32915"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32924"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32822"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32555"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32873"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32693"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32886"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32810"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32418"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32496"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32929"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32777"/>
            <criterion comment="firefox is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32896"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32722"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32906"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32905"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32925"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32624"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10634" version="3" class="vulnerability">
      <metadata>
        <title>The Java Secure Socket Extension (JSSE) in Sun JDK and JRE 6 Update 1 and earlier, JDK and JRE 5.0 Updates 7 through 11, and SDK and JRE 1.4.2_11 through 1.4.2_14, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service (CPU consumption) via certain SSL/TLS handshake requests.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3698"/>
        <description>The Java Secure Socket Extension (JSSE) in Sun JDK and JRE 6 Update 1 and earlier, JDK and JRE 5.0 Updates 7 through 11, and SDK and JRE 1.4.2_11 through 1.4.2_14, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service (CPU consumption) via certain SSL/TLS handshake requests.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:28.183-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:25.392-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:45.610-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criteria operator="OR">
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:35438"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:36312"/>
            <criterion comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:36020"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:36170"/>
            <criterion comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:36131"/>
            <criterion comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:35578"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:35718"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:36338"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:35439"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.12-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34910"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35892"/>
            <criterion comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35850"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.12-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34327"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36357"/>
            <criterion comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36067"/>
            <criterion comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35854"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35532"/>
            <criterion comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35322"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36219"/>
            <criterion comment="java-1.5.0-bea is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34920"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35875"/>
            <criterion comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35815"/>
            <criterion comment="java-1.5.0-bea-src is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35346"/>
            <criterion comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35349"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.12-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34363"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.12-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35033"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.12-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34884"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36292"/>
            <criterion comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35189"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.12-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35121"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.4.2-bea-missioncontrol is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35296"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36198"/>
            <criterion comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35192"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36227"/>
            <criterion comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36087"/>
            <criterion comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35972"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36003"/>
            <criterion comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35247"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36350"/>
            <criterion comment="java-1.5.0-bea is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35253"/>
            <criterion comment="java-1.4.2-bea-demo is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36127"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35886"/>
            <criterion comment="java-1.5.0-bea-src is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34479"/>
            <criterion comment="java-1.5.0-bea-missioncontrol is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35180"/>
            <criterion comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36301"/>
            <criterion comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35169"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35822"/>
            <criterion comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35150"/>
            <criterion comment="java-1.4.2-bea-src is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36128"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10633" version="5" class="vulnerability">
      <metadata>
        <title>A regression error in Firefox 1.0.3 and Mozilla 1.7.7 allows remote attackers to inject arbitrary Javascript from one page into the frameset of another site, aka the frame injection spoofing vulnerability, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2004-0718.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1937" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1937"/>
        <description>A regression error in Firefox 1.0.3 and Mozilla 1.7.7 allows remote attackers to inject arbitrary Javascript from one page into the frameset of another site, aka the frame injection spoofing vulnerability, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2004-0718.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:39.731-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:24.854-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:45.089-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10633 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:08:54.720-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:16.156-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32142"/>
            <criterion comment="mozilla is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32131"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32154"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32001"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32171"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32162"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31782"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32041"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32004"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31353"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32120"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.6" test_ref="oval:org.mitre.oval:tst:31633"/>
            <criterion comment="mozilla is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31837"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32100"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31821"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31904"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.6" test_ref="oval:org.mitre.oval:tst:31814"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31951"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31554"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32149"/>
            <criterion comment="firefox is earlier than 0:1.0.6-1.4.1" test_ref="oval:org.mitre.oval:tst:32167"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31998"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32061"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10632" version="5" class="vulnerability">
      <metadata>
        <title>The lvmcreate_initrd script in the lvm package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0972" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0972"/>
        <description>The lvmcreate_initrd script in the lvm package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:59.249-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:24.665-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:44.852-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10632 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:20.776-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:15.812-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="lvm is earlier than 0:1.0.8-5" test_ref="oval:org.mitre.oval:tst:30564"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10631" version="5" class="vulnerability">
      <metadata>
        <title>The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC credential, which causes kadmind to free an uninitialized pointer during cleanup.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2442" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2442"/>
        <description>The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC credential, which causes kadmind to free an uninitialized pointer during cleanup.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:57.724-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:24.099-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:44.429-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10631 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:44.983-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:15.221-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.2.7-66" test_ref="oval:org.mitre.oval:tst:33627"/>
            <criterion comment="krb5 is earlier than 0:1.2.7-66" test_ref="oval:org.mitre.oval:tst:34238"/>
            <criterion comment="krb5-libs is earlier than 0:1.2.7-66" test_ref="oval:org.mitre.oval:tst:34171"/>
            <criterion comment="krb5-server is earlier than 0:1.2.7-66" test_ref="oval:org.mitre.oval:tst:33767"/>
            <criterion comment="krb5-devel is earlier than 0:1.2.7-66" test_ref="oval:org.mitre.oval:tst:34147"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.3.4-49" test_ref="oval:org.mitre.oval:tst:34640"/>
            <criterion comment="krb5 is earlier than 0:1.3.4-49" test_ref="oval:org.mitre.oval:tst:34202"/>
            <criterion comment="krb5-libs is earlier than 0:1.3.4-49" test_ref="oval:org.mitre.oval:tst:34749"/>
            <criterion comment="krb5-server is earlier than 0:1.3.4-49" test_ref="oval:org.mitre.oval:tst:34767"/>
            <criterion comment="krb5-devel is earlier than 0:1.3.4-49" test_ref="oval:org.mitre.oval:tst:34660"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.5-26" test_ref="oval:org.mitre.oval:tst:34728"/>
            <criterion comment="krb5 is earlier than 0:1.5-26" test_ref="oval:org.mitre.oval:tst:34350"/>
            <criterion comment="krb5-libs is earlier than 0:1.5-26" test_ref="oval:org.mitre.oval:tst:34575"/>
            <criterion comment="krb5-server is earlier than 0:1.5-26" test_ref="oval:org.mitre.oval:tst:34729"/>
            <criterion comment="krb5-devel is earlier than 0:1.5-26" test_ref="oval:org.mitre.oval:tst:34195"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10630" version="5" class="vulnerability">
      <metadata>
        <title>The ptrace call in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform allows local users to cause a denial of service (kernel crash) via a "non-canonical" address.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1762" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1762"/>
        <description>The ptrace call in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform allows local users to cause a denial of service (kernel crash) via a "non-canonical" address.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:32.685-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:23.652-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:43.952-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10630 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:40.659-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:14.650-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31411"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31953"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31879"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31990"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31485"/>
            <criterion comment="kernel is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32093"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31968"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32148"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31741"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31896"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31885"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31861"/>
            <criterion comment="kernel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31550"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31914"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31924"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:32023"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1063" version="6" class="vulnerability">
      <metadata>
        <title>WMF Rendering Code Execution Vulnerability (Windows 2000)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2123" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2123"/>
        <description>Multiple integer overflows in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allow remote attackers to execute arbitrary code via crafted Windows Metafile (WMF) and Enhanced Metafile (EMF) format images that lead to heap-based buffer overflows, as demonstrated using MRBP16::bCheckRecord.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-11-09T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-11-10T07:06:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-12-01T06:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-16T01:04:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:14.349-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:39.889-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1063 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:47.901-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:15.176-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criteria operator="OR" comment="version of Gdi32.dll is less than 5.0.2195.7069 OR the version of Mf3216.dll is less than 5.0.2195.6898">
          <criterion comment="the version of Gdi32.dll is less than 5.0.2195.7069" test_ref="oval:org.mitre.oval:tst:1227"/>
          <criterion comment="the version of mf3216.dll is less than 5.0.2195.6898" test_ref="oval:org.mitre.oval:tst:1398"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10629" version="5" class="vulnerability">
      <metadata>
        <title>The native implementations of InstallTrigger and other functions in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 do not properly verify the types of objects being accessed, which causes the Javascript interpreter to continue execution at the wrong memory address, which may allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code by passing objects of the wrong type.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1159"/>
        <description>The native implementations of InstallTrigger and other functions in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 do not properly verify the types of objects being accessed, which causes the Javascript interpreter to continue execution at the wrong memory address, which may allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code by passing objects of the wrong type.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:23.092-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:23.166-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:43.436-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10629 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:22.174-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:13.929-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31283"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31520"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31645"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31516"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31569"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31143"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31512"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31785"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31695"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31626"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31478"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.4" test_ref="oval:org.mitre.oval:tst:31488"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31751"/>
            <criterion comment="thunderbird is earlier than 0:1.0.6-1.4.1" test_ref="oval:org.mitre.oval:tst:32113"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31647"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:30850"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31749"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.4" test_ref="oval:org.mitre.oval:tst:31658"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31636"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31780"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:30828"/>
            <criterion comment="firefox is earlier than 0:1.0.3-1.4.1" test_ref="oval:org.mitre.oval:tst:31646"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31716"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31758"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10628" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime.cpp in xul.dll in Mozilla Firefox 3 before 3.0.11 might allow remote attackers to execute arbitrary code via a page transition during Java applet loading, related to a use-after-free vulnerability for memory associated with a destroyed Java object.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1837" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1837"/>
        <description>Race condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime.cpp in xul.dll in Mozilla Firefox 3 before 3.0.11 might allow remote attackers to execute arbitrary code via a page transition during Java applet loading, related to a use-after-free vulnerability for memory associated with a destroyed Java object.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:48.723-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:22.857-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:43.153-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10628 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:00.679-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:13.505-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.11-4.el4" test_ref="oval:org.mitre.oval:tst:38689"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38771"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38371"/>
            <criterion comment="firefox is earlier than 0:3.0.11-2.el5_3" test_ref="oval:org.mitre.oval:tst:38682"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38718"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10627" version="5" class="vulnerability">
      <metadata>
        <title>xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not properly restrict a guest VM's write access within this tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to (1) console/tty, (2) console/limit, or (3) image/device-model-pid.  NOTE: this issue was originally reported as an issue in libvirt 0.3.3 and xenstore, but CVE is considering the core issue to be related to Xen.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4405" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4405"/>
        <description>xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not properly restrict a guest VM's write access within this tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to (1) console/tty, (2) console/limit, or (3) image/device-model-pid.  NOTE: this issue was originally reported as an issue in libvirt 0.3.3 and xenstore, but CVE is considering the core issue to be related to Xen.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:23.876-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:22.653-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:42.896-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10627 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:09.267-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:13.185-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="xen-libs is earlier than 0:3.0.3-64.el5_2.9" test_ref="oval:org.mitre.oval:tst:38117"/>
          <criterion comment="xen is earlier than 0:3.0.3-64.el5_2.9" test_ref="oval:org.mitre.oval:tst:37962"/>
          <criterion comment="xen-devel is earlier than 0:3.0.3-64.el5_2.9" test_ref="oval:org.mitre.oval:tst:38017"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10626" version="5" class="vulnerability">
      <metadata>
        <title>The setsockopt function in the L2CAP and HCI Bluetooth support in the Linux kernel before 2.4.34.3 allows context-dependent attackers to read kernel memory and obtain sensitive information via unspecified vectors involving the copy_from_user function accessing an uninitialized stack buffer.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1353"/>
        <description>The setsockopt function in the L2CAP and HCI Bluetooth support in the Linux kernel before 2.4.34.3 allows context-dependent attackers to read kernel memory and obtain sensitive information via unspecified vectors involving the copy_from_user function accessing an uninitialized stack buffer.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:54.671-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:21.982-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:42.239-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10626 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:28.783-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:12.360-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-51.EL" test_ref="oval:org.mitre.oval:tst:34725"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-51.EL" test_ref="oval:org.mitre.oval:tst:34431"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-51.EL" test_ref="oval:org.mitre.oval:tst:34865"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-51.EL" test_ref="oval:org.mitre.oval:tst:34807"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-51.EL" test_ref="oval:org.mitre.oval:tst:34508"/>
            <criterion comment="kernel is earlier than 0:2.4.21-51.EL" test_ref="oval:org.mitre.oval:tst:33889"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-51.EL" test_ref="oval:org.mitre.oval:tst:34880"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-51.EL" test_ref="oval:org.mitre.oval:tst:34813"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-51.EL" test_ref="oval:org.mitre.oval:tst:34872"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34475"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34659"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34630"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34375"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34496"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34560"/>
            <criterion comment="kernel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34493"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34302"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34295"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34662"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:33694"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34290"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34311"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34023"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34185"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34210"/>
            <criterion comment="kernel is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34306"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34033"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34168"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34261"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34155"/>
            <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34278"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10625" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in nss_ldap, when used in applications that are linked against the pthread library and fork after a call to nss_ldap, might send user data to the wrong process because of improper handling of the LDAP connection. NOTE: this issue was originally reported for Dovecot with the wrong mailboxes being returned, but other applications might also be affected.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5794" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5794"/>
        <description>Race condition in nss_ldap, when used in applications that are linked against the pthread library and fork after a call to nss_ldap, might send user data to the wrong process because of improper handling of the LDAP connection. NOTE: this issue was originally reported for Dovecot with the wrong mailboxes being returned, but other applications might also be affected.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:11.948-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:21.752-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:41.937-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10625 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:07.910-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:11.908-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="nss_ldap is earlier than 0:253-5.el4" test_ref="oval:org.mitre.oval:tst:36591"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="nss_ldap is earlier than 0:253-12.el5" test_ref="oval:org.mitre.oval:tst:36713"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10624" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in packet_ncp2222.inc in Wireshark (formerly Ethereal) 0.9.7 through 1.0.2 allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted NCP packet that causes an invalid pointer to be used.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3146" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3146"/>
        <description>Multiple buffer overflows in packet_ncp2222.inc in Wireshark (formerly Ethereal) 0.9.7 through 1.0.2 allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted NCP packet that causes an invalid pointer to be used.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:28.945-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:21.458-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:41.615-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10624 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:34.134-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:11.416-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-EL3.3" test_ref="oval:org.mitre.oval:tst:37624"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-EL3.3" test_ref="oval:org.mitre.oval:tst:37207"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-3.el4_7" test_ref="oval:org.mitre.oval:tst:37249"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-3.el4_7" test_ref="oval:org.mitre.oval:tst:37725"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37542"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37460"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10623" version="5" class="vulnerability">
      <metadata>
        <title>Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed SMB packet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0009" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0009"/>
        <description>Unknown vulnerability in the Gnutella dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (application crash).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:06.756-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:21.217-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:41.350-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10623 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:10:07.948-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:10.940-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.9-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31265"/>
            <criterion comment="ethereal is earlier than 0:0.10.9-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31218"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.9-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31097"/>
            <criterion comment="ethereal is earlier than 0:0.10.9-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31103"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10622" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a malformed HB-ACK chunk.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1857" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1857"/>
        <description>Buffer overflow in SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a malformed HB-ACK chunk.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:13.232-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:20.889-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:41.045-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10622 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:59.681-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:10.549-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32335"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32833"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32825"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32836"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32736"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:31931"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32361"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32793"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32795"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10621" version="5" class="vulnerability">
      <metadata>
        <title>The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0975" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0975"/>
        <description>The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:08.091-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:20.597-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:40.571-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10621 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:08:39.448-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:10.127-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.7a-33.15" test_ref="oval:org.mitre.oval:tst:31812"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.7a-33.15" test_ref="oval:org.mitre.oval:tst:31983"/>
            <criterion comment="openssl is earlier than 0:0.9.7a-33.15" test_ref="oval:org.mitre.oval:tst:31624"/>
            <criterion comment="openssl096b is earlier than 0:0.9.6b-16.22.3" test_ref="oval:org.mitre.oval:tst:31581"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.7a-43.2" test_ref="oval:org.mitre.oval:tst:31638"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.7a-43.2" test_ref="oval:org.mitre.oval:tst:31774"/>
            <criterion comment="openssl is earlier than 0:0.9.7a-43.2" test_ref="oval:org.mitre.oval:tst:31889"/>
            <criterion comment="openssl096b is earlier than 0:0.9.6b-22.3" test_ref="oval:org.mitre.oval:tst:31947"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10620" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the ParseCommand function in hpgl-input.c in the hpgltops program for CUPS 1.1.22 allows remote attackers to execute arbitrary code via a crafted HPGL file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1267" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1267"/>
        <description>Buffer overflow in the ParseCommand function in hpgl-input.c in the hpgltops program for CUPS 1.1.22 allows remote attackers to execute arbitrary code via a crafted HPGL file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:35.183-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:20.323-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:40.275-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10620 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:55.515-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:09.538-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.22" test_ref="oval:org.mitre.oval:tst:30882"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.22" test_ref="oval:org.mitre.oval:tst:31108"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.22" test_ref="oval:org.mitre.oval:tst:31170"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.6" test_ref="oval:org.mitre.oval:tst:30919"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.6" test_ref="oval:org.mitre.oval:tst:31056"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.6" test_ref="oval:org.mitre.oval:tst:31093"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1062" version="1" class="vulnerability">
      <metadata>
        <title>DCOM RPC Object Identity Windows 2000 Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Remote Procedure Call (RPC)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0124" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0124"/>
        <description>The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via an "alter context" call that contains additional data, aka the "Object Identity Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-20T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="the version of comsvcs.dll is less than 2000.2.3511.0" negate="false" test_ref="oval:org.mitre.oval:tst:1228"/>
        <criterion comment="the patch kb828741 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1499"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10619" version="5" class="vulnerability">
      <metadata>
        <title>The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore null characters and facilitate the exploitation of cross-site scripting (XSS) vulnerabilities.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0595" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0595"/>
        <description>The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore null characters and facilitate the exploitation of cross-site scripting (XSS) vulnerabilities.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:48.569-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:20.077-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:39.969-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10619 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:58.985-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:09.197-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="php is earlier than 0:4.3.2-11.1.ent" test_ref="oval:org.mitre.oval:tst:30741"/>
          <criterion comment="php-pgsql is earlier than 0:4.3.2-11.1.ent" test_ref="oval:org.mitre.oval:tst:30765"/>
          <criterion comment="php-mysql is earlier than 0:4.3.2-11.1.ent" test_ref="oval:org.mitre.oval:tst:30773"/>
          <criterion comment="php-ldap is earlier than 0:4.3.2-11.1.ent" test_ref="oval:org.mitre.oval:tst:30554"/>
          <criterion comment="php-imap is earlier than 0:4.3.2-11.1.ent" test_ref="oval:org.mitre.oval:tst:30707"/>
          <criterion comment="php-odbc is earlier than 0:4.3.2-11.1.ent" test_ref="oval:org.mitre.oval:tst:30729"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10618" version="5" class="vulnerability">
      <metadata>
        <title>PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications via invalid encodings of multibyte characters, aka one variant of "Encoding-Based SQL Injection."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2313" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2313"/>
        <description>PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications via invalid encodings of multibyte characters, aka one variant of "Encoding-Based SQL Injection."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:01.233-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:19.564-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:39.457-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10618 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:28.469-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:08.538-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="rh-postgresql-devel is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32465"/>
            <criterion comment="rh-postgresql-server is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32618"/>
            <criterion comment="rh-postgresql-python is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32497"/>
            <criterion comment="rh-postgresql-libs is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32527"/>
            <criterion comment="rh-postgresql-docs is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32392"/>
            <criterion comment="rh-postgresql-test is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32719"/>
            <criterion comment="rh-postgresql-pl is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32621"/>
            <criterion comment="rh-postgresql-tcl is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32195"/>
            <criterion comment="rh-postgresql is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32628"/>
            <criterion comment="rh-postgresql-contrib is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:32601"/>
            <criterion comment="rh-postgresql-jdbc is earlier than 0:7.3.15-2" test_ref="oval:org.mitre.oval:tst:31936"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32101"/>
            <criterion comment="postgresql-docs is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31976"/>
            <criterion comment="postgresql-pl is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32564"/>
            <criterion comment="postgresql-tcl is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32038"/>
            <criterion comment="postgresql-libs is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32648"/>
            <criterion comment="postgresql-contrib is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31768"/>
            <criterion comment="postgresql-python is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32626"/>
            <criterion comment="postgresql-test is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31950"/>
            <criterion comment="postgresql-jdbc is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32604"/>
            <criterion comment="postgresql-server is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32472"/>
            <criterion comment="postgresql-devel is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32278"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10617" version="5" class="vulnerability">
      <metadata>
        <title>SpamAssassin before 3.1.3, when running with vpopmail and the paranoid (-P) switch, allows remote attackers to execute arbitrary commands via a crafted message that is not properly handled when invoking spamd with the virtual pop username.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0088"/>
        <description>The publisher handler for mod_python 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:01.851-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:19.337-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:39.207-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10617 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:55.866-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:08.180-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="mod_python is earlier than 0:3.0.3-5.ent" test_ref="oval:org.mitre.oval:tst:31355"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="mod_python is earlier than 0:3.1.3-5.1" test_ref="oval:org.mitre.oval:tst:31360"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10616" version="5" class="vulnerability">
      <metadata>
        <title>The IRC protocol dissector in Ethereal 0.10.13 allows remote attackers to cause a denial of service (infinite loop).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3313" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3313"/>
        <description>The IRC protocol dissector in Ethereal 0.10.13 allows remote attackers to cause a denial of service (infinite loop).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:07.588-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:19.091-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:38.882-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10616 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:50.498-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:07.739-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.14-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32303"/>
            <criterion comment="ethereal is earlier than 0:0.10.14-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32466"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.14-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32538"/>
            <criterion comment="ethereal is earlier than 0:0.10.14-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32039"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10615" version="5" class="vulnerability">
      <metadata>
        <title>The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local users to use the KDSKBSENT ioctl on terminals of other users and gain privileges, as demonstrated by modifying key bindings using loadkeys.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3257" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3257"/>
        <description>The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local users to use the KDSKBSENT ioctl on terminals of other users and gain privileges, as demonstrated by modifying key bindings using loadkeys.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:57.725-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:18.754-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:38.557-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10615 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:08.667-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:07.310-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-xenU is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30189"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30542"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30504"/>
          <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30169"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:29589"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30432"/>
          <criterion comment="kernel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:29669"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30424"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30299"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30268"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30561"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10614" version="5" class="vulnerability">
      <metadata>
        <title>Certain chunk handlers in libpng before 1.0.29 and 1.2.x before 1.2.21 allow remote attackers to cause a denial of service (crash) via crafted (1) pCAL (png_handle_pCAL), (2) sCAL (png_handle_sCAL), (3) tEXt (png_push_read_tEXt), (4) iTXt (png_handle_iTXt), and (5) ztXT (png_handle_ztXt) chunking in PNG images, which trigger out-of-bounds read operations.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5269" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5269"/>
        <description>Certain chunk handlers in libpng before 1.0.29 and 1.2.x before 1.2.21 allow remote attackers to cause a denial of service (crash) via crafted (1) pCAL (png_handle_pCAL), (2) sCAL (png_handle_sCAL), (3) tEXt (png_push_read_tEXt), (4) iTXt (png_handle_iTXt), and (5) ztXT (png_handle_ztXt) chunking in PNG images, which trigger out-of-bounds read operations.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:49.362-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:18.414-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:38.180-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10614 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:46.341-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:06.742-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libpng10-devel is earlier than 0:1.0.13-18" test_ref="oval:org.mitre.oval:tst:35492"/>
            <criterion comment="libpng-devel is earlier than 2:1.2.2-28" test_ref="oval:org.mitre.oval:tst:35536"/>
            <criterion comment="libpng is earlier than 2:1.2.2-28" test_ref="oval:org.mitre.oval:tst:35452"/>
            <criterion comment="libpng10 is earlier than 0:1.0.13-18" test_ref="oval:org.mitre.oval:tst:35550"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libpng10-devel is earlier than 0:1.0.16-3.el4_5.1" test_ref="oval:org.mitre.oval:tst:34609"/>
            <criterion comment="libpng-devel is earlier than 2:1.2.7-3.el4_5.1" test_ref="oval:org.mitre.oval:tst:34929"/>
            <criterion comment="libpng is earlier than 2:1.2.7-3.el4_5.1" test_ref="oval:org.mitre.oval:tst:35302"/>
            <criterion comment="libpng10 is earlier than 0:1.0.16-3.el4_5.1" test_ref="oval:org.mitre.oval:tst:35548"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libpng-devel is earlier than 2:1.2.10-7.1.el5_0.1" test_ref="oval:org.mitre.oval:tst:35461"/>
            <criterion comment="libpng is earlier than 2:1.2.10-7.1.el5_0.1" test_ref="oval:org.mitre.oval:tst:35443"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10613" version="5" class="vulnerability">
      <metadata>
        <title>The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with malformed UTF-8 sequences that trigger a buffer over-read, related to the doProlog function in lib/xmlparse.c, a different vulnerability than CVE-2009-2625 and CVE-2009-3720.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3560" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3560"/>
        <description>The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with malformed UTF-8 sequences that trigger a buffer over-read, related to the doProlog function in lib/xmlparse.c, a different vulnerability than CVE-2009-2625 and CVE-2009-3720.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:40.206-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:18.125-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:37.844-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10613 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:10.372-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:06.243-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="expat is earlier than 0:1.95.5-6.2" test_ref="oval:org.mitre.oval:tst:39654"/>
            <criterion comment="expat-devel is earlier than 0:1.95.5-6.2" test_ref="oval:org.mitre.oval:tst:39129"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="expat is earlier than 0:1.95.7-4.el4_8.2" test_ref="oval:org.mitre.oval:tst:39733"/>
            <criterion comment="expat-devel is earlier than 0:1.95.7-4.el4_8.2" test_ref="oval:org.mitre.oval:tst:39660"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="expat is earlier than 0:1.95.8-8.3.el5_4.2" test_ref="oval:org.mitre.oval:tst:39521"/>
            <criterion comment="expat-devel is earlier than 0:1.95.8-8.3.el5_4.2" test_ref="oval:org.mitre.oval:tst:39647"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10612" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in Imagemagick 6.0 before 6.0.6.2, and 6.2 before 6.2.4.5, has unknown impact and user-assisted attack vectors via a crafted SGI image.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5868" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5868"/>
        <description>Multiple buffer overflows in Imagemagick 6.0 before 6.0.6.2, and 6.2 before 6.2.4.5, has unknown impact and user-assisted attack vectors via a crafted SGI image.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:18.617-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:17.747-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:37.105-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10612 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:02:59.487-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:05.758-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:5.5.6-24" test_ref="oval:org.mitre.oval:tst:33189"/>
            <criterion comment="ImageMagick is earlier than 0:5.5.6-24" test_ref="oval:org.mitre.oval:tst:33318"/>
            <criterion comment="ImageMagick-perl is earlier than 0:5.5.6-24" test_ref="oval:org.mitre.oval:tst:33102"/>
            <criterion comment="ImageMagick-devel is earlier than 0:5.5.6-24" test_ref="oval:org.mitre.oval:tst:33080"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:5.5.6-24" test_ref="oval:org.mitre.oval:tst:33315"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-16.0.3" test_ref="oval:org.mitre.oval:tst:33269"/>
            <criterion comment="ImageMagick is earlier than 0:6.0.7.1-16.0.3" test_ref="oval:org.mitre.oval:tst:33326"/>
            <criterion comment="ImageMagick-perl is earlier than 0:6.0.7.1-16.0.3" test_ref="oval:org.mitre.oval:tst:32926"/>
            <criterion comment="ImageMagick-devel is earlier than 0:6.0.7.1-16.0.3" test_ref="oval:org.mitre.oval:tst:32622"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:6.0.7.1-16.0.3" test_ref="oval:org.mitre.oval:tst:33361"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10611" version="5" class="vulnerability">
      <metadata>
        <title>Array index error in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted Sync Sample (aka stss) atom data in a malformed QuickTime media .mov file, related to "mark keyframes."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0387" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0387"/>
        <description>Array index error in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted Sync Sample (aka stss) atom data in a malformed QuickTime media .mov file, related to "mark keyframes."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:22.069-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:17.552-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:36.838-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10611 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:29.449-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:05.455-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="gstreamer-plugins-good-devel is earlier than 0:0.10.9-1.el5_3.1" test_ref="oval:org.mitre.oval:tst:38180"/>
          <criterion comment="gstreamer-plugins-good is earlier than 0:0.10.9-1.el5_3.1" test_ref="oval:org.mitre.oval:tst:38318"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10610" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 3.x before 3.0.6 does not properly implement the (1) no-store and (2) no-cache Cache-Control directives, which allows local users to obtain sensitive information by using the (a) back button or (b) history list of the victim's browser, as demonstrated by reading the response page of an https POST request.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0358" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0358"/>
        <description>Mozilla Firefox 3.x before 3.0.6 does not properly implement the (1) no-store and (2) no-cache Cache-Control directives, which allows local users to obtain sensitive information by using the (a) back button or (b) history list of the victim's browser, as demonstrated by reading the response page of an https POST request.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:13.453-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:17.213-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:36.481-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10610 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:11.916-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:04.876-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-3.el4" test_ref="oval:org.mitre.oval:tst:37923"/>
            <criterion comment="firefox is earlier than 0:3.0.6-1.el4" test_ref="oval:org.mitre.oval:tst:37823"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-3.el4" test_ref="oval:org.mitre.oval:tst:38343"/>
            <criterion comment="nss-tools is earlier than 0:3.12.2.0-3.el4" test_ref="oval:org.mitre.oval:tst:38172"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.2.0-4.el5" test_ref="oval:org.mitre.oval:tst:37933"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.6-1.el5" test_ref="oval:org.mitre.oval:tst:37808"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-4.el5" test_ref="oval:org.mitre.oval:tst:37350"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.6-1.el5" test_ref="oval:org.mitre.oval:tst:37835"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.6-1.el5" test_ref="oval:org.mitre.oval:tst:37556"/>
            <criterion comment="firefox is earlier than 0:3.0.6-1.el5" test_ref="oval:org.mitre.oval:tst:38272"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-4.el5" test_ref="oval:org.mitre.oval:tst:38040"/>
            <criterion comment="nss-tools is earlier than 0:3.12.2.0-4.el5" test_ref="oval:org.mitre.oval:tst:37867"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1061" version="4" class="vulnerability">
      <metadata>
        <title>IE6:XP,SP2 COM Object Instantiation Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1990" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1990"/>
        <description>Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not ActiveX controls, including (1) devenum.dll, (2) diactfrm.dll, (3) wmm2filt.dll, (4) fsusd.dll, (5) dmdskmgr.dll, (6) browsewm.dll, (7) browseui.dll, (8) shell32.dll, (9) mshtml.dll, (10) inetcfg.dll, (11) infosoft.dll, (12) query.dll, (13) syncui.dll, (14) clbcatex.dll, (15) clbcatq.dll, (16) comsvcs.dll, and (17) msconf.dll, which causes memory corruption, aka "COM Object Instantiation Memory Corruption Vulnerability," a different vulnerability than CVE-2005-2087.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-23T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-08-25T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed reference to patch kb896727 from criteria.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:52.481-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:07.071-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6.0 Installed XP SP2" negate="false" test_ref="oval:org.mitre.oval:tst:2403"/>
          <criterion comment="the version of mshtml.dll is less than 6.0.2900.2722" negate="false" test_ref="oval:org.mitre.oval:tst:2331"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10609" version="5" class="vulnerability">
      <metadata>
        <title>Sun Java Runtime Environment (JRE) 1.5.0_6 and earlier, JDK 1.5.0_6 and earlier, and SDK 1.5.0_6 and earlier allows remote attackers to cause a denial of service (disk consumption) by using the Font.createFont function to create temporary files of arbitrary size in the %temp% directory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2426" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2426"/>
        <description>Sun Java Runtime Environment (JRE) 1.5.0_6 and earlier, JDK 1.5.0_6 and earlier, and SDK 1.5.0_6 and earlier allows remote attackers to cause a denial of service (disk consumption) by using the Font.createFont function to create temporary files of arbitrary size in the %temp% directory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:33.473-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:16.916-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:36.214-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10609 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:28.193-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:04.537-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:38276"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37661"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37652"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37769"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:38561"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10608" version="5" class="vulnerability">
      <metadata>
        <title>load_elf_binary in Linux before 2.4.26 allows local users to cause a denial of service (system crash) via an ELF binary in which the interpreter is NULL.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1234" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1234"/>
        <description>load_elf_binary in Linux before 2.4.26 allows local users to cause a denial of service (system crash) via an ELF binary in which the interpreter is NULL.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:34.773-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:16.634-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:35.866-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10608 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:01.477-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:04.176-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:31101"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30944"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30205"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30752"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30999"/>
          <criterion comment="kernel is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30940"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:31177"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30903"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30786"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10607" version="5" class="vulnerability">
      <metadata>
        <title>drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large packet with a crafted payload.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4536"/>
        <description>drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large packet with a crafted payload.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:42.806-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:16.138-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:35.352-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10607 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:03.735-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:03.493-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39702"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39797"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39763"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39709"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39503"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39617"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39773"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39516"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39093"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39662"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.19.EL" test_ref="oval:org.mitre.oval:tst:39657"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39645"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39650"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39813"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39095"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39770"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39099"/>
            <criterion comment="kernel is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39700"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39408"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39590"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39719"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:39789"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-164.10.1.el5" test_ref="oval:org.mitre.oval:tst:38905"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10606" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the UTF8ToNewUnicode function for Firefox before 1.0.1 and Mozilla before 1.7.6 might allow remote attackers to cause a denial of service (crash) or execute arbitrary code via invalid sequences in a UTF8 encoded string that result in a zero length value.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0592" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0592"/>
        <description>Heap-based buffer overflow in the UTF8ToNewUnicode function for Firefox before 1.0.1 and Mozilla before 1.7.6 might allow remote attackers to cause a denial of service (crash) or execute arbitrary code via invalid sequences in a UTF8 encoded string that result in a zero length value.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:38.884-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:15.906-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:35.162-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10606 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:41.603-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:03.196-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="firefox is earlier than 0:1.0.1-1.4.3" test_ref="oval:org.mitre.oval:tst:31118"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10605" version="5" class="vulnerability">
      <metadata>
        <title>The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0493"/>
        <description>The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:33.319-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:15.703-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:34.856-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10605 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:21.305-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:02.863-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="httpd-devel is earlier than 0:2.0.46-32.ent.3" test_ref="oval:org.mitre.oval:tst:30694"/>
          <criterion comment="mod_ssl is earlier than 1:2.0.46-32.ent.3" test_ref="oval:org.mitre.oval:tst:30285"/>
          <criterion comment="httpd is earlier than 0:2.0.46-32.ent.3" test_ref="oval:org.mitre.oval:tst:30628"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10604" version="5" class="vulnerability">
      <metadata>
        <title>Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted (1) textWithLanguage or (2) nameWithLanguage Internet Printing Protocol (IPP) tag, leading to a stack-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4351" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4351"/>
        <description>Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted (1) textWithLanguage or (2) nameWithLanguage Internet Printing Protocol (IPP) tag, leading to a stack-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:21.278-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:15.352-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:34.497-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10604 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:11.479-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:02.297-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 0:1.1.17-13.3.46" test_ref="oval:org.mitre.oval:tst:35491"/>
            <criterion comment="cups is earlier than 0:1.1.17-13.3.46" test_ref="oval:org.mitre.oval:tst:35533"/>
            <criterion comment="cups-libs is earlier than 0:1.1.17-13.3.46" test_ref="oval:org.mitre.oval:tst:35218"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 0:1.1.22-0.rc1.9.20.2.el4_5.2" test_ref="oval:org.mitre.oval:tst:34735"/>
            <criterion comment="cups is earlier than 0:1.1.22-0.rc1.9.20.2.el4_5.2" test_ref="oval:org.mitre.oval:tst:35537"/>
            <criterion comment="cups-libs is earlier than 0:1.1.22-0.rc1.9.20.2.el4_5.2" test_ref="oval:org.mitre.oval:tst:35415"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-lpd is earlier than 1:1.2.4-11.14.el5_1.1" test_ref="oval:org.mitre.oval:tst:35505"/>
            <criterion comment="cups-devel is earlier than 1:1.2.4-11.14.el5_1.1" test_ref="oval:org.mitre.oval:tst:35559"/>
            <criterion comment="cups is earlier than 1:1.2.4-11.14.el5_1.1" test_ref="oval:org.mitre.oval:tst:35245"/>
            <criterion comment="cups-libs is earlier than 1:1.2.4-11.14.el5_1.1" test_ref="oval:org.mitre.oval:tst:35303"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10603" version="5" class="vulnerability">
      <metadata>
        <title>The wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the breakcharlen variable, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash, or infinite loop) via certain arguments, as demonstrated by a 'chr(0), 0, ""' argument set.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3998" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3998"/>
        <description>The wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the breakcharlen variable, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash, or infinite loop) via certain arguments, as demonstrated by a 'chr(0), 0, ""' argument set.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:23.825-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:14.553-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:33.690-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10603 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:08:38.174-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:01.346-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35216"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35012"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:34787"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35164"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:34818"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35171"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:34820"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35008"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:34796"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35363"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35010"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35249"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:34683"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:34365"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:34976"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35087"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35298"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35289"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35309"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35263"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35044"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35279"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34964"/>
            <criterion comment="php-common is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34896"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35084"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35078"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34802"/>
            <criterion comment="php is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35270"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35361"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34769"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35108"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35037"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34943"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34689"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35221"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35077"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34934"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35170"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34376"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34764"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10602" version="5" class="vulnerability">
      <metadata>
        <title>arch/i386/kernel/sysenter.c in the Virtual Dynamic Shared Objects (vDSO) implementation in the Linux kernel before 2.6.21 does not properly check boundaries, which allows local users to gain privileges or cause a denial of service via unspecified vectors, related to the install_special_mapping, syscall, and syscall32_nopage functions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3527" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3527"/>
        <description>arch/i386/kernel/sysenter.c in the Virtual Dynamic Shared Objects (vDSO) implementation in the Linux kernel before 2.6.21 does not properly check boundaries, which allows local users to gain privileges or cause a denial of service via unspecified vectors, related to the install_special_mapping, syscall, and syscall32_nopage functions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:23.154-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:14.232-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:33.355-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10602 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:07.207-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:00.858-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37778"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37855"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37870"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37881"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37504"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37738"/>
          <criterion comment="kernel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37774"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37247"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37715"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37954"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37668"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37947"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10601" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5297" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5297"/>
        <description>Race condition in the safe_open function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the O_EXCL flag on NFS filesystems.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:19.301-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:13.779-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:33.079-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10601 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:10:05.433-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:00.415-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="mutt is earlier than 5:1.4.1-5.el3" test_ref="oval:org.mitre.oval:tst:34296"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="mutt is earlier than 5:1.4.1-12.0.3.el4" test_ref="oval:org.mitre.oval:tst:34260"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="mutt is earlier than 5:1.4.2.2-3.0.2.el5" test_ref="oval:org.mitre.oval:tst:34241"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10600" version="5" class="vulnerability">
      <metadata>
        <title>Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication against a PostgreSQL database, allows remote unauthenticated attackers to execute arbitrary code, as demonstrated via the username.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3656" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3656"/>
        <description>Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication against a PostgreSQL database, allows remote unauthenticated attackers to execute arbitrary code, as demonstrated via the username.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:26.184-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:13.557-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:32.796-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10600 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:40.652-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:07:00.009-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="mod_auth_pgsql is earlier than 0:2.0.1-4.ent.1" test_ref="oval:org.mitre.oval:tst:31577"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="mod_auth_pgsql is earlier than 0:2.0.1-7.1" test_ref="oval:org.mitre.oval:tst:32389"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1060" version="2" class="vulnerability">
      <metadata>
        <title>Directory Traversal Vulnerability in CVS Server</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0405" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0405"/>
        <description>CVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in filenames via CVS client requests, a different vulnerability than CVE-2004-0180.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-10T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:25.110-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:13.247-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="cvs version is less than 1.11.2-18" negate="false" test_ref="oval:org.mitre.oval:tst:1255"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/bin/cvs is executable">
            <criterion comment="/usr/bin/cvs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1381"/>
            <criterion comment="/usr/bin/cvs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1380"/>
            <criterion comment="/usr/bin/cvs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1379"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:106" version="2" class="vulnerability">
      <metadata>
        <title>Various Ethereal Dissector Vulnerabilities</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Ethereal</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0432" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0432"/>
        <description>Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the (1) BGP, (2) WTP, (3) DNS, (4) 802.11, (5) ISAKMP, (6) WSP, (7) CLNP, (8) ISIS, and (9) RMI dissectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-29T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:23.407-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:13.077-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criteria operator="OR" comment="Vulnerable Config">
          <criterion comment="ethereal version is less than 0.9.13-1.90.1" negate="false" test_ref="oval:org.mitre.oval:tst:2985"/>
          <criterion comment="ethereal-gnome version is less than 0.9.13-1.90.1" negate="false" test_ref="oval:org.mitre.oval:tst:2984"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10599" version="5" class="vulnerability">
      <metadata>
        <title>tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets, a different vulnerability than CVE-2004-0057.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0989" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0989"/>
        <description>tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets, a different vulnerability than CVE-2004-0057.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:52.379-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:13.364-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:32.573-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10599 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:50.811-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:59.730-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="libpcap is earlier than 14:0.7.2-7.E3.1" test_ref="oval:org.mitre.oval:tst:30562"/>
          <criterion comment="tcpdump is earlier than 14:3.7.2-7.E3.1" test_ref="oval:org.mitre.oval:tst:30488"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10598" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap and leads to a buffer overflow, as demonstrated using format string vulnerabilities in Perl applications.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3962" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3962"/>
        <description>Integer overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap and leads to a buffer overflow, as demonstrated using format string vulnerabilities in Perl applications.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:25.870-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:13.089-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:32.274-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10598 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:11.456-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:59.152-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="perl-suidperl is earlier than 2:5.8.0-90.4" test_ref="oval:org.mitre.oval:tst:32422"/>
            <criterion comment="perl is earlier than 2:5.8.0-90.4" test_ref="oval:org.mitre.oval:tst:32487"/>
            <criterion comment="perl-CPAN is earlier than 2:1.61-90.4" test_ref="oval:org.mitre.oval:tst:32255"/>
            <criterion comment="perl-CGI is earlier than 2:2.89-90.4" test_ref="oval:org.mitre.oval:tst:32543"/>
            <criterion comment="perl-DB_File is earlier than 2:1.806-90.4" test_ref="oval:org.mitre.oval:tst:32488"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="perl-suidperl is earlier than 3:5.8.5-24.RHEL4" test_ref="oval:org.mitre.oval:tst:32515"/>
            <criterion comment="perl is earlier than 3:5.8.5-24.RHEL4" test_ref="oval:org.mitre.oval:tst:32481"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10597" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to "certain characters in session names," including special characters that are frequently associated with CRLF injection, SQL injection, cross-site scripting (XSS), and HTTP response splitting vulnerabilities.  NOTE: while the nature of the vulnerability is unspecified, it is likely that this is related to a violation of an expectation by PHP applications that the session name is alphanumeric, as implied in the PHP manual for session_name().</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3016" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3016"/>
        <description>Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to "certain characters in session names," including special characters that are frequently associated with CRLF injection, SQL injection, cross-site scripting (XSS), and HTTP response splitting vulnerabilities.  NOTE: while the nature of the vulnerability is unspecified, it is likely that this is related to a violation of an expectation by PHP applications that the session name is alphanumeric, as implied in the PHP manual for session_name().</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:56.429-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:12.574-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:31.749-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10597 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:24.556-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:58.517-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32928"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32870"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32829"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32485"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32258"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32491"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32860"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32985"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32962"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32808"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32175"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32788"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:33059"/>
            <criterion comment="php is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32754"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32876"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:33047"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32483"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:33052"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32964"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32700"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32272"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10596" version="5" class="vulnerability">
      <metadata>
        <title>Integer underflow in the ieee80211_rx function in net/ieee80211/ieee80211_rx.c in the Linux kernel 2.6.x before 2.6.23 allows remote attackers to cause a denial of service (crash) via a crafted SKB length value in a runt IEEE 802.11 frame when the IEEE80211_STYPE_QOS_DATA flag is set, aka an "off-by-two error."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4997" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4997"/>
        <description>Integer underflow in the ieee80211_rx function in net/ieee80211/ieee80211_rx.c in the Linux kernel 2.6.x before 2.6.23 allows remote attackers to cause a denial of service (crash) via a crafted SKB length value in a runt IEEE 802.11 frame when the IEEE80211_STYPE_QOS_DATA flag is set, aka an "off-by-two error."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:15.965-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:12.077-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:31.226-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10596 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:53.413-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:57.770-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-67.0.1.EL" test_ref="oval:org.mitre.oval:tst:35332"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-67.0.1.EL" test_ref="oval:org.mitre.oval:tst:35637"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-67.0.1.EL" test_ref="oval:org.mitre.oval:tst:35503"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-67.0.1.EL" test_ref="oval:org.mitre.oval:tst:35622"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-67.0.1.EL" test_ref="oval:org.mitre.oval:tst:35705"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-67.0.1.EL" test_ref="oval:org.mitre.oval:tst:35693"/>
            <criterion comment="kernel is earlier than 0:2.6.9-67.0.1.EL" test_ref="oval:org.mitre.oval:tst:35848"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-67.0.1.EL" test_ref="oval:org.mitre.oval:tst:35863"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-67.0.1.EL" test_ref="oval:org.mitre.oval:tst:34990"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-67.0.1.EL" test_ref="oval:org.mitre.oval:tst:35434"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-67.0.1.EL" test_ref="oval:org.mitre.oval:tst:35824"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35219"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35593"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35357"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35021"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35284"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35088"/>
            <criterion comment="kernel is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:34595"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35139"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35215"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35555"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35511"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35474"/>
            <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-53.1.4.el5" test_ref="oval:org.mitre.oval:tst:35543"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10595" version="5" class="vulnerability">
      <metadata>
        <title>Net::DNS before 0.60, a Perl module, allows remote attackers to cause a denial of service (stack consumption) via a malformed compressed DNS packet with self-referencing pointers, which triggers an infinite loop.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3409" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3409"/>
        <description>Net::DNS before 0.60, a Perl module, allows remote attackers to cause a denial of service (stack consumption) via a malformed compressed DNS packet with self-referencing pointers, which triggers an infinite loop.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:09.898-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:11.811-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:30.930-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10595 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:46.493-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:57.384-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="perl-Net-DNS is earlier than 0:0.31-4.el3" test_ref="oval:org.mitre.oval:tst:34732"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="perl-Net-DNS is earlier than 0:0.59-3.el5" test_ref="oval:org.mitre.oval:tst:34803"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10594" version="5" class="vulnerability">
      <metadata>
        <title>Memory leak in the PPP over Ethernet (PPPoE) socket implementation in the Linux kernel before 2.6.21-git8 allows local users to cause a denial of service (memory consumption) by creating a socket using connect, and releasing it before the PPPIOCGCHAN ioctl is initialized.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2525" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2525"/>
        <description>Memory leak in the PPP over Ethernet (PPPoE) socket implementation in the Linux kernel before 2.6.21-git8 allows local users to cause a denial of service (memory consumption) by creating a socket using connect, and releasing it before the PPPIOCGCHAN ioctl is initialized.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:55.492-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:11.352-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:30.411-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10594 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:52.053-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:56.702-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34475"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34659"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34630"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34375"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34496"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34560"/>
            <criterion comment="kernel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34493"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34302"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34295"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34662"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:33694"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34290"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34311"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34023"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34185"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34210"/>
            <criterion comment="kernel is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34306"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34033"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34168"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34261"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34155"/>
            <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.6.el5" test_ref="oval:org.mitre.oval:tst:34278"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10593" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted TIFF image.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2025"/>
        <description>Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted TIFF image.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:35.464-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:11.073-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:30.149-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10593 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:53.670-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:56.314-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libtiff is earlier than 0:3.5.7-25.el3.1" test_ref="oval:org.mitre.oval:tst:32689"/>
            <criterion comment="libtiff-devel is earlier than 0:3.5.7-25.el3.1" test_ref="oval:org.mitre.oval:tst:32435"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libtiff is earlier than 0:3.6.1-10" test_ref="oval:org.mitre.oval:tst:32329"/>
            <criterion comment="libtiff-devel is earlier than 0:3.6.1-10" test_ref="oval:org.mitre.oval:tst:32637"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10592" version="5" class="vulnerability">
      <metadata>
        <title>The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2855" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2855"/>
        <description>The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:56.797-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:10.829-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:29.884-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10592 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:56.225-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:55.970-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="squid is earlier than 7:2.6.STABLE21-6.el5" test_ref="oval:org.mitre.oval:tst:40327"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10591" version="5" class="vulnerability">
      <metadata>
        <title>MySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL home data directory. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4097.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4098" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4098"/>
        <description>MySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL home data directory. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4097.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:05.837-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:10.607-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:29.623-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10591 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:36.436-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:55.647-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mysql is earlier than 0:4.1.22-2.el4_8.3" test_ref="oval:org.mitre.oval:tst:39929"/>
          <criterion comment="mysql-devel is earlier than 0:4.1.22-2.el4_8.3" test_ref="oval:org.mitre.oval:tst:39985"/>
          <criterion comment="mysql-bench is earlier than 0:4.1.22-2.el4_8.3" test_ref="oval:org.mitre.oval:tst:40068"/>
          <criterion comment="mysql-server is earlier than 0:4.1.22-2.el4_8.3" test_ref="oval:org.mitre.oval:tst:40047"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10590" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code via a long title name in a NIFF file, which triggers the overflow during (1) zoom, (2) reduce, or (3) rotate operations.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3178"/>
        <description>Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code via a long title name in a NIFF file, which triggers the overflow during (1) zoom, (2) reduce, or (3) rotate operations.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:09.737-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:10.385-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:29.374-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10590 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:00.987-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:55.287-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="xloadimage is earlier than 0:4.1-36.RHEL3" test_ref="oval:org.mitre.oval:tst:32292"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="xloadimage is earlier than 0:4.1-36.RHEL4" test_ref="oval:org.mitre.oval:tst:32353"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10589" version="5" class="vulnerability">
      <metadata>
        <title>The sort_offline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3011" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3011"/>
        <description>The sort_offline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:28.084-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:10.140-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:29.098-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10589 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:47.576-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:54.832-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="info is earlier than 0:4.5-3.el3.1" test_ref="oval:org.mitre.oval:tst:33067"/>
            <criterion comment="texinfo is earlier than 0:4.5-3.el3.1" test_ref="oval:org.mitre.oval:tst:33143"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="info is earlier than 0:4.7-5.el4.2" test_ref="oval:org.mitre.oval:tst:33209"/>
            <criterion comment="texinfo is earlier than 0:4.7-5.el4.2" test_ref="oval:org.mitre.oval:tst:32963"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10588" version="5" class="vulnerability">
      <metadata>
        <title>The zlib_inflate function in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via a malformed filesystem that uses zlib compression that triggers memory corruption, as demonstrated using cramfs.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5823" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5823"/>
        <description>The zlib_inflate function in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via a malformed filesystem that uses zlib compression that triggers memory corruption, as demonstrated using cramfs.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:16.446-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:09.630-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:28.600-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10588 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:59.802-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:54.286-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-50.EL" test_ref="oval:org.mitre.oval:tst:34140"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-50.EL" test_ref="oval:org.mitre.oval:tst:34214"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-50.EL" test_ref="oval:org.mitre.oval:tst:34585"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-50.EL" test_ref="oval:org.mitre.oval:tst:34516"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-50.EL" test_ref="oval:org.mitre.oval:tst:34527"/>
            <criterion comment="kernel is earlier than 0:2.4.21-50.EL" test_ref="oval:org.mitre.oval:tst:34623"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-50.EL" test_ref="oval:org.mitre.oval:tst:34622"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-50.EL" test_ref="oval:org.mitre.oval:tst:34567"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-50.EL" test_ref="oval:org.mitre.oval:tst:34576"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33204"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33278"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33306"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32378"/>
            <criterion comment="kernel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33145"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33107"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32620"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32645"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33057"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10587" version="5" class="vulnerability">
      <metadata>
        <title>Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when allowLinking and UTF-8 are enabled, allows remote attackers to read arbitrary files via encoded directory traversal sequences in the URI, a different vulnerability than CVE-2008-2370.  NOTE: versions earlier than 6.0.18 were reported affected, but the vendor advisory lists 6.0.16 as the last affected version.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2938" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2938"/>
        <description>Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when allowLinking and UTF-8 are enabled, allows remote attackers to read arbitrary files via encoded directory traversal sequences in the URI, a different vulnerability than CVE-2008-2370.  NOTE: versions earlier than 6.0.18 were reported affected, but the vendor advisory lists 6.0.16 as the last affected version.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:50.874-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:09.322-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:28.257-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10587 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:36.566-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:53.827-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37489"/>
          <criterion comment="tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:36583"/>
          <criterion comment="tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37182"/>
          <criterion comment="tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37266"/>
          <criterion comment="tomcat5-webapps is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37452"/>
          <criterion comment="tomcat5 is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37501"/>
          <criterion comment="tomcat5-jasper is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37524"/>
          <criterion comment="tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37275"/>
          <criterion comment="tomcat5-server-lib is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37396"/>
          <criterion comment="tomcat5-common-lib is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37498"/>
          <criterion comment="tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37415"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10586" version="5" class="vulnerability">
      <metadata>
        <title>cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon crash) by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference.  NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5183" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5183"/>
        <description>cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon crash) by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference.  NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:06.994-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:09.099-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:27.941-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10586 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:13.956-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:53.503-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="cups-lpd is earlier than 1:1.2.4-11.18.el5_2.3" test_ref="oval:org.mitre.oval:tst:37762"/>
          <criterion comment="cups-devel is earlier than 1:1.2.4-11.18.el5_2.3" test_ref="oval:org.mitre.oval:tst:37987"/>
          <criterion comment="cups is earlier than 1:1.2.4-11.18.el5_2.3" test_ref="oval:org.mitre.oval:tst:37957"/>
          <criterion comment="cups-libs is earlier than 1:1.2.4-11.18.el5_2.3" test_ref="oval:org.mitre.oval:tst:37400"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10585" version="5" class="vulnerability">
      <metadata>
        <title>The BMP image processor for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted BMP file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0753" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0753"/>
        <description>The BMP image processor for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted BMP file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:09.101-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:08.829-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:27.678-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10585 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:45.951-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:53.191-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="gdk-pixbuf-devel is earlier than 1:0.22.0-11.3.3" test_ref="oval:org.mitre.oval:tst:30887"/>
          <criterion comment="gtk2 is earlier than 0:2.2.4-8.1" test_ref="oval:org.mitre.oval:tst:30146"/>
          <criterion comment="gdk-pixbuf-gnome is earlier than 1:0.22.0-11.3.3" test_ref="oval:org.mitre.oval:tst:30822"/>
          <criterion comment="gdk-pixbuf is earlier than 1:0.22.0-11.3.3" test_ref="oval:org.mitre.oval:tst:30571"/>
          <criterion comment="gtk2-devel is earlier than 0:2.2.4-8.1" test_ref="oval:org.mitre.oval:tst:30817"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10584" version="5" class="vulnerability">
      <metadata>
        <title>The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown vectors related to race conditions in inotify watch removal and umount.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5182"/>
        <description>The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown vectors related to race conditions in inotify watch removal and umount.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:40.551-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:08.501-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:27.343-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10584 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:52.681-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:52.715-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38161"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:37996"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38259"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:37366"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:37939"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38003"/>
          <criterion comment="kernel is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38294"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38054"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:37318"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38086"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38226"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38094"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10583" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in imageop.c in Python before 2.5.3 allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted images that trigger heap-based buffer overflows.  NOTE: this issue is due to an incomplete fix for CVE-2007-4965.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1679" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1679"/>
        <description>Multiple integer overflows in imageop.c in Python before 2.5.3 allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted images that trigger heap-based buffer overflows.  NOTE: this issue is due to an incomplete fix for CVE-2007-4965.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:04.177-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:08.158-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:26.878-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10583 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:40.765-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:52.162-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38704"/>
            <criterion comment="tkinter is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38695"/>
            <criterion comment="python-tools is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38872"/>
            <criterion comment="python is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38617"/>
            <criterion comment="python-docs is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:37965"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38916"/>
            <criterion comment="tkinter is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38703"/>
            <criterion comment="python-tools is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38787"/>
            <criterion comment="python is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38939"/>
            <criterion comment="python-docs is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38081"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10582" version="5" class="vulnerability">
      <metadata>
        <title>Multiple vulnerabilities in Ethereal 0.10.12 and earlier allow remote attackers to cause a denial of service (memory consumption) via unspecified vectors in the (1) ISAKMP, (2) FC-FCS, (3) RSVP, and (4) ISIS LSP dissector.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3241" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3241"/>
        <description>Multiple vulnerabilities in Ethereal 0.10.12 and earlier allow remote attackers to cause a denial of service (memory consumption) via unspecified vectors in the (1) ISAKMP, (2) FC-FCS, (3) RSVP, and (4) ISIS LSP dissector.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:42.614-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:07.850-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:26.592-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10582 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:03.170-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:51.727-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.13-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32189"/>
            <criterion comment="ethereal is earlier than 0:0.10.13-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32138"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.13-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32341"/>
            <criterion comment="ethereal is earlier than 0:0.10.13-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32202"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10581" version="5" class="vulnerability">
      <metadata>
        <title>Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service (memory consumption) via vectors involving (1) signature verification during user authentication with X.509 certificates, related to the eay_check_x509sign function in src/racoon/crypto_openssl.c; and (2) the NAT-Traversal (aka NAT-T) keepalive implementation, related to src/racoon/nattraversal.c.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1632" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1632"/>
        <description>Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service (memory consumption) via vectors involving (1) signature verification during user authentication with X.509 certificates, related to the eay_check_x509sign function in src/racoon/crypto_openssl.c; and (2) the NAT-Traversal (aka NAT-T) keepalive implementation, related to src/racoon/nattraversal.c.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:05.857-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:07.665-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:26.399-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10581 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:55.384-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:51.444-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="ipsec-tools is earlier than 0:0.6.5-13.el5_3.1" test_ref="oval:org.mitre.oval:tst:38789"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10580" version="5" class="vulnerability">
      <metadata>
        <title>The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1646" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1646"/>
        <description>The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:28.265-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:07.471-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:26.201-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10580 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:58.296-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:51.156-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="sudo is earlier than 0:1.7.2p1-7.el5_5" test_ref="oval:org.mitre.oval:tst:40588"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10579" version="5" class="vulnerability">
      <metadata>
        <title>Double free vulnerability in Perl 5.8.8 allows context-dependent attackers to cause a denial of service (memory corruption and crash) via a crafted regular expression containing UTF8 characters.  NOTE: this issue might only be present on certain operating systems.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1927" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1927"/>
        <description>Double free vulnerability in Perl 5.8.8 allows context-dependent attackers to cause a denial of service (memory corruption and crash) via a crafted regular expression containing UTF8 characters.  NOTE: this issue might only be present on certain operating systems.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:10.742-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:07.138-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:25.794-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10579 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:14.884-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:50.584-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="perl-suidperl is earlier than 2:5.8.0-98.EL3" test_ref="oval:org.mitre.oval:tst:36906"/>
            <criterion comment="perl is earlier than 2:5.8.0-98.EL3" test_ref="oval:org.mitre.oval:tst:36672"/>
            <criterion comment="perl-CPAN is earlier than 2:1.61-98.EL3" test_ref="oval:org.mitre.oval:tst:36708"/>
            <criterion comment="perl-CGI is earlier than 2:2.89-98.EL3" test_ref="oval:org.mitre.oval:tst:36930"/>
            <criterion comment="perl-DB_File is earlier than 2:1.806-98.EL3" test_ref="oval:org.mitre.oval:tst:36773"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="perl-suidperl is earlier than 3:5.8.5-36.el4_6.3" test_ref="oval:org.mitre.oval:tst:37073"/>
            <criterion comment="perl is earlier than 3:5.8.5-36.el4_6.3" test_ref="oval:org.mitre.oval:tst:36728"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="perl-suidperl is earlier than 0:5.8.8-10.el5_2.3" test_ref="oval:org.mitre.oval:tst:37067"/>
            <criterion comment="perl is earlier than 0:5.8.8-10.el5_2.3" test_ref="oval:org.mitre.oval:tst:37057"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10578" version="5" class="vulnerability">
      <metadata>
        <title>Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI after the ';' character, as demonstrated by a URI containing a "snp/snoop.jsp;" sequence.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2449" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2449"/>
        <description>Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI after the ';' character, as demonstrated by a URI containing a "snp/snoop.jsp;" sequence.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:44.245-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:06.784-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:25.452-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10578 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:03.343-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:50.174-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.1.0.4.el5" test_ref="oval:org.mitre.oval:tst:34526"/>
          <criterion comment="tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.1.0.4.el5" test_ref="oval:org.mitre.oval:tst:33925"/>
          <criterion comment="tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.1.0.4.el5" test_ref="oval:org.mitre.oval:tst:34673"/>
          <criterion comment="tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.1.0.4.el5" test_ref="oval:org.mitre.oval:tst:34509"/>
          <criterion comment="tomcat5-webapps is earlier than 0:5.5.23-0jpp.1.0.4.el5" test_ref="oval:org.mitre.oval:tst:34682"/>
          <criterion comment="tomcat5 is earlier than 0:5.5.23-0jpp.1.0.4.el5" test_ref="oval:org.mitre.oval:tst:34534"/>
          <criterion comment="tomcat5-jasper is earlier than 0:5.5.23-0jpp.1.0.4.el5" test_ref="oval:org.mitre.oval:tst:34133"/>
          <criterion comment="tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.1.0.4.el5" test_ref="oval:org.mitre.oval:tst:34765"/>
          <criterion comment="tomcat5-server-lib is earlier than 0:5.5.23-0jpp.1.0.4.el5" test_ref="oval:org.mitre.oval:tst:34601"/>
          <criterion comment="tomcat5-common-lib is earlier than 0:5.5.23-0jpp.1.0.4.el5" test_ref="oval:org.mitre.oval:tst:34681"/>
          <criterion comment="tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.1.0.4.el5" test_ref="oval:org.mitre.oval:tst:34549"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10577" version="5" class="vulnerability">
      <metadata>
        <title>Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalization before removing the query string from the URI, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a .. (dot dot) in a request parameter.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2370" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2370"/>
        <description>Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalization before removing the query string from the URI, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a .. (dot dot) in a request parameter.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:53.167-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:06.483-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:25.117-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10577 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:43.678-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:49.702-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37489"/>
          <criterion comment="tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:36583"/>
          <criterion comment="tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37182"/>
          <criterion comment="tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37266"/>
          <criterion comment="tomcat5-webapps is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37452"/>
          <criterion comment="tomcat5 is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37501"/>
          <criterion comment="tomcat5-jasper is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37524"/>
          <criterion comment="tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37275"/>
          <criterion comment="tomcat5-server-lib is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37396"/>
          <criterion comment="tomcat5-common-lib is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37498"/>
          <criterion comment="tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37415"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10576" version="5" class="vulnerability">
      <metadata>
        <title>The sys_set_mempolicy function in mempolicy.c in Linux kernel 2.6.x allows local users to cause a denial of service (kernel BUG()) via a negative first argument.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3053" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3053"/>
        <description>The sys_set_mempolicy function in mempolicy.c in Linux kernel 2.6.x allows local users to cause a denial of service (kernel BUG()) via a negative first argument.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:30.243-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:06.231-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:24.762-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10576 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:37.618-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:49.331-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32382"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32096"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32404"/>
          <criterion comment="kernel is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32387"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32210"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32355"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-22.0.1.EL" test_ref="oval:org.mitre.oval:tst:32373"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10575" version="5" class="vulnerability">
      <metadata>
        <title>CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being used and may lead to a denial of service (crash), modification of critical program data, or arbitrary code execution.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0414" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0414"/>
        <description>CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being used and may lead to a denial of service (crash), modification of critical program data, or arbitrary code execution.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:35.350-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:05.977-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:24.548-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10575 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:42.655-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:49.055-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="cvs is earlier than 0:1.11.2-24" test_ref="oval:org.mitre.oval:tst:30480"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10574" version="5" class="vulnerability">
      <metadata>
        <title>gdk-pixbuf before 0.20 allows attackers to cause a denial of service (crash) via a malformed bitmap (BMP) file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0111" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0111"/>
        <description>gdk-pixbuf before 0.20 allows attackers to cause a denial of service (crash) via a malformed bitmap (BMP) file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:02.313-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:05.773-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:24.305-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10574 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:55.303-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:48.597-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="gdk-pixbuf-devel is earlier than 1:0.22.0-6.1.1" test_ref="oval:org.mitre.oval:tst:30626"/>
          <criterion comment="gdk-pixbuf-gnome is earlier than 1:0.22.0-6.1.1" test_ref="oval:org.mitre.oval:tst:30685"/>
          <criterion comment="gdk-pixbuf is earlier than 1:0.22.0-6.1.1" test_ref="oval:org.mitre.oval:tst:30675"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10573" version="5" class="vulnerability">
      <metadata>
        <title>The browser engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to the (1) nsTableFrame::GetFrameAtOrBefore, (2) nsAccessibilityService::GetAccessible, (3) nsBindingManager::GetNestedInsertionPoint, (4) nsXBLPrototypeBinding::AttributeChanged, (5) nsColumnSetFrame::GetContentInsertionFrame, and (6) nsLineLayout::TrimTrailingWhiteSpaceIn methods, and other vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0412" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0412"/>
        <description>The browser engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to the (1) nsTableFrame::GetFrameAtOrBefore, (2) nsAccessibilityService::GetAccessible, (3) nsBindingManager::GetNestedInsertionPoint, (4) nsXBLPrototypeBinding::AttributeChanged, (5) nsColumnSetFrame::GetContentInsertionFrame, and (6) nsLineLayout::TrimTrailingWhiteSpaceIn methods, and other vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:36.323-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:05.250-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:23.717-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10573 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:47.736-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:47.840-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36256"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36236"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:35996"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36279"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36046"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36052"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36034"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36284"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:35748"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:35994"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36164"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36050"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-8.el4" test_ref="oval:org.mitre.oval:tst:36202"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36193"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36093"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36053"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.10.el4" test_ref="oval:org.mitre.oval:tst:35919"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:35600"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36141"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:35397"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:35684"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36203"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-9.el5" test_ref="oval:org.mitre.oval:tst:36281"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-9.el5" test_ref="oval:org.mitre.oval:tst:35480"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-8.el5" test_ref="oval:org.mitre.oval:tst:35675"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10572" version="5" class="vulnerability">
      <metadata>
        <title>The setTimeout function in Mozilla Firefox before 3.0.12 does not properly preserve object wrapping, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted call, related to XPCNativeWrapper.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2471" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2471"/>
        <description>The setTimeout function in Mozilla Firefox before 3.0.12 does not properly preserve object wrapping, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted call, related to XPCNativeWrapper.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:57.970-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:04.953-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:23.422-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10572 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:24.753-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:47.410-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.12-1.el4" test_ref="oval:org.mitre.oval:tst:38809"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38249"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38575"/>
            <criterion comment="firefox is earlier than 0:3.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38853"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38563"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10571" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1, as used in Winamp before 5.5 and other products, allow user-assisted remote attackers to execute arbitrary code via a malformed FLAC file that triggers improper memory allocation, resulting in a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4619" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4619"/>
        <description>Multiple integer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1, as used in Winamp before 5.5 and other products, allow user-assisted remote attackers to execute arbitrary code via a malformed FLAC file that triggers improper memory allocation, resulting in a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:40.971-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:04.701-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:23.152-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10571 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:35.638-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:46.941-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="flac-devel is earlier than 0:1.1.0-7.el4_5.2" test_ref="oval:org.mitre.oval:tst:35162"/>
            <criterion comment="xmms-flac is earlier than 0:1.1.0-7.el4_5.2" test_ref="oval:org.mitre.oval:tst:35386"/>
            <criterion comment="flac is earlier than 0:1.1.0-7.el4_5.2" test_ref="oval:org.mitre.oval:tst:35456"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="flac-devel is earlier than 0:1.1.2-28.el5_0.1" test_ref="oval:org.mitre.oval:tst:35447"/>
            <criterion comment="flac is earlier than 0:1.1.2-28.el5_0.1" test_ref="oval:org.mitre.oval:tst:35166"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10570" version="5" class="vulnerability">
      <metadata>
        <title>libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service via (1) an invalid mapping type, which triggers an out-of-bounds read in the vorbis_info_clear function in info.c, and (2) invalid blocksize values that trigger a segmentation fault in the read function in block.c.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4029" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4029"/>
        <description>libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service via (1) an invalid mapping type, which triggers an out-of-bounds read in the vorbis_info_clear function in info.c, and (2) invalid blocksize values that trigger a segmentation fault in the read function in block.c.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:13.210-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:04.397-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:22.762-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10570 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:41.669-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:46.470-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libvorbis-devel is earlier than 1:1.0-8.el3" test_ref="oval:org.mitre.oval:tst:35005"/>
            <criterion comment="libvorbis is earlier than 1:1.0-8.el3" test_ref="oval:org.mitre.oval:tst:35016"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libvorbis-devel is earlier than 1:1.1.0-2.el4.5" test_ref="oval:org.mitre.oval:tst:34951"/>
            <criterion comment="libvorbis is earlier than 1:1.1.0-2.el4.5" test_ref="oval:org.mitre.oval:tst:34625"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libvorbis-devel is earlier than 1:1.1.2-3.el5.0" test_ref="oval:org.mitre.oval:tst:35046"/>
            <criterion comment="libvorbis is earlier than 1:1.1.2-3.el5.0" test_ref="oval:org.mitre.oval:tst:34551"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10569" version="5" class="vulnerability">
      <metadata>
        <title>The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1086"/>
        <description>The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:12.855-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:03.712-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:22.227-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10569 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:45.216-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:45.754-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40272"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40483"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40310"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40062"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40096"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:39895"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40165"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40131"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40380"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:39955"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40115"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:39968"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40459"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40373"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40487"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40332"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40331"/>
            <criterion comment="kernel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40445"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40493"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40458"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40390"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:39921"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:39890"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10568" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to inject arbitrary web script or HTML via certain integer variables.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0104" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0104"/>
        <description>Cross-site scripting (XSS) vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to inject arbitrary web script or HTML via certain integer variables.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:11.410-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:03.489-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:21.937-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10568 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:13.311-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:45.403-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.3a-9.EL3" test_ref="oval:org.mitre.oval:tst:30441"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.3a-9.EL4" test_ref="oval:org.mitre.oval:tst:30956"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10567" version="5" class="vulnerability">
      <metadata>
        <title>The (1) agp_generic_alloc_page and (2) agp_generic_alloc_pages functions in drivers/char/agp/generic.c in the agp subsystem in the Linux kernel before 2.6.30-rc3 do not zero out pages that may later be available to a user-space process, which allows local users to obtain sensitive information by reading these pages.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1192" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1192"/>
        <description>The (1) agp_generic_alloc_page and (2) agp_generic_alloc_pages functions in drivers/char/agp/generic.c in the agp subsystem in the Linux kernel before 2.6.30-rc3 do not zero out pages that may later be available to a user-space process, which allows local users to obtain sensitive information by reading these pages.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:10.780-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:02.948-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:21.376-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10567 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:20.225-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:44.732-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38892"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38222"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:37924"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38847"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38834"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38158"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38513"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38317"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38277"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38667"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38814"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:37971"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38820"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38641"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38838"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38699"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38813"/>
            <criterion comment="kernel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38840"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38890"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38529"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38350"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38066"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38388"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10566" version="5" class="vulnerability">
      <metadata>
        <title>fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords over unsecured links if certain circumstances occur, which allows remote attackers to obtain sensitive information via man-in-the-middle (MITM) attacks.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5867" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5867"/>
        <description>fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords over unsecured links if certain circumstances occur, which allows remote attackers to obtain sensitive information via man-in-the-middle (MITM) attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:21.913-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:02.720-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:21.131-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10566 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:43.974-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:44.376-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="fetchmail is earlier than 0:6.2.0-3.el3.3" test_ref="oval:org.mitre.oval:tst:33046"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="fetchmail is earlier than 0:6.2.5-6.el4.5" test_ref="oval:org.mitre.oval:tst:33350"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10565" version="5" class="vulnerability">
      <metadata>
        <title>The GPRS-LLC dissector in Ethereal 0.10.7 through 0.10.9, with the "ignore cipher bit" option enabled. allows remote attackers to cause a denial of service (application crash).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0705" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0705"/>
        <description>The GPRS-LLC dissector in Ethereal 0.10.7 through 0.10.9, with the "ignore cipher bit" option enabled. allows remote attackers to cause a denial of service (application crash).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:09.524-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:02.468-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:20.788-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10565 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:02:11.586-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:43.969-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.10-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31514"/>
            <criterion comment="ethereal is earlier than 0:0.10.10-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31448"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.10-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31593"/>
            <criterion comment="ethereal is earlier than 0:0.10.10-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31548"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10564" version="5" class="vulnerability">
      <metadata>
        <title>Ruby 1.6.x up to 1.6.8, 1.8.x up to 1.8.2, and 1.9.0 development up to 2005-09-01 allows attackers to bypass safe level and taint flag protections and execute disallowed code when Ruby processes a program through standard input (stdin).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2337" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2337"/>
        <description>Ruby 1.6.x up to 1.6.8, 1.8.x up to 1.8.2, and 1.9.0 development up to 2005-09-01 allows attackers to bypass safe level and taint flag protections and execute disallowed code when Ruby processes a program through standard input (stdin).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:36.859-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:02.093-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:20.385-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10564 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:01.566-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:43.465-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.6.8-9.EL3.4" test_ref="oval:org.mitre.oval:tst:32307"/>
            <criterion comment="ruby-docs is earlier than 0:1.6.8-9.EL3.4" test_ref="oval:org.mitre.oval:tst:32339"/>
            <criterion comment="ruby-devel is earlier than 0:1.6.8-9.EL3.4" test_ref="oval:org.mitre.oval:tst:32416"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.6.8-9.EL3.4" test_ref="oval:org.mitre.oval:tst:31981"/>
            <criterion comment="ruby is earlier than 0:1.6.8-9.EL3.4" test_ref="oval:org.mitre.oval:tst:32400"/>
            <criterion comment="irb is earlier than 0:1.6.8-9.EL3.4" test_ref="oval:org.mitre.oval:tst:32073"/>
            <criterion comment="ruby-libs is earlier than 0:1.6.8-9.EL3.4" test_ref="oval:org.mitre.oval:tst:32005"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.8.1-7.EL4.2" test_ref="oval:org.mitre.oval:tst:32263"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.1-7.EL4.2" test_ref="oval:org.mitre.oval:tst:32115"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.1-7.EL4.2" test_ref="oval:org.mitre.oval:tst:32430"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.1-7.EL4.2" test_ref="oval:org.mitre.oval:tst:32256"/>
            <criterion comment="ruby is earlier than 0:1.8.1-7.EL4.2" test_ref="oval:org.mitre.oval:tst:32081"/>
            <criterion comment="irb is earlier than 0:1.8.1-7.EL4.2" test_ref="oval:org.mitre.oval:tst:32262"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.1-7.EL4.2" test_ref="oval:org.mitre.oval:tst:32318"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10563" version="5" class="vulnerability">
      <metadata>
        <title>MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another database via a view that refers to this external table.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3782" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3782"/>
        <description>MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another database via a view that refers to this external table.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:00.771-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:01.809-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:20.112-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10563 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:31.553-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:43.132-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mysql is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36197"/>
          <criterion comment="mysql-devel is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36749"/>
          <criterion comment="mysql-test is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36750"/>
          <criterion comment="mysql-bench is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36831"/>
          <criterion comment="mysql-server is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36646"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10562" version="5" class="vulnerability">
      <metadata>
        <title>Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes for unspecified "multiple forms of character class", which triggers a buffer overflow that allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1660" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1660"/>
        <description>Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes for unspecified "multiple forms of character class", which triggers a buffer overflow that allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:29.936-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:01.517-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:19.716-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10562 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:57.387-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:42.613-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="pcre-devel is earlier than 0:3.9-10.4" test_ref="oval:org.mitre.oval:tst:35613"/>
            <criterion comment="pcre is earlier than 0:3.9-10.4" test_ref="oval:org.mitre.oval:tst:35598"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="pcre-devel is earlier than 0:4.5-4.el4_5.1" test_ref="oval:org.mitre.oval:tst:34556"/>
            <criterion comment="pcre is earlier than 0:4.5-4.el4_5.1" test_ref="oval:org.mitre.oval:tst:34893"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="pcre-devel is earlier than 0:6.6-2.el5_0.1" test_ref="oval:org.mitre.oval:tst:35420"/>
            <criterion comment="pcre is earlier than 0:6.6-2.el5_0.1" test_ref="oval:org.mitre.oval:tst:35187"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10561" version="5" class="vulnerability">
      <metadata>
        <title>Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0792" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0792"/>
        <description>Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:35.229-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:01.329-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:19.499-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10561 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:58.377-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:42.344-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="rsync is earlier than 0:2.5.7-5.3E" test_ref="oval:org.mitre.oval:tst:30761"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10560" version="5" class="vulnerability">
      <metadata>
        <title>OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 structures that trigger an improperly handled error condition.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2937" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2937"/>
        <description>OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 structures that trigger an improperly handled error condition.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:45.292-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:00.963-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:19.180-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10560 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:26.216-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:41.889-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.7a-33.21" test_ref="oval:org.mitre.oval:tst:32990"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.7a-33.21" test_ref="oval:org.mitre.oval:tst:32592"/>
            <criterion comment="openssl is earlier than 0:0.9.7a-33.21" test_ref="oval:org.mitre.oval:tst:32812"/>
            <criterion comment="openssl096b is earlier than 0:0.9.6b-16.46" test_ref="oval:org.mitre.oval:tst:32771"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.7a-43.14" test_ref="oval:org.mitre.oval:tst:32875"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.7a-43.14" test_ref="oval:org.mitre.oval:tst:33058"/>
            <criterion comment="openssl is earlier than 0:0.9.7a-43.14" test_ref="oval:org.mitre.oval:tst:33093"/>
            <criterion comment="openssl096b is earlier than 0:0.9.6b-22.46" test_ref="oval:org.mitre.oval:tst:32789"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1056" version="8" class="vulnerability">
      <metadata>
        <title>Microsoft Certificate Validation Flaw Identity Spoofing Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft CryptoAPI</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0862" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0862"/>
        <description>The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Windows 98 through XP, Office for Mac, Internet Explorer for Mac, and Outlook Express for Mac, do not properly verify the Basic Constraints of intermediate CA-signed X.509 certificates, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack for SSL sessions, as originally reported for Internet Explorer and IIS.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-07-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <modified date="2004-07-13T12:00:00.000-04:00" comment="Added superceding patch info.">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2004-08-04T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-08-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2004-09-13T12:00:00.000-04:00" comment="cmp-66 added">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2004-09-15T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-09-29T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-06-02T12:00:00.000-04:00" comment="Added product">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-06-08T03:17:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-06-29T06:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Multiple corrections and update to POSIX compatibility for ste:2656" date="2010-11-29T16:12:00.873-05:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2010-11-29T16:13:00.517-05:00">INTERIM</status_change>
            <status_change date="2010-12-20T04:00:06.273-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:54.615-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:14.140-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="the version of crypt32.dll is less than 5.131.2600.1123" negate="false" test_ref="oval:org.mitre.oval:tst:1232"/>
        <criterion comment="the patch Q329115 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1231"/>
        <criterion comment="the patch kb835732 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1510"/>
        <criteria operator="AND" comment="Windows XP (sp1 or earlier) is installed">
          <criterion comment="Windows XP is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2838"/>
          <criterion comment="Win2K/XP/2003 service pack 2 (or later) is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2837"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10559" version="5" class="vulnerability">
      <metadata>
        <title>The mysqld_multi script in MySQL allows local users to overwrite arbitrary files via a symlink attack.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0388" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0388"/>
        <description>The mysqld_multi script in MySQL allows local users to overwrite arbitrary files via a symlink attack.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:01.857-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:00.750-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:18.922-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10559 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:35.584-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:41.604-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mysql is earlier than 0:3.23.58-2.3" test_ref="oval:org.mitre.oval:tst:31033"/>
          <criterion comment="mysql-devel is earlier than 0:3.23.58-2.3" test_ref="oval:org.mitre.oval:tst:30615"/>
          <criterion comment="mysql-bench is earlier than 0:3.23.58-2.3" test_ref="oval:org.mitre.oval:tst:31039"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10558" version="5" class="vulnerability">
      <metadata>
        <title>Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (crash) via unknown vectors in (1) the IrDA dissector and (2) the SMB dissector when SMB transaction payload reassembly is enabled.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3242" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3242"/>
        <description>Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (crash) via unknown vectors in (1) the IrDA dissector and (2) the SMB dissector when SMB transaction payload reassembly is enabled.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:03.895-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:00.501-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:18.654-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10558 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:02:24.787-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:41.225-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.13-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32189"/>
            <criterion comment="ethereal is earlier than 0:0.10.13-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32138"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.13-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32341"/>
            <criterion comment="ethereal is earlier than 0:0.10.13-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32202"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10557" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter.  NOTE: this issue was originally reported to be in the imagepsloadfont function in php_gd2.dll in the gd (PHP_GD2) extension in PHP 5.2.3.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4033" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4033"/>
        <description>Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter.  NOTE: this issue was originally reported to be in the imagepsloadfont function in php_gd2.dll in the gd (PHP_GD2) extension in PHP 5.2.3.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:43.018-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:04:00.091-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:18.208-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10557 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:45.164-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:40.583-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="xpdf is earlier than 0:2.02-11.el3" test_ref="oval:org.mitre.oval:tst:35634"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.10" test_ref="oval:org.mitre.oval:tst:34998"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.10" test_ref="oval:org.mitre.oval:tst:35585"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.10" test_ref="oval:org.mitre.oval:tst:35591"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.10" test_ref="oval:org.mitre.oval:tst:35156"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.10" test_ref="oval:org.mitre.oval:tst:35283"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.10" test_ref="oval:org.mitre.oval:tst:35455"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.0.1.EL4.10" test_ref="oval:org.mitre.oval:tst:35178"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:3.0-33.2.el5_1.2" test_ref="oval:org.mitre.oval:tst:35498"/>
            <criterion comment="tetex-afm is earlier than 0:3.0-33.2.el5_1.2" test_ref="oval:org.mitre.oval:tst:35407"/>
            <criterion comment="tetex-xdvi is earlier than 0:3.0-33.2.el5_1.2" test_ref="oval:org.mitre.oval:tst:34618"/>
            <criterion comment="tetex-dvips is earlier than 0:3.0-33.2.el5_1.2" test_ref="oval:org.mitre.oval:tst:35509"/>
            <criterion comment="tetex-doc is earlier than 0:3.0-33.2.el5_1.2" test_ref="oval:org.mitre.oval:tst:34727"/>
            <criterion comment="tetex-fonts is earlier than 0:3.0-33.2.el5_1.2" test_ref="oval:org.mitre.oval:tst:35527"/>
            <criterion comment="tetex is earlier than 0:3.0-33.2.el5_1.2" test_ref="oval:org.mitre.oval:tst:35459"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10556" version="5" class="vulnerability">
      <metadata>
        <title>The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw device.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0177" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0177"/>
        <description>The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw device.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:00.550-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:59.756-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:17.839-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10556 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:54.676-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:40.223-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31148"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31473"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31178"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31282"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31565"/>
          <criterion comment="kernel is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31562"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31582"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:30730"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31534"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10555" version="5" class="vulnerability">
      <metadata>
        <title>A certain Red Hat patch for acpid 1.0.4 effectively triggers a call to the open function with insufficient arguments, which might allow local users to leverage weak permissions on /var/log/acpid, and obtain sensitive information by reading this file, cause a denial of service by overwriting this file, or gain privileges by executing this file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4033" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4033"/>
        <description>A certain Red Hat patch for acpid 1.0.4 effectively triggers a call to the open function with insufficient arguments, which might allow local users to leverage weak permissions on /var/log/acpid, and obtain sensitive information by reading this file, cause a denial of service by overwriting this file, or gain privileges by executing this file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:38.574-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:59.563-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:17.630-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10555 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:40.107-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:39.893-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="acpid is earlier than 0:1.0.4-9.el5_4.1" test_ref="oval:org.mitre.oval:tst:39347"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10554" version="3" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in smlprstime.cpp in RealNetworks RealPlayer 10, 10.1, and possibly 10.5, RealOne Player, RealPlayer Enterprise, and Helix Player 10.5-GOLD and 10.0.5 through 10.0.8, allows remote attackers to execute arbitrary code via an SMIL (SMIL2) file with a long wallclock value.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3410"/>
        <description>Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in smlprstime.cpp in RealNetworks RealPlayer 10, 10.1, and possibly 10.5, RealOne Player, RealPlayer Enterprise, and Helix Player 10.5-GOLD and 10.0.5 through 10.0.8, allows remote attackers to execute arbitrary code via an SMIL (SMIL2) file with a long wallclock value.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:03.641-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:59.271-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:17.299-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <criterion comment="HelixPlayer is earlier than 1:1.0.6-0.EL4.2.0.2" test_ref="oval:org.mitre.oval:tst:34506"/>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criterion comment="realplayer is earlier than 0:10.0.9-0.rhel3.4" test_ref="oval:org.mitre.oval:tst:34710"/>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criterion comment="RealPlayer is earlier than 0:10.0.9-2" test_ref="oval:org.mitre.oval:tst:34808"/>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criterion comment="RealPlayer is earlier than 0:10.0.9-3.el5" test_ref="oval:org.mitre.oval:tst:35065"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10553" version="5" class="vulnerability">
      <metadata>
        <title>Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3636" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3636"/>
        <description>Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:56.557-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:58.995-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:17.059-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10553 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:49.370-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:39.552-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="mailman is earlier than 3:2.1.5.1-25.rhel3.7" test_ref="oval:org.mitre.oval:tst:32470"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="mailman is earlier than 3:2.1.5.1-34.rhel4.5" test_ref="oval:org.mitre.oval:tst:32787"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10552" version="5" class="vulnerability">
      <metadata>
        <title>arch/x86_64/lib/copy_user.S in the Linux kernel before 2.6.19 on some AMD64 systems does not erase destination memory locations after an exception during kernel memory copy, which allows local users to obtain sensitive information.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0077" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0077"/>
        <description>The DBI library (libdbi-perl) for Perl allows local users to overwrite arbitrary files via a symlink attack on a temporary PID file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:14.180-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:58.779-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:16.678-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10552 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:28.408-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:39.204-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="perl-DBI is earlier than 0:1.32-9" test_ref="oval:org.mitre.oval:tst:30891"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="perl-DBI is earlier than 0:1.40-8" test_ref="oval:org.mitre.oval:tst:30771"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10551" version="5" class="vulnerability">
      <metadata>
        <title>ecma/kjs_html.cpp in KDE JavaScript (KJS), as used in Konqueror in KDE 3.5.5, allows remote attackers to cause a denial of service (crash) by accessing the content of an iframe with an ftp:// URI in the src attribute, probably due to a NULL pointer dereference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1308" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1308"/>
        <description>ecma/kjs_html.cpp in KDE JavaScript (KJS), as used in Konqueror in KDE 3.5.5, allows remote attackers to cause a denial of service (crash) by accessing the content of an iframe with an ftp:// URI in the src attribute, probably due to a NULL pointer dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:39.462-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:58.522-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:16.377-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10551 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:24.374-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:38.682-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdelibs is earlier than 6:3.3.1-9.el4" test_ref="oval:org.mitre.oval:tst:35165"/>
            <criterion comment="kdelibs-devel is earlier than 6:3.3.1-9.el4" test_ref="oval:org.mitre.oval:tst:35252"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdelibs-apidocs is earlier than 6:3.5.4-13.el5" test_ref="oval:org.mitre.oval:tst:35316"/>
            <criterion comment="kdelibs is earlier than 6:3.5.4-13.el5" test_ref="oval:org.mitre.oval:tst:35293"/>
            <criterion comment="kdelibs-devel is earlier than 6:3.5.4-13.el5" test_ref="oval:org.mitre.oval:tst:34994"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10550" version="5" class="vulnerability">
      <metadata>
        <title>The print_fatal_signal function in kernel/signal.c in the Linux kernel before 2.6.32.4 on the i386 platform, when print-fatal-signals is enabled, allows local users to discover the contents of arbitrary memory locations by jumping to an address and then reading a log file, and might allow local users to cause a denial of service (system slowdown or crash) by jumping to an address.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0003" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0003"/>
        <description>The print_fatal_signal function in kernel/signal.c in the Linux kernel before 2.6.32.4 on the i386 platform, when print-fatal-signals is enabled, allows local users to discover the contents of arbitrary memory locations by jumping to an address and then reading a log file, and might allow local users to cause a denial of service (system slowdown or crash) by jumping to an address.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:09.466-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:57.988-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:15.800-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10550 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:29.339-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:37.913-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40241"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40097"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40139"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40308"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40210"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40082"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40354"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40326"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:39940"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:39363"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:39805"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40228"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40098"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40231"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:39918"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:39938"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40088"/>
            <criterion comment="kernel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40237"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:39997"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40240"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40352"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:39930"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40055"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10549" version="5" class="vulnerability">
      <metadata>
        <title>The IPsec implementation in Linux kernel before 2.6.25 allows remote routers to cause a denial of service (crash) via a fragmented ESP packet in which the first fragment does not contain the entire ESP header and IV.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6282" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6282"/>
        <description>The IPsec implementation in Linux kernel before 2.6.25 allows remote routers to cause a denial of service (crash) via a fragmented ESP packet in which the first fragment does not contain the entire ESP header and IV.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:10.400-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:57.500-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:15.277-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10549 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:16.483-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:37.165-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36201"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36534"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36373"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36702"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36615"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36490"/>
            <criterion comment="kernel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36370"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:35738"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36249"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36731"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:35733"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36697"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36610"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36727"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:35799"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:35977"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36772"/>
            <criterion comment="kernel is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36502"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36670"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36665"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:35765"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36539"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36637"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10548" version="5" class="vulnerability">
      <metadata>
        <title>Squirrelmail 1.4.15 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3663" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3663"/>
        <description>Squirrelmail 1.4.15 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:17.740-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:57.247-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:14.946-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10548 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:41.416-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:36.641-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-8.el3" test_ref="oval:org.mitre.oval:tst:38111"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-5.el4_7.2" test_ref="oval:org.mitre.oval:tst:37956"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-5.el5_2.2" test_ref="oval:org.mitre.oval:tst:37617"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10547" version="5" class="vulnerability">
      <metadata>
        <title>fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the add_to_page_cache_lru function, and subsequently attempts to unlock a page that was not locked, which allows local users to cause a denial of service (kernel BUG and system crash), as demonstrated by the fio I/O tool.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4302" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4302"/>
        <description>fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the add_to_page_cache_lru function, and subsequently attempts to unlock a page that was not locked, which allows local users to cause a denial of service (kernel BUG and system crash), as demonstrated by the fio I/O tool.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:47.431-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:56.892-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:14.592-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10547 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:19.283-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:36.214-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37778"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37855"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37870"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37881"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37504"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37738"/>
          <criterion comment="kernel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37774"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37247"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37715"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37954"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37668"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37947"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10546" version="5" class="vulnerability">
      <metadata>
        <title>Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted archive that uses LZW compression, leading to an array index error.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0001" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0001"/>
        <description>Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted archive that uses LZW compression, leading to an array index error.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:35.851-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:56.574-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:14.311-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10546 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:02:14.301-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:35.723-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gzip is earlier than 0:1.3.3-15.rhel3" test_ref="oval:org.mitre.oval:tst:39795"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gzip is earlier than 0:1.3.3-18.el4_8.1" test_ref="oval:org.mitre.oval:tst:39345"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="gzip is earlier than 0:1.3.5-11.el5_4.1" test_ref="oval:org.mitre.oval:tst:39855"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10545" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 1.5.0.4 allows user-assisted remote attackers to inject arbitrary web script or HTML by tricking a user into (1) performing a "View Image" on a broken image in which the SRC attribute contains a Javascript URL, or (2) selecting "Show only this frame" on a frame whose SRC attribute contains a Javascript URL.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2785" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2785"/>
        <description>Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 1.5.0.4 allows user-assisted remote attackers to inject arbitrary web script or HTML by tricking a user into (1) performing a "View Image" on a broken image in which the SRC attribute contains a Javascript URL, or (2) selecting "Show only this frame" on a frame whose SRC attribute contains a Javascript URL.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:29.387-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:56.012-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:13.694-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10545 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:38.355-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:35.090-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32575"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32674"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32918"/>
            <criterion comment="seamonkey is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32919"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32864"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32659"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32859"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32511"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32902"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32837"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32873"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32693"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32886"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32810"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32418"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32496"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32929"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32777"/>
            <criterion comment="firefox is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32896"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32722"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32906"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32905"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32925"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32624"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10544" version="5" class="vulnerability">
      <metadata>
        <title>icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code by using a device file for processing a crafted image file associated with large integer values for certain sizes, related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0584" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0584"/>
        <description>icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code by using a device file for processing a crafted image file associated with large integer values for certain sizes, related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:12.575-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:55.668-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:13.343-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10544 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:16.625-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:34.516-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="hpijs is earlier than 0:7.05-32.1.17" test_ref="oval:org.mitre.oval:tst:38448"/>
            <criterion comment="ghostscript-devel is earlier than 0:7.05-32.1.17" test_ref="oval:org.mitre.oval:tst:38527"/>
            <criterion comment="ghostscript is earlier than 0:7.05-32.1.17" test_ref="oval:org.mitre.oval:tst:37828"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ghostscript-devel is earlier than 0:7.07-33.2.el4_7.5" test_ref="oval:org.mitre.oval:tst:38438"/>
            <criterion comment="ghostscript is earlier than 0:7.07-33.2.el4_7.5" test_ref="oval:org.mitre.oval:tst:38369"/>
            <criterion comment="ghostscript-gtk is earlier than 0:7.07-33.2.el4_7.5" test_ref="oval:org.mitre.oval:tst:38244"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ghostscript-devel is earlier than 0:8.15.2-9.4.el5_3.4" test_ref="oval:org.mitre.oval:tst:38396"/>
            <criterion comment="ghostscript is earlier than 0:8.15.2-9.4.el5_3.4" test_ref="oval:org.mitre.oval:tst:37905"/>
            <criterion comment="ghostscript-gtk is earlier than 0:8.15.2-9.4.el5_3.4" test_ref="oval:org.mitre.oval:tst:38418"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10543" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in Mutt 1.4.2 might allow local users to execute arbitrary code via "" characters in the GECOS field, which triggers the overflow during alias expansion.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2683" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2683"/>
        <description>Buffer overflow in Mutt 1.4.2 might allow local users to execute arbitrary code via "&amp;" characters in the GECOS field, which triggers the overflow during alias expansion.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:13.598-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:55.374-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:12.994-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10543 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:39.814-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:34.083-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="mutt is earlier than 5:1.4.1-5.el3" test_ref="oval:org.mitre.oval:tst:34296"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="mutt is earlier than 5:1.4.1-12.0.3.el4" test_ref="oval:org.mitre.oval:tst:34260"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="mutt is earlier than 5:1.4.2.2-3.0.2.el5" test_ref="oval:org.mitre.oval:tst:34241"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10542" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a "stacked array assignment."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3388" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3388"/>
        <description>Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a "stacked array assignment."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:13.844-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:54.864-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:12.515-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10542 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:29.452-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:33.451-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-26.ent" test_ref="oval:org.mitre.oval:tst:32105"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-26.ent" test_ref="oval:org.mitre.oval:tst:32433"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-26.ent" test_ref="oval:org.mitre.oval:tst:32429"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-26.ent" test_ref="oval:org.mitre.oval:tst:32322"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-26.ent" test_ref="oval:org.mitre.oval:tst:32301"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-26.ent" test_ref="oval:org.mitre.oval:tst:32253"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-26.ent" test_ref="oval:org.mitre.oval:tst:32050"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32261"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32003"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32346"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32114"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32325"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32420"/>
            <criterion comment="php is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32337"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32287"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32016"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32405"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32397"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32321"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32207"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:31926"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10541" version="3" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in Sun Java Web Start in JDK and JRE 6 before Update 4, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allow context-dependent attackers to gain privileges via an untrusted application, as demonstrated by (a) an application that grants itself privileges to (1) read local files, (2) write to local files, or (3) execute local programs; and as demonstrated by (b) a long value associated with a java-vm-args attribute in a j2se tag in a JNLP file, which triggers a stack-based buffer overflow in the GetVMArgsOption function; aka CR 6557220.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3111" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3111"/>
        <description>Multiple buffer overflows in Sun Java Web Start in JDK and JRE 6 before Update 4, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allow context-dependent attackers to gain privileges via an untrusted application, as demonstrated by (a) an application that grants itself privileges to (1) read local files, (2) write to local files, or (3) execute local programs; and as demonstrated by (b) a long value associated with a java-vm-args attribute in a j2se tag in a JNLP file, which triggers a stack-based buffer overflow in the GetVMArgsOption function; aka CR 6557220.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:29.096-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:54.538-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:12.164-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37481"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36778"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37475"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37445"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37487"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37483"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37181"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37426"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37315"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37359"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37368"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37461"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10540" version="5" class="vulnerability">
      <metadata>
        <title>Tiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and (2) GNU Shishi, allows attackers to crash the DER decoder and possibly execute arbitrary code via "out-of-bounds access" caused by invalid input, as demonstrated by the ProtoVer SSL test suite.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0645" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0645"/>
        <description>Tiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and (2) GNU Shishi, allows attackers to crash the DER decoder and possibly execute arbitrary code via "out-of-bounds access" caused by invalid input, as demonstrated by the ProtoVer SSL test suite.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:51.409-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:54.345-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:11.893-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10540 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:31.304-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:33.154-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="gnutls is earlier than 0:1.0.20-3.2.2" test_ref="oval:org.mitre.oval:tst:32583"/>
          <criterion comment="gnutls-devel is earlier than 0:1.0.20-3.2.2" test_ref="oval:org.mitre.oval:tst:32570"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10539" version="5" class="vulnerability">
      <metadata>
        <title>nm-connection-editor in NetworkManager (NM) 0.7.x exports connection objects over D-Bus upon actions in the connection editor GUI, which allows local users to obtain sensitive information by reading D-Bus signals, as demonstrated by using dbus-monitor to discover the password for the WiFi network.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4145" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4145"/>
        <description>nm-connection-editor in NetworkManager (NM) 0.7.x exports connection objects over D-Bus upon actions in the connection editor GUI, which allows local users to obtain sensitive information by reading D-Bus signals, as demonstrated by using dbus-monitor to discover the password for the WiFi network.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:41.800-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:54.112-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:11.641-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10539 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:06.905-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:32.776-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="NetworkManager-gnome is earlier than 1:0.7.0-9.el5_4" test_ref="oval:org.mitre.oval:tst:40322"/>
          <criterion comment="NetworkManager-glib-devel is earlier than 1:0.7.0-9.el5_4" test_ref="oval:org.mitre.oval:tst:40269"/>
          <criterion comment="NetworkManager-glib is earlier than 1:0.7.0-9.el5_4" test_ref="oval:org.mitre.oval:tst:39697"/>
          <criterion comment="NetworkManager-devel is earlier than 1:0.7.0-9.el5_4" test_ref="oval:org.mitre.oval:tst:40305"/>
          <criterion comment="NetworkManager is earlier than 1:0.7.0-9.el5_4" test_ref="oval:org.mitre.oval:tst:39987"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10538" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, might allow remote attackers to execute arbitrary code via a long filename in a TFTP packet, as demonstrated by a read (aka RRQ) request.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2957" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2957"/>
        <description>Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, might allow remote attackers to execute arbitrary code via a long filename in a TFTP packet, as demonstrated by a read (aka RRQ) request.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:51.168-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:53.889-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:11.437-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10538 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:45.672-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:32.494-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="dnsmasq is earlier than 0:2.45-1.1.el5_3" test_ref="oval:org.mitre.oval:tst:38956"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10537" version="5" class="vulnerability">
      <metadata>
        <title>The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modify the GLOBALS array and bypass security protections of PHP applications via a multipart/form-data POST request with a "GLOBALS" fileupload field.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3390" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3390"/>
        <description>The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modify the GLOBALS array and bypass security protections of PHP applications via a multipart/form-data POST request with a "GLOBALS" fileupload field.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:18.786-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:53.258-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:10.887-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10537 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:04.137-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:31.880-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-26.ent" test_ref="oval:org.mitre.oval:tst:32105"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-26.ent" test_ref="oval:org.mitre.oval:tst:32433"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-26.ent" test_ref="oval:org.mitre.oval:tst:32429"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-26.ent" test_ref="oval:org.mitre.oval:tst:32322"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-26.ent" test_ref="oval:org.mitre.oval:tst:32301"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-26.ent" test_ref="oval:org.mitre.oval:tst:32253"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-26.ent" test_ref="oval:org.mitre.oval:tst:32050"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32261"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32003"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32346"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32114"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32325"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32420"/>
            <criterion comment="php is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32337"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32287"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32016"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32405"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32397"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32321"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:32207"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.9" test_ref="oval:org.mitre.oval:tst:31926"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10536" version="5" class="vulnerability">
      <metadata>
        <title>The (1) PANA and (2) KISMET dissectors in Wireshark (formerly Ethereal) 0.99.3 through 1.0.0 allow remote attackers to cause a denial of service (application stop) via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3138" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3138"/>
        <description>The (1) PANA and (2) KISMET dissectors in Wireshark (formerly Ethereal) 0.99.3 through 1.0.0 allow remote attackers to cause a denial of service (application stop) via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:36.641-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:52.893-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:10.554-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10536 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:27.623-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:31.404-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-EL3.3" test_ref="oval:org.mitre.oval:tst:37624"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-EL3.3" test_ref="oval:org.mitre.oval:tst:37207"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-3.el4_7" test_ref="oval:org.mitre.oval:tst:37249"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-3.el4_7" test_ref="oval:org.mitre.oval:tst:37725"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37542"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37460"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10535" version="5" class="vulnerability">
      <metadata>
        <title>kdesktop_lock in kdebase before 3.1.3-5.11 for KDE in Red Hat Enterprise Linux (RHEL) 3 does not properly terminate, which can prevent the screensaver from activating or prevent users from manually locking the desktop.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2933" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2933"/>
        <description>kdesktop_lock in kdebase before 3.1.3-5.11 for KDE in Red Hat Enterprise Linux (RHEL) 3 does not properly terminate, which can prevent the screensaver from activating or prevent users from manually locking the desktop.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:07.105-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:52.693-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:10.338-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10535 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:14.203-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:31.130-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kdebase is earlier than 6:3.1.3-5.11" test_ref="oval:org.mitre.oval:tst:32514"/>
          <criterion comment="kdebase-devel is earlier than 6:3.1.3-5.11" test_ref="oval:org.mitre.oval:tst:32667"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10534" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and kdegraphics KPDF, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file that triggers a heap-based buffer overflow, possibly related to (1) Decrypt.cxx, (2) FoFiTrueType.cxx, (3) gmem.c, (4) JBIG2Stream.cxx, and (5) PSOutputDev.cxx in pdftops/. NOTE: the JBIG2Stream.cxx vector may overlap CVE-2009-1179.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0791" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0791"/>
        <description>Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and kdegraphics KPDF, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF file that triggers a heap-based buffer overflow, possibly related to (1) Decrypt.cxx, (2) FoFiTrueType.cxx, (3) gmem.c, (4) JBIG2Stream.cxx, and (5) PSOutputDev.cxx in pdftops/. NOTE: the JBIG2Stream.cxx vector may overlap CVE-2009-1179.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:44.711-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:51.959-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:09.585-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10534 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:09:02.298-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:30.196-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:39543"/>
            <criterion comment="tetex-dvips is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40032"/>
            <criterion comment="tetex-fonts is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40389"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.62" test_ref="oval:org.mitre.oval:tst:38735"/>
            <criterion comment="tetex is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40303"/>
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.62" test_ref="oval:org.mitre.oval:tst:38765"/>
            <criterion comment="tetex-afm is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40329"/>
            <criterion comment="xpdf is earlier than 1:2.02-17.el3" test_ref="oval:org.mitre.oval:tst:39361"/>
            <criterion comment="tetex-xdvi is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40000"/>
            <criterion comment="tetex-doc is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40150"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.62" test_ref="oval:org.mitre.oval:tst:37797"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40095"/>
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-15.el4_8.2" test_ref="oval:org.mitre.oval:tst:39438"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:39528"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-15.el4_8.2" test_ref="oval:org.mitre.oval:tst:39094"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40473"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3" test_ref="oval:org.mitre.oval:tst:38748"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40316"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-7.7.2.el4_8.5" test_ref="oval:org.mitre.oval:tst:39221"/>
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3" test_ref="oval:org.mitre.oval:tst:38351"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40209"/>
            <criterion comment="xpdf is earlier than 1:3.00-22.el4_8.1" test_ref="oval:org.mitre.oval:tst:38963"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40364"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40077"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3" test_ref="oval:org.mitre.oval:tst:38503"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40444"/>
            <criterion comment="kdegraphics-devel is earlier than 7:3.5.4-15.el5_4.2" test_ref="oval:org.mitre.oval:tst:39062"/>
            <criterion comment="tetex-dvips is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40312"/>
            <criterion comment="poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38512"/>
            <criterion comment="kdegraphics is earlier than 7:3.5.4-15.el5_4.2" test_ref="oval:org.mitre.oval:tst:39529"/>
            <criterion comment="poppler is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38760"/>
            <criterion comment="tetex-fonts is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40122"/>
            <criterion comment="tetex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40413"/>
            <criterion comment="tetex-afm is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40008"/>
            <criterion comment="tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:39920"/>
            <criterion comment="poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38500"/>
            <criterion comment="tetex-doc is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40398"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10533" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the big2_decode_symbol_dict function (jbig2_symbol_dict.c) in the JBIG2 decoding library (jbig2dec) in Ghostscript 8.64, and probably earlier versions, allows remote attackers to execute arbitrary code via a PDF file with a JBIG2 symbol dictionary segment with a large run length value.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0196"/>
        <description>Heap-based buffer overflow in the big2_decode_symbol_dict function (jbig2_symbol_dict.c) in the JBIG2 decoding library (jbig2dec) in Ghostscript 8.64, and probably earlier versions, allows remote attackers to execute arbitrary code via a PDF file with a JBIG2 symbol dictionary segment with a large run length value.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:13.734-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:51.744-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:09.357-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10533 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:08.754-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:29.790-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="ghostscript-devel is earlier than 0:8.15.2-9.4.el5_3.7" test_ref="oval:org.mitre.oval:tst:38588"/>
          <criterion comment="ghostscript is earlier than 0:8.15.2-9.4.el5_3.7" test_ref="oval:org.mitre.oval:tst:38629"/>
          <criterion comment="ghostscript-gtk is earlier than 0:8.15.2-9.4.el5_3.7" test_ref="oval:org.mitre.oval:tst:38457"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10532" version="5" class="vulnerability">
      <metadata>
        <title>Evolution 2.0.3 allows remote attackers to cause a denial of service (application crash or hang) via crafted messages, possibly involving charsets in attachment filenames.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0806" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0806"/>
        <description>Evolution 2.0.3 allows remote attackers to cause a denial of service (application crash or hang) via crafted messages, possibly involving charsets in attachment filenames.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:50.317-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:51.552-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:09.136-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10532 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:26.499-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:29.497-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="evolution is earlier than 0:2.0.2-16" test_ref="oval:org.mitre.oval:tst:31620"/>
          <criterion comment="evolution-devel is earlier than 0:2.0.2-16" test_ref="oval:org.mitre.oval:tst:31842"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10531" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine (aka lcms) before 1.16 allows attackers to have an unknown impact via vectors related to a length parameter inconsistency involving the contents of "the input file," a different vulnerability than CVE-2007-2741.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5316" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5316"/>
        <description>Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine (aka lcms) before 1.16 allows attackers to have an unknown impact via vectors related to a length parameter inconsistency involving the contents of "the input file," a different vulnerability than CVE-2007-2741.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:56.987-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:51.348-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:08.854-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10531 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:58.818-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:29.174-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="python-lcms is earlier than 0:1.15-1.2.2.el5_2.2" test_ref="oval:org.mitre.oval:tst:38084"/>
          <criterion comment="lcms-devel is earlier than 0:1.15-1.2.2.el5_2.2" test_ref="oval:org.mitre.oval:tst:38042"/>
          <criterion comment="lcms is earlier than 0:1.15-1.2.2.el5_2.2" test_ref="oval:org.mitre.oval:tst:37821"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10530" version="5" class="vulnerability">
      <metadata>
        <title>The Linux kernel 2.6.17.10 and 2.6.17.11 and 2.6.18-rc5 allows local users to cause a denial of service (crash) via an SCTP socket with a certain SO_LINGER value, possibly related to the patch for CVE-2006-3745.  NOTE: older kernel versions for specific Linux distributions are also affected, due to backporting of the CVE-2006-3745 patch.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4535" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4535"/>
        <description>The Linux kernel 2.6.17.10 and 2.6.17.11 and 2.6.18-rc5 allows local users to cause a denial of service (crash) via an SCTP socket with a certain SO_LINGER value, possibly related to the patch for CVE-2006-3745.  NOTE: older kernel versions for specific Linux distributions are also affected, due to backporting of the CVE-2006-3745 patch.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:57.321-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:51.006-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:08.549-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10530 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:03.944-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:28.741-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32678"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32900"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:33014"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32947"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32944"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32956"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32602"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:33081"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32892"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10529" version="5" class="vulnerability">
      <metadata>
        <title>The read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries in MIME multipart content, which allows remote attackers to cause a denial of service (infinite loop) via crafted HTTP requests, a different issue than CVE-2006-5467.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6303" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6303"/>
        <description>The read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries in MIME multipart content, which allows remote attackers to cause a denial of service (infinite loop) via crafted HTTP requests, a different issue than CVE-2006-5467.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:40.388-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:50.623-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:08.158-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10529 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:43.252-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:27.998-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:36968"/>
            <criterion comment="ruby-docs is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37000"/>
            <criterion comment="ruby-devel is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:36747"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37140"/>
            <criterion comment="ruby is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37342"/>
            <criterion comment="irb is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37252"/>
            <criterion comment="ruby-libs is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37305"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.8.1-7.EL4.8.1" test_ref="oval:org.mitre.oval:tst:35449"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.1-7.EL4.8.1" test_ref="oval:org.mitre.oval:tst:35355"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.1-7.EL4.8.1" test_ref="oval:org.mitre.oval:tst:35320"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.1-7.EL4.8.1" test_ref="oval:org.mitre.oval:tst:35295"/>
            <criterion comment="ruby is earlier than 0:1.8.1-7.EL4.8.1" test_ref="oval:org.mitre.oval:tst:35444"/>
            <criterion comment="irb is earlier than 0:1.8.1-7.EL4.8.1" test_ref="oval:org.mitre.oval:tst:35440"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.1-7.EL4.8.1" test_ref="oval:org.mitre.oval:tst:34852"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10528" version="5" class="vulnerability">
      <metadata>
        <title>sink.c in fetchmail before 6.3.9 allows context-dependent attackers to cause a denial of service (NULL dereference and application crash) by refusing certain warning messages that are sent over SMTP.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4565" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4565"/>
        <description>sink.c in fetchmail before 6.3.9 allows context-dependent attackers to cause a denial of service (NULL dereference and application crash) by refusing certain warning messages that are sent over SMTP.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:30.155-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:50.366-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:07.833-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10528 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:10.532-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:27.554-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="fetchmail is earlier than 0:6.2.0-3.el3.5" test_ref="oval:org.mitre.oval:tst:38901"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="fetchmail is earlier than 0:6.2.5-6.0.1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39046"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="fetchmail is earlier than 0:6.3.6-1.1.el5_3.1" test_ref="oval:org.mitre.oval:tst:39380"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10527" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (crash) via a crafted GZIP (gz) archive, which results in a NULL dereference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4334" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4334"/>
        <description>Unspecified vulnerability in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (crash) via a crafted GZIP (gz) archive, which results in a NULL dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:33.304-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:50.147-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:07.593-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10527 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:01.120-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:27.202-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gzip is earlier than 0:1.3.3-13.rhel3" test_ref="oval:org.mitre.oval:tst:32961"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gzip is earlier than 0:1.3.3-16.rhel4" test_ref="oval:org.mitre.oval:tst:32979"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10526" version="5" class="vulnerability">
      <metadata>
        <title>htsearch program in htDig 3.2 beta, 3.1.6, 3.1.5, and earlier allows remote attackers to determine the physical path of the server by requesting a non-existent configuration file using the config parameter, which generates an error message that includes the full path.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2000-1191" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-1191"/>
        <description>htsearch program in htDig 3.2 beta, 3.1.6, 3.1.5, and earlier allows remote attackers to determine the physical path of the server by requesting a non-existent configuration file using the config parameter, which generates an error message that includes the full path.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:54.741-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:49.918-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:07.388-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10526 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:34.801-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:26.900-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="htdig is earlier than 2:3.1.6-7.el3" test_ref="oval:org.mitre.oval:tst:30536"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10525" version="5" class="vulnerability">
      <metadata>
        <title>The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to cause a denial of service (caching forward proxy process crash) via crafted date headers that trigger a buffer over-read.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3847"/>
        <description>The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to cause a denial of service (caching forward proxy process crash) via crafted date headers that trigger a buffer over-read.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:59.096-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:49.555-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:06.946-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10525 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:21.166-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:26.355-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-devel is earlier than 0:2.0.46-70.ent" test_ref="oval:org.mitre.oval:tst:35773"/>
            <criterion comment="mod_ssl is earlier than 0:2.0.46-70.ent" test_ref="oval:org.mitre.oval:tst:36016"/>
            <criterion comment="httpd is earlier than 0:2.0.46-70.ent" test_ref="oval:org.mitre.oval:tst:35281"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-suexec is earlier than 0:2.0.52-38.ent" test_ref="oval:org.mitre.oval:tst:34801"/>
            <criterion comment="httpd-manual is earlier than 0:2.0.52-38.ent" test_ref="oval:org.mitre.oval:tst:34966"/>
            <criterion comment="httpd-devel is earlier than 0:2.0.52-38.ent" test_ref="oval:org.mitre.oval:tst:34434"/>
            <criterion comment="mod_ssl is earlier than 1:2.0.52-38.ent" test_ref="oval:org.mitre.oval:tst:34832"/>
            <criterion comment="httpd is earlier than 0:2.0.52-38.ent" test_ref="oval:org.mitre.oval:tst:34930"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-manual is earlier than 0:2.2.3-11.el5" test_ref="oval:org.mitre.oval:tst:34958"/>
            <criterion comment="httpd-devel is earlier than 0:2.2.3-11.el5" test_ref="oval:org.mitre.oval:tst:34739"/>
            <criterion comment="mod_ssl is earlier than 1:2.2.3-11.el5" test_ref="oval:org.mitre.oval:tst:34935"/>
            <criterion comment="httpd is earlier than 0:2.2.3-11.el5" test_ref="oval:org.mitre.oval:tst:34915"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10524" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in the rb_ary_store function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, and 1.8.7 before 1.8.7-p22 allow context-dependent attackers to execute arbitrary code or cause a denial of service via unknown vectors, a different issue than CVE-2008-2662, CVE-2008-2664, and CVE-2008-2725. NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. The CVE description should be regarded as authoritative, although it is likely to change.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2663" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2663"/>
        <description>Multiple integer overflows in the rb_ary_store function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, and 1.8.7 before 1.8.7-p22 allow context-dependent attackers to execute arbitrary code or cause a denial of service via unknown vectors, a different issue than CVE-2008-2662, CVE-2008-2664, and CVE-2008-2725. NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. The CVE description should be regarded as authoritative, although it is likely to change.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:12.113-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:48.997-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:06.004-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10524 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:26.535-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:25.612-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:36968"/>
            <criterion comment="ruby-docs is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37000"/>
            <criterion comment="ruby-devel is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:36747"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37140"/>
            <criterion comment="ruby is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37342"/>
            <criterion comment="irb is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37252"/>
            <criterion comment="ruby-libs is earlier than 0:1.6.8-12.el3" test_ref="oval:org.mitre.oval:tst:37305"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:37171"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:37242"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:36569"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:37296"/>
            <criterion comment="ruby is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:36468"/>
            <criterion comment="irb is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:36808"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.1-7.el4_6.1" test_ref="oval:org.mitre.oval:tst:37219"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-ri is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37199"/>
            <criterion comment="ruby-mode is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:36604"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:36516"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:36870"/>
            <criterion comment="ruby is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:36738"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37119"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37289"/>
            <criterion comment="ruby-irb is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37148"/>
            <criterion comment="ruby-rdoc is earlier than 0:1.8.5-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:37203"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10523" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which results in a heap overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1352" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1352"/>
        <description>Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which results in a heap overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:38.130-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:48.149-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:04.961-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10523 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:52.850-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:24.421-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33447"/>
            <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33884"/>
            <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33550"/>
            <criterion comment="XFree86-libs is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33984"/>
            <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33936"/>
            <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33976"/>
            <criterion comment="XFree86-twm is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33799"/>
            <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33867"/>
            <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33958"/>
            <criterion comment="XFree86-doc is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33791"/>
            <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33929"/>
            <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33764"/>
            <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33070"/>
            <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33716"/>
            <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33788"/>
            <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33928"/>
            <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33930"/>
            <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33951"/>
            <criterion comment="XFree86-xdm is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33950"/>
            <criterion comment="XFree86-sdk is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33932"/>
            <criterion comment="XFree86 is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33656"/>
            <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33963"/>
            <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33466"/>
            <criterion comment="XFree86-xfs is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33846"/>
            <criterion comment="XFree86-tools is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33660"/>
            <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33687"/>
            <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33689"/>
            <criterion comment="XFree86-xauth is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33499"/>
            <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33719"/>
            <criterion comment="XFree86-devel is earlier than 0:4.3.0-120.EL" test_ref="oval:org.mitre.oval:tst:33696"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33811"/>
            <criterion comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33258"/>
            <criterion comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33567"/>
            <criterion comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33738"/>
            <criterion comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33938"/>
            <criterion comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33663"/>
            <criterion comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33066"/>
            <criterion comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33875"/>
            <criterion comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33789"/>
            <criterion comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33829"/>
            <criterion comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33434"/>
            <criterion comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33704"/>
            <criterion comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33790"/>
            <criterion comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33886"/>
            <criterion comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33982"/>
            <criterion comment="xorg-x11 is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33715"/>
            <criterion comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33856"/>
            <criterion comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.13.37.7" test_ref="oval:org.mitre.oval:tst:33815"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libXfont is earlier than 0:1.2.2-1.0.2.el5" test_ref="oval:org.mitre.oval:tst:33903"/>
            <criterion comment="libXfont-devel is earlier than 0:1.2.2-1.0.2.el5" test_ref="oval:org.mitre.oval:tst:33674"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10522" version="5" class="vulnerability">
      <metadata>
        <title>The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentation fault) via certain crafted requests.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2796" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2796"/>
        <description>The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentation fault) via certain crafted requests.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:05.650-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:47.870-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:04.702-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10522 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:14.761-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:24.001-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE3-6.3E.14" test_ref="oval:org.mitre.oval:tst:32129"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE6-3.4E.11" test_ref="oval:org.mitre.oval:tst:32053"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10521" version="5" class="vulnerability">
      <metadata>
        <title>MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' (b single-quote single-quote) token, aka an empty bit-string literal, which allows remote attackers to cause a denial of service (daemon crash) by using this token in a SQL statement.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3963" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3963"/>
        <description>MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' (b single-quote single-quote) token, aka an empty bit-string literal, which allows remote attackers to cause a denial of service (daemon crash) by using this token in a SQL statement.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:43.911-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:47.641-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:04.456-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10521 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:45.011-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:23.158-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mysql is earlier than 0:5.0.77-3.el5" test_ref="oval:org.mitre.oval:tst:39025"/>
          <criterion comment="mysql-devel is earlier than 0:5.0.77-3.el5" test_ref="oval:org.mitre.oval:tst:39228"/>
          <criterion comment="mysql-test is earlier than 0:5.0.77-3.el5" test_ref="oval:org.mitre.oval:tst:38934"/>
          <criterion comment="mysql-bench is earlier than 0:5.0.77-3.el5" test_ref="oval:org.mitre.oval:tst:39199"/>
          <criterion comment="mysql-server is earlier than 0:5.0.77-3.el5" test_ref="oval:org.mitre.oval:tst:39156"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10520" version="5" class="vulnerability">
      <metadata>
        <title>Directory traversal vulnerability in the ICC_Profile.getInstance method in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local International Color Consortium (ICC) profile files via a .. (dot dot) in a pathname, aka Bug Id 6631533.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3728" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3728"/>
        <description>Directory traversal vulnerability in the ICC_Profile.getInstance method in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local International Color Consortium (ICC) profile files via a .. (dot dot) in a pathname, aka Bug Id 6631533.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:03.544-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:47.413-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:04.198-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10520 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:37.413-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:22.774-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:38878"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39616"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39115"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39531"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39655"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1052" version="1" class="vulnerability">
      <metadata>
        <title>Multiple Vulnerabilities in Rockliffe MailSite Express</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Rockliffe MailSite Express</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3428" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3428"/>
        <description>Cross-site scripting (XSS) vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to inject arbitrary web script or HTML via a message body.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-01-25T07:14:00.000-04:00">
              <contributor organization="OS2A">Rahul Mohandas</contributor>
            </submitted>
            <status_change date="2006-01-25T07:30:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-03-09T12:19:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="the software MailSite Express version 6.1.20 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1239"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10519" version="3" class="vulnerability">
      <metadata>
        <title>Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0, when running on Linux, uses insecure permissions for memory, which might allow local users to gain privileges.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6246" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6246"/>
        <description>Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0, when running on Linux, uses insecure permissions for memory, which might allow local users to gain privileges.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:39.309-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:47.170-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:03.891-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criterion comment="flash-plugin is earlier than 0:9.0.115.0-1.el3.with.oss" test_ref="oval:org.mitre.oval:tst:35926"/>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criterion comment="flash-plugin is earlier than 0:9.0.115.0-1.el4" test_ref="oval:org.mitre.oval:tst:35400"/>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criterion comment="flash-plugin is earlier than 0:9.0.115.0-1.el5" test_ref="oval:org.mitre.oval:tst:35776"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10518" version="5" class="vulnerability">
      <metadata>
        <title>Linux kernel before 2.6.15.5, when running on Intel processors, allows local users to cause a denial of service ("endless recursive fault") via unknown attack vectors related to a "bad elf entry address."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0741" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0741"/>
        <description>Linux kernel before 2.6.15.5, when running on Intel processors, allows local users to cause a denial of service ("endless recursive fault") via unknown attack vectors related to a "bad elf entry address."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:34.494-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:46.701-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:03.461-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10518 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:05.278-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:22.196-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32158"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32589"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32704"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32562"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32078"/>
            <criterion comment="kernel is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32513"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32231"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32097"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32708"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32235"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32371"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32703"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32314"/>
            <criterion comment="kernel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32614"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32295"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32310"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32611"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32305"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10517" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0.5 and Mozilla before 1.7.9 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2268"/>
        <description>Firefox before 1.0.5 and Mozilla before 1.7.9 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:28.389-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:46.216-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:02.927-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10517 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:55.774-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:21.516-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32142"/>
            <criterion comment="mozilla is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32131"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32154"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32001"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32171"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32162"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31782"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32041"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32004"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31353"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32120"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.6" test_ref="oval:org.mitre.oval:tst:31633"/>
            <criterion comment="mozilla is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31837"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32100"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31821"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31904"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.6" test_ref="oval:org.mitre.oval:tst:31814"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31951"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31554"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32149"/>
            <criterion comment="firefox is earlier than 0:1.0.6-1.4.1" test_ref="oval:org.mitre.oval:tst:32167"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31998"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32061"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10516" version="5" class="vulnerability">
      <metadata>
        <title>The fuse_direct_io function in fs/fuse/file.c in the fuse subsystem in the Linux kernel before 2.6.32-rc7 might allow attackers to cause a denial of service (invalid pointer dereference and OOPS) via vectors possibly related to a memory-consumption attack.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4021" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4021"/>
        <description>The fuse_direct_io function in fs/fuse/file.c in the fuse subsystem in the Linux kernel before 2.6.32-rc7 might allow attackers to cause a denial of service (invalid pointer dereference and OOPS) via vectors possibly related to a memory-consumption attack.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:04.832-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:45.853-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:02.578-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10516 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:28.217-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:21.086-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40050"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39464"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39090"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40063"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39443"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39703"/>
          <criterion comment="kernel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39080"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39862"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40057"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40029"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39849"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40039"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10515" version="5" class="vulnerability">
      <metadata>
        <title>Multiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, as derived from Cyrus libsieve, allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SIEVE script, as demonstrated by forwarding an e-mail message to a large number of recipients, a different vulnerability than CVE-2009-2632.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3235" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3235"/>
        <description>Multiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, as derived from Cyrus libsieve, allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SIEVE script, as demonstrated by forwarding an e-mail message to a large number of recipients, a different vulnerability than CVE-2009-2632.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:49.676-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:45.535-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:02.225-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10515 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:13.565-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:20.573-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="perl-Cyrus is earlier than 0:2.2.12-10.el4_8.4" test_ref="oval:org.mitre.oval:tst:39197"/>
            <criterion comment="cyrus-imapd-devel is earlier than 0:2.2.12-10.el4_8.4" test_ref="oval:org.mitre.oval:tst:39014"/>
            <criterion comment="cyrus-imapd-murder is earlier than 0:2.2.12-10.el4_8.4" test_ref="oval:org.mitre.oval:tst:38953"/>
            <criterion comment="cyrus-imapd-nntp is earlier than 0:2.2.12-10.el4_8.4" test_ref="oval:org.mitre.oval:tst:39405"/>
            <criterion comment="cyrus-imapd is earlier than 0:2.2.12-10.el4_8.4" test_ref="oval:org.mitre.oval:tst:39051"/>
            <criterion comment="cyrus-imapd-utils is earlier than 0:2.2.12-10.el4_8.4" test_ref="oval:org.mitre.oval:tst:39259"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cyrus-imapd-perl is earlier than 0:2.3.7-7.el5_4.3" test_ref="oval:org.mitre.oval:tst:39412"/>
            <criterion comment="cyrus-imapd-devel is earlier than 0:2.3.7-7.el5_4.3" test_ref="oval:org.mitre.oval:tst:39219"/>
            <criterion comment="cyrus-imapd is earlier than 0:2.3.7-7.el5_4.3" test_ref="oval:org.mitre.oval:tst:39469"/>
            <criterion comment="cyrus-imapd-utils is earlier than 0:2.3.7-7.el5_4.3" test_ref="oval:org.mitre.oval:tst:39418"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10514" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in implicit-objects.jsp in Apache Tomcat 5.0.0 through 5.0.30 and 5.5.0 through 5.5.17 allows remote attackers to inject arbitrary web script or HTML via certain header values.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-7195" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-7195"/>
        <description>Cross-site scripting (XSS) vulnerability in implicit-objects.jsp in Apache Tomcat 5.0.0 through 5.0.30 and 5.5.0 through 5.5.17 allows remote attackers to inject arbitrary web script or HTML via certain header values.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:33:04.212-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:45.204-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:01.826-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10514 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:20.124-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:20.140-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:33900"/>
          <criterion comment="tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:33729"/>
          <criterion comment="tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:34201"/>
          <criterion comment="jakarta-commons-modeler is earlier than 0:1.1-8jpp.1.0.2.el5" test_ref="oval:org.mitre.oval:tst:34103"/>
          <criterion comment="tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:34030"/>
          <criterion comment="jakarta-commons-modeler-javadoc is earlier than 0:1.1-8jpp.1.0.2.el5" test_ref="oval:org.mitre.oval:tst:33946"/>
          <criterion comment="tomcat5-webapps is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:34190"/>
          <criterion comment="tomcat5 is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:34110"/>
          <criterion comment="tomcat5-jasper is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:34093"/>
          <criterion comment="tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:33926"/>
          <criterion comment="tomcat5-server-lib is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:33402"/>
          <criterion comment="tomcat5-common-lib is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:33860"/>
          <criterion comment="tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:34091"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10513" version="5" class="vulnerability">
      <metadata>
        <title>Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the http_access configuration, which could lead to less restrictive ACLs than intended by the administrator.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1345"/>
        <description>Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the http_access configuration, which could lead to less restrictive ACLs than intended by the administrator.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:44.804-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:44.933-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:01.574-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10513 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:38.441-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:19.664-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE3-6.3E.13" test_ref="oval:org.mitre.oval:tst:31246"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE6-3.4E.9" test_ref="oval:org.mitre.oval:tst:31854"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10512" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy by causing the browser to issue an XMLHttpRequest to an attacker-controlled resource that uses a 302 redirect to a resource in a different domain, then reading content from the response, aka "response disclosure."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5506" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5506"/>
        <description>Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy by causing the browser to issue an XMLHttpRequest to an attacker-controlled resource that uses a 302 redirect to a resource in a different domain, then reading content from the response, aka "response disclosure."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:39.466-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:44.312-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:00.874-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10512 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:39.604-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:18.792-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38137"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37886"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37999"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37907"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37709"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38092"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37745"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38039"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38062"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38073"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nspr is earlier than 0:4.7.3-1.el4" test_ref="oval:org.mitre.oval:tst:37574"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:38071"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-1.el4" test_ref="oval:org.mitre.oval:tst:37857"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-18.el4" test_ref="oval:org.mitre.oval:tst:37200"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.3-1.el4" test_ref="oval:org.mitre.oval:tst:37918"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37812"/>
            <criterion comment="firefox is earlier than 0:3.0.5-1.el4" test_ref="oval:org.mitre.oval:tst:38080"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-1.el4" test_ref="oval:org.mitre.oval:tst:37139"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37869"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37789"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37395"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:38118"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:38072"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38037"/>
            <criterion comment="nspr is earlier than 0:4.7.3-2.el5" test_ref="oval:org.mitre.oval:tst:37420"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37854"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.19-1.el5_2" test_ref="oval:org.mitre.oval:tst:38053"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.3-2.el5" test_ref="oval:org.mitre.oval:tst:37419"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38083"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:37631"/>
            <criterion comment="firefox is earlier than 0:3.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38114"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37737"/>
            <criterion comment="nss-tools is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37403"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10511" version="5" class="vulnerability">
      <metadata>
        <title>The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via untrusted data to the unserialize function that may trigger "information disclosure, double-free and negative reference index array underflow" results.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1019" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1019"/>
        <description>The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via untrusted data to the unserialize function that may trigger "information disclosure, double-free and negative reference index array underflow" results.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:06.580-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:43.801-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:04:00.382-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10511 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:42.170-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:18.209-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:31183"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:31119"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:30756"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:30361"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:31078"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:31082"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-19.ent" test_ref="oval:org.mitre.oval:tst:30937"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31248"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31271"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31235"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31279"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31087"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31260"/>
            <criterion comment="php is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:30709"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31196"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:30324"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31008"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31291"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31210"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:31168"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.2" test_ref="oval:org.mitre.oval:tst:30329"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10510" version="5" class="vulnerability">
      <metadata>
        <title>The PL/Tcl implementation in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 loads Tcl code from the pltcl_modules table regardless of the table's ownership and permissions, which allows remote authenticated users, with database-creation privileges, to execute arbitrary Tcl code by creating this table and inserting a crafted Tcl script.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1170" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1170"/>
        <description>The PL/Tcl implementation in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 loads Tcl code from the pltcl_modules table regardless of the table's ownership and permissions, which allows remote authenticated users, with database-creation privileges, to execute arbitrary Tcl code by creating this table and inserting a crafted Tcl script.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:51.865-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:42.885-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:59.519-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10510 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:06.817-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:16.960-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="rh-postgresql-devel is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40180"/>
            <criterion comment="rh-postgresql-server is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40440"/>
            <criterion comment="rh-postgresql-python is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40426"/>
            <criterion comment="rh-postgresql-libs is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40220"/>
            <criterion comment="rh-postgresql-docs is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:39618"/>
            <criterion comment="rh-postgresql-test is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40140"/>
            <criterion comment="rh-postgresql-pl is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40502"/>
            <criterion comment="rh-postgresql-tcl is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:39925"/>
            <criterion comment="rh-postgresql is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40137"/>
            <criterion comment="rh-postgresql-contrib is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40551"/>
            <criterion comment="rh-postgresql-jdbc is earlier than 0:7.3.21-3" test_ref="oval:org.mitre.oval:tst:40106"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40486"/>
            <criterion comment="postgresql-docs is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40521"/>
            <criterion comment="postgresql-pl is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40292"/>
            <criterion comment="postgresql-tcl is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40516"/>
            <criterion comment="postgresql-libs is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40066"/>
            <criterion comment="postgresql-contrib is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40399"/>
            <criterion comment="postgresql-python is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40512"/>
            <criterion comment="postgresql-test is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40314"/>
            <criterion comment="postgresql-jdbc is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40428"/>
            <criterion comment="postgresql-server is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40366"/>
            <criterion comment="postgresql-devel is earlier than 0:7.4.29-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:40465"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql84-server is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40291"/>
            <criterion comment="postgresql84-plpython is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40396"/>
            <criterion comment="postgresql84-libs is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40193"/>
            <criterion comment="postgresql84-devel is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40369"/>
            <criterion comment="postgresql84-python is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40555"/>
            <criterion comment="postgresql84-plperl is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40294"/>
            <criterion comment="postgresql-server is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40509"/>
            <criterion comment="postgresql84-test is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40470"/>
            <criterion comment="postgresql-devel is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40309"/>
            <criterion comment="postgresql is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40401"/>
            <criterion comment="postgresql84-tcl is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40455"/>
            <criterion comment="postgresql-docs is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40402"/>
            <criterion comment="postgresql-pl is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40538"/>
            <criterion comment="postgresql-libs is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40515"/>
            <criterion comment="postgresql-tcl is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:39839"/>
            <criterion comment="postgresql84-pltcl is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40452"/>
            <criterion comment="postgresql-contrib is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40505"/>
            <criterion comment="postgresql-python is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40251"/>
            <criterion comment="postgresql84-contrib is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40108"/>
            <criterion comment="postgresql-test is earlier than 0:8.1.21-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40253"/>
            <criterion comment="postgresql84-docs is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40257"/>
            <criterion comment="postgresql84 is earlier than 0:8.4.4-1.el5_5.1" test_ref="oval:org.mitre.oval:tst:40379"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1051" version="1" class="vulnerability">
      <metadata>
        <title>Windows 2000 IIS Directory Traversal Command Execution (Test 2)</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0333" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0333"/>
        <description>Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and "\" characters twice.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="IIS major version equals 5" negate="false" test_ref="oval:org.mitre.oval:tst:3081"/>
        <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
        <criterion comment="File %windir%\System32\msw3prt.dll is less than 5.0.2195.3649" negate="false" test_ref="oval:org.mitre.oval:tst:1240"/>
        <criterion comment="Patch Q293826 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3020"/>
        <criterion comment="Patch Q301625 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3037"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10509" version="5" class="vulnerability">
      <metadata>
        <title>MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options, allows remote authenticated users to overwrite system table information and gain privileges via a RENAME TABLE statement that changes the symlink to point to an existing file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5969" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5969"/>
        <description>MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options, allows remote authenticated users to overwrite system table information and gain privileges via a RENAME TABLE statement that changes the symlink to point to an existing file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:18.211-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:42.551-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:59.150-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10509 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:51.633-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:16.080-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mysql is earlier than 0:4.1.20-3.RHEL4.1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35955"/>
            <criterion comment="mysql-devel is earlier than 0:4.1.20-3.RHEL4.1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35904"/>
            <criterion comment="mysql-bench is earlier than 0:4.1.20-3.RHEL4.1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35382"/>
            <criterion comment="mysql-server is earlier than 0:4.1.20-3.RHEL4.1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35917"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mysql is earlier than 0:5.0.22-2.2.el5_1.1" test_ref="oval:org.mitre.oval:tst:35902"/>
            <criterion comment="mysql-devel is earlier than 0:5.0.22-2.2.el5_1.1" test_ref="oval:org.mitre.oval:tst:35707"/>
            <criterion comment="mysql-test is earlier than 0:5.0.22-2.2.el5_1.1" test_ref="oval:org.mitre.oval:tst:35488"/>
            <criterion comment="mysql-bench is earlier than 0:5.0.22-2.2.el5_1.1" test_ref="oval:org.mitre.oval:tst:35838"/>
            <criterion comment="mysql-server is earlier than 0:5.0.22-2.2.el5_1.1" test_ref="oval:org.mitre.oval:tst:35066"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10508" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to execute arbitrary code via unknown vectors related to the crypto.generateCRMFRequest method.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1728" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1728"/>
        <description>Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to execute arbitrary code via unknown vectors related to the crypto.generateCRMFRequest method.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:16.491-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:41.986-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:58.590-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10508 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:13.977-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:15.412-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32663"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32326"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31987"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32451"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32697"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32558"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32427"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32671"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32666"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32561"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32593"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32679"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32133"/>
            <criterion comment="thunderbird is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32204"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32701"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32428"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32557"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32229"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32349"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32644"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32440"/>
            <criterion comment="firefox is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32219"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32598"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32717"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10507" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode (ICU) 3.8.1 and earlier allows context-dependent attackers to cause a denial of service (memory consumption) and possibly have unspecified other impact via a regular expression that writes a large amount of data to the backtracking stack.  NOTE: some of these details are obtained from third party information.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4771" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4771"/>
        <description>Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode (ICU) 3.8.1 and earlier allows context-dependent attackers to cause a denial of service (memory consumption) and possibly have unspecified other impact via a regular expression that writes a large amount of data to the backtracking stack.  NOTE: some of these details are obtained from third party information.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:55.542-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:41.762-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:58.348-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10507 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:51.323-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:15.013-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="libicu-doc is earlier than 0:3.6-5.11.1" test_ref="oval:org.mitre.oval:tst:35820"/>
          <criterion comment="icu is earlier than 0:3.6-5.11.1" test_ref="oval:org.mitre.oval:tst:35887"/>
          <criterion comment="libicu is earlier than 0:3.6-5.11.1" test_ref="oval:org.mitre.oval:tst:36028"/>
          <criterion comment="libicu-devel is earlier than 0:3.6-5.11.1" test_ref="oval:org.mitre.oval:tst:35153"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10506" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the ICO image decoder for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted ICO file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0788" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0788"/>
        <description>Integer overflow in the ICO image decoder for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted ICO file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:03.373-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:41.522-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:58.095-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10506 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:29.286-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:14.702-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="gdk-pixbuf-devel is earlier than 1:0.22.0-11.3.3" test_ref="oval:org.mitre.oval:tst:30887"/>
          <criterion comment="gtk2 is earlier than 0:2.2.4-8.1" test_ref="oval:org.mitre.oval:tst:30146"/>
          <criterion comment="gdk-pixbuf-gnome is earlier than 1:0.22.0-11.3.3" test_ref="oval:org.mitre.oval:tst:30822"/>
          <criterion comment="gdk-pixbuf is earlier than 1:0.22.0-11.3.3" test_ref="oval:org.mitre.oval:tst:30571"/>
          <criterion comment="gtk2-devel is earlier than 0:2.2.4-8.1" test_ref="oval:org.mitre.oval:tst:30817"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10505" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that is not properly handled by the xmlNanoFTPScanProxy function, and other overflows related to manipulation of DNS length values, including (3) xmlNanoFTPConnect, (4) xmlNanoHTTPConnectHost, and (5) xmlNanoHTTPConnectHost.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0989" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0989"/>
        <description>Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that is not properly handled by the xmlNanoFTPScanProxy function, and other overflows related to manipulation of DNS length values, including (3) xmlNanoFTPConnect, (4) xmlNanoHTTPConnectHost, and (5) xmlNanoHTTPConnectHost.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:04.674-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:41.273-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:57.796-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10505 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:51.204-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:14.394-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="libxml2-devel is earlier than 0:2.5.10-7" test_ref="oval:org.mitre.oval:tst:30847"/>
          <criterion comment="libxml2-python is earlier than 0:2.5.10-7" test_ref="oval:org.mitre.oval:tst:31007"/>
          <criterion comment="libxml-devel is earlier than 1:1.8.17-9.2" test_ref="oval:org.mitre.oval:tst:31134"/>
          <criterion comment="libxml is earlier than 1:1.8.17-9.2" test_ref="oval:org.mitre.oval:tst:30957"/>
          <criterion comment="libxml2 is earlier than 0:2.5.10-7" test_ref="oval:org.mitre.oval:tst:31026"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10504" version="5" class="vulnerability">
      <metadata>
        <title>The isakmp_info_recv function in src/racoon/isakmp_inf.c in racoon in Ipsec-tools before 0.6.7 allows remote attackers to cause a denial of service (tunnel crash) via crafted (1) DELETE (ISAKMP_NPTYPE_D) and (2) NOTIFY (ISAKMP_NPTYPE_N) messages.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1841" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1841"/>
        <description>The isakmp_info_recv function in src/racoon/isakmp_inf.c in racoon in Ipsec-tools before 0.6.7 allows remote attackers to cause a denial of service (tunnel crash) via crafted (1) DELETE (ISAKMP_NPTYPE_D) and (2) NOTIFY (ISAKMP_NPTYPE_N) messages.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:35.637-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:41.068-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:57.591-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10504 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:33.080-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:14.106-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="ipsec-tools is earlier than 0:0.6.5-8.el5" test_ref="oval:org.mitre.oval:tst:34135"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10503" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the bufprint function in capiutil.c in libcapi, as used in Linux kernel 2.6.9 to 2.6.20 and isdn4k-utils, allows local users to cause a denial of service (crash) and possibly gain privileges via a crafted CAPI packet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1217" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1217"/>
        <description>Buffer overflow in the bufprint function in capiutil.c in libcapi, as used in Linux kernel 2.6.9 to 2.6.20 and isdn4k-utils, allows local users to cause a denial of service (crash) and possibly gain privileges via a crafted CAPI packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:08.293-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:40.427-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:56.904-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10503 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:22.204-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:13.299-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-51.EL" test_ref="oval:org.mitre.oval:tst:34725"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-51.EL" test_ref="oval:org.mitre.oval:tst:34431"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-51.EL" test_ref="oval:org.mitre.oval:tst:34865"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-51.EL" test_ref="oval:org.mitre.oval:tst:34807"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-51.EL" test_ref="oval:org.mitre.oval:tst:34508"/>
            <criterion comment="kernel is earlier than 0:2.4.21-51.EL" test_ref="oval:org.mitre.oval:tst:33889"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-51.EL" test_ref="oval:org.mitre.oval:tst:34880"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-51.EL" test_ref="oval:org.mitre.oval:tst:34813"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-51.EL" test_ref="oval:org.mitre.oval:tst:34872"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-55.0.6.EL" test_ref="oval:org.mitre.oval:tst:35083"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-55.0.6.EL" test_ref="oval:org.mitre.oval:tst:34524"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.0.6.EL" test_ref="oval:org.mitre.oval:tst:34373"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-55.0.6.EL" test_ref="oval:org.mitre.oval:tst:34855"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-55.0.6.EL" test_ref="oval:org.mitre.oval:tst:34123"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.0.6.EL" test_ref="oval:org.mitre.oval:tst:35059"/>
            <criterion comment="kernel is earlier than 0:2.6.9-55.0.6.EL" test_ref="oval:org.mitre.oval:tst:34080"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-55.0.6.EL" test_ref="oval:org.mitre.oval:tst:34543"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-55.0.6.EL" test_ref="oval:org.mitre.oval:tst:34846"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-55.0.6.EL" test_ref="oval:org.mitre.oval:tst:34889"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-55.0.6.EL" test_ref="oval:org.mitre.oval:tst:34937"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34804"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34557"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34837"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34795"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34562"/>
            <criterion comment="kernel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34357"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34379"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34873"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34870"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34374"/>
            <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34337"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10502" version="5" class="vulnerability">
      <metadata>
        <title>Integer underflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, SeaMonkey before 1.0.8, Thunderbird before 1.5.0.10, and certain Sun Java System server products before 20070611, allows remote attackers to execute arbitrary code via a crafted SSLv2 server message containing a public key that is too short to encrypt the "Master Secret", which results in a heap-based overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0008" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0008"/>
        <description>Integer underflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, SeaMonkey before 1.0.8, Thunderbird before 1.5.0.10, and certain Sun Java System server products before 20070611, allows remote attackers to execute arbitrary code via a crafted SSLv2 server message containing a public key that is too short to encrypt the "Master Secret", which results in a heap-based overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:47.984-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:39.758-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:56.286-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10502 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:52.300-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:12.447-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33391"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33688"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33675"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33724"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33510"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33409"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33467"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33658"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33649"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33381"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:32760"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33554"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33648"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.10-0.1.el4" test_ref="oval:org.mitre.oval:tst:32765"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33712"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33705"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33379"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:33400"/>
            <criterion comment="firefox is earlier than 0:1.5.0.10-0.1.el4" test_ref="oval:org.mitre.oval:tst:33759"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33678"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33695"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33697"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33244"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33645"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.10-2.el5" test_ref="oval:org.mitre.oval:tst:33461"/>
            <criterion comment="yelp is earlier than 0:2.16.0-14.0.1.el5" test_ref="oval:org.mitre.oval:tst:33761"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-10.0.1.el5" test_ref="oval:org.mitre.oval:tst:33744"/>
            <criterion comment="devhelp is earlier than 0:0.12-10.0.1.el5" test_ref="oval:org.mitre.oval:tst:33415"/>
            <criterion comment="firefox is earlier than 0:1.5.0.10-2.el5" test_ref="oval:org.mitre.oval:tst:33616"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.10-1.el5" test_ref="oval:org.mitre.oval:tst:33493"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10501" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: because of the lack of details, it is unclear whether this is related to CVE-2006-0208.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814"/>
        <description>Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: because of the lack of details, it is unclear whether this is related to CVE-2006-0208.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:17.132-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:39.331-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:55.664-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10501 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:56.141-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:11.849-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="php-bcmath is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38147"/>
          <criterion comment="php-soap is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38305"/>
          <criterion comment="php-common is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38268"/>
          <criterion comment="php-mysql is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38298"/>
          <criterion comment="php-imap is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:37882"/>
          <criterion comment="php-gd is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:37952"/>
          <criterion comment="php is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38099"/>
          <criterion comment="php-mbstring is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38415"/>
          <criterion comment="php-pgsql is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38511"/>
          <criterion comment="php-xml is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38115"/>
          <criterion comment="php-ldap is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38367"/>
          <criterion comment="php-odbc is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38569"/>
          <criterion comment="php-ncurses is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38440"/>
          <criterion comment="php-devel is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38536"/>
          <criterion comment="php-xmlrpc is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38507"/>
          <criterion comment="php-snmp is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38316"/>
          <criterion comment="php-pdo is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38493"/>
          <criterion comment="php-dba is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:37667"/>
          <criterion comment="php-cli is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38421"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10500" version="5" class="vulnerability">
      <metadata>
        <title>options_identities.php in SquirrelMail 1.4.4 and earlier uses the extract function to process the $_POST variable, which allows remote attackers to modify or read the preferences of other users, conduct cross-site scripting XSS) attacks, and write arbitrary files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2095" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2095"/>
        <description>options_identities.php in SquirrelMail 1.4.4 and earlier uses the extract function to process the $_POST variable, which allows remote attackers to modify or read the preferences of other users, conduct cross-site scripting XSS) attacks, and write arbitrary files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:21.863-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:38.985-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:55.421-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10500 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:41.185-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:11.499-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.3a-11.EL3" test_ref="oval:org.mitre.oval:tst:31585"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.3a-12.EL4" test_ref="oval:org.mitre.oval:tst:31556"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10499" version="5" class="vulnerability">
      <metadata>
        <title>Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2090" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2090"/>
        <description>Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:09.047-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:38.638-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:55.009-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10499 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:23.437-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:11.064-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:33900"/>
          <criterion comment="tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:33729"/>
          <criterion comment="tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:34201"/>
          <criterion comment="jakarta-commons-modeler is earlier than 0:1.1-8jpp.1.0.2.el5" test_ref="oval:org.mitre.oval:tst:34103"/>
          <criterion comment="tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:34030"/>
          <criterion comment="jakarta-commons-modeler-javadoc is earlier than 0:1.1-8jpp.1.0.2.el5" test_ref="oval:org.mitre.oval:tst:33946"/>
          <criterion comment="tomcat5-webapps is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:34190"/>
          <criterion comment="tomcat5 is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:34110"/>
          <criterion comment="tomcat5-jasper is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:34093"/>
          <criterion comment="tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:33926"/>
          <criterion comment="tomcat5-server-lib is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:33402"/>
          <criterion comment="tomcat5-common-lib is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:33860"/>
          <criterion comment="tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.1.0.3.el5" test_ref="oval:org.mitre.oval:tst:34091"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10498" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the VCF file information reader for KDE Personal Information Management (kdepim) suite in KDE 3.1.0 through 3.1.4 allows attackers to execute arbitrary code via a VCF file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0988"/>
        <description>Buffer overflow in the VCF file information reader for KDE Personal Information Management (kdepim) suite in KDE 3.1.0 through 3.1.4 allows attackers to execute arbitrary code via a VCF file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:45.788-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:38.437-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:54.785-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10498 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:53.984-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:10.736-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kdepim is earlier than 6:3.1.3-3.3" test_ref="oval:org.mitre.oval:tst:30523"/>
          <criterion comment="kdepim-devel is earlier than 6:3.1.3-3.3" test_ref="oval:org.mitre.oval:tst:30195"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10497" version="5" class="vulnerability">
      <metadata>
        <title>The krb5-send-pr script in the kerberos5 (krb5) package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0971" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0971"/>
        <description>The krb5-send-pr script in the kerberos5 (krb5) package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:18.440-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:38.205-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:54.524-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10497 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:18.945-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:10.422-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="krb5-workstation is earlier than 0:1.2.7-38" test_ref="oval:org.mitre.oval:tst:31249"/>
          <criterion comment="krb5 is earlier than 0:1.2.7-38" test_ref="oval:org.mitre.oval:tst:31238"/>
          <criterion comment="krb5-libs is earlier than 0:1.2.7-38" test_ref="oval:org.mitre.oval:tst:30907"/>
          <criterion comment="krb5-server is earlier than 0:1.2.7-38" test_ref="oval:org.mitre.oval:tst:30640"/>
          <criterion comment="krb5-devel is earlier than 0:1.2.7-38" test_ref="oval:org.mitre.oval:tst:30935"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10496" version="5" class="vulnerability">
      <metadata>
        <title>GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually distinguish signed and unsigned portions of OpenPGP messages with multiple components, which might allow remote attackers to forge the contents of a message without detection.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1263" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1263"/>
        <description>GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually distinguish signed and unsigned portions of OpenPGP messages with multiple components, which might allow remote attackers to forge the contents of a message without detection.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:04.541-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:37.910-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:54.239-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10496 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:57:31.484-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:09.942-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gnupg is earlier than 0:1.2.1-20" test_ref="oval:org.mitre.oval:tst:33904"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gnupg is earlier than 0:1.2.6-9" test_ref="oval:org.mitre.oval:tst:33746"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="gnupg is earlier than 0:1.4.5-13" test_ref="oval:org.mitre.oval:tst:33465"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10495" version="5" class="vulnerability">
      <metadata>
        <title>xattr.c in the ext2 and ext3 file system code for Linux kernel 2.6 does not properly compare the name_index fields when sharing xattr blocks, which could prevent default ACLs from being applied.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2801" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2801"/>
        <description>xattr.c in the ext2 and ext3 file system code for Linux kernel 2.6 does not properly compare the name_index fields when sharing xattr blocks, which could prevent default ACLs from being applied.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:10.133-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:37.512-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:53.787-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10495 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:36.576-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:09.401-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:32345"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:32444"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:32109"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:32476"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:32343"/>
            <criterion comment="kernel is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:31877"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:32362"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:32190"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-40.EL" test_ref="oval:org.mitre.oval:tst:31899"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31896"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31885"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31861"/>
            <criterion comment="kernel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31550"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31914"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31924"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:32023"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10494" version="5" class="vulnerability">
      <metadata>
        <title>The disconnect method in the Philips USB Webcam (pwc) driver in Linux kernel 2.6.x before 2.6.22.6 "relies on user space to close the device," which allows user-assisted local attackers to cause a denial of service (USB subsystem hang and CPU consumption in khubd) by not closing the device after the disconnect is invoked.  NOTE: this rarely crosses privilege boundaries, unless the attacker can convince the victim to unplug the affected device.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5093" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5093"/>
        <description>The disconnect method in the Philips USB Webcam (pwc) driver in Linux kernel 2.6.x before 2.6.22.6 "relies on user space to close the device," which allows user-assisted local attackers to cause a denial of service (USB subsystem hang and CPU consumption in khubd) by not closing the device after the disconnect is invoked.  NOTE: this rarely crosses privilege boundaries, unless the attacker can convince the victim to unplug the affected device.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:31.158-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:36.985-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:53.254-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10494 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:54.907-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:08.734-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37470"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37734"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37826"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37656"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37782"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37432"/>
            <criterion comment="kernel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37747"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37811"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37951"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37485"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37662"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36697"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36610"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36727"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:35799"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:35977"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36772"/>
            <criterion comment="kernel is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36502"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36670"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36665"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:35765"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36539"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-53.1.21.el5" test_ref="oval:org.mitre.oval:tst:36637"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10493" version="5" class="vulnerability">
      <metadata>
        <title>PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 uses superuser privileges instead of table owner privileges for (1) VACUUM and (2) ANALYZE operations within index functions, and supports (3) SET ROLE and (4) SET SESSION AUTHORIZATION within index functions, which allows remote authenticated users to gain privileges.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6600" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6600"/>
        <description>PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 uses superuser privileges instead of table owner privileges for (1) VACUUM and (2) ANALYZE operations within index functions, and supports (3) SET ROLE and (4) SET SESSION AUTHORIZATION within index functions, which allows remote authenticated users to gain privileges.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:36.093-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:36.288-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:52.540-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10493 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:57:45.468-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:07.881-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="rh-postgresql-devel is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:36102"/>
            <criterion comment="rh-postgresql-server is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35807"/>
            <criterion comment="rh-postgresql-python is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35304"/>
            <criterion comment="rh-postgresql-libs is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35743"/>
            <criterion comment="rh-postgresql-docs is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35830"/>
            <criterion comment="rh-postgresql-test is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35938"/>
            <criterion comment="rh-postgresql-pl is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35951"/>
            <criterion comment="rh-postgresql-tcl is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35406"/>
            <criterion comment="rh-postgresql is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35943"/>
            <criterion comment="rh-postgresql-contrib is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35867"/>
            <criterion comment="rh-postgresql-jdbc is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35930"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35948"/>
            <criterion comment="postgresql-docs is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35993"/>
            <criterion comment="postgresql-pl is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36045"/>
            <criterion comment="postgresql-tcl is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35949"/>
            <criterion comment="postgresql-libs is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36098"/>
            <criterion comment="postgresql-contrib is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36066"/>
            <criterion comment="postgresql-python is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35942"/>
            <criterion comment="postgresql-test is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36105"/>
            <criterion comment="postgresql-jdbc is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35835"/>
            <criterion comment="postgresql-server is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35597"/>
            <criterion comment="postgresql-devel is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36094"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35261"/>
            <criterion comment="postgresql-docs is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35907"/>
            <criterion comment="postgresql-pl is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35319"/>
            <criterion comment="postgresql-tcl is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35123"/>
            <criterion comment="postgresql-libs is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35894"/>
            <criterion comment="postgresql-contrib is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35781"/>
            <criterion comment="postgresql-python is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:36109"/>
            <criterion comment="postgresql-test is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35308"/>
            <criterion comment="postgresql-server is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35856"/>
            <criterion comment="postgresql-devel is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:36044"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10492" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the MOUNT dissector in Wireshark (aka Ethereal) 0.9.4 to 0.99.0 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3629" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3629"/>
        <description>Unspecified vulnerability in the MOUNT dissector in Wireshark (aka Ethereal) 0.9.4 to 0.99.0 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:16.301-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:35.928-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:52.239-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10492 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:57:30.732-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:07.342-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.2-EL3.1" test_ref="oval:org.mitre.oval:tst:32882"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.2-EL3.1" test_ref="oval:org.mitre.oval:tst:32738"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.2-EL4.1" test_ref="oval:org.mitre.oval:tst:32917"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.2-EL4.1" test_ref="oval:org.mitre.oval:tst:32447"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10491" version="5" class="vulnerability">
      <metadata>
        <title>The JavaScript engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a splice of an array that contains "some non-set elements," which causes jsarray.cpp to pass an incorrect argument to the ResizeSlots function, which triggers memory corruption; (2) vectors related to js_DecompileValueGenerator, jsopcode.cpp, __defineSetter__, and watch, which triggers an assertion failure or a segmentation fault; and (3) vectors related to gczeal, __defineSetter__, and watch, which triggers a hang.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0773" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0773"/>
        <description>The JavaScript engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a splice of an array that contains "some non-set elements," which causes jsarray.cpp to pass an incorrect argument to the ResizeSlots function, which triggers memory corruption; (2) vectors related to js_DecompileValueGenerator, jsopcode.cpp, __defineSetter__, and watch, which triggers an assertion failure or a segmentation fault; and (3) vectors related to gczeal, __defineSetter__, and watch, which triggers a hang.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:27.450-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:35.672-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:51.923-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10491 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:48.426-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:06.889-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.7-1.el4" test_ref="oval:org.mitre.oval:tst:38405"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:38168"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:37685"/>
            <criterion comment="firefox is earlier than 0:3.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:38372"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:38365"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10490" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the ProcRenderAddGlyphs function in the Render extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of glyph management data structures.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6101" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6101"/>
        <description>Integer overflow in the ProcRenderAddGlyphs function in the Render extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of glyph management data structures.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:16.817-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:34.814-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:51.014-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10490 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:22.322-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:05.922-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33279"/>
            <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33033"/>
            <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33135"/>
            <criterion comment="XFree86-libs is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:32975"/>
            <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33134"/>
            <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:32756"/>
            <criterion comment="XFree86-twm is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33026"/>
            <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33238"/>
            <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33343"/>
            <criterion comment="XFree86-doc is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:32868"/>
            <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:32574"/>
            <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33217"/>
            <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33260"/>
            <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33106"/>
            <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33262"/>
            <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33329"/>
            <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:32993"/>
            <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33159"/>
            <criterion comment="XFree86-xdm is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33053"/>
            <criterion comment="XFree86-sdk is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33163"/>
            <criterion comment="XFree86 is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33308"/>
            <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:32484"/>
            <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33294"/>
            <criterion comment="XFree86-xfs is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33176"/>
            <criterion comment="XFree86-tools is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:32802"/>
            <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:32909"/>
            <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33270"/>
            <criterion comment="XFree86-xauth is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33234"/>
            <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:33180"/>
            <criterion comment="XFree86-devel is earlier than 0:4.3.0-115.EL" test_ref="oval:org.mitre.oval:tst:32796"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33158"/>
            <criterion comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33322"/>
            <criterion comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33297"/>
            <criterion comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33211"/>
            <criterion comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33206"/>
            <criterion comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33346"/>
            <criterion comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33222"/>
            <criterion comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33340"/>
            <criterion comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33228"/>
            <criterion comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33187"/>
            <criterion comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33289"/>
            <criterion comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33242"/>
            <criterion comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33068"/>
            <criterion comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33283"/>
            <criterion comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33337"/>
            <criterion comment="xorg-x11 is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:32984"/>
            <criterion comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33352"/>
            <criterion comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.13.37.5" test_ref="oval:org.mitre.oval:tst:33122"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1049" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat OpenSSL Kerberos Handshake Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>OpenSSL</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0112"/>
        <description>The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-03-20T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </submitted>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="The MITRE Corporation">Matt Busby</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:58.457-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:12.895-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="openssl version is less than 0.9.7a-20" negate="false" test_ref="oval:org.mitre.oval:tst:1484"/>
        <criterion comment="openssl-devel version is less than 0.9.7a-20" negate="false" test_ref="oval:org.mitre.oval:tst:1483"/>
        <criterion comment="openssl-perl version is less than 0.9.7a-20" negate="false" test_ref="oval:org.mitre.oval:tst:1482"/>
        <criterion comment="openssl096 version is less than 0.9.6-25.9" negate="false" test_ref="oval:org.mitre.oval:tst:1481"/>
        <criterion comment="openssl096b version is less than 0.9.6b-15" negate="false" test_ref="oval:org.mitre.oval:tst:1480"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10489" version="5" class="vulnerability">
      <metadata>
        <title>The (1) ntlm_fetch_string and (2) ntlm_get_string functions in Squid 2.5.6 and earlier, with NTLM authentication enabled, allow remote attackers to cause a denial of service (application crash) via an NTLMSSP packet that causes a negative value to be passed to memcpy.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0832" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0832"/>
        <description>The (1) ntlm_fetch_string and (2) ntlm_get_string functions in Squid 2.5.6 and earlier, with NTLM authentication enabled, allow remote attackers to cause a denial of service (application crash) via an NTLMSSP packet that causes a negative value to be passed to memcpy.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:43.039-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:34.611-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:50.787-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10489 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:59:12.808-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:05.636-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="squid is earlier than 7:2.5.STABLE3-6.3E.1" test_ref="oval:org.mitre.oval:tst:30864"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10488" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 1.5.0.7 and Thunderbird before 1.5.0.7 makes it easy for users to accept self-signed certificates for the auto-update mechanism, which might allow remote user-assisted attackers to use DNS spoofing to trick users into visiting a malicious site and accepting a malicious certificate for the Mozilla update site, which can then be used to install arbitrary code on the next update.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4567" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4567"/>
        <description>Mozilla Firefox before 1.5.0.7 and Thunderbird before 1.5.0.7 makes it easy for users to accept self-signed certificates for the auto-update mechanism, which might allow remote user-assisted attackers to use DNS spoofing to trick users into visiting a malicious site and accepting a malicious certificate for the Mozilla update site, which can then be used to install arbitrary code on the next update.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:33.488-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:34.414-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:50.547-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10488 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:30:36.403-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:05.331-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="firefox is earlier than 0:1.5.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:32951"/>
          <criterion comment="thunderbird is earlier than 0:1.5.0.7-0.1.el4" test_ref="oval:org.mitre.oval:tst:32910"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10487" version="5" class="vulnerability">
      <metadata>
        <title>Linux kernel 2.6 and 2.4 on the IA64 architecture allows local users to cause a denial of service (kernel crash) via ptrace and the restore_sigcontext function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1761" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1761"/>
        <description>Linux kernel 2.6 and 2.4 on the IA64 architecture allows local users to cause a denial of service (kernel crash) via ptrace and the restore_sigcontext function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:07.241-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:33.940-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:50.123-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10487 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:57:52.117-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:04.730-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31411"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31953"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31879"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31990"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31485"/>
            <criterion comment="kernel is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32093"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31968"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32148"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31741"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31896"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31885"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31861"/>
            <criterion comment="kernel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31550"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31914"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31924"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:32023"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10486" version="5" class="vulnerability">
      <metadata>
        <title>The VNC server implementation in QEMU, as used by Xen and possibly other environments, allows local users of a guest operating system to read arbitrary files on the host operating system via unspecified vectors related to QEMU monitor mode, as demonstrated by mapping files to a CDROM device.  NOTE: some of these details are obtained from third party information.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0998" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0998"/>
        <description>The VNC server implementation in QEMU, as used by Xen and possibly other environments, allows local users of a guest operating system to read arbitrary files on the host operating system via unspecified vectors related to QEMU monitor mode, as demonstrated by mapping files to a CDROM device.  NOTE: some of these details are obtained from third party information.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:44.457-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:33.727-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:49.847-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10486 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:31.307-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:04.416-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="xen-libs is earlier than 0:3.0.3-25.0.3.el5" test_ref="oval:org.mitre.oval:tst:33680"/>
          <criterion comment="xen is earlier than 0:3.0.3-25.0.3.el5" test_ref="oval:org.mitre.oval:tst:33632"/>
          <criterion comment="xen-devel is earlier than 0:3.0.3-25.0.3.el5" test_ref="oval:org.mitre.oval:tst:33978"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10485" version="5" class="vulnerability">
      <metadata>
        <title>Multiple stack-based buffer overflows in (1) University of Washington IMAP Toolkit 2002 through 2007c, (2) University of Washington Alpine 2.00 and earlier, and (3) Panda IMAP allow (a) local users to gain privileges by specifying a long folder extension argument on the command line to the tmail or dmail program; and (b) remote attackers to execute arbitrary code by sending e-mail to a destination mailbox name composed of a username and '+' character followed by a long string, processed by the tmail or possibly dmail program.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5005" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5005"/>
        <description>Multiple stack-based buffer overflows in (1) University of Washington IMAP Toolkit 2002 through 2007c, (2) University of Washington Alpine 2.00 and earlier, and (3) Panda IMAP allow (a) local users to gain privileges by specifying a long folder extension argument on the command line to the tmail or dmail program; and (b) remote attackers to execute arbitrary code by sending e-mail to a destination mailbox name composed of a username and '+' character followed by a long string, processed by the tmail or possibly dmail program.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:41.200-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:33.512-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:49.568-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10485 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:59:16.169-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:04.129-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="imap-utils is earlier than 1:2002d-15" test_ref="oval:org.mitre.oval:tst:38130"/>
          <criterion comment="imap is earlier than 1:2002d-15" test_ref="oval:org.mitre.oval:tst:38247"/>
          <criterion comment="imap-devel is earlier than 1:2002d-15" test_ref="oval:org.mitre.oval:tst:38373"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10484" version="5" class="vulnerability">
      <metadata>
        <title>Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (application hang) and possibly fill available disk space via an invalid RTP timestamp.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1140" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1140"/>
        <description>Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (application hang) and possibly fill available disk space via an invalid RTP timestamp.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:38.999-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:33.264-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:49.284-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10484 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:57:28.980-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:03.712-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.9-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31265"/>
            <criterion comment="ethereal is earlier than 0:0.10.9-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31218"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.9-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31097"/>
            <criterion comment="ethereal is earlier than 0:0.10.9-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31103"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10483" version="5" class="vulnerability">
      <metadata>
        <title>PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4017"/>
        <description>PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:00.945-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:32.367-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:48.462-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10483 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:02.934-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:02.748-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39717"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39629"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39915"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39741"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:40003"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39901"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39326"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39580"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:40010"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39927"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39619"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39111"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39417"/>
            <criterion comment="php is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39899"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39642"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39821"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39461"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39627"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39886"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39848"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39908"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39883"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39544"/>
            <criterion comment="php-common is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39804"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39875"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39748"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39802"/>
            <criterion comment="php is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39053"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39854"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39980"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39581"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39954"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39018"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39463"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39634"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39436"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39969"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39664"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39913"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39765"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10482" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the March 2010 CPU.  Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow using an untrusted size value in the readMabCurveData function in the CMM module in the JVM.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0838" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0838"/>
        <description>Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the March 2010 CPU.  Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow using an untrusted size value in the readMabCurveData function in the CMM module in the JVM.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:17.566-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:32.122-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:48.213-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10482 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:10.439-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:02.382-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39831"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39445"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40225"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40023"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40307"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10481" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the sendmsg function call in the Linux kernel 2.6 before 2.6.13.1 allows local users execute arbitrary code by calling sendmsg and modifying the message contents in another thread.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2490" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2490"/>
        <description>Stack-based buffer overflow in the sendmsg function call in the Linux kernel 2.6 before 2.6.13.1 allows local users execute arbitrary code by calling sendmsg and modifying the message contents in another thread.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:35.352-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:31.666-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:47.763-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10481 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:57:29.863-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:01.812-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31411"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31953"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31879"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31990"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31485"/>
            <criterion comment="kernel is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32093"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31968"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32148"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31741"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31896"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31885"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31861"/>
            <criterion comment="kernel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31550"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31914"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31924"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:32023"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10480" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3352" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3352"/>
        <description>Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:41.750-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:31.371-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:47.449-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10480 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:13.714-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:01.384-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-devel is earlier than 0:2.0.46-56.ent" test_ref="oval:org.mitre.oval:tst:32315"/>
            <criterion comment="mod_ssl is earlier than 1:2.0.46-56.ent" test_ref="oval:org.mitre.oval:tst:32356"/>
            <criterion comment="httpd is earlier than 0:2.0.46-56.ent" test_ref="oval:org.mitre.oval:tst:32098"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-suexec is earlier than 0:2.0.52-22.ent" test_ref="oval:org.mitre.oval:tst:32426"/>
            <criterion comment="httpd-manual is earlier than 0:2.0.52-22.ent" test_ref="oval:org.mitre.oval:tst:31907"/>
            <criterion comment="httpd-devel is earlier than 0:2.0.52-22.ent" test_ref="oval:org.mitre.oval:tst:31584"/>
            <criterion comment="mod_ssl is earlier than 1:2.0.52-22.ent" test_ref="oval:org.mitre.oval:tst:32282"/>
            <criterion comment="httpd is earlier than 0:2.0.52-22.ent" test_ref="oval:org.mitre.oval:tst:32132"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1048" version="1" class="vulnerability">
      <metadata>
        <title>SNMP Trap Handling Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 8</platform>
          <product>snmpdx</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0012" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0012"/>
        <description>Vulnerabilities in a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via SNMPv1 trap handling, as demonstrated by the PROTOS c06-SNMPv1 test suite.  NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one or more for each vendor.  This and other SNMP-related candidates will be updated when more accurate information is available.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-02-01T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Brian Soby</contributor>
            </submitted>
            <status_change date="2005-02-01T08:41:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-03-09T07:56:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="OR" comment="Solaris 7 or 8 installed">
            <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          </criteria>
          <criterion comment="Solstice Enterprise Agents SNMP (SUNWsasnm) installed" negate="false" test_ref="oval:org.mitre.oval:tst:1243"/>
          <criterion comment="Patch 107709-18 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1242"/>
          <criterion comment="Patch 108869-15 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1241"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="snmpdx running" negate="false" test_ref="oval:org.mitre.oval:tst:3124"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10479" version="5" class="vulnerability">
      <metadata>
        <title>MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0709" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0709"/>
        <description>MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:24.550-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:31.071-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:47.154-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10479 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:29.119-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:00.918-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mysql is earlier than 0:3.23.58-15.RHEL3.1" test_ref="oval:org.mitre.oval:tst:31367"/>
            <criterion comment="mysql-devel is earlier than 0:3.23.58-15.RHEL3.1" test_ref="oval:org.mitre.oval:tst:31299"/>
            <criterion comment="mysql-bench is earlier than 0:3.23.58-15.RHEL3.1" test_ref="oval:org.mitre.oval:tst:31391"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mysql is earlier than 0:4.1.10a-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:30977"/>
            <criterion comment="mysql-devel is earlier than 0:4.1.10a-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31612"/>
            <criterion comment="mysql-bench is earlier than 0:4.1.10a-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31452"/>
            <criterion comment="mysql-server is earlier than 0:4.1.10a-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31294"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10478" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6, when using an RSA key with exponent 3, does not properly handle extra data in a signature, which allows remote attackers to forge signatures for SSL/TLS and email certificates. NOTE: this identifier is for unpatched product versions that were originally intended to be addressed by CVE-2006-4340.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5462" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5462"/>
        <description>Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6, when using an RSA key with exponent 3, does not properly handle extra data in a signature, which allows remote attackers to forge signatures for SSL/TLS and email certificates. NOTE: this identifier is for unpatched product versions that were originally intended to be addressed by CVE-2006-4340.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:36.228-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:30.531-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:46.597-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10478 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:29.199-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:06:00.283-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:32940"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:33113"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:32275"/>
            <criterion comment="seamonkey is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:33128"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:32259"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:32596"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:33188"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:32780"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:33131"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:33022"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.5.el4" test_ref="oval:org.mitre.oval:tst:33198"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33241"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33268"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.8-0.1.el4" test_ref="oval:org.mitre.oval:tst:33216"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:32752"/>
            <criterion comment="seamonkey is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:32536"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:32857"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.5.el4" test_ref="oval:org.mitre.oval:tst:33185"/>
            <criterion comment="firefox is earlier than 0:1.5.0.8-0.1.el4" test_ref="oval:org.mitre.oval:tst:33140"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33088"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33118"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33171"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:32856"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33214"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10477" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in parse_comment in GnuPG (gpg) 1.4.4 allows remote attackers to cause a denial of service (segmentation fault) via a crafted message.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0208" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0208"/>
        <description>The HTML parsing functions in Gaim before 1.1.4 allow remote attackers to cause a denial of service (application crash) via malformed HTML that causes "an invalid memory access," a different vulnerability than CVE-2005-0473.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:08.314-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:30.301-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:46.361-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10477 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:26.379-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:59.869-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gaim is earlier than 1:1.1.4-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31086"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gaim is earlier than 1:1.1.4-1.EL4" test_ref="oval:org.mitre.oval:tst:31601"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10476" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin (formerly Gaim) before 2.5.6 on 32-bit platforms allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, leading to buffer overflows.  NOTE: this issue exists because of an incomplete fix for CVE-2008-2927.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1376" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1376"/>
        <description>Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin (formerly Gaim) before 2.5.6 on 32-bit platforms allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, leading to buffer overflows.  NOTE: this issue exists because of an incomplete fix for CVE-2008-2927.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:05.470-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:29.794-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:45.840-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10476 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:35.215-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:59.233-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="pidgin is earlier than 0:1.5.1-3.el3" test_ref="oval:org.mitre.oval:tst:38766"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38580"/>
            <criterion comment="libpurple is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38729"/>
            <criterion comment="libpurple-perl is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38659"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38675"/>
            <criterion comment="pidgin-devel is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38361"/>
            <criterion comment="libpurple-devel is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38431"/>
            <criterion comment="finch is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38593"/>
            <criterion comment="pidgin-perl is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38640"/>
            <criterion comment="pidgin is earlier than 0:2.5.5-2.el4" test_ref="oval:org.mitre.oval:tst:38775"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38564"/>
            <criterion comment="libpurple is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38579"/>
            <criterion comment="libpurple-perl is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38686"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38687"/>
            <criterion comment="pidgin-devel is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38223"/>
            <criterion comment="libpurple-devel is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38606"/>
            <criterion comment="finch is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38749"/>
            <criterion comment="pidgin-perl is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38576"/>
            <criterion comment="pidgin is earlier than 0:2.5.5-3.el5" test_ref="oval:org.mitre.oval:tst:38730"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10475" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0448" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0448"/>
        <description>Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:28.507-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:29.515-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:45.347-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10475 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:41.538-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:58.777-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="perl-suidperl is earlier than 2:5.8.0-90.4" test_ref="oval:org.mitre.oval:tst:32422"/>
            <criterion comment="perl is earlier than 2:5.8.0-90.4" test_ref="oval:org.mitre.oval:tst:32487"/>
            <criterion comment="perl-CPAN is earlier than 2:1.61-90.4" test_ref="oval:org.mitre.oval:tst:32255"/>
            <criterion comment="perl-CGI is earlier than 2:2.89-90.4" test_ref="oval:org.mitre.oval:tst:32543"/>
            <criterion comment="perl-DB_File is earlier than 2:1.806-90.4" test_ref="oval:org.mitre.oval:tst:32488"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="perl-suidperl is earlier than 3:5.8.5-16.RHEL4" test_ref="oval:org.mitre.oval:tst:32092"/>
            <criterion comment="perl is earlier than 3:5.8.5-16.RHEL4" test_ref="oval:org.mitre.oval:tst:31700"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10474" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0085" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0085"/>
        <description>Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:28.868-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:29.273-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:45.090-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10474 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:56.441-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:58.433-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39831"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39445"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40225"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40023"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40307"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10473" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 3.0.12 and 3.5 before 3.5.1 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving a Flash object, a slow script dialog, and the unloading of the Flash plugin, which triggers attempted use of a deleted object.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2467" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2467"/>
        <description>Mozilla Firefox before 3.0.12 and 3.5 before 3.5.1 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving a Flash object, a slow script dialog, and the unloading of the Flash plugin, which triggers attempted use of a deleted object.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:31:23.434-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:28.943-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:44.777-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10473 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:49.565-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:57.942-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.12-1.el4" test_ref="oval:org.mitre.oval:tst:38809"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38249"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38575"/>
            <criterion comment="firefox is earlier than 0:3.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38853"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38563"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10472" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary code via a certain image file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0981" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0981"/>
        <description>Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary code via a certain image file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:53.175-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:28.715-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:44.530-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10472 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:53.473-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:57.619-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="ImageMagick-c++-devel is earlier than 0:5.5.6-7" test_ref="oval:org.mitre.oval:tst:30831"/>
          <criterion comment="ImageMagick is earlier than 0:5.5.6-7" test_ref="oval:org.mitre.oval:tst:31150"/>
          <criterion comment="ImageMagick-perl is earlier than 0:5.5.6-7" test_ref="oval:org.mitre.oval:tst:30857"/>
          <criterion comment="ImageMagick-devel is earlier than 0:5.5.6-7" test_ref="oval:org.mitre.oval:tst:31132"/>
          <criterion comment="ImageMagick-c++ is earlier than 0:5.5.6-7" test_ref="oval:org.mitre.oval:tst:30848"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10471" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote attackers to execute arbitrary code via a long timezone string in an iCalendar attachment.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1108" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1108"/>
        <description>Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote attackers to execute arbitrary code via a long timezone string in an iCalendar attachment.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:35.485-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:28.387-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:44.172-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10471 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:34.280-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:56.860-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="evolution is earlier than 0:1.4.5-22.el3" test_ref="oval:org.mitre.oval:tst:37043"/>
            <criterion comment="evolution-devel is earlier than 0:1.4.5-22.el3" test_ref="oval:org.mitre.oval:tst:37022"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="evolution is earlier than 0:2.0.2-35.0.4.el4_6.2" test_ref="oval:org.mitre.oval:tst:36690"/>
            <criterion comment="evolution28 is earlier than 0:2.8.0-53.el4_6.3" test_ref="oval:org.mitre.oval:tst:36506"/>
            <criterion comment="evolution28-devel is earlier than 0:2.8.0-53.el4_6.3" test_ref="oval:org.mitre.oval:tst:36592"/>
            <criterion comment="evolution-devel is earlier than 0:2.0.2-35.0.4.el4_6.2" test_ref="oval:org.mitre.oval:tst:36907"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="evolution-help is earlier than 0:2.12.3-8.el5_2.2" test_ref="oval:org.mitre.oval:tst:36803"/>
            <criterion comment="evolution is earlier than 0:2.12.3-8.el5_2.2" test_ref="oval:org.mitre.oval:tst:36885"/>
            <criterion comment="evolution-devel is earlier than 0:2.12.3-8.el5_2.2" test_ref="oval:org.mitre.oval:tst:37064"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10470" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service (memory corruption or system crash) via an hfs filesystem image with an invalid catalog namelength field, a related issue to CVE-2008-4933.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5025"/>
        <description>Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service (memory corruption or system crash) via an hfs filesystem image with an invalid catalog namelength field, a related issue to CVE-2008-4933.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:30.353-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:27.859-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:43.633-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10470 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:30:08.213-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:56.219-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37830"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37968"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37984"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37633"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37352"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:38043"/>
            <criterion comment="kernel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37989"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37908"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37748"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37825"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:38002"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:37732"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38060"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38354"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38313"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38198"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:37887"/>
            <criterion comment="kernel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38174"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38191"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38124"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38417"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:37779"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-128.1.1.el5" test_ref="oval:org.mitre.oval:tst:38257"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10469" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP headers, which are not properly parsed by the ASN.1 DER input stream parser, aka Bug Id 6864911.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3877" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3877"/>
        <description>Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP headers, which are not properly parsed by the ASN.1 DER input stream parser, aka Bug Id 6864911.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:58.227-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:27.620-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:43.371-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10469 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:55.798-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:55.805-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:38878"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39616"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39115"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39531"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39655"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10468" version="5" class="vulnerability">
      <metadata>
        <title>MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4031" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4031"/>
        <description>MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:58.803-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:27.316-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:43.011-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10468 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:28:36.574-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:55.346-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mysql is earlier than 0:4.1.22-2.el4" test_ref="oval:org.mitre.oval:tst:37045"/>
            <criterion comment="mysql-devel is earlier than 0:4.1.22-2.el4" test_ref="oval:org.mitre.oval:tst:37456"/>
            <criterion comment="mysql-bench is earlier than 0:4.1.22-2.el4" test_ref="oval:org.mitre.oval:tst:36967"/>
            <criterion comment="mysql-server is earlier than 0:4.1.22-2.el4" test_ref="oval:org.mitre.oval:tst:37224"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mysql is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36197"/>
            <criterion comment="mysql-devel is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36749"/>
            <criterion comment="mysql-test is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36750"/>
            <criterion comment="mysql-bench is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36831"/>
            <criterion comment="mysql-server is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36646"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10467" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in mod_python 2.7.9 allows remote attackers to cause a denial of service (httpd crash) via a certain query string, a variant of CAN-2003-0973.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0096" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0096"/>
        <description>Unknown vulnerability in mod_python 2.7.9 allows remote attackers to cause a denial of service (httpd crash) via a certain query string, a variant of CAN-2003-0973.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:19.326-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:27.127-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:42.799-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10467 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:09.539-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:55.061-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="mod_python is earlier than 0:3.0.3-3.ent" test_ref="oval:org.mitre.oval:tst:30602"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10466" version="5" class="vulnerability">
      <metadata>
        <title>The mmap function in the Linux Kernel 2.6.10 can be used to create memory maps with a start address beyond the end address, which allows local users to cause a denial of service (kernel crash).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1265"/>
        <description>The mmap function in the Linux Kernel 2.6.10 can be used to create memory maps with a start address beyond the end address, which allows local users to cause a denial of service (kernel crash).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:09.275-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:26.390-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:42.530-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10466 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:30:02.939-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:54.652-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31896"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31885"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31861"/>
          <criterion comment="kernel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31550"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31914"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31924"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:32023"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10465" version="5" class="vulnerability">
      <metadata>
        <title>packet-tcp.c in the TCP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.4 allows remote attackers to cause a denial of service (application crash or hang) via fragmented HTTP packets.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0459" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0459"/>
        <description>packet-tcp.c in the TCP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.4 allows remote attackers to cause a denial of service (application crash or hang) via fragmented HTTP packets.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:35.122-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:26.102-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:42.214-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10465 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:52.717-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:54.169-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.5-EL3.1" test_ref="oval:org.mitre.oval:tst:33506"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.5-EL3.1" test_ref="oval:org.mitre.oval:tst:33535"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.5-EL4.1" test_ref="oval:org.mitre.oval:tst:33380"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.5-EL4.1" test_ref="oval:org.mitre.oval:tst:33530"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.5-1.el5" test_ref="oval:org.mitre.oval:tst:33509"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.5-1.el5" test_ref="oval:org.mitre.oval:tst:33591"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10464" version="5" class="vulnerability">
      <metadata>
        <title>rquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and allows remote attackers to execute arbitrary code via a crafted NFS request.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0946" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0946"/>
        <description>rquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and allows remote attackers to execute arbitrary code via a crafted NFS request.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:33.367-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:25.878-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:41.971-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10464 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:59.751-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:53.822-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="nfs-utils is earlier than 0:1.0.6-33EL" test_ref="oval:org.mitre.oval:tst:31063"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10463" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the (1) DWARF (dwarfread.c) and (2) DWARF2 (dwarf2read.c) debugging code in GNU Debugger (GDB) 6.5 allows user-assisted attackers, or restricted users, to execute arbitrary code via a crafted file with a location block (DW_FORM_block) that contains a large number of operations.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4146" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4146"/>
        <description>Buffer overflow in the (1) DWARF (dwarfread.c) and (2) DWARF2 (dwarf2read.c) debugging code in GNU Debugger (GDB) 6.5 allows user-assisted attackers, or restricted users, to execute arbitrary code via a crafted file with a location block (DW_FORM_block) that contains a large number of operations.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:21.610-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:25.664-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:41.737-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10463 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:10.116-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:53.476-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gdb is earlier than 0:6.3.0.0-1.138.el3" test_ref="oval:org.mitre.oval:tst:34450"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gdb is earlier than 0:6.3.0.0-1.143.el4" test_ref="oval:org.mitre.oval:tst:33905"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10462" version="5" class="vulnerability">
      <metadata>
        <title>sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service (CPU consumption) via an SSH packet that contains duplicate blocks, which is not properly handled by the CRC compensation attack detector.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4924" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4924"/>
        <description>sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service (CPU consumption) via an SSH packet that contains duplicate blocks, which is not properly handled by the CRC compensation attack detector.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:32.787-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:25.351-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:41.403-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10462 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:36.328-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:52.949-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssh is earlier than 0:3.6.1p2-33.30.12" test_ref="oval:org.mitre.oval:tst:33091"/>
            <criterion comment="openssh-askpass is earlier than 0:3.6.1p2-33.30.12" test_ref="oval:org.mitre.oval:tst:33089"/>
            <criterion comment="openssh-server is earlier than 0:3.6.1p2-33.30.12" test_ref="oval:org.mitre.oval:tst:32651"/>
            <criterion comment="openssh-clients is earlier than 0:3.6.1p2-33.30.12" test_ref="oval:org.mitre.oval:tst:32799"/>
            <criterion comment="openssh-askpass-gnome is earlier than 0:3.6.1p2-33.30.12" test_ref="oval:org.mitre.oval:tst:32173"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssh is earlier than 0:3.9p1-8.RHEL4.17" test_ref="oval:org.mitre.oval:tst:32994"/>
            <criterion comment="openssh-askpass is earlier than 0:3.9p1-8.RHEL4.17" test_ref="oval:org.mitre.oval:tst:32813"/>
            <criterion comment="openssh-server is earlier than 0:3.9p1-8.RHEL4.17" test_ref="oval:org.mitre.oval:tst:33151"/>
            <criterion comment="openssh-clients is earlier than 0:3.9p1-8.RHEL4.17" test_ref="oval:org.mitre.oval:tst:33040"/>
            <criterion comment="openssh-askpass-gnome is earlier than 0:3.9p1-8.RHEL4.17" test_ref="oval:org.mitre.oval:tst:33167"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10461" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.conf, has unknown impact and attack vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0686" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0686"/>
        <description>Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.conf, has unknown impact and attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:33.312-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:25.134-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:41.173-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10461 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:42.211-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:52.639-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="samba-common is earlier than 0:3.0.4-6.3E" test_ref="oval:org.mitre.oval:tst:30711"/>
          <criterion comment="samba-swat is earlier than 0:3.0.4-6.3E" test_ref="oval:org.mitre.oval:tst:30328"/>
          <criterion comment="samba-client is earlier than 0:3.0.4-6.3E" test_ref="oval:org.mitre.oval:tst:30674"/>
          <criterion comment="samba is earlier than 0:3.0.4-6.3E" test_ref="oval:org.mitre.oval:tst:30601"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10460" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by loading a chrome: URL and then loading a javascript: URL.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0178"/>
        <description>Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by loading a chrome: URL and then loading a javascript: URL.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:49.596-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:24.834-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:40.849-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10460 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:58.460-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:52.216-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.19-1.el4" test_ref="oval:org.mitre.oval:tst:40284"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.19-1.el5_5" test_ref="oval:org.mitre.oval:tst:40265"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.19-1.el5_5" test_ref="oval:org.mitre.oval:tst:39621"/>
            <criterion comment="firefox is earlier than 0:3.0.19-1.el5_5" test_ref="oval:org.mitre.oval:tst:40064"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.19-1.el5_5" test_ref="oval:org.mitre.oval:tst:40164"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1046" version="1" class="vulnerability">
      <metadata>
        <title>Windows Utility Manager Shatter Message Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Utility Manager</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0908" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0908"/>
        <description>The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to execute arbitrary code via a "Shatter" style attack using a Windows message that accesses the context sensitive help button in the GUI, as demonstrated using the File Open dialog in the Help window, a different vulnerability than CVE-2004-0213.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-14T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="the version of umandlg.dll is less than 1.0.0.4" negate="false" test_ref="oval:org.mitre.oval:tst:1244"/>
        <criterion comment="the patch kb835732 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1510"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10459" version="5" class="vulnerability">
      <metadata>
        <title>Multiple vulnerabilities in Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and SeaMonkey before 1.1.5 allow remote attackers to cause a denial of service (crash) via crafted HTML that triggers memory corruption or assert errors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5339" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5339"/>
        <description>Multiple vulnerabilities in Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and SeaMonkey before 1.1.5 allow remote attackers to cause a denial of service (crash) via crafted HTML that triggers memory corruption or assert errors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:46.988-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:24.313-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:40.304-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10459 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:01.342-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:51.471-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35512"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35540"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35394"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35541"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35241"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35553"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35552"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:34924"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35155"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35441"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35489"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35324"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-0.5.el4" test_ref="oval:org.mitre.oval:tst:35240"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35182"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35311"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35454"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.7.el4" test_ref="oval:org.mitre.oval:tst:35398"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35351"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35482"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:34790"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35291"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:34577"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-6.el5" test_ref="oval:org.mitre.oval:tst:35262"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-6.el5" test_ref="oval:org.mitre.oval:tst:35202"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-5.el5" test_ref="oval:org.mitre.oval:tst:35177"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10458" version="5" class="vulnerability">
      <metadata>
        <title>Dovecot before 1.0.10, with certain configuration options including use of %variables, does not properly maintain the LDAP+auth cache, which might allow remote authenticated users to login as a different user who has the same password.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6598" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6598"/>
        <description>Dovecot before 1.0.10, with certain configuration options including use of %variables, does not properly maintain the LDAP+auth cache, which might allow remote authenticated users to login as a different user who has the same password.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:03.622-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:24.136-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:40.109-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10458 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:47.631-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:51.165-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="dovecot is earlier than 0:1.0.7-2.el5" test_ref="oval:org.mitre.oval:tst:36019"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10457" version="5" class="vulnerability">
      <metadata>
        <title>nf_conntrack in netfilter in the Linux kernel before 2.6.20.3 does not set nfctinfo during reassembly of fragmented packets, which leaves the default value as IP_CT_ESTABLISHED and might allow remote attackers to bypass certain rulesets using IPv6 fragments.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1497"/>
        <description>nf_conntrack in netfilter in the Linux kernel before 2.6.20.3 does not set nfctinfo during reassembly of fragmented packets, which leaves the default value as IP_CT_ESTABLISHED and might allow remote attackers to bypass certain rulesets using IPv6 fragments.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:48.805-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:23.806-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:39.755-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10457 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:57.230-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:50.697-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34146"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34219"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34205"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:33862"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34224"/>
          <criterion comment="kernel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:33837"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34231"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34073"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:33861"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:33594"/>
          <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34059"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10456" version="5" class="vulnerability">
      <metadata>
        <title>Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service (bus error) on certain architectures such as SPARC via an incoming message.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2370" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2370"/>
        <description>Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service (bus error) on certain architectures such as SPARC via an incoming message.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:28.860-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:23.554-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:39.485-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10456 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:53.675-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:50.299-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gaim is earlier than 1:1.3.1-0.el3.3" test_ref="oval:org.mitre.oval:tst:32063"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gaim is earlier than 1:1.3.1-0.el4.3" test_ref="oval:org.mitre.oval:tst:31738"/>
            <criterion comment="kdenetwork-nowlistening is earlier than 7:3.3.1-2.3" test_ref="oval:org.mitre.oval:tst:32125"/>
            <criterion comment="kdenetwork-devel is earlier than 7:3.3.1-2.3" test_ref="oval:org.mitre.oval:tst:32141"/>
            <criterion comment="kdenetwork is earlier than 7:3.3.1-2.3" test_ref="oval:org.mitre.oval:tst:31965"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10455" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in setroubleshoot 2.0.5 allows local users to inject arbitrary web script or HTML via a crafted (1) file or (2) process name, which triggers an Access Vector Cache (AVC) log entry in a log file used during composition of HTML documents for sealert.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5496" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5496"/>
        <description>Cross-site scripting (XSS) vulnerability in setroubleshoot 2.0.5 allows local users to inject arbitrary web script or HTML via a crafted (1) file or (2) process name, which triggers an Access Vector Cache (AVC) log entry in a log file used during composition of HTML documents for sealert.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:07.770-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:23.351-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:39.263-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10455 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:05.461-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:49.919-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="setroubleshoot-plugins is earlier than 0:2.0.4-2.el5" test_ref="oval:org.mitre.oval:tst:35813"/>
          <criterion comment="setroubleshoot-server is earlier than 0:2.0.5-3.el5" test_ref="oval:org.mitre.oval:tst:36096"/>
          <criterion comment="setroubleshoot is earlier than 0:2.0.5-3.el5" test_ref="oval:org.mitre.oval:tst:35777"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10454" version="3" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create or delete arbitrary files via an untrusted application, aka CR 6704077.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3113" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3113"/>
        <description>Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create or delete arbitrary files via an untrusted application, aka CR 6704077.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:46.209-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:22.989-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:38.470-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37481"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36778"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37475"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37445"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37487"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37483"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37181"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37426"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37315"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37359"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37368"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37461"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10453" version="5" class="vulnerability">
      <metadata>
        <title>Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools before 0.7.1 allows remote authenticated users to cause a denial of service (memory consumption) via invalid proposals.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3651" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3651"/>
        <description>Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools before 0.7.1 allows remote authenticated users to cause a denial of service (memory consumption) via invalid proposals.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:29.330-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:22.654-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:38.194-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10453 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:46.821-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:49.479-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="ipsec-tools is earlier than 0:0.2.5-0.7.rhel3.5" test_ref="oval:org.mitre.oval:tst:36720"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="ipsec-tools is earlier than 0:0.3.3-7.el4_7" test_ref="oval:org.mitre.oval:tst:37646"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="ipsec-tools is earlier than 0:0.6.5-9.el5_2.3" test_ref="oval:org.mitre.oval:tst:37619"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10452" version="5" class="vulnerability">
      <metadata>
        <title>The WiMAX dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (crash) via unknown vectors related to "unaligned access on some platforms."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6441" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6441"/>
        <description>The WiMAX dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (crash) via unknown vectors related to "unaligned access on some platforms."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:06.381-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:22.215-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:37.839-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10452 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:28:35.301-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:48.994-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:36051"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:35980"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35669"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35941"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:35709"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:36120"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35712"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35801"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10451" version="5" class="vulnerability">
      <metadata>
        <title>The (1) hugetlb_vmtruncate_list and (2) hugetlb_vmtruncate functions in fs/hugetlbfs/inode.c in the Linux kernel before 2.6.19-rc4 perform certain prio_tree calculations using HPAGE_SIZE instead of PAGE_SIZE units, which allows local users to cause a denial of service (panic) via unspecified vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4133" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4133"/>
        <description>The (1) hugetlb_vmtruncate_list and (2) hugetlb_vmtruncate functions in fs/hugetlbfs/inode.c in the Linux kernel before 2.6.19-rc4 perform certain prio_tree calculations using HPAGE_SIZE instead of PAGE_SIZE units, which allows local users to cause a denial of service (panic) via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:45.185-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:21.867-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:37.527-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10451 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:04.342-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:48.257-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35330"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35339"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35337"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35227"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35043"/>
          <criterion comment="kernel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35276"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:34448"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35366"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35208"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35326"/>
          <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35345"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10450" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a file whose size is represented by more than 8 digits.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-4268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4268"/>
        <description>Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a file whose size is represented by more than 8 digits.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:31.759-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:21.650-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:37.298-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10450 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:55.936-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:47.873-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="cpio is earlier than 0:2.5-6.RHEL3" test_ref="oval:org.mitre.oval:tst:40031"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="cpio is earlier than 0:2.5-13.RHEL4" test_ref="oval:org.mitre.oval:tst:33698"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1045" version="4" class="vulnerability">
      <metadata>
        <title>Windows 2000 Print Spooler Service Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Print Spooler Service</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1984" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1984"/>
        <description>Buffer overflow in the Print Spooler service (Spoolsv.exe) for Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via a malicious message.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-09-19T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Matthew Burton</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:45:49.329-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:12.594-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criterion comment="Win2K/XP/2003 service pack 4 (or earlier) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1247"/>
        <criterion comment="the version of Spoolsv.exe is less than 5.0.2195.7059" negate="false" test_ref="oval:org.mitre.oval:tst:1246"/>
        <criterion comment="the patch KB896423 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1245"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10449" version="5" class="vulnerability">
      <metadata>
        <title>Off-by-one error in the sql_error function in sql_unixodbc.c in FreeRADIUS 1.0.2.5-5, and possibly other versions including 1.0.4, might allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing the external database query to fail.  NOTE: this single issue is part of a larger-scale disclosure, originally by SUSE, which reported multiple issues that were disputed by FreeRADIUS.  Disputed issues included file descriptor leaks, memory disclosure, LDAP injection, and other issues.  Without additional information, the most recent FreeRADIUS report is being regarded as the authoritative source for this CVE identifier.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-4744" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4744"/>
        <description>Off-by-one error in the sql_error function in sql_unixodbc.c in FreeRADIUS 1.0.2.5-5, and possibly other versions including 1.0.4, might allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing the external database query to fail.  NOTE: this single issue is part of a larger-scale disclosure, originally by SUSE, which reported multiple issues that were disputed by FreeRADIUS.  Disputed issues included file descriptor leaks, memory disclosure, LDAP injection, and other issues.  Without additional information, the most recent FreeRADIUS report is being regarded as the authoritative source for this CVE identifier.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:35.955-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:21.398-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:36.987-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10449 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:25.613-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:47.484-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="freeradius is earlier than 0:1.0.1-2.RHEL3.2" test_ref="oval:org.mitre.oval:tst:31893"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="freeradius-mysql is earlier than 0:1.0.1-3.RHEL4.3" test_ref="oval:org.mitre.oval:tst:32285"/>
            <criterion comment="freeradius-unixODBC is earlier than 0:1.0.1-3.RHEL4.3" test_ref="oval:org.mitre.oval:tst:31967"/>
            <criterion comment="freeradius is earlier than 0:1.0.1-3.RHEL4.3" test_ref="oval:org.mitre.oval:tst:32580"/>
            <criterion comment="freeradius-postgresql is earlier than 0:1.0.1-3.RHEL4.3" test_ref="oval:org.mitre.oval:tst:32573"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10448" version="5" class="vulnerability">
      <metadata>
        <title>src/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" (phase 1) handle when it has been initiated remotely, which allows remote attackers to cause a denial of service (resource consumption).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3652" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3652"/>
        <description>src/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" (phase 1) handle when it has been initiated remotely, which allows remote attackers to cause a denial of service (resource consumption).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:25.749-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:21.140-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:36.723-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10448 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:25.744-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:46.995-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="ipsec-tools is earlier than 0:0.2.5-0.7.rhel3.5" test_ref="oval:org.mitre.oval:tst:36720"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="ipsec-tools is earlier than 0:0.3.3-7.el4_7" test_ref="oval:org.mitre.oval:tst:37646"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="ipsec-tools is earlier than 0:0.6.5-9.el5_2.3" test_ref="oval:org.mitre.oval:tst:37619"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10447" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the Etheric dissector in Ethereal 0.10.7 through 0.10.9 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0704" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0704"/>
        <description>Buffer overflow in the Etheric dissector in Ethereal 0.10.7 through 0.10.9 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:25.815-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:20.851-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:36.470-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10447 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:54.772-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:46.429-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.10-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31514"/>
            <criterion comment="ethereal is earlier than 0:0.10.10-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31448"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.10-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31593"/>
            <criterion comment="ethereal is earlier than 0:0.10.10-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31548"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10446" version="5" class="vulnerability">
      <metadata>
        <title>The nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox 3.0.9 allows remote attackers to cause a denial of service (memory corruption) and probably execute arbitrary code via unspecified vectors.  NOTE: this vulnerability reportedly exists because of an incorrect fix for CVE-2009-1302.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1313" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1313"/>
        <description>The nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox 3.0.9 allows remote attackers to cause a denial of service (memory corruption) and probably execute arbitrary code via unspecified vectors.  NOTE: this vulnerability reportedly exists because of an incorrect fix for CVE-2009-1302.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:27.656-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:20.594-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:36.200-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10446 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:56.847-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:45.927-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.10-1.el4" test_ref="oval:org.mitre.oval:tst:38406"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.10-1.el5" test_ref="oval:org.mitre.oval:tst:38551"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.10-1.el5" test_ref="oval:org.mitre.oval:tst:37733"/>
            <criterion comment="firefox is earlier than 0:3.0.10-1.el5" test_ref="oval:org.mitre.oval:tst:38734"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.10-1.el5" test_ref="oval:org.mitre.oval:tst:38068"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10445" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the (1) ALCAP dissector, (2) Network Instruments file code, or (3) NetXray/Windows Sniffer file code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1934" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1934"/>
        <description>Multiple buffer overflows in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the (1) ALCAP dissector, (2) Network Instruments file code, or (3) NetXray/Windows Sniffer file code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:31.572-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:20.348-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:35.905-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10445 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:36.324-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:45.544-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.99.0-EL3.2" test_ref="oval:org.mitre.oval:tst:32590"/>
            <criterion comment="ethereal is earlier than 0:0.99.0-EL3.2" test_ref="oval:org.mitre.oval:tst:32631"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.99.0-EL4.2" test_ref="oval:org.mitre.oval:tst:32299"/>
            <criterion comment="ethereal is earlier than 0:0.99.0-EL4.2" test_ref="oval:org.mitre.oval:tst:32238"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10444" version="5" class="vulnerability">
      <metadata>
        <title>Linux kernel 2.6.x does not properly restrict socket policy access to users with the CAP_NET_ADMIN capability, which could allow local users to conduct unauthorized activities via (1) ipv4/ip_sockglue.c and (2) ipv6/ipv6_sockglue.c.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2555"/>
        <description>Linux kernel 2.6.x does not properly restrict socket policy access to users with the CAP_NET_ADMIN capability, which could allow local users to conduct unauthorized activities via (1) ipv4/ip_sockglue.c and (2) ipv6/ipv6_sockglue.c.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:26.670-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:19.906-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:35.451-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10444 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:29.697-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:44.978-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31411"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31953"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31879"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31990"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31485"/>
            <criterion comment="kernel is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32093"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31968"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32148"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31741"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31896"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31885"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31861"/>
            <criterion comment="kernel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31550"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31914"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31924"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:32023"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10443" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 3.x before 3.0.5 allows remote attackers to bypass intended privacy restrictions by using the persist attribute in an XUL element to create and access data entities that are similar to cookies.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5505"/>
        <description>Mozilla Firefox 3.x before 3.0.5 allows remote attackers to bypass intended privacy restrictions by using the persist attribute in an XUL element to create and access data entities that are similar to cookies.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:59.261-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:19.207-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:34.898-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10443 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:37.197-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:44.436-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-1.el4" test_ref="oval:org.mitre.oval:tst:37139"/>
            <criterion comment="nspr is earlier than 0:4.7.3-1.el4" test_ref="oval:org.mitre.oval:tst:37574"/>
            <criterion comment="firefox is earlier than 0:3.0.5-1.el4" test_ref="oval:org.mitre.oval:tst:38080"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-1.el4" test_ref="oval:org.mitre.oval:tst:37857"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.3-1.el4" test_ref="oval:org.mitre.oval:tst:37918"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:38072"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38037"/>
            <criterion comment="nspr is earlier than 0:4.7.3-2.el5" test_ref="oval:org.mitre.oval:tst:37420"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37854"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.3-2.el5" test_ref="oval:org.mitre.oval:tst:37419"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38083"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:37631"/>
            <criterion comment="firefox is earlier than 0:3.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38114"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37737"/>
            <criterion comment="nss-tools is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37403"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10442" version="5" class="vulnerability">
      <metadata>
        <title>The nfs_wait_on_request function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service (Oops) via unknown vectors related to truncating a file and an operation that is not interruptible.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1087"/>
        <description>The nfs_wait_on_request function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service (Oops) via unknown vectors related to truncating a file and an operation that is not interruptible.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:33.622-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:18.839-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:34.572-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10442 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:39.381-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:43.944-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40501"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40283"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40807"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40842"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40793"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40732"/>
          <criterion comment="kernel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40830"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40349"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:39978"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:39896"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40791"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40580"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10441" version="5" class="vulnerability">
      <metadata>
        <title>functions/mime.php in SquirrelMail before 1.4.18 does not protect the application's content from Cascading Style Sheets (CSS) positioning in HTML e-mail messages, which allows remote attackers to spoof the user interface, and conduct cross-site scripting (XSS) and phishing attacks, via a crafted message.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1581" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1581"/>
        <description>functions/mime.php in SquirrelMail before 1.4.18 does not protect the application's content from Cascading Style Sheets (CSS) positioning in HTML e-mail messages, which allows remote attackers to spoof the user interface, and conduct cross-site scripting (XSS) and phishing attacks, via a crafted message.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:24.277-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:18.576-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:34.309-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10441 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:10.896-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:43.499-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-13.el3" test_ref="oval:org.mitre.oval:tst:38027"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-5.el4_8.5" test_ref="oval:org.mitre.oval:tst:38669"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-5.el5_3.7" test_ref="oval:org.mitre.oval:tst:37946"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10440" version="5" class="vulnerability">
      <metadata>
        <title>content/html/document/src/nsHTMLDocument.cpp in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allows user-assisted remote attackers to bypass the Same Origin Policy and read an arbitrary content selection via the document.getSelection function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3375" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3375"/>
        <description>content/html/document/src/nsHTMLDocument.cpp in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allows user-assisted remote attackers to bypass the Same Origin Policy and read an arbitrary content selection via the document.getSelection function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:57.853-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:17.995-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:33.646-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10440 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:26.867-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:42.749-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39570"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39466"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39720"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39691"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39583"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39280"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39727"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39550"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39575"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39724"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nspr is earlier than 0:4.7.6-1.el4_8" test_ref="oval:org.mitre.oval:tst:39525"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39481"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.6-1.el4_8" test_ref="oval:org.mitre.oval:tst:38755"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39675"/>
            <criterion comment="firefox is earlier than 0:3.0.15-3.el4" test_ref="oval:org.mitre.oval:tst:39710"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39683"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39031"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39547"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39753"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39602"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39541"/>
            <criterion comment="nspr is earlier than 0:4.7.6-1.el5_4" test_ref="oval:org.mitre.oval:tst:39168"/>
            <criterion comment="firefox is earlier than 0:3.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39294"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.6-1.el5_4" test_ref="oval:org.mitre.oval:tst:39579"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.15-3.el5_4" test_ref="oval:org.mitre.oval:tst:39636"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1044" version="1" class="vulnerability">
      <metadata>
        <title>Solaris Xsun Privilege Escalation via Pixmaps Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
          <product>X</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2495" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2495"/>
        <description>Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers to execute arbitrary code via a crafted pixmap image.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-02-12T01:16:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-03-09T12:19:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-04-06T06:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-05-03T10:06:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="OR">
          <criteria operator="AND" comment="Solaris 8 (SPARC,Xsun) meets Sun Alert ID 101926 criteria.">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
            <criterion comment="Patch 108652-94 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1254"/>
            <criterion comment="File Xorg exists" negate="true" test_ref="oval:org.mitre.oval:tst:1336"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (SPARC,Xsun) meets Sun Alert ID 101926 criteria.">
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
            <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
            <criterion comment="Patch 112785-52 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1253"/>
            <criterion comment="File Xorg exists" negate="true" test_ref="oval:org.mitre.oval:tst:1336"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (SPARC,Xsun) meets Sun Alert ID 101926 criteria.">
            <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:2459"/>
            <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
            <criterion comment="Patch 119059-08 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1252"/>
            <criterion comment="File Xorg exists" negate="true" test_ref="oval:org.mitre.oval:tst:1336"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 8 (x86,Xsun) meets Sun Alert ID 101926 criteria.">
            <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
            <criterion comment="Patch 108653-83 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1251"/>
            <criterion comment="File Xorg exists" negate="true" test_ref="oval:org.mitre.oval:tst:1336"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (x86,Xsun) meets Sun Alert ID 101926 criteria.">
            <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
            <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
            <criterion comment="Patch 112786-41 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1250"/>
            <criterion comment="File Xorg exists" negate="true" test_ref="oval:org.mitre.oval:tst:1336"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 10 (x86,Xsun) meets Sun Alert ID 101926 criteria.">
            <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:2459"/>
            <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
            <criterion comment="Patch 119060-08 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:1249"/>
            <criterion comment="File Xorg exists" negate="true" test_ref="oval:org.mitre.oval:tst:1336"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="The Xsun X server is running" negate="false" test_ref="oval:org.mitre.oval:tst:1248"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10439" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in the 32bit emulation code in Linux 2.4 on AMD64 systems allows local users to gain privileges.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1144" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1144"/>
        <description>Unknown vulnerability in the 32bit emulation code in Linux 2.4 on AMD64 systems allows local users to gain privileges.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:24.112-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:17.717-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:33.352-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10439 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:10:12.187-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:42.265-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:31101"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30944"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30205"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30752"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30999"/>
          <criterion comment="kernel is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30940"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:31177"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30903"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-27.0.1.EL" test_ref="oval:org.mitre.oval:tst:30786"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10438" version="5" class="vulnerability">
      <metadata>
        <title>The php_openssl_apply_verification_policy function in PHP before 5.2.11 does not properly perform certificate validation, which has unknown impact and attack vectors, probably related to an ability to spoof certificates.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3291" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3291"/>
        <description>The php_openssl_apply_verification_policy function in PHP before 5.2.11 does not properly perform certificate validation, which has unknown impact and attack vectors, probably related to an ability to spoof certificates.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:00.736-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:16.987-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:32.592-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10438 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:04.553-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:41.301-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39717"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39629"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39915"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39741"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:40003"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39901"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39326"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39580"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:40010"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39927"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39619"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39111"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39417"/>
            <criterion comment="php is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39899"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39642"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39821"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39461"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39627"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39886"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39848"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39908"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39883"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39544"/>
            <criterion comment="php-common is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39804"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39875"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39748"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39802"/>
            <criterion comment="php is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39053"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39854"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39980"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39581"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39954"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39018"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39463"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39634"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39436"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39969"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39664"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39913"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39765"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10437" version="5" class="vulnerability">
      <metadata>
        <title>The do_change_type function in fs/namespace.c in the Linux kernel before 2.6.22 does not verify that the caller has the CAP_SYS_ADMIN capability, which allows local users to gain privileges or cause a denial of service by modifying the properties of a mountpoint.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2931" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2931"/>
        <description>The do_change_type function in fs/namespace.c in the Linux kernel before 2.6.22 does not verify that the caller has the CAP_SYS_ADMIN capability, which allows local users to gain privileges or cause a denial of service by modifying the properties of a mountpoint.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:50.450-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:16.671-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:32.264-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10437 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:12.499-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:40.811-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37589"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37288"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37600"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37692"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37104"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37681"/>
          <criterion comment="kernel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37688"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37710"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37698"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37703"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37665"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37649"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10436" version="5" class="vulnerability">
      <metadata>
        <title>Visual truncation vulnerability in netwerk/dns/src/nsIDNService.cpp in Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 allows remote attackers to spoof the location bar via an IDN with invalid Unicode characters that are displayed as whitespace, as demonstrated by the \u115A through \u115E characters.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1834" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1834"/>
        <description>Visual truncation vulnerability in netwerk/dns/src/nsIDNService.cpp in Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 allows remote attackers to spoof the location bar via an IDN with invalid Unicode characters that are displayed as whitespace, as demonstrated by the \u115A through \u115E characters.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:34.407-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:16.419-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:31.946-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10436 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:30:41.354-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:40.398-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.11-4.el4" test_ref="oval:org.mitre.oval:tst:38689"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38771"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38371"/>
            <criterion comment="firefox is earlier than 0:3.0.11-2.el5_3" test_ref="oval:org.mitre.oval:tst:38682"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38718"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10435" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via large (1) Metadata Block Size, (2) VORBIS Comment String Size, (3) Picture Metadata MIME-TYPE Size, (4) Picture Description Size, (5) Picture Data Length, (6) Padding Length, and (7) PICTURE Metadata width and height values in a .FLAC file, which result in a heap-based overflow; and large (8) VORBIS Comment String Size Length, (9) Picture MIME-Type, (10) Picture MIME-Type URL, and (11) Picture Description Length values in a .FLAC file, which result in a stack-based overflow.  NOTE: some of these issues may overlap CVE-2007-4619.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6277" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6277"/>
        <description>Multiple buffer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via large (1) Metadata Block Size, (2) VORBIS Comment String Size, (3) Picture Metadata MIME-TYPE Size, (4) Picture Description Size, (5) Picture Data Length, (6) Padding Length, and (7) PICTURE Metadata width and height values in a .FLAC file, which result in a heap-based overflow; and large (8) VORBIS Comment String Size Length, (9) Picture MIME-Type, (10) Picture MIME-Type URL, and (11) Picture Description Length values in a .FLAC file, which result in a stack-based overflow.  NOTE: some of these issues may overlap CVE-2007-4619.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:43.467-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:16.166-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:31.676-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10435 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:42.965-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:39.923-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="flac-devel is earlier than 0:1.1.0-7.el4_5.2" test_ref="oval:org.mitre.oval:tst:35162"/>
            <criterion comment="xmms-flac is earlier than 0:1.1.0-7.el4_5.2" test_ref="oval:org.mitre.oval:tst:35386"/>
            <criterion comment="flac is earlier than 0:1.1.0-7.el4_5.2" test_ref="oval:org.mitre.oval:tst:35456"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="flac-devel is earlier than 0:1.1.2-28.el5_0.1" test_ref="oval:org.mitre.oval:tst:35447"/>
            <criterion comment="flac is earlier than 0:1.1.2-28.el5_0.1" test_ref="oval:org.mitre.oval:tst:35166"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10434" version="5" class="vulnerability">
      <metadata>
        <title>mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2, when mount.cifs is installed suid root, does not properly enforce permissions, which allows local users to read part of the credentials file and obtain the password by specifying the path to the credentials file and using the --verbose or -v option.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2948" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2948"/>
        <description>mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2, when mount.cifs is installed suid root, does not properly enforce permissions, which allows local users to read part of the credentials file and obtain the password by specifying the path to the credentials file and using the --verbose or -v option.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:34.977-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:15.720-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:31.368-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10434 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:47.434-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:39.466-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.33-0.18.el4_8" test_ref="oval:org.mitre.oval:tst:39162"/>
            <criterion comment="samba-swat is earlier than 0:3.0.33-0.18.el4_8" test_ref="oval:org.mitre.oval:tst:39589"/>
            <criterion comment="samba-client is earlier than 0:3.0.33-0.18.el4_8" test_ref="oval:org.mitre.oval:tst:39603"/>
            <criterion comment="samba is earlier than 0:3.0.33-0.18.el4_8" test_ref="oval:org.mitre.oval:tst:39658"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.33-3.15.el5_4" test_ref="oval:org.mitre.oval:tst:39633"/>
            <criterion comment="samba-swat is earlier than 0:3.0.33-3.15.el5_4" test_ref="oval:org.mitre.oval:tst:39222"/>
            <criterion comment="samba-client is earlier than 0:3.0.33-3.15.el5_4" test_ref="oval:org.mitre.oval:tst:39493"/>
            <criterion comment="samba is earlier than 0:3.0.33-3.15.el5_4" test_ref="oval:org.mitre.oval:tst:39205"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10433" version="5" class="vulnerability">
      <metadata>
        <title>Gaim before 1.1.3 allows remote attackers to cause a denial of service (infinite loop) via malformed SNAC packets from (1) AIM or (2) ICQ.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0472" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0472"/>
        <description>Gaim before 1.1.3 allows remote attackers to cause a denial of service (infinite loop) via malformed SNAC packets from (1) AIM or (2) ICQ.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:20.603-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:15.494-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:31.135-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10433 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:49.097-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:39.112-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gaim is earlier than 1:1.1.4-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31086"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gaim is earlier than 1:1.1.4-1.EL4" test_ref="oval:org.mitre.oval:tst:31601"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10432" version="5" class="vulnerability">
      <metadata>
        <title>Desktop Communication Protocol (DCOP) daemon, aka dcopserver, in KDE before 3.4 allows local users to cause a denial of service (dcopserver consumption) by "stalling the DCOP authentication process."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0396" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0396"/>
        <description>Desktop Communication Protocol (DCOP) daemon, aka dcopserver, in KDE before 3.4 allows local users to cause a denial of service (dcopserver consumption) by "stalling the DCOP authentication process."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:59.755-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:15.254-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:30.793-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10432 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:08:53.753-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:38.666-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdelibs is earlier than 6:3.1.3-6.10" test_ref="oval:org.mitre.oval:tst:31321"/>
            <criterion comment="kdelibs-devel is earlier than 6:3.1.3-6.10" test_ref="oval:org.mitre.oval:tst:31460"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdelibs is earlier than 6:3.3.1-3.6" test_ref="oval:org.mitre.oval:tst:31019"/>
            <criterion comment="kdelibs-devel is earlier than 6:3.3.1-3.6" test_ref="oval:org.mitre.oval:tst:31466"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10431" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in the Radeon DRI driver for Linux kernel 2.6.8.1 allows local users with DRI privileges to execute arbitrary code as root.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0767" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0767"/>
        <description>Race condition in the Radeon DRI driver for Linux kernel 2.6.8.1 allows local users with DRI privileges to execute arbitrary code as root.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:56.360-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:14.930-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:30.522-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10431 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:28:51.108-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:38.298-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31545"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31539"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31661"/>
          <criterion comment="kernel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31482"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31112"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31605"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31330"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10430" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X.org X11 server before 1.4 allows local users to execute arbitrary code by copying data from a large pixel depth pixmap into a smaller pixel depth pixmap.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4730" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4730"/>
        <description>Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X.org X11 server before 1.4 allows local users to execute arbitrary code by copying data from a large pixel depth pixmap into a smaller pixel depth pixmap.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:34.647-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:14.541-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:30.122-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10430 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:50.754-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:37.725-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.31" test_ref="oval:org.mitre.oval:tst:35212"/>
          <criterion comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.31" test_ref="oval:org.mitre.oval:tst:34821"/>
          <criterion comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.31" test_ref="oval:org.mitre.oval:tst:35141"/>
          <criterion comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.31" test_ref="oval:org.mitre.oval:tst:35195"/>
          <criterion comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.31" test_ref="oval:org.mitre.oval:tst:35344"/>
          <criterion comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.31" test_ref="oval:org.mitre.oval:tst:34940"/>
          <criterion comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.31" test_ref="oval:org.mitre.oval:tst:34992"/>
          <criterion comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.31" test_ref="oval:org.mitre.oval:tst:35228"/>
          <criterion comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.31" test_ref="oval:org.mitre.oval:tst:35069"/>
          <criterion comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.31" test_ref="oval:org.mitre.oval:tst:34984"/>
          <criterion comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.31" test_ref="oval:org.mitre.oval:tst:35377"/>
          <criterion comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.31" test_ref="oval:org.mitre.oval:tst:35323"/>
          <criterion comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.31" test_ref="oval:org.mitre.oval:tst:35118"/>
          <criterion comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.31" test_ref="oval:org.mitre.oval:tst:35209"/>
          <criterion comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.31" test_ref="oval:org.mitre.oval:tst:35106"/>
          <criterion comment="xorg-x11 is earlier than 0:6.8.2-1.EL.31" test_ref="oval:org.mitre.oval:tst:35359"/>
          <criterion comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.31" test_ref="oval:org.mitre.oval:tst:34931"/>
          <criterion comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.31" test_ref="oval:org.mitre.oval:tst:35305"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10429" version="5" class="vulnerability">
      <metadata>
        <title>Firefox 1.5.0.2 does not fix all test cases associated with CVE-2006-1729, which allows remote attackers to read arbitrary files by inserting the target filename into a text box, then turning that box into a file upload control.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2782" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2782"/>
        <description>Firefox 1.5.0.2 does not fix all test cases associated with CVE-2006-1729, which allows remote attackers to read arbitrary files by inserting the target filename into a text box, then turning that box into a file upload control.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:25.382-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:14.000-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:29.569-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10429 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:37.731-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:37.100-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32575"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32674"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32918"/>
            <criterion comment="seamonkey is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32919"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32864"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32659"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32859"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32511"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32902"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32837"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32873"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32693"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32886"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32810"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32418"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32496"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32929"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32777"/>
            <criterion comment="firefox is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32896"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32722"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32906"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32905"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32925"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32624"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10428" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in the wild by a March 2009 eBay listing.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1308" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1308"/>
        <description>Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in the wild by a March 2009 eBay listing.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:08.825-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:13.734-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:29.291-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10428 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:31.129-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:36.451-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.9-1.el4" test_ref="oval:org.mitre.oval:tst:38379"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38308"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38633"/>
            <criterion comment="firefox is earlier than 0:3.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38370"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.22-2.el5_3" test_ref="oval:org.mitre.oval:tst:38801"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38462"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10427" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in Linux kernel 2.6 allows local users to read the environment variables of another process that is still spawning via /proc/.../cmdline.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1058" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1058"/>
        <description>Race condition in Linux kernel 2.6 allows local users to read the environment variables of another process that is still spawning via /proc/.../cmdline.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:08.932-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:13.450-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:28.895-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10427 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:10:10.950-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:36.089-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31148"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31473"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31178"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31282"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31565"/>
          <criterion comment="kernel is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31562"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31582"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:30730"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31534"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10426" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the kernel in Red Hat Enterprise Linux (RHEL) 4 on the x86_64 platform allows local users to cause a denial of service (OOPS) via unspecified vectors related to the get_gate_vma function and the fuser command.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3379" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3379"/>
        <description>Unspecified vulnerability in the kernel in Red Hat Enterprise Linux (RHEL) 4 on the x86_64 platform allows local users to cause a denial of service (OOPS) via unspecified vectors related to the get_gate_vma function and the fuser command.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:27.971-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:13.144-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:28.576-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10426 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:52.286-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:35.621-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-xenU is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30189"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30542"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30504"/>
          <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30169"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:29589"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30432"/>
          <criterion comment="kernel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:29669"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30424"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30299"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30268"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30561"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10425" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute arbitrary code by manipulating the VMA descriptor.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0090" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0090"/>
        <description>A regression error in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch omits an "access check," which allows local users to cause a denial of service (crash).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:47.009-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:12.857-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:28.312-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10425 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:51.622-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:35.261-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30633"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:31009"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30369"/>
          <criterion comment="kernel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:31205"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30421"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30594"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30616"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10424" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to spoof secure site indicators such as the locked icon by opening the trusted site in a popup window, then changing the location to a malicious site.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1740" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1740"/>
        <description>Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to spoof secure site indicators such as the locked icon by opening the trusted site in a popup window, then changing the location to a malicious site.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:46.489-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:12.253-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:27.383-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10424 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:10:18.839-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:34.578-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32663"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32326"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31987"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32451"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32697"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32558"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32427"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32671"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32666"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32561"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32593"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32679"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32133"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32701"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32428"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32557"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32229"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32349"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32644"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32440"/>
            <criterion comment="firefox is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32219"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32598"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32717"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10423" version="5" class="vulnerability">
      <metadata>
        <title>Integer underflow in filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted sprmTDefTable table property modifier in a Word document.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3301" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3301"/>
        <description>Integer underflow in filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted sprmTDefTable table property modifier in a Word document.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:17.232-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:10.107-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:25.304-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10423 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:04:00.787-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:09:17.606-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:32.224-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-46.2.0.EL3" test_ref="oval:org.mitre.oval:tst:40232"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.2-46.2.0.EL3" test_ref="oval:org.mitre.oval:tst:39552"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-46.2.0.EL3" test_ref="oval:org.mitre.oval:tst:39893"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39898"/>
            <criterion comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39574"/>
            <criterion comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40086"/>
            <criterion comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39814"/>
            <criterion comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39321"/>
            <criterion comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40079"/>
            <criterion comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40187"/>
            <criterion comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40069"/>
            <criterion comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40280"/>
            <criterion comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39823"/>
            <criterion comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39422"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.5-10.6.0.7.EL4.3" test_ref="oval:org.mitre.oval:tst:39760"/>
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.7.EL4.3" test_ref="oval:org.mitre.oval:tst:40078"/>
            <criterion comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40135"/>
            <criterion comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40217"/>
            <criterion comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39726"/>
            <criterion comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40076"/>
            <criterion comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39500"/>
            <criterion comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40206"/>
            <criterion comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39998"/>
            <criterion comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40006"/>
            <criterion comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39847"/>
            <criterion comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39962"/>
            <criterion comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39762"/>
            <criterion comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40163"/>
            <criterion comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39819"/>
            <criterion comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39506"/>
            <criterion comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40275"/>
            <criterion comment="openoffice.org2 is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40058"/>
            <criterion comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40104"/>
            <criterion comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39977"/>
            <criterion comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40138"/>
            <criterion comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40155"/>
            <criterion comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40266"/>
            <criterion comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40024"/>
            <criterion comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40188"/>
            <criterion comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40123"/>
            <criterion comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39776"/>
            <criterion comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40262"/>
            <criterion comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39872"/>
            <criterion comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39958"/>
            <criterion comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40178"/>
            <criterion comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39976"/>
            <criterion comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40092"/>
            <criterion comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39695"/>
            <criterion comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40167"/>
            <criterion comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39830"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.7.EL4.3" test_ref="oval:org.mitre.oval:tst:40242"/>
            <criterion comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39851"/>
            <criterion comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39818"/>
            <criterion comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40038"/>
            <criterion comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.7.EL4.3" test_ref="oval:org.mitre.oval:tst:40279"/>
            <criterion comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39959"/>
            <criterion comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40197"/>
            <criterion comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40245"/>
            <criterion comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39845"/>
            <criterion comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39936"/>
            <criterion comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39966"/>
            <criterion comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39879"/>
            <criterion comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40025"/>
            <criterion comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39786"/>
            <criterion comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40213"/>
            <criterion comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39767"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-langpack-sk_SK is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40143"/>
            <criterion comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40027"/>
            <criterion comment="openoffice.org-langpack-pa_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39796"/>
            <criterion comment="openoffice.org-langpack-hi_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39900"/>
            <criterion comment="openoffice.org-langpack-et_EE is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40033"/>
            <criterion comment="openoffice.org-langpack-kn_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39999"/>
            <criterion comment="openoffice.org is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39861"/>
            <criterion comment="openoffice.org-langpack-zh_TW is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39384"/>
            <criterion comment="openoffice.org-writer is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39209"/>
            <criterion comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40293"/>
            <criterion comment="openoffice.org-langpack-ga_IE is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40186"/>
            <criterion comment="openoffice.org-langpack-ta_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40207"/>
            <criterion comment="openoffice.org-langpack-ko_KR is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39941"/>
            <criterion comment="openoffice.org-langpack-or_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39835"/>
            <criterion comment="openoffice.org-langpack-da_DK is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39870"/>
            <criterion comment="openoffice.org-langpack-sr_CS is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40043"/>
            <criterion comment="openoffice.org-langpack-pl_PL is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40061"/>
            <criterion comment="openoffice.org-langpack-fr is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40019"/>
            <criterion comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39923"/>
            <criterion comment="openoffice.org-javafilter is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40169"/>
            <criterion comment="openoffice.org-langpack-as_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39889"/>
            <criterion comment="openoffice.org-testtools is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39388"/>
            <criterion comment="openoffice.org-langpack-hr_HR is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40015"/>
            <criterion comment="openoffice.org-langpack-de is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39455"/>
            <criterion comment="openoffice.org-emailmerge is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40278"/>
            <criterion comment="openoffice.org-xsltfilter is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39903"/>
            <criterion comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39905"/>
            <criterion comment="openoffice.org-langpack-te_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39522"/>
            <criterion comment="openoffice.org-langpack-sv is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40195"/>
            <criterion comment="openoffice.org-base is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39480"/>
            <criterion comment="openoffice.org-langpack-ca_ES is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40157"/>
            <criterion comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39989"/>
            <criterion comment="openoffice.org-core is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39975"/>
            <criterion comment="openoffice.org-langpack-nl is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40101"/>
            <criterion comment="openoffice.org-langpack-ur is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39119"/>
            <criterion comment="openoffice.org-langpack-nn_NO is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39682"/>
            <criterion comment="openoffice.org-langpack-ar is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39653"/>
            <criterion comment="openoffice.org-langpack-ja_JP is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39800"/>
            <criterion comment="openoffice.org-langpack-gu_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40203"/>
            <criterion comment="openoffice.org-langpack-tr_TR is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40119"/>
            <criterion comment="openoffice.org-langpack-eu_ES is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40002"/>
            <criterion comment="openoffice.org-langpack-fi_FI is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39764"/>
            <criterion comment="openoffice.org-graphicfilter is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39979"/>
            <criterion comment="openoffice.org-pyuno is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39996"/>
            <criterion comment="openoffice.org-langpack-ml_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40060"/>
            <criterion comment="openoffice.org-langpack-gl_ES is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40192"/>
            <criterion comment="openoffice.org-sdk-doc is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39688"/>
            <criterion comment="openoffice.org-langpack-zh_CN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39612"/>
            <criterion comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39939"/>
            <criterion comment="openoffice.org-langpack-it is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39687"/>
            <criterion comment="openoffice.org-sdk is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40190"/>
            <criterion comment="openoffice.org-langpack-es is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39972"/>
            <criterion comment="openoffice.org-langpack-nb_NO is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39792"/>
            <criterion comment="openoffice.org-langpack-sl_SI is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39914"/>
            <criterion comment="openoffice.org-draw is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39723"/>
            <criterion comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40100"/>
            <criterion comment="openoffice.org-langpack-ms_MY is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40158"/>
            <criterion comment="openoffice.org-langpack-el_GR is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39416"/>
            <criterion comment="openoffice.org-langpack-hu_HU is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39496"/>
            <criterion comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39922"/>
            <criterion comment="openoffice.org-langpack-bn is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40120"/>
            <criterion comment="openoffice.org-langpack-he_IL is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39301"/>
            <criterion comment="openoffice.org-langpack-pt_PT is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40236"/>
            <criterion comment="openoffice.org-langpack-lt_LT is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40042"/>
            <criterion comment="openoffice.org-langpack-af_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39239"/>
            <criterion comment="openoffice.org-langpack-bg_BG is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40048"/>
            <criterion comment="openoffice.org-calc is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39842"/>
            <criterion comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39995"/>
            <criterion comment="openoffice.org-langpack-cy_GB is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39641"/>
            <criterion comment="openoffice.org-langpack-mr_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39754"/>
            <criterion comment="openoffice.org-headless is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40170"/>
            <criterion comment="openoffice.org-langpack-th_TH is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39951"/>
            <criterion comment="openoffice.org-langpack-pt_BR is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40166"/>
            <criterion comment="openoffice.org-langpack-ru is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40110"/>
            <criterion comment="openoffice.org-math is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40223"/>
            <criterion comment="openoffice.org-impress is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40173"/>
            <criterion comment="openoffice.org-langpack-st_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39745"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10422" version="5" class="vulnerability">
      <metadata>
        <title>Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass intended access restrictions and conduct directory traversal attacks via .. (dot dot) sequences and the WEB-INF directory in a Request.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5515"/>
        <description>Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass intended access restrictions and conduct directory traversal attacks via .. (dot dot) sequences and the WEB-INF directory in a Request.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:38.509-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:09.712-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:24.734-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10422 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:17.196-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:31.668-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38108"/>
          <criterion comment="tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:37963"/>
          <criterion comment="tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38333"/>
          <criterion comment="tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38944"/>
          <criterion comment="tomcat5-webapps is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38805"/>
          <criterion comment="tomcat5 is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38688"/>
          <criterion comment="tomcat5-jasper is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38891"/>
          <criterion comment="tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38239"/>
          <criterion comment="tomcat5-server-lib is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38824"/>
          <criterion comment="tomcat5-common-lib is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38955"/>
          <criterion comment="tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38428"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10421" version="5" class="vulnerability">
      <metadata>
        <title>xterm, including 192-7.el4 in Red Hat Enterprise Linux and 208-3.1 in Debian GNU/Linux, sets the wrong group ownership of tty devices, which allows local users to write data to other users' terminals.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2797" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2797"/>
        <description>xterm, including 192-7.el4 in Red Hat Enterprise Linux and 208-3.1 in Debian GNU/Linux, sets the wrong group ownership of tty devices, which allows local users to write data to other users' terminals.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:39.272-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:09.524-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:24.537-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10421 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:11.718-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:31.362-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="xterm is earlier than 0:192-8.el4" test_ref="oval:org.mitre.oval:tst:34718"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10420" version="5" class="vulnerability">
      <metadata>
        <title>Directory traversal vulnerability in the contains_dot_dot function in src/names.c in GNU tar allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR archive.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4131" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4131"/>
        <description>Directory traversal vulnerability in the contains_dot_dot function in src/names.c in GNU tar allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR archive.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:53.696-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:09.303-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:24.297-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10420 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:36:08.264-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:30.959-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="tar is earlier than 0:1.14-12.5.1.RHEL4" test_ref="oval:org.mitre.oval:tst:35115"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="tar is earlier than 2:1.15.1-23.0.1.el5" test_ref="oval:org.mitre.oval:tst:35142"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1042" version="2" class="vulnerability">
      <metadata>
        <title>Malicious CVS Server RCS diff File Vulnerability in CVS Client</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0180" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0180"/>
        <description>The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates, a different vulnerability than CVE-2004-0405.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-10T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-05-25T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:34.012-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:12.726-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
          <criterion comment="cvs version is less than 1.11.2-18" negate="false" test_ref="oval:org.mitre.oval:tst:1255"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/bin/cvs is executable">
            <criterion comment="/usr/bin/cvs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1381"/>
            <criterion comment="/usr/bin/cvs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1380"/>
            <criterion comment="/usr/bin/cvs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1379"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10419" version="5" class="vulnerability">
      <metadata>
        <title>webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary web pages into the right frame via a URL in the right_frame parameter.  NOTE: this has been called a cross-site scripting (XSS) issue, but it is different than what is normally identified as XSS.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0188" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0188"/>
        <description>webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary web pages into the right frame via a URL in the right_frame parameter.  NOTE: this has been called a cross-site scripting (XSS) issue, but it is different than what is normally identified as XSS.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:28.712-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:08.995-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:24.006-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10419 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:13.676-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:30.594-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.6-5.el3" test_ref="oval:org.mitre.oval:tst:32265"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.6-5.el4" test_ref="oval:org.mitre.oval:tst:32721"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10418" version="5" class="vulnerability">
      <metadata>
        <title>pam_ldap in nss_ldap on Red Hat Enterprise Linux 4, Fedora Core 3 and earlier, and possibly other distributions does not return an error condition when an LDAP directory server responds with a PasswordPolicyResponse control response, which causes the pam_authenticate function to return a success code even if authentication has failed, as originally reported for xscreensaver.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5170" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5170"/>
        <description>pam_ldap in nss_ldap on Red Hat Enterprise Linux 4, Fedora Core 3 and earlier, and possibly other distributions does not return an error condition when an LDAP directory server responds with a PasswordPolicyResponse control response, which causes the pam_authenticate function to return a success code even if authentication has failed, as originally reported for xscreensaver.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:38.821-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:08.797-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:23.799-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10418 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:39.728-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:30.287-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="nss_ldap is earlier than 0:226-17" test_ref="oval:org.mitre.oval:tst:32824"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10417" version="5" class="vulnerability">
      <metadata>
        <title>The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5342"/>
        <description>The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:35.238-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:08.479-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:23.472-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10417 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:23.059-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:29.406-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" test_ref="oval:org.mitre.oval:tst:35985"/>
          <criterion comment="tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" test_ref="oval:org.mitre.oval:tst:35572"/>
          <criterion comment="tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" test_ref="oval:org.mitre.oval:tst:35569"/>
          <criterion comment="tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" test_ref="oval:org.mitre.oval:tst:35862"/>
          <criterion comment="tomcat5-webapps is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" test_ref="oval:org.mitre.oval:tst:35936"/>
          <criterion comment="tomcat5 is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" test_ref="oval:org.mitre.oval:tst:35526"/>
          <criterion comment="tomcat5-jasper is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" test_ref="oval:org.mitre.oval:tst:36099"/>
          <criterion comment="tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" test_ref="oval:org.mitre.oval:tst:35716"/>
          <criterion comment="tomcat5-server-lib is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" test_ref="oval:org.mitre.oval:tst:35676"/>
          <criterion comment="tomcat5-common-lib is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" test_ref="oval:org.mitre.oval:tst:35522"/>
          <criterion comment="tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" test_ref="oval:org.mitre.oval:tst:36027"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10416" version="5" class="vulnerability">
      <metadata>
        <title>ssl_engine_kernel.c in mod_ssl before 2.8.24, when using "SSLVerifyClient optional" in the global virtual host configuration, does not properly enforce "SSLVerifyClient require" in a per-location context, which allows remote attackers to bypass intended access restrictions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2700" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2700"/>
        <description>ssl_engine_kernel.c in mod_ssl before 2.8.24, when using "SSLVerifyClient optional" in the global virtual host configuration, does not properly enforce "SSLVerifyClient require" in a per-location context, which allows remote attackers to bypass intended access restrictions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:45.910-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:08.178-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:23.153-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10416 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:00.901-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:28.938-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-devel is earlier than 0:2.0.46-46.3.ent" test_ref="oval:org.mitre.oval:tst:31872"/>
            <criterion comment="mod_ssl is earlier than 1:2.0.46-46.3.ent" test_ref="oval:org.mitre.oval:tst:32030"/>
            <criterion comment="httpd is earlier than 0:2.0.46-46.3.ent" test_ref="oval:org.mitre.oval:tst:31190"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-suexec is earlier than 0:2.0.52-12.2.ent" test_ref="oval:org.mitre.oval:tst:32102"/>
            <criterion comment="httpd-manual is earlier than 0:2.0.52-12.2.ent" test_ref="oval:org.mitre.oval:tst:31655"/>
            <criterion comment="httpd-devel is earlier than 0:2.0.52-12.2.ent" test_ref="oval:org.mitre.oval:tst:32055"/>
            <criterion comment="mod_ssl is earlier than 1:2.0.52-12.2.ent" test_ref="oval:org.mitre.oval:tst:32103"/>
            <criterion comment="httpd is earlier than 0:2.0.52-12.2.ent" test_ref="oval:org.mitre.oval:tst:32015"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10415" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial of service (kernel memory corruption and crash) via a long packet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1389" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1389"/>
        <description>Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial of service (kernel memory corruption and crash) via a long packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:19.741-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:07.650-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:22.596-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10415 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:30:10.861-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:28.310-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:38877"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:38938"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:39012"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:39048"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:38799"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:39160"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:39030"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:38637"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:38231"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:39133"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:38985"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38128"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38668"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38883"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38948"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38732"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38969"/>
            <criterion comment="kernel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38991"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:39056"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38817"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:39009"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38672"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38983"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10414" version="5" class="vulnerability">
      <metadata>
        <title>The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an ANY record in the prerequisite section of a crafted dynamic update message, as exploited in the wild in July 2009.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0696" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0696"/>
        <description>The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an ANY record in the prerequisite section of a crafted dynamic update message, as exploited in the wild in July 2009.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:48.163-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:07.203-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:22.129-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10414 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:07.626-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:27.621-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="bind-utils is earlier than 20:9.2.4-25.el3" test_ref="oval:org.mitre.oval:tst:38929"/>
            <criterion comment="bind-devel is earlier than 20:9.2.4-25.el3" test_ref="oval:org.mitre.oval:tst:38478"/>
            <criterion comment="bind-chroot is earlier than 20:9.2.4-25.el3" test_ref="oval:org.mitre.oval:tst:38899"/>
            <criterion comment="bind is earlier than 20:9.2.4-25.el3" test_ref="oval:org.mitre.oval:tst:38988"/>
            <criterion comment="bind-libs is earlier than 20:9.2.4-25.el3" test_ref="oval:org.mitre.oval:tst:38941"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="bind-utils is earlier than 20:9.2.4-30.el4_8.4" test_ref="oval:org.mitre.oval:tst:37998"/>
            <criterion comment="bind-devel is earlier than 20:9.2.4-30.el4_8.4" test_ref="oval:org.mitre.oval:tst:38224"/>
            <criterion comment="bind-chroot is earlier than 20:9.2.4-30.el4_8.4" test_ref="oval:org.mitre.oval:tst:38970"/>
            <criterion comment="bind is earlier than 20:9.2.4-30.el4_8.4" test_ref="oval:org.mitre.oval:tst:38212"/>
            <criterion comment="bind-libs is earlier than 20:9.2.4-30.el4_8.4" test_ref="oval:org.mitre.oval:tst:38933"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="bind-utils is earlier than 30:9.3.4-10.P1.el5_3.3" test_ref="oval:org.mitre.oval:tst:38752"/>
            <criterion comment="bind-libbind-devel is earlier than 30:9.3.4-10.P1.el5_3.3" test_ref="oval:org.mitre.oval:tst:38468"/>
            <criterion comment="bind-devel is earlier than 30:9.3.4-10.P1.el5_3.3" test_ref="oval:org.mitre.oval:tst:38919"/>
            <criterion comment="bind-chroot is earlier than 30:9.3.4-10.P1.el5_3.3" test_ref="oval:org.mitre.oval:tst:38966"/>
            <criterion comment="caching-nameserver is earlier than 30:9.3.4-10.P1.el5_3.3" test_ref="oval:org.mitre.oval:tst:38159"/>
            <criterion comment="bind-sdb is earlier than 30:9.3.4-10.P1.el5_3.3" test_ref="oval:org.mitre.oval:tst:38638"/>
            <criterion comment="bind is earlier than 30:9.3.4-10.P1.el5_3.3" test_ref="oval:org.mitre.oval:tst:38957"/>
            <criterion comment="bind-libs is earlier than 30:9.3.4-10.P1.el5_3.3" test_ref="oval:org.mitre.oval:tst:38627"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10413" version="5" class="vulnerability">
      <metadata>
        <title>SpamAssassin 2.5x, and 2.6x before 2.64, allows remote attackers to cause a denial of service via certain malformed messages.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0796" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0796"/>
        <description>SpamAssassin 2.5x, and 2.6x before 2.64, allows remote attackers to cause a denial of service via certain malformed messages.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:42.781-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:06.939-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:21.885-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10413 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:02:58.268-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:27.350-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="spamassassin is earlier than 0:2.55-3.2" test_ref="oval:org.mitre.oval:tst:30947"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10412" version="3" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in Java Web Start (javaws.exe) in Sun JDK and JRE 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to execute arbitrary code via a crafted JNLP file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1196"/>
        <description>Stack-based buffer overflow in Java Web Start (javaws.exe) in Sun JDK and JRE 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to execute arbitrary code via a crafted JNLP file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:19.326-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:06.321-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:21.227-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36548"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36455"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36422"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36295"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36406"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36334"/>
            <criterion comment="java-1.5.0-ibm is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36155"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36267"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35708"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35618"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36613"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36614"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36509"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36558"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36485"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35872"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36582"/>
            <criterion comment="java-1.6.0-ibm-accessibility is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36555"/>
            <criterion comment="java-1.6.0-ibm-jdbc is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36414"/>
            <criterion comment="java-1.6.0-ibm-src is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36622"/>
            <criterion comment="java-1.6.0-ibm-javacomm is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36688"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36265"/>
            <criterion comment="java-1.6.0-ibm is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36319"/>
            <criterion comment="java-1.6.0-ibm-plugin is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36706"/>
            <criterion comment="java-1.6.0-ibm-devel is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36205"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36535"/>
            <criterion comment="java-1.6.0-ibm-demo is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36515"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36523"/>
            <criterion comment="java-1.5.0-ibm-accessibility is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36323"/>
            <criterion comment="java-1.5.0-ibm is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35890"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35698"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35719"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36340"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36068"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36568"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10411" version="5" class="vulnerability">
      <metadata>
        <title>scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0605" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0605"/>
        <description>scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:02.341-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:05.212-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:20.064-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10411 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:25.128-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:25.886-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:31588"/>
            <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:31145"/>
            <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:31387"/>
            <criterion comment="XFree86-libs is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:31293"/>
            <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:31567"/>
            <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:31220"/>
            <criterion comment="XFree86-twm is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:31400"/>
            <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:31549"/>
            <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:31544"/>
            <criterion comment="XFree86-doc is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:31127"/>
            <criterion comment="openmotif21 is earlier than 0:2.1.30-9.RHEL3.6" test_ref="oval:org.mitre.oval:tst:31748"/>
            <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:31164"/>
            <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:30693"/>
            <criterion comment="openmotif is earlier than 0:2.2.3-5.RHEL3.2" test_ref="oval:org.mitre.oval:tst:31564"/>
            <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:31540"/>
            <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:31154"/>
            <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:31513"/>
            <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:30982"/>
            <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:31206"/>
            <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:31040"/>
            <criterion comment="XFree86-xdm is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:31434"/>
            <criterion comment="XFree86-sdk is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:31216"/>
            <criterion comment="XFree86 is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:30836"/>
            <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:31455"/>
            <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:31524"/>
            <criterion comment="XFree86-xfs is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:31578"/>
            <criterion comment="XFree86-tools is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:30634"/>
            <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:30683"/>
            <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:31490"/>
            <criterion comment="openmotif-devel is earlier than 0:2.2.3-5.RHEL3.2" test_ref="oval:org.mitre.oval:tst:31841"/>
            <criterion comment="XFree86-xauth is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:31537"/>
            <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:31394"/>
            <criterion comment="XFree86-devel is earlier than 0:4.3.0-81.EL" test_ref="oval:org.mitre.oval:tst:31362"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="fonts-xorg-syriac is earlier than 0:6.8.1.1-1.EL.1" test_ref="oval:org.mitre.oval:tst:30898"/>
            <criterion comment="fonts-xorg-ISO8859-14-100dpi is earlier than 0:6.8.1.1-1.EL.1" test_ref="oval:org.mitre.oval:tst:31324"/>
            <criterion comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.13.6" test_ref="oval:org.mitre.oval:tst:31352"/>
            <criterion comment="fonts-xorg is earlier than 0:6.8.1.1-1.EL.1" test_ref="oval:org.mitre.oval:tst:31028"/>
            <criterion comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.13.6" test_ref="oval:org.mitre.oval:tst:31416"/>
            <criterion comment="fonts-xorg-ISO8859-9-100dpi is earlier than 0:6.8.1.1-1.EL.1" test_ref="oval:org.mitre.oval:tst:31561"/>
            <criterion comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.13.6" test_ref="oval:org.mitre.oval:tst:31073"/>
            <criterion comment="fonts-xorg-base is earlier than 0:6.8.1.1-1.EL.1" test_ref="oval:org.mitre.oval:tst:30969"/>
            <criterion comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.13.6" test_ref="oval:org.mitre.oval:tst:31431"/>
            <criterion comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.13.6" test_ref="oval:org.mitre.oval:tst:31437"/>
            <criterion comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.13.6" test_ref="oval:org.mitre.oval:tst:31182"/>
            <criterion comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.13.6" test_ref="oval:org.mitre.oval:tst:31461"/>
            <criterion comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.13.6" test_ref="oval:org.mitre.oval:tst:31471"/>
            <criterion comment="fonts-xorg-100dpi is earlier than 0:6.8.1.1-1.EL.1" test_ref="oval:org.mitre.oval:tst:31501"/>
            <criterion comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.13.6" test_ref="oval:org.mitre.oval:tst:30932"/>
            <criterion comment="openmotif-devel is earlier than 0:2.2.3-9.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31666"/>
            <criterion comment="fonts-xorg-ISO8859-2-75dpi is earlier than 0:6.8.1.1-1.EL.1" test_ref="oval:org.mitre.oval:tst:31100"/>
            <criterion comment="fonts-xorg-ISO8859-15-75dpi is earlier than 0:6.8.1.1-1.EL.1" test_ref="oval:org.mitre.oval:tst:30844"/>
            <criterion comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.13.6" test_ref="oval:org.mitre.oval:tst:31407"/>
            <criterion comment="fonts-xorg-75dpi is earlier than 0:6.8.1.1-1.EL.1" test_ref="oval:org.mitre.oval:tst:31451"/>
            <criterion comment="openmotif21 is earlier than 0:2.1.30-11.RHEL4.4" test_ref="oval:org.mitre.oval:tst:31659"/>
            <criterion comment="fonts-xorg-truetype is earlier than 0:6.8.1.1-1.EL.1" test_ref="oval:org.mitre.oval:tst:31441"/>
            <criterion comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.13.6" test_ref="oval:org.mitre.oval:tst:31370"/>
            <criterion comment="openmotif is earlier than 0:2.2.3-9.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31793"/>
            <criterion comment="fonts-xorg-ISO8859-15-100dpi is earlier than 0:6.8.1.1-1.EL.1" test_ref="oval:org.mitre.oval:tst:31405"/>
            <criterion comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.13.6" test_ref="oval:org.mitre.oval:tst:30853"/>
            <criterion comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.13.6" test_ref="oval:org.mitre.oval:tst:31010"/>
            <criterion comment="fonts-xorg-ISO8859-2-100dpi is earlier than 0:6.8.1.1-1.EL.1" test_ref="oval:org.mitre.oval:tst:31536"/>
            <criterion comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.13.6" test_ref="oval:org.mitre.oval:tst:30908"/>
            <criterion comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.13.6" test_ref="oval:org.mitre.oval:tst:30507"/>
            <criterion comment="fonts-xorg-cyrillic is earlier than 0:6.8.1.1-1.EL.1" test_ref="oval:org.mitre.oval:tst:30869"/>
            <criterion comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.13.6" test_ref="oval:org.mitre.oval:tst:31169"/>
            <criterion comment="xorg-x11 is earlier than 0:6.8.2-1.EL.13.6" test_ref="oval:org.mitre.oval:tst:31396"/>
            <criterion comment="fonts-xorg-ISO8859-9-75dpi is earlier than 0:6.8.1.1-1.EL.1" test_ref="oval:org.mitre.oval:tst:30605"/>
            <criterion comment="fonts-xorg-ISO8859-14-75dpi is earlier than 0:6.8.1.1-1.EL.1" test_ref="oval:org.mitre.oval:tst:31125"/>
            <criterion comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.13.6" test_ref="oval:org.mitre.oval:tst:31504"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10410" version="5" class="vulnerability">
      <metadata>
        <title>Linux kernel before 2.6.15 allows local users to cause a denial of service (panic) via a set_mempolicy call with a 0 bitmask, which causes a panic when a page fault occurs.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3358" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3358"/>
        <description>Linux kernel before 2.6.15 allows local users to cause a denial of service (panic) via a set_mempolicy call with a 0 bitmask, which causes a panic when a page fault occurs.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:19.499-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:04.879-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:19.738-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10410 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:11.390-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:25.501-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32415"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32137"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32528"/>
          <criterion comment="kernel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32205"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:31866"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32446"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-22.0.2.EL" test_ref="oval:org.mitre.oval:tst:32450"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10409" version="5" class="vulnerability">
      <metadata>
        <title>Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute pathnames with double leading slashes ("//absolute/path").</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0235" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0235"/>
        <description>Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute pathnames with double leading slashes ("//absolute/path").</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:27.744-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:04.685-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:19.539-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10409 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:02:56.478-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:25.234-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="lha is earlier than 0:1.14i-10.2" test_ref="oval:org.mitre.oval:tst:30332"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10408" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 allows context-dependent attackers to execute arbitrary code via a regular expression containing a large number of named subpatterns (name_count) or long subpattern names (max_name_size), which triggers a buffer overflow.  NOTE: this issue was originally subsumed by CVE-2006-7224, but that CVE has been REJECTED and split.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-7227" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-7227"/>
        <description>Integer overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 allows context-dependent attackers to execute arbitrary code via a regular expression containing a large number of named subpatterns (name_count) or long subpattern names (max_name_size), which triggers a buffer overflow.  NOTE: this issue was originally subsumed by CVE-2006-7224, but that CVE has been REJECTED and split.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:42.828-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:04.440-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:19.282-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10408 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:30:14.938-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:24.773-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="pcre-devel is earlier than 0:4.5-4.el4_5.4" test_ref="oval:org.mitre.oval:tst:35582"/>
            <criterion comment="pcre is earlier than 0:4.5-4.el4_5.4" test_ref="oval:org.mitre.oval:tst:35771"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="pcre-devel is earlier than 0:6.6-2.el5_1.1" test_ref="oval:org.mitre.oval:tst:35756"/>
            <criterion comment="pcre is earlier than 0:6.6-2.el5_1.1" test_ref="oval:org.mitre.oval:tst:35778"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10407" version="5" class="vulnerability">
      <metadata>
        <title>Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to the PyString_FromStringAndSize function, which allocates less memory than expected when assert() is disabled and triggers a buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1887" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1887"/>
        <description>Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to the PyString_FromStringAndSize function, which allocates less memory than expected when assert() is disabled and triggers a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:19.699-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:03.967-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:18.813-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10407 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:35.576-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:24.189-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38704"/>
            <criterion comment="tkinter is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38695"/>
            <criterion comment="python-tools is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38872"/>
            <criterion comment="python is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38617"/>
            <criterion comment="python-docs is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:37965"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38916"/>
            <criterion comment="tkinter is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38703"/>
            <criterion comment="python-tools is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38787"/>
            <criterion comment="python is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38939"/>
            <criterion comment="python-docs is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38081"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38889"/>
            <criterion comment="tkinter is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38958"/>
            <criterion comment="python-tools is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38827"/>
            <criterion comment="python is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38282"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10406" version="5" class="vulnerability">
      <metadata>
        <title>Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent attackers to execute arbitrary code by overwriting variables pointing to (1) the GLOBALS array or (2) the session data in _SESSION.  NOTE: this issue was introduced when attempting to patch CVE-2007-1701 (MOPB-31-2007).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1711" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1711"/>
        <description>Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent attackers to execute arbitrary code by overwriting variables pointing to (1) the GLOBALS array or (2) the session data in _SESSION.  NOTE: this issue was introduced when attempting to patch CVE-2007-1701 (MOPB-31-2007).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:46.896-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:03.509-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:18.338-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10406 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:15.229-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:23.562-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33776"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33817"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33769"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33528"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33915"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33822"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33351"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:34016"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33395"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33957"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33405"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33642"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33024"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33690"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33995"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33892"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33945"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33711"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33857"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33644"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33920"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10405" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias (font.alias) file, a different vulnerability than CVE-2004-0083 and CVE-2004-0106.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0084" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0084"/>
        <description>Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias (font.alias) file, a different vulnerability than CVE-2004-0083 and CVE-2004-0106.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:26.801-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:02.936-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:17.729-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10405 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:05.619-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:22.897-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30567"/>
          <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30064"/>
          <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30460"/>
          <criterion comment="XFree86-libs is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:29952"/>
          <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30100"/>
          <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30258"/>
          <criterion comment="XFree86-twm is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30560"/>
          <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30714"/>
          <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30316"/>
          <criterion comment="XFree86-doc is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30669"/>
          <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:29808"/>
          <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:29998"/>
          <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30273"/>
          <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30537"/>
          <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:29649"/>
          <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30610"/>
          <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30489"/>
          <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30530"/>
          <criterion comment="XFree86-xdm is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30518"/>
          <criterion comment="XFree86 is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30588"/>
          <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30206"/>
          <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30113"/>
          <criterion comment="XFree86-xfs is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30525"/>
          <criterion comment="XFree86-tools is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30631"/>
          <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30636"/>
          <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30500"/>
          <criterion comment="XFree86-xauth is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30123"/>
          <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30593"/>
          <criterion comment="XFree86-devel is earlier than 0:4.3.0-55.EL" test_ref="oval:org.mitre.oval:tst:30503"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10404" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permissions for the world, which allows local users to delete arbitrary files and directories, and possibly read files and directories, via a symlink attack.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0155" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0155"/>
        <description>The PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to create arbitrary files via the PERLIO_DEBUG variable.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:37.799-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:02.650-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:17.426-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10404 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:32.531-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:22.475-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="perl-suidperl is earlier than 2:5.8.0-89.10" test_ref="oval:org.mitre.oval:tst:31361"/>
            <criterion comment="perl is earlier than 2:5.8.0-89.10" test_ref="oval:org.mitre.oval:tst:30931"/>
            <criterion comment="perl-CPAN is earlier than 2:1.61-89.10" test_ref="oval:org.mitre.oval:tst:30901"/>
            <criterion comment="perl-CGI is earlier than 2:2.81-89.10" test_ref="oval:org.mitre.oval:tst:31227"/>
            <criterion comment="perl-DB_File is earlier than 2:1.804-89.10" test_ref="oval:org.mitre.oval:tst:30945"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="perl-suidperl is earlier than 3:5.8.5-12.1.1" test_ref="oval:org.mitre.oval:tst:31049"/>
            <criterion comment="perl is earlier than 3:5.8.5-12.1" test_ref="oval:org.mitre.oval:tst:31120"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10403" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote attackers to cause a denial of service (application crash) via a file that records a malformed packet trace and is processed by the (1) Bluetooth L2CAP, (2) RADIUS, or (3) MIOP dissector. NOTE: it was later reported that the RADIUS issue also affects 0.10.13 through 1.0.9.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2560" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2560"/>
        <description>Multiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote attackers to cause a denial of service (application crash) via a file that records a malformed packet trace and is processed by the (1) Bluetooth L2CAP, (2) RADIUS, or (3) MIOP dissector. NOTE: it was later reported that the RADIUS issue also affects 0.10.13 through 1.0.9.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:37.225-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:02.352-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:17.113-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10403 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:31.991-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:21.965-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.11-EL3.6" test_ref="oval:org.mitre.oval:tst:39600"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.11-EL3.6" test_ref="oval:org.mitre.oval:tst:40430"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.11-1.el4_8.5" test_ref="oval:org.mitre.oval:tst:40437"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.11-1.el4_8.5" test_ref="oval:org.mitre.oval:tst:39877"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.11-1.el5_5.5" test_ref="oval:org.mitre.oval:tst:40351"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.11-1.el5_5.5" test_ref="oval:org.mitre.oval:tst:40208"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10402" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 3.0.12 and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via vectors involving double frame construction, related to (1) nsHTMLContentSink.cpp, (2) nsXMLContentSink.cpp, and (3) nsPresShell.cpp, and the nsSubDocumentFrame::Reflow function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2465" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2465"/>
        <description>Mozilla Firefox before 3.0.12 and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via vectors involving double frame construction, related to (1) nsHTMLContentSink.cpp, (2) nsXMLContentSink.cpp, and (3) nsPresShell.cpp, and the nsSubDocumentFrame::Reflow function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:11.569-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:01.893-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:16.794-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10402 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:31:00.428-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:21.550-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.12-1.el4" test_ref="oval:org.mitre.oval:tst:38809"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38249"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38575"/>
            <criterion comment="firefox is earlier than 0:3.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38853"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38563"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10401" version="5" class="vulnerability">
      <metadata>
        <title>The JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors that trigger an assertion failure in jstracer.cpp.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1203" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1203"/>
        <description>The JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors that trigger an assertion failure in jstracer.cpp.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:12.852-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:01.493-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:16.357-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10401 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:25.257-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:20.974-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.6.4-8.el4" test_ref="oval:org.mitre.oval:tst:40755"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gnome-python2-extras is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40435"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-21.el5" test_ref="oval:org.mitre.oval:tst:40552"/>
            <criterion comment="gnome-python2-libegg is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40721"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.2.4-10.el5" test_ref="oval:org.mitre.oval:tst:40480"/>
            <criterion comment="gnome-python2-gtkhtml2 is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40813"/>
            <criterion comment="totem is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40749"/>
            <criterion comment="xulrunner is earlier than 0:1.9.2.4-10.el5" test_ref="oval:org.mitre.oval:tst:40221"/>
            <criterion comment="gnome-python2-gtkspell is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40385"/>
            <criterion comment="yelp is earlier than 0:2.16.0-26.el5" test_ref="oval:org.mitre.oval:tst:40828"/>
            <criterion comment="devhelp is earlier than 0:0.12-21.el5" test_ref="oval:org.mitre.oval:tst:40814"/>
            <criterion comment="firefox is earlier than 0:3.6.4-8.el5" test_ref="oval:org.mitre.oval:tst:40524"/>
            <criterion comment="totem-mozplugin is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40620"/>
            <criterion comment="gnome-python2-gtkmozembed is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40722"/>
            <criterion comment="esc is earlier than 0:1.1.0-12.el5" test_ref="oval:org.mitre.oval:tst:40273"/>
            <criterion comment="totem-devel is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40637"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10400" version="5" class="vulnerability">
      <metadata>
        <title>The shmem_nopage function in shmem.c for the tmpfs driver in Linux kernel 2.6 does not properly verify the address argument, which allows local users to cause a denial of service (kernel crash) via an invalid address.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0977" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0977"/>
        <description>The shmem_nopage function in shmem.c for the tmpfs driver in Linux kernel 2.6 does not properly verify the address argument, which allows local users to cause a denial of service (kernel crash) via an invalid address.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:39.972-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:01.136-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:15.978-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10400 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:28:54.353-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:20.607-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31545"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31539"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31661"/>
          <criterion comment="kernel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31482"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31112"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31605"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31330"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:104" class="vulnerability" version="1">
      <metadata>
        <title>Microsoft XML Core Services Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft XML Core Services</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5745" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5745"/>
        <description>Unspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX Control 4.0 in Microsoft XML Core Services 4.0 on Windows, when accessed by Internet Explorer, allows remote attackers to execute arbitrary code via crafted arguments that lead to memory corruption, a different vulnerability than CVE-2006-4685.  NOTE: some of these details are obtained from third party information.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-11-15T12:28:05">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-11-17T12:55:00.000-04:00">DRAFT</status_change>
            <status_change date="2007-01-03T13:53:47.020-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:27.419-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <extend_definition comment="Microsoft XML Core Services 4 is installed" definition_ref="oval:org.mitre.oval:def:1002"/>
          <criterion comment="The version of Msxml4.dll is less than 4.20.9841.0" negate="false" test_ref="oval:org.mitre.oval:tst:62"/>
        </criteria>
        <criteria operator="AND">
          <extend_definition comment="Microsoft XML Core Services 6 is installed" definition_ref="oval:org.mitre.oval:def:454"/>
          <criterion comment="The version of Msxml6.dll is less than 6.0.3890.0" negate="false" test_ref="oval:org.mitre.oval:tst:138"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:454" version="3" class="inventory">
      <metadata>
        <title>Microsoft XML Core Services 6 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft XML Core Services 6</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:xml_core_services:6"/>
        <description>Microsoft XML Core Services 6 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-10-11T05:29:41">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-10-13T14:55:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-31T19:35:42.283-05:00">INTERIM</status_change>
            <status_change date="2006-11-21T21:27:51.747-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:454 - products added to inventories" date="2015-04-17T09:39:00.289-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-04-17T09:41:23.422-04:00">INTERIM</status_change>
            <status_change date="2015-05-04T04:00:19.661-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Microsoft XML Core Services 6 is installed." test_ref="oval:org.mitre.oval:tst:182"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1002" version="3" class="inventory">
      <metadata>
        <title>Microsoft XML Core Services 4 is installed</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft XML Core Services 4</product>
        </affected>
        <reference source="CPE" ref_id="cpe:/a:microsoft:xml_core_services:4"/>
        <description>Microsoft XML Core Services 4 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-10-11T05:29:41">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-10-13T14:55:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-10-31T19:35:29.444-05:00">INTERIM</status_change>
            <status_change date="2006-11-21T21:27:39.227-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1002 - products added to inventories" date="2015-04-17T09:39:00.289-04:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2015-04-17T09:41:23.144-04:00">INTERIM</status_change>
            <status_change date="2015-05-04T04:00:06.387-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Microsoft XML Core Services 4 is installed." test_ref="oval:org.mitre.oval:tst:30"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10399" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in libext2fs in e2fsprogs before 1.40.3 allow user-assisted remote attackers to execute arbitrary code via a crafted filesystem image.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5497"/>
        <description>Multiple integer overflows in libext2fs in e2fsprogs before 1.40.3 allow user-assisted remote attackers to execute arbitrary code via a crafted filesystem image.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:10.320-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:00.790-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:15.650-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10399 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:43.742-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:20.112-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="e2fsprogs is earlier than 0:1.32-15.4" test_ref="oval:org.mitre.oval:tst:35882"/>
            <criterion comment="e2fsprogs-devel is earlier than 0:1.32-15.4" test_ref="oval:org.mitre.oval:tst:35989"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="e2fsprogs is earlier than 0:1.35-12.11.el4_6.1" test_ref="oval:org.mitre.oval:tst:35445"/>
            <criterion comment="e2fsprogs-devel is earlier than 0:1.35-12.11.el4_6.1" test_ref="oval:org.mitre.oval:tst:35686"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="e2fsprogs is earlier than 0:1.39-10.el5_1.1" test_ref="oval:org.mitre.oval:tst:35816"/>
            <criterion comment="e2fsprogs-libs is earlier than 0:1.39-10.el5_1.1" test_ref="oval:org.mitre.oval:tst:35924"/>
            <criterion comment="e2fsprogs-devel is earlier than 0:1.39-10.el5_1.1" test_ref="oval:org.mitre.oval:tst:35745"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10398" version="5" class="vulnerability">
      <metadata>
        <title>lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1268"/>
        <description>lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:16.634-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:03:00.517-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:15.336-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10398 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:34.175-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:19.670-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.22" test_ref="oval:org.mitre.oval:tst:30882"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.22" test_ref="oval:org.mitre.oval:tst:31108"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.22" test_ref="oval:org.mitre.oval:tst:31170"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.6" test_ref="oval:org.mitre.oval:tst:30919"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.6" test_ref="oval:org.mitre.oval:tst:31056"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.6" test_ref="oval:org.mitre.oval:tst:31093"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10397" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of service (access violation and crash), and possibly execute arbitrary code, by calling InstallVersion.compareTo with an object instead of a string.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2265"/>
        <description>Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of service (access violation and crash), and possibly execute arbitrary code, by calling InstallVersion.compareTo with an object instead of a string.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:48.213-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:59.979-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:14.761-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10397 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:48.831-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:19.016-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32142"/>
            <criterion comment="mozilla is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32131"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32154"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32001"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32171"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32162"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31782"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32041"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32004"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31353"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32120"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.6" test_ref="oval:org.mitre.oval:tst:31633"/>
            <criterion comment="mozilla is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31837"/>
            <criterion comment="thunderbird is earlier than 0:1.0.6-1.4.1" test_ref="oval:org.mitre.oval:tst:32113"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32100"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31821"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31904"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.6" test_ref="oval:org.mitre.oval:tst:31814"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31951"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31554"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32149"/>
            <criterion comment="firefox is earlier than 0:1.0.6-1.4.1" test_ref="oval:org.mitre.oval:tst:32167"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31998"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32061"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10396" version="5" class="vulnerability">
      <metadata>
        <title>The md driver (drivers/md/md.c) in the Linux kernel before 2.6.30.2 might allow local users to cause a denial of service (NULL pointer dereference) via vectors related to "suspend_* sysfs attributes" and the (1) suspend_lo_store or (2) suspend_hi_store functions.  NOTE: this is only a vulnerability when sysfs is writable by an attacker.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2849" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2849"/>
        <description>The md driver (drivers/md/md.c) in the Linux kernel before 2.6.30.2 might allow local users to cause a denial of service (NULL pointer dereference) via vectors related to "suspend_* sysfs attributes" and the (1) suspend_lo_store or (2) suspend_hi_store functions.  NOTE: this is only a vulnerability when sysfs is writable by an attacker.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:33.965-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:59.659-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:14.297-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10396 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:08.082-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:18.593-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.2.1.el5" test_ref="oval:org.mitre.oval:tst:39257"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-164.2.1.el5" test_ref="oval:org.mitre.oval:tst:39429"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-164.2.1.el5" test_ref="oval:org.mitre.oval:tst:39473"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-164.2.1.el5" test_ref="oval:org.mitre.oval:tst:39399"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.2.1.el5" test_ref="oval:org.mitre.oval:tst:39233"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.2.1.el5" test_ref="oval:org.mitre.oval:tst:39260"/>
          <criterion comment="kernel is earlier than 0:2.6.18-164.2.1.el5" test_ref="oval:org.mitre.oval:tst:39203"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.2.1.el5" test_ref="oval:org.mitre.oval:tst:39426"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-164.2.1.el5" test_ref="oval:org.mitre.oval:tst:39421"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.2.1.el5" test_ref="oval:org.mitre.oval:tst:39269"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.2.1.el5" test_ref="oval:org.mitre.oval:tst:39391"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-164.2.1.el5" test_ref="oval:org.mitre.oval:tst:39000"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10395" version="5" class="vulnerability">
      <metadata>
        <title>The tcf_fill_node function in net/sched/cls_api.c in the netlink subsystem in the Linux kernel 2.6.x before 2.6.32-rc5, and 2.4.37.6 and earlier, does not initialize a certain tcm__pad2 structure member, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors.  NOTE: this issue exists because of an incomplete fix for CVE-2005-4881.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3612" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3612"/>
        <description>The tcf_fill_node function in net/sched/cls_api.c in the netlink subsystem in the Linux kernel 2.6.x before 2.6.32-rc5, and 2.4.37.6 and earlier, does not initialize a certain tcm__pad2 structure member, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors.  NOTE: this issue exists because of an incomplete fix for CVE-2005-4881.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:04.451-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:59.176-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:13.754-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10395 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:36:28.750-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:17.885-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:39477"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:38676"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:39556"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:39526"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:38895"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:39250"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:39485"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:39492"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:39608"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:39456"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.15.EL" test_ref="oval:org.mitre.oval:tst:39277"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39674"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39635"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39630"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39766"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39742"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39295"/>
            <criterion comment="kernel is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:38900"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39772"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39784"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39625"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39731"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-164.9.1.el5" test_ref="oval:org.mitre.oval:tst:39509"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10394" version="5" class="vulnerability">
      <metadata>
        <title>The Linux kernel 2.6.20 and 2.6.21 does not properly handle an invalid LDT segment selector in %cs (the xcs field) during ptrace single-step operations, which allows local users to cause a denial of service (NULL dereference and OOPS) via certain code that makes ptrace PTRACE_SETREGS and PTRACE_SINGLESTEP requests, related to the TRACE_IRQS_ON function, and possibly related to the arch_ptrace function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3731" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3731"/>
        <description>The Linux kernel 2.6.20 and 2.6.21 does not properly handle an invalid LDT segment selector in %cs (the xcs field) during ptrace single-step operations, which allows local users to cause a denial of service (NULL dereference and OOPS) via certain code that makes ptrace PTRACE_SETREGS and PTRACE_SINGLESTEP requests, related to the TRACE_IRQS_ON function, and possibly related to the arch_ptrace function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:46.488-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:58.822-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:13.407-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10394 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:47:07.168-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:17.470-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35330"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35339"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35337"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35227"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35043"/>
          <criterion comment="kernel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35276"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:34448"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35366"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35208"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35326"/>
          <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35345"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10393" version="5" class="vulnerability">
      <metadata>
        <title>The REXML module in Ruby 1.8.6 through 1.8.6-p287, 1.8.7 through 1.8.7-p72, and 1.9 allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML document with recursively nested entities, aka an "XML entity explosion."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3790" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3790"/>
        <description>The REXML module in Ruby 1.8.6 through 1.8.6-p287, 1.8.7 through 1.8.7-p72, and 1.9 allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML document with recursively nested entities, aka an "XML entity explosion."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:12.881-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:58.440-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:12.936-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10393 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:36:05.658-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:16.883-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37462"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37630"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:36810"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:36902"/>
            <criterion comment="ruby is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37678"/>
            <criterion comment="irb is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37674"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37720"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-ri is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37735"/>
            <criterion comment="ruby-mode is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37344"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37697"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37273"/>
            <criterion comment="ruby is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37563"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37438"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37757"/>
            <criterion comment="ruby-irb is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37463"/>
            <criterion comment="ruby-rdoc is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37172"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10392" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the March 2010 CPU.  Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow that allows arbitrary code execution via a crafted image.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0847"/>
        <description>Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the March 2010 CPU.  Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow that allows arbitrary code execution via a crafted image.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:47.133-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:58.209-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:12.667-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10392 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:47:17.067-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:16.550-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39831"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39445"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40225"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40023"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40307"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10391" version="5" class="vulnerability">
      <metadata>
        <title>Array index error in the make_table function in unlzh.c in the LZH decompression component in gzip 1.3.5, when running on certain platforms, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted GZIP archive that triggers an out-of-bounds write, aka a "stack modification vulnerability."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4335" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4335"/>
        <description>Array index error in the make_table function in unlzh.c in the LZH decompression component in gzip 1.3.5, when running on certain platforms, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted GZIP archive that triggers an out-of-bounds write, aka a "stack modification vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:21.294-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:57.951-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:12.421-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10391 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:44.479-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:15.938-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gzip is earlier than 0:1.3.3-13.rhel3" test_ref="oval:org.mitre.oval:tst:32961"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gzip is earlier than 0:1.3.3-16.rhel4" test_ref="oval:org.mitre.oval:tst:32979"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10390" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to execute arbitrary JavaScript with chrome privileges via vectors involving an object, the FeedWriter, and the BrowserFeedWriter.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3079"/>
        <description>Unspecified vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to execute arbitrary JavaScript with chrome privileges via vectors involving an object, the FeedWriter, and the BrowserFeedWriter.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:07.433-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:57.652-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:12.086-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10390 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:36:32.340-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:15.471-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nspr is earlier than 0:4.7.5-1.el4_8" test_ref="oval:org.mitre.oval:tst:39088"/>
            <criterion comment="firefox is earlier than 0:3.0.14-1.el4" test_ref="oval:org.mitre.oval:tst:39195"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.5-1.el4_8" test_ref="oval:org.mitre.oval:tst:39351"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39208"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39001"/>
            <criterion comment="nspr is earlier than 0:4.7.5-1.el5_4" test_ref="oval:org.mitre.oval:tst:39223"/>
            <criterion comment="firefox is earlier than 0:3.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39097"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.5-1.el5_4" test_ref="oval:org.mitre.oval:tst:39150"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39206"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1039" version="1" class="vulnerability" deprecated="true">
      <metadata>
        <title>Microsoft Data Access Components SQL-DMO Buffer Overflow (Test 3)</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Data Access Components 2.7</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0353"/>
        <description>Buffer overflow in a component of SQL-DMO for Microsoft Data Access Components (MDAC) 2.5 through 2.7 allows remote attackers to execute arbitrary code via a long response to a broadcast request to UDP port 1434.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-04T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <modified date="2004-07-20T12:00:00.000-04:00" comment="Changed patch registry key value to IsInstalled">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2004-07-21T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-08-04T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Deprecating duplicate definition for CVE-2003-0353" date="2010-05-05T12:00:00.000-05:00">
              <contributor organization="Symantec Corporation">Josh Turpin</contributor>
            </modified>
            <status_change date="2010-05-05T12:00:00.000-05:00">DEPRECATED</status_change>
          </dates>
          <status>DEPRECATED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="Affected Microsoft Data Access Components versions">
          <criterion comment="File %windir%\System32\odbcbcp.dll is less than 2000.81.9001.40" test_ref="oval:org.mitre.oval:tst:1260"/>
          <criterion comment="File %windir%\System32\odbcbcp.dll is less than 2000.81.9041.40" test_ref="oval:org.mitre.oval:tst:1259"/>
          <criterion comment="DataAccess Installed" test_ref="oval:org.mitre.oval:tst:1258"/>
        </criteria>
        <criterion comment="Patch Q823718 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:1395"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10389" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the session-restore feature in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19 allows remote attackers to bypass the same origin policy, inject content into documents associated with other domains, and conduct cross-site scripting (XSS) attacks via unknown vectors related to restoration of SessionStore data.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5513"/>
        <description>Unspecified vulnerability in the session-restore feature in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19 allows remote attackers to bypass the same origin policy, inject content into documents associated with other domains, and conduct cross-site scripting (XSS) attacks via unknown vectors related to restoration of SessionStore data.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:55.767-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:56.961-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:11.352-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10389 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:57.626-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:14.578-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38137"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37886"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37999"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37907"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37709"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38092"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37745"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38039"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38062"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38073"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nspr is earlier than 0:4.7.3-1.el4" test_ref="oval:org.mitre.oval:tst:37574"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:38071"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-1.el4" test_ref="oval:org.mitre.oval:tst:37857"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-18.el4" test_ref="oval:org.mitre.oval:tst:37200"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.3-1.el4" test_ref="oval:org.mitre.oval:tst:37918"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37812"/>
            <criterion comment="firefox is earlier than 0:3.0.5-1.el4" test_ref="oval:org.mitre.oval:tst:38080"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-1.el4" test_ref="oval:org.mitre.oval:tst:37139"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37869"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37789"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37395"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:38118"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:38072"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38037"/>
            <criterion comment="nspr is earlier than 0:4.7.3-2.el5" test_ref="oval:org.mitre.oval:tst:37420"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37854"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.19-1.el5_2" test_ref="oval:org.mitre.oval:tst:38053"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.3-2.el5" test_ref="oval:org.mitre.oval:tst:37419"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38083"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:37631"/>
            <criterion comment="firefox is earlier than 0:3.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38114"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37737"/>
            <criterion comment="nss-tools is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37403"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10388" version="5" class="vulnerability">
      <metadata>
        <title>The clip_mkip function in net/atm/clip.c of the ATM subsystem in Linux kernel allows remote attackers to cause a denial of service (panic) via unknown vectors that cause the ATM subsystem to access the memory of socket buffers after they are freed (freed pointer dereference).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4997" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4997"/>
        <description>The clip_mkip function in net/atm/clip.c of the ATM subsystem in Linux kernel allows remote attackers to cause a denial of service (panic) via unknown vectors that cause the ATM subsystem to access the memory of socket buffers after they are freed (freed pointer dereference).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:25.832-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:56.530-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:10.845-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10388 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:35.408-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:13.905-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33074"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:32633"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33103"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33001"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:32937"/>
            <criterion comment="kernel is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:32280"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33127"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:32855"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:org.mitre.oval:tst:33021"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32678"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32900"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:33014"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32947"/>
            <criterion comment="kernel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32944"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32956"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32602"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:33081"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32892"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10387" version="3" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the Java Runtime Environment (JRE) Applet Class Loader in Sun JDK and JRE 5.0 Update 11 and earlier, 6 through 6 Update 1, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to violate the security model for an applet's outbound connections by connecting to certain localhost services running on the machine that loaded the applet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3922" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3922"/>
        <description>Unspecified vulnerability in the Java Runtime Environment (JRE) Applet Class Loader in Sun JDK and JRE 5.0 Update 11 and earlier, 6 through 6 Update 1, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to violate the security model for an applet's outbound connections by connecting to certain localhost services running on the machine that loaded the applet.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:32:05.867-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:56.091-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:10.375-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34859"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34890"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34613"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.12-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34910"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35015"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.12-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34327"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34956"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.12-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34363"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.12-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35033"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.12-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34884"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35062"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34949"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.12-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35121"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34825"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34270"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34724"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:35124"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34955"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34692"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:35140"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10386" version="5" class="vulnerability">
      <metadata>
        <title>The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus method.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1125" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1125"/>
        <description>The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus method.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:37.218-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:55.664-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:09.906-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10386 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:00.643-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:13.363-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.6.4-8.el4" test_ref="oval:org.mitre.oval:tst:40755"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gnome-python2-extras is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40435"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-21.el5" test_ref="oval:org.mitre.oval:tst:40552"/>
            <criterion comment="gnome-python2-libegg is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40721"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.2.4-10.el5" test_ref="oval:org.mitre.oval:tst:40480"/>
            <criterion comment="gnome-python2-gtkhtml2 is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40813"/>
            <criterion comment="totem is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40749"/>
            <criterion comment="xulrunner is earlier than 0:1.9.2.4-10.el5" test_ref="oval:org.mitre.oval:tst:40221"/>
            <criterion comment="gnome-python2-gtkspell is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40385"/>
            <criterion comment="yelp is earlier than 0:2.16.0-26.el5" test_ref="oval:org.mitre.oval:tst:40828"/>
            <criterion comment="devhelp is earlier than 0:0.12-21.el5" test_ref="oval:org.mitre.oval:tst:40814"/>
            <criterion comment="firefox is earlier than 0:3.6.4-8.el5" test_ref="oval:org.mitre.oval:tst:40524"/>
            <criterion comment="totem-mozplugin is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40620"/>
            <criterion comment="gnome-python2-gtkmozembed is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40722"/>
            <criterion comment="esc is earlier than 0:1.1.0-12.el5" test_ref="oval:org.mitre.oval:tst:40273"/>
            <criterion comment="totem-devel is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40637"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10385" version="5" class="vulnerability">
      <metadata>
        <title>The JavaScript engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via (1) a large switch statement, (2) certain uses of watch and eval, (3) certain uses of the mousedown event listener, and other vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0413" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0413"/>
        <description>The JavaScript engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via (1) a large switch statement, (2) certain uses of watch and eval, (3) certain uses of the mousedown event listener, and other vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:27.856-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:55.145-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:09.331-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10385 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:17.965-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:12.441-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36256"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36236"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:35996"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36279"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36046"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36052"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36034"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36284"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:35748"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:35994"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36164"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36050"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-8.el4" test_ref="oval:org.mitre.oval:tst:36202"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36193"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36093"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36053"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.10.el4" test_ref="oval:org.mitre.oval:tst:35919"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:35600"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36141"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:35397"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:35684"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36203"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-9.el5" test_ref="oval:org.mitre.oval:tst:36281"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-9.el5" test_ref="oval:org.mitre.oval:tst:35480"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-8.el5" test_ref="oval:org.mitre.oval:tst:35675"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10384" version="5" class="vulnerability">
      <metadata>
        <title>The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in directory or location context, allows remote clients to bypass intended restrictions by using any cipher suite that is allowed by the virtual host configuration.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0885" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0885"/>
        <description>The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in directory or location context, allows remote clients to bypass intended restrictions by using any cipher suite that is allowed by the virtual host configuration.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:51.568-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:54.887-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:08.992-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10384 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:58.676-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:12.147-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="httpd-devel is earlier than 0:2.0.46-44.ent" test_ref="oval:org.mitre.oval:tst:30849"/>
          <criterion comment="mod_ssl is earlier than 1:2.0.46-44.ent" test_ref="oval:org.mitre.oval:tst:30832"/>
          <criterion comment="httpd is earlier than 0:2.0.46-44.ent" test_ref="oval:org.mitre.oval:tst:30989"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10383" version="5" class="vulnerability">
      <metadata>
        <title>Directory traversal vulnerability in CIFS in Linux 2.6.16 and earlier allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences, a similar vulnerability to CVE-2006-1864.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1863" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1863"/>
        <description>Directory traversal vulnerability in CIFS in Linux 2.6.16 and earlier allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences, a similar vulnerability to CVE-2006-1864.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:17.800-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:54.587-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:08.662-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10383 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:36.236-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:11.667-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-xenU is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30189"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30542"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30504"/>
          <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30169"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:29589"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30432"/>
          <criterion comment="kernel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:29669"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30424"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30299"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30268"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30561"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10382" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, allows remote attackers to hijack the authentication of administrators for requests that change settings.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0540" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0540"/>
        <description>Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, allows remote attackers to hijack the authentication of administrators for requests that change settings.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:44.260-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:54.234-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:08.284-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10382 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:25.774-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:11.142-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.65" test_ref="oval:org.mitre.oval:tst:40547"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.65" test_ref="oval:org.mitre.oval:tst:40758"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.65" test_ref="oval:org.mitre.oval:tst:40348"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.32.el4_8.6" test_ref="oval:org.mitre.oval:tst:40606"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.32.el4_8.6" test_ref="oval:org.mitre.oval:tst:40609"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.32.el4_8.6" test_ref="oval:org.mitre.oval:tst:40697"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-lpd is earlier than 1:1.3.7-18.el5_5.4" test_ref="oval:org.mitre.oval:tst:40805"/>
            <criterion comment="cups-devel is earlier than 1:1.3.7-18.el5_5.4" test_ref="oval:org.mitre.oval:tst:40819"/>
            <criterion comment="cups is earlier than 1:1.3.7-18.el5_5.4" test_ref="oval:org.mitre.oval:tst:40803"/>
            <criterion comment="cups-libs is earlier than 1:1.3.7-18.el5_5.4" test_ref="oval:org.mitre.oval:tst:40393"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10381" version="5" class="vulnerability">
      <metadata>
        <title>The Java Management Extensions (JMX) implementation in Sun Java SE 6 before Update 15, and OpenJDK, does not properly enforce OpenType checks, which allows context-dependent attackers to bypass intended access restrictions by leveraging finalizer resurrection to obtain a reference to a privileged object.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2476" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2476"/>
        <description>The Java Management Extensions (JMX) implementation in Sun Java SE 6 before Update 15, and OpenJDK, does not properly enforce OpenType checks, which allows context-dependent attackers to bypass intended access restrictions by leveraging finalizer resurrection to obtain a reference to a privileged object.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:11.850-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:53.968-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:07.982-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10381 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:42.186-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:10.757-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38942"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38825"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38972"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38267"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:39037"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10380" version="5" class="vulnerability">
      <metadata>
        <title>Xen 3.1.1 does not prevent modification of the CR4 TSC from applications, which allows pv guests to cause a denial of service (crash).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5907" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5907"/>
        <description>Xen 3.1.1 does not prevent modification of the CR4 TSC from applications, which allows pv guests to cause a denial of service (crash).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:24.640-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:53.653-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:07.629-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10380 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:35.747-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:10.323-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37778"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37855"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37870"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37881"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37504"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37738"/>
          <criterion comment="kernel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37774"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37247"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37715"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37954"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37668"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-92.1.18.el5" test_ref="oval:org.mitre.oval:tst:37947"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1038" version="1" class="vulnerability">
      <metadata>
        <title>RHE3 Fetchmail Buffer Overflow via Long UIDL Responses</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>fetchmail</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2335" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2335"/>
        <description>Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service and possibly execute arbitrary code via long UIDL responses.  NOTE: a typo in an advisory accidentally used the wrong CVE identifier for the Fetchmail issue. This is the correct identifier.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-15T04:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2005-08-19T10:05:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2483"/>
          <criterion comment="fetchmail RPM older than 0:6.2.0-3.el3.1" negate="false" test_ref="oval:org.mitre.oval:tst:1262"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="/usr/bin/fetchmail is executable by any user" negate="false" test_ref="oval:org.mitre.oval:tst:1261"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10378" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform cross-domain scripting and possibly execute arbitrary code by convincing a user to drag and drop javascript: links to a frame or page in another domain.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0905" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0905"/>
        <description>Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform cross-domain scripting and possibly execute arbitrary code by convincing a user to drag and drop javascript: links to a frame or page in another domain.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:29.983-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:53.111-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:06.981-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10378 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:27.576-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:09.903-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mozilla-js-debugger is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30915"/>
          <criterion comment="mozilla is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30964"/>
          <criterion comment="mozilla-chat is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30905"/>
          <criterion comment="mozilla-mail is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30635"/>
          <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:31000"/>
          <criterion comment="mozilla-devel is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30111"/>
          <criterion comment="mozilla-nss is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30762"/>
          <criterion comment="mozilla-nss-devel is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:31048"/>
          <criterion comment="mozilla-nspr is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30856"/>
          <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.3-3.0.4" test_ref="oval:org.mitre.oval:tst:30834"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10377" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the imap_mail_compose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5, allows remote attackers to execute arbitrary code via a long boundary string in a type.parameters field. NOTE: as of 20070411, it appears that this issue might be subsumed by CVE-2007-0906.3.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1825" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1825"/>
        <description>Buffer overflow in the imap_mail_compose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5, allows remote attackers to execute arbitrary code via a long boundary string in a type.parameters field. NOTE: as of 20070411, it appears that this issue might be subsumed by CVE-2007-0906.3.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:57.198-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:52.272-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:06.202-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10377 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:16.320-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:08.964-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33459"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33371"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33748"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33090"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33419"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33665"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-39.ent" test_ref="oval:org.mitre.oval:tst:33475"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33282"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33636"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33548"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33156"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33407"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33562"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33500"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33725"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33105"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33501"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33691"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33662"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33087"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.3" test_ref="oval:org.mitre.oval:tst:33640"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:32784"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33240"/>
            <criterion comment="php-common is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33527"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33617"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33561"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33385"/>
            <criterion comment="php is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33615"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33526"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33747"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33735"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33403"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33686"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33502"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33666"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33508"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33652"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33676"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33784"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-7.el5" test_ref="oval:org.mitre.oval:tst:33706"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10376" version="5" class="vulnerability">
      <metadata>
        <title>The ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive access rights, which allows attackers to bypass intended access restrictions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4577" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4577"/>
        <description>The ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive access rights, which allows attackers to bypass intended access restrictions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:31.002-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:52.057-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:05.933-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10376 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:09.859-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:08.663-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="dovecot is earlier than 0:1.0.7-7.el5" test_ref="oval:org.mitre.oval:tst:38149"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10375" version="5" class="vulnerability">
      <metadata>
        <title>The Winbind nss_info extension (nsswitch/idmap_ad.c) in idmap_ad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the (1) RFC2307 or (2) Services for UNIX (SFU) primary group attribute is not defined.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4138" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4138"/>
        <description>The Winbind nss_info extension (nsswitch/idmap_ad.c) in idmap_ad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the (1) RFC2307 or (2) Services for UNIX (SFU) primary group attribute is not defined.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:51.716-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:51.560-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:05.622-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10375 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:28.121-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:08.215-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.25b-1.el4_6.2" test_ref="oval:org.mitre.oval:tst:35587"/>
            <criterion comment="samba-swat is earlier than 0:3.0.25b-1.el4_6.2" test_ref="oval:org.mitre.oval:tst:35430"/>
            <criterion comment="samba-client is earlier than 0:3.0.25b-1.el4_6.2" test_ref="oval:org.mitre.oval:tst:35567"/>
            <criterion comment="samba is earlier than 0:3.0.25b-1.el4_6.2" test_ref="oval:org.mitre.oval:tst:35285"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.25b-1.el5_1.2" test_ref="oval:org.mitre.oval:tst:34598"/>
            <criterion comment="samba-swat is earlier than 0:3.0.25b-1.el5_1.2" test_ref="oval:org.mitre.oval:tst:35588"/>
            <criterion comment="samba-client is earlier than 0:3.0.25b-1.el5_1.2" test_ref="oval:org.mitre.oval:tst:35579"/>
            <criterion comment="samba is earlier than 0:3.0.25b-1.el5_1.2" test_ref="oval:org.mitre.oval:tst:35226"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10374" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code via script that changes the standard Object() constructor to return a reference to a privileged object and calling "named JavaScript functions" that use the constructor.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3807" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3807"/>
        <description>Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code via script that changes the standard Object() constructor to return a reference to a privileged object and calling "named JavaScript functions" that use the constructor.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:35.686-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:50.995-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:05.106-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10374 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:09.286-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:07.556-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32342"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32877"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:31982"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32816"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32080"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32904"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32915"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32924"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32822"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32555"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32873"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32693"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32886"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32810"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32418"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32496"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32929"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32777"/>
            <criterion comment="firefox is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32896"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32722"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32906"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32905"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32925"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32624"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10373" version="5" class="vulnerability">
      <metadata>
        <title>The SCTP-netfilter code in Linux kernel before 2.6.16.13 allows remote attackers to trigger a denial of service (infinite loop) via unknown vectors that cause an invalid SCTP chunk size to be processed by the for_each_sctp_chunk function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1527" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1527"/>
        <description>The SCTP-netfilter code in Linux kernel before 2.6.16.13 allows remote attackers to trigger a denial of service (infinite loop) via unknown vectors that cause an invalid SCTP chunk size to be processed by the for_each_sctp_chunk function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:36.825-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:50.688-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:04.756-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10373 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:32.604-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:07.013-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32235"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32371"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32703"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32314"/>
          <criterion comment="kernel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32614"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32295"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32310"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32611"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32305"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10372" version="5" class="vulnerability">
      <metadata>
        <title>The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6427" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6427"/>
        <description>The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:11.391-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:49.680-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:03.620-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10372 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:50.220-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:05.760-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35923"/>
            <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35665"/>
            <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:36014"/>
            <criterion comment="XFree86-libs is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35929"/>
            <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:36011"/>
            <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35836"/>
            <criterion comment="XFree86-twm is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35726"/>
            <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35715"/>
            <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35610"/>
            <criterion comment="XFree86-doc is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:36025"/>
            <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35789"/>
            <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35804"/>
            <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35865"/>
            <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35793"/>
            <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35903"/>
            <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35965"/>
            <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35922"/>
            <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35504"/>
            <criterion comment="XFree86-xdm is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35045"/>
            <criterion comment="XFree86-sdk is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35914"/>
            <criterion comment="XFree86 is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35831"/>
            <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35998"/>
            <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35975"/>
            <criterion comment="XFree86-xfs is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:36031"/>
            <criterion comment="XFree86-tools is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35971"/>
            <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35711"/>
            <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35933"/>
            <criterion comment="XFree86-xauth is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35826"/>
            <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35753"/>
            <criterion comment="XFree86-devel is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35678"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35795"/>
            <criterion comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35934"/>
            <criterion comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35467"/>
            <criterion comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35946"/>
            <criterion comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36116"/>
            <criterion comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35116"/>
            <criterion comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36004"/>
            <criterion comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35483"/>
            <criterion comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36103"/>
            <criterion comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36060"/>
            <criterion comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36074"/>
            <criterion comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35895"/>
            <criterion comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35905"/>
            <criterion comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36012"/>
            <criterion comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35984"/>
            <criterion comment="xorg-x11 is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35857"/>
            <criterion comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35681"/>
            <criterion comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35909"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-server-sdk is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35517"/>
            <criterion comment="xorg-x11-server-Xnest is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35690"/>
            <criterion comment="xorg-x11-server-Xvfb is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35399"/>
            <criterion comment="xorg-x11-server-Xdmx is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35908"/>
            <criterion comment="xorg-x11-server-Xephyr is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35987"/>
            <criterion comment="xorg-x11-server is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35861"/>
            <criterion comment="xorg-x11-server-Xorg is earlier than 0:1.1.1-48.26.el5_1.5" test_ref="oval:org.mitre.oval:tst:35935"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10371" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the random number generator (RNG) implementation in the Linux kernel before 2.6.22 might allow local root users to cause a denial of service or gain privileges by setting the default wakeup threshold to a value greater than the output pool size, which triggers writing random numbers to the stack by the pool transfer function involving "bound check ordering".  NOTE: this issue might only cross privilege boundaries in environments that have granular assignment of privileges for root.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3105" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3105"/>
        <description>Stack-based buffer overflow in the random number generator (RNG) implementation in the Linux kernel before 2.6.22 might allow local root users to cause a denial of service or gain privileges by setting the default wakeup threshold to a value greater than the output pool size, which triggers writing random numbers to the stack by the pool transfer function involving "bound check ordering".  NOTE: this issue might only cross privilege boundaries in environments that have granular assignment of privileges for root.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:34.644-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:48.834-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:03.119-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10371 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:36:33.692-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:05.114-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34864"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35017"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35145"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34442"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35258"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35254"/>
            <criterion comment="kernel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35373"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34480"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34911"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34923"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35327"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35330"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35339"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35337"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35227"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35043"/>
            <criterion comment="kernel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35276"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:34448"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35366"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35208"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35326"/>
            <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35345"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10370" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in pam_ldap before 180 does not properly handle a new password policy control, which could allow attackers to gain privileges.  NOTE: CVE-2005-2497 had also been assigned to this issue, but CVE-2005-2641 is the correct candidate.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2641" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2641"/>
        <description>Unknown vulnerability in pam_ldap before 180 does not properly handle a new password policy control, which could allow attackers to gain privileges.  NOTE: CVE-2005-2497 had also been assigned to this issue, but CVE-2005-2641 is the correct candidate.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:40.695-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:48.563-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:02.793-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10370 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:12.693-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:04.666-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="compat-openldap is earlier than 0:2.1.30-4" test_ref="oval:org.mitre.oval:tst:32065"/>
          <criterion comment="openldap-devel is earlier than 0:2.2.13-4" test_ref="oval:org.mitre.oval:tst:32089"/>
          <criterion comment="openldap-clients is earlier than 0:2.2.13-4" test_ref="oval:org.mitre.oval:tst:31874"/>
          <criterion comment="nss_ldap is earlier than 0:226-10" test_ref="oval:org.mitre.oval:tst:31977"/>
          <criterion comment="openldap is earlier than 0:2.2.13-4" test_ref="oval:org.mitre.oval:tst:31301"/>
          <criterion comment="openldap-servers-sql is earlier than 0:2.2.13-4" test_ref="oval:org.mitre.oval:tst:32188"/>
          <criterion comment="openldap-servers is earlier than 0:2.2.13-4" test_ref="oval:org.mitre.oval:tst:32059"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1037" version="3" class="vulnerability">
      <metadata>
        <title>Mozilla Privilege Escalation via XBL.method.eval</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1735" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1735"/>
        <description>Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to execute arbitrary code by using an eval in an XBL method binding (XBL.method.eval) to create Javascript functions that are compiled with extra privileges.</description>
        <oval_repository>
          <dates>
            <submitted date="2006-05-07T09:05:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2006-05-10T08:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2006-05-31T09:45:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:15:10.798-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:1133" date="2007-02-26T08:08:00.208-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-26T08:09:15.419-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:1135" date="2007-02-26T08:21:00.993-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:1136" date="2007-02-26T08:24:00.848-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:1138" date="2007-02-26T08:25:00.405-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:2283" date="2007-02-26T08:29:00.407-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:2284" date="2007-02-26T08:30:00.724-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:39.048-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:881" date="2007-04-23T12:05:00.811-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:12:53.554-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:882" date="2007-04-23T12:05:00.939-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:883" date="2007-04-23T12:05:00.804-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:1385" date="2007-04-23T12:05:00.430-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:50.515-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.7 or earlier is installed">
          <criterion comment="Mozilla Firefox version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1268"/>
          <criterion comment="Firefox version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1267"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Thunderbird version 1.0.7 or earlier is installed">
          <criterion comment="Mozilla Thunderbird version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1266"/>
          <criterion comment="Mozilla Thunderbird version 1.0.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1265"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.12 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.12 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1264"/>
          <criterion comment="Mozilla Suite version 1.7.12 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1263"/>
        </criteria>
        <criteria operator="AND" comment="A pre-release of SeaMonkey 1.0 is installed">
          <criterion comment="A pre-release of SeaMonkey 1.0 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2439"/>
          <criterion comment="A pre-release of SeaMonkey 1.0 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2438"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10369" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox before 3.0.12, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors that trigger buffer overflows.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2463" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2463"/>
        <description>Multiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox before 3.0.12, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors that trigger buffer overflows.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:56.107-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:47.963-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:02.243-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10369 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:41.719-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:03.934-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38881"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38851"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38690"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38366"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38475"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38924"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38923"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38918"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38811"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38644"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-45.el4_8" test_ref="oval:org.mitre.oval:tst:38772"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-25.el4" test_ref="oval:org.mitre.oval:tst:40299"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-45.el4_8" test_ref="oval:org.mitre.oval:tst:37948"/>
            <criterion comment="firefox is earlier than 0:3.0.12-1.el4" test_ref="oval:org.mitre.oval:tst:38809"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-45.el4_8" test_ref="oval:org.mitre.oval:tst:38947"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-45.el4_8" test_ref="oval:org.mitre.oval:tst:38194"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-45.el4_8" test_ref="oval:org.mitre.oval:tst:38876"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-45.el4_8" test_ref="oval:org.mitre.oval:tst:38504"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38249"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38575"/>
            <criterion comment="firefox is earlier than 0:3.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38853"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.24-2.el5_4" test_ref="oval:org.mitre.oval:tst:40249"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38563"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10368" version="5" class="vulnerability">
      <metadata>
        <title>Gaim before 1.3.1 allows remote attackers to cause a denial of service (crash) via a malformed MSN message that leads to a memory allocation of a large size, possibly due to an integer signedness error.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1934" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1934"/>
        <description>Gaim before 1.3.1 allows remote attackers to cause a denial of service (crash) via a malformed MSN message that leads to a memory allocation of a large size, possibly due to an integer signedness error.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:09.703-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:47.721-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:01.929-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10368 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:44.350-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:03.566-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gaim is earlier than 1:1.3.1-0.el3" test_ref="oval:org.mitre.oval:tst:31762"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gaim is earlier than 1:1.3.1-0.el4" test_ref="oval:org.mitre.oval:tst:31939"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10367" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the JavaScript engine in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 might allow remote attackers to execute arbitrary code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2705" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2705"/>
        <description>Integer overflow in the JavaScript engine in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 might allow remote attackers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:58.393-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:47.197-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:01.394-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10367 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:55.121-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:02.873-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32169"/>
            <criterion comment="mozilla is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:31729"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32242"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32151"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32014"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32144"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32068"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32248"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32293"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.12-1.1.3.2" test_ref="oval:org.mitre.oval:tst:32044"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32244"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.7" test_ref="oval:org.mitre.oval:tst:32012"/>
            <criterion comment="mozilla is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:31897"/>
            <criterion comment="thunderbird is earlier than 0:1.0.7-1.4.1" test_ref="oval:org.mitre.oval:tst:31477"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32300"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32226"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32289"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.7" test_ref="oval:org.mitre.oval:tst:32170"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32150"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32302"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32090"/>
            <criterion comment="firefox is earlier than 0:1.0.7-1.4.1" test_ref="oval:org.mitre.oval:tst:32147"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32209"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.12-1.4.1" test_ref="oval:org.mitre.oval:tst:32088"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10366" version="5" class="vulnerability">
      <metadata>
        <title>A certain Red Hat patch for SquirrelMail 1.4.8 sets the same SQMSESSID cookie value for all sessions, which allows remote authenticated users to access other users' folder lists and configuration data in opportunistic circumstances by using the standard webmail.php interface.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-3663.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0030" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0030"/>
        <description>A certain Red Hat patch for SquirrelMail 1.4.8 sets the same SQMSESSID cookie value for all sessions, which allows remote authenticated users to access other users' folder lists and configuration data in opportunistic circumstances by using the standard webmail.php interface.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-3663.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:21.433-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:46.863-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:01.086-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10366 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:37.298-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:02.433-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-9.el3" test_ref="oval:org.mitre.oval:tst:37673"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-5.el4_7.3" test_ref="oval:org.mitre.oval:tst:38208"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:38252"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10365" version="5" class="vulnerability">
      <metadata>
        <title>The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0542" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0542"/>
        <description>The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:39.171-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:46.483-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:00.663-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10365 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:22.499-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:01.833-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.65" test_ref="oval:org.mitre.oval:tst:40547"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.65" test_ref="oval:org.mitre.oval:tst:40758"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.65" test_ref="oval:org.mitre.oval:tst:40348"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.32.el4_8.6" test_ref="oval:org.mitre.oval:tst:40606"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.32.el4_8.6" test_ref="oval:org.mitre.oval:tst:40609"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.32.el4_8.6" test_ref="oval:org.mitre.oval:tst:40697"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-lpd is earlier than 1:1.3.7-18.el5_5.4" test_ref="oval:org.mitre.oval:tst:40805"/>
            <criterion comment="cups-devel is earlier than 1:1.3.7-18.el5_5.4" test_ref="oval:org.mitre.oval:tst:40819"/>
            <criterion comment="cups is earlier than 1:1.3.7-18.el5_5.4" test_ref="oval:org.mitre.oval:tst:40803"/>
            <criterion comment="cups-libs is earlier than 1:1.3.7-18.el5_5.4" test_ref="oval:org.mitre.oval:tst:40393"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10364" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to gain chrome privileges via multiple attack vectors related to the use of XBL scripts with "Print Preview".</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1727" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1727"/>
        <description>Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to gain chrome privileges via multiple attack vectors related to the use of XBL scripts with "Print Preview".</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:46.572-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:45.893-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:03:00.096-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10364 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:02:09.420-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:01.214-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32663"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32326"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31987"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32451"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32697"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32558"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32427"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32671"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32666"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32561"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32593"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32679"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32133"/>
            <criterion comment="thunderbird is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32204"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32701"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32428"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32557"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32229"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32349"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32644"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32440"/>
            <criterion comment="firefox is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32219"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32598"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32717"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10363" version="5" class="vulnerability">
      <metadata>
        <title>The money_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i and (2) %n tokens, which has unknown impact and attack vectors, possibly related to a format string vulnerability.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4658"/>
        <description>The money_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i and (2) %n tokens, which has unknown impact and attack vectors, possibly related to a format string vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:28.683-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:45.168-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:59.278-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10363 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:00:32.005-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:05:00.247-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35216"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35012"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:34787"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35164"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:34818"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:35171"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-43.ent" test_ref="oval:org.mitre.oval:tst:34820"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35008"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:34796"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35363"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35010"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35249"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:34683"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:34365"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:34976"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35087"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35298"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35289"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35309"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35263"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.9" test_ref="oval:org.mitre.oval:tst:35044"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35279"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34964"/>
            <criterion comment="php-common is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34896"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35084"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35078"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34802"/>
            <criterion comment="php is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35270"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35361"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34769"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35108"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35037"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34943"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34689"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35221"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35077"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34934"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:35170"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34376"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-15.el5" test_ref="oval:org.mitre.oval:tst:34764"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10362" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0 and Mozilla before 1.7.5 display the SSL lock icon when an insecure page loads a binary file from a trusted site, which could facilitate phishing attacks.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0146" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0146"/>
        <description>Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to obtain sensitive data from the clipboard via Javascript that generates a middle-click event on systems for which a middle-click performs a paste operation.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:20.161-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:44.560-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:58.681-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10362 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:52.598-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:59.561-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31283"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31520"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31645"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31516"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31569"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31143"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31512"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31785"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31695"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31626"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:30665"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.3" test_ref="oval:org.mitre.oval:tst:31499"/>
            <criterion comment="mozilla is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31604"/>
            <criterion comment="thunderbird is earlier than 0:1.0-1.1.EL4" test_ref="oval:org.mitre.oval:tst:31099"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31381"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31622"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:30651"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.3" test_ref="oval:org.mitre.oval:tst:31560"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31110"/>
            <criterion comment="evolution is earlier than 0:2.0.2-14" test_ref="oval:org.mitre.oval:tst:31003"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31404"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31375"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31106"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31418"/>
            <criterion comment="evolution-devel is earlier than 0:2.0.2-14" test_ref="oval:org.mitre.oval:tst:31558"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10361" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in the xfig import code (xfig-import.c) in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid (1) color index, (2) number of points, or (3) depth.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1550" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1550"/>
        <description>Multiple buffer overflows in the xfig import code (xfig-import.c) in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid (1) color index, (2) number of points, or (3) depth.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:27.441-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:44.346-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:58.472-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10361 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:35.558-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:59.270-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="dia is earlier than 1:0.94-5.4" test_ref="oval:org.mitre.oval:tst:32664"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10360" version="5" class="vulnerability">
      <metadata>
        <title>The smb_recv_trans2 function call in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets correctly, which could allow remote samba servers to (1) read arbitrary kernel information or (2) raise a counter value to an arbitrary number by sending the first part of the fragmented packet multiple times.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0949" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0949"/>
        <description>The smb_recv_trans2 function call in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets correctly, which could allow remote samba servers to (1) read arbitrary kernel information or (2) raise a counter value to an arbitrary number by sending the first part of the fragmented packet multiple times.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:19.722-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:44.000-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:58.156-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10360 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:38.599-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:58.814-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30934"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30708"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30577"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30874"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30794"/>
          <criterion comment="kernel is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30892"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30873"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:31080"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30866"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1036" version="1" class="vulnerability">
      <metadata>
        <title>Veritas Backup Exec RestrictAnonymous Forced Misconfiguration Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Veritas Backup Exec 8.5</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1117" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1117"/>
        <description>Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-06-15T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-06-30T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2005-04-08T12:00:00.000-04:00" comment="modified wrt-472 - wrt-472 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
          </dates>
          <status>INTERIM</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Software section">
          <criterion comment="Affected bkupexec.exe versions 3.60.1.298" test_ref="oval:org.mitre.oval:tst:1271"/>
          <criterion comment="Veritas Backup Exec 8.5 Installed" test_ref="oval:org.mitre.oval:tst:1270"/>
        </criteria>
        <criteria operator="AND" comment="Configuration section">
          <criterion comment="RestrictAnonymous registry value allows anonymous connections" test_ref="oval:org.mitre.oval:tst:1269"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10359" version="5" class="vulnerability">
      <metadata>
        <title>backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and "shutdown with password" is enabled, allows remote attackers to bypass the password requirement and login to arbitrary accounts via unspecified vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4569" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4569"/>
        <description>backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and "shutdown with password" is enabled, allows remote attackers to bypass the password requirement and login to arbitrary accounts via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:27.265-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:43.738-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:57.830-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10359 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:06.227-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:58.415-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdebase is earlier than 0:3.3.1-6.el4" test_ref="oval:org.mitre.oval:tst:34380"/>
            <criterion comment="kdebase-devel is earlier than 0:3.3.1-6.el4" test_ref="oval:org.mitre.oval:tst:35343"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdebase is earlier than 0:3.5.4-15.el5" test_ref="oval:org.mitre.oval:tst:34844"/>
            <criterion comment="kdebase-devel is earlier than 0:3.5.4-15.el5" test_ref="oval:org.mitre.oval:tst:35321"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10358" version="5" class="vulnerability">
      <metadata>
        <title>The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain sensitive information via a crafted request that triggers access to memory locations associated with an earlier request.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0434" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0434"/>
        <description>The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain sensitive information via a crafted request that triggers access to memory locations associated with an earlier request.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:26.440-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:43.399-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:57.498-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10358 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:07.698-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:57.872-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-suexec is earlier than 0:2.0.52-41.ent.7" test_ref="oval:org.mitre.oval:tst:40037"/>
            <criterion comment="httpd-manual is earlier than 0:2.0.52-41.ent.7" test_ref="oval:org.mitre.oval:tst:39371"/>
            <criterion comment="httpd-devel is earlier than 0:2.0.52-41.ent.7" test_ref="oval:org.mitre.oval:tst:40049"/>
            <criterion comment="mod_ssl is earlier than 0:2.0.52-41.ent.7" test_ref="oval:org.mitre.oval:tst:40285"/>
            <criterion comment="httpd is earlier than 0:2.0.52-41.ent.7" test_ref="oval:org.mitre.oval:tst:39967"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-manual is earlier than 0:2.2.3-31.el5_4.4" test_ref="oval:org.mitre.oval:tst:40344"/>
            <criterion comment="httpd-devel is earlier than 0:2.2.3-31.el5_4.4" test_ref="oval:org.mitre.oval:tst:39553"/>
            <criterion comment="mod_ssl is earlier than 0:2.2.3-31.el5_4.4" test_ref="oval:org.mitre.oval:tst:40118"/>
            <criterion comment="httpd is earlier than 0:2.2.3-31.el5_4.4" test_ref="oval:org.mitre.oval:tst:40311"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10357" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allows remote attackers to execute arbitrary JavaScript bytecode via unspecified vectors involving modification of a Script object while it is executing.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5463" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5463"/>
        <description>Unspecified vulnerability in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allows remote attackers to execute arbitrary JavaScript bytecode via unspecified vectors involving modification of a Script object while it is executing.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:37.123-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:42.801-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:56.898-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10357 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:29:54.674-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:57.245-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:32940"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:33113"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:32275"/>
            <criterion comment="seamonkey is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:33128"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:32259"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:32596"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:33188"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:32780"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:33131"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.6-0.1.el3" test_ref="oval:org.mitre.oval:tst:33022"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.5.el4" test_ref="oval:org.mitre.oval:tst:33198"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33241"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33268"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.8-0.1.el4" test_ref="oval:org.mitre.oval:tst:33216"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:32752"/>
            <criterion comment="seamonkey is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:32536"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:32857"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.5.el4" test_ref="oval:org.mitre.oval:tst:33185"/>
            <criterion comment="firefox is earlier than 0:1.5.0.8-0.1.el4" test_ref="oval:org.mitre.oval:tst:33140"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33088"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33118"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33171"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:32856"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.6-0.1.el4" test_ref="oval:org.mitre.oval:tst:33214"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10356" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in the HP-GL/2-to-PostScript filter in CUPS before 1.3.6 might allow remote attackers to execute arbitrary code via a crafted HP-GL/2 file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0053" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0053"/>
        <description>Multiple buffer overflows in the HP-GL/2-to-PostScript filter in CUPS before 1.3.6 might allow remote attackers to execute arbitrary code via a crafted HP-GL/2 file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:39.645-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:42.434-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:56.504-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10356 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:17.188-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:56.661-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.52" test_ref="oval:org.mitre.oval:tst:36146"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.52" test_ref="oval:org.mitre.oval:tst:36214"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.52" test_ref="oval:org.mitre.oval:tst:36403"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.6" test_ref="oval:org.mitre.oval:tst:36474"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.6" test_ref="oval:org.mitre.oval:tst:35913"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.6" test_ref="oval:org.mitre.oval:tst:36036"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-lpd is earlier than 1:1.2.4-11.14.el5_1.6" test_ref="oval:org.mitre.oval:tst:36593"/>
            <criterion comment="cups-devel is earlier than 1:1.2.4-11.14.el5_1.6" test_ref="oval:org.mitre.oval:tst:36521"/>
            <criterion comment="cups is earlier than 1:1.2.4-11.14.el5_1.6" test_ref="oval:org.mitre.oval:tst:36179"/>
            <criterion comment="cups-libs is earlier than 1:1.2.4-11.14.el5_1.6" test_ref="oval:org.mitre.oval:tst:36567"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10355" version="5" class="vulnerability">
      <metadata>
        <title>The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound.so library, which makes it easier for attackers to execute arbitrary code if there are other vulnerabilities in the library.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0087"/>
        <description>The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound.so library, which makes it easier for attackers to execute arbitrary code if there are other vulnerabilities in the library.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:49.541-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:42.220-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:56.282-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10355 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:54.719-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:56.351-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="alsa-lib-devel is earlier than 0:1.0.6-5.RHEL4" test_ref="oval:org.mitre.oval:tst:31116"/>
          <criterion comment="alsa-lib is earlier than 0:1.0.6-5.RHEL4" test_ref="oval:org.mitre.oval:tst:31240"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10354" version="5" class="vulnerability">
      <metadata>
        <title>SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or virtual users, allows local users to cause a denial of service (corrupt arbitrary files) via a symlink attack on a file that is used by spamd.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2873" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2873"/>
        <description>SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or virtual users, allows local users to cause a denial of service (corrupt arbitrary files) via a symlink attack on a file that is used by spamd.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:10.277-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:41.913-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:55.677-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10354 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:08.898-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:55.945-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="spamassassin is earlier than 0:3.1.9-1.el4" test_ref="oval:org.mitre.oval:tst:33970"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="spamassassin is earlier than 0:3.1.9-1.el5" test_ref="oval:org.mitre.oval:tst:34686"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10353" version="5" class="vulnerability">
      <metadata>
        <title>The delegate code in ImageMagick 6.2.4.5-0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename that is processed by the display command.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-4601" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4601"/>
        <description>The delegate code in ImageMagick 6.2.4.5-0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename that is processed by the display command.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:14.737-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:41.435-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:55.325-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10353 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:11.335-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:55.297-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:5.5.6-18" test_ref="oval:org.mitre.oval:tst:32312"/>
            <criterion comment="ImageMagick is earlier than 0:5.5.6-18" test_ref="oval:org.mitre.oval:tst:32501"/>
            <criterion comment="ImageMagick-perl is earlier than 0:5.5.6-18" test_ref="oval:org.mitre.oval:tst:32517"/>
            <criterion comment="ImageMagick-devel is earlier than 0:5.5.6-18" test_ref="oval:org.mitre.oval:tst:32118"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:5.5.6-18" test_ref="oval:org.mitre.oval:tst:32474"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-14" test_ref="oval:org.mitre.oval:tst:32085"/>
            <criterion comment="ImageMagick is earlier than 0:6.0.7.1-14" test_ref="oval:org.mitre.oval:tst:32268"/>
            <criterion comment="ImageMagick-perl is earlier than 0:6.0.7.1-14" test_ref="oval:org.mitre.oval:tst:32445"/>
            <criterion comment="ImageMagick-devel is earlier than 0:6.0.7.1-14" test_ref="oval:org.mitre.oval:tst:32522"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:6.0.7.1-14" test_ref="oval:org.mitre.oval:tst:32456"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10352" version="5" class="vulnerability">
      <metadata>
        <title>http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3918" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3918"/>
        <description>http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:30.858-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:41.119-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:54.894-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10352 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:34.702-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:54.816-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-devel is earlier than 0:2.0.46-61.ent" test_ref="oval:org.mitre.oval:tst:32782"/>
            <criterion comment="mod_ssl is earlier than 1:2.0.46-61.ent" test_ref="oval:org.mitre.oval:tst:32713"/>
            <criterion comment="httpd is earlier than 0:2.0.46-61.ent" test_ref="oval:org.mitre.oval:tst:32473"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-suexec is earlier than 0:2.0.52-28.ent" test_ref="oval:org.mitre.oval:tst:32872"/>
            <criterion comment="httpd-manual is earlier than 0:2.0.52-28.ent" test_ref="oval:org.mitre.oval:tst:32965"/>
            <criterion comment="httpd-devel is earlier than 0:2.0.52-28.ent" test_ref="oval:org.mitre.oval:tst:32459"/>
            <criterion comment="mod_ssl is earlier than 1:2.0.52-28.ent" test_ref="oval:org.mitre.oval:tst:32846"/>
            <criterion comment="httpd is earlier than 0:2.0.52-28.ent" test_ref="oval:org.mitre.oval:tst:32712"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10351" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0.4 and Mozilla Suite before 1.7.8 does not properly implement certain security checks for script injection, which allows remote attackers to execute script via "Wrapped" javascript: URLs, as demonstrated using (1) a javascript: URL in a view-source: URL, (2) a javascript: URL in a jar: URL, or (3) "a nested variant."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1531" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1531"/>
        <description>Firefox before 1.0.4 and Mozilla Suite before 1.7.8 does not properly implement certain security checks for script injection, which allows remote attackers to execute script via "Wrapped" javascript: URLs, as demonstrated using (1) a javascript: URL in a view-source: URL, (2) a javascript: URL in a jar: URL, or (3) "a nested variant."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:29.705-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:40.558-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:54.373-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10351 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:46.474-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:54.204-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31531"/>
            <criterion comment="mozilla is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31619"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31225"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31917"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31644"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31625"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31435"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31816"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31450"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31901"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31590"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.5" test_ref="oval:org.mitre.oval:tst:31571"/>
            <criterion comment="mozilla is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31860"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31894"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31245"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31913"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.5" test_ref="oval:org.mitre.oval:tst:31692"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31986"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31365"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31868"/>
            <criterion comment="firefox is earlier than 0:1.0.4-1.4.1" test_ref="oval:org.mitre.oval:tst:31311"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:30985"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31723"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10350" version="5" class="vulnerability">
      <metadata>
        <title>Algorithmic complexity vulnerability in the MCS translation daemon in mcstrans 0.2.3 allows local users to cause a denial of service (temporary daemon outage) via a large range of compartments in sensitivity labels.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4570" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4570"/>
        <description>Algorithmic complexity vulnerability in the MCS translation daemon in mcstrans 0.2.3 allows local users to cause a denial of service (temporary daemon outage) via a large range of compartments in sensitivity labels.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:45.259-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:40.370-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:54.012-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10350 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:50.476-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:53.834-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="mcstrans is earlier than 0:0.2.6-1.el5" test_ref="oval:org.mitre.oval:tst:34419"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1035" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Enterprise 3 Kernel ncp_lookup Function BO</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0010" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0010"/>
        <description>Stack-based buffer overflow in the ncp_lookup function for ncpfs in Linux kernel 2.4.x allows local users to gain privileges.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-12T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:42:04.370-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:12.569-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="kernel version is less than 2.4.21-15.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1315"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10349" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the BinHex decoder in netwerk/streamconv/converters/nsBinHexDecoder.cpp, and unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3072"/>
        <description>Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the BinHex decoder in netwerk/streamconv/converters/nsBinHexDecoder.cpp, and unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:26.293-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:39.731-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:53.421-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10349 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:29:40.179-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:53.095-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39378"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39359"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39036"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39270"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39397"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39118"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:38444"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39284"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:38466"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.45.el3" test_ref="oval:org.mitre.oval:tst:39389"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nspr is earlier than 0:4.7.5-1.el4_8" test_ref="oval:org.mitre.oval:tst:39088"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:39081"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-25.el4" test_ref="oval:org.mitre.oval:tst:40299"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.5-1.el4_8" test_ref="oval:org.mitre.oval:tst:39351"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:38976"/>
            <criterion comment="firefox is earlier than 0:3.0.14-1.el4" test_ref="oval:org.mitre.oval:tst:39195"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:39181"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:39320"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:39364"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-48.el4_8" test_ref="oval:org.mitre.oval:tst:39293"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39208"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39001"/>
            <criterion comment="nspr is earlier than 0:4.7.5-1.el5_4" test_ref="oval:org.mitre.oval:tst:39223"/>
            <criterion comment="firefox is earlier than 0:3.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39097"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.24-2.el5_4" test_ref="oval:org.mitre.oval:tst:40249"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.5-1.el5_4" test_ref="oval:org.mitre.oval:tst:39150"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.14-1.el5_4" test_ref="oval:org.mitre.oval:tst:39206"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10348" version="5" class="vulnerability">
      <metadata>
        <title>Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash and heap corruption) via large color index values in crafted image data, which results in a segmentation fault.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3476" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3476"/>
        <description>Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash and heap corruption) via large color index values in crafted image data, which results in a segmentation fault.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:12.178-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:39.455-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:53.129-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10348 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:46.568-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:52.606-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gd is earlier than 0:2.0.28-5.4E.el4_6.1" test_ref="oval:org.mitre.oval:tst:36386"/>
            <criterion comment="gd-devel is earlier than 0:2.0.28-5.4E.el4_6.1" test_ref="oval:org.mitre.oval:tst:36408"/>
            <criterion comment="gd-progs is earlier than 0:2.0.28-5.4E.el4_6.1" test_ref="oval:org.mitre.oval:tst:35731"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gd is earlier than 0:2.0.33-9.4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36297"/>
            <criterion comment="gd-devel is earlier than 0:2.0.33-9.4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36448"/>
            <criterion comment="gd-progs is earlier than 0:2.0.33-9.4.el5_1.1" test_ref="oval:org.mitre.oval:tst:35759"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10347" version="5" class="vulnerability">
      <metadata>
        <title>Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via regex patterns containing unmatched "\Q\E" sequences with orphan "\E" codes.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0021" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0021"/>
        <description>Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the host_aton function, or (2) the -bh command line option or dnsdb PTR lookup, which triggers an overflow in the dns_build_reverse function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:51.079-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:39.235-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:52.816-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10347 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:57.389-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:52.267-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="exim-doc is earlier than 0:4.43-1.RHEL4.3" test_ref="oval:org.mitre.oval:tst:31133"/>
          <criterion comment="exim-mon is earlier than 0:4.43-1.RHEL4.3" test_ref="oval:org.mitre.oval:tst:30769"/>
          <criterion comment="exim is earlier than 0:4.43-1.RHEL4.3" test_ref="oval:org.mitre.oval:tst:31290"/>
          <criterion comment="exim-sa is earlier than 0:4.43-1.RHEL4.3" test_ref="oval:org.mitre.oval:tst:30863"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10346" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the imap_fetch_overview function in the IMAP functionality (php_imap.c) in PHP before 4.3.3 allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long e-mail address in a (1) To or (2) From header.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1303" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1303"/>
        <description>Buffer overflow in the imap_fetch_overview function in the IMAP functionality (php_imap.c) in PHP before 4.3.3 allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long e-mail address in a (1) To or (2) From header.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:25.664-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:38.728-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:52.322-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10346 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:29:46.108-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:51.638-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32579"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32613"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32711"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32425"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32166"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32107"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32695"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:31742"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32509"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32606"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32503"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32185"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32639"/>
            <criterion comment="php is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32546"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32577"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32236"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32578"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32591"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32707"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32547"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:31727"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10345" version="5" class="vulnerability">
      <metadata>
        <title>konqueror/konq_combo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3820" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3820"/>
        <description>konqueror/konq_combo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:24.346-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:38.425-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:51.949-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10345 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:51.235-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:51.171-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdebase is earlier than 0:3.3.1-6.el4" test_ref="oval:org.mitre.oval:tst:34380"/>
            <criterion comment="kdebase-devel is earlier than 0:3.3.1-6.el4" test_ref="oval:org.mitre.oval:tst:35343"/>
            <criterion comment="kdelibs is earlier than 6:3.3.1-9.el4" test_ref="oval:org.mitre.oval:tst:35165"/>
            <criterion comment="kdelibs-devel is earlier than 6:3.3.1-9.el4" test_ref="oval:org.mitre.oval:tst:35252"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdebase is earlier than 0:3.5.4-15.el5" test_ref="oval:org.mitre.oval:tst:34844"/>
            <criterion comment="kdebase-devel is earlier than 0:3.5.4-15.el5" test_ref="oval:org.mitre.oval:tst:35321"/>
            <criterion comment="kdelibs-apidocs is earlier than 6:3.5.4-13.el5" test_ref="oval:org.mitre.oval:tst:35316"/>
            <criterion comment="kdelibs is earlier than 6:3.5.4-13.el5" test_ref="oval:org.mitre.oval:tst:35293"/>
            <criterion comment="kdelibs-devel is earlier than 6:3.5.4-13.el5" test_ref="oval:org.mitre.oval:tst:34994"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10344" version="5" class="vulnerability">
      <metadata>
        <title>The process_logon_packet function in the nmbd server for Samba 3.0.6 and earlier, when domain logons are enabled, allows remote attackers to cause a denial of service via a SAM_UAS_CHANGE request with a length value that is larger than the number of structures that are provided.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0808" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0808"/>
        <description>The process_logon_packet function in the nmbd server for Samba 3.0.6 and earlier, when domain logons are enabled, allows remote attackers to cause a denial of service via a SAM_UAS_CHANGE request with a length value that is larger than the number of structures that are provided.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:24.313-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:38.206-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:51.704-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10344 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:16.287-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:50.771-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="samba-common is earlier than 0:3.0.7-1.3E" test_ref="oval:org.mitre.oval:tst:30580"/>
          <criterion comment="samba-swat is earlier than 0:3.0.7-1.3E" test_ref="oval:org.mitre.oval:tst:30191"/>
          <criterion comment="samba-client is earlier than 0:3.0.7-1.3E" test_ref="oval:org.mitre.oval:tst:30913"/>
          <criterion comment="samba is earlier than 0:3.0.7-1.3E" test_ref="oval:org.mitre.oval:tst:30778"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10343" version="5" class="vulnerability">
      <metadata>
        <title>Linux kernel 2.6.x before 2.6.20 allows local users to read unreadable binaries by using the interpreter (PT_INTERP) functionality and triggering a core dump, a variant of CVE-2004-1073.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0958" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0958"/>
        <description>Linux kernel 2.6.x before 2.6.20 allows local users to read unreadable binaries by using the interpreter (PT_INTERP) functionality and triggering a core dump, a variant of CVE-2004-1073.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:13.268-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:37.696-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:51.206-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10343 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:36:25.952-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:49.671-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34475"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34659"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34630"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34375"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34496"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34560"/>
            <criterion comment="kernel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34493"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34302"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34295"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34662"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:33694"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33717"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33839"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33412"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33730"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33902"/>
            <criterion comment="kernel is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33740"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33736"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33914"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33489"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33621"/>
            <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.1.el5" test_ref="oval:org.mitre.oval:tst:33879"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10342" version="5" class="vulnerability">
      <metadata>
        <title>The make_indexed_dir function in fs/ext4/namei.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not validate a certain rec_len field, which allows local users to cause a denial of service (OOPS) by attempting to mount a crafted ext4 filesystem.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0746" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0746"/>
        <description>The make_indexed_dir function in fs/ext4/namei.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not validate a certain rec_len field, which allows local users to cause a denial of service (OOPS) by attempting to mount a crafted ext4 filesystem.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:13.356-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:37.370-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:50.757-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10342 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:25.609-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:49.230-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38255"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38332"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39122"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39058"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39247"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39145"/>
          <criterion comment="kernel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38795"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38831"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38585"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39130"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:38567"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-164.el5" test_ref="oval:org.mitre.oval:tst:39245"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10341" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in Ethereal 0.8.5 up to 0.10.14 allows remote attackers to execute arbitrary code via the telnet dissector.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1936" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1936"/>
        <description>Buffer overflow in Ethereal 0.8.5 up to 0.10.14 allows remote attackers to execute arbitrary code via the telnet dissector.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:10.566-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:37.119-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:50.486-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10341 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:51.219-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:48.804-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.99.0-EL3.2" test_ref="oval:org.mitre.oval:tst:32590"/>
            <criterion comment="ethereal is earlier than 0:0.99.0-EL3.2" test_ref="oval:org.mitre.oval:tst:32631"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.99.0-EL4.2" test_ref="oval:org.mitre.oval:tst:32299"/>
            <criterion comment="ethereal is earlier than 0:0.99.0-EL4.2" test_ref="oval:org.mitre.oval:tst:32238"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10340" version="3" class="vulnerability">
      <metadata>
        <title>Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when an HTTP proxy server is used, allows remote attackers to violate the security model for an applet's outbound connections via a multi-pin DNS rebinding attack in which the applet download relies on DNS resolution on the proxy server, but the applet's socket operations rely on DNS resolution on the local machine, a different issue than CVE-2007-5274. NOTE: this is similar to CVE-2007-5232.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5273" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5273"/>
        <description>Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier, when an HTTP proxy server is used, allows remote attackers to violate the security model for an applet's outbound connections via a multi-pin DNS rebinding attack in which the applet download relies on DNS resolution on the proxy server, but the applet's socket operations rely on DNS resolution on the local machine, a different issue than CVE-2007-5274. NOTE: this is similar to CVE-2007-5232.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:36.158-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:35.926-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:49.309-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criteria operator="OR">
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:35438"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:36312"/>
            <criterion comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:36020"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:36170"/>
            <criterion comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:36131"/>
            <criterion comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:35578"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:35718"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:36338"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:35439"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35617"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34688"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35272"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35892"/>
            <criterion comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35850"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:34849"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36357"/>
            <criterion comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36067"/>
            <criterion comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35854"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35532"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35673"/>
            <criterion comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.14-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36263"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36219"/>
            <criterion comment="java-1.5.0-bea is earlier than 0:1.5.0.14-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36444"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35110"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35478"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35875"/>
            <criterion comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35815"/>
            <criterion comment="java-1.5.0-bea-src is earlier than 0:1.5.0.14-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36470"/>
            <criterion comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.14-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36435"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34668"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35191"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35384"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35413"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.6-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35465"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36292"/>
            <criterion comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.14-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36151"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.13-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35057"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35644"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36198"/>
            <criterion comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35192"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36227"/>
            <criterion comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36087"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36003"/>
            <criterion comment="java-1.5.0-bea is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36374"/>
            <criterion comment="java-1.4.2-bea-demo is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36127"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35624"/>
            <criterion comment="java-1.5.0-ibm-accessibility is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35633"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35280"/>
            <criterion comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36290"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35256"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35453"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35822"/>
            <criterion comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36337"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35584"/>
            <criterion comment="java-1.4.2-bea-missioncontrol is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35296"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34760"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35317"/>
            <criterion comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35972"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35429"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36350"/>
            <criterion comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36261"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.6-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35144"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35886"/>
            <criterion comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36301"/>
            <criterion comment="java-1.5.0-bea-missioncontrol is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36452"/>
            <criterion comment="java-1.5.0-bea-src is earlier than 0:1.5.0.14-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36372"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35437"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35392"/>
            <criterion comment="java-1.4.2-bea-src is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36128"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.13-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34772"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10339" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary script in other domains via a setter function for a variable in the target domain, which is executed when the user visits that domain, aka "Cross-site scripting through global scope pollution."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1154" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1154"/>
        <description>Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary script in other domains via a setter function for a variable in the target domain, which is executed when the user visits that domain, aka "Cross-site scripting through global scope pollution."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:14.464-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:35.400-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:48.742-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10339 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:02.068-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:48.181-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31283"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31520"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31645"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31516"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31569"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31143"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31512"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31785"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31695"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31626"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31478"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.4" test_ref="oval:org.mitre.oval:tst:31488"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31751"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31647"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:30850"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31749"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.4" test_ref="oval:org.mitre.oval:tst:31658"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31636"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31780"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:30828"/>
            <criterion comment="firefox is earlier than 0:1.0.3-1.4.1" test_ref="oval:org.mitre.oval:tst:31646"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31716"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.4.2" test_ref="oval:org.mitre.oval:tst:31758"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10338" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the backend of XenSource Xen Para Virtualized Frame Buffer (PVFB) 3.0 through 3.1.2 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted description of a shared framebuffer.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1943" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1943"/>
        <description>Buffer overflow in the backend of XenSource Xen Para Virtualized Frame Buffer (PVFB) 3.0 through 3.1.2 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted description of a shared framebuffer.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:00.779-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:35.182-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:48.522-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10338 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:52.248-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:47.832-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="xen-libs is earlier than 0:3.0.3-41.el5_1.5" test_ref="oval:org.mitre.oval:tst:36530"/>
          <criterion comment="xen is earlier than 0:3.0.3-41.el5_1.5" test_ref="oval:org.mitre.oval:tst:36543"/>
          <criterion comment="xen-devel is earlier than 0:3.0.3-41.el5_1.5" test_ref="oval:org.mitre.oval:tst:35758"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10337" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view (aka the Calendars window).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1109" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1109"/>
        <description>Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view (aka the Calendars window).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:30.669-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:34.828-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:48.248-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10337 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:36:13.788-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:47.414-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="evolution28 is earlier than 0:2.8.0-53.el4_6.3" test_ref="oval:org.mitre.oval:tst:36506"/>
            <criterion comment="evolution28-devel is earlier than 0:2.8.0-53.el4_6.3" test_ref="oval:org.mitre.oval:tst:36592"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="evolution-help is earlier than 0:2.12.3-8.el5_2.2" test_ref="oval:org.mitre.oval:tst:36803"/>
            <criterion comment="evolution is earlier than 0:2.12.3-8.el5_2.2" test_ref="oval:org.mitre.oval:tst:36885"/>
            <criterion comment="evolution-devel is earlier than 0:2.12.3-8.el5_2.2" test_ref="oval:org.mitre.oval:tst:37064"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10336" version="5" class="vulnerability">
      <metadata>
        <title>The Linux kernel before 2.6.11 on the Itanium IA64 platform has certain "ptrace corner cases" that allow local users to cause a denial of service (crash) via crafted syscalls, possibly related to MCA/INIT, a different vulnerability than CVE-2005-1761.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0400" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0400"/>
        <description>The ext2_make_empty function call in the Linux kernel before 2.6.11.6 does not properly initialize memory when creating a block for a new directory entry, which allows local users to obtain potentially sensitive information by reading the block.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:26.192-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:34.407-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:47.756-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10336 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:29:41.537-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:46.834-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31411"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31953"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31879"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31990"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31485"/>
            <criterion comment="kernel is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32093"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31968"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32148"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31741"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31545"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31539"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31661"/>
            <criterion comment="kernel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31482"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31112"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31605"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31330"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10335" version="5" class="vulnerability">
      <metadata>
        <title>ELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content headers of the POST request to the CONNECT request in cleartext, which allows remote attackers to sniff sensitive data that would have been protected by TLS.  NOTE: this issue only occurs when a proxy is defined for https.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5034" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5034"/>
        <description>ELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content headers of the POST request to the CONNECT request in cleartext, which allows remote attackers to sniff sensitive data that would have been protected by TLS.  NOTE: this issue only occurs when a proxy is defined for https.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:50.160-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:34.167-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:47.506-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10335 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:36:16.615-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:46.455-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="elinks is earlier than 0:0.9.2-3.3.5.2" test_ref="oval:org.mitre.oval:tst:35007"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="elinks is earlier than 0:0.11.1-5.1.0.1.el5" test_ref="oval:org.mitre.oval:tst:34505"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10334" version="5" class="vulnerability">
      <metadata>
        <title>PostgreSQL 8.1 and probably later versions, when local trust authentication is enabled and the Database Link library (dblink) is installed, allows remote attackers to access arbitrary accounts and execute arbitrary SQL queries via a dblink host parameter that proxies the connection from 127.0.0.1.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3278" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3278"/>
        <description>PostgreSQL 8.1 and probably later versions, when local trust authentication is enabled and the Database Link library (dblink) is installed, allows remote attackers to access arbitrary accounts and execute arbitrary SQL queries via a dblink host parameter that proxies the connection from 127.0.0.1.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:33.289-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:33.490-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:46.821-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10334 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:06.801-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:45.616-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="rh-postgresql-devel is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:36102"/>
            <criterion comment="rh-postgresql-server is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35807"/>
            <criterion comment="rh-postgresql-python is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35304"/>
            <criterion comment="rh-postgresql-libs is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35743"/>
            <criterion comment="rh-postgresql-docs is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35830"/>
            <criterion comment="rh-postgresql-test is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35938"/>
            <criterion comment="rh-postgresql-pl is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35951"/>
            <criterion comment="rh-postgresql-tcl is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35406"/>
            <criterion comment="rh-postgresql is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35943"/>
            <criterion comment="rh-postgresql-contrib is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35867"/>
            <criterion comment="rh-postgresql-jdbc is earlier than 0:7.3.21-1" test_ref="oval:org.mitre.oval:tst:35930"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35948"/>
            <criterion comment="postgresql-docs is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35993"/>
            <criterion comment="postgresql-pl is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36045"/>
            <criterion comment="postgresql-tcl is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35949"/>
            <criterion comment="postgresql-libs is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36098"/>
            <criterion comment="postgresql-contrib is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36066"/>
            <criterion comment="postgresql-python is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35942"/>
            <criterion comment="postgresql-test is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36105"/>
            <criterion comment="postgresql-jdbc is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35835"/>
            <criterion comment="postgresql-server is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35597"/>
            <criterion comment="postgresql-devel is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36094"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35261"/>
            <criterion comment="postgresql-docs is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35907"/>
            <criterion comment="postgresql-pl is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35319"/>
            <criterion comment="postgresql-tcl is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35123"/>
            <criterion comment="postgresql-libs is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35894"/>
            <criterion comment="postgresql-contrib is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35781"/>
            <criterion comment="postgresql-python is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:36109"/>
            <criterion comment="postgresql-test is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35308"/>
            <criterion comment="postgresql-server is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35856"/>
            <criterion comment="postgresql-devel is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:36044"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10333" version="5" class="vulnerability">
      <metadata>
        <title>Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in an application/x-msnmsgrp2p MSN emoticon (aka custom smiley) request, a related issue to CVE-2004-0122.  NOTE: it could be argued that this is resultant from a vulnerability in which an emoticon download request is processed even without a preceding text/x-mms-emoticon message that announced availability of the emoticon.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0013" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0013"/>
        <description>Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in an application/x-msnmsgrp2p MSN emoticon (aka custom smiley) request, a related issue to CVE-2004-0122.  NOTE: it could be argued that this is resultant from a vulnerability in which an emoticon download request is processed even without a preceding text/x-mms-emoticon message that announced availability of the emoticon.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:17.858-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:32.987-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:46.382-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10333 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:04.630-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:44.499-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.6.5-1.el4.1" test_ref="oval:org.mitre.oval:tst:39834"/>
            <criterion comment="libpurple is earlier than 0:2.6.5-1.el4.1" test_ref="oval:org.mitre.oval:tst:39816"/>
            <criterion comment="libpurple-perl is earlier than 0:2.6.5-1.el4.1" test_ref="oval:org.mitre.oval:tst:39021"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.6.5-1.el4.1" test_ref="oval:org.mitre.oval:tst:39649"/>
            <criterion comment="pidgin-devel is earlier than 0:2.6.5-1.el4.1" test_ref="oval:org.mitre.oval:tst:39825"/>
            <criterion comment="libpurple-devel is earlier than 0:2.6.5-1.el4.1" test_ref="oval:org.mitre.oval:tst:39510"/>
            <criterion comment="finch is earlier than 0:2.6.5-1.el4.1" test_ref="oval:org.mitre.oval:tst:39793"/>
            <criterion comment="pidgin-perl is earlier than 0:2.6.5-1.el4.1" test_ref="oval:org.mitre.oval:tst:39824"/>
            <criterion comment="pidgin is earlier than 0:2.6.5-1.el4.1" test_ref="oval:org.mitre.oval:tst:39961"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.6.5-1.el5" test_ref="oval:org.mitre.oval:tst:39944"/>
            <criterion comment="libpurple is earlier than 0:2.6.5-1.el5" test_ref="oval:org.mitre.oval:tst:39950"/>
            <criterion comment="libpurple-perl is earlier than 0:2.6.5-1.el5" test_ref="oval:org.mitre.oval:tst:39344"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.6.5-1.el5" test_ref="oval:org.mitre.oval:tst:39598"/>
            <criterion comment="pidgin-devel is earlier than 0:2.6.5-1.el5" test_ref="oval:org.mitre.oval:tst:40005"/>
            <criterion comment="libpurple-devel is earlier than 0:2.6.5-1.el5" test_ref="oval:org.mitre.oval:tst:39758"/>
            <criterion comment="finch is earlier than 0:2.6.5-1.el5" test_ref="oval:org.mitre.oval:tst:39620"/>
            <criterion comment="pidgin-perl is earlier than 0:2.6.5-1.el5" test_ref="oval:org.mitre.oval:tst:39949"/>
            <criterion comment="pidgin is earlier than 0:2.6.5-1.el5" test_ref="oval:org.mitre.oval:tst:39623"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10332" version="5" class="vulnerability">
      <metadata>
        <title>CRLF injection vulnerability in the mb_send_mail function in PHP before 5.1.0 might allow remote attackers to inject arbitrary e-mail headers via line feeds (LF) in the "To" address argument.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3883" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3883"/>
        <description>CRLF injection vulnerability in the mb_send_mail function in PHP before 5.1.0 might allow remote attackers to inject arbitrary e-mail headers via line feeds (LF) in the "To" address argument.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:41.987-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:32.524-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:45.780-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10332 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:15.954-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:43.807-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32579"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32613"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32711"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32425"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32166"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32107"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32695"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:31742"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32509"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32606"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32503"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32185"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32639"/>
            <criterion comment="php is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32546"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32577"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32236"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32578"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32591"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32707"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32547"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:31727"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10331" version="5" class="vulnerability">
      <metadata>
        <title>Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (infinite or large loop) via the (1) IPv6 or (2) USB dissector, which can trigger resource consumption or a crash. NOTE: this identifier originally included Firebird/Interbase, but it is already covered by CVE-2007-6116.  The DCP ETSI issue is already covered by CVE-2007-6119.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6439" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6439"/>
        <description>Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (infinite or large loop) via the (1) IPv6 or (2) USB dissector, which can trigger resource consumption or a crash. NOTE: this identifier originally included Firebird/Interbase, but it is already covered by CVE-2007-6116.  The DCP ETSI issue is already covered by CVE-2007-6119.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:45.619-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:32.224-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:45.449-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10331 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:43.294-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:43.356-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:36051"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el4" test_ref="oval:org.mitre.oval:tst:35980"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35669"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el4" test_ref="oval:org.mitre.oval:tst:35941"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:35709"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.7-1.el5" test_ref="oval:org.mitre.oval:tst:36120"/>
            <criterion comment="libsmi is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35712"/>
            <criterion comment="libsmi-devel is earlier than 0:0.4.5-2.el5" test_ref="oval:org.mitre.oval:tst:35801"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10330" version="5" class="vulnerability">
      <metadata>
        <title>Multiple vulnerabilities in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 allow remote samba servers to cause a denial of service (crash) or gain sensitive information from kernel memory via a samba server (1) returning more data than requested to the smb_proc_read function, (2) returning a data offset from outside the samba packet to the smb_proc_readX function, (3) sending a certain TRANS2 fragmented packet to the smb_receive_trans2 function, (4) sending a samba packet with a certain header size to the smb_proc_readX_data function, or (5) sending a certain packet based offset for the data in a packet to the smb_receive_trans2 function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0883" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0883"/>
        <description>Multiple vulnerabilities in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 allow remote samba servers to cause a denial of service (crash) or gain sensitive information from kernel memory via a samba server (1) returning more data than requested to the smb_proc_read function, (2) returning a data offset from outside the samba packet to the smb_proc_readX function, (3) sending a certain TRANS2 fragmented packet to the smb_receive_trans2 function, (4) sending a samba packet with a certain header size to the smb_proc_readX_data function, or (5) sending a certain packet based offset for the data in a packet to the smb_receive_trans2 function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:24.921-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:31.813-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:45.148-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10330 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:45.402-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:42.961-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30934"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30708"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30577"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30874"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30794"/>
          <criterion comment="kernel is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30892"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30873"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:31080"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30866"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1033" version="3" class="vulnerability">
      <metadata>
        <title>SquirrelMail SQL Injection Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>SquirrelMail</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0521" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0521"/>
        <description>SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, with unknown impact, probably via abook_database.php.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-06-29T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-07-21T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-08-11T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.329-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:59:44.321-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:04.852-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="squirrelmail rpm version prior to 1.4.3-0.e3.1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1327"/>
          <criterion comment="php rpm is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1326"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="httpd is listening on the network" negate="false" test_ref="oval:org.mitre.oval:tst:1630"/>
          <criterion comment="/etc/httpd/modules/libphp4.so exists" negate="false" test_ref="oval:org.mitre.oval:tst:1325"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10329" version="5" class="vulnerability">
      <metadata>
        <title>The JFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the JFS file system, which allows local users to obtain sensitive information by reading the raw device.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0181" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0181"/>
        <description>The JFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the JFS file system, which allows local users to obtain sensitive information by reading the raw device.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:40.229-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:31.495-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:44.786-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10329 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:16.088-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:42.594-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31411"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31953"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31879"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31990"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31485"/>
          <criterion comment="kernel is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32093"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31968"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32148"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31741"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10328" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3876" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3876"/>
        <description>Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:38.297-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:31.189-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:44.535-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10328 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:56.790-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:42.241-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:38878"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39616"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39115"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39531"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39655"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10327" version="5" class="vulnerability">
      <metadata>
        <title>The XPM parser in the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of service (application crash) via a malformed image file that triggers a null dereference, a different vulnerability than CVE-2004-0693.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0692" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0692"/>
        <description>The XPM parser in the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of service (application crash) via a malformed image file that triggers a null dereference, a different vulnerability than CVE-2004-0693.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:22.977-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:30.520-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:43.734-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10327 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:41.922-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:41.443-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30914"/>
          <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30029"/>
          <criterion comment="XFree86-libs is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30779"/>
          <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30003"/>
          <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30783"/>
          <criterion comment="XFree86-twm is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30052"/>
          <criterion comment="XFree86-doc is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30889"/>
          <criterion comment="qt-devel is earlier than 1:3.1.2-13.4" test_ref="oval:org.mitre.oval:tst:30732"/>
          <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30841"/>
          <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30838"/>
          <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30599"/>
          <criterion comment="qt-config is earlier than 1:3.1.2-13.4" test_ref="oval:org.mitre.oval:tst:30825"/>
          <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30933"/>
          <criterion comment="XFree86-xdm is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30902"/>
          <criterion comment="XFree86 is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30899"/>
          <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30943"/>
          <criterion comment="XFree86-tools is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30701"/>
          <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30805"/>
          <criterion comment="XFree86-xauth is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30843"/>
          <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30963"/>
          <criterion comment="XFree86-devel is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30677"/>
          <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30748"/>
          <criterion comment="qt-MySQL is earlier than 1:3.1.2-13.4" test_ref="oval:org.mitre.oval:tst:30758"/>
          <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30925"/>
          <criterion comment="qt-designer is earlier than 1:3.1.2-13.4" test_ref="oval:org.mitre.oval:tst:30345"/>
          <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:31001"/>
          <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30347"/>
          <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30875"/>
          <criterion comment="qt is earlier than 1:3.1.2-13.4" test_ref="oval:org.mitre.oval:tst:30487"/>
          <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30612"/>
          <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30544"/>
          <criterion comment="XFree86-sdk is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30619"/>
          <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30747"/>
          <criterion comment="XFree86-xfs is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30145"/>
          <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30951"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10326" version="5" class="vulnerability">
      <metadata>
        <title>libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PNG file with zero length "unknown" chunks, which trigger an access of uninitialized memory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1382" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1382"/>
        <description>libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PNG file with zero length "unknown" chunks, which trigger an access of uninitialized memory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:56.323-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:30.253-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:43.429-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10326 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:36:00.644-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:40.938-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libpng10-devel is earlier than 0:1.0.16-3.el4_7.3" test_ref="oval:org.mitre.oval:tst:38409"/>
            <criterion comment="libpng-devel is earlier than 2:1.2.7-3.el4_7.2" test_ref="oval:org.mitre.oval:tst:38214"/>
            <criterion comment="libpng is earlier than 2:1.2.7-3.el4_7.2" test_ref="oval:org.mitre.oval:tst:38398"/>
            <criterion comment="libpng10 is earlier than 0:1.0.16-3.el4_7.3" test_ref="oval:org.mitre.oval:tst:38163"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libpng-devel is earlier than 2:1.2.10-7.1.el5_3.2" test_ref="oval:org.mitre.oval:tst:38188"/>
            <criterion comment="libpng is earlier than 2:1.2.10-7.1.el5_3.2" test_ref="oval:org.mitre.oval:tst:38283"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10325" version="5" class="vulnerability">
      <metadata>
        <title>The GdkPixbufLoader function in GIMP ToolKit (GTK+) in GTK 2 (gtk2) before 2.4.13 allows context-dependent attackers to cause a denial of service (crash) via a malformed image file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0010" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0010"/>
        <description>The GdkPixbufLoader function in GIMP ToolKit (GTK+) in GTK 2 (gtk2) before 2.4.13 allows context-dependent attackers to cause a denial of service (crash) via a malformed image file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:49.396-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:29.986-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:43.218-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10325 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:36.561-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:40.636-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="gtk2 is earlier than 0:2.4.13-22" test_ref="oval:org.mitre.oval:tst:32893"/>
          <criterion comment="gtk2-devel is earlier than 0:2.4.13-22" test_ref="oval:org.mitre.oval:tst:33370"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10324" version="5" class="vulnerability">
      <metadata>
        <title>The sPLT chunk handling code (png_set_sPLT function in pngset.c) in libpng 1.0.6 through 1.2.12 uses a sizeof operator on the wrong data type, which allows context-dependent attackers to cause a denial of service (crash) via malformed sPLT chunks that trigger an out-of-bounds read.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5793" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5793"/>
        <description>The sPLT chunk handling code (png_set_sPLT function in pngset.c) in libpng 1.0.6 through 1.2.12 uses a sizeof operator on the wrong data type, which allows context-dependent attackers to cause a denial of service (crash) via malformed sPLT chunks that trigger an out-of-bounds read.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:07.255-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:29.598-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:42.792-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10324 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:47.702-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:40.115-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libpng10-devel is earlier than 0:1.0.13-17" test_ref="oval:org.mitre.oval:tst:34276"/>
            <criterion comment="libpng-devel is earlier than 2:1.2.2-27" test_ref="oval:org.mitre.oval:tst:34234"/>
            <criterion comment="libpng is earlier than 2:1.2.2-27" test_ref="oval:org.mitre.oval:tst:34297"/>
            <criterion comment="libpng10 is earlier than 0:1.0.13-17" test_ref="oval:org.mitre.oval:tst:34200"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libpng10-devel is earlier than 0:1.0.16-3" test_ref="oval:org.mitre.oval:tst:34051"/>
            <criterion comment="libpng-devel is earlier than 2:1.2.7-3.el4" test_ref="oval:org.mitre.oval:tst:33581"/>
            <criterion comment="libpng is earlier than 2:1.2.7-3.el4" test_ref="oval:org.mitre.oval:tst:34237"/>
            <criterion comment="libpng10 is earlier than 0:1.0.16-3" test_ref="oval:org.mitre.oval:tst:34285"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libpng-devel is earlier than 2:1.2.10-7.0.2" test_ref="oval:org.mitre.oval:tst:33339"/>
            <criterion comment="libpng is earlier than 2:1.2.10-7.0.2" test_ref="oval:org.mitre.oval:tst:33778"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10323" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service (crash from null dereference) via (1) multiple vectors in H.248, and the (2) X.509if, (3) SRVLOC, (4) H.245, (5) AIM, and (6) general packet dissectors; and (7) the statistics counter.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1937" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1937"/>
        <description>Multiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service (crash from null dereference) via (1) multiple vectors in H.248, and the (2) X.509if, (3) SRVLOC, (4) H.245, (5) AIM, and (6) general packet dissectors; and (7) the statistics counter.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:01.576-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:29.357-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:42.528-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10323 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:39.442-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:39.669-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.99.0-EL3.2" test_ref="oval:org.mitre.oval:tst:32590"/>
            <criterion comment="ethereal is earlier than 0:0.99.0-EL3.2" test_ref="oval:org.mitre.oval:tst:32631"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.99.0-EL4.2" test_ref="oval:org.mitre.oval:tst:32299"/>
            <criterion comment="ethereal is earlier than 0:0.99.0-EL4.2" test_ref="oval:org.mitre.oval:tst:32238"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10322" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute arbitrary code by manipulating the VMA descriptor.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0001" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0001"/>
        <description>Race condition in the page fault handler (fault.c) for Linux kernel 2.2.x to 2.2.7, 2.4 to 2.4.29, and 2.6 to 2.6.10, when running on multiprocessor machines, allows local users to execute arbitrary code via concurrent threads that share the same virtual memory space and simultaneously request stack expansion.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:59.699-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:29.104-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:42.245-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10322 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:38.541-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:39.288-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30633"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:31009"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30369"/>
          <criterion comment="kernel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:31205"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30421"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30594"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30616"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10321" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1439" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1439"/>
        <description>Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:25.152-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:28.567-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:41.694-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10321 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:20.271-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:38.572-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:38877"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:38938"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:39012"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:39048"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:38799"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:39160"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:39030"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:38637"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:38231"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:39133"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.7.EL" test_ref="oval:org.mitre.oval:tst:38985"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:37971"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38820"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38641"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38838"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38699"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38813"/>
            <criterion comment="kernel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38840"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38890"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38529"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38350"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38066"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38388"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10320" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer signedness errors in the sg_scsi_ioctl function in scsi_ioctl.c for Linux 2.6.x allow local users to read or modify kernel memory via negative integers in arguments to the scsi ioctl, which bypass a maximum length check before calling the copy_from_user and copy_to_user functions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0204" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0204"/>
        <description>Linux kernel before 2.6.9, when running on the AMD64 and Intel EM64T architectures, allows local users to write to privileged IO ports via the OUTS instruction.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:55.892-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:28.146-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:41.268-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10320 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:46.687-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:37.964-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31148"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31473"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31178"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31282"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31565"/>
            <criterion comment="kernel is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31562"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31582"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:30730"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-27.0.4.EL" test_ref="oval:org.mitre.oval:tst:31534"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30633"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:31009"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30369"/>
            <criterion comment="kernel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:31205"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30421"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30594"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30616"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1032" version="2" class="vulnerability">
      <metadata>
        <title>Windows Server 2003 Help and Support Center HCP URL Validation Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Help and Support Center (HSC)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0199" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0199"/>
        <description>Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code, as demonstrated using certain hcp:// URLs that access the DVD Upgrade capability (dvdupgrd.htm).</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2004-05-12T12:00:00.000-04:00">DRAFT</status_change>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-08-28T12:00:00.000-04:00" comment="modified obj 1001 to use xsi:nil instead of a .* pattern match">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-08-28T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-09-27T12:28:20.916-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
          <criterion comment="the version of helpctr.exe is less than 5.2.3790.161" negate="false" test_ref="oval:org.mitre.oval:tst:1272"/>
          <criterion comment="the patch kb840374 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1320"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="the HCP Protocol is registered" negate="true" test_ref="oval:org.mitre.oval:tst:1477"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10319" version="5" class="vulnerability">
      <metadata>
        <title>The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by sending multiple crafted SLP (aka MSNSLP) messages to trigger an overwrite of an arbitrary memory location.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1376.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2694" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2694"/>
        <description>The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by sending multiple crafted SLP (aka MSNSLP) messages to trigger an overwrite of an arbitrary memory location.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1376.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:43.534-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:27.596-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:40.718-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10319 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:02.238-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:37.274-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="pidgin is earlier than 0:1.5.1-4.el3" test_ref="oval:org.mitre.oval:tst:38935"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.5.9-1.el4" test_ref="oval:org.mitre.oval:tst:38623"/>
            <criterion comment="libpurple is earlier than 0:2.5.9-1.el4" test_ref="oval:org.mitre.oval:tst:38754"/>
            <criterion comment="libpurple-perl is earlier than 0:2.5.9-1.el4" test_ref="oval:org.mitre.oval:tst:38792"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.5.9-1.el4" test_ref="oval:org.mitre.oval:tst:39112"/>
            <criterion comment="pidgin-devel is earlier than 0:2.5.9-1.el4" test_ref="oval:org.mitre.oval:tst:38578"/>
            <criterion comment="libpurple-devel is earlier than 0:2.5.9-1.el4" test_ref="oval:org.mitre.oval:tst:38968"/>
            <criterion comment="finch is earlier than 0:2.5.9-1.el4" test_ref="oval:org.mitre.oval:tst:39143"/>
            <criterion comment="pidgin-perl is earlier than 0:2.5.9-1.el4" test_ref="oval:org.mitre.oval:tst:38197"/>
            <criterion comment="pidgin is earlier than 0:2.5.9-1.el4" test_ref="oval:org.mitre.oval:tst:39131"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.5.9-1.el5" test_ref="oval:org.mitre.oval:tst:38937"/>
            <criterion comment="libpurple is earlier than 0:2.5.9-1.el5" test_ref="oval:org.mitre.oval:tst:39103"/>
            <criterion comment="libpurple-perl is earlier than 0:2.5.9-1.el5" test_ref="oval:org.mitre.oval:tst:38602"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.5.9-1.el5" test_ref="oval:org.mitre.oval:tst:39132"/>
            <criterion comment="pidgin-devel is earlier than 0:2.5.9-1.el5" test_ref="oval:org.mitre.oval:tst:38903"/>
            <criterion comment="libpurple-devel is earlier than 0:2.5.9-1.el5" test_ref="oval:org.mitre.oval:tst:38907"/>
            <criterion comment="finch is earlier than 0:2.5.9-1.el5" test_ref="oval:org.mitre.oval:tst:39041"/>
            <criterion comment="pidgin-perl is earlier than 0:2.5.9-1.el5" test_ref="oval:org.mitre.oval:tst:38844"/>
            <criterion comment="pidgin is earlier than 0:2.5.9-1.el5" test_ref="oval:org.mitre.oval:tst:38196"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10318" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an OLE file with a crafted DocumentSummaryInformation stream.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0320" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0320"/>
        <description>Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an OLE file with a crafted DocumentSummaryInformation stream.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:59.432-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:25.135-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:38.588-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10318 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:58.599-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:34.794-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-41.2.0.EL3" test_ref="oval:org.mitre.oval:tst:36395"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.2-41.2.0.EL3" test_ref="oval:org.mitre.oval:tst:36503"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-41.2.0.EL3" test_ref="oval:org.mitre.oval:tst:36240"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org2-langpack-lt_LT is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36006"/>
            <criterion comment="openoffice.org2-langpack-nn_NO is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35494"/>
            <criterion comment="openoffice.org2-langpack-ga_IE is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36190"/>
            <criterion comment="openoffice.org2-langpack-zh_CN is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36501"/>
            <criterion comment="openoffice.org2-javafilter is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35931"/>
            <criterion comment="openoffice.org2-langpack-he_IL is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36114"/>
            <criterion comment="openoffice.org2-draw is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36163"/>
            <criterion comment="openoffice.org2-langpack-ko_KR is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36172"/>
            <criterion comment="openoffice.org2-langpack-ca_ES is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36000"/>
            <criterion comment="openoffice.org2-base is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36287"/>
            <criterion comment="openoffice.org2-langpack-fr is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36118"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.5-10.6.0.3.EL4" test_ref="oval:org.mitre.oval:tst:36421"/>
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.3.EL4" test_ref="oval:org.mitre.oval:tst:36451"/>
            <criterion comment="openoffice.org2-langpack-pa_IN is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36384"/>
            <criterion comment="openoffice.org2-langpack-da_DK is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36302"/>
            <criterion comment="openoffice.org2-emailmerge is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35683"/>
            <criterion comment="openoffice.org2-langpack-pt_PT is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36473"/>
            <criterion comment="openoffice.org2-langpack-es is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36223"/>
            <criterion comment="openoffice.org2-langpack-sv is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36224"/>
            <criterion comment="openoffice.org2-langpack-ms_MY is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36154"/>
            <criterion comment="openoffice.org2-langpack-cs_CZ is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36091"/>
            <criterion comment="openoffice.org2-xsltfilter is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35963"/>
            <criterion comment="openoffice.org2-langpack-ja_JP is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36083"/>
            <criterion comment="openoffice.org2-langpack-hu_HU is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36271"/>
            <criterion comment="openoffice.org2-langpack-zh_TW is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35954"/>
            <criterion comment="openoffice.org2-langpack-sl_SI is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35495"/>
            <criterion comment="openoffice.org2-langpack-de is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36299"/>
            <criterion comment="openoffice.org2-pyuno is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36417"/>
            <criterion comment="openoffice.org2 is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35864"/>
            <criterion comment="openoffice.org2-langpack-tr_TR is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35957"/>
            <criterion comment="openoffice.org2-impress is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36286"/>
            <criterion comment="openoffice.org2-langpack-bn is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36181"/>
            <criterion comment="openoffice.org2-langpack-ar is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36345"/>
            <criterion comment="openoffice.org2-langpack-pt_BR is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35811"/>
            <criterion comment="openoffice.org2-langpack-af_ZA is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35640"/>
            <criterion comment="openoffice.org2-langpack-pl_PL is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36248"/>
            <criterion comment="openoffice.org2-calc is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36212"/>
            <criterion comment="openoffice.org2-langpack-zu_ZA is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36434"/>
            <criterion comment="openoffice.org2-langpack-fi_FI is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36159"/>
            <criterion comment="openoffice.org2-langpack-sk_SK is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36411"/>
            <criterion comment="openoffice.org2-langpack-hi_IN is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36382"/>
            <criterion comment="openoffice.org2-langpack-nb_NO is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36148"/>
            <criterion comment="openoffice.org2-langpack-th_TH is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36144"/>
            <criterion comment="openoffice.org2-langpack-et_EE is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36401"/>
            <criterion comment="openoffice.org2-langpack-gl_ES is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36185"/>
            <criterion comment="openoffice.org2-langpack-it is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36254"/>
            <criterion comment="openoffice.org2-langpack-hr_HR is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36289"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.3.EL4" test_ref="oval:org.mitre.oval:tst:36178"/>
            <criterion comment="openoffice.org2-langpack-ta_IN is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36009"/>
            <criterion comment="openoffice.org2-langpack-gu_IN is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36216"/>
            <criterion comment="openoffice.org2-testtools is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36498"/>
            <criterion comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.3.EL4" test_ref="oval:org.mitre.oval:tst:36152"/>
            <criterion comment="openoffice.org2-langpack-eu_ES is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36314"/>
            <criterion comment="openoffice.org2-langpack-el_GR is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36332"/>
            <criterion comment="openoffice.org2-core is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36253"/>
            <criterion comment="openoffice.org2-langpack-ru is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35829"/>
            <criterion comment="openoffice.org2-langpack-bg_BG is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36429"/>
            <criterion comment="openoffice.org2-langpack-nl is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36073"/>
            <criterion comment="openoffice.org2-langpack-sr_CS is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35502"/>
            <criterion comment="openoffice.org2-langpack-cy_GB is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36174"/>
            <criterion comment="openoffice.org2-math is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36366"/>
            <criterion comment="openoffice.org2-graphicfilter is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36276"/>
            <criterion comment="openoffice.org2-writer is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36057"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-langpack-sk_SK is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36162"/>
            <criterion comment="openoffice.org-langpack-zu_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36101"/>
            <criterion comment="openoffice.org-langpack-pa_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35841"/>
            <criterion comment="openoffice.org-langpack-hi_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36520"/>
            <criterion comment="openoffice.org-langpack-et_EE is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36441"/>
            <criterion comment="openoffice.org-langpack-kn_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35845"/>
            <criterion comment="openoffice.org is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36307"/>
            <criterion comment="openoffice.org-langpack-zh_TW is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36505"/>
            <criterion comment="openoffice.org-writer is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36145"/>
            <criterion comment="openoffice.org-langpack-ve_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36546"/>
            <criterion comment="openoffice.org-langpack-ga_IE is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36168"/>
            <criterion comment="openoffice.org-langpack-ta_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36283"/>
            <criterion comment="openoffice.org-langpack-ko_KR is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36322"/>
            <criterion comment="openoffice.org-langpack-or_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36206"/>
            <criterion comment="openoffice.org-langpack-da_DK is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36244"/>
            <criterion comment="openoffice.org-langpack-sr_CS is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36471"/>
            <criterion comment="openoffice.org-langpack-pl_PL is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36483"/>
            <criterion comment="openoffice.org-langpack-fr is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36328"/>
            <criterion comment="openoffice.org-langpack-ts_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35810"/>
            <criterion comment="openoffice.org-javafilter is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36481"/>
            <criterion comment="openoffice.org-langpack-as_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36465"/>
            <criterion comment="openoffice.org-testtools is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36378"/>
            <criterion comment="openoffice.org-langpack-hr_HR is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36013"/>
            <criterion comment="openoffice.org-langpack-de is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36191"/>
            <criterion comment="openoffice.org-emailmerge is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35521"/>
            <criterion comment="openoffice.org-xsltfilter is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36257"/>
            <criterion comment="openoffice.org-langpack-tn_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35797"/>
            <criterion comment="openoffice.org-langpack-te_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36391"/>
            <criterion comment="openoffice.org-langpack-sv is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36398"/>
            <criterion comment="openoffice.org-base is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36329"/>
            <criterion comment="openoffice.org-langpack-ca_ES is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36437"/>
            <criterion comment="openoffice.org-langpack-nr_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36130"/>
            <criterion comment="openoffice.org-core is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35843"/>
            <criterion comment="openoffice.org-langpack-nl is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36220"/>
            <criterion comment="openoffice.org-langpack-ur is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36466"/>
            <criterion comment="openoffice.org-langpack-nn_NO is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36032"/>
            <criterion comment="openoffice.org-langpack-ar is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36187"/>
            <criterion comment="openoffice.org-langpack-ja_JP is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36058"/>
            <criterion comment="openoffice.org-langpack-gu_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36160"/>
            <criterion comment="openoffice.org-langpack-tr_TR is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36457"/>
            <criterion comment="openoffice.org-langpack-eu_ES is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36341"/>
            <criterion comment="openoffice.org-langpack-fi_FI is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36232"/>
            <criterion comment="openoffice.org-graphicfilter is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36089"/>
            <criterion comment="openoffice.org-pyuno is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36514"/>
            <criterion comment="openoffice.org-langpack-ml_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36486"/>
            <criterion comment="openoffice.org-langpack-gl_ES is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36508"/>
            <criterion comment="openoffice.org-langpack-zh_CN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36507"/>
            <criterion comment="openoffice.org-langpack-xh_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36348"/>
            <criterion comment="openoffice.org-langpack-it is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36559"/>
            <criterion comment="openoffice.org-langpack-es is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36282"/>
            <criterion comment="openoffice.org-langpack-nb_NO is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36405"/>
            <criterion comment="openoffice.org-langpack-sl_SI is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36492"/>
            <criterion comment="openoffice.org-draw is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36369"/>
            <criterion comment="openoffice.org-langpack-nso_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36308"/>
            <criterion comment="openoffice.org-langpack-ms_MY is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36358"/>
            <criterion comment="openoffice.org-langpack-el_GR is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35561"/>
            <criterion comment="openoffice.org-langpack-hu_HU is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36070"/>
            <criterion comment="openoffice.org-langpack-ss_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36189"/>
            <criterion comment="openoffice.org-langpack-bn is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35657"/>
            <criterion comment="openoffice.org-langpack-he_IL is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36204"/>
            <criterion comment="openoffice.org-langpack-pt_PT is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36544"/>
            <criterion comment="openoffice.org-langpack-lt_LT is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36218"/>
            <criterion comment="openoffice.org-langpack-af_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36400"/>
            <criterion comment="openoffice.org-langpack-bg_BG is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36037"/>
            <criterion comment="openoffice.org-calc is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35732"/>
            <criterion comment="openoffice.org-langpack-cs_CZ is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36117"/>
            <criterion comment="openoffice.org-langpack-cy_GB is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36303"/>
            <criterion comment="openoffice.org-langpack-mr_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36306"/>
            <criterion comment="openoffice.org-langpack-th_TH is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35966"/>
            <criterion comment="openoffice.org-langpack-pt_BR is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36467"/>
            <criterion comment="openoffice.org-langpack-ru is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35570"/>
            <criterion comment="openoffice.org-math is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36376"/>
            <criterion comment="openoffice.org-impress is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36339"/>
            <criterion comment="openoffice.org-langpack-st_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35999"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10317" version="5" class="vulnerability">
      <metadata>
        <title>The ip_push_pending_frames function in Linux 2.4.x and 2.6.x before 2.6.16 increments the IP ID field when sending a RST after receiving unsolicited TCP SYN-ACK packets, which allows remote attackers to conduct an Idle Scan (nmap -sI) attack, which bypasses intended protections against such attacks.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1242" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1242"/>
        <description>The ip_push_pending_frames function in Linux 2.4.x and 2.6.x before 2.6.16 increments the IP ID field when sending a RST after receiving unsolicited TCP SYN-ACK packets, which allows remote attackers to conduct an Idle Scan (nmap -sI) attack, which bypasses intended protections against such attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:45.269-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:24.608-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:38.133-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10317 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:44.333-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:34.205-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32158"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32589"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32704"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32562"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32078"/>
            <criterion comment="kernel is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32513"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32231"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32097"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-47.EL" test_ref="oval:org.mitre.oval:tst:32708"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32335"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32833"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32825"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32836"/>
            <criterion comment="kernel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32736"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:31931"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32361"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32793"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32795"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10316" version="5" class="vulnerability">
      <metadata>
        <title>The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file that triggers a free of an uninitialized pointer in (1) the png_read_png function, (2) pCAL chunk handling, or (3) setup of 16-bit gamma tables.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0040" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0040"/>
        <description>The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file that triggers a free of an uninitialized pointer in (1) the png_read_png function, (2) pCAL chunk handling, or (3) setup of 16-bit gamma tables.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:41.054-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:23.922-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:37.453-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10316 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:20.557-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:33.340-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libpng10-devel is earlier than 0:1.0.13-20" test_ref="oval:org.mitre.oval:tst:38394"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38413"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38419"/>
            <criterion comment="libpng-devel is earlier than 2:1.2.2-29" test_ref="oval:org.mitre.oval:tst:38030"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38110"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38217"/>
            <criterion comment="libpng10 is earlier than 0:1.0.13-20" test_ref="oval:org.mitre.oval:tst:38492"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:37995"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:37833"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38347"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38386"/>
            <criterion comment="libpng is earlier than 2:1.2.2-29" test_ref="oval:org.mitre.oval:tst:38509"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:38410"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.34.el3" test_ref="oval:org.mitre.oval:tst:37953"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libpng10-devel is earlier than 0:1.0.16-3.el4_7.3" test_ref="oval:org.mitre.oval:tst:38409"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:37842"/>
            <criterion comment="libpng-devel is earlier than 2:1.2.7-3.el4_7.2" test_ref="oval:org.mitre.oval:tst:38214"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:38355"/>
            <criterion comment="libpng10 is earlier than 0:1.0.16-3.el4_7.3" test_ref="oval:org.mitre.oval:tst:38163"/>
            <criterion comment="firefox is earlier than 0:3.0.7-1.el4" test_ref="oval:org.mitre.oval:tst:38405"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:38148"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:38132"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:38364"/>
            <criterion comment="libpng is earlier than 2:1.2.7-3.el4_7.2" test_ref="oval:org.mitre.oval:tst:38398"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-38.el4" test_ref="oval:org.mitre.oval:tst:38204"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:38168"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:37685"/>
            <criterion comment="firefox is earlier than 0:3.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:38372"/>
            <criterion comment="libpng-devel is earlier than 2:1.2.10-7.1.el5_3.2" test_ref="oval:org.mitre.oval:tst:38188"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.7-1.el5" test_ref="oval:org.mitre.oval:tst:38365"/>
            <criterion comment="libpng is earlier than 2:1.2.10-7.1.el5_3.2" test_ref="oval:org.mitre.oval:tst:38283"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10315" version="5" class="vulnerability">
      <metadata>
        <title>Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2, as used in Xen and possibly other products, might allow local users to execute arbitrary code via unspecified vectors related to "attempting to mark non-existent regions as dirty," aka the "bitblt" heap overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1320" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1320"/>
        <description>Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2, as used in Xen and possibly other products, might allow local users to execute arbitrary code via unspecified vectors related to "attempting to mark non-existent regions as dirty," aka the "bitblt" heap overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:27.914-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:23.699-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:37.218-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10315 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:56.915-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:32.949-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="xen-libs is earlier than 0:3.0.3-25.0.4.el5" test_ref="oval:org.mitre.oval:tst:34182"/>
          <criterion comment="xen is earlier than 0:3.0.3-25.0.4.el5" test_ref="oval:org.mitre.oval:tst:33194"/>
          <criterion comment="xen-devel is earlier than 0:3.0.3-25.0.4.el5" test_ref="oval:org.mitre.oval:tst:34003"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10314" version="5" class="vulnerability">
      <metadata>
        <title>nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1072"/>
        <description>nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:11.443-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:23.179-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:36.647-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10314 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:32.604-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:32.226-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38892"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38222"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:37924"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38847"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38834"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38158"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38513"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38317"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38277"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38667"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38814"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:37971"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38820"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38641"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38838"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38699"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38813"/>
            <criterion comment="kernel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38840"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38890"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38529"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38350"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38066"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38388"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10313" version="5" class="vulnerability">
      <metadata>
        <title>The hypervisor_callback function in Xen, possibly before 3.4.0, as applied to the Linux kernel 2.6.30-rc4, 2.6.18, and probably other versions allows guest user applications to cause a denial of service (kernel oops) of the guest OS by triggering a segmentation fault in "certain address ranges."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1758" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1758"/>
        <description>The hypervisor_callback function in Xen, possibly before 3.4.0, as applied to the Linux kernel 2.6.30-rc4, 2.6.18, and probably other versions allows guest user applications to cause a denial of service (kernel oops) of the guest OS by triggering a segmentation fault in "certain address ranges."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:18.254-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:22.580-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:36.122-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10313 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:28.808-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:31.508-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38892"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38222"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:37924"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38847"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38834"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38158"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38513"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38317"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38277"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38667"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.3.EL" test_ref="oval:org.mitre.oval:tst:38814"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:37971"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38820"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38641"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38838"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38699"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38813"/>
            <criterion comment="kernel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38840"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38890"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38529"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38350"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38066"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-128.1.14.el5" test_ref="oval:org.mitre.oval:tst:38388"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10312" version="5" class="vulnerability">
      <metadata>
        <title>SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL commands via crafted multibyte encodings in character sets such as SJIS, BIG5, and GBK, which are not properly handled when the mysql_real_escape function is used to escape the input.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2753" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2753"/>
        <description>SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL commands via crafted multibyte encodings in character sets such as SJIS, BIG5, and GBK, which are not properly handled when the mysql_real_escape function is used to escape the input.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:07.679-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:22.335-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:35.722-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10312 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:52.262-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:31.171-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mysql is earlier than 0:4.1.20-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32252"/>
          <criterion comment="mysql-devel is earlier than 0:4.1.20-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32551"/>
          <criterion comment="mysql-bench is earlier than 0:4.1.20-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32245"/>
          <criterion comment="mysql-server is earlier than 0:4.1.20-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:32560"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10311" version="5" class="vulnerability">
      <metadata>
        <title>OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certificates that require extra time to process when using RSA signature verification.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2940" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2940"/>
        <description>OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certificates that require extra time to process when using RSA signature verification.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:48.330-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:21.962-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:35.374-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10311 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:39.527-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:30.648-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.7a-33.21" test_ref="oval:org.mitre.oval:tst:32990"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.7a-33.21" test_ref="oval:org.mitre.oval:tst:32592"/>
            <criterion comment="openssl is earlier than 0:0.9.7a-33.21" test_ref="oval:org.mitre.oval:tst:32812"/>
            <criterion comment="openssl096b is earlier than 0:0.9.6b-16.46" test_ref="oval:org.mitre.oval:tst:32771"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.7a-43.14" test_ref="oval:org.mitre.oval:tst:32875"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.7a-43.14" test_ref="oval:org.mitre.oval:tst:33058"/>
            <criterion comment="openssl is earlier than 0:0.9.7a-43.14" test_ref="oval:org.mitre.oval:tst:33093"/>
            <criterion comment="openssl096b is earlier than 0:0.9.6b-22.46" test_ref="oval:org.mitre.oval:tst:32789"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10310" version="5" class="vulnerability">
      <metadata>
        <title>The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3939" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3939"/>
        <description>The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:30.485-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:21.444-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:34.739-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10310 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:06.503-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:29.947-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39984"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:40053"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39873"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39932"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39894"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39858"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:40016"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39833"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39555"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39325"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:40011"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40050"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39464"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39090"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40063"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39443"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39703"/>
            <criterion comment="kernel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39080"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39862"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40057"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40029"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39849"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40039"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10309" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in the do_add_counters function in netfilter for Linux kernel 2.6.16 allows local users with CAP_NET_ADMIN capabilities to read kernel memory by triggering the race condition in a way that produces a size value that is inconsistent with allocated memory, which leads to a buffer over-read in IPT_ENTRY_ITERATE.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0039" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0039"/>
        <description>Race condition in the do_add_counters function in netfilter for Linux kernel 2.6.16 allows local users with CAP_NET_ADMIN capabilities to read kernel memory by triggering the race condition in a way that produces a size value that is inconsistent with allocated memory, which leads to a buffer over-read in IPT_ENTRY_ITERATE.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:39.240-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:21.003-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:34.323-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10309 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:35.875-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:29.554-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32678"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32900"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:33014"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32947"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32944"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32956"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32602"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:33081"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.3.EL" test_ref="oval:org.mitre.oval:tst:32892"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10308" version="5" class="vulnerability">
      <metadata>
        <title>The _dbus_validate_signature_with_reason function (dbus-marshal-validate.c) in D-Bus (aka DBus) before 1.2.14 uses incorrect logic to validate a basic type, which allows remote attackers to spoof a signature via a crafted key.  NOTE: this is due to an incorrect fix for CVE-2008-3834.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1189" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1189"/>
        <description>The _dbus_validate_signature_with_reason function (dbus-marshal-validate.c) in D-Bus (aka DBus) before 1.2.14 uses incorrect logic to validate a basic type, which allows remote attackers to spoof a signature via a crafted key.  NOTE: this is due to an incorrect fix for CVE-2008-3834.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:54.219-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:20.773-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:33.980-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10308 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:50.156-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:29.223-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="dbus-devel is earlier than 0:1.1.2-12.el5_4.1" test_ref="oval:org.mitre.oval:tst:39328"/>
          <criterion comment="dbus-x11 is earlier than 0:1.1.2-12.el5_4.1" test_ref="oval:org.mitre.oval:tst:39398"/>
          <criterion comment="dbus-libs is earlier than 0:1.1.2-12.el5_4.1" test_ref="oval:org.mitre.oval:tst:39826"/>
          <criterion comment="dbus is earlier than 0:1.1.2-12.el5_4.1" test_ref="oval:org.mitre.oval:tst:39846"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10307" version="5" class="vulnerability">
      <metadata>
        <title>exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a large IFD nesting level, which causes significant stack recursion.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1043" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1043"/>
        <description>exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a large IFD nesting level, which causes significant stack recursion.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:09.125-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:20.310-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:32.810-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10307 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:40.952-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:28.589-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31759"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:30948"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31858"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31704"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31679"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31505"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-23.ent" test_ref="oval:org.mitre.oval:tst:31819"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31329"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31673"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31737"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31787"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31830"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31383"/>
            <criterion comment="php is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31557"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31541"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31697"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31847"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31523"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31779"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31261"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.6" test_ref="oval:org.mitre.oval:tst:31733"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10306" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11 might allow remote attackers to execute arbitrary code via crafted Composition Time To Sample (ctts) atom data in a malformed QuickTime media .mov file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0386" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0386"/>
        <description>Heap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11 might allow remote attackers to execute arbitrary code via crafted Composition Time To Sample (ctts) atom data in a malformed QuickTime media .mov file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:55.765-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:20.106-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:32.564-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10306 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:25.559-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:28.266-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="gstreamer-plugins-good-devel is earlier than 0:0.10.9-1.el5_3.1" test_ref="oval:org.mitre.oval:tst:38180"/>
          <criterion comment="gstreamer-plugins-good is earlier than 0:0.10.9-1.el5_3.1" test_ref="oval:org.mitre.oval:tst:38318"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10305" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics (AFM) files with a modified number of character metrics (StartCharMetrics), which leads to a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3739" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3739"/>
        <description>Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics (AFM) files with a modified number of character metrics (StartCharMetrics), which leads to a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:13.678-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:19.221-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:31.478-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10305 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:19.148-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:27.296-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32914"/>
            <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32731"/>
            <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32743"/>
            <criterion comment="XFree86-libs is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:33049"/>
            <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:33018"/>
            <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32923"/>
            <criterion comment="XFree86-twm is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:33030"/>
            <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32967"/>
            <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32863"/>
            <criterion comment="XFree86-doc is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32067"/>
            <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32995"/>
            <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32642"/>
            <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32901"/>
            <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32927"/>
            <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32766"/>
            <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32821"/>
            <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32286"/>
            <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32798"/>
            <criterion comment="XFree86-xdm is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32943"/>
            <criterion comment="XFree86-sdk is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32071"/>
            <criterion comment="XFree86 is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32966"/>
            <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32931"/>
            <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32847"/>
            <criterion comment="XFree86-xfs is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32849"/>
            <criterion comment="XFree86-tools is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32945"/>
            <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32827"/>
            <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32897"/>
            <criterion comment="XFree86-xauth is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:33027"/>
            <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32324"/>
            <criterion comment="XFree86-devel is earlier than 0:4.3.0-113.EL" test_ref="oval:org.mitre.oval:tst:32850"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32455"/>
            <criterion comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32518"/>
            <criterion comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32775"/>
            <criterion comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32899"/>
            <criterion comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32949"/>
            <criterion comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32941"/>
            <criterion comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:33005"/>
            <criterion comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32769"/>
            <criterion comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32227"/>
            <criterion comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:33008"/>
            <criterion comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32830"/>
            <criterion comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32907"/>
            <criterion comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:33034"/>
            <criterion comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32741"/>
            <criterion comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32935"/>
            <criterion comment="xorg-x11 is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32792"/>
            <criterion comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32908"/>
            <criterion comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.13.37.2" test_ref="oval:org.mitre.oval:tst:32709"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10304" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as that of the built-in CA root certificate, which allows remote attackers to cause a denial of service to SSL pages because the malicious certificate is treated as invalid.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0758" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0758"/>
        <description>Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as that of the built-in CA root certificate, which allows remote attackers to cause a denial of service to SSL pages because the malicious certificate is treated as invalid.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:01.110-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:18.846-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:31.001-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10304 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:07:31.592-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:26.849-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mozilla-js-debugger is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30799"/>
          <criterion comment="mozilla is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30278"/>
          <criterion comment="mozilla-chat is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30755"/>
          <criterion comment="mozilla-mail is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30570"/>
          <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30230"/>
          <criterion comment="mozilla-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30288"/>
          <criterion comment="mozilla-nss is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30323"/>
          <criterion comment="mozilla-nss-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30339"/>
          <criterion comment="mozilla-nspr is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30813"/>
          <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30660"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10303" version="5" class="vulnerability">
      <metadata>
        <title>Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (null dereference) via unknown vectors in the (1) SCSI, (2) sFlow, or (3) RTnet dissectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3246" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3246"/>
        <description>Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (null dereference) via unknown vectors in the (1) SCSI, (2) sFlow, or (3) RTnet dissectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:43.663-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:18.566-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:30.696-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10303 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:29.778-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:26.465-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.13-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32189"/>
            <criterion comment="ethereal is earlier than 0:0.10.13-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32138"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.13-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32341"/>
            <criterion comment="ethereal is earlier than 0:0.10.13-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32202"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10302" version="5" class="vulnerability">
      <metadata>
        <title>Format string vulnerability in the SetImageInfo function in image.c for ImageMagick before 6.0.2.5 may allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a filename argument to convert, which may be called by other web applications.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0397" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0397"/>
        <description>Format string vulnerability in the SetImageInfo function in image.c for ImageMagick before 6.0.2.5 may allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a filename argument to convert, which may be called by other web applications.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:27.403-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:18.212-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:30.297-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10302 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:55.254-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:25.904-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30471"/>
            <criterion comment="ImageMagick is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30355"/>
            <criterion comment="ImageMagick-perl is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30877"/>
            <criterion comment="ImageMagick-devel is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30918"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:5.5.6-13" test_ref="oval:org.mitre.oval:tst:30938"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-10" test_ref="oval:org.mitre.oval:tst:31506"/>
            <criterion comment="ImageMagick is earlier than 0:6.0.7.1-10" test_ref="oval:org.mitre.oval:tst:31401"/>
            <criterion comment="ImageMagick-perl is earlier than 0:6.0.7.1-10" test_ref="oval:org.mitre.oval:tst:31198"/>
            <criterion comment="ImageMagick-devel is earlier than 0:6.0.7.1-10" test_ref="oval:org.mitre.oval:tst:31075"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:6.0.7.1-10" test_ref="oval:org.mitre.oval:tst:31459"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10301" version="5" class="vulnerability">
      <metadata>
        <title>Linux kernel 2.6.17 and earlier, when running on IA64 or SPARC platforms, allows local users to cause a denial of service (crash) via a malformed ELF file that triggers memory maps that cross region boundaries.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4538"/>
        <description>Linux kernel 2.6.17 and earlier, when running on IA64 or SPARC platforms, allows local users to cause a denial of service (crash) via a malformed ELF file that triggers memory maps that cross region boundaries.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:06.090-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:17.683-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:29.775-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10301 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:02:00.876-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:08:30.536-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:25.354-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35660"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35620"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35663"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35627"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35653"/>
            <criterion comment="kernel is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35769"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35035"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35699"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:34809"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33204"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33278"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33306"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32378"/>
            <criterion comment="kernel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33145"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33107"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32620"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32645"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33057"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10300" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the Virtual Machine in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors related to "code generation."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1102" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1102"/>
        <description>Unspecified vulnerability in the Virtual Machine in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors related to "code generation."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:00.231-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:17.428-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:29.451-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10300 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:38.011-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:24.694-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:38276"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37661"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37652"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37769"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:38561"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1030" version="2" class="vulnerability">
      <metadata>
        <title>Windows Server 2003 COM Internet Services/RPC over HTTP Proxy Component Buffer Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>COM Internet Services</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0807" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0807"/>
        <description>Buffer overflow in the COM Internet Services and in the RPC over HTTP Proxy components for Microsoft Windows NT Server 4.0, NT 4.0 Terminal Server Edition, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service via a crafted request.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-25T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-06-18T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-07-02T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="added back the development_class entity for ste:1143 that was mistakenly removed during the conversion from version 4.2 to 5.0" date="2007-01-25T14:48:00.383-05:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2007-01-25T14:48:30.487-05:00">INTERIM</status_change>
            <modified comment="added back the development_class entity for ste:1142 that was mistakenly removed during the conversion from version 4.2 to 5.0" date="2007-01-25T14:48:00.798-05:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </modified>
            <status_change date="2007-02-20T13:39:26.817-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="AND" comment="Windows Server 2003 (excluding WinXP 64-bit, Version 2003) is installed">
            <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
            <criterion comment="this is an NT Workstation" negate="true" test_ref="oval:org.mitre.oval:tst:2703"/>
          </criteria>
          <criteria operator="OR" comment="a vulnerable version of rpcproxy.dll exists on Server 2003">
            <criterion comment="machine has followed the GDR update path and rpcproxy.dll is less than 5.2.3790.137" negate="false" test_ref="oval:org.mitre.oval:tst:1274"/>
            <criterion comment="machine has followed the QFE update path and rpcproxy.dll is less than 5.2.3790.141" negate="false" test_ref="oval:org.mitre.oval:tst:1273"/>
          </criteria>
          <criterion comment="the patch kb828741 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1499"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="COM Internet Services are enabled" negate="false" test_ref="oval:org.mitre.oval:tst:1383"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10299" version="3" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0655" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0655"/>
        <description>Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:04.870-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:17.128-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:28.919-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criteria operator="OR">
            <criterion comment="acroread-plugin is earlier than 0:8.1.2-1.el3.6" test_ref="oval:org.mitre.oval:tst:36324"/>
            <criterion comment="acroread is earlier than 0:8.1.2-1.el3.6" test_ref="oval:org.mitre.oval:tst:36153"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="acroread-plugin is earlier than 0:8.1.2-1.el4.2" test_ref="oval:org.mitre.oval:tst:36156"/>
            <criterion comment="acroread is earlier than 0:8.1.2-1.el4.2" test_ref="oval:org.mitre.oval:tst:36293"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="acroread-plugin is earlier than 0:8.1.2-1.el5.3" test_ref="oval:org.mitre.oval:tst:35792"/>
            <criterion comment="acroread is earlier than 0:8.1.2-1.el5.3" test_ref="oval:org.mitre.oval:tst:35912"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10298" version="5" class="vulnerability">
      <metadata>
        <title>nls_ascii.c in Linux before 2.6.8.1 uses an incorrect table size, which allows attackers to cause a denial of service (kernel crash) via a buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0177" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0177"/>
        <description>nls_ascii.c in Linux before 2.6.8.1 uses an incorrect table size, which allows attackers to cause a denial of service (kernel crash) via a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:39.736-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:16.794-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:28.601-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10298 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:37.425-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:24.328-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30633"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:31009"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30369"/>
          <criterion comment="kernel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:31205"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30421"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30594"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.3.EL" test_ref="oval:org.mitre.oval:tst:30616"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10297" version="5" class="vulnerability">
      <metadata>
        <title>The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count counter when an error occurs after the mm_struct for a child process has been activated, which triggers a memory leak that allows local users to cause a denial of service (memory exhaustion) via the clone (CLONE_VM) system call.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0427" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0427"/>
        <description>The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count counter when an error occurs after the mm_struct for a child process has been activated, which triggers a memory leak that allows local users to cause a denial of service (memory exhaustion) via the clone (CLONE_VM) system call.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:33.075-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:16.425-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:28.258-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10297 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:39.359-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:23.907-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-15.0.2.EL" test_ref="oval:org.mitre.oval:tst:30449"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-15.0.2.EL" test_ref="oval:org.mitre.oval:tst:30739"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-15.0.2.EL" test_ref="oval:org.mitre.oval:tst:30418"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-15.0.2.EL" test_ref="oval:org.mitre.oval:tst:30721"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-15.0.2.EL" test_ref="oval:org.mitre.oval:tst:30772"/>
          <criterion comment="kernel is earlier than 0:2.4.21-15.0.2.EL" test_ref="oval:org.mitre.oval:tst:30655"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-15.0.2.EL" test_ref="oval:org.mitre.oval:tst:30574"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-15.0.2.EL" test_ref="oval:org.mitre.oval:tst:30681"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-15.0.2.EL" test_ref="oval:org.mitre.oval:tst:30207"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10296" version="5" class="vulnerability">
      <metadata>
        <title>Double free vulnerability in the gss_krb5int_make_seal_token_v3 function in lib/gssapi/krb5/k5sealv3.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5971" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5971"/>
        <description>Double free vulnerability in the gss_krb5int_make_seal_token_v3 function in lib/gssapi/krb5/k5sealv3.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:05.783-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:15.924-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:27.804-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10296 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:36:30.689-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:23.426-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.3.4-54.el4_6.1" test_ref="oval:org.mitre.oval:tst:36541"/>
            <criterion comment="krb5 is earlier than 0:1.3.4-54.el4_6.1" test_ref="oval:org.mitre.oval:tst:36418"/>
            <criterion comment="krb5-libs is earlier than 0:1.3.4-54.el4_6.1" test_ref="oval:org.mitre.oval:tst:36371"/>
            <criterion comment="krb5-server is earlier than 0:1.3.4-54.el4_6.1" test_ref="oval:org.mitre.oval:tst:36482"/>
            <criterion comment="krb5-devel is earlier than 0:1.3.4-54.el4_6.1" test_ref="oval:org.mitre.oval:tst:36207"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.6.1-17.el5_1.1" test_ref="oval:org.mitre.oval:tst:36318"/>
            <criterion comment="krb5 is earlier than 0:1.6.1-17.el5_1.1" test_ref="oval:org.mitre.oval:tst:36285"/>
            <criterion comment="krb5-libs is earlier than 0:1.6.1-17.el5_1.1" test_ref="oval:org.mitre.oval:tst:36069"/>
            <criterion comment="krb5-server is earlier than 0:1.6.1-17.el5_1.1" test_ref="oval:org.mitre.oval:tst:36233"/>
            <criterion comment="krb5-devel is earlier than 0:1.6.1-17.el5_1.1" test_ref="oval:org.mitre.oval:tst:36199"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10295" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0523" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0523"/>
        <description>Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:06.779-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:15.656-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:27.488-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10295 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:46.918-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:23.104-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="krb5-workstation is earlier than 0:1.2.7-24" test_ref="oval:org.mitre.oval:tst:30630"/>
          <criterion comment="krb5 is earlier than 0:1.2.7-24" test_ref="oval:org.mitre.oval:tst:30609"/>
          <criterion comment="krb5-libs is earlier than 0:1.2.7-24" test_ref="oval:org.mitre.oval:tst:30697"/>
          <criterion comment="krb5-server is earlier than 0:1.2.7-24" test_ref="oval:org.mitre.oval:tst:30438"/>
          <criterion comment="krb5-devel is earlier than 0:1.2.7-24" test_ref="oval:org.mitre.oval:tst:30710"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10294" version="5" class="vulnerability">
      <metadata>
        <title>OpenOffice (OOo) 1.1.2 creates predictable directory names with insecure permissions during startup, which may allow local users to read or list files of other users.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0752" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0752"/>
        <description>OpenOffice (OOo) 1.1.2 creates predictable directory names with insecure permissions during startup, which may allow local users to read or list files of other users.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:35.632-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:15.405-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:27.202-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10294 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:20.322-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:22.749-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="openoffice.org-libs is earlier than 0:1.1.0-16.14.EL" test_ref="oval:org.mitre.oval:tst:30881"/>
          <criterion comment="openoffice.org is earlier than 0:1.1.0-16.14.EL" test_ref="oval:org.mitre.oval:tst:30168"/>
          <criterion comment="openoffice.org-i18n is earlier than 0:1.1.0-16.14.EL" test_ref="oval:org.mitre.oval:tst:30547"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10293" version="5" class="vulnerability">
      <metadata>
        <title>ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2926"/>
        <description>ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:41.903-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:14.689-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:26.475-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10293 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:27.482-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:22.127-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="bind-utils is earlier than 20:9.2.4-21.el3" test_ref="oval:org.mitre.oval:tst:34959"/>
            <criterion comment="bind-devel is earlier than 20:9.2.4-21.el3" test_ref="oval:org.mitre.oval:tst:34722"/>
            <criterion comment="bind-chroot is earlier than 20:9.2.4-21.el3" test_ref="oval:org.mitre.oval:tst:34537"/>
            <criterion comment="bind is earlier than 20:9.2.4-21.el3" test_ref="oval:org.mitre.oval:tst:34858"/>
            <criterion comment="bind-libs is earlier than 20:9.2.4-21.el3" test_ref="oval:org.mitre.oval:tst:34076"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="bind-utils is earlier than 20:9.2.4-27.0.1.el4" test_ref="oval:org.mitre.oval:tst:34759"/>
            <criterion comment="bind-devel is earlier than 20:9.2.4-27.0.1.el4" test_ref="oval:org.mitre.oval:tst:34763"/>
            <criterion comment="bind-chroot is earlier than 20:9.2.4-27.0.1.el4" test_ref="oval:org.mitre.oval:tst:34848"/>
            <criterion comment="bind is earlier than 20:9.2.4-27.0.1.el4" test_ref="oval:org.mitre.oval:tst:34742"/>
            <criterion comment="bind-libs is earlier than 20:9.2.4-27.0.1.el4" test_ref="oval:org.mitre.oval:tst:35029"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="bind-utils is earlier than 30:9.3.3-9.0.1.el5" test_ref="oval:org.mitre.oval:tst:34701"/>
            <criterion comment="bind-libbind-devel is earlier than 30:9.3.3-9.0.1.el5" test_ref="oval:org.mitre.oval:tst:34620"/>
            <criterion comment="bind-devel is earlier than 30:9.3.3-9.0.1.el5" test_ref="oval:org.mitre.oval:tst:35061"/>
            <criterion comment="bind-chroot is earlier than 30:9.3.3-9.0.1.el5" test_ref="oval:org.mitre.oval:tst:34979"/>
            <criterion comment="caching-nameserver is earlier than 30:9.3.3-9.0.1.el5" test_ref="oval:org.mitre.oval:tst:35064"/>
            <criterion comment="bind-sdb is earlier than 30:9.3.3-9.0.1.el5" test_ref="oval:org.mitre.oval:tst:35026"/>
            <criterion comment="bind is earlier than 30:9.3.3-9.0.1.el5" test_ref="oval:org.mitre.oval:tst:34973"/>
            <criterion comment="bind-libs is earlier than 30:9.3.3-9.0.1.el5" test_ref="oval:org.mitre.oval:tst:35056"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10292" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to CairoOutputDev (CairoOutputDev.cc).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1187" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1187"/>
        <description>Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to CairoOutputDev (CairoOutputDev.cc).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:30.620-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:14.435-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:26.190-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10292 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:47:18.980-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:21.754-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38512"/>
          <criterion comment="poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38500"/>
          <criterion comment="poppler is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38760"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10291" version="5" class="vulnerability">
      <metadata>
        <title>The clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service (daemon crash) via crafted TRACE requests that trigger an assertion error.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1560" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1560"/>
        <description>The clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service (daemon crash) via crafted TRACE requests that trigger an assertion error.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:36.485-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:14.197-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:25.769-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10291 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:26.282-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:21.456-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="squid is earlier than 7:2.6.STABLE6-4.el5" test_ref="oval:org.mitre.oval:tst:33965"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10290" version="3" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4381" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4381"/>
        <description>Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:54.799-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:13.006-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:24.470-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criteria operator="OR">
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:35438"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:36312"/>
            <criterion comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:36020"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:36170"/>
            <criterion comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:36131"/>
            <criterion comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el3" test_ref="oval:org.mitre.oval:tst:35578"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:35718"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:36338"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:35439"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34859"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34890"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35892"/>
            <criterion comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35850"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36357"/>
            <criterion comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:36067"/>
            <criterion comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el4" test_ref="oval:org.mitre.oval:tst:35854"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35532"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34949"/>
            <criterion comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35322"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36219"/>
            <criterion comment="java-1.5.0-bea is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34920"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34613"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35015"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35875"/>
            <criterion comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35815"/>
            <criterion comment="java-1.5.0-bea-src is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35346"/>
            <criterion comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35349"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:34956"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.5-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35062"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36292"/>
            <criterion comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.11-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35189"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34825"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34270"/>
            <criterion comment="java-1.4.2-bea-missioncontrol is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35296"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36198"/>
            <criterion comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35192"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36227"/>
            <criterion comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36087"/>
            <criterion comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35972"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36003"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34955"/>
            <criterion comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35247"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36350"/>
            <criterion comment="java-1.5.0-bea is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35253"/>
            <criterion comment="java-1.4.2-bea-demo is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36127"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:35124"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:35140"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35886"/>
            <criterion comment="java-1.5.0-bea-src is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:34479"/>
            <criterion comment="java-1.5.0-bea-missioncontrol is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35180"/>
            <criterion comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36301"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34724"/>
            <criterion comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35169"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.5-1jpp.0.1.el5" test_ref="oval:org.mitre.oval:tst:34692"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35822"/>
            <criterion comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.11-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:35150"/>
            <criterion comment="java-1.4.2-bea-src is earlier than 0:1.4.2.16-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36128"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10289" version="5" class="vulnerability">
      <metadata>
        <title>The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to "source/destination IP address confusion."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-6123" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6123"/>
        <description>The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow rules, which allows remote attackers to bypass intended access restrictions and execute SNMP queries, related to "source/destination IP address confusion."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:28.690-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:12.673-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:23.943-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10289 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:48.422-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:21.138-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="net-snmp-utils is earlier than 0:5.0.9-2.30E.27" test_ref="oval:org.mitre.oval:tst:38335"/>
          <criterion comment="net-snmp is earlier than 0:5.0.9-2.30E.27" test_ref="oval:org.mitre.oval:tst:38391"/>
          <criterion comment="net-snmp-libs is earlier than 0:5.0.9-2.30E.27" test_ref="oval:org.mitre.oval:tst:38215"/>
          <criterion comment="net-snmp-perl is earlier than 0:5.0.9-2.30E.27" test_ref="oval:org.mitre.oval:tst:38141"/>
          <criterion comment="net-snmp-devel is earlier than 0:5.0.9-2.30E.27" test_ref="oval:org.mitre.oval:tst:37845"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10288" version="5" class="vulnerability">
      <metadata>
        <title>Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote attackers to execute arbitrary code via unspecified vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4995" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4995"/>
        <description>Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote attackers to execute arbitrary code via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:09.218-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:12.352-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:23.657-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10288 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:09.354-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:20.769-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="openssl-perl is earlier than 0:0.9.8b-8.3.el5_0.2" test_ref="oval:org.mitre.oval:tst:35181"/>
          <criterion comment="openssl-devel is earlier than 0:0.9.8b-8.3.el5_0.2" test_ref="oval:org.mitre.oval:tst:35460"/>
          <criterion comment="openssl is earlier than 0:0.9.8b-8.3.el5_0.2" test_ref="oval:org.mitre.oval:tst:35053"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10287" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in JBIG2Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via unknown attack vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3628" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3628"/>
        <description>Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in JBIG2Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via unknown attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:04.792-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:11.563-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:23.108-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10287 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:44.649-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:20.142-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32436"/>
            <criterion comment="tetex-dvips is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32311"/>
            <criterion comment="tetex-fonts is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32279"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.34" test_ref="oval:org.mitre.oval:tst:32490"/>
            <criterion comment="tetex is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32507"/>
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.34" test_ref="oval:org.mitre.oval:tst:32463"/>
            <criterion comment="tetex-afm is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32377"/>
            <criterion comment="xpdf is earlier than 1:2.02-9.8" test_ref="oval:org.mitre.oval:tst:31474"/>
            <criterion comment="tetex-xdvi is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:31613"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.34" test_ref="oval:org.mitre.oval:tst:31538"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32260"/>
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-3.6" test_ref="oval:org.mitre.oval:tst:32395"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32095"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-3.6" test_ref="oval:org.mitre.oval:tst:31805"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32489"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.9" test_ref="oval:org.mitre.oval:tst:31551"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32199"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-7.3" test_ref="oval:org.mitre.oval:tst:32230"/>
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.9" test_ref="oval:org.mitre.oval:tst:32368"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32308"/>
            <criterion comment="xpdf is earlier than 1:3.00-11.10" test_ref="oval:org.mitre.oval:tst:32152"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32333"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32317"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.9" test_ref="oval:org.mitre.oval:tst:32431"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10286" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557"/>
        <description>Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:57.549-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:10.398-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:21.851-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10286 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:43.142-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:19.149-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:38010"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37683"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37468"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37994"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37569"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37746"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-51.ent" test_ref="oval:org.mitre.oval:tst:37938"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38324"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38288"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38029"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:37974"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38154"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38499"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38401"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38018"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38505"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38494"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38075"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38387"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38058"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.15" test_ref="oval:org.mitre.oval:tst:38202"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38147"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38305"/>
            <criterion comment="php-common is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38268"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38298"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:37882"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:37952"/>
            <criterion comment="php is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38099"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38415"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38511"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38115"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38367"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38569"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38440"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38536"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38507"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38316"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38493"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:37667"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-23.2.el5_3" test_ref="oval:org.mitre.oval:tst:38421"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10285" version="5" class="vulnerability">
      <metadata>
        <title>The kernel strncpy function in Linux 2.4 and 2.5 does not %NUL pad the buffer on architectures other than x86, as opposed to the expected behavior of strncpy as implemented in libc, which could lead to information leaks.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0465" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0465"/>
        <description>The kernel strncpy function in Linux 2.4 and 2.5 does not %NUL pad the buffer on architectures other than x86, as opposed to the expected behavior of strncpy as implemented in libc, which could lead to information leaks.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:37.666-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:09.912-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:21.358-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10285 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:22.111-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:18.694-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30346"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30006"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30702"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30513"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30280"/>
          <criterion comment="kernel is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30056"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30508"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30654"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-15.EL" test_ref="oval:org.mitre.oval:tst:30307"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10284" version="5" class="vulnerability">
      <metadata>
        <title>The (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh scripts in the ESP Ghostscript (espgs) package in Trustix Secure Linux 1.5 through 2.1, and other operating systems, allow local users to overwrite files via a symlink attack on temporary files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0967" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0967"/>
        <description>The (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh scripts in the ESP Ghostscript (espgs) package in Trustix Secure Linux 1.5 through 2.1, and other operating systems, allow local users to overwrite files via a symlink attack on temporary files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:44.151-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:09.587-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:20.677-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10284 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:19:00.271-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:18.381-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="hpijs is earlier than 0:1.3-32.1.10" test_ref="oval:org.mitre.oval:tst:31159"/>
          <criterion comment="ghostscript-devel is earlier than 0:7.05-32.1.10" test_ref="oval:org.mitre.oval:tst:31011"/>
          <criterion comment="ghostscript is earlier than 0:7.05-32.1.10" test_ref="oval:org.mitre.oval:tst:31286"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10283" version="5" class="vulnerability">
      <metadata>
        <title>Linux kernel 2.6.28 allows local users to cause a denial of service ("soft lockup" and process loss) via a large number of sendmsg function calls, which does not block during AF_UNIX garbage collection and triggers an OOM condition, a different vulnerability than CVE-2008-5029.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5300" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5300"/>
        <description>Linux kernel 2.6.28 allows local users to cause a denial of service ("soft lockup" and process loss) via a large number of sendmsg function calls, which does not block during AF_UNIX garbage collection and triggers an OOM condition, a different vulnerability than CVE-2008-5029.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:29.527-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:08.670-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:19.863-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10283 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:31.964-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:17.450-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39591"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39396"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39586"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39171"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39299"/>
            <criterion comment="kernel is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39151"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39468"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:39460"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-63.EL" test_ref="oval:org.mitre.oval:tst:38810"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37830"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37968"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37984"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37633"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37352"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:38043"/>
            <criterion comment="kernel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37989"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37908"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37748"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:37825"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-78.0.13.EL" test_ref="oval:org.mitre.oval:tst:38002"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38161"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:37996"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38259"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:37366"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:37939"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38003"/>
            <criterion comment="kernel is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38294"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38054"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:37318"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38086"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38226"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-128.el5" test_ref="oval:org.mitre.oval:tst:38094"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10282" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server (tog-pegasus), when compiled to use PAM and without PEGASUS_USE_PAM_STANDALONE_PROC defined, might allow remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2007-5360.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0003" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0003"/>
        <description>Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server (tog-pegasus), when compiled to use PAM and without PEGASUS_USE_PAM_STANDALONE_PROC defined, might allow remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2007-5360.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:08.056-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:08.377-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:19.165-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10282 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:35:22.689-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:16.938-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tog-pegasus-test is earlier than 2:2.5.1-5.el4_6.1" test_ref="oval:org.mitre.oval:tst:35849"/>
            <criterion comment="tog-pegasus is earlier than 2:2.5.1-5.el4_6.1" test_ref="oval:org.mitre.oval:tst:35802"/>
            <criterion comment="tog-pegasus-devel is earlier than 2:2.5.1-5.el4_6.1" test_ref="oval:org.mitre.oval:tst:35855"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tog-pegasus is earlier than 2:2.6.1-2.el5_1.1" test_ref="oval:org.mitre.oval:tst:35798"/>
            <criterion comment="tog-pegasus-devel is earlier than 2:2.6.1-2.el5_1.1" test_ref="oval:org.mitre.oval:tst:35906"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10281" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer signedness errors in libgadu, as used in ekg before 1.6rc2 and other packages, may allow remote attackers to cause a denial of service or execute arbitrary code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2369" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2369"/>
        <description>Multiple integer signedness errors in libgadu, as used in ekg before 1.6rc2 and other packages, may allow remote attackers to cause a denial of service or execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:22.813-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:08.152-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:18.828-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10281 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:31:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:34:34.797-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:16.598-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kdenetwork-nowlistening is earlier than 7:3.3.1-2.3" test_ref="oval:org.mitre.oval:tst:32125"/>
          <criterion comment="kdenetwork-devel is earlier than 7:3.3.1-2.3" test_ref="oval:org.mitre.oval:tst:32141"/>
          <criterion comment="kdenetwork is earlier than 7:3.3.1-2.3" test_ref="oval:org.mitre.oval:tst:31965"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10280" version="5" class="vulnerability">
      <metadata>
        <title>xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service (disk consumption and hang) via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2097" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2097"/>
        <description>xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service (disk consumption and hang) via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:29.440-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:07.765-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:18.194-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10280 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:58.012-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:16.110-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.31" test_ref="oval:org.mitre.oval:tst:31811"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.31" test_ref="oval:org.mitre.oval:tst:32007"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.31" test_ref="oval:org.mitre.oval:tst:32164"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-3.4" test_ref="oval:org.mitre.oval:tst:31852"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-4.4" test_ref="oval:org.mitre.oval:tst:32165"/>
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.7" test_ref="oval:org.mitre.oval:tst:32180"/>
            <criterion comment="xpdf is earlier than 1:3.00-11.8" test_ref="oval:org.mitre.oval:tst:32087"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-3.4" test_ref="oval:org.mitre.oval:tst:32104"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.7" test_ref="oval:org.mitre.oval:tst:31672"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.7" test_ref="oval:org.mitre.oval:tst:32177"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1028" version="2" class="vulnerability">
      <metadata>
        <title>Microsoft Outlook Express v6.0 for Server 2003 MHTML URL Processing Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
          <product>Microsoft Outlook Express</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0380"/>
        <description>The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help (CHM) file that references the InfoTech Storage (ITS) protocol handlers such as (1) ms-its, (2) ms-itss, (3) its, or (4) mk:@MSITStore, aka the "MHTML URL Processing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-26T12:57:00.000-04:00" comment="modified wft-184 - Deleted extra character in Build section">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:04:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows Server 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion comment="Outlook Express 6 for Windows 2003 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2855"/>
        <criterion comment="the version of inetcomm.dll is less than 6.00.3790.137" negate="false" test_ref="oval:org.mitre.oval:tst:1281"/>
        <criterion comment="the patch kb837009 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1280"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10279" version="5" class="vulnerability">
      <metadata>
        <title>The Plugin Finder Service (PFS) in Firefox before 1.0.3 allows remote attackers to execute arbitrary code via a javascript: URL in the PLUGINSPAGE attribute of an EMBED tag.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0752" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0752"/>
        <description>The Plugin Finder Service (PFS) in Firefox before 1.0.3 allows remote attackers to execute arbitrary code via a javascript: URL in the PLUGINSPAGE attribute of an EMBED tag.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:34.283-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:07.556-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:17.766-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10279 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:12.694-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:15.725-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="firefox is earlier than 0:1.0.3-1.4.1" test_ref="oval:org.mitre.oval:tst:31646"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10278" version="3" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Sun Java Runtime Environment (JRE) and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to cause a denial of service (JRE crash) and possibly execute arbitrary code via unknown vectors related to XSLT transforms.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1187" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1187"/>
        <description>Unspecified vulnerability in Sun Java Runtime Environment (JRE) and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to cause a denial of service (JRE crash) and possibly execute arbitrary code via unknown vectors related to XSLT transforms.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:31.951-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:06.444-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:16.589-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criteria operator="OR">
            <criterion comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:36549"/>
            <criterion comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:36644"/>
            <criterion comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.2.el3" test_ref="oval:org.mitre.oval:tst:36211"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36548"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36455"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36295"/>
            <criterion comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:36173"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36334"/>
            <criterion comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:35840"/>
            <criterion comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:36707"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36614"/>
            <criterion comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.14-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36678"/>
            <criterion comment="java-1.5.0-bea is earlier than 0:1.5.0.14-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36732"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36422"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36406"/>
            <criterion comment="java-1.5.0-bea-src is earlier than 0:1.5.0.14-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36696"/>
            <criterion comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.14-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36210"/>
            <criterion comment="java-1.5.0-ibm is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36155"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36267"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35708"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35618"/>
            <criterion comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.14-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36565"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 0:1.5.0.7-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36613"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36509"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36558"/>
            <criterion comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36234"/>
            <criterion comment="java-1.6.0-bea-src is earlier than 1:1.6.0.03-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36590"/>
            <criterion comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36643"/>
            <criterion comment="java-1.6.0-ibm-accessibility is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36555"/>
            <criterion comment="java-1.6.0-ibm-jdbc is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36414"/>
            <criterion comment="java-1.6.0-ibm-src is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36622"/>
            <criterion comment="java-1.6.0-ibm is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36319"/>
            <criterion comment="java-1.5.0-bea is earlier than 0:1.5.0.14-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36686"/>
            <criterion comment="java-1.4.2-bea-demo is earlier than 0:1.4.2.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36527"/>
            <criterion comment="java-1.6.0-bea-devel is earlier than 1:1.6.0.03-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36423"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36535"/>
            <criterion comment="java-1.6.0-ibm-demo is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36515"/>
            <criterion comment="java-1.6.0-bea-missioncontrol is earlier than 1:1.6.0.03-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36683"/>
            <criterion comment="java-1.6.0-bea-demo is earlier than 1:1.6.0.03-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36331"/>
            <criterion comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.14-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36343"/>
            <criterion comment="java-1.5.0-ibm is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35890"/>
            <criterion comment="java-1.5.0-ibm-accessibility is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36323"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35719"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36340"/>
            <criterion comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.14-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36079"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36485"/>
            <criterion comment="java-1.4.2-bea-missioncontrol is earlier than 0:1.4.2.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36629"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35872"/>
            <criterion comment="java-1.6.0-bea is earlier than 1:1.6.0.03-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36195"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36582"/>
            <criterion comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36626"/>
            <criterion comment="java-1.6.0-ibm-javacomm is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36688"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36265"/>
            <criterion comment="java-1.6.0-ibm-plugin is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36706"/>
            <criterion comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.14-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36494"/>
            <criterion comment="java-1.6.0-ibm-devel is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36205"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 0:1.5.0.7-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36523"/>
            <criterion comment="java-1.5.0-bea-src is earlier than 0:1.5.0.14-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36580"/>
            <criterion comment="java-1.5.0-bea-missioncontrol is earlier than 0:1.5.0.14-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36047"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35698"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36068"/>
            <criterion comment="java-1.4.2-bea-src is earlier than 0:1.4.2.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36576"/>
            <criterion comment="java-1.6.0-bea-jdbc is earlier than 1:1.6.0.03-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36658"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36568"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10277" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service (memory corruption) or possibly execute arbitrary code by sending more data than was requested, related to archive filenames that contain a : (colon) character.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0624"/>
        <description>Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service (memory corruption) or possibly execute arbitrary code by sending more data than was requested, related to archive filenames that contain a : (colon) character.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:15.385-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:06.110-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:15.856-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10277 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:52.589-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:15.229-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tar is earlier than 0:1.13.25-16.RHEL3" test_ref="oval:org.mitre.oval:tst:40238"/>
            <criterion comment="cpio is earlier than 0:2.5-6.RHEL3" test_ref="oval:org.mitre.oval:tst:40031"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tar is earlier than 0:1.14-13.el4_8.1" test_ref="oval:org.mitre.oval:tst:40247"/>
            <criterion comment="cpio is earlier than 0:2.5-16.el4_8.1" test_ref="oval:org.mitre.oval:tst:39924"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tar is earlier than 2:1.15.1-23.0.1.el5_4.2" test_ref="oval:org.mitre.oval:tst:39957"/>
            <criterion comment="cpio is earlier than 0:2.6-23.el5_4.1" test_ref="oval:org.mitre.oval:tst:40260"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10276" version="5" class="vulnerability">
      <metadata>
        <title>store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (crash) via certain aborted requests that trigger an assert error related to STORE_PENDING.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2794" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2794"/>
        <description>store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (crash) via certain aborted requests that trigger an assert error related to STORE_PENDING.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:40.328-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:05.802-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:15.477-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10276 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:39.512-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:14.839-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE3-6.3E.14" test_ref="oval:org.mitre.oval:tst:32129"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE6-3.4E.11" test_ref="oval:org.mitre.oval:tst:32053"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10275" version="5" class="vulnerability">
      <metadata>
        <title>The Linux kernel before 2.6.11 on the Itanium IA64 platform has certain "ptrace corner cases" that allow local users to cause a denial of service (crash) via crafted syscalls, possibly related to MCA/INIT, a different vulnerability than CVE-2005-1761.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0210" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0210"/>
        <description>Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service (memory consumption) via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:39.926-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:05.390-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:14.736-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10275 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:59:02.313-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:14.164-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31411"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31953"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31879"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31990"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31485"/>
            <criterion comment="kernel is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32093"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31968"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:32148"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-37.EL" test_ref="oval:org.mitre.oval:tst:31741"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31545"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31539"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31661"/>
            <criterion comment="kernel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31482"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31112"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31605"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31330"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10274" version="5" class="vulnerability">
      <metadata>
        <title>Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via multiple attack vectors, including the mailbox parameter in compose.php.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0519" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0519"/>
        <description>Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via multiple attack vectors, including the mailbox parameter in compose.php.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:26.985-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:05.177-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:14.497-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10274 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:12.554-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:13.841-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="squirrelmail is earlier than 0:1.4.3-0.e3.1" test_ref="oval:org.mitre.oval:tst:29772"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10273" version="5" class="vulnerability">
      <metadata>
        <title>Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by (1) the Curl_input_ntlm function in http_ntlm.c during NTLM authentication or (2) the Curl_krb_kauth and krb4_auth functions in krb4.c during Kerberos authentication.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0490" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0490"/>
        <description>Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by (1) the Curl_input_ntlm function in http_ntlm.c during NTLM authentication or (2) the Curl_krb_kauth and krb4_auth functions in krb4.c during Kerberos authentication.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:31.240-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:04.866-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:14.145-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10273 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:57:42.398-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:13.466-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="curl-devel is earlier than 0:7.10.6-6.rhel3" test_ref="oval:org.mitre.oval:tst:31486"/>
            <criterion comment="curl is earlier than 0:7.10.6-6.rhel3" test_ref="oval:org.mitre.oval:tst:30960"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="curl-devel is earlier than 0:7.12.1-5.rhel4" test_ref="oval:org.mitre.oval:tst:31295"/>
            <criterion comment="curl is earlier than 0:7.12.1-5.rhel4" test_ref="oval:org.mitre.oval:tst:31484"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10272" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6388" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6388"/>
        <description>Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:39.153-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:04.466-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:13.612-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10272 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:34.323-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:12.850-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-devel is earlier than 0:2.0.46-70.ent" test_ref="oval:org.mitre.oval:tst:35773"/>
            <criterion comment="mod_ssl is earlier than 0:2.0.46-70.ent" test_ref="oval:org.mitre.oval:tst:36016"/>
            <criterion comment="httpd is earlier than 0:2.0.46-70.ent" test_ref="oval:org.mitre.oval:tst:35281"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-suexec is earlier than 0:2.0.52-38.ent.2" test_ref="oval:org.mitre.oval:tst:35606"/>
            <criterion comment="httpd-manual is earlier than 0:2.0.52-38.ent.2" test_ref="oval:org.mitre.oval:tst:35973"/>
            <criterion comment="httpd-devel is earlier than 0:2.0.52-38.ent.2" test_ref="oval:org.mitre.oval:tst:35916"/>
            <criterion comment="mod_ssl is earlier than 0:2.0.52-38.ent.2" test_ref="oval:org.mitre.oval:tst:35852"/>
            <criterion comment="httpd is earlier than 0:2.0.52-38.ent.2" test_ref="oval:org.mitre.oval:tst:35768"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-manual is earlier than 0:2.2.3-11.el5_1.3" test_ref="oval:org.mitre.oval:tst:35953"/>
            <criterion comment="httpd-devel is earlier than 0:2.2.3-11.el5_1.3" test_ref="oval:org.mitre.oval:tst:35668"/>
            <criterion comment="mod_ssl is earlier than 0:2.2.3-11.el5_1.3" test_ref="oval:org.mitre.oval:tst:35991"/>
            <criterion comment="httpd is earlier than 0:2.2.3-11.el5_1.3" test_ref="oval:org.mitre.oval:tst:35696"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10271" version="5" class="vulnerability">
      <metadata>
        <title>The mail component in Mozilla SeaMonkey before 1.1.19 does not properly restrict execution of scriptable plugin content, which allows user-assisted remote attackers to obtain sensitive information via crafted content in an IFRAME element in an HTML e-mail message, as demonstrated by a Flash object that sends arbitrary local files during a reply or forward operation.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3385" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3385"/>
        <description>The mail component in Mozilla SeaMonkey before 1.1.19 does not properly restrict execution of scriptable plugin content, which allows user-assisted remote attackers to obtain sensitive information via crafted content in an IFRAME element in an HTML e-mail message, as demonstrated by a Flash object that sends arbitrary local files during a reply or forward operation.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:47.862-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:03.968-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:12.911-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10271 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:59:16.905-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:12.290-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39570"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39466"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39720"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39691"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39583"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39280"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39727"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39550"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39575"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.47.el3" test_ref="oval:org.mitre.oval:tst:39724"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39683"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39481"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39031"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39753"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39547"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-50.el4_8" test_ref="oval:org.mitre.oval:tst:39675"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10270" version="5" class="vulnerability">
      <metadata>
        <title>The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, as demonstrated by a PROPFIND request, a similar issue to CVE-2003-1564.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1955" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1955"/>
        <description>The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, as demonstrated by a PROPFIND request, a similar issue to CVE-2003-1564.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:00.552-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:03.600-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:12.555-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10270 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:57:44.198-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:11.684-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-devel is earlier than 0:2.0.46-73.ent" test_ref="oval:org.mitre.oval:tst:38833"/>
            <criterion comment="mod_ssl is earlier than 0:2.0.46-73.ent" test_ref="oval:org.mitre.oval:tst:38794"/>
            <criterion comment="httpd is earlier than 0:2.0.46-73.ent" test_ref="oval:org.mitre.oval:tst:38826"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="apr-util-devel is earlier than 0:0.9.4-22.el4_8.1" test_ref="oval:org.mitre.oval:tst:38152"/>
            <criterion comment="apr-util is earlier than 0:0.9.4-22.el4_8.1" test_ref="oval:org.mitre.oval:tst:38886"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="apr-util-docs is earlier than 0:1.2.7-7.el5_3.1" test_ref="oval:org.mitre.oval:tst:38344"/>
            <criterion comment="apr-util-devel is earlier than 0:1.2.7-7.el5_3.1" test_ref="oval:org.mitre.oval:tst:38871"/>
            <criterion comment="apr-util is earlier than 0:1.2.7-7.el5_3.1" test_ref="oval:org.mitre.oval:tst:38788"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1027" version="1" class="vulnerability">
      <metadata>
        <title>Windows 2000 DirectPlay Denial of Service</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft DirectPlay</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0202" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0202"/>
        <description>IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-06-11T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-06-30T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-07-12T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
        <criteria operator="OR" comment="Vulnerable versions of DirectX">
          <criteria operator="AND" comment="Unpatched DirectX 7.0">
            <criterion comment="DirectX 7.0x Installed" negate="false" test_ref="oval:org.mitre.oval:tst:1296"/>
            <criterion comment="File %windir%\system32\dplayx.dll version is less than 5.0.2195.6927" negate="false" test_ref="oval:org.mitre.oval:tst:1295"/>
            <criterion comment="Patch Windows2000-KB839643-x86-ENU.EXE Installed" negate="true" test_ref="oval:org.mitre.oval:tst:1294"/>
          </criteria>
          <criteria operator="AND" comment="Unpatched DirectX 8.0x">
            <criterion comment="DirectX 8.0x Installed" negate="false" test_ref="oval:org.mitre.oval:tst:1293"/>
            <criterion comment="File %windir%\system32\dplayx.dll version is less than 5.0.2258.410" negate="false" test_ref="oval:org.mitre.oval:tst:1292"/>
            <criterion comment="Patch DirectX80-KB839643-x86-ENU Installed" negate="true" test_ref="oval:org.mitre.oval:tst:1291"/>
          </criteria>
          <criteria operator="AND" comment="Unpatched DirectX 8.1x">
            <criterion comment="DirectX 8.1x Installed" negate="false" test_ref="oval:org.mitre.oval:tst:1290"/>
            <criterion comment="File %windir%\system32\dplayx.dll version is less than 5.1.2600.891" negate="false" test_ref="oval:org.mitre.oval:tst:1289"/>
            <criterion comment="Patch DirectX81-KB839643-x86-ENU Installed" negate="true" test_ref="oval:org.mitre.oval:tst:1288"/>
          </criteria>
          <criteria operator="AND" comment="Unpatched DirectX 8.2x">
            <criterion comment="DirectX 8.2x Installed" negate="false" test_ref="oval:org.mitre.oval:tst:1287"/>
            <criterion comment="File %windir%\system32\dplayx.dll version is less than 5.2.3677.144" negate="false" test_ref="oval:org.mitre.oval:tst:1286"/>
            <criterion comment="Patch DirectX82-KB839643-x86-ENU Installed" negate="true" test_ref="oval:org.mitre.oval:tst:1285"/>
          </criteria>
          <criteria operator="AND" comment="Unpatched DirectX 9.0x">
            <criterion comment="DirectX 9.0x Installed" negate="false" test_ref="oval:org.mitre.oval:tst:1284"/>
            <criterion comment="File %windir%\system32\dplayx.dll version is less than 5.3.0.903" negate="false" test_ref="oval:org.mitre.oval:tst:1283"/>
            <criterion comment="Patch DirectX90-KB839643-x86-ENU Installed" negate="true" test_ref="oval:org.mitre.oval:tst:1282"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10269" version="5" class="vulnerability">
      <metadata>
        <title>The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed WCCP messages with source addresses that are spoofed to reference Squid's home router and invalid WCCP_I_SEE_YOU cache numbers.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0095" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0095"/>
        <description>The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed WCCP messages with source addresses that are spoofed to reference Squid's home router and invalid WCCP_I_SEE_YOU cache numbers.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:44.301-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:03.371-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:12.168-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10269 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:18.253-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:11.302-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE3-6.3E.7" test_ref="oval:org.mitre.oval:tst:30954"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE6-3.4E.3" test_ref="oval:org.mitre.oval:tst:31281"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10268" version="5" class="vulnerability">
      <metadata>
        <title>The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a certain HTTP request.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0983" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0983"/>
        <description>The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a certain HTTP request.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:36.104-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:03.095-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:11.861-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10268 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:02:55.901-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:10.905-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="ruby-mode is earlier than 0:1.6.8-9.EL3.3" test_ref="oval:org.mitre.oval:tst:30955"/>
          <criterion comment="ruby-docs is earlier than 0:1.6.8-9.EL3.3" test_ref="oval:org.mitre.oval:tst:30888"/>
          <criterion comment="ruby-devel is earlier than 0:1.6.8-9.EL3.3" test_ref="oval:org.mitre.oval:tst:31023"/>
          <criterion comment="ruby-tcltk is earlier than 0:1.6.8-9.EL3.3" test_ref="oval:org.mitre.oval:tst:31004"/>
          <criterion comment="ruby is earlier than 0:1.6.8-9.EL3.3" test_ref="oval:org.mitre.oval:tst:30751"/>
          <criterion comment="irb is earlier than 0:1.6.8-9.EL3.3" test_ref="oval:org.mitre.oval:tst:30791"/>
          <criterion comment="ruby-libs is earlier than 0:1.6.8-9.EL3.3" test_ref="oval:org.mitre.oval:tst:31149"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10267" version="5" class="vulnerability">
      <metadata>
        <title>Double free vulnerability in the krb5_rd_cred function for MIT Kerberos 5 (krb5) 1.3.1 and earlier may allow local users to execute arbitrary code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0643" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0643"/>
        <description>Double free vulnerability in the krb5_rd_cred function for MIT Kerberos 5 (krb5) 1.3.1 and earlier may allow local users to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:37.181-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:02.802-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:11.596-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10267 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:57.688-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:10.574-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="krb5-workstation is earlier than 0:1.2.7-28" test_ref="oval:org.mitre.oval:tst:30623"/>
          <criterion comment="krb5 is earlier than 0:1.2.7-28" test_ref="oval:org.mitre.oval:tst:30237"/>
          <criterion comment="krb5-libs is earlier than 0:1.2.7-28" test_ref="oval:org.mitre.oval:tst:30764"/>
          <criterion comment="krb5-server is earlier than 0:1.2.7-28" test_ref="oval:org.mitre.oval:tst:30376"/>
          <criterion comment="krb5-devel is earlier than 0:1.2.7-28" test_ref="oval:org.mitre.oval:tst:30595"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10266" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the WriteProlog function in texttops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via a crafted PostScript file that triggers a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3640" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3640"/>
        <description>Integer overflow in the WriteProlog function in texttops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via a crafted PostScript file that triggers a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:12.388-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:02.425-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:11.220-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10266 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:04:25.465-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:09.907-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.54" test_ref="oval:org.mitre.oval:tst:37294"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.54" test_ref="oval:org.mitre.oval:tst:37772"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.54" test_ref="oval:org.mitre.oval:tst:37394"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.1" test_ref="oval:org.mitre.oval:tst:37546"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.1" test_ref="oval:org.mitre.oval:tst:37714"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.1" test_ref="oval:org.mitre.oval:tst:37699"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cups-lpd is earlier than 1:1.2.4-11.18.el5_2.2" test_ref="oval:org.mitre.oval:tst:37215"/>
            <criterion comment="cups-devel is earlier than 1:1.2.4-11.18.el5_2.2" test_ref="oval:org.mitre.oval:tst:37378"/>
            <criterion comment="cups is earlier than 1:1.2.4-11.18.el5_2.2" test_ref="oval:org.mitre.oval:tst:37794"/>
            <criterion comment="cups-libs is earlier than 1:1.2.4-11.18.el5_2.2" test_ref="oval:org.mitre.oval:tst:37702"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10265" version="5" class="vulnerability">
      <metadata>
        <title>The ftdi_sio driver (usb/serial/ftdi_sio.c) in Linux kernel 2.6.x up to 2.6.17, and possibly later versions, allows local users to cause a denial of service (memory consumption) by writing more data to the serial port than the hardware can handle, which causes the data to be queued.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2936" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2936"/>
        <description>The ftdi_sio driver (usb/serial/ftdi_sio.c) in Linux kernel 2.6.x up to 2.6.17, and possibly later versions, allows local users to cause a denial of service (memory consumption) by writing more data to the serial port than the hardware can handle, which causes the data to be queued.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:24.471-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:02.124-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:10.713-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10265 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:24.661-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:09.487-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32576"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32814"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32958"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32801"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32865"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32880"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32747"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32200"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32838"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10264" version="5" class="vulnerability">
      <metadata>
        <title>Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2005-1589.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1264" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1264"/>
        <description>Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2005-1589.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:41.474-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:01.762-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:10.388-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10264 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:47.884-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:09.092-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31783"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31876"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31592"/>
          <criterion comment="kernel is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31714"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31522"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31902"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31817"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10263" version="5" class="vulnerability">
      <metadata>
        <title>The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unspecified vectors, related to a declaration that lacks the final keyword.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2673" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2673"/>
        <description>The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unspecified vectors, related to a declaration that lacks the final keyword.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:29.354-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:01.510-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:10.130-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10263 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:27.539-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:08.647-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38942"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38825"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38972"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38267"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:39037"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10262" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetype, (4) gimp, (5) libgsf, and (6) imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3376" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3376"/>
        <description>Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetype, (4) gimp, (5) libgsf, and (6) imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:05.649-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:01.305-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:09.813-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10262 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:16.871-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:08.315-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="libwmf is earlier than 0:0.2.8.3-5.3" test_ref="oval:org.mitre.oval:tst:32737"/>
          <criterion comment="libwmf-devel is earlier than 0:0.2.8.3-5.3" test_ref="oval:org.mitre.oval:tst:32920"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10261" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via simultaneous XPCOM events, which causes a timer object to be deleted in a way that triggers memory corruption.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3113" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3113"/>
        <description>Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via simultaneous XPCOM events, which causes a timer object to be deleted in a way that triggers memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:06.974-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:00.743-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:09.263-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10261 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:59:00.488-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:03:16.424-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:07.600-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32342"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32877"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:31982"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32816"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32080"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32904"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32915"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32924"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32822"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32555"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32873"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32693"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32886"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32810"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32418"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32496"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32929"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32777"/>
            <criterion comment="firefox is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32896"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32722"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32906"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32905"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32925"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32624"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10260" version="5" class="vulnerability">
      <metadata>
        <title>The JavaScript garbage collector in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle allocation failures, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document that triggers write access to an "offset of a NULL pointer."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1687" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1687"/>
        <description>The JavaScript garbage collector in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle allocation failures, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document that triggers write access to an "offset of a NULL pointer."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:29.786-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:00.382-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:08.780-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10260 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:10.301-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:07.154-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdelibs is earlier than 6:3.3.1-14.el4" test_ref="oval:org.mitre.oval:tst:37977"/>
            <criterion comment="kdelibs-devel is earlier than 6:3.3.1-14.el4" test_ref="oval:org.mitre.oval:tst:38299"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdelibs-apidocs is earlier than 6:3.5.4-22.el5_3" test_ref="oval:org.mitre.oval:tst:38102"/>
            <criterion comment="kdelibs is earlier than 6:3.5.4-22.el5_3" test_ref="oval:org.mitre.oval:tst:38389"/>
            <criterion comment="kdelibs-devel is earlier than 6:3.5.4-22.el5_3" test_ref="oval:org.mitre.oval:tst:38720"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1026" version="4" class="vulnerability">
      <metadata>
        <title>IE5.01,SP3 File Disclosure via Redirects Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0648" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0648"/>
        <description>The legacy &lt;script> data-island capability for XML in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to read arbitrary XML files, and portions of other files, via a URL whose "src" attribute redirects to a local file.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-06-22T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-06-22T12:38:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-07-27T10:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-08-18T07:37:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2824. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:48:00.494-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:52:25.100-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:26.475-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:45.064-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:06.804-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 5.01 Service Pack 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3015"/>
          <criterion comment="the version of mshtml.dll is less than 5.0.3541.2700" negate="false" test_ref="oval:org.mitre.oval:tst:2751"/>
          <criterion comment="the patch kb883939 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:2750"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10259" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in mod_python 3.0.x before 3.0.4, and 2.7.x before 2.7.9, allows remote attackers to cause a denial of service (httpd crash) via a certain query string.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0973" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0973"/>
        <description>Unknown vulnerability in mod_python 3.0.x before 3.0.4, and 2.7.x before 2.7.9, allows remote attackers to cause a denial of service (httpd crash) via a certain query string.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:26.673-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:02:00.187-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:08.574-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10259 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:57:42.951-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:06.832-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="mod_python is earlier than 0:3.0.3-3.ent" test_ref="oval:org.mitre.oval:tst:30602"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10258" version="5" class="vulnerability">
      <metadata>
        <title>Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. (dot dot) in a table name.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1848" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1848"/>
        <description>Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. (dot dot) in a table name.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:22.354-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:59.911-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:08.329-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10258 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:17.857-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:06.462-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mysql is earlier than 0:5.0.77-4.el5_5.3" test_ref="oval:org.mitre.oval:tst:40529"/>
          <criterion comment="mysql-devel is earlier than 0:5.0.77-4.el5_5.3" test_ref="oval:org.mitre.oval:tst:40467"/>
          <criterion comment="mysql-test is earlier than 0:5.0.77-4.el5_5.3" test_ref="oval:org.mitre.oval:tst:40387"/>
          <criterion comment="mysql-bench is earlier than 0:5.0.77-4.el5_5.3" test_ref="oval:org.mitre.oval:tst:40525"/>
          <criterion comment="mysql-server is earlier than 0:5.0.77-4.el5_5.3" test_ref="oval:org.mitre.oval:tst:39669"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10257" version="5" class="vulnerability">
      <metadata>
        <title>The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service via vectors that trigger an assertion failure.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5501" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5501"/>
        <description>The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service via vectors that trigger an assertion failure.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:31.673-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:59.254-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:07.607-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10257 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:59:03.629-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:05.542-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38137"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37886"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37999"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37907"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37709"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38092"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37745"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38039"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38062"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38073"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nspr is earlier than 0:4.7.3-1.el4" test_ref="oval:org.mitre.oval:tst:37574"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:38071"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-1.el4" test_ref="oval:org.mitre.oval:tst:37857"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-18.el4" test_ref="oval:org.mitre.oval:tst:37200"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.3-1.el4" test_ref="oval:org.mitre.oval:tst:37918"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37812"/>
            <criterion comment="firefox is earlier than 0:3.0.5-1.el4" test_ref="oval:org.mitre.oval:tst:38080"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-1.el4" test_ref="oval:org.mitre.oval:tst:37139"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37869"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37789"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37395"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:38118"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:38072"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38037"/>
            <criterion comment="nspr is earlier than 0:4.7.3-2.el5" test_ref="oval:org.mitre.oval:tst:37420"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37854"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.19-1.el5_2" test_ref="oval:org.mitre.oval:tst:38053"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.3-2.el5" test_ref="oval:org.mitre.oval:tst:37419"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38083"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:37631"/>
            <criterion comment="firefox is earlier than 0:3.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38114"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37737"/>
            <criterion comment="nss-tools is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37403"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10256" version="5" class="vulnerability">
      <metadata>
        <title>The escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent attack vectors related to "incomplete multibyte chars."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2051" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2051"/>
        <description>The escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent attack vectors related to "incomplete multibyte chars."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:59.585-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:58.437-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:06.801-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10256 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:57:41.161-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:04.541-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:37185"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:36983"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:36761"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:37254"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:37280"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:36584"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:37255"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37302"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37269"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:36771"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:36854"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37155"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37143"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:36781"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37125"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37202"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37223"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37010"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37319"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37113"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37239"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:36927"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37138"/>
            <criterion comment="php-common is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37146"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37179"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37204"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:36955"/>
            <criterion comment="php is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37260"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37282"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:36878"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37114"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:36634"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37118"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37283"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37127"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37086"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37328"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37036"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37144"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37165"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10255" version="5" class="vulnerability">
      <metadata>
        <title>sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and (2) allows remote attackers to bypass intended access restrictions via a crafted client certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4565" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4565"/>
        <description>sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and (2) allows remote attackers to bypass intended access restrictions via a crafted client certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:25.339-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:58.187-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:06.545-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10255 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:22.505-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:04.004-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="sendmail is earlier than 0:8.13.8-8.el5" test_ref="oval:org.mitre.oval:tst:40026"/>
          <criterion comment="sendmail-doc is earlier than 0:8.13.8-8.el5" test_ref="oval:org.mitre.oval:tst:40111"/>
          <criterion comment="sendmail-cf is earlier than 0:8.13.8-8.el5" test_ref="oval:org.mitre.oval:tst:40318"/>
          <criterion comment="sendmail-devel is earlier than 0:8.13.8-8.el5" test_ref="oval:org.mitre.oval:tst:39935"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10254" version="5" class="vulnerability">
      <metadata>
        <title>The HTML rendering engine in Mozilla Thunderbird 1.5, when "Block loading of remote images in mail messages" is enabled, does not properly block external images from inline HTML attachments, which could allow remote attackers to obtain sensitive information, such as application version or IP address, when the user reads the email and the external image is accessed.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1045" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1045"/>
        <description>The HTML rendering engine in Mozilla Thunderbird 1.5, when "Block loading of remote images in mail messages" is enabled, does not properly block external images from inline HTML attachments, which could allow remote attackers to obtain sensitive information, such as application version or IP address, when the user reads the email and the external image is accessed.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:03.870-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:57.958-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:06.346-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10254 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:25.361-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:03.703-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="thunderbird is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32204"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10253" version="5" class="vulnerability">
      <metadata>
        <title>The dbus_signature_validate function in the D-bus library (libdbus) before 1.2.4 allows remote attackers to cause a denial of service (application abort) via a message containing a malformed signature, which triggers a failed assertion error.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3834" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3834"/>
        <description>The dbus_signature_validate function in the D-bus library (libdbus) before 1.2.4 allows remote attackers to cause a denial of service (application abort) via a message containing a malformed signature, which triggers a failed assertion error.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:36.126-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:57.731-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:06.118-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10253 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:24.619-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:03.362-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="dbus-devel is earlier than 0:1.0.0-7.el5_2.1" test_ref="oval:org.mitre.oval:tst:38142"/>
          <criterion comment="dbus-x11 is earlier than 0:1.0.0-7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37929"/>
          <criterion comment="dbus is earlier than 0:1.0.0-7.el5_2.1" test_ref="oval:org.mitre.oval:tst:37644"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10252" version="5" class="vulnerability">
      <metadata>
        <title>The SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a denial of service (process crash) via a handle without a policy name, which causes a null dereference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0634" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0634"/>
        <description>The SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a denial of service (process crash) via a handle without a policy name, which causes a null dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:36.686-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:57.520-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:05.854-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10252 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:57:43.448-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:03.059-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="ethereal-gnome is earlier than 0:0.10.5-0.30E.2" test_ref="oval:org.mitre.oval:tst:29799"/>
          <criterion comment="ethereal is earlier than 0:0.10.5-0.30E.2" test_ref="oval:org.mitre.oval:tst:30522"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10251" version="5" class="vulnerability">
      <metadata>
        <title>The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via a malformed NTLM type 3 message that triggers a NULL dereference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0173" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0173"/>
        <description>squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a username with a space at the beginning or end, which is ignored by the LDAP server.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:24.897-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:57.287-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:05.620-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10251 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:47.268-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:02.187-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE3-6.3E.7" test_ref="oval:org.mitre.oval:tst:30954"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE6-3.4E.3" test_ref="oval:org.mitre.oval:tst:31281"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10250" version="5" class="vulnerability">
      <metadata>
        <title>httputils.rb in WEBrick in Ruby 1.8.1 and 1.8.5, as used in Red Hat Enterprise Linux 4 and 5, allows remote attackers to cause a denial of service (CPU consumption) via a crafted HTTP request.  NOTE: this issue exists because of an incomplete fix for CVE-2008-3656.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4310" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4310"/>
        <description>httputils.rb in WEBrick in Ruby 1.8.1 and 1.8.5, as used in Red Hat Enterprise Linux 4 and 5, allows remote attackers to cause a denial of service (CPU consumption) via a crafted HTTP request.  NOTE: this issue exists because of an incomplete fix for CVE-2008-3656.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:38.798-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:56.773-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:05.168-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10250 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:22.818-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:04:01.547-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.8.1-7.el4_7.2" test_ref="oval:org.mitre.oval:tst:37108"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.1-7.el4_7.2" test_ref="oval:org.mitre.oval:tst:38049"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.1-7.el4_7.2" test_ref="oval:org.mitre.oval:tst:38004"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.1-7.el4_7.2" test_ref="oval:org.mitre.oval:tst:37832"/>
            <criterion comment="ruby is earlier than 0:1.8.1-7.el4_7.2" test_ref="oval:org.mitre.oval:tst:37876"/>
            <criterion comment="irb is earlier than 0:1.8.1-7.el4_7.2" test_ref="oval:org.mitre.oval:tst:38077"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.1-7.el4_7.2" test_ref="oval:org.mitre.oval:tst:37818"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-ri is earlier than 0:1.8.5-5.el5_2.6" test_ref="oval:org.mitre.oval:tst:37873"/>
            <criterion comment="ruby-mode is earlier than 0:1.8.5-5.el5_2.6" test_ref="oval:org.mitre.oval:tst:37201"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.5-5.el5_2.6" test_ref="oval:org.mitre.oval:tst:37831"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.5-5.el5_2.6" test_ref="oval:org.mitre.oval:tst:37163"/>
            <criterion comment="ruby is earlier than 0:1.8.5-5.el5_2.6" test_ref="oval:org.mitre.oval:tst:38014"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.5-5.el5_2.6" test_ref="oval:org.mitre.oval:tst:37942"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.5-5.el5_2.6" test_ref="oval:org.mitre.oval:tst:37976"/>
            <criterion comment="ruby-irb is earlier than 0:1.8.5-5.el5_2.6" test_ref="oval:org.mitre.oval:tst:37675"/>
            <criterion comment="ruby-rdoc is earlier than 0:1.8.5-5.el5_2.6" test_ref="oval:org.mitre.oval:tst:37111"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1025" version="5" class="vulnerability">
      <metadata>
        <title>Incorrect Permission on SQL Server Service Account Registry Key</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <product>Microsoft SQL Server 2000</product>
          <product>Microsoft SQL Server 2000 Desktop Engine (WMSDE)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-0642" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0642"/>
        <description>The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, has insecure permissions, which allows local users to gain privileges, aka "Incorrect Permission on SQL Server Service Account Registry Key."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-06-15T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-06-30T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-07-12T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-01-13T12:00:00.000-04:00" comment="modified wft-418 - Added space to registry key. used to say &quot;AppPath&quot; I changed it to &quot;App Path&quot;">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2005-01-20T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-16T10:31:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-04-08T12:00:00.000-04:00" comment="modified wft-418 - wft-418 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:31:00.000-04:00" comment="modified wft-419 - wft-419 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:31:00.000-04:00" comment="modified wft-420 - wft-420 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:31:00.000-04:00" comment="modified wft-428 - wft-428 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:31:00.000-04:00" comment="modified wft-429 - wft-429 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:31:00.000-04:00" comment="modified wft-430 - wft-430 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <modified date="2005-04-08T10:34:00.000-04:00" comment="modified wft-431 - wft-431 corrected literal string">
              <contributor organization="The MITRE Corporation">Ingrid Skoog</contributor>
            </modified>
            <status_change date="2005-04-11T08:48:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-04-27T12:07:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:1025 - SQL Server 2000 has been replaced by Microsoft SQL Server 2000" date="2014-06-02T15:02:00.653-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-06-02T15:02:59.938-04:00">INTERIM</status_change>
            <status_change date="2014-06-23T04:00:06.418-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="SQL Server 2000 installed" test_ref="oval:org.mitre.oval:tst:2591"/>
        <criterion comment="the version of sqlservr.exe is less than 2000.80.650.0" test_ref="oval:org.mitre.oval:tst:1303"/>
        <criterion comment="the version of odsole70.dll is less than 2000.80.606.0" test_ref="oval:org.mitre.oval:tst:1302"/>
        <criterion comment="the version of xpqueue.dll is less than 2000.80.606.0" test_ref="oval:org.mitre.oval:tst:1301"/>
        <criterion comment="the version of xprepl.dll is less than 2000.80.606.0" test_ref="oval:org.mitre.oval:tst:1300"/>
        <criterion comment="the version of xplog70.dll is less than 2000.80.606.0" test_ref="oval:org.mitre.oval:tst:1299"/>
        <criterion comment="the version of xpweb70.dll is less than 2000.80.606.0" test_ref="oval:org.mitre.oval:tst:1298"/>
        <criterion comment="the version of xpstar.dll is less than 2000.80.628.0" test_ref="oval:org.mitre.oval:tst:1297"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10249" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an EMF file with a crafted EMR_STRETCHBLT record, which triggers a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5746" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5746"/>
        <description>Integer overflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an EMF file with a crafted EMR_STRETCHBLT record, which triggers a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:30:11.031-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:54.583-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:02.938-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10249 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:29.123-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:59.187-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-41.2.0.EL3" test_ref="oval:org.mitre.oval:tst:36395"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.2-41.2.0.EL3" test_ref="oval:org.mitre.oval:tst:36503"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-41.2.0.EL3" test_ref="oval:org.mitre.oval:tst:36240"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org2-langpack-lt_LT is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36006"/>
            <criterion comment="openoffice.org2-langpack-nn_NO is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35494"/>
            <criterion comment="openoffice.org2-langpack-ga_IE is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36190"/>
            <criterion comment="openoffice.org2-langpack-zh_CN is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36501"/>
            <criterion comment="openoffice.org2-javafilter is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35931"/>
            <criterion comment="openoffice.org2-langpack-he_IL is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36114"/>
            <criterion comment="openoffice.org2-draw is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36163"/>
            <criterion comment="openoffice.org2-langpack-ko_KR is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36172"/>
            <criterion comment="openoffice.org2-langpack-ca_ES is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36000"/>
            <criterion comment="openoffice.org2-base is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36287"/>
            <criterion comment="openoffice.org2-langpack-fr is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36118"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.5-10.6.0.3.EL4" test_ref="oval:org.mitre.oval:tst:36421"/>
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.3.EL4" test_ref="oval:org.mitre.oval:tst:36451"/>
            <criterion comment="openoffice.org2-langpack-pa_IN is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36384"/>
            <criterion comment="openoffice.org2-langpack-da_DK is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36302"/>
            <criterion comment="openoffice.org2-emailmerge is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35683"/>
            <criterion comment="openoffice.org2-langpack-pt_PT is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36473"/>
            <criterion comment="openoffice.org2-langpack-es is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36223"/>
            <criterion comment="openoffice.org2-langpack-sv is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36224"/>
            <criterion comment="openoffice.org2-langpack-ms_MY is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36154"/>
            <criterion comment="openoffice.org2-langpack-cs_CZ is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36091"/>
            <criterion comment="openoffice.org2-xsltfilter is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35963"/>
            <criterion comment="openoffice.org2-langpack-ja_JP is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36083"/>
            <criterion comment="openoffice.org2-langpack-hu_HU is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36271"/>
            <criterion comment="openoffice.org2-langpack-zh_TW is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35954"/>
            <criterion comment="openoffice.org2-langpack-sl_SI is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35495"/>
            <criterion comment="openoffice.org2-langpack-de is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36299"/>
            <criterion comment="openoffice.org2-pyuno is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36417"/>
            <criterion comment="openoffice.org2 is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35864"/>
            <criterion comment="openoffice.org2-langpack-tr_TR is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35957"/>
            <criterion comment="openoffice.org2-impress is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36286"/>
            <criterion comment="openoffice.org2-langpack-bn is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36181"/>
            <criterion comment="openoffice.org2-langpack-ar is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36345"/>
            <criterion comment="openoffice.org2-langpack-pt_BR is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35811"/>
            <criterion comment="openoffice.org2-langpack-af_ZA is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35640"/>
            <criterion comment="openoffice.org2-langpack-pl_PL is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36248"/>
            <criterion comment="openoffice.org2-calc is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36212"/>
            <criterion comment="openoffice.org2-langpack-zu_ZA is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36434"/>
            <criterion comment="openoffice.org2-langpack-fi_FI is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36159"/>
            <criterion comment="openoffice.org2-langpack-sk_SK is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36411"/>
            <criterion comment="openoffice.org2-langpack-hi_IN is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36382"/>
            <criterion comment="openoffice.org2-langpack-nb_NO is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36148"/>
            <criterion comment="openoffice.org2-langpack-th_TH is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36144"/>
            <criterion comment="openoffice.org2-langpack-et_EE is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36401"/>
            <criterion comment="openoffice.org2-langpack-gl_ES is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36185"/>
            <criterion comment="openoffice.org2-langpack-it is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36254"/>
            <criterion comment="openoffice.org2-langpack-hr_HR is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36289"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.3.EL4" test_ref="oval:org.mitre.oval:tst:36178"/>
            <criterion comment="openoffice.org2-langpack-ta_IN is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36009"/>
            <criterion comment="openoffice.org2-langpack-gu_IN is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36216"/>
            <criterion comment="openoffice.org2-testtools is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36498"/>
            <criterion comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.3.EL4" test_ref="oval:org.mitre.oval:tst:36152"/>
            <criterion comment="openoffice.org2-langpack-eu_ES is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36314"/>
            <criterion comment="openoffice.org2-langpack-el_GR is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36332"/>
            <criterion comment="openoffice.org2-core is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36253"/>
            <criterion comment="openoffice.org2-langpack-ru is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35829"/>
            <criterion comment="openoffice.org2-langpack-bg_BG is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36429"/>
            <criterion comment="openoffice.org2-langpack-nl is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36073"/>
            <criterion comment="openoffice.org2-langpack-sr_CS is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:35502"/>
            <criterion comment="openoffice.org2-langpack-cy_GB is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36174"/>
            <criterion comment="openoffice.org2-math is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36366"/>
            <criterion comment="openoffice.org2-graphicfilter is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36276"/>
            <criterion comment="openoffice.org2-writer is earlier than 0:2.0.4-5.7.0.4.0" test_ref="oval:org.mitre.oval:tst:36057"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-langpack-sk_SK is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36162"/>
            <criterion comment="openoffice.org-langpack-zu_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36101"/>
            <criterion comment="openoffice.org-langpack-pa_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35841"/>
            <criterion comment="openoffice.org-langpack-hi_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36520"/>
            <criterion comment="openoffice.org-langpack-et_EE is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36441"/>
            <criterion comment="openoffice.org-langpack-kn_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35845"/>
            <criterion comment="openoffice.org is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36307"/>
            <criterion comment="openoffice.org-langpack-zh_TW is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36505"/>
            <criterion comment="openoffice.org-writer is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36145"/>
            <criterion comment="openoffice.org-langpack-ve_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36546"/>
            <criterion comment="openoffice.org-langpack-ga_IE is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36168"/>
            <criterion comment="openoffice.org-langpack-ta_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36283"/>
            <criterion comment="openoffice.org-langpack-ko_KR is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36322"/>
            <criterion comment="openoffice.org-langpack-or_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36206"/>
            <criterion comment="openoffice.org-langpack-da_DK is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36244"/>
            <criterion comment="openoffice.org-langpack-sr_CS is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36471"/>
            <criterion comment="openoffice.org-langpack-pl_PL is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36483"/>
            <criterion comment="openoffice.org-langpack-fr is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36328"/>
            <criterion comment="openoffice.org-langpack-ts_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35810"/>
            <criterion comment="openoffice.org-javafilter is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36481"/>
            <criterion comment="openoffice.org-langpack-as_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36465"/>
            <criterion comment="openoffice.org-testtools is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36378"/>
            <criterion comment="openoffice.org-langpack-hr_HR is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36013"/>
            <criterion comment="openoffice.org-langpack-de is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36191"/>
            <criterion comment="openoffice.org-emailmerge is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35521"/>
            <criterion comment="openoffice.org-xsltfilter is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36257"/>
            <criterion comment="openoffice.org-langpack-tn_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35797"/>
            <criterion comment="openoffice.org-langpack-te_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36391"/>
            <criterion comment="openoffice.org-langpack-sv is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36398"/>
            <criterion comment="openoffice.org-base is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36329"/>
            <criterion comment="openoffice.org-langpack-ca_ES is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36437"/>
            <criterion comment="openoffice.org-langpack-nr_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36130"/>
            <criterion comment="openoffice.org-core is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35843"/>
            <criterion comment="openoffice.org-langpack-nl is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36220"/>
            <criterion comment="openoffice.org-langpack-ur is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36466"/>
            <criterion comment="openoffice.org-langpack-nn_NO is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36032"/>
            <criterion comment="openoffice.org-langpack-ar is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36187"/>
            <criterion comment="openoffice.org-langpack-ja_JP is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36058"/>
            <criterion comment="openoffice.org-langpack-gu_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36160"/>
            <criterion comment="openoffice.org-langpack-tr_TR is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36457"/>
            <criterion comment="openoffice.org-langpack-eu_ES is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36341"/>
            <criterion comment="openoffice.org-langpack-fi_FI is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36232"/>
            <criterion comment="openoffice.org-graphicfilter is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36089"/>
            <criterion comment="openoffice.org-pyuno is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36514"/>
            <criterion comment="openoffice.org-langpack-ml_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36486"/>
            <criterion comment="openoffice.org-langpack-gl_ES is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36508"/>
            <criterion comment="openoffice.org-langpack-zh_CN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36507"/>
            <criterion comment="openoffice.org-langpack-xh_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36348"/>
            <criterion comment="openoffice.org-langpack-it is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36559"/>
            <criterion comment="openoffice.org-langpack-es is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36282"/>
            <criterion comment="openoffice.org-langpack-nb_NO is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36405"/>
            <criterion comment="openoffice.org-langpack-sl_SI is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36492"/>
            <criterion comment="openoffice.org-draw is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36369"/>
            <criterion comment="openoffice.org-langpack-nso_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36308"/>
            <criterion comment="openoffice.org-langpack-ms_MY is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36358"/>
            <criterion comment="openoffice.org-langpack-el_GR is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35561"/>
            <criterion comment="openoffice.org-langpack-hu_HU is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36070"/>
            <criterion comment="openoffice.org-langpack-ss_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36189"/>
            <criterion comment="openoffice.org-langpack-bn is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35657"/>
            <criterion comment="openoffice.org-langpack-he_IL is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36204"/>
            <criterion comment="openoffice.org-langpack-pt_PT is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36544"/>
            <criterion comment="openoffice.org-langpack-lt_LT is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36218"/>
            <criterion comment="openoffice.org-langpack-af_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36400"/>
            <criterion comment="openoffice.org-langpack-bg_BG is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36037"/>
            <criterion comment="openoffice.org-calc is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35732"/>
            <criterion comment="openoffice.org-langpack-cs_CZ is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36117"/>
            <criterion comment="openoffice.org-langpack-cy_GB is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36303"/>
            <criterion comment="openoffice.org-langpack-mr_IN is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36306"/>
            <criterion comment="openoffice.org-langpack-th_TH is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35966"/>
            <criterion comment="openoffice.org-langpack-pt_BR is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36467"/>
            <criterion comment="openoffice.org-langpack-ru is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35570"/>
            <criterion comment="openoffice.org-math is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36376"/>
            <criterion comment="openoffice.org-impress is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:36339"/>
            <criterion comment="openoffice.org-langpack-st_ZA is earlier than 0:2.0.4-5.4.26" test_ref="oval:org.mitre.oval:tst:35999"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10248" version="5" class="vulnerability">
      <metadata>
        <title>The Linux kernel 2.6.9 through 2.6.17 on the x86_64 and amd64 platforms allows local users to cause a denial of service (panic) via a 32-bit application that calls mprotect on its Virtual Dynamic Shared Object (VDSO) page and then triggers a segmentation fault.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4271" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4271"/>
        <description>The Linux kernel 2.6.9 through 2.6.17 on the x86_64 and amd64 platforms allows local users to cause a denial of service (panic) via a 32-bit application that calls mprotect on its Virtual Dynamic Shared Object (VDSO) page and then triggers a segmentation fault.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:59.904-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:54.212-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:02.553-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10248 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:18.668-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:58.636-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40241"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40097"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40139"/>
          <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40308"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40210"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40082"/>
          <criterion comment="kernel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40354"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:40326"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:39940"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:39363"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.23.EL" test_ref="oval:org.mitre.oval:tst:39805"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10247" version="5" class="vulnerability">
      <metadata>
        <title>Double free vulnerability in nsVCard.cpp in Mozilla Thunderbird before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a VCard that contains invalid base64 characters.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2781" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2781"/>
        <description>Double free vulnerability in nsVCard.cpp in Mozilla Thunderbird before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a VCard that contains invalid base64 characters.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:33.838-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:53.637-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:01.960-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10247 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:57:37.832-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:57.937-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32575"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32674"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32918"/>
            <criterion comment="seamonkey is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32919"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32864"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32659"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32859"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32511"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32902"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:org.mitre.oval:tst:32837"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32873"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32693"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32886"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32810"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32418"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32496"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32929"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32777"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32722"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32906"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32905"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32925"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32624"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10246" version="5" class="vulnerability">
      <metadata>
        <title>The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the "!" (exclamation point) shell metacharacter in (1) the filename of a ZIP archive and possibly (2) the filename of the first file in a ZIP archive, which is not properly handled by zip.vim in the VIM ZIP plugin (zipPlugin.vim) v.11 through v.21, as demonstrated by the zipplugin and zipplugin.v2 test cases.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2008-2712.  NOTE: this issue has the same root cause as CVE-2008-3074.  NOTE: due to the complexity of the associated disclosures and the incomplete information related to them, there may be inaccuracies in this CVE description and in external mappings to this identifier.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3075" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3075"/>
        <description>The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the "!" (exclamation point) shell metacharacter in (1) the filename of a ZIP archive and possibly (2) the filename of the first file in a ZIP archive, which is not properly handled by zip.vim in the VIM ZIP plugin (zipPlugin.vim) v.11 through v.21, as demonstrated by the zipplugin and zipplugin.v2 test cases.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2008-2712.  NOTE: this issue has the same root cause as CVE-2008-3074.  NOTE: due to the complexity of the associated disclosures and the incomplete information related to them, there may be inaccuracies in this CVE description and in external mappings to this identifier.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:44.858-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:53.383-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:01.657-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10246 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:13.334-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:57.332-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="vim-minimal is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37412"/>
          <criterion comment="vim-enhanced is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37218"/>
          <criterion comment="vim is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37405"/>
          <criterion comment="vim-X11 is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37384"/>
          <criterion comment="vim-common is earlier than 2:7.0.109-4.el5_2.4z" test_ref="oval:org.mitre.oval:tst:37365"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10245" version="5" class="vulnerability">
      <metadata>
        <title>The mb_parse_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal register_globals flag and does not disable it in certain cases when a script terminates, which allows remote attackers to invoke available PHP scripts with register_globals functionality that is not detectable by these scripts, as demonstrated by forcing a memory_limit violation.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1583" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1583"/>
        <description>The mb_parse_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal register_globals flag and does not disable it in certain cases when a script terminates, which allows remote attackers to invoke available PHP scripts with register_globals functionality that is not detectable by these scripts, as demonstrated by forcing a memory_limit violation.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:44.562-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:52.581-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:00.849-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10245 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:57:36.249-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:56.374-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33776"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33817"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33769"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33528"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33915"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33822"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33351"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:34016"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33395"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33957"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33405"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33642"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33024"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33690"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33995"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33892"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33945"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33711"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33857"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33644"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33920"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33809"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33997"/>
            <criterion comment="php-common is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33290"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33828"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33441"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:34008"/>
            <criterion comment="php is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33959"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33560"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33722"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33941"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33880"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33878"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33960"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33923"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33551"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33939"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33626"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33770"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:34005"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10244" version="5" class="vulnerability">
      <metadata>
        <title>The KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting (XSS) attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to CVE-2007-0478.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0537" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0537"/>
        <description>The KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting (XSS) attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to CVE-2007-0478.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:40.982-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:52.293-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:00.555-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10244 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:16:49.620-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:55.875-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdelibs is earlier than 6:3.3.1-9.el4" test_ref="oval:org.mitre.oval:tst:35165"/>
            <criterion comment="kdelibs-devel is earlier than 6:3.3.1-9.el4" test_ref="oval:org.mitre.oval:tst:35252"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdelibs-apidocs is earlier than 6:3.5.4-13.el5" test_ref="oval:org.mitre.oval:tst:35316"/>
            <criterion comment="kdelibs is earlier than 6:3.5.4-13.el5" test_ref="oval:org.mitre.oval:tst:35293"/>
            <criterion comment="kdelibs-devel is earlier than 6:3.5.4-13.el5" test_ref="oval:org.mitre.oval:tst:34994"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10243" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to DHTML.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1724" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1724"/>
        <description>Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to DHTML.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:20.223-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:51.715-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:02:00.001-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10243 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:54.883-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:55.251-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32663"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32326"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31987"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32451"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32697"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32558"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32427"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32671"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32666"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32561"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32593"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32679"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32133"/>
            <criterion comment="thunderbird is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32204"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32701"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32428"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32557"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32229"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32349"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32644"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32440"/>
            <criterion comment="firefox is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32219"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32598"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32717"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10242" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0988"/>
        <description>Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:04.128-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:51.472-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:59.746-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10242 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:38.707-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:54.865-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gzip is earlier than 0:1.3.3-12.rhel3" test_ref="oval:org.mitre.oval:tst:30880"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gzip is earlier than 0:1.3.3-15.rhel4" test_ref="oval:org.mitre.oval:tst:31566"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10241" version="5" class="vulnerability">
      <metadata>
        <title>The SigComp UDVM in Ethereal 0.10.12 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3247" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3247"/>
        <description>The SigComp UDVM in Ethereal 0.10.12 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:04.009-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:51.095-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:59.489-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10241 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:43.862-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:54.492-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.13-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32189"/>
            <criterion comment="ethereal is earlier than 0:0.10.13-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32138"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.13-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32341"/>
            <criterion comment="ethereal is earlier than 0:0.10.13-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32202"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10240" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted UTF-8 inputs to the (1) htmlentities or (2) htmlspecialchars functions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5465" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5465"/>
        <description>Buffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted UTF-8 inputs to the (1) htmlentities or (2) htmlspecialchars functions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:08.135-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:50.553-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:58.956-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10240 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:53:00.376-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:58:04.855-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:53.576-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-37.ent" test_ref="oval:org.mitre.oval:tst:32972"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-37.ent" test_ref="oval:org.mitre.oval:tst:33207"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-37.ent" test_ref="oval:org.mitre.oval:tst:32500"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-37.ent" test_ref="oval:org.mitre.oval:tst:33085"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-37.ent" test_ref="oval:org.mitre.oval:tst:32992"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-37.ent" test_ref="oval:org.mitre.oval:tst:32999"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-37.ent" test_ref="oval:org.mitre.oval:tst:32213"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22" test_ref="oval:org.mitre.oval:tst:32508"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22" test_ref="oval:org.mitre.oval:tst:32402"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22" test_ref="oval:org.mitre.oval:tst:32977"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22" test_ref="oval:org.mitre.oval:tst:32649"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22" test_ref="oval:org.mitre.oval:tst:33110"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22" test_ref="oval:org.mitre.oval:tst:33084"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22" test_ref="oval:org.mitre.oval:tst:33075"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22" test_ref="oval:org.mitre.oval:tst:32559"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22" test_ref="oval:org.mitre.oval:tst:32232"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22" test_ref="oval:org.mitre.oval:tst:33191"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22" test_ref="oval:org.mitre.oval:tst:33002"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22" test_ref="oval:org.mitre.oval:tst:32753"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22" test_ref="oval:org.mitre.oval:tst:32890"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22" test_ref="oval:org.mitre.oval:tst:33119"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10239" version="5" class="vulnerability">
      <metadata>
        <title>The original patch for CVE-2007-3999 in svc_auth_gss.c in the RPCSEC_GSS RPC library in MIT Kerberos 5 (krb5) 1.4 through 1.6.2, as used by the Kerberos administration daemon (kadmind) and other applications that use krb5, does not correctly check the buffer length in some environments and architectures, which might allow remote attackers to conduct a buffer overflow attack.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4743" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4743"/>
        <description>The original patch for CVE-2007-3999 in svc_auth_gss.c in the RPCSEC_GSS RPC library in MIT Kerberos 5 (krb5) 1.4 through 1.6.2, as used by the Kerberos administration daemon (kadmind) and other applications that use krb5, does not correctly check the buffer length in some environments and architectures, which might allow remote attackers to conduct a buffer overflow attack.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:46.341-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:50.172-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:58.692-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10239 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:44.681-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:53.146-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="krb5-workstation is earlier than 0:1.5-29" test_ref="oval:org.mitre.oval:tst:34835"/>
          <criterion comment="krb5 is earlier than 0:1.5-29" test_ref="oval:org.mitre.oval:tst:35134"/>
          <criterion comment="krb5-libs is earlier than 0:1.5-29" test_ref="oval:org.mitre.oval:tst:34559"/>
          <criterion comment="krb5-server is earlier than 0:1.5-29" test_ref="oval:org.mitre.oval:tst:35091"/>
          <criterion comment="krb5-devel is earlier than 0:1.5-29" test_ref="oval:org.mitre.oval:tst:34927"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10238" version="5" class="vulnerability">
      <metadata>
        <title>The "decode as" feature in packet-bssap.c in the SCCP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.8 allows remote attackers to cause a denial of service (application crash) via a malformed packet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1563" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1563"/>
        <description>The "decode as" feature in packet-bssap.c in the SCCP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.8 allows remote attackers to cause a denial of service (application crash) via a malformed packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:57.125-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:49.809-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:58.365-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10238 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:06.625-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:52.506-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-EL3.3" test_ref="oval:org.mitre.oval:tst:37624"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-EL3.3" test_ref="oval:org.mitre.oval:tst:37207"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-3.el4_7" test_ref="oval:org.mitre.oval:tst:37249"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-3.el4_7" test_ref="oval:org.mitre.oval:tst:37725"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37542"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37460"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10237" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors involving "double frame construction."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1832" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1832"/>
        <description>Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors involving "double frame construction."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:33.885-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:49.539-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:58.081-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10237 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:12:57.289-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:51.994-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.11-4.el4" test_ref="oval:org.mitre.oval:tst:38689"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38771"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38371"/>
            <criterion comment="firefox is earlier than 0:3.0.11-2.el5_3" test_ref="oval:org.mitre.oval:tst:38682"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.11-3.el5_3" test_ref="oval:org.mitre.oval:tst:38718"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10236" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a Samba request with a large number of security descriptors that triggers a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1154" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1154"/>
        <description>Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a Samba request with a large number of security descriptors that triggers a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:03.908-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:49.299-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:57.806-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10236 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:16.495-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:51.464-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="samba-common is earlier than 0:3.0.9-1.3E.1" test_ref="oval:org.mitre.oval:tst:30802"/>
          <criterion comment="samba-swat is earlier than 0:3.0.9-1.3E.1" test_ref="oval:org.mitre.oval:tst:31155"/>
          <criterion comment="samba-client is earlier than 0:3.0.9-1.3E.1" test_ref="oval:org.mitre.oval:tst:30780"/>
          <criterion comment="samba is earlier than 0:3.0.9-1.3E.1" test_ref="oval:org.mitre.oval:tst:30939"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10235" version="5" class="vulnerability">
      <metadata>
        <title>Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (memory consumption) via a crafted "complex" regular expression with doubly-nested states.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6067" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6067"/>
        <description>Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (memory consumption) via a crafted "complex" regular expression with doubly-nested states.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:22.862-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:48.767-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:57.321-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10235 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:12:51.751-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:50.564-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35948"/>
            <criterion comment="postgresql-docs is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35993"/>
            <criterion comment="postgresql-pl is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36045"/>
            <criterion comment="postgresql-tcl is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35949"/>
            <criterion comment="postgresql-libs is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36098"/>
            <criterion comment="postgresql-contrib is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36066"/>
            <criterion comment="postgresql-python is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35942"/>
            <criterion comment="postgresql-test is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36105"/>
            <criterion comment="postgresql-jdbc is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35835"/>
            <criterion comment="postgresql-server is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:35597"/>
            <criterion comment="postgresql-devel is earlier than 0:7.4.19-1.el4_6.1" test_ref="oval:org.mitre.oval:tst:36094"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35261"/>
            <criterion comment="postgresql-docs is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35907"/>
            <criterion comment="postgresql-pl is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35319"/>
            <criterion comment="postgresql-tcl is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35123"/>
            <criterion comment="postgresql-libs is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35894"/>
            <criterion comment="postgresql-contrib is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35781"/>
            <criterion comment="postgresql-python is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:36109"/>
            <criterion comment="postgresql-test is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35308"/>
            <criterion comment="postgresql-server is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:35856"/>
            <criterion comment="postgresql-devel is earlier than 0:8.1.11-1.el5_1.1" test_ref="oval:org.mitre.oval:tst:36044"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10234" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the readline function in util/texindex.c, as used by the (1) texi2dvi and (2) texindex commands, in texinfo 4.8 and earlier allows local users to execute arbitrary code via a crafted Texinfo file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0227" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0227"/>
        <description>PostgreSQL (pgsql) 7.4.x, 7.2.x, and other versions allows local users to load arbitrary shared libraries and execute code via the LOAD extension.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:01.927-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:48.267-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:56.750-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10234 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:18.999-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:49.587-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="rh-postgresql-devel is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:30936"/>
            <criterion comment="rh-postgresql-server is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:30803"/>
            <criterion comment="rh-postgresql-python is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31436"/>
            <criterion comment="rh-postgresql-libs is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31064"/>
            <criterion comment="rh-postgresql-docs is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:30591"/>
            <criterion comment="rh-postgresql-test is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31342"/>
            <criterion comment="rh-postgresql-pl is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31217"/>
            <criterion comment="rh-postgresql-tcl is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31199"/>
            <criterion comment="rh-postgresql is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31415"/>
            <criterion comment="rh-postgresql-contrib is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31005"/>
            <criterion comment="rh-postgresql-jdbc is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31233"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31336"/>
            <criterion comment="postgresql-docs is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31398"/>
            <criterion comment="postgresql-pl is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31229"/>
            <criterion comment="postgresql-tcl is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:30946"/>
            <criterion comment="postgresql-libs is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31215"/>
            <criterion comment="postgresql-contrib is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:30784"/>
            <criterion comment="postgresql-python is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31126"/>
            <criterion comment="postgresql-test is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31318"/>
            <criterion comment="postgresql-jdbc is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31273"/>
            <criterion comment="postgresql-server is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31424"/>
            <criterion comment="postgresql-devel is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31325"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10233" version="5" class="vulnerability">
      <metadata>
        <title>Memory leak in the NTLM fakeauth_auth helper for Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (memory consumption).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0096" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0096"/>
        <description>Memory leak in the NTLM fakeauth_auth helper for Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (memory consumption).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:35.363-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:47.977-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:56.504-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10233 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:58.301-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:48.745-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE3-6.3E.7" test_ref="oval:org.mitre.oval:tst:30954"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE6-3.4E.3" test_ref="oval:org.mitre.oval:tst:31281"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10232" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to bypass same-origin protections and conduct cross-site scripting (XSS) attacks via unspecified vectors involving the window.controllers array.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1732" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1732"/>
        <description>Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to bypass same-origin protections and conduct cross-site scripting (XSS) attacks via unspecified vectors involving the window.controllers array.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:47.440-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:47.479-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:55.931-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10232 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:07.804-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:47.811-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32663"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32326"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31987"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32451"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32697"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32558"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32427"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32671"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32666"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32561"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32593"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32679"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32133"/>
            <criterion comment="thunderbird is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32204"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32701"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32428"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32557"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32229"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32349"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32644"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32440"/>
            <criterion comment="firefox is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32219"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32598"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32717"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10231" version="5" class="vulnerability">
      <metadata>
        <title>Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage) via a crafted request with invalid headers, related to temporary blocking of connectors that have encountered errors, as demonstrated by an error involving a malformed HTTP Host header.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0033" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0033"/>
        <description>Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when the Java AJP connector and mod_jk load balancing are used, allows remote attackers to cause a denial of service (application outage) via a crafted request with invalid headers, related to temporary blocking of connectors that have encountered errors, as demonstrated by an error involving a malformed HTTP Host header.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:00.497-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:46.668-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:55.600-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10231 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:26.649-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:47.155-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38108"/>
          <criterion comment="tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:37963"/>
          <criterion comment="tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38333"/>
          <criterion comment="tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38944"/>
          <criterion comment="tomcat5-webapps is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38805"/>
          <criterion comment="tomcat5 is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38688"/>
          <criterion comment="tomcat5-jasper is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38891"/>
          <criterion comment="tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38239"/>
          <criterion comment="tomcat5-server-lib is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38824"/>
          <criterion comment="tomcat5-common-lib is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38955"/>
          <criterion comment="tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.7.el5_3.2" test_ref="oval:org.mitre.oval:tst:38428"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10230" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the reply_netbios_packet function in nmbd/nmbd_packets.c in nmbd in Samba 3.0.0 through 3.0.26a, when operating as a WINS server, allows remote attackers to execute arbitrary code via crafted WINS Name Registration requests followed by a WINS Name Query request.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5398" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5398"/>
        <description>Stack-based buffer overflow in the reply_netbios_packet function in nmbd/nmbd_packets.c in nmbd in Samba 3.0.0 through 3.0.26a, when operating as a WINS server, allows remote attackers to execute arbitrary code via crafted WINS Name Registration requests followed by a WINS Name Query request.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:19.859-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:46.286-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:55.210-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10230 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:25.847-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:46.255-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.9-1.3E.14.1" test_ref="oval:org.mitre.oval:tst:35031"/>
            <criterion comment="samba-swat is earlier than 0:3.0.9-1.3E.14.1" test_ref="oval:org.mitre.oval:tst:35544"/>
            <criterion comment="samba-client is earlier than 0:3.0.9-1.3E.14.1" test_ref="oval:org.mitre.oval:tst:35435"/>
            <criterion comment="samba is earlier than 0:3.0.9-1.3E.14.1" test_ref="oval:org.mitre.oval:tst:35042"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.25b-1.el4_6.2" test_ref="oval:org.mitre.oval:tst:35587"/>
            <criterion comment="samba-swat is earlier than 0:3.0.25b-1.el4_6.2" test_ref="oval:org.mitre.oval:tst:35430"/>
            <criterion comment="samba-client is earlier than 0:3.0.25b-1.el4_6.2" test_ref="oval:org.mitre.oval:tst:35567"/>
            <criterion comment="samba is earlier than 0:3.0.25b-1.el4_6.2" test_ref="oval:org.mitre.oval:tst:35285"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.25b-1.el5_1.2" test_ref="oval:org.mitre.oval:tst:34598"/>
            <criterion comment="samba-swat is earlier than 0:3.0.25b-1.el5_1.2" test_ref="oval:org.mitre.oval:tst:35588"/>
            <criterion comment="samba-client is earlier than 0:3.0.25b-1.el5_1.2" test_ref="oval:org.mitre.oval:tst:35579"/>
            <criterion comment="samba is earlier than 0:3.0.25b-1.el5_1.2" test_ref="oval:org.mitre.oval:tst:35226"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10229" version="5" class="vulnerability">
      <metadata>
        <title>MIT Kerberos 5 (krb5) 1.3 through 1.4.1 Key Distribution Center (KDC) allows remote attackers to cause a denial of service (application crash) via a certain valid TCP connection that causes a free of unallocated memory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1174"/>
        <description>MIT Kerberos 5 (krb5) 1.3 through 1.4.1 Key Distribution Center (KDC) allows remote attackers to cause a denial of service (application crash) via a certain valid TCP connection that causes a free of unallocated memory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:45.389-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:45.988-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:54.896-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10229 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:16:41.128-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:45.682-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="krb5-workstation is earlier than 0:1.3.4-17" test_ref="oval:org.mitre.oval:tst:31800"/>
          <criterion comment="krb5 is earlier than 0:1.3.4-17" test_ref="oval:org.mitre.oval:tst:31846"/>
          <criterion comment="krb5-libs is earlier than 0:1.3.4-17" test_ref="oval:org.mitre.oval:tst:31172"/>
          <criterion comment="krb5-server is earlier than 0:1.3.4-17" test_ref="oval:org.mitre.oval:tst:31706"/>
          <criterion comment="krb5-devel is earlier than 0:1.3.4-17" test_ref="oval:org.mitre.oval:tst:31781"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10228" version="5" class="vulnerability">
      <metadata>
        <title>Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via a blind throughput-reduction attack using spoofed Source Quench packets, aka the "ICMP Source Quench attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0791" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0791"/>
        <description>Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via a blind throughput-reduction attack using spoofed Source Quench packets, aka the "ICMP Source Quench attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:56.544-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:45.696-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:54.578-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10228 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:27.457-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:45.256-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31090"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31317"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31165"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31297"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31259"/>
          <criterion comment="kernel is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:30906"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31029"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:31014"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-27.0.2.EL" test_ref="oval:org.mitre.oval:tst:30920"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10227" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla allows remote attackers to cause a denial of service (application crash from null dereference or infinite loop) via a web page that contains a (1) TEXTAREA, (2) INPUT, (3) FRAMESET or (4) IMG tag followed by a null character and some trailing characters, as demonstrated by mangleme.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1613" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1613"/>
        <description>Mozilla allows remote attackers to cause a denial of service (application crash from null dereference or infinite loop) via a web page that contains a (1) TEXTAREA, (2) INPUT, (3) FRAMESET or (4) IMG tag followed by a null character and some trailing characters, as demonstrated by mangleme.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:19.487-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:45.398-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:54.263-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10227 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:28.189-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:44.709-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mozilla-js-debugger is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:30819"/>
          <criterion comment="mozilla is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31515"/>
          <criterion comment="mozilla-chat is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31278"/>
          <criterion comment="mozilla-mail is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31465"/>
          <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31606"/>
          <criterion comment="mozilla-devel is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31480"/>
          <criterion comment="mozilla-nss is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31417"/>
          <criterion comment="mozilla-nss-devel is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31313"/>
          <criterion comment="mozilla-nspr is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31469"/>
          <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31598"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10226" version="5" class="vulnerability">
      <metadata>
        <title>The ssm_i emulation in Xen 5.1 on IA64 architectures allows attackers to cause a denial of service (dom0 panic) via certain traffic, as demonstrated using an FTP stress test tool.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1619" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1619"/>
        <description>The ssm_i emulation in Xen 5.1 on IA64 architectures allows attackers to cause a denial of service (dom0 panic) via certain traffic, as demonstrated using an FTP stress test tool.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:58.343-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:45.051-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:53.861-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10226 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:20.871-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:43.847-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36107"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36600"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36529"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36526"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36442"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36238"/>
          <criterion comment="kernel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36463"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36480"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:35876"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36532"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36278"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:35724"/>
          <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36560"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10225" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in the (1) AgentX dissector, (2) PER dissector, (3) DOCSIS dissector, (4) SCTP graphs, (5) HTTP dissector, (6) DCERPC, (7) DHCP, (8) RADIUS dissector, (9) Telnet dissector, (10) IS-IS LSP dissector, or (11) NCP dissector in Ethereal 0.8.19 through 0.10.11 allows remote attackers to cause a denial of service (application crash or abort) via unknown attack vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2361" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2361"/>
        <description>Unknown vulnerability in the (1) AgentX dissector, (2) PER dissector, (3) DOCSIS dissector, (4) SCTP graphs, (5) HTTP dissector, (6) DCERPC, (7) DHCP, (8) RADIUS dissector, (9) Telnet dissector, (10) IS-IS LSP dissector, or (11) NCP dissector in Ethereal 0.8.19 through 0.10.11 allows remote attackers to cause a denial of service (application crash or abort) via unknown attack vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:45.560-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:44.763-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:53.570-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10225 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:27.081-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:43.156-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.12-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31966"/>
            <criterion comment="ethereal is earlier than 0:0.10.12-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32076"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.12-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32122"/>
            <criterion comment="ethereal is earlier than 0:0.10.12-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32035"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10224" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in the NCP dissector in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (long loop).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1465" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1465"/>
        <description>Unknown vulnerability in the NCP dissector in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (long loop).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:40.328-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:44.510-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:53.291-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10224 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:22.901-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:42.465-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31458"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31546"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31674"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31865"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10223" version="5" class="vulnerability">
      <metadata>
        <title>packet-frame in Wireshark 0.99.2 through 1.0.3 does not properly handle exceptions thrown by post dissectors, which allows remote attackers to cause a denial of service (application crash) via a certain series of packets, as demonstrated by enabling the (1) PRP or (2) MATE post dissector.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4684" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4684"/>
        <description>packet-frame in Wireshark 0.99.2 through 1.0.3 does not properly handle exceptions thrown by post dissectors, which allows remote attackers to cause a denial of service (application crash) via a certain series of packets, as demonstrated by enabling the (1) PRP or (2) MATE post dissector.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:00.216-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:44.205-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:52.513-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10223 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:23.089-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:41.586-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-EL3.3" test_ref="oval:org.mitre.oval:tst:38023"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-EL3.3" test_ref="oval:org.mitre.oval:tst:38321"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-2.el4_7" test_ref="oval:org.mitre.oval:tst:38000"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-2.el4_7" test_ref="oval:org.mitre.oval:tst:38041"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.6-2.el5_3" test_ref="oval:org.mitre.oval:tst:38236"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.6-2.el5_3" test_ref="oval:org.mitre.oval:tst:38085"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10222" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) cookies in a Yahoo web connection, (2) a long name parameter in the Yahoo login web page, (3) a long value parameter in the Yahoo login page, (4) a YMSG packet, (5) the URL parser, and (6) HTTP proxy connect.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0006" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0006"/>
        <description>Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) cookies in a Yahoo web connection, (2) a long name parameter in the Yahoo login web page, (3) a long value parameter in the Yahoo login page, (4) a YMSG packet, (5) the URL parser, and (6) HTTP proxy connect.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:27.142-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:43.931-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:52.306-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10222 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:51:57.807-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:41.280-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="gaim is earlier than 1:0.75-3.2.0" test_ref="oval:org.mitre.oval:tst:30440"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10221" version="5" class="vulnerability">
      <metadata>
        <title>Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variables that are declared without the final keyword, related to (1) LayoutQueue, (2) Cursor.predefined, (3) AccessibleResourceBundle.getContents, (4) ImageReaderSpi.STANDARD_INPUT_TYPE, (5) ImageWriterSpi.STANDARD_OUTPUT_TYPE, (6) the imageio plugins, (7) DnsContext.debug, (8) RmfFileReader/StandardMidiFileWriter.types, (9) AbstractSaslImpl.logger, (10) Synth.Region.uiToRegionMap/lowerCaseNameMap, (11) the Introspector class and a cache of BeanInfo, and (12) JAX-WS, a different vulnerability than CVE-2009-2673.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2475"/>
        <description>Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variables that are declared without the final keyword, related to (1) LayoutQueue, (2) Cursor.predefined, (3) AccessibleResourceBundle.getContents, (4) ImageReaderSpi.STANDARD_INPUT_TYPE, (5) ImageWriterSpi.STANDARD_OUTPUT_TYPE, (6) the imageio plugins, (7) DnsContext.debug, (8) RmfFileReader/StandardMidiFileWriter.types, (9) AbstractSaslImpl.logger, (10) Synth.Region.uiToRegionMap/lowerCaseNameMap, (11) the Introspector class and a cache of BeanInfo, and (12) JAX-WS, a different vulnerability than CVE-2009-2673.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:05.252-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:43.672-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:52.046-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10221 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:40.121-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:40.620-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38942"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38825"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38972"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38267"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:39037"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10220" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the size variable in Groupware server messages.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0754"/>
        <description>Integer overflow in Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the size variable in Groupware server messages.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:15.615-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:43.470-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:51.821-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10220 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:17.671-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:40.129-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="gaim is earlier than 1:0.82.1-0.RHEL3" test_ref="oval:org.mitre.oval:tst:30434"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10219" version="3" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3107" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3107"/>
        <description>Unspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:37.873-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:42.631-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:51.237-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37481"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36778"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37475"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37445"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37487"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.16-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:37483"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.6.0-sun-devel is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:36649"/>
            <criterion comment="java-1.6.0-sun is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37229"/>
            <criterion comment="java-1.6.0-sun-demo is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37509"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37426"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37368"/>
            <criterion comment="java-1.6.0-sun-src is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37035"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37181"/>
            <criterion comment="java-1.6.0-sun-plugin is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37441"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37315"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37359"/>
            <criterion comment="java-1.6.0-sun-jdbc is earlier than 1:1.6.0.7-1jpp.1.el5" test_ref="oval:org.mitre.oval:tst:37490"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.16-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:37461"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10218" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted pixmap image.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4811" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4811"/>
        <description>Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted pixmap image.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:16.291-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:41.901-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:50.726-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10218 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:49.798-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:39.226-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="qt-config is earlier than 1:3.1.2-14.RHEL3" test_ref="oval:org.mitre.oval:tst:33162"/>
            <criterion comment="qt is earlier than 1:3.1.2-14.RHEL3" test_ref="oval:org.mitre.oval:tst:33165"/>
            <criterion comment="qt-devel is earlier than 1:3.1.2-14.RHEL3" test_ref="oval:org.mitre.oval:tst:33172"/>
            <criterion comment="qt-MySQL is earlier than 1:3.1.2-14.RHEL3" test_ref="oval:org.mitre.oval:tst:32854"/>
            <criterion comment="qt-ODBC is earlier than 1:3.1.2-14.RHEL3" test_ref="oval:org.mitre.oval:tst:33071"/>
            <criterion comment="kdelibs is earlier than 6:3.1.3-6.12" test_ref="oval:org.mitre.oval:tst:32790"/>
            <criterion comment="qt-designer is earlier than 1:3.1.2-14.RHEL3" test_ref="oval:org.mitre.oval:tst:33132"/>
            <criterion comment="kdelibs-devel is earlier than 6:3.1.3-6.12" test_ref="oval:org.mitre.oval:tst:32585"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="qt-config is earlier than 1:3.3.3-10.RHEL4" test_ref="oval:org.mitre.oval:tst:33019"/>
            <criterion comment="qt is earlier than 1:3.3.3-10.RHEL4" test_ref="oval:org.mitre.oval:tst:32208"/>
            <criterion comment="qt-MySQL is earlier than 1:3.3.3-10.RHEL4" test_ref="oval:org.mitre.oval:tst:32950"/>
            <criterion comment="qt-ODBC is earlier than 1:3.3.3-10.RHEL4" test_ref="oval:org.mitre.oval:tst:33038"/>
            <criterion comment="qt-designer is earlier than 1:3.3.3-10.RHEL4" test_ref="oval:org.mitre.oval:tst:33192"/>
            <criterion comment="qt-devel is earlier than 1:3.3.3-10.RHEL4" test_ref="oval:org.mitre.oval:tst:32969"/>
            <criterion comment="qt-PostgreSQL is earlier than 1:3.3.3-10.RHEL4" test_ref="oval:org.mitre.oval:tst:32439"/>
            <criterion comment="kdelibs is earlier than 6:3.3.1-6.RHEL4" test_ref="oval:org.mitre.oval:tst:32911"/>
            <criterion comment="kdelibs-devel is earlier than 6:3.3.1-6.RHEL4" test_ref="oval:org.mitre.oval:tst:33041"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10217" version="5" class="vulnerability">
      <metadata>
        <title>Red Hat Enterprise Linux (RHEL) 5 ships the rpm for the Advanced Intrusion Detection Environment (AIDE) before 0.13.1 with a database that lacks checksum information, which allows context-dependent attackers to bypass file integrity checks and modify certain files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3849" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3849"/>
        <description>Red Hat Enterprise Linux (RHEL) 5 ships the rpm for the Advanced Intrusion Detection Environment (AIDE) before 0.13.1 with a database that lacks checksum information, which allows context-dependent attackers to bypass file integrity checks and modify certain files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:56.276-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:41.690-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:50.506-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10217 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:18.799-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:38.579-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="aide is earlier than 0:0.13.1-2.0.4.el5" test_ref="oval:org.mitre.oval:tst:33757"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10216" version="5" class="vulnerability">
      <metadata>
        <title>The d_delete function in fs/ecryptfs/inode.c in eCryptfs in the Linux kernel 2.6.31 allows local users to cause a denial of service (kernel OOPS) and possibly execute arbitrary code via unspecified vectors that cause a "negative dentry" and trigger a NULL pointer dereference, as demonstrated via a Mutt temporary directory in an eCryptfs mount.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2908" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2908"/>
        <description>The d_delete function in fs/ecryptfs/inode.c in eCryptfs in the Linux kernel 2.6.31 allows local users to cause a denial of service (kernel OOPS) and possibly execute arbitrary code via unspecified vectors that cause a "negative dentry" and trigger a NULL pointer dereference, as demonstrated via a Mutt temporary directory in an eCryptfs mount.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:59.765-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:41.338-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:50.140-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10216 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:32.996-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:37.914-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39665"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39142"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39538"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39699"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39518"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39350"/>
          <criterion comment="kernel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39738"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39663"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39536"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39189"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39141"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39179"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10215" version="5" class="vulnerability">
      <metadata>
        <title>The icmp_send function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, when configured as a router with a REJECT route, does not properly manage the Protocol Independent Destination Cache (aka DST) in some situations involving transmission of an ICMP Host Unreachable message, which allows remote attackers to cause a denial of service (connectivity outage) by sending a large series of packets to many destination IP addresses within this REJECT route, related to an "rt_cache leak."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0778" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0778"/>
        <description>The icmp_send function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, when configured as a router with a REJECT route, does not properly manage the Protocol Independent Destination Cache (aka DST) in some situations involving transmission of an ICMP Host Unreachable message, which allows remote attackers to cause a denial of service (connectivity outage) by sending a large series of packets to many destination IP addresses within this REJECT route, related to an "rt_cache leak."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:31.422-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:40.940-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:49.706-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10215 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:34.457-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:37.200-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38113"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38107"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38167"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38064"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38380"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:37672"/>
          <criterion comment="kernel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38093"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38127"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38109"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38430"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:37764"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38397"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10214" version="5" class="vulnerability">
      <metadata>
        <title>The atm module in Linux kernel 2.6 before 2.6.14 allows local users to cause a denial of service (panic) via certain socket calls that produce inconsistent reference counts for loadable protocol modules.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3359" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3359"/>
        <description>The atm module in Linux kernel 2.6 before 2.6.14 allows local users to cause a denial of service (panic) via certain socket calls that produce inconsistent reference counts for loadable protocol modules.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:00.275-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:40.634-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:49.364-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10214 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:12:49.850-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:36.499-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32235"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32371"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32703"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32314"/>
          <criterion comment="kernel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32614"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32295"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32310"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32611"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32305"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10213" version="5" class="vulnerability">
      <metadata>
        <title>do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits, as originally demonstrated by a program that exceeds the process limits as defined in /etc/security/limits.conf.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2607" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2607"/>
        <description>do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits, as originally demonstrated by a program that exceeds the process limits as defined in /etc/security/limits.conf.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:30.540-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:40.429-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:49.135-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10213 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:16.929-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:35.897-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="vixie-cron is earlier than 4:4.1-44.EL4" test_ref="oval:org.mitre.oval:tst:32316"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10212" version="5" class="vulnerability">
      <metadata>
        <title>The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of service (application crash) via malformed HTML that causes "an invalid memory access," a different vulnerability than CVE-2005-0208.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0473" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0473"/>
        <description>The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of service (application crash) via malformed HTML that causes "an invalid memory access," a different vulnerability than CVE-2005-0208.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:04.706-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:40.114-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:48.812-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10212 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:53.974-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:35.467-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gaim is earlier than 1:1.1.4-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31086"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gaim is earlier than 1:1.1.4-1.EL4" test_ref="oval:org.mitre.oval:tst:31601"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10211" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows and facilitate phishing attacks, aka the "Dialog Box Spoofing Vulnerability."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1380"/>
        <description>Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows and facilitate phishing attacks, aka the "Dialog Box Spoofing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:59.193-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:39.563-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:48.223-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10211 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:13.399-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:34.601-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:30819"/>
            <criterion comment="mozilla is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31515"/>
            <criterion comment="mozilla-chat is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31278"/>
            <criterion comment="mozilla-mail is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31465"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31606"/>
            <criterion comment="mozilla-devel is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31480"/>
            <criterion comment="mozilla-nss is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31417"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31313"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31469"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.4-1.3.5" test_ref="oval:org.mitre.oval:tst:31598"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:30665"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.3" test_ref="oval:org.mitre.oval:tst:31499"/>
            <criterion comment="mozilla is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31604"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31381"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31622"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:30651"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.3" test_ref="oval:org.mitre.oval:tst:31560"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31110"/>
            <criterion comment="evolution is earlier than 0:2.0.2-14" test_ref="oval:org.mitre.oval:tst:31003"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31404"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31375"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31106"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.6-1.4.1" test_ref="oval:org.mitre.oval:tst:31418"/>
            <criterion comment="evolution-devel is earlier than 0:2.0.2-14" test_ref="oval:org.mitre.oval:tst:31558"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10210" version="3" class="vulnerability">
      <metadata>
        <title>Multiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player 9.x up to 9.0.48.0 and 8.x up to 8.0.35.0 allow remote attackers to inject arbitrary web script or HTML via (1) a SWF file that uses the asfunction: protocol or (2) the navigateToURL function when used with the Flash Player ActiveX Control in Internet Explorer.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6244"/>
        <description>Multiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player 9.x up to 9.0.48.0 and 8.x up to 8.0.35.0 allow remote attackers to inject arbitrary web script or HTML via (1) a SWF file that uses the asfunction: protocol or (2) the navigateToURL function when used with the Flash Player ActiveX Control in Internet Explorer.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:15.414-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:39.317-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:47.869-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criterion comment="flash-plugin is earlier than 0:9.0.115.0-1.el3.with.oss" test_ref="oval:org.mitre.oval:tst:35926"/>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criterion comment="flash-plugin is earlier than 0:9.0.115.0-1.el4" test_ref="oval:org.mitre.oval:tst:35400"/>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criterion comment="flash-plugin is earlier than 0:9.0.115.0-1.el5" test_ref="oval:org.mitre.oval:tst:35776"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10209" version="5" class="vulnerability">
      <metadata>
        <title>The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote attackers to cause a denial of service (IOMMU space exhaustion and system crash) by using jumbo frames for a large amount of network traffic, as demonstrated by a flood ping.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3613" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3613"/>
        <description>The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote attackers to cause a denial of service (IOMMU space exhaustion and system crash) by using jumbo frames for a large amount of network traffic, as demonstrated by a flood ping.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:00.807-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:38.761-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:47.322-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10209 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:23.712-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:33.317-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39504"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39362"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39704"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39759"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39722"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39734"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39394"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39578"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39019"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39604"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.18.EL" test_ref="oval:org.mitre.oval:tst:39609"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39665"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39142"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39538"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39699"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39518"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39350"/>
            <criterion comment="kernel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39738"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39663"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39536"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39189"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39141"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-164.6.1.el5" test_ref="oval:org.mitre.oval:tst:39179"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10208" version="5" class="vulnerability">
      <metadata>
        <title>hidd in BlueZ (bluez-utils) before 2.25 allows remote attackers to obtain control of the (1) Mouse and (2) Keyboard Human Interface Device (HID) via a certain configuration of two HID (PSM) endpoints, operating as a server, aka HidAttack.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6899" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6899"/>
        <description>hidd in BlueZ (bluez-utils) before 2.25 allows remote attackers to obtain control of the (1) Mouse and (2) Keyboard Human Interface Device (HID) via a certain configuration of two HID (PSM) endpoints, operating as a server, aka HidAttack.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:11.396-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:38.556-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:47.094-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10208 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:49.657-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:32.549-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="bluez-utils-cups is earlier than 0:2.10-2.2" test_ref="oval:org.mitre.oval:tst:33549"/>
          <criterion comment="bluez-utils is earlier than 0:2.10-2.2" test_ref="oval:org.mitre.oval:tst:33457"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10207" version="5" class="vulnerability">
      <metadata>
        <title>The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4343" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4343"/>
        <description>The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:08.257-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:38.270-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:46.704-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10207 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:32.768-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:31.280-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.7a-33.21" test_ref="oval:org.mitre.oval:tst:32990"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.7a-33.21" test_ref="oval:org.mitre.oval:tst:32592"/>
            <criterion comment="openssl is earlier than 0:0.9.7a-33.21" test_ref="oval:org.mitre.oval:tst:32812"/>
            <criterion comment="openssl096b is earlier than 0:0.9.6b-16.46" test_ref="oval:org.mitre.oval:tst:32771"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.7a-43.14" test_ref="oval:org.mitre.oval:tst:32875"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.7a-43.14" test_ref="oval:org.mitre.oval:tst:33058"/>
            <criterion comment="openssl is earlier than 0:0.9.7a-43.14" test_ref="oval:org.mitre.oval:tst:33093"/>
            <criterion comment="openssl096b is earlier than 0:0.9.6b-22.46" test_ref="oval:org.mitre.oval:tst:32789"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10206" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the JavaScript engine and (1) misinterpretation of the characteristics of Namespace and QName in jsxml.c, (2) misuse of signed integers in the nsEscapeCount function in nsEscape.cpp, and (3) interaction of JavaScript garbage collection with certain use of an NPObject in the nsNPObjWrapper::GetNewOrUsed function in nsJSNPRuntime.cpp.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4062" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4062"/>
        <description>Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the JavaScript engine and (1) misinterpretation of the characteristics of Namespace and QName in jsxml.c, (2) misuse of signed integers in the nsEscapeCount function in nsEscape.cpp, and (3) interaction of JavaScript garbage collection with certain use of an NPObject in the nsNPObjWrapper::GetNewOrUsed function in nsJSNPRuntime.cpp.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:50.526-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:37.608-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:46.012-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10206 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:32.291-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:29.624-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37411"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36691"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37031"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37528"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36726"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37435"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37680"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:36725"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37449"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.24.el3" test_ref="oval:org.mitre.oval:tst:37356"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.10.el4" test_ref="oval:org.mitre.oval:tst:37564"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:36913"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-16.el4" test_ref="oval:org.mitre.oval:tst:37634"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37609"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.10.el4" test_ref="oval:org.mitre.oval:tst:37306"/>
            <criterion comment="firefox is earlier than 0:3.0.2-3.el4" test_ref="oval:org.mitre.oval:tst:37195"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37499"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37444"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37543"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-26.el4" test_ref="oval:org.mitre.oval:tst:37552"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-19.el5" test_ref="oval:org.mitre.oval:tst:37248"/>
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37486"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37495"/>
            <criterion comment="nss is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37044"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.17-1.el5" test_ref="oval:org.mitre.oval:tst:37230"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37578"/>
            <criterion comment="yelp is earlier than 0:2.16.0-21.el5" test_ref="oval:org.mitre.oval:tst:37584"/>
            <criterion comment="devhelp is earlier than 0:0.12-19.el5" test_ref="oval:org.mitre.oval:tst:37353"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.2-5.el5" test_ref="oval:org.mitre.oval:tst:37406"/>
            <criterion comment="firefox is earlier than 0:3.0.2-3.el5" test_ref="oval:org.mitre.oval:tst:37225"/>
            <criterion comment="nss-devel is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:36664"/>
            <criterion comment="nss-tools is earlier than 0:3.12.1.1-1.el5" test_ref="oval:org.mitre.oval:tst:37664"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10205" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions before 1.1.10, Netscape 9.0, and other Mozilla-based web browsers, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regard the certificate as also accepted for all domain names in subjectAltName:dNSName fields, which makes it easier for remote attackers to trick a user into accepting an invalid certificate for a spoofed web site.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2809" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2809"/>
        <description>Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions before 1.1.10, Netscape 9.0, and other Mozilla-based web browsers, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regard the certificate as also accepted for all domain names in subjectAltName:dNSName fields, which makes it easier for remote attackers to trick a user into accepting an invalid certificate for a spoofed web site.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:31.858-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:36.943-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:44.654-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10205 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:48.338-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:27.823-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37286"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37033"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37126"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37105"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37271"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37279"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37060"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37189"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:36476"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:36916"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37236"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37192"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-14.el4" test_ref="oval:org.mitre.oval:tst:36999"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36886"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37331"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36365"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.19.el4" test_ref="oval:org.mitre.oval:tst:37174"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37226"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36766"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37320"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36826"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37274"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-17.el5" test_ref="oval:org.mitre.oval:tst:37107"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:37351"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.16-1.el5" test_ref="oval:org.mitre.oval:tst:37363"/>
            <criterion comment="xulrunner is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:36984"/>
            <criterion comment="devhelp is earlier than 0:0.12-17.el5" test_ref="oval:org.mitre.oval:tst:37234"/>
            <criterion comment="yelp is earlier than 0:2.16.0-19.el5" test_ref="oval:org.mitre.oval:tst:37291"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:36436"/>
            <criterion comment="firefox is earlier than 0:3.0-2.el5" test_ref="oval:org.mitre.oval:tst:36814"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10204" version="5" class="vulnerability">
      <metadata>
        <title>The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers an out-of-bounds read.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0799" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0799"/>
        <description>The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers an out-of-bounds read.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:31.818-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:36.343-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:43.903-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10204 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:15.590-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:26.652-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="xpdf is earlier than 1:2.02-14.el3" test_ref="oval:org.mitre.oval:tst:38322"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40095"/>
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-13.el4" test_ref="oval:org.mitre.oval:tst:38126"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:39528"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-13.el4" test_ref="oval:org.mitre.oval:tst:38230"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40473"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38481"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40316"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-7.7.2.el4_7.4" test_ref="oval:org.mitre.oval:tst:38436"/>
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38145"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40209"/>
            <criterion comment="xpdf is earlier than 1:3.00-20.el4" test_ref="oval:org.mitre.oval:tst:38649"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40364"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40077"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38607"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.5.4-12.el5_3" test_ref="oval:org.mitre.oval:tst:38618"/>
            <criterion comment="cups-lpd is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38471"/>
            <criterion comment="tetex-dvips is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40312"/>
            <criterion comment="kdegraphics is earlier than 7:3.5.4-12.el5_3" test_ref="oval:org.mitre.oval:tst:38271"/>
            <criterion comment="poppler is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38760"/>
            <criterion comment="tetex-fonts is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40122"/>
            <criterion comment="cups-libs is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38541"/>
            <criterion comment="tetex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40413"/>
            <criterion comment="tetex-doc is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40398"/>
            <criterion comment="poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38500"/>
            <criterion comment="tetex-latex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40444"/>
            <criterion comment="poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38512"/>
            <criterion comment="cups-devel is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:37935"/>
            <criterion comment="tetex-afm is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40008"/>
            <criterion comment="tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:39920"/>
            <criterion comment="cups is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38334"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10203" version="5" class="vulnerability">
      <metadata>
        <title>The png_handle_iCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service (application crash) via a certain PNG image that triggers a null dereference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0598" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0598"/>
        <description>The png_handle_iCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service (application crash) via a certain PNG image that triggers a null dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:08.476-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:36.111-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:43.634-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10203 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:54.182-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:26.137-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="libpng10-devel is earlier than 0:1.0.13-15" test_ref="oval:org.mitre.oval:tst:29821"/>
          <criterion comment="libpng-devel is earlier than 2:1.2.2-25" test_ref="oval:org.mitre.oval:tst:30405"/>
          <criterion comment="libpng is earlier than 2:1.2.2-25" test_ref="oval:org.mitre.oval:tst:30788"/>
          <criterion comment="libpng10 is earlier than 0:1.0.13-15" test_ref="oval:org.mitre.oval:tst:30512"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10202" version="5" class="vulnerability">
      <metadata>
        <title>The SMB dissector in Ethereal before 0.10.0 allows remote attackers to cause a denial of service via a malformed SMB packet that triggers a segmentation fault during processing of Selected packets.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1012" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1012"/>
        <description>The SMB dissector in Ethereal before 0.10.0 allows remote attackers to cause a denial of service via a malformed SMB packet that triggers a segmentation fault during processing of Selected packets.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:06.781-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:35.873-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:43.388-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10202 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:32.155-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:25.468-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="ethereal-gnome is earlier than 0:0.10.0a-0.30E.1" test_ref="oval:org.mitre.oval:tst:29895"/>
          <criterion comment="ethereal is earlier than 0:0.10.0a-0.30E.1" test_ref="oval:org.mitre.oval:tst:30227"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10201" version="5" class="vulnerability">
      <metadata>
        <title>SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses, and keys in plaintext in the known_hosts file, which makes it easier for an attacker that has compromised an SSH user's account to generate a list of additional targets that are more likely to have the same password or key.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2666" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2666"/>
        <description>SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses, and keys in plaintext in the known_hosts file, which makes it easier for an attacker that has compromised an SSH user's account to generate a list of additional targets that are more likely to have the same password or key.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:21.695-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:35.620-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:43.106-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10201 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:12:42.000-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:24.656-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="openssh is earlier than 0:3.9p1-8.RHEL4.20" test_ref="oval:org.mitre.oval:tst:34077"/>
          <criterion comment="openssh-askpass is earlier than 0:3.9p1-8.RHEL4.20" test_ref="oval:org.mitre.oval:tst:33820"/>
          <criterion comment="openssh-server is earlier than 0:3.9p1-8.RHEL4.20" test_ref="oval:org.mitre.oval:tst:34075"/>
          <criterion comment="openssh-clients is earlier than 0:3.9p1-8.RHEL4.20" test_ref="oval:org.mitre.oval:tst:34060"/>
          <criterion comment="openssh-askpass-gnome is earlier than 0:3.9p1-8.RHEL4.20" test_ref="oval:org.mitre.oval:tst:33524"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10200" version="5" class="vulnerability">
      <metadata>
        <title>Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with (1) a large "number of components" value that is not checked by DCTStream::readBaselineSOF or DCTStream::readProgressiveSOF, (2) a large "Huffman table index" value that is not checked by DCTStream::readHuffmanTables, and (3) certain uses of the scanInfo.numComps value by DCTStream::readScanInfo.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3627" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3627"/>
        <description>Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with (1) a large "number of components" value that is not checked by DCTStream::readBaselineSOF or DCTStream::readProgressiveSOF, (2) a large "Huffman table index" value that is not checked by DCTStream::readHuffmanTables, and (3) certain uses of the scanInfo.numComps value by DCTStream::readScanInfo.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:59.376-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:35.076-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:42.471-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10200 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:28.418-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:22.745-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32436"/>
            <criterion comment="tetex-dvips is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32311"/>
            <criterion comment="tetex-fonts is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32279"/>
            <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.36" test_ref="oval:org.mitre.oval:tst:32437"/>
            <criterion comment="tetex is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32507"/>
            <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.36" test_ref="oval:org.mitre.oval:tst:32206"/>
            <criterion comment="tetex-afm is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:32377"/>
            <criterion comment="xpdf is earlier than 1:2.02-9.8" test_ref="oval:org.mitre.oval:tst:31474"/>
            <criterion comment="tetex-xdvi is earlier than 0:1.0.7-67.9" test_ref="oval:org.mitre.oval:tst:31613"/>
            <criterion comment="cups is earlier than 1:1.1.17-13.3.36" test_ref="oval:org.mitre.oval:tst:31553"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32260"/>
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-3.6" test_ref="oval:org.mitre.oval:tst:32395"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32095"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-3.6" test_ref="oval:org.mitre.oval:tst:31805"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32489"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.10" test_ref="oval:org.mitre.oval:tst:32284"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32199"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-7.4" test_ref="oval:org.mitre.oval:tst:32545"/>
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.10" test_ref="oval:org.mitre.oval:tst:32254"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32308"/>
            <criterion comment="xpdf is earlier than 1:3.00-11.10" test_ref="oval:org.mitre.oval:tst:32152"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32333"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:org.mitre.oval:tst:32317"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.10" test_ref="oval:org.mitre.oval:tst:32499"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:102" version="1" class="vulnerability">
      <metadata>
        <title>Solaris 7 rpc.yppasswdd Buffer Overrun Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <product>rpc.yppasswdd</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0779" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0779"/>
        <description>Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote attackers to gain root access via a long username.</description>
        <oval_repository>
          <dates>
            <submitted date="2002-10-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="File rpc.yppasswdd exists" negate="false" test_ref="oval:org.mitre.oval:tst:3006"/>
          <criterion comment="Patch 111590-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:2943"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="rpc.yppasswdd running" negate="false" test_ref="oval:org.mitre.oval:tst:3004"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10199" version="5" class="vulnerability">
      <metadata>
        <title>epan/dissectors/packet-xot.c in the XOT dissector (dissect_xot_pdu) in Wireshark (formerly Ethereal) 0.9.8 through 0.99.3 allows remote attackers to cause a denial of service (memory consumption and crash) via an encoded XOT packet that produces a zero length value when it is decoded.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4805" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4805"/>
        <description>epan/dissectors/packet-xot.c in the XOT dissector (dissect_xot_pdu) in Wireshark (formerly Ethereal) 0.9.8 through 0.99.3 allows remote attackers to cause a denial of service (memory consumption and crash) via an encoded XOT packet that produces a zero length value when it is decoded.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:44.704-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:34.746-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:42.170-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10199 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:08.665-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:21.540-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.4-EL3.1" test_ref="oval:org.mitre.oval:tst:33205"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.4-EL3.1" test_ref="oval:org.mitre.oval:tst:33170"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.4-EL4.1" test_ref="oval:org.mitre.oval:tst:32550"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.4-EL4.1" test_ref="oval:org.mitre.oval:tst:33152"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10198" version="5" class="vulnerability">
      <metadata>
        <title>The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0590" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0590"/>
        <description>The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:38.517-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:34.373-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:41.673-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10198 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:49.447-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:20.638-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.7a-33.26" test_ref="oval:org.mitre.oval:tst:40028"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.7a-33.26" test_ref="oval:org.mitre.oval:tst:40271"/>
            <criterion comment="openssl is earlier than 0:0.9.7a-33.26" test_ref="oval:org.mitre.oval:tst:40261"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.7a-43.17.el4_8.5" test_ref="oval:org.mitre.oval:tst:39739"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.7a-43.17.el4_8.5" test_ref="oval:org.mitre.oval:tst:40358"/>
            <criterion comment="openssl is earlier than 0:0.9.7a-43.17.el4_8.5" test_ref="oval:org.mitre.oval:tst:39943"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.8e-12.el5" test_ref="oval:org.mitre.oval:tst:39059"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.8e-12.el5" test_ref="oval:org.mitre.oval:tst:38295"/>
            <criterion comment="openssl is earlier than 0:0.9.8e-12.el5" test_ref="oval:org.mitre.oval:tst:38660"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10197" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to cause a denial of service (data stream corruption) via a long domain name in a reply.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2470" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2470"/>
        <description>Mozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to cause a denial of service (data stream corruption) via a long domain name in a reply.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:31.330-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:33.745-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:40.932-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10197 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:27.905-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:19.161-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38881"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38851"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38690"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38366"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38475"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38924"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38923"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38918"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38811"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.40.el3" test_ref="oval:org.mitre.oval:tst:38644"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-45.el4_8" test_ref="oval:org.mitre.oval:tst:38772"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-25.el4" test_ref="oval:org.mitre.oval:tst:40299"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-45.el4_8" test_ref="oval:org.mitre.oval:tst:37948"/>
            <criterion comment="firefox is earlier than 0:3.0.12-1.el4" test_ref="oval:org.mitre.oval:tst:38809"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-45.el4_8" test_ref="oval:org.mitre.oval:tst:38947"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-45.el4_8" test_ref="oval:org.mitre.oval:tst:38194"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-45.el4_8" test_ref="oval:org.mitre.oval:tst:38876"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-45.el4_8" test_ref="oval:org.mitre.oval:tst:38504"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38249"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38575"/>
            <criterion comment="firefox is earlier than 0:3.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38853"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.24-2.el5_4" test_ref="oval:org.mitre.oval:tst:40249"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38563"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10196" version="5" class="vulnerability">
      <metadata>
        <title>Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restrictions allows remote attackers to create files in arbitrary directories via the tempnam function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1494"/>
        <description>Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restrictions allows remote attackers to create files in arbitrary directories via the tempnam function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:08.527-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:33.250-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:40.406-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10196 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:34:32.683-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:18.320-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-33.ent" test_ref="oval:org.mitre.oval:tst:32694"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-33.ent" test_ref="oval:org.mitre.oval:tst:32635"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-33.ent" test_ref="oval:org.mitre.oval:tst:32094"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-33.ent" test_ref="oval:org.mitre.oval:tst:32734"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-33.ent" test_ref="oval:org.mitre.oval:tst:32506"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-33.ent" test_ref="oval:org.mitre.oval:tst:32594"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-33.ent" test_ref="oval:org.mitre.oval:tst:32698"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32619"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32609"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:31938"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:31791"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32729"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32676"/>
            <criterion comment="php is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32607"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32412"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32084"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32271"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32269"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32783"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32718"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32732"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10195" version="5" class="vulnerability">
      <metadata>
        <title>CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allows remote attackers to conduct HTTP request splitting attacks via LF (%0a) bytes in the username attribute.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2292" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2292"/>
        <description>CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allows remote attackers to conduct HTTP request splitting attacks via LF (%0a) bytes in the username attribute.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:40.082-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:32.611-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:39.732-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10195 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:35:01.687-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:16.219-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35512"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35540"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35394"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35541"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35241"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35553"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35552"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:34924"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35155"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.5.el3" test_ref="oval:org.mitre.oval:tst:35441"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35489"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35324"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-0.5.el4" test_ref="oval:org.mitre.oval:tst:35240"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35182"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35311"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35454"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.7.el4" test_ref="oval:org.mitre.oval:tst:35398"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35351"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35482"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:34790"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:35291"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-6.el4" test_ref="oval:org.mitre.oval:tst:34577"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-6.el5" test_ref="oval:org.mitre.oval:tst:35262"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-6.el5" test_ref="oval:org.mitre.oval:tst:35202"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-5.el5" test_ref="oval:org.mitre.oval:tst:35177"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10194" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in mikmod 3.1.6 and earlier allows remote attackers to execute arbitrary code via an archive file that contains a file with a long filename.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0427" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0427"/>
        <description>Buffer overflow in mikmod 3.1.6 and earlier allows remote attackers to execute arbitrary code via an archive file that contains a file with a long filename.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:04.398-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:32.342-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:39.454-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10194 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:27:00.394-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:33:59.311-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:15.362-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mikmod-devel is earlier than 0:3.1.6-22.EL3" test_ref="oval:org.mitre.oval:tst:31867"/>
            <criterion comment="mikmod is earlier than 0:3.1.6-22.EL3" test_ref="oval:org.mitre.oval:tst:31851"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mikmod-devel is earlier than 0:3.1.6-32.EL4" test_ref="oval:org.mitre.oval:tst:31937"/>
            <criterion comment="mikmod is earlier than 0:3.1.6-32.EL4" test_ref="oval:org.mitre.oval:tst:31059"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10193" version="5" class="vulnerability">
      <metadata>
        <title>The SELinux version of PAM before 0.78 r3 allows local users to perform brute force password guessing attacks via unix_chkpwd, which does not log failed guesses or delay its responses.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2977" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2977"/>
        <description>The SELinux version of PAM before 0.78 r3 allows local users to perform brute force password guessing attacks via unix_chkpwd, which does not log failed guesses or delay its responses.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:22.724-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:32.124-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:39.220-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10193 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:46.864-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:14.334-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="pam-devel is earlier than 0:0.77-66.13" test_ref="oval:org.mitre.oval:tst:31898"/>
          <criterion comment="pam is earlier than 0:0.77-66.13" test_ref="oval:org.mitre.oval:tst:32270"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10192" version="5" class="vulnerability">
      <metadata>
        <title>GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Tab sequence, a related issue to CVE-2007-3069.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3920" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3920"/>
        <description>GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Tab sequence, a related issue to CVE-2007-3069.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:49.461-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:31.860-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:38.967-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10192 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:45.079-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:12.966-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="compiz is earlier than 0:0.0.13-0.37.20060817git.el5" test_ref="oval:org.mitre.oval:tst:36844"/>
          <criterion comment="compiz-devel is earlier than 0:0.0.13-0.37.20060817git.el5" test_ref="oval:org.mitre.oval:tst:36745"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10191" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in the Windows Pluggable Look and Feel (PLF) feature in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to "information leaks in mutable variables," aka Bug Id 6657138.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3883" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3883"/>
        <description>Multiple unspecified vulnerabilities in the Windows Pluggable Look and Feel (PL&amp;F) feature in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to "information leaks in mutable variables," aka Bug Id 6657138.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:44.972-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:31.614-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:38.715-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10191 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:39:40.596-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:10.872-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:38878"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39616"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39115"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39531"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5" test_ref="oval:org.mitre.oval:tst:39655"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10190" version="5" class="vulnerability">
      <metadata>
        <title>Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0122" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0122"/>
        <description>Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:57.217-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:31.326-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:38.416-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10190 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:02.318-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:09.459-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="bind-utils is earlier than 0:9.3.4-6.P1.el5" test_ref="oval:org.mitre.oval:tst:35853"/>
          <criterion comment="bind-libbind-devel is earlier than 0:9.3.4-6.P1.el5" test_ref="oval:org.mitre.oval:tst:36573"/>
          <criterion comment="bind-devel is earlier than 0:9.3.4-6.P1.el5" test_ref="oval:org.mitre.oval:tst:36695"/>
          <criterion comment="bind-chroot is earlier than 0:9.3.4-6.P1.el5" test_ref="oval:org.mitre.oval:tst:36618"/>
          <criterion comment="caching-nameserver is earlier than 0:9.3.4-6.P1.el5" test_ref="oval:org.mitre.oval:tst:36833"/>
          <criterion comment="bind-sdb is earlier than 0:9.3.4-6.P1.el5" test_ref="oval:org.mitre.oval:tst:36572"/>
          <criterion comment="bind is earlier than 0:9.3.4-6.P1.el5" test_ref="oval:org.mitre.oval:tst:36755"/>
          <criterion comment="bind-libs is earlier than 0:9.3.4-6.P1.el5" test_ref="oval:org.mitre.oval:tst:36364"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10189" version="5" class="vulnerability">
      <metadata>
        <title>The mremap system call (do_mremap) in Linux kernel 2.4.x before 2.4.21, and possibly other versions before 2.4.24, does not properly perform bounds checks, which allows local users to cause a denial of service and possibly gain privileges by causing a remapping of a virtual memory area (VMA) to create a zero length VMA, a different vulnerability than CAN-2004-0077.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0985" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0985"/>
        <description>The mremap system call (do_mremap) in Linux kernel 2.4.x before 2.4.21, and possibly other versions before 2.4.24, does not properly perform bounds checks, which allows local users to cause a denial of service and possibly gain privileges by causing a remapping of a virtual memory area (VMA) to create a zero length VMA, a different vulnerability than CAN-2004-0077.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:06.152-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:30.960-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:38.111-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10189 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:35.116-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:07.767-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-4.0.2.EL" test_ref="oval:org.mitre.oval:tst:30257"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-4.0.2.EL" test_ref="oval:org.mitre.oval:tst:30040"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-4.0.2.EL" test_ref="oval:org.mitre.oval:tst:30590"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-4.0.2.EL" test_ref="oval:org.mitre.oval:tst:30558"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-4.0.2.EL" test_ref="oval:org.mitre.oval:tst:30559"/>
          <criterion comment="kernel is earlier than 0:2.4.21-4.0.2.EL" test_ref="oval:org.mitre.oval:tst:30576"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-4.0.2.EL" test_ref="oval:org.mitre.oval:tst:29964"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-4.0.2.EL" test_ref="oval:org.mitre.oval:tst:30204"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-4.0.2.EL" test_ref="oval:org.mitre.oval:tst:30082"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10188" version="5" class="vulnerability">
      <metadata>
        <title>The TFTP dissector in Wireshark (formerly Ethereal) 0.6.0 through 0.99.7, when running on Ubuntu 7.10, allows remote attackers to cause a denial of service (crash or memory consumption) via a malformed packet, possibly related to a Cairo library bug.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1072"/>
        <description>The TFTP dissector in Wireshark (formerly Ethereal) 0.6.0 through 0.99.7, when running on Ubuntu 7.10, allows remote attackers to cause a denial of service (crash or memory consumption) via a malformed packet, possibly related to a Cairo library bug.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:13.952-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:30.630-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:37.733-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10188 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:21.672-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:06.644-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-EL3.3" test_ref="oval:org.mitre.oval:tst:37624"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-EL3.3" test_ref="oval:org.mitre.oval:tst:37207"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-3.el4_7" test_ref="oval:org.mitre.oval:tst:37249"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-3.el4_7" test_ref="oval:org.mitre.oval:tst:37725"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37542"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37460"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10187" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0176"/>
        <description>Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:01.756-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:30.418-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:37.513-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10187 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:32.461-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:05.437-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="ethereal-gnome is earlier than 0:0.10.3-0.30E.1" test_ref="oval:org.mitre.oval:tst:29720"/>
          <criterion comment="ethereal is earlier than 0:0.10.3-0.30E.1" test_ref="oval:org.mitre.oval:tst:30448"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10186" version="5" class="vulnerability">
      <metadata>
        <title>The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; (2) the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP6; (3) Mono before 2.4.2.2; (4) XML Security Library before 1.2.12; (5) IBM WebSphere Application Server Versions 6.0 through 6.0.2.33, 6.1 through 6.1.0.23, and 7.0 through 7.0.0.1; (6) Sun JDK and JRE Update 14 and earlier; (7) Microsoft .NET Framework 3.0 through 3.0 SP2, 3.5, and 4.0; and other products uses a parameter that defines an HMAC truncation length (HMACOutputLength) but does not require a minimum for this length, which allows attackers to spoof HMAC-based signatures and bypass authentication by specifying a truncation length with a small number of bits.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0217" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0217"/>
        <description>The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; (2) the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP6; (3) Mono before 2.4.2.2; (4) XML Security Library before 1.2.12; (5) IBM WebSphere Application Server Versions 6.0 through 6.0.2.33, 6.1 through 6.1.0.23, and 7.0 through 7.0.0.1; (6) Sun JDK and JRE Update 14 and earlier; (7) Microsoft .NET Framework 3.0 through 3.0 SP2, 3.5, and 4.0; and other products uses a parameter that defines an HMAC truncation length (HMACOutputLength) but does not require a minimum for this length, which allows attackers to spoof HMAC-based signatures and bypass authentication by specifying a truncation length with a small number of bits.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:34.429-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:29.792-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:37.078-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10186 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:16.125-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:03.908-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xmlsec1-openssl is earlier than 0:1.2.6-3.1" test_ref="oval:org.mitre.oval:tst:39276"/>
            <criterion comment="xmlsec1 is earlier than 0:1.2.6-3.1" test_ref="oval:org.mitre.oval:tst:39163"/>
            <criterion comment="xmlsec1-devel is earlier than 0:1.2.6-3.1" test_ref="oval:org.mitre.oval:tst:38981"/>
            <criterion comment="xmlsec1-openssl-devel is earlier than 0:1.2.6-3.1" test_ref="oval:org.mitre.oval:tst:39123"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xmlsec1-nss-devel is earlier than 0:1.2.9-8.1.1" test_ref="oval:org.mitre.oval:tst:39337"/>
            <criterion comment="xmlsec1-gnutls is earlier than 0:1.2.9-8.1.1" test_ref="oval:org.mitre.oval:tst:39289"/>
            <criterion comment="xmlsec1-openssl is earlier than 0:1.2.9-8.1.1" test_ref="oval:org.mitre.oval:tst:38943"/>
            <criterion comment="xmlsec1-gnutls-devel is earlier than 0:1.2.9-8.1.1" test_ref="oval:org.mitre.oval:tst:39354"/>
            <criterion comment="xmlsec1-devel is earlier than 0:1.2.9-8.1.1" test_ref="oval:org.mitre.oval:tst:39330"/>
            <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38267"/>
            <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:39037"/>
            <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38825"/>
            <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38942"/>
            <criterion comment="xmlsec1 is earlier than 0:1.2.9-8.1.1" test_ref="oval:org.mitre.oval:tst:39237"/>
            <criterion comment="xmlsec1-nss is earlier than 0:1.2.9-8.1.1" test_ref="oval:org.mitre.oval:tst:38383"/>
            <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38972"/>
            <criterion comment="xmlsec1-openssl-devel is earlier than 0:1.2.9-8.1.1" test_ref="oval:org.mitre.oval:tst:38733"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10185" version="5" class="vulnerability">
      <metadata>
        <title>The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an HTTP request with a multipart MIME body that contains an invalid boundary specifier, as demonstrated using a specifier that begins with a "-" instead of "--" and contains an inconsistent ID.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5467" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5467"/>
        <description>The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an HTTP request with a multipart MIME body that contains an invalid boundary specifier, as demonstrated using a specifier that begins with a "-" instead of "--" and contains an inconsistent ID.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:39.244-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:29.395-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:36.617-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10185 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:18:54.689-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:03:02.470-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.6.8-9.EL3.8" test_ref="oval:org.mitre.oval:tst:33076"/>
            <criterion comment="ruby-docs is earlier than 0:1.6.8-9.EL3.8" test_ref="oval:org.mitre.oval:tst:32953"/>
            <criterion comment="ruby-devel is earlier than 0:1.6.8-9.EL3.8" test_ref="oval:org.mitre.oval:tst:32986"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.6.8-9.EL3.8" test_ref="oval:org.mitre.oval:tst:32638"/>
            <criterion comment="ruby is earlier than 0:1.6.8-9.EL3.8" test_ref="oval:org.mitre.oval:tst:33050"/>
            <criterion comment="irb is earlier than 0:1.6.8-9.EL3.8" test_ref="oval:org.mitre.oval:tst:33003"/>
            <criterion comment="ruby-libs is earlier than 0:1.6.8-9.EL3.8" test_ref="oval:org.mitre.oval:tst:32749"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.8.1-7.EL4.8" test_ref="oval:org.mitre.oval:tst:33100"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.1-7.EL4.8" test_ref="oval:org.mitre.oval:tst:33129"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.1-7.EL4.8" test_ref="oval:org.mitre.oval:tst:33138"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.1-7.EL4.8" test_ref="oval:org.mitre.oval:tst:32878"/>
            <criterion comment="ruby is earlier than 0:1.8.1-7.EL4.8" test_ref="oval:org.mitre.oval:tst:33028"/>
            <criterion comment="irb is earlier than 0:1.8.1-7.EL4.8" test_ref="oval:org.mitre.oval:tst:33098"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.1-7.EL4.8" test_ref="oval:org.mitre.oval:tst:32988"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10184" version="5" class="vulnerability">
      <metadata>
        <title>Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files.  NOTE: this may be a rediscovery of CVE-2000-0992.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0175" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0175"/>
        <description>Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files.  NOTE: this may be a rediscovery of CVE-2000-0992.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:34.265-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:28.872-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:36.112-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10184 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:12.209-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:59.598-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.2.7-47" test_ref="oval:org.mitre.oval:tst:31712"/>
            <criterion comment="krb5 is earlier than 0:1.2.7-47" test_ref="oval:org.mitre.oval:tst:31065"/>
            <criterion comment="rsh is earlier than 0:0.17-17.6" test_ref="oval:org.mitre.oval:tst:31184"/>
            <criterion comment="openssh-askpass is earlier than 0:3.6.1p2-33.30.4" test_ref="oval:org.mitre.oval:tst:31141"/>
            <criterion comment="krb5-libs is earlier than 0:1.2.7-47" test_ref="oval:org.mitre.oval:tst:31933"/>
            <criterion comment="rsh-server is earlier than 0:0.17-17.6" test_ref="oval:org.mitre.oval:tst:31277"/>
            <criterion comment="openssh-server is earlier than 0:3.6.1p2-33.30.4" test_ref="oval:org.mitre.oval:tst:31160"/>
            <criterion comment="openssh-askpass-gnome is earlier than 0:3.6.1p2-33.30.4" test_ref="oval:org.mitre.oval:tst:31130"/>
            <criterion comment="openssh is earlier than 0:3.6.1p2-33.30.4" test_ref="oval:org.mitre.oval:tst:31346"/>
            <criterion comment="krb5-server is earlier than 0:1.2.7-47" test_ref="oval:org.mitre.oval:tst:31927"/>
            <criterion comment="openssh-clients is earlier than 0:3.6.1p2-33.30.4" test_ref="oval:org.mitre.oval:tst:30865"/>
            <criterion comment="krb5-devel is earlier than 0:1.2.7-47" test_ref="oval:org.mitre.oval:tst:31772"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.3.4-17" test_ref="oval:org.mitre.oval:tst:31800"/>
            <criterion comment="krb5 is earlier than 0:1.3.4-17" test_ref="oval:org.mitre.oval:tst:31846"/>
            <criterion comment="rsh is earlier than 0:0.17-25.3" test_ref="oval:org.mitre.oval:tst:31333"/>
            <criterion comment="krb5-libs is earlier than 0:1.3.4-17" test_ref="oval:org.mitre.oval:tst:31172"/>
            <criterion comment="krb5-server is earlier than 0:1.3.4-17" test_ref="oval:org.mitre.oval:tst:31706"/>
            <criterion comment="rsh-server is earlier than 0:0.17-25.3" test_ref="oval:org.mitre.oval:tst:31378"/>
            <criterion comment="krb5-devel is earlier than 0:1.3.4-17" test_ref="oval:org.mitre.oval:tst:31781"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10183" version="5" class="vulnerability">
      <metadata>
        <title>OpenLDAP before 2.3.39 allows remote attackers to cause a denial of service (slapd crash) via an LDAP request with a malformed objectClasses attribute.  NOTE: this has been reported as a double free, but the reports are inconsistent.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5707" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5707"/>
        <description>OpenLDAP before 2.3.39 allows remote attackers to cause a denial of service (slapd crash) via an LDAP request with a malformed objectClasses attribute.  NOTE: this has been reported as a double free, but the reports are inconsistent.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:07.165-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:28.523-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:35.643-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10183 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:07.298-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:56.885-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="compat-openldap is earlier than 0:2.1.30-8.el4_6.1" test_ref="oval:org.mitre.oval:tst:35632"/>
            <criterion comment="openldap-devel is earlier than 0:2.2.13-8.el4_6.1" test_ref="oval:org.mitre.oval:tst:35473"/>
            <criterion comment="openldap-clients is earlier than 0:2.2.13-8.el4_6.1" test_ref="oval:org.mitre.oval:tst:35621"/>
            <criterion comment="openldap is earlier than 0:2.2.13-8.el4_6.1" test_ref="oval:org.mitre.oval:tst:35403"/>
            <criterion comment="openldap-servers-sql is earlier than 0:2.2.13-8.el4_6.1" test_ref="oval:org.mitre.oval:tst:35594"/>
            <criterion comment="openldap-servers is earlier than 0:2.2.13-8.el4_6.1" test_ref="oval:org.mitre.oval:tst:35471"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="compat-openldap is earlier than 0:2.3.27_2.2.29-8.el5_1.1" test_ref="oval:org.mitre.oval:tst:35560"/>
            <criterion comment="openldap-devel is earlier than 0:2.3.27-8.el5_1.1" test_ref="oval:org.mitre.oval:tst:35257"/>
            <criterion comment="openldap-clients is earlier than 0:2.3.27-8.el5_1.1" test_ref="oval:org.mitre.oval:tst:35184"/>
            <criterion comment="openldap is earlier than 0:2.3.27-8.el5_1.1" test_ref="oval:org.mitre.oval:tst:35477"/>
            <criterion comment="openldap-servers-sql is earlier than 0:2.3.27-8.el5_1.1" test_ref="oval:org.mitre.oval:tst:35607"/>
            <criterion comment="openldap-servers is earlier than 0:2.3.27-8.el5_1.1" test_ref="oval:org.mitre.oval:tst:35431"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10182" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in ptrace in the Linux Kernel for 64-bit architectures allows local users to write bytes into kernel memory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1763" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1763"/>
        <description>Buffer overflow in ptrace in the Linux Kernel for 64-bit architectures allows local users to write bytes into kernel memory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:09.854-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:28.267-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:35.353-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10182 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:02.508-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:54.624-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31896"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31885"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31861"/>
          <criterion comment="kernel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31550"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31914"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31924"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:32023"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10181" version="5" class="vulnerability">
      <metadata>
        <title>The balancer_handler function in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6, when a threaded Multi-Processing Module is used, allows remote authenticated users to cause a denial of service (child process crash) via an invalid bb variable.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6422" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6422"/>
        <description>The balancer_handler function in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6, when a threaded Multi-Processing Module is used, allows remote authenticated users to cause a denial of service (child process crash) via an invalid bb variable.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:49.380-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:27.991-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:35.052-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10181 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:41:15.094-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:52.907-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="httpd-manual is earlier than 0:2.2.3-11.el5_1.3" test_ref="oval:org.mitre.oval:tst:35953"/>
          <criterion comment="httpd-devel is earlier than 0:2.2.3-11.el5_1.3" test_ref="oval:org.mitre.oval:tst:35668"/>
          <criterion comment="mod_ssl is earlier than 0:2.2.3-11.el5_1.3" test_ref="oval:org.mitre.oval:tst:35991"/>
          <criterion comment="httpd is earlier than 0:2.2.3-11.el5_1.3" test_ref="oval:org.mitre.oval:tst:35696"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10180" version="5" class="vulnerability">
      <metadata>
        <title>MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to bypass library path restrictions and execute arbitrary libraries by using INSERT INTO to modify the mysql.func table, which is processed by the udf_init function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0710" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0710"/>
        <description>MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to bypass library path restrictions and execute arbitrary libraries by using INSERT INTO to modify the mysql.func table, which is processed by the udf_init function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:55.230-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:27.710-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:34.668-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10180 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:28.983-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:51.428-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mysql is earlier than 0:3.23.58-15.RHEL3.1" test_ref="oval:org.mitre.oval:tst:31367"/>
            <criterion comment="mysql-devel is earlier than 0:3.23.58-15.RHEL3.1" test_ref="oval:org.mitre.oval:tst:31299"/>
            <criterion comment="mysql-bench is earlier than 0:3.23.58-15.RHEL3.1" test_ref="oval:org.mitre.oval:tst:31391"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mysql is earlier than 0:4.1.10a-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:30977"/>
            <criterion comment="mysql-devel is earlier than 0:4.1.10a-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31612"/>
            <criterion comment="mysql-bench is earlier than 0:4.1.10a-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31452"/>
            <criterion comment="mysql-server is earlier than 0:4.1.10a-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31294"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1018" version="2" class="vulnerability">
      <metadata>
        <title>Windows NT IIS Directory Traversal Command Execution (Test 2)</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0333" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0333"/>
        <description>Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and "\" characters twice.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Changed tst:1314 to use obj:496 was introduced to properly look for w3svc.dll in System32/inetsrv." date="2007-07-18T12:59:00.031-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-07-18T13:01:26.282-04:00">INTERIM</status_change>
            <status_change date="2007-08-02T14:47:14.863-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="IIS 4.0 Major Version" negate="false" test_ref="oval:org.mitre.oval:tst:3099"/>
        <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
        <criterion comment="File %windir%\System32\w3svc.dll is less than 4.2.764.1" negate="false" test_ref="oval:org.mitre.oval:tst:1314"/>
        <criterion comment="Patch Q295534 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3038"/>
        <criterion comment="Patch Q301625 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3037"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10179" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap (WBMP) images with large width or height values.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1001" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1001"/>
        <description>Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap (WBMP) images with large width or height values.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:15.710-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:26.880-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:33.806-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10179 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:14.428-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:49.319-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33776"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33817"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33769"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33528"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33915"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33822"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-40.ent" test_ref="oval:org.mitre.oval:tst:33351"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:34016"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33395"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33957"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33405"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33642"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33024"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33690"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33995"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33892"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33945"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33711"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33857"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33644"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.4" test_ref="oval:org.mitre.oval:tst:33920"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33809"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33997"/>
            <criterion comment="php-common is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33290"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33828"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33441"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:34008"/>
            <criterion comment="php is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33959"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33560"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33722"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33941"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33880"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33878"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33960"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33923"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33551"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33939"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33626"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:33770"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-11.el5" test_ref="oval:org.mitre.oval:tst:34005"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10178" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to determine the validity of usernames via unknown vectors involving a GSSAPI "authentication abort."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5052" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5052"/>
        <description>Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to determine the validity of usernames via unknown vectors involving a GSSAPI "authentication abort."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:04.543-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:26.514-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:33.396-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10178 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:15.127-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:47.917-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssh is earlier than 0:3.9p1-8.RHEL4.24" test_ref="oval:org.mitre.oval:tst:34791"/>
            <criterion comment="openssh-askpass is earlier than 0:3.9p1-8.RHEL4.24" test_ref="oval:org.mitre.oval:tst:34819"/>
            <criterion comment="openssh-server is earlier than 0:3.9p1-8.RHEL4.24" test_ref="oval:org.mitre.oval:tst:34393"/>
            <criterion comment="openssh-clients is earlier than 0:3.9p1-8.RHEL4.24" test_ref="oval:org.mitre.oval:tst:34713"/>
            <criterion comment="openssh-askpass-gnome is earlier than 0:3.9p1-8.RHEL4.24" test_ref="oval:org.mitre.oval:tst:34877"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssh is earlier than 0:4.3p2-24.el5" test_ref="oval:org.mitre.oval:tst:34395"/>
            <criterion comment="openssh-askpass is earlier than 0:4.3p2-24.el5" test_ref="oval:org.mitre.oval:tst:34563"/>
            <criterion comment="openssh-server is earlier than 0:4.3p2-24.el5" test_ref="oval:org.mitre.oval:tst:34696"/>
            <criterion comment="openssh-clients is earlier than 0:4.3p2-24.el5" test_ref="oval:org.mitre.oval:tst:34627"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10177" version="5" class="vulnerability">
      <metadata>
        <title>perfmon (perfmon.c) in Linux kernel on IA64 architectures allows local users to cause a denial of service (crash) by interrupting a task while another process is accessing the mm_struct, which triggers a BUG_ON action in the put_page_testzero function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0558" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0558"/>
        <description>perfmon (perfmon.c) in Linux kernel on IA64 architectures allows local users to cause a denial of service (crash) by interrupting a task while another process is accessing the mm_struct, which triggers a BUG_ON action in the put_page_testzero function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:03.751-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:26.184-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:32.962-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10177 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:33.654-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:46.666-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-xenU is earlier than 0:2.6.9-55.0.6.EL" test_ref="oval:org.mitre.oval:tst:35083"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-55.0.6.EL" test_ref="oval:org.mitre.oval:tst:34524"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.0.6.EL" test_ref="oval:org.mitre.oval:tst:34373"/>
          <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-55.0.6.EL" test_ref="oval:org.mitre.oval:tst:34855"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-55.0.6.EL" test_ref="oval:org.mitre.oval:tst:34123"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.0.6.EL" test_ref="oval:org.mitre.oval:tst:35059"/>
          <criterion comment="kernel is earlier than 0:2.6.9-55.0.6.EL" test_ref="oval:org.mitre.oval:tst:34080"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-55.0.6.EL" test_ref="oval:org.mitre.oval:tst:34543"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-55.0.6.EL" test_ref="oval:org.mitre.oval:tst:34846"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-55.0.6.EL" test_ref="oval:org.mitre.oval:tst:34889"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-55.0.6.EL" test_ref="oval:org.mitre.oval:tst:34937"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10176" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the XPMReader::ReadXPM function in filter.vcl/ixpm/svt_xpmread.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to execute arbitrary code via a crafted XPM file that triggers a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2949" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2949"/>
        <description>Integer overflow in the XPMReader::ReadXPM function in filter.vcl/ixpm/svt_xpmread.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to execute arbitrary code via a crafted XPM file that triggers a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:53.553-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:23.929-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:30.537-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10176 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:18.934-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:42.148-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-46.2.0.EL3" test_ref="oval:org.mitre.oval:tst:40232"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.2-46.2.0.EL3" test_ref="oval:org.mitre.oval:tst:39552"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-46.2.0.EL3" test_ref="oval:org.mitre.oval:tst:39893"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39898"/>
            <criterion comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39574"/>
            <criterion comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40086"/>
            <criterion comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39814"/>
            <criterion comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39321"/>
            <criterion comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40079"/>
            <criterion comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40187"/>
            <criterion comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40069"/>
            <criterion comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40280"/>
            <criterion comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39823"/>
            <criterion comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39422"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.5-10.6.0.7.EL4.3" test_ref="oval:org.mitre.oval:tst:39760"/>
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.7.EL4.3" test_ref="oval:org.mitre.oval:tst:40078"/>
            <criterion comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40135"/>
            <criterion comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40217"/>
            <criterion comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39726"/>
            <criterion comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40076"/>
            <criterion comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39500"/>
            <criterion comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40206"/>
            <criterion comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39998"/>
            <criterion comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40006"/>
            <criterion comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39847"/>
            <criterion comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39962"/>
            <criterion comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39762"/>
            <criterion comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40163"/>
            <criterion comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39819"/>
            <criterion comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39506"/>
            <criterion comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40275"/>
            <criterion comment="openoffice.org2 is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40058"/>
            <criterion comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40104"/>
            <criterion comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39977"/>
            <criterion comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40138"/>
            <criterion comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40155"/>
            <criterion comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40266"/>
            <criterion comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40024"/>
            <criterion comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40188"/>
            <criterion comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40123"/>
            <criterion comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39776"/>
            <criterion comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40262"/>
            <criterion comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39872"/>
            <criterion comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39958"/>
            <criterion comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40178"/>
            <criterion comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39976"/>
            <criterion comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40092"/>
            <criterion comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39695"/>
            <criterion comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40167"/>
            <criterion comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39830"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.7.EL4.3" test_ref="oval:org.mitre.oval:tst:40242"/>
            <criterion comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39851"/>
            <criterion comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39818"/>
            <criterion comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40038"/>
            <criterion comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.7.EL4.3" test_ref="oval:org.mitre.oval:tst:40279"/>
            <criterion comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39959"/>
            <criterion comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40197"/>
            <criterion comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40245"/>
            <criterion comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39845"/>
            <criterion comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39936"/>
            <criterion comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39966"/>
            <criterion comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39879"/>
            <criterion comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40025"/>
            <criterion comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39786"/>
            <criterion comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40213"/>
            <criterion comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39767"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-langpack-sk_SK is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40143"/>
            <criterion comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40027"/>
            <criterion comment="openoffice.org-langpack-pa_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39796"/>
            <criterion comment="openoffice.org-langpack-hi_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39900"/>
            <criterion comment="openoffice.org-langpack-et_EE is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40033"/>
            <criterion comment="openoffice.org-langpack-kn_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39999"/>
            <criterion comment="openoffice.org is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39861"/>
            <criterion comment="openoffice.org-langpack-zh_TW is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39384"/>
            <criterion comment="openoffice.org-writer is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39209"/>
            <criterion comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40293"/>
            <criterion comment="openoffice.org-langpack-ga_IE is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40186"/>
            <criterion comment="openoffice.org-langpack-ta_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40207"/>
            <criterion comment="openoffice.org-langpack-ko_KR is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39941"/>
            <criterion comment="openoffice.org-langpack-or_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39835"/>
            <criterion comment="openoffice.org-langpack-da_DK is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39870"/>
            <criterion comment="openoffice.org-langpack-sr_CS is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40043"/>
            <criterion comment="openoffice.org-langpack-pl_PL is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40061"/>
            <criterion comment="openoffice.org-langpack-fr is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40019"/>
            <criterion comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39923"/>
            <criterion comment="openoffice.org-javafilter is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40169"/>
            <criterion comment="openoffice.org-langpack-as_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39889"/>
            <criterion comment="openoffice.org-testtools is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39388"/>
            <criterion comment="openoffice.org-langpack-hr_HR is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40015"/>
            <criterion comment="openoffice.org-langpack-de is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39455"/>
            <criterion comment="openoffice.org-emailmerge is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40278"/>
            <criterion comment="openoffice.org-xsltfilter is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39903"/>
            <criterion comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39905"/>
            <criterion comment="openoffice.org-langpack-te_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39522"/>
            <criterion comment="openoffice.org-langpack-sv is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40195"/>
            <criterion comment="openoffice.org-base is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39480"/>
            <criterion comment="openoffice.org-langpack-ca_ES is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40157"/>
            <criterion comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39989"/>
            <criterion comment="openoffice.org-core is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39975"/>
            <criterion comment="openoffice.org-langpack-nl is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40101"/>
            <criterion comment="openoffice.org-langpack-ur is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39119"/>
            <criterion comment="openoffice.org-langpack-nn_NO is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39682"/>
            <criterion comment="openoffice.org-langpack-ar is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39653"/>
            <criterion comment="openoffice.org-langpack-ja_JP is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39800"/>
            <criterion comment="openoffice.org-langpack-gu_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40203"/>
            <criterion comment="openoffice.org-langpack-tr_TR is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40119"/>
            <criterion comment="openoffice.org-langpack-eu_ES is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40002"/>
            <criterion comment="openoffice.org-langpack-fi_FI is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39764"/>
            <criterion comment="openoffice.org-graphicfilter is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39979"/>
            <criterion comment="openoffice.org-pyuno is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39996"/>
            <criterion comment="openoffice.org-langpack-ml_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40060"/>
            <criterion comment="openoffice.org-langpack-gl_ES is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40192"/>
            <criterion comment="openoffice.org-sdk-doc is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39688"/>
            <criterion comment="openoffice.org-langpack-zh_CN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39612"/>
            <criterion comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39939"/>
            <criterion comment="openoffice.org-langpack-it is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39687"/>
            <criterion comment="openoffice.org-sdk is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40190"/>
            <criterion comment="openoffice.org-langpack-es is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39972"/>
            <criterion comment="openoffice.org-langpack-nb_NO is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39792"/>
            <criterion comment="openoffice.org-langpack-sl_SI is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39914"/>
            <criterion comment="openoffice.org-draw is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39723"/>
            <criterion comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40100"/>
            <criterion comment="openoffice.org-langpack-ms_MY is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40158"/>
            <criterion comment="openoffice.org-langpack-el_GR is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39416"/>
            <criterion comment="openoffice.org-langpack-hu_HU is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39496"/>
            <criterion comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39922"/>
            <criterion comment="openoffice.org-langpack-bn is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40120"/>
            <criterion comment="openoffice.org-langpack-he_IL is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39301"/>
            <criterion comment="openoffice.org-langpack-pt_PT is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40236"/>
            <criterion comment="openoffice.org-langpack-lt_LT is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40042"/>
            <criterion comment="openoffice.org-langpack-af_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39239"/>
            <criterion comment="openoffice.org-langpack-bg_BG is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40048"/>
            <criterion comment="openoffice.org-calc is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39842"/>
            <criterion comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39995"/>
            <criterion comment="openoffice.org-langpack-cy_GB is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39641"/>
            <criterion comment="openoffice.org-langpack-mr_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39754"/>
            <criterion comment="openoffice.org-headless is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40170"/>
            <criterion comment="openoffice.org-langpack-th_TH is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39951"/>
            <criterion comment="openoffice.org-langpack-pt_BR is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40166"/>
            <criterion comment="openoffice.org-langpack-ru is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40110"/>
            <criterion comment="openoffice.org-math is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40223"/>
            <criterion comment="openoffice.org-impress is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40173"/>
            <criterion comment="openoffice.org-langpack-st_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39745"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10175" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0245" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0245"/>
        <description>Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:59.977-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:23.404-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:29.930-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10175 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:04.479-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:41.175-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="rh-postgresql-devel is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:30936"/>
            <criterion comment="rh-postgresql-server is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:30803"/>
            <criterion comment="rh-postgresql-python is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31436"/>
            <criterion comment="rh-postgresql-libs is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31064"/>
            <criterion comment="rh-postgresql-docs is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:30591"/>
            <criterion comment="rh-postgresql-test is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31342"/>
            <criterion comment="rh-postgresql-pl is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31217"/>
            <criterion comment="rh-postgresql-tcl is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31199"/>
            <criterion comment="rh-postgresql is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31415"/>
            <criterion comment="rh-postgresql-contrib is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31005"/>
            <criterion comment="rh-postgresql-jdbc is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31233"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31336"/>
            <criterion comment="postgresql-docs is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31398"/>
            <criterion comment="postgresql-pl is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31229"/>
            <criterion comment="postgresql-tcl is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:30946"/>
            <criterion comment="postgresql-libs is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31215"/>
            <criterion comment="postgresql-contrib is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:30784"/>
            <criterion comment="postgresql-python is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31126"/>
            <criterion comment="postgresql-test is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31318"/>
            <criterion comment="postgresql-jdbc is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31273"/>
            <criterion comment="postgresql-server is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31424"/>
            <criterion comment="postgresql-devel is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31325"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10174" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, SeaMonkey before 1.0.8, and certain Sun Java System server products before 20070611, allows remote attackers to execute arbitrary code via invalid "Client Master Key" length values.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0009" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0009"/>
        <description>Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, SeaMonkey before 1.0.8, and certain Sun Java System server products before 20070611, allows remote attackers to execute arbitrary code via invalid "Client Master Key" length values.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:23.303-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:22.743-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:29.268-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10174 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:48.800-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:39.514-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33391"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33688"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33675"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33724"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33510"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33409"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33467"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33658"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33649"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33381"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:32760"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33554"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33648"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.10-0.1.el4" test_ref="oval:org.mitre.oval:tst:32765"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33712"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33705"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33379"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:33400"/>
            <criterion comment="firefox is earlier than 0:1.5.0.10-0.1.el4" test_ref="oval:org.mitre.oval:tst:33759"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33678"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33695"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33697"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33244"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33645"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.10-2.el5" test_ref="oval:org.mitre.oval:tst:33461"/>
            <criterion comment="yelp is earlier than 0:2.16.0-14.0.1.el5" test_ref="oval:org.mitre.oval:tst:33761"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-10.0.1.el5" test_ref="oval:org.mitre.oval:tst:33744"/>
            <criterion comment="devhelp is earlier than 0:0.12-10.0.1.el5" test_ref="oval:org.mitre.oval:tst:33415"/>
            <criterion comment="firefox is earlier than 0:1.5.0.10-2.el5" test_ref="oval:org.mitre.oval:tst:33616"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.10-1.el5" test_ref="oval:org.mitre.oval:tst:33493"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10173" version="5" class="vulnerability">
      <metadata>
        <title>Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1145" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1145"/>
        <description>Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:32.207-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:22.548-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:29.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10173 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:22.792-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:38.878-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kdelibs is earlier than 6:3.3.1-3.3" test_ref="oval:org.mitre.oval:tst:31221"/>
          <criterion comment="kdelibs-devel is earlier than 6:3.3.1-3.3" test_ref="oval:org.mitre.oval:tst:30975"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10172" version="6" class="vulnerability">
      <metadata>
        <title>SQL injection vulnerability in mod_auth_mysql.c in the mod-auth-mysql (aka libapache2-mod-auth-mysql) module for the Apache HTTP Server 2.x allows remote attackers to execute arbitrary SQL commands via multibyte character encodings for unspecified input.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2384" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2384"/>
        <description>SQL injection vulnerability in mod_auth_mysql.c in the mod-auth-mysql (aka libapache2-mod-auth-mysql) module for the Apache HTTP Server 2.x, when configured to use a multibyte character set that allows a \ (backslash) as part of the character encoding, allows remote attackers to execute arbitrary SQL commands via unspecified inputs in a login request.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:41.351-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:22.367-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:28.795-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10172 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:44.774-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:38.295-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criterion comment="mod_auth_mysql is earlier than 1:3.0.0-3.2.el5_3" test_ref="oval:org.mitre.oval:tst:38246"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10171" version="5" class="vulnerability">
      <metadata>
        <title>smbfs in Linux kernel 2.6.8 and other versions, and 2.4.x before 2.4.34, when UNIX extensions are enabled, ignores certain mount options, which could cause clients to use server-specified uid, gid and mode settings.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5871" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5871"/>
        <description>smbfs in Linux kernel 2.6.8 and other versions, and 2.4.x before 2.4.34, when UNIX extensions are enabled, ignores certain mount options, which could cause clients to use server-specified uid, gid and mode settings.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:19.526-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:22.116-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:28.520-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10171 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:13:43.621-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:37.653-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31896"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31885"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31861"/>
          <criterion comment="kernel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31550"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31914"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31924"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:32023"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10170" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service (memory corruption) or have unspecified other impact via crafted input to string formatting operations.  NOTE: the handling of certain integer values is also affected by related integer underflows and an off-by-one error.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3144" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3144"/>
        <description>Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service (memory corruption) or have unspecified other impact via crafted input to string formatting operations.  NOTE: the handling of certain integer values is also affected by related integer underflows and an off-by-one error.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:02.788-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:21.632-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:28.103-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10170 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:18:48.304-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:36.735-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38704"/>
            <criterion comment="tkinter is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38695"/>
            <criterion comment="python-tools is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38872"/>
            <criterion comment="python is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:38617"/>
            <criterion comment="python-docs is earlier than 0:2.2.3-6.11" test_ref="oval:org.mitre.oval:tst:37965"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38916"/>
            <criterion comment="tkinter is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38703"/>
            <criterion comment="python-tools is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38787"/>
            <criterion comment="python is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38939"/>
            <criterion comment="python-docs is earlier than 0:2.3.4-14.7.el4_8.2" test_ref="oval:org.mitre.oval:tst:38081"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="python-devel is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38889"/>
            <criterion comment="tkinter is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38958"/>
            <criterion comment="python-tools is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38827"/>
            <criterion comment="python is earlier than 0:2.4.3-24.el5_3.6" test_ref="oval:org.mitre.oval:tst:38282"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1017" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Enterprise 3 Kernel R128 DRI Limits Checking Vulnerability</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0003" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0003"/>
        <description>Unknown vulnerability in Linux kernel before 2.4.22 allows local users to gain privileges, related to "R128 DRI limits checking."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-12T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:34.245-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:12.419-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="kernel version is less than 2.4.21-15.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1315"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10169" version="5" class="vulnerability">
      <metadata>
        <title>Zebra 0.93b and earlier, and quagga before 0.95, allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0858" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0858"/>
        <description>Zebra 0.93b and earlier, and quagga before 0.95, allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:47.398-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:21.425-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:27.789-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10169 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:36.110-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:35.924-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="quagga-devel is earlier than 0:0.96.2-8.3E" test_ref="oval:org.mitre.oval:tst:30551"/>
          <criterion comment="quagga is earlier than 0:0.96.2-8.3E" test_ref="oval:org.mitre.oval:tst:30411"/>
          <criterion comment="quagga-contrib is earlier than 0:0.96.2-8.3E" test_ref="oval:org.mitre.oval:tst:30149"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10168" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both "Content-Disposition: attachment" and "Content-Type: multipart" are present in HTTP headers, which allows remote attackers to conduct cross-site scripting (XSS) attacks via an uploaded HTML document.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1197" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1197"/>
        <description>Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both "Content-Disposition: attachment" and "Content-Type: multipart" are present in HTTP headers, which allows remote attackers to conduct cross-site scripting (XSS) attacks via an uploaded HTML document.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:17.167-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:20.714-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:27.116-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10168 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:05.717-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:33.790-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40598"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40703"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:39947"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40593"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40651"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:39843"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40800"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40736"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:39844"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.55.el3" test_ref="oval:org.mitre.oval:tst:40686"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox is earlier than 0:3.6.4-8.el4" test_ref="oval:org.mitre.oval:tst:40755"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:40296"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:39850"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:40624"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:40782"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:40431"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-58.el4_8" test_ref="oval:org.mitre.oval:tst:40449"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gnome-python2-extras is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40435"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-21.el5" test_ref="oval:org.mitre.oval:tst:40552"/>
            <criterion comment="gnome-python2-libegg is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40721"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.2.4-10.el5" test_ref="oval:org.mitre.oval:tst:40480"/>
            <criterion comment="gnome-python2-gtkhtml2 is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40813"/>
            <criterion comment="totem is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40749"/>
            <criterion comment="xulrunner is earlier than 0:1.9.2.4-10.el5" test_ref="oval:org.mitre.oval:tst:40221"/>
            <criterion comment="gnome-python2-gtkspell is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40385"/>
            <criterion comment="yelp is earlier than 0:2.16.0-26.el5" test_ref="oval:org.mitre.oval:tst:40828"/>
            <criterion comment="devhelp is earlier than 0:0.12-21.el5" test_ref="oval:org.mitre.oval:tst:40814"/>
            <criterion comment="firefox is earlier than 0:3.6.4-8.el5" test_ref="oval:org.mitre.oval:tst:40524"/>
            <criterion comment="totem-mozplugin is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40620"/>
            <criterion comment="gnome-python2-gtkmozembed is earlier than 0:2.14.2-7.el5" test_ref="oval:org.mitre.oval:tst:40722"/>
            <criterion comment="esc is earlier than 0:1.1.0-12.el5" test_ref="oval:org.mitre.oval:tst:40273"/>
            <criterion comment="totem-devel is earlier than 0:2.16.7-7.el5" test_ref="oval:org.mitre.oval:tst:40637"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10167" version="3" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier allows remote attackers to create arbitrary files via an untrusted application, a different issue than CVE-2008-1190, aka "The fifth issue."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1191" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1191"/>
        <description>Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier allows remote attackers to create arbitrary files via an untrusted application, a different issue than CVE-2008-1190, aka "The fifth issue."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:43.469-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:20.276-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:26.619-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36267"/>
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36295"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35708"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:35618"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36334"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el4" test_ref="oval:org.mitre.oval:tst:36509"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35872"/>
            <criterion comment="java-1.6.0-ibm-demo is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36515"/>
            <criterion comment="java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36582"/>
            <criterion comment="java-1.6.0-ibm-accessibility is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36555"/>
            <criterion comment="java-1.6.0-ibm-jdbc is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36414"/>
            <criterion comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35698"/>
            <criterion comment="java-1.6.0-ibm-src is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36622"/>
            <criterion comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:35719"/>
            <criterion comment="java-1.6.0-ibm-javacomm is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36688"/>
            <criterion comment="java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36068"/>
            <criterion comment="java-1.6.0-ibm is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36319"/>
            <criterion comment="java-1.6.0-ibm-plugin is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36706"/>
            <criterion comment="java-1.6.0-ibm-devel is earlier than 0:1.6.0.1-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36205"/>
            <criterion comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el5" test_ref="oval:org.mitre.oval:tst:36568"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10166" version="5" class="vulnerability">
      <metadata>
        <title>The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE and (2) RESET SESSION AUTHORIZATION operations, which allows remote authenticated users to gain privileges.  NOTE: this is due to an incomplete fix for CVE-2007-6600.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3230" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3230"/>
        <description>The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE and (2) RESET SESSION AUTHORIZATION operations, which allows remote authenticated users to gain privileges.  NOTE: this is due to an incomplete fix for CVE-2007-6600.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:13.746-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:19.349-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:25.912-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10166 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:19.909-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:32.489-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="rh-postgresql-devel is earlier than 0:7.3.21-2" test_ref="oval:org.mitre.oval:tst:39234"/>
            <criterion comment="rh-postgresql-server is earlier than 0:7.3.21-2" test_ref="oval:org.mitre.oval:tst:39147"/>
            <criterion comment="rh-postgresql-python is earlier than 0:7.3.21-2" test_ref="oval:org.mitre.oval:tst:39390"/>
            <criterion comment="rh-postgresql-libs is earlier than 0:7.3.21-2" test_ref="oval:org.mitre.oval:tst:39255"/>
            <criterion comment="rh-postgresql-docs is earlier than 0:7.3.21-2" test_ref="oval:org.mitre.oval:tst:38989"/>
            <criterion comment="rh-postgresql-test is earlier than 0:7.3.21-2" test_ref="oval:org.mitre.oval:tst:39444"/>
            <criterion comment="rh-postgresql-pl is earlier than 0:7.3.21-2" test_ref="oval:org.mitre.oval:tst:39502"/>
            <criterion comment="rh-postgresql-tcl is earlier than 0:7.3.21-2" test_ref="oval:org.mitre.oval:tst:39220"/>
            <criterion comment="rh-postgresql is earlier than 0:7.3.21-2" test_ref="oval:org.mitre.oval:tst:39512"/>
            <criterion comment="rh-postgresql-contrib is earlier than 0:7.3.21-2" test_ref="oval:org.mitre.oval:tst:39251"/>
            <criterion comment="rh-postgresql-jdbc is earlier than 0:7.3.21-2" test_ref="oval:org.mitre.oval:tst:39177"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:7.4.26-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39121"/>
            <criterion comment="postgresql-docs is earlier than 0:7.4.26-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39434"/>
            <criterion comment="postgresql-pl is earlier than 0:7.4.26-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39167"/>
            <criterion comment="postgresql-tcl is earlier than 0:7.4.26-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39217"/>
            <criterion comment="postgresql-libs is earlier than 0:7.4.26-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39513"/>
            <criterion comment="postgresql-contrib is earlier than 0:7.4.26-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39478"/>
            <criterion comment="postgresql-python is earlier than 0:7.4.26-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39271"/>
            <criterion comment="postgresql-test is earlier than 0:7.4.26-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39457"/>
            <criterion comment="postgresql-jdbc is earlier than 0:7.4.26-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39453"/>
            <criterion comment="postgresql-server is earlier than 0:7.4.26-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:38533"/>
            <criterion comment="postgresql-devel is earlier than 0:7.4.26-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39266"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:8.1.18-2.el5_4.1" test_ref="oval:org.mitre.oval:tst:39193"/>
            <criterion comment="postgresql-docs is earlier than 0:8.1.18-2.el5_4.1" test_ref="oval:org.mitre.oval:tst:39153"/>
            <criterion comment="postgresql-pl is earlier than 0:8.1.18-2.el5_4.1" test_ref="oval:org.mitre.oval:tst:39152"/>
            <criterion comment="postgresql-tcl is earlier than 0:8.1.18-2.el5_4.1" test_ref="oval:org.mitre.oval:tst:38994"/>
            <criterion comment="postgresql-libs is earlier than 0:8.1.18-2.el5_4.1" test_ref="oval:org.mitre.oval:tst:39091"/>
            <criterion comment="postgresql-contrib is earlier than 0:8.1.18-2.el5_4.1" test_ref="oval:org.mitre.oval:tst:39265"/>
            <criterion comment="postgresql-python is earlier than 0:8.1.18-2.el5_4.1" test_ref="oval:org.mitre.oval:tst:39497"/>
            <criterion comment="postgresql-test is earlier than 0:8.1.18-2.el5_4.1" test_ref="oval:org.mitre.oval:tst:38750"/>
            <criterion comment="postgresql-server is earlier than 0:8.1.18-2.el5_4.1" test_ref="oval:org.mitre.oval:tst:39514"/>
            <criterion comment="postgresql-devel is earlier than 0:8.1.18-2.el5_4.1" test_ref="oval:org.mitre.oval:tst:39530"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10165" version="5" class="vulnerability">
      <metadata>
        <title>Memory leak in direct-io.c in Linux kernel 2.6.x before 2.6.10 allows local users to cause a denial of service (memory consumption) via certain O_DIRECT (direct IO) write requests.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-2660" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2660"/>
        <description>Memory leak in direct-io.c in Linux kernel 2.6.x before 2.6.10 allows local users to cause a denial of service (memory consumption) via certain O_DIRECT (direct IO) write requests.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:08.119-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:18.982-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:25.596-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10165 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:12:44.270-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:31.897-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32576"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32814"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32958"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32801"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32865"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32880"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32747"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32200"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32838"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10164" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 ignores trailing invalid HTML characters in attribute names, which allows remote attackers to bypass content filters that use regular expressions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0995" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0995"/>
        <description>Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 ignores trailing invalid HTML characters in attribute names, which allows remote attackers to bypass content filters that use regular expressions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:11.554-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:18.355-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:24.911-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10164 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:19:27.758-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:30.498-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33391"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33688"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33675"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33724"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33510"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33409"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33467"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33658"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33649"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33381"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:32760"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33554"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33648"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.10-0.1.el4" test_ref="oval:org.mitre.oval:tst:32765"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33712"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33705"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33379"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:33400"/>
            <criterion comment="firefox is earlier than 0:1.5.0.10-0.1.el4" test_ref="oval:org.mitre.oval:tst:33759"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33678"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33695"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33697"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33244"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33645"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.10-2.el5" test_ref="oval:org.mitre.oval:tst:33461"/>
            <criterion comment="yelp is earlier than 0:2.16.0-14.0.1.el5" test_ref="oval:org.mitre.oval:tst:33761"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-10.0.1.el5" test_ref="oval:org.mitre.oval:tst:33744"/>
            <criterion comment="devhelp is earlier than 0:0.12-10.0.1.el5" test_ref="oval:org.mitre.oval:tst:33415"/>
            <criterion comment="firefox is earlier than 0:1.5.0.10-2.el5" test_ref="oval:org.mitre.oval:tst:33616"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.10-1.el5" test_ref="oval:org.mitre.oval:tst:33493"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10163" version="5" class="vulnerability">
      <metadata>
        <title>drivers/firmware/dell_rbu.c in the Linux kernel before 2.6.27.13, and 2.6.28.x before 2.6.28.2, allows local users to cause a denial of service (system crash) via a read system call that specifies zero bytes from the (1) image_type or (2) packet_size file in /sys/devices/platform/dell_rbu/.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0322" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0322"/>
        <description>drivers/firmware/dell_rbu.c in the Linux kernel before 2.6.27.13, and 2.6.28.x before 2.6.28.2, allows local users to cause a denial of service (system crash) via a read system call that specifies zero bytes from the (1) image_type or (2) packet_size file in /sys/devices/platform/dell_rbu/.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:29.098-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:17.797-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:24.393-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10163 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:09:00.343-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:12:45.294-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:28.931-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:37961"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38169"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38048"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38359"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38449"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38416"/>
            <criterion comment="kernel is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38237"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:37920"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38429"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38339"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-78.0.17.EL" test_ref="oval:org.mitre.oval:tst:38155"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38113"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38107"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38167"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38064"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38380"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:37672"/>
            <criterion comment="kernel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38093"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38127"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38109"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38430"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:37764"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-128.1.6.el5" test_ref="oval:org.mitre.oval:tst:38397"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10162" version="5" class="vulnerability">
      <metadata>
        <title>Use-after-free vulnerability in the garbage-collection implementation in WebCore in WebKit in Apple Safari before 4.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption and application crash) via an SVG animation element, related to SVG set objects, SVG marker elements, the targetElement attribute, and unspecified "caches."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1709" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1709"/>
        <description>Use-after-free vulnerability in the garbage-collection implementation in WebCore in WebKit in Apple Safari before 4.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption and application crash) via an SVG animation element, related to SVG set objects, SVG marker elements, the targetElement attribute, and unspecified "caches."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:43.333-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:17.582-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:24.179-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10162 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:41:05.497-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:28.569-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kdegraphics-devel is earlier than 7:3.5.4-13.el5_3" test_ref="oval:org.mitre.oval:tst:38867"/>
          <criterion comment="kdegraphics is earlier than 7:3.5.4-13.el5_3" test_ref="oval:org.mitre.oval:tst:38855"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10161" version="5" class="vulnerability">
      <metadata>
        <title>XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0419" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0419"/>
        <description>XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:24.806-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:16.924-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:23.560-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10161 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:35.258-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:27.597-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30914"/>
          <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30029"/>
          <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30748"/>
          <criterion comment="XFree86-libs is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30779"/>
          <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30003"/>
          <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30783"/>
          <criterion comment="XFree86-twm is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30052"/>
          <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30925"/>
          <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:31001"/>
          <criterion comment="XFree86-doc is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30889"/>
          <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30841"/>
          <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30838"/>
          <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30875"/>
          <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30347"/>
          <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30599"/>
          <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30544"/>
          <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30612"/>
          <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30933"/>
          <criterion comment="XFree86-xdm is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30902"/>
          <criterion comment="XFree86-sdk is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30619"/>
          <criterion comment="XFree86 is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30899"/>
          <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30943"/>
          <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30747"/>
          <criterion comment="XFree86-xfs is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30145"/>
          <criterion comment="XFree86-tools is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30701"/>
          <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30805"/>
          <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30951"/>
          <criterion comment="XFree86-xauth is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30843"/>
          <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30963"/>
          <criterion comment="XFree86-devel is earlier than 0:4.3.0-69.EL" test_ref="oval:org.mitre.oval:tst:30677"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1016" version="2" class="vulnerability">
      <metadata>
        <title>Win2k Domain Controller LSASS Denial of Service</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Lightweight Directory Access Protocol (LDAP)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0663" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0663"/>
        <description>Unknown vulnerability in the Local Security Authority Subsystem Service (LSASS) in Windows 2000 domain controllers allows remote attackers to cause a denial of service via a crafted LDAP message.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-10-31T04:13:00.000-04:00" comment="Replaced reference to obj:1374 with reference to obj:1550 since it referencess Product\Options and not ProductOptions in the controlset registry key.  Modified by Harvey Rubinovitz">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2006-11-21T04:13:00.000-04:00">INTERIM</status_change>
            <status_change date="2007-01-03T13:53:46.187-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Windows 2000 (domain controller) is installed">
          <criterion comment="Windows 2000 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="this is an NT Server (domain controller)" negate="false" test_ref="oval:org.mitre.oval:tst:3035"/>
        </criteria>
        <criterion comment="the version of lsasrv.dll is less than 5.0.2195.6902" negate="false" test_ref="oval:org.mitre.oval:tst:1511"/>
        <criterion comment="the patch kb835732 is installed" negate="true" test_ref="oval:org.mitre.oval:tst:1510"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10159" version="5" class="vulnerability">
      <metadata>
        <title>The isis_print function, as called by isoclns_print, in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a zero length, as demonstrated using a GRE packet.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1278" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1278"/>
        <description>The isis_print function, as called by isoclns_print, in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a zero length, as demonstrated using a GRE packet.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:54.425-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:16.382-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:22.961-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10159 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:33.436-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:26.206-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libpcap is earlier than 14:0.7.2-7.E3.5" test_ref="oval:org.mitre.oval:tst:31652"/>
            <criterion comment="tcpdump is earlier than 14:3.7.2-7.E3.5" test_ref="oval:org.mitre.oval:tst:31836"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="arpwatch is earlier than 14:2.1a13-9.RHEL4" test_ref="oval:org.mitre.oval:tst:31864"/>
            <criterion comment="libpcap is earlier than 14:0.8.3-9.RHEL4" test_ref="oval:org.mitre.oval:tst:30922"/>
            <criterion comment="tcpdump is earlier than 14:3.8.2-9.RHEL4" test_ref="oval:org.mitre.oval:tst:31788"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10158" version="5" class="vulnerability">
      <metadata>
        <title>The default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 5, omits the nosuid option for the hosts (/net filesystem) map, which allows local users to gain privileges via a setuid program on a remote NFS server.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5964" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5964"/>
        <description>The default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 5, omits the nosuid option for the hosts (/net filesystem) map, which allows local users to gain privileges via a setuid program on a remote NFS server.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:10.668-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:15.956-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:22.714-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10158 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:21.333-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:24.924-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="autofs5 is earlier than 1:5.0.1-0.rc2.55.el4_6.1" test_ref="oval:org.mitre.oval:tst:35636"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="autofs is earlier than 1:5.0.1-0.rc2.55.el5.1" test_ref="oval:org.mitre.oval:tst:35920"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10157" version="5" class="vulnerability">
      <metadata>
        <title>Linux kernel before 2.6.12 allows remote attackers to poison the bridge forwarding table using frames that have already been dropped by filtering, which can cause the bridge to forward spoofed packets.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3272" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3272"/>
        <description>Linux kernel before 2.6.12 allows remote attackers to poison the bridge forwarding table using frames that have already been dropped by filtering, which can cause the bridge to forward spoofed packets.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:42.105-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:15.659-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:22.408-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10157 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:34.797-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:23.941-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32235"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32371"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32703"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32314"/>
          <criterion comment="kernel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32614"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32295"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32310"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32611"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32305"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10156" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote attackers to bypass authentication or cause a denial of service (server crash) via "Insufficient input validation" in the EAP-MSCHAPv2 state machine module.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1354" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1354"/>
        <description>Unspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote attackers to bypass authentication or cause a denial of service (server crash) via "Insufficient input validation" in the EAP-MSCHAPv2 state machine module.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:32.723-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:15.397-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:22.130-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10156 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:36.780-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:23.290-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="freeradius is earlier than 0:1.0.1-2.RHEL3.2" test_ref="oval:org.mitre.oval:tst:31893"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="freeradius-mysql is earlier than 0:1.0.1-3.RHEL4.3" test_ref="oval:org.mitre.oval:tst:32285"/>
            <criterion comment="freeradius-unixODBC is earlier than 0:1.0.1-3.RHEL4.3" test_ref="oval:org.mitre.oval:tst:31967"/>
            <criterion comment="freeradius is earlier than 0:1.0.1-3.RHEL4.3" test_ref="oval:org.mitre.oval:tst:32580"/>
            <criterion comment="freeradius-postgresql is earlier than 0:1.0.1-3.RHEL4.3" test_ref="oval:org.mitre.oval:tst:32573"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10155" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memory, as found by the Sparse source code checking tool.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0495" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0495"/>
        <description>Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memory, as found by the Sparse source code checking tool.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:14.613-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:15.106-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:21.772-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10155 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:23.885-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:22.539-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-15.0.2.EL" test_ref="oval:org.mitre.oval:tst:30449"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-15.0.2.EL" test_ref="oval:org.mitre.oval:tst:30739"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-15.0.2.EL" test_ref="oval:org.mitre.oval:tst:30418"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-15.0.2.EL" test_ref="oval:org.mitre.oval:tst:30721"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-15.0.2.EL" test_ref="oval:org.mitre.oval:tst:30772"/>
          <criterion comment="kernel is earlier than 0:2.4.21-15.0.2.EL" test_ref="oval:org.mitre.oval:tst:30655"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-15.0.2.EL" test_ref="oval:org.mitre.oval:tst:30574"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-15.0.2.EL" test_ref="oval:org.mitre.oval:tst:30681"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-15.0.2.EL" test_ref="oval:org.mitre.oval:tst:30207"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10154" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform "charset detection" when the content-type is not specified.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5752" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5752"/>
        <description>Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform "charset detection" when the content-type is not specified.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:11.529-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:14.684-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:21.371-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10154 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:43:38.787-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:21.702-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-devel is earlier than 0:2.0.46-67.ent" test_ref="oval:org.mitre.oval:tst:34223"/>
            <criterion comment="mod_ssl is earlier than 1:2.0.46-67.ent" test_ref="oval:org.mitre.oval:tst:34500"/>
            <criterion comment="httpd is earlier than 0:2.0.46-67.ent" test_ref="oval:org.mitre.oval:tst:34481"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-suexec is earlier than 0:2.0.52-32.2.ent" test_ref="oval:org.mitre.oval:tst:34166"/>
            <criterion comment="httpd-manual is earlier than 0:2.0.52-32.2.ent" test_ref="oval:org.mitre.oval:tst:34468"/>
            <criterion comment="httpd-devel is earlier than 0:2.0.52-32.2.ent" test_ref="oval:org.mitre.oval:tst:34603"/>
            <criterion comment="mod_ssl is earlier than 1:2.0.52-32.2.ent" test_ref="oval:org.mitre.oval:tst:34461"/>
            <criterion comment="httpd is earlier than 0:2.0.52-32.2.ent" test_ref="oval:org.mitre.oval:tst:34632"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-manual is earlier than 0:2.2.3-7.el5" test_ref="oval:org.mitre.oval:tst:34730"/>
            <criterion comment="httpd-devel is earlier than 0:2.2.3-7.el5" test_ref="oval:org.mitre.oval:tst:34677"/>
            <criterion comment="mod_ssl is earlier than 1:2.2.3-7.el5" test_ref="oval:org.mitre.oval:tst:34399"/>
            <criterion comment="httpd is earlier than 0:2.2.3-7.el5" test_ref="oval:org.mitre.oval:tst:34605"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10153" version="5" class="vulnerability">
      <metadata>
        <title>HSQLDB before 1.8.0.9, as used in OpenOffice.org (OOo) 2 before 2.3.1, allows user-assisted remote attackers to execute arbitrary Java code via crafted database documents, related to "exposing static java methods."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-4575" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4575"/>
        <description>HSQLDB before 1.8.0.9, as used in OpenOffice.org (OOo) 2 before 2.3.1, allows user-assisted remote attackers to execute arbitrary Java code via crafted database documents, related to "exposing static java methods."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:24.856-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:12.686-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:18.931-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10153 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:56.951-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:19.201-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35760"/>
            <criterion comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35174"/>
            <criterion comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35721"/>
            <criterion comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35898"/>
            <criterion comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35825"/>
            <criterion comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35871"/>
            <criterion comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35918"/>
            <criterion comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35880"/>
            <criterion comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35859"/>
            <criterion comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35725"/>
            <criterion comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35605"/>
            <criterion comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35764"/>
            <criterion comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35755"/>
            <criterion comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35784"/>
            <criterion comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35136"/>
            <criterion comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35866"/>
            <criterion comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35761"/>
            <criterion comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35470"/>
            <criterion comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35808"/>
            <criterion comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35806"/>
            <criterion comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35817"/>
            <criterion comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35581"/>
            <criterion comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35883"/>
            <criterion comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35869"/>
            <criterion comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35710"/>
            <criterion comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35878"/>
            <criterion comment="openoffice.org2 is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35409"/>
            <criterion comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35827"/>
            <criterion comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35891"/>
            <criterion comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35730"/>
            <criterion comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35734"/>
            <criterion comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35896"/>
            <criterion comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35659"/>
            <criterion comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35888"/>
            <criterion comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35828"/>
            <criterion comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35575"/>
            <criterion comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35354"/>
            <criterion comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35518"/>
            <criterion comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35641"/>
            <criterion comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35557"/>
            <criterion comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35844"/>
            <criterion comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35692"/>
            <criterion comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35893"/>
            <criterion comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35658"/>
            <criterion comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35463"/>
            <criterion comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35814"/>
            <criterion comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35735"/>
            <criterion comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35586"/>
            <criterion comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35911"/>
            <criterion comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35821"/>
            <criterion comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35728"/>
            <criterion comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35796"/>
            <criterion comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35436"/>
            <criterion comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35490"/>
            <criterion comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35736"/>
            <criterion comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35819"/>
            <criterion comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35873"/>
            <criterion comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35803"/>
            <criterion comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.3.0" test_ref="oval:org.mitre.oval:tst:35723"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="hsqldb-manual is earlier than 1:1.8.0.4-3jpp.6" test_ref="oval:org.mitre.oval:tst:35558"/>
            <criterion comment="openoffice.org-langpack-sk_SK is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35630"/>
            <criterion comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35740"/>
            <criterion comment="openoffice.org-langpack-pa_IN is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35642"/>
            <criterion comment="openoffice.org-langpack-hi_IN is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35485"/>
            <criterion comment="openoffice.org-langpack-et_EE is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:34700"/>
            <criterion comment="openoffice.org-langpack-kn_IN is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35161"/>
            <criterion comment="openoffice.org is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35539"/>
            <criterion comment="openoffice.org-langpack-zh_TW is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35703"/>
            <criterion comment="openoffice.org-writer is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:34780"/>
            <criterion comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35623"/>
            <criterion comment="openoffice.org-langpack-ga_IE is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35604"/>
            <criterion comment="openoffice.org-langpack-ta_IN is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35273"/>
            <criterion comment="openoffice.org-langpack-ko_KR is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35746"/>
            <criterion comment="openoffice.org-langpack-or_IN is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35772"/>
            <criterion comment="openoffice.org-langpack-da_DK is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35599"/>
            <criterion comment="openoffice.org-langpack-sr_CS is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35649"/>
            <criterion comment="openoffice.org-langpack-pl_PL is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35450"/>
            <criterion comment="openoffice.org-langpack-fr is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35383"/>
            <criterion comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35749"/>
            <criterion comment="openoffice.org-javafilter is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35680"/>
            <criterion comment="openoffice.org-langpack-as_IN is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35556"/>
            <criterion comment="openoffice.org-testtools is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35350"/>
            <criterion comment="openoffice.org-langpack-hr_HR is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35565"/>
            <criterion comment="openoffice.org-langpack-de is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:34836"/>
            <criterion comment="openoffice.org-emailmerge is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35590"/>
            <criterion comment="openoffice.org-xsltfilter is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35694"/>
            <criterion comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35416"/>
            <criterion comment="openoffice.org-langpack-te_IN is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:34933"/>
            <criterion comment="openoffice.org-langpack-sv is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35646"/>
            <criterion comment="openoffice.org-base is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35589"/>
            <criterion comment="openoffice.org-langpack-ca_ES is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35133"/>
            <criterion comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35513"/>
            <criterion comment="openoffice.org-core is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35385"/>
            <criterion comment="openoffice.org-langpack-nl is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35647"/>
            <criterion comment="openoffice.org-langpack-ur is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35475"/>
            <criterion comment="openoffice.org-langpack-nn_NO is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35713"/>
            <criterion comment="openoffice.org-langpack-ar is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35685"/>
            <criterion comment="openoffice.org-langpack-ja_JP is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35451"/>
            <criterion comment="openoffice.org-langpack-gu_IN is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35638"/>
            <criterion comment="openoffice.org-langpack-tr_TR is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35670"/>
            <criterion comment="openoffice.org-langpack-eu_ES is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:34908"/>
            <criterion comment="openoffice.org-langpack-fi_FI is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35268"/>
            <criterion comment="openoffice.org-graphicfilter is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35368"/>
            <criterion comment="openoffice.org-pyuno is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35592"/>
            <criterion comment="openoffice.org-langpack-ml_IN is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35183"/>
            <criterion comment="openoffice.org-langpack-gl_ES is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35650"/>
            <criterion comment="hsqldb-javadoc is earlier than 1:1.8.0.4-3jpp.6" test_ref="oval:org.mitre.oval:tst:35547"/>
            <criterion comment="openoffice.org-langpack-zh_CN is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35562"/>
            <criterion comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35645"/>
            <criterion comment="openoffice.org-langpack-it is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35197"/>
            <criterion comment="openoffice.org-langpack-es is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35493"/>
            <criterion comment="openoffice.org-langpack-nb_NO is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35596"/>
            <criterion comment="openoffice.org-langpack-sl_SI is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35779"/>
            <criterion comment="openoffice.org-draw is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35568"/>
            <criterion comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35691"/>
            <criterion comment="openoffice.org-langpack-ms_MY is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35770"/>
            <criterion comment="openoffice.org-langpack-el_GR is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35362"/>
            <criterion comment="openoffice.org-langpack-hu_HU is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:34778"/>
            <criterion comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35577"/>
            <criterion comment="hsqldb is earlier than 1:1.8.0.4-3jpp.6" test_ref="oval:org.mitre.oval:tst:35682"/>
            <criterion comment="openoffice.org-langpack-bn is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35535"/>
            <criterion comment="openoffice.org-langpack-he_IL is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35519"/>
            <criterion comment="openoffice.org-langpack-pt_PT is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35720"/>
            <criterion comment="openoffice.org-langpack-lt_LT is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35701"/>
            <criterion comment="openoffice.org-langpack-af_ZA is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35244"/>
            <criterion comment="openoffice.org-langpack-bg_BG is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35667"/>
            <criterion comment="openoffice.org-calc is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35563"/>
            <criterion comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35524"/>
            <criterion comment="openoffice.org-langpack-cy_GB is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35448"/>
            <criterion comment="openoffice.org-langpack-mr_IN is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35388"/>
            <criterion comment="openoffice.org-langpack-th_TH is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35687"/>
            <criterion comment="openoffice.org-langpack-pt_BR is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35417"/>
            <criterion comment="openoffice.org-langpack-ru is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35566"/>
            <criterion comment="hsqldb-demo is earlier than 1:1.8.0.4-3jpp.6" test_ref="oval:org.mitre.oval:tst:35571"/>
            <criterion comment="openoffice.org-math is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35576"/>
            <criterion comment="openoffice.org-impress is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:35626"/>
            <criterion comment="openoffice.org-langpack-st_ZA is earlier than 1:2.0.4-5.4.25" test_ref="oval:org.mitre.oval:tst:34965"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10152" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the lightweight HTTP server implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to cause a denial of service (probably resource consumption) for a JAX-WS service endpoint via a connection without any data, which triggers a file descriptor "leak."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1101" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1101"/>
        <description>Unspecified vulnerability in the lightweight HTTP server implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to cause a denial of service (probably resource consumption) for a JAX-WS service endpoint via a connection without any data, which triggers a file descriptor "leak."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:59.810-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:12.378-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:18.610-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10152 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:44.260-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:18.383-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:38276"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37661"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37652"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37769"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:38561"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10151" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the get_fdb_entries function in net/bridge/br_ioctl.c in the Linux kernel before 2.6.18.4 allows local users to execute arbitrary code via a large maxnum value in an ioctl request.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5751" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5751"/>
        <description>Integer overflow in the get_fdb_entries function in net/bridge/br_ioctl.c in the Linux kernel before 2.6.18.4 allows local users to execute arbitrary code via a large maxnum value in an ioctl request.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:10.913-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:12.102-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:18.281-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10151 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:08.011-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:17.715-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33204"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33278"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33306"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32378"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33145"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33107"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32620"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32645"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33057"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10150" version="5" class="vulnerability">
      <metadata>
        <title>The jar: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not follow the Content-Disposition header of the inner URI, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via an uploaded .jar file with a "Content-Disposition: attachment" designation.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1306" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1306"/>
        <description>The jar: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not follow the Content-Disposition header of the inner URI, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via an uploaded .jar file with a "Content-Disposition: attachment" designation.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:48.191-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:11.521-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:17.612-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10150 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:31:00.815-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:44:38.413-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:16.756-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38597"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38375"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38403"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38521"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38542"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:37726"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38677"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38096"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38577"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38540"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38634"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-23.el4" test_ref="oval:org.mitre.oval:tst:38562"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38697"/>
            <criterion comment="firefox is earlier than 0:3.0.9-1.el4" test_ref="oval:org.mitre.oval:tst:38379"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38716"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38190"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38685"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38596"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38308"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38633"/>
            <criterion comment="firefox is earlier than 0:3.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38370"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.22-2.el5_3" test_ref="oval:org.mitre.oval:tst:38801"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38462"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1015" version="7" class="vulnerability">
      <metadata>
        <title>WinXP,SP2 Drag-and-Drop Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0053" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0053"/>
        <description>Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the "Drag-and-Drop Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-09-19T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Matthew Burton</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed test to check kb890047, added check for shell32 version &lt; 6.0.2900.2578">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-06-13T03:10:00.000-04:00" comment="Removed duplicate Windows XP test.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-06-14T07:41:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-07T09:14:06.165-04:00">ACCEPTED</status_change>
            <modified comment="set datatype to int" date="2007-10-25T16:45:00.795-04:00">
              <contributor organization="Opsware, Inc.">Jeff Cheng</contributor>
            </modified>
            <status_change date="2007-10-25T16:47:49.866-04:00">INTERIM</status_change>
            <status_change date="2007-11-13T12:00:56.476-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <status_change date="2011-04-25T14:44:03.914-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:11.011-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criteria operator="AND" comment="Windows XP service pack 2 (or earlier) is installed">
            <criterion comment="Windows XP is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2838"/>
            <criterion comment="Win2K/XP/2003 service pack 2 (or earlier) is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1318"/>
          </criteria>
          <criterion comment="the version of shell32.dll is less than 6.0.2900.2578" negate="false" test_ref="oval:org.mitre.oval:tst:1317"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
          <criterion comment="Drag-and-Drop disabled when set to 3" negate="true" test_ref="oval:org.mitre.oval:tst:1316"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10149" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cffload.c.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0946" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0946"/>
        <description>Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cffload.c.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:14.742-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:11.143-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:17.203-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10149 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:28.471-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:15.959-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="freetype is earlier than 0:2.1.4-12.el3" test_ref="oval:org.mitre.oval:tst:37450"/>
            <criterion comment="freetype-demos is earlier than 0:2.1.4-12.el3" test_ref="oval:org.mitre.oval:tst:38284"/>
            <criterion comment="freetype-utils is earlier than 0:2.1.4-12.el3" test_ref="oval:org.mitre.oval:tst:38008"/>
            <criterion comment="freetype-devel is earlier than 0:2.1.4-12.el3" test_ref="oval:org.mitre.oval:tst:38245"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="freetype is earlier than 0:2.1.9-10.el4.7" test_ref="oval:org.mitre.oval:tst:38414"/>
            <criterion comment="freetype-demos is earlier than 0:2.1.9-10.el4.7" test_ref="oval:org.mitre.oval:tst:38395"/>
            <criterion comment="freetype-utils is earlier than 0:2.1.9-10.el4.7" test_ref="oval:org.mitre.oval:tst:38234"/>
            <criterion comment="freetype-devel is earlier than 0:2.1.9-10.el4.7" test_ref="oval:org.mitre.oval:tst:38442"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="freetype is earlier than 0:2.2.1-21.el5_3" test_ref="oval:org.mitre.oval:tst:38399"/>
            <criterion comment="freetype-demos is earlier than 0:2.2.1-21.el5_3" test_ref="oval:org.mitre.oval:tst:38559"/>
            <criterion comment="freetype-devel is earlier than 0:2.2.1-21.el5_3" test_ref="oval:org.mitre.oval:tst:38488"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10148" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0246" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0246"/>
        <description>The intagg contrib module for PostgreSQL 8.0.0 and earlier allows attackers to cause a denial of service (crash) via crafted arrays.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:03.128-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:10.596-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:16.516-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10148 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:58.702-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:15.003-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="rh-postgresql-devel is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:30936"/>
            <criterion comment="rh-postgresql-server is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:30803"/>
            <criterion comment="rh-postgresql-python is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31436"/>
            <criterion comment="rh-postgresql-libs is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31064"/>
            <criterion comment="rh-postgresql-docs is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:30591"/>
            <criterion comment="rh-postgresql-test is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31342"/>
            <criterion comment="rh-postgresql-pl is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31217"/>
            <criterion comment="rh-postgresql-tcl is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31199"/>
            <criterion comment="rh-postgresql is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31415"/>
            <criterion comment="rh-postgresql-contrib is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31005"/>
            <criterion comment="rh-postgresql-jdbc is earlier than 0:7.3.9-2" test_ref="oval:org.mitre.oval:tst:31233"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31336"/>
            <criterion comment="postgresql-docs is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31398"/>
            <criterion comment="postgresql-pl is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31229"/>
            <criterion comment="postgresql-tcl is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:30946"/>
            <criterion comment="postgresql-libs is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31215"/>
            <criterion comment="postgresql-contrib is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:30784"/>
            <criterion comment="postgresql-python is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31126"/>
            <criterion comment="postgresql-test is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31318"/>
            <criterion comment="postgresql-jdbc is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31273"/>
            <criterion comment="postgresql-server is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31424"/>
            <criterion comment="postgresql-devel is earlier than 0:7.4.7-2.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31325"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10147" version="5" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in the dissect_a11_radius function in the CDMA A11 (3G-A11) dissector (packet-3g-a11.c) for Ethereal 0.10.9 and earlier allow remote attackers to execute arbitrary code via RADIUS authentication packets with large length values.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0699" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0699"/>
        <description>Multiple buffer overflows in the dissect_a11_radius function in the CDMA A11 (3G-A11) dissector (packet-3g-a11.c) for Ethereal 0.10.9 and earlier allow remote attackers to execute arbitrary code via RADIUS authentication packets with large length values.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:29.515-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:10.333-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:16.192-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10147 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:46.867-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:14.512-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.10-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31514"/>
            <criterion comment="ethereal is earlier than 0:0.10.10-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31448"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.10-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31593"/>
            <criterion comment="ethereal is earlier than 0:0.10.10-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31548"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10146" version="5" class="vulnerability">
      <metadata>
        <title>ip_route_input in Linux kernel 2.6 before 2.6.16.8 allows local users to cause a denial of service (panic) via a request for a route for a multicast IP address, which triggers a null dereference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1525" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1525"/>
        <description>ip_route_input in Linux kernel 2.6 before 2.6.16.8 allows local users to cause a denial of service (panic) via a request for a route for a multicast IP address, which triggers a null dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:00.580-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:09.991-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:15.765-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10146 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:23.911-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:13.903-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32235"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32371"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32703"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32314"/>
          <criterion comment="kernel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32614"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32295"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32310"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32611"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32305"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10145" version="5" class="vulnerability">
      <metadata>
        <title>Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service (crash) via a crafted TIFF image, a different vulnerability than CVE-2008-2327.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2285" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2285"/>
        <description>Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service (crash) via a crafted TIFF image, a different vulnerability than CVE-2008-2327.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:27.391-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:09.676-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:15.406-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10145 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:59.386-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:13.355-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libtiff is earlier than 0:3.5.7-33.el3" test_ref="oval:org.mitre.oval:tst:38552"/>
            <criterion comment="libtiff-devel is earlier than 0:3.5.7-33.el3" test_ref="oval:org.mitre.oval:tst:38921"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libtiff is earlier than 0:3.6.1-12.el4_8.4" test_ref="oval:org.mitre.oval:tst:38786"/>
            <criterion comment="libtiff-devel is earlier than 0:3.6.1-12.el4_8.4" test_ref="oval:org.mitre.oval:tst:38925"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libtiff is earlier than 0:3.8.2-7.el5_3.4" test_ref="oval:org.mitre.oval:tst:38773"/>
            <criterion comment="libtiff-devel is earlier than 0:3.8.2-7.el5_3.4" test_ref="oval:org.mitre.oval:tst:37937"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10144" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the CGIFCodec::GetPacketBuffer function in datatype/image/gif/common/gifcodec.cpp in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.0 through 11.0.4; RealPlayer Enterprise; Mac RealPlayer 10, 10.1, and 11.0; Linux RealPlayer 10; and Helix Player 10.x allows remote attackers to execute arbitrary code via a GIF file with crafted chunk sizes that trigger improper memory allocation.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4242" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4242"/>
        <description>Heap-based buffer overflow in the CGIFCodec::GetPacketBuffer function in datatype/image/gif/common/gifcodec.cpp in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.0 through 11.0.4; RealPlayer Enterprise; Mac RealPlayer 10, 10.1, and 11.0; Linux RealPlayer 10; and Helix Player 10.x allows remote attackers to execute arbitrary code via a GIF file with crafted chunk sizes that trigger improper memory allocation.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:11.693-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:09.378-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:15.176-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10144 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:52.538-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:12.898-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="HelixPlayer is earlier than 1:1.0.6-1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39912"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10143" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to force the upload of arbitrary local files from a client computer via vectors involving originalTarget and DOM Range.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2805" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2805"/>
        <description>Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to force the upload of arbitrary local files from a client computer via vectors involving originalTarget and DOM Range.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:27.391-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:08.692-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:14.445-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10143 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:57.346-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:11.891-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37286"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37033"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37126"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37105"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37271"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37279"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37060"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37189"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:36476"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:36916"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37236"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37192"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-14.el4" test_ref="oval:org.mitre.oval:tst:36999"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36886"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37331"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36365"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.19.el4" test_ref="oval:org.mitre.oval:tst:37174"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37226"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36766"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37320"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36826"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37274"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-17.el5" test_ref="oval:org.mitre.oval:tst:37107"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:37351"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.16-1.el5" test_ref="oval:org.mitre.oval:tst:37363"/>
            <criterion comment="xulrunner is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:36984"/>
            <criterion comment="devhelp is earlier than 0:0.12-17.el5" test_ref="oval:org.mitre.oval:tst:37234"/>
            <criterion comment="yelp is earlier than 0:2.16.0-19.el5" test_ref="oval:org.mitre.oval:tst:37291"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:36436"/>
            <criterion comment="firefox is earlier than 0:3.0-2.el5" test_ref="oval:org.mitre.oval:tst:36814"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10142" version="5" class="vulnerability">
      <metadata>
        <title>The NAT code (1) ip_nat_proto_tcp.c and (2) ip_nat_proto_udp.c in Linux kernel 2.6 before 2.6.13 and 2.4 before 2.4.32-rc1 incorrectly declares a variable to be static, which allows remote attackers to cause a denial of service (memory corruption) by causing two packets for the same protocol to be NATed at the same time, which leads to memory corruption.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3275" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3275"/>
        <description>The NAT code (1) ip_nat_proto_tcp.c and (2) ip_nat_proto_udp.c in Linux kernel 2.6 before 2.6.13 and 2.4 before 2.4.32-rc1 incorrectly declares a variable to be static, which allows remote attackers to cause a denial of service (memory corruption) by causing two packets for the same protocol to be NATed at the same time, which leads to memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:06.941-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:08.248-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:13.890-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10142 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:04.673-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:10.827-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32525"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32366"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32381"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32215"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32464"/>
            <criterion comment="kernel is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32288"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:31978"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32438"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32070"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31896"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31885"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31861"/>
            <criterion comment="kernel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31550"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31914"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:31924"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-22.EL" test_ref="oval:org.mitre.oval:tst:32023"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10141" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3520" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3520"/>
        <description>Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:12.670-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:07.885-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:13.570-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10141 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:06.768-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:10.176-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="netpbm is earlier than 0:10.25-2.1.el4_7.4" test_ref="oval:org.mitre.oval:tst:37861"/>
            <criterion comment="netpbm-progs is earlier than 0:10.25-2.1.el4_7.4" test_ref="oval:org.mitre.oval:tst:38005"/>
            <criterion comment="netpbm-devel is earlier than 0:10.25-2.1.el4_7.4" test_ref="oval:org.mitre.oval:tst:38171"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="netpbm is earlier than 0:10.35-6.1.el5_3.1" test_ref="oval:org.mitre.oval:tst:37534"/>
            <criterion comment="netpbm-progs is earlier than 0:10.35-6.1.el5_3.1" test_ref="oval:org.mitre.oval:tst:37722"/>
            <criterion comment="netpbm-devel is earlier than 0:10.35-6.1.el5_3.1" test_ref="oval:org.mitre.oval:tst:37227"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10140" version="5" class="vulnerability">
      <metadata>
        <title>Buffer underflow in the build_tree function in unpack.c in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted leaf count table that causes a write to a negative index.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4336" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4336"/>
        <description>Buffer underflow in the build_tree function in unpack.c in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted leaf count table that causes a write to a negative index.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:14.447-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:07.645-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:13.285-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10140 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:00.667-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:09.660-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gzip is earlier than 0:1.3.3-13.rhel3" test_ref="oval:org.mitre.oval:tst:32961"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gzip is earlier than 0:1.3.3-16.rhel4" test_ref="oval:org.mitre.oval:tst:32979"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1014" version="5" class="vulnerability">
      <metadata>
        <title>IE File Download Dialog Deception Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0875" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0875"/>
        <description>Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the dialogue in a way that could fool users into thinking that the file type is safe to download.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-29T04:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Tiffany Bergeron</contributor>
            </submitted>
            <status_change date="2004-05-25T04:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-16T04:00:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2004-09-22T04:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-09-22T04:01:00.000-04:00" comment="Replaced IE cumulative patch IDs to correspond to the original IDs">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </modified>
            <status_change date="2004-10-06T04:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="Changed IE registry test to wrt-18">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:39.294-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:06.476-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="the version of mshtml.dll is less than 6.0.2712.0300" negate="false" test_ref="oval:org.mitre.oval:tst:1460"/>
          <criterion comment="Patch Q313675 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:1459"/>
          <criterion comment="Patch Q316059.exe Installed" negate="true" test_ref="oval:org.mitre.oval:tst:1458"/>
          <criterion comment="Patch Q319282 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:1457"/>
          <criterion comment="the patch q321232 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3119"/>
          <criterion comment="the patch q323759 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3118"/>
          <criterion comment="the patch q328970 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3117"/>
          <criterion comment="the patch q324929 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3116"/>
          <criterion comment="the patch q810847 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3115"/>
          <criterion comment="the patch q813489 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3114"/>
          <criterion comment="the patch q818529 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3113"/>
          <criterion comment="the patch q822925 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3112"/>
          <criterion comment="the patch q828750 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3111"/>
          <criterion comment="the patch q824145 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:3110"/>
          <criterion comment="the patch q832894 is installed (Installed Components key)" negate="true" test_ref="oval:org.mitre.oval:tst:2588"/>
          <criterion comment="Internet Explorer 6 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3090"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="File Downloads Not Disabled">
            <criterion comment="Use Machine Settings" negate="false" test_ref="oval:org.mitre.oval:tst:1456"/>
            <criterion comment="File Downloads Allowed In At Least One Zone" negate="false" test_ref="oval:org.mitre.oval:tst:1455"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10139" version="5" class="vulnerability">
      <metadata>
        <title>The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not properly restrict writing of segment selectors to segment registers, which might allow guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, and replacing an instruction in between emulator entry and instruction fetch.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0419" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0419"/>
        <description>The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not properly restrict writing of segment selectors to segment registers, which might allow guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, and replacing an instruction in between emulator entry and instruction fetch.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:34.949-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:07.417-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:12.966-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10139 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:13.385-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:09.004-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kmod-kvm is earlier than 0:83-105.el5_4.27" test_ref="oval:org.mitre.oval:tst:40222"/>
          <criterion comment="kvm-qemu-img is earlier than 0:83-105.el5_4.27" test_ref="oval:org.mitre.oval:tst:40287"/>
          <criterion comment="kvm-tools is earlier than 0:83-105.el5_4.27" test_ref="oval:org.mitre.oval:tst:39931"/>
          <criterion comment="kvm is earlier than 0:83-105.el5_4.27" test_ref="oval:org.mitre.oval:tst:39956"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10138" version="5" class="vulnerability">
      <metadata>
        <title>Memory leak in a certain Red Hat deployment of vsftpd before 2.0.5 on Red Hat Enterprise Linux (RHEL) 3 and 4, when PAM is used, allows remote attackers to cause a denial of service (memory consumption) via a large number of invalid authentication attempts within the same session, a different vulnerability than CVE-2007-5962.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2375" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2375"/>
        <description>Memory leak in a certain Red Hat deployment of vsftpd before 2.0.5 on Red Hat Enterprise Linux (RHEL) 3 and 4, when PAM is used, allows remote attackers to cause a denial of service (memory consumption) via a large number of invalid authentication attempts within the same session, a different vulnerability than CVE-2007-5962.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:33.197-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:07.166-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:12.693-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10138 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:33.285-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:08.511-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="vsftpd is earlier than 0:1.2.1-3E.16" test_ref="oval:org.mitre.oval:tst:37322"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="vsftpd is earlier than 0:2.0.1-6.el4" test_ref="oval:org.mitre.oval:tst:36917"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10137" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the pango_glyph_string_set_size function in pango/glyphstring.c in Pango before 1.24 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long glyph string that triggers a heap-based buffer overflow, as demonstrated by a long document.location value in Firefox.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1194" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1194"/>
        <description>Integer overflow in the pango_glyph_string_set_size function in pango/glyphstring.c in Pango before 1.24 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long glyph string that triggers a heap-based buffer overflow, as demonstrated by a long document.location value in Firefox.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:52.717-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:06.746-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:12.328-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10137 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:51:56.090-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:07.406-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="pango-devel is earlier than 0:1.2.5-8" test_ref="oval:org.mitre.oval:tst:38610"/>
            <criterion comment="pango is earlier than 0:1.2.5-8" test_ref="oval:org.mitre.oval:tst:38707"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="pango-devel is earlier than 0:1.6.0-14.4_7" test_ref="oval:org.mitre.oval:tst:38498"/>
            <criterion comment="evolution28-pango-devel is earlier than 0:1.14.9-11.el4_7" test_ref="oval:org.mitre.oval:tst:38782"/>
            <criterion comment="pango is earlier than 0:1.6.0-14.4_7" test_ref="oval:org.mitre.oval:tst:38407"/>
            <criterion comment="evolution28-pango is earlier than 0:1.14.9-11.el4_7" test_ref="oval:org.mitre.oval:tst:38599"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="pango-devel is earlier than 0:1.14.9-5.el5_3" test_ref="oval:org.mitre.oval:tst:38693"/>
            <criterion comment="pango is earlier than 0:1.14.9-5.el5_3" test_ref="oval:org.mitre.oval:tst:38573"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10136" version="5" class="vulnerability">
      <metadata>
        <title>The alert-mailing implementation in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2940" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2940"/>
        <description>The alert-mailing implementation in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:45.395-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:06.521-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:12.090-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10136 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:50:00.802-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:06.973-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="hpijs is earlier than 0:1.6.7-4.1.el5_2.4" test_ref="oval:org.mitre.oval:tst:37257"/>
          <criterion comment="libsane-hpaio is earlier than 0:1.6.7-4.1.el5_2.4" test_ref="oval:org.mitre.oval:tst:37507"/>
          <criterion comment="hplip is earlier than 0:1.6.7-4.1.el5_2.4" test_ref="oval:org.mitre.oval:tst:37514"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10135" version="5" class="vulnerability">
      <metadata>
        <title>pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when converting Portable Anymap (PNM) images to Portable Network Graphics (PNG), which might allow attackers to execute arbitrary code by modifying the stack.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2978" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2978"/>
        <description>pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when converting Portable Anymap (PNM) images to Portable Network Graphics (PNG), which might allow attackers to execute arbitrary code by modifying the stack.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:46.196-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:06.279-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:11.814-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10135 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:32.857-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:06.560-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="netpbm is earlier than 0:10.25-2.EL4.2" test_ref="oval:org.mitre.oval:tst:32056"/>
          <criterion comment="netpbm-progs is earlier than 0:10.25-2.EL4.2" test_ref="oval:org.mitre.oval:tst:31802"/>
          <criterion comment="netpbm-devel is earlier than 0:10.25-2.EL4.2" test_ref="oval:org.mitre.oval:tst:31443"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10134" version="3" class="vulnerability">
      <metadata>
        <title>Multiple buffer overflows in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, and SDK and JRE 1.3.1_18 and earlier allow attackers to develop Java applets that read, write, or execute local files, possibly related to (1) integer overflows in the Java_sun_awt_image_ImagingLib_convolveBI, awt_parseRaster, and awt_parseColorModel functions; (2) a stack overflow in the Java_sun_awt_image_ImagingLib_lookupByteRaster function; and (3) improper handling of certain negative values in the Java_sun_font_SunLayoutEngine_nativeLayout function.  NOTE: some of these details are obtained from third party information.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6731" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6731"/>
        <description>Multiple buffer overflows in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, and SDK and JRE 1.3.1_18 and earlier allow attackers to develop Java applets that read, write, or execute local files, possibly related to (1) integer overflows in the Java_sun_awt_image_ImagingLib_convolveBI, awt_parseRaster, and awt_parseColorModel functions; (2) a stack overflow in the Java_sun_awt_image_ImagingLib_lookupByteRaster function; and (3) improper handling of certain negative values in the Java_sun_font_SunLayoutEngine_nativeLayout function.  NOTE: some of these details are obtained from third party information.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:21.933-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:05.763-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:11.346-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criteria operator="OR">
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33298"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33521"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33376"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33428"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33515"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.7-1jpp.4.el3" test_ref="oval:org.mitre.oval:tst:33417"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:32803"/>
            <criterion comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33585"/>
            <criterion comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33064"/>
            <criterion comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33481"/>
            <criterion comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33563"/>
            <criterion comment="java-1.4.2-ibm is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33479"/>
            <criterion comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33472"/>
            <criterion comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:32903"/>
            <criterion comment="java-1.5.0-ibm is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33667"/>
            <criterion comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33199"/>
            <criterion comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33754"/>
            <criterion comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.3-1jpp.3.el4" test_ref="oval:org.mitre.oval:tst:33366"/>
            <criterion comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33073"/>
            <criterion comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.7-1jpp.4.el4" test_ref="oval:org.mitre.oval:tst:33547"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10133" version="5" class="vulnerability">
      <metadata>
        <title>MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are within the MySQL home data directory, which can point to tables that are created in the future.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2079"/>
        <description>MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are within the MySQL home data directory, which can point to tables that are created in the future.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:01.385-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:05.425-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:10.916-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10133 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:42.307-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:05.805-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mysql is earlier than 0:4.1.22-2.el4" test_ref="oval:org.mitre.oval:tst:37045"/>
            <criterion comment="mysql-devel is earlier than 0:4.1.22-2.el4" test_ref="oval:org.mitre.oval:tst:37456"/>
            <criterion comment="mysql-bench is earlier than 0:4.1.22-2.el4" test_ref="oval:org.mitre.oval:tst:36967"/>
            <criterion comment="mysql-server is earlier than 0:4.1.22-2.el4" test_ref="oval:org.mitre.oval:tst:37224"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mysql is earlier than 0:5.0.77-3.el5" test_ref="oval:org.mitre.oval:tst:39025"/>
            <criterion comment="mysql-devel is earlier than 0:5.0.77-3.el5" test_ref="oval:org.mitre.oval:tst:39228"/>
            <criterion comment="mysql-test is earlier than 0:5.0.77-3.el5" test_ref="oval:org.mitre.oval:tst:38934"/>
            <criterion comment="mysql-bench is earlier than 0:5.0.77-3.el5" test_ref="oval:org.mitre.oval:tst:39199"/>
            <criterion comment="mysql-server is earlier than 0:5.0.77-3.el5" test_ref="oval:org.mitre.oval:tst:39156"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10132" version="5" class="vulnerability">
      <metadata>
        <title>The browser user interface in Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 does not properly distinguish between user-generated events and untrusted synthetic events, which makes it easier for remote attackers to perform dangerous actions that normally could only be performed manually by the user.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2260"/>
        <description>The browser user interface in Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 does not properly distinguish between user-generated events and untrusted synthetic events, which makes it easier for remote attackers to perform dangerous actions that normally could only be performed manually by the user.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:58.756-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:04.856-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:10.099-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10132 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:28.426-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:04.828-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32142"/>
            <criterion comment="mozilla is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32131"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32154"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32001"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32171"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32162"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31782"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32041"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32004"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.10-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31353"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32120"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.6" test_ref="oval:org.mitre.oval:tst:31633"/>
            <criterion comment="mozilla is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31837"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32100"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31821"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31904"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.6" test_ref="oval:org.mitre.oval:tst:31814"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31951"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31554"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32149"/>
            <criterion comment="firefox is earlier than 0:1.0.6-1.4.1" test_ref="oval:org.mitre.oval:tst:32167"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:31998"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.10-1.4.1" test_ref="oval:org.mitre.oval:tst:32061"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10131" version="5" class="vulnerability">
      <metadata>
        <title>Pidgin 2.4.1 allows remote attackers to cause a denial of service (crash) via a long filename that contains certain characters, as demonstrated using an MSN message that triggers the crash in the msn_slplink_process_msg function.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2955" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2955"/>
        <description>Pidgin 2.4.1 allows remote attackers to cause a denial of service (crash) via a long filename that contains certain characters, as demonstrated using an MSN message that triggers the crash in the msn_slplink_process_msg function.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:27.960-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:04.419-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:09.511-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10131 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:09.262-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:04.022-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.5.2-6.el4" test_ref="oval:org.mitre.oval:tst:37980"/>
            <criterion comment="libpurple is earlier than 0:2.5.2-6.el4" test_ref="oval:org.mitre.oval:tst:37625"/>
            <criterion comment="libpurple-perl is earlier than 0:2.5.2-6.el4" test_ref="oval:org.mitre.oval:tst:37827"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.5.2-6.el4" test_ref="oval:org.mitre.oval:tst:37120"/>
            <criterion comment="pidgin-devel is earlier than 0:2.5.2-6.el4" test_ref="oval:org.mitre.oval:tst:37969"/>
            <criterion comment="libpurple-devel is earlier than 0:2.5.2-6.el4" test_ref="oval:org.mitre.oval:tst:38038"/>
            <criterion comment="finch is earlier than 0:2.5.2-6.el4" test_ref="oval:org.mitre.oval:tst:37822"/>
            <criterion comment="pidgin-perl is earlier than 0:2.5.2-6.el4" test_ref="oval:org.mitre.oval:tst:38119"/>
            <criterion comment="pidgin is earlier than 0:2.5.2-6.el4" test_ref="oval:org.mitre.oval:tst:38052"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:38103"/>
            <criterion comment="libpurple is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:38090"/>
            <criterion comment="libpurple-perl is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:37997"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:38020"/>
            <criterion comment="pidgin-devel is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:37865"/>
            <criterion comment="libpurple-devel is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:37809"/>
            <criterion comment="finch is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:37973"/>
            <criterion comment="pidgin-perl is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:38050"/>
            <criterion comment="pidgin-docs is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:37775"/>
            <criterion comment="pidgin is earlier than 0:2.5.2-6.el5" test_ref="oval:org.mitre.oval:tst:37838"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10130" version="5" class="vulnerability">
      <metadata>
        <title>net/ipv6/tcp_ipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 inadvertently copies the ipv6_fl_socklist from a listening TCP socket to child sockets, which allows local users to cause a denial of service (OOPS) or double free by opening a listening IPv6 socket, attaching a flow label, and connecting to that socket.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1592" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1592"/>
        <description>net/ipv6/tcp_ipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 inadvertently copies the ipv6_fl_socklist from a listening TCP socket to child sockets, which allows local users to cause a denial of service (OOPS) or double free by opening a listening IPv6 socket, attaching a flow label, and connecting to that socket.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:44.556-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:03.712-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:08.759-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10130 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:53:05.441-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:02.653-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-50.EL" test_ref="oval:org.mitre.oval:tst:34140"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-50.EL" test_ref="oval:org.mitre.oval:tst:34214"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-50.EL" test_ref="oval:org.mitre.oval:tst:34585"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-50.EL" test_ref="oval:org.mitre.oval:tst:34516"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-50.EL" test_ref="oval:org.mitre.oval:tst:34527"/>
            <criterion comment="kernel is earlier than 0:2.4.21-50.EL" test_ref="oval:org.mitre.oval:tst:34623"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-50.EL" test_ref="oval:org.mitre.oval:tst:34622"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-50.EL" test_ref="oval:org.mitre.oval:tst:34567"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-50.EL" test_ref="oval:org.mitre.oval:tst:34576"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30189"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30542"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30504"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30169"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:29589"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30432"/>
            <criterion comment="kernel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:29669"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30424"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30299"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30268"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-55.EL" test_ref="oval:org.mitre.oval:tst:30561"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34146"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34219"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34205"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:33862"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34224"/>
            <criterion comment="kernel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:33837"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34231"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34073"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:33861"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:33594"/>
            <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.4.el5" test_ref="oval:org.mitre.oval:tst:34059"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1013" version="2" class="vulnerability">
      <metadata>
        <title>Red Hat Enterprise 3 Kernel Real Time Clock Data Leakage</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0984" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0984"/>
        <description>Real time clock (RTC) routines in Linux kernel 2.4.23 and earlier do not properly initialize their structures, which could leak kernel data to user space.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-12T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:39.446-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:12.234-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criterion comment="kernel version is less than 2.4.21-15.EL" negate="false" test_ref="oval:org.mitre.oval:tst:1342"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10129" version="5" class="vulnerability">
      <metadata>
        <title>Stack consumption vulnerability in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allows context-dependent attackers to cause a denial of service (application crash) via a large depth of element declarations in a DTD, related to a function recursion, as demonstrated by the Codenomicon XML fuzzing framework.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2414" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2414"/>
        <description>Stack consumption vulnerability in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allows context-dependent attackers to cause a denial of service (application crash) via a large depth of element declarations in a DTD, related to a function recursion, as demonstrated by the Codenomicon XML fuzzing framework.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:36.014-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:03.337-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:08.334-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10129 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:53:00.583-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:01:27.296-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:01.614-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libxml2-devel is earlier than 0:2.5.10-15" test_ref="oval:org.mitre.oval:tst:39096"/>
            <criterion comment="libxml2-python is earlier than 0:2.5.10-15" test_ref="oval:org.mitre.oval:tst:39077"/>
            <criterion comment="libxml-devel is earlier than 1:1.8.17-9.3" test_ref="oval:org.mitre.oval:tst:38476"/>
            <criterion comment="libxml is earlier than 1:1.8.17-9.3" test_ref="oval:org.mitre.oval:tst:38526"/>
            <criterion comment="libxml2 is earlier than 0:2.5.10-15" test_ref="oval:org.mitre.oval:tst:39158"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libxml2-devel is earlier than 0:2.6.16-12.7" test_ref="oval:org.mitre.oval:tst:39083"/>
            <criterion comment="libxml2-python is earlier than 0:2.6.16-12.7" test_ref="oval:org.mitre.oval:tst:38887"/>
            <criterion comment="libxml2 is earlier than 0:2.6.16-12.7" test_ref="oval:org.mitre.oval:tst:39128"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libxml2-devel is earlier than 0:2.6.26-2.1.2.8" test_ref="oval:org.mitre.oval:tst:39183"/>
            <criterion comment="libxml2-python is earlier than 0:2.6.26-2.1.2.8" test_ref="oval:org.mitre.oval:tst:38679"/>
            <criterion comment="libxml2 is earlier than 0:2.6.26-2.1.2.8" test_ref="oval:org.mitre.oval:tst:39178"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10128" version="5" class="vulnerability">
      <metadata>
        <title>The nlmclnt_mark_reclaim in clntlock.c in NFS lockd in Linux kernel before 2.6.16 allows remote attackers to cause a denial of service (process crash) and deny access to NFS exports via unspecified vectors that trigger a kernel oops (null dereference) and a deadlock.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5158" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5158"/>
        <description>The nlmclnt_mark_reclaim in clntlock.c in NFS lockd in Linux kernel before 2.6.16 allows remote attackers to cause a denial of service (process crash) and deny access to NFS exports via unspecified vectors that trigger a kernel oops (null dereference) and a deadlock.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:40.071-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:02.979-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:07.897-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10128 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:36.539-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:00.926-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-xenU is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34475"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34659"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34630"/>
          <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34375"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34496"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34560"/>
          <criterion comment="kernel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34493"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34302"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34295"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34662"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:33694"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10127" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0.5.1 might allow local users to gain privileges by sending a portion of the header of a virProxyPacket packet, and then sending the remainder of the packet with crafted values in the header, related to use of uninitialized memory in a validation check.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0036" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0036"/>
        <description>Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0.5.1 might allow local users to gain privileges by sending a portion of the header of a virProxyPacket packet, and then sending the remainder of the packet with crafted values in the header, related to use of uninitialized memory in a validation check.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:00.428-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:02.768-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:07.632-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10127 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:30.355-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:02:00.328-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="libvirt-python is earlier than 0:0.3.3-14.el5_3.1" test_ref="oval:org.mitre.oval:tst:38518"/>
          <criterion comment="libvirt is earlier than 0:0.3.3-14.el5_3.1" test_ref="oval:org.mitre.oval:tst:38026"/>
          <criterion comment="libvirt-devel is earlier than 0:0.3.3-14.el5_3.1" test_ref="oval:org.mitre.oval:tst:38242"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10126" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in entity_cache in ELinks before 0.11.4rc0 allows remote attackers to cause a denial of service (crash) via a crafted link.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-7224" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-7224"/>
        <description>Buffer overflow in entity_cache in ELinks before 0.11.4rc0 allows remote attackers to cause a denial of service (crash) via a crafted link.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:49.221-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:02.551-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:07.381-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10126 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:25:35.546-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:59.754-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="elinks is earlier than 0:0.9.2-4.el4_8.1" test_ref="oval:org.mitre.oval:tst:39356"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="elinks is earlier than 0:0.11.1-6.el5_4.1" test_ref="oval:org.mitre.oval:tst:39490"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10125" version="5" class="vulnerability">
      <metadata>
        <title>Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark (formerly Ethereal) 0.99.2 allow remote attackers to cause a denial of service (crash) via unspecified vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4331" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4331"/>
        <description>Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark (formerly Ethereal) 0.99.2 allow remote attackers to cause a denial of service (crash) via unspecified vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:25.659-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:02.305-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:07.088-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10125 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:07.208-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:59.195-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.3-EL3.2" test_ref="oval:org.mitre.oval:tst:33011"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.3-EL3.2" test_ref="oval:org.mitre.oval:tst:32323"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:0.99.3-EL4.2" test_ref="oval:org.mitre.oval:tst:33025"/>
            <criterion comment="wireshark-gnome is earlier than 0:0.99.3-EL4.2" test_ref="oval:org.mitre.oval:tst:32974"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10124" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1095" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1095"/>
        <description>Integer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:27.907-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:01.992-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:06.739-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10124 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:44.411-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:58.620-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:38276"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37661"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37652"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37769"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:38561"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10123" version="5" class="vulnerability">
      <metadata>
        <title>The ELF loader in Linux kernel 2.4 before 2.4.25 allows local users to cause a denial of service (crash) via a crafted ELF file with an interpreter with an invalid arch (architecture), which triggers a BUG() when an invalid VMA is unmapped.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0138" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0138"/>
        <description>The ELF loader in Linux kernel 2.4 before 2.4.25 allows local users to cause a denial of service (crash) via a crafted ELF file with an interpreter with an invalid arch (architecture), which triggers a BUG() when an invalid VMA is unmapped.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:35.143-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:01.677-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:06.375-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10123 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:46.194-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:57.864-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-BOOT is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30934"/>
          <criterion comment="kernel-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30708"/>
          <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30577"/>
          <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30874"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30794"/>
          <criterion comment="kernel is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30892"/>
          <criterion comment="kernel-source is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30873"/>
          <criterion comment="kernel-doc is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:31080"/>
          <criterion comment="kernel-smp is earlier than 0:2.4.21-20.0.1.EL" test_ref="oval:org.mitre.oval:tst:30866"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10122" version="5" class="vulnerability">
      <metadata>
        <title>backend/tcop/postgres.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) related to duration logging of V3-protocol Execute messages for (1) COMMIT and (2) ROLLBACK SQL statements.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5542" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5542"/>
        <description>backend/tcop/postgres.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) related to duration logging of V3-protocol Execute messages for (1) COMMIT and (2) ROLLBACK SQL statements.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:36.979-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:01.366-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:05.910-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10122 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:47:00.450-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:49:49.447-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:57.129-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="postgresql is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33181"/>
          <criterion comment="postgresql-docs is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33488"/>
          <criterion comment="postgresql-pl is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33593"/>
          <criterion comment="postgresql-tcl is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33121"/>
          <criterion comment="postgresql-libs is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33568"/>
          <criterion comment="postgresql-contrib is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33396"/>
          <criterion comment="postgresql-python is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33603"/>
          <criterion comment="postgresql-test is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:32610"/>
          <criterion comment="postgresql-server is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:32997"/>
          <criterion comment="postgresql-devel is earlier than 0:8.1.8-1.el5" test_ref="oval:org.mitre.oval:tst:33536"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10121" version="5" class="vulnerability">
      <metadata>
        <title>Multiple heap-based buffer overflows in the (1) str_repeat and (2) wordwrap functions in ext/standard/string.c in PHP before 5.1.5, when used on a 64-bit system, have unspecified impact and attack vectors, a different vulnerability than CVE-2006-1990.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4482" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4482"/>
        <description>Multiple heap-based buffer overflows in the (1) str_repeat and (2) wordwrap functions in ext/standard/string.c in PHP before 5.1.5, when used on a 64-bit system, have unspecified impact and attack vectors, a different vulnerability than CVE-2006-1990.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:31.562-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:00.833-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:05.314-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10121 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:53.859-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:56.180-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32928"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32870"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32829"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32485"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32258"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32491"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-36.ent" test_ref="oval:org.mitre.oval:tst:32860"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32985"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32962"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32808"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32175"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32788"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:33059"/>
            <criterion comment="php is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32754"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32876"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:33047"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32483"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:33052"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32964"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32700"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.18" test_ref="oval:org.mitre.oval:tst:32272"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10120" version="5" class="vulnerability">
      <metadata>
        <title>Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running at higher privileges by causing a setuid-root parent process to die, which delivers an attacker-controlled parent process death signal (PR_SET_PDEATHSIG).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3848" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3848"/>
        <description>Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running at higher privileges by causing a setuid-root parent process to die, which delivers an attacker-controlled parent process death signal (PR_SET_PDEATHSIG).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:42.325-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:01:00.178-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:04.534-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10120 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:44:00.892-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:52:40.307-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:54.984-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35660"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35620"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35663"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35627"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35653"/>
            <criterion comment="kernel is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35769"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35035"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:35699"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-53.EL" test_ref="oval:org.mitre.oval:tst:34809"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34864"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35017"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35145"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34442"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35258"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35254"/>
            <criterion comment="kernel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35373"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34480"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34911"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:34923"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-55.0.12.EL" test_ref="oval:org.mitre.oval:tst:35327"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35330"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35339"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35337"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35227"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35043"/>
            <criterion comment="kernel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35276"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:34448"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35366"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35208"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35326"/>
            <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.15.el5" test_ref="oval:org.mitre.oval:tst:35345"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1012" version="3" class="vulnerability">
      <metadata>
        <title>SquirrelMail Cross-site Scripting Vulnerability II</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>SquirrelMail</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0520" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0520"/>
        <description>Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote attackers to insert arbitrary HTML and script via the content-type mail header, as demonstrated using read_body.php.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-06-29T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-07-21T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-08-11T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.329-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:59:44.595-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:04.113-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="squirrelmail rpm version prior to 1.4.3-0.e3.1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1327"/>
          <criterion comment="php rpm is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1326"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="httpd is listening on the network" negate="false" test_ref="oval:org.mitre.oval:tst:1630"/>
          <criterion comment="/etc/httpd/modules/libphp4.so exists" negate="false" test_ref="oval:org.mitre.oval:tst:1325"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10119" version="5" class="vulnerability">
      <metadata>
        <title>modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a crafted 8-bit bitmap (BMP) file that triggers an out-of-bounds read within the heap, as demonstrated using a CANVAS element; or cause a denial of service (application crash) via a crafted 8-bit bitmap file that triggers an out-of-bounds read. NOTE: the initial public reports stated that this affected Firefox in Ubuntu 6.06 through 7.10.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0420"/>
        <description>modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a crafted 8-bit bitmap (BMP) file that triggers an out-of-bounds read within the heap, as demonstrated using a CANVAS element; or cause a denial of service (application crash) via a crafted 8-bit bitmap file that triggers an out-of-bounds read. NOTE: the initial public reports stated that this affected Firefox in Ubuntu 6.06 through 7.10.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:38.944-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:59.855-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:04.262-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10119 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:15.380-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:54.399-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="thunderbird is earlier than 0:1.5.0.12-8.el4" test_ref="oval:org.mitre.oval:tst:36202"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="thunderbird is earlier than 0:1.5.0.12-8.el5" test_ref="oval:org.mitre.oval:tst:35675"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10118" version="5" class="vulnerability">
      <metadata>
        <title>zend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zend_hash_del to delete the wrong element, which prevents a variable from being unset even when the PHP unset function is called, which might cause the variable's value to be used in security-relevant operations.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3017"/>
        <description>zend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zend_hash_del to delete the wrong element, which prevents a variable from being unset even when the PHP unset function is called, which might cause the variable's value to be used in security-relevant operations.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:34.270-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:59.258-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:03.697-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10118 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:29:50.084-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:53.406-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-33.ent" test_ref="oval:org.mitre.oval:tst:32694"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-33.ent" test_ref="oval:org.mitre.oval:tst:32635"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-33.ent" test_ref="oval:org.mitre.oval:tst:32094"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-33.ent" test_ref="oval:org.mitre.oval:tst:32734"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-33.ent" test_ref="oval:org.mitre.oval:tst:32506"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-33.ent" test_ref="oval:org.mitre.oval:tst:32594"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-33.ent" test_ref="oval:org.mitre.oval:tst:32698"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32619"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32609"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:31938"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:31791"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32729"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32676"/>
            <criterion comment="php is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32607"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32412"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32084"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32271"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32269"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32783"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32718"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.15" test_ref="oval:org.mitre.oval:tst:32732"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10117" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla before 1.7.6, and Firefox before 1.0.1, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1156" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1156"/>
        <description>Mozilla before 1.7.6, and Firefox before 1.0.1, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:37.809-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:58.823-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:03.318-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10117 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:44.161-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:52.676-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31283"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31520"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31645"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31516"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31569"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31143"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31512"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31785"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31695"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31626"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:1.0.1-1.4.3" test_ref="oval:org.mitre.oval:tst:31118"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10116" version="5" class="vulnerability">
      <metadata>
        <title>The sctp_new function in (1) ip_conntrack_proto_sctp.c and (2) nf_conntrack_proto_sctp.c in Netfilter in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, allows remote attackers to cause a denial of service by causing certain invalid states that trigger a NULL pointer dereference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2876" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2876"/>
        <description>The sctp_new function in (1) ip_conntrack_proto_sctp.c and (2) nf_conntrack_proto_sctp.c in Netfilter in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, allows remote attackers to cause a denial of service by causing certain invalid states that trigger a NULL pointer dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:12.453-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:58.289-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:02.709-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10116 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:26.240-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:51.687-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34475"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34659"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34630"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34375"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34496"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34560"/>
            <criterion comment="kernel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34493"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34302"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34295"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:34662"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-55.0.2.EL" test_ref="oval:org.mitre.oval:tst:33694"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34804"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34557"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34837"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34795"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34562"/>
            <criterion comment="kernel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34357"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34379"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34873"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34870"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34374"/>
            <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.10.el5" test_ref="oval:org.mitre.oval:tst:34337"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10115" version="5" class="vulnerability">
      <metadata>
        <title>Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0233" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0233"/>
        <description>Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:48.220-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:58.082-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:02.472-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10115 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:15.638-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:51.280-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="utempter is earlier than 0:0.5.5-1.3EL.0" test_ref="oval:org.mitre.oval:tst:30183"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10114" version="5" class="vulnerability">
      <metadata>
        <title>lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2417" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2417"/>
        <description>lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:26.067-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:57.742-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:02.122-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10114 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:38.228-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:50.518-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="curl-devel is earlier than 0:7.10.6-10.rhel3" test_ref="oval:org.mitre.oval:tst:38926"/>
            <criterion comment="curl is earlier than 0:7.10.6-10.rhel3" test_ref="oval:org.mitre.oval:tst:38671"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="curl-devel is earlier than 0:7.12.1-11.1.el4_8.1" test_ref="oval:org.mitre.oval:tst:39078"/>
            <criterion comment="curl is earlier than 0:7.12.1-11.1.el4_8.1" test_ref="oval:org.mitre.oval:tst:38865"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="curl-devel is earlier than 0:7.15.5-2.1.el5_3.5" test_ref="oval:org.mitre.oval:tst:39159"/>
            <criterion comment="curl is earlier than 0:7.15.5-2.1.el5_3.5" test_ref="oval:org.mitre.oval:tst:38300"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10113" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the XPCNativeWrapper(window).Function construct.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3810" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3810"/>
        <description>Cross-site scripting (XSS) vulnerability in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the XPCNativeWrapper(window).Function construct.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:48.597-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:57.243-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:01.461-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10113 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:37.325-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:49.460-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32342"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32877"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:31982"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32816"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32080"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32904"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32915"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32924"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32822"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el3.1" test_ref="oval:org.mitre.oval:tst:32555"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32873"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32693"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32886"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32810"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32418"/>
            <criterion comment="seamonkey is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32496"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32929"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.2.el4" test_ref="oval:org.mitre.oval:tst:32777"/>
            <criterion comment="firefox is earlier than 0:1.5.0.5-0.el4.1" test_ref="oval:org.mitre.oval:tst:32896"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32722"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32906"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32905"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32925"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el4.1" test_ref="oval:org.mitre.oval:tst:32624"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10112" version="5" class="vulnerability">
      <metadata>
        <title>The fbComposite function in fbpict.c in the Render extension in the X server in X.Org X11R7.1 allows remote authenticated users to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted request, related to an incorrect macro definition.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1166" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1166"/>
        <description>The fbComposite function in fbpict.c in the Render extension in the X server in X.Org X11R7.1 allows remote authenticated users to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted request, related to an incorrect macro definition.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:16.915-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:56.876-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:01.129-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10112 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:47:19.634-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:48.821-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="xorg-x11-server-Xvnc-source is earlier than 0:1.1.1-48.76.el5_5.1" test_ref="oval:org.mitre.oval:tst:40408"/>
          <criterion comment="xorg-x11-server-Xnest is earlier than 0:1.1.1-48.76.el5_5.1" test_ref="oval:org.mitre.oval:tst:40423"/>
          <criterion comment="xorg-x11-server-Xvfb is earlier than 0:1.1.1-48.76.el5_5.1" test_ref="oval:org.mitre.oval:tst:40199"/>
          <criterion comment="xorg-x11-server-Xdmx is earlier than 0:1.1.1-48.76.el5_5.1" test_ref="oval:org.mitre.oval:tst:40488"/>
          <criterion comment="xorg-x11-server is earlier than 0:1.1.1-48.76.el5_5.1" test_ref="oval:org.mitre.oval:tst:40175"/>
          <criterion comment="xorg-x11-server-sdk is earlier than 0:1.1.1-48.76.el5_5.1" test_ref="oval:org.mitre.oval:tst:39942"/>
          <criterion comment="xorg-x11-server-Xephyr is earlier than 0:1.1.1-48.76.el5_5.1" test_ref="oval:org.mitre.oval:tst:40442"/>
          <criterion comment="xorg-x11-server-Xorg is earlier than 0:1.1.1-48.76.el5_5.1" test_ref="oval:org.mitre.oval:tst:40255"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10111" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in the __find_get_block_slow function in the ISO9660 filesystem in Linux 2.6.18 and possibly other versions allows local users to cause a denial of service (infinite loop) by mounting a crafted ISO9660 filesystem containing malformed data structures.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5757" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5757"/>
        <description>Race condition in the __find_get_block_slow function in the ISO9660 filesystem in Linux 2.6.18 and possibly other versions allows local users to cause a denial of service (infinite loop) by mounting a crafted ISO9660 filesystem containing malformed data structures.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:26:22.888-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:56.589-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:01:00.747-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10111 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:58.369-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:48.246-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33204"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33278"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33306"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32378"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33145"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33107"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32620"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32645"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33057"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10110" version="5" class="vulnerability">
      <metadata>
        <title>The JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving JSOP_DEFVAR and properties that lack the JSPROP_PERMANENT attribute.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1305" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1305"/>
        <description>The JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving JSOP_DEFVAR and properties that lack the JSPROP_PERMANENT attribute.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:08.477-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:56.006-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:59.959-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10110 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:34.266-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:46.620-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38597"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38375"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38403"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38521"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38542"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:37726"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38677"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38096"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38577"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.37.el3" test_ref="oval:org.mitre.oval:tst:38540"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38634"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-23.el4" test_ref="oval:org.mitre.oval:tst:38562"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38697"/>
            <criterion comment="firefox is earlier than 0:3.0.9-1.el4" test_ref="oval:org.mitre.oval:tst:38379"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38716"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38190"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38685"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-41.el4" test_ref="oval:org.mitre.oval:tst:38596"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38308"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38633"/>
            <criterion comment="firefox is earlier than 0:3.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38370"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.22-2.el5_3" test_ref="oval:org.mitre.oval:tst:38801"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38462"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1011" version="2" class="vulnerability">
      <metadata>
        <title>Windows 2000 IIS5 WebDAV Denial of Service</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1182"/>
        <description>IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (crash) via malformed WebDAV requests that cause a large amount of memory to be assigned.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-12T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-01-11T12:00:00.000-04:00" comment="modified wft-330 - changed the version of msw3prt.dll to test against from 5.5.2195.58075 to 5.0.2195.5807">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-01-20T01:18:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-02-16T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="IIS major version equals 5" negate="false" test_ref="oval:org.mitre.oval:tst:3081"/>
        <criterion comment="IIS minor version equals 0" negate="false" test_ref="oval:org.mitre.oval:tst:3098"/>
        <criterion comment="File %windir%\System32\msw3prt.dll is less than 5.0.2195.5807" negate="false" test_ref="oval:org.mitre.oval:tst:1447"/>
        <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
        <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10109" version="5" class="vulnerability">
      <metadata>
        <title>The (1) SProcRecordCreateContext and (2) SProcRecordRegisterClients functions in the Record extension and the (3) SProcSecurityGenerateAuthorization function in the Security extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via requests with crafted length values that specify an arbitrary number of bytes to be swapped on the heap, which triggers heap corruption.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1377" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1377"/>
        <description>The (1) SProcRecordCreateContext and (2) SProcRecordRegisterClients functions in the Record extension and the (3) SProcSecurityGenerateAuthorization function in the Security extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via requests with crafted length values that specify an arbitrary number of bytes to be swapped on the heap, which triggers heap corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:23.762-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:55.010-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:58.853-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10109 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:48.312-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:44.981-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36946"/>
            <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36579"/>
            <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36881"/>
            <criterion comment="XFree86-libs is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36895"/>
            <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36542"/>
            <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36866"/>
            <criterion comment="XFree86-twm is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36934"/>
            <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36951"/>
            <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36973"/>
            <criterion comment="XFree86-doc is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36756"/>
            <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36632"/>
            <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36469"/>
            <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36368"/>
            <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36851"/>
            <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36740"/>
            <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36985"/>
            <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36805"/>
            <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36754"/>
            <criterion comment="XFree86-xdm is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36734"/>
            <criterion comment="XFree86-sdk is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36918"/>
            <criterion comment="XFree86 is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36499"/>
            <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36402"/>
            <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36931"/>
            <criterion comment="XFree86-xfs is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36752"/>
            <criterion comment="XFree86-tools is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36976"/>
            <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36867"/>
            <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36115"/>
            <criterion comment="XFree86-xauth is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36794"/>
            <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36943"/>
            <criterion comment="XFree86-devel is earlier than 0:4.3.0-128.EL" test_ref="oval:org.mitre.oval:tst:36905"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36908"/>
            <criterion comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36685"/>
            <criterion comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36662"/>
            <criterion comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36309"/>
            <criterion comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36944"/>
            <criterion comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36641"/>
            <criterion comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36607"/>
            <criterion comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36651"/>
            <criterion comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36977"/>
            <criterion comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36939"/>
            <criterion comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36385"/>
            <criterion comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36979"/>
            <criterion comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36933"/>
            <criterion comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36742"/>
            <criterion comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36873"/>
            <criterion comment="xorg-x11 is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36932"/>
            <criterion comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:35995"/>
            <criterion comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.33.0.4" test_ref="oval:org.mitre.oval:tst:36941"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-server-randr-source is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:37018"/>
            <criterion comment="xorg-x11-server-Xnest is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36836"/>
            <criterion comment="xorg-x11-server-Xvfb is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36063"/>
            <criterion comment="xorg-x11-server-Xdmx is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36029"/>
            <criterion comment="xorg-x11-server is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36986"/>
            <criterion comment="xorg-x11-server-sdk is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36380"/>
            <criterion comment="xorg-x11-server-Xephyr is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36055"/>
            <criterion comment="xorg-x11-server-Xorg is earlier than 0:1.1.1-48.41.el5_2.1" test_ref="oval:org.mitre.oval:tst:36359"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10108" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 2.0.0.5 and Thunderbird before 2.0.0.5 allow remote attackers to cause a denial of service (crash) via unspecified vectors that trigger memory corruption.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3734" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3734"/>
        <description>Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 2.0.0.5 and Thunderbird before 2.0.0.5 allow remote attackers to cause a denial of service (crash) via unspecified vectors that trigger memory corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:32.219-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:54.390-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:58.194-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10108 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:29:47.406-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:43.819-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:33986"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34827"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34839"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34762"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34814"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34694"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34925"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34684"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34723"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34747"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34968"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34971"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-0.3.el4" test_ref="oval:org.mitre.oval:tst:34888"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34868"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34492"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34775"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.3.el4" test_ref="oval:org.mitre.oval:tst:34828"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34981"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34335"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34957"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34550"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34608"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-3.el5" test_ref="oval:org.mitre.oval:tst:34810"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-3.el5" test_ref="oval:org.mitre.oval:tst:34667"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-3.el5" test_ref="oval:org.mitre.oval:tst:34869"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10107" version="5" class="vulnerability">
      <metadata>
        <title>Session fixation vulnerability in SquirrelMail before 1.4.18 allows remote attackers to hijack web sessions via a crafted cookie.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1580" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1580"/>
        <description>Session fixation vulnerability in SquirrelMail before 1.4.18 allows remote attackers to hijack web sessions via a crafted cookie.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:45.804-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:54.092-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:57.836-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10107 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:29:44.228-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:43.268-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-9.el3" test_ref="oval:org.mitre.oval:tst:37673"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-5.el4_7.3" test_ref="oval:org.mitre.oval:tst:38208"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="squirrelmail is earlier than 0:1.4.8-5.el5_2.3" test_ref="oval:org.mitre.oval:tst:38252"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10106" version="5" class="vulnerability">
      <metadata>
        <title>The browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to (1) nsAsyncInstantiateEvent::Run, (2) nsStyleContext::Destroy, (3) nsComputedDOMStyle::GetWidth, (4) the xslt_attributeset_ImportSameName.html test case for the XSLT stylesheet compiler, (5) nsXULDocument::SynchronizeBroadcastListener, (6) IsBindingAncestor, (7) PL_DHashTableOperate and nsEditor::EndUpdateViewBatch, and (8) gfxSkipCharsIterator::SetOffsets, and other vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1302" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1302"/>
        <description>The browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to (1) nsAsyncInstantiateEvent::Run, (2) nsStyleContext::Destroy, (3) nsComputedDOMStyle::GetWidth, (4) the xslt_attributeset_ImportSameName.html test case for the XSLT stylesheet compiler, (5) nsXULDocument::SynchronizeBroadcastListener, (6) IsBindingAncestor, (7) PL_DHashTableOperate and nsEditor::EndUpdateViewBatch, and (8) gfxSkipCharsIterator::SetOffsets, and other vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:58.765-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:53.738-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:57.484-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10106 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:18:00.939-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:24:25.942-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:42.502-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.9-1.el4" test_ref="oval:org.mitre.oval:tst:38379"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38308"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38633"/>
            <criterion comment="firefox is earlier than 0:3.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38370"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.9-1.el5" test_ref="oval:org.mitre.oval:tst:38462"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10105" version="5" class="vulnerability">
      <metadata>
        <title>MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-4227" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4227"/>
        <description>MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:48.628-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:53.489-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:57.200-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10105 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:26.822-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:41.683-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mysql is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36197"/>
          <criterion comment="mysql-devel is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36749"/>
          <criterion comment="mysql-test is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36750"/>
          <criterion comment="mysql-bench is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36831"/>
          <criterion comment="mysql-server is earlier than 0:5.0.45-7.el5" test_ref="oval:org.mitre.oval:tst:36646"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10104" version="5" class="vulnerability">
      <metadata>
        <title>Xiph.org libvorbis 1.2.0 and earlier does not properly handle a zero value for codebook.dim, which allows remote attackers to cause a denial of service (crash or infinite loop) or trigger an integer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1419" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1419"/>
        <description>Xiph.org libvorbis 1.2.0 and earlier does not properly handle a zero value for codebook.dim, which allows remote attackers to cause a denial of service (crash or infinite loop) or trigger an integer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:19.247-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:53.164-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:56.798-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10104 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:29:37.254-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:40.997-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libvorbis-devel is earlier than 1:1.0-10.el3" test_ref="oval:org.mitre.oval:tst:36659"/>
            <criterion comment="libvorbis is earlier than 1:1.0-10.el3" test_ref="oval:org.mitre.oval:tst:36699"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libvorbis-devel is earlier than 0:1.1.0-3.el4_6.1" test_ref="oval:org.mitre.oval:tst:36519"/>
            <criterion comment="libvorbis is earlier than 0:1.1.0-3.el4_6.1" test_ref="oval:org.mitre.oval:tst:36387"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libvorbis-devel is earlier than 0:1.1.2-3.el5_1.2" test_ref="oval:org.mitre.oval:tst:36439"/>
            <criterion comment="libvorbis is earlier than 0:1.1.2-3.el5_1.2" test_ref="oval:org.mitre.oval:tst:36710"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10103" version="5" class="vulnerability">
      <metadata>
        <title>The DCERPC/NT dissector in Wireshark 0.10.10 through 1.0.9 and 1.2.0 through 1.2.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a file that records a malformed packet trace.  NOTE: some of these details are obtained from third party information.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3550" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3550"/>
        <description>The DCERPC/NT dissector in Wireshark 0.10.10 through 1.0.9 and 1.2.0 through 1.2.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a file that records a malformed packet trace.  NOTE: some of these details are obtained from third party information.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:31.950-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:52.786-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:56.447-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10103 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:29:57.762-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:40.389-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.11-EL3.6" test_ref="oval:org.mitre.oval:tst:39600"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.11-EL3.6" test_ref="oval:org.mitre.oval:tst:40430"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.11-1.el4_8.5" test_ref="oval:org.mitre.oval:tst:40437"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.11-1.el4_8.5" test_ref="oval:org.mitre.oval:tst:39877"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="wireshark is earlier than 0:1.0.11-1.el5_5.5" test_ref="oval:org.mitre.oval:tst:40351"/>
            <criterion comment="wireshark-gnome is earlier than 0:1.0.11-1.el5_5.5" test_ref="oval:org.mitre.oval:tst:40208"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10102" version="5" class="vulnerability">
      <metadata>
        <title>The selinux_ptrace logic in hooks.c in SELinux for Linux 2.6.6 allows local users with ptrace permissions to change the tracer SID to an SID of another process.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1052" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1052"/>
        <description>The selinux_ptrace logic in hooks.c in SELinux for Linux 2.6.6 allows local users with ptrace permissions to change the tracer SID to an SID of another process.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:42.455-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:52.492-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:56.054-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10102 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:16:50.409-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:39.606-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32335"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32833"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32825"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32836"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32736"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:31931"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32361"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32793"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32795"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10101" version="5" class="vulnerability">
      <metadata>
        <title>mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5191" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5191"/>
        <description>mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:08.924-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:52.175-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:55.661-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10101 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:29:53.641-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:38.804-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="util-linux is earlier than 0:2.11y-31.24" test_ref="oval:org.mitre.oval:tst:35348"/>
            <criterion comment="mount is earlier than 0:2.11y-31.24" test_ref="oval:org.mitre.oval:tst:35286"/>
            <criterion comment="losetup is earlier than 0:2.11y-31.24" test_ref="oval:org.mitre.oval:tst:35312"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="util-linux is earlier than 0:2.12a-17.el4_6.1" test_ref="oval:org.mitre.oval:tst:35458"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="util-linux is earlier than 0:2.13-0.45.el5_1.1" test_ref="oval:org.mitre.oval:tst:35243"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10100" version="5" class="vulnerability">
      <metadata>
        <title>Format string vulnerability in the write_html function in calendar/gui/e-cal-component-memo-preview.c in Evolution Shared Memo 2.8.2.1, and possibly earlier versions, allows user-assisted remote attackers to execute arbitrary code via format specifiers in the categories of a crafted shared memo.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1002" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1002"/>
        <description>Format string vulnerability in the write_html function in calendar/gui/e-cal-component-memo-preview.c in Evolution Shared Memo 2.8.2.1, and possibly earlier versions, allows user-assisted remote attackers to execute arbitrary code via format specifiers in the categories of a crafted shared memo.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:01.810-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:51.875-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:55.406-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10100 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:47.828-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:38.403-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="evolution is earlier than 0:2.8.0-33.0.1.el5" test_ref="oval:org.mitre.oval:tst:34004"/>
          <criterion comment="evolution-devel is earlier than 0:2.8.0-33.0.1.el5" test_ref="oval:org.mitre.oval:tst:33858"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1010" version="1" class="vulnerability">
      <metadata>
        <title>Microsoft Outlook Express v6.0,SP1 MHTML URL Processing Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 98</platform>
          <platform>Microsoft Windows ME</platform>
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Outlook Express</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0380"/>
        <description>The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help (CHM) file that references the InfoTech Storage (ITS) protocol handlers such as (1) ms-its, (2) ms-itss, (3) its, or (4) mk:@MSITStore, aka the "MHTML URL Processing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2004-04-13T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Andrew Buttner</contributor>
            </submitted>
            <status_change date="2004-05-05T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Microsoft Outlook Express 6 SP1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1355"/>
        <criterion comment="the version of inetcomm.dll is less than 6.00.2800.1409" negate="false" test_ref="oval:org.mitre.oval:tst:1319"/>
        <criterion comment="the patch kb837009 is installed (installed components key)" negate="true" test_ref="oval:org.mitre.oval:tst:1512"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:101" version="2" class="vulnerability">
      <metadata>
        <title>Ethereal 0-Length Buffer Size Vulnerability in tvb_get_nstring0()</title>
        <affected family="unix">
          <platform>Red Hat Linux 9</platform>
          <product>Ethereal</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0431" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0431"/>
        <description>The tvb_get_nstringz0 function in Ethereal 0.9.12 and earlier does not properly handle a zero-length buffer size, with unknown consequences.</description>
        <oval_repository>
          <dates>
            <submitted date="2003-08-29T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-03-25T12:00:00.000-04:00">INTERIM</status_change>
            <modified date="2004-05-05T12:00:00.000-04:00" comment="Corrected syntax errors in sql verion of the definition.">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </modified>
            <status_change date="2004-05-25T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected regex to match only reasonable values for machine class. Implemented by Jon Baker of the MITRE Corporation." date="2007-04-10T15:39:00.888-04:00">
              <contributor organization="Maitreya Security">Thomas R. Jones</contributor>
            </modified>
            <status_change date="2007-04-10T15:41:32.254-04:00">INTERIM</status_change>
            <status_change date="2007-04-25T19:52:11.910-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="Red Hat 9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:3153"/>
        <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:3152"/>
        <criteria operator="OR" comment="Vulnerable Config">
          <criterion comment="ethereal version is less than 0.9.13-1.90.1" negate="false" test_ref="oval:org.mitre.oval:tst:2985"/>
          <criterion comment="ethereal-gnome version is less than 0.9.13-1.90.1" negate="false" test_ref="oval:org.mitre.oval:tst:2984"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10099" version="5" class="vulnerability">
      <metadata>
        <title>The (1) psp (aka .tub), (2) bmp, (3) pcx, and (4) psd plugins in gimp allow user-assisted remote attackers to cause a denial of service (crash or memory consumption) via crafted image files, as discovered using the fusil fuzzing tool.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3741" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3741"/>
        <description>The (1) psp (aka .tub), (2) bmp, (3) pcx, and (4) psd plugins in gimp allow user-assisted remote attackers to cause a denial of service (crash or memory consumption) via crafted image files, as discovered using the fusil fuzzing tool.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:47.904-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:51.540-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:54.962-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10099 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:35.920-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:37.390-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gimp-devel is earlier than 0:1.2.3-20.9.el3" test_ref="oval:org.mitre.oval:tst:34383"/>
            <criterion comment="gimp-perl is earlier than 0:1.2.3-20.9.el3" test_ref="oval:org.mitre.oval:tst:34552"/>
            <criterion comment="gimp is earlier than 0:1.2.3-20.9.el3" test_ref="oval:org.mitre.oval:tst:34504"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gimp-devel is earlier than 0:2.0.5-7.0.7.el4" test_ref="oval:org.mitre.oval:tst:34679"/>
            <criterion comment="gimp is earlier than 0:2.0.5-7.0.7.el4" test_ref="oval:org.mitre.oval:tst:34499"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gimp-libs is earlier than 0:2.2.13-2.0.7.el5" test_ref="oval:org.mitre.oval:tst:34469"/>
            <criterion comment="gimp-devel is earlier than 0:2.2.13-2.0.7.el5" test_ref="oval:org.mitre.oval:tst:34574"/>
            <criterion comment="gimp is earlier than 0:2.2.13-2.0.7.el5" test_ref="oval:org.mitre.oval:tst:34697"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10098" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the ReadImage function in tkImgGIF.c in Tk (Tcl/Tk) before 8.5.1 allows remote attackers to execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0553" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0553"/>
        <description>Stack-based buffer overflow in the ReadImage function in tkImgGIF.c in Tk (Tcl/Tk) before 8.5.1 allows remote attackers to execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:48.559-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:51.087-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:54.479-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10098 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:31:44.612-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:36.310-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tix is earlier than 0:8.1.4-92.8" test_ref="oval:org.mitre.oval:tst:36200"/>
            <criterion comment="tclx is earlier than 0:8.3-92.8" test_ref="oval:org.mitre.oval:tst:35800"/>
            <criterion comment="tcl-devel is earlier than 0:8.3.5-92.8" test_ref="oval:org.mitre.oval:tst:35961"/>
            <criterion comment="expect-devel is earlier than 0:5.38.0-92.8" test_ref="oval:org.mitre.oval:tst:36175"/>
            <criterion comment="tcltk is earlier than 0:8.3.5-92.8" test_ref="oval:org.mitre.oval:tst:36169"/>
            <criterion comment="itcl is earlier than 0:3.2-92.8" test_ref="oval:org.mitre.oval:tst:35879"/>
            <criterion comment="tcl is earlier than 0:8.3.5-92.8" test_ref="oval:org.mitre.oval:tst:36313"/>
            <criterion comment="expect is earlier than 0:5.38.0-92.8" test_ref="oval:org.mitre.oval:tst:35369"/>
            <criterion comment="tk-devel is earlier than 0:8.3.5-92.8" test_ref="oval:org.mitre.oval:tst:36316"/>
            <criterion comment="tk is earlier than 0:8.3.5-92.8" test_ref="oval:org.mitre.oval:tst:36018"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tk-devel is earlier than 0:8.4.7-3.el4_6.1" test_ref="oval:org.mitre.oval:tst:36356"/>
            <criterion comment="tk is earlier than 0:8.4.7-3.el4_6.1" test_ref="oval:org.mitre.oval:tst:36225"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tk-devel is earlier than 0:8.4.13-5.el5_1.1" test_ref="oval:org.mitre.oval:tst:36375"/>
            <criterion comment="tk is earlier than 0:8.4.13-5.el5_1.1" test_ref="oval:org.mitre.oval:tst:35860"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10097" version="5" class="vulnerability">
      <metadata>
        <title>The Q.931 dissector in Ethereal before 0.10.0, and Tethereal, allows remote attackers to cause a denial of service (crash) via a malformed Q.931, which triggers a null dereference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-1013" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1013"/>
        <description>The Q.931 dissector in Ethereal before 0.10.0, and Tethereal, allows remote attackers to cause a denial of service (crash) via a malformed Q.931, which triggers a null dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:04.399-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:50.821-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:54.232-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10097 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:33.896-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:35.809-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="ethereal-gnome is earlier than 0:0.10.0a-0.30E.1" test_ref="oval:org.mitre.oval:tst:29895"/>
          <criterion comment="ethereal is earlier than 0:0.10.0a-0.30E.1" test_ref="oval:org.mitre.oval:tst:30227"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10096" version="5" class="vulnerability">
      <metadata>
        <title>rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-2655" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2655"/>
        <description>rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:44.574-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:50.628-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:53.966-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10096 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:59.824-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:35.406-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="xscreensaver is earlier than 1:4.10-20" test_ref="oval:org.mitre.oval:tst:32246"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10095" version="5" class="vulnerability">
      <metadata>
        <title>The atm_get_addr function in addr.c for Linux kernel 2.6.10 and 2.6.11 before 2.6.11-rc4 may allow local users to trigger a buffer overflow via negative arguments.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0531" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0531"/>
        <description>The atm_get_addr function in addr.c for Linux kernel 2.6.10 and 2.6.11 before 2.6.11-rc4 may allow local users to trigger a buffer overflow via negative arguments.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:34.946-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:50.349-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:53.645-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10095 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:16:40.461-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:34.845-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31545"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31539"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31661"/>
          <criterion comment="kernel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31482"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31112"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31605"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-5.0.5.EL" test_ref="oval:org.mitre.oval:tst:31330"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10094" version="5" class="vulnerability">
      <metadata>
        <title>The png_handle_tRNS function in pngrutil.c in libpng before 1.0.25 and 1.2.x before 1.2.17 allows remote attackers to cause a denial of service (application crash) via a grayscale PNG image with a bad tRNS chunk CRC value.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2445" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2445"/>
        <description>The png_handle_tRNS function in pngrutil.c in libpng before 1.0.25 and 1.2.x before 1.2.17 allows remote attackers to cause a denial of service (application crash) via a grayscale PNG image with a bad tRNS chunk CRC value.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:47.612-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:49.933-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:53.201-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10094 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:38.643-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:34.142-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libpng10-devel is earlier than 0:1.0.13-17" test_ref="oval:org.mitre.oval:tst:34276"/>
            <criterion comment="libpng-devel is earlier than 2:1.2.2-27" test_ref="oval:org.mitre.oval:tst:34234"/>
            <criterion comment="libpng is earlier than 2:1.2.2-27" test_ref="oval:org.mitre.oval:tst:34297"/>
            <criterion comment="libpng10 is earlier than 0:1.0.13-17" test_ref="oval:org.mitre.oval:tst:34200"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libpng10-devel is earlier than 0:1.0.16-3" test_ref="oval:org.mitre.oval:tst:34051"/>
            <criterion comment="libpng-devel is earlier than 2:1.2.7-3.el4" test_ref="oval:org.mitre.oval:tst:33581"/>
            <criterion comment="libpng is earlier than 2:1.2.7-3.el4" test_ref="oval:org.mitre.oval:tst:34237"/>
            <criterion comment="libpng10 is earlier than 0:1.0.16-3" test_ref="oval:org.mitre.oval:tst:34285"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libpng-devel is earlier than 2:1.2.10-7.0.2" test_ref="oval:org.mitre.oval:tst:33339"/>
            <criterion comment="libpng is earlier than 2:1.2.10-7.0.2" test_ref="oval:org.mitre.oval:tst:33778"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10093" version="5" class="vulnerability">
      <metadata>
        <title>fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown impact, related to LOOKUP_FOLLOW.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1088"/>
        <description>fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown impact, related to LOOKUP_FOLLOW.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:08.634-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:49.559-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:52.708-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10093 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:35.616-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:33.237-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40501"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40283"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40807"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40842"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40793"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40732"/>
          <criterion comment="kernel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40830"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40349"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:39978"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:39896"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40791"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-194.8.1.el5" test_ref="oval:org.mitre.oval:tst:40580"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10092" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in daemon/slave.c in gdm before 2.14.1 allows local users to gain privileges via a symlink attack when gdm performs chown and chgrp operations on the .ICEauthority file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1057" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1057"/>
        <description>Race condition in daemon/slave.c in gdm before 2.14.1 allows local users to gain privileges via a symlink attack when gdm performs chown and chgrp operations on the .ICEauthority file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:39.488-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:49.334-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:52.478-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10092 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:02.096-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:32.622-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="gdm is earlier than 1:2.6.0.5-7.rhel4.15" test_ref="oval:org.mitre.oval:tst:34131"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10091" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4020"/>
        <description>Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:37.407-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:48.622-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:51.841-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10091 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:16:43.338-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:31.508-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39984"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:40053"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39873"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39932"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39894"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39858"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:40016"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39833"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39555"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:39325"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.20.EL" test_ref="oval:org.mitre.oval:tst:40011"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40050"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39464"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39090"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40063"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39443"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39703"/>
            <criterion comment="kernel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39080"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39862"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40057"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40029"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:39849"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-164.11.1.el5" test_ref="oval:org.mitre.oval:tst:40039"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10090" version="5" class="vulnerability">
      <metadata>
        <title>Untrusted search path vulnerability in PostgreSQL before 7.3.19, 7.4.x before 7.4.17, 8.0.x before 8.0.13, 8.1.x before 8.1.9, and 8.2.x before 8.2.4 allows remote authenticated users, when permitted to call a SECURITY DEFINER function, to gain the privileges of the function owner, related to "search_path settings."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2138" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2138"/>
        <description>Untrusted search path vulnerability in PostgreSQL before 7.3.19, 7.4.x before 7.4.17, 8.0.x before 8.0.13, 8.1.x before 8.1.9, and 8.2.x before 8.2.4 allows remote authenticated users, when permitted to call a SECURITY DEFINER function, to gain the privileges of the function owner, related to "search_path settings."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:05.812-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:47.916-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:51.117-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10090 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:24:00.823-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:30:54.924-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:30.379-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="rh-postgresql-devel is earlier than 0:7.3.19-1" test_ref="oval:org.mitre.oval:tst:34213"/>
            <criterion comment="rh-postgresql-server is earlier than 0:7.3.19-1" test_ref="oval:org.mitre.oval:tst:33483"/>
            <criterion comment="rh-postgresql-python is earlier than 0:7.3.19-1" test_ref="oval:org.mitre.oval:tst:34198"/>
            <criterion comment="rh-postgresql-libs is earlier than 0:7.3.19-1" test_ref="oval:org.mitre.oval:tst:33800"/>
            <criterion comment="rh-postgresql-docs is earlier than 0:7.3.19-1" test_ref="oval:org.mitre.oval:tst:33910"/>
            <criterion comment="rh-postgresql-test is earlier than 0:7.3.19-1" test_ref="oval:org.mitre.oval:tst:33888"/>
            <criterion comment="rh-postgresql-pl is earlier than 0:7.3.19-1" test_ref="oval:org.mitre.oval:tst:34087"/>
            <criterion comment="rh-postgresql-tcl is earlier than 0:7.3.19-1" test_ref="oval:org.mitre.oval:tst:33360"/>
            <criterion comment="rh-postgresql is earlier than 0:7.3.19-1" test_ref="oval:org.mitre.oval:tst:34102"/>
            <criterion comment="rh-postgresql-contrib is earlier than 0:7.3.19-1" test_ref="oval:org.mitre.oval:tst:34206"/>
            <criterion comment="rh-postgresql-jdbc is earlier than 0:7.3.19-1" test_ref="oval:org.mitre.oval:tst:34088"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:7.4.17-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33802"/>
            <criterion comment="postgresql-docs is earlier than 0:7.4.17-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:34148"/>
            <criterion comment="postgresql-pl is earlier than 0:7.4.17-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:34094"/>
            <criterion comment="postgresql-tcl is earlier than 0:7.4.17-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:34192"/>
            <criterion comment="postgresql-libs is earlier than 0:7.4.17-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33794"/>
            <criterion comment="postgresql-contrib is earlier than 0:7.4.17-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:34009"/>
            <criterion comment="postgresql-python is earlier than 0:7.4.17-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33849"/>
            <criterion comment="postgresql-test is earlier than 0:7.4.17-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33803"/>
            <criterion comment="postgresql-jdbc is earlier than 0:7.4.17-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33753"/>
            <criterion comment="postgresql-server is earlier than 0:7.4.17-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:33825"/>
            <criterion comment="postgresql-devel is earlier than 0:7.4.17-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:34083"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:8.1.9-1.el5" test_ref="oval:org.mitre.oval:tst:34194"/>
            <criterion comment="postgresql-docs is earlier than 0:8.1.9-1.el5" test_ref="oval:org.mitre.oval:tst:33565"/>
            <criterion comment="postgresql-pl is earlier than 0:8.1.9-1.el5" test_ref="oval:org.mitre.oval:tst:33870"/>
            <criterion comment="postgresql-tcl is earlier than 0:8.1.9-1.el5" test_ref="oval:org.mitre.oval:tst:34119"/>
            <criterion comment="postgresql-libs is earlier than 0:8.1.9-1.el5" test_ref="oval:org.mitre.oval:tst:33898"/>
            <criterion comment="postgresql-contrib is earlier than 0:8.1.9-1.el5" test_ref="oval:org.mitre.oval:tst:34158"/>
            <criterion comment="postgresql-python is earlier than 0:8.1.9-1.el5" test_ref="oval:org.mitre.oval:tst:33763"/>
            <criterion comment="postgresql-test is earlier than 0:8.1.9-1.el5" test_ref="oval:org.mitre.oval:tst:33555"/>
            <criterion comment="postgresql-server is earlier than 0:8.1.9-1.el5" test_ref="oval:org.mitre.oval:tst:34165"/>
            <criterion comment="postgresql-devel is earlier than 0:8.1.9-1.el5" test_ref="oval:org.mitre.oval:tst:34174"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1009" version="2" class="vulnerability">
      <metadata>
        <title>Windows XP IIS5 WebDAV Denial of Service</title>
        <affected family="windows">
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Information Server (IIS)</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1182"/>
        <description>IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (crash) via malformed WebDAV requests that cause a large amount of memory to be assigned.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-05-19T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </submitted>
            <status_change date="2004-06-16T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-06-30T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Changed tst:1356 to use obj:496 was introduced to properly look for w3svc.dll in System32/inetsrv." date="2007-07-18T12:59:00.316-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-07-18T13:02:43.656-04:00">INTERIM</status_change>
            <status_change date="2007-08-02T14:47:14.777-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criterion comment="IIS major version equals 5" negate="false" test_ref="oval:org.mitre.oval:tst:3081"/>
        <criterion comment="IIS 5.1 Minor Version" negate="false" test_ref="oval:org.mitre.oval:tst:1357"/>
        <criterion comment="File %windir%\System32\w3svc.dll is less than 5.1.2600.1125" negate="false" test_ref="oval:org.mitre.oval:tst:1356"/>
        <criterion comment="Patch Q327696 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3094"/>
        <criterion comment="Patch Q811114 Installed" negate="true" test_ref="oval:org.mitre.oval:tst:3093"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10089" version="5" class="vulnerability">
      <metadata>
        <title>parse-packet.c in GnuPG (gpg) 1.4.3 and 1.9.20, and earlier versions, allows remote attackers to cause a denial of service (gpg crash) and possibly overwrite memory via a message packet with a large length (long user ID string), which could lead to an integer overflow, as demonstrated using the --no-armor option.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3082" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3082"/>
        <description>parse-packet.c in GnuPG (gpg) 1.4.3 and 1.9.20, and earlier versions, allows remote attackers to cause a denial of service (gpg crash) and possibly overwrite memory via a message packet with a large length (long user ID string), which could lead to an integer overflow, as demonstrated using the --no-armor option.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:27.799-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:47.645-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:50.778-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10089 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:53.345-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:29.562-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gnupg is earlier than 0:1.2.1-16" test_ref="oval:org.mitre.oval:tst:32661"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gnupg is earlier than 0:1.2.6-5" test_ref="oval:org.mitre.oval:tst:31825"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10088" version="5" class="vulnerability">
      <metadata>
        <title>The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555"/>
        <description>The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:23.395-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:46.760-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:49.604-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10088 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:31.677-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:28.016-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.7a-33.26" test_ref="oval:org.mitre.oval:tst:40028"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.7a-33.26" test_ref="oval:org.mitre.oval:tst:40271"/>
            <criterion comment="openssl is earlier than 0:0.9.7a-33.26" test_ref="oval:org.mitre.oval:tst:40261"/>
            <criterion comment="httpd-devel is earlier than 0:2.0.46-77.ent" test_ref="oval:org.mitre.oval:tst:39637"/>
            <criterion comment="mod_ssl is earlier than 0:2.0.46-77.ent" test_ref="oval:org.mitre.oval:tst:39671"/>
            <criterion comment="httpd is earlier than 0:2.0.46-77.ent" test_ref="oval:org.mitre.oval:tst:39611"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl-perl is earlier than 0:0.9.7a-43.17.el4_8.5" test_ref="oval:org.mitre.oval:tst:39739"/>
            <criterion comment="httpd-suexec is earlier than 0:2.0.52-41.ent.6" test_ref="oval:org.mitre.oval:tst:39448"/>
            <criterion comment="httpd-manual is earlier than 0:2.0.52-41.ent.6" test_ref="oval:org.mitre.oval:tst:39501"/>
            <criterion comment="nspr is earlier than 0:4.8.4-1.1.el4_8" test_ref="oval:org.mitre.oval:tst:40338"/>
            <criterion comment="mod_ssl is earlier than 0:2.0.52-41.ent.6" test_ref="oval:org.mitre.oval:tst:39716"/>
            <criterion comment="nss is earlier than 0:3.12.6-1.el4_8" test_ref="oval:org.mitre.oval:tst:40347"/>
            <criterion comment="nspr-devel is earlier than 0:4.8.4-1.1.el4_8" test_ref="oval:org.mitre.oval:tst:40339"/>
            <criterion comment="httpd is earlier than 0:2.0.52-41.ent.6" test_ref="oval:org.mitre.oval:tst:39551"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.7a-43.17.el4_8.5" test_ref="oval:org.mitre.oval:tst:40358"/>
            <criterion comment="gnutls is earlier than 0:1.0.20-4.el4_8.7" test_ref="oval:org.mitre.oval:tst:39971"/>
            <criterion comment="openssl is earlier than 0:0.9.7a-43.17.el4_8.5" test_ref="oval:org.mitre.oval:tst:39943"/>
            <criterion comment="httpd-devel is earlier than 0:2.0.52-41.ent.6" test_ref="oval:org.mitre.oval:tst:38802"/>
            <criterion comment="nss-devel is earlier than 0:3.12.6-1.el4_8" test_ref="oval:org.mitre.oval:tst:40109"/>
            <criterion comment="gnutls-devel is earlier than 0:1.0.20-4.el4_8.7" test_ref="oval:org.mitre.oval:tst:40233"/>
            <criterion comment="nss-tools is earlier than 0:3.12.6-1.el4_8" test_ref="oval:org.mitre.oval:tst:40356"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openssl097a is earlier than 0:0.9.7a-9.el5_4.2" test_ref="oval:org.mitre.oval:tst:39887"/>
            <criterion comment="openssl-perl is earlier than 0:0.9.8e-12.el5_4.6" test_ref="oval:org.mitre.oval:tst:39952"/>
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.6-1.el5_4" test_ref="oval:org.mitre.oval:tst:40254"/>
            <criterion comment="httpd-manual is earlier than 0:2.2.3-31.el5_4.2" test_ref="oval:org.mitre.oval:tst:39267"/>
            <criterion comment="nspr-devel is earlier than 0:4.8.4-1.el5_4" test_ref="oval:org.mitre.oval:tst:40244"/>
            <criterion comment="gnutls is earlier than 0:1.4.1-3.el5_4.8" test_ref="oval:org.mitre.oval:tst:40268"/>
            <criterion comment="openssl is earlier than 0:0.9.8e-12.el5_4.6" test_ref="oval:org.mitre.oval:tst:40102"/>
            <criterion comment="httpd-devel is earlier than 0:2.2.3-31.el5_4.2" test_ref="oval:org.mitre.oval:tst:39640"/>
            <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40225"/>
            <criterion comment="mod_ssl is earlier than 0:2.2.3-31.el5_4.2" test_ref="oval:org.mitre.oval:tst:39613"/>
            <criterion comment="nspr is earlier than 0:4.8.4-1.el5_4" test_ref="oval:org.mitre.oval:tst:39712"/>
            <criterion comment="nss is earlier than 0:3.12.6-1.el5_4" test_ref="oval:org.mitre.oval:tst:39906"/>
            <criterion comment="httpd is earlier than 0:2.2.3-31.el5_4.2" test_ref="oval:org.mitre.oval:tst:39756"/>
            <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40307"/>
            <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40023"/>
            <criterion comment="openssl-devel is earlier than 0:0.9.8e-12.el5_4.6" test_ref="oval:org.mitre.oval:tst:40361"/>
            <criterion comment="gnutls-devel is earlier than 0:1.4.1-3.el5_4.8" test_ref="oval:org.mitre.oval:tst:40162"/>
            <criterion comment="nss-devel is earlier than 0:3.12.6-1.el5_4" test_ref="oval:org.mitre.oval:tst:40177"/>
            <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39445"/>
            <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39831"/>
            <criterion comment="nss-tools is earlier than 0:3.12.6-1.el5_4" test_ref="oval:org.mitre.oval:tst:39782"/>
            <criterion comment="gnutls-utils is earlier than 0:1.4.1-3.el5_4.8" test_ref="oval:org.mitre.oval:tst:40073"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10087" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unknown vectors related to the layout engine.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2798" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2798"/>
        <description>Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unknown vectors related to the layout engine.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:37.348-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:46.084-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:48.863-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10087 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:56.901-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:26.808-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37286"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37033"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37126"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37105"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37271"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37279"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37060"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:37189"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:36476"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.20.el3" test_ref="oval:org.mitre.oval:tst:36916"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37236"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37192"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-14.el4" test_ref="oval:org.mitre.oval:tst:36999"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36886"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37331"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36365"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.19.el4" test_ref="oval:org.mitre.oval:tst:37174"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37226"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36766"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37320"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:36826"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:org.mitre.oval:tst:37274"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.12-17.el5" test_ref="oval:org.mitre.oval:tst:37107"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:37351"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.16-1.el5" test_ref="oval:org.mitre.oval:tst:37363"/>
            <criterion comment="xulrunner is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:36984"/>
            <criterion comment="devhelp is earlier than 0:0.12-17.el5" test_ref="oval:org.mitre.oval:tst:37234"/>
            <criterion comment="yelp is earlier than 0:2.16.0-19.el5" test_ref="oval:org.mitre.oval:tst:37291"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9-1.el5" test_ref="oval:org.mitre.oval:tst:36436"/>
            <criterion comment="firefox is earlier than 0:3.0-2.el5" test_ref="oval:org.mitre.oval:tst:36814"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10086" version="5" class="vulnerability">
      <metadata>
        <title>The child frames in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 inherit the default charset from the parent window, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated using the UTF-7 character set.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0996" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0996"/>
        <description>The child frames in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 inherit the default charset from the parent window, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated using the UTF-7 character set.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:20.603-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:45.394-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:48.141-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10086 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:22.107-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:25.271-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33391"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33688"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33675"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33724"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33510"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33409"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33467"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33658"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33649"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33381"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:32760"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33554"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33648"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.10-0.1.el4" test_ref="oval:org.mitre.oval:tst:32765"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33712"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33705"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33379"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:33400"/>
            <criterion comment="firefox is earlier than 0:1.5.0.10-0.1.el4" test_ref="oval:org.mitre.oval:tst:33759"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33678"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33695"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33697"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33244"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33645"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.10-2.el5" test_ref="oval:org.mitre.oval:tst:33461"/>
            <criterion comment="yelp is earlier than 0:2.16.0-14.0.1.el5" test_ref="oval:org.mitre.oval:tst:33761"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-10.0.1.el5" test_ref="oval:org.mitre.oval:tst:33744"/>
            <criterion comment="devhelp is earlier than 0:0.12-10.0.1.el5" test_ref="oval:org.mitre.oval:tst:33415"/>
            <criterion comment="firefox is earlier than 0:1.5.0.10-2.el5" test_ref="oval:org.mitre.oval:tst:33616"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.10-1.el5" test_ref="oval:org.mitre.oval:tst:33493"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10085" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the version bundled with Apple Mac OS X 10.5.2, when printer sharing is enabled, allows remote attackers to execute arbitrary code via crafted search expressions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0047" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0047"/>
        <description>Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the version bundled with Apple Mac OS X 10.5.2, when printer sharing is enabled, allows remote attackers to execute arbitrary code via crafted search expressions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:21.113-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:45.142-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:47.793-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10085 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:47:08.676-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:24.667-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="cups-lpd is earlier than 1:1.2.4-11.14.el5_1.6" test_ref="oval:org.mitre.oval:tst:36593"/>
          <criterion comment="cups-devel is earlier than 1:1.2.4-11.14.el5_1.6" test_ref="oval:org.mitre.oval:tst:36521"/>
          <criterion comment="cups is earlier than 1:1.2.4-11.14.el5_1.6" test_ref="oval:org.mitre.oval:tst:36179"/>
          <criterion comment="cups-libs is earlier than 1:1.2.4-11.14.el5_1.6" test_ref="oval:org.mitre.oval:tst:36567"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10084" version="5" class="vulnerability">
      <metadata>
        <title>gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even when the detached signature file does not carry a signature, which could cause programs that use gpgv to assume that the signature verification has succeeded.  Note: this also occurs when running the equivalent command "gpg --verify".</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0455" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0455"/>
        <description>gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even when the detached signature file does not carry a signature, which could cause programs that use gpgv to assume that the signature verification has succeeded.  Note: this also occurs when running the equivalent command "gpg --verify".</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:05.996-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:44.865-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:47.523-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10084 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:29.292-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:23.930-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gnupg is earlier than 0:1.2.1-15" test_ref="oval:org.mitre.oval:tst:32673"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gnupg is earlier than 0:1.2.6-3" test_ref="oval:org.mitre.oval:tst:32159"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10083" version="5" class="vulnerability">
      <metadata>
        <title>Portable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a buffer overflow attack on the row buffers.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2002-1363" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1363"/>
        <description>Portable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a buffer overflow attack on the row buffers.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:40.836-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:44.624-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:47.249-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10083 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:20.251-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:23.334-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="libpng10-devel is earlier than 0:1.0.13-15" test_ref="oval:org.mitre.oval:tst:29821"/>
          <criterion comment="libpng-devel is earlier than 2:1.2.2-25" test_ref="oval:org.mitre.oval:tst:30405"/>
          <criterion comment="libpng is earlier than 2:1.2.2-25" test_ref="oval:org.mitre.oval:tst:30788"/>
          <criterion comment="libpng10 is earlier than 0:1.0.13-15" test_ref="oval:org.mitre.oval:tst:30512"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10082" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the SIEVE script component (sieve/script.c), as used in cyrus-imapd in Cyrus IMAP Server 2.2.13 and 2.3.14, and Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, allows local users to execute arbitrary code and read or modify arbitrary messages via a crafted SIEVE script, related to the incorrect use of the sizeof operator for determining buffer length, combined with an integer signedness error.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2632" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2632"/>
        <description>Buffer overflow in the SIEVE script component (sieve/script.c), as used in cyrus-imapd in Cyrus IMAP Server 2.2.13 and 2.3.14, and Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, allows local users to execute arbitrary code and read or modify arbitrary messages via a crafted SIEVE script, related to the incorrect use of the sizeof operator for determining buffer length, combined with an integer signedness error.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:35.280-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:44.278-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:46.806-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10082 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:16:39.650-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:22.613-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="perl-Cyrus is earlier than 0:2.2.12-10.el4_8.4" test_ref="oval:org.mitre.oval:tst:39197"/>
            <criterion comment="cyrus-imapd-devel is earlier than 0:2.2.12-10.el4_8.4" test_ref="oval:org.mitre.oval:tst:39014"/>
            <criterion comment="cyrus-imapd-murder is earlier than 0:2.2.12-10.el4_8.4" test_ref="oval:org.mitre.oval:tst:38953"/>
            <criterion comment="cyrus-imapd-nntp is earlier than 0:2.2.12-10.el4_8.4" test_ref="oval:org.mitre.oval:tst:39405"/>
            <criterion comment="cyrus-imapd is earlier than 0:2.2.12-10.el4_8.4" test_ref="oval:org.mitre.oval:tst:39051"/>
            <criterion comment="cyrus-imapd-utils is earlier than 0:2.2.12-10.el4_8.4" test_ref="oval:org.mitre.oval:tst:39259"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="cyrus-imapd-perl is earlier than 0:2.3.7-7.el5_4.3" test_ref="oval:org.mitre.oval:tst:39412"/>
            <criterion comment="cyrus-imapd-devel is earlier than 0:2.3.7-7.el5_4.3" test_ref="oval:org.mitre.oval:tst:39219"/>
            <criterion comment="cyrus-imapd is earlier than 0:2.3.7-7.el5_4.3" test_ref="oval:org.mitre.oval:tst:39469"/>
            <criterion comment="cyrus-imapd-utils is earlier than 0:2.3.7-7.el5_4.3" test_ref="oval:org.mitre.oval:tst:39418"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10081" version="5" class="vulnerability">
      <metadata>
        <title>The ntlm_challenge function in the NTLM SASL authentication mechanism in camel/camel-sasl-ntlm.c in Camel in Evolution Data Server (aka evolution-data-server) 2.24.5 and earlier, and 2.25.92 and earlier 2.25.x versions, does not validate whether a certain length value is consistent with the amount of data in a challenge packet, which allows remote mail servers to read information from the process memory of a client, or cause a denial of service (client crash), via an NTLM authentication type 2 packet with a length value that exceeds the amount of packet data.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0582" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0582"/>
        <description>The ntlm_challenge function in the NTLM SASL authentication mechanism in camel/camel-sasl-ntlm.c in Camel in Evolution Data Server (aka evolution-data-server) 2.24.5 and earlier, and 2.25.92 and earlier 2.25.x versions, does not validate whether a certain length value is consistent with the amount of data in a challenge packet, which allows remote mail servers to read information from the process memory of a client, or cause a denial of service (client crash), via an NTLM authentication type 2 packet with a length value that exceeds the amount of packet data.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:27.091-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:43.824-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:46.368-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10081 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:40.228-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:21.529-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="evolution is earlier than 0:1.4.5-25.el3" test_ref="oval:org.mitre.oval:tst:38285"/>
            <criterion comment="evolution-devel is earlier than 0:1.4.5-25.el3" test_ref="oval:org.mitre.oval:tst:38422"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="evolution28-evolution-data-server-devel is earlier than 0:1.8.0-37.el4_7.2" test_ref="oval:org.mitre.oval:tst:38140"/>
            <criterion comment="evolution-data-server-devel is earlier than 0:1.0.2-14.el4_7.1" test_ref="oval:org.mitre.oval:tst:38464"/>
            <criterion comment="evolution-data-server is earlier than 0:1.0.2-14.el4_7.1" test_ref="oval:org.mitre.oval:tst:38477"/>
            <criterion comment="evolution is earlier than 0:2.0.2-41.el4_7.2" test_ref="oval:org.mitre.oval:tst:38489"/>
            <criterion comment="evolution28-evolution-data-server is earlier than 0:1.8.0-37.el4_7.2" test_ref="oval:org.mitre.oval:tst:38193"/>
            <criterion comment="evolution-devel is earlier than 0:2.0.2-41.el4_7.2" test_ref="oval:org.mitre.oval:tst:38059"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="evolution-data-server-devel is earlier than 0:1.12.3-10.el5_3.3" test_ref="oval:org.mitre.oval:tst:38514"/>
            <criterion comment="evolution-data-server is earlier than 0:1.12.3-10.el5_3.3" test_ref="oval:org.mitre.oval:tst:37983"/>
            <criterion comment="evolution-data-server-doc is earlier than 0:1.12.3-10.el5_3.3" test_ref="oval:org.mitre.oval:tst:37891"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10080" version="5" class="vulnerability">
      <metadata>
        <title>The (1) htmlentities and (2) htmlspecialchars functions in PHP before 5.2.5 accept partial multibyte sequences, which has unknown impact and attack vectors, a different issue than CVE-2006-5465.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5898" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5898"/>
        <description>The (1) htmlentities and (2) htmlspecialchars functions in PHP before 5.2.5 accept partial multibyte sequences, which has unknown impact and attack vectors, a different issue than CVE-2006-5465.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:25.195-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:42.971-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:45.479-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10080 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:48.156-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:19.944-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:37185"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:36983"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:36761"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:37254"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:37280"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:36584"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-48.ent" test_ref="oval:org.mitre.oval:tst:37255"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37302"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37269"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:36771"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:36854"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37155"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37143"/>
            <criterion comment="php is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:36781"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37125"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37202"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37223"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37010"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37319"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37113"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.22.12" test_ref="oval:org.mitre.oval:tst:37239"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:36927"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37138"/>
            <criterion comment="php-common is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37146"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37179"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37204"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:36955"/>
            <criterion comment="php is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37260"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37282"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:36878"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37114"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:36634"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37118"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37283"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37127"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37086"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37328"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37036"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37144"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:org.mitre.oval:tst:37165"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10079" version="5" class="vulnerability">
      <metadata>
        <title>Firefox 1.0 does not invoke the Javascript Security Manager when a user drags a javascript: or data: URL to a tab, which allows remote attackers to bypass the security model, aka "firetabbing."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0231" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0231"/>
        <description>Firefox 1.0 does not invoke the Javascript Security Manager when a user drags a javascript: or data: URL to a tab, which allows remote attackers to bypass the security model, aka "firetabbing."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:49.208-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:42.590-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:45.072-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10079 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:37.269-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:19.250-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31283"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31520"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31645"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31516"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31569"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31143"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31512"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31785"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31695"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31626"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:1.0.1-1.4.3" test_ref="oval:org.mitre.oval:tst:31118"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10078" version="5" class="vulnerability">
      <metadata>
        <title>The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the (1) ipseclive.conn and (2) ipsec.olts.remote.log temporary files.  NOTE: in many distributions and the upstream version, this tool has been disabled.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4190" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4190"/>
        <description>The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the (1) ipseclive.conn and (2) ipsec.olts.remote.log temporary files.  NOTE: in many distributions and the upstream version, this tool has been disabled.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:49.311-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:42.377-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:44.789-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10078 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:44.812-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:18.652-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="openswan is earlier than 0:2.6.14-1.el5_3.2" test_ref="oval:org.mitre.oval:tst:38176"/>
          <criterion comment="openswan-doc is earlier than 0:2.6.14-1.el5_3.2" test_ref="oval:org.mitre.oval:tst:38620"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10077" version="5" class="vulnerability">
      <metadata>
        <title>Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the aliases parameter to an html/add action.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3386" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3386"/>
        <description>Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the aliases parameter to an html/add action.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:22.566-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:41.972-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:44.395-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10077 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:47:05.787-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:17.898-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:35173"/>
          <criterion comment="tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:35009"/>
          <criterion comment="tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:34829"/>
          <criterion comment="tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:34843"/>
          <criterion comment="tomcat5-webapps is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:35076"/>
          <criterion comment="tomcat5 is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:34950"/>
          <criterion comment="tomcat5-jasper is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:35160"/>
          <criterion comment="tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:34831"/>
          <criterion comment="tomcat5-server-lib is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:35047"/>
          <criterion comment="tomcat5-common-lib is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:34953"/>
          <criterion comment="tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.3.0.2.el5" test_ref="oval:org.mitre.oval:tst:35000"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10076" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0195" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0195"/>
        <description>Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:32.852-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:41.165-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:43.631-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10076 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:44.353-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:16.465-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="xpdf is earlier than 1:2.02-14.el3" test_ref="oval:org.mitre.oval:tst:38322"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40095"/>
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-13.el4" test_ref="oval:org.mitre.oval:tst:38126"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:39528"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-13.el4" test_ref="oval:org.mitre.oval:tst:38230"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40473"/>
            <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38481"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40316"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-7.7.2.el4_7.4" test_ref="oval:org.mitre.oval:tst:38436"/>
            <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38145"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40209"/>
            <criterion comment="xpdf is earlier than 1:3.00-20.el4" test_ref="oval:org.mitre.oval:tst:38649"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40364"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40077"/>
            <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" test_ref="oval:org.mitre.oval:tst:38607"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kdegraphics-devel is earlier than 7:3.5.4-12.el5_3" test_ref="oval:org.mitre.oval:tst:38618"/>
            <criterion comment="cups-lpd is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38471"/>
            <criterion comment="tetex-dvips is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40312"/>
            <criterion comment="kdegraphics is earlier than 7:3.5.4-12.el5_3" test_ref="oval:org.mitre.oval:tst:38271"/>
            <criterion comment="poppler is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38760"/>
            <criterion comment="tetex-fonts is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40122"/>
            <criterion comment="cups-libs is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38541"/>
            <criterion comment="tetex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40413"/>
            <criterion comment="tetex-doc is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40398"/>
            <criterion comment="poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38500"/>
            <criterion comment="tetex-latex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40444"/>
            <criterion comment="poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9" test_ref="oval:org.mitre.oval:tst:38512"/>
            <criterion comment="cups-devel is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:37935"/>
            <criterion comment="tetex-afm is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40008"/>
            <criterion comment="tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:39920"/>
            <criterion comment="cups is earlier than 1:1.3.7-8.el5_3.4" test_ref="oval:org.mitre.oval:tst:38334"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10075" version="5" class="vulnerability">
      <metadata>
        <title>Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modify the .href property of stylesheet DOM nodes to the final URI of a 302 redirect, which might allow remote attackers to bypass the Same Origin Policy and read sensitive information from the original URL, such as with Single-Signon systems.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0593" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0593"/>
        <description>Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modify the .href property of stylesheet DOM nodes to the final URI of a 302 redirect, which might allow remote attackers to bypass the Same Origin Policy and read sensitive information from the original URL, such as with Single-Signon systems.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:42.897-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:40.536-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:42.959-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10075 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:08.622-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:14.768-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36256"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36236"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:35996"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36279"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36046"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36052"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36034"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:36284"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:35748"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.9.el3" test_ref="oval:org.mitre.oval:tst:35994"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36164"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36050"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-8.el4" test_ref="oval:org.mitre.oval:tst:36202"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36193"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36093"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36053"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.10.el4" test_ref="oval:org.mitre.oval:tst:35919"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:35600"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36141"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:35397"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:35684"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-9.el4" test_ref="oval:org.mitre.oval:tst:36203"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-9.el5" test_ref="oval:org.mitre.oval:tst:36281"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-9.el5" test_ref="oval:org.mitre.oval:tst:35480"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-8.el5" test_ref="oval:org.mitre.oval:tst:35675"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10074" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow vulnerability in the unicode_to_bytes in the Service Location Protocol (srvloc) dissector (packet-srvloc.c) in Ethereal allows remote attackers to execute arbitrary code via a srvloc packet with a modified length value.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3184" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3184"/>
        <description>Buffer overflow vulnerability in the unicode_to_bytes in the Service Location Protocol (srvloc) dissector (packet-srvloc.c) in Ethereal allows remote attackers to execute arbitrary code via a srvloc packet with a modified length value.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:55.183-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:40.258-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:42.664-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10074 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:21.348-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:14.168-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.13-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32189"/>
            <criterion comment="ethereal is earlier than 0:0.10.13-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32138"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.13-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32341"/>
            <criterion comment="ethereal is earlier than 0:0.10.13-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32202"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10073" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in javaws.exe in Sun Java Web Start in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 allows context-dependent attackers to execute arbitrary code via a crafted JPEG image that is not properly handled during display to a splash screen, which triggers a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2674" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2674"/>
        <description>Integer overflow in javaws.exe in Sun Java Web Start in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 allows context-dependent attackers to execute arbitrary code via a crafted JPEG image that is not properly handled during display to a splash screen, which triggers a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:15.762-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:39.981-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:42.380-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10073 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:41.424-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:13.651-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38942"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38825"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38972"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:38267"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.2.b09.el5" test_ref="oval:org.mitre.oval:tst:39037"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10072" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the parse_tag_11_packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving a crafted eCryptfs file, related to not ensuring that the key signature length in a Tag 11 packet is compatible with the key signature buffer size.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2406" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2406"/>
        <description>Stack-based buffer overflow in the parse_tag_11_packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving a crafted eCryptfs file, related to not ensuring that the key signature length in a Tag 11 packet is compatible with the key signature buffer size.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:18.524-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:39.654-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:41.907-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10072 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:32.540-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:12.824-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38128"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38668"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38883"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38948"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38732"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38969"/>
          <criterion comment="kernel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38991"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:39056"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38817"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:39009"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38672"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-128.4.1.el5" test_ref="oval:org.mitre.oval:tst:38983"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10071" version="5" class="vulnerability">
      <metadata>
        <title>The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web directory, which allows remote attackers to use it as an intermediary to connect to other systems.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-1999-0710" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0710"/>
        <description>The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web directory, which allows remote attackers to use it as an intermediary to connect to other systems.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:10.380-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:39.417-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:41.624-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10071 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:19:00.823-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:12.313-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE3-6.3E.13" test_ref="oval:org.mitre.oval:tst:31246"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="squid is earlier than 7:2.5.STABLE6-3.4E.9" test_ref="oval:org.mitre.oval:tst:31854"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10070" version="5" class="vulnerability">
      <metadata>
        <title>Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0416" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0416"/>
        <description>Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:12.168-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:39.223-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:41.401-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10070 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:48.928-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:11.841-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="cvs is earlier than 0:1.11.2-24" test_ref="oval:org.mitre.oval:tst:30480"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10069" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in Cscope 15.5, and possibly multiple overflows, allows remote attackers to execute arbitrary code via a C file with a long #include line that is later browsed by the target.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-2541" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2541"/>
        <description>Buffer overflow in Cscope 15.5, and possibly multiple overflows, allows remote attackers to execute arbitrary code via a C file with a long #include line that is later browsed by the target.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:37.237-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:38.858-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:41.090-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10069 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:18.703-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:10.996-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="cscope is earlier than 0:15.5-16.RHEL3" test_ref="oval:org.mitre.oval:tst:38743"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="cscope is earlier than 0:15.5-10.RHEL4.3" test_ref="oval:org.mitre.oval:tst:38662"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="cscope is earlier than 0:15.5-15.1.el5_3.1" test_ref="oval:org.mitre.oval:tst:38706"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10068" version="5" class="vulnerability">
      <metadata>
        <title>Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a special command in a DVI file, related to the (1) predospecial and (2) bbdospecial functions, a different vulnerability than CVE-2010-0739.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1440" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1440"/>
        <description>Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a special command in a DVI file, related to the (1) predospecial and (2) bbdospecial functions, a different vulnerability than CVE-2010-0739.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:56.633-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:38.260-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:40.470-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10068 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:36.123-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:10.202-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:39543"/>
            <criterion comment="tetex-afm is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40329"/>
            <criterion comment="tetex-xdvi is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40000"/>
            <criterion comment="tetex-dvips is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40032"/>
            <criterion comment="tetex-doc is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40150"/>
            <criterion comment="tetex-fonts is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40389"/>
            <criterion comment="tetex is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40303"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40095"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40209"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40364"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:39528"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40077"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40473"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40316"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40444"/>
            <criterion comment="tetex-afm is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40008"/>
            <criterion comment="tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:39920"/>
            <criterion comment="tetex-dvips is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40312"/>
            <criterion comment="tetex-doc is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40398"/>
            <criterion comment="tetex-fonts is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40122"/>
            <criterion comment="tetex is earlier than 0:3.0-33.8.el5_5.5" test_ref="oval:org.mitre.oval:tst:40413"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10067" version="5" class="vulnerability">
      <metadata>
        <title>bzlib.c in bzip2 before 1.0.5 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted file that triggers a buffer over-read, as demonstrated by the PROTOS GENOME test suite for Archive Formats.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1372" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1372"/>
        <description>bzlib.c in bzip2 before 1.0.5 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted file that triggers a buffer over-read, as demonstrated by the PROTOS GENOME test suite for Archive Formats.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:52.907-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:37.856-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:40.052-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10067 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:39.565-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:09.336-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="bzip2-devel is earlier than 0:1.0.2-12.EL3" test_ref="oval:org.mitre.oval:tst:37592"/>
            <criterion comment="bzip2 is earlier than 0:1.0.2-12.EL3" test_ref="oval:org.mitre.oval:tst:37601"/>
            <criterion comment="bzip2-libs is earlier than 0:1.0.2-12.EL3" test_ref="oval:org.mitre.oval:tst:37448"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="bzip2-devel is earlier than 0:1.0.2-14.el4_7" test_ref="oval:org.mitre.oval:tst:37480"/>
            <criterion comment="bzip2 is earlier than 0:1.0.2-14.el4_7" test_ref="oval:org.mitre.oval:tst:37759"/>
            <criterion comment="bzip2-libs is earlier than 0:1.0.2-14.el4_7" test_ref="oval:org.mitre.oval:tst:37643"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="bzip2-devel is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37205"/>
            <criterion comment="bzip2 is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37051"/>
            <criterion comment="bzip2-libs is earlier than 0:1.0.3-4.el5_2" test_ref="oval:org.mitre.oval:tst:37740"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10066" version="5" class="vulnerability">
      <metadata>
        <title>Multiple vulnerabilities in the layout engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attackers to cause a denial of service (crash) via vectors related to dangling pointers, heap corruption, signed/unsigned, and other issues.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2867" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2867"/>
        <description>Multiple vulnerabilities in the layout engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attackers to cause a denial of service (crash) via vectors related to dangling pointers, heap corruption, signed/unsigned, and other issues.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:10.467-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:37.243-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:39.135-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10066 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:14.755-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:07.953-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34409"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34257"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34432"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33988"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33721"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33693"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34313"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34281"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:33894"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.1.el3" test_ref="oval:org.mitre.oval:tst:34228"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.8.el4" test_ref="oval:org.mitre.oval:tst:33625"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:33931"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:33844"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-0.1.el4" test_ref="oval:org.mitre.oval:tst:34331"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34334"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34021"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34249"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.8.el4" test_ref="oval:org.mitre.oval:tst:34293"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.1.el4" test_ref="oval:org.mitre.oval:tst:34371"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34446"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34262"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34366"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:33994"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-2.el4" test_ref="oval:org.mitre.oval:tst:34322"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-1.el5" test_ref="oval:org.mitre.oval:tst:34445"/>
            <criterion comment="yelp is earlier than 0:2.16.0-15.el5" test_ref="oval:org.mitre.oval:tst:33445"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-11.el5" test_ref="oval:org.mitre.oval:tst:34323"/>
            <criterion comment="devhelp is earlier than 0:0.12-11.el5" test_ref="oval:org.mitre.oval:tst:34204"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-1.el5" test_ref="oval:org.mitre.oval:tst:34162"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-1.el5" test_ref="oval:org.mitre.oval:tst:33979"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10065" version="5" class="vulnerability">
      <metadata>
        <title>Linux kernel before 2.6.25.2 does not apply a certain protection mechanism for fcntl functionality, which allows local users to (1) execute code in parallel or (2) exploit a race condition to obtain "re-ordered access to the descriptor table."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1669" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1669"/>
        <description>Linux kernel before 2.6.25.2 does not apply a certain protection mechanism for fcntl functionality, which allows local users to (1) execute code in parallel or (2) exploit a race condition to obtain "re-ordered access to the descriptor table."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:30.207-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:36.508-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:38.348-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10065 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:50.846-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:06.414-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:35915"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:35794"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36513"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36264"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36161"/>
            <criterion comment="kernel is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36518"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36597"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36612"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-57.EL" test_ref="oval:org.mitre.oval:tst:36171"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36201"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36534"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36373"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36702"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36615"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36490"/>
            <criterion comment="kernel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36370"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:35738"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36249"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:36731"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-67.0.15.EL" test_ref="oval:org.mitre.oval:tst:35733"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36107"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36600"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36529"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36526"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36442"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36238"/>
            <criterion comment="kernel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36463"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36480"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:35876"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36532"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36278"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:35724"/>
            <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-53.1.19.el5" test_ref="oval:org.mitre.oval:tst:36560"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10064" version="5" class="vulnerability">
      <metadata>
        <title>Multiple cross-site scripting (XSS) vulnerabilities in PHP 4.4.1 and 5.1.1, when display_errors and html_errors are on, allow remote attackers to inject arbitrary web script or HTML via inputs to PHP applications that are not filtered when they are included in the resulting error message.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0208" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0208"/>
        <description>Multiple cross-site scripting (XSS) vulnerabilities in PHP 4.4.1 and 5.1.1, when display_errors and html_errors are on, allow remote attackers to inject arbitrary web script or HTML via inputs to PHP applications that are not filtered when they are included in the resulting error message.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:41.352-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:35.918-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:37.734-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10064 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:57.869-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:05.188-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32579"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32613"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32711"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32425"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32166"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32107"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-30.ent" test_ref="oval:org.mitre.oval:tst:32695"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:31742"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32509"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32606"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32503"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32185"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32639"/>
            <criterion comment="php is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32546"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32577"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32236"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32578"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32591"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32707"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:32547"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.12" test_ref="oval:org.mitre.oval:tst:31727"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10063" version="5" class="vulnerability">
      <metadata>
        <title>gpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows attackers to inject unsigned data via a data packet that is not associated with a control packet, which causes the check for concatenated signatures to report that the signature is valid, a different vulnerability than CVE-2006-0455.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0049"/>
        <description>gpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows attackers to inject unsigned data via a data packet that is not associated with a control packet, which causes the check for concatenated signatures to report that the signature is valid, a different vulnerability than CVE-2006-0455.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:51.979-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:35.683-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:37.444-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10063 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:35.161-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:04.449-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="gnupg is earlier than 0:1.2.1-15" test_ref="oval:org.mitre.oval:tst:32673"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="gnupg is earlier than 0:1.2.6-3" test_ref="oval:org.mitre.oval:tst:32159"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10062" version="5" class="vulnerability">
      <metadata>
        <title>The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2447" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2447"/>
        <description>The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:40.977-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:35.269-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:36.957-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10062 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:25.406-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:03.644-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.9-1.3E.13.2" test_ref="oval:org.mitre.oval:tst:34247"/>
            <criterion comment="samba-swat is earlier than 0:3.0.9-1.3E.13.2" test_ref="oval:org.mitre.oval:tst:33727"/>
            <criterion comment="samba-client is earlier than 0:3.0.9-1.3E.13.2" test_ref="oval:org.mitre.oval:tst:33913"/>
            <criterion comment="samba is earlier than 0:3.0.9-1.3E.13.2" test_ref="oval:org.mitre.oval:tst:33962"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.10-1.4E.12.2" test_ref="oval:org.mitre.oval:tst:34121"/>
            <criterion comment="samba-swat is earlier than 0:3.0.10-1.4E.12.2" test_ref="oval:org.mitre.oval:tst:34199"/>
            <criterion comment="samba-client is earlier than 0:3.0.10-1.4E.12.2" test_ref="oval:org.mitre.oval:tst:34107"/>
            <criterion comment="samba is earlier than 0:3.0.10-1.4E.12.2" test_ref="oval:org.mitre.oval:tst:34156"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.23c-2.el5.2.0.2" test_ref="oval:org.mitre.oval:tst:34266"/>
            <criterion comment="samba-swat is earlier than 0:3.0.23c-2.el5.2.0.2" test_ref="oval:org.mitre.oval:tst:33487"/>
            <criterion comment="samba-client is earlier than 0:3.0.23c-2.el5.2.0.2" test_ref="oval:org.mitre.oval:tst:33303"/>
            <criterion comment="samba is earlier than 0:3.0.23c-2.el5.2.0.2" test_ref="oval:org.mitre.oval:tst:34130"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10061" version="5" class="vulnerability">
      <metadata>
        <title>The ip6_dst_lookup_tail function in net/ipv6/ip6_output.c in the Linux kernel before 2.6.27 does not properly handle certain circumstances involving an IPv6 TUN network interface and a large number of neighbors, which allows attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0437" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0437"/>
        <description>The ip6_dst_lookup_tail function in net/ipv6/ip6_output.c in the Linux kernel before 2.6.27 does not properly handle certain circumstances involving an IPv6 TUN network interface and a large number of neighbors, which allows attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:34.150-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:34.871-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:36.575-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10061 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:49.137-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:02.853-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40228"/>
          <criterion comment="kernel-debug is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40098"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40231"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:39918"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:39938"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40088"/>
          <criterion comment="kernel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40237"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:39997"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40240"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40352"/>
          <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:39930"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-164.15.1.el5" test_ref="oval:org.mitre.oval:tst:40055"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10060" version="5" class="vulnerability">
      <metadata>
        <title>Race condition in Linux kernel 2.6.17.4 and earlier allows local users to gain root privileges by using prctl with PR_SET_DUMPABLE in a way that causes /proc/self/environ to become setuid root.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-3626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3626"/>
        <description>Race condition in Linux kernel 2.6.17.4 and earlier allows local users to gain root privileges by using prctl with PR_SET_DUMPABLE in a way that causes /proc/self/environ to become setuid root.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:15.706-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:34.556-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:36.268-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10060 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:11.065-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:02.294-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32576"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32814"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32958"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32801"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32865"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32880"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32747"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32200"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.2.EL" test_ref="oval:org.mitre.oval:tst:32838"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1006" version="3" class="vulnerability">
      <metadata>
        <title>SquirrelMail Cross-site Scripting Vulnerability I</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>SquirrelMail</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0519" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0519"/>
        <description>Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via multiple attack vectors, including the mailbox parameter in compose.php.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-06-29T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-07-21T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-08-11T12:00:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Updated inetlisteningservers_objects to match Schematron rules.  Set the local_port entities to be datatype, 'int'." date="2010-09-02T20:49:00.329-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2010-09-02T20:59:44.684-04:00">INTERIM</status_change>
            <status_change date="2010-09-20T04:00:03.552-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="squirrelmail rpm version prior to 1.4.3-0.e3.1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1327"/>
          <criterion comment="php rpm is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1326"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criterion comment="httpd is listening on the network" negate="false" test_ref="oval:org.mitre.oval:tst:1630"/>
          <criterion comment="/etc/httpd/modules/libphp4.so exists" negate="false" test_ref="oval:org.mitre.oval:tst:1325"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10059" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability several dissectors in Ethereal 0.9.0 through 0.10.11 allows remote attackers to cause a denial of service (application crash) by reassembling certain packets.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2362" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2362"/>
        <description>Unknown vulnerability several dissectors in Ethereal 0.9.0 through 0.10.11 allows remote attackers to cause a denial of service (application crash) by reassembling certain packets.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:49.076-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:34.282-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:35.744-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10059 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:23.981-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:01.501-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.12-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31966"/>
            <criterion comment="ethereal is earlier than 0:0.10.12-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32076"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.12-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32122"/>
            <criterion comment="ethereal is earlier than 0:0.10.12-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32035"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10058" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the _cupsImageReadPNG function in CUPS 1.1.17 through 1.3.9 allows remote attackers to execute arbitrary code via a PNG image with a large height value, which bypasses a validation check and triggers a buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5286" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5286"/>
        <description>Integer overflow in the _cupsImageReadPNG function in CUPS 1.1.17 through 1.3.9 allows remote attackers to execute arbitrary code via a PNG image with a large height value, which bypasses a validation check and triggers a buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:36.213-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:33.992-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:35.491-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10058 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:55.894-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:01.012-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.55" test_ref="oval:org.mitre.oval:tst:37802"/>
          <criterion comment="cups is earlier than 1:1.1.17-13.3.55" test_ref="oval:org.mitre.oval:tst:38046"/>
          <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.55" test_ref="oval:org.mitre.oval:tst:38112"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10057" version="5" class="vulnerability">
      <metadata>
        <title>Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0092"/>
        <description>Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:08.895-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:33.732-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:35.216-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10057 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:20.576-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:01:00.281-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39831"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:39445"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40225"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40023"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5" test_ref="oval:org.mitre.oval:tst:40307"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10056" version="5" class="vulnerability">
      <metadata>
        <title>Multiple vulnerabilities in PWLib before 1.6.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0097" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0097"/>
        <description>Multiple vulnerabilities in PWLib before 1.6.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:29:01.751-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:33.546-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:34.933-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10056 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:58.850-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:59.805-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="pwlib is earlier than 0:1.4.7-7.EL" test_ref="oval:org.mitre.oval:tst:30514"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10055" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to execute arbitrary code via a large number in the CSS letter-spacing property that leads to a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-1730" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1730"/>
        <description>Integer overflow in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to execute arbitrary code via a large number in the CSS letter-spacing property that leads to a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:17.053-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:32.953-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:34.337-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10055 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:44.918-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:58.982-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32663"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32326"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31987"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32451"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32697"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32558"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32427"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32671"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32666"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.1.3.1" test_ref="oval:org.mitre.oval:tst:32561"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32593"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32679"/>
            <criterion comment="mozilla is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32133"/>
            <criterion comment="thunderbird is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32204"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32701"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32428"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32557"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.8" test_ref="oval:org.mitre.oval:tst:32229"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32349"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32644"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32440"/>
            <criterion comment="firefox is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32219"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32598"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.4.1" test_ref="oval:org.mitre.oval:tst:32717"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10054" version="5" class="vulnerability">
      <metadata>
        <title>Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-2356" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2356"/>
        <description>Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:18.562-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:32.601-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:33.909-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10054 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:31.353-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:58.248-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gimp-devel is earlier than 1:1.2.3-20.3.el3" test_ref="oval:org.mitre.oval:tst:33883"/>
            <criterion comment="gimp-perl is earlier than 1:1.2.3-20.3.el3" test_ref="oval:org.mitre.oval:tst:33671"/>
            <criterion comment="gimp is earlier than 1:1.2.3-20.3.el3" test_ref="oval:org.mitre.oval:tst:33771"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gimp-devel is earlier than 1:2.0.5-6.2.el4" test_ref="oval:org.mitre.oval:tst:34066"/>
            <criterion comment="gimp is earlier than 1:2.0.5-6.2.el4" test_ref="oval:org.mitre.oval:tst:34208"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="gimp-libs is earlier than 2:2.2.13-2.el5" test_ref="oval:org.mitre.oval:tst:33430"/>
            <criterion comment="gimp-devel is earlier than 2:2.2.13-2.el5" test_ref="oval:org.mitre.oval:tst:34142"/>
            <criterion comment="gimp is earlier than 2:2.2.13-2.el5" test_ref="oval:org.mitre.oval:tst:33917"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10053" version="5" class="vulnerability">
      <metadata>
        <title>fs/direct-io.c in the dio subsystem in the Linux kernel before 2.6.23 does not properly zero out the dio struct, which allows local users to cause a denial of service (OOPS), as demonstrated by a certain fio test.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-6716" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6716"/>
        <description>fs/direct-io.c in the dio subsystem in the Linux kernel before 2.6.23 does not properly zero out the dio struct, which allows local users to cause a denial of service (OOPS), as demonstrated by a certain fio test.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:23.585-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:32.056-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:33.339-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10053 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:18:02.313-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:56.977-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37470"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37734"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37826"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37656"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37782"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37432"/>
            <criterion comment="kernel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37747"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37811"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37951"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37485"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-78.0.8.EL" test_ref="oval:org.mitre.oval:tst:37662"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37589"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37288"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37600"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37692"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37104"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37681"/>
            <criterion comment="kernel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37688"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37710"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37698"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37703"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37665"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-92.1.13.el5" test_ref="oval:org.mitre.oval:tst:37649"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10052" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted virtual font (VF) file associated with a DVI file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-0827" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0827"/>
        <description>Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted virtual font (VF) file associated with a DVI file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:16.697-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:31.592-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:32.804-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10052 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:23:45.125-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:56.241-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:39543"/>
            <criterion comment="tetex-afm is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40329"/>
            <criterion comment="tetex-xdvi is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40000"/>
            <criterion comment="tetex-dvips is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40032"/>
            <criterion comment="tetex-doc is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40150"/>
            <criterion comment="tetex-fonts is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40389"/>
            <criterion comment="tetex is earlier than 0:1.0.7-67.19" test_ref="oval:org.mitre.oval:tst:40303"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40095"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40209"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40364"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:39528"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40077"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40473"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.0.1.EL4.16" test_ref="oval:org.mitre.oval:tst:40316"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10051" version="5" class="vulnerability">
      <metadata>
        <title>Off-by-one error in the der_get_oid function in mod_auth_kerb 5.0 allows remote attackers to cause a denial of service (crash) via a crafted Kerberos message that triggers a heap-based buffer overflow in the component array.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-5989" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5989"/>
        <description>Off-by-one error in the der_get_oid function in mod_auth_kerb 5.0 allows remote attackers to cause a denial of service (crash) via a crafted Kerberos message that triggers a heap-based buffer overflow in the component array.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:47.999-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:31.389-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:32.561-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10051 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:07.327-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:55.729-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="mod_auth_kerb is earlier than 0:5.0-1.3" test_ref="oval:org.mitre.oval:tst:33221"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10050" version="5" class="vulnerability">
      <metadata>
        <title>PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unprivileged users to call those functions with malicious values, with unknown impact, aka the "Character conversion vulnerability."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1409" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1409"/>
        <description>PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unprivileged users to call those functions with malicious values, with unknown impact, aka the "Character conversion vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:51.533-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:30.809-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:31.955-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10050 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:19:00.859-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:24:37.594-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:54.730-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="rh-postgresql-devel is earlier than 0:7.3.10-1" test_ref="oval:org.mitre.oval:tst:31824"/>
            <criterion comment="rh-postgresql-server is earlier than 0:7.3.10-1" test_ref="oval:org.mitre.oval:tst:31255"/>
            <criterion comment="rh-postgresql-python is earlier than 0:7.3.10-1" test_ref="oval:org.mitre.oval:tst:31711"/>
            <criterion comment="rh-postgresql-libs is earlier than 0:7.3.10-1" test_ref="oval:org.mitre.oval:tst:31608"/>
            <criterion comment="rh-postgresql-docs is earlier than 0:7.3.10-1" test_ref="oval:org.mitre.oval:tst:31726"/>
            <criterion comment="rh-postgresql-test is earlier than 0:7.3.10-1" test_ref="oval:org.mitre.oval:tst:31681"/>
            <criterion comment="rh-postgresql-pl is earlier than 0:7.3.10-1" test_ref="oval:org.mitre.oval:tst:31497"/>
            <criterion comment="rh-postgresql-tcl is earlier than 0:7.3.10-1" test_ref="oval:org.mitre.oval:tst:31715"/>
            <criterion comment="rh-postgresql is earlier than 0:7.3.10-1" test_ref="oval:org.mitre.oval:tst:31510"/>
            <criterion comment="rh-postgresql-contrib is earlier than 0:7.3.10-1" test_ref="oval:org.mitre.oval:tst:31754"/>
            <criterion comment="rh-postgresql-jdbc is earlier than 0:7.3.10-1" test_ref="oval:org.mitre.oval:tst:31507"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postgresql is earlier than 0:7.4.8-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31832"/>
            <criterion comment="postgresql-docs is earlier than 0:7.4.8-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31880"/>
            <criterion comment="postgresql-pl is earlier than 0:7.4.8-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31527"/>
            <criterion comment="postgresql-tcl is earlier than 0:7.4.8-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31669"/>
            <criterion comment="postgresql-libs is earlier than 0:7.4.8-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31129"/>
            <criterion comment="postgresql-contrib is earlier than 0:7.4.8-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31756"/>
            <criterion comment="postgresql-python is earlier than 0:7.4.8-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31799"/>
            <criterion comment="postgresql-test is earlier than 0:7.4.8-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31798"/>
            <criterion comment="postgresql-jdbc is earlier than 0:7.4.8-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31618"/>
            <criterion comment="postgresql-server is earlier than 0:7.4.8-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31468"/>
            <criterion comment="postgresql-devel is earlier than 0:7.4.8-1.RHEL4.1" test_ref="oval:org.mitre.oval:tst:31708"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1005" version="5" class="vulnerability">
      <metadata>
        <title>IE6,SP1 DHTML Method Heap Memory Corruption Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <product>Microsoft Internet Explorer</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0055" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0055"/>
        <description>Internet Explorer 5.01, 5.5, and 6 does not properly validate buffers when handling certain DHTML methods including the createControlRange Javascript function, which allows remote attackers to execute arbitrary code, aka the "DHTML Method Heap Memory Corruption Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-03-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">Harvey Rubinovitz</contributor>
            </submitted>
            <status_change date="2005-03-23T08:09:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-04-13T12:15:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-05-04T12:33:00.000-04:00">ACCEPTED</status_change>
            <modified date="2005-12-26T09:40:00.000-04:00" comment="Removed test to check kb867282.">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2006-01-12T08:59:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected ste:2735. Set version element datatype to version. Implemented by Jon Baker of The MITRE Corporation." date="2007-01-13T19:44:00.916-05:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </modified>
            <status_change date="2007-01-13T19:45:56.706-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:26.141-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:247 - cvename in reference was replaced with CVE-2013-1311 and description was modified" date="2014-02-04T12:25:00.319-05:00">
              <contributor organization="ALTX-SOFT">Maria Mikhno</contributor>
            </modified>
            <status_change date="2014-02-04T12:28:40.828-05:00">INTERIM</status_change>
            <status_change date="2014-02-24T04:00:06.150-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Internet Explorer 6 Service Pack 1 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2919"/>
          <criteria operator="OR" comment="a vulnerable version of mshtml.dll exisits GDR/QFE">
            <criterion comment="machine has followed the GDR update path and mshtml.dll is less than 6.0.2800.1491" negate="false" test_ref="oval:org.mitre.oval:tst:1329"/>
            <criterion comment="machine has followed the QFE update path and mshtml.dll is less than 6.0.2800.1492" negate="false" test_ref="oval:org.mitre.oval:tst:1328"/>
          </criteria>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="ActiveX controls and active scripting are enabled">
            <criteria operator="AND" comment="current user settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="true" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2917"/>
              <criterion comment="active scripting is enabled for the current user" negate="false" test_ref="oval:org.mitre.oval:tst:2812"/>
            </criteria>
            <criteria operator="AND" comment="local machine settings are being used and ActiveX controls and active scripting are enabled">
              <criterion comment="use machine settings rather than individual user settings" negate="false" test_ref="oval:org.mitre.oval:tst:2951"/>
              <criterion comment="ActiveX controls are enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2916"/>
              <criterion comment="active scripting is enabled for the local machine" negate="false" test_ref="oval:org.mitre.oval:tst:2811"/>
            </criteria>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10049" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unknown vulnerabilities in the (1) WSP, (2) Q.931, (3) H.245, (4) KINK, (5) MGCP, (6) RPC, (7) SMBMailslot, and (8) SMB NETLOGON dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash) via unknown vectors that lead to a null dereference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1468" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1468"/>
        <description>Multiple unknown vulnerabilities in the (1) WSP, (2) Q.931, (3) H.245, (4) KINK, (5) MGCP, (6) RPC, (7) SMBMailslot, and (8) SMB NETLOGON dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash) via unknown vectors that lead to a null dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:16.844-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:30.518-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:31.651-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10049 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:54.727-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:53.930-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31458"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31546"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31674"/>
            <criterion comment="ethereal is earlier than 0:0.10.11-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31865"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10048" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in the JXTA dissector in Ethereal 0.10.9 allows remote attackers to cause a denial of service (application crash).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0765" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0765"/>
        <description>Unknown vulnerability in the JXTA dissector in Ethereal 0.10.9 allows remote attackers to cause a denial of service (application crash).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:39.550-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:30.248-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:31.344-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10048 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:21.291-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:53.367-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.10-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31514"/>
            <criterion comment="ethereal is earlier than 0:0.10.10-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31448"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.10-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31593"/>
            <criterion comment="ethereal is earlier than 0:0.10.10-1.EL4.1" test_ref="oval:org.mitre.oval:tst:31548"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10047" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send authenticated requests to arbitrary applications by replaying the NTLM credentials of a browser user.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3983" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3983"/>
        <description>Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send authenticated requests to arbitrary applications by replaying the NTLM credentials of a browser user.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:28.108-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:29.668-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:30.725-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10047 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:40.649-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:52.480-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:39610"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:39451"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:39678"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:39628"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:39624"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:39524"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:39588"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:39651"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:38845"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.48.el3" test_ref="oval:org.mitre.oval:tst:39752"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox is earlier than 0:3.0.16-4.el4" test_ref="oval:org.mitre.oval:tst:39002"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-51.el4_8" test_ref="oval:org.mitre.oval:tst:39832"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-51.el4_8" test_ref="oval:org.mitre.oval:tst:39735"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-51.el4_8" test_ref="oval:org.mitre.oval:tst:39283"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-51.el4_8" test_ref="oval:org.mitre.oval:tst:39646"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-51.el4_8" test_ref="oval:org.mitre.oval:tst:39176"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-51.el4_8" test_ref="oval:org.mitre.oval:tst:39656"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.16-2.el5_4" test_ref="oval:org.mitre.oval:tst:39838"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.16-2.el5_4" test_ref="oval:org.mitre.oval:tst:39032"/>
            <criterion comment="firefox is earlier than 0:3.0.16-1.el5_4" test_ref="oval:org.mitre.oval:tst:39721"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.16-2.el5_4" test_ref="oval:org.mitre.oval:tst:39558"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10046" version="5" class="vulnerability">
      <metadata>
        <title>The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a '-' character, a similar issue to CVE-2007-0882.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0956" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0956"/>
        <description>The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a '-' character, a similar issue to CVE-2007-0882.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:14.417-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:29.239-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:30.235-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10046 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:01.243-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:51.513-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.2.7-61" test_ref="oval:org.mitre.oval:tst:33590"/>
            <criterion comment="krb5 is earlier than 0:1.2.7-61" test_ref="oval:org.mitre.oval:tst:33826"/>
            <criterion comment="krb5-libs is earlier than 0:1.2.7-61" test_ref="oval:org.mitre.oval:tst:32858"/>
            <criterion comment="krb5-server is earlier than 0:1.2.7-61" test_ref="oval:org.mitre.oval:tst:33622"/>
            <criterion comment="krb5-devel is earlier than 0:1.2.7-61" test_ref="oval:org.mitre.oval:tst:33700"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.3.4-46" test_ref="oval:org.mitre.oval:tst:33804"/>
            <criterion comment="krb5 is earlier than 0:1.3.4-46" test_ref="oval:org.mitre.oval:tst:33812"/>
            <criterion comment="krb5-libs is earlier than 0:1.3.4-46" test_ref="oval:org.mitre.oval:tst:33795"/>
            <criterion comment="krb5-server is earlier than 0:1.3.4-46" test_ref="oval:org.mitre.oval:tst:32895"/>
            <criterion comment="krb5-devel is earlier than 0:1.3.4-46" test_ref="oval:org.mitre.oval:tst:33816"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="krb5-workstation is earlier than 0:1.5-23" test_ref="oval:org.mitre.oval:tst:33344"/>
            <criterion comment="krb5 is earlier than 0:1.5-23" test_ref="oval:org.mitre.oval:tst:33714"/>
            <criterion comment="krb5-libs is earlier than 0:1.5-23" test_ref="oval:org.mitre.oval:tst:33831"/>
            <criterion comment="krb5-server is earlier than 0:1.5-23" test_ref="oval:org.mitre.oval:tst:33885"/>
            <criterion comment="krb5-devel is earlier than 0:1.5-23" test_ref="oval:org.mitre.oval:tst:33785"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10045" version="5" class="vulnerability">
      <metadata>
        <title>Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigate to a previous javascript: URL, which can lead to arbitrary code execution when combined with CVE-2005-1477.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1476" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1476"/>
        <description>Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigate to a previous javascript: URL, which can lead to arbitrary code execution when combined with CVE-2005-1477.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:25.264-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:28.665-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:29.615-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10045 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:54.724-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:50.565-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31531"/>
            <criterion comment="mozilla is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31619"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31225"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31917"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31644"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31625"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31435"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31816"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31450"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.8-1.1.3.1" test_ref="oval:org.mitre.oval:tst:31901"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31590"/>
            <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.5" test_ref="oval:org.mitre.oval:tst:31571"/>
            <criterion comment="mozilla is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31860"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31894"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31245"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31913"/>
            <criterion comment="devhelp is earlier than 0:0.9.2-2.4.5" test_ref="oval:org.mitre.oval:tst:31692"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31986"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31365"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31868"/>
            <criterion comment="firefox is earlier than 0:1.0.4-1.4.1" test_ref="oval:org.mitre.oval:tst:31311"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:30985"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.8-1.4.1" test_ref="oval:org.mitre.oval:tst:31723"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10044" version="5" class="vulnerability">
      <metadata>
        <title>The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3, when SPNEGO is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via invalid ContextFlags data in the reqFlags field in a negTokenInit token.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0845" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0845"/>
        <description>The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3, when SPNEGO is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via invalid ContextFlags data in the reqFlags field in a negTokenInit token.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:46.446-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:28.260-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:29.150-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10044 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:44:00.576-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:46:36.355-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:49.834-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="krb5-workstation is earlier than 0:1.6.1-31.el5_3.3" test_ref="oval:org.mitre.oval:tst:38425"/>
          <criterion comment="krb5 is earlier than 0:1.6.1-31.el5_3.3" test_ref="oval:org.mitre.oval:tst:38479"/>
          <criterion comment="krb5-libs is earlier than 0:1.6.1-31.el5_3.3" test_ref="oval:org.mitre.oval:tst:37893"/>
          <criterion comment="krb5-server is earlier than 0:1.6.1-31.el5_3.3" test_ref="oval:org.mitre.oval:tst:38211"/>
          <criterion comment="krb5-devel is earlier than 0:1.6.1-31.el5_3.3" test_ref="oval:org.mitre.oval:tst:38553"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10043" version="5" class="vulnerability">
      <metadata>
        <title>Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote attackers to cause a denial of service (memory consumption) via aborted connections, which prevents the memory for the transaction pool from being reused for other connections.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2970" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2970"/>
        <description>Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote attackers to cause a denial of service (memory consumption) via aborted connections, which prevents the memory for the transaction pool from being reused for other connections.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:24.381-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:27.868-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:28.755-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10043 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:17:56.904-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:49.208-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-devel is earlier than 0:2.0.46-56.ent" test_ref="oval:org.mitre.oval:tst:32315"/>
            <criterion comment="mod_ssl is earlier than 1:2.0.46-56.ent" test_ref="oval:org.mitre.oval:tst:32356"/>
            <criterion comment="httpd is earlier than 0:2.0.46-56.ent" test_ref="oval:org.mitre.oval:tst:32098"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-suexec is earlier than 0:2.0.52-22.ent" test_ref="oval:org.mitre.oval:tst:32426"/>
            <criterion comment="httpd-manual is earlier than 0:2.0.52-22.ent" test_ref="oval:org.mitre.oval:tst:31907"/>
            <criterion comment="httpd-devel is earlier than 0:2.0.52-22.ent" test_ref="oval:org.mitre.oval:tst:31584"/>
            <criterion comment="mod_ssl is earlier than 1:2.0.52-22.ent" test_ref="oval:org.mitre.oval:tst:32282"/>
            <criterion comment="httpd is earlier than 0:2.0.52-22.ent" test_ref="oval:org.mitre.oval:tst:32132"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10042" version="3" class="vulnerability">
      <metadata>
        <title>Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attackers to force the browser to make unauthorized requests to other web sites via a URL in the (1) FDF, (2) xml, and (3) xfdf AJAX request parameters, following the # (hash) character, aka "Universal CSRF and session riding."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux Extras 3</platform>
          <platform>Red Hat Enterprise Linux Extras 4</platform>
          <platform>Red Hat Enterprise Linux Extras 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0044" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0044"/>
        <description>Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attackers to force the browser to make unauthorized requests to other web sites via a URL in the (1) FDF, (2) xml, and (3) xfdf AJAX request parameters, following the # (hash) character, aka "Universal CSRF and session riding."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:31.771-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:27.523-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:28.416-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND">
          <criterion comment="redhat-release is version 3" test_ref="oval:org.mitre.oval:tst:30337"/>
          <criteria operator="OR">
            <criterion comment="acroread-plugin is earlier than 0:8.1.2-1.el3.6" test_ref="oval:org.mitre.oval:tst:36324"/>
            <criterion comment="acroread is earlier than 0:8.1.2-1.el3.6" test_ref="oval:org.mitre.oval:tst:36153"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 4" test_ref="oval:org.mitre.oval:tst:29709"/>
          <criteria operator="OR">
            <criterion comment="acroread-plugin is earlier than 0:8.1.2-1.el4.2" test_ref="oval:org.mitre.oval:tst:36156"/>
            <criterion comment="acroread is earlier than 0:8.1.2-1.el4.2" test_ref="oval:org.mitre.oval:tst:36293"/>
          </criteria>
        </criteria>
        <criteria operator="AND">
          <criterion comment="redhat-release is version 5" test_ref="oval:org.mitre.oval:tst:33325"/>
          <criteria operator="OR">
            <criterion comment="acroread-plugin is earlier than 0:8.1.2-1.el5.3" test_ref="oval:org.mitre.oval:tst:35792"/>
            <criterion comment="acroread is earlier than 0:8.1.2-1.el5.3" test_ref="oval:org.mitre.oval:tst:35912"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10041" version="5" class="vulnerability">
      <metadata>
        <title>The udp_v6_get_port function in udp.c in Linux 2.6 before 2.6.14-rc5, when running IPv6, allows local users to cause a denial of service (infinite loop and crash).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2973" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2973"/>
        <description>The udp_v6_get_port function in udp.c in Linux 2.6 before 2.6.14-rc5, when running IPv6, allows local users to cause a denial of service (infinite loop and crash).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:48.007-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:26.984-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:27.889-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10041 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T16:10:00.062-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T16:18:26.942-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:48.254-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="           The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32525"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32366"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32381"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32215"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32464"/>
            <criterion comment="kernel is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32288"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:31978"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32438"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:org.mitre.oval:tst:32070"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32235"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32371"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32703"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32314"/>
            <criterion comment="kernel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32614"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32295"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32310"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32611"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-34.0.1.EL" test_ref="oval:org.mitre.oval:tst:32305"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10040" version="5" class="vulnerability">
      <metadata>
        <title>Linux kernel before 2.6.16.21 and 2.6.17, when running on PowerPC, does not perform certain required access_ok checks, which allows local users to read arbitrary kernel memory on 64-bit systems (signal_64.c) and cause a denial of service (crash) and possibly read kernel memory on 32-bit systems (signal_32.c).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-2448" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2448"/>
        <description>Linux kernel before 2.6.16.21 and 2.6.17, when running on PowerPC, does not perform certain required access_ok checks, which allows local users to read arbitrary kernel memory on 64-bit systems (signal_64.c) and cause a denial of service (crash) and possibly read kernel memory on 32-bit systems (signal_32.c).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:06.641-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:26.648-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:27.558-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10040 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:14:00.096-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:17:37.123-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:47.492-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32335"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32833"/>
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32825"/>
          <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32836"/>
          <criterion comment="kernel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32736"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:31931"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32361"/>
          <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32793"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-42.EL" test_ref="oval:org.mitre.oval:tst:32795"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10039" version="5" class="vulnerability">
      <metadata>
        <title>Firefox before 1.0.1 allows remote attackers to spoof the (1) security and (2) download modal dialog boxes, which could be used to trick users into executing script or downloading and executing a file, aka "Firespoofing."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0591" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0591"/>
        <description>Firefox before 1.0.1 allows remote attackers to spoof the (1) security and (2) download modal dialog boxes, which could be used to trick users into executing script or downloading and executing a file, aka "Firespoofing."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:41.320-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:26.267-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:27.174-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10039 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:08.831-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:46.728-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31283"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31520"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31645"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31516"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31569"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31143"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31512"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31785"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31695"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31626"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:1.0.1-1.4.3" test_ref="oval:org.mitre.oval:tst:31118"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10038" version="5" class="vulnerability">
      <metadata>
        <title>Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash).</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-3573" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3573"/>
        <description>Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash).</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:39.813-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:25.970-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:26.824-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10038 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:46.601-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:46.192-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="mailman is earlier than 3:2.1.5.1-25.rhel3.4" test_ref="oval:org.mitre.oval:tst:32690"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="mailman is earlier than 3:2.1.5.1-34.rhel4.2" test_ref="oval:org.mitre.oval:tst:32390"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10037" version="5" class="vulnerability">
      <metadata>
        <title>Some futex functions in futex.c for Linux kernel 2.6.x perform get_user calls while holding the mmap_sem semaphore, which could allow local users to cause a deadlock condition in do_page_fault by triggering get_user faults while another thread is executing mmap or other functions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0937" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0937"/>
        <description>Some futex functions in futex.c for Linux kernel 2.6.x perform get_user calls while holding the mmap_sem semaphore, which could allow local users to cause a deadlock condition in do_page_fault by triggering get_user faults while another thread is executing mmap or other functions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:40.741-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:25.653-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:26.458-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10037 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:46.371-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:45.484-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31783"/>
          <criterion comment="kernel-hugemem is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31876"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31592"/>
          <criterion comment="kernel is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31714"/>
          <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31522"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31902"/>
          <criterion comment="kernel-smp is earlier than 0:2.6.9-11.EL" test_ref="oval:org.mitre.oval:tst:31817"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10036" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a crafted PDF file, resulting in a heap-based buffer overflow.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5392" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5392"/>
        <description>Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a crafted PDF file, resulting in a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:32.305-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:24.930-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:25.708-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10036 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:43.785-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:43.978-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="xpdf is earlier than 0:2.02-11.el3" test_ref="oval:org.mitre.oval:tst:35634"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.10" test_ref="oval:org.mitre.oval:tst:34998"/>
            <criterion comment="kdegraphics-devel is earlier than 7:3.3.1-6.el4_5" test_ref="oval:org.mitre.oval:tst:35446"/>
            <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.10" test_ref="oval:org.mitre.oval:tst:35156"/>
            <criterion comment="kdegraphics is earlier than 7:3.3.1-6.el4_5" test_ref="oval:org.mitre.oval:tst:35404"/>
            <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.10" test_ref="oval:org.mitre.oval:tst:35455"/>
            <criterion comment="cups-libs is earlier than 0:1.1.22-0.rc1.9.20.2.el4_5.2" test_ref="oval:org.mitre.oval:tst:35415"/>
            <criterion comment="tetex is earlier than 0:2.0.2-22.0.1.EL4.10" test_ref="oval:org.mitre.oval:tst:35178"/>
            <criterion comment="gpdf is earlier than 0:2.8.2-7.7.1" test_ref="oval:org.mitre.oval:tst:35574"/>
            <criterion comment="cups-devel is earlier than 0:1.1.22-0.rc1.9.20.2.el4_5.2" test_ref="oval:org.mitre.oval:tst:34735"/>
            <criterion comment="tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.10" test_ref="oval:org.mitre.oval:tst:35585"/>
            <criterion comment="xpdf is earlier than 1:3.00-14.el4" test_ref="oval:org.mitre.oval:tst:35315"/>
            <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.10" test_ref="oval:org.mitre.oval:tst:35591"/>
            <criterion comment="tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.10" test_ref="oval:org.mitre.oval:tst:35283"/>
            <criterion comment="cups is earlier than 0:1.1.22-0.rc1.9.20.2.el4_5.2" test_ref="oval:org.mitre.oval:tst:35537"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="tetex-latex is earlier than 0:3.0-33.2.el5_1.2" test_ref="oval:org.mitre.oval:tst:35498"/>
            <criterion comment="cups-lpd is earlier than 0:1.2.4-11.14.el5_1.3" test_ref="oval:org.mitre.oval:tst:35274"/>
            <criterion comment="tetex-dvips is earlier than 0:3.0-33.2.el5_1.2" test_ref="oval:org.mitre.oval:tst:35509"/>
            <criterion comment="poppler-utils is earlier than 0:0.5.4-4.3.el5_1" test_ref="oval:org.mitre.oval:tst:35147"/>
            <criterion comment="poppler is earlier than 0:0.5.4-4.3.el5_1" test_ref="oval:org.mitre.oval:tst:35549"/>
            <criterion comment="tetex-fonts is earlier than 0:3.0-33.2.el5_1.2" test_ref="oval:org.mitre.oval:tst:35527"/>
            <criterion comment="cups-libs is earlier than 0:1.2.4-11.14.el5_1.3" test_ref="oval:org.mitre.oval:tst:35427"/>
            <criterion comment="tetex is earlier than 0:3.0-33.2.el5_1.2" test_ref="oval:org.mitre.oval:tst:35459"/>
            <criterion comment="cups-devel is earlier than 0:1.2.4-11.14.el5_1.3" test_ref="oval:org.mitre.oval:tst:35508"/>
            <criterion comment="tetex-afm is earlier than 0:3.0-33.2.el5_1.2" test_ref="oval:org.mitre.oval:tst:35407"/>
            <criterion comment="tetex-xdvi is earlier than 0:3.0-33.2.el5_1.2" test_ref="oval:org.mitre.oval:tst:34618"/>
            <criterion comment="tetex-doc is earlier than 0:3.0-33.2.el5_1.2" test_ref="oval:org.mitre.oval:tst:34727"/>
            <criterion comment="poppler-devel is earlier than 0:0.5.4-4.3.el5_1" test_ref="oval:org.mitre.oval:tst:35496"/>
            <criterion comment="cups is earlier than 0:1.2.4-11.14.el5_1.3" test_ref="oval:org.mitre.oval:tst:35530"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10035" version="5" class="vulnerability">
      <metadata>
        <title>NTP 4.2.4 before 4.2.4p5 and 4.2.5 before 4.2.5p150 does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0021" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0021"/>
        <description>NTP 4.2.4 before 4.2.4p5 and 4.2.5 before 4.2.5p150 does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:10.087-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:24.654-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:25.418-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10035 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:59.369-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:43.465-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="ntp is earlier than 0:4.2.0.a.20040617-8.el4_7.1" test_ref="oval:org.mitre.oval:tst:38251"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="ntp is earlier than 0:4.2.2p1-9.el5_3.1" test_ref="oval:org.mitre.oval:tst:38033"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10034" version="5" class="vulnerability">
      <metadata>
        <title>resolv.rb in Ruby 1.8.5 and earlier, 1.8.6 before 1.8.6-p287, 1.8.7 before 1.8.7-p72, and 1.9 r18423 and earlier uses sequential transaction IDs and constant source ports for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-3905" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3905"/>
        <description>resolv.rb in Ruby 1.8.5 and earlier, 1.8.6 before 1.8.6-p287, 1.8.7 before 1.8.7-p72, and 1.9 r18423 and earlier uses sequential transaction IDs and constant source ports for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:17.603-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:24.094-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:24.751-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10034 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:51:58.745-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:42.271-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.6.8-13.el3" test_ref="oval:org.mitre.oval:tst:37606"/>
            <criterion comment="ruby-docs is earlier than 0:1.6.8-13.el3" test_ref="oval:org.mitre.oval:tst:37736"/>
            <criterion comment="ruby-devel is earlier than 0:1.6.8-13.el3" test_ref="oval:org.mitre.oval:tst:37427"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.6.8-13.el3" test_ref="oval:org.mitre.oval:tst:37760"/>
            <criterion comment="ruby is earlier than 0:1.6.8-13.el3" test_ref="oval:org.mitre.oval:tst:37497"/>
            <criterion comment="irb is earlier than 0:1.6.8-13.el3" test_ref="oval:org.mitre.oval:tst:37751"/>
            <criterion comment="ruby-libs is earlier than 0:1.6.8-13.el3" test_ref="oval:org.mitre.oval:tst:36770"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-mode is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37462"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37630"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:36810"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:36902"/>
            <criterion comment="ruby is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37678"/>
            <criterion comment="irb is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37674"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.1-7.el4_7.1" test_ref="oval:org.mitre.oval:tst:37720"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ruby-ri is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37735"/>
            <criterion comment="ruby-mode is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37344"/>
            <criterion comment="ruby-docs is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37697"/>
            <criterion comment="ruby-devel is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37273"/>
            <criterion comment="ruby is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37563"/>
            <criterion comment="ruby-libs is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37438"/>
            <criterion comment="ruby-tcltk is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37757"/>
            <criterion comment="ruby-irb is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37463"/>
            <criterion comment="ruby-rdoc is earlier than 0:1.8.5-5.el5_2.5" test_ref="oval:org.mitre.oval:tst:37172"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10033" version="5" class="vulnerability">
      <metadata>
        <title>Postfix before 2.3.15, 2.4 before 2.4.8, 2.5 before 2.5.4, and 2.6 before 2.6-20080814, when the operating system supports hard links to symlinks, allows local users to append e-mail messages to a file to which a root-owned symlink points, by creating a hard link to this symlink and then sending a message.  NOTE: this can be leveraged to gain privileges if there is a symlink to an init script.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-2936" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2936"/>
        <description>Postfix before 2.3.15, 2.4 before 2.4.8, 2.5 before 2.5.4, and 2.6 before 2.6-20080814, when the operating system supports hard links to symlinks, allows local users to append e-mail messages to a file to which a root-owned symlink points, by creating a hard link to this symlink and then sending a message.  NOTE: this can be leveraged to gain privileges if there is a symlink to an init script.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:05.168-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:23.681-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:24.355-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10033 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:24.860-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:41.450-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="postfix is earlier than 2:2.0.16-14.1.RHEL3" test_ref="oval:org.mitre.oval:tst:37330"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postfix-pflogsumm is earlier than 2:2.2.10-1.2.1.el4_7" test_ref="oval:org.mitre.oval:tst:37632"/>
            <criterion comment="postfix is earlier than 2:2.2.10-1.2.1.el4_7" test_ref="oval:org.mitre.oval:tst:37655"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="postfix-pflogsumm is earlier than 2:2.3.3-2.1.el5_2" test_ref="oval:org.mitre.oval:tst:37629"/>
            <criterion comment="postfix is earlier than 2:2.3.3-2.1.el5_2" test_ref="oval:org.mitre.oval:tst:37265"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10032" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to install arbitrary extensions by using interactive events to manipulate the XPInstall Security dialog box.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0762" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0762"/>
        <description>Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to install arbitrary extensions by using interactive events to manipulate the XPInstall Security dialog box.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:42.532-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:23.315-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:23.916-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10032 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:40.752-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:40.690-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="mozilla-js-debugger is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30799"/>
          <criterion comment="mozilla is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30278"/>
          <criterion comment="mozilla-chat is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30755"/>
          <criterion comment="mozilla-mail is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30570"/>
          <criterion comment="mozilla-dom-inspector is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30230"/>
          <criterion comment="mozilla-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30288"/>
          <criterion comment="mozilla-nss is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30323"/>
          <criterion comment="mozilla-nss-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30339"/>
          <criterion comment="mozilla-nspr is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30813"/>
          <criterion comment="mozilla-nspr-devel is earlier than 37:1.4.3-3.0.2" test_ref="oval:org.mitre.oval:tst:30660"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10031" version="5" class="vulnerability">
      <metadata>
        <title>The (1) Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the (2) Passcard Manager in Netscape 8.1.2 and possibly other versions, do not properly verify that an ACTION URL in a FORM element containing a password INPUT element matches the web site for which the user stored a password, which allows remote attackers to obtain passwords via a password INPUT element on a different web page located on the web site intended for this password.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6077" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6077"/>
        <description>The (1) Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the (2) Passcard Manager in Netscape 8.1.2 and possibly other versions, do not properly verify that an ACTION URL in a FORM element containing a password INPUT element matches the web site for which the user stored a password, which allows remote attackers to obtain passwords via a password INPUT element on a different web page located on the web site intended for this password.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:52.432-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:22.629-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:23.204-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10031 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:17.517-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:39.486-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33391"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33688"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33675"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33724"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33510"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33409"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33467"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33658"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33649"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33381"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:32760"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33554"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33648"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.10-0.1.el4" test_ref="oval:org.mitre.oval:tst:32765"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33712"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33705"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33379"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:33400"/>
            <criterion comment="firefox is earlier than 0:1.5.0.10-0.1.el4" test_ref="oval:org.mitre.oval:tst:33759"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33678"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33695"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33697"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33244"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33645"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.10-2.el5" test_ref="oval:org.mitre.oval:tst:33461"/>
            <criterion comment="yelp is earlier than 0:2.16.0-14.0.1.el5" test_ref="oval:org.mitre.oval:tst:33761"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-10.0.1.el5" test_ref="oval:org.mitre.oval:tst:33744"/>
            <criterion comment="devhelp is earlier than 0:0.12-10.0.1.el5" test_ref="oval:org.mitre.oval:tst:33415"/>
            <criterion comment="firefox is earlier than 0:1.5.0.10-2.el5" test_ref="oval:org.mitre.oval:tst:33616"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.10-1.el5" test_ref="oval:org.mitre.oval:tst:33493"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10030" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 3.0.12 does not properly handle an SVG element that has a property with a watch function and an __defineSetter__ function, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted document, related to a certain pointer misinterpretation.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-2469" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2469"/>
        <description>Mozilla Firefox before 3.0.12 does not properly handle an SVG element that has a property with a watch function and an __defineSetter__ function, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted document, related to a certain pointer misinterpretation.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:18.000-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:22.332-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:22.820-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10030 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:30:53.604-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:38.768-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:3.0.12-1.el4" test_ref="oval:org.mitre.oval:tst:38809"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38249"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38575"/>
            <criterion comment="firefox is earlier than 0:3.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38853"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.12-1.el5_3" test_ref="oval:org.mitre.oval:tst:38563"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1003" version="1" class="vulnerability">
      <metadata>
        <title>CVS serve_notify Improper Handling of Empty Data Lines</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>CVS</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0418" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0418"/>
        <description>serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-06-29T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-07-21T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-08-04T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="cvs rpm version prior to 1.11.2-24 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1347"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/bin/cvs is executable">
            <criterion comment="/usr/bin/cvs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1381"/>
            <criterion comment="/usr/bin/cvs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1380"/>
            <criterion comment="/usr/bin/cvs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1379"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10029" version="5" class="vulnerability">
      <metadata>
        <title>The default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to gain the privileges of a (1) locked or (2) expired account by entering the account name on the command line, related to improper use of the pam_succeed_if.so module.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1946" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1946"/>
        <description>The default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to gain the privileges of a (1) locked or (2) expired account by entering the account name on the command line, related to improper use of the pam_succeed_if.so module.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:39.972-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:22.132-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:22.567-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10029 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:57.643-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:38.259-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
          <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
          <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
        </criteria>
        <criterion comment="coreutils is earlier than 0:5.2.1-31.8.el4" test_ref="oval:org.mitre.oval:tst:36995"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10028" version="5" class="vulnerability">
      <metadata>
        <title>The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0398" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0398"/>
        <description>The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:02.938-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:21.833-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:22.292-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10028 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:37.108-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:37.776-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criterion comment="ipsec-tools is earlier than 0:0.2.5-0.7" test_ref="oval:org.mitre.oval:tst:31280"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="ipsec-tools is earlier than 0:0.3.3-6" test_ref="oval:org.mitre.oval:tst:31519"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10027" version="5" class="vulnerability">
      <metadata>
        <title>The azx_position_ok function in hda_intel.c in Linux kernel 2.6.33-rc4 and earlier, when running on the AMD780V chip set, allows context-dependent attackers to cause a denial of service (crash) via unknown manipulations that trigger a divide-by-zero error.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2010-1085" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1085"/>
        <description>The azx_position_ok function in hda_intel.c in Linux kernel 2.6.33-rc4 and earlier, when running on the AMD780V chip set, allows context-dependent attackers to cause a denial of service (crash) via unknown manipulations that trigger a divide-by-zero error.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:28.773-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:21.323-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:21.637-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10027 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:30:56.383-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:36.680-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-xenU is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40272"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40483"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40310"/>
            <criterion comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40062"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40096"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:39895"/>
            <criterion comment="kernel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40165"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40131"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40380"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:39955"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-89.0.25.EL" test_ref="oval:org.mitre.oval:tst:40115"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-kdump is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:39968"/>
            <criterion comment="kernel-debug is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40459"/>
            <criterion comment="kernel-xen is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40373"/>
            <criterion comment="kernel-headers is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40487"/>
            <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40332"/>
            <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40331"/>
            <criterion comment="kernel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40445"/>
            <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40493"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40458"/>
            <criterion comment="kernel-PAE is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:40390"/>
            <criterion comment="kernel-debug-devel is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:39921"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.18-194.3.1.el5" test_ref="oval:org.mitre.oval:tst:39890"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10026" version="5" class="vulnerability">
      <metadata>
        <title>Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products, allows remote attackers to execute arbitrary code via a header structure containing a negative offset, which is used to dereference a function pointer.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1686" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1686"/>
        <description>Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products, allows remote attackers to execute arbitrary code via a header structure containing a negative offset, which is used to dereference a function pointer.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:21:36.222-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:20.986-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:21.318-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10026 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:40.655-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:35.867-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="speex is earlier than 0:1.0.4-4.el4_6.1" test_ref="oval:org.mitre.oval:tst:36495"/>
            <criterion comment="speex-devel is earlier than 0:1.0.4-4.el4_6.1" test_ref="oval:org.mitre.oval:tst:36383"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="speex is earlier than 0:1.0.5-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36321"/>
            <criterion comment="speex-devel is earlier than 0:1.0.5-4.el5_1.1" test_ref="oval:org.mitre.oval:tst:36456"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10025" version="5" class="vulnerability">
      <metadata>
        <title>Integer overflow in the xmlBufferResize function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (infinite loop) via a large XML document.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-4225" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4225"/>
        <description>Integer overflow in the xmlBufferResize function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (infinite loop) via a large XML document.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:47.413-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:20.628-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:20.851-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10025 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:49.660-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:34.886-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libxml2-devel is earlier than 0:2.5.10-14" test_ref="oval:org.mitre.oval:tst:37860"/>
            <criterion comment="libxml2-python is earlier than 0:2.5.10-14" test_ref="oval:org.mitre.oval:tst:37771"/>
            <criterion comment="libxml2 is earlier than 0:2.5.10-14" test_ref="oval:org.mitre.oval:tst:38036"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libxml2-devel is earlier than 0:2.6.16-12.6" test_ref="oval:org.mitre.oval:tst:37841"/>
            <criterion comment="libxml2-python is earlier than 0:2.6.16-12.6" test_ref="oval:org.mitre.oval:tst:37839"/>
            <criterion comment="libxml2 is earlier than 0:2.6.16-12.6" test_ref="oval:org.mitre.oval:tst:37940"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libxml2-devel is earlier than 0:2.6.26-2.1.2.7" test_ref="oval:org.mitre.oval:tst:38044"/>
            <criterion comment="libxml2-python is earlier than 0:2.6.26-2.1.2.7" test_ref="oval:org.mitre.oval:tst:37640"/>
            <criterion comment="libxml2 is earlier than 0:2.6.26-2.1.2.7" test_ref="oval:org.mitre.oval:tst:37694"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10024" version="5" class="vulnerability">
      <metadata>
        <title>Memory leak in FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (memory exhaustion) via a series of Access-Request packets with (1) Ascend-Send-Secret, (2) Ascend-Recv-Secret, or (3) Tunnel-Password attributes.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0961" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0961"/>
        <description>Memory leak in FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (memory exhaustion) via a series of Access-Request packets with (1) Ascend-Send-Secret, (2) Ascend-Recv-Secret, or (3) Tunnel-Password attributes.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:24:35.581-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:20.428-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:20.612-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10024 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:51:59.633-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:33.974-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="freeradius is earlier than 0:1.0.1-1.RHEL3" test_ref="oval:org.mitre.oval:tst:31016"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10023" version="5" class="vulnerability">
      <metadata>
        <title>Memory leak in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows context-dependent attackers to cause a denial of service (memory consumption and application crash) via a crafted image file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-0581" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0581"/>
        <description>Memory leak in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows context-dependent attackers to cause a denial of service (memory consumption and application crash) via a crafted image file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:58.551-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:20.132-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:20.282-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10023 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:43:28.818-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:33.361-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="python-lcms is earlier than 0:1.18-0.1.beta1.el5_3.2" test_ref="oval:org.mitre.oval:tst:38555"/>
          <criterion comment="lcms-devel is earlier than 0:1.18-0.1.beta1.el5_3.2" test_ref="oval:org.mitre.oval:tst:37972"/>
          <criterion comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:38276"/>
          <criterion comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37661"/>
          <criterion comment="lcms is earlier than 0:1.18-0.1.beta1.el5_3.2" test_ref="oval:org.mitre.oval:tst:38260"/>
          <criterion comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37652"/>
          <criterion comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:37769"/>
          <criterion comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-0.30.b09.el5" test_ref="oval:org.mitre.oval:tst:38561"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10022" version="5" class="vulnerability">
      <metadata>
        <title>filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted sprmTSetBrc table property modifier in a Word document, related to a "boundary error flaw."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-3302" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3302"/>
        <description>filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted sprmTSetBrc table property modifier in a Word document, related to a "boundary error flaw."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:23:21.899-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:17.680-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:17.605-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10022 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:12.640-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:29.665-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-46.2.0.EL3" test_ref="oval:org.mitre.oval:tst:40232"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.2-46.2.0.EL3" test_ref="oval:org.mitre.oval:tst:39552"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-46.2.0.EL3" test_ref="oval:org.mitre.oval:tst:39893"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39898"/>
            <criterion comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39574"/>
            <criterion comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40086"/>
            <criterion comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39814"/>
            <criterion comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39321"/>
            <criterion comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40079"/>
            <criterion comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40187"/>
            <criterion comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40069"/>
            <criterion comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40280"/>
            <criterion comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39823"/>
            <criterion comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39422"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.5-10.6.0.7.EL4.3" test_ref="oval:org.mitre.oval:tst:39760"/>
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.7.EL4.3" test_ref="oval:org.mitre.oval:tst:40078"/>
            <criterion comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40135"/>
            <criterion comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40217"/>
            <criterion comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39726"/>
            <criterion comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40076"/>
            <criterion comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39500"/>
            <criterion comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40206"/>
            <criterion comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39998"/>
            <criterion comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40006"/>
            <criterion comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39847"/>
            <criterion comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39962"/>
            <criterion comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39762"/>
            <criterion comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40163"/>
            <criterion comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39819"/>
            <criterion comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39506"/>
            <criterion comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40275"/>
            <criterion comment="openoffice.org2 is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40058"/>
            <criterion comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40104"/>
            <criterion comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39977"/>
            <criterion comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40138"/>
            <criterion comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40155"/>
            <criterion comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40266"/>
            <criterion comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40024"/>
            <criterion comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40188"/>
            <criterion comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40123"/>
            <criterion comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39776"/>
            <criterion comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40262"/>
            <criterion comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39872"/>
            <criterion comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39958"/>
            <criterion comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40178"/>
            <criterion comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39976"/>
            <criterion comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40092"/>
            <criterion comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39695"/>
            <criterion comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40167"/>
            <criterion comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39830"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.7.EL4.3" test_ref="oval:org.mitre.oval:tst:40242"/>
            <criterion comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39851"/>
            <criterion comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39818"/>
            <criterion comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40038"/>
            <criterion comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.7.EL4.3" test_ref="oval:org.mitre.oval:tst:40279"/>
            <criterion comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39959"/>
            <criterion comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40197"/>
            <criterion comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40245"/>
            <criterion comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39845"/>
            <criterion comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39936"/>
            <criterion comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39966"/>
            <criterion comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39879"/>
            <criterion comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40025"/>
            <criterion comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39786"/>
            <criterion comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:40213"/>
            <criterion comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:org.mitre.oval:tst:39767"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-langpack-sk_SK is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40143"/>
            <criterion comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40027"/>
            <criterion comment="openoffice.org-langpack-pa_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39796"/>
            <criterion comment="openoffice.org-langpack-hi_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39900"/>
            <criterion comment="openoffice.org-langpack-et_EE is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40033"/>
            <criterion comment="openoffice.org-langpack-kn_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39999"/>
            <criterion comment="openoffice.org is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39861"/>
            <criterion comment="openoffice.org-langpack-zh_TW is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39384"/>
            <criterion comment="openoffice.org-writer is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39209"/>
            <criterion comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40293"/>
            <criterion comment="openoffice.org-langpack-ga_IE is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40186"/>
            <criterion comment="openoffice.org-langpack-ta_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40207"/>
            <criterion comment="openoffice.org-langpack-ko_KR is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39941"/>
            <criterion comment="openoffice.org-langpack-or_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39835"/>
            <criterion comment="openoffice.org-langpack-da_DK is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39870"/>
            <criterion comment="openoffice.org-langpack-sr_CS is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40043"/>
            <criterion comment="openoffice.org-langpack-pl_PL is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40061"/>
            <criterion comment="openoffice.org-langpack-fr is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40019"/>
            <criterion comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39923"/>
            <criterion comment="openoffice.org-javafilter is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40169"/>
            <criterion comment="openoffice.org-langpack-as_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39889"/>
            <criterion comment="openoffice.org-testtools is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39388"/>
            <criterion comment="openoffice.org-langpack-hr_HR is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40015"/>
            <criterion comment="openoffice.org-langpack-de is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39455"/>
            <criterion comment="openoffice.org-emailmerge is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40278"/>
            <criterion comment="openoffice.org-xsltfilter is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39903"/>
            <criterion comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39905"/>
            <criterion comment="openoffice.org-langpack-te_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39522"/>
            <criterion comment="openoffice.org-langpack-sv is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40195"/>
            <criterion comment="openoffice.org-base is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39480"/>
            <criterion comment="openoffice.org-langpack-ca_ES is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40157"/>
            <criterion comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39989"/>
            <criterion comment="openoffice.org-core is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39975"/>
            <criterion comment="openoffice.org-langpack-nl is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40101"/>
            <criterion comment="openoffice.org-langpack-ur is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39119"/>
            <criterion comment="openoffice.org-langpack-nn_NO is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39682"/>
            <criterion comment="openoffice.org-langpack-ar is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39653"/>
            <criterion comment="openoffice.org-langpack-ja_JP is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39800"/>
            <criterion comment="openoffice.org-langpack-gu_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40203"/>
            <criterion comment="openoffice.org-langpack-tr_TR is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40119"/>
            <criterion comment="openoffice.org-langpack-eu_ES is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40002"/>
            <criterion comment="openoffice.org-langpack-fi_FI is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39764"/>
            <criterion comment="openoffice.org-graphicfilter is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39979"/>
            <criterion comment="openoffice.org-pyuno is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39996"/>
            <criterion comment="openoffice.org-langpack-ml_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40060"/>
            <criterion comment="openoffice.org-langpack-gl_ES is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40192"/>
            <criterion comment="openoffice.org-sdk-doc is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39688"/>
            <criterion comment="openoffice.org-langpack-zh_CN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39612"/>
            <criterion comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39939"/>
            <criterion comment="openoffice.org-langpack-it is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39687"/>
            <criterion comment="openoffice.org-sdk is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40190"/>
            <criterion comment="openoffice.org-langpack-es is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39972"/>
            <criterion comment="openoffice.org-langpack-nb_NO is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39792"/>
            <criterion comment="openoffice.org-langpack-sl_SI is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39914"/>
            <criterion comment="openoffice.org-draw is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39723"/>
            <criterion comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40100"/>
            <criterion comment="openoffice.org-langpack-ms_MY is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40158"/>
            <criterion comment="openoffice.org-langpack-el_GR is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39416"/>
            <criterion comment="openoffice.org-langpack-hu_HU is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39496"/>
            <criterion comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39922"/>
            <criterion comment="openoffice.org-langpack-bn is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40120"/>
            <criterion comment="openoffice.org-langpack-he_IL is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39301"/>
            <criterion comment="openoffice.org-langpack-pt_PT is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40236"/>
            <criterion comment="openoffice.org-langpack-lt_LT is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40042"/>
            <criterion comment="openoffice.org-langpack-af_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39239"/>
            <criterion comment="openoffice.org-langpack-bg_BG is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40048"/>
            <criterion comment="openoffice.org-calc is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39842"/>
            <criterion comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39995"/>
            <criterion comment="openoffice.org-langpack-cy_GB is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39641"/>
            <criterion comment="openoffice.org-langpack-mr_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39754"/>
            <criterion comment="openoffice.org-headless is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40170"/>
            <criterion comment="openoffice.org-langpack-th_TH is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39951"/>
            <criterion comment="openoffice.org-langpack-pt_BR is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40166"/>
            <criterion comment="openoffice.org-langpack-ru is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40110"/>
            <criterion comment="openoffice.org-math is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40223"/>
            <criterion comment="openoffice.org-impress is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:40173"/>
            <criterion comment="openoffice.org-langpack-st_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:org.mitre.oval:tst:39745"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10021" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in (1) X.Org Xserver before 1.4.1, and (2) the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent attackers to execute arbitrary code via a PCF font with a large difference between the last col and first col values in the PCF_BDF_ENCODINGS table.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-0006" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0006"/>
        <description>Buffer overflow in (1) X.Org Xserver before 1.4.1, and (2) the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent attackers to execute arbitrary code via a PCF font with a large difference between the last col and first col values in the PCF_BDF_ENCODINGS table.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:53.477-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:16.597-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:16.448-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10021 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:52:51.216-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:27.589-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35923"/>
            <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35665"/>
            <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:36014"/>
            <criterion comment="XFree86-libs is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35929"/>
            <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:36011"/>
            <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35836"/>
            <criterion comment="XFree86-twm is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35726"/>
            <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35715"/>
            <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35610"/>
            <criterion comment="XFree86-doc is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:36025"/>
            <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35789"/>
            <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35804"/>
            <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35865"/>
            <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35793"/>
            <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35903"/>
            <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35965"/>
            <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35922"/>
            <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35504"/>
            <criterion comment="XFree86-xdm is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35045"/>
            <criterion comment="XFree86-sdk is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35914"/>
            <criterion comment="XFree86 is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35831"/>
            <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35998"/>
            <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35975"/>
            <criterion comment="XFree86-xfs is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:36031"/>
            <criterion comment="XFree86-tools is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35971"/>
            <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35711"/>
            <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35933"/>
            <criterion comment="XFree86-xauth is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35826"/>
            <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35753"/>
            <criterion comment="XFree86-devel is earlier than 0:4.3.0-126.EL" test_ref="oval:org.mitre.oval:tst:35678"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35795"/>
            <criterion comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35934"/>
            <criterion comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35467"/>
            <criterion comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35946"/>
            <criterion comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36116"/>
            <criterion comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35116"/>
            <criterion comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36004"/>
            <criterion comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35483"/>
            <criterion comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36103"/>
            <criterion comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36060"/>
            <criterion comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36074"/>
            <criterion comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35895"/>
            <criterion comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35905"/>
            <criterion comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:36012"/>
            <criterion comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35984"/>
            <criterion comment="xorg-x11 is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35857"/>
            <criterion comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35681"/>
            <criterion comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.33.0.2" test_ref="oval:org.mitre.oval:tst:35909"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="libXfont is earlier than 0:1.2.2-1.0.3.el5_1" test_ref="oval:org.mitre.oval:tst:35583"/>
            <criterion comment="libXfont-devel is earlier than 0:1.2.2-1.0.3.el5_1" test_ref="oval:org.mitre.oval:tst:35897"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10020" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-1105" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1105"/>
        <description>Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:07.867-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:15.990-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:15.845-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10020 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:43:00.327-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:53:01.301-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:26.425-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.9-1.3E.15" test_ref="oval:org.mitre.oval:tst:36330"/>
            <criterion comment="samba-swat is earlier than 0:3.0.9-1.3E.15" test_ref="oval:org.mitre.oval:tst:36458"/>
            <criterion comment="samba-client is earlier than 0:3.0.9-1.3E.15" test_ref="oval:org.mitre.oval:tst:36807"/>
            <criterion comment="samba is earlier than 0:3.0.9-1.3E.15" test_ref="oval:org.mitre.oval:tst:36581"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.25b-1.el4_6.5" test_ref="oval:org.mitre.oval:tst:36789"/>
            <criterion comment="samba-swat is earlier than 0:3.0.25b-1.el4_6.5" test_ref="oval:org.mitre.oval:tst:36627"/>
            <criterion comment="samba-client is earlier than 0:3.0.25b-1.el4_6.5" test_ref="oval:org.mitre.oval:tst:36743"/>
            <criterion comment="samba is earlier than 0:3.0.25b-1.el4_6.5" test_ref="oval:org.mitre.oval:tst:36764"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="samba-common is earlier than 0:3.0.28-1.el5_2.1" test_ref="oval:org.mitre.oval:tst:36275"/>
            <criterion comment="samba-swat is earlier than 0:3.0.28-1.el5_2.1" test_ref="oval:org.mitre.oval:tst:36715"/>
            <criterion comment="samba-client is earlier than 0:3.0.28-1.el5_2.1" test_ref="oval:org.mitre.oval:tst:35847"/>
            <criterion comment="samba is earlier than 0:3.0.28-1.el5_2.1" test_ref="oval:org.mitre.oval:tst:36653"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10019" version="5" class="vulnerability">
      <metadata>
        <title>Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-6679" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6679"/>
        <description>Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:52.978-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:15.747-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:15.565-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10019 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:25.440-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:25.834-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="ghostscript-devel is earlier than 0:8.15.2-9.4.el5_3.7" test_ref="oval:org.mitre.oval:tst:38588"/>
          <criterion comment="ghostscript is earlier than 0:8.15.2-9.4.el5_3.7" test_ref="oval:org.mitre.oval:tst:38629"/>
          <criterion comment="ghostscript-gtk is earlier than 0:8.15.2-9.4.el5_3.7" test_ref="oval:org.mitre.oval:tst:38457"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10018" version="5" class="vulnerability">
      <metadata>
        <title>Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0451" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0451"/>
        <description>Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:05.309-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:15.488-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:15.278-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10018 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:29:52.136-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:25.252-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="spamassassin is earlier than 0:3.1.8-2.el4" test_ref="oval:org.mitre.oval:tst:33518"/>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criterion comment="spamassassin is earlier than 0:3.1.8-2.el5" test_ref="oval:org.mitre.oval:tst:33739"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10017" version="5" class="vulnerability">
      <metadata>
        <title>The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2728" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2728"/>
        <description>The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:36.970-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:15.148-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:14.866-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10017 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:35.883-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:24.222-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-devel is earlier than 0:2.0.46-46.3.ent" test_ref="oval:org.mitre.oval:tst:31872"/>
            <criterion comment="mod_ssl is earlier than 1:2.0.46-46.3.ent" test_ref="oval:org.mitre.oval:tst:32030"/>
            <criterion comment="httpd is earlier than 0:2.0.46-46.3.ent" test_ref="oval:org.mitre.oval:tst:31190"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="httpd-suexec is earlier than 0:2.0.52-12.2.ent" test_ref="oval:org.mitre.oval:tst:32102"/>
            <criterion comment="httpd-manual is earlier than 0:2.0.52-12.2.ent" test_ref="oval:org.mitre.oval:tst:31655"/>
            <criterion comment="httpd-devel is earlier than 0:2.0.52-12.2.ent" test_ref="oval:org.mitre.oval:tst:32055"/>
            <criterion comment="mod_ssl is earlier than 1:2.0.52-12.2.ent" test_ref="oval:org.mitre.oval:tst:32103"/>
            <criterion comment="httpd is earlier than 0:2.0.52-12.2.ent" test_ref="oval:org.mitre.oval:tst:32015"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10016" version="5" class="vulnerability">
      <metadata>
        <title>The Javascript interpreter (jsinterp.c) in Mozilla and Firefox before 1.5.1 does not properly dereference objects, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via unknown attack vectors related to garbage collection.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-0292" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0292"/>
        <description>The Javascript interpreter (jsinterp.c) in Mozilla and Firefox before 1.5.1 does not properly dereference objects, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via unknown attack vectors related to garbage collection.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:42.503-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:14.475-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:14.280-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10016 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:09.686-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:23.036-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:32492"/>
            <criterion comment="mozilla is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:32486"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:32176"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31856"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:32548"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31980"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:32519"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:32478"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31709"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.12-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31881"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:32504"/>
            <criterion comment="mozilla is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:32502"/>
            <criterion comment="thunderbird is earlier than 0:1.0.8-1.4.1" test_ref="oval:org.mitre.oval:tst:32204"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:31570"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:31656"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:32458"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:32216"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:32359"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:32540"/>
            <criterion comment="firefox is earlier than 0:1.0.7-1.4.3" test_ref="oval:org.mitre.oval:tst:32384"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:32647"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.12-1.4.2" test_ref="oval:org.mitre.oval:tst:32454"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10015" version="5" class="vulnerability">
      <metadata>
        <title>The ipv6_getsockopt_sticky function in net/ipv6/ipv6_sockglue.c in the Linux kernel before 2.6.20.2 allows local users to read arbitrary kernel memory via certain getsockopt calls that trigger a NULL dereference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-1000" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1000"/>
        <description>The ipv6_getsockopt_sticky function in net/ipv6/ipv6_sockglue.c in the Linux kernel before 2.6.20.2 allows local users to read arbitrary kernel memory via certain getsockopt calls that trigger a NULL dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:13.542-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:14.113-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:13.839-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10015 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:36:00.135-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:40:58.516-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:22.159-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="kernel-kdump is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:33503"/>
          <criterion comment="kernel-xen is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:34071"/>
          <criterion comment="kernel-headers is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:33478"/>
          <criterion comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:33985"/>
          <criterion comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:34055"/>
          <criterion comment="kernel is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:34011"/>
          <criterion comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:33805"/>
          <criterion comment="kernel-devel is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:33899"/>
          <criterion comment="kernel-PAE is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:33709"/>
          <criterion comment="kernel-doc is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:34058"/>
          <criterion comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.3.el5" test_ref="oval:org.mitre.oval:tst:34043"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10014" version="5" class="vulnerability">
      <metadata>
        <title>The asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service (infinite loop) via a certain BER encoding.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0644" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0644"/>
        <description>The asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service (infinite loop) via a certain BER encoding.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:37.457-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:13.777-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:13.529-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10014 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:12.711-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:21.491-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="krb5-workstation is earlier than 0:1.2.7-28" test_ref="oval:org.mitre.oval:tst:30623"/>
          <criterion comment="krb5 is earlier than 0:1.2.7-28" test_ref="oval:org.mitre.oval:tst:30237"/>
          <criterion comment="krb5-libs is earlier than 0:1.2.7-28" test_ref="oval:org.mitre.oval:tst:30764"/>
          <criterion comment="krb5-server is earlier than 0:1.2.7-28" test_ref="oval:org.mitre.oval:tst:30376"/>
          <criterion comment="krb5-devel is earlier than 0:1.2.7-28" test_ref="oval:org.mitre.oval:tst:30595"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10013" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in Ethereal 0.8.13 to 0.10.2 allows attackers to cause a denial of service (segmentation fault) via a malformed color filter file.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1761" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1761"/>
        <description>Unknown vulnerability in Ethereal 0.8.13 to 0.10.2 allows attackers to cause a denial of service (segmentation fault) via a malformed color filter file.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:15.546-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:13.542-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:13.242-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10013 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:14.591-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:20.746-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="ethereal-gnome is earlier than 0:0.10.3-0.30E.1" test_ref="oval:org.mitre.oval:tst:29720"/>
          <criterion comment="ethereal is earlier than 0:0.10.3-0.30E.1" test_ref="oval:org.mitre.oval:tst:30448"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10012" version="5" class="vulnerability">
      <metadata>
        <title>Multiple unspecified vulnerabilities in the layout engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allow remote attackers to cause a denial of service (crash) and potentially execute arbitrary code via certain vectors.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0775" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0775"/>
        <description>Multiple unspecified vulnerabilities in the layout engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allow remote attackers to cause a denial of service (crash) and potentially execute arbitrary code via certain vectors.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:28:12.172-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:12.827-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:12.489-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10012 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:42.396-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:19.510-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33391"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33688"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33675"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33724"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33510"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33409"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33467"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33658"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33649"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el3" test_ref="oval:org.mitre.oval:tst:33381"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="devhelp-devel is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:32760"/>
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33554"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33648"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.10-0.1.el4" test_ref="oval:org.mitre.oval:tst:32765"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33712"/>
            <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33705"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33379"/>
            <criterion comment="devhelp is earlier than 0:0.10-0.7.el4" test_ref="oval:org.mitre.oval:tst:33400"/>
            <criterion comment="firefox is earlier than 0:1.5.0.10-0.1.el4" test_ref="oval:org.mitre.oval:tst:33759"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33678"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33695"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33697"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33244"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el4" test_ref="oval:org.mitre.oval:tst:33645"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.10-2.el5" test_ref="oval:org.mitre.oval:tst:33461"/>
            <criterion comment="yelp is earlier than 0:2.16.0-14.0.1.el5" test_ref="oval:org.mitre.oval:tst:33761"/>
            <criterion comment="devhelp-devel is earlier than 0:0.12-10.0.1.el5" test_ref="oval:org.mitre.oval:tst:33744"/>
            <criterion comment="devhelp is earlier than 0:0.12-10.0.1.el5" test_ref="oval:org.mitre.oval:tst:33415"/>
            <criterion comment="firefox is earlier than 0:1.5.0.10-2.el5" test_ref="oval:org.mitre.oval:tst:33616"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.10-1.el5" test_ref="oval:org.mitre.oval:tst:33493"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100117" version="1" class="vulnerability">
      <metadata>
        <title>libtiff Directory Entry Count Integer Overflow Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
          <product>libtiff</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1308" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1308"/>
        <description>Integer overflow in (1) tif_dirread.c and (2) tif_fax3.c for libtiff 3.5.7 and 3.7.0 allows remote attackers to execute arbitrary code via a TIFF file containing a TIFF_ASCII or TIFF_UNDEFINED directory entry with a -1 entry count, which leads to a heap-based buffer overflow.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Solaris 7 (SPARC) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Patch 118953-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:209"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 7 (x86) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Patch 118954-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:208"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Patch 109931-10 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:207"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Patch 109932-10 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:206"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criteria operator="OR" comment="Solaris 9 (SPARC) supporting criteria for Sun Alert ID 101677.">
            <criteria operator="AND" comment="Solaris 9 (SPARC) supporting CDE criteria for Sun Alert ID 101677.">
              <criterion comment="CDE Desktop Window Manager (SUNWdtwm) installed" negate="false" test_ref="oval:org.mitre.oval:tst:675"/>
              <criterion comment="Patch 114219-11 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:205"/>
            </criteria>
            <criterion comment="Pkg SUNWTiff is installed" negate="false" test_ref="oval:org.mitre.oval:tst:204"/>
            <criterion comment="Pkg SUNWTiffx is installed" negate="false" test_ref="oval:org.mitre.oval:tst:203"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criteria operator="OR" comment="Solaris 9 (x86) supporting criteria for Sun Alert ID 101677.">
            <criteria operator="AND" comment="Solaris 9 (x86) supporting CDE criteria for Sun Alert ID 101677.">
              <criterion comment="CDE Desktop Window Manager (SUNWdtwm) installed" negate="false" test_ref="oval:org.mitre.oval:tst:675"/>
              <criterion comment="Patch 114220-11 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:202"/>
            </criteria>
            <criterion comment="Pkg SUNWTiff is installed" negate="false" test_ref="oval:org.mitre.oval:tst:204"/>
            <criterion comment="Pkg SUNWTiffx is installed" negate="false" test_ref="oval:org.mitre.oval:tst:203"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:2459"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Pkg SUNWTiff is installed" negate="false" test_ref="oval:org.mitre.oval:tst:204"/>
          <criterion comment="Patch 119900-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:201"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:2459"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Pkg SUNWTiff is installed" negate="false" test_ref="oval:org.mitre.oval:tst:204"/>
          <criterion comment="Patch 119901-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:200"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100116" version="1" class="vulnerability">
      <metadata>
        <title>libtiff Malloc Error Denial of Service</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
          <product>libtiff</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0886" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0886"/>
        <description>Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service (crash or memory corruption) via TIFF images that lead to incorrect malloc calls.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Solaris 7 (SPARC) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Patch 118953-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:209"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 7 (x86) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Patch 118954-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:208"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Patch 109931-10 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:207"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Patch 109932-10 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:206"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criteria operator="OR" comment="Solaris 9 (SPARC) supporting criteria for Sun Alert ID 101677.">
            <criteria operator="AND" comment="Solaris 9 (SPARC) supporting CDE criteria for Sun Alert ID 101677.">
              <criterion comment="CDE Desktop Window Manager (SUNWdtwm) installed" negate="false" test_ref="oval:org.mitre.oval:tst:675"/>
              <criterion comment="Patch 114219-11 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:205"/>
            </criteria>
            <criterion comment="Pkg SUNWTiff is installed" negate="false" test_ref="oval:org.mitre.oval:tst:204"/>
            <criterion comment="Pkg SUNWTiffx is installed" negate="false" test_ref="oval:org.mitre.oval:tst:203"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criteria operator="OR" comment="Solaris 9 (x86) supporting criteria for Sun Alert ID 101677.">
            <criteria operator="AND" comment="Solaris 9 (x86) supporting CDE criteria for Sun Alert ID 101677.">
              <criterion comment="CDE Desktop Window Manager (SUNWdtwm) installed" negate="false" test_ref="oval:org.mitre.oval:tst:675"/>
              <criterion comment="Patch 114220-11 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:202"/>
            </criteria>
            <criterion comment="Pkg SUNWTiff is installed" negate="false" test_ref="oval:org.mitre.oval:tst:204"/>
            <criterion comment="Pkg SUNWTiffx is installed" negate="false" test_ref="oval:org.mitre.oval:tst:203"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:2459"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Pkg SUNWTiff is installed" negate="false" test_ref="oval:org.mitre.oval:tst:204"/>
          <criterion comment="Patch 119900-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:201"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:2459"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Pkg SUNWTiff is installed" negate="false" test_ref="oval:org.mitre.oval:tst:204"/>
          <criterion comment="Patch 119901-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:200"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100115" version="1" class="vulnerability">
      <metadata>
        <title>libtiff tif_dirread divide-by-zero Denial of Service</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
          <product>libtiff</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0804" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0804"/>
        <description>Vulnerability in tif_dirread.c for libtiff allows remote attackers to cause a denial of service (application crash) via a TIFF image that causes a divide-by-zero error when the number of row bytes is zero, a different vulnerability than CVE-2005-2452.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Solaris 7 (SPARC) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Patch 118953-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:209"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 7 (x86) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Patch 118954-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:208"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Patch 109931-10 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:207"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Patch 109932-10 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:206"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criteria operator="OR" comment="Solaris 9 (SPARC) supporting criteria for Sun Alert ID 101677.">
            <criteria operator="AND" comment="Solaris 9 (SPARC) supporting CDE criteria for Sun Alert ID 101677.">
              <criterion comment="CDE Desktop Window Manager (SUNWdtwm) installed" negate="false" test_ref="oval:org.mitre.oval:tst:675"/>
              <criterion comment="Patch 114219-11 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:205"/>
            </criteria>
            <criterion comment="Pkg SUNWTiff is installed" negate="false" test_ref="oval:org.mitre.oval:tst:204"/>
            <criterion comment="Pkg SUNWTiffx is installed" negate="false" test_ref="oval:org.mitre.oval:tst:203"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criteria operator="OR" comment="Solaris 9 (x86) supporting criteria for Sun Alert ID 101677.">
            <criteria operator="AND" comment="Solaris 9 (x86) supporting CDE criteria for Sun Alert ID 101677.">
              <criterion comment="CDE Desktop Window Manager (SUNWdtwm) installed" negate="false" test_ref="oval:org.mitre.oval:tst:675"/>
              <criterion comment="Patch 114220-11 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:202"/>
            </criteria>
            <criterion comment="Pkg SUNWTiff is installed" negate="false" test_ref="oval:org.mitre.oval:tst:204"/>
            <criterion comment="Pkg SUNWTiffx is installed" negate="false" test_ref="oval:org.mitre.oval:tst:203"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:2459"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Pkg SUNWTiff is installed" negate="false" test_ref="oval:org.mitre.oval:tst:204"/>
          <criterion comment="Patch 119900-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:201"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:2459"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Pkg SUNWTiff is installed" negate="false" test_ref="oval:org.mitre.oval:tst:204"/>
          <criterion comment="Patch 119901-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:200"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100114" version="1" class="vulnerability">
      <metadata>
        <title>libtiff RLE Decoder Buffer Overflow Vulnerabilities</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <platform>Sun Solaris 10</platform>
          <product>libtiff</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0803" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0803"/>
        <description>Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Solaris 7 (SPARC) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Patch 118953-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:209"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 7 (x86) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Patch 118954-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:208"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Patch 109931-10 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:207"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Patch 109932-10 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:206"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criteria operator="OR" comment="Solaris 9 (SPARC) supporting criteria for Sun Alert ID 101677.">
            <criteria operator="AND" comment="Solaris 9 (SPARC) supporting CDE criteria for Sun Alert ID 101677.">
              <criterion comment="CDE Desktop Window Manager (SUNWdtwm) installed" negate="false" test_ref="oval:org.mitre.oval:tst:675"/>
              <criterion comment="Patch 114219-11 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:205"/>
            </criteria>
            <criterion comment="Pkg SUNWTiff is installed" negate="false" test_ref="oval:org.mitre.oval:tst:204"/>
            <criterion comment="Pkg SUNWTiffx is installed" negate="false" test_ref="oval:org.mitre.oval:tst:203"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criteria operator="OR" comment="Solaris 9 (x86) supporting criteria for Sun Alert ID 101677.">
            <criteria operator="AND" comment="Solaris 9 (x86) supporting CDE criteria for Sun Alert ID 101677.">
              <criterion comment="CDE Desktop Window Manager (SUNWdtwm) installed" negate="false" test_ref="oval:org.mitre.oval:tst:675"/>
              <criterion comment="Patch 114220-11 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:202"/>
            </criteria>
            <criterion comment="Pkg SUNWTiff is installed" negate="false" test_ref="oval:org.mitre.oval:tst:204"/>
            <criterion comment="Pkg SUNWTiffx is installed" negate="false" test_ref="oval:org.mitre.oval:tst:203"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (SPARC) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:2459"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Pkg SUNWTiff is installed" negate="false" test_ref="oval:org.mitre.oval:tst:204"/>
          <criterion comment="Patch 119900-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:201"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 10 (x86) meets Sun Alert ID 101677 criteria.">
          <criterion comment="Solaris 10 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:2459"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Pkg SUNWTiff is installed" negate="false" test_ref="oval:org.mitre.oval:tst:204"/>
          <criterion comment="Patch 119901-01 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:200"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100113" version="1" class="vulnerability">
      <metadata>
        <title>X Display Manager DoS via Invalid XDMCP Request</title>
        <affected family="unix">
          <platform>Sun Solaris 7</platform>
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>XDM</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1347" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1347"/>
        <description>X Display Manager (XDM) on Solaris 8 allows remote attackers to cause a denial of service (XDM crash) via an invalid X Display Manager Control Protocol (XDMCP) request.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T04:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="Added CVE #">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-21T01:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criterion comment="Solaris 7 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3045"/>
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert ID 101549 criteria.">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Patch 111844-03 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:213"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert ID 101549 criteria.">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Patch 111845-03 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:212"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert ID 101549 criteria.">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Patch 112785-38 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:211"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert ID 101549 criteria.">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Patch 112786-27 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:210"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100112" version="2" class="vulnerability">
      <metadata>
        <title>Apache mod_proxy Content-Length Header Buffer Overflow</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>Apache httpd</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0492" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0492"/>
        <description>Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Corrected the logic in the criteria." date="2008-10-18T23:17:00.749-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2008-11-03T04:00:35.775-05:00">INTERIM</status_change>
            <status_change date="2008-11-24T04:00:08.014-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="Applicable version of Solaris is running">
          <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert ID 101555 criteria.">
            <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="sparc architecture" test_ref="oval:org.mitre.oval:tst:2465"/>
            <criterion negate="true" comment="Patch 116973-02 or later installed" test_ref="oval:org.mitre.oval:tst:217"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert ID 101555 criteria.">
            <criterion comment="Solaris 8 Installed" test_ref="oval:org.mitre.oval:tst:3145"/>
            <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:2463"/>
            <criterion negate="true" comment="Patch 116974-02 or later installed" test_ref="oval:org.mitre.oval:tst:216"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert ID 101555 criteria.">
            <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
            <criterion comment="sparc architecture" test_ref="oval:org.mitre.oval:tst:2465"/>
            <criterion negate="true" comment="Patch 113146-05 or later installed" test_ref="oval:org.mitre.oval:tst:215"/>
          </criteria>
          <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert ID 101555 criteria.">
            <criterion comment="Solaris 9 Installed" test_ref="oval:org.mitre.oval:tst:3051"/>
            <criterion comment="ix86 architecture" test_ref="oval:org.mitre.oval:tst:2463"/>
            <criterion negate="true" comment="Patch 114145-04 or later installed" test_ref="oval:org.mitre.oval:tst:214"/>
          </criteria>
        </criteria>
        <criterion comment="Apache running (httpd)" test_ref="oval:org.mitre.oval:tst:654"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100111" version="1" class="vulnerability">
      <metadata>
        <title>Apache Allow/Deny Parsing Error</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0993" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0993"/>
        <description>mod_access in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not properly parse Allow/Deny rules using IP addresses without a netmask, which could allow remote attackers to bypass intended access restrictions.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert ID 101555 criteria.">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Patch 116973-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:217"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert ID 101555 criteria.">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Patch 113146-05 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:215"/>
        </criteria>
        <criterion comment="Apache running (httpd)" negate="false" test_ref="oval:org.mitre.oval:tst:654"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100110" version="1" class="vulnerability">
      <metadata>
        <title>Apache Listening Socket Starvation Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0174"/>
        <description>Apache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when using multiple listening sockets on certain platforms, allows remote attackers to cause a denial of service (blocked new connections) via a "short-lived connection on a rarely-accessed listening socket."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert ID 101555 criteria.">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Patch 116973-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:217"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert ID 101555 criteria.">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Patch 116974-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:216"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert ID 101555 criteria.">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Patch 113146-05 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:215"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert ID 101555 criteria.">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Patch 114145-04 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:214"/>
        </criteria>
        <criterion comment="Apache running (httpd)" negate="false" test_ref="oval:org.mitre.oval:tst:654"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10011" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in the SG_IO functionality in ide-cd allows local users to bypass read-only access and perform unauthorized write and erase operations.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0813" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0813"/>
        <description>Unknown vulnerability in the SG_IO functionality in ide-cd allows local users to bypass read-only access and perform unauthorized write and erase operations.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:31.634-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:12.497-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:12.165-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10011 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:33.475-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:18.701-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="pam-devel is earlier than 0:0.75-72" test_ref="oval:org.mitre.oval:tst:34483"/>
          <criterion comment="pam is earlier than 0:0.75-72" test_ref="oval:org.mitre.oval:tst:34274"/>
          <criterion comment="mkisofs is earlier than 8:2.01.0.a32-0.EL3.6" test_ref="oval:org.mitre.oval:tst:34392"/>
          <criterion comment="cdrecord is earlier than 8:2.01.0.a32-0.EL3.6" test_ref="oval:org.mitre.oval:tst:34405"/>
          <criterion comment="cdrtools is earlier than 8:2.01.0.a32-0.EL3.6" test_ref="oval:org.mitre.oval:tst:33947"/>
          <criterion comment="cdrecord-devel is earlier than 8:2.01.0.a32-0.EL3.6" test_ref="oval:org.mitre.oval:tst:34263"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100109" version="1" class="vulnerability">
      <metadata>
        <title>Apache Error Log Escape Sequence Filtering Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0020"/>
        <description>Apache does not filter terminal escape sequences from its error logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert ID 101555 criteria.">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Patch 116973-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:217"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert ID 101555 criteria.">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Patch 116974-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:216"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert ID 101555 criteria.">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Patch 113146-05 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:215"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert ID 101555 criteria.">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Patch 114145-04 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:214"/>
        </criteria>
        <criterion comment="Apache running (httpd)" negate="false" test_ref="oval:org.mitre.oval:tst:654"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100108" version="1" class="vulnerability">
      <metadata>
        <title>Apache Nonce Verification Response Replay Vulnerability</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <platform>Sun Solaris 9</platform>
          <product>Apache</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2003-0987" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0987"/>
        <description>mod_digest for Apache before 1.3.31 does not properly verify the nonce of a client response by using a AuthNonce secret.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">DRAFT</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Solaris 8 (SPARC) meets Sun Alert ID 101555 criteria.">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Patch 116973-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:217"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 8 (x86) meets Sun Alert ID 101555 criteria.">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Patch 116974-02 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:216"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (SPARC) meets Sun Alert ID 101555 criteria.">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="sparc architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2465"/>
          <criterion comment="Patch 113146-05 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:215"/>
        </criteria>
        <criteria operator="AND" comment="Solaris 9 (x86) meets Sun Alert ID 101555 criteria.">
          <criterion comment="Solaris 9 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3051"/>
          <criterion comment="ix86 architecture" negate="false" test_ref="oval:org.mitre.oval:tst:2463"/>
          <criterion comment="Patch 114145-04 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:214"/>
        </criteria>
        <criterion comment="Apache running (httpd)" negate="false" test_ref="oval:org.mitre.oval:tst:654"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100107" version="2" class="vulnerability">
      <metadata>
        <title>Firefox and Mozilla top.focus() Cross-Site Scripting Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2266" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2266"/>
        <description>Firefox before 1.0.5 and Mozilla before 1.7.9 allows a child frame to call top.focus and other methods in a parent frame, even when the parent is in a different domain, which violates the same origin policy and allows remote attackers to steal sensitive information such as cookies and passwords from web sites whose child frames do not verify that they are in the same domain as their parents.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T04:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <modified date="2005-09-07T04:00:00.000-04:00" comment="Added description">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2005-09-19T04:05:00.000-04:00" comment="modified wrt-10048 - Removed extra \\ in key">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2005-10-12T05:49:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:259: Added beginning anchors to regular expression in pattern match, to avoid mid-string matches." date="2007-01-22T01:46:00.843-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T01:50:42.494-05:00">INTERIM</status_change>
            <modified comment="Fixed ste:261: Added beginning anchors to the regular expression used in the pattern match, to avoid mid-string matches." date="2007-01-22T01:50:00.388-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-02-20T13:39:25.841-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criterion comment="Firefox version 1.0.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:263"/>
        <criterion comment="Mozilla Suite version 1.7.8 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:261"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100104" version="6" class="vulnerability">
      <metadata>
        <title>Server 2003 PKINIT Information Disclosure Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1982" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1982"/>
        <description>Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allow a local user to obtain information and spoof a server via a man-in-the-middle (MITM) attack between a client and a domain controller when PKINIT smart card authentication is being used.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:08:58.025-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:25.552-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:100104 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:38.790-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:08.574-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of kerberos.dll is less than 5.2.3790.347" test_ref="oval:org.mitre.oval:tst:218"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100103" version="6" class="vulnerability">
      <metadata>
        <title>Server 2003 Kerberos Message DoS Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows Server 2003</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1981" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1981"/>
        <description>Unknown vulnerability in Microsoft Windows 2000 Server and Windows Server 2003 domain controllers allows remote authenticated users to cause a denial of service (system crash) via a crafted Kerberos message.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Removed unneeded ste:2282 from tst:2437. Deprecated ste:2282 since it is no longer used." date="2007-01-12T07:06:00.595-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-12T07:09:01.328-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:25.330-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:100103 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:04:38.037-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:08.267-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Windows Server 2003 is installed" test_ref="oval:org.mitre.oval:tst:2761"/>
        <criterion negate="true" comment="Win2K/XP/2003 is patched" test_ref="oval:org.mitre.oval:tst:2437"/>
        <criterion comment="the version of kerberos.dll is less than 5.2.3790.347" test_ref="oval:org.mitre.oval:tst:218"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10010" version="5" class="vulnerability">
      <metadata>
        <title>The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows remote attackers to use InstallTrigger to spoof the hostname of the host performing the installation via a long "user:pass" sequence in the URL, which appears before the real hostname.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0590" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0590"/>
        <description>The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows remote attackers to use InstallTrigger to spoof the hostname of the host performing the installation via a long "user:pass" sequence in the URL, which appears before the real hostname.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:27:21.770-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:12.070-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:11.634-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10010 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:44.718-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:17.731-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="mozilla-js-debugger is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31283"/>
            <criterion comment="mozilla is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31520"/>
            <criterion comment="mozilla-chat is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31645"/>
            <criterion comment="mozilla-mail is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31516"/>
            <criterion comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31569"/>
            <criterion comment="mozilla-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31143"/>
            <criterion comment="mozilla-nss is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31512"/>
            <criterion comment="mozilla-nss-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31785"/>
            <criterion comment="mozilla-nspr is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31695"/>
            <criterion comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.1.3.4" test_ref="oval:org.mitre.oval:tst:31626"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criterion comment="firefox is earlier than 0:1.0.1-1.4.3" test_ref="oval:org.mitre.oval:tst:31118"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:1001" version="1" class="vulnerability">
      <metadata>
        <title>Integer overflow in the "Max-dotdot" CVS protocol command</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <product>CVS</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0417" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0417"/>
        <description>Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space.</description>
        <oval_repository>
          <dates>
            <submitted date="2004-06-29T12:00:00.000-04:00">
              <contributor organization="Bastille Linux">Jay Beale</contributor>
            </submitted>
            <status_change date="2004-07-21T12:00:00.000-04:00">INTERIM</status_change>
            <status_change date="2004-08-04T12:00:00.000-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Red Hat Enterprise 3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:2861"/>
          <criterion comment="cvs rpm version prior to 1.11.2-24 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:1347"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="OR" comment="/usr/bin/cvs is executable">
            <criterion comment="/usr/bin/cvs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1381"/>
            <criterion comment="/usr/bin/cvs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1380"/>
            <criterion comment="/usr/bin/cvs is executable" negate="false" test_ref="oval:org.mitre.oval:tst:1379"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100096" version="6" class="vulnerability">
      <metadata>
        <title>Windows 2000 PKINIT Information Disclosure Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1982" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1982"/>
        <description>Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allow a local user to obtain information and spoof a server via a man-in-the-middle (MITM) attack between a client and a domain controller when PKINIT smart card authentication is being used.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:06.969-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:38.194-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:100096 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:14.198-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:05.891-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="the version of kerberos.dll is less than 5.0.2195.7053" test_ref="oval:org.mitre.oval:tst:222"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100095" version="6" class="vulnerability">
      <metadata>
        <title>Windows 2000 Kerberos Message DoS Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows 2000</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1981" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1981"/>
        <description>Unknown vulnerability in Microsoft Windows 2000 Server and Windows Server 2003 domain controllers allows remote authenticated users to cause a denial of service (system crash) via a crafted Kerberos message.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed regex in ste:2889.  Implemented by Matthew Wojcik." date="2007-03-06T18:19:00.507-05:00">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2007-03-06T18:21:06.415-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:37.938-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:100095 - Various corrections to comments and products to align with Authoring Style Guide" date="2011-04-22T23:54:00.899-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-04-23T00:06:12.210-04:00">INTERIM</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Added an additional test for Windows Server 2003 platforms to test for the existence of the NT Directory Services" date="2011-04-25T14:34:00.432-04:00">
              <contributor organization="Telos">Sudhir Gandhe</contributor>
            </modified>
            <modified comment="EDITED oval:org.mitre.oval:obj:717 - Reverted mistaken switch of obj:717 (Service Pack) and obj:15869 (NT Directory Services)" date="2011-04-26T11:53:00.464-04:00">
              <contributor organization="G2, Inc.">Shane Shaffer</contributor>
            </modified>
            <status_change date="2011-05-16T04:00:05.520-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="AND" comment="Windows 2000 Service Pack 4 (or later) is installed">
          <criterion comment="Windows 2000 is installed" test_ref="oval:org.mitre.oval:tst:3085"/>
          <criterion comment="Win2K/XP/2003 service pack 4 (or later) is installed" test_ref="oval:org.mitre.oval:tst:3084"/>
        </criteria>
        <criterion comment="the version of kerberos.dll is less than 5.0.2195.7053" test_ref="oval:org.mitre.oval:tst:222"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10009" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Firefox before 2.0.0.5 allows remote attackers to execute arbitrary code with chrome privileges by calling an event handler from an unspecified "element outside of a document."</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-3737" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3737"/>
        <description>Mozilla Firefox before 2.0.0.5 allows remote attackers to execute arbitrary code with chrome privileges by calling an event handler from an unspecified "element outside of a document."</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:16.558-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:11.391-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:10.905-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10009 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:17.574-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:16.574-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:33986"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34827"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34839"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34762"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34814"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34694"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34925"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34684"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34723"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.3.el3" test_ref="oval:org.mitre.oval:tst:34747"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34968"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34971"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-0.3.el4" test_ref="oval:org.mitre.oval:tst:34888"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34868"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34492"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34775"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-0.3.el4" test_ref="oval:org.mitre.oval:tst:34828"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34981"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34335"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34957"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34550"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-4.el4" test_ref="oval:org.mitre.oval:tst:34608"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="firefox-devel is earlier than 0:1.5.0.12-3.el5" test_ref="oval:org.mitre.oval:tst:34810"/>
            <criterion comment="firefox is earlier than 0:1.5.0.12-3.el5" test_ref="oval:org.mitre.oval:tst:34667"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-3.el5" test_ref="oval:org.mitre.oval:tst:34869"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10008" version="5" class="vulnerability">
      <metadata>
        <title>The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of the tar file that is dragged to the smiley selector.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-0784" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0784"/>
        <description>The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of the tar file that is dragged to the smiley selector.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:19:54.298-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:11.145-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:10.632-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10008 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:55.399-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:15.966-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL3 or CentOS3">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
          <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
        </criteria>
        <criterion comment="gaim is earlier than 1:0.82.1-0.RHEL3" test_ref="oval:org.mitre.oval:tst:30434"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10007" version="5" class="vulnerability">
      <metadata>
        <title>Unknown vulnerability in the (1) GIOP dissector, (2) WBXML, or (3) CAMEL dissector in Ethereal 0.8.20 through 0.10.11 allows remote attackers to cause a denial of service (application crash) via certain packets that cause a null pointer dereference.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2364" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2364"/>
        <description>Unknown vulnerability in the (1) GIOP dissector, (2) WBXML, or (3) CAMEL dissector in Ethereal 0.8.20 through 0.10.11 allows remote attackers to cause a denial of service (application crash) via certain packets that cause a null pointer dereference.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:02.623-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:10.798-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:10.323-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10007 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:24.905-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:15.333-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.12-1.EL3.1" test_ref="oval:org.mitre.oval:tst:31966"/>
            <criterion comment="ethereal is earlier than 0:0.10.12-1.EL3.1" test_ref="oval:org.mitre.oval:tst:32076"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ethereal-gnome is earlier than 0:0.10.12-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32122"/>
            <criterion comment="ethereal is earlier than 0:0.10.12-1.EL4.1" test_ref="oval:org.mitre.oval:tst:32035"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10006" version="5" class="vulnerability">
      <metadata>
        <title>The ext2 file system code in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via an ext2 stream with malformed data structures that triggers an error in the ext2_check_page due to a length that is smaller than the minimum.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2006-6054" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6054"/>
        <description>The ext2 file system code in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via an ext2 stream with malformed data structures that triggers an error in the ext2_check_page due to a length that is smaller than the minimum.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:22.875-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:10.299-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:09.704-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10006 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:00.117-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:14.465-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-BOOT is earlier than 0:2.4.21-50.EL" test_ref="oval:org.mitre.oval:tst:34140"/>
            <criterion comment="kernel-unsupported is earlier than 0:2.4.21-50.EL" test_ref="oval:org.mitre.oval:tst:34214"/>
            <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-50.EL" test_ref="oval:org.mitre.oval:tst:34585"/>
            <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-50.EL" test_ref="oval:org.mitre.oval:tst:34516"/>
            <criterion comment="kernel-hugemem is earlier than 0:2.4.21-50.EL" test_ref="oval:org.mitre.oval:tst:34527"/>
            <criterion comment="kernel is earlier than 0:2.4.21-50.EL" test_ref="oval:org.mitre.oval:tst:34623"/>
            <criterion comment="kernel-source is earlier than 0:2.4.21-50.EL" test_ref="oval:org.mitre.oval:tst:34622"/>
            <criterion comment="kernel-doc is earlier than 0:2.4.21-50.EL" test_ref="oval:org.mitre.oval:tst:34567"/>
            <criterion comment="kernel-smp is earlier than 0:2.4.21-50.EL" test_ref="oval:org.mitre.oval:tst:34576"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="kernel-hugemem is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33204"/>
            <criterion comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33278"/>
            <criterion comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33306"/>
            <criterion comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32378"/>
            <criterion comment="kernel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33145"/>
            <criterion comment="kernel-devel is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33107"/>
            <criterion comment="kernel-doc is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32620"/>
            <criterion comment="kernel-largesmp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:32645"/>
            <criterion comment="kernel-smp is earlier than 0:2.6.9-42.0.8.EL" test_ref="oval:org.mitre.oval:tst:33057"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100057" version="4" class="vulnerability">
      <metadata>
        <title>Mozilla Local File Loading Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0141" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0141"/>
        <description>Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to load local files via links "with a custom getter and toString method" that are middle-clicked by the user to be opened in a new tab.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:240" date="2007-02-12T10:21:00.419-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T10:23:01.237-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:241" date="2007-02-12T13:51:00.885-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:232" date="2007-02-12T13:56:00.878-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:233" date="2007-02-12T13:58:00.347-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:37.640-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:234" date="2007-04-23T12:05:00.430-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:05:56.962-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:229" date="2007-04-23T12:05:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:50.239-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 0.9 or earlier is installed">
          <criterion comment="Firefox version 0.9 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:243"/>
          <criterion comment="Mozilla Firefox version 0.9 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:242"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.4 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:235"/>
          <criterion comment="Mozilla Suite version 1.7.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:234"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100056" version="4" class="vulnerability">
      <metadata>
        <title>Mozilla Creates World-readable temp Files</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0142" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0142"/>
        <description>Firefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save temporary files with world-readable permissions, which allows local users to read certain web content or attachments that belong to other users, e.g. content that is managed by helper applications such as PDF.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T04:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <modified date="2005-09-19T04:00:00.000-04:00" comment="modified wrt-10060 - Removed extra \\ in key">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2005-10-05T11:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-26T06:46:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:236" date="2007-02-12T13:53:00.146-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T13:53:51.272-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:237" date="2007-02-12T13:55:00.760-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:228" date="2007-02-12T13:59:00.387-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:229" date="2007-02-12T14:00:00.680-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:230" date="2007-02-12T13:54:00.993-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:231" date="2007-02-26T08:05:00.981-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:37.316-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:232" date="2007-04-23T12:05:00.713-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:07:01.823-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:225" date="2007-04-23T12:05:00.147-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:227" date="2007-04-23T12:05:00.984-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:49.901-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Suite version 1.7-1.7.3 is installed">
          <criterion comment="Mozilla Suite version 1.7-1.7.3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:239"/>
          <criterion comment="Mozilla Suite version 1.7-1.7.3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:238"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Firefox version 0.9 is installed">
          <criterion comment="Firefox version 0.9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:233"/>
          <criterion comment="Mozilla Firefox version 0.9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:232"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Thunderbird version 0.6-0.8 is installed">
          <criterion comment="Mozilla Thunderbird version 0.6-0.8 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:231"/>
          <criterion comment="Mozilla Thunderbird version 0.6-0.8 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:230"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100055" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla SSL Lock Image Spoofing during Binary Download</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0143" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0143"/>
        <description>Firefox before 1.0 and Mozilla before 1.7.5 display the SSL lock icon when an insecure page loads a binary file from a trusted site, which could facilitate phishing attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:55:00.000-04:00" comment="Added Firefox, Mozilla as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:240" date="2007-02-12T10:21:00.419-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T10:23:01.697-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:241" date="2007-02-12T13:51:00.885-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:232" date="2007-02-12T13:56:00.878-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:233" date="2007-02-12T13:58:00.347-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:36.921-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:234" date="2007-04-23T12:05:00.430-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:05:57.981-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:229" date="2007-04-23T12:05:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:49.517-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 0.9 or earlier is installed">
          <criterion comment="Firefox version 0.9 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:243"/>
          <criterion comment="Mozilla Firefox version 0.9 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:242"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.4 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:235"/>
          <criterion comment="Mozilla Suite version 1.7.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:234"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100054" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla SSL Lock Image Spoofing via "View Source"</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0144" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0144"/>
        <description>Firefox before 1.0 and Mozilla before 1.7.5 display the secure site lock icon when a view-source: URL references a secure SSL site while an insecure page is being loaded, which could facilitate phishing attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:54:00.000-04:00" comment="Added Firefox, Mozilla as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:240" date="2007-02-12T10:21:00.419-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T10:23:00.566-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:241" date="2007-02-12T13:51:00.885-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:232" date="2007-02-12T13:56:00.878-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:233" date="2007-02-12T13:58:00.347-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:36.561-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:234" date="2007-04-23T12:05:00.430-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:05:55.581-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:229" date="2007-04-23T12:05:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:49.112-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 0.9 or earlier is installed">
          <criterion comment="Firefox version 0.9 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:243"/>
          <criterion comment="Mozilla Firefox version 0.9 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:242"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.4 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:235"/>
          <criterion comment="Mozilla Suite version 1.7.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:234"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100053" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Inactive Tab Form Data Theft Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1381" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1381"/>
        <description>Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input being entered in the active tab, as originally reported using form fields, which allows remote attackers to steal sensitive data that is intended for other sites, which could facilitate phishing attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:52:00.000-04:00" comment="Added Firefox, Mozilla as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:240" date="2007-02-12T10:21:00.419-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T10:23:01.978-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:241" date="2007-02-12T13:51:00.885-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:232" date="2007-02-12T13:56:00.878-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:233" date="2007-02-12T13:58:00.347-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:36.128-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:234" date="2007-04-23T12:05:00.430-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:05:58.446-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:229" date="2007-04-23T12:05:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:48.772-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 0.9 or earlier is installed">
          <criterion comment="Firefox version 0.9 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:243"/>
          <criterion comment="Mozilla Firefox version 0.9 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:242"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.4 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:235"/>
          <criterion comment="Mozilla Suite version 1.7.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:234"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100052" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Malicious news: Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Thunderbird</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1316" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1316"/>
        <description>Heap-based buffer overflow in MSG_UnEscapeSearchUrl in nsNNTPProtocol.cpp for Mozilla 1.7.3 and earlier allows remote attackers to cause a denial of service (application crash) via an NNTP URL (news:) with a trailing '\' (backslash) character, which prevents a string from being NULL terminated.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T04:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="Added CVE #">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-10-05T11:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-26T06:46:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:51:00.000-04:00" comment="Added Mozilla, Thunderbird as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:235." date="2007-01-24T21:18:00.747-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-24T21:19:13.853-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:234." date="2007-01-24T21:23:00.750-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:232" date="2007-02-12T13:56:00.878-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:233" date="2007-02-12T13:58:00.347-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:35.728-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:231" date="2007-04-23T12:05:00.336-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:08:38.450-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:229" date="2007-04-23T12:05:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:48.341-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Thunderbird version 0.8 or earlier is installed">
          <criterion comment="Mozilla Thunderbird version 0.8 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:237"/>
          <criterion comment="Mozilla Thunderbird version 0.8 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:236"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.4 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:235"/>
          <criterion comment="Mozilla Suite version 1.7.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:234"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100051" version="5" class="vulnerability">
      <metadata>
        <title>Firefox Script-generated Download Prompt Bypass</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0145" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0145"/>
        <description>Firefox before 1.0 does not properly distinguish between user-generated and synthetic click events, which allows remote attackers to use Javascript to bypass the file download prompt when the user uses the Alt-click feature.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:49:00.000-04:00" comment="Added Firefox as affected product.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:240" date="2007-02-12T10:21:00.419-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T10:23:01.033-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:241" date="2007-02-12T13:51:00.885-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:35.323-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:234" date="2007-04-23T12:05:00.430-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:05:56.458-04:00">INTERIM</status_change>
            <status_change date="2007-05-09T16:10:48.015-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 0.9 or earlier is installed">
          <criterion comment="Firefox version 0.9 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:243"/>
          <criterion comment="Mozilla Firefox version 0.9 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:242"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100050" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Inactive Tab Dialog Box Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Mozilla Firefox</product>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1380"/>
        <description>Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows and facilitate phishing attacks, aka the "Dialog Box Spoofing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:240" date="2007-02-12T10:21:00.419-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T10:23:00.822-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:241" date="2007-02-12T13:51:00.885-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:232" date="2007-02-12T13:56:00.878-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:233" date="2007-02-12T13:58:00.347-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:35.026-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:234" date="2007-04-23T12:05:00.430-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:05:56.038-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:229" date="2007-04-23T12:05:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:47.647-04:00">ACCEPTED</status_change>
            <modified comment="Added affected products" date="2007-09-07T16:30:00.851-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-09-07T16:31:03.862-04:00">INTERIM</status_change>
            <status_change date="2007-09-27T08:57:38.656-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 0.9 or earlier is installed">
          <criterion comment="Firefox version 0.9 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:243"/>
          <criterion comment="Mozilla Firefox version 0.9 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:242"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.4 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:235"/>
          <criterion comment="Mozilla Suite version 1.7.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:234"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10005" version="5" class="vulnerability">
      <metadata>
        <title>The htmlspecialchars function in PHP before 5.2.12 does not properly handle (1) overlong UTF-8 sequences, (2) invalid Shift_JIS sequences, and (3) invalid EUC-JP sequences, which allows remote attackers to conduct cross-site scripting (XSS) attacks by placing a crafted byte sequence before a special character.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-4142" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4142"/>
        <description>The htmlspecialchars function in PHP before 5.2.12 does not properly handle (1) overlong UTF-8 sequences, (2) invalid Shift_JIS sequences, and (3) invalid EUC-JP sequences, which allows remote attackers to conduct cross-site scripting (XSS) attacks by placing a crafted byte sequence before a special character.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:20:18.602-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:09.372-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:08.680-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10005 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:34.605-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:12.490-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39717"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39629"/>
            <criterion comment="php-mysql is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39915"/>
            <criterion comment="php-ldap is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39741"/>
            <criterion comment="php-imap is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:40003"/>
            <criterion comment="php-odbc is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39901"/>
            <criterion comment="php-devel is earlier than 0:4.3.2-54.ent" test_ref="oval:org.mitre.oval:tst:39326"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39580"/>
            <criterion comment="php-snmp is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:40010"/>
            <criterion comment="php-domxml is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39927"/>
            <criterion comment="php-mysql is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39619"/>
            <criterion comment="php-imap is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39111"/>
            <criterion comment="php-gd is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39417"/>
            <criterion comment="php is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39899"/>
            <criterion comment="php-mbstring is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39642"/>
            <criterion comment="php-pgsql is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39821"/>
            <criterion comment="php-pear is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39461"/>
            <criterion comment="php-ldap is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39627"/>
            <criterion comment="php-odbc is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39886"/>
            <criterion comment="php-ncurses is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39848"/>
            <criterion comment="php-devel is earlier than 0:4.3.9-3.29" test_ref="oval:org.mitre.oval:tst:39908"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="php-bcmath is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39883"/>
            <criterion comment="php-soap is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39544"/>
            <criterion comment="php-common is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39804"/>
            <criterion comment="php-mysql is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39875"/>
            <criterion comment="php-imap is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39748"/>
            <criterion comment="php-gd is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39802"/>
            <criterion comment="php is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39053"/>
            <criterion comment="php-mbstring is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39854"/>
            <criterion comment="php-pgsql is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39980"/>
            <criterion comment="php-xml is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39581"/>
            <criterion comment="php-ldap is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39954"/>
            <criterion comment="php-odbc is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39018"/>
            <criterion comment="php-ncurses is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39463"/>
            <criterion comment="php-devel is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39634"/>
            <criterion comment="php-xmlrpc is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39436"/>
            <criterion comment="php-snmp is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39969"/>
            <criterion comment="php-pdo is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39664"/>
            <criterion comment="php-dba is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39913"/>
            <criterion comment="php-cli is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:org.mitre.oval:tst:39765"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100049" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla 407 Proxy Information Disclosure Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0147" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0147"/>
        <description>Firefox before 1.0 and Mozilla before 1.7.5, when configured to use a proxy, respond to 407 proxy auth requests from arbitrary servers, which allows remote attackers to steal NTLM or SPNEGO credentials.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:47:00.000-04:00" comment="Added Firefox, Mozilla as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:240" date="2007-02-12T10:21:00.419-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T10:23:02.225-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:241" date="2007-02-12T13:51:00.885-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:232" date="2007-02-12T13:56:00.878-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:233" date="2007-02-12T13:58:00.347-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:34.685-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:234" date="2007-04-23T12:05:00.430-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:05:58.917-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:229" date="2007-04-23T12:05:00.501-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:47.226-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 0.9 or earlier is installed">
          <criterion comment="Firefox version 0.9 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:243"/>
          <criterion comment="Mozilla Firefox version 0.9 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:242"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.4 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:235"/>
          <criterion comment="Mozilla Suite version 1.7.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:234"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100048" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Thunderbird Subject to IE Vulnerabilities via javascript</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Mozilla Thunderbird</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0148" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0148"/>
        <description>Thunderbird before 0.9, when running on Windows systems, uses the default handler when processing javascript: links, which invokes Internet Explorer and may expose the Thunderbird user to vulnerabilities in the version of Internet Explorer that is installed on the user's system.  NOTE: since the invocation between multiple products is a common practice, and the vulnerabilities inherent in multi-product interactions are not easily enumerable, this issue might be REJECTED in the future.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:46:00.000-04:00" comment="Added Thunderbird as affected product.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:235." date="2007-01-24T21:18:00.747-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-24T21:19:14.166-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:234." date="2007-01-24T21:23:00.750-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-20T13:39:25.007-05:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:231" date="2007-04-23T12:05:00.336-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:08:38.812-04:00">INTERIM</status_change>
            <status_change date="2007-05-09T16:10:46.883-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Thunderbird version 0.8 or earlier is installed">
          <criterion comment="Mozilla Thunderbird version 0.8 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:237"/>
          <criterion comment="Mozilla Thunderbird version 0.8 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:236"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100047" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Mail News Cookie Security Bypass Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0149" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0149"/>
        <description>Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers bypass the user's intended privacy and security policy by using cookies in e-mail messages.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-01-25T04:03:00.000-04:00" comment="Added Mozilla as affected product.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-01-25T07:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:239." date="2007-01-24T21:21:00.700-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-01-24T21:21:47.803-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:238." date="2007-01-24T21:25:00.771-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:236" date="2007-02-12T13:53:00.146-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:237" date="2007-02-12T13:55:00.760-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:34.281-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:232" date="2007-04-23T12:05:00.713-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:07:02.200-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:233" date="2007-04-23T12:05:00.594-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:46.289-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Thunderbird version 0.6-0.9 or earlier is installed">
          <criterion comment="Mozilla Thunderbird version 0.6-0.9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:241"/>
          <criterion comment="Mozilla Thunderbird version 0.6-0.9 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:240"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7-1.7.3 is installed">
          <criterion comment="Mozilla Suite version 1.7-1.7.3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:239"/>
          <criterion comment="Mozilla Suite version 1.7-1.7.3 is installed" negate="false" test_ref="oval:org.mitre.oval:tst:238"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100046" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Livefeed Bookmark Cookie Swiping</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0150" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0150"/>
        <description>Firefox before 1.0 allows the user to store a (1) javascript: or (2) data: URLs as a Livefeed bookmark, then executes it in the security context of the currently loaded page when the user later accesses the bookmark, which could allow remote attackers to execute arbitrary code.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:44:00.000-04:00" comment="Added Firefox as affected product.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:240" date="2007-02-12T10:21:00.419-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T10:23:01.460-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:241" date="2007-02-12T13:51:00.885-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:33.962-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:234" date="2007-04-23T12:05:00.430-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:05:57.436-04:00">INTERIM</status_change>
            <status_change date="2007-05-09T16:10:45.931-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 0.9 or earlier is installed">
          <criterion comment="Firefox version 0.9 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:243"/>
          <criterion comment="Mozilla Firefox version 0.9 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:242"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100045" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Popup Content Spoofing Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2004-1156" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1156"/>
        <description>Mozilla before 1.7.6, and Firefox before 1.0.1, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:43:00.000-04:00" comment="Added Firefox, Mozilla as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:244" date="2007-02-12T09:46:00.841-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T09:47:23.547-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:245" date="2007-02-12T09:49:00.289-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:242" date="2007-02-12T10:12:00.118-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:243" date="2007-02-12T10:13:00.712-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:33.532-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:236" date="2007-04-23T11:53:00.689-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:00:30.527-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:235" date="2007-04-23T11:53:00.146-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:45.305-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla  Firefox version 1.0 or earlier is installed">
          <criterion comment="Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:245"/>
          <criterion comment="Mozilla Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:244"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.5 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:247"/>
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:246"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100044" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla SSL Lock Image Spoofing Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0593" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0593"/>
        <description>Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote attackers to spoof the SSL "secure site" lock icon via (1) a web site that does not finish loading, which shows the lock of the previous site, (2) a non-HTTP server that uses SSL, which causes the lock to be displayed when the SSL handshake is completed, or (3) a URL that generates an HTTP 204 error, which updates the icon and location information but does not change the display of the original site.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:42:00.000-04:00" comment="Added Firefox, Mozilla as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:244" date="2007-02-12T09:46:00.841-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T09:47:24.996-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:245" date="2007-02-12T09:49:00.289-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:242" date="2007-02-12T10:12:00.118-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:243" date="2007-02-12T10:13:00.712-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:33.107-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:236" date="2007-04-23T11:53:00.689-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:00:32.385-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:235" date="2007-04-23T11:53:00.146-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:44.843-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla  Firefox version 1.0 or earlier is installed">
          <criterion comment="Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:245"/>
          <criterion comment="Mozilla Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:244"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.5 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:247"/>
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:246"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100043" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla UTF8 to Unicode Conversion Heap Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
          <product>Mozilla Thunderbird</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0592" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0592"/>
        <description>Heap-based buffer overflow in the UTF8ToNewUnicode function for Firefox before 1.0.1 and Mozilla before 1.7.6 might allow remote attackers to cause a denial of service (crash) or execute arbitrary code via invalid sequences in a UTF8 encoded string that result in a zero length value.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:41:00.000-04:00" comment="Added Firefox, Mozilla, Thunderbird as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:244" date="2007-02-12T09:46:00.841-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T09:47:20.980-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:245" date="2007-02-12T09:49:00.289-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:246" date="2007-02-12T10:04:00.665-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:247" date="2007-02-12T10:07:00.390-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:242" date="2007-02-12T10:12:00.118-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:243" date="2007-02-12T10:13:00.712-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:32.778-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:236" date="2007-04-23T11:53:00.689-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:00:26.838-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:237" date="2007-04-23T11:53:00.235-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:235" date="2007-04-23T11:53:00.146-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:44.311-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla  Firefox version 1.0 or earlier is installed">
          <criterion comment="Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:245"/>
          <criterion comment="Mozilla Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:244"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Thunderbird version 1.0 or earlier is installed">
          <criterion comment="Mozilla Thunderbird version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:249"/>
          <criterion comment="Mozilla Thunderbird version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:248"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.5 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:247"/>
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:246"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100042" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Download/Security Dialogs Spoofing Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0591" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0591"/>
        <description>Firefox before 1.0.1 allows remote attackers to spoof the (1) security and (2) download modal dialog boxes, which could be used to trick users into executing script or downloading and executing a file, aka "Firespoofing."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-01-31T06:29:00.000-04:00" comment="Updated reference to CVE-2005-0591.  Set product to Mozilla.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <modified date="2006-02-01T05:40:00.000-04:00" comment="Added Firefox to affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:244" date="2007-02-12T09:46:00.841-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T09:47:22.898-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:245" date="2007-02-12T09:49:00.289-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:242" date="2007-02-12T10:12:00.118-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:243" date="2007-02-12T10:13:00.712-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:32.517-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:236" date="2007-04-23T11:53:00.689-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:00:29.764-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:235" date="2007-04-23T11:53:00.146-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:43.836-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla  Firefox version 1.0 or earlier is installed">
          <criterion comment="Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:245"/>
          <criterion comment="Mozilla Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:244"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.5 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:247"/>
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:246"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100041" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla 'user:pass@host' Spoofing Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
          <product>Mozilla Thunderbird</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0590" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0590"/>
        <description>The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows remote attackers to use InstallTrigger to spoof the hostname of the host performing the installation via a long "user:pass" sequence in the URL, which appears before the real hostname.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:38:00.000-04:00" comment="Added Firefox, Mozilla, Thunderbird as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:244" date="2007-02-12T09:46:00.841-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T09:47:24.354-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:245" date="2007-02-12T09:49:00.289-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:246" date="2007-02-12T10:04:00.665-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:247" date="2007-02-12T10:07:00.390-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:242" date="2007-02-12T10:12:00.118-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:243" date="2007-02-12T10:13:00.712-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:32.236-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:236" date="2007-04-23T11:53:00.689-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:00:31.621-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:237" date="2007-04-23T11:53:00.235-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:235" date="2007-04-23T11:53:00.146-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:43.182-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla  Firefox version 1.0 or earlier is installed">
          <criterion comment="Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:245"/>
          <criterion comment="Mozilla Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:244"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Thunderbird version 1.0 or earlier is installed">
          <criterion comment="Mozilla Thunderbird version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:249"/>
          <criterion comment="Mozilla Thunderbird version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:248"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.5 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:247"/>
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:246"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100040" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla String Library Memory Overwrite Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
          <product>Mozilla Thunderbird</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0255" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0255"/>
        <description>String handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as the nsTSubstring_CharT::Replace function, do not properly check the return values of other functions that resize the string, which allows remote attackers to cause a denial of service and possibly execute arbitrary code by forcing an out-of-memory state that causes a reallocation to fail and return a pointer to a fixed address, which leads to heap corruption.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:37:00.000-04:00" comment="Added Firefox, Mozilla, Thunderbird as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:244" date="2007-02-12T09:46:00.841-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T09:47:25.327-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:245" date="2007-02-12T09:49:00.289-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:246" date="2007-02-12T10:04:00.665-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:247" date="2007-02-12T10:07:00.390-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:242" date="2007-02-12T10:12:00.118-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:243" date="2007-02-12T10:13:00.712-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:31.938-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:236" date="2007-04-23T11:53:00.689-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:00:32.674-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:237" date="2007-04-23T11:53:00.235-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:235" date="2007-04-23T11:53:00.146-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:42.708-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla  Firefox version 1.0 or earlier is installed">
          <criterion comment="Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:245"/>
          <criterion comment="Mozilla Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:244"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Thunderbird version 1.0 or earlier is installed">
          <criterion comment="Mozilla Thunderbird version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:249"/>
          <criterion comment="Mozilla Thunderbird version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:248"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.5 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:247"/>
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:246"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10004" version="5" class="vulnerability">
      <metadata>
        <title>The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service (application crash) via a crafted ICQ web message that triggers allocation of a large amount of memory.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2009-1889" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1889"/>
        <description>The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service (application crash) via a crafted ICQ web message that triggers allocation of a large amount of memory.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:22:06.155-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:08.802-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:08.126-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10004 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:25:00.657-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:30:35.085-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:10.934-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.5.8-1.el4" test_ref="oval:org.mitre.oval:tst:38856"/>
            <criterion comment="libpurple is earlier than 0:2.5.8-1.el4" test_ref="oval:org.mitre.oval:tst:38502"/>
            <criterion comment="libpurple-perl is earlier than 0:2.5.8-1.el4" test_ref="oval:org.mitre.oval:tst:38722"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.5.8-1.el4" test_ref="oval:org.mitre.oval:tst:38590"/>
            <criterion comment="pidgin-devel is earlier than 0:2.5.8-1.el4" test_ref="oval:org.mitre.oval:tst:38608"/>
            <criterion comment="libpurple-devel is earlier than 0:2.5.8-1.el4" test_ref="oval:org.mitre.oval:tst:38063"/>
            <criterion comment="finch is earlier than 0:2.5.8-1.el4" test_ref="oval:org.mitre.oval:tst:38269"/>
            <criterion comment="pidgin-perl is earlier than 0:2.5.8-1.el4" test_ref="oval:org.mitre.oval:tst:38684"/>
            <criterion comment="pidgin is earlier than 0:2.5.8-1.el4" test_ref="oval:org.mitre.oval:tst:38296"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="finch-devel is earlier than 0:2.5.8-1.el5" test_ref="oval:org.mitre.oval:tst:38106"/>
            <criterion comment="libpurple is earlier than 0:2.5.8-1.el5" test_ref="oval:org.mitre.oval:tst:38904"/>
            <criterion comment="libpurple-perl is earlier than 0:2.5.8-1.el5" test_ref="oval:org.mitre.oval:tst:38611"/>
            <criterion comment="libpurple-tcl is earlier than 0:2.5.8-1.el5" test_ref="oval:org.mitre.oval:tst:38796"/>
            <criterion comment="pidgin-devel is earlier than 0:2.5.8-1.el5" test_ref="oval:org.mitre.oval:tst:38821"/>
            <criterion comment="libpurple-devel is earlier than 0:2.5.8-1.el5" test_ref="oval:org.mitre.oval:tst:38917"/>
            <criterion comment="finch is earlier than 0:2.5.8-1.el5" test_ref="oval:org.mitre.oval:tst:38643"/>
            <criterion comment="pidgin-perl is earlier than 0:2.5.8-1.el5" test_ref="oval:org.mitre.oval:tst:38445"/>
            <criterion comment="pidgin is earlier than 0:2.5.8-1.el5" test_ref="oval:org.mitre.oval:tst:38746"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100039" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Autocomplete Data Leak</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0589" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0589"/>
        <description>The Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially sensitive information via an input control that monitors the values that are generated by the autocomplete capability.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:36:00.000-04:00" comment="Added Firefox as affected product.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:242" date="2007-02-12T10:12:00.118-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T10:13:13.856-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:243" date="2007-02-12T10:13:00.712-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:31.699-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:235" date="2007-04-23T11:53:00.146-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:04:16.064-04:00">INTERIM</status_change>
            <status_change date="2007-05-09T16:10:42.216-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla  Firefox version 1.0 or earlier is installed">
          <criterion comment="Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:245"/>
          <criterion comment="Mozilla Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:244"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100038" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla XSLT Stylesheet Information Disclosure Potential</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0588" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0588"/>
        <description>Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to the current domain, which allows remote attackers to determine the existence of files on the local system.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:35:00.000-04:00" comment="Added Firefox, Mozilla as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:244" date="2007-02-12T09:46:00.841-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T09:47:25.815-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:245" date="2007-02-12T09:49:00.289-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:242" date="2007-02-12T10:12:00.118-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:243" date="2007-02-12T10:13:00.712-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:31.445-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:236" date="2007-04-23T11:53:00.689-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:00:33.051-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:235" date="2007-04-23T11:53:00.146-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:41.574-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla  Firefox version 1.0 or earlier is installed">
          <criterion comment="Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:245"/>
          <criterion comment="Mozilla Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:244"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.5 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:247"/>
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:246"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100037" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Double Download .lnk Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
          <product>Mozilla Thunderbird</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0587" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0587"/>
        <description>Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite arbitrary files by tricking the user into downloading a .LNK (link) file twice, which overwrites the file that was referenced in the first .LNK file.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:34:00.000-04:00" comment="Added Firefox, Mozilla, Thunderbird as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:244" date="2007-02-12T09:46:00.841-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T09:47:24.097-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:245" date="2007-02-12T09:49:00.289-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:246" date="2007-02-12T10:04:00.665-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:247" date="2007-02-12T10:07:00.390-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:242" date="2007-02-12T10:12:00.118-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:243" date="2007-02-12T10:13:00.712-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:31.156-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:236" date="2007-04-23T11:53:00.689-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:00:31.242-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:237" date="2007-04-23T11:53:00.235-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:235" date="2007-04-23T11:53:00.146-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:40.644-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla  Firefox version 1.0 or earlier is installed">
          <criterion comment="Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:245"/>
          <criterion comment="Mozilla Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:244"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Thunderbird version 1.0 or earlier is installed">
          <criterion comment="Mozilla Thunderbird version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:249"/>
          <criterion comment="Mozilla Thunderbird version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:248"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.5 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:247"/>
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:246"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100036" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla "Save Link As" Dialog Spoofing Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0586" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0586"/>
        <description>Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to spoof the extensions of files to download via the Content-Disposition header, which could be used to trick users into downloading dangerous content.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:33:00.000-04:00" comment="Added Firefox, Mozilla as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:244" date="2007-02-12T09:46:00.841-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T09:47:22.609-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:245" date="2007-02-12T09:49:00.289-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:242" date="2007-02-12T10:12:00.118-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:243" date="2007-02-12T10:13:00.712-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:30.783-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:236" date="2007-04-23T11:53:00.689-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:00:29.359-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:235" date="2007-04-23T11:53:00.146-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:39.963-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla  Firefox version 1.0 or earlier is installed">
          <criterion comment="Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:245"/>
          <criterion comment="Mozilla Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:244"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.5 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:247"/>
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:246"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100035" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Download Dialog Source Spoofing Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0585" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0585"/>
        <description>Firefox before 1.0.1 and Mozilla before 1.7.6 truncates long sub-domains or paths for display, which may allow remote malicious web sites to spoof legitimate sites and facilitate phishing attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:32:00.000-04:00" comment="Added Firefox, Mozilla as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:244" date="2007-02-12T09:46:00.841-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T09:47:22.259-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:245" date="2007-02-12T09:49:00.289-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:242" date="2007-02-12T10:12:00.118-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:243" date="2007-02-12T10:13:00.712-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:30.512-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:236" date="2007-04-23T11:53:00.689-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:00:28.959-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:235" date="2007-04-23T11:53:00.146-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:39.691-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla  Firefox version 1.0 or earlier is installed">
          <criterion comment="Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:245"/>
          <criterion comment="Mozilla Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:244"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.5 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:247"/>
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:246"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100034" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla HTTP auth Prompt Tab Spoofing</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0584" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0584"/>
        <description>Firefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do not change the focus to the tab that generated the prompt, which could facilitate spoofing and phishing attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:31:00.000-04:00" comment="Added Firefox, Mozilla as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:244" date="2007-02-12T09:46:00.841-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T09:47:23.219-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:245" date="2007-02-12T09:49:00.289-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:242" date="2007-02-12T10:12:00.118-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:243" date="2007-02-12T10:13:00.712-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:30.232-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:236" date="2007-04-23T11:53:00.689-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:00:30.135-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:235" date="2007-04-23T11:53:00.146-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:39.415-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla  Firefox version 1.0 or earlier is installed">
          <criterion comment="Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:245"/>
          <criterion comment="Mozilla Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:244"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.5 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:247"/>
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:246"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100033" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Image Spoofing Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
          <product>Mozilla Thunderbird</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0230" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0230"/>
        <description>Firefox 1.0 does not prevent the user from dragging an executable file to the desktop when it has an image/gif content type but has a dangerous extension such as .bat or .exe, which allows remote attackers to bypass the intended restriction and execute arbitrary commands via malformed GIF files that can still be parsed by the Windows batch file parser, aka "firedragging."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:30:00.000-04:00" comment="Added Firefox, Mozilla, Thunderbird as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:244" date="2007-02-12T09:46:00.841-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T09:47:24.611-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:245" date="2007-02-12T09:49:00.289-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:246" date="2007-02-12T10:04:00.665-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:247" date="2007-02-12T10:07:00.390-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:242" date="2007-02-12T10:12:00.118-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:243" date="2007-02-12T10:13:00.712-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:29.812-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:236" date="2007-04-23T11:53:00.689-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:00:31.978-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:237" date="2007-04-23T11:53:00.235-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:235" date="2007-04-23T11:53:00.146-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:39.096-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla  Firefox version 1.0 or earlier is installed">
          <criterion comment="Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:245"/>
          <criterion comment="Mozilla Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:244"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Thunderbird version 1.0 or earlier is installed">
          <criterion comment="Mozilla Thunderbird version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:249"/>
          <criterion comment="Mozilla Thunderbird version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:248"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.5 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:247"/>
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:246"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100032" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Cross-site Scripting via Drag and Drop to Tab</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0231" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0231"/>
        <description>Firefox 1.0 does not invoke the Javascript Security Manager when a user drags a javascript: or data: URL to a tab, which allows remote attackers to bypass the security model, aka "firetabbing."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:29:00.000-04:00" comment="Added Firefox, Mozilla as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:244" date="2007-02-12T09:46:00.841-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T09:47:21.650-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:245" date="2007-02-12T09:49:00.289-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:242" date="2007-02-12T10:12:00.118-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:243" date="2007-02-12T10:13:00.712-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:29.494-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:236" date="2007-04-23T11:53:00.689-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:00:28.040-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:235" date="2007-04-23T11:53:00.146-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:38.802-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla  Firefox version 1.0 or earlier is installed">
          <criterion comment="Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:245"/>
          <criterion comment="Mozilla Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:244"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.5 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:247"/>
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:246"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100031" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Privileged Content Loading Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0527" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0527"/>
        <description>Firefox 1.0 allows remote attackers to execute arbitrary code via plugins that load "privileged content" into frames, as demonstrated using certain XUL events when a user drags a scrollbar two times, aka "Firescrolling."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:27:00.000-04:00" comment="Added Firefox, Mozilla as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:244" date="2007-02-12T09:46:00.841-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T09:47:23.803-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:245" date="2007-02-12T09:49:00.289-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:242" date="2007-02-12T10:12:00.118-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:243" date="2007-02-12T10:13:00.712-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:29.119-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:236" date="2007-04-23T11:53:00.689-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:00:30.847-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:235" date="2007-04-23T11:53:00.146-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:38.529-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla  Firefox version 1.0 or earlier is installed">
          <criterion comment="Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:245"/>
          <criterion comment="Mozilla Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:244"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.5 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:247"/>
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:246"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10003" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in the ReadPNMImage function in pnm.c for ImageMagick 6.2.1 and earlier allows remote attackers to cause a denial of service (application crash) via a PNM file with a small colors value.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1275" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1275"/>
        <description>Heap-based buffer overflow in the ReadPNMImage function in pnm.c for ImageMagick 6.2.1 and earlier allows remote attackers to cause a denial of service (application crash) via a PNM file with a small colors value.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:24.545-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:08.399-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:07.639-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10003 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:20.135-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:09.944-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:5.5.6-14" test_ref="oval:org.mitre.oval:tst:31696"/>
            <criterion comment="ImageMagick is earlier than 0:5.5.6-14" test_ref="oval:org.mitre.oval:tst:31067"/>
            <criterion comment="ImageMagick-perl is earlier than 0:5.5.6-14" test_ref="oval:org.mitre.oval:tst:31088"/>
            <criterion comment="ImageMagick-devel is earlier than 0:5.5.6-14" test_ref="oval:org.mitre.oval:tst:31121"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:5.5.6-14" test_ref="oval:org.mitre.oval:tst:31855"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-11" test_ref="oval:org.mitre.oval:tst:31632"/>
            <criterion comment="ImageMagick is earlier than 0:6.0.7.1-11" test_ref="oval:org.mitre.oval:tst:31690"/>
            <criterion comment="ImageMagick-perl is earlier than 0:6.0.7.1-11" test_ref="oval:org.mitre.oval:tst:31789"/>
            <criterion comment="ImageMagick-devel is earlier than 0:6.0.7.1-11" test_ref="oval:org.mitre.oval:tst:31429"/>
            <criterion comment="ImageMagick-c++ is earlier than 0:6.0.7.1-11" test_ref="oval:org.mitre.oval:tst:31740"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100029" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla IDN Homograph Spoofing Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0233" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0233"/>
        <description>The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T04:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <modified date="2005-09-20T04:00:00.000-04:00" comment="Added CVE #">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-10-05T11:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-26T06:46:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:26:00.000-04:00" comment="Added Firefox, Mozilla as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:244" date="2007-02-12T09:46:00.841-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T09:47:21.939-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:245" date="2007-02-12T09:49:00.289-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:242" date="2007-02-12T10:12:00.118-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:243" date="2007-02-12T10:13:00.712-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:28.704-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:236" date="2007-04-23T11:53:00.689-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:00:28.455-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:235" date="2007-04-23T11:53:00.146-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:38.131-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla  Firefox version 1.0 or earlier is installed">
          <criterion comment="Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:245"/>
          <criterion comment="Mozilla Firefox version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:244"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.5 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:247"/>
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:246"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100028" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla GIF Heap Overflow</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
          <product>Mozilla Thunderbird</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0399" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0399"/>
        <description>Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer size.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:25:00.000-04:00" comment="Added Firefox, Mozilla, Thunderbird as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchors to regex in ste:249" date="2007-02-12T09:11:00.072-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T09:12:24.143-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:248" date="2007-02-12T09:44:00.175-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:244" date="2007-02-12T09:46:00.841-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:245" date="2007-02-12T09:49:00.289-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:246" date="2007-02-12T10:04:00.665-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:247" date="2007-02-12T10:07:00.390-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:28.296-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:238" date="2007-04-23T11:53:00.399-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T11:58:57.812-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:236" date="2007-04-23T11:53:00.689-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:237" date="2007-04-23T11:53:00.235-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:37.801-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.1 or earlier is installed">
          <criterion comment="Firefox version 1.0.1 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:251"/>
          <criterion comment="Mozilla Firefox version 1.0.1 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:250"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Thunderbird version 1.0 or earlier is installed">
          <criterion comment="Mozilla Thunderbird version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:249"/>
          <criterion comment="Mozilla Thunderbird version 1.0 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:248"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.5 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:247"/>
          <criterion comment="Mozilla Suite version 1.7.5 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:246"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100027" version="5" class="vulnerability">
      <metadata>
        <title>Firefox Sidebar Panel Code Execution Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0402" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0402"/>
        <description>Firefox before 1.0.2 allows remote attackers to execute arbitrary code by tricking a user into saving a page as a Firefox sidebar panel, then using the sidebar panel to inject Javascript into a privileged page.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:23:00.000-04:00" comment="Added Firefox as affected product.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchors to regex in ste:249" date="2007-02-12T09:11:00.072-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T09:12:24.635-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:248" date="2007-02-12T09:44:00.175-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:28.026-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:238" date="2007-04-23T11:53:00.399-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T11:58:58.145-04:00">INTERIM</status_change>
            <status_change date="2007-05-09T16:10:37.557-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.1 or earlier is installed">
          <criterion comment="Firefox version 1.0.1 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:251"/>
          <criterion comment="Mozilla Firefox version 1.0.1 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:250"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100026" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla XUL Drag and Drop Security Bypass Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0401" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0401"/>
        <description>FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hijacking drag and drop events, which allows remote attackers to execute arbitrary XUL code by tricking a user into dragging a scrollbar, a variant of CVE-2005-0527, aka "Firescrolling 2."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:22:00.000-04:00" comment="Added Firefox, Mozilla as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchors to regex in ste:249" date="2007-02-12T09:11:00.072-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T09:12:22.583-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:250" date="2007-02-12T09:24:00.965-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:251" date="2007-02-12T09:28:00.417-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:248" date="2007-02-12T09:44:00.175-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:27.519-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:239" date="2007-04-23T11:53:00.596-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T11:56:17.437-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:238" date="2007-04-23T11:53:00.399-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:37.223-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.1 or earlier is installed">
          <criterion comment="Firefox version 1.0.1 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:251"/>
          <criterion comment="Mozilla Firefox version 1.0.1 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:250"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.6 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:253"/>
          <criterion comment="Mozilla Suite version 1.7.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:252"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100025" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Javascript "lambda"</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0989" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0989"/>
        <description>The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <modified date="2005-10-11T04:20:00.000-04:00" comment="modified wrt-10045 - Removed doubled backslash from string literal test.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2005-10-26T06:46:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:20:00.000-04:00" comment="Added Firefox, Mozilla as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:250" date="2007-02-12T09:24:00.965-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T09:25:33.912-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:251" date="2007-02-12T09:28:00.417-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:256" date="2007-02-12T09:40:00.863-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:257" date="2007-02-12T09:43:00.244-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:27.212-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:239" date="2007-04-23T11:53:00.596-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T11:56:19.342-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:243" date="2007-04-23T11:53:00.469-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:36.906-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.2 or earlier is installed">
          <criterion comment="Firefox version 1.0.2 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:259"/>
          <criterion comment="Mozilla Firefox version 1.0.2 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:258"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.6 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:253"/>
          <criterion comment="Mozilla Suite version 1.7.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:252"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100024" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla PLUGINSPAGE Privileged Javascript Execution Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-0752" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0752"/>
        <description>The Plugin Finder Service (PFS) in Firefox before 1.0.3 allows remote attackers to execute arbitrary code via a javascript: URL in the PLUGINSPAGE attribute of an EMBED tag.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <modified date="2005-10-11T04:20:00.000-04:00" comment="modified wrt-10045 - Removed doubled backslash from string literal test.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2005-10-26T06:46:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:19:00.000-04:00" comment="Added Firefox as affected product.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:256" date="2007-02-12T09:40:00.863-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T09:41:37.932-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:257" date="2007-02-12T09:43:00.244-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:26.864-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:243" date="2007-04-23T11:53:00.469-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T11:57:34.505-04:00">INTERIM</status_change>
            <status_change date="2007-05-09T16:10:36.639-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.2 or earlier is installed">
          <criterion comment="Firefox version 1.0.2 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:259"/>
          <criterion comment="Mozilla Firefox version 1.0.2 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:258"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100023" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla blocked javascript: popup Privilege Escalation Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1153" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1153"/>
        <description>Firefox before 1.0.3 and Mozilla Suite before 1.7.7, when blocking a popup, allows remote attackers to execute arbitrary code via a javascript: URL that is executed when the user selects the "Show javascript" option.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <modified date="2005-10-11T04:20:00.000-04:00" comment="modified wrt-10045 - Removed doubled backslash from string literal test.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <modified date="2005-10-11T04:51:00.000-04:00" comment="modified wrt-10049 - Removed doubled backslash from string literal test.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2005-10-26T06:46:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:18:00.000-04:00" comment="Added Firefox, Mozilla as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:250" date="2007-02-12T09:24:00.965-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T09:25:32.807-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:251" date="2007-02-12T09:28:00.417-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:256" date="2007-02-12T09:40:00.863-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:257" date="2007-02-12T09:43:00.244-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:26.534-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:239" date="2007-04-23T11:53:00.596-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T11:56:17.901-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:243" date="2007-04-23T11:53:00.469-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:36.192-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.2 or earlier is installed">
          <criterion comment="Firefox version 1.0.2 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:259"/>
          <criterion comment="Mozilla Firefox version 1.0.2 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:258"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.6 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:253"/>
          <criterion comment="Mozilla Suite version 1.7.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:252"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100022" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Global Pollution Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1154" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1154"/>
        <description>Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary script in other domains via a setter function for a variable in the target domain, which is executed when the user visits that domain, aka "Cross-site scripting through global scope pollution."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <modified date="2005-10-11T04:20:00.000-04:00" comment="modified wrt-10045 - Removed doubled backslash from string literal test.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2005-10-26T06:46:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:17:00.000-04:00" comment="Added Firefox, Mozilla as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:250" date="2007-02-12T09:24:00.965-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T09:25:34.209-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:251" date="2007-02-12T09:28:00.417-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:256" date="2007-02-12T09:40:00.863-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:257" date="2007-02-12T09:43:00.244-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:26.212-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:239" date="2007-04-23T11:53:00.596-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T11:56:19.806-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:243" date="2007-04-23T11:53:00.469-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:35.815-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.2 or earlier is installed">
          <criterion comment="Firefox version 1.0.2 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:259"/>
          <criterion comment="Mozilla Firefox version 1.0.2 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:258"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.6 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:253"/>
          <criterion comment="Mozilla Suite version 1.7.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:252"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100021" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla favicons Code Execution Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1155" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1155"/>
        <description>The favicon functionality in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary code via a &lt;LINK rel="icon"> tag with a javascript: URL in the href attribute, aka "Firelinking."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <modified date="2005-10-11T04:20:00.000-04:00" comment="modified wrt-10045 - Removed doubled backslash from string literal test.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2005-10-26T06:46:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:16:00.000-04:00" comment="Added Firefox, Mozilla as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:250" date="2007-02-12T09:24:00.965-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T09:25:33.495-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:251" date="2007-02-12T09:28:00.417-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:256" date="2007-02-12T09:40:00.863-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:257" date="2007-02-12T09:43:00.244-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:25.895-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:239" date="2007-04-23T11:53:00.596-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T11:56:18.881-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:243" date="2007-04-23T11:53:00.469-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:35.364-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.2 or earlier is installed">
          <criterion comment="Firefox version 1.0.2 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:259"/>
          <criterion comment="Mozilla Firefox version 1.0.2 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:258"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.6 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:253"/>
          <criterion comment="Mozilla Suite version 1.7.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:252"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100020" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Search Plugin Cross-site Scripting Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1156" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1156"/>
        <description>Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to execute arbitrary script and code via a new search plugin using sidebar.addSearchEngine, aka "Firesearching 1."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <modified date="2005-10-11T04:20:00.000-04:00" comment="modified wrt-10045 - Removed doubled backslash from string literal test.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2005-10-26T06:46:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:14:00.000-04:00" comment="Added Firefox and Mozilla as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:250" date="2007-02-12T09:24:00.965-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T09:25:32.117-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:251" date="2007-02-12T09:28:00.417-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:256" date="2007-02-12T09:40:00.863-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:257" date="2007-02-12T09:43:00.244-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:25.521-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:239" date="2007-04-23T11:53:00.596-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T11:56:16.826-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:243" date="2007-04-23T11:53:00.469-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:34.914-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.2 or earlier is installed">
          <criterion comment="Firefox version 1.0.2 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:259"/>
          <criterion comment="Mozilla Firefox version 1.0.2 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:258"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.6 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:253"/>
          <criterion comment="Mozilla Suite version 1.7.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:252"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10002" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in OpenOffice.org (OOo) 2.2.1 and earlier allows remote attackers to execute arbitrary code via a RTF file with a crafted prtdata tag with a length parameter inconsistency, which causes vtable entries to be overwritten.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-0245" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0245"/>
        <description>Heap-based buffer overflow in OpenOffice.org (OOo) 2.2.1 and earlier allows remote attackers to execute arbitrary code via a RTF file with a crafted prtdata tag with a length parameter inconsistency, which causes vtable entries to be overwritten.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:17:00.160-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:05.737-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:05.066-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10002 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:43:50.925-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:07.146-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-39.2.0.EL3" test_ref="oval:org.mitre.oval:tst:34385"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.2-39.2.0.EL3" test_ref="oval:org.mitre.oval:tst:33772"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-39.2.0.EL3" test_ref="oval:org.mitre.oval:tst:34301"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34355"/>
            <criterion comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34501"/>
            <criterion comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:33969"/>
            <criterion comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34406"/>
            <criterion comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:33634"/>
            <criterion comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34424"/>
            <criterion comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34344"/>
            <criterion comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34498"/>
            <criterion comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34178"/>
            <criterion comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34356"/>
            <criterion comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34280"/>
            <criterion comment="openoffice.org is earlier than 0:1.1.5-10.6.0.1.EL4" test_ref="oval:org.mitre.oval:tst:34229"/>
            <criterion comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.1.EL4" test_ref="oval:org.mitre.oval:tst:33834"/>
            <criterion comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34390"/>
            <criterion comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:33684"/>
            <criterion comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:33760"/>
            <criterion comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34454"/>
            <criterion comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:33768"/>
            <criterion comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34255"/>
            <criterion comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34396"/>
            <criterion comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34183"/>
            <criterion comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34235"/>
            <criterion comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:33851"/>
            <criterion comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34291"/>
            <criterion comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34176"/>
            <criterion comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34455"/>
            <criterion comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34342"/>
            <criterion comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:33944"/>
            <criterion comment="openoffice.org2 is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34127"/>
            <criterion comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:33609"/>
            <criterion comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34345"/>
            <criterion comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34254"/>
            <criterion comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34000"/>
            <criterion comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34404"/>
            <criterion comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34407"/>
            <criterion comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:33720"/>
            <criterion comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34232"/>
            <criterion comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34403"/>
            <criterion comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34435"/>
            <criterion comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34275"/>
            <criterion comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34372"/>
            <criterion comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34048"/>
            <criterion comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:33964"/>
            <criterion comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34438"/>
            <criterion comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34279"/>
            <criterion comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34485"/>
            <criterion comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34447"/>
            <criterion comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.1.EL4" test_ref="oval:org.mitre.oval:tst:33921"/>
            <criterion comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34417"/>
            <criterion comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:33458"/>
            <criterion comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34441"/>
            <criterion comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.1.EL4" test_ref="oval:org.mitre.oval:tst:34339"/>
            <criterion comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34325"/>
            <criterion comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34368"/>
            <criterion comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34444"/>
            <criterion comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34510"/>
            <criterion comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34289"/>
            <criterion comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:33512"/>
            <criterion comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34525"/>
            <criterion comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34326"/>
            <criterion comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34341"/>
            <criterion comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34137"/>
            <criterion comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:org.mitre.oval:tst:34362"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="openoffice.org-langpack-sk_SK is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34179"/>
            <criterion comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34570"/>
            <criterion comment="openoffice.org-langpack-pa_IN is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34593"/>
            <criterion comment="openoffice.org-langpack-hi_IN is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34513"/>
            <criterion comment="openoffice.org-langpack-et_EE is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34542"/>
            <criterion comment="openoffice.org-langpack-kn_IN is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34007"/>
            <criterion comment="openoffice.org is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34453"/>
            <criterion comment="openoffice.org-langpack-zh_TW is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34664"/>
            <criterion comment="openoffice.org-writer is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:33692"/>
            <criterion comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34308"/>
            <criterion comment="openoffice.org-langpack-ga_IE is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34443"/>
            <criterion comment="openoffice.org-langpack-ta_IN is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34470"/>
            <criterion comment="openoffice.org-langpack-ko_KR is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34463"/>
            <criterion comment="openoffice.org-langpack-or_IN is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34478"/>
            <criterion comment="openoffice.org-langpack-da_DK is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34614"/>
            <criterion comment="openoffice.org-langpack-sr_CS is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34430"/>
            <criterion comment="openoffice.org-langpack-pl_PL is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34511"/>
            <criterion comment="openoffice.org-langpack-fr is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34555"/>
            <criterion comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34642"/>
            <criterion comment="openoffice.org-javafilter is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:33584"/>
            <criterion comment="openoffice.org-langpack-as_IN is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34465"/>
            <criterion comment="openoffice.org-testtools is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34491"/>
            <criterion comment="openoffice.org-langpack-hr_HR is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34589"/>
            <criterion comment="openoffice.org-langpack-de is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34476"/>
            <criterion comment="openoffice.org-emailmerge is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34099"/>
            <criterion comment="openoffice.org-xsltfilter is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:33855"/>
            <criterion comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34420"/>
            <criterion comment="openoffice.org-langpack-te_IN is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34489"/>
            <criterion comment="openoffice.org-langpack-sv is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34564"/>
            <criterion comment="openoffice.org-base is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34565"/>
            <criterion comment="openoffice.org-langpack-ca_ES is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34309"/>
            <criterion comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34221"/>
            <criterion comment="openoffice.org-core is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34333"/>
            <criterion comment="openoffice.org-langpack-nl is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34529"/>
            <criterion comment="openoffice.org-langpack-ur is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34607"/>
            <criterion comment="openoffice.org-langpack-nn_NO is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:33664"/>
            <criterion comment="openoffice.org-langpack-ar is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34310"/>
            <criterion comment="openoffice.org-langpack-ja_JP is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34487"/>
            <criterion comment="openoffice.org-langpack-gu_IN is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34354"/>
            <criterion comment="openoffice.org-langpack-tr_TR is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34126"/>
            <criterion comment="openoffice.org-langpack-eu_ES is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34606"/>
            <criterion comment="openoffice.org-langpack-fi_FI is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:33651"/>
            <criterion comment="openoffice.org-graphicfilter is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34218"/>
            <criterion comment="openoffice.org-pyuno is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34538"/>
            <criterion comment="openoffice.org-langpack-ml_IN is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34462"/>
            <criterion comment="openoffice.org-langpack-gl_ES is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34494"/>
            <criterion comment="openoffice.org-langpack-zh_CN is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34584"/>
            <criterion comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34282"/>
            <criterion comment="openoffice.org-langpack-it is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34467"/>
            <criterion comment="openoffice.org-langpack-es is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34521"/>
            <criterion comment="openoffice.org-langpack-nb_NO is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34456"/>
            <criterion comment="openoffice.org-langpack-sl_SI is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34346"/>
            <criterion comment="openoffice.org-draw is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34367"/>
            <criterion comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34579"/>
            <criterion comment="openoffice.org-langpack-ms_MY is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34646"/>
            <criterion comment="openoffice.org-langpack-el_GR is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34347"/>
            <criterion comment="openoffice.org-langpack-hu_HU is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34596"/>
            <criterion comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34648"/>
            <criterion comment="openoffice.org-langpack-bn is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34580"/>
            <criterion comment="openoffice.org-langpack-he_IL is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:33737"/>
            <criterion comment="openoffice.org-langpack-pt_PT is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34517"/>
            <criterion comment="openoffice.org-langpack-lt_LT is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34340"/>
            <criterion comment="openoffice.org-langpack-af_ZA is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34490"/>
            <criterion comment="openoffice.org-langpack-bg_BG is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:33633"/>
            <criterion comment="openoffice.org-calc is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34416"/>
            <criterion comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:33934"/>
            <criterion comment="openoffice.org-langpack-cy_GB is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34507"/>
            <criterion comment="openoffice.org-langpack-mr_IN is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34615"/>
            <criterion comment="openoffice.org-langpack-th_TH is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34523"/>
            <criterion comment="openoffice.org-langpack-pt_BR is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34641"/>
            <criterion comment="openoffice.org-langpack-ru is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34578"/>
            <criterion comment="openoffice.org-math is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34415"/>
            <criterion comment="openoffice.org-impress is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34050"/>
            <criterion comment="openoffice.org-langpack-st_ZA is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:org.mitre.oval:tst:34303"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100019" version="5" class="vulnerability">
      <metadata>
        <title>Firefox Sidebar Code Execution via _search Target</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1158" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1158"/>
        <description>Multiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject arbitrary Javascript into privileged pages using the _search target of the Firefox sidebar.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <modified date="2005-10-11T04:20:00.000-04:00" comment="modified wrt-10045 - Removed doubled backslash from string literal test.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2005-10-26T06:46:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:12:00.000-04:00" comment="Added Firefox as affected product.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:256" date="2007-02-12T09:40:00.863-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T09:41:39.399-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:257" date="2007-02-12T09:43:00.244-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:25.269-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:243" date="2007-04-23T11:53:00.469-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T11:57:35.930-04:00">INTERIM</status_change>
            <status_change date="2007-05-09T16:10:34.518-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.2 or earlier is installed">
          <criterion comment="Firefox version 1.0.2 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:259"/>
          <criterion comment="Mozilla Firefox version 1.0.2 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:258"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100018" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla InstallTrigger Instance Validation Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1159"/>
        <description>The native implementations of InstallTrigger and other functions in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 do not properly verify the types of objects being accessed, which causes the Javascript interpreter to continue execution at the wrong memory address, which may allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code by passing objects of the wrong type.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <modified date="2005-10-11T04:20:00.000-04:00" comment="modified wrt-10045 - Removed doubled backslash from string literal test.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2005-10-26T06:46:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:11:00.000-04:00" comment="Added Firefox and Mozilla as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:250" date="2007-02-12T09:24:00.965-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T09:25:33.144-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:251" date="2007-02-12T09:28:00.417-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:256" date="2007-02-12T09:40:00.863-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:257" date="2007-02-12T09:43:00.244-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:24.951-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:239" date="2007-04-23T11:53:00.596-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T11:56:18.449-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:243" date="2007-04-23T11:53:00.469-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:34.029-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.2 or earlier is installed">
          <criterion comment="Firefox version 1.0.2 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:259"/>
          <criterion comment="Mozilla Firefox version 1.0.2 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:258"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.6 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:253"/>
          <criterion comment="Mozilla Suite version 1.7.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:252"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100017" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla DOM Node Privilege Escalation Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1160" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1160"/>
        <description>The privileged "chrome" UI code in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to gain privileges by overriding certain properties or methods of DOM nodes, as demonstrated using multiple attacks involving the eval function or the Script object.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <modified date="2005-10-11T04:20:00.000-04:00" comment="modified wrt-10045 - Removed doubled backslash from string literal test.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <modified date="2005-10-11T04:51:00.000-04:00" comment="modified wrt-10049 - Removed doubled backslash from string literal test.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2005-10-26T06:46:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:10:00.000-04:00" comment="Added Firefox and Mozilla as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:250" date="2007-02-12T09:24:00.965-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-02-12T09:25:34.498-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:251" date="2007-02-12T09:28:00.417-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:256" date="2007-02-12T09:40:00.863-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:257" date="2007-02-12T09:43:00.244-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:24.630-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:239" date="2007-04-23T11:53:00.596-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T11:56:20.347-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:243" date="2007-04-23T11:53:00.469-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:33.561-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.2 or earlier is installed">
          <criterion comment="Firefox version 1.0.2 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:259"/>
          <criterion comment="Mozilla Firefox version 1.0.2 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:258"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.6 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:253"/>
          <criterion comment="Mozilla Suite version 1.7.6 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:252"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100016" version="6" class="vulnerability">
      <metadata>
        <title>Mozilla Suite InstallTrigger Callback Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2263" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2263"/>
        <description>The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of the new page and results in a same origin violation.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T04:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <modified date="2005-09-07T04:00:00.000-04:00" comment="Added description">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2005-09-19T04:00:00.000-04:00" comment="modified wrt-10048 - Removed extra \\ in key">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2005-10-05T11:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-26T06:46:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:09:00.000-04:00" comment="Added Mozilla as affected product.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:259: Added beginning anchors to regular expression in pattern match, to avoid mid-string matches." date="2007-01-22T01:46:00.843-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T01:50:41.998-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:24.657-05:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:258" date="2007-03-06T08:07:00.811-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-06T08:08:08.246-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:24.320-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:244" date="2007-04-23T12:05:00.886-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:34:26.586-04:00">INTERIM</status_change>
            <status_change date="2007-05-09T16:10:33.079-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Suite version 1.7.8 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.8 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:261"/>
          <criterion comment="Mozilla Suite version 1.7.8 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:260"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100015" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla JavaScript Wrapping Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1531" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1531"/>
        <description>Firefox before 1.0.4 and Mozilla Suite before 1.7.8 does not properly implement certain security checks for script injection, which allows remote attackers to execute script via "Wrapped" javascript: URLs, as demonstrated using (1) a javascript: URL in a view-source: URL, (2) a javascript: URL in a jar: URL, or (3) "a nested variant."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T04:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <modified date="2005-09-19T04:00:00.000-04:00" comment="modified wrt-10025 - Removed extra \\ in key">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2005-10-05T11:37:00.000-04:00">INTERIM</status_change>
            <modified date="2005-10-11T04:13:00.000-04:00" comment="modified wrt-10024 - Removed doubled backslashes in string literal test.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2005-10-26T06:46:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:07:00.000-04:00" comment="Added Firefox and Mozilla as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-10-06T04:00:00.000-04:00" comment="Fixed ste:262 by properly anchoring the regular expression.  Modified by Harvey Rubinovitz">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2006-10-06T11:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:14:56.769-04:00">ACCEPTED</status_change>
            <modified comment="Added anchors to regex in ste:263" date="2007-02-12T09:14:00.355-05:00">
              <contributor organization="GFI Software">Daniel Tarnu</contributor>
            </modified>
            <status_change date="2007-02-12T09:15:32.637-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:252" date="2007-02-12T09:19:00.114-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:253" date="2007-02-12T09:21:00.401-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:240" date="2007-03-06T08:09:00.115-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:241" date="2007-03-06T08:10:00.682-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:23.920-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.3 or earlier is installed">
          <criterion comment="Firefox version 1.0.3 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:265"/>
          <criterion comment="Mozilla Firefox version 1.0.3 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:255"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.7 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:264"/>
          <criterion comment="Mozilla Suite version 1.7.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:254"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100014" version="5" class="vulnerability">
      <metadata>
        <title>Mozilla Script Privilege Context Vulnerabilities</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1532" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1532"/>
        <description>Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via "non-DOM property overrides," a variant of CVE-2005-1160.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T04:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <modified date="2005-09-19T04:00:00.000-04:00" comment="modified wrt-10025 - Removed extra \\ in key">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2005-10-05T11:37:00.000-04:00">INTERIM</status_change>
            <modified date="2005-10-11T04:13:00.000-04:00" comment="modified wrt-10024 - Removed doubled backslashes in string literal test.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2005-10-26T06:46:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:06:00.000-04:00" comment="Added Firefox and Mozilla as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-10-06T04:00:00.000-04:00" comment="Fixed ste:262 by properly anchoring the regular expression.  Modified by Harvey Rubinovitz">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2006-10-06T11:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:14:55.815-04:00">ACCEPTED</status_change>
            <modified comment="Added anchors to regex in ste:263" date="2007-02-12T09:14:00.355-05:00">
              <contributor organization="GFI Software">Daniel Tarnu</contributor>
            </modified>
            <status_change date="2007-02-12T09:15:33.364-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:252" date="2007-02-12T09:19:00.114-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:253" date="2007-02-12T09:21:00.401-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:240" date="2007-03-06T08:09:00.115-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:241" date="2007-03-06T08:10:00.682-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:23.474-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.3 or earlier is installed">
          <criterion comment="Firefox version 1.0.3 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:265"/>
          <criterion comment="Mozilla Firefox version 1.0.3 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:255"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.7 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:264"/>
          <criterion comment="Mozilla Suite version 1.7.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:254"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100013" version="6" class="vulnerability">
      <metadata>
        <title>Improper Handling of Synthetic Events in Mozilla</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2260"/>
        <description>The browser user interface in Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 does not properly distinguish between user-generated events and untrusted synthetic events, which makes it easier for remote attackers to perform dangerous actions that normally could only be performed manually by the user.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T04:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <modified date="2005-09-19T04:00:00.000-04:00" comment="modified wrt-10048 - Removed extra \\ in key">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2005-10-05T11:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-26T06:46:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:03:00.000-04:00" comment="Added Firefox and Mozilla as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:259: Added beginning anchors to regular expression in pattern match, to avoid mid-string matches." date="2007-01-22T01:46:00.843-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T01:50:41.212-05:00">INTERIM</status_change>
            <modified comment="Fixed ste:261: Added beginning anchors to the regular expression used in the pattern match, to avoid mid-string matches." date="2007-01-22T01:50:00.388-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-02-20T13:39:24.350-05:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:258" date="2007-03-06T08:07:00.811-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-06T08:08:07.231-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:260" date="2007-03-06T08:08:00.624-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:23.162-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:244" date="2007-04-23T12:05:00.886-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:34:25.434-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:245" date="2007-04-23T12:05:00.868-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:32.544-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.4 or earlier is installed">
          <criterion comment="Firefox version 1.0.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:263"/>
          <criterion comment="Mozilla Firefox version 1.0.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:262"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.8 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.8 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:261"/>
          <criterion comment="Mozilla Suite version 1.7.8 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:260"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100012" version="6" class="vulnerability">
      <metadata>
        <title>XBL Script Security Bypass Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
          <product>Mozilla Thunderbird</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2261" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2261"/>
        <description>Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts even when Javascript has been disabled, which makes it easier for remote attackers to bypass such protection.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T04:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <modified date="2005-09-19T04:00:00.000-04:00" comment="modified wrt-10048 - Removed extra \\ in key">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2005-10-05T11:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-26T06:46:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T05:01:00.000-04:00" comment="Added Firefox, Mozilla, and Thunderbird as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:259: Added beginning anchors to regular expression in pattern match, to avoid mid-string matches." date="2007-01-22T01:46:00.843-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T01:50:42.722-05:00">INTERIM</status_change>
            <modified comment="Fixed ste:261: Added beginning anchors to the regular expression used in the pattern match, to avoid mid-string matches." date="2007-01-22T01:50:00.388-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-02-20T13:39:23.963-05:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:258" date="2007-03-06T08:07:00.811-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-06T08:08:08.781-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:260" date="2007-03-06T08:08:00.624-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:254" date="2007-03-06T08:08:00.569-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:255" date="2007-03-06T08:08:00.091-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:22.777-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:244" date="2007-04-23T12:05:00.886-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:34:27.296-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:245" date="2007-04-23T12:05:00.868-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in obj:242" date="2007-04-23T12:05:00.226-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:31.990-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.4 or earlier is installed">
          <criterion comment="Firefox version 1.0.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:263"/>
          <criterion comment="Mozilla Firefox version 1.0.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:262"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Thunderbird version 1.0.2 or earlier is installed">
          <criterion comment="Mozilla Thunderbird version 1.0.2 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:257"/>
          <criterion comment="Mozilla Thunderbird version 1.0.2 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:256"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.8 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.8 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:261"/>
          <criterion comment="Mozilla Suite version 1.7.8 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:260"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100011" version="6" class="vulnerability">
      <metadata>
        <title>Firefox Wallpaper Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2262" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2262"/>
        <description>Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user into using the "Set As Wallpaper" (in Firefox) or "Set as Background" (in Netscape) context menu on an image URL that is really a javascript: URL with an eval statement, aka "Firewalling."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <modified date="2005-10-04T08:55:00.000-04:00" comment="Updated reference to CVE-2005-2262 per Rob Hollis">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <modified date="2005-10-11T04:20:00.000-04:00" comment="modified wrt-10045 - Removed doubled backslash from string literal test.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2005-10-26T06:46:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T04:56:00.000-04:00" comment="Added Firefox as affected product.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-07-03T12:56:00.000-04:00" comment="Added negate=true attribute to criteria sub-block to fix conversion error from OVAL 4.2 to OVAL 5.0">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-10-07T09:14:04.694-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:261: Added beginning anchors to the regular expression used in the pattern match, to avoid mid-string matches." date="2007-01-22T01:50:00.388-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T01:51:43.084-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:256" date="2007-02-12T09:40:00.863-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:257" date="2007-02-12T09:43:00.244-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified comment="Added anchor to regex in ste:260" date="2007-03-06T08:08:00.624-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:22.446-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:243" date="2007-04-23T11:53:00.469-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T11:57:33.688-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:245" date="2007-04-23T12:05:00.868-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:31.184-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.4 or earlier is installed">
          <criterion comment="Firefox version 1.0.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:263"/>
          <criterion comment="Mozilla Firefox version 1.0.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:262"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.2 or earlier is installed" negate="true">
          <criterion comment="Firefox version 1.0.2 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:259"/>
          <criterion comment="Mozilla Firefox version 1.0.2 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:258"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100010" version="6" class="vulnerability">
      <metadata>
        <title>Firefox InstallTrigger Callback Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2263" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2263"/>
        <description>The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of the new page and results in a same origin violation.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T04:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <modified date="2005-09-07T04:00:00.000-04:00" comment="Added description">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-09-28T01:05:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-19T05:47:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T04:53:00.000-04:00" comment="Added Firefox as affected product.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:261: Added beginning anchors to the regular expression used in the pattern match, to avoid mid-string matches." date="2007-01-22T01:50:00.388-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T01:51:43.624-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:23.595-05:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:260" date="2007-03-06T08:08:00.624-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-06T08:08:30.987-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:22.137-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:245" date="2007-04-23T12:05:00.868-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:35:23.559-04:00">INTERIM</status_change>
            <status_change date="2007-05-09T16:10:30.546-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.4 or earlier is installed">
          <criterion comment="Firefox version 1.0.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:263"/>
          <criterion comment="Mozilla Firefox version 1.0.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:262"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10001" version="5" class="vulnerability">
      <metadata>
        <title>The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (crash) via vectors that trigger memory corruption, related to the GetXMLEntity and FastAppendChar functions.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>CentOS Linux 3</platform>
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>CentOS Linux 4</platform>
          <platform>Oracle Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2008-5502" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5502"/>
        <description>The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (crash) via vectors that trigger memory corruption, related to the GetXMLEntity and FastAppendChar functions.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:18:39.986-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:04.693-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:03.974-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10001 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T15:35:00.132-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:42:44.403-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:05.737-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="OS Section: RHEL3, CentOS3">
          <criteria operator="OR" comment="RHEL3 or CentOS3">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 3" definition_ref="oval:org.mitre.oval:def:11782"/>
            <extend_definition comment="CentOS Linux 3.x" definition_ref="oval:org.mitre.oval:def:16651"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38137"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37886"/>
            <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37999"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37907"/>
            <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37709"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38092"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:37745"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38039"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38062"/>
            <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.29.el3" test_ref="oval:org.mitre.oval:tst:38073"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL4, CentOS4, Oracle Linux 4">
          <criteria operator="OR" comment="RHEL4, CentOS4 or Oracle Linux 4">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 4" definition_ref="oval:org.mitre.oval:def:11831"/>
            <extend_definition comment="CentOS Linux 4.x" definition_ref="oval:org.mitre.oval:def:16636"/>
            <extend_definition comment="Oracle Linux 4.x" definition_ref="oval:org.mitre.oval:def:15990"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nspr is earlier than 0:4.7.3-1.el4" test_ref="oval:org.mitre.oval:tst:37574"/>
            <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:38071"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-1.el4" test_ref="oval:org.mitre.oval:tst:37857"/>
            <criterion comment="thunderbird is earlier than 0:1.5.0.12-18.el4" test_ref="oval:org.mitre.oval:tst:37200"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.3-1.el4" test_ref="oval:org.mitre.oval:tst:37918"/>
            <criterion comment="seamonkey is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37812"/>
            <criterion comment="firefox is earlier than 0:3.0.5-1.el4" test_ref="oval:org.mitre.oval:tst:38080"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-1.el4" test_ref="oval:org.mitre.oval:tst:37139"/>
            <criterion comment="seamonkey-mail is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37869"/>
            <criterion comment="seamonkey-chat is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37789"/>
            <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:37395"/>
            <criterion comment="seamonkey-devel is earlier than 0:1.0.9-32.el4" test_ref="oval:org.mitre.oval:tst:38118"/>
          </criteria>
        </criteria>
        <criteria operator="AND" comment="OS Section: RHEL5, CentOS5, Oracle Linux 5">
          <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
            <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
            <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
            <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
          </criteria>
          <criteria operator="OR" comment="Configuration section">
            <criterion comment="nss-pkcs11-devel is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:38072"/>
            <criterion comment="xulrunner-devel is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38037"/>
            <criterion comment="nspr is earlier than 0:4.7.3-2.el5" test_ref="oval:org.mitre.oval:tst:37420"/>
            <criterion comment="nss is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37854"/>
            <criterion comment="thunderbird is earlier than 0:2.0.0.19-1.el5_2" test_ref="oval:org.mitre.oval:tst:38053"/>
            <criterion comment="nspr-devel is earlier than 0:4.7.3-2.el5" test_ref="oval:org.mitre.oval:tst:37419"/>
            <criterion comment="xulrunner is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38083"/>
            <criterion comment="xulrunner-devel-unstable is earlier than 0:1.9.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:37631"/>
            <criterion comment="firefox is earlier than 0:3.0.5-1.el5_2" test_ref="oval:org.mitre.oval:tst:38114"/>
            <criterion comment="nss-devel is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37737"/>
            <criterion comment="nss-tools is earlier than 0:3.12.2.0-2.el5" test_ref="oval:org.mitre.oval:tst:37403"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16651" version="3" class="inventory">
      <metadata>
        <title>CentOS Linux 3.x</title>
        <affected family="unix">
          <platform>CentOS Linux 3</platform>
        </affected>
        <reference ref_id="cpe:/o:centos:centos:3" source="CPE"/>
        <description>The operating system installed on the system is CentOS Linux 3.x</description>
        <oval_repository>
          <dates>
            <submitted date="2013-03-05T10:00:00.000-00:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2013-03-06T10:17:11.027-05:00">DRAFT</status_change>
            <status_change date="2013-03-25T04:01:05.702-04:00">INTERIM</status_change>
            <status_change date="2013-04-15T04:00:17.279-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="the installed operating system is part of the Unix family" test_ref="oval:org.mitre.oval:tst:4424"/>
        <criterion comment="CentOS Linux 3.x is installed" test_ref="oval:org.mitre.oval:tst:80206"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16636" version="3" class="inventory">
      <metadata>
        <title>CentOS Linux 4.x</title>
        <affected family="unix">
          <platform>CentOS Linux 4</platform>
        </affected>
        <reference ref_id="cpe:/o:centos:centos:4" source="CPE"/>
        <description>The operating system installed on the system is CentOS Linux 4.x</description>
        <oval_repository>
          <dates>
            <submitted date="2013-03-05T10:00:00.000-00:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2013-03-06T10:17:11.995-05:00">DRAFT</status_change>
            <status_change date="2013-03-25T04:01:05.534-04:00">INTERIM</status_change>
            <status_change date="2013-04-15T04:00:16.835-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="the installed operating system is part of the Unix family" test_ref="oval:org.mitre.oval:tst:4424"/>
        <criterion comment="CentOS Linux 4.x is installed" test_ref="oval:org.mitre.oval:tst:80582"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15990" version="5" class="inventory">
      <metadata>
        <title>Oracle Linux 4.x</title>
        <affected family="unix">
          <platform>Oracle Linux 4</platform>
        </affected>
        <reference ref_id="cpe:/o:oracle:linux:4" source="CPE"/>
        <description>The operating system installed on the system is Oracle Linux 4.x</description>
        <oval_repository>
          <dates>
            <submitted date="2013-03-05T10:00:00.000-00:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </submitted>
            <status_change date="2013-03-06T10:17:12.445-05:00">DRAFT</status_change>
            <status_change date="2013-03-25T04:00:09.175-04:00">INTERIM</status_change>
            <status_change date="2013-04-15T04:00:15.149-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:tst:80147 -  new object with the old value and refer that new object in the test." date="2014-03-17T11:21:00.077-04:00">
              <contributor organization="Hewlett-Packard">Chandan M C</contributor>
            </modified>
            <status_change date="2014-03-17T11:23:39.354-04:00">INTERIM</status_change>
            <status_change date="2014-04-07T04:01:59.810-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="the installed operating system is part of the Unix family" test_ref="oval:org.mitre.oval:tst:4424"/>
        <criterion comment="Oracle Linux 4.x is installed" test_ref="oval:org.mitre.oval:tst:80147"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11831" version="7" class="inventory">
      <metadata>
        <title>The operating system installed on the system is Red Hat Enterprise Linux 4</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:redhat:enterprise_linux:4"/>
        <description>The operating system installed on the system is Red Hat Enterprise Linux 4.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-06T12:00:00.000-06:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:09:25.710-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:42.275-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:34.417-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11831 - Updated CPE reference, updated regular expression" date="2011-02-17T13:29:00.547-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2011-02-17T13:31:01.582-05:00">INTERIM</status_change>
            <status_change date="2011-03-07T04:00:06.261-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11366 - Corrected - right version for brlapi and brlapi-devel as specified by RHSA-2010:0181-5" date="2013-03-18T12:26:00.995-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-03-18T12:31:11.966-04:00">INTERIM</status_change>
            <status_change date="2013-04-08T04:00:07.616-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Red Hat Enterprise 4 is installed" test_ref="oval:org.mitre.oval:tst:2652"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11782" version="7" class="inventory">
      <metadata>
        <title>The operating system installed on the system is Red Hat Enterprise Linux 3</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:redhat:enterprise_linux:3"/>
        <description>The operating system installed on the system is Red Hat Enterprise Linux 3.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-06T12:00:00.000-06:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:09:25.361-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:10:36.365-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:11:26.996-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11298 - Updated CPE reference, updated regular expression" date="2011-02-17T13:32:00.706-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2011-02-17T13:33:54.219-05:00">INTERIM</status_change>
            <status_change date="2011-03-07T04:00:05.947-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11298 - Corrected - right version for brlapi and brlapi-devel as specified by RHSA-2010:0181-5" date="2013-03-18T12:26:00.995-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-03-18T12:31:17.613-04:00">INTERIM</status_change>
            <status_change date="2013-04-08T04:00:07.318-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Red Hat Enterprise 3 is installed" test_ref="oval:org.mitre.oval:tst:7836"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100009" version="6" class="vulnerability">
      <metadata>
        <title>Firefox Sidebar Script Injection via _search Target</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2264" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2264"/>
        <description>Firefox before 1.0.5 allows remote attackers to steal sensitive information by opening a malicious link in the Firefox sidebar using the _search target, then injecting script into other pages via a data: URL.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T12:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <status_change date="2005-09-21T01:33:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-12T05:49:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T04:52:00.000-04:00" comment="Added Firefox as affected product.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:261: Added beginning anchors to the regular expression used in the pattern match, to avoid mid-string matches." date="2007-01-22T01:50:00.388-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T01:51:43.831-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:23.323-05:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:260" date="2007-03-06T08:08:00.624-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-06T08:08:31.263-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:21.853-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:245" date="2007-04-23T12:05:00.868-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:35:24.013-04:00">INTERIM</status_change>
            <status_change date="2007-05-09T16:10:30.109-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.4 or earlier is installed">
          <criterion comment="Firefox version 1.0.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:263"/>
          <criterion comment="Mozilla Firefox version 1.0.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:262"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100008" version="6" class="vulnerability">
      <metadata>
        <title>InstallVersion.compareTo() DoS and Code Execution Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2265"/>
        <description>Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of service (access violation and crash), and possibly execute arbitrary code, by calling InstallVersion.compareTo with an object instead of a string.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T04:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <modified date="2005-09-19T04:00:00.000-04:00" comment="modified wrt-10048 - Removed extra \\ in key">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2005-10-05T11:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-26T06:46:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T04:51:00.000-04:00" comment="Added Mozilla and Firefox as affected products.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:259: Added beginning anchors to regular expression in pattern match, to avoid mid-string matches." date="2007-01-22T01:46:00.843-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T01:50:43.003-05:00">INTERIM</status_change>
            <modified comment="Fixed ste:261: Added beginning anchors to the regular expression used in the pattern match, to avoid mid-string matches." date="2007-01-22T01:50:00.388-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-02-20T13:39:22.978-05:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:258" date="2007-03-06T08:07:00.811-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-06T08:08:09.102-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:260" date="2007-03-06T08:08:00.624-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:21.516-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:244" date="2007-04-23T12:05:00.886-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:34:27.680-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:245" date="2007-04-23T12:05:00.868-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:29.567-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.4 or earlier is installed">
          <criterion comment="Firefox version 1.0.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:263"/>
          <criterion comment="Mozilla Firefox version 1.0.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:262"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.8 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.8 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:261"/>
          <criterion comment="Mozilla Suite version 1.7.8 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:260"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100007" version="6" class="vulnerability">
      <metadata>
        <title>Firefox and Mozilla Framed Site Spoofing Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1937" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1937"/>
        <description>A regression error in Firefox 1.0.3 and Mozilla 1.7.7 allows remote attackers to inject arbitrary Javascript from one page into the frameset of another site, aka the frame injection spoofing vulnerability, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2004-0718.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T04:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <modified date="2005-09-19T04:00:00.000-04:00" comment="modified wrt-10048 - Removed extra \\ in key">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified date="2005-09-22T09:45:00.000-04:00" comment="Added CVE#">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <status_change date="2005-10-12T05:49:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T04:49:00.000-04:00" comment="Added Mozilla as affected product.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:259: Added beginning anchors to regular expression in pattern match, to avoid mid-string matches." date="2007-01-22T01:46:00.843-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T01:50:41.460-05:00">INTERIM</status_change>
            <modified comment="Fixed ste:261: Added beginning anchors to the regular expression used in the pattern match, to avoid mid-string matches." date="2007-01-22T01:50:00.388-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-02-20T13:39:22.513-05:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:258" date="2007-03-06T08:07:00.811-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-06T08:08:07.554-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:260" date="2007-03-06T08:08:00.624-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:21.188-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:244" date="2007-04-23T12:05:00.886-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:34:25.818-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:245" date="2007-04-23T12:05:00.868-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:29.078-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.4 or earlier is installed">
          <criterion comment="Firefox version 1.0.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:263"/>
          <criterion comment="Mozilla Firefox version 1.0.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:262"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.8 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.8 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:261"/>
          <criterion comment="Mozilla Suite version 1.7.8 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:260"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100006" version="6" class="vulnerability">
      <metadata>
        <title>Firefox External App Code Acceptance Vulnerability</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>Mozilla Firefox</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2267" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2267"/>
        <description>Firefox before 1.0.5 allows remote attackers to steal information and possibly execute arbitrary code by using standalone applications such as Flash and QuickTime to open a javascript: URL, which is run in the context of the previous page, and may lead to code execution if the standalone application loads a privileged chrome: URL.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T04:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <modified date="2005-09-07T04:00:00.000-04:00" comment="Added description">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2005-09-19T04:00:00.000-04:00" comment="modified wrt-10048 - Removed extra \\ in key">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2005-10-05T11:37:00.000-04:00">INTERIM</status_change>
            <modified date="2005-10-08T01:14:00.000-04:00" comment="Removed test for Mozilla Suite 1.7.8.  Per Rob Hollis &amp;#60;rob@threatguard.com> this definition should not have tested for Mozilla Suite; only Firefox is vulnerable.  Vendor advisory agrees.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2005-10-26T06:46:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T04:47:00.000-04:00" comment="Added Mozilla as affected product.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <modified date="2006-02-01T05:47:00.000-04:00" comment="Changed affected product to Firefox.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:261: Added beginning anchors to the regular expression used in the pattern match, to avoid mid-string matches." date="2007-01-22T01:50:00.388-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T01:51:44.975-05:00">INTERIM</status_change>
            <status_change date="2007-02-20T13:39:22.121-05:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:260" date="2007-03-06T08:08:00.624-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-06T08:08:32.476-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:20.859-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:245" date="2007-04-23T12:05:00.868-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:35:26.348-04:00">INTERIM</status_change>
            <status_change date="2007-05-09T16:10:28.528-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.4 or earlier is installed">
          <criterion comment="Firefox version 1.0.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:263"/>
          <criterion comment="Mozilla Firefox version 1.0.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:262"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100005" version="6" class="vulnerability">
      <metadata>
        <title>Firefox and Mozilla Javascript Dialog Box Spoofing</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2268"/>
        <description>Firefox before 1.0.5 and Mozilla before 1.7.9 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T04:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <modified date="2005-09-07T04:00:00.000-04:00" comment="Added Description">
              <contributor organization="The MITRE Corporation">Christine Walzer</contributor>
            </modified>
            <modified date="2005-09-19T04:00:00.000-04:00" comment="modified wrt-10048 - Removed extra \\ in key">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <modified date="2005-10-04T08:47:00.000-04:00" comment="Changed CVE reference to CAN-2005-2268, per Rob Hollis">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2005-10-19T05:47:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-11-16T08:02:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T04:45:00.000-04:00" comment="Added Mozilla as affected product.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:259: Added beginning anchors to regular expression in pattern match, to avoid mid-string matches." date="2007-01-22T01:46:00.843-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T01:50:41.721-05:00">INTERIM</status_change>
            <modified comment="Fixed ste:261: Added beginning anchors to the regular expression used in the pattern match, to avoid mid-string matches." date="2007-01-22T01:50:00.388-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-02-20T13:39:21.625-05:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:258" date="2007-03-06T08:07:00.811-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-06T08:08:07.898-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:260" date="2007-03-06T08:08:00.624-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:20.440-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:244" date="2007-04-23T12:05:00.886-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:34:26.208-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:245" date="2007-04-23T12:05:00.868-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:27.862-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.4 or earlier is installed">
          <criterion comment="Firefox version 1.0.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:263"/>
          <criterion comment="Mozilla Firefox version 1.0.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:262"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.8 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.8 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:261"/>
          <criterion comment="Mozilla Suite version 1.7.8 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:260"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100004" version="6" class="vulnerability">
      <metadata>
        <title>Firefox and Mozilla DOM Node Spoofing</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2269" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2269"/>
        <description>Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM node names within the context of their namespaces, which allows remote attackers to modify certain tag properties, possibly leading to execution of arbitrary script or code, as demonstrated using an XHTML document with IMG tags with custom properties ("XHTML node spoofing").</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T04:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <modified date="2005-09-19T04:00:00.000-04:00" comment="modified wrt-10048 - Removed extra \\ in key">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2005-10-05T11:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-26T06:46:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-02-01T04:43:00.000-04:00" comment="Added Mozilla as affected product.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-02-01T09:07:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:259: Added beginning anchors to regular expression in pattern match, to avoid mid-string matches." date="2007-01-22T01:46:00.843-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T01:50:40.952-05:00">INTERIM</status_change>
            <modified comment="Fixed ste:261: Added beginning anchors to the regular expression used in the pattern match, to avoid mid-string matches." date="2007-01-22T01:50:00.388-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-02-20T13:39:21.228-05:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:258" date="2007-03-06T08:07:00.811-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-06T08:08:06.923-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:260" date="2007-03-06T08:08:00.624-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:20.071-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:244" date="2007-04-23T12:05:00.886-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:34:24.993-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:245" date="2007-04-23T12:05:00.868-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:27.277-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.4 or earlier is installed">
          <criterion comment="Firefox version 1.0.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:263"/>
          <criterion comment="Mozilla Firefox version 1.0.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:262"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.8 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.8 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:261"/>
          <criterion comment="Mozilla Suite version 1.7.8 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:260"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100003" version="6" class="vulnerability">
      <metadata>
        <title>Firefox and Mozilla Shared Object Code Execution</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-2270" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2270"/>
        <description>Firefox before 1.0.5 and Mozilla before 1.7.9 does not properly clone base objects, which allows remote attackers to execute arbitrary code by navigating the prototype chain to reach a privileged object.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T04:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <modified date="2005-09-19T04:00:00.000-04:00" comment="modified wrt-10048 - Removed extra \\ in key">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2005-10-05T11:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-10-26T06:46:00.000-04:00">ACCEPTED</status_change>
            <status_change date="2005-12-12T09:30:00.000-04:00">INTERIM</status_change>
            <status_change date="2005-12-28T04:28:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-01-25T04:02:00.000-04:00" comment="Added Mozilla as affected product.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2006-01-25T07:27:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-02-22T08:27:00.000-04:00">ACCEPTED</status_change>
            <modified comment="Fixed ste:259: Added beginning anchors to regular expression in pattern match, to avoid mid-string matches." date="2007-01-22T01:46:00.843-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-01-22T01:50:42.252-05:00">INTERIM</status_change>
            <modified comment="Fixed ste:261: Added beginning anchors to the regular expression used in the pattern match, to avoid mid-string matches." date="2007-01-22T01:50:00.388-05:00">
              <contributor organization="Centennial Software">John Hoyland</contributor>
            </modified>
            <status_change date="2007-02-20T13:39:20.824-05:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in ste:258" date="2007-03-06T08:07:00.811-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-06T08:08:08.496-05:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in ste:260" date="2007-03-06T08:08:00.624-05:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-03-21T16:16:19.621-04:00">ACCEPTED</status_change>
            <modified comment="Added anchor to regex in obj:244" date="2007-04-23T12:05:00.886-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-04-23T12:34:26.976-04:00">INTERIM</status_change>
            <modified comment="Added anchor to regex in obj:245" date="2007-04-23T12:05:00.868-04:00">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2007-05-09T16:10:26.656-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="OR">
        <criteria operator="AND" comment="Mozilla Firefox version 1.0.4 or earlier is installed">
          <criterion comment="Firefox version 1.0.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:263"/>
          <criterion comment="Mozilla Firefox version 1.0.4 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:262"/>
        </criteria>
        <criteria operator="AND" comment="Mozilla Suite version 1.7.8 or earlier is installed">
          <criterion comment="Mozilla Suite version 1.7.8 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:261"/>
          <criterion comment="Mozilla Suite version 1.7.8 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:260"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100002" version="3" class="vulnerability">
      <metadata>
        <title>IFRAME in Firefox and Mozilla Permits Execution of Arbitrary Javascript in Other Domains</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1476" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1476"/>
        <description>Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigate to a previous javascript: URL, which can lead to arbitrary code execution when combined with CVE-2005-1477.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T04:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <modified date="2005-09-19T04:00:00.000-04:00" comment="modified wrt-10025 - Removed extra \\ in key">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2005-10-05T11:37:00.000-04:00">INTERIM</status_change>
            <modified date="2005-10-11T04:13:00.000-04:00" comment="modified wrt-10024 - Removed doubled backslashes in string literal test.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2005-10-26T06:46:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-10-06T04:00:00.000-04:00" comment="Fixed ste:262 by properly anchoring the regular expression.  Modified by Harvey Rubinovitz">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2006-10-06T11:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:14:55.097-04:00">ACCEPTED</status_change>
            <modified comment="Added anchors to regex in ste:263" date="2007-02-12T09:14:00.355-05:00">
              <contributor organization="GFI Software">Daniel Tarnu</contributor>
            </modified>
            <status_change date="2007-02-12T09:15:33.057-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:19.348-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Firefox &lt;= 1.0.3 or Mozilla Suite &lt;= 1.7.7 is installed">
          <criterion comment="Firefox version 1.0.3 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:265"/>
          <criterion comment="Mozilla Suite version 1.7.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:264"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:100001" version="3" class="vulnerability">
      <metadata>
        <title>Install Function in Firefox and Mozilla Permits Arbitrary Code Execution</title>
        <affected family="windows">
          <platform>Microsoft Windows NT</platform>
          <platform>Microsoft Windows 2000</platform>
          <platform>Microsoft Windows XP</platform>
          <platform>Microsoft Windows Server 2003</platform>
          <product>mozilla</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2005-1477" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1477"/>
        <description>The install function in Firefox 1.0.3 allows remote web sites on the browser's whitelist, such as update.mozilla.org or addon.mozilla.org, to execute arbitrary Javascript with chrome privileges, leading to arbitrary code execution on the system when combined with vulnerabilities such as CVE-2005-1476, as demonstrated using a javascript: URL as the package icon and a cross-site scripting (XSS) attack on a vulnerable whitelist site.</description>
        <oval_repository>
          <dates>
            <submitted date="2005-08-16T04:00:00.000-04:00">
              <contributor organization="ThreatGuard, Inc.">Robert L. Hollis</contributor>
            </submitted>
            <modified date="2005-09-19T04:00:00.000-04:00" comment="modified wrt-10025 - Removed extra \\ in key">
              <contributor organization="The MITRE Corporation">Jonathan Baker</contributor>
            </modified>
            <status_change date="2005-10-05T11:37:00.000-04:00">INTERIM</status_change>
            <modified date="2005-10-11T04:13:00.000-04:00" comment="modified wrt-10024 - Removed doubled backslashes in string literal test.">
              <contributor organization="The MITRE Corporation">Matthew Wojcik</contributor>
            </modified>
            <status_change date="2005-10-26T06:46:00.000-04:00">ACCEPTED</status_change>
            <modified date="2006-10-06T04:00:00.000-04:00" comment="Fixed ste:262 by properly anchoring the regular expression.  Modified by Harvey Rubinovitz">
              <contributor organization="BigFix, Inc">Anna Min</contributor>
            </modified>
            <status_change date="2006-10-06T11:37:00.000-04:00">INTERIM</status_change>
            <status_change date="2006-10-24T09:14:53.777-04:00">ACCEPTED</status_change>
            <modified comment="Added anchors to regex in ste:263" date="2007-02-12T09:14:00.355-05:00">
              <contributor organization="GFI Software">Daniel Tarnu</contributor>
            </modified>
            <status_change date="2007-02-12T09:15:33.717-05:00">INTERIM</status_change>
            <status_change date="2007-03-21T16:16:19.069-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria comment="Software section" operator="AND">
        <criteria operator="OR" comment="Firefox &lt;= 1.0.3 or Mozilla Suite &lt;= 1.7.7 is installed">
          <criterion comment="Firefox version 1.0.3 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:265"/>
          <criterion comment="Mozilla Suite version 1.7.7 or earlier is installed" negate="false" test_ref="oval:org.mitre.oval:tst:264"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10000" version="5" class="vulnerability">
      <metadata>
        <title>Heap-based buffer overflow in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to execute arbitrary code via crafted data in the "net socket listen" option, aka QEMU "net socket" heap overflow.  NOTE: some sources have used CVE-2007-1321 to refer to this issue as part of "NE2000 network driver and the socket code," but this is the correct identifier for the individual net socket listen vulnerability.</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>CentOS Linux 5</platform>
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2007-5730" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5730"/>
        <description>Heap-based buffer overflow in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to execute arbitrary code via crafted data in the "net socket listen" option, aka QEMU "net socket" heap overflow.  NOTE: some sources have used CVE-2007-1321 to refer to this issue as part of "NE2000 network driver and the socket code," but this is the correct identifier for the individual net socket listen vulnerability.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-09T03:56:16-04:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:25:03.744-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:00:04.018-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:00:03.394-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:10000 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T17:41:00.978-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T17:44:06.504-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:00:04.898-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR" comment="RHEL5, CentOS5 or Oracle Linux 5">
          <extend_definition comment="The operating system installed on the system is Red Hat Enterprise Linux 5" definition_ref="oval:org.mitre.oval:def:11414"/>
          <extend_definition comment="CentOS Linux 5.x" definition_ref="oval:org.mitre.oval:def:15802"/>
          <extend_definition comment="Oracle Linux 5.x" definition_ref="oval:org.mitre.oval:def:15459"/>
        </criteria>
        <criteria operator="OR" comment="Configuration section">
          <criterion comment="xen-libs is earlier than 0:3.0.3-41.el5_1.5" test_ref="oval:org.mitre.oval:tst:36530"/>
          <criterion comment="xen is earlier than 0:3.0.3-41.el5_1.5" test_ref="oval:org.mitre.oval:tst:36543"/>
          <criterion comment="xen-devel is earlier than 0:3.0.3-41.el5_1.5" test_ref="oval:org.mitre.oval:tst:35758"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15802" version="7" class="inventory">
      <metadata>
        <title>The operating system installed on the system is CentOS Linux 5.x</title>
        <affected family="unix">
          <platform>CentOS Linux 5</platform>
        </affected>
        <reference ref_id="cpe:/o:centos:centos:5" source="CPE"/>
        <description>The operating system installed on the system is CentOS Linux 5.x</description>
        <oval_repository>
          <dates>
            <submitted date="2012-12-11T10:36:00.000-05:00">
              <contributor organization="MITRE">Danny Haynes</contributor>
            </submitted>
            <status_change date="2012-12-12T17:30:41.244-05:00">DRAFT</status_change>
            <status_change date="2012-12-31T04:01:31.486-05:00">INTERIM</status_change>
            <status_change date="2013-01-21T04:00:13.958-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:20137 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:38.109-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:16:16.163-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:15802 - new definitions (patch) for the CentOS &amp; RedHat 2012." date="2014-01-15T12:02:00.592-05:00">
              <contributor organization="ALTX-SOFT">Sergey Artykhov</contributor>
            </modified>
            <status_change date="2014-01-15T12:21:47.538-05:00">INTERIM</status_change>
            <status_change date="2014-02-03T04:00:37.998-05:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="the installed operating system is part of the Unix family" test_ref="oval:org.mitre.oval:tst:4424"/>
        <criterion comment="CentOS Linux 5.x is installed" test_ref="oval:org.mitre.oval:tst:80416"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:15459" version="7" class="inventory">
      <metadata>
        <title>Oracle Linux 5.x</title>
        <affected family="unix">
          <platform>Oracle Linux 5</platform>
        </affected>
        <reference ref_id="cpe:/o:oracle:linux:5" source="CPE"/>
        <description>The operating system installed on the system is Oracle Linux 5.x</description>
        <oval_repository>
          <dates>
            <submitted date="2012-12-11T10:36:00.000-05:00">
              <contributor organization="MITRE">Danny Haynes</contributor>
            </submitted>
            <status_change date="2013-01-02T18:06:50.247-05:00">DRAFT</status_change>
            <status_change date="2013-01-21T04:00:07.406-05:00">INTERIM</status_change>
            <status_change date="2013-02-11T04:01:21.815-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:20137 - Expanded the vulnerability checks for RHEL 3, 4, and 5 to cover  CentOS 3, 4, 5 and Oracle Linux 4 and 5" date="2013-04-10T14:46:00.236-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-04-10T15:20:37.858-04:00">INTERIM</status_change>
            <status_change date="2013-04-29T04:16:08.356-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:obj:23691 - Object value changed from enterprise-release to oraclelinux-release, as per the actual file available on oracle linux" date="2014-03-17T11:23:00.714-04:00">
              <contributor organization="Hewlett-Packard">Chandan M C</contributor>
            </modified>
            <status_change date="2014-03-17T11:25:31.931-04:00">INTERIM</status_change>
            <status_change date="2014-04-07T04:01:57.431-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="the installed operating system is part of the Unix family" test_ref="oval:org.mitre.oval:tst:4424"/>
        <criterion comment="Oracle Linux 5.x is installed" test_ref="oval:org.mitre.oval:tst:80718"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:11414" version="7" class="inventory">
      <metadata>
        <title>The operating system installed on the system is Red Hat Enterprise Linux 5</title>
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 5</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:redhat:enterprise_linux:5"/>
        <description>The operating system installed on the system is Red Hat Enterprise Linux 5.</description>
        <oval_repository>
          <dates>
            <submitted date="2010-07-06T12:00:00.000-06:00">
              <contributor organization="SCAP.com, LLC">Aharon Chernin</contributor>
            </submitted>
            <status_change date="2010-07-28T14:09:29.872-04:00">DRAFT</status_change>
            <status_change date="2010-08-16T04:09:16.744-04:00">INTERIM</status_change>
            <status_change date="2010-09-06T04:10:00.824-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:11414 - Updated CPE reference, updated regular expression" date="2011-02-17T13:31:00.837-05:00">
              <contributor organization="Symantec Corporation">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2011-02-17T13:32:08.284-05:00">INTERIM</status_change>
            <status_change date="2011-03-07T04:00:03.934-05:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:ste:11314 - Corrected - right version for brlapi and brlapi-devel as specified by RHSA-2010:0181-5" date="2013-03-18T12:26:00.995-04:00">
              <contributor organization="G2, Inc.">Dragos Prisaca</contributor>
            </modified>
            <status_change date="2013-03-18T12:31:15.870-04:00">INTERIM</status_change>
            <status_change date="2013-04-08T04:00:06.890-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="Red Hat Enterprise 5 is installed" test_ref="oval:org.mitre.oval:tst:3846"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:10" version="1" class="vulnerability">
      <metadata>
        <title>Heap Overflow in Solaris 8 xlock</title>
        <affected family="unix">
          <platform>Sun Solaris 8</platform>
          <product>xlock</product>
        </affected>
        <reference source="CVE" ref_id="CVE-2001-0652" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0652"/>
        <description>Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long (1) XFILESEARCHPATH or (2) XUSERFILESEARCHPATH environmental variable.</description>
        <oval_repository>
          <dates>
            <submitted date="2002-09-17T12:00:00.000-04:00">
              <contributor organization="The MITRE Corporation">David Proulx</contributor>
            </submitted>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Software section" operator="AND">
          <criterion comment="Solaris 8 Installed" negate="false" test_ref="oval:org.mitre.oval:tst:3145"/>
          <criterion comment="File xlock exists" negate="false" test_ref="oval:org.mitre.oval:tst:3130"/>
          <criterion comment="Patch 108652-38 or later installed" negate="true" test_ref="oval:org.mitre.oval:tst:3129"/>
        </criteria>
        <criteria comment="Configuration section" operator="AND">
          <criteria operator="AND" comment="File xlock SUID and executable">
            <criterion comment="File xlock SUID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:3128"/>
            <criterion comment="File xlock SUID and executable" negate="false" test_ref="oval:org.mitre.oval:tst:3127"/>
          </criteria>
        </criteria>
      </criteria>
    </definition>
  </definitions>
  <tests>
    <rpminfo_test id="oval:org.mitre.oval:tst:40464" version="1" comment="kdebase-devel is earlier than 6:3.3.1-13.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14419"/>
      <state state_ref="oval:org.mitre.oval:ste:11441"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40374" version="1" comment="kdebase-devel is earlier than 6:3.5.4-21.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14419"/>
      <state state_ref="oval:org.mitre.oval:ste:11308"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40335" version="1" comment="kdebase is earlier than 6:3.5.4-21.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14264"/>
      <state state_ref="oval:org.mitre.oval:ste:11308"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39507" version="1" comment="kdebase is earlier than 6:3.3.1-13.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14264"/>
      <state state_ref="oval:org.mitre.oval:ste:11441"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38913" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-0.39.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:11263"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38897" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.39.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:11263"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38879" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-44.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:11371"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38839" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-44.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:11371"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38781" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-0.39.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:11263"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38757" version="1" comment="seamonkey is earlier than 0:1.0.9-44.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:11371"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38727" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.39.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:11263"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38710" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.39.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:11263"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38621" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-0.39.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:11263"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38614" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-0.39.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:11263"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38465" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-44.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:11371"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38447" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-0.39.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:11263"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38382" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.39.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:11263"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38330" version="1" comment="seamonkey is earlier than 0:1.0.9-0.39.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:11263"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38248" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-44.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:11371"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38157" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-44.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:11371"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32360" version="1" comment="lm_sensors is earlier than 0:2.8.7-2.40.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13995"/>
      <state state_ref="oval:org.mitre.oval:ste:9917"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31850" version="1" comment="lm_sensors-devel is earlier than 0:2.8.7-2.40.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14545"/>
      <state state_ref="oval:org.mitre.oval:ste:9917"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33384" version="1" comment="squirrelmail is earlier than 0:1.4.8-4.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14331"/>
      <state state_ref="oval:org.mitre.oval:ste:10379"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32449" version="1" comment="squirrelmail is earlier than 0:1.4.8-4.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14331"/>
      <state state_ref="oval:org.mitre.oval:ste:9497"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38229" version="1" comment="avahi-glib-devel is earlier than 0:0.6.16-1.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14417"/>
      <state state_ref="oval:org.mitre.oval:ste:11086"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38201" version="1" comment="avahi-compat-howl is earlier than 0:0.6.16-1.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14998"/>
      <state state_ref="oval:org.mitre.oval:ste:11086"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38123" version="1" comment="avahi-compat-howl-devel is earlier than 0:0.6.16-1.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14459"/>
      <state state_ref="oval:org.mitre.oval:ste:11086"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38120" version="1" comment="avahi-qt3 is earlier than 0:0.6.16-1.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14742"/>
      <state state_ref="oval:org.mitre.oval:ste:11086"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38074" version="1" comment="avahi-compat-libdns_sd-devel is earlier than 0:0.6.16-1.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14977"/>
      <state state_ref="oval:org.mitre.oval:ste:11086"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38067" version="1" comment="avahi-qt3-devel is earlier than 0:0.6.16-1.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14570"/>
      <state state_ref="oval:org.mitre.oval:ste:11086"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38051" version="1" comment="avahi-compat-libdns_sd is earlier than 0:0.6.16-1.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14856"/>
      <state state_ref="oval:org.mitre.oval:ste:11086"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37982" version="1" comment="avahi-glib is earlier than 0:0.6.16-1.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14590"/>
      <state state_ref="oval:org.mitre.oval:ste:11086"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37900" version="1" comment="avahi is earlier than 0:0.6.16-1.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14891"/>
      <state state_ref="oval:org.mitre.oval:ste:11086"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37859" version="1" comment="avahi-tools is earlier than 0:0.6.16-1.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15172"/>
      <state state_ref="oval:org.mitre.oval:ste:11086"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37798" version="1" comment="avahi-devel is earlier than 0:0.6.16-1.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14981"/>
      <state state_ref="oval:org.mitre.oval:ste:11086"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32913" version="1" comment="ruby is earlier than 0:1.8.1-7.EL4.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14305"/>
      <state state_ref="oval:org.mitre.oval:ste:9770"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32881" version="1" comment="ruby-devel is earlier than 0:1.8.1-7.EL4.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14187"/>
      <state state_ref="oval:org.mitre.oval:ste:9770"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32804" version="1" comment="ruby-libs is earlier than 0:1.8.1-7.EL4.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14388"/>
      <state state_ref="oval:org.mitre.oval:ste:9770"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32800" version="1" comment="ruby-devel is earlier than 0:1.6.8-9.EL3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14187"/>
      <state state_ref="oval:org.mitre.oval:ste:10036"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32751" version="1" comment="ruby-tcltk is earlier than 0:1.8.1-7.EL4.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14273"/>
      <state state_ref="oval:org.mitre.oval:ste:9770"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32730" version="1" comment="ruby-docs is earlier than 0:1.6.8-9.EL3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14446"/>
      <state state_ref="oval:org.mitre.oval:ste:10036"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32723" version="1" comment="ruby-docs is earlier than 0:1.8.1-7.EL4.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14446"/>
      <state state_ref="oval:org.mitre.oval:ste:9770"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32617" version="1" comment="ruby-libs is earlier than 0:1.6.8-9.EL3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14388"/>
      <state state_ref="oval:org.mitre.oval:ste:10036"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32600" version="1" comment="ruby-mode is earlier than 0:1.8.1-7.EL4.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14380"/>
      <state state_ref="oval:org.mitre.oval:ste:9770"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32566" version="1" comment="ruby-tcltk is earlier than 0:1.6.8-9.EL3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14273"/>
      <state state_ref="oval:org.mitre.oval:ste:10036"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32482" version="1" comment="irb is earlier than 0:1.6.8-9.EL3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13649"/>
      <state state_ref="oval:org.mitre.oval:ste:10036"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32443" version="1" comment="ruby-mode is earlier than 0:1.6.8-9.EL3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14380"/>
      <state state_ref="oval:org.mitre.oval:ste:10036"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32264" version="1" comment="ruby is earlier than 0:1.6.8-9.EL3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14305"/>
      <state state_ref="oval:org.mitre.oval:ste:10036"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32117" version="1" comment="irb is earlier than 0:1.8.1-7.EL4.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13649"/>
      <state state_ref="oval:org.mitre.oval:ste:9770"/>
    </rpminfo_test>
    <patch_test id="oval:org.mitre.oval:tst:1337" version="1" check="at least one" comment="Patch 118908-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:925"/>
      <state state_ref="oval:org.mitre.oval:ste:1199"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:1335" version="1" check="at least one" comment="Patch 118966-09 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:581"/>
      <state state_ref="oval:org.mitre.oval:ste:1198"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37391" version="1" comment="bluez-libs is earlier than 0:3.7-1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14979"/>
      <state state_ref="oval:org.mitre.oval:ste:10673"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37379" version="1" comment="bluez-utils is earlier than 0:3.7-2.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14881"/>
      <state state_ref="oval:org.mitre.oval:ste:10740"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37371" version="1" comment="bluez-libs is earlier than 0:2.10-3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14979"/>
      <state state_ref="oval:org.mitre.oval:ste:10716"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37349" version="1" comment="bluez-utils-cups is earlier than 0:3.7-2.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14559"/>
      <state state_ref="oval:org.mitre.oval:ste:10740"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37307" version="1" comment="bluez-utils-cups is earlier than 0:2.10-2.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14559"/>
      <state state_ref="oval:org.mitre.oval:ste:10884"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37129" version="1" comment="bluez-libs-devel is earlier than 0:2.10-3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14975"/>
      <state state_ref="oval:org.mitre.oval:ste:10716"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36988" version="1" comment="bluez-libs-devel is earlier than 0:3.7-1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14975"/>
      <state state_ref="oval:org.mitre.oval:ste:10673"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36921" version="1" comment="bluez-utils is earlier than 0:2.10-2.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14881"/>
      <state state_ref="oval:org.mitre.oval:ste:10884"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1341" version="1" check="at least one" comment="/proc/tty/driver/serial is world-readable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:929"/>
      <state state_ref="oval:org.mitre.oval:ste:1203"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1340" version="2" check="at least one" comment="/proc/tty/driver/ is world-executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:928"/>
      <state state_ref="oval:org.mitre.oval:ste:1202"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1339" version="2" check="at least one" comment="/proc/tty/ is world-executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:927"/>
      <state state_ref="oval:org.mitre.oval:ste:1201"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1338" version="2" check="at least one" comment="/proc/ is world-executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:926"/>
      <state state_ref="oval:org.mitre.oval:ste:1200"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38220" version="1" comment="cups-libs is earlier than 1:1.1.17-13.3.56" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:10778"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38122" version="1" comment="cups is earlier than 1:1.1.17-13.3.56" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:10778"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37836" version="1" comment="cups-devel is earlier than 1:1.1.17-13.3.56" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:10778"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35238" version="1" comment="openoffice.org-draw is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14828"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35237" version="1" comment="openoffice.org-langpack-ga_IE is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14635"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35235" version="1" comment="openoffice.org-langpack-da_DK is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14748"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35232" version="1" comment="openoffice.org-langpack-or_IN is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14588"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35231" version="1" comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14900"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35225" version="1" comment="openoffice.org-langpack-nl is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14909"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35222" version="1" comment="openoffice.org-langpack-zh_TW is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14392"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35217" version="1" comment="openoffice.org-langpack-zh_CN is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14839"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35211" version="1" comment="openoffice.org-langpack-fi_FI is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14625"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35206" version="1" comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14759"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35205" version="1" comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14765"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35203" version="1" comment="openoffice.org-langpack-eu_ES is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14813"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35201" version="1" comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14651"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35198" version="1" comment="openoffice.org-langpack-ar is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14872"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35196" version="1" comment="openoffice.org-langpack-hi_IN is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14717"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35194" version="1" comment="openoffice.org-langpack-sr_CS is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14189"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35193" version="1" comment="openoffice.org-langpack-st_ZA is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14851"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35190" version="1" comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14649"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35188" version="1" comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14865"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35172" version="1" comment="openoffice.org-langpack-as_IN is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14576"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35163" version="1" comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14980"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35158" version="1" comment="openoffice.org-langpack-pt_BR is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14822"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35157" version="1" comment="openoffice.org-langpack-sk_SK is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14266"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35152" version="1" comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14984"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35151" version="1" comment="openoffice.org-langpack-ml_IN is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14257"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35138" version="1" comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15006"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35137" version="1" comment="openoffice.org-base is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14548"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35135" version="1" comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14762"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35132" version="1" comment="openoffice.org-calc is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14623"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35130" version="1" comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14969"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35129" version="1" comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14849"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35128" version="1" comment="openoffice.org-langpack-cy_GB is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14501"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35127" version="1" comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14875"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35111" version="1" comment="openoffice.org-writer is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14758"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35109" version="1" comment="openoffice.org-langpack-he_IL is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14442"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35107" version="1" comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14814"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35105" version="1" comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14995"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35104" version="1" comment="openoffice.org-langpack-et_EE is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14280"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35101" version="1" comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14432"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35098" version="1" comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14763"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35096" version="1" comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14768"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35094" version="1" comment="openoffice.org-langpack-sv is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14529"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35090" version="1" comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14599"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35089" version="1" comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14997"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35082" version="1" comment="openoffice.org-langpack-ms_MY is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14787"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35080" version="1" comment="openoffice.org-langpack-de is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14539"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35079" version="1" comment="openoffice.org-langpack-hr_HR is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14336"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35072" version="1" comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13974"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35068" version="1" comment="openoffice.org-langpack-bg_BG is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14589"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35063" version="1" comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14728"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35058" version="1" comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14990"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35038" version="1" comment="openoffice.org-langpack-nn_NO is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14779"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35036" version="1" comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14606"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35027" version="1" comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14738"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35019" version="1" comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15005"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35006" version="1" comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14562"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34999" version="1" comment="openoffice.org is earlier than 0:1.1.5-10.6.0.2.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:10478"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34996" version="1" comment="openoffice.org-math is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14557"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34989" version="1" comment="openoffice.org-core is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14450"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34988" version="1" comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14716"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34987" version="1" comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14963"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34985" version="1" comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14892"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34983" version="1" comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14321"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34980" version="1" comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14472"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34978" version="1" comment="openoffice.org-langpack-ur is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14671"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34972" version="1" comment="openoffice.org-xsltfilter is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14530"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34970" version="1" comment="openoffice.org-langpack-ru is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14766"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34969" version="1" comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14401"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34967" version="1" comment="openoffice.org-libs is earlier than 0:1.1.2-40.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14455"/>
      <state state_ref="oval:org.mitre.oval:ste:10543"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34963" version="1" comment="openoffice.org-graphicfilter is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14526"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34947" version="1" comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14476"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34942" version="1" comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.2.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13698"/>
      <state state_ref="oval:org.mitre.oval:ste:10478"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34939" version="1" comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14956"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34938" version="1" comment="openoffice.org-langpack-fr is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14772"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34932" version="1" comment="openoffice.org-pyuno is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14806"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34919" version="1" comment="openoffice.org-langpack-pa_IN is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14746"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34918" version="1" comment="openoffice.org-langpack-gu_IN is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14269"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34909" version="1" comment="openoffice.org-langpack-ca_ES is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14778"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34907" version="1" comment="openoffice.org is earlier than 0:1.1.2-40.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:10543"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34904" version="1" comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14193"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34903" version="1" comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15000"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34898" version="1" comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.2.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14455"/>
      <state state_ref="oval:org.mitre.oval:ste:10478"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34895" version="1" comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14903"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34887" version="1" comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14708"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34878" version="1" comment="openoffice.org-langpack-el_GR is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14359"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34875" version="1" comment="openoffice.org-langpack-mr_IN is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14855"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34874" version="1" comment="openoffice.org-langpack-tr_TR is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14886"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34871" version="1" comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14826"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34867" version="1" comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14600"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34866" version="1" comment="openoffice.org-langpack-ja_JP is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14155"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34862" version="1" comment="openoffice.org-langpack-pl_PL is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14767"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34854" version="1" comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14845"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34840" version="1" comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14660"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34838" version="1" comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14754"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34834" version="1" comment="openoffice.org-langpack-sl_SI is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14869"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34830" version="1" comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14894"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34792" version="1" comment="openoffice.org-langpack-af_ZA is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14506"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34788" version="1" comment="openoffice.org-langpack-th_TH is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14732"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34783" version="1" comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14907"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34776" version="1" comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15018"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34768" version="1" comment="openoffice.org is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34766" version="1" comment="openoffice.org-javafilter is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14566"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34744" version="1" comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14456"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34737" version="1" comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.2.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14215"/>
      <state state_ref="oval:org.mitre.oval:ste:10478"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34733" version="1" comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14090"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34726" version="1" comment="openoffice.org-emailmerge is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14522"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34717" version="1" comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14696"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34715" version="1" comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14976"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34709" version="1" comment="openoffice.org-testtools is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14135"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34706" version="1" comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14056"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34705" version="1" comment="openoffice.org-langpack-pt_PT is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14571"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34687" version="1" comment="openoffice.org-langpack-it is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14812"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34685" version="1" comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14937"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34674" version="1" comment="openoffice.org-langpack-te_IN is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14832"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34666" version="1" comment="openoffice.org-langpack-es is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14604"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34663" version="1" comment="openoffice.org-i18n is earlier than 0:1.1.2-40.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14215"/>
      <state state_ref="oval:org.mitre.oval:ste:10543"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34639" version="1" comment="openoffice.org-langpack-nb_NO is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14807"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34629" version="1" comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14901"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34624" version="1" comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14971"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34600" version="1" comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14834"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34592" version="1" comment="openoffice.org-langpack-bn is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14706"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34591" version="1" comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14322"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34590" version="1" comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14369"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34571" version="1" comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14987"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34548" version="1" comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14617"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34522" version="1" comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14569"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34515" version="1" comment="openoffice.org-langpack-lt_LT is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13921"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34488" version="1" comment="openoffice.org-langpack-ta_IN is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14637"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34457" version="1" comment="openoffice.org-langpack-ko_KR is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14190"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34449" version="1" comment="openoffice.org-langpack-kn_IN is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14714"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34429" version="1" comment="openoffice.org2 is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14437"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34412" version="1" comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14744"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34353" version="1" comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14885"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34349" version="1" comment="openoffice.org-impress is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14707"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34330" version="1" comment="openoffice.org-langpack-hu_HU is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14694"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34318" version="1" comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14831"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34269" version="1" comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14737"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34242" version="1" comment="openoffice.org-langpack-gl_ES is earlier than 1:2.0.4-5.4.17.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14792"/>
      <state state_ref="oval:org.mitre.oval:ste:10468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34239" version="1" comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14882"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34233" version="1" comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14986"/>
      <state state_ref="oval:org.mitre.oval:ste:10552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32475" version="1" comment="openssh is earlier than 0:3.9p1-8.RHEL4.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14581"/>
      <state state_ref="oval:org.mitre.oval:ste:10142"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32414" version="1" comment="openssh-askpass is earlier than 0:3.9p1-8.RHEL4.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14577"/>
      <state state_ref="oval:org.mitre.oval:ste:10142"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32306" version="1" comment="openssh-clients is earlier than 0:3.9p1-8.RHEL4.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14409"/>
      <state state_ref="oval:org.mitre.oval:ste:10142"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32296" version="1" comment="openssh-server is earlier than 0:3.9p1-8.RHEL4.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14544"/>
      <state state_ref="oval:org.mitre.oval:ste:10142"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32251" version="1" comment="openssh-askpass-gnome is earlier than 0:3.9p1-8.RHEL4.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14434"/>
      <state state_ref="oval:org.mitre.oval:ste:10142"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1344" version="1" check="at least one" comment="File %windir%\system\vserver.vxd version is less than 4.10.2001.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:932"/>
      <state state_ref="oval:org.mitre.oval:ste:1206"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1343" version="1" check="at least one" comment="Patch 273991USA8.EXE Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:931"/>
      <state state_ref="oval:org.mitre.oval:ste:1205"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39149" version="1" comment="apr-devel is earlier than 0:1.2.7-11.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15174"/>
      <state state_ref="oval:org.mitre.oval:ste:11385"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39108" version="1" comment="apr is earlier than 0:1.2.7-11.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15116"/>
      <state state_ref="oval:org.mitre.oval:ste:11385"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39098" version="1" comment="apr is earlier than 0:0.9.4-24.9.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15116"/>
      <state state_ref="oval:org.mitre.oval:ste:11303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39047" version="1" comment="apr-util-devel is earlier than 0:0.9.4-22.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15236"/>
      <state state_ref="oval:org.mitre.oval:ste:11343"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38986" version="1" comment="apr-util is earlier than 0:1.2.7-7.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14992"/>
      <state state_ref="oval:org.mitre.oval:ste:11276"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38971" version="1" comment="apr-util-devel is earlier than 0:1.2.7-7.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15236"/>
      <state state_ref="oval:org.mitre.oval:ste:11276"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38932" version="1" comment="apr-docs is earlier than 0:1.2.7-11.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15034"/>
      <state state_ref="oval:org.mitre.oval:ste:11385"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38759" version="1" comment="apr-devel is earlier than 0:0.9.4-24.9.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15174"/>
      <state state_ref="oval:org.mitre.oval:ste:11303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38625" version="1" comment="apr-util-docs is earlier than 0:1.2.7-7.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15199"/>
      <state state_ref="oval:org.mitre.oval:ste:11276"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38182" version="1" comment="apr-util is earlier than 0:0.9.4-22.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14992"/>
      <state state_ref="oval:org.mitre.oval:ste:11343"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38613" version="1" comment="acpid is earlier than 0:1.0.4-7.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14820"/>
      <state state_ref="oval:org.mitre.oval:ste:11130"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38604" version="1" comment="acpid is earlier than 0:1.0.2-4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14820"/>
      <state state_ref="oval:org.mitre.oval:ste:10293"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38456" version="1" comment="acpid is earlier than 0:1.0.3-2.el4_7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14820"/>
      <state state_ref="oval:org.mitre.oval:ste:11238"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33345" version="1" comment="dbus-devel is earlier than 0:0.22-12.EL.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14425"/>
      <state state_ref="oval:org.mitre.oval:ste:10222"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33280" version="1" comment="dbus-x11 is earlier than 0:0.22-12.EL.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14132"/>
      <state state_ref="oval:org.mitre.oval:ste:10222"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33276" version="1" comment="dbus is earlier than 0:0.22-12.EL.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14213"/>
      <state state_ref="oval:org.mitre.oval:ste:10222"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32768" version="1" comment="dbus-glib is earlier than 0:0.22-12.EL.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14393"/>
      <state state_ref="oval:org.mitre.oval:ste:10222"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32745" version="1" comment="dbus-python is earlier than 0:0.22-12.EL.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14429"/>
      <state state_ref="oval:org.mitre.oval:ste:10222"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1346" version="1" check="at least one" comment="the version of rpcproxy.dll is less than 5.0.2195.6904" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:887"/>
      <state state_ref="oval:org.mitre.oval:ste:1208"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31888" version="1" comment="tar is earlier than 0:1.13.25-14.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14170"/>
      <state state_ref="oval:org.mitre.oval:ste:9674"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39545" version="1" comment="samba-client is earlier than 0:3.0.9-1.3E.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13861"/>
      <state state_ref="oval:org.mitre.oval:ste:11264"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39475" version="1" comment="samba is earlier than 0:3.0.9-1.3E.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13931"/>
      <state state_ref="oval:org.mitre.oval:ste:11264"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39369" version="1" comment="samba-swat is earlier than 0:3.0.9-1.3E.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13707"/>
      <state state_ref="oval:org.mitre.oval:ste:11264"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39355" version="1" comment="samba-common is earlier than 0:3.0.9-1.3E.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14032"/>
      <state state_ref="oval:org.mitre.oval:ste:11264"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31142" version="1" comment="XFree86-libs-data is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14326"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31107" version="1" comment="XFree86-doc is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14406"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31069" version="1" comment="XFree86-twm is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13667"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31060" version="1" comment="XFree86-syriac-fonts is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14198"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31038" version="1" comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14226"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31025" version="1" comment="XFree86 is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14255"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30995" version="1" comment="XFree86-truetype-fonts is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14354"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30994" version="1" comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14121"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30991" version="1" comment="XFree86-xauth is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14352"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30980" version="1" comment="XFree86-base-fonts is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14407"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30973" version="1" comment="XFree86-libs is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14259"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30972" version="1" comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14260"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30942" version="1" comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14067"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30885" version="1" comment="XFree86-xfs is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14311"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30816" version="1" comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14351"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30811" version="1" comment="XFree86-xdm is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13658"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30795" version="1" comment="XFree86-Xvfb is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13644"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30781" version="1" comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14288"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30777" version="1" comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14315"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30720" version="1" comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14082"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30713" version="1" comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14364"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30699" version="1" comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14281"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30653" version="1" comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14045"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30637" version="1" comment="XFree86-tools is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13693"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30607" version="1" comment="XFree86-Xnest is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14053"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30529" version="1" comment="XFree86-sdk is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14107"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30499" version="1" comment="XFree86-devel is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14397"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30327" version="1" comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14127"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30197" version="1" comment="XFree86-font-utils is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14385"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30155" version="1" comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13712"/>
      <state state_ref="oval:org.mitre.oval:ste:9534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38235" version="1" comment="gstreamer-plugins-devel is earlier than 0:0.8.5-1.EL.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14658"/>
      <state state_ref="oval:org.mitre.oval:ste:11065"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37467" version="1" comment="gstreamer-plugins is earlier than 0:0.8.5-1.EL.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14756"/>
      <state state_ref="oval:org.mitre.oval:ste:11065"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31955" version="1" comment="cups-devel is earlier than 1:1.1.17-13.3.29" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:9904"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31828" version="1" comment="cups-libs is earlier than 1:1.1.17-13.3.29" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:9904"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31393" version="1" comment="cups is earlier than 1:1.1.17-13.3.29" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:9904"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32934" version="1" comment="gnutls is earlier than 0:1.0.20-3.2.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14386"/>
      <state state_ref="oval:org.mitre.oval:ste:10183"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32930" version="1" comment="gnutls-devel is earlier than 0:1.0.20-3.2.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14558"/>
      <state state_ref="oval:org.mitre.oval:ste:10183"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34756" version="1" comment="kernel is earlier than 0:2.6.18-8.1.8.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:9807"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34750" version="1" comment="kernel-kdump is earlier than 0:2.6.18-8.1.8.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:9807"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34714" version="1" comment="kernel-doc is earlier than 0:2.6.18-8.1.8.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:9807"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34633" version="1" comment="kernel-PAE is earlier than 0:2.6.18-8.1.8.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:9807"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34532" version="1" comment="kernel-devel is earlier than 0:2.6.18-8.1.8.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:9807"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34502" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.8.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:9807"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34474" version="1" comment="kernel-xen is earlier than 0:2.6.18-8.1.8.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:9807"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34451" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.8.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:9807"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34411" version="1" comment="kernel-headers is earlier than 0:2.6.18-8.1.8.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:9807"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34408" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.8.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:9807"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34272" version="1" comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.8.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14853"/>
      <state state_ref="oval:org.mitre.oval:ste:9807"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32705" version="1" comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.13.25.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14580"/>
      <state state_ref="oval:org.mitre.oval:ste:10033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32692" version="1" comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.13.25.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14129"/>
      <state state_ref="oval:org.mitre.oval:ste:10033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32683" version="1" comment="xorg-x11 is earlier than 0:6.8.2-1.EL.13.25.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14592"/>
      <state state_ref="oval:org.mitre.oval:ste:10033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32670" version="1" comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.13.25.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14291"/>
      <state state_ref="oval:org.mitre.oval:ste:10033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32571" version="1" comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.13.25.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14478"/>
      <state state_ref="oval:org.mitre.oval:ste:10033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32568" version="1" comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.13.25.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14184"/>
      <state state_ref="oval:org.mitre.oval:ste:10033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32554" version="1" comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.13.25.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14515"/>
      <state state_ref="oval:org.mitre.oval:ste:10033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32532" version="1" comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.13.25.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14097"/>
      <state state_ref="oval:org.mitre.oval:ste:10033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32521" version="1" comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.13.25.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14572"/>
      <state state_ref="oval:org.mitre.oval:ste:10033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32510" version="1" comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.13.25.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14595"/>
      <state state_ref="oval:org.mitre.oval:ste:10033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32424" version="1" comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.13.25.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14031"/>
      <state state_ref="oval:org.mitre.oval:ste:10033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32369" version="1" comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.13.25.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13643"/>
      <state state_ref="oval:org.mitre.oval:ste:10033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32330" version="1" comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.13.25.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14624"/>
      <state state_ref="oval:org.mitre.oval:ste:10033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32274" version="1" comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.13.25.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14168"/>
      <state state_ref="oval:org.mitre.oval:ste:10033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32223" version="1" comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.13.25.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14169"/>
      <state state_ref="oval:org.mitre.oval:ste:10033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32174" version="1" comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.13.25.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14262"/>
      <state state_ref="oval:org.mitre.oval:ste:10033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31792" version="1" comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.13.25.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14553"/>
      <state state_ref="oval:org.mitre.oval:ste:10033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31728" version="1" comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.13.25.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14089"/>
      <state state_ref="oval:org.mitre.oval:ste:10033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31337" version="1" comment="ImageMagick-c++ is earlier than 0:6.0.7.1-6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13475"/>
      <state state_ref="oval:org.mitre.oval:ste:9793"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31140" version="1" comment="ImageMagick-devel is earlier than 0:6.0.7.1-6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13484"/>
      <state state_ref="oval:org.mitre.oval:ste:9793"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31139" version="1" comment="ImageMagick-perl is earlier than 0:6.0.7.1-6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14270"/>
      <state state_ref="oval:org.mitre.oval:ste:9793"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31137" version="1" comment="ImageMagick is earlier than 0:6.0.7.1-6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13854"/>
      <state state_ref="oval:org.mitre.oval:ste:9793"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30872" version="1" comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14240"/>
      <state state_ref="oval:org.mitre.oval:ste:9793"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31807" version="1" comment="gftp is earlier than 1:2.0.14-4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13812"/>
      <state state_ref="oval:org.mitre.oval:ste:9366"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31775" version="1" comment="gftp is earlier than 1:2.0.17-5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13812"/>
      <state state_ref="oval:org.mitre.oval:ste:9802"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39467" version="1" comment="freeradius-mysql is earlier than 0:1.1.3-1.5.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14691"/>
      <state state_ref="oval:org.mitre.oval:ste:11215"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39124" version="1" comment="freeradius-postgresql is earlier than 0:1.1.3-1.5.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14475"/>
      <state state_ref="oval:org.mitre.oval:ste:11215"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39117" version="1" comment="freeradius is earlier than 0:1.1.3-1.5.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14420"/>
      <state state_ref="oval:org.mitre.oval:ste:11215"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38652" version="1" comment="freeradius-unixODBC is earlier than 0:1.1.3-1.5.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13705"/>
      <state state_ref="oval:org.mitre.oval:ste:11215"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1351" version="1" check="at least one" comment="krb5-libs rpm version prior to 1.2.7-24 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:937"/>
      <state state_ref="oval:org.mitre.oval:ste:1213"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34581" version="1" comment="perl-Net-DNS is earlier than 0:0.48-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14638"/>
      <state state_ref="oval:org.mitre.oval:ste:10461"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36478" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-67.0.7.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:10817"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36428" version="1" comment="kernel-xenU-devel is earlier than 0:2.6.9-67.0.7.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14060"/>
      <state state_ref="oval:org.mitre.oval:ste:10817"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36377" version="1" comment="kernel-doc is earlier than 0:2.6.9-67.0.7.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10817"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36310" version="1" comment="kernel is earlier than 0:2.6.9-67.0.7.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10817"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36246" version="1" comment="kernel-devel is earlier than 0:2.6.9-67.0.7.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10817"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36188" version="1" comment="kernel-xenU is earlier than 0:2.6.9-67.0.7.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14301"/>
      <state state_ref="oval:org.mitre.oval:ste:10817"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36125" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-67.0.7.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:10817"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36113" version="1" comment="kernel-smp is earlier than 0:2.6.9-67.0.7.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:10817"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36049" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-67.0.7.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:10817"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35983" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-67.0.7.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:10817"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35967" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-67.0.7.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:10817"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37517" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-16.4.el4_6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10868"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37472" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-0.22.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:10792"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37455" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-16.4.el4_6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10868"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37439" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-16.4.el4_6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:10868"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37430" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-16.4.el4_6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10868"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37417" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.22.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10792"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37402" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-16.4.el4_6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:10868"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37362" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-16.4.el4_6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:10868"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37358" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-0.22.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:10792"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37346" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.22.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:10792"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37337" version="1" comment="seamonkey is earlier than 0:1.0.9-16.4.el4_6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10868"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37300" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-0.22.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10792"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37083" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-0.22.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10792"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37075" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.22.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10792"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37059" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.22.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:10792"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36898" version="1" comment="devhelp is earlier than 0:0.10-0.8.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14497"/>
      <state state_ref="oval:org.mitre.oval:ste:10615"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36865" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-16.4.el4_6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:10868"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36845" version="1" comment="seamonkey is earlier than 0:1.0.9-0.22.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10792"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36782" version="1" comment="devhelp-devel is earlier than 0:0.10-0.8.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14520"/>
      <state state_ref="oval:org.mitre.oval:ste:10615"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36603" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-0.22.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10792"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36596" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-16.4.el4_6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10868"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36525" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-16.4.el4_6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10868"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:1633" version="3" comment="Microsoft Outlook Express 6 for Windows XP/2003 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:566"/>
      <state state_ref="oval:org.mitre.oval:ste:1485"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1352" version="1" check="at least one" comment="the version of inetcomm.dll is less than 6.00.2739.300" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:385"/>
      <state state_ref="oval:org.mitre.oval:ste:1214"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32634" version="1" comment="openssh is earlier than 0:3.6.1p2-33.30.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14581"/>
      <state state_ref="oval:org.mitre.oval:ste:10067"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32587" version="1" comment="openssh-askpass-gnome is earlier than 0:3.6.1p2-33.30.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14434"/>
      <state state_ref="oval:org.mitre.oval:ste:10067"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32516" version="1" comment="openssh-clients is earlier than 0:3.6.1p2-33.30.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14409"/>
      <state state_ref="oval:org.mitre.oval:ste:10067"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32453" version="1" comment="openssh-server is earlier than 0:3.6.1p2-33.30.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14544"/>
      <state state_ref="oval:org.mitre.oval:ste:10067"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32130" version="1" comment="openssh-askpass is earlier than 0:3.6.1p2-33.30.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14577"/>
      <state state_ref="oval:org.mitre.oval:ste:10067"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1354" version="1" check="at least one" comment="the version of inetcomm.dll is less than 6.0.2800.1506" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:385"/>
      <state state_ref="oval:org.mitre.oval:ste:1216"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38287" version="1" comment="gstreamer-plugins is earlier than 0:0.6.0-19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14756"/>
      <state state_ref="oval:org.mitre.oval:ste:10865"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38088" version="1" comment="gstreamer-plugins-devel is earlier than 0:0.6.0-19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14658"/>
      <state state_ref="oval:org.mitre.oval:ste:10865"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34144" version="1" comment="vim-minimal is earlier than 2:7.0.109-3.el5.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14513"/>
      <state state_ref="oval:org.mitre.oval:ste:9912"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34124" version="1" comment="vim-X11 is earlier than 2:7.0.109-3.el5.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14549"/>
      <state state_ref="oval:org.mitre.oval:ste:9912"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33798" version="1" comment="vim is earlier than 2:7.0.109-3.el5.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13610"/>
      <state state_ref="oval:org.mitre.oval:ste:9912"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33597" version="1" comment="vim-enhanced is earlier than 2:7.0.109-3.el5.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14043"/>
      <state state_ref="oval:org.mitre.oval:ste:9912"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33253" version="1" comment="vim-common is earlier than 2:7.0.109-3.el5.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14345"/>
      <state state_ref="oval:org.mitre.oval:ste:9912"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34712" version="1" comment="ricci is earlier than 0:0.10.0-6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14147"/>
      <state state_ref="oval:org.mitre.oval:ste:10501"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34653" version="1" comment="luci is earlier than 0:0.10.0-6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14950"/>
      <state state_ref="oval:org.mitre.oval:ste:10501"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34332" version="1" comment="conga is earlier than 0:0.10.0-6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15022"/>
      <state state_ref="oval:org.mitre.oval:ste:10501"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30738" version="1" comment="kernel-doc is earlier than 0:2.4.21-15.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:9646"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30726" version="1" comment="kernel-BOOT is earlier than 0:2.4.21-15.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14219"/>
      <state state_ref="oval:org.mitre.oval:ste:9646"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30725" version="1" comment="kernel-smp-unsupported is earlier than 0:2.4.21-15.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14218"/>
      <state state_ref="oval:org.mitre.oval:ste:9646"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30668" version="1" comment="kernel-source is earlier than 0:2.4.21-15.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14186"/>
      <state state_ref="oval:org.mitre.oval:ste:9646"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30652" version="1" comment="kernel-smp is earlier than 0:2.4.21-15.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:9646"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30583" version="1" comment="kernel-hugemem is earlier than 0:2.4.21-15.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:9646"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30253" version="1" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-15.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14372"/>
      <state state_ref="oval:org.mitre.oval:ste:9646"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29909" version="1" comment="kernel-unsupported is earlier than 0:2.4.21-15.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14229"/>
      <state state_ref="oval:org.mitre.oval:ste:9646"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29798" version="1" comment="kernel is earlier than 0:2.4.21-15.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:9646"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39487" version="1" comment="openssh-clients is earlier than 0:4.3p2-36.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14409"/>
      <state state_ref="oval:org.mitre.oval:ste:11197"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39240" version="1" comment="openssh-askpass is earlier than 0:4.3p2-36.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14577"/>
      <state state_ref="oval:org.mitre.oval:ste:11197"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39187" version="1" comment="openssh is earlier than 0:4.3p2-36.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14581"/>
      <state state_ref="oval:org.mitre.oval:ste:11197"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38797" version="1" comment="openssh-server is earlier than 0:4.3p2-36.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14544"/>
      <state state_ref="oval:org.mitre.oval:ste:11197"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35185" version="1" comment="cyrus-sasl-plain is earlier than 0:2.1.15-15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14379"/>
      <state state_ref="oval:org.mitre.oval:ste:10139"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35113" version="1" comment="cyrus-sasl is earlier than 0:2.1.15-15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14473"/>
      <state state_ref="oval:org.mitre.oval:ste:10139"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35102" version="1" comment="cyrus-sasl-gssapi is earlier than 0:2.1.19-14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14137"/>
      <state state_ref="oval:org.mitre.oval:ste:9910"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35100" version="1" comment="cyrus-sasl-sql is earlier than 0:2.1.19-14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14804"/>
      <state state_ref="oval:org.mitre.oval:ste:9910"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35092" version="1" comment="cyrus-sasl-ntlm is earlier than 0:2.1.19-14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14825"/>
      <state state_ref="oval:org.mitre.oval:ste:9910"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35067" version="1" comment="cyrus-sasl-md5 is earlier than 0:2.1.15-15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14081"/>
      <state state_ref="oval:org.mitre.oval:ste:10139"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35028" version="1" comment="cyrus-sasl-gssapi is earlier than 0:2.1.15-15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14137"/>
      <state state_ref="oval:org.mitre.oval:ste:10139"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34948" version="1" comment="cyrus-sasl-md5 is earlier than 0:2.1.19-14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14081"/>
      <state state_ref="oval:org.mitre.oval:ste:9910"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34748" version="1" comment="cyrus-sasl-plain is earlier than 0:2.1.19-14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14379"/>
      <state state_ref="oval:org.mitre.oval:ste:9910"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34649" version="1" comment="cyrus-sasl-devel is earlier than 0:2.1.15-15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14038"/>
      <state state_ref="oval:org.mitre.oval:ste:10139"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34645" version="1" comment="cyrus-sasl-devel is earlier than 0:2.1.19-14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14038"/>
      <state state_ref="oval:org.mitre.oval:ste:9910"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34338" version="1" comment="cyrus-sasl is earlier than 0:2.1.19-14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14473"/>
      <state state_ref="oval:org.mitre.oval:ste:9910"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37927" version="1" comment="net-snmp-perl is earlier than 1:5.3.1-24.el5_2.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14516"/>
      <state state_ref="oval:org.mitre.oval:ste:11058"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37868" version="1" comment="net-snmp-perl is earlier than 0:5.1.2-13.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14516"/>
      <state state_ref="oval:org.mitre.oval:ste:10989"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37819" version="1" comment="net-snmp is earlier than 0:5.1.2-13.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14390"/>
      <state state_ref="oval:org.mitre.oval:ste:10989"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37806" version="1" comment="net-snmp-perl is earlier than 0:5.0.9-2.30E.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14516"/>
      <state state_ref="oval:org.mitre.oval:ste:11047"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37801" version="1" comment="net-snmp-devel is earlier than 1:5.3.1-24.el5_2.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14339"/>
      <state state_ref="oval:org.mitre.oval:ste:11058"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37758" version="1" comment="net-snmp is earlier than 1:5.3.1-24.el5_2.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14390"/>
      <state state_ref="oval:org.mitre.oval:ste:11058"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37742" version="1" comment="net-snmp is earlier than 0:5.0.9-2.30E.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14390"/>
      <state state_ref="oval:org.mitre.oval:ste:11047"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37707" version="1" comment="net-snmp-libs is earlier than 0:5.1.2-13.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14316"/>
      <state state_ref="oval:org.mitre.oval:ste:10989"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37686" version="1" comment="net-snmp-libs is earlier than 1:5.3.1-24.el5_2.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14316"/>
      <state state_ref="oval:org.mitre.oval:ste:11058"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37666" version="1" comment="net-snmp-utils is earlier than 0:5.0.9-2.30E.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14287"/>
      <state state_ref="oval:org.mitre.oval:ste:11047"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37593" version="1" comment="net-snmp-devel is earlier than 0:5.0.9-2.30E.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14339"/>
      <state state_ref="oval:org.mitre.oval:ste:11047"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37538" version="1" comment="net-snmp-libs is earlier than 0:5.0.9-2.30E.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14316"/>
      <state state_ref="oval:org.mitre.oval:ste:11047"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37167" version="1" comment="net-snmp-utils is earlier than 0:5.1.2-13.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14287"/>
      <state state_ref="oval:org.mitre.oval:ste:10989"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37115" version="1" comment="net-snmp-devel is earlier than 0:5.1.2-13.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14339"/>
      <state state_ref="oval:org.mitre.oval:ste:10989"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36966" version="1" comment="net-snmp-utils is earlier than 1:5.3.1-24.el5_2.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14287"/>
      <state state_ref="oval:org.mitre.oval:ste:11058"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40822" version="1" comment="samba-swat is earlier than 0:3.0.33-3.29.el5_5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13707"/>
      <state state_ref="oval:org.mitre.oval:ste:11422"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40808" version="1" comment="samba3x-winbind-devel is earlier than 0:3.3.8-0.52.el5_5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15239"/>
      <state state_ref="oval:org.mitre.oval:ste:11474"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40799" version="1" comment="samba-client is earlier than 0:3.0.33-3.29.el5_5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13861"/>
      <state state_ref="oval:org.mitre.oval:ste:11422"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40792" version="1" comment="samba3x-doc is earlier than 0:3.3.8-0.52.el5_5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14991"/>
      <state state_ref="oval:org.mitre.oval:ste:11474"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40785" version="1" comment="tdb-tools is earlier than 0:3.3.8-0.52.el5_5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15146"/>
      <state state_ref="oval:org.mitre.oval:ste:11474"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40781" version="1" comment="samba-client is earlier than 0:3.0.9-1.3E.17" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13861"/>
      <state state_ref="oval:org.mitre.oval:ste:11410"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40761" version="1" comment="samba-swat is earlier than 0:3.0.33-0.19.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13707"/>
      <state state_ref="oval:org.mitre.oval:ste:10774"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40725" version="1" comment="samba-common is earlier than 0:3.0.9-1.3E.17" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14032"/>
      <state state_ref="oval:org.mitre.oval:ste:11410"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40724" version="1" comment="samba3x-swat is earlier than 0:3.3.8-0.52.el5_5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15202"/>
      <state state_ref="oval:org.mitre.oval:ste:11474"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40663" version="1" comment="samba-common is earlier than 0:3.0.33-3.29.el5_5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14032"/>
      <state state_ref="oval:org.mitre.oval:ste:11422"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40660" version="1" comment="samba3x is earlier than 0:3.3.8-0.52.el5_5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15124"/>
      <state state_ref="oval:org.mitre.oval:ste:11474"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40646" version="1" comment="samba3x-client is earlier than 0:3.3.8-0.52.el5_5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14854"/>
      <state state_ref="oval:org.mitre.oval:ste:11474"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40636" version="1" comment="samba3x-domainjoin-gui is earlier than 0:3.3.8-0.52.el5_5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15045"/>
      <state state_ref="oval:org.mitre.oval:ste:11474"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40589" version="1" comment="libtdb is earlier than 0:3.3.8-0.52.el5_5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15217"/>
      <state state_ref="oval:org.mitre.oval:ste:11474"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40546" version="1" comment="samba is earlier than 0:3.0.9-1.3E.17" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13931"/>
      <state state_ref="oval:org.mitre.oval:ste:11410"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40543" version="1" comment="samba-swat is earlier than 0:3.0.9-1.3E.17" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13707"/>
      <state state_ref="oval:org.mitre.oval:ste:11410"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40520" version="1" comment="samba is earlier than 0:3.0.33-0.19.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13931"/>
      <state state_ref="oval:org.mitre.oval:ste:10774"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40508" version="1" comment="libtalloc-devel is earlier than 0:3.3.8-0.52.el5_5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15341"/>
      <state state_ref="oval:org.mitre.oval:ste:11474"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40500" version="1" comment="libsmbclient-devel is earlier than 0:3.0.33-3.29.el5_5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15335"/>
      <state state_ref="oval:org.mitre.oval:ste:11422"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40481" version="1" comment="samba3x-winbind is earlier than 0:3.3.8-0.52.el5_5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15095"/>
      <state state_ref="oval:org.mitre.oval:ste:11474"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40439" version="1" comment="libtalloc is earlier than 0:3.3.8-0.52.el5_5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15383"/>
      <state state_ref="oval:org.mitre.oval:ste:11474"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40403" version="1" comment="samba3x-common is earlier than 0:3.3.8-0.52.el5_5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14673"/>
      <state state_ref="oval:org.mitre.oval:ste:11474"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40212" version="1" comment="samba-common is earlier than 0:3.0.33-0.19.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14032"/>
      <state state_ref="oval:org.mitre.oval:ste:10774"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40124" version="1" comment="libsmbclient is earlier than 0:3.0.33-3.29.el5_5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15389"/>
      <state state_ref="oval:org.mitre.oval:ste:11422"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40021" version="1" comment="samba-client is earlier than 0:3.0.33-0.19.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13861"/>
      <state state_ref="oval:org.mitre.oval:ste:10774"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39928" version="1" comment="libtdb-devel is earlier than 0:3.3.8-0.52.el5_5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15186"/>
      <state state_ref="oval:org.mitre.oval:ste:11474"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39867" version="1" comment="samba is earlier than 0:3.0.33-3.29.el5_5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13931"/>
      <state state_ref="oval:org.mitre.oval:ste:11422"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32441" version="1" comment="imap-utils is earlier than 1:2002d-12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14484"/>
      <state state_ref="oval:org.mitre.oval:ste:9764"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32375" version="1" comment="libc-client is earlier than 0:2002e-14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14451"/>
      <state state_ref="oval:org.mitre.oval:ste:9934"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32344" version="1" comment="libc-client-devel is earlier than 0:2002e-14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14542"/>
      <state state_ref="oval:org.mitre.oval:ste:9934"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32091" version="1" comment="imap-devel is earlier than 1:2002d-12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14474"/>
      <state state_ref="oval:org.mitre.oval:ste:9764"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31804" version="1" comment="imap is earlier than 1:2002d-12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14565"/>
      <state state_ref="oval:org.mitre.oval:ste:9764"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32632" version="1" comment="ipsec-tools is earlier than 0:0.3.3-6.rhel4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14216"/>
      <state state_ref="oval:org.mitre.oval:ste:9763"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32025" version="1" comment="ipsec-tools is earlier than 0:0.2.5-0.7.rhel3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14216"/>
      <state state_ref="oval:org.mitre.oval:ste:10152"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30787" version="1" comment="gnome-vfs2 is earlier than 0:2.2.5-2E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13764"/>
      <state state_ref="oval:org.mitre.oval:ste:9380"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30568" version="1" comment="gnome-vfs2-devel is earlier than 0:2.2.5-2E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14144"/>
      <state state_ref="oval:org.mitre.oval:ste:9380"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31068" version="1" comment="zip is earlier than 0:2.3-16.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14140"/>
      <state state_ref="oval:org.mitre.oval:ste:9604"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31886" version="1" comment="gedit-devel is earlier than 1:2.8.1-4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14276"/>
      <state state_ref="oval:org.mitre.oval:ste:9465"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31796" version="1" comment="gedit is earlier than 1:2.8.1-4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14381"/>
      <state state_ref="oval:org.mitre.oval:ste:9465"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31476" version="1" comment="gedit is earlier than 1:2.2.2-4.rhel3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14381"/>
      <state state_ref="oval:org.mitre.oval:ste:9841"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32706" version="1" comment="kdebase is earlier than 6:3.3.1-5.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14264"/>
      <state state_ref="oval:org.mitre.oval:ste:10160"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32662" version="1" comment="kdebase-devel is earlier than 6:3.3.1-5.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14419"/>
      <state state_ref="oval:org.mitre.oval:ste:10160"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35722" version="1" comment="kdegraphics is earlier than 7:3.5.4-5.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14241"/>
      <state state_ref="oval:org.mitre.oval:ste:10486"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35714" version="1" comment="kdegraphics-devel is earlier than 7:3.5.4-5.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14596"/>
      <state state_ref="oval:org.mitre.oval:ste:10486"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35542" version="1" comment="tetex-latex is earlier than 0:1.0.7-67.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13878"/>
      <state state_ref="oval:org.mitre.oval:ste:10692"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35314" version="1" comment="tetex-dvips is earlier than 0:1.0.7-67.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14207"/>
      <state state_ref="oval:org.mitre.oval:ste:10692"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35275" version="1" comment="tetex-xdvi is earlier than 0:1.0.7-67.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14182"/>
      <state state_ref="oval:org.mitre.oval:ste:10692"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35248" version="1" comment="tetex is earlier than 0:1.0.7-67.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14329"/>
      <state state_ref="oval:org.mitre.oval:ste:10692"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35233" version="1" comment="tetex-fonts is earlier than 0:1.0.7-67.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14502"/>
      <state state_ref="oval:org.mitre.oval:ste:10692"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34644" version="1" comment="tetex-afm is earlier than 0:1.0.7-67.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14389"/>
      <state state_ref="oval:org.mitre.oval:ste:10692"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38784" version="1" comment="util-linux is earlier than 0:2.12a-24.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14723"/>
      <state state_ref="oval:org.mitre.oval:ste:11246"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1359" version="1" check="at least one" comment="ethereal version is less than 0.10.3-0.30E.2" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:940"/>
      <state state_ref="oval:org.mitre.oval:ste:1221"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1358" version="1" check="at least one" comment="ethereal-gnome version is less than 0.10.3-0.30E.2" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:939"/>
      <state state_ref="oval:org.mitre.oval:ste:1220"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37627" version="1" comment="libxml2-python is earlier than 0:2.5.10-11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13780"/>
      <state state_ref="oval:org.mitre.oval:ste:10562"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37621" version="1" comment="libxml2 is earlier than 0:2.5.10-11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14133"/>
      <state state_ref="oval:org.mitre.oval:ste:10562"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37610" version="1" comment="libxml2 is earlier than 0:2.6.16-12.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14133"/>
      <state state_ref="oval:org.mitre.oval:ste:10209"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37604" version="1" comment="libxml2-devel is earlier than 0:2.6.26-2.1.2.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14212"/>
      <state state_ref="oval:org.mitre.oval:ste:11080"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37551" version="1" comment="libxml2 is earlier than 0:2.6.26-2.1.2.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14133"/>
      <state state_ref="oval:org.mitre.oval:ste:11080"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37135" version="1" comment="libxml2-python is earlier than 0:2.6.16-12.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13780"/>
      <state state_ref="oval:org.mitre.oval:ste:10209"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37109" version="1" comment="libxml2-devel is earlier than 0:2.5.10-11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14212"/>
      <state state_ref="oval:org.mitre.oval:ste:10562"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37085" version="1" comment="libxml2-python is earlier than 0:2.6.26-2.1.2.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13780"/>
      <state state_ref="oval:org.mitre.oval:ste:11080"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36654" version="1" comment="libxml2-devel is earlier than 0:2.6.16-12.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14212"/>
      <state state_ref="oval:org.mitre.oval:ste:10209"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31368" version="1" comment="tkinter is earlier than 0:2.3.4-14.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14092"/>
      <state state_ref="oval:org.mitre.oval:ste:9308"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31366" version="1" comment="python-tools is earlier than 0:2.2.3-6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14208"/>
      <state state_ref="oval:org.mitre.oval:ste:9629"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31354" version="1" comment="python-devel is earlier than 0:2.2.3-6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14166"/>
      <state state_ref="oval:org.mitre.oval:ste:9629"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31351" version="1" comment="python is earlier than 0:2.2.3-6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14556"/>
      <state state_ref="oval:org.mitre.oval:ste:9629"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31195" version="1" comment="tkinter is earlier than 0:2.2.3-6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14092"/>
      <state state_ref="oval:org.mitre.oval:ste:9629"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31194" version="1" comment="python is earlier than 0:2.3.4-14.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14556"/>
      <state state_ref="oval:org.mitre.oval:ste:9308"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30896" version="1" comment="python-devel is earlier than 0:2.3.4-14.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14166"/>
      <state state_ref="oval:org.mitre.oval:ste:9308"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30806" version="1" comment="python-tools is earlier than 0:2.3.4-14.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14208"/>
      <state state_ref="oval:org.mitre.oval:ste:9308"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30393" version="1" comment="python-docs is earlier than 0:2.3.4-14.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14500"/>
      <state state_ref="oval:org.mitre.oval:ste:9308"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32423" version="1" comment="curl is earlier than 0:7.12.1-6.rhel4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14575"/>
      <state state_ref="oval:org.mitre.oval:ste:10001"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32411" version="1" comment="curl-devel is earlier than 0:7.10.6-7.rhel3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14469"/>
      <state state_ref="oval:org.mitre.oval:ste:9786"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32364" version="1" comment="curl-devel is earlier than 0:7.12.1-6.rhel4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14469"/>
      <state state_ref="oval:org.mitre.oval:ste:10001"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32351" version="1" comment="curl is earlier than 0:7.10.6-7.rhel3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14575"/>
      <state state_ref="oval:org.mitre.oval:ste:9786"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32350" version="1" comment="wget is earlier than 0:1.10.2-0.30E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14591"/>
      <state state_ref="oval:org.mitre.oval:ste:9768"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32340" version="1" comment="wget is earlier than 0:1.10.2-0.40E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14591"/>
      <state state_ref="oval:org.mitre.oval:ste:9950"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31309" version="1" comment="mozilla-dom-inspector is earlier than 37:1.4.3-3.0.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13776"/>
      <state state_ref="oval:org.mitre.oval:ste:9271"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31304" version="1" comment="mozilla-nspr is earlier than 37:1.4.3-3.0.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14160"/>
      <state state_ref="oval:org.mitre.oval:ste:9271"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31267" version="1" comment="mozilla-devel is earlier than 37:1.4.3-3.0.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14231"/>
      <state state_ref="oval:org.mitre.oval:ste:9271"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31266" version="1" comment="mozilla-nspr-devel is earlier than 37:1.4.3-3.0.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13716"/>
      <state state_ref="oval:org.mitre.oval:ste:9271"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31147" version="1" comment="mozilla-chat is earlier than 37:1.4.3-3.0.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14196"/>
      <state state_ref="oval:org.mitre.oval:ste:9271"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31079" version="1" comment="mozilla is earlier than 37:1.4.3-3.0.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14405"/>
      <state state_ref="oval:org.mitre.oval:ste:9271"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31052" version="1" comment="mozilla-js-debugger is earlier than 37:1.4.3-3.0.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13991"/>
      <state state_ref="oval:org.mitre.oval:ste:9271"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30958" version="1" comment="mozilla-nss is earlier than 37:1.4.3-3.0.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14069"/>
      <state state_ref="oval:org.mitre.oval:ste:9271"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30815" version="1" comment="mozilla-nss-devel is earlier than 37:1.4.3-3.0.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14415"/>
      <state state_ref="oval:org.mitre.oval:ste:9271"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30749" version="1" comment="mozilla-mail is earlier than 37:1.4.3-3.0.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14423"/>
      <state state_ref="oval:org.mitre.oval:ste:9271"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30552" version="1" comment="cdrtools is earlier than 8:2.01.0.a32-0.EL3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14205"/>
      <state state_ref="oval:org.mitre.oval:ste:9351"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30505" version="1" comment="cdrecord-devel is earlier than 8:2.01.0.a32-0.EL3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14153"/>
      <state state_ref="oval:org.mitre.oval:ste:9351"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30490" version="1" comment="cdrecord is earlier than 8:2.01.0.a32-0.EL3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13849"/>
      <state state_ref="oval:org.mitre.oval:ste:9351"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30433" version="1" comment="mkisofs is earlier than 8:2.01.0.a32-0.EL3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13769"/>
      <state state_ref="oval:org.mitre.oval:ste:9351"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30617" version="1" comment="net-snmp-utils is earlier than 0:5.0.9-2.30E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14287"/>
      <state state_ref="oval:org.mitre.oval:ste:9694"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30534" version="1" comment="net-snmp is earlier than 0:5.0.9-2.30E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14390"/>
      <state state_ref="oval:org.mitre.oval:ste:9694"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30077" version="1" comment="net-snmp-devel is earlier than 0:5.0.9-2.30E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14339"/>
      <state state_ref="oval:org.mitre.oval:ste:9694"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30810" version="1" comment="sox-devel is earlier than 0:12.17.4-4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14357"/>
      <state state_ref="oval:org.mitre.oval:ste:9732"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30502" version="1" comment="sox is earlier than 0:12.17.4-4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14349"/>
      <state state_ref="oval:org.mitre.oval:ste:9732"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1361" version="1" check="at least one" comment="squid version is less than 2.5.STABLE3-6.3E" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:942"/>
      <state state_ref="oval:org.mitre.oval:ste:1223"/>
    </rpminfo_test>
    <inetlisteningservers_test id="oval:org.mitre.oval:tst:1360" version="2" check="at least one" comment="squid is listening on the network" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:941"/>
      <state state_ref="oval:org.mitre.oval:ste:1222"/>
    </inetlisteningservers_test>
    <file_test id="oval:org.mitre.oval:tst:2945" version="1" check="at least one" comment="File %windir%\system32\mshtml.dll version is less than 6.0.2719.2200" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2760"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2944" version="1" check="at least one" comment="Gopher Enabled" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1685"/>
      <state state_ref="oval:org.mitre.oval:ste:2759"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33954" version="1" comment="xorg-x11-server-Xephyr is earlier than 0:1.1.1-48.13.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14842"/>
      <state state_ref="oval:org.mitre.oval:ste:10322"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33876" version="1" comment="xorg-x11-server-Xorg is earlier than 0:1.1.1-48.13.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14653"/>
      <state state_ref="oval:org.mitre.oval:ste:10322"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33864" version="1" comment="xorg-x11-server-Xnest is earlier than 0:1.1.1-48.13.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14794"/>
      <state state_ref="oval:org.mitre.oval:ste:10322"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33718" version="1" comment="xorg-x11-server-Xdmx is earlier than 0:1.1.1-48.13.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14353"/>
      <state state_ref="oval:org.mitre.oval:ste:10322"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33629" version="1" comment="xorg-x11-server is earlier than 0:1.1.1-48.13.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14418"/>
      <state state_ref="oval:org.mitre.oval:ste:10322"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33546" version="1" comment="xorg-x11-server-Xvfb is earlier than 0:1.1.1-48.13.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14709"/>
      <state state_ref="oval:org.mitre.oval:ste:10322"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33470" version="1" comment="xorg-x11-server-sdk is earlier than 0:1.1.1-48.13.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14873"/>
      <state state_ref="oval:org.mitre.oval:ste:10322"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40235" version="1" comment="openssl096b is earlier than 0:0.9.6b-16.50" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14258"/>
      <state state_ref="oval:org.mitre.oval:ste:11236"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40149" version="1" comment="openssl096b is earlier than 0:0.9.6b-22.46.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14258"/>
      <state state_ref="oval:org.mitre.oval:ste:11389"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1366" version="1" check="at least one" comment="utempter version is less than 0.5.5-1.3EL.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:944"/>
      <state state_ref="oval:org.mitre.oval:ste:1228"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1365" version="1" check="at least one" comment="/usr/sbin/utempter is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:943"/>
      <state state_ref="oval:org.mitre.oval:ste:1227"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1364" version="1" check="at least one" comment="/usr/sbin/utempter is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:943"/>
      <state state_ref="oval:org.mitre.oval:ste:1226"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1363" version="1" check="at least one" comment="/usr/sbin/utempter is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:943"/>
      <state state_ref="oval:org.mitre.oval:ste:1225"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1362" version="1" check="at least one" comment="/usr/sbin/utempter is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:943"/>
      <state state_ref="oval:org.mitre.oval:ste:1224"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37339" version="1" comment="openoffice.org-langpack-ar is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14872"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37338" version="1" comment="openoffice.org-sdk-doc is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14165"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37334" version="1" comment="openoffice.org-langpack-ga_IE is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14635"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37329" version="1" comment="openoffice.org-langpack-af_ZA is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14506"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37325" version="1" comment="openoffice.org-base is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14548"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37324" version="1" comment="openoffice.org-langpack-ms_MY is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14787"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37311" version="1" comment="openoffice.org-langpack-nl is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14909"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37310" version="1" comment="openoffice.org-langpack-xh_ZA is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14738"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37308" version="1" comment="openoffice.org-javafilter is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14566"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37303" version="1" comment="openoffice.org is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37298" version="1" comment="openoffice.org-langpack-nn_NO is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14779"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37290" version="1" comment="openoffice.org-math is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14557"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37278" version="1" comment="openoffice.org-pyuno is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14806"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37277" version="1" comment="openoffice.org-langpack-hu_HU is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14694"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37270" version="1" comment="openoffice.org-langpack-fi_FI is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14625"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37264" version="1" comment="openoffice.org-langpack-sr_CS is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14189"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37256" version="1" comment="openoffice.org-xsltfilter is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14530"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37244" version="1" comment="openoffice.org-langpack-el_GR is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14359"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37241" version="1" comment="openoffice.org-langpack-ml_IN is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14257"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37235" version="1" comment="openoffice.org-langpack-th_TH is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14732"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37221" version="1" comment="openoffice.org-langpack-nb_NO is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14807"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37220" version="1" comment="openoffice.org-langpack-gu_IN is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14269"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37216" version="1" comment="openoffice.org-emailmerge is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14522"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37214" version="1" comment="openoffice.org-langpack-et_EE is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14280"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37212" version="1" comment="openoffice.org-headless is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14864"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37211" version="1" comment="openoffice.org-langpack-ru is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14766"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37210" version="1" comment="openoffice.org-draw is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14828"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37194" version="1" comment="openoffice.org-langpack-es is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14604"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37187" version="1" comment="openoffice.org-langpack-zu_ZA is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14562"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37186" version="1" comment="openoffice.org-langpack-st_ZA is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14851"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37184" version="1" comment="openoffice.org-langpack-ja_JP is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14155"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37183" version="1" comment="openoffice.org-langpack-ko_KR is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14190"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37177" version="1" comment="openoffice.org-langpack-bg_BG is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14589"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37175" version="1" comment="openoffice.org-langpack-ss_ZA is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14728"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37170" version="1" comment="openoffice.org-langpack-pa_IN is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14746"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37169" version="1" comment="openoffice.org-langpack-gl_ES is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14792"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37168" version="1" comment="openoffice.org-langpack-lt_LT is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13921"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37166" version="1" comment="openoffice.org-langpack-sk_SK is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14266"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37161" version="1" comment="openoffice.org-langpack-zh_TW is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14392"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37151" version="1" comment="openoffice.org-langpack-kn_IN is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14714"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37150" version="1" comment="openoffice.org-langpack-tn_ZA is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14432"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37147" version="1" comment="openoffice.org-langpack-eu_ES is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14813"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37142" version="1" comment="openoffice.org2-langpack-ta_IN is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14744"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37137" version="1" comment="openoffice.org-langpack-it is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14812"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37136" version="1" comment="openoffice.org-langpack-ta_IN is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14637"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37134" version="1" comment="openoffice.org2-langpack-sv is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14875"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37132" version="1" comment="openoffice.org-langpack-cs_CZ is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14865"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37131" version="1" comment="openoffice.org2-langpack-lt_LT is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14971"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37130" version="1" comment="openoffice.org-langpack-nso_ZA is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13974"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37128" version="1" comment="openoffice.org2-langpack-es is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14907"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37123" version="1" comment="openoffice.org-langpack-hi_IN is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14717"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37122" version="1" comment="openoffice.org2-testtools is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14696"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37121" version="1" comment="openoffice.org2-langpack-sk_SK is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14885"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37116" version="1" comment="openoffice.org-langpack-cy_GB is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14501"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37110" version="1" comment="openoffice.org-sdk is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14664"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37103" version="1" comment="openoffice.org2-langpack-tr_TR is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14831"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37102" version="1" comment="openoffice.org2-langpack-fr is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14986"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37099" version="1" comment="openoffice.org-graphicfilter is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14526"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37097" version="1" comment="openoffice.org2-langpack-gl_ES is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14956"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37095" version="1" comment="openoffice.org-langpack-pl_PL is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14767"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37093" version="1" comment="openoffice.org2-langpack-ms_MY is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14606"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37090" version="1" comment="openoffice.org-langpack-fr is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14772"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37088" version="1" comment="openoffice.org2-writer is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14765"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37080" version="1" comment="openoffice.org2-langpack-nl is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14763"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37078" version="1" comment="openoffice.org2-calc is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14894"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37077" version="1" comment="openoffice.org2-langpack-af_ZA is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14090"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37076" version="1" comment="openoffice.org2-math is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14759"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37072" version="1" comment="openoffice.org2-graphicfilter is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14987"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37065" version="1" comment="openoffice.org2-emailmerge is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14754"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37062" version="1" comment="openoffice.org-langpack-te_IN is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14832"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37055" version="1" comment="openoffice.org2-langpack-de is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14737"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37053" version="1" comment="openoffice.org-langpack-ts_ZA is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14056"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37052" version="1" comment="openoffice.org2-langpack-pt_BR is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14984"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37042" version="1" comment="openoffice.org-langpack-pt_BR is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14822"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37040" version="1" comment="openoffice.org2-pyuno is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14980"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37034" version="1" comment="openoffice.org2-langpack-ja_JP is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14845"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37030" version="1" comment="openoffice.org-langpack-sl_SI is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14869"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37025" version="1" comment="openoffice.org-langpack-sv is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14529"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37023" version="1" comment="openoffice.org2-langpack-ga_IE is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14834"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37021" version="1" comment="openoffice.org2 is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14437"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37019" version="1" comment="openoffice.org2-langpack-cy_GB is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14193"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37015" version="1" comment="openoffice.org2-langpack-ar is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14963"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37014" version="1" comment="openoffice.org2-langpack-zh_CN is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14990"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37011" version="1" comment="openoffice.org-writer is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14758"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37009" version="1" comment="openoffice.org-langpack-as_IN is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14576"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37006" version="1" comment="openoffice.org-calc is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14623"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37004" version="1" comment="openoffice.org2-langpack-eu_ES is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15005"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37001" version="1" comment="openoffice.org2-draw is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14369"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36997" version="1" comment="openoffice.org2-langpack-fi_FI is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14903"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36994" version="1" comment="openoffice.org-langpack-zh_CN is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14839"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36993" version="1" comment="openoffice.org-langpack-nr_ZA is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14651"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36987" version="1" comment="openoffice.org-langpack-bn is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14706"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36982" version="1" comment="openoffice.org2-langpack-bg_BG is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14617"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36971" version="1" comment="openoffice.org2-langpack-pa_IN is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15006"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36953" version="1" comment="openoffice.org-impress is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14707"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36947" version="1" comment="openoffice.org2-langpack-bn is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14976"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36942" version="1" comment="openoffice.org2-langpack-zh_TW is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14649"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36923" version="1" comment="openoffice.org2-langpack-ru is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14472"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36920" version="1" comment="openoffice.org-langpack-ve_ZA is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14900"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36911" version="1" comment="openoffice.org2-langpack-hi_IN is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14768"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36904" version="1" comment="openoffice.org2-base is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14937"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36901" version="1" comment="openoffice.org-core is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14450"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36900" version="1" comment="openoffice.org2-langpack-ca_ES is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14995"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36897" version="1" comment="openoffice.org2-langpack-sl_SI is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14882"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36882" version="1" comment="openoffice.org-langpack-hr_HR is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14336"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36872" version="1" comment="openoffice.org2-langpack-gu_IN is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14826"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36862" version="1" comment="openoffice.org-langpack-or_IN is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14588"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36855" version="1" comment="openoffice.org2-langpack-nn_NO is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14892"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36848" version="1" comment="openoffice.org2-langpack-it is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14716"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36841" version="1" comment="openoffice.org2-langpack-hr_HR is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14322"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36832" version="1" comment="openoffice.org-testtools is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14135"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36830" version="1" comment="openoffice.org2-langpack-el_GR is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14401"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36825" version="1" comment="openoffice.org2-langpack-th_TH is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14997"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36815" version="1" comment="openoffice.org2-langpack-cs_CZ is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14762"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36809" version="1" comment="openoffice.org-langpack-da_DK is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14748"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36795" version="1" comment="openoffice.org-langpack-pt_PT is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14571"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36763" version="1" comment="openoffice.org2-langpack-ko_KR is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14599"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36746" version="1" comment="openoffice.org-langpack-ca_ES is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14778"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36739" version="1" comment="openoffice.org2-langpack-et_EE is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14708"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36698" version="1" comment="openoffice.org2-langpack-da_DK is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14456"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36693" version="1" comment="openoffice.org2-core is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14849"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36682" version="1" comment="openoffice.org2-langpack-nb_NO is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14901"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36676" version="1" comment="openoffice.org-langpack-de is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14539"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36675" version="1" comment="openoffice.org-langpack-mr_IN is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14855"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36655" version="1" comment="openoffice.org2-langpack-hu_HU is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14600"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36625" version="1" comment="openoffice.org-langpack-he_IL is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14442"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36621" version="1" comment="openoffice.org-langpack-ur is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14671"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36551" version="1" comment="openoffice.org2-langpack-pl_PL is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14476"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36497" version="1" comment="openoffice.org-langpack-tr_TR is earlier than 0:2.3.0-6.5.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14886"/>
      <state state_ref="oval:org.mitre.oval:ste:10091"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36346" version="1" comment="openoffice.org2-langpack-sr_CS is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14321"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36342" version="1" comment="openoffice.org2-xsltfilter is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14969"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36217" version="1" comment="openoffice.org2-langpack-he_IL is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15018"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36165" version="1" comment="openoffice.org2-langpack-zu_ZA is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14814"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36143" version="1" comment="openoffice.org2-langpack-pt_PT is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15000"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36137" version="1" comment="openoffice.org2-javafilter is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14660"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36121" version="1" comment="openoffice.org2-impress is earlier than 0:2.0.4-5.7.0.5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14569"/>
      <state state_ref="oval:org.mitre.oval:ste:10438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36777" version="1" comment="libxslt-python is earlier than 0:1.1.11-1.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14955"/>
      <state state_ref="oval:org.mitre.oval:ste:10916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36716" version="1" comment="libxslt-devel is earlier than 0:1.1.17-2.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15150"/>
      <state state_ref="oval:org.mitre.oval:ste:10733"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36669" version="1" comment="libxslt-python is earlier than 0:1.1.17-2.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14955"/>
      <state state_ref="oval:org.mitre.oval:ste:10733"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36656" version="1" comment="libxslt is earlier than 0:1.0.33-6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15147"/>
      <state state_ref="oval:org.mitre.oval:ste:10840"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36648" version="1" comment="libxslt is earlier than 0:1.1.17-2.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15147"/>
      <state state_ref="oval:org.mitre.oval:ste:10733"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36639" version="1" comment="libxslt is earlier than 0:1.1.11-1.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15147"/>
      <state state_ref="oval:org.mitre.oval:ste:10916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36611" version="1" comment="libxslt-devel is earlier than 0:1.0.33-6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15150"/>
      <state state_ref="oval:org.mitre.oval:ste:10840"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36213" version="1" comment="libxslt-devel is earlier than 0:1.1.11-1.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15150"/>
      <state state_ref="oval:org.mitre.oval:ste:10916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31643" version="1" comment="cpio is earlier than 0:2.5-4.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14426"/>
      <state state_ref="oval:org.mitre.oval:ste:9974"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30793" version="1" comment="cpio is earlier than 0:2.5-8.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14426"/>
      <state state_ref="oval:org.mitre.oval:ste:9288"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34258" version="1" comment="evolution is earlier than 0:1.4.5-20.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14477"/>
      <state state_ref="oval:org.mitre.oval:ste:10380"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34181" version="1" comment="evolution-data-server is earlier than 0:1.8.0-15.0.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14939"/>
      <state state_ref="oval:org.mitre.oval:ste:9963"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34132" version="1" comment="fetchmail is earlier than 0:6.2.0-3.el3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14633"/>
      <state state_ref="oval:org.mitre.oval:ste:10400"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34122" version="1" comment="fetchmail is earlier than 0:6.3.6-1.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14633"/>
      <state state_ref="oval:org.mitre.oval:ste:9921"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34116" version="1" comment="evolution-devel is earlier than 0:2.0.2-35.0.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14585"/>
      <state state_ref="oval:org.mitre.oval:ste:10225"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34046" version="1" comment="evolution is earlier than 0:2.0.2-35.0.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14477"/>
      <state state_ref="oval:org.mitre.oval:ste:10225"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33955" version="1" comment="fetchmail is earlier than 0:6.2.5-6.0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14633"/>
      <state state_ref="oval:org.mitre.oval:ste:10506"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33933" version="1" comment="evolution-devel is earlier than 0:1.4.5-20.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14585"/>
      <state state_ref="oval:org.mitre.oval:ste:10380"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33399" version="1" comment="evolution-data-server-devel is earlier than 0:1.8.0-15.0.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14847"/>
      <state state_ref="oval:org.mitre.oval:ste:9963"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32442" version="1" comment="openssl096b is earlier than 0:0.9.6b-16.42" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14258"/>
      <state state_ref="oval:org.mitre.oval:ste:10099"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32297" version="1" comment="openssl096b is earlier than 0:0.9.6b-22.42" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14258"/>
      <state state_ref="oval:org.mitre.oval:ste:9710"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33774" version="1" comment="libX11 is earlier than 0:1.0.3-8.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14749"/>
      <state state_ref="oval:org.mitre.oval:ste:10439"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33685" version="1" comment="libX11-devel is earlier than 0:1.0.3-8.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14309"/>
      <state state_ref="oval:org.mitre.oval:ste:10439"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33082" version="1" comment="xorg-x11-apps is earlier than 0:7.1-4.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14626"/>
      <state state_ref="oval:org.mitre.oval:ste:10394"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31989" version="1" comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:10106"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31920" version="1" comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:10106"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31269" version="1" comment="cups is earlier than 1:1.1.22-0.rc1.9.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:10106"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1370" version="1" check="at least one" comment="lha version is less than 1.14i-10.2" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:946"/>
      <state state_ref="oval:org.mitre.oval:ste:1232"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1369" version="1" check="at least one" comment="/usr/bin/lha is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:945"/>
      <state state_ref="oval:org.mitre.oval:ste:1231"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1368" version="1" check="at least one" comment="/usr/bin/lha is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:945"/>
      <state state_ref="oval:org.mitre.oval:ste:1230"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1367" version="1" check="at least one" comment="/usr/bin/lha is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:945"/>
      <state state_ref="oval:org.mitre.oval:ste:1229"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33498" version="1" comment="samba-common is earlier than 0:3.0.9-1.3E.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14032"/>
      <state state_ref="oval:org.mitre.oval:ste:9779"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33469" version="1" comment="samba is earlier than 0:3.0.10-1.4E.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13931"/>
      <state state_ref="oval:org.mitre.oval:ste:10226"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33449" version="1" comment="samba-client is earlier than 0:3.0.10-1.4E.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13861"/>
      <state state_ref="oval:org.mitre.oval:ste:10226"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33443" version="1" comment="samba-client is earlier than 0:3.0.23c-2.el5.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13861"/>
      <state state_ref="oval:org.mitre.oval:ste:10290"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33433" version="1" comment="samba is earlier than 0:3.0.9-1.3E.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13931"/>
      <state state_ref="oval:org.mitre.oval:ste:9779"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33413" version="1" comment="samba-common is earlier than 0:3.0.23c-2.el5.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14032"/>
      <state state_ref="oval:org.mitre.oval:ste:10290"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33362" version="1" comment="samba is earlier than 0:3.0.23c-2.el5.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13931"/>
      <state state_ref="oval:org.mitre.oval:ste:10290"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33319" version="1" comment="samba-client is earlier than 0:3.0.9-1.3E.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13861"/>
      <state state_ref="oval:org.mitre.oval:ste:9779"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33281" version="1" comment="samba-swat is earlier than 0:3.0.10-1.4E.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13707"/>
      <state state_ref="oval:org.mitre.oval:ste:10226"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33148" version="1" comment="samba-swat is earlier than 0:3.0.23c-2.el5.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13707"/>
      <state state_ref="oval:org.mitre.oval:ste:10290"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32942" version="1" comment="samba-swat is earlier than 0:3.0.9-1.3E.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13707"/>
      <state state_ref="oval:org.mitre.oval:ste:9779"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32739" version="1" comment="samba-common is earlier than 0:3.0.10-1.4E.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14032"/>
      <state state_ref="oval:org.mitre.oval:ste:10226"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34946" version="1" comment="mailman is earlier than 3:2.1.5.1-34.rhel4.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14521"/>
      <state state_ref="oval:org.mitre.oval:ste:10239"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35380" version="1" comment="kernel-xen is earlier than 0:2.6.18-8.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:10661"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35379" version="1" comment="kernel is earlier than 0:2.6.9-55.0.9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10600"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35371" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.0.9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:10600"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35360" version="1" comment="kernel-unsupported is earlier than 0:2.4.21-52.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14229"/>
      <state state_ref="oval:org.mitre.oval:ste:10610"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35347" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:10661"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35340" version="1" comment="kernel is earlier than 0:2.4.21-52.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10610"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35333" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.0.9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:10600"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35329" version="1" comment="kernel-xenU is earlier than 0:2.6.9-55.0.9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14301"/>
      <state state_ref="oval:org.mitre.oval:ste:10600"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35328" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-55.0.9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:10600"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35318" version="1" comment="kernel-smp is earlier than 0:2.4.21-52.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:10610"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35307" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:10661"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35297" version="1" comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14853"/>
      <state state_ref="oval:org.mitre.oval:ste:10661"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35290" version="1" comment="kernel-smp-unsupported is earlier than 0:2.4.21-52.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14218"/>
      <state state_ref="oval:org.mitre.oval:ste:10610"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35287" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:10661"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35278" version="1" comment="kernel-hugemem is earlier than 0:2.4.21-52.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:10610"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35277" version="1" comment="kernel-doc is earlier than 0:2.6.9-55.0.9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10600"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35265" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-55.0.9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:10600"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35242" version="1" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-52.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14372"/>
      <state state_ref="oval:org.mitre.oval:ste:10610"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35236" version="1" comment="kernel-doc is earlier than 0:2.4.21-52.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10610"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35220" version="1" comment="kernel-kdump is earlier than 0:2.6.18-8.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:10661"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35213" version="1" comment="kernel-PAE is earlier than 0:2.6.18-8.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:10661"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35052" version="1" comment="kernel-xenU-devel is earlier than 0:2.6.9-55.0.9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14060"/>
      <state state_ref="oval:org.mitre.oval:ste:10600"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35040" version="1" comment="kernel-smp is earlier than 0:2.6.9-55.0.9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:10600"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34986" version="1" comment="kernel-source is earlier than 0:2.4.21-52.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14186"/>
      <state state_ref="oval:org.mitre.oval:ste:10610"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34914" version="1" comment="kernel-devel is earlier than 0:2.6.18-8.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10661"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34797" version="1" comment="kernel-doc is earlier than 0:2.6.18-8.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10661"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34761" version="1" comment="kernel-devel is earlier than 0:2.6.9-55.0.9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10600"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34704" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-55.0.9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:10600"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34612" version="1" comment="kernel-BOOT is earlier than 0:2.4.21-52.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14219"/>
      <state state_ref="oval:org.mitre.oval:ste:10610"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34544" version="1" comment="kernel-headers is earlier than 0:2.6.18-8.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:10661"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34472" version="1" comment="kernel is earlier than 0:2.6.18-8.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10661"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36585" version="1" comment="unzip is earlier than 0:5.50-36.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14303"/>
      <state state_ref="oval:org.mitre.oval:ste:10859"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1374" version="1" check="at least one" comment="tcpdump version is less than 3.7.2-7.E3.2" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:948"/>
      <state state_ref="oval:org.mitre.oval:ste:1236"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1373" version="1" check="at least one" comment="/usr/sbin/tcpdump is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:947"/>
      <state state_ref="oval:org.mitre.oval:ste:1235"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1372" version="1" check="at least one" comment="/usr/sbin/tcpdump is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:947"/>
      <state state_ref="oval:org.mitre.oval:ste:1234"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1371" version="1" check="at least one" comment="/usr/sbin/tcpdump is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:947"/>
      <state state_ref="oval:org.mitre.oval:ste:1233"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32054" version="1" comment="openssh-clients is earlier than 0:3.9p1-8.RHEL4.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14409"/>
      <state state_ref="oval:org.mitre.oval:ste:10015"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31991" version="1" comment="openssh is earlier than 0:3.9p1-8.RHEL4.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14581"/>
      <state state_ref="oval:org.mitre.oval:ste:10015"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31494" version="1" comment="openssh-askpass-gnome is earlier than 0:3.9p1-8.RHEL4.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14434"/>
      <state state_ref="oval:org.mitre.oval:ste:10015"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31339" version="1" comment="openssh-askpass is earlier than 0:3.9p1-8.RHEL4.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14577"/>
      <state state_ref="oval:org.mitre.oval:ste:10015"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31258" version="1" comment="openssh-server is earlier than 0:3.9p1-8.RHEL4.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14544"/>
      <state state_ref="oval:org.mitre.oval:ste:10015"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38869" version="1" comment="net-snmp-libs is earlier than 0:5.0.9-2.30E.28" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14316"/>
      <state state_ref="oval:org.mitre.oval:ste:11299"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38866" version="1" comment="net-snmp-perl is earlier than 0:5.0.9-2.30E.28" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14516"/>
      <state state_ref="oval:org.mitre.oval:ste:11299"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38756" version="1" comment="net-snmp-utils is earlier than 0:5.0.9-2.30E.28" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14287"/>
      <state state_ref="oval:org.mitre.oval:ste:11299"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38753" version="1" comment="net-snmp-devel is earlier than 0:5.0.9-2.30E.28" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14339"/>
      <state state_ref="oval:org.mitre.oval:ste:11299"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38263" version="1" comment="net-snmp is earlier than 0:5.0.9-2.30E.28" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14390"/>
      <state state_ref="oval:org.mitre.oval:ste:11299"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31089" version="1" comment="xpdf is earlier than 1:2.02-9.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14398"/>
      <state state_ref="oval:org.mitre.oval:ste:9693"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32358" version="1" comment="lynx is earlier than 0:2.8.5-11.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14519"/>
      <state state_ref="oval:org.mitre.oval:ste:9907"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32237" version="1" comment="lynx is earlier than 0:2.8.5-18.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14519"/>
      <state state_ref="oval:org.mitre.oval:ste:9742"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31725" version="1" comment="gtk2-devel is earlier than 0:2.4.13-14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14350"/>
      <state state_ref="oval:org.mitre.oval:ste:9855"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31683" version="1" comment="gtk2 is earlier than 0:2.2.4-15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14106"/>
      <state state_ref="oval:org.mitre.oval:ste:9923"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31640" version="1" comment="gdk-pixbuf-devel is earlier than 1:0.22.0-16.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13883"/>
      <state state_ref="oval:org.mitre.oval:ste:8965"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31509" version="1" comment="gdk-pixbuf is earlier than 1:0.22.0-16.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14361"/>
      <state state_ref="oval:org.mitre.oval:ste:8965"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31449" version="1" comment="gdk-pixbuf is earlier than 1:0.22.0-12.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14361"/>
      <state state_ref="oval:org.mitre.oval:ste:9836"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31425" version="1" comment="gdk-pixbuf-devel is earlier than 1:0.22.0-12.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13883"/>
      <state state_ref="oval:org.mitre.oval:ste:9836"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31384" version="1" comment="gdk-pixbuf-gnome is earlier than 1:0.22.0-12.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14410"/>
      <state state_ref="oval:org.mitre.oval:ste:9836"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31230" version="1" comment="gtk2-devel is earlier than 0:2.2.4-15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14350"/>
      <state state_ref="oval:org.mitre.oval:ste:9923"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31176" version="1" comment="gtk2 is earlier than 0:2.4.13-14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14106"/>
      <state state_ref="oval:org.mitre.oval:ste:9855"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1378" version="1" check="at least one" comment="libpng version is less than 1.2.2-21" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:952"/>
      <state state_ref="oval:org.mitre.oval:ste:1240"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1377" version="1" check="at least one" comment="libpng-devel version is less than 1.2.2-21" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:951"/>
      <state state_ref="oval:org.mitre.oval:ste:1239"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1376" version="1" check="at least one" comment="libpng10 version is less than 1.0.13-12" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:950"/>
      <state state_ref="oval:org.mitre.oval:ste:1238"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1375" version="1" check="at least one" comment="libpng10-devel version is less than 1.0.13-12" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:949"/>
      <state state_ref="oval:org.mitre.oval:ste:1237"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1382" version="1" check="at least one" comment="cvs version is less than 1.11.2-22" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:954"/>
      <state state_ref="oval:org.mitre.oval:ste:1244"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38544" version="1" comment="gstreamer-plugins-base is earlier than 0:0.10.20-3.0.1.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14634"/>
      <state state_ref="oval:org.mitre.oval:ste:10925"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37960" version="1" comment="gstreamer-plugins-base-devel is earlier than 0:0.10.20-3.0.1.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14467"/>
      <state state_ref="oval:org.mitre.oval:ste:10925"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34901" version="1" comment="qt-designer is earlier than 1:3.3.3-11.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14074"/>
      <state state_ref="oval:org.mitre.oval:ste:10602"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34891" version="1" comment="qt-MySQL is earlier than 1:3.3.6-21.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14384"/>
      <state state_ref="oval:org.mitre.oval:ste:10337"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34863" version="1" comment="qt-devel is earlier than 1:3.1.2-16.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14278"/>
      <state state_ref="oval:org.mitre.oval:ste:10228"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34860" version="1" comment="qt-MySQL is earlier than 1:3.1.2-16.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14384"/>
      <state state_ref="oval:org.mitre.oval:ste:10228"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34824" version="1" comment="qt-devel is earlier than 1:3.3.3-11.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14278"/>
      <state state_ref="oval:org.mitre.oval:ste:10602"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34823" version="1" comment="qt-devel-docs is earlier than 1:3.3.6-21.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15050"/>
      <state state_ref="oval:org.mitre.oval:ste:10337"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34815" version="1" comment="qt-MySQL is earlier than 1:3.3.3-11.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14384"/>
      <state state_ref="oval:org.mitre.oval:ste:10602"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34786" version="1" comment="qt-designer is earlier than 1:3.3.6-21.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14074"/>
      <state state_ref="oval:org.mitre.oval:ste:10337"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34773" version="1" comment="qt is earlier than 1:3.3.3-11.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14421"/>
      <state state_ref="oval:org.mitre.oval:ste:10602"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34752" version="1" comment="qt is earlier than 1:3.1.2-16.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14421"/>
      <state state_ref="oval:org.mitre.oval:ste:10228"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34751" version="1" comment="qt-ODBC is earlier than 1:3.3.6-21.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13884"/>
      <state state_ref="oval:org.mitre.oval:ste:10337"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34716" version="1" comment="qt-config is earlier than 1:3.3.3-11.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14145"/>
      <state state_ref="oval:org.mitre.oval:ste:10602"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34657" version="1" comment="qt-designer is earlier than 1:3.1.2-16.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14074"/>
      <state state_ref="oval:org.mitre.oval:ste:10228"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34610" version="1" comment="qt-ODBC is earlier than 1:3.1.2-16.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13884"/>
      <state state_ref="oval:org.mitre.oval:ste:10228"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34546" version="1" comment="qt-config is earlier than 1:3.3.6-21.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14145"/>
      <state state_ref="oval:org.mitre.oval:ste:10337"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34540" version="1" comment="qt is earlier than 1:3.3.6-21.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14421"/>
      <state state_ref="oval:org.mitre.oval:ste:10337"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34503" version="1" comment="qt-devel is earlier than 1:3.3.6-21.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14278"/>
      <state state_ref="oval:org.mitre.oval:ste:10337"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34497" version="1" comment="qt-PostgreSQL is earlier than 1:3.3.6-21.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14674"/>
      <state state_ref="oval:org.mitre.oval:ste:10337"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34378" version="1" comment="qt-config is earlier than 1:3.1.2-16.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14145"/>
      <state state_ref="oval:org.mitre.oval:ste:10228"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34273" version="1" comment="qt-PostgreSQL is earlier than 1:3.3.3-11.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14674"/>
      <state state_ref="oval:org.mitre.oval:ste:10602"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33935" version="1" comment="qt-ODBC is earlier than 1:3.3.3-11.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13884"/>
      <state state_ref="oval:org.mitre.oval:ste:10602"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34034" version="1" comment="util-linux is earlier than 0:2.12a-16.EL4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14723"/>
      <state state_ref="oval:org.mitre.oval:ste:10488"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31763" version="1" comment="cvs is earlier than 0:1.11.2-27" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14275"/>
      <state state_ref="oval:org.mitre.oval:ste:9552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31635" version="1" comment="cvs is earlier than 0:1.11.17-7.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14275"/>
      <state state_ref="oval:org.mitre.oval:ste:9944"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30715" version="1" comment="mod_ssl is earlier than 1:2.0.46-32.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:9575"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30621" version="1" comment="httpd is earlier than 0:2.0.46-32.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:9642"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30592" version="1" comment="httpd-devel is earlier than 0:2.0.46-32.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:9642"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40276" version="1" comment="systemtap-testsuite is earlier than 0:0.6.2-2.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14298"/>
      <state state_ref="oval:org.mitre.oval:ste:11508"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40274" version="1" comment="systemtap is earlier than 0:0.6.2-2.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15026"/>
      <state state_ref="oval:org.mitre.oval:ste:11508"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40200" version="1" comment="systemtap-runtime is earlier than 0:0.6.2-2.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15292"/>
      <state state_ref="oval:org.mitre.oval:ste:11508"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30663" version="1" comment="nfs-utils is earlier than 0:1.0.6-7.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14333"/>
      <state state_ref="oval:org.mitre.oval:ste:9725"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1389" version="1" check="at least one" comment="rsync version is less than 2.5.7-4.3E" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:959"/>
      <state state_ref="oval:org.mitre.oval:ste:1251"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32391" version="1" comment="ntp is earlier than 0:4.2.0.a.20040617-4.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14371"/>
      <state state_ref="oval:org.mitre.oval:ste:9929"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39439" version="1" comment="newt is earlier than 0:0.51.5-2.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14373"/>
      <state state_ref="oval:org.mitre.oval:ste:11372"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39387" version="1" comment="newt-devel is earlier than 0:0.52.2-12.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14996"/>
      <state state_ref="oval:org.mitre.oval:ste:11135"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39343" version="1" comment="newt is earlier than 0:0.51.6-10.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14373"/>
      <state state_ref="oval:org.mitre.oval:ste:11392"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39340" version="1" comment="newt-devel is earlier than 0:0.51.6-10.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14996"/>
      <state state_ref="oval:org.mitre.oval:ste:11392"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39137" version="1" comment="newt-devel is earlier than 0:0.51.5-2.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14996"/>
      <state state_ref="oval:org.mitre.oval:ste:11372"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38962" version="1" comment="newt is earlier than 0:0.52.2-12.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14373"/>
      <state state_ref="oval:org.mitre.oval:ste:11135"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1390" version="1" check="at least one" comment="File %windir%\System32\nsiislog.dll is less than 4.1.0.3861" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:960"/>
      <state state_ref="oval:org.mitre.oval:ste:1252"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34049" version="1" comment="w3c-libwww is earlier than 0:5.4.0-10.1.RHEL4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14857"/>
      <state state_ref="oval:org.mitre.oval:ste:10473"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34020" version="1" comment="w3c-libwww-apps is earlier than 0:5.4.0-10.1.RHEL4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14868"/>
      <state state_ref="oval:org.mitre.oval:ste:10473"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33967" version="1" comment="w3c-libwww-devel is earlier than 0:5.4.0-10.1.RHEL4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14718"/>
      <state state_ref="oval:org.mitre.oval:ste:10473"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40172" version="1" comment="pam_krb5 is earlier than 0:2.2.14-15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15087"/>
      <state state_ref="oval:org.mitre.oval:ste:11352"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31575" version="1" comment="krb5-libs is earlier than 0:1.3.4-12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14395"/>
      <state state_ref="oval:org.mitre.oval:ste:9140"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31573" version="1" comment="krb5-workstation is earlier than 0:1.2.7-42" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14279"/>
      <state state_ref="oval:org.mitre.oval:ste:9775"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31526" version="1" comment="krb5-devel is earlier than 0:1.3.4-12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14100"/>
      <state state_ref="oval:org.mitre.oval:ste:9140"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31498" version="1" comment="telnet is earlier than 1:0.17-31.EL4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14191"/>
      <state state_ref="oval:org.mitre.oval:ste:9801"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31481" version="1" comment="krb5-server is earlier than 0:1.3.4-12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14452"/>
      <state state_ref="oval:org.mitre.oval:ste:9140"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31472" version="1" comment="krb5-server is earlier than 0:1.2.7-42" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14452"/>
      <state state_ref="oval:org.mitre.oval:ste:9775"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31463" version="1" comment="telnet-server is earlier than 1:0.17-26.EL3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14237"/>
      <state state_ref="oval:org.mitre.oval:ste:8928"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31409" version="1" comment="krb5-workstation is earlier than 0:1.3.4-12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14279"/>
      <state state_ref="oval:org.mitre.oval:ste:9140"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31373" version="1" comment="krb5-libs is earlier than 0:1.2.7-42" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14395"/>
      <state state_ref="oval:org.mitre.oval:ste:9775"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31275" version="1" comment="telnet-server is earlier than 1:0.17-31.EL4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14237"/>
      <state state_ref="oval:org.mitre.oval:ste:9801"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31054" version="1" comment="telnet is earlier than 1:0.17-26.EL3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14191"/>
      <state state_ref="oval:org.mitre.oval:ste:8928"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31050" version="1" comment="krb5 is earlier than 0:1.2.7-42" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14120"/>
      <state state_ref="oval:org.mitre.oval:ste:9775"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31015" version="1" comment="krb5-devel is earlier than 0:1.2.7-42" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14100"/>
      <state state_ref="oval:org.mitre.oval:ste:9775"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30952" version="1" comment="krb5 is earlier than 0:1.3.4-12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14120"/>
      <state state_ref="oval:org.mitre.oval:ste:9140"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36970" version="1" comment="sblim-tools-libra-devel is earlier than 0:0.2.3-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15097"/>
      <state state_ref="oval:org.mitre.oval:ste:10649"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36899" version="1" comment="sblim-cmpi-fsvol-devel is earlier than 0:1.4.4-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14982"/>
      <state state_ref="oval:org.mitre.oval:ste:10801"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36896" version="1" comment="sblim-cmpi-network-test is earlier than 0:1.3.8-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14896"/>
      <state state_ref="oval:org.mitre.oval:ste:10895"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36892" version="1" comment="sblim-cmpi-base is earlier than 0:1.5.5-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15024"/>
      <state state_ref="oval:org.mitre.oval:ste:10519"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36890" version="1" comment="sblim-cmpi-network-devel is earlier than 0:1.3.8-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14895"/>
      <state state_ref="oval:org.mitre.oval:ste:10895"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36889" version="1" comment="sblim-cim-client-manual is earlier than 0:1-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15047"/>
      <state state_ref="oval:org.mitre.oval:ste:10261"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36888" version="1" comment="sblim-cmpi-devel is earlier than 0:1.0.4-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15136"/>
      <state state_ref="oval:org.mitre.oval:ste:10808"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36863" version="1" comment="sblim-cmpi-sysfs-test is earlier than 0:1.1.9-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14887"/>
      <state state_ref="oval:org.mitre.oval:ste:10934"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36857" version="1" comment="sblim-cmpi-params is earlier than 0:1.2.6-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15046"/>
      <state state_ref="oval:org.mitre.oval:ste:10763"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36856" version="1" comment="sblim-cmpi-nfsv4-test is earlier than 0:1.0.12-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14940"/>
      <state state_ref="oval:org.mitre.oval:ste:10131"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36852" version="1" comment="sblim-cmpi-nfsv3-test is earlier than 0:1.0.13-13a.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15011"/>
      <state state_ref="oval:org.mitre.oval:ste:10947"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36850" version="1" comment="sblim-cmpi-samba-test is earlier than 0:1-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15044"/>
      <state state_ref="oval:org.mitre.oval:ste:10261"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36849" version="1" comment="sblim-cmpi-params-test is earlier than 0:1.2.4-13a.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15098"/>
      <state state_ref="oval:org.mitre.oval:ste:10903"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36842" version="1" comment="sblim-cmpi-sysfs-test is earlier than 0:1.1.8-13a.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14887"/>
      <state state_ref="oval:org.mitre.oval:ste:10742"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36824" version="1" comment="sblim-cmpi-nfsv4 is earlier than 0:1.0.11-13a.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14551"/>
      <state state_ref="oval:org.mitre.oval:ste:10914"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36802" version="1" comment="sblim-gather is earlier than 0:2.1.2-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14933"/>
      <state state_ref="oval:org.mitre.oval:ste:10931"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36800" version="1" comment="sblim is earlier than 0:1-13a.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15015"/>
      <state state_ref="oval:org.mitre.oval:ste:10455"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36797" version="1" comment="sblim-cmpi-samba-devel is earlier than 0:1-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14985"/>
      <state state_ref="oval:org.mitre.oval:ste:10261"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36793" version="1" comment="sblim-wbemcli is earlier than 0:1.5.1-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14573"/>
      <state state_ref="oval:org.mitre.oval:ste:10803"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36791" version="1" comment="sblim-wbemcli is earlier than 0:1.5.1-13a.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14573"/>
      <state state_ref="oval:org.mitre.oval:ste:10767"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36787" version="1" comment="sblim-cmpi-fsvol is earlier than 0:1.4.4-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15040"/>
      <state state_ref="oval:org.mitre.oval:ste:10801"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36783" version="1" comment="sblim-cmpi-syslog is earlier than 0:0.7.11-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15062"/>
      <state state_ref="oval:org.mitre.oval:ste:10736"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36780" version="1" comment="sblim-gather is earlier than 0:2.1.1-13a.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14933"/>
      <state state_ref="oval:org.mitre.oval:ste:10447"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36779" version="1" comment="sblim-cmpi-params is earlier than 0:1.2.4-13a.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15046"/>
      <state state_ref="oval:org.mitre.oval:ste:10903"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36775" version="1" comment="sblim-gather-test is earlier than 0:2.1.1-13a.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14879"/>
      <state state_ref="oval:org.mitre.oval:ste:10447"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36765" version="1" comment="sblim-cmpi-fsvol-test is earlier than 0:1.4.3-13a.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14540"/>
      <state state_ref="oval:org.mitre.oval:ste:10624"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36759" version="1" comment="sblim-cmpi-base is earlier than 0:1.5.4-13a.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15024"/>
      <state state_ref="oval:org.mitre.oval:ste:10672"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36753" version="1" comment="sblim-testsuite is earlier than 0:1.2.4-13a.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15032"/>
      <state state_ref="oval:org.mitre.oval:ste:10903"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36724" version="1" comment="sblim-cmpi-base-test is earlier than 0:1.5.4-13a.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15035"/>
      <state state_ref="oval:org.mitre.oval:ste:10672"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36721" version="1" comment="sblim-gather-devel is earlier than 0:2.1.2-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14843"/>
      <state state_ref="oval:org.mitre.oval:ste:10931"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36718" version="1" comment="sblim-cmpi-sysfs is earlier than 0:1.1.8-13a.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14683"/>
      <state state_ref="oval:org.mitre.oval:ste:10742"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36717" version="1" comment="sblim-cmpi-fsvol-devel is earlier than 0:1.4.3-13a.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14982"/>
      <state state_ref="oval:org.mitre.oval:ste:10624"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36714" version="1" comment="sblim-cmpi-nfsv3-test is earlier than 0:1.0.14-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15011"/>
      <state state_ref="oval:org.mitre.oval:ste:10858"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36712" version="1" comment="sblim-gather-devel is earlier than 0:2.1.1-13a.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14843"/>
      <state state_ref="oval:org.mitre.oval:ste:10447"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36709" version="1" comment="sblim-cim-client is earlier than 0:1.3.3-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15009"/>
      <state state_ref="oval:org.mitre.oval:ste:10513"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36701" version="1" comment="sblim-cim-client-javadoc is earlier than 0:1-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14533"/>
      <state state_ref="oval:org.mitre.oval:ste:10261"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36692" version="1" comment="sblim-cmpi-dns-devel is earlier than 0:1-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14836"/>
      <state state_ref="oval:org.mitre.oval:ste:10261"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36689" version="1" comment="sblim-cmpi-fsvol-test is earlier than 0:1.4.4-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14540"/>
      <state state_ref="oval:org.mitre.oval:ste:10801"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36687" version="1" comment="sblim-gather-provider is earlier than 0:2.1.2-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14844"/>
      <state state_ref="oval:org.mitre.oval:ste:10931"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36680" version="1" comment="sblim-cmpi-base-devel is earlier than 0:1.5.4-13a.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14786"/>
      <state state_ref="oval:org.mitre.oval:ste:10672"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36673" version="1" comment="sblim-cmpi-params-test is earlier than 0:1.2.6-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15098"/>
      <state state_ref="oval:org.mitre.oval:ste:10763"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36660" version="1" comment="sblim-cmpi-fsvol is earlier than 0:1.4.3-13a.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15040"/>
      <state state_ref="oval:org.mitre.oval:ste:10624"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36650" version="1" comment="sblim-cmpi-network-test is earlier than 0:1.3.7-13a.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14896"/>
      <state state_ref="oval:org.mitre.oval:ste:10482"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36633" version="1" comment="sblim-testsuite is earlier than 0:1.2.4-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15032"/>
      <state state_ref="oval:org.mitre.oval:ste:10819"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36624" version="1" comment="sblim-cmpi-base-devel is earlier than 0:1.5.5-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14786"/>
      <state state_ref="oval:org.mitre.oval:ste:10519"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36588" version="1" comment="sblim-cmpi-network is earlier than 0:1.3.7-13a.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15007"/>
      <state state_ref="oval:org.mitre.oval:ste:10482"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36578" version="1" comment="sblim-cmpi-network is earlier than 0:1.3.8-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15007"/>
      <state state_ref="oval:org.mitre.oval:ste:10895"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36564" version="1" comment="sblim-cmpi-nfsv3 is earlier than 0:1.0.13-13a.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14785"/>
      <state state_ref="oval:org.mitre.oval:ste:10947"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36536" version="1" comment="sblim-cmpi-devel is earlier than 0:1.0.4-13a.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15136"/>
      <state state_ref="oval:org.mitre.oval:ste:10495"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36489" version="1" comment="sblim-tools-libra is earlier than 0:0.2.3-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14913"/>
      <state state_ref="oval:org.mitre.oval:ste:10649"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36479" version="1" comment="sblim-cmpi-nfsv3 is earlier than 0:1.0.14-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14785"/>
      <state state_ref="oval:org.mitre.oval:ste:10858"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36447" version="1" comment="sblim-cmpi-nfsv4 is earlier than 0:1.0.12-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14551"/>
      <state state_ref="oval:org.mitre.oval:ste:10131"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36354" version="1" comment="sblim-cmpi-base-test is earlier than 0:1.5.5-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15035"/>
      <state state_ref="oval:org.mitre.oval:ste:10519"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36250" version="1" comment="sblim-gather-provider is earlier than 0:2.1.1-13a.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14844"/>
      <state state_ref="oval:org.mitre.oval:ste:10447"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36247" version="1" comment="sblim-cmpi-syslog is earlier than 0:0.7.9-13a.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15062"/>
      <state state_ref="oval:org.mitre.oval:ste:10872"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36245" version="1" comment="sblim is earlier than 0:1-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15015"/>
      <state state_ref="oval:org.mitre.oval:ste:10261"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36209" version="1" comment="sblim-cmpi-network-devel is earlier than 0:1.3.7-13a.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14895"/>
      <state state_ref="oval:org.mitre.oval:ste:10482"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36196" version="1" comment="sblim-cmpi-dns-test is earlier than 0:1-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14989"/>
      <state state_ref="oval:org.mitre.oval:ste:10261"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36095" version="1" comment="sblim-cmpi-nfsv4-test is earlier than 0:1.0.11-13a.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14940"/>
      <state state_ref="oval:org.mitre.oval:ste:10914"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36076" version="1" comment="sblim-cmpi-syslog-test is earlier than 0:0.7.9-13a.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14334"/>
      <state state_ref="oval:org.mitre.oval:ste:10872"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36001" version="1" comment="sblim-cmpi-dns is earlier than 0:0.5.2-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15153"/>
      <state state_ref="oval:org.mitre.oval:ste:10920"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35992" version="1" comment="sblim-cmpi-samba is earlier than 0:0.5.2-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14912"/>
      <state state_ref="oval:org.mitre.oval:ste:10920"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35986" version="1" comment="sblim-gather-test is earlier than 0:2.1.2-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14879"/>
      <state state_ref="oval:org.mitre.oval:ste:10931"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35968" version="1" comment="sblim-cmpi-syslog-test is earlier than 0:0.7.11-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14334"/>
      <state state_ref="oval:org.mitre.oval:ste:10736"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35937" version="1" comment="sblim-cmpi-sysfs is earlier than 0:1.1.9-31.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14683"/>
      <state state_ref="oval:org.mitre.oval:ste:10934"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38764" version="1" comment="cups-devel is earlier than 1:1.3.7-8.el5_3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:10371"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38713" version="1" comment="cups-lpd is earlier than 1:1.3.7-8.el5_3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14688"/>
      <state state_ref="oval:org.mitre.oval:ste:10371"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38681" version="1" comment="cups is earlier than 1:1.3.7-8.el5_3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:10371"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38653" version="1" comment="cups-libs is earlier than 1:1.3.7-8.el5_3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:10371"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37588" version="1" comment="dnsmasq is earlier than 0:2.45-1.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14690"/>
      <state state_ref="oval:org.mitre.oval:ste:11066"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37082" version="1" comment="bind-chroot is earlier than 20:9.2.4-28.0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14363"/>
      <state state_ref="oval:org.mitre.oval:ste:10502"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37069" version="1" comment="selinux-policy-targeted is earlier than 0:2.4.6-137.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14731"/>
      <state state_ref="oval:org.mitre.oval:ste:10345"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37048" version="1" comment="bind-libs is earlier than 20:9.2.4-22.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14348"/>
      <state state_ref="oval:org.mitre.oval:ste:10812"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37047" version="1" comment="bind-devel is earlier than 20:9.2.4-22.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14242"/>
      <state state_ref="oval:org.mitre.oval:ste:10812"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37038" version="1" comment="bind-libs is earlier than 30:9.3.4-6.0.2.P1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14348"/>
      <state state_ref="oval:org.mitre.oval:ste:10921"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37017" version="1" comment="bind-devel is earlier than 30:9.3.4-6.0.2.P1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14242"/>
      <state state_ref="oval:org.mitre.oval:ste:10921"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37016" version="1" comment="bind-utils is earlier than 20:9.2.4-22.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14263"/>
      <state state_ref="oval:org.mitre.oval:ste:10812"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37007" version="1" comment="selinux-policy-targeted-sources is earlier than 0:1.17.30-2.150.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14929"/>
      <state state_ref="oval:org.mitre.oval:ste:10883"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37003" version="1" comment="bind-libbind-devel is earlier than 30:9.3.4-6.0.2.P1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14729"/>
      <state state_ref="oval:org.mitre.oval:ste:10921"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36962" version="1" comment="bind-utils is earlier than 30:9.3.4-6.0.2.P1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14263"/>
      <state state_ref="oval:org.mitre.oval:ste:10921"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36960" version="1" comment="bind is earlier than 30:9.3.4-6.0.2.P1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14143"/>
      <state state_ref="oval:org.mitre.oval:ste:10921"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36959" version="1" comment="bind is earlier than 20:9.2.4-22.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14143"/>
      <state state_ref="oval:org.mitre.oval:ste:10812"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36925" version="1" comment="bind-libs is earlier than 20:9.2.4-28.0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14348"/>
      <state state_ref="oval:org.mitre.oval:ste:10502"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36924" version="1" comment="bind-chroot is earlier than 30:9.3.4-6.0.2.P1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14363"/>
      <state state_ref="oval:org.mitre.oval:ste:10921"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36876" version="1" comment="selinux-policy-targeted is earlier than 0:1.17.30-2.150.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14731"/>
      <state state_ref="oval:org.mitre.oval:ste:10883"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36853" version="1" comment="selinux-policy-strict is earlier than 0:2.4.6-137.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14914"/>
      <state state_ref="oval:org.mitre.oval:ste:10345"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36806" version="1" comment="caching-nameserver is earlier than 30:9.3.4-6.0.2.P1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14701"/>
      <state state_ref="oval:org.mitre.oval:ste:10921"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36790" version="1" comment="selinux-policy-mls is earlier than 0:2.4.6-137.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15143"/>
      <state state_ref="oval:org.mitre.oval:ste:10345"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36733" version="1" comment="bind-chroot is earlier than 20:9.2.4-22.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14363"/>
      <state state_ref="oval:org.mitre.oval:ste:10812"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36719" version="1" comment="bind-utils is earlier than 20:9.2.4-28.0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14263"/>
      <state state_ref="oval:org.mitre.oval:ste:10502"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36667" version="1" comment="selinux-policy-devel is earlier than 0:2.4.6-137.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15077"/>
      <state state_ref="oval:org.mitre.oval:ste:10345"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36601" version="1" comment="bind-sdb is earlier than 30:9.3.4-6.0.2.P1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14433"/>
      <state state_ref="oval:org.mitre.oval:ste:10921"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36575" version="1" comment="bind-devel is earlier than 20:9.2.4-28.0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14242"/>
      <state state_ref="oval:org.mitre.oval:ste:10502"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36100" version="1" comment="bind is earlier than 20:9.2.4-28.0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14143"/>
      <state state_ref="oval:org.mitre.oval:ste:10502"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36092" version="1" comment="selinux-policy is earlier than 0:2.4.6-137.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15111"/>
      <state state_ref="oval:org.mitre.oval:ste:10345"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36453" version="1" comment="cups-libs is earlier than 0:1.2.4-11.14.el5_1.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:10860"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36231" version="1" comment="cups is earlier than 0:1.2.4-11.14.el5_1.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:10860"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36112" version="1" comment="cups-lpd is earlier than 0:1.2.4-11.14.el5_1.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14688"/>
      <state state_ref="oval:org.mitre.oval:ste:10860"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36033" version="1" comment="cups-devel is earlier than 0:1.2.4-11.14.el5_1.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:10860"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30540" version="1" comment="bind-libs is earlier than 20:9.2.4-14_EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14348"/>
      <state state_ref="oval:org.mitre.oval:ste:9654"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30510" version="1" comment="bind-chroot is earlier than 20:9.2.4-16.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14363"/>
      <state state_ref="oval:org.mitre.oval:ste:9256"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30454" version="1" comment="bind-devel is earlier than 20:9.2.4-16.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14242"/>
      <state state_ref="oval:org.mitre.oval:ste:9256"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30416" version="1" comment="bind is earlier than 20:9.2.4-16.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14143"/>
      <state state_ref="oval:org.mitre.oval:ste:9256"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30409" version="1" comment="bind-libs is earlier than 20:9.2.4-16.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14348"/>
      <state state_ref="oval:org.mitre.oval:ste:9256"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30374" version="1" comment="bind-devel is earlier than 20:9.2.4-14_EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14242"/>
      <state state_ref="oval:org.mitre.oval:ste:9654"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30310" version="1" comment="bind-utils is earlier than 20:9.2.4-16.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14263"/>
      <state state_ref="oval:org.mitre.oval:ste:9256"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30151" version="1" comment="bind-utils is earlier than 20:9.2.4-14_EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14263"/>
      <state state_ref="oval:org.mitre.oval:ste:9654"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30138" version="1" comment="bind-chroot is earlier than 20:9.2.4-14_EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14363"/>
      <state state_ref="oval:org.mitre.oval:ste:9654"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29802" version="1" comment="bind is earlier than 20:9.2.4-14_EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14143"/>
      <state state_ref="oval:org.mitre.oval:ste:9654"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:1394" version="1" comment="Microsoft Data Access Components 2.6 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:359"/>
      <state state_ref="oval:org.mitre.oval:ste:1256"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1393" version="1" comment="File %windir%\System32\odbcbcp.dll is less than 2000.80.746.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:878"/>
      <state state_ref="oval:org.mitre.oval:ste:1255"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34561" version="1" comment="openldap is earlier than 0:2.0.27-23" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14650"/>
      <state state_ref="oval:org.mitre.oval:ste:10463"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34514" version="1" comment="openldap-devel is earlier than 0:2.0.27-23" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14680"/>
      <state state_ref="oval:org.mitre.oval:ste:10463"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34458" version="1" comment="openldap-clients is earlier than 0:2.0.27-23" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13745"/>
      <state state_ref="oval:org.mitre.oval:ste:10463"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34115" version="1" comment="openldap-clients is earlier than 0:2.2.13-7.4E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13745"/>
      <state state_ref="oval:org.mitre.oval:ste:10119"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34114" version="1" comment="openldap is earlier than 0:2.2.13-7.4E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14650"/>
      <state state_ref="oval:org.mitre.oval:ste:10119"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34101" version="1" comment="openldap-servers-sql is earlier than 0:2.2.13-7.4E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14387"/>
      <state state_ref="oval:org.mitre.oval:ste:10119"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34054" version="1" comment="openldap-devel is earlier than 0:2.2.13-7.4E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14680"/>
      <state state_ref="oval:org.mitre.oval:ste:10119"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33968" version="1" comment="compat-openldap is earlier than 0:2.1.30-7.4E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14705"/>
      <state state_ref="oval:org.mitre.oval:ste:10374"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33949" version="1" comment="openldap-servers is earlier than 0:2.0.27-23" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14676"/>
      <state state_ref="oval:org.mitre.oval:ste:10463"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33882" version="1" comment="openldap-servers is earlier than 0:2.2.13-7.4E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14676"/>
      <state state_ref="oval:org.mitre.oval:ste:10119"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34691" version="1" comment="gcc is earlier than 0:3.2.3-59" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14175"/>
      <state state_ref="oval:org.mitre.oval:ste:10217"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34680" version="1" comment="gcc-g77 is earlier than 0:3.2.3-59" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14428"/>
      <state state_ref="oval:org.mitre.oval:ste:10217"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34631" version="1" comment="libstdc++ is earlier than 0:3.2.3-59" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14487"/>
      <state state_ref="oval:org.mitre.oval:ste:10217"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34617" version="1" comment="cpp is earlier than 0:3.2.3-59" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14644"/>
      <state state_ref="oval:org.mitre.oval:ste:10217"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34573" version="1" comment="gcc-ppc32 is earlier than 0:3.2.3-59" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14146"/>
      <state state_ref="oval:org.mitre.oval:ste:10217"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34558" version="1" comment="gcc-c++ is earlier than 0:3.2.3-59" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14776"/>
      <state state_ref="oval:org.mitre.oval:ste:10217"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34533" version="1" comment="gcc-java is earlier than 0:3.2.3-59" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14877"/>
      <state state_ref="oval:org.mitre.oval:ste:10217"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34518" version="1" comment="gcc-c++-ppc32 is earlier than 0:3.2.3-59" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14668"/>
      <state state_ref="oval:org.mitre.oval:ste:10217"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34471" version="1" comment="libstdc++-devel is earlier than 0:3.2.3-59" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14610"/>
      <state state_ref="oval:org.mitre.oval:ste:10217"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34364" version="1" comment="libgcj is earlier than 0:3.2.3-59" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14800"/>
      <state state_ref="oval:org.mitre.oval:ste:10217"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34329" version="1" comment="gcc-gnat is earlier than 0:3.2.3-59" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14920"/>
      <state state_ref="oval:org.mitre.oval:ste:10217"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34315" version="1" comment="libf2c is earlier than 0:3.2.3-59" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14613"/>
      <state state_ref="oval:org.mitre.oval:ste:10217"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34287" version="1" comment="gcc-objc is earlier than 0:3.2.3-59" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14727"/>
      <state state_ref="oval:org.mitre.oval:ste:10217"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34188" version="1" comment="libobjc is earlier than 0:3.2.3-59" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14780"/>
      <state state_ref="oval:org.mitre.oval:ste:10217"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34120" version="1" comment="libgnat is earlier than 0:3.2.3-59" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14094"/>
      <state state_ref="oval:org.mitre.oval:ste:10217"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34111" version="1" comment="gcc is earlier than 0:3.4.6-8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14175"/>
      <state state_ref="oval:org.mitre.oval:ste:10452"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34105" version="1" comment="gcc-gnat is earlier than 0:3.4.6-8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14920"/>
      <state state_ref="oval:org.mitre.oval:ste:10452"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34100" version="1" comment="libgcj-devel is earlier than 0:3.4.6-8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14563"/>
      <state state_ref="oval:org.mitre.oval:ste:10452"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34089" version="1" comment="gcc-c++-ppc32 is earlier than 0:3.4.6-8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14668"/>
      <state state_ref="oval:org.mitre.oval:ste:10452"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34086" version="1" comment="cpp is earlier than 0:3.4.6-8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14644"/>
      <state state_ref="oval:org.mitre.oval:ste:10452"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34014" version="1" comment="libgcc is earlier than 0:3.4.6-8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14254"/>
      <state state_ref="oval:org.mitre.oval:ste:10452"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34001" version="1" comment="libstdc++ is earlier than 0:3.4.6-8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14487"/>
      <state state_ref="oval:org.mitre.oval:ste:10452"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33942" version="1" comment="libgnat is earlier than 0:3.4.6-8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14094"/>
      <state state_ref="oval:org.mitre.oval:ste:10452"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33916" version="1" comment="gcc-objc is earlier than 0:3.4.6-8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14727"/>
      <state state_ref="oval:org.mitre.oval:ste:10452"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33808" version="1" comment="libgcj-devel is earlier than 0:3.2.3-59" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14563"/>
      <state state_ref="oval:org.mitre.oval:ste:10217"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33787" version="1" comment="libf2c is earlier than 0:3.4.6-8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14613"/>
      <state state_ref="oval:org.mitre.oval:ste:10452"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33781" version="1" comment="gcc-ppc32 is earlier than 0:3.4.6-8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14146"/>
      <state state_ref="oval:org.mitre.oval:ste:10452"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33752" version="1" comment="libobjc is earlier than 0:3.4.6-8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14780"/>
      <state state_ref="oval:org.mitre.oval:ste:10452"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33732" version="1" comment="libgcc is earlier than 0:3.2.3-59" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14254"/>
      <state state_ref="oval:org.mitre.oval:ste:10217"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33641" version="1" comment="libgcj is earlier than 0:3.4.6-8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14800"/>
      <state state_ref="oval:org.mitre.oval:ste:10452"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33545" version="1" comment="gcc-c++ is earlier than 0:3.4.6-8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14776"/>
      <state state_ref="oval:org.mitre.oval:ste:10452"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33437" version="1" comment="libstdc++-devel is earlier than 0:3.4.6-8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14610"/>
      <state state_ref="oval:org.mitre.oval:ste:10452"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33431" version="1" comment="gcc-g77 is earlier than 0:3.4.6-8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14428"/>
      <state state_ref="oval:org.mitre.oval:ste:10452"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33255" version="1" comment="gcc-java is earlier than 0:3.4.6-8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14877"/>
      <state state_ref="oval:org.mitre.oval:ste:10452"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31420" version="1" comment="evolution is earlier than 0:1.4.5-14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14477"/>
      <state state_ref="oval:org.mitre.oval:ste:9785"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30692" version="1" comment="evolution-devel is earlier than 0:1.4.5-14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14585"/>
      <state state_ref="oval:org.mitre.oval:ste:9785"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32017" version="1" comment="XFree86-twm is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13667"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31985" version="1" comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14045"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31972" version="1" comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14226"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31963" version="1" comment="XFree86-libs-data is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14326"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31959" version="1" comment="XFree86-tools is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13693"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31949" version="1" comment="XFree86-font-utils is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14385"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31942" version="1" comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13712"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31908" version="1" comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14260"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31905" version="1" comment="XFree86-base-fonts is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14407"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31883" version="1" comment="XFree86-Xnest is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14053"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31843" version="1" comment="XFree86-syriac-fonts is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14198"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31835" version="1" comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.13.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14169"/>
      <state state_ref="oval:org.mitre.oval:ste:9961"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31827" version="1" comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14082"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31806" version="1" comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14315"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31803" version="1" comment="XFree86-devel is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14397"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31784" version="1" comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14067"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31773" version="1" comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14364"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31767" version="1" comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.13.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14184"/>
      <state state_ref="oval:org.mitre.oval:ste:9961"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31765" version="1" comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.13.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14097"/>
      <state state_ref="oval:org.mitre.oval:ste:9961"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31764" version="1" comment="XFree86-xfs is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14311"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31761" version="1" comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.13.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14624"/>
      <state state_ref="oval:org.mitre.oval:ste:9961"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31743" version="1" comment="XFree86 is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14255"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31732" version="1" comment="XFree86-xauth is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14352"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31721" version="1" comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14288"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31705" version="1" comment="XFree86-libs is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14259"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31689" version="1" comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.13.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14595"/>
      <state state_ref="oval:org.mitre.oval:ste:9961"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31675" version="1" comment="XFree86-truetype-fonts is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14354"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31667" version="1" comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.13.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14129"/>
      <state state_ref="oval:org.mitre.oval:ste:9961"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31663" version="1" comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.13.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14089"/>
      <state state_ref="oval:org.mitre.oval:ste:9961"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31651" version="1" comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.13.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14031"/>
      <state state_ref="oval:org.mitre.oval:ste:9961"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31649" version="1" comment="XFree86-xdm is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13658"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31627" version="1" comment="XFree86-Xvfb is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13644"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31616" version="1" comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14281"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31614" version="1" comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.13.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13643"/>
      <state state_ref="oval:org.mitre.oval:ste:9961"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31574" version="1" comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14351"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31491" version="1" comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.13.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14168"/>
      <state state_ref="oval:org.mitre.oval:ste:9961"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31427" version="1" comment="xorg-x11 is earlier than 0:6.8.2-1.EL.13.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14592"/>
      <state state_ref="oval:org.mitre.oval:ste:9961"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31419" version="1" comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.13.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14553"/>
      <state state_ref="oval:org.mitre.oval:ste:9961"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31397" version="1" comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.13.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14515"/>
      <state state_ref="oval:org.mitre.oval:ste:9961"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31371" version="1" comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14127"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31310" version="1" comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14121"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31188" version="1" comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.13.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14478"/>
      <state state_ref="oval:org.mitre.oval:ste:9961"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31179" version="1" comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.13.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14580"/>
      <state state_ref="oval:org.mitre.oval:ste:9961"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31156" version="1" comment="XFree86-doc is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14406"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31036" version="1" comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.13.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14262"/>
      <state state_ref="oval:org.mitre.oval:ste:9961"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31020" version="1" comment="XFree86-sdk is earlier than 0:4.3.0-95.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14107"/>
      <state state_ref="oval:org.mitre.oval:ste:9955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30870" version="1" comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.13.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14572"/>
      <state state_ref="oval:org.mitre.oval:ste:9961"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30807" version="1" comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.13.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14291"/>
      <state state_ref="oval:org.mitre.oval:ste:9961"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1396" version="1" comment="File %windir%\System32\odbcbcp.dll is less than 3.70.11.40" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:878"/>
      <state state_ref="oval:org.mitre.oval:ste:1258"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32194" version="1" comment="mozilla-nspr-devel is earlier than 37:1.7.10-1.1.3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13716"/>
      <state state_ref="oval:org.mitre.oval:ste:10082"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32187" version="1" comment="mozilla-mail is earlier than 37:1.7.10-1.1.3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14423"/>
      <state state_ref="oval:org.mitre.oval:ste:10082"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32183" version="1" comment="mozilla-nss is earlier than 37:1.7.10-1.1.3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14069"/>
      <state state_ref="oval:org.mitre.oval:ste:10082"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32161" version="1" comment="mozilla is earlier than 37:1.7.10-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14405"/>
      <state state_ref="oval:org.mitre.oval:ste:9966"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32157" version="1" comment="mozilla-nspr-devel is earlier than 37:1.7.10-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13716"/>
      <state state_ref="oval:org.mitre.oval:ste:9966"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32155" version="1" comment="mozilla-chat is earlier than 37:1.7.10-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14196"/>
      <state state_ref="oval:org.mitre.oval:ste:9966"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32145" version="1" comment="firefox is earlier than 0:1.0.6-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10065"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32139" version="1" comment="mozilla-nss-devel is earlier than 37:1.7.10-1.1.3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14415"/>
      <state state_ref="oval:org.mitre.oval:ste:10082"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32134" version="1" comment="mozilla-js-debugger is earlier than 37:1.7.10-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13991"/>
      <state state_ref="oval:org.mitre.oval:ste:9966"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32126" version="1" comment="mozilla-nss is earlier than 37:1.7.10-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14069"/>
      <state state_ref="oval:org.mitre.oval:ste:9966"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32124" version="1" comment="mozilla is earlier than 37:1.7.10-1.1.3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14405"/>
      <state state_ref="oval:org.mitre.oval:ste:10082"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32082" version="1" comment="mozilla-chat is earlier than 37:1.7.10-1.1.3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14196"/>
      <state state_ref="oval:org.mitre.oval:ste:10082"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32043" version="1" comment="mozilla-dom-inspector is earlier than 37:1.7.10-1.1.3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13776"/>
      <state state_ref="oval:org.mitre.oval:ste:10082"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32024" version="1" comment="mozilla-mail is earlier than 37:1.7.10-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14423"/>
      <state state_ref="oval:org.mitre.oval:ste:9966"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32021" version="1" comment="mozilla-nss-devel is earlier than 37:1.7.10-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14415"/>
      <state state_ref="oval:org.mitre.oval:ste:9966"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32006" version="1" comment="mozilla-devel is earlier than 37:1.7.10-1.1.3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14231"/>
      <state state_ref="oval:org.mitre.oval:ste:10082"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31884" version="1" comment="mozilla-devel is earlier than 37:1.7.10-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14231"/>
      <state state_ref="oval:org.mitre.oval:ste:9966"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31801" version="1" comment="mozilla-nspr is earlier than 37:1.7.10-1.1.3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14160"/>
      <state state_ref="oval:org.mitre.oval:ste:10082"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31744" version="1" comment="mozilla-js-debugger is earlier than 37:1.7.10-1.1.3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13991"/>
      <state state_ref="oval:org.mitre.oval:ste:10082"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31724" version="1" comment="mozilla-dom-inspector is earlier than 37:1.7.10-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13776"/>
      <state state_ref="oval:org.mitre.oval:ste:9966"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31660" version="1" comment="mozilla-nspr is earlier than 37:1.7.10-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14160"/>
      <state state_ref="oval:org.mitre.oval:ste:9966"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39213" version="1" comment="ecryptfs-utils is earlier than 0:75-5.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15120"/>
      <state state_ref="oval:org.mitre.oval:ste:11297"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39084" version="1" comment="ecryptfs-utils-gui is earlier than 0:75-5.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15070"/>
      <state state_ref="oval:org.mitre.oval:ste:11297"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38822" version="1" comment="ecryptfs-utils-devel is earlier than 0:75-5.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15215"/>
      <state state_ref="oval:org.mitre.oval:ste:11297"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1397" version="1" check="all" comment="ImageMagick RPM earlier than 0:5.5.6-15" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <oval-def:note>The ImageMagick-* RPMs all require that the main ImageMagick RPM have the same version and release number.</oval-def:note>
      </oval-def:notes>
      <object object_ref="oval:org.mitre.oval:obj:963"/>
      <state state_ref="oval:org.mitre.oval:ste:1259"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:2952" version="1" check="at least one" comment="the version of mshtml.dll is less than 6.0.2715.400" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2767"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2950" version="1" check="at least one" comment="persistent cookies that are stored on your computer are enabled for the local machine" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1690"/>
      <state state_ref="oval:org.mitre.oval:ste:2765"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2949" version="1" check="at least one" comment="persistent cookies that are stored on your computer are enabled for the current user" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1689"/>
      <state state_ref="oval:org.mitre.oval:ste:2764"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2948" version="1" check="at least one" comment="per-session cookies (not stored) are enabled for the local machine" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1688"/>
      <state state_ref="oval:org.mitre.oval:ste:2763"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2947" version="1" check="at least one" comment="per-session cookies (not stored) are enabled for the current user" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1687"/>
      <state state_ref="oval:org.mitre.oval:ste:2762"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38304" version="1" comment="libsoup-devel is earlier than 0:2.2.1-4.el4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15129"/>
      <state state_ref="oval:org.mitre.oval:ste:11127"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38290" version="1" comment="libsoup is earlier than 0:2.2.1-4.el4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15103"/>
      <state state_ref="oval:org.mitre.oval:ste:11127"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38189" version="1" comment="libsoup is earlier than 0:2.2.98-2.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15103"/>
      <state state_ref="oval:org.mitre.oval:ste:11157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38136" version="1" comment="libsoup-devel is earlier than 0:2.2.98-2.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15129"/>
      <state state_ref="oval:org.mitre.oval:ste:11157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38097" version="1" comment="evolution28-libsoup is earlier than 0:2.2.98-5.el4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14951"/>
      <state state_ref="oval:org.mitre.oval:ste:10944"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38001" version="1" comment="evolution28-libsoup-devel is earlier than 0:2.2.98-5.el4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14798"/>
      <state state_ref="oval:org.mitre.oval:ste:10944"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31423" version="1" comment="kdenetwork-devel is earlier than 7:3.1.3-1.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14299"/>
      <state state_ref="oval:org.mitre.oval:ste:9623"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31376" version="1" comment="kdenetwork is earlier than 7:3.1.3-1.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14300"/>
      <state state_ref="oval:org.mitre.oval:ste:9623"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30184" version="1" comment="squirrelmail is earlier than 0:1.4.3a-7.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14331"/>
      <state state_ref="oval:org.mitre.oval:ste:9734"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39109" version="1" comment="gdm-docs is earlier than 1:2.16.0-56.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15107"/>
      <state state_ref="oval:org.mitre.oval:ste:11274"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38314" version="1" comment="gdm is earlier than 1:2.16.0-56.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14698"/>
      <state state_ref="oval:org.mitre.oval:ste:11274"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30722" version="1" comment="libpcap is earlier than 14:0.7.2-7.E3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13587"/>
      <state state_ref="oval:org.mitre.oval:ste:9662"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29722" version="1" comment="tcpdump is earlier than 14:3.7.2-7.E3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14318"/>
      <state state_ref="oval:org.mitre.oval:ste:9199"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32002" version="1" comment="freeradius-mysql is earlier than 0:1.0.1-3.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14691"/>
      <state state_ref="oval:org.mitre.oval:ste:9878"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31999" version="1" comment="freeradius-postgresql is earlier than 0:1.0.1-3.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14475"/>
      <state state_ref="oval:org.mitre.oval:ste:9878"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31992" version="1" comment="freeradius is earlier than 0:1.0.1-3.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14420"/>
      <state state_ref="oval:org.mitre.oval:ste:9878"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31962" version="1" comment="freeradius-unixODBC is earlier than 0:1.0.1-3.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13705"/>
      <state state_ref="oval:org.mitre.oval:ste:9878"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31698" version="1" comment="freeradius is earlier than 0:1.0.1-1.1.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14420"/>
      <state state_ref="oval:org.mitre.oval:ste:10019"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31244" version="1" comment="vim-enhanced is earlier than 1:6.3.046-0.30E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14043"/>
      <state state_ref="oval:org.mitre.oval:ste:8932"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31167" version="1" comment="vim-common is earlier than 1:6.3.046-0.30E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14345"/>
      <state state_ref="oval:org.mitre.oval:ste:8932"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30858" version="1" comment="vim-X11 is earlier than 1:6.3.046-0.30E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14549"/>
      <state state_ref="oval:org.mitre.oval:ste:8932"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30519" version="1" comment="vim is earlier than 1:6.3.046-0.30E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13610"/>
      <state state_ref="oval:org.mitre.oval:ste:8932"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30321" version="1" comment="vim-minimal is earlier than 1:6.3.046-0.30E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14513"/>
      <state state_ref="oval:org.mitre.oval:ste:8932"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32192" version="1" comment="php-mysql is earlier than 0:4.3.9-3.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:9084"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32191" version="1" comment="php-pgsql is earlier than 0:4.3.2-25.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:9718"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32178" version="1" comment="php-pgsql is earlier than 0:4.3.9-3.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:9084"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32062" version="1" comment="php-devel is earlier than 0:4.3.9-3.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:9084"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32052" version="1" comment="php-xmlrpc is earlier than 0:4.3.9-3.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14445"/>
      <state state_ref="oval:org.mitre.oval:ste:9084"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32029" version="1" comment="php-ldap is earlier than 0:4.3.9-3.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:9084"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32009" version="1" comment="php-mysql is earlier than 0:4.3.2-25.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:9718"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32008" version="1" comment="php-odbc is earlier than 0:4.3.2-25.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:9718"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32000" version="1" comment="php-ncurses is earlier than 0:4.3.9-3.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14227"/>
      <state state_ref="oval:org.mitre.oval:ste:9084"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31974" version="1" comment="php is earlier than 0:4.3.9-3.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:9084"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31971" version="1" comment="php-imap is earlier than 0:4.3.2-25.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:9718"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31957" version="1" comment="php-imap is earlier than 0:4.3.9-3.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:9084"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31823" version="1" comment="php-ldap is earlier than 0:4.3.2-25.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:9718"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31771" version="1" comment="php-gd is earlier than 0:4.3.9-3.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14335"/>
      <state state_ref="oval:org.mitre.oval:ste:9084"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31734" version="1" comment="php-mbstring is earlier than 0:4.3.9-3.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13746"/>
      <state state_ref="oval:org.mitre.oval:ste:9084"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31677" version="1" comment="php-odbc is earlier than 0:4.3.9-3.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:9084"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31517" version="1" comment="php is earlier than 0:4.3.2-25.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:9718"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31503" version="1" comment="php-domxml is earlier than 0:4.3.9-3.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14496"/>
      <state state_ref="oval:org.mitre.oval:ste:9084"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31386" version="1" comment="php-pear is earlier than 0:4.3.9-3.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14130"/>
      <state state_ref="oval:org.mitre.oval:ste:9084"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31200" version="1" comment="php-snmp is earlier than 0:4.3.9-3.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14508"/>
      <state state_ref="oval:org.mitre.oval:ste:9084"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31197" version="1" comment="php-devel is earlier than 0:4.3.2-25.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:9718"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33777" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.10.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:10259"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33775" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-42.0.10.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:10259"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33751" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.10.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:10259"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33668" version="1" comment="kernel is earlier than 0:2.6.9-42.0.10.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10259"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33639" version="1" comment="kernel-devel is earlier than 0:2.6.9-42.0.10.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10259"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33564" version="1" comment="kernel-doc is earlier than 0:2.6.9-42.0.10.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10259"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33538" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-42.0.10.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:10259"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33494" version="1" comment="kernel-smp is earlier than 0:2.6.9-42.0.10.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:10259"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33264" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.10.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:10259"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36464" version="1" comment="hpijs is earlier than 0:1.3-32.1.13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14471"/>
      <state state_ref="oval:org.mitre.oval:ste:10618"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36363" version="1" comment="ghostscript-gtk is earlier than 0:8.15.2-9.1.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14614"/>
      <state state_ref="oval:org.mitre.oval:ste:10581"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36326" version="1" comment="ghostscript-devel is earlier than 0:7.05-32.1.13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14524"/>
      <state state_ref="oval:org.mitre.oval:ste:9896"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36325" version="1" comment="ghostscript-devel is earlier than 0:8.15.2-9.1.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14524"/>
      <state state_ref="oval:org.mitre.oval:ste:10581"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36149" version="1" comment="ghostscript is earlier than 0:7.05-32.1.13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14541"/>
      <state state_ref="oval:org.mitre.oval:ste:9896"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36082" version="1" comment="ghostscript-devel is earlier than 0:7.07-33.2.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14524"/>
      <state state_ref="oval:org.mitre.oval:ste:10879"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36061" version="1" comment="ghostscript-gtk is earlier than 0:7.07-33.2.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14614"/>
      <state state_ref="oval:org.mitre.oval:ste:10879"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35805" version="1" comment="ghostscript is earlier than 0:8.15.2-9.1.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14541"/>
      <state state_ref="oval:org.mitre.oval:ste:10581"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35551" version="1" comment="ghostscript is earlier than 0:7.07-33.2.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14541"/>
      <state state_ref="oval:org.mitre.oval:ste:10879"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1407" version="1" check="at least one" comment="the version of rpcss.dll is less than 5.0.2195.6906" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:709"/>
      <state state_ref="oval:org.mitre.oval:ste:1266"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39743" version="1" comment="kdelibs-devel is earlier than 6:3.3.1-17.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14126"/>
      <state state_ref="oval:org.mitre.oval:ste:11451"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39677" version="1" comment="kdelibs-apidocs is earlier than 6:3.5.4-25.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15138"/>
      <state state_ref="oval:org.mitre.oval:ste:11171"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39605" version="1" comment="kdelibs-devel is earlier than 6:3.5.4-25.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14126"/>
      <state state_ref="oval:org.mitre.oval:ste:11171"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39402" version="1" comment="kdelibs is earlier than 6:3.3.1-17.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13933"/>
      <state state_ref="oval:org.mitre.oval:ste:11451"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38993" version="1" comment="kdelibs is earlier than 6:3.5.4-25.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13933"/>
      <state state_ref="oval:org.mitre.oval:ste:11171"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1426" version="1" check="at least one" comment="kdelibs version is less than 3.1.3-6.4" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:972"/>
      <state state_ref="oval:org.mitre.oval:ste:1285"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1425" version="1" check="at least one" comment="/usr/bin/telnet is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:814"/>
      <state state_ref="oval:org.mitre.oval:ste:1284"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1424" version="1" check="at least one" comment="/usr/bin/telnet is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:814"/>
      <state state_ref="oval:org.mitre.oval:ste:1283"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1423" version="1" check="at least one" comment="/usr/bin/telnet is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:814"/>
      <state state_ref="oval:org.mitre.oval:ste:1282"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1422" version="1" check="at least one" comment="/usr/kerberos/bin/telnet is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:971"/>
      <state state_ref="oval:org.mitre.oval:ste:1281"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1421" version="1" check="at least one" comment="/usr/kerberos/bin/telnet is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:971"/>
      <state state_ref="oval:org.mitre.oval:ste:1280"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1420" version="1" check="at least one" comment="/usr/kerberos/bin/telnet is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:971"/>
      <state state_ref="oval:org.mitre.oval:ste:1279"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1419" version="1" check="at least one" comment="/usr/bin/rlogin is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:970"/>
      <state state_ref="oval:org.mitre.oval:ste:1278"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1418" version="1" check="at least one" comment="/usr/bin/rlogin is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:970"/>
      <state state_ref="oval:org.mitre.oval:ste:1277"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1417" version="1" check="at least one" comment="/usr/bin/rlogin is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:970"/>
      <state state_ref="oval:org.mitre.oval:ste:1276"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1416" version="1" check="at least one" comment="/usr/kerberos/bin/rlogin is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:969"/>
      <state state_ref="oval:org.mitre.oval:ste:1275"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1415" version="1" check="at least one" comment="/usr/kerberos/bin/rlogin is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:969"/>
      <state state_ref="oval:org.mitre.oval:ste:1274"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1414" version="1" check="at least one" comment="/usr/kerberos/bin/rlogin is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:969"/>
      <state state_ref="oval:org.mitre.oval:ste:1273"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1413" version="1" check="at least one" comment="/usr/bin/ssh is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:968"/>
      <state state_ref="oval:org.mitre.oval:ste:1272"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1412" version="1" check="at least one" comment="/usr/bin/ssh is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:968"/>
      <state state_ref="oval:org.mitre.oval:ste:1271"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1411" version="1" check="at least one" comment="/usr/bin/ssh is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:968"/>
      <state state_ref="oval:org.mitre.oval:ste:1270"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1410" version="1" check="at least one" comment="/usr/bin/kmail is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:967"/>
      <state state_ref="oval:org.mitre.oval:ste:1269"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1409" version="1" check="at least one" comment="/usr/bin/kmail is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:967"/>
      <state state_ref="oval:org.mitre.oval:ste:1268"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1408" version="1" check="at least one" comment="/usr/bin/kmail is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:967"/>
      <state state_ref="oval:org.mitre.oval:ste:1267"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31533" version="1" comment="slocate is earlier than 0:2.7-3.RHEL3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14141"/>
      <state state_ref="oval:org.mitre.oval:ste:9582"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31470" version="1" comment="slocate is earlier than 0:2.7-13.el4.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14141"/>
      <state state_ref="oval:org.mitre.oval:ste:9900"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34743" version="1" comment="cman-devel is earlier than 0:2.0.64-1.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14802"/>
      <state state_ref="oval:org.mitre.oval:ste:10516"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34252" version="1" comment="cman is earlier than 0:2.0.64-1.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14620"/>
      <state state_ref="oval:org.mitre.oval:ste:10516"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31102" version="1" comment="glibc-profile is earlier than 0:2.3.2-95.30" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14243"/>
      <state state_ref="oval:org.mitre.oval:ste:9750"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31074" version="1" comment="glibc-headers is earlier than 0:2.3.2-95.30" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13936"/>
      <state state_ref="oval:org.mitre.oval:ste:9750"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31055" version="1" comment="nptl-devel is earlier than 0:2.3.2-95.30" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14095"/>
      <state state_ref="oval:org.mitre.oval:ste:9750"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31018" version="1" comment="glibc-devel is earlier than 0:2.3.2-95.30" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14346"/>
      <state state_ref="oval:org.mitre.oval:ste:9750"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30967" version="1" comment="glibc-common is earlier than 0:2.3.2-95.30" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14374"/>
      <state state_ref="oval:org.mitre.oval:ste:9750"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30926" version="1" comment="glibc is earlier than 0:2.3.2-95.30" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14142"/>
      <state state_ref="oval:org.mitre.oval:ste:9750"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30469" version="1" comment="nscd is earlier than 0:2.3.2-95.30" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14360"/>
      <state state_ref="oval:org.mitre.oval:ste:9750"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30313" version="1" comment="glibc-utils is earlier than 0:2.3.2-95.30" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14059"/>
      <state state_ref="oval:org.mitre.oval:ste:9750"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31795" version="1" comment="sysreport is earlier than 0:1.3.7.2-6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14430"/>
      <state state_ref="oval:org.mitre.oval:ste:9977"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31426" version="1" comment="sysreport is earlier than 0:1.3.15-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14430"/>
      <state state_ref="oval:org.mitre.oval:ste:9843"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34426" version="1" comment="arpwatch is earlier than 14:2.1a13-12.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14116"/>
      <state state_ref="oval:org.mitre.oval:ste:10428"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34317" version="1" comment="libpcap is earlier than 14:0.8.3-12.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13587"/>
      <state state_ref="oval:org.mitre.oval:ste:10414"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34286" version="1" comment="arpwatch is earlier than 14:2.1a13-18.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14116"/>
      <state state_ref="oval:org.mitre.oval:ste:10417"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34191" version="1" comment="libpcap-devel is earlier than 14:0.9.4-11.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14024"/>
      <state state_ref="oval:org.mitre.oval:ste:10069"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34045" version="1" comment="libpcap is earlier than 14:0.9.4-11.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13587"/>
      <state state_ref="oval:org.mitre.oval:ste:10069"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33937" version="1" comment="tcpdump is earlier than 14:3.9.4-11.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14318"/>
      <state state_ref="oval:org.mitre.oval:ste:10526"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33439" version="1" comment="tcpdump is earlier than 14:3.8.2-12.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14318"/>
      <state state_ref="oval:org.mitre.oval:ste:10522"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32980" version="1" comment="krb5-libs is earlier than 0:1.3.4-33" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14395"/>
      <state state_ref="oval:org.mitre.oval:ste:9290"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32887" version="1" comment="krb5 is earlier than 0:1.3.4-33" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14120"/>
      <state state_ref="oval:org.mitre.oval:ste:9290"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32806" version="1" comment="krb5-devel is earlier than 0:1.3.4-33" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14100"/>
      <state state_ref="oval:org.mitre.oval:ste:9290"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32772" version="1" comment="krb5-server is earlier than 0:1.3.4-33" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14452"/>
      <state state_ref="oval:org.mitre.oval:ste:9290"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32665" version="1" comment="krb5-workstation is earlier than 0:1.3.4-33" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14279"/>
      <state state_ref="oval:org.mitre.oval:ste:9290"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31840" version="1" comment="HelixPlayer is earlier than 1:1.0.5-0.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14632"/>
      <state state_ref="oval:org.mitre.oval:ste:9914"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39192" version="1" comment="libvorbis-devel is earlier than 1:1.1.2-3.el5_3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14840"/>
      <state state_ref="oval:org.mitre.oval:ste:10951"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39170" version="1" comment="libvorbis-devel is earlier than 1:1.0-11.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14840"/>
      <state state_ref="oval:org.mitre.oval:ste:11315"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39166" version="1" comment="libvorbis is earlier than 1:1.1.2-3.el5_3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14657"/>
      <state state_ref="oval:org.mitre.oval:ste:10951"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38909" version="1" comment="libvorbis is earlier than 1:1.1.0-3.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14657"/>
      <state state_ref="oval:org.mitre.oval:ste:11175"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38645" version="1" comment="libvorbis-devel is earlier than 1:1.1.0-3.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14840"/>
      <state state_ref="oval:org.mitre.oval:ste:11175"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38631" version="1" comment="libvorbis is earlier than 1:1.0-11.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14657"/>
      <state state_ref="oval:org.mitre.oval:ste:11315"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32079" version="1" comment="mysql is earlier than 0:4.1.12-3.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14355"/>
      <state state_ref="oval:org.mitre.oval:ste:9217"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32027" version="1" comment="mysql-server is earlier than 0:4.1.12-3.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14342"/>
      <state state_ref="oval:org.mitre.oval:ste:9217"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31928" version="1" comment="mysql-devel is earlier than 0:4.1.12-3.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14481"/>
      <state state_ref="oval:org.mitre.oval:ste:9217"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31694" version="1" comment="mysql-bench is earlier than 0:4.1.12-3.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14400"/>
      <state state_ref="oval:org.mitre.oval:ste:9217"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32313" version="1" comment="gtk2 is earlier than 0:2.4.13-18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14106"/>
      <state state_ref="oval:org.mitre.oval:ste:10093"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32250" version="1" comment="gtk2-devel is earlier than 0:2.4.13-18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14350"/>
      <state state_ref="oval:org.mitre.oval:ste:10093"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32214" version="1" comment="gtk2 is earlier than 0:2.2.4-19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14106"/>
      <state state_ref="oval:org.mitre.oval:ste:9957"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32156" version="1" comment="gtk2-devel is earlier than 0:2.2.4-19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14350"/>
      <state state_ref="oval:org.mitre.oval:ste:9957"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38484" version="1" comment="perl-DBD-Pg is earlier than 0:1.49-2.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15165"/>
      <state state_ref="oval:org.mitre.oval:ste:11112"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30539" version="1" comment="rsync is earlier than 0:2.5.7-4.3E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14274"/>
      <state state_ref="oval:org.mitre.oval:ste:9522"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40333" version="1" comment="krb5-workstation is earlier than 0:1.6.1-36.el5_5.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14279"/>
      <state state_ref="oval:org.mitre.oval:ste:11275"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40289" version="1" comment="krb5-libs is earlier than 0:1.6.1-36.el5_5.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14395"/>
      <state state_ref="oval:org.mitre.oval:ste:11275"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40224" version="1" comment="krb5 is earlier than 0:1.6.1-36.el5_5.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14120"/>
      <state state_ref="oval:org.mitre.oval:ste:11275"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40134" version="1" comment="krb5-server is earlier than 0:1.6.1-36.el5_5.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14452"/>
      <state state_ref="oval:org.mitre.oval:ste:11275"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39948" version="1" comment="krb5-devel is earlier than 0:1.6.1-36.el5_5.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14100"/>
      <state state_ref="oval:org.mitre.oval:ste:11275"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38767" version="1" comment="kdelibs is earlier than 6:3.1.3-6.13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13933"/>
      <state state_ref="oval:org.mitre.oval:ste:10927"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38487" version="1" comment="kdelibs-devel is earlier than 6:3.1.3-6.13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14126"/>
      <state state_ref="oval:org.mitre.oval:ste:10927"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33750" version="1" comment="busybox is earlier than 0:1.00.rc1-7.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14087"/>
      <state state_ref="oval:org.mitre.oval:ste:10274"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33230" version="1" comment="busybox-anaconda is earlier than 0:1.00.rc1-7.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14307"/>
      <state state_ref="oval:org.mitre.oval:ste:10274"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32725" version="1" comment="mailman is earlier than 3:2.1.5.1-25.rhel3.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14521"/>
      <state state_ref="oval:org.mitre.oval:ste:9686"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32480" version="1" comment="mailman is earlier than 3:2.1.5.1-34.rhel4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14521"/>
      <state state_ref="oval:org.mitre.oval:ste:9856"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39479" version="1" comment="xen-libs is earlier than 0:3.0.3-94.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14810"/>
      <state state_ref="oval:org.mitre.oval:ste:11188"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39042" version="1" comment="xen-devel is earlier than 0:3.0.3-94.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14567"/>
      <state state_ref="oval:org.mitre.oval:ste:11188"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38860" version="1" comment="xen is earlier than 0:3.0.3-94.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14646"/>
      <state state_ref="oval:org.mitre.oval:ste:11188"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30465" version="1" comment="mod_ssl is earlier than 1:2.0.46-26.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:9618"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30309" version="1" comment="httpd is earlier than 0:2.0.46-26.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:9396"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30072" version="1" comment="httpd-devel is earlier than 0:2.0.46-26.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:9396"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32691" version="1" comment="perl-suidperl is earlier than 3:5.8.5-36.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13815"/>
      <state state_ref="oval:org.mitre.oval:ste:10185"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32640" version="1" comment="perl is earlier than 3:5.8.5-36.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14460"/>
      <state state_ref="oval:org.mitre.oval:ste:10185"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1430" version="1" check="at least one" comment="ipsec-tools version is less than 0.2.5-0.4" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:975"/>
      <state state_ref="oval:org.mitre.oval:ste:1289"/>
    </rpminfo_test>
    <inetlisteningservers_test id="oval:org.mitre.oval:tst:1429" version="2" check="at least one" comment="racoon is listening on the network" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:974"/>
      <state state_ref="oval:org.mitre.oval:ste:1288"/>
    </inetlisteningservers_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31922" version="1" comment="kdelibs-devel is earlier than 6:3.3.1-3.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14126"/>
      <state state_ref="oval:org.mitre.oval:ste:9890"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31875" version="1" comment="kdelibs is earlier than 6:3.3.1-3.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13933"/>
      <state state_ref="oval:org.mitre.oval:ste:9890"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38089" version="1" comment="tog-pegasus-devel is earlier than 2:2.7.0-2.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15071"/>
      <state state_ref="oval:org.mitre.oval:ste:10747"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38022" version="1" comment="tog-pegasus is earlier than 2:2.7.0-2.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14965"/>
      <state state_ref="oval:org.mitre.oval:ste:10747"/>
    </rpminfo_test>
    <patch_test id="oval:org.mitre.oval:tst:4130" version="1" check="at least one" comment="Patch 112785-50 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1996"/>
      <state state_ref="oval:org.mitre.oval:ste:3193"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3997" version="1" check="at least one" comment="Patch 119059-05 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2544"/>
      <state state_ref="oval:org.mitre.oval:ste:3924"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:3963" version="1" check="at least one" comment="File Xsun SUID" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2350"/>
      <state state_ref="oval:org.mitre.oval:ste:3519"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3558" version="1" check="at least one" comment="File Xprt SUID" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1927"/>
      <state state_ref="oval:org.mitre.oval:ste:3222"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:3529" version="1" check="at least one" comment="Patch 119060-05 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2024"/>
      <state state_ref="oval:org.mitre.oval:ste:3142"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3404" version="1" check="at least one" comment="Patch 112786-39 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2362"/>
      <state state_ref="oval:org.mitre.oval:ste:3016"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3400" version="1" check="at least one" comment="Patch 108652-93 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2405"/>
      <state state_ref="oval:org.mitre.oval:ste:3420"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3355" version="1" check="at least one" comment="Patch 108653-82 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2007"/>
      <state state_ref="oval:org.mitre.oval:ste:3126"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:3178" version="1" check="at least one" comment="File Xsun SGID and executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2350"/>
      <state state_ref="oval:org.mitre.oval:ste:3943"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40323" version="1" comment="evolution28-pango-devel is earlier than 0:1.14.9-13.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15030"/>
      <state state_ref="oval:org.mitre.oval:ste:11501"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40189" version="1" comment="pango is earlier than 0:1.14.9-8.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15101"/>
      <state state_ref="oval:org.mitre.oval:ste:11518"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40152" version="1" comment="pango-devel is earlier than 0:1.2.5-10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15280"/>
      <state state_ref="oval:org.mitre.oval:ste:10899"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40132" version="1" comment="pango-devel is earlier than 0:1.14.9-8.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15280"/>
      <state state_ref="oval:org.mitre.oval:ste:11518"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39891" version="1" comment="pango is earlier than 0:1.6.0-16.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15101"/>
      <state state_ref="oval:org.mitre.oval:ste:11022"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39573" version="1" comment="pango-devel is earlier than 0:1.6.0-16.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15280"/>
      <state state_ref="oval:org.mitre.oval:ste:11022"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39360" version="1" comment="evolution28-pango is earlier than 0:1.14.9-13.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15094"/>
      <state state_ref="oval:org.mitre.oval:ste:11501"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39329" version="1" comment="pango is earlier than 0:1.2.5-10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15101"/>
      <state state_ref="oval:org.mitre.oval:ste:10899"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30221" version="1" comment="rsync is earlier than 0:2.5.7-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14274"/>
      <state state_ref="oval:org.mitre.oval:ste:8948"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39751" version="1" comment="libpurple-perl is earlier than 0:2.6.3-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15144"/>
      <state state_ref="oval:org.mitre.oval:ste:11443"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39729" version="1" comment="libpurple-perl is earlier than 0:2.6.3-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15144"/>
      <state state_ref="oval:org.mitre.oval:ste:11199"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39728" version="1" comment="pidgin is earlier than 0:2.6.3-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15157"/>
      <state state_ref="oval:org.mitre.oval:ste:11443"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39708" version="1" comment="finch-devel is earlier than 0:2.6.3-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15074"/>
      <state state_ref="oval:org.mitre.oval:ste:11199"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39606" version="1" comment="libpurple-tcl is earlier than 0:2.6.3-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14238"/>
      <state state_ref="oval:org.mitre.oval:ste:11199"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39584" version="1" comment="libpurple-devel is earlier than 0:2.6.3-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15112"/>
      <state state_ref="oval:org.mitre.oval:ste:11443"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39508" version="1" comment="pidgin-perl is earlier than 0:2.6.3-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14202"/>
      <state state_ref="oval:org.mitre.oval:ste:11443"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39458" version="1" comment="pidgin-devel is earlier than 0:2.6.3-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14642"/>
      <state state_ref="oval:org.mitre.oval:ste:11199"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39454" version="1" comment="pidgin is earlier than 0:2.6.3-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15157"/>
      <state state_ref="oval:org.mitre.oval:ste:11199"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39406" version="1" comment="libpurple-devel is earlier than 0:2.6.3-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15112"/>
      <state state_ref="oval:org.mitre.oval:ste:11199"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39392" version="1" comment="finch is earlier than 0:2.6.3-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15156"/>
      <state state_ref="oval:org.mitre.oval:ste:11443"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39382" version="1" comment="finch is earlier than 0:2.6.3-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15156"/>
      <state state_ref="oval:org.mitre.oval:ste:11199"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39368" version="1" comment="libpurple is earlier than 0:2.6.3-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14700"/>
      <state state_ref="oval:org.mitre.oval:ste:11199"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39342" version="1" comment="finch-devel is earlier than 0:2.6.3-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15074"/>
      <state state_ref="oval:org.mitre.oval:ste:11443"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39335" version="1" comment="libpurple is earlier than 0:2.6.3-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14700"/>
      <state state_ref="oval:org.mitre.oval:ste:11443"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39309" version="1" comment="pidgin-perl is earlier than 0:2.6.3-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14202"/>
      <state state_ref="oval:org.mitre.oval:ste:11199"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39298" version="1" comment="pidgin-devel is earlier than 0:2.6.3-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14642"/>
      <state state_ref="oval:org.mitre.oval:ste:11443"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39174" version="1" comment="libpurple-tcl is earlier than 0:2.6.3-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14238"/>
      <state state_ref="oval:org.mitre.oval:ste:11443"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33333" version="1" comment="libgsf is earlier than 0:1.10.1-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14693"/>
      <state state_ref="oval:org.mitre.oval:ste:9920"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33304" version="1" comment="libgsf is earlier than 0:1.6.0-7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14693"/>
      <state state_ref="oval:org.mitre.oval:ste:10307"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33257" version="1" comment="libgsf-devel is earlier than 0:1.10.1-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14636"/>
      <state state_ref="oval:org.mitre.oval:ste:9920"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32479" version="1" comment="libgsf-devel is earlier than 0:1.6.0-7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14636"/>
      <state state_ref="oval:org.mitre.oval:ste:10307"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31930" version="1" comment="sysreport is earlier than 0:1.3.7.2-9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14430"/>
      <state state_ref="oval:org.mitre.oval:ste:9422"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31910" version="1" comment="sysreport is earlier than 0:1.3.15-5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14430"/>
      <state state_ref="oval:org.mitre.oval:ste:9584"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1431" version="1" check="at least one" comment="squid version is less than 2.5.STABLE3-5.3E" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:976"/>
      <state state_ref="oval:org.mitre.oval:ste:1290"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31389" version="1" comment="emacs is earlier than 0:21.3-19.EL.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14482"/>
      <state state_ref="oval:org.mitre.oval:ste:9661"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31379" version="1" comment="emacs is earlier than 0:21.3-4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14482"/>
      <state state_ref="oval:org.mitre.oval:ste:9527"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31358" version="1" comment="xemacs is earlier than 0:21.4.13-8.ent.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13695"/>
      <state state_ref="oval:org.mitre.oval:ste:9574"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31334" version="1" comment="xemacs-el is earlier than 0:21.4.13-8.ent.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14025"/>
      <state state_ref="oval:org.mitre.oval:ste:9574"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31328" version="1" comment="emacs-common is earlier than 0:21.3-19.EL.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14297"/>
      <state state_ref="oval:org.mitre.oval:ste:9661"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31326" version="1" comment="xemacs-el is earlier than 0:21.4.15-10.EL.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14025"/>
      <state state_ref="oval:org.mitre.oval:ste:9893"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31288" version="1" comment="emacs-leim is earlier than 0:21.3-19.EL.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14605"/>
      <state state_ref="oval:org.mitre.oval:ste:9661"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31186" version="1" comment="emacs-el is earlier than 0:21.3-4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14413"/>
      <state state_ref="oval:org.mitre.oval:ste:9527"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31171" version="1" comment="xemacs is earlier than 0:21.4.15-10.EL.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13695"/>
      <state state_ref="oval:org.mitre.oval:ste:9893"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31124" version="1" comment="emacs-nox is earlier than 0:21.3-19.EL.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14511"/>
      <state state_ref="oval:org.mitre.oval:ste:9661"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31061" version="1" comment="xemacs-info is earlier than 0:21.4.13-8.ent.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14495"/>
      <state state_ref="oval:org.mitre.oval:ste:9574"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31034" version="1" comment="xemacs-common is earlier than 0:21.4.15-10.EL.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14222"/>
      <state state_ref="oval:org.mitre.oval:ste:9893"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30965" version="1" comment="xemacs-info is earlier than 0:21.4.15-10.EL.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14495"/>
      <state state_ref="oval:org.mitre.oval:ste:9893"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30860" version="1" comment="emacs-el is earlier than 0:21.3-19.EL.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14413"/>
      <state state_ref="oval:org.mitre.oval:ste:9661"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30840" version="1" comment="xemacs-nox is earlier than 0:21.4.15-10.EL.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14447"/>
      <state state_ref="oval:org.mitre.oval:ste:9893"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30740" version="1" comment="emacs-leim is earlier than 0:21.3-4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14605"/>
      <state state_ref="oval:org.mitre.oval:ste:9527"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31316" version="1" comment="vim is earlier than 1:6.3.046-0.40E.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13610"/>
      <state state_ref="oval:org.mitre.oval:ste:9660"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31312" version="1" comment="vim-X11 is earlier than 1:6.3.046-0.40E.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14549"/>
      <state state_ref="oval:org.mitre.oval:ste:9660"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31254" version="1" comment="vim is earlier than 1:6.3.046-0.30E.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13610"/>
      <state state_ref="oval:org.mitre.oval:ste:9114"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31180" version="1" comment="vim-minimal is earlier than 1:6.3.046-0.40E.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14513"/>
      <state state_ref="oval:org.mitre.oval:ste:9660"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31163" version="1" comment="vim-common is earlier than 1:6.3.046-0.40E.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14345"/>
      <state state_ref="oval:org.mitre.oval:ste:9660"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31161" version="1" comment="vim-enhanced is earlier than 1:6.3.046-0.40E.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14043"/>
      <state state_ref="oval:org.mitre.oval:ste:9660"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31098" version="1" comment="vim-minimal is earlier than 1:6.3.046-0.30E.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14513"/>
      <state state_ref="oval:org.mitre.oval:ste:9114"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30910" version="1" comment="vim-enhanced is earlier than 1:6.3.046-0.30E.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14043"/>
      <state state_ref="oval:org.mitre.oval:ste:9114"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30835" version="1" comment="vim-X11 is earlier than 1:6.3.046-0.30E.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14549"/>
      <state state_ref="oval:org.mitre.oval:ste:9114"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30437" version="1" comment="vim-common is earlier than 1:6.3.046-0.30E.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14345"/>
      <state state_ref="oval:org.mitre.oval:ste:9114"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1433" version="1" check="at least one" comment="/bin/mount is world-executable AND Set-UID" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:977"/>
      <state state_ref="oval:org.mitre.oval:ste:1292"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1432" version="1" check="at least one" comment="/bin/mount is world-executable AND Set-UID" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:977"/>
      <state state_ref="oval:org.mitre.oval:ste:1291"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32716" version="1" comment="openmotif is earlier than 0:2.2.3-5.RHEL3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14408"/>
      <state state_ref="oval:org.mitre.oval:ste:9954"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32681" version="1" comment="openmotif-devel is earlier than 0:2.2.3-5.RHEL3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14324"/>
      <state state_ref="oval:org.mitre.oval:ste:9954"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32680" version="1" comment="openmotif21 is earlier than 0:2.1.30-9.RHEL3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14483"/>
      <state state_ref="oval:org.mitre.oval:ste:10059"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32612" version="1" comment="openmotif is earlier than 0:2.2.3-10.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14408"/>
      <state state_ref="oval:org.mitre.oval:ste:10026"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32468" version="1" comment="openmotif-devel is earlier than 0:2.2.3-10.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14324"/>
      <state state_ref="oval:org.mitre.oval:ste:10026"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32013" version="1" comment="openmotif21 is earlier than 0:2.1.30-11.RHEL4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14483"/>
      <state state_ref="oval:org.mitre.oval:ste:9755"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31219" version="1" comment="libtiff is earlier than 0:3.5.7-22.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14341"/>
      <state state_ref="oval:org.mitre.oval:ste:9591"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31174" version="1" comment="libtiff is earlier than 0:3.6.1-8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14341"/>
      <state state_ref="oval:org.mitre.oval:ste:8901"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30884" version="1" comment="libtiff-devel is earlier than 0:3.6.1-8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14174"/>
      <state state_ref="oval:org.mitre.oval:ste:8901"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30876" version="1" comment="libtiff-devel is earlier than 0:3.5.7-22.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14174"/>
      <state state_ref="oval:org.mitre.oval:ste:9591"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1436" version="1" check="at least one" comment="kernel version is less than 2.4.21-9.0.3.EL" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:980"/>
      <state state_ref="oval:org.mitre.oval:ste:1295"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1435" version="1" check="at least one" comment="kernel-smp version is less than 2.4.21-9.0.3.EL" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:979"/>
      <state state_ref="oval:org.mitre.oval:ste:1294"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1434" version="1" check="at least one" comment="kernel-hugemem version is less than 2.4.21-9.0.3.EL" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:978"/>
      <state state_ref="oval:org.mitre.oval:ste:1293"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32841" version="1" comment="kdebase is earlier than 6:3.3.1-5.13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14264"/>
      <state state_ref="oval:org.mitre.oval:ste:10232"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32807" version="1" comment="kdebase-devel is earlier than 6:3.3.1-5.13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14419"/>
      <state state_ref="oval:org.mitre.oval:ste:10232"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40014" version="1" comment="sudo is earlier than 0:1.7.2p1-6.el5_5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14246"/>
      <state state_ref="oval:org.mitre.oval:ste:11465"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1437" version="1" check="at least one" comment="File %windir%\System32\nsiislog.dll is less than 4.1.0.3932" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:960"/>
      <state state_ref="oval:org.mitre.oval:ste:1296"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35408" version="1" comment="nfs-utils-lib is earlier than 0:1.0.8-7.2.z2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14665"/>
      <state state_ref="oval:org.mitre.oval:ste:10355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35367" version="1" comment="nfs-utils-lib is earlier than 0:1.0.6-8.z1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14665"/>
      <state state_ref="oval:org.mitre.oval:ste:10701"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35168" version="1" comment="nfs-utils-lib-devel is earlier than 0:1.0.8-7.2.z2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15073"/>
      <state state_ref="oval:org.mitre.oval:ste:10355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34626" version="1" comment="nfs-utils-lib-devel is earlier than 0:1.0.6-8.z1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15073"/>
      <state state_ref="oval:org.mitre.oval:ste:10701"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32891" version="1" comment="ncompress is earlier than 0:4.2.4-39.rhel3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14180"/>
      <state state_ref="oval:org.mitre.oval:ste:10174"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32529" version="1" comment="ncompress is earlier than 0:4.2.4-43.rhel4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14180"/>
      <state state_ref="oval:org.mitre.oval:ste:9996"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38424" version="1" comment="vnc is earlier than 0:4.0-12.el4_7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15059"/>
      <state state_ref="oval:org.mitre.oval:ste:10789"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38376" version="1" comment="vnc is earlier than 0:4.0-0.beta4.1.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15059"/>
      <state state_ref="oval:org.mitre.oval:ste:10165"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38345" version="1" comment="vnc-server is earlier than 0:4.1.2-14.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14330"/>
      <state state_ref="oval:org.mitre.oval:ste:11020"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38179" version="1" comment="vnc-server is earlier than 0:4.0-12.el4_7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14330"/>
      <state state_ref="oval:org.mitre.oval:ste:10789"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38082" version="1" comment="vnc is earlier than 0:4.1.2-14.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15059"/>
      <state state_ref="oval:org.mitre.oval:ste:11020"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38057" version="1" comment="vnc-server is earlier than 0:4.0-0.beta4.1.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14330"/>
      <state state_ref="oval:org.mitre.oval:ste:10165"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1440" version="1" check="at least one" comment="File %windir%\System32\nsiislog.dll is less than 4.1.0.3931" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:960"/>
      <state state_ref="oval:org.mitre.oval:ste:1299"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1439" version="1" check="at least one" comment="Patch KB817772 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:982"/>
      <state state_ref="oval:org.mitre.oval:ste:1298"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1438" version="1" check="at least one" comment="Patch KB822343 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:981"/>
      <state state_ref="oval:org.mitre.oval:ste:1297"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39706" version="1" comment="xerces-j2-javadoc-xni is earlier than 0:2.7.1-7jpp.2.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15179"/>
      <state state_ref="oval:org.mitre.oval:ste:11302"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39659" version="1" comment="xerces-j2-demo is earlier than 0:2.7.1-7jpp.2.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15310"/>
      <state state_ref="oval:org.mitre.oval:ste:11302"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39592" version="1" comment="xerces-j2-javadoc-other is earlier than 0:2.7.1-7jpp.2.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14775"/>
      <state state_ref="oval:org.mitre.oval:ste:11302"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39495" version="1" comment="xerces-j2-javadoc-impl is earlier than 0:2.7.1-7jpp.2.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14818"/>
      <state state_ref="oval:org.mitre.oval:ste:11302"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39482" version="1" comment="xerces-j2-scripts is earlier than 0:2.7.1-7jpp.2.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14314"/>
      <state state_ref="oval:org.mitre.oval:ste:11302"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39411" version="1" comment="xerces-j2-javadoc-apis is earlier than 0:2.7.1-7jpp.2.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14948"/>
      <state state_ref="oval:org.mitre.oval:ste:11302"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38778" version="1" comment="xerces-j2 is earlier than 0:2.7.1-7jpp.2.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15189"/>
      <state state_ref="oval:org.mitre.oval:ste:11302"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36228" version="1" comment="dbus-x11 is earlier than 0:1.0.0-6.3.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14132"/>
      <state state_ref="oval:org.mitre.oval:ste:10772"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36008" version="1" comment="dbus is earlier than 0:1.0.0-6.3.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14213"/>
      <state state_ref="oval:org.mitre.oval:ste:10772"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35564" version="1" comment="dbus-devel is earlier than 0:1.0.0-6.3.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14425"/>
      <state state_ref="oval:org.mitre.oval:ste:10772"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34690" version="1" comment="libexif-devel is earlier than 0:0.5.12-5.1.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14518"/>
      <state state_ref="oval:org.mitre.oval:ste:10311"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34611" version="1" comment="libexif is earlier than 0:0.5.12-5.1.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14343"/>
      <state state_ref="oval:org.mitre.oval:ste:10311"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34381" version="1" comment="libexif-devel is earlier than 0:0.6.13-4.0.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14518"/>
      <state state_ref="oval:org.mitre.oval:ste:10484"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34026" version="1" comment="libexif is earlier than 0:0.6.13-4.0.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14343"/>
      <state state_ref="oval:org.mitre.oval:ste:10484"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34656" version="1" comment="kdebase-devel is earlier than 6:3.1.3-5.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14419"/>
      <state state_ref="oval:org.mitre.oval:ste:10338"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34519" version="1" comment="kdebase is earlier than 6:3.5.4-13.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14264"/>
      <state state_ref="oval:org.mitre.oval:ste:10312"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34351" version="1" comment="kdebase-devel is earlier than 6:3.5.4-13.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14419"/>
      <state state_ref="oval:org.mitre.oval:ste:10312"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34288" version="1" comment="kdebase is earlier than 6:3.3.1-5.19.rhel4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14264"/>
      <state state_ref="oval:org.mitre.oval:ste:10170"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34248" version="1" comment="kdebase is earlier than 6:3.1.3-5.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14264"/>
      <state state_ref="oval:org.mitre.oval:ste:10338"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34025" version="1" comment="kdebase-devel is earlier than 6:3.3.1-5.19.rhel4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14419"/>
      <state state_ref="oval:org.mitre.oval:ste:10170"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1444" version="2" check="at least one" comment="File %windir%\System32\w3svc.dll is less than 5.0.2195.6672" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:496"/>
      <state state_ref="oval:org.mitre.oval:ste:1302"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1443" version="1" check="at least one" comment="Patch Q811114 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:985"/>
      <state state_ref="oval:org.mitre.oval:ste:1301"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39686" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.16.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:10638"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39607" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-89.0.16.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:10638"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39593" version="1" comment="kernel-xenU is earlier than 0:2.6.9-89.0.16.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14301"/>
      <state state_ref="oval:org.mitre.oval:ste:10638"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39587" version="1" comment="kernel-doc is earlier than 0:2.6.9-89.0.16.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10638"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39560" version="1" comment="kernel-devel is earlier than 0:2.6.9-89.0.16.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10638"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39557" version="1" comment="kernel is earlier than 0:2.6.9-89.0.16.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10638"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39554" version="1" comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.16.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14060"/>
      <state state_ref="oval:org.mitre.oval:ste:10638"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39549" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-89.0.16.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:10638"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39548" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.16.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:10638"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39415" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.16.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:10638"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38910" version="1" comment="kernel-smp is earlier than 0:2.6.9-89.0.16.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:10638"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37295" version="1" comment="freetype-demos is earlier than 0:2.1.9-8.el4.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14713"/>
      <state state_ref="oval:org.mitre.oval:ste:10666"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37292" version="1" comment="freetype-devel is earlier than 0:2.1.9-8.el4.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14561"/>
      <state state_ref="oval:org.mitre.oval:ste:10666"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36978" version="1" comment="freetype is earlier than 0:2.1.9-8.el4.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14103"/>
      <state state_ref="oval:org.mitre.oval:ste:10666"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36928" version="1" comment="freetype-devel is earlier than 0:2.1.4-10.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14561"/>
      <state state_ref="oval:org.mitre.oval:ste:10848"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36877" version="1" comment="freetype-utils is earlier than 0:2.1.9-8.el4.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14720"/>
      <state state_ref="oval:org.mitre.oval:ste:10666"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36608" version="1" comment="freetype is earlier than 0:2.1.4-10.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14103"/>
      <state state_ref="oval:org.mitre.oval:ste:10848"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1446" version="1" check="at least one" comment="File %windir%\System32\code.asp is less than 4.0.1381.279" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:987"/>
      <state state_ref="oval:org.mitre.oval:ste:1304"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1445" version="1" check="at least one" comment="Patch Q232449 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:986"/>
      <state state_ref="oval:org.mitre.oval:ste:1303"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38121" version="1" comment="xterm is earlier than 0:179-11.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14838"/>
      <state state_ref="oval:org.mitre.oval:ste:10893"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38031" version="1" comment="xterm is earlier than 0:215-5.el5_2.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14838"/>
      <state state_ref="oval:org.mitre.oval:ste:11012"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37919" version="1" comment="xterm is earlier than 0:192-8.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14838"/>
      <state state_ref="oval:org.mitre.oval:ste:10206"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32074" version="1" comment="tar is earlier than 0:1.14-9.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14170"/>
      <state state_ref="oval:org.mitre.oval:ste:10112"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1448" version="2" check="at least one" comment="File %windir%\System32\w3svc.dll is less than 4.2.780.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:496"/>
      <state state_ref="oval:org.mitre.oval:ste:1306"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1449" version="1" check="at least one" comment="File %windir%\system32\urlmon.dll version is less than 5.50.4927.2100" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:1307"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32386" version="1" comment="lynx is earlier than 0:2.8.5-18.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14519"/>
      <state state_ref="oval:org.mitre.oval:ste:10077"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31818" version="1" comment="lynx is earlier than 0:2.8.5-11.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14519"/>
      <state state_ref="oval:org.mitre.oval:ste:9636"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1451" version="1" check="at least one" comment="File %windir%\system32\mshtml.dll version is less than 6.0.2713.1100" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:1309"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1450" version="1" check="at least one" comment="Run ActiveX Controls and Plugins Allowed In At Least One Zone" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:988"/>
      <state state_ref="oval:org.mitre.oval:ste:1308"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39071" version="1" comment="httpd is earlier than 0:2.0.46-75.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:11168"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39033" version="1" comment="httpd-devel is earlier than 0:2.0.46-75.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:11168"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38846" version="1" comment="httpd-manual is earlier than 0:2.2.3-22.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14457"/>
      <state state_ref="oval:org.mitre.oval:ste:11323"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38816" version="1" comment="httpd is earlier than 0:2.2.3-22.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:11323"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38761" version="1" comment="httpd-devel is earlier than 0:2.2.3-22.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:11323"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38392" version="1" comment="mod_ssl is earlier than 0:2.0.46-75.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:11168"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38385" version="1" comment="mod_ssl is earlier than 0:2.2.3-22.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:11323"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1452" version="1" comment="the version of msasn1.dll is less than 5.2.3790.139" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:844"/>
      <state state_ref="oval:org.mitre.oval:ste:1310"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31862" version="1" comment="gnutls is earlier than 0:1.0.20-3.2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14386"/>
      <state state_ref="oval:org.mitre.oval:ste:9162"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31682" version="1" comment="gnutls-devel is earlier than 0:1.0.20-3.2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14558"/>
      <state state_ref="oval:org.mitre.oval:ste:9162"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40577" version="1" comment="rhn-check is earlier than 0:0.4.20-33.el5_5.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14391"/>
      <state state_ref="oval:org.mitre.oval:ste:11092"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40563" version="1" comment="rhn-setup-gnome is earlier than 0:0.4.20-33.el5_5.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15131"/>
      <state state_ref="oval:org.mitre.oval:ste:11092"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40438" version="1" comment="rhn-setup is earlier than 0:0.4.20-33.el5_5.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14911"/>
      <state state_ref="oval:org.mitre.oval:ste:11092"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39919" version="1" comment="rhn-client-tools is earlier than 0:0.4.20-33.el5_5.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15281"/>
      <state state_ref="oval:org.mitre.oval:ste:11092"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1453" version="1" check="at least one" comment="File %windir%\system32\mshtml.dll version is less than 6.0.2716.2200" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:1311"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38587" version="1" comment="device-mapper-multipath is earlier than 0:0.4.7-23.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15272"/>
      <state state_ref="oval:org.mitre.oval:ste:10353"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38584" version="1" comment="device-mapper-multipath is earlier than 0:0.4.5-31.el4_7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15272"/>
      <state state_ref="oval:org.mitre.oval:ste:11014"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38470" version="1" comment="kpartx is earlier than 0:0.4.7-23.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15125"/>
      <state state_ref="oval:org.mitre.oval:ste:10353"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1463" version="1" check="at least one" comment="File %windir%\system32\mshtml.dll version is less than 5.50.4613.1700" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:1321"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1462" version="1" check="at least one" comment="Patch Q286045 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:995"/>
      <state state_ref="oval:org.mitre.oval:ste:1320"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32046" version="1" comment="spamassassin is earlier than 0:3.0.6-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14376"/>
      <state state_ref="oval:org.mitre.oval:ste:10173"/>
    </rpminfo_test>
    <process_test id="oval:org.mitre.oval:tst:4861" version="1" check="at least one" check_existence="at_least_one_exists" comment="ix86 architecture" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2840"/>
    </process_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 121475-01 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4240" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2927"/>
      <state state_ref="oval:org.mitre.oval:ste:4365"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 121474-01 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4207" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3629"/>
      <state state_ref="oval:org.mitre.oval:ste:4365"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30435" version="1" comment="ipsec-tools is earlier than 0:0.2.5-0.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14216"/>
      <state state_ref="oval:org.mitre.oval:ste:9519"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38150" version="1" comment="openssl096b is earlier than 0:0.9.6b-16.49" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14258"/>
      <state state_ref="oval:org.mitre.oval:ste:10633"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38056" version="1" comment="openssl-devel is earlier than 0:0.9.7a-43.17.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13920"/>
      <state state_ref="oval:org.mitre.oval:ste:11023"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38011" version="1" comment="openssl-perl is earlier than 0:0.9.7a-33.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14122"/>
      <state state_ref="oval:org.mitre.oval:ste:11072"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37990" version="1" comment="openssl is earlier than 0:0.9.7a-33.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13882"/>
      <state state_ref="oval:org.mitre.oval:ste:11072"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37985" version="1" comment="openssl is earlier than 0:0.9.7a-43.17.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13882"/>
      <state state_ref="oval:org.mitre.oval:ste:11023"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37921" version="1" comment="openssl-perl is earlier than 0:0.9.7a-43.17.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14122"/>
      <state state_ref="oval:org.mitre.oval:ste:11023"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37906" version="1" comment="openssl is earlier than 0:0.9.8b-10.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13882"/>
      <state state_ref="oval:org.mitre.oval:ste:10844"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37743" version="1" comment="openssl096b is earlier than 0:0.9.6b-22.46.el4_7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14258"/>
      <state state_ref="oval:org.mitre.oval:ste:10677"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37599" version="1" comment="openssl-perl is earlier than 0:0.9.8b-10.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14122"/>
      <state state_ref="oval:org.mitre.oval:ste:10844"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37285" version="1" comment="openssl-devel is earlier than 0:0.9.8b-10.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13920"/>
      <state state_ref="oval:org.mitre.oval:ste:10844"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37259" version="1" comment="openssl097a is earlier than 0:0.9.7a-9.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14181"/>
      <state state_ref="oval:org.mitre.oval:ste:10150"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37149" version="1" comment="openssl-devel is earlier than 0:0.9.7a-33.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13920"/>
      <state state_ref="oval:org.mitre.oval:ste:11072"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33295" version="1" comment="openoffice.org-kde is earlier than 0:1.1.5-6.6.0.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13698"/>
      <state state_ref="oval:org.mitre.oval:ste:9830"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33235" version="1" comment="openoffice.org is earlier than 0:1.1.5-6.6.0.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:9830"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33223" version="1" comment="openoffice.org-libs is earlier than 0:1.1.5-6.6.0.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14455"/>
      <state state_ref="oval:org.mitre.oval:ste:9830"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33108" version="1" comment="openoffice.org-libs is earlier than 0:1.1.2-35.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14455"/>
      <state state_ref="oval:org.mitre.oval:ste:10277"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33055" version="1" comment="openoffice.org-i18n is earlier than 0:1.1.2-35.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14215"/>
      <state state_ref="oval:org.mitre.oval:ste:10277"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32781" version="1" comment="openoffice.org-i18n is earlier than 0:1.1.5-6.6.0.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14215"/>
      <state state_ref="oval:org.mitre.oval:ste:9830"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32394" version="1" comment="openoffice.org is earlier than 0:1.1.2-35.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:10277"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1468" version="1" check="at least one" comment="mozilla-nss version is less than 1.4.2-3.0.2" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:996"/>
      <state state_ref="oval:org.mitre.oval:ste:1326"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1470" version="2" check="at least one" comment="File %windir%\System32\w3svc.dll is less than 4.0.1381.164" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:496"/>
      <state state_ref="oval:org.mitre.oval:ste:1328"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1469" version="4" comment="Win2K/XP/2003 service pack 6 (or later) is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:717"/>
      <state state_ref="oval:org.mitre.oval:ste:1327"/>
    </registry_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119435-15 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4750" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2949"/>
      <state state_ref="oval:org.mitre.oval:ste:4645"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 114344-25 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4736" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3143"/>
      <state state_ref="oval:org.mitre.oval:ste:4563"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 116966-25 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4659" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3187"/>
      <state state_ref="oval:org.mitre.oval:ste:4563"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 116965-26 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4585" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3358"/>
      <state state_ref="oval:org.mitre.oval:ste:4004"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:1471" version="1" check="at least one" comment="File %windir%\System32\Msw3prt.dll is less than 5.0.2195.3649" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:998"/>
      <state state_ref="oval:org.mitre.oval:ste:1329"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31589" version="1" comment="mozilla-chat is earlier than 37:1.7.3-19.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14196"/>
      <state state_ref="oval:org.mitre.oval:ste:9439"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31583" version="1" comment="mozilla-mail is earlier than 37:1.7.3-19.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14423"/>
      <state state_ref="oval:org.mitre.oval:ste:9439"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31580" version="1" comment="mozilla-js-debugger is earlier than 37:1.7.3-19.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13991"/>
      <state state_ref="oval:org.mitre.oval:ste:9439"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31579" version="1" comment="mozilla-nss-devel is earlier than 37:1.7.3-19.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14415"/>
      <state state_ref="oval:org.mitre.oval:ste:9439"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31555" version="1" comment="mozilla is earlier than 37:1.7.3-19.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14405"/>
      <state state_ref="oval:org.mitre.oval:ste:9439"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31447" version="1" comment="mozilla-devel is earlier than 37:1.7.3-19.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14231"/>
      <state state_ref="oval:org.mitre.oval:ste:9439"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31421" version="1" comment="mozilla-dom-inspector is earlier than 37:1.7.3-19.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13776"/>
      <state state_ref="oval:org.mitre.oval:ste:9439"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31380" version="1" comment="mozilla-nspr-devel is earlier than 37:1.7.3-19.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13716"/>
      <state state_ref="oval:org.mitre.oval:ste:9439"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31222" version="1" comment="mozilla-nss is earlier than 37:1.7.3-19.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14069"/>
      <state state_ref="oval:org.mitre.oval:ste:9439"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31131" version="1" comment="mozilla-nspr is earlier than 37:1.7.3-19.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14160"/>
      <state state_ref="oval:org.mitre.oval:ste:9439"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31752" version="1" comment="openoffice.org-libs is earlier than 0:1.1.2-24.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14455"/>
      <state state_ref="oval:org.mitre.oval:ste:9647"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31739" version="1" comment="openoffice.org-i18n is earlier than 0:1.1.2-24.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14215"/>
      <state state_ref="oval:org.mitre.oval:ste:9647"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31736" version="1" comment="openoffice.org-i18n is earlier than 0:1.1.2-24.6.0.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14215"/>
      <state state_ref="oval:org.mitre.oval:ste:9447"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31671" version="1" comment="openoffice.org is earlier than 0:1.1.2-24.6.0.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:9447"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31617" version="1" comment="openoffice.org-libs is earlier than 0:1.1.2-24.6.0.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14455"/>
      <state state_ref="oval:org.mitre.oval:ste:9447"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31453" version="1" comment="openoffice.org is earlier than 0:1.1.2-24.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:9647"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31138" version="1" comment="openoffice.org-kde is earlier than 0:1.1.2-24.6.0.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13698"/>
      <state state_ref="oval:org.mitre.oval:ste:9447"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1474" version="2" check="at least one" comment="File %windir%\System32\w3svc.dll is less than 4.2.769.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:496"/>
      <state state_ref="oval:org.mitre.oval:ste:1332"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32684" version="1" comment="elfutils-libelf-devel is earlier than 0:0.97.1-3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14627"/>
      <state state_ref="oval:org.mitre.oval:ste:9782"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32660" version="1" comment="elfutils-devel is earlier than 0:0.97.1-3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14697"/>
      <state state_ref="oval:org.mitre.oval:ste:9782"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32656" version="1" comment="elfutils-libelf is earlier than 0:0.94.1-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14492"/>
      <state state_ref="oval:org.mitre.oval:ste:9844"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32629" version="1" comment="elfutils is earlier than 0:0.97.1-3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14628"/>
      <state state_ref="oval:org.mitre.oval:ste:9782"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32533" version="1" comment="elfutils-devel is earlier than 0:0.94.1-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14697"/>
      <state state_ref="oval:org.mitre.oval:ste:9844"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32457" version="1" comment="elfutils-libelf-devel is earlier than 0:0.94.1-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14627"/>
      <state state_ref="oval:org.mitre.oval:ste:9844"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32396" version="1" comment="elfutils is earlier than 0:0.94.1-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14628"/>
      <state state_ref="oval:org.mitre.oval:ste:9844"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31848" version="1" comment="elfutils-libelf is earlier than 0:0.97.1-3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14492"/>
      <state state_ref="oval:org.mitre.oval:ste:9782"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31731" version="1" comment="binutils is earlier than 0:2.14.90.0.4-39" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14543"/>
      <state state_ref="oval:org.mitre.oval:ste:10027"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31192" version="1" comment="binutils is earlier than 0:2.15.92.0.2-15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14543"/>
      <state state_ref="oval:org.mitre.oval:ste:9704"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1475" version="1" check="at least one" comment="the version of h323.tsp is less than 5.0.2195.6901" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:961"/>
      <state state_ref="oval:org.mitre.oval:ste:1333"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30644" version="1" comment="cvs is earlier than 0:1.11.2-22" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14275"/>
      <state state_ref="oval:org.mitre.oval:ste:9736"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1478" version="1" check="at least one" comment="the version of helpctr.exe is less than 5.2.3790.125" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:922"/>
      <state state_ref="oval:org.mitre.oval:ste:1335"/>
    </file_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 125101-10 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4704" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3253"/>
      <state state_ref="oval:org.mitre.oval:ste:4330"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 125100-10 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4221" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3289"/>
      <state state_ref="oval:org.mitre.oval:ste:4330"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39568" version="1" comment="dstat is earlier than 0:0.6.6-3.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14661"/>
      <state state_ref="oval:org.mitre.oval:ste:11331"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1500" version="1" check="at least one" comment="the version of rpcrt4.dll is less than 5.0.2195.6904" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:254"/>
      <state state_ref="oval:org.mitre.oval:ste:1355"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1501" version="1" check="at least one" comment="the version of schannel.dll is less than 5.1.2195.6899" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1002"/>
      <state state_ref="oval:org.mitre.oval:ste:1356"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36531" version="1" comment="krb5-libs is earlier than 0:1.2.7-68" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14395"/>
      <state state_ref="oval:org.mitre.oval:ste:10871"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36522" version="1" comment="krb5-devel is earlier than 0:1.2.7-68" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14100"/>
      <state state_ref="oval:org.mitre.oval:ste:10871"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36493" version="1" comment="krb5 is earlier than 0:1.2.7-68" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14120"/>
      <state state_ref="oval:org.mitre.oval:ste:10871"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36304" version="1" comment="krb5-server is earlier than 0:1.2.7-68" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14452"/>
      <state state_ref="oval:org.mitre.oval:ste:10871"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36272" version="1" comment="krb5-workstation is earlier than 0:1.2.7-68" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14279"/>
      <state state_ref="oval:org.mitre.oval:ste:10871"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1502" version="1" check="at least one" comment="the version of wintrust.dll is less than 5.131.2195.6824" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:999"/>
      <state state_ref="oval:org.mitre.oval:ste:1357"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2957" version="1" check="at least one" comment="File %windir%\system32\drivers\mup.sys version is less than 5.0.2195.5080" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1653"/>
      <state state_ref="oval:org.mitre.oval:ste:2772"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2956" version="1" check="at least one" comment="Patch Q311967 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1693"/>
      <state state_ref="oval:org.mitre.oval:ste:2771"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1505" version="1" check="at least one" comment="ethereal version is less than 0.10.3-0.30E.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1013"/>
      <state state_ref="oval:org.mitre.oval:ste:1360"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1504" version="1" check="at least one" comment="ethereal-gnome version is less than 0.10.3-0.30E.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1012"/>
      <state state_ref="oval:org.mitre.oval:ste:1359"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36561" version="1" comment="vsftpd is earlier than 0:2.0.5-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14284"/>
      <state state_ref="oval:org.mitre.oval:ste:10877"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30970" version="1" comment="imlib-devel is earlier than 1:1.9.13-13.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13792"/>
      <state state_ref="oval:org.mitre.oval:ste:9677"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30862" version="1" comment="imlib is earlier than 1:1.9.13-13.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14150"/>
      <state state_ref="oval:org.mitre.oval:ste:9677"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32163" version="1" comment="fetchmail is earlier than 0:6.2.5-6.el4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14633"/>
      <state state_ref="oval:org.mitre.oval:ste:9164"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31634" version="1" comment="fetchmail is earlier than 0:6.2.0-3.el3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14633"/>
      <state state_ref="oval:org.mitre.oval:ste:9942"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1513" version="1" check="at least one" comment="the version of inetcomm.dll is less than 5.50.4939.300" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:385"/>
      <state state_ref="oval:org.mitre.oval:ste:1367"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:1520" version="1" check="at least one" comment="Patch 109324-09 or later is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:320"/>
      <state state_ref="oval:org.mitre.oval:ste:1374"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:1519" version="1" check="at least one" comment="Patch 118535-03 or later is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1021"/>
      <state state_ref="oval:org.mitre.oval:ste:1373"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:1518" version="1" check="at least one" comment="Patch 121004-01 or later is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1020"/>
      <state state_ref="oval:org.mitre.oval:ste:1372"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:1517" version="1" check="at least one" comment="Patch 109325-09 or later is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1019"/>
      <state state_ref="oval:org.mitre.oval:ste:1371"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:1516" version="1" check="at least one" comment="Patch 118536-03 or later is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1018"/>
      <state state_ref="oval:org.mitre.oval:ste:1370"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:1515" version="1" check="at least one" comment="Patch 121005-01 or later is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1017"/>
      <state state_ref="oval:org.mitre.oval:ste:1369"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1531" version="1" check="at least one" comment="ethereal version is less than 0.10.3-0.90.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1026"/>
      <state state_ref="oval:org.mitre.oval:ste:1385"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1530" version="1" check="at least one" comment="ethereal-gnome version is less than 0.10.3-0.90.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1025"/>
      <state state_ref="oval:org.mitre.oval:ste:1384"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1529" version="1" check="at least one" comment="/usr/bin/ethereal is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1024"/>
      <state state_ref="oval:org.mitre.oval:ste:1383"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1528" version="1" check="at least one" comment="/usr/bin/ethereal is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1024"/>
      <state state_ref="oval:org.mitre.oval:ste:1382"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1527" version="1" check="at least one" comment="/usr/bin/ethereal is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1024"/>
      <state state_ref="oval:org.mitre.oval:ste:1381"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1526" version="1" check="at least one" comment="/usr/sbin/ethereal is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1023"/>
      <state state_ref="oval:org.mitre.oval:ste:1380"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1525" version="1" check="at least one" comment="/usr/sbin/ethereal is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1023"/>
      <state state_ref="oval:org.mitre.oval:ste:1379"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1524" version="1" check="at least one" comment="/usr/sbin/ethereal is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1023"/>
      <state state_ref="oval:org.mitre.oval:ste:1378"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1523" version="1" check="at least one" comment="/usr/bin/tethereal is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1022"/>
      <state state_ref="oval:org.mitre.oval:ste:1377"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1522" version="1" check="at least one" comment="/usr/bin/tethereal is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1022"/>
      <state state_ref="oval:org.mitre.oval:ste:1376"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1521" version="1" check="at least one" comment="/usr/bin/tethereal is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1022"/>
      <state state_ref="oval:org.mitre.oval:ste:1375"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1533" version="1" check="at least one" comment="squid version is less than 2.5STABLE1-3.9" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1028"/>
      <state state_ref="oval:org.mitre.oval:ste:1387"/>
    </rpminfo_test>
    <inetlisteningservers_test id="oval:org.mitre.oval:tst:1532" version="2" check="at least one" comment="squid is listening on the network" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1027"/>
      <state state_ref="oval:org.mitre.oval:ste:1386"/>
    </inetlisteningservers_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36975" version="1" comment="cups-devel is earlier than 0:1.1.17-13.3.53" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:10885"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36974" version="1" comment="cups is earlier than 0:1.1.22-0.rc1.9.20.2.el4_6.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:10847"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36915" version="1" comment="cups-libs is earlier than 0:1.2.4-11.18.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:10392"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36909" version="1" comment="cups-devel is earlier than 0:1.2.4-11.18.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:10392"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36818" version="1" comment="cups-devel is earlier than 0:1.1.22-0.rc1.9.20.2.el4_6.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:10847"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36816" version="1" comment="cups-libs is earlier than 0:1.1.22-0.rc1.9.20.2.el4_6.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:10847"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36751" version="1" comment="cups-libs is earlier than 0:1.1.17-13.3.53" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:10885"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36736" version="1" comment="cups-lpd is earlier than 0:1.2.4-11.18.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14688"/>
      <state state_ref="oval:org.mitre.oval:ste:10392"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36705" version="1" comment="cups is earlier than 0:1.1.17-13.3.53" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:10885"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36512" version="1" comment="cups is earlier than 0:1.2.4-11.18.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:10392"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1534" version="1" check="at least one" comment="mod_ssl version is less than 2.0.46-32.ent" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1029"/>
      <state state_ref="oval:org.mitre.oval:ste:1388"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1538" version="1" check="at least one" comment="mozilla version is less than 1.4.2-0.9.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1031"/>
      <state state_ref="oval:org.mitre.oval:ste:1392"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1537" version="1" check="at least one" comment="/usr/bin/mozilla is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1030"/>
      <state state_ref="oval:org.mitre.oval:ste:1391"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1536" version="1" check="at least one" comment="/usr/bin/mozilla is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1030"/>
      <state state_ref="oval:org.mitre.oval:ste:1390"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1535" version="1" check="at least one" comment="/usr/bin/mozilla is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1030"/>
      <state state_ref="oval:org.mitre.oval:ste:1389"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1539" version="1" check="at least one" comment="mozilla-nss version is less than 1.4.2-0.9.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1032"/>
      <state state_ref="oval:org.mitre.oval:ste:1393"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1543" version="1" check="at least one" comment="openssl version is less than 0.9.7a-33.4" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1036"/>
      <state state_ref="oval:org.mitre.oval:ste:1397"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1542" version="1" check="at least one" comment="openssl-devel version is less than 0.9.7a-33.4" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1035"/>
      <state state_ref="oval:org.mitre.oval:ste:1396"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1541" version="1" check="at least one" comment="openssl-perl version is less than 0.9.7a-33.4" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1034"/>
      <state state_ref="oval:org.mitre.oval:ste:1395"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1540" version="1" check="at least one" comment="openssl096b version is less than 0.9.6b-16" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1033"/>
      <state state_ref="oval:org.mitre.oval:ste:1394"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1545" version="1" check="at least one" comment="net-snmp version is less than 5.0.9-2.30E.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1038"/>
      <state state_ref="oval:org.mitre.oval:ste:1399"/>
    </rpminfo_test>
    <inetlisteningservers_test id="oval:org.mitre.oval:tst:1544" version="2" check="at least one" comment="snmpd is listening to the network" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1037"/>
      <state state_ref="oval:org.mitre.oval:ste:1398"/>
    </inetlisteningservers_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1546" version="1" check="at least one" comment="kernel version is less than 2.4.21-9.EL" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1039"/>
      <state state_ref="oval:org.mitre.oval:ste:1400"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1550" version="1" check="at least one" comment="kernel version is less than 2.4.21-4.0.2.EL" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1042"/>
      <state state_ref="oval:org.mitre.oval:ste:1404"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1549" version="1" check="at least one" comment="kernel-smp version is less than 2.4.21-4.0.2.EL" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1041"/>
      <state state_ref="oval:org.mitre.oval:ste:1403"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1548" version="1" check="at least one" comment="kernel-bigmem version is less than 2.4.21-4.0.2.EL" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1040"/>
      <state state_ref="oval:org.mitre.oval:ste:1402"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1551" version="1" check="at least one" comment="cvs version is less than 1.11.2-14" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1043"/>
      <state state_ref="oval:org.mitre.oval:ste:1405"/>
    </rpminfo_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 125101-10 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4966" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3500"/>
      <state state_ref="oval:org.mitre.oval:ste:4853"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 118833-36 or earlier installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4778" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3346"/>
      <state state_ref="oval:org.mitre.oval:ste:4506"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 118855-36 or earlier installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4725" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3100"/>
      <state state_ref="oval:org.mitre.oval:ste:4506"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 118855-15 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4714" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3100"/>
      <state state_ref="oval:org.mitre.oval:ste:4462"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 125100-10 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4665" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2998"/>
      <state state_ref="oval:org.mitre.oval:ste:4853"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 118833-17 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4625" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3346"/>
      <state state_ref="oval:org.mitre.oval:ste:4537"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1552" version="1" check="at least one" comment="kdepim version is less than 3.1.3-3.3" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1044"/>
      <state state_ref="oval:org.mitre.oval:ste:1406"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1553" version="1" check="at least one" comment="httpd version is less than 2.0.46-26.ent" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1045"/>
      <state state_ref="oval:org.mitre.oval:ste:1407"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1554" version="1" check="at least one" comment="httpd version is less than 2.0.40-21.9" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1046"/>
      <state state_ref="oval:org.mitre.oval:ste:1408"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1555" version="1" check="at least one" comment="sysstat version is less than 4.0.7-4.EL3.2" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1047"/>
      <state state_ref="oval:org.mitre.oval:ste:1409"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1557" version="1" check="at least one" comment="nfs-utils version is less than 1.0.6-7.EL" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1049"/>
      <state state_ref="oval:org.mitre.oval:ste:1411"/>
    </rpminfo_test>
    <inetlisteningservers_test id="oval:org.mitre.oval:tst:1556" version="2" check="at least one" comment="rpc.mountd is listening to the network" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1048"/>
      <state state_ref="oval:org.mitre.oval:ste:1410"/>
    </inetlisteningservers_test>
    <patch_test id="oval:org.mitre.oval:tst:2963" version="1" check="at least one" comment="Patch 108652-51 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:876"/>
      <state state_ref="oval:org.mitre.oval:ste:2778"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1560" version="1" check="at least one" comment="kernel version is less than 2.4.20-28.9" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1052"/>
      <state state_ref="oval:org.mitre.oval:ste:1414"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1559" version="1" check="at least one" comment="kernel-smp version is less than 2.4.20-28.9" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1051"/>
      <state state_ref="oval:org.mitre.oval:ste:1413"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1558" version="1" check="at least one" comment="kernel-bigmem version is less than 2.4.20-28.9" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1050"/>
      <state state_ref="oval:org.mitre.oval:ste:1412"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1564" version="1" check="at least one" comment="kdepim version is less than 3.1-6" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1054"/>
      <state state_ref="oval:org.mitre.oval:ste:1418"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1563" version="1" check="at least one" comment="/usr/share/services/kfile_vcf.desktop is readable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1053"/>
      <state state_ref="oval:org.mitre.oval:ste:1417"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1562" version="1" check="at least one" comment="/usr/share/services/kfile_vcf.desktop is readable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1053"/>
      <state state_ref="oval:org.mitre.oval:ste:1416"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1561" version="1" check="at least one" comment="/usr/share/services/kfile_vcf.desktop is readable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1053"/>
      <state state_ref="oval:org.mitre.oval:ste:1415"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1575" version="1" check="at least one" comment="ethereal version is less than 0.10.0a-0.90.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1057"/>
      <state state_ref="oval:org.mitre.oval:ste:1429"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1574" version="1" check="at least one" comment="ethereal-gnome version is less than 0.10.0a-0.90.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1056"/>
      <state state_ref="oval:org.mitre.oval:ste:1428"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1573" version="1" check="at least one" comment="/usr/bin/ethereal is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1024"/>
      <state state_ref="oval:org.mitre.oval:ste:1427"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1572" version="1" check="at least one" comment="/usr/bin/ethereal is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1024"/>
      <state state_ref="oval:org.mitre.oval:ste:1426"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1571" version="1" check="at least one" comment="/usr/bin/ethereal is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1024"/>
      <state state_ref="oval:org.mitre.oval:ste:1425"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1570" version="1" check="at least one" comment="/usr/sbin/ethereal is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1023"/>
      <state state_ref="oval:org.mitre.oval:ste:1424"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1569" version="1" check="at least one" comment="/usr/sbin/ethereal is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1023"/>
      <state state_ref="oval:org.mitre.oval:ste:1423"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1568" version="1" check="at least one" comment="/usr/sbin/ethereal is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1023"/>
      <state state_ref="oval:org.mitre.oval:ste:1422"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1567" version="1" check="at least one" comment="/usr/sbin/tethereal is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1055"/>
      <state state_ref="oval:org.mitre.oval:ste:1421"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1566" version="1" check="at least one" comment="/usr/sbin/tethereal is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1055"/>
      <state state_ref="oval:org.mitre.oval:ste:1420"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1565" version="1" check="at least one" comment="/usr/sbin/tethereal is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1055"/>
      <state state_ref="oval:org.mitre.oval:ste:1419"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1577" version="1" check="at least one" comment="cvs version is less than 1.11.2-13" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1059"/>
      <state state_ref="oval:org.mitre.oval:ste:1431"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1576" version="1" check="at least one" comment="/ is world-writable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1058"/>
      <state state_ref="oval:org.mitre.oval:ste:1430"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1578" version="1" check="at least one" comment="tcpdump version is less than 3.7.2-7.E3.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1060"/>
      <state state_ref="oval:org.mitre.oval:ste:1432"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1579" version="1" check="at least one" comment="sysstat version is less than 4.0.7-4.rhl9.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1061"/>
      <state state_ref="oval:org.mitre.oval:ste:1433"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1583" version="1" check="at least one" comment="tcpdump version is less than 3.7.2-7.9.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1062"/>
      <state state_ref="oval:org.mitre.oval:ste:1437"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1582" version="1" check="at least one" comment="/usr/sbin/tcpdump is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:947"/>
      <state state_ref="oval:org.mitre.oval:ste:1436"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1581" version="1" check="at least one" comment="/usr/sbin/tcpdump is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:947"/>
      <state state_ref="oval:org.mitre.oval:ste:1435"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1580" version="1" check="at least one" comment="/usr/sbin/tcpdump is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:947"/>
      <state state_ref="oval:org.mitre.oval:ste:1434"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1586" version="1" check="at least one" comment="gdk-pixbuf version is less than 0.22.0-6.1.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1065"/>
      <state state_ref="oval:org.mitre.oval:ste:1440"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1585" version="1" check="at least one" comment="gdk-pixbuf-devel version is less than 0.22.0-6.1.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1064"/>
      <state state_ref="oval:org.mitre.oval:ste:1439"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1584" version="1" check="at least one" comment="gdk-pixbuf-gnome version is less than 0.22.0-6.1.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1063"/>
      <state state_ref="oval:org.mitre.oval:ste:1438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1589" version="1" check="at least one" comment="gdk-pixbuf version is less than 0.22.0-6.0.3" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1068"/>
      <state state_ref="oval:org.mitre.oval:ste:1443"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1588" version="1" check="at least one" comment="gdk-pixbuf-devel version is less than 0.22.0-6.0.3" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1067"/>
      <state state_ref="oval:org.mitre.oval:ste:1442"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1587" version="1" check="at least one" comment="gdk-pixbuf-gnome version is less than 0.22.0-6.0.3" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1066"/>
      <state state_ref="oval:org.mitre.oval:ste:1441"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:1602" version="2" comment="Windows Media Services 4.1 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1078"/>
      <state state_ref="oval:org.mitre.oval:ste:1454"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1601" version="1" comment="the version of nscm.exe is less than 4.1.0.3934" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1077"/>
      <state state_ref="oval:org.mitre.oval:ste:1453"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1600" version="1" comment="the version of nspmon.exe is less than 4.1.0.3934" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1076"/>
      <state state_ref="oval:org.mitre.oval:ste:1452"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1599" version="1" comment="the patch kb832359 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1075"/>
      <state state_ref="oval:org.mitre.oval:ste:1451"/>
    </registry_test>
    <unknown_test id="oval:org.mitre.oval:tst:1598" version="1" comment="configured to only offer streaming media over unicast" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
    <registry_test id="oval:org.mitre.oval:tst:1597" version="2" comment="the Windows Media Station service is disabled" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1074"/>
      <state state_ref="oval:org.mitre.oval:ste:1450"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1596" version="2" comment="the Windows Media Monitor service is disabled" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1073"/>
      <state state_ref="oval:org.mitre.oval:ste:1449"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:20723" version="1" comment="Mso.dll version is less than 10.0.6858.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:467"/>
      <state state_ref="oval:org.mitre.oval:ste:6260"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1603" version="1" check="at least one" comment="mutt version is less than 1.4.1-3.4" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1079"/>
      <state state_ref="oval:org.mitre.oval:ste:1455"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1606" version="1" check="at least one" comment="kernel version is less than 2.4.20-30.9" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1082"/>
      <state state_ref="oval:org.mitre.oval:ste:1458"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1605" version="1" check="at least one" comment="kernel-smp version is less than 2.4.20-30.9" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1081"/>
      <state state_ref="oval:org.mitre.oval:ste:1457"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1604" version="1" check="at least one" comment="kernel-bigmem version is less than 2.4.20-30.9" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1080"/>
      <state state_ref="oval:org.mitre.oval:ste:1456"/>
    </rpminfo_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119067-08 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:5089" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2948"/>
      <state state_ref="oval:org.mitre.oval:ste:4515"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119060-27 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:5067" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3667"/>
      <state state_ref="oval:org.mitre.oval:ste:4431"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 112786-51 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4915" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3059"/>
      <state state_ref="oval:org.mitre.oval:ste:4480"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119059-28 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4559" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3006"/>
      <state state_ref="oval:org.mitre.oval:ste:4702"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119068-08 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4495" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3789"/>
      <state state_ref="oval:org.mitre.oval:ste:4515"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 112785-62 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4378" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3119"/>
      <state state_ref="oval:org.mitre.oval:ste:4610"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1609" version="1" check="at least one" comment="libxml2 version is less than 2.5.10-6" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1085"/>
      <state state_ref="oval:org.mitre.oval:ste:1461"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1608" version="1" check="at least one" comment="libxml2-devel version is less than 2.5.10-6" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1084"/>
      <state state_ref="oval:org.mitre.oval:ste:1460"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1607" version="1" check="at least one" comment="libxml2-python version is less than 2.5.10-6" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1083"/>
      <state state_ref="oval:org.mitre.oval:ste:1459"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1610" version="1" check="at least one" comment="XFree86 version is less than 4.3.0-55.EL" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1086"/>
      <state state_ref="oval:org.mitre.oval:ste:1462"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:2965" version="1" comment="File sqlservr.exe version3 less than 2000.80.428.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:843"/>
      <state state_ref="oval:org.mitre.oval:ste:2779"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4451" version="1" comment="OpenOffice_org1-nl is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2860"/>
      <state state_ref="oval:org.mitre.oval:ste:4157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4794" version="1" comment="OpenOffice_org1-ja is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3731"/>
      <state state_ref="oval:org.mitre.oval:ste:4157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4542" version="1" comment="OpenOffice_org1-ru is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3160"/>
      <state state_ref="oval:org.mitre.oval:ste:4157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4290" version="1" comment="OpenOffice_org1-sv is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3721"/>
      <state state_ref="oval:org.mitre.oval:ste:4157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4418" version="1" comment="OpenOffice_org1-ko is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3106"/>
      <state state_ref="oval:org.mitre.oval:ste:4157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4477" version="1" comment="OpenOffice_org1-zh-TW is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3385"/>
      <state state_ref="oval:org.mitre.oval:ste:4157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4799" version="1" comment="OpenOffice_org-galleries is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3551"/>
      <state state_ref="oval:org.mitre.oval:ste:4566"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4549" version="1" comment="OpenOffice_org-af is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2945"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4947" version="1" comment="OpenOffice_org1-en is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3448"/>
      <state state_ref="oval:org.mitre.oval:ste:4157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4574" version="1" comment="OpenOffice_org1-ca is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3639"/>
      <state state_ref="oval:org.mitre.oval:ste:4157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:5167" version="1" comment="OpenOffice_org1-pt is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3761"/>
      <state state_ref="oval:org.mitre.oval:ste:4157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4843" version="1" comment="OpenOffice_org1-sk is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3091"/>
      <state state_ref="oval:org.mitre.oval:ste:4157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4443" version="1" comment="OpenOffice_org-hunspell is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3647"/>
      <state state_ref="oval:org.mitre.oval:ste:4826"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4615" version="1" comment="OpenOffice_org-pa-IN is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3021"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4815" version="1" comment="OpenOffice_org-en-GB is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3693"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:5169" version="1" comment="OpenOffice_org1-fi is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3748"/>
      <state state_ref="oval:org.mitre.oval:ste:4157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:5021" version="1" comment="OpenOffice_org-nb is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2967"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4273" version="1" comment="OpenOffice_org1-ar is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3390"/>
      <state state_ref="oval:org.mitre.oval:ste:4157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4748" version="1" comment="OpenOffice_org1-kde is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2854"/>
      <state state_ref="oval:org.mitre.oval:ste:4157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:5084" version="1" comment="OpenOffice_org1-sl is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3238"/>
      <state state_ref="oval:org.mitre.oval:ste:4157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:5026" version="1" comment="OpenOffice_org-hr is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3658"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4329" version="1" comment="OpenOffice_org1-es is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3660"/>
      <state state_ref="oval:org.mitre.oval:ste:4157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4212" version="1" comment="OpenOffice_org1-it is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3062"/>
      <state state_ref="oval:org.mitre.oval:ste:4157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:5094" version="1" comment="OpenOffice_org1-et is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3330"/>
      <state state_ref="oval:org.mitre.oval:ste:4157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:5105" version="1" comment="OpenOffice_org1-fr is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2954"/>
      <state state_ref="oval:org.mitre.oval:ste:4157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4345" version="1" comment="OpenOffice_org1-el is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2963"/>
      <state state_ref="oval:org.mitre.oval:ste:4157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:5187" version="1" comment="OpenOffice_org1-zh-CN is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3711"/>
      <state state_ref="oval:org.mitre.oval:ste:4157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:5132" version="1" comment="OpenOffice_org-officebean is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2809"/>
      <state state_ref="oval:org.mitre.oval:ste:4566"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4764" version="1" comment="OpenOffice_org1-de is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3564"/>
      <state state_ref="oval:org.mitre.oval:ste:4157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4319" version="1" comment="OpenOffice_org1-pl is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3275"/>
      <state state_ref="oval:org.mitre.oval:ste:4157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4734" version="1" comment="OpenOffice_org-nn is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3050"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4357" version="1" comment="OpenOffice_org-xh is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3799"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4526" version="1" comment="OpenOffice_org-be-BY is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2832"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4461" version="1" comment="OpenOffice_org-bg is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3267"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4532" version="1" comment="OpenOffice_org1-hu is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3101"/>
      <state state_ref="oval:org.mitre.oval:ste:4157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4711" version="1" comment="OpenOffice_org1-cs is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3324"/>
      <state state_ref="oval:org.mitre.oval:ste:4157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4430" version="1" comment="OpenOffice_org1-gnome is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2820"/>
      <state state_ref="oval:org.mitre.oval:ste:4157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4522" version="1" comment="OpenOffice_org-gu-IN is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3332"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:5190" version="1" comment="OpenOffice_org-cy is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3728"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4961" version="1" comment="OpenOffice_org1-tr is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3202"/>
      <state state_ref="oval:org.mitre.oval:ste:4157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:5012" version="1" comment="OpenOffice_org1-da is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3680"/>
      <state state_ref="oval:org.mitre.oval:ste:4157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:5155" version="1" comment="OpenOffice_org-vi is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3019"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4496" version="1" comment="OpenOffice_org-zu is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3129"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4214" version="1" comment="OpenOffice_org1 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2881"/>
      <state state_ref="oval:org.mitre.oval:ste:4157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4075" version="2" comment="Novell Linux Desktop 9 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2182"/>
      <state state_ref="oval:org.mitre.oval:ste:3769"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3212" version="1" comment="SUSE Linux Professional 9.3 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1798"/>
      <state state_ref="oval:org.mitre.oval:ste:3186"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3693" version="1" comment="SUSE Linux 10.0 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1798"/>
      <state state_ref="oval:org.mitre.oval:ste:3307"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3465" version="1" comment="SUSE Linux Desktop 1.0 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2182"/>
      <state state_ref="oval:org.mitre.oval:ste:3516"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-hu version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:5191" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3494"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-pt-BR version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:5180" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3790"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-hunspell version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:5152" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3647"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org1-da version-release is less than 1.1.3-4.7" id="oval:org.mitre.oval:tst:5139" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3680"/>
      <state state_ref="oval:org.mitre.oval:ste:4328"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-nb version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:5128" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2967"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org1-hu version-release is less than 1.1.3-4.7" id="oval:org.mitre.oval:tst:5127" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3101"/>
      <state state_ref="oval:org.mitre.oval:ste:4328"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org1-sk version-release is less than 1.1.3-4.7" id="oval:org.mitre.oval:tst:5118" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3091"/>
      <state state_ref="oval:org.mitre.oval:ste:4328"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-mono version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:5103" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3654"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-gnome version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:5098" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3234"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-ru version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:5096" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2819"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-officebean version-release is less than 2.0.2-27.15" id="oval:org.mitre.oval:tst:5087" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2809"/>
      <state state_ref="oval:org.mitre.oval:ste:4726"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org1-zh-CN version-release is less than 1.1.3-4.7" id="oval:org.mitre.oval:tst:5086" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3711"/>
      <state state_ref="oval:org.mitre.oval:ste:4328"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-af version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:5076" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2945"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org1-ca version-release is less than 1.1.3-4.7" id="oval:org.mitre.oval:tst:5069" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3639"/>
      <state state_ref="oval:org.mitre.oval:ste:4328"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-sk version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:5058" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3514"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-sv version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:5051" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3114"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-ko version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:5038" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3185"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:5033" version="1" comment="OpenOffice_org-et is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2979"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-et version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:5031" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2979"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org1-pt version-release is less than 1.1.3-4.7" id="oval:org.mitre.oval:tst:5028" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3761"/>
      <state state_ref="oval:org.mitre.oval:ste:4328"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-fr version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:5020" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3511"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org1-pl version-release is less than 1.1.3-4.7" id="oval:org.mitre.oval:tst:5010" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3275"/>
      <state state_ref="oval:org.mitre.oval:ste:4328"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:5008" version="1" comment="OpenOffice_org-de is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2816"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-cy version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4986" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3728"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-galleries version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4981" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3551"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4980" version="1" comment="OpenOffice_org-ru is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2819"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4956" version="1" comment="OpenOffice_org-nl is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2913"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4941" version="1" comment="OpenOffice_org-ko is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3185"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-pt version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4940" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3382"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org1-es version-release is less than 1.1.3-4.7" id="oval:org.mitre.oval:tst:4937" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3660"/>
      <state state_ref="oval:org.mitre.oval:ste:4328"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org1-ar version-release is less than 1.1.3-4.7" id="oval:org.mitre.oval:tst:4923" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3390"/>
      <state state_ref="oval:org.mitre.oval:ste:4328"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-kde version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4921" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2859"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-sl version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4908" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3537"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-gnome version-release is less than 2.0.2-27.15" id="oval:org.mitre.oval:tst:4905" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3234"/>
      <state state_ref="oval:org.mitre.oval:ste:4726"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-xh version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4893" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3799"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4875" version="1" comment="OpenOffice_org-zh-CN is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3222"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4866" version="1" comment="OpenOffice_org-ca is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3039"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-zu version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4850" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3129"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4849" version="1" comment="OpenOffice_org-it is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3401"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-da version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4833" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2974"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-vi version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4828" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3019"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org1-ko version-release is less than 1.1.3-4.7" id="oval:org.mitre.oval:tst:4816" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3106"/>
      <state state_ref="oval:org.mitre.oval:ste:4328"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4809" version="1" comment="OpenOffice_org-mono is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3654"/>
      <state state_ref="oval:org.mitre.oval:ste:4566"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org1-sv version-release is less than 1.1.3-4.7" id="oval:org.mitre.oval:tst:4806" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3721"/>
      <state state_ref="oval:org.mitre.oval:ste:4328"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4791" version="1" comment="OpenOffice_org-da is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2974"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org1-tr version-release is less than 1.1.3-4.7" id="oval:org.mitre.oval:tst:4775" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3202"/>
      <state state_ref="oval:org.mitre.oval:ste:4328"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4770" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3315"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-gu-IN version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4763" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3332"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-be-BY version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4761" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2832"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4754" version="1" comment="OpenOffice_org-pt-BR is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3790"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4751" version="1" comment="OpenOffice_org-es is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3566"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4739" version="1" comment="OpenOffice_org-sk is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3514"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org1-ru version-release is less than 1.1.3-4.7" id="oval:org.mitre.oval:tst:4728" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3160"/>
      <state state_ref="oval:org.mitre.oval:ste:4328"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org1-ja version-release is less than 1.1.3-4.7" id="oval:org.mitre.oval:tst:4727" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3731"/>
      <state state_ref="oval:org.mitre.oval:ste:4328"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4724" version="1" comment="OpenOffice_org-pt is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3382"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-fi version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4716" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2813"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org1-gnome version-release is less than 1.1.3-4.7" id="oval:org.mitre.oval:tst:4713" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2820"/>
      <state state_ref="oval:org.mitre.oval:ste:4328"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4677" version="1" comment="OpenOffice_org is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3315"/>
      <state state_ref="oval:org.mitre.oval:ste:4566"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4675" version="1" comment="OpenOffice_org-gnome is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3234"/>
      <state state_ref="oval:org.mitre.oval:ste:4566"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org version-release is less than 2.0.2-27.15" id="oval:org.mitre.oval:tst:4673" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3315"/>
      <state state_ref="oval:org.mitre.oval:ste:4726"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4671" version="1" comment="OpenOffice_org-ja is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3240"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-es version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4656" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3566"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org1-el version-release is less than 1.1.3-4.7" id="oval:org.mitre.oval:tst:4650" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2963"/>
      <state state_ref="oval:org.mitre.oval:ste:4328"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-it version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4644" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3401"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org1-et version-release is less than 1.1.3-4.7" id="oval:org.mitre.oval:tst:4627" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3330"/>
      <state state_ref="oval:org.mitre.oval:ste:4328"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org1 version-release is less than 1.1.3-4.7" id="oval:org.mitre.oval:tst:4622" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2881"/>
      <state state_ref="oval:org.mitre.oval:ste:4328"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-ja version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4620" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3240"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org1-sl version-release is less than 1.1.3-4.7" id="oval:org.mitre.oval:tst:4598" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3238"/>
      <state state_ref="oval:org.mitre.oval:ste:4328"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4596" version="1" comment="OpenOffice_org-sl is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3537"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org1-kde version-release is less than 1.1.3-4.7" id="oval:org.mitre.oval:tst:4594" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2854"/>
      <state state_ref="oval:org.mitre.oval:ste:4328"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org1-nl version-release is less than 1.1.3-4.7" id="oval:org.mitre.oval:tst:4590" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2860"/>
      <state state_ref="oval:org.mitre.oval:ste:4328"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-el version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4561" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3047"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4556" version="1" comment="OpenOffice_org-pl is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3643"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4555" version="1" comment="OpenOffice_org-zh-TW is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3726"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4550" version="1" comment="OpenOffice_org-sv is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3114"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4544" version="1" comment="OpenOffice_org-kde is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2859"/>
      <state state_ref="oval:org.mitre.oval:ste:4566"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org1-it version-release is less than 1.1.3-4.7" id="oval:org.mitre.oval:tst:4541" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3062"/>
      <state state_ref="oval:org.mitre.oval:ste:4328"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org1-en version-release is less than 1.1.3-4.7" id="oval:org.mitre.oval:tst:4537" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3448"/>
      <state state_ref="oval:org.mitre.oval:ste:4328"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-ar version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4524" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2964"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-nl version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4520" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2913"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4518" version="1" comment="OpenOffice_org-fr is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3511"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-cs version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4479" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3345"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org1-cs version-release is less than 1.1.3-4.7" id="oval:org.mitre.oval:tst:4463" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3324"/>
      <state state_ref="oval:org.mitre.oval:ste:4328"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org1-fi version-release is less than 1.1.3-4.7" id="oval:org.mitre.oval:tst:4462" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3748"/>
      <state state_ref="oval:org.mitre.oval:ste:4328"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-pl version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4456" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3643"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-ca version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4449" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3039"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-mono version-release is less than 2.0.2-27.15" id="oval:org.mitre.oval:tst:4421" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3654"/>
      <state state_ref="oval:org.mitre.oval:ste:4726"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-officebean version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4420" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2809"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-de version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4410" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2816"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org1-fr version-release is less than 1.1.3-4.7" id="oval:org.mitre.oval:tst:4404" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2954"/>
      <state state_ref="oval:org.mitre.oval:ste:4328"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org1-zh-TW version-release is less than 1.1.3-4.7" id="oval:org.mitre.oval:tst:4376" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3385"/>
      <state state_ref="oval:org.mitre.oval:ste:4328"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org1-de version-release is less than 1.1.3-4.7" id="oval:org.mitre.oval:tst:4368" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3564"/>
      <state state_ref="oval:org.mitre.oval:ste:4328"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4348" version="1" comment="OpenOffice_org-cs is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3345"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-zh-CN version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4331" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3222"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="OpenOffice_org-en is installed" id="oval:org.mitre.oval:tst:4287" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3436"/>
      <state state_ref="oval:org.mitre.oval:ste:4157"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-hr version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4280" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3658"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-nn version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4274" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3050"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-kde version-release is less than 2.0.2-27.15" id="oval:org.mitre.oval:tst:4272" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2859"/>
      <state state_ref="oval:org.mitre.oval:ste:4726"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-tr version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4258" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3172"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4254" version="1" comment="OpenOffice_org-fi is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2813"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4238" version="1" comment="OpenOffice_org-el is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3047"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4235" version="1" comment="OpenOffice_org-hu is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3494"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-en-GB version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4226" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3693"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-bg version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4224" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3267"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4210" version="1" comment="OpenOffice_org-tr is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3172"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-pa-IN version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4209" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3021"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4205" version="1" comment="OpenOffice_org-ar is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2964"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package OpenOffice_org-zh-TW version-release is less than 2.0.0-1.6" id="oval:org.mitre.oval:tst:4204" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:3726"/>
      <state state_ref="oval:org.mitre.oval:ste:4297"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1612" version="1" check="at least one" comment="mod_python version is less than 3.0.1-4" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1088"/>
      <state state_ref="oval:org.mitre.oval:ste:1464"/>
    </rpminfo_test>
    <inetlisteningservers_test id="oval:org.mitre.oval:tst:1611" version="2" check="at least one" comment="httpd is listening to the network" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1087"/>
      <state state_ref="oval:org.mitre.oval:ste:1463"/>
    </inetlisteningservers_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 123373-02 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:5133" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3397"/>
      <state state_ref="oval:org.mitre.oval:ste:4379"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 123372-02 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4946" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3779"/>
      <state state_ref="oval:org.mitre.oval:ste:4379"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 124970-01 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4906" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3142"/>
      <state state_ref="oval:org.mitre.oval:ste:4570"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 124245-01 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4576" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3061"/>
      <state state_ref="oval:org.mitre.oval:ste:4570"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 124969-01 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4414" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3259"/>
      <state state_ref="oval:org.mitre.oval:ste:4570"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 124244-01 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4215" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2936"/>
      <state state_ref="oval:org.mitre.oval:ste:4570"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1613" version="1" check="at least one" comment="samba version is less than 3.0.2-6.3E" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1089"/>
      <state state_ref="oval:org.mitre.oval:ste:1465"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1614" version="1" check="at least one" comment="pwlib version is less than 1.4.7-7.EL" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1090"/>
      <state state_ref="oval:org.mitre.oval:ste:1466"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1617" version="1" check="at least one" comment="kernel version is less than 2.4.21-9.0.1.EL" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1093"/>
      <state state_ref="oval:org.mitre.oval:ste:1469"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1616" version="1" check="at least one" comment="kernel-smp version is less than 2.4.21-9.0.1.EL" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1092"/>
      <state state_ref="oval:org.mitre.oval:ste:1468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1615" version="1" check="at least one" comment="kernel-hugemem version is less than 2.4.21-9.0.1.EL" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1091"/>
      <state state_ref="oval:org.mitre.oval:ste:1467"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1618" version="1" check="at least one" comment="kdelibs version is less than 3.1-13" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1094"/>
      <state state_ref="oval:org.mitre.oval:ste:1470"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1622" version="1" check="at least one" comment="mc version is less than 4.6.0-7.9" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1096"/>
      <state state_ref="oval:org.mitre.oval:ste:1474"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1621" version="1" check="at least one" comment="/usr/bin/mc is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1095"/>
      <state state_ref="oval:org.mitre.oval:ste:1473"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1620" version="1" check="at least one" comment="/usr/bin/mc is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1095"/>
      <state state_ref="oval:org.mitre.oval:ste:1472"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1619" version="1" check="at least one" comment="/usr/bin/mc is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1095"/>
      <state state_ref="oval:org.mitre.oval:ste:1471"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1625" version="1" check="at least one" comment="slocate version is less than 2.7-2" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1098"/>
      <state state_ref="oval:org.mitre.oval:ste:1477"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1624" version="1" check="at least one" comment="/usr/bin/slocate is setgid" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1097"/>
      <state state_ref="oval:org.mitre.oval:ste:1476"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1623" version="1" check="at least one" comment="/usr/bin/slocate is setgid" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1097"/>
      <state state_ref="oval:org.mitre.oval:ste:1475"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2968" version="1" check="at least one" comment="the version of ssmsrp70.dll is less than 2000.80.213.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1698"/>
      <state state_ref="oval:org.mitre.oval:ste:2782"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2967" version="1" check="at least one" comment="the version of dbmsrpcn.dll is less than 2000.80.213.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1697"/>
      <state state_ref="oval:org.mitre.oval:ste:2781"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1629" version="1" check="at least one" comment="gaim version is less than 0.75-0.9.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1100"/>
      <state state_ref="oval:org.mitre.oval:ste:1481"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1628" version="1" check="at least one" comment="/usr/bin/gaim is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1099"/>
      <state state_ref="oval:org.mitre.oval:ste:1480"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1627" version="1" check="at least one" comment="/usr/bin/gaim is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1099"/>
      <state state_ref="oval:org.mitre.oval:ste:1479"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1626" version="1" check="at least one" comment="/usr/bin/gaim is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1099"/>
      <state state_ref="oval:org.mitre.oval:ste:1478"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1631" version="1" check="at least one" comment="mailman version is less than 2.1.1-5" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1102"/>
      <state state_ref="oval:org.mitre.oval:ste:1483"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1634" version="1" check="at least one" comment="mutt version is less than 1.4.1-3.3" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1103"/>
      <state state_ref="oval:org.mitre.oval:ste:1486"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1637" version="1" check="at least one" comment="netpbm version is less than 9.24-11.30.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1106"/>
      <state state_ref="oval:org.mitre.oval:ste:1489"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1636" version="1" check="at least one" comment="netpbm-devel version is less than 9.24-11.30.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1105"/>
      <state state_ref="oval:org.mitre.oval:ste:1488"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1635" version="1" check="at least one" comment="netpbm-progs version is less than 9.24-11.30.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1104"/>
      <state state_ref="oval:org.mitre.oval:ste:1487"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1641" version="1" check="at least one" comment="XFree86 version is less than 4.3.0-2.90.55" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1108"/>
      <state state_ref="oval:org.mitre.oval:ste:1493"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1640" version="1" check="at least one" comment="/usr/X11R6/bin/XFree86 is SUID and executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1107"/>
      <state state_ref="oval:org.mitre.oval:ste:1492"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1639" version="1" check="at least one" comment="/usr/X11R6/bin/XFree86 is SUID and executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1107"/>
      <state state_ref="oval:org.mitre.oval:ste:1491"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1638" version="1" check="at least one" comment="/usr/X11R6/bin/XFree86 is SUID and executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1107"/>
      <state state_ref="oval:org.mitre.oval:ste:1490"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2319" version="1" check="at least one" comment="netpbm version is less than 9.24-10.90.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1336"/>
      <state state_ref="oval:org.mitre.oval:ste:2171"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2318" version="1" check="at least one" comment="netpbm-devel version is less than 9.24-10.90.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1335"/>
      <state state_ref="oval:org.mitre.oval:ste:2170"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2317" version="1" check="at least one" comment="netpbm-progs version is less than 9.24-10.90.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1334"/>
      <state state_ref="oval:org.mitre.oval:ste:2169"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:2316" version="1" check="at least one" comment="/usr/bin/411toppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1333"/>
      <state state_ref="oval:org.mitre.oval:ste:2168"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2315" version="1" check="at least one" comment="/usr/bin/411toppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1333"/>
      <state state_ref="oval:org.mitre.oval:ste:2167"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2314" version="1" check="at least one" comment="/usr/bin/411toppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1333"/>
      <state state_ref="oval:org.mitre.oval:ste:2166"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2313" version="1" check="at least one" comment="/usr/bin/asciitopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1332"/>
      <state state_ref="oval:org.mitre.oval:ste:2165"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2312" version="1" check="at least one" comment="/usr/bin/asciitopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1332"/>
      <state state_ref="oval:org.mitre.oval:ste:2164"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2311" version="1" check="at least one" comment="/usr/bin/asciitopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1332"/>
      <state state_ref="oval:org.mitre.oval:ste:2163"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2310" version="1" check="at least one" comment="/usr/bin/atktopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1331"/>
      <state state_ref="oval:org.mitre.oval:ste:2162"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2309" version="1" check="at least one" comment="/usr/bin/atktopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1331"/>
      <state state_ref="oval:org.mitre.oval:ste:2161"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2308" version="1" check="at least one" comment="/usr/bin/atktopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1331"/>
      <state state_ref="oval:org.mitre.oval:ste:2160"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2307" version="1" check="at least one" comment="/usr/bin/bioradtopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1330"/>
      <state state_ref="oval:org.mitre.oval:ste:2159"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2306" version="1" check="at least one" comment="/usr/bin/bioradtopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1330"/>
      <state state_ref="oval:org.mitre.oval:ste:2158"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2305" version="1" check="at least one" comment="/usr/bin/bioradtopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1330"/>
      <state state_ref="oval:org.mitre.oval:ste:2157"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2304" version="1" check="at least one" comment="/usr/bin/bmptoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1329"/>
      <state state_ref="oval:org.mitre.oval:ste:2156"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2303" version="1" check="at least one" comment="/usr/bin/bmptoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1329"/>
      <state state_ref="oval:org.mitre.oval:ste:2155"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2302" version="1" check="at least one" comment="/usr/bin/bmptoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1329"/>
      <state state_ref="oval:org.mitre.oval:ste:2154"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2301" version="1" check="at least one" comment="/usr/bin/brushtopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1328"/>
      <state state_ref="oval:org.mitre.oval:ste:2153"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2300" version="1" check="at least one" comment="/usr/bin/brushtopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1328"/>
      <state state_ref="oval:org.mitre.oval:ste:2152"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2299" version="1" check="at least one" comment="/usr/bin/brushtopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1328"/>
      <state state_ref="oval:org.mitre.oval:ste:2151"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2298" version="1" check="at least one" comment="/usr/bin/cmuwmtopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1327"/>
      <state state_ref="oval:org.mitre.oval:ste:2150"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2297" version="1" check="at least one" comment="/usr/bin/cmuwmtopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1327"/>
      <state state_ref="oval:org.mitre.oval:ste:2149"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2296" version="1" check="at least one" comment="/usr/bin/cmuwmtopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1327"/>
      <state state_ref="oval:org.mitre.oval:ste:2148"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2295" version="1" check="at least one" comment="/usr/bin/eyuvtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1326"/>
      <state state_ref="oval:org.mitre.oval:ste:2147"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2294" version="1" check="at least one" comment="/usr/bin/eyuvtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1326"/>
      <state state_ref="oval:org.mitre.oval:ste:2146"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2293" version="1" check="at least one" comment="/usr/bin/eyuvtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1326"/>
      <state state_ref="oval:org.mitre.oval:ste:2145"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2292" version="1" check="at least one" comment="/usr/bin/fiascotopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1325"/>
      <state state_ref="oval:org.mitre.oval:ste:2144"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2291" version="1" check="at least one" comment="/usr/bin/fiascotopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1325"/>
      <state state_ref="oval:org.mitre.oval:ste:2143"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2290" version="1" check="at least one" comment="/usr/bin/fiascotopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1325"/>
      <state state_ref="oval:org.mitre.oval:ste:2142"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2289" version="1" check="at least one" comment="/usr/bin/fitstopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1324"/>
      <state state_ref="oval:org.mitre.oval:ste:2141"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2288" version="1" check="at least one" comment="/usr/bin/fitstopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1324"/>
      <state state_ref="oval:org.mitre.oval:ste:2140"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2287" version="1" check="at least one" comment="/usr/bin/fitstopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1324"/>
      <state state_ref="oval:org.mitre.oval:ste:2139"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2286" version="1" check="at least one" comment="/usr/bin/fstopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1323"/>
      <state state_ref="oval:org.mitre.oval:ste:2138"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2285" version="1" check="at least one" comment="/usr/bin/fstopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1323"/>
      <state state_ref="oval:org.mitre.oval:ste:2137"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2284" version="1" check="at least one" comment="/usr/bin/fstopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1323"/>
      <state state_ref="oval:org.mitre.oval:ste:2136"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2283" version="1" check="at least one" comment="/usr/bin/g3topbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1322"/>
      <state state_ref="oval:org.mitre.oval:ste:2135"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2282" version="1" check="at least one" comment="/usr/bin/g3topbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1322"/>
      <state state_ref="oval:org.mitre.oval:ste:2134"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2281" version="1" check="at least one" comment="/usr/bin/g3topbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1322"/>
      <state state_ref="oval:org.mitre.oval:ste:2133"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2280" version="1" check="at least one" comment="/usr/bin/gemtopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1321"/>
      <state state_ref="oval:org.mitre.oval:ste:2132"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2279" version="1" check="at least one" comment="/usr/bin/gemtopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1321"/>
      <state state_ref="oval:org.mitre.oval:ste:2131"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2278" version="1" check="at least one" comment="/usr/bin/gemtopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1321"/>
      <state state_ref="oval:org.mitre.oval:ste:2130"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2277" version="1" check="at least one" comment="/usr/bin/gemtopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1320"/>
      <state state_ref="oval:org.mitre.oval:ste:2129"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2276" version="1" check="at least one" comment="/usr/bin/gemtopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1320"/>
      <state state_ref="oval:org.mitre.oval:ste:2128"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2275" version="1" check="at least one" comment="/usr/bin/gemtopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1320"/>
      <state state_ref="oval:org.mitre.oval:ste:2127"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2274" version="1" check="at least one" comment="/usr/bin/giftopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1319"/>
      <state state_ref="oval:org.mitre.oval:ste:2126"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2273" version="1" check="at least one" comment="/usr/bin/giftopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1319"/>
      <state state_ref="oval:org.mitre.oval:ste:2125"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2272" version="1" check="at least one" comment="/usr/bin/giftopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1319"/>
      <state state_ref="oval:org.mitre.oval:ste:2124"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2271" version="1" check="at least one" comment="/usr/bin/gouldtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1318"/>
      <state state_ref="oval:org.mitre.oval:ste:2123"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2270" version="1" check="at least one" comment="/usr/bin/gouldtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1318"/>
      <state state_ref="oval:org.mitre.oval:ste:2122"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2269" version="1" check="at least one" comment="/usr/bin/gouldtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1318"/>
      <state state_ref="oval:org.mitre.oval:ste:2121"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2268" version="1" check="at least one" comment="/usr/bin/hipstopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1317"/>
      <state state_ref="oval:org.mitre.oval:ste:2120"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2267" version="1" check="at least one" comment="/usr/bin/hipstopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1317"/>
      <state state_ref="oval:org.mitre.oval:ste:2119"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2266" version="1" check="at least one" comment="/usr/bin/hipstopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1317"/>
      <state state_ref="oval:org.mitre.oval:ste:2118"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2265" version="1" check="at least one" comment="/usr/bin/hpcdtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1316"/>
      <state state_ref="oval:org.mitre.oval:ste:2117"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2264" version="1" check="at least one" comment="/usr/bin/hpcdtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1316"/>
      <state state_ref="oval:org.mitre.oval:ste:2116"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2263" version="1" check="at least one" comment="/usr/bin/hpcdtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1316"/>
      <state state_ref="oval:org.mitre.oval:ste:2115"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2262" version="1" check="at least one" comment="/usr/bin/icontopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1315"/>
      <state state_ref="oval:org.mitre.oval:ste:2114"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2261" version="1" check="at least one" comment="/usr/bin/icontopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1315"/>
      <state state_ref="oval:org.mitre.oval:ste:2113"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2260" version="1" check="at least one" comment="/usr/bin/icontopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1315"/>
      <state state_ref="oval:org.mitre.oval:ste:2112"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2259" version="1" check="at least one" comment="/usr/bin/ilbmtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1314"/>
      <state state_ref="oval:org.mitre.oval:ste:2111"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2258" version="1" check="at least one" comment="/usr/bin/ilbmtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1314"/>
      <state state_ref="oval:org.mitre.oval:ste:2110"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2257" version="1" check="at least one" comment="/usr/bin/ilbmtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1314"/>
      <state state_ref="oval:org.mitre.oval:ste:2109"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2256" version="1" check="at least one" comment="/usr/bin/imgtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1313"/>
      <state state_ref="oval:org.mitre.oval:ste:2108"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2255" version="1" check="at least one" comment="/usr/bin/imgtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1313"/>
      <state state_ref="oval:org.mitre.oval:ste:2107"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2254" version="1" check="at least one" comment="/usr/bin/imgtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1313"/>
      <state state_ref="oval:org.mitre.oval:ste:2106"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2253" version="1" check="at least one" comment="/usr/bin/jpegtopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1312"/>
      <state state_ref="oval:org.mitre.oval:ste:2105"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2252" version="1" check="at least one" comment="/usr/bin/jpegtopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1312"/>
      <state state_ref="oval:org.mitre.oval:ste:2104"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2251" version="1" check="at least one" comment="/usr/bin/jpegtopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1312"/>
      <state state_ref="oval:org.mitre.oval:ste:2103"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2250" version="1" check="at least one" comment="/usr/bin/leaftoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1311"/>
      <state state_ref="oval:org.mitre.oval:ste:2102"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2249" version="1" check="at least one" comment="/usr/bin/leaftoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1311"/>
      <state state_ref="oval:org.mitre.oval:ste:2101"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2248" version="1" check="at least one" comment="/usr/bin/leaftoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1311"/>
      <state state_ref="oval:org.mitre.oval:ste:2100"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2247" version="1" check="at least one" comment="/usr/bin/lispmtopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1310"/>
      <state state_ref="oval:org.mitre.oval:ste:2099"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2246" version="1" check="at least one" comment="/usr/bin/lispmtopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1310"/>
      <state state_ref="oval:org.mitre.oval:ste:2098"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2245" version="1" check="at least one" comment="/usr/bin/lispmtopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1310"/>
      <state state_ref="oval:org.mitre.oval:ste:2097"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2244" version="1" check="at least one" comment="/usr/bin/macptopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1309"/>
      <state state_ref="oval:org.mitre.oval:ste:2096"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2243" version="1" check="at least one" comment="/usr/bin/macptopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1309"/>
      <state state_ref="oval:org.mitre.oval:ste:2095"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2242" version="1" check="at least one" comment="/usr/bin/macptopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1309"/>
      <state state_ref="oval:org.mitre.oval:ste:2094"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2241" version="1" check="at least one" comment="/usr/bin/mdatopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1308"/>
      <state state_ref="oval:org.mitre.oval:ste:2093"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2240" version="1" check="at least one" comment="/usr/bin/mdatopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1308"/>
      <state state_ref="oval:org.mitre.oval:ste:2092"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2239" version="1" check="at least one" comment="/usr/bin/mdatopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1308"/>
      <state state_ref="oval:org.mitre.oval:ste:2091"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2238" version="1" check="at least one" comment="/usr/bin/mgrtopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1307"/>
      <state state_ref="oval:org.mitre.oval:ste:2090"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2237" version="1" check="at least one" comment="/usr/bin/mgrtopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1307"/>
      <state state_ref="oval:org.mitre.oval:ste:2089"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2236" version="1" check="at least one" comment="/usr/bin/mgrtopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1307"/>
      <state state_ref="oval:org.mitre.oval:ste:2088"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2235" version="1" check="at least one" comment="/usr/bin/mtvtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1306"/>
      <state state_ref="oval:org.mitre.oval:ste:2087"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2234" version="1" check="at least one" comment="/usr/bin/mtvtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1306"/>
      <state state_ref="oval:org.mitre.oval:ste:2086"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2233" version="1" check="at least one" comment="/usr/bin/mtvtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1306"/>
      <state state_ref="oval:org.mitre.oval:ste:2085"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2232" version="1" check="at least one" comment="/usr/bin/neotoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1305"/>
      <state state_ref="oval:org.mitre.oval:ste:2084"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2231" version="1" check="at least one" comment="/usr/bin/neotoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1305"/>
      <state state_ref="oval:org.mitre.oval:ste:2083"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2230" version="1" check="at least one" comment="/usr/bin/neotoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1305"/>
      <state state_ref="oval:org.mitre.oval:ste:2082"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2229" version="1" check="at least one" comment="/usr/bin/palmtopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1304"/>
      <state state_ref="oval:org.mitre.oval:ste:2081"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2228" version="1" check="at least one" comment="/usr/bin/palmtopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1304"/>
      <state state_ref="oval:org.mitre.oval:ste:2080"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2227" version="1" check="at least one" comment="/usr/bin/palmtopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1304"/>
      <state state_ref="oval:org.mitre.oval:ste:2079"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2226" version="1" check="at least one" comment="/usr/bin/pamchannel is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1303"/>
      <state state_ref="oval:org.mitre.oval:ste:2078"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2225" version="1" check="at least one" comment="/usr/bin/pamchannel is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1303"/>
      <state state_ref="oval:org.mitre.oval:ste:2077"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2224" version="1" check="at least one" comment="/usr/bin/pamchannel is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1303"/>
      <state state_ref="oval:org.mitre.oval:ste:2076"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2223" version="1" check="at least one" comment="/usr/bin/pamcut is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1302"/>
      <state state_ref="oval:org.mitre.oval:ste:2075"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2222" version="1" check="at least one" comment="/usr/bin/pamcut is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1302"/>
      <state state_ref="oval:org.mitre.oval:ste:2074"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2221" version="1" check="at least one" comment="/usr/bin/pamcut is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1302"/>
      <state state_ref="oval:org.mitre.oval:ste:2073"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2220" version="1" check="at least one" comment="/usr/bin/pamdeinterlace is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1301"/>
      <state state_ref="oval:org.mitre.oval:ste:2072"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2219" version="1" check="at least one" comment="/usr/bin/pamdeinterlace is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1301"/>
      <state state_ref="oval:org.mitre.oval:ste:2071"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2218" version="1" check="at least one" comment="/usr/bin/pamdeinterlace is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1301"/>
      <state state_ref="oval:org.mitre.oval:ste:2070"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2217" version="1" check="at least one" comment="/usr/bin/pamfile is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1300"/>
      <state state_ref="oval:org.mitre.oval:ste:2069"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2216" version="1" check="at least one" comment="/usr/bin/pamfile is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1300"/>
      <state state_ref="oval:org.mitre.oval:ste:2068"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2215" version="1" check="at least one" comment="/usr/bin/pamfile is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1300"/>
      <state state_ref="oval:org.mitre.oval:ste:2067"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2214" version="1" check="at least one" comment="/usr/bin/pamoil is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1299"/>
      <state state_ref="oval:org.mitre.oval:ste:2066"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2213" version="1" check="at least one" comment="/usr/bin/pamoil is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1299"/>
      <state state_ref="oval:org.mitre.oval:ste:2065"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2212" version="1" check="at least one" comment="/usr/bin/pamoil is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1299"/>
      <state state_ref="oval:org.mitre.oval:ste:2064"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2211" version="1" check="at least one" comment="/usr/bin/pamstretch is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1298"/>
      <state state_ref="oval:org.mitre.oval:ste:2063"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2210" version="1" check="at least one" comment="/usr/bin/pamstretch is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1298"/>
      <state state_ref="oval:org.mitre.oval:ste:2062"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2209" version="1" check="at least one" comment="/usr/bin/pamstretch is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1298"/>
      <state state_ref="oval:org.mitre.oval:ste:2061"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2208" version="1" check="at least one" comment="/usr/bin/pamtopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1297"/>
      <state state_ref="oval:org.mitre.oval:ste:2060"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2207" version="1" check="at least one" comment="/usr/bin/pamtopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1297"/>
      <state state_ref="oval:org.mitre.oval:ste:2059"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2206" version="1" check="at least one" comment="/usr/bin/pamtopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1297"/>
      <state state_ref="oval:org.mitre.oval:ste:2058"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2205" version="1" check="at least one" comment="/usr/bin/pbmclean is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1296"/>
      <state state_ref="oval:org.mitre.oval:ste:2057"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2204" version="1" check="at least one" comment="/usr/bin/pbmclean is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1296"/>
      <state state_ref="oval:org.mitre.oval:ste:2056"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2203" version="1" check="at least one" comment="/usr/bin/pbmclean is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1296"/>
      <state state_ref="oval:org.mitre.oval:ste:2055"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2202" version="1" check="at least one" comment="/usr/bin/pbmlife is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1295"/>
      <state state_ref="oval:org.mitre.oval:ste:2054"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2201" version="1" check="at least one" comment="/usr/bin/pbmlife is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1295"/>
      <state state_ref="oval:org.mitre.oval:ste:2053"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2200" version="1" check="at least one" comment="/usr/bin/pbmlife is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1295"/>
      <state state_ref="oval:org.mitre.oval:ste:2052"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2199" version="1" check="at least one" comment="/usr/bin/pbmmake is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1294"/>
      <state state_ref="oval:org.mitre.oval:ste:2051"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2198" version="1" check="at least one" comment="/usr/bin/pbmmake is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1294"/>
      <state state_ref="oval:org.mitre.oval:ste:2050"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2197" version="1" check="at least one" comment="/usr/bin/pbmmake is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1294"/>
      <state state_ref="oval:org.mitre.oval:ste:2049"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2196" version="1" check="at least one" comment="/usr/bin/pbmmask is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1293"/>
      <state state_ref="oval:org.mitre.oval:ste:2048"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2195" version="1" check="at least one" comment="/usr/bin/pbmmask is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1293"/>
      <state state_ref="oval:org.mitre.oval:ste:2047"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2194" version="1" check="at least one" comment="/usr/bin/pbmmask is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1293"/>
      <state state_ref="oval:org.mitre.oval:ste:2046"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2193" version="1" check="at least one" comment="/usr/bin/pbmpage is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1292"/>
      <state state_ref="oval:org.mitre.oval:ste:2045"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2192" version="1" check="at least one" comment="/usr/bin/pbmpage is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1292"/>
      <state state_ref="oval:org.mitre.oval:ste:2044"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2191" version="1" check="at least one" comment="/usr/bin/pbmpage is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1292"/>
      <state state_ref="oval:org.mitre.oval:ste:2043"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2190" version="1" check="at least one" comment="/usr/bin/pbmpscale is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1291"/>
      <state state_ref="oval:org.mitre.oval:ste:2042"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2189" version="1" check="at least one" comment="/usr/bin/pbmpscale is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1291"/>
      <state state_ref="oval:org.mitre.oval:ste:2041"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2188" version="1" check="at least one" comment="/usr/bin/pbmpscale is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1291"/>
      <state state_ref="oval:org.mitre.oval:ste:2040"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2187" version="1" check="at least one" comment="/usr/bin/pbmreduce is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1290"/>
      <state state_ref="oval:org.mitre.oval:ste:2039"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2186" version="1" check="at least one" comment="/usr/bin/pbmreduce is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1290"/>
      <state state_ref="oval:org.mitre.oval:ste:2038"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2185" version="1" check="at least one" comment="/usr/bin/pbmreduce is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1290"/>
      <state state_ref="oval:org.mitre.oval:ste:2037"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2184" version="1" check="at least one" comment="/usr/bin/pbmtext is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1289"/>
      <state state_ref="oval:org.mitre.oval:ste:2036"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2183" version="1" check="at least one" comment="/usr/bin/pbmtext is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1289"/>
      <state state_ref="oval:org.mitre.oval:ste:2035"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2182" version="1" check="at least one" comment="/usr/bin/pbmtext is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1289"/>
      <state state_ref="oval:org.mitre.oval:ste:2034"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2181" version="1" check="at least one" comment="/usr/bin/pbmto10x is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1288"/>
      <state state_ref="oval:org.mitre.oval:ste:2033"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2180" version="1" check="at least one" comment="/usr/bin/pbmto10x is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1288"/>
      <state state_ref="oval:org.mitre.oval:ste:2032"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2179" version="1" check="at least one" comment="/usr/bin/pbmto10x is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1288"/>
      <state state_ref="oval:org.mitre.oval:ste:2031"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2178" version="1" check="at least one" comment="/usr/bin/pbmto4425 is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1287"/>
      <state state_ref="oval:org.mitre.oval:ste:2030"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2177" version="1" check="at least one" comment="/usr/bin/pbmto4425 is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1287"/>
      <state state_ref="oval:org.mitre.oval:ste:2029"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2176" version="1" check="at least one" comment="/usr/bin/pbmto4425 is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1287"/>
      <state state_ref="oval:org.mitre.oval:ste:2028"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2175" version="1" check="at least one" comment="/usr/bin/pbmtoascii is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1286"/>
      <state state_ref="oval:org.mitre.oval:ste:2027"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2174" version="1" check="at least one" comment="/usr/bin/pbmtoascii is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1286"/>
      <state state_ref="oval:org.mitre.oval:ste:2026"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2173" version="1" check="at least one" comment="/usr/bin/pbmtoascii is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1286"/>
      <state state_ref="oval:org.mitre.oval:ste:2025"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2172" version="1" check="at least one" comment="/usr/bin/pbmtoatk is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1285"/>
      <state state_ref="oval:org.mitre.oval:ste:2024"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2171" version="1" check="at least one" comment="/usr/bin/pbmtoatk is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1285"/>
      <state state_ref="oval:org.mitre.oval:ste:2023"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2170" version="1" check="at least one" comment="/usr/bin/pbmtoatk is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1285"/>
      <state state_ref="oval:org.mitre.oval:ste:2022"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2169" version="1" check="at least one" comment="/usr/bin/pbmtobbnbg is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1284"/>
      <state state_ref="oval:org.mitre.oval:ste:2021"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2168" version="1" check="at least one" comment="/usr/bin/pbmtobbnbg is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1284"/>
      <state state_ref="oval:org.mitre.oval:ste:2020"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2167" version="1" check="at least one" comment="/usr/bin/pbmtobbnbg is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1284"/>
      <state state_ref="oval:org.mitre.oval:ste:2019"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2166" version="1" check="at least one" comment="/usr/bin/pbmtocmuwm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1283"/>
      <state state_ref="oval:org.mitre.oval:ste:2018"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2165" version="1" check="at least one" comment="/usr/bin/pbmtocmuwm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1283"/>
      <state state_ref="oval:org.mitre.oval:ste:2017"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2164" version="1" check="at least one" comment="/usr/bin/pbmtocmuwm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1283"/>
      <state state_ref="oval:org.mitre.oval:ste:2016"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2163" version="1" check="at least one" comment="/usr/bin/pbmtoepsi is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1282"/>
      <state state_ref="oval:org.mitre.oval:ste:2015"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2162" version="1" check="at least one" comment="/usr/bin/pbmtoepsi is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1282"/>
      <state state_ref="oval:org.mitre.oval:ste:2014"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2161" version="1" check="at least one" comment="/usr/bin/pbmtoepsi is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1282"/>
      <state state_ref="oval:org.mitre.oval:ste:2013"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2160" version="1" check="at least one" comment="/usr/bin/pbmtoepson is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1281"/>
      <state state_ref="oval:org.mitre.oval:ste:2012"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2159" version="1" check="at least one" comment="/usr/bin/pbmtoepson is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1281"/>
      <state state_ref="oval:org.mitre.oval:ste:2011"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2158" version="1" check="at least one" comment="/usr/bin/pbmtoepson is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1281"/>
      <state state_ref="oval:org.mitre.oval:ste:2010"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2157" version="1" check="at least one" comment="/usr/bin/pbmtog3 is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1280"/>
      <state state_ref="oval:org.mitre.oval:ste:2009"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2156" version="1" check="at least one" comment="/usr/bin/pbmtog3 is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1280"/>
      <state state_ref="oval:org.mitre.oval:ste:2008"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2155" version="1" check="at least one" comment="/usr/bin/pbmtog3 is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1280"/>
      <state state_ref="oval:org.mitre.oval:ste:2007"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2154" version="1" check="at least one" comment="/usr/bin/pbmtogem is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1279"/>
      <state state_ref="oval:org.mitre.oval:ste:2006"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2153" version="1" check="at least one" comment="/usr/bin/pbmtogem is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1279"/>
      <state state_ref="oval:org.mitre.oval:ste:2005"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2152" version="1" check="at least one" comment="/usr/bin/pbmtogem is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1279"/>
      <state state_ref="oval:org.mitre.oval:ste:2004"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2151" version="1" check="at least one" comment="/usr/bin/pbmtogo is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1278"/>
      <state state_ref="oval:org.mitre.oval:ste:2003"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2150" version="1" check="at least one" comment="/usr/bin/pbmtogo is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1278"/>
      <state state_ref="oval:org.mitre.oval:ste:2002"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2149" version="1" check="at least one" comment="/usr/bin/pbmtogo is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1278"/>
      <state state_ref="oval:org.mitre.oval:ste:2001"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2148" version="1" check="at least one" comment="/usr/bin/pbmtoicon is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1277"/>
      <state state_ref="oval:org.mitre.oval:ste:2000"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2147" version="1" check="at least one" comment="/usr/bin/pbmtoicon is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1277"/>
      <state state_ref="oval:org.mitre.oval:ste:1999"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2146" version="1" check="at least one" comment="/usr/bin/pbmtoicon is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1277"/>
      <state state_ref="oval:org.mitre.oval:ste:1998"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2145" version="1" check="at least one" comment="/usr/bin/pbmtolj is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1276"/>
      <state state_ref="oval:org.mitre.oval:ste:1997"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2144" version="1" check="at least one" comment="/usr/bin/pbmtolj is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1276"/>
      <state state_ref="oval:org.mitre.oval:ste:1996"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2143" version="1" check="at least one" comment="/usr/bin/pbmtolj is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1276"/>
      <state state_ref="oval:org.mitre.oval:ste:1995"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2142" version="1" check="at least one" comment="/usr/bin/pbmtoln03 is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1275"/>
      <state state_ref="oval:org.mitre.oval:ste:1994"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2141" version="1" check="at least one" comment="/usr/bin/pbmtoln03 is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1275"/>
      <state state_ref="oval:org.mitre.oval:ste:1993"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2140" version="1" check="at least one" comment="/usr/bin/pbmtoln03 is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1275"/>
      <state state_ref="oval:org.mitre.oval:ste:1992"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2139" version="1" check="at least one" comment="/usr/bin/pbmtolps is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1274"/>
      <state state_ref="oval:org.mitre.oval:ste:1991"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2138" version="1" check="at least one" comment="/usr/bin/pbmtolps is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1274"/>
      <state state_ref="oval:org.mitre.oval:ste:1990"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2137" version="1" check="at least one" comment="/usr/bin/pbmtolps is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1274"/>
      <state state_ref="oval:org.mitre.oval:ste:1989"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2136" version="1" check="at least one" comment="/usr/bin/pbmtomacp is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1273"/>
      <state state_ref="oval:org.mitre.oval:ste:1988"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2135" version="1" check="at least one" comment="/usr/bin/pbmtomacp is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1273"/>
      <state state_ref="oval:org.mitre.oval:ste:1987"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2134" version="1" check="at least one" comment="/usr/bin/pbmtomacp is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1273"/>
      <state state_ref="oval:org.mitre.oval:ste:1986"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2133" version="1" check="at least one" comment="/usr/bin/pbmtomda is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1272"/>
      <state state_ref="oval:org.mitre.oval:ste:1985"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2132" version="1" check="at least one" comment="/usr/bin/pbmtomda is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1272"/>
      <state state_ref="oval:org.mitre.oval:ste:1984"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2131" version="1" check="at least one" comment="/usr/bin/pbmtomda is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1272"/>
      <state state_ref="oval:org.mitre.oval:ste:1983"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2130" version="1" check="at least one" comment="/usr/bin/pbmtomgr is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1271"/>
      <state state_ref="oval:org.mitre.oval:ste:1982"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2129" version="1" check="at least one" comment="/usr/bin/pbmtomgr is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1271"/>
      <state state_ref="oval:org.mitre.oval:ste:1981"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2128" version="1" check="at least one" comment="/usr/bin/pbmtomgr is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1271"/>
      <state state_ref="oval:org.mitre.oval:ste:1980"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2127" version="1" check="at least one" comment="/usr/bin/pbmtonokia is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1270"/>
      <state state_ref="oval:org.mitre.oval:ste:1979"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2126" version="1" check="at least one" comment="/usr/bin/pbmtonokia is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1270"/>
      <state state_ref="oval:org.mitre.oval:ste:1978"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2125" version="1" check="at least one" comment="/usr/bin/pbmtonokia is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1270"/>
      <state state_ref="oval:org.mitre.oval:ste:1977"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2124" version="1" check="at least one" comment="/usr/bin/pbmtopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1269"/>
      <state state_ref="oval:org.mitre.oval:ste:1976"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2123" version="1" check="at least one" comment="/usr/bin/pbmtopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1269"/>
      <state state_ref="oval:org.mitre.oval:ste:1975"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2122" version="1" check="at least one" comment="/usr/bin/pbmtopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1269"/>
      <state state_ref="oval:org.mitre.oval:ste:1974"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2121" version="1" check="at least one" comment="/usr/bin/pbmtopi3 is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1268"/>
      <state state_ref="oval:org.mitre.oval:ste:1973"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2120" version="1" check="at least one" comment="/usr/bin/pbmtopi3 is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1268"/>
      <state state_ref="oval:org.mitre.oval:ste:1972"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2119" version="1" check="at least one" comment="/usr/bin/pbmtopi3 is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1268"/>
      <state state_ref="oval:org.mitre.oval:ste:1971"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2118" version="1" check="at least one" comment="/usr/bin/pbmtopk is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1267"/>
      <state state_ref="oval:org.mitre.oval:ste:1970"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2117" version="1" check="at least one" comment="/usr/bin/pbmtopk is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1267"/>
      <state state_ref="oval:org.mitre.oval:ste:1969"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2116" version="1" check="at least one" comment="/usr/bin/pbmtopk is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1267"/>
      <state state_ref="oval:org.mitre.oval:ste:1968"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2115" version="1" check="at least one" comment="/usr/bin/pbmtoplot is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1266"/>
      <state state_ref="oval:org.mitre.oval:ste:1967"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2114" version="1" check="at least one" comment="/usr/bin/pbmtoplot is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1266"/>
      <state state_ref="oval:org.mitre.oval:ste:1966"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2113" version="1" check="at least one" comment="/usr/bin/pbmtoplot is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1266"/>
      <state state_ref="oval:org.mitre.oval:ste:1965"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2112" version="1" check="at least one" comment="/usr/bin/pbmtoppa is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1265"/>
      <state state_ref="oval:org.mitre.oval:ste:1964"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2111" version="1" check="at least one" comment="/usr/bin/pbmtoppa is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1265"/>
      <state state_ref="oval:org.mitre.oval:ste:1963"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2110" version="1" check="at least one" comment="/usr/bin/pbmtoppa is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1265"/>
      <state state_ref="oval:org.mitre.oval:ste:1962"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2109" version="1" check="at least one" comment="/usr/bin/pbmtopsg3 is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1264"/>
      <state state_ref="oval:org.mitre.oval:ste:1961"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2108" version="1" check="at least one" comment="/usr/bin/pbmtopsg3 is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1264"/>
      <state state_ref="oval:org.mitre.oval:ste:1960"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2107" version="1" check="at least one" comment="/usr/bin/pbmtopsg3 is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1264"/>
      <state state_ref="oval:org.mitre.oval:ste:1959"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2106" version="1" check="at least one" comment="/usr/bin/pbmtoptx is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1263"/>
      <state state_ref="oval:org.mitre.oval:ste:1958"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2105" version="1" check="at least one" comment="/usr/bin/pbmtoptx is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1263"/>
      <state state_ref="oval:org.mitre.oval:ste:1957"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2104" version="1" check="at least one" comment="/usr/bin/pbmtoptx is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1263"/>
      <state state_ref="oval:org.mitre.oval:ste:1956"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2103" version="1" check="at least one" comment="/usr/bin/pbmtowbmp is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1262"/>
      <state state_ref="oval:org.mitre.oval:ste:1955"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2102" version="1" check="at least one" comment="/usr/bin/pbmtowbmp is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1262"/>
      <state state_ref="oval:org.mitre.oval:ste:1954"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2101" version="1" check="at least one" comment="/usr/bin/pbmtowbmp is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1262"/>
      <state state_ref="oval:org.mitre.oval:ste:1953"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2100" version="1" check="at least one" comment="/usr/bin/pbmtox10bm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1261"/>
      <state state_ref="oval:org.mitre.oval:ste:1952"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2099" version="1" check="at least one" comment="/usr/bin/pbmtox10bm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1261"/>
      <state state_ref="oval:org.mitre.oval:ste:1951"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2098" version="1" check="at least one" comment="/usr/bin/pbmtox10bm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1261"/>
      <state state_ref="oval:org.mitre.oval:ste:1950"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2097" version="1" check="at least one" comment="/usr/bin/pbmtoxbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1260"/>
      <state state_ref="oval:org.mitre.oval:ste:1949"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2096" version="1" check="at least one" comment="/usr/bin/pbmtoxbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1260"/>
      <state state_ref="oval:org.mitre.oval:ste:1948"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2095" version="1" check="at least one" comment="/usr/bin/pbmtoxbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1260"/>
      <state state_ref="oval:org.mitre.oval:ste:1947"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2094" version="1" check="at least one" comment="/usr/bin/pbmtoybm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1259"/>
      <state state_ref="oval:org.mitre.oval:ste:1946"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2093" version="1" check="at least one" comment="/usr/bin/pbmtoybm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1259"/>
      <state state_ref="oval:org.mitre.oval:ste:1945"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2092" version="1" check="at least one" comment="/usr/bin/pbmtoybm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1259"/>
      <state state_ref="oval:org.mitre.oval:ste:1944"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2091" version="1" check="at least one" comment="/usr/bin/pbmtozinc is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1258"/>
      <state state_ref="oval:org.mitre.oval:ste:1943"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2090" version="1" check="at least one" comment="/usr/bin/pbmtozinc is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1258"/>
      <state state_ref="oval:org.mitre.oval:ste:1942"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2089" version="1" check="at least one" comment="/usr/bin/pbmtozinc is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1258"/>
      <state state_ref="oval:org.mitre.oval:ste:1941"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2088" version="1" check="at least one" comment="/usr/bin/pbmupc is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1257"/>
      <state state_ref="oval:org.mitre.oval:ste:1940"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2087" version="1" check="at least one" comment="/usr/bin/pbmupc is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1257"/>
      <state state_ref="oval:org.mitre.oval:ste:1939"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2086" version="1" check="at least one" comment="/usr/bin/pbmupc is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1257"/>
      <state state_ref="oval:org.mitre.oval:ste:1938"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2085" version="1" check="at least one" comment="/usr/bin/pcxtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1256"/>
      <state state_ref="oval:org.mitre.oval:ste:1937"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2084" version="1" check="at least one" comment="/usr/bin/pcxtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1256"/>
      <state state_ref="oval:org.mitre.oval:ste:1936"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2083" version="1" check="at least one" comment="/usr/bin/pcxtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1256"/>
      <state state_ref="oval:org.mitre.oval:ste:1935"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2082" version="1" check="at least one" comment="/usr/bin/pgmbentley is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1255"/>
      <state state_ref="oval:org.mitre.oval:ste:1934"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2081" version="1" check="at least one" comment="/usr/bin/pgmbentley is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1255"/>
      <state state_ref="oval:org.mitre.oval:ste:1933"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2080" version="1" check="at least one" comment="/usr/bin/pgmbentley is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1255"/>
      <state state_ref="oval:org.mitre.oval:ste:1932"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2079" version="1" check="at least one" comment="/usr/bin/pgmcrater is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1254"/>
      <state state_ref="oval:org.mitre.oval:ste:1931"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2078" version="1" check="at least one" comment="/usr/bin/pgmcrater is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1254"/>
      <state state_ref="oval:org.mitre.oval:ste:1930"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2077" version="1" check="at least one" comment="/usr/bin/pgmcrater is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1254"/>
      <state state_ref="oval:org.mitre.oval:ste:1929"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2076" version="1" check="at least one" comment="/usr/bin/pgmedge is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1253"/>
      <state state_ref="oval:org.mitre.oval:ste:1928"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2075" version="1" check="at least one" comment="/usr/bin/pgmedge is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1253"/>
      <state state_ref="oval:org.mitre.oval:ste:1927"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2074" version="1" check="at least one" comment="/usr/bin/pgmedge is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1253"/>
      <state state_ref="oval:org.mitre.oval:ste:1926"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2073" version="1" check="at least one" comment="/usr/bin/pgmenhance is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1252"/>
      <state state_ref="oval:org.mitre.oval:ste:1925"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2072" version="1" check="at least one" comment="/usr/bin/pgmenhance is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1252"/>
      <state state_ref="oval:org.mitre.oval:ste:1924"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2071" version="1" check="at least one" comment="/usr/bin/pgmenhance is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1252"/>
      <state state_ref="oval:org.mitre.oval:ste:1923"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2070" version="1" check="at least one" comment="/usr/bin/pgmhist is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1251"/>
      <state state_ref="oval:org.mitre.oval:ste:1922"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2069" version="1" check="at least one" comment="/usr/bin/pgmhist is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1251"/>
      <state state_ref="oval:org.mitre.oval:ste:1921"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2068" version="1" check="at least one" comment="/usr/bin/pgmhist is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1251"/>
      <state state_ref="oval:org.mitre.oval:ste:1920"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2067" version="1" check="at least one" comment="/usr/bin/pgmkernel is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1250"/>
      <state state_ref="oval:org.mitre.oval:ste:1919"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2066" version="1" check="at least one" comment="/usr/bin/pgmkernel is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1250"/>
      <state state_ref="oval:org.mitre.oval:ste:1918"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2065" version="1" check="at least one" comment="/usr/bin/pgmkernel is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1250"/>
      <state state_ref="oval:org.mitre.oval:ste:1917"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2064" version="1" check="at least one" comment="/usr/bin/pgmnoise is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1249"/>
      <state state_ref="oval:org.mitre.oval:ste:1916"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2063" version="1" check="at least one" comment="/usr/bin/pgmnoise is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1249"/>
      <state state_ref="oval:org.mitre.oval:ste:1915"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2062" version="1" check="at least one" comment="/usr/bin/pgmnoise is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1249"/>
      <state state_ref="oval:org.mitre.oval:ste:1914"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2061" version="1" check="at least one" comment="/usr/bin/pgmnorm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1248"/>
      <state state_ref="oval:org.mitre.oval:ste:1913"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2060" version="1" check="at least one" comment="/usr/bin/pgmnorm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1248"/>
      <state state_ref="oval:org.mitre.oval:ste:1912"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2059" version="1" check="at least one" comment="/usr/bin/pgmnorm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1248"/>
      <state state_ref="oval:org.mitre.oval:ste:1911"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2058" version="1" check="at least one" comment="/usr/bin/pgmoil is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1247"/>
      <state state_ref="oval:org.mitre.oval:ste:1910"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2057" version="1" check="at least one" comment="/usr/bin/pgmoil is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1247"/>
      <state state_ref="oval:org.mitre.oval:ste:1909"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2056" version="1" check="at least one" comment="/usr/bin/pgmoil is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1247"/>
      <state state_ref="oval:org.mitre.oval:ste:1908"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2055" version="1" check="at least one" comment="/usr/bin/pgmramp is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1246"/>
      <state state_ref="oval:org.mitre.oval:ste:1907"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2054" version="1" check="at least one" comment="/usr/bin/pgmramp is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1246"/>
      <state state_ref="oval:org.mitre.oval:ste:1906"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2053" version="1" check="at least one" comment="/usr/bin/pgmramp is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1246"/>
      <state state_ref="oval:org.mitre.oval:ste:1905"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2052" version="1" check="at least one" comment="/usr/bin/pgmslice is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1245"/>
      <state state_ref="oval:org.mitre.oval:ste:1904"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2051" version="1" check="at least one" comment="/usr/bin/pgmslice is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1245"/>
      <state state_ref="oval:org.mitre.oval:ste:1903"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2050" version="1" check="at least one" comment="/usr/bin/pgmslice is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1245"/>
      <state state_ref="oval:org.mitre.oval:ste:1902"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2049" version="1" check="at least one" comment="/usr/bin/pgmtexture is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1244"/>
      <state state_ref="oval:org.mitre.oval:ste:1901"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2048" version="1" check="at least one" comment="/usr/bin/pgmtexture is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1244"/>
      <state state_ref="oval:org.mitre.oval:ste:1900"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2047" version="1" check="at least one" comment="/usr/bin/pgmtexture is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1244"/>
      <state state_ref="oval:org.mitre.oval:ste:1899"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2046" version="1" check="at least one" comment="/usr/bin/pgmtofs is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1243"/>
      <state state_ref="oval:org.mitre.oval:ste:1898"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2045" version="1" check="at least one" comment="/usr/bin/pgmtofs is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1243"/>
      <state state_ref="oval:org.mitre.oval:ste:1897"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2044" version="1" check="at least one" comment="/usr/bin/pgmtofs is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1243"/>
      <state state_ref="oval:org.mitre.oval:ste:1896"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2043" version="1" check="at least one" comment="/usr/bin/pgmtolispm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1242"/>
      <state state_ref="oval:org.mitre.oval:ste:1895"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2042" version="1" check="at least one" comment="/usr/bin/pgmtolispm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1242"/>
      <state state_ref="oval:org.mitre.oval:ste:1894"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2041" version="1" check="at least one" comment="/usr/bin/pgmtolispm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1242"/>
      <state state_ref="oval:org.mitre.oval:ste:1893"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2040" version="1" check="at least one" comment="/usr/bin/pgmtopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1241"/>
      <state state_ref="oval:org.mitre.oval:ste:1892"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2039" version="1" check="at least one" comment="/usr/bin/pgmtopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1241"/>
      <state state_ref="oval:org.mitre.oval:ste:1891"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2038" version="1" check="at least one" comment="/usr/bin/pgmtopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1241"/>
      <state state_ref="oval:org.mitre.oval:ste:1890"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2037" version="1" check="at least one" comment="/usr/bin/pgmtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1240"/>
      <state state_ref="oval:org.mitre.oval:ste:1889"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2036" version="1" check="at least one" comment="/usr/bin/pgmtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1240"/>
      <state state_ref="oval:org.mitre.oval:ste:1888"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2035" version="1" check="at least one" comment="/usr/bin/pgmtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1240"/>
      <state state_ref="oval:org.mitre.oval:ste:1887"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2034" version="1" check="at least one" comment="/usr/bin/pi1toppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1239"/>
      <state state_ref="oval:org.mitre.oval:ste:1886"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2033" version="1" check="at least one" comment="/usr/bin/pi1toppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1239"/>
      <state state_ref="oval:org.mitre.oval:ste:1885"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2032" version="1" check="at least one" comment="/usr/bin/pi1toppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1239"/>
      <state state_ref="oval:org.mitre.oval:ste:1884"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2031" version="1" check="at least one" comment="/usr/bin/pi3topbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1238"/>
      <state state_ref="oval:org.mitre.oval:ste:1883"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2030" version="1" check="at least one" comment="/usr/bin/pi3topbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1238"/>
      <state state_ref="oval:org.mitre.oval:ste:1882"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2029" version="1" check="at least one" comment="/usr/bin/pi3topbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1238"/>
      <state state_ref="oval:org.mitre.oval:ste:1881"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2028" version="1" check="at least one" comment="/usr/bin/pjtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1237"/>
      <state state_ref="oval:org.mitre.oval:ste:1880"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2027" version="1" check="at least one" comment="/usr/bin/pjtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1237"/>
      <state state_ref="oval:org.mitre.oval:ste:1879"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2026" version="1" check="at least one" comment="/usr/bin/pjtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1237"/>
      <state state_ref="oval:org.mitre.oval:ste:1878"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2025" version="1" check="at least one" comment="/usr/bin/pktopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1236"/>
      <state state_ref="oval:org.mitre.oval:ste:1877"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2024" version="1" check="at least one" comment="/usr/bin/pktopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1236"/>
      <state state_ref="oval:org.mitre.oval:ste:1876"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2023" version="1" check="at least one" comment="/usr/bin/pktopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1236"/>
      <state state_ref="oval:org.mitre.oval:ste:1875"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2022" version="1" check="at least one" comment="/usr/bin/pngtopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1235"/>
      <state state_ref="oval:org.mitre.oval:ste:1874"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2021" version="1" check="at least one" comment="/usr/bin/pngtopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1235"/>
      <state state_ref="oval:org.mitre.oval:ste:1873"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2020" version="1" check="at least one" comment="/usr/bin/pngtopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1235"/>
      <state state_ref="oval:org.mitre.oval:ste:1872"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2019" version="1" check="at least one" comment="/usr/bin/pnmalias is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1234"/>
      <state state_ref="oval:org.mitre.oval:ste:1871"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2018" version="1" check="at least one" comment="/usr/bin/pnmalias is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1234"/>
      <state state_ref="oval:org.mitre.oval:ste:1870"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2017" version="1" check="at least one" comment="/usr/bin/pnmalias is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1234"/>
      <state state_ref="oval:org.mitre.oval:ste:1869"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2016" version="1" check="at least one" comment="/usr/bin/pnmarith is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1233"/>
      <state state_ref="oval:org.mitre.oval:ste:1868"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2015" version="1" check="at least one" comment="/usr/bin/pnmarith is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1233"/>
      <state state_ref="oval:org.mitre.oval:ste:1867"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2014" version="1" check="at least one" comment="/usr/bin/pnmarith is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1233"/>
      <state state_ref="oval:org.mitre.oval:ste:1866"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2013" version="1" check="at least one" comment="/usr/bin/pnmcat is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1232"/>
      <state state_ref="oval:org.mitre.oval:ste:1865"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2012" version="1" check="at least one" comment="/usr/bin/pnmcat is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1232"/>
      <state state_ref="oval:org.mitre.oval:ste:1864"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2011" version="1" check="at least one" comment="/usr/bin/pnmcat is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1232"/>
      <state state_ref="oval:org.mitre.oval:ste:1863"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2010" version="1" check="at least one" comment="/usr/bin/pnmcolormap is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1231"/>
      <state state_ref="oval:org.mitre.oval:ste:1862"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2009" version="1" check="at least one" comment="/usr/bin/pnmcolormap is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1231"/>
      <state state_ref="oval:org.mitre.oval:ste:1861"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2008" version="1" check="at least one" comment="/usr/bin/pnmcolormap is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1231"/>
      <state state_ref="oval:org.mitre.oval:ste:1860"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2007" version="1" check="at least one" comment="/usr/bin/pnmcomp is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1230"/>
      <state state_ref="oval:org.mitre.oval:ste:1859"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2006" version="1" check="at least one" comment="/usr/bin/pnmcomp is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1230"/>
      <state state_ref="oval:org.mitre.oval:ste:1858"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2005" version="1" check="at least one" comment="/usr/bin/pnmcomp is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1230"/>
      <state state_ref="oval:org.mitre.oval:ste:1857"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2004" version="1" check="at least one" comment="/usr/bin/pnmconvol is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1229"/>
      <state state_ref="oval:org.mitre.oval:ste:1856"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2003" version="1" check="at least one" comment="/usr/bin/pnmconvol is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1229"/>
      <state state_ref="oval:org.mitre.oval:ste:1855"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2002" version="1" check="at least one" comment="/usr/bin/pnmconvol is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1229"/>
      <state state_ref="oval:org.mitre.oval:ste:1854"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2001" version="1" check="at least one" comment="/usr/bin/pnmcrop is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1228"/>
      <state state_ref="oval:org.mitre.oval:ste:1853"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2000" version="1" check="at least one" comment="/usr/bin/pnmcrop is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1228"/>
      <state state_ref="oval:org.mitre.oval:ste:1852"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1999" version="1" check="at least one" comment="/usr/bin/pnmcrop is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1228"/>
      <state state_ref="oval:org.mitre.oval:ste:1851"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1998" version="1" check="at least one" comment="/usr/bin/pnmcut is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1227"/>
      <state state_ref="oval:org.mitre.oval:ste:1850"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1997" version="1" check="at least one" comment="/usr/bin/pnmcut is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1227"/>
      <state state_ref="oval:org.mitre.oval:ste:1849"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1996" version="1" check="at least one" comment="/usr/bin/pnmcut is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1227"/>
      <state state_ref="oval:org.mitre.oval:ste:1848"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1995" version="1" check="at least one" comment="/usr/bin/pnmdepth is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1226"/>
      <state state_ref="oval:org.mitre.oval:ste:1847"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1994" version="1" check="at least one" comment="/usr/bin/pnmdepth is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1226"/>
      <state state_ref="oval:org.mitre.oval:ste:1846"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1993" version="1" check="at least one" comment="/usr/bin/pnmdepth is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1226"/>
      <state state_ref="oval:org.mitre.oval:ste:1845"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1992" version="1" check="at least one" comment="/usr/bin/pnmenlarge is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1225"/>
      <state state_ref="oval:org.mitre.oval:ste:1844"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1991" version="1" check="at least one" comment="/usr/bin/pnmenlarge is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1225"/>
      <state state_ref="oval:org.mitre.oval:ste:1843"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1990" version="1" check="at least one" comment="/usr/bin/pnmenlarge is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1225"/>
      <state state_ref="oval:org.mitre.oval:ste:1842"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1989" version="1" check="at least one" comment="/usr/bin/pnmfile is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1224"/>
      <state state_ref="oval:org.mitre.oval:ste:1841"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1988" version="1" check="at least one" comment="/usr/bin/pnmfile is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1224"/>
      <state state_ref="oval:org.mitre.oval:ste:1840"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1987" version="1" check="at least one" comment="/usr/bin/pnmfile is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1224"/>
      <state state_ref="oval:org.mitre.oval:ste:1839"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1986" version="1" check="at least one" comment="/usr/bin/pnmflip is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1223"/>
      <state state_ref="oval:org.mitre.oval:ste:1838"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1985" version="1" check="at least one" comment="/usr/bin/pnmflip is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1223"/>
      <state state_ref="oval:org.mitre.oval:ste:1837"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1984" version="1" check="at least one" comment="/usr/bin/pnmflip is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1223"/>
      <state state_ref="oval:org.mitre.oval:ste:1836"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1983" version="1" check="at least one" comment="/usr/bin/pnmgamma is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1222"/>
      <state state_ref="oval:org.mitre.oval:ste:1835"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1982" version="1" check="at least one" comment="/usr/bin/pnmgamma is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1222"/>
      <state state_ref="oval:org.mitre.oval:ste:1834"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1981" version="1" check="at least one" comment="/usr/bin/pnmgamma is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1222"/>
      <state state_ref="oval:org.mitre.oval:ste:1833"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1980" version="1" check="at least one" comment="/usr/bin/pnmhisteq is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1221"/>
      <state state_ref="oval:org.mitre.oval:ste:1832"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1979" version="1" check="at least one" comment="/usr/bin/pnmhisteq is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1221"/>
      <state state_ref="oval:org.mitre.oval:ste:1831"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1978" version="1" check="at least one" comment="/usr/bin/pnmhisteq is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1221"/>
      <state state_ref="oval:org.mitre.oval:ste:1830"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1977" version="1" check="at least one" comment="/usr/bin/pnmhistmap is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1220"/>
      <state state_ref="oval:org.mitre.oval:ste:1829"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1976" version="1" check="at least one" comment="/usr/bin/pnmhistmap is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1220"/>
      <state state_ref="oval:org.mitre.oval:ste:1828"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1975" version="1" check="at least one" comment="/usr/bin/pnmhistmap is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1220"/>
      <state state_ref="oval:org.mitre.oval:ste:1827"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1974" version="1" check="at least one" comment="/usr/bin/pnminterp is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1219"/>
      <state state_ref="oval:org.mitre.oval:ste:1826"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1973" version="1" check="at least one" comment="/usr/bin/pnminterp is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1219"/>
      <state state_ref="oval:org.mitre.oval:ste:1825"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1972" version="1" check="at least one" comment="/usr/bin/pnminterp is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1219"/>
      <state state_ref="oval:org.mitre.oval:ste:1824"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1971" version="1" check="at least one" comment="/usr/bin/pnminvert is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1218"/>
      <state state_ref="oval:org.mitre.oval:ste:1823"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1970" version="1" check="at least one" comment="/usr/bin/pnminvert is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1218"/>
      <state state_ref="oval:org.mitre.oval:ste:1822"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1969" version="1" check="at least one" comment="/usr/bin/pnminvert is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1218"/>
      <state state_ref="oval:org.mitre.oval:ste:1821"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1968" version="1" check="at least one" comment="/usr/bin/pnmmontage is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1217"/>
      <state state_ref="oval:org.mitre.oval:ste:1820"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1967" version="1" check="at least one" comment="/usr/bin/pnmmontage is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1217"/>
      <state state_ref="oval:org.mitre.oval:ste:1819"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1966" version="1" check="at least one" comment="/usr/bin/pnmmontage is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1217"/>
      <state state_ref="oval:org.mitre.oval:ste:1818"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1965" version="1" check="at least one" comment="/usr/bin/pnmnlfilt is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1216"/>
      <state state_ref="oval:org.mitre.oval:ste:1817"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1964" version="1" check="at least one" comment="/usr/bin/pnmnlfilt is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1216"/>
      <state state_ref="oval:org.mitre.oval:ste:1816"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1963" version="1" check="at least one" comment="/usr/bin/pnmnlfilt is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1216"/>
      <state state_ref="oval:org.mitre.oval:ste:1815"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1962" version="1" check="at least one" comment="/usr/bin/pnmnoraw is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1215"/>
      <state state_ref="oval:org.mitre.oval:ste:1814"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1961" version="1" check="at least one" comment="/usr/bin/pnmnoraw is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1215"/>
      <state state_ref="oval:org.mitre.oval:ste:1813"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1960" version="1" check="at least one" comment="/usr/bin/pnmnoraw is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1215"/>
      <state state_ref="oval:org.mitre.oval:ste:1812"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1959" version="1" check="at least one" comment="/usr/bin/pnmpad is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1214"/>
      <state state_ref="oval:org.mitre.oval:ste:1811"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1958" version="1" check="at least one" comment="/usr/bin/pnmpad is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1214"/>
      <state state_ref="oval:org.mitre.oval:ste:1810"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1957" version="1" check="at least one" comment="/usr/bin/pnmpad is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1214"/>
      <state state_ref="oval:org.mitre.oval:ste:1809"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1956" version="1" check="at least one" comment="/usr/bin/pnmpaste is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1213"/>
      <state state_ref="oval:org.mitre.oval:ste:1808"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1955" version="1" check="at least one" comment="/usr/bin/pnmpaste is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1213"/>
      <state state_ref="oval:org.mitre.oval:ste:1807"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1954" version="1" check="at least one" comment="/usr/bin/pnmpaste is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1213"/>
      <state state_ref="oval:org.mitre.oval:ste:1806"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1953" version="1" check="at least one" comment="/usr/bin/pnmpsnr is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1212"/>
      <state state_ref="oval:org.mitre.oval:ste:1805"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1952" version="1" check="at least one" comment="/usr/bin/pnmpsnr is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1212"/>
      <state state_ref="oval:org.mitre.oval:ste:1804"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1951" version="1" check="at least one" comment="/usr/bin/pnmpsnr is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1212"/>
      <state state_ref="oval:org.mitre.oval:ste:1803"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1950" version="1" check="at least one" comment="/usr/bin/pnmremap is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1211"/>
      <state state_ref="oval:org.mitre.oval:ste:1802"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1949" version="1" check="at least one" comment="/usr/bin/pnmremap is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1211"/>
      <state state_ref="oval:org.mitre.oval:ste:1801"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1948" version="1" check="at least one" comment="/usr/bin/pnmremap is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1211"/>
      <state state_ref="oval:org.mitre.oval:ste:1800"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1947" version="1" check="at least one" comment="/usr/bin/pnmrotate is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1210"/>
      <state state_ref="oval:org.mitre.oval:ste:1799"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1946" version="1" check="at least one" comment="/usr/bin/pnmrotate is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1210"/>
      <state state_ref="oval:org.mitre.oval:ste:1798"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1945" version="1" check="at least one" comment="/usr/bin/pnmrotate is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1210"/>
      <state state_ref="oval:org.mitre.oval:ste:1797"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1944" version="1" check="at least one" comment="/usr/bin/pnmscale is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1209"/>
      <state state_ref="oval:org.mitre.oval:ste:1796"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1943" version="1" check="at least one" comment="/usr/bin/pnmscale is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1209"/>
      <state state_ref="oval:org.mitre.oval:ste:1795"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1942" version="1" check="at least one" comment="/usr/bin/pnmscale is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1209"/>
      <state state_ref="oval:org.mitre.oval:ste:1794"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1941" version="1" check="at least one" comment="/usr/bin/ppmtopict is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1208"/>
      <state state_ref="oval:org.mitre.oval:ste:1793"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1940" version="1" check="at least one" comment="/usr/bin/ppmtopict is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1208"/>
      <state state_ref="oval:org.mitre.oval:ste:1792"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1939" version="1" check="at least one" comment="/usr/bin/ppmtopict is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1208"/>
      <state state_ref="oval:org.mitre.oval:ste:1791"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1938" version="1" check="at least one" comment="/usr/bin/ppmtopj is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1207"/>
      <state state_ref="oval:org.mitre.oval:ste:1790"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1937" version="1" check="at least one" comment="/usr/bin/ppmtopj is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1207"/>
      <state state_ref="oval:org.mitre.oval:ste:1789"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1936" version="1" check="at least one" comment="/usr/bin/ppmtopj is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1207"/>
      <state state_ref="oval:org.mitre.oval:ste:1788"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1935" version="1" check="at least one" comment="/usr/bin/ppmtopjxl is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1206"/>
      <state state_ref="oval:org.mitre.oval:ste:1787"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1934" version="1" check="at least one" comment="/usr/bin/ppmtopjxl is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1206"/>
      <state state_ref="oval:org.mitre.oval:ste:1786"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1933" version="1" check="at least one" comment="/usr/bin/ppmtopjxl is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1206"/>
      <state state_ref="oval:org.mitre.oval:ste:1785"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1932" version="1" check="at least one" comment="/usr/bin/ppmtopuzz is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1205"/>
      <state state_ref="oval:org.mitre.oval:ste:1784"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1931" version="1" check="at least one" comment="/usr/bin/ppmtopuzz is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1205"/>
      <state state_ref="oval:org.mitre.oval:ste:1783"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1930" version="1" check="at least one" comment="/usr/bin/ppmtopuzz is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1205"/>
      <state state_ref="oval:org.mitre.oval:ste:1782"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1929" version="1" check="at least one" comment="/usr/bin/ppmtorgb3 is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1204"/>
      <state state_ref="oval:org.mitre.oval:ste:1781"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1928" version="1" check="at least one" comment="/usr/bin/ppmtorgb3 is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1204"/>
      <state state_ref="oval:org.mitre.oval:ste:1780"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1927" version="1" check="at least one" comment="/usr/bin/ppmtorgb3 is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1204"/>
      <state state_ref="oval:org.mitre.oval:ste:1779"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1926" version="1" check="at least one" comment="/usr/bin/ppmtosixel is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1203"/>
      <state state_ref="oval:org.mitre.oval:ste:1778"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1925" version="1" check="at least one" comment="/usr/bin/ppmtosixel is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1203"/>
      <state state_ref="oval:org.mitre.oval:ste:1777"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1924" version="1" check="at least one" comment="/usr/bin/ppmtosixel is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1203"/>
      <state state_ref="oval:org.mitre.oval:ste:1776"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1923" version="1" check="at least one" comment="/usr/bin/ppmtotga is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1202"/>
      <state state_ref="oval:org.mitre.oval:ste:1775"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1922" version="1" check="at least one" comment="/usr/bin/ppmtotga is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1202"/>
      <state state_ref="oval:org.mitre.oval:ste:1774"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1921" version="1" check="at least one" comment="/usr/bin/ppmtotga is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1202"/>
      <state state_ref="oval:org.mitre.oval:ste:1773"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1920" version="1" check="at least one" comment="/usr/bin/ppmtouil is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1201"/>
      <state state_ref="oval:org.mitre.oval:ste:1772"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1919" version="1" check="at least one" comment="/usr/bin/ppmtouil is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1201"/>
      <state state_ref="oval:org.mitre.oval:ste:1771"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1918" version="1" check="at least one" comment="/usr/bin/ppmtouil is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1201"/>
      <state state_ref="oval:org.mitre.oval:ste:1770"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1917" version="1" check="at least one" comment="/usr/bin/ppmtowinicon is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1200"/>
      <state state_ref="oval:org.mitre.oval:ste:1769"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1916" version="1" check="at least one" comment="/usr/bin/ppmtowinicon is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1200"/>
      <state state_ref="oval:org.mitre.oval:ste:1768"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1915" version="1" check="at least one" comment="/usr/bin/ppmtowinicon is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1200"/>
      <state state_ref="oval:org.mitre.oval:ste:1767"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1914" version="1" check="at least one" comment="/usr/bin/ppmtoxpm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1199"/>
      <state state_ref="oval:org.mitre.oval:ste:1766"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1913" version="1" check="at least one" comment="/usr/bin/ppmtoxpm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1199"/>
      <state state_ref="oval:org.mitre.oval:ste:1765"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1912" version="1" check="at least one" comment="/usr/bin/ppmtoxpm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1199"/>
      <state state_ref="oval:org.mitre.oval:ste:1764"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1911" version="1" check="at least one" comment="/usr/bin/ppmtoyuv is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1198"/>
      <state state_ref="oval:org.mitre.oval:ste:1763"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1910" version="1" check="at least one" comment="/usr/bin/ppmtoyuv is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1198"/>
      <state state_ref="oval:org.mitre.oval:ste:1762"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1909" version="1" check="at least one" comment="/usr/bin/ppmtoyuv is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1198"/>
      <state state_ref="oval:org.mitre.oval:ste:1761"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1908" version="1" check="at least one" comment="/usr/bin/ppmtoyuvsplit is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1197"/>
      <state state_ref="oval:org.mitre.oval:ste:1760"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1907" version="1" check="at least one" comment="/usr/bin/ppmtoyuvsplit is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1197"/>
      <state state_ref="oval:org.mitre.oval:ste:1759"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1906" version="1" check="at least one" comment="/usr/bin/ppmtoyuvsplit is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1197"/>
      <state state_ref="oval:org.mitre.oval:ste:1758"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1905" version="1" check="at least one" comment="/usr/bin/ppmtv is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1196"/>
      <state state_ref="oval:org.mitre.oval:ste:1757"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1904" version="1" check="at least one" comment="/usr/bin/ppmtv is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1196"/>
      <state state_ref="oval:org.mitre.oval:ste:1756"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1903" version="1" check="at least one" comment="/usr/bin/ppmtv is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1196"/>
      <state state_ref="oval:org.mitre.oval:ste:1755"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1902" version="1" check="at least one" comment="/usr/bin/psidtopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1195"/>
      <state state_ref="oval:org.mitre.oval:ste:1754"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1901" version="1" check="at least one" comment="/usr/bin/psidtopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1195"/>
      <state state_ref="oval:org.mitre.oval:ste:1753"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1900" version="1" check="at least one" comment="/usr/bin/psidtopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1195"/>
      <state state_ref="oval:org.mitre.oval:ste:1752"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1899" version="1" check="at least one" comment="/usr/bin/pstopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1194"/>
      <state state_ref="oval:org.mitre.oval:ste:1751"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1898" version="1" check="at least one" comment="/usr/bin/pstopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1194"/>
      <state state_ref="oval:org.mitre.oval:ste:1750"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1897" version="1" check="at least one" comment="/usr/bin/pstopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1194"/>
      <state state_ref="oval:org.mitre.oval:ste:1749"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1896" version="1" check="at least one" comment="/usr/bin/qrttoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1193"/>
      <state state_ref="oval:org.mitre.oval:ste:1748"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1895" version="1" check="at least one" comment="/usr/bin/qrttoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1193"/>
      <state state_ref="oval:org.mitre.oval:ste:1747"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1894" version="1" check="at least one" comment="/usr/bin/qrttoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1193"/>
      <state state_ref="oval:org.mitre.oval:ste:1746"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1893" version="1" check="at least one" comment="/usr/bin/rasttopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1192"/>
      <state state_ref="oval:org.mitre.oval:ste:1745"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1892" version="1" check="at least one" comment="/usr/bin/rasttopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1192"/>
      <state state_ref="oval:org.mitre.oval:ste:1744"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1891" version="1" check="at least one" comment="/usr/bin/rasttopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1192"/>
      <state state_ref="oval:org.mitre.oval:ste:1743"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1890" version="1" check="at least one" comment="/usr/bin/rawtopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1191"/>
      <state state_ref="oval:org.mitre.oval:ste:1742"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1889" version="1" check="at least one" comment="/usr/bin/rawtopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1191"/>
      <state state_ref="oval:org.mitre.oval:ste:1741"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1888" version="1" check="at least one" comment="/usr/bin/rawtopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1191"/>
      <state state_ref="oval:org.mitre.oval:ste:1740"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1887" version="1" check="at least one" comment="/usr/bin/rawtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1190"/>
      <state state_ref="oval:org.mitre.oval:ste:1739"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1886" version="1" check="at least one" comment="/usr/bin/rawtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1190"/>
      <state state_ref="oval:org.mitre.oval:ste:1738"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1885" version="1" check="at least one" comment="/usr/bin/rawtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1190"/>
      <state state_ref="oval:org.mitre.oval:ste:1737"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1884" version="1" check="at least one" comment="/usr/bin/rgb3toppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1189"/>
      <state state_ref="oval:org.mitre.oval:ste:1736"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1883" version="1" check="at least one" comment="/usr/bin/rgb3toppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1189"/>
      <state state_ref="oval:org.mitre.oval:ste:1735"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1882" version="1" check="at least one" comment="/usr/bin/rgb3toppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1189"/>
      <state state_ref="oval:org.mitre.oval:ste:1734"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1881" version="1" check="at least one" comment="/usr/bin/rletopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1188"/>
      <state state_ref="oval:org.mitre.oval:ste:1733"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1880" version="1" check="at least one" comment="/usr/bin/rletopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1188"/>
      <state state_ref="oval:org.mitre.oval:ste:1732"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1879" version="1" check="at least one" comment="/usr/bin/rletopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1188"/>
      <state state_ref="oval:org.mitre.oval:ste:1731"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1878" version="1" check="at least one" comment="/usr/bin/sbigtopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1187"/>
      <state state_ref="oval:org.mitre.oval:ste:1730"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1877" version="1" check="at least one" comment="/usr/bin/sbigtopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1187"/>
      <state state_ref="oval:org.mitre.oval:ste:1729"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1876" version="1" check="at least one" comment="/usr/bin/sbigtopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1187"/>
      <state state_ref="oval:org.mitre.oval:ste:1728"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1875" version="1" check="at least one" comment="/usr/bin/sgitopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1186"/>
      <state state_ref="oval:org.mitre.oval:ste:1727"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1874" version="1" check="at least one" comment="/usr/bin/sgitopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1186"/>
      <state state_ref="oval:org.mitre.oval:ste:1726"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1873" version="1" check="at least one" comment="/usr/bin/sgitopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1186"/>
      <state state_ref="oval:org.mitre.oval:ste:1725"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1872" version="1" check="at least one" comment="/usr/bin/sirtopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1185"/>
      <state state_ref="oval:org.mitre.oval:ste:1724"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1871" version="1" check="at least one" comment="/usr/bin/sirtopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1185"/>
      <state state_ref="oval:org.mitre.oval:ste:1723"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1870" version="1" check="at least one" comment="/usr/bin/sirtopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1185"/>
      <state state_ref="oval:org.mitre.oval:ste:1722"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1869" version="1" check="at least one" comment="/usr/bin/sldtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1184"/>
      <state state_ref="oval:org.mitre.oval:ste:1721"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1868" version="1" check="at least one" comment="/usr/bin/sldtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1184"/>
      <state state_ref="oval:org.mitre.oval:ste:1720"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1867" version="1" check="at least one" comment="/usr/bin/sldtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1184"/>
      <state state_ref="oval:org.mitre.oval:ste:1719"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1866" version="1" check="at least one" comment="/usr/bin/spctoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1183"/>
      <state state_ref="oval:org.mitre.oval:ste:1718"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1865" version="1" check="at least one" comment="/usr/bin/spctoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1183"/>
      <state state_ref="oval:org.mitre.oval:ste:1717"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1864" version="1" check="at least one" comment="/usr/bin/spctoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1183"/>
      <state state_ref="oval:org.mitre.oval:ste:1716"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1863" version="1" check="at least one" comment="/usr/bin/spottopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1182"/>
      <state state_ref="oval:org.mitre.oval:ste:1715"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1862" version="1" check="at least one" comment="/usr/bin/spottopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1182"/>
      <state state_ref="oval:org.mitre.oval:ste:1714"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1861" version="1" check="at least one" comment="/usr/bin/spottopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1182"/>
      <state state_ref="oval:org.mitre.oval:ste:1713"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1860" version="1" check="at least one" comment="/usr/bin/sputoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1181"/>
      <state state_ref="oval:org.mitre.oval:ste:1712"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1859" version="1" check="at least one" comment="/usr/bin/sputoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1181"/>
      <state state_ref="oval:org.mitre.oval:ste:1711"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1858" version="1" check="at least one" comment="/usr/bin/sputoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1181"/>
      <state state_ref="oval:org.mitre.oval:ste:1710"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1857" version="1" check="at least one" comment="/usr/bin/tgatoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1180"/>
      <state state_ref="oval:org.mitre.oval:ste:1709"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1856" version="1" check="at least one" comment="/usr/bin/tgatoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1180"/>
      <state state_ref="oval:org.mitre.oval:ste:1708"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1855" version="1" check="at least one" comment="/usr/bin/tgatoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1180"/>
      <state state_ref="oval:org.mitre.oval:ste:1707"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1854" version="1" check="at least one" comment="/usr/bin/thinkjettopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1179"/>
      <state state_ref="oval:org.mitre.oval:ste:1706"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1853" version="1" check="at least one" comment="/usr/bin/thinkjettopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1179"/>
      <state state_ref="oval:org.mitre.oval:ste:1705"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1852" version="1" check="at least one" comment="/usr/bin/thinkjettopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1179"/>
      <state state_ref="oval:org.mitre.oval:ste:1704"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1851" version="1" check="at least one" comment="/usr/bin/tifftopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1178"/>
      <state state_ref="oval:org.mitre.oval:ste:1703"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1850" version="1" check="at least one" comment="/usr/bin/tifftopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1178"/>
      <state state_ref="oval:org.mitre.oval:ste:1702"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1849" version="1" check="at least one" comment="/usr/bin/tifftopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1178"/>
      <state state_ref="oval:org.mitre.oval:ste:1701"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1848" version="1" check="at least one" comment="/usr/bin/wbmptopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1177"/>
      <state state_ref="oval:org.mitre.oval:ste:1700"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1847" version="1" check="at least one" comment="/usr/bin/wbmptopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1177"/>
      <state state_ref="oval:org.mitre.oval:ste:1699"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1846" version="1" check="at least one" comment="/usr/bin/wbmptopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1177"/>
      <state state_ref="oval:org.mitre.oval:ste:1698"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1845" version="1" check="at least one" comment="/usr/bin/winicontoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1176"/>
      <state state_ref="oval:org.mitre.oval:ste:1697"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1844" version="1" check="at least one" comment="/usr/bin/winicontoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1176"/>
      <state state_ref="oval:org.mitre.oval:ste:1696"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1843" version="1" check="at least one" comment="/usr/bin/winicontoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1176"/>
      <state state_ref="oval:org.mitre.oval:ste:1695"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1842" version="1" check="at least one" comment="/usr/bin/xbmtopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1175"/>
      <state state_ref="oval:org.mitre.oval:ste:1694"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1841" version="1" check="at least one" comment="/usr/bin/xbmtopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1175"/>
      <state state_ref="oval:org.mitre.oval:ste:1693"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1840" version="1" check="at least one" comment="/usr/bin/xbmtopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1175"/>
      <state state_ref="oval:org.mitre.oval:ste:1692"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1839" version="1" check="at least one" comment="/usr/bin/ximtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1174"/>
      <state state_ref="oval:org.mitre.oval:ste:1691"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1838" version="1" check="at least one" comment="/usr/bin/ximtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1174"/>
      <state state_ref="oval:org.mitre.oval:ste:1690"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1837" version="1" check="at least one" comment="/usr/bin/ximtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1174"/>
      <state state_ref="oval:org.mitre.oval:ste:1689"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1836" version="1" check="at least one" comment="/usr/bin/xpmtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1173"/>
      <state state_ref="oval:org.mitre.oval:ste:1688"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1835" version="1" check="at least one" comment="/usr/bin/xpmtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1173"/>
      <state state_ref="oval:org.mitre.oval:ste:1687"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1834" version="1" check="at least one" comment="/usr/bin/xpmtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1173"/>
      <state state_ref="oval:org.mitre.oval:ste:1686"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1833" version="1" check="at least one" comment="/usr/bin/xvminitoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1172"/>
      <state state_ref="oval:org.mitre.oval:ste:1685"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1832" version="1" check="at least one" comment="/usr/bin/xvminitoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1172"/>
      <state state_ref="oval:org.mitre.oval:ste:1684"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1831" version="1" check="at least one" comment="/usr/bin/xvminitoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1172"/>
      <state state_ref="oval:org.mitre.oval:ste:1683"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1830" version="1" check="at least one" comment="/usr/bin/xwdtopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1171"/>
      <state state_ref="oval:org.mitre.oval:ste:1682"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1829" version="1" check="at least one" comment="/usr/bin/xwdtopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1171"/>
      <state state_ref="oval:org.mitre.oval:ste:1681"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1828" version="1" check="at least one" comment="/usr/bin/xwdtopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1171"/>
      <state state_ref="oval:org.mitre.oval:ste:1680"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1827" version="1" check="at least one" comment="/usr/bin/ybmtopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1170"/>
      <state state_ref="oval:org.mitre.oval:ste:1679"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1826" version="1" check="at least one" comment="/usr/bin/ybmtopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1170"/>
      <state state_ref="oval:org.mitre.oval:ste:1678"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1825" version="1" check="at least one" comment="/usr/bin/ybmtopbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1170"/>
      <state state_ref="oval:org.mitre.oval:ste:1677"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1824" version="1" check="at least one" comment="/usr/bin/yuvsplittoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1169"/>
      <state state_ref="oval:org.mitre.oval:ste:1676"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1823" version="1" check="at least one" comment="/usr/bin/yuvsplittoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1169"/>
      <state state_ref="oval:org.mitre.oval:ste:1675"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1822" version="1" check="at least one" comment="/usr/bin/yuvsplittoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1169"/>
      <state state_ref="oval:org.mitre.oval:ste:1674"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1821" version="1" check="at least one" comment="/usr/bin/yuvtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1168"/>
      <state state_ref="oval:org.mitre.oval:ste:1673"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1820" version="1" check="at least one" comment="/usr/bin/yuvtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1168"/>
      <state state_ref="oval:org.mitre.oval:ste:1672"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1819" version="1" check="at least one" comment="/usr/bin/yuvtoppm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1168"/>
      <state state_ref="oval:org.mitre.oval:ste:1671"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1818" version="1" check="at least one" comment="/usr/bin/zeisstopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1167"/>
      <state state_ref="oval:org.mitre.oval:ste:1670"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1817" version="1" check="at least one" comment="/usr/bin/zeisstopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1167"/>
      <state state_ref="oval:org.mitre.oval:ste:1669"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1816" version="1" check="at least one" comment="/usr/bin/zeisstopnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1167"/>
      <state state_ref="oval:org.mitre.oval:ste:1668"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1815" version="1" check="at least one" comment="/usr/bin/pnmscalefixed is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1166"/>
      <state state_ref="oval:org.mitre.oval:ste:1667"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1814" version="1" check="at least one" comment="/usr/bin/pnmscalefixed is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1166"/>
      <state state_ref="oval:org.mitre.oval:ste:1666"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1813" version="1" check="at least one" comment="/usr/bin/pnmscalefixed is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1166"/>
      <state state_ref="oval:org.mitre.oval:ste:1665"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1812" version="1" check="at least one" comment="/usr/bin/pnmshear is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1165"/>
      <state state_ref="oval:org.mitre.oval:ste:1664"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1811" version="1" check="at least one" comment="/usr/bin/pnmshear is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1165"/>
      <state state_ref="oval:org.mitre.oval:ste:1663"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1810" version="1" check="at least one" comment="/usr/bin/pnmshear is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1165"/>
      <state state_ref="oval:org.mitre.oval:ste:1662"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1809" version="1" check="at least one" comment="/usr/bin/pnmsmooth is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1164"/>
      <state state_ref="oval:org.mitre.oval:ste:1661"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1808" version="1" check="at least one" comment="/usr/bin/pnmsmooth is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1164"/>
      <state state_ref="oval:org.mitre.oval:ste:1660"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1807" version="1" check="at least one" comment="/usr/bin/pnmsmooth is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1164"/>
      <state state_ref="oval:org.mitre.oval:ste:1659"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1806" version="1" check="at least one" comment="/usr/bin/pnmsplit is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1163"/>
      <state state_ref="oval:org.mitre.oval:ste:1658"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1805" version="1" check="at least one" comment="/usr/bin/pnmsplit is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1163"/>
      <state state_ref="oval:org.mitre.oval:ste:1657"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1804" version="1" check="at least one" comment="/usr/bin/pnmsplit is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1163"/>
      <state state_ref="oval:org.mitre.oval:ste:1656"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1803" version="1" check="at least one" comment="/usr/bin/pnmtile is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1162"/>
      <state state_ref="oval:org.mitre.oval:ste:1655"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1802" version="1" check="at least one" comment="/usr/bin/pnmtile is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1162"/>
      <state state_ref="oval:org.mitre.oval:ste:1654"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1801" version="1" check="at least one" comment="/usr/bin/pnmtile is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1162"/>
      <state state_ref="oval:org.mitre.oval:ste:1653"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1800" version="1" check="at least one" comment="/usr/bin/pnmtoddif is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1161"/>
      <state state_ref="oval:org.mitre.oval:ste:1652"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1799" version="1" check="at least one" comment="/usr/bin/pnmtoddif is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1161"/>
      <state state_ref="oval:org.mitre.oval:ste:1651"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1798" version="1" check="at least one" comment="/usr/bin/pnmtoddif is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1161"/>
      <state state_ref="oval:org.mitre.oval:ste:1650"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1797" version="1" check="at least one" comment="/usr/bin/pnmtofiasco is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1160"/>
      <state state_ref="oval:org.mitre.oval:ste:1649"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1796" version="1" check="at least one" comment="/usr/bin/pnmtofiasco is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1160"/>
      <state state_ref="oval:org.mitre.oval:ste:1648"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1795" version="1" check="at least one" comment="/usr/bin/pnmtofiasco is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1160"/>
      <state state_ref="oval:org.mitre.oval:ste:1647"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1794" version="1" check="at least one" comment="/usr/bin/pnmtofits is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1159"/>
      <state state_ref="oval:org.mitre.oval:ste:1646"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1793" version="1" check="at least one" comment="/usr/bin/pnmtofits is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1159"/>
      <state state_ref="oval:org.mitre.oval:ste:1645"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1792" version="1" check="at least one" comment="/usr/bin/pnmtofits is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1159"/>
      <state state_ref="oval:org.mitre.oval:ste:1644"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1791" version="1" check="at least one" comment="/usr/bin/pnmtojpeg is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1158"/>
      <state state_ref="oval:org.mitre.oval:ste:1643"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1790" version="1" check="at least one" comment="/usr/bin/pnmtojpeg is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1158"/>
      <state state_ref="oval:org.mitre.oval:ste:1642"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1789" version="1" check="at least one" comment="/usr/bin/pnmtojpeg is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1158"/>
      <state state_ref="oval:org.mitre.oval:ste:1641"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1788" version="1" check="at least one" comment="/usr/bin/pnmtopalm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1157"/>
      <state state_ref="oval:org.mitre.oval:ste:1640"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1787" version="1" check="at least one" comment="/usr/bin/pnmtopalm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1157"/>
      <state state_ref="oval:org.mitre.oval:ste:1639"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1786" version="1" check="at least one" comment="/usr/bin/pnmtopalm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1157"/>
      <state state_ref="oval:org.mitre.oval:ste:1638"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1785" version="1" check="at least one" comment="/usr/bin/pnmtoplainpnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1156"/>
      <state state_ref="oval:org.mitre.oval:ste:1637"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1784" version="1" check="at least one" comment="/usr/bin/pnmtoplainpnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1156"/>
      <state state_ref="oval:org.mitre.oval:ste:1636"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1783" version="1" check="at least one" comment="/usr/bin/pnmtoplainpnm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1156"/>
      <state state_ref="oval:org.mitre.oval:ste:1635"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1782" version="1" check="at least one" comment="/usr/bin/pnmtopng is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1155"/>
      <state state_ref="oval:org.mitre.oval:ste:1634"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1781" version="1" check="at least one" comment="/usr/bin/pnmtopng is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1155"/>
      <state state_ref="oval:org.mitre.oval:ste:1633"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1780" version="1" check="at least one" comment="/usr/bin/pnmtopng is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1155"/>
      <state state_ref="oval:org.mitre.oval:ste:1632"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1779" version="1" check="at least one" comment="/usr/bin/pnmtops is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1154"/>
      <state state_ref="oval:org.mitre.oval:ste:1631"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1778" version="1" check="at least one" comment="/usr/bin/pnmtops is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1154"/>
      <state state_ref="oval:org.mitre.oval:ste:1630"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1777" version="1" check="at least one" comment="/usr/bin/pnmtops is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1154"/>
      <state state_ref="oval:org.mitre.oval:ste:1629"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1776" version="1" check="at least one" comment="/usr/bin/pnmtorast is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1153"/>
      <state state_ref="oval:org.mitre.oval:ste:1628"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1775" version="1" check="at least one" comment="/usr/bin/pnmtorast is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1153"/>
      <state state_ref="oval:org.mitre.oval:ste:1627"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1774" version="1" check="at least one" comment="/usr/bin/pnmtorast is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1153"/>
      <state state_ref="oval:org.mitre.oval:ste:1626"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1773" version="1" check="at least one" comment="/usr/bin/pnmtorle is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1152"/>
      <state state_ref="oval:org.mitre.oval:ste:1625"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1772" version="1" check="at least one" comment="/usr/bin/pnmtorle is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1152"/>
      <state state_ref="oval:org.mitre.oval:ste:1624"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1771" version="1" check="at least one" comment="/usr/bin/pnmtorle is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1152"/>
      <state state_ref="oval:org.mitre.oval:ste:1623"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1770" version="1" check="at least one" comment="/usr/bin/pnmtosgi is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1151"/>
      <state state_ref="oval:org.mitre.oval:ste:1622"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1769" version="1" check="at least one" comment="/usr/bin/pnmtosgi is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1151"/>
      <state state_ref="oval:org.mitre.oval:ste:1621"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1768" version="1" check="at least one" comment="/usr/bin/pnmtosgi is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1151"/>
      <state state_ref="oval:org.mitre.oval:ste:1620"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1767" version="1" check="at least one" comment="/usr/bin/pnmtosir is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1150"/>
      <state state_ref="oval:org.mitre.oval:ste:1619"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1766" version="1" check="at least one" comment="/usr/bin/pnmtosir is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1150"/>
      <state state_ref="oval:org.mitre.oval:ste:1618"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1765" version="1" check="at least one" comment="/usr/bin/pnmtosir is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1150"/>
      <state state_ref="oval:org.mitre.oval:ste:1617"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1764" version="1" check="at least one" comment="/usr/bin/pnmtotiff is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1149"/>
      <state state_ref="oval:org.mitre.oval:ste:1616"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1763" version="1" check="at least one" comment="/usr/bin/pnmtotiff is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1149"/>
      <state state_ref="oval:org.mitre.oval:ste:1615"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1762" version="1" check="at least one" comment="/usr/bin/pnmtotiff is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1149"/>
      <state state_ref="oval:org.mitre.oval:ste:1614"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1761" version="1" check="at least one" comment="/usr/bin/pnmtotiffcmyk is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1148"/>
      <state state_ref="oval:org.mitre.oval:ste:1613"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1760" version="1" check="at least one" comment="/usr/bin/pnmtotiffcmyk is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1148"/>
      <state state_ref="oval:org.mitre.oval:ste:1612"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1759" version="1" check="at least one" comment="/usr/bin/pnmtotiffcmyk is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1148"/>
      <state state_ref="oval:org.mitre.oval:ste:1611"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1758" version="1" check="at least one" comment="/usr/bin/pnmtoxwd is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1147"/>
      <state state_ref="oval:org.mitre.oval:ste:1610"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1757" version="1" check="at least one" comment="/usr/bin/pnmtoxwd is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1147"/>
      <state state_ref="oval:org.mitre.oval:ste:1609"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1756" version="1" check="at least one" comment="/usr/bin/pnmtoxwd is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1147"/>
      <state state_ref="oval:org.mitre.oval:ste:1608"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1755" version="1" check="at least one" comment="/usr/bin/ppm3d is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1146"/>
      <state state_ref="oval:org.mitre.oval:ste:1607"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1754" version="1" check="at least one" comment="/usr/bin/ppm3d is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1146"/>
      <state state_ref="oval:org.mitre.oval:ste:1606"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1753" version="1" check="at least one" comment="/usr/bin/ppm3d is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1146"/>
      <state state_ref="oval:org.mitre.oval:ste:1605"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1752" version="1" check="at least one" comment="/usr/bin/ppmbrighten is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1145"/>
      <state state_ref="oval:org.mitre.oval:ste:1604"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1751" version="1" check="at least one" comment="/usr/bin/ppmbrighten is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1145"/>
      <state state_ref="oval:org.mitre.oval:ste:1603"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1750" version="1" check="at least one" comment="/usr/bin/ppmbrighten is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1145"/>
      <state state_ref="oval:org.mitre.oval:ste:1602"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1749" version="1" check="at least one" comment="/usr/bin/ppmchange is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1144"/>
      <state state_ref="oval:org.mitre.oval:ste:1601"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1748" version="1" check="at least one" comment="/usr/bin/ppmchange is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1144"/>
      <state state_ref="oval:org.mitre.oval:ste:1600"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1747" version="1" check="at least one" comment="/usr/bin/ppmchange is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1144"/>
      <state state_ref="oval:org.mitre.oval:ste:1599"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1746" version="1" check="at least one" comment="/usr/bin/ppmcie is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1143"/>
      <state state_ref="oval:org.mitre.oval:ste:1598"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1745" version="1" check="at least one" comment="/usr/bin/ppmcie is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1143"/>
      <state state_ref="oval:org.mitre.oval:ste:1597"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1744" version="1" check="at least one" comment="/usr/bin/ppmcie is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1143"/>
      <state state_ref="oval:org.mitre.oval:ste:1596"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1743" version="1" check="at least one" comment="/usr/bin/ppmcolormask is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1142"/>
      <state state_ref="oval:org.mitre.oval:ste:1595"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1742" version="1" check="at least one" comment="/usr/bin/ppmcolormask is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1142"/>
      <state state_ref="oval:org.mitre.oval:ste:1594"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1741" version="1" check="at least one" comment="/usr/bin/ppmcolormask is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1142"/>
      <state state_ref="oval:org.mitre.oval:ste:1593"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1740" version="1" check="at least one" comment="/usr/bin/ppmcolors is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1141"/>
      <state state_ref="oval:org.mitre.oval:ste:1592"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1739" version="1" check="at least one" comment="/usr/bin/ppmcolors is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1141"/>
      <state state_ref="oval:org.mitre.oval:ste:1591"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1738" version="1" check="at least one" comment="/usr/bin/ppmcolors is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1141"/>
      <state state_ref="oval:org.mitre.oval:ste:1590"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1737" version="1" check="at least one" comment="/usr/bin/ppmdim is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1140"/>
      <state state_ref="oval:org.mitre.oval:ste:1589"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1736" version="1" check="at least one" comment="/usr/bin/ppmdim is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1140"/>
      <state state_ref="oval:org.mitre.oval:ste:1588"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1735" version="1" check="at least one" comment="/usr/bin/ppmdim is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1140"/>
      <state state_ref="oval:org.mitre.oval:ste:1587"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1734" version="1" check="at least one" comment="/usr/bin/ppmdist is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1139"/>
      <state state_ref="oval:org.mitre.oval:ste:1586"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1733" version="1" check="at least one" comment="/usr/bin/ppmdist is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1139"/>
      <state state_ref="oval:org.mitre.oval:ste:1585"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1732" version="1" check="at least one" comment="/usr/bin/ppmdist is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1139"/>
      <state state_ref="oval:org.mitre.oval:ste:1584"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1731" version="1" check="at least one" comment="/usr/bin/ppmdither is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1138"/>
      <state state_ref="oval:org.mitre.oval:ste:1583"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1730" version="1" check="at least one" comment="/usr/bin/ppmdither is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1138"/>
      <state state_ref="oval:org.mitre.oval:ste:1582"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1729" version="1" check="at least one" comment="/usr/bin/ppmdither is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1138"/>
      <state state_ref="oval:org.mitre.oval:ste:1581"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1728" version="1" check="at least one" comment="/usr/bin/ppmflash is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1137"/>
      <state state_ref="oval:org.mitre.oval:ste:1580"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1727" version="1" check="at least one" comment="/usr/bin/ppmflash is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1137"/>
      <state state_ref="oval:org.mitre.oval:ste:1579"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1726" version="1" check="at least one" comment="/usr/bin/ppmflash is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1137"/>
      <state state_ref="oval:org.mitre.oval:ste:1578"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1725" version="1" check="at least one" comment="/usr/bin/ppmforge is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1136"/>
      <state state_ref="oval:org.mitre.oval:ste:1577"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1724" version="1" check="at least one" comment="/usr/bin/ppmforge is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1136"/>
      <state state_ref="oval:org.mitre.oval:ste:1576"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1723" version="1" check="at least one" comment="/usr/bin/ppmforge is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1136"/>
      <state state_ref="oval:org.mitre.oval:ste:1575"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1722" version="1" check="at least one" comment="/usr/bin/ppmhist is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1135"/>
      <state state_ref="oval:org.mitre.oval:ste:1574"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1721" version="1" check="at least one" comment="/usr/bin/ppmhist is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1135"/>
      <state state_ref="oval:org.mitre.oval:ste:1573"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1720" version="1" check="at least one" comment="/usr/bin/ppmhist is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1135"/>
      <state state_ref="oval:org.mitre.oval:ste:1572"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1719" version="1" check="at least one" comment="/usr/bin/ppmlabel is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1134"/>
      <state state_ref="oval:org.mitre.oval:ste:1571"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1718" version="1" check="at least one" comment="/usr/bin/ppmlabel is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1134"/>
      <state state_ref="oval:org.mitre.oval:ste:1570"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1717" version="1" check="at least one" comment="/usr/bin/ppmlabel is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1134"/>
      <state state_ref="oval:org.mitre.oval:ste:1569"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1716" version="1" check="at least one" comment="/usr/bin/ppmmake is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1133"/>
      <state state_ref="oval:org.mitre.oval:ste:1568"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1715" version="1" check="at least one" comment="/usr/bin/ppmmake is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1133"/>
      <state state_ref="oval:org.mitre.oval:ste:1567"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1714" version="1" check="at least one" comment="/usr/bin/ppmmake is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1133"/>
      <state state_ref="oval:org.mitre.oval:ste:1566"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1713" version="1" check="at least one" comment="/usr/bin/ppmmix is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1132"/>
      <state state_ref="oval:org.mitre.oval:ste:1565"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1712" version="1" check="at least one" comment="/usr/bin/ppmmix is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1132"/>
      <state state_ref="oval:org.mitre.oval:ste:1564"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1711" version="1" check="at least one" comment="/usr/bin/ppmmix is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1132"/>
      <state state_ref="oval:org.mitre.oval:ste:1563"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1710" version="1" check="at least one" comment="/usr/bin/ppmnorm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1131"/>
      <state state_ref="oval:org.mitre.oval:ste:1562"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1709" version="1" check="at least one" comment="/usr/bin/ppmnorm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1131"/>
      <state state_ref="oval:org.mitre.oval:ste:1561"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1708" version="1" check="at least one" comment="/usr/bin/ppmnorm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1131"/>
      <state state_ref="oval:org.mitre.oval:ste:1560"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1707" version="1" check="at least one" comment="/usr/bin/ppmntsc is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1130"/>
      <state state_ref="oval:org.mitre.oval:ste:1559"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1706" version="1" check="at least one" comment="/usr/bin/ppmntsc is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1130"/>
      <state state_ref="oval:org.mitre.oval:ste:1558"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1705" version="1" check="at least one" comment="/usr/bin/ppmntsc is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1130"/>
      <state state_ref="oval:org.mitre.oval:ste:1557"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1704" version="1" check="at least one" comment="/usr/bin/ppmpat is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1129"/>
      <state state_ref="oval:org.mitre.oval:ste:1556"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1703" version="1" check="at least one" comment="/usr/bin/ppmpat is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1129"/>
      <state state_ref="oval:org.mitre.oval:ste:1555"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1702" version="1" check="at least one" comment="/usr/bin/ppmpat is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1129"/>
      <state state_ref="oval:org.mitre.oval:ste:1554"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1701" version="1" check="at least one" comment="/usr/bin/ppmquant is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1128"/>
      <state state_ref="oval:org.mitre.oval:ste:1553"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1700" version="1" check="at least one" comment="/usr/bin/ppmquant is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1128"/>
      <state state_ref="oval:org.mitre.oval:ste:1552"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1699" version="1" check="at least one" comment="/usr/bin/ppmquant is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1128"/>
      <state state_ref="oval:org.mitre.oval:ste:1551"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1698" version="1" check="at least one" comment="/usr/bin/ppmqvga is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1127"/>
      <state state_ref="oval:org.mitre.oval:ste:1550"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1697" version="1" check="at least one" comment="/usr/bin/ppmqvga is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1127"/>
      <state state_ref="oval:org.mitre.oval:ste:1549"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1696" version="1" check="at least one" comment="/usr/bin/ppmqvga is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1127"/>
      <state state_ref="oval:org.mitre.oval:ste:1548"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1695" version="1" check="at least one" comment="/usr/bin/ppmrelief is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1126"/>
      <state state_ref="oval:org.mitre.oval:ste:1547"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1694" version="1" check="at least one" comment="/usr/bin/ppmrelief is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1126"/>
      <state state_ref="oval:org.mitre.oval:ste:1546"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1693" version="1" check="at least one" comment="/usr/bin/ppmrelief is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1126"/>
      <state state_ref="oval:org.mitre.oval:ste:1545"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1692" version="1" check="at least one" comment="/usr/bin/ppmshift is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1125"/>
      <state state_ref="oval:org.mitre.oval:ste:1544"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1691" version="1" check="at least one" comment="/usr/bin/ppmshift is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1125"/>
      <state state_ref="oval:org.mitre.oval:ste:1543"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1690" version="1" check="at least one" comment="/usr/bin/ppmshift is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1125"/>
      <state state_ref="oval:org.mitre.oval:ste:1542"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1689" version="1" check="at least one" comment="/usr/bin/ppmspread is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1124"/>
      <state state_ref="oval:org.mitre.oval:ste:1541"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1688" version="1" check="at least one" comment="/usr/bin/ppmspread is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1124"/>
      <state state_ref="oval:org.mitre.oval:ste:1540"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1687" version="1" check="at least one" comment="/usr/bin/ppmspread is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1124"/>
      <state state_ref="oval:org.mitre.oval:ste:1539"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1686" version="1" check="at least one" comment="/usr/bin/ppmtoacad is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1123"/>
      <state state_ref="oval:org.mitre.oval:ste:1538"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1685" version="1" check="at least one" comment="/usr/bin/ppmtoacad is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1123"/>
      <state state_ref="oval:org.mitre.oval:ste:1537"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1684" version="1" check="at least one" comment="/usr/bin/ppmtoacad is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1123"/>
      <state state_ref="oval:org.mitre.oval:ste:1536"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1683" version="1" check="at least one" comment="/usr/bin/ppmtobmp is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1122"/>
      <state state_ref="oval:org.mitre.oval:ste:1535"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1682" version="1" check="at least one" comment="/usr/bin/ppmtobmp is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1122"/>
      <state state_ref="oval:org.mitre.oval:ste:1534"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1681" version="1" check="at least one" comment="/usr/bin/ppmtobmp is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1122"/>
      <state state_ref="oval:org.mitre.oval:ste:1533"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1680" version="1" check="at least one" comment="/usr/bin/ppmtoeyuv is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1121"/>
      <state state_ref="oval:org.mitre.oval:ste:1532"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1679" version="1" check="at least one" comment="/usr/bin/ppmtoeyuv is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1121"/>
      <state state_ref="oval:org.mitre.oval:ste:1531"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1678" version="1" check="at least one" comment="/usr/bin/ppmtoeyuv is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1121"/>
      <state state_ref="oval:org.mitre.oval:ste:1530"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1677" version="1" check="at least one" comment="/usr/bin/ppmtogif is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1120"/>
      <state state_ref="oval:org.mitre.oval:ste:1529"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1676" version="1" check="at least one" comment="/usr/bin/ppmtogif is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1120"/>
      <state state_ref="oval:org.mitre.oval:ste:1528"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1675" version="1" check="at least one" comment="/usr/bin/ppmtogif is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1120"/>
      <state state_ref="oval:org.mitre.oval:ste:1527"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1674" version="1" check="at least one" comment="/usr/bin/ppmtoicr is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1119"/>
      <state state_ref="oval:org.mitre.oval:ste:1526"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1673" version="1" check="at least one" comment="/usr/bin/ppmtoicr is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1119"/>
      <state state_ref="oval:org.mitre.oval:ste:1525"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1672" version="1" check="at least one" comment="/usr/bin/ppmtoicr is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1119"/>
      <state state_ref="oval:org.mitre.oval:ste:1524"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1671" version="1" check="at least one" comment="/usr/bin/ppmtoilbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1118"/>
      <state state_ref="oval:org.mitre.oval:ste:1523"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1670" version="1" check="at least one" comment="/usr/bin/ppmtoilbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1118"/>
      <state state_ref="oval:org.mitre.oval:ste:1522"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1669" version="1" check="at least one" comment="/usr/bin/ppmtoilbm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1118"/>
      <state state_ref="oval:org.mitre.oval:ste:1521"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1668" version="1" check="at least one" comment="/usr/bin/ppmtojpeg is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1117"/>
      <state state_ref="oval:org.mitre.oval:ste:1520"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1667" version="1" check="at least one" comment="/usr/bin/ppmtojpeg is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1117"/>
      <state state_ref="oval:org.mitre.oval:ste:1519"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1666" version="1" check="at least one" comment="/usr/bin/ppmtojpeg is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1117"/>
      <state state_ref="oval:org.mitre.oval:ste:1518"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1665" version="1" check="at least one" comment="/usr/bin/ppmtoleaf is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1116"/>
      <state state_ref="oval:org.mitre.oval:ste:1517"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1664" version="1" check="at least one" comment="/usr/bin/ppmtoleaf is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1116"/>
      <state state_ref="oval:org.mitre.oval:ste:1516"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1663" version="1" check="at least one" comment="/usr/bin/ppmtoleaf is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1116"/>
      <state state_ref="oval:org.mitre.oval:ste:1515"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1662" version="1" check="at least one" comment="/usr/bin/ppmtolj is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1115"/>
      <state state_ref="oval:org.mitre.oval:ste:1514"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1661" version="1" check="at least one" comment="/usr/bin/ppmtolj is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1115"/>
      <state state_ref="oval:org.mitre.oval:ste:1513"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1660" version="1" check="at least one" comment="/usr/bin/ppmtolj is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1115"/>
      <state state_ref="oval:org.mitre.oval:ste:1512"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1659" version="1" check="at least one" comment="/usr/bin/ppmtomitsu is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1114"/>
      <state state_ref="oval:org.mitre.oval:ste:1511"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1658" version="1" check="at least one" comment="/usr/bin/ppmtomitsu is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1114"/>
      <state state_ref="oval:org.mitre.oval:ste:1510"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1657" version="1" check="at least one" comment="/usr/bin/ppmtomitsu is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1114"/>
      <state state_ref="oval:org.mitre.oval:ste:1509"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1656" version="1" check="at least one" comment="/usr/bin/ppmtompeg is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1113"/>
      <state state_ref="oval:org.mitre.oval:ste:1508"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1655" version="1" check="at least one" comment="/usr/bin/ppmtompeg is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1113"/>
      <state state_ref="oval:org.mitre.oval:ste:1507"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1654" version="1" check="at least one" comment="/usr/bin/ppmtompeg is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1113"/>
      <state state_ref="oval:org.mitre.oval:ste:1506"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1653" version="1" check="at least one" comment="/usr/bin/ppmtoneo is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1112"/>
      <state state_ref="oval:org.mitre.oval:ste:1505"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1652" version="1" check="at least one" comment="/usr/bin/ppmtoneo is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1112"/>
      <state state_ref="oval:org.mitre.oval:ste:1504"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1651" version="1" check="at least one" comment="/usr/bin/ppmtoneo is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1112"/>
      <state state_ref="oval:org.mitre.oval:ste:1503"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1650" version="1" check="at least one" comment="/usr/bin/ppmtopcx is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1111"/>
      <state state_ref="oval:org.mitre.oval:ste:1502"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1649" version="1" check="at least one" comment="/usr/bin/ppmtopcx is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1111"/>
      <state state_ref="oval:org.mitre.oval:ste:1501"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1648" version="1" check="at least one" comment="/usr/bin/ppmtopcx is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1111"/>
      <state state_ref="oval:org.mitre.oval:ste:1500"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1647" version="1" check="at least one" comment="/usr/bin/ppmtopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1110"/>
      <state state_ref="oval:org.mitre.oval:ste:1499"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1646" version="1" check="at least one" comment="/usr/bin/ppmtopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1110"/>
      <state state_ref="oval:org.mitre.oval:ste:1498"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1645" version="1" check="at least one" comment="/usr/bin/ppmtopgm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1110"/>
      <state state_ref="oval:org.mitre.oval:ste:1497"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1644" version="1" check="at least one" comment="/usr/bin/ppmtopi1 is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1109"/>
      <state state_ref="oval:org.mitre.oval:ste:1496"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1643" version="1" check="at least one" comment="/usr/bin/ppmtopi1 is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1109"/>
      <state state_ref="oval:org.mitre.oval:ste:1495"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1642" version="1" check="at least one" comment="/usr/bin/ppmtopi1 is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1109"/>
      <state state_ref="oval:org.mitre.oval:ste:1494"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2321" version="1" check="at least one" comment="pwlib version is less than 1.4.7-4.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1338"/>
      <state state_ref="oval:org.mitre.oval:ste:2173"/>
    </rpminfo_test>
    <inetlisteningservers_test id="oval:org.mitre.oval:tst:2320" version="2" check="at least one" comment="a program is listening on TCP or UDP port 1720" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1337"/>
      <state state_ref="oval:org.mitre.oval:ste:2172"/>
    </inetlisteningservers_test>
    <file_test id="oval:org.mitre.oval:tst:2322" version="1" check="at least one" comment="the version of wins.exe is less than 5.2.3790.99" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:276"/>
      <state state_ref="oval:org.mitre.oval:ste:2174"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:2969" version="1" check="at least one" comment="Patch 107893-19 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:301"/>
      <state state_ref="oval:org.mitre.oval:ste:2783"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:2325" version="1" check="at least one" comment="the version of msasn1.dll is less than 5.2.3790.88" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:844"/>
      <state state_ref="oval:org.mitre.oval:ste:2177"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2902" version="2" check="at least one" comment="the patch js56nen.exe (5.5.0.8513 version) is installed" check_existence="at_least_one_exists" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1666"/>
      <state state_ref="oval:org.mitre.oval:ste:2718"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2903" version="2" check="at least one" comment="the patch js56nen.exe (5.1.0.8513 version) is installed" check_existence="at_least_one_exists" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1666"/>
      <state state_ref="oval:org.mitre.oval:ste:2719"/>
    </registry_test>
    <patch_test id="oval:org.mitre.oval:tst:2970" version="1" check="at least one" comment="Patch 112846-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1699"/>
      <state state_ref="oval:org.mitre.oval:ste:2784"/>
    </patch_test>
    <registry_test id="oval:org.mitre.oval:tst:2351" version="1" comment="the patch KB896428 for Services for UNIX is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1346"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2350" version="1" comment="the version of telnet.exe is less than 5.3000.2073.13" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:816"/>
      <state state_ref="oval:org.mitre.oval:ste:2201"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2349" version="1" comment="the software Services for UNIX is installed and the version is 2.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1345"/>
      <state state_ref="oval:org.mitre.oval:ste:2200"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2348" version="1" comment="the software Services for UNIX is installed and the version is 3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1345"/>
      <state state_ref="oval:org.mitre.oval:ste:2199"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2347" version="1" comment="the version of telnet.exe is less than 7.0.1701.44" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:816"/>
      <state state_ref="oval:org.mitre.oval:ste:2198"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2346" version="1" comment="the software Services for UNIX is installed and the version is 3.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1345"/>
      <state state_ref="oval:org.mitre.oval:ste:2197"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2345" version="1" comment="the version of telnet.exe is less than 8.0.1969.33" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:816"/>
      <state state_ref="oval:org.mitre.oval:ste:2196"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3457" version="1" comment="the version of umpnpmgr.dll is less than 5.2.3790.360" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:2048"/>
      <state state_ref="oval:org.mitre.oval:ste:3122"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2971" version="1" check="at least one" comment="File %windir%\system32\inetsrv\ism.dll version is less than 5.0.2195.3407" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1631"/>
      <state state_ref="oval:org.mitre.oval:ste:2785"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2355" version="1" check="at least one" comment="The version of Ntoskrnl.exe is less than 5.1.2600.160" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:335"/>
      <state state_ref="oval:org.mitre.oval:ste:2205"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2357" version="1" check="at least one" comment="the version of lsasrv.dll is less than 5.0.2195.6987" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:512"/>
      <state state_ref="oval:org.mitre.oval:ste:2207"/>
    </file_test>
    <unknown_test id="oval:org.mitre.oval:tst:2490" version="1" comment="a vulnerable version of shtml.dll exists (FPSE 2002 or SPTS 2003)" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
    <registry_test id="oval:org.mitre.oval:tst:2379" version="1" comment="SharePoint Team Services are enabled (2K, XP, 2003)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1361"/>
      <state state_ref="oval:org.mitre.oval:ste:2228"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2973" version="1" check="at least one" comment="File %windir%\system32\smss.exe version is less than 5.0.2195.5695" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1641"/>
      <state state_ref="oval:org.mitre.oval:ste:2787"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2972" version="1" comment="Patch Q320206 Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1700"/>
      <state state_ref="oval:org.mitre.oval:ste:2786"/>
    </registry_test>
    <patch_test id="oval:org.mitre.oval:tst:3363" version="1" check="at least one" comment="Patch 120955-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2616"/>
      <state state_ref="oval:org.mitre.oval:ste:3553"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:2384" version="1" check="at least one" comment="the version of sqlsrv32.dll is less than 2000.81.9002.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1351"/>
      <state state_ref="oval:org.mitre.oval:ste:2233"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2383" version="1" check="at least one" comment="the version of odbcbcp.dll is less than 2000.81.9002.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:878"/>
      <state state_ref="oval:org.mitre.oval:ste:2232"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2381" version="1" check="at least one" comment="the version of sqlsrv32.dll is less than 2000.81.9042.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1351"/>
      <state state_ref="oval:org.mitre.oval:ste:2230"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2380" version="1" check="at least one" comment="the version of odbcbcp.dll is less than 2000.81.9042.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:878"/>
      <state state_ref="oval:org.mitre.oval:ste:2229"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:269" version="3" check="at least one" comment="Internet Explorer 6 Service Pack 2 for XP is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:267"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:268" version="1" check="at least one" comment="machine has followed the GDR update path and mshtml.dll is less than  6.0.2900.2523" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:266"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:267" version="1" check="at least one" comment="machine has followed the QFE update path and mshtml.dll is less than  6.0.2900.2524" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:265"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:266" version="2" check="at least one" comment="the patch kb834707  is installed (Installed Components key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:246"/>
      <state state_ref="oval:org.mitre.oval:ste:264"/>
    </registry_test>
    <patch_test id="oval:org.mitre.oval:tst:2974" version="1" check="at least one" comment="Patch 106934-04 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1701"/>
      <state state_ref="oval:org.mitre.oval:ste:2788"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:2389" version="1" comment="the version of Imekr70.ime is less than 7.0.8002.0 (Office 2003 and Accessories)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1366"/>
      <state state_ref="oval:org.mitre.oval:ste:2237"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:4066" version="1" comment="Patch 115168-05 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1845"/>
      <state state_ref="oval:org.mitre.oval:ste:3131"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:4043" version="1" comment="Patch 112238-10 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1830"/>
      <state state_ref="oval:org.mitre.oval:ste:3692"/>
    </patch_test>
    <package_test id="oval:org.mitre.oval:tst:3873" version="1" comment=" Sun Enterprise Authentication Mechanism (SEAM, SUNWkrgdo) installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2655"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:3824" version="1" comment="Patch 112908-15 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2309"/>
      <state state_ref="oval:org.mitre.oval:ste:3372"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3544" version="1" comment="Patch 112536-05 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1847"/>
      <state state_ref="oval:org.mitre.oval:ste:3437"/>
    </patch_test>
    <package_test id="oval:org.mitre.oval:tst:3514" version="1" comment="Sun Enterprise Authentication Mechanism (SEAM, SUNWkr5sv) installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2213"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:3509" version="1" comment="Patch 112390-09 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2709"/>
      <state state_ref="oval:org.mitre.oval:ste:3614"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3498" version="1" comment="Patch 112537-05 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2196"/>
      <state state_ref="oval:org.mitre.oval:ste:3009"/>
    </patch_test>
    <package_test id="oval:org.mitre.oval:tst:3369" version="1" comment=" Sun Enterprise Authentication Mechanism (SEAM, SUNWkrggl) installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2138"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:3366" version="1" comment="Patch 112240-08 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2599"/>
      <state state_ref="oval:org.mitre.oval:ste:3847"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3354" version="1" comment="Patch 112237-11 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2466"/>
      <state state_ref="oval:org.mitre.oval:ste:2964"/>
    </patch_test>
    <package_test id="oval:org.mitre.oval:tst:3192" version="1" comment=" Sun Enterprise Authentication Mechanism (SEAM, SUNWkr5sl) installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2617"/>
    </package_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2394" version="1" check="all" comment="gftp rpm is earlier than 1:2.0.14-4" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1369"/>
      <state state_ref="oval:org.mitre.oval:ste:2242"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:2393" version="1" check="all" comment="gftp is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1368"/>
      <state state_ref="oval:org.mitre.oval:ste:2241"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2397" version="1" comment="the version of Fontsub.dll is less than 5.0.2195.7071" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:668"/>
      <state state_ref="oval:org.mitre.oval:ste:2245"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2396" version="1" comment="the version of T2embed.dll is less than 5.0.2195.7073" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:667"/>
      <state state_ref="oval:org.mitre.oval:ste:2244"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2401" version="1" check="all" comment="ImageMagick RPM earlier than 0:5.5.6-14" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <oval-def:note>The ImageMagick-devel, ImageMagick-c++-devel, and ImageMagick-c++ RPMs all require that the exact same version of the ImageMagick RPM is present.  As such, we can test for a vulnerable version of the former alone, rather than testing for the presence of each of these RPMs in particular.</oval-def:note>
      </oval-def:notes>
      <object object_ref="oval:org.mitre.oval:obj:1371"/>
      <state state_ref="oval:org.mitre.oval:ste:2249"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:2976" version="1" check="at least one" comment="the version of sqlservr.exe is less than 2000.80.296.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:843"/>
      <state state_ref="oval:org.mitre.oval:ste:2790"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2407" version="1" check="at least one" comment="the version of wins.exe is less than 5.0.2195.6870" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:276"/>
      <state state_ref="oval:org.mitre.oval:ste:2255"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2406" version="1" comment="the patch kb830352 is installed (Hotfix key)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1373"/>
      <state state_ref="oval:org.mitre.oval:ste:2254"/>
    </registry_test>
    <patch_test id="oval:org.mitre.oval:tst:2413" version="1" comment="Patch 112234-11 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1376"/>
      <state state_ref="oval:org.mitre.oval:ste:2261"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:2412" version="1" comment="Patch 112234-12 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1376"/>
      <state state_ref="oval:org.mitre.oval:ste:2260"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:2411" version="1" comment="Patch 117172-16 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1375"/>
      <state state_ref="oval:org.mitre.oval:ste:2259"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:2410" version="1" comment="Patch 118559-19 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:607"/>
      <state state_ref="oval:org.mitre.oval:ste:2258"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:2983" version="1" check="at least one" comment="File dtspcd exists" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1703"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:2982" version="1" check="at least one" comment="Patch 108949-07 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:256"/>
      <state state_ref="oval:org.mitre.oval:ste:2796"/>
    </patch_test>
    <inetd_test id="oval:org.mitre.oval:tst:2981" version="2" check="at least one" comment="inetd.conf contains dtspcd" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1704"/>
      <state state_ref="oval:org.mitre.oval:ste:2795"/>
    </inetd_test>
    <file_test id="oval:org.mitre.oval:tst:2980" version="1" check="at least one" comment="File dtspcd executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1703"/>
      <state state_ref="oval:org.mitre.oval:ste:2794"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2979" version="1" check="at least one" comment="File dtspcd executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1703"/>
      <state state_ref="oval:org.mitre.oval:ste:2793"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2978" version="1" check="at least one" comment="File dtspcd executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1703"/>
      <state state_ref="oval:org.mitre.oval:ste:2792"/>
    </file_test>
    <file_test check="all" comment="The version of vbe6.dll is less than 6.4.99.72." id="oval:org.mitre.oval:tst:94" version="2" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:148"/>
      <state state_ref="oval:org.mitre.oval:ste:16"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2425" version="2" comment="the version of agentdpv.dll is less than 2.0.0.3423" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1000"/>
      <state state_ref="oval:org.mitre.oval:ste:2272"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2424" version="1" comment="the patch kb890046 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1380"/>
      <state state_ref="oval:org.mitre.oval:ste:2271"/>
    </registry_test>
    <patch_test id="oval:org.mitre.oval:tst:2986" version="1" check="at least one" comment="Patch 108721-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1707"/>
      <state state_ref="oval:org.mitre.oval:ste:2799"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2433" version="1" check="all" comment="rh-postgresql-server is earlier than 0:7.3.10-1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1384"/>
      <state state_ref="oval:org.mitre.oval:ste:2279"/>
    </rpminfo_test>
    <patch_test id="oval:org.mitre.oval:tst:2987" version="1" check="at least one" comment="Patch 110453-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1708"/>
      <state state_ref="oval:org.mitre.oval:ste:2800"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2451" version="1" check="at least one" comment="ypserv version is less than 2.8-0.9E" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1391"/>
      <state state_ref="oval:org.mitre.oval:ste:2296"/>
    </rpminfo_test>
    <inetlisteningservers_test id="oval:org.mitre.oval:tst:2450" version="2" check="at least one" comment="ypserv is listening on the network" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1390"/>
      <state state_ref="oval:org.mitre.oval:ste:2295"/>
    </inetlisteningservers_test>
    <registry_test id="oval:org.mitre.oval:tst:20507" version="1" comment="Check if Kingsoft Antivirus is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:7552"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:19977" version="1" comment="Check if the version of kavfm.sys in Kingsoft Antivirus is less than or equal to 2010.7.30.201" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:6964"/>
      <state state_ref="oval:org.mitre.oval:ste:7351"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2455" version="1" check="at least one" comment="xpdf version is less than 2.0.1-11" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1393"/>
      <state state_ref="oval:org.mitre.oval:ste:2300"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:2454" version="1" check="at least one" comment="xpdf is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1392"/>
      <state state_ref="oval:org.mitre.oval:ste:2299"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2453" version="1" check="at least one" comment="xpdf is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1392"/>
      <state state_ref="oval:org.mitre.oval:ste:2298"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2452" version="1" check="at least one" comment="xpdf is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1392"/>
      <state state_ref="oval:org.mitre.oval:ste:2297"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:2464" version="1" comment="Patch 109320-17 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:315"/>
      <state state_ref="oval:org.mitre.oval:ste:2308"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:2462" version="1" comment="Patch 109321-17 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1398"/>
      <state state_ref="oval:org.mitre.oval:ste:2306"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:2461" version="1" comment="Patch 113329-16 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:314"/>
      <state state_ref="oval:org.mitre.oval:ste:2305"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:2460" version="1" comment="Patch 114980-17 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1397"/>
      <state state_ref="oval:org.mitre.oval:ste:2304"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:2458" version="1" comment="Patch 120467-03 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1396"/>
      <state state_ref="oval:org.mitre.oval:ste:2302"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:2457" version="1" comment="Patch 120468-03 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1395"/>
      <state state_ref="oval:org.mitre.oval:ste:2301"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:2456" version="2" comment="Target is configured as a print server" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1394"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2467" version="1" check="at least one" comment="xinetd version is less than 2:2.3.11-1.9.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1400"/>
      <state state_ref="oval:org.mitre.oval:ste:2311"/>
    </rpminfo_test>
    <inetlisteningservers_test id="oval:org.mitre.oval:tst:2466" version="2" check="at least one" comment="xinetd is listening to the network" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1399"/>
      <state state_ref="oval:org.mitre.oval:ste:2310"/>
    </inetlisteningservers_test>
    <file_test id="oval:org.mitre.oval:tst:2469" version="1" check="at least one" comment="the version of msasn1.dll is less than 5.0.2195.6823" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:844"/>
      <state state_ref="oval:org.mitre.oval:ste:2313"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2468" version="1" comment="the patch kb828028 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1401"/>
      <state state_ref="oval:org.mitre.oval:ste:2312"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:3144" version="1" check="at least one" comment="File kcms_configure exists" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1787"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3143" version="1" check="at least one" comment="File kcms_configure executable and SUID or SGID" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1787"/>
      <state state_ref="oval:org.mitre.oval:ste:2940"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3142" version="1" check="at least one" comment="File kcms_configure executable and SUID or SGID" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1787"/>
      <state state_ref="oval:org.mitre.oval:ste:2939"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3141" version="1" check="at least one" comment="File kcms_configure executable and SUID or SGID" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1787"/>
      <state state_ref="oval:org.mitre.oval:ste:2938"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:2989" version="1" check="at least one" comment="Patch 107337-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:431"/>
      <state state_ref="oval:org.mitre.oval:ste:2802"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2474" version="1" check="all" comment="mikmod RPM prior to 0:3.1.6-22.EL3" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1406"/>
      <state state_ref="oval:org.mitre.oval:ste:2318"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:2473" version="1" check="all" comment="/usr/bin/mikmod is executable by any user" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1405"/>
      <state state_ref="oval:org.mitre.oval:ste:2317"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:10932" version="1" comment="Mso.dll version is less than 10.0.6856.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:467"/>
      <state state_ref="oval:org.mitre.oval:ste:4964"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2991" version="1" check="at least one" comment="File %windir%\system32\netlogon.dll version is less than 5.0.893.1105" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1640"/>
      <state state_ref="oval:org.mitre.oval:ste:2804"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:10377" version="1" comment="Patch 141414-09 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6156"/>
      <state state_ref="oval:org.mitre.oval:ste:4884"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10060" version="1" comment="Patch 141415-09 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:7090"/>
      <state state_ref="oval:org.mitre.oval:ste:4884"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10522" version="1" comment="Patch 141415-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:7039"/>
      <state state_ref="oval:org.mitre.oval:ste:4674"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10476" version="1" comment="Patch 141414-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:7080"/>
      <state state_ref="oval:org.mitre.oval:ste:4674"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2487" version="1" check="at least one" comment="vsftpd version is less than 1.1.3-8" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1417"/>
      <state state_ref="oval:org.mitre.oval:ste:2330"/>
    </rpminfo_test>
    <inetlisteningservers_test id="oval:org.mitre.oval:tst:2486" version="2" check="at least one" comment="vsftpd is listening to the network" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1416"/>
      <state state_ref="oval:org.mitre.oval:ste:2329"/>
    </inetlisteningservers_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2489" version="1" check="at least one" comment="up2date version is less than 3.1.23.1-5" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1419"/>
      <state state_ref="oval:org.mitre.oval:ste:2331"/>
    </rpminfo_test>
    <process_test id="oval:org.mitre.oval:tst:2488" version="1" check="at least one" comment="rhnsd is running" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1418"/>
    </process_test>
    <registry_test id="oval:org.mitre.oval:tst:2999" version="1" comment="RAS Phonebook" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1716"/>
      <state state_ref="oval:org.mitre.oval:ste:2810"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2997" version="1" comment="Patch Q318138 Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1715"/>
      <state state_ref="oval:org.mitre.oval:ste:2808"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2996" version="1" comment="RAS Enabled" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1714"/>
      <state state_ref="oval:org.mitre.oval:ste:2807"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2992" version="1" check="at least one" comment="File %windir%\system32\rasman.dll version is less than 5.0.2195.4983" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1711"/>
      <state state_ref="oval:org.mitre.oval:ste:2805"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:9907" version="1" comment="Patch 122300-40 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6959"/>
      <state state_ref="oval:org.mitre.oval:ste:5081"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10040" version="1" comment="Patch 122301-40 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6988"/>
      <state state_ref="oval:org.mitre.oval:ste:5081"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:2491" version="1" check="at least one" comment="the version of Mapi32.dll is less than 5.5.2658.34" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:837"/>
      <state state_ref="oval:org.mitre.oval:ste:2332"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2494" version="1" check="all" comment="sysreport RPM earlier than 0:1.3.7.2-6" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1421"/>
      <state state_ref="oval:org.mitre.oval:ste:2335"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:2493" version="1" check="all" comment="/tmp is world-writable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <oval-def:note>For "/tmp is readable by non-root users," use a compound test.</oval-def:note>
      </oval-def:notes>
      <object object_ref="oval:org.mitre.oval:obj:1420"/>
      <state state_ref="oval:org.mitre.oval:ste:2334"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:10764" version="1" comment="Patch 113329-07 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:7096"/>
      <state state_ref="oval:org.mitre.oval:ste:4940"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10602" version="1" comment="Patch 114980-09 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6794"/>
      <state state_ref="oval:org.mitre.oval:ste:5396"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10451" version="1" comment="Patch 109320-23 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6192"/>
      <state state_ref="oval:org.mitre.oval:ste:5014"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10134" version="1" comment="Patch 109321-23 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6561"/>
      <state state_ref="oval:org.mitre.oval:ste:5014"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9654" version="1" comment="Patch 114014-22 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6809"/>
      <state state_ref="oval:org.mitre.oval:ste:4637"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9600" version="1" comment="Patch 125732-04 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5877"/>
      <state state_ref="oval:org.mitre.oval:ste:4677"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9487" version="1" comment="Patch 114015-22 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6507"/>
      <state state_ref="oval:org.mitre.oval:ste:4637"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:8710" version="1" comment="Patch 125731-04 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6832"/>
      <state state_ref="oval:org.mitre.oval:ste:4677"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9765" version="1" comment="Patch 141008-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6568"/>
      <state state_ref="oval:org.mitre.oval:ste:4291"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9425" version="1" comment="Patch 141009-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6310"/>
      <state state_ref="oval:org.mitre.oval:ste:4291"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:2995" version="1" check="at least one" comment="File mibiisa exists" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1713"/>
    </file_test>
    <process_test id="oval:org.mitre.oval:tst:2993" version="1" check="at least one" comment="mibiisa running" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1712"/>
    </process_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2498" version="1" check="at least one" comment="unzip version is less than 5.50-33" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1423"/>
      <state state_ref="oval:org.mitre.oval:ste:2339"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:2497" version="1" check="at least one" comment="/usr/bin/unzip is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1422"/>
      <state state_ref="oval:org.mitre.oval:ste:2338"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2496" version="1" check="at least one" comment="/usr/bin/unzip is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1422"/>
      <state state_ref="oval:org.mitre.oval:ste:2337"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2495" version="1" check="at least one" comment="/usr/bin/unzip is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1422"/>
      <state state_ref="oval:org.mitre.oval:ste:2336"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:9760" version="1" comment="Patch 138896-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6427"/>
      <state state_ref="oval:org.mitre.oval:ste:4291"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9742" version="1" comment="Patch 140837-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6393"/>
      <state state_ref="oval:org.mitre.oval:ste:4291"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9731" version="1" comment="Patch 138897-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6252"/>
      <state state_ref="oval:org.mitre.oval:ste:4291"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9652" version="1" comment="Patch 140838-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6426"/>
      <state state_ref="oval:org.mitre.oval:ste:4291"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9632" version="1" comment="Patch 141014-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6731"/>
      <state state_ref="oval:org.mitre.oval:ste:4291"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9537" version="1" comment="Patch 141015-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6824"/>
      <state state_ref="oval:org.mitre.oval:ste:4291"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:3742" version="1" comment="the version of rdpwd.sys is less than 5.1.2600.1698" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:2219"/>
      <state state_ref="oval:org.mitre.oval:ste:3928"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:9991" version="1" comment="Patch 140922-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:7121"/>
      <state state_ref="oval:org.mitre.oval:ste:4953"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10518" version="1" comment="Patch 140921-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6893"/>
      <state state_ref="oval:org.mitre.oval:ste:4953"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10507" version="1" comment="Patch 122301-42 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:7064"/>
      <state state_ref="oval:org.mitre.oval:ste:4752"/>
    </patch_test>
    <textfilecontent_test id="oval:org.mitre.oval:tst:10368" version="1" comment="Solaris Auditing is enabled" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:6927"/>
    </textfilecontent_test>
    <patch_test id="oval:org.mitre.oval:tst:10143" version="1" comment="Patch 122300-42 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:7019"/>
      <state state_ref="oval:org.mitre.oval:ste:4752"/>
    </patch_test>
    <registry_test id="oval:org.mitre.oval:tst:10032" version="1" comment="Microsoft Virtual Server 2005 R2 Service Pack 1, Enterprise Edition is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:6766"/>
      <state state_ref="oval:org.mitre.oval:ste:4381"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:10104" version="1" comment="Microsoft Virtual PC 2007 Service Pack 1 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:6995"/>
      <state state_ref="oval:org.mitre.oval:ste:4607"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:10031" version="1" comment="Microsoft Virtual PC 2007 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:6939"/>
      <state state_ref="oval:org.mitre.oval:ste:5051"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3460" version="1" comment="Microsoft Virtual Server 2005 Enterprise is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:2202"/>
      <state state_ref="oval:org.mitre.oval:ste:3369"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3530" version="1" comment="Microsoft Virtual PC 2004 Service Pack 1 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:2004"/>
      <state state_ref="oval:org.mitre.oval:ste:3102"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:4165" version="2" comment="Microsoft Virtual Server 2005 Standard is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:2423"/>
      <state state_ref="oval:org.mitre.oval:ste:3369"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:9798" version="1" comment="The version of VMM.sys is less than 1.1.465.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:6776"/>
      <state state_ref="oval:org.mitre.oval:ste:4914"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:44366" version="1" comment="The version of VMM.sys is less than 1.1.465.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:6776"/>
      <state state_ref="oval:org.mitre.oval:ste:13462"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:10406" version="1" comment="The version of VMM.sys is less than 1.1.656.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:6776"/>
      <state state_ref="oval:org.mitre.oval:ste:5157"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:10244" version="1" comment="The version of VMM.sys is less than 1.1.598.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:6776"/>
      <state state_ref="oval:org.mitre.oval:ste:5102"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:9767" version="1" comment="Patch 139555-08 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6664"/>
      <state state_ref="oval:org.mitre.oval:ste:5215"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10639" version="1" comment="Patch 127721-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:7057"/>
      <state state_ref="oval:org.mitre.oval:ste:4812"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10603" version="1" comment="Patch 122300-41 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6999"/>
      <state state_ref="oval:org.mitre.oval:ste:4349"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10324" version="1" comment="Patch 127722-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:7132"/>
      <state state_ref="oval:org.mitre.oval:ste:4812"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10254" version="1" comment="Patch 139556-08 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6169"/>
      <state state_ref="oval:org.mitre.oval:ste:5215"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10053" version="1" comment="Patch 122301-41 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:7077"/>
      <state state_ref="oval:org.mitre.oval:ste:4349"/>
    </patch_test>
    <swlist_test id="oval:org.mitre.oval:tst:3641" version="1" check="at least one" comment="WUFTP-26.INETSVCS-FTP with version less than B.11.11.01.006 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:2161"/>
      <state state_ref="oval:org.mitre.oval:ste:3359"/>
    </swlist_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2499" version="1" check="at least one" comment="squirrelmail version is less than 1.2.11-1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1424"/>
      <state state_ref="oval:org.mitre.oval:ste:2340"/>
    </rpminfo_test>
    <patch_test id="oval:org.mitre.oval:tst:9898" version="1" comment="Patch 119346-07 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6807"/>
      <state state_ref="oval:org.mitre.oval:ste:4475"/>
    </patch_test>
    <package_test id="oval:org.mitre.oval:tst:9482" version="1" comment="SUNWsasl is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6468"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:10455" version="1" comment="Patch 115343-08 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6713"/>
      <state state_ref="oval:org.mitre.oval:ste:5021"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10445" version="1" comment="Patch 115328-08 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6967"/>
      <state state_ref="oval:org.mitre.oval:ste:5021"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10367" version="1" comment="Patch 115342-08 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6646"/>
      <state state_ref="oval:org.mitre.oval:ste:5021"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10193" version="1" comment="Patch 119345-07 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:7005"/>
      <state state_ref="oval:org.mitre.oval:ste:4475"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9611" version="1" comment="Patch 114435-14 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6170"/>
      <state state_ref="oval:org.mitre.oval:ste:4306"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9566" version="1" comment="Patch 113451-15 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6546"/>
      <state state_ref="oval:org.mitre.oval:ste:4119"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:9478" version="1" comment="File /etc/inet/ike/config exists" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:6569"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:8940" version="1" comment="Patch 140196-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6037"/>
      <state state_ref="oval:org.mitre.oval:ste:3980"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:8709" version="1" comment="Patch 140414-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6748"/>
      <state state_ref="oval:org.mitre.oval:ste:3980"/>
    </patch_test>
    <uname_test id="oval:org.mitre.oval:tst:3985" version="1" check="all" comment="HP Release B.10.10" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:3450"/>
    </uname_test>
    <uname_test id="oval:org.mitre.oval:tst:3807" version="1" check="all" comment="HP Release B.10.20" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:3946"/>
    </uname_test>
    <patch_test id="oval:org.mitre.oval:tst:3674" version="2" check="at least one" comment="Patch PHCO_23261 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:2358"/>
    </patch_test>
    <uname_test id="oval:org.mitre.oval:tst:3581" version="1" check="all" comment="HP Release B.10.01" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:3134"/>
    </uname_test>
    <uname_test id="oval:org.mitre.oval:tst:3461" version="1" check="all" comment="HP Release B.10.30" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:3213"/>
    </uname_test>
    <swlist_test id="oval:org.mitre.oval:tst:3376" version="1" check="at least one" comment="OS-Core.C2400-UTIL is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:1876"/>
    </swlist_test>
    <swlist_test id="oval:org.mitre.oval:tst:3370" version="1" check="at least one" comment="OS-Core.ADMN-ENG-A-MAN is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:2208"/>
    </swlist_test>
    <patch_test id="oval:org.mitre.oval:tst:10160" version="1" comment="Patch 118192-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6900"/>
      <state state_ref="oval:org.mitre.oval:ste:4080"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10043" version="1" comment="Patch 118192-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6344"/>
      <state state_ref="oval:org.mitre.oval:ste:4814"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:3978" version="1" comment="the version of rdpwd.sys is less than 5.2.3790.348" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:2219"/>
      <state state_ref="oval:org.mitre.oval:ste:2967"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:3429" version="4" comment="Win2K/XP/2003 is patched" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:717"/>
    </registry_test>
    <patch_test id="oval:org.mitre.oval:tst:9675" version="1" comment="Patch 114344-38 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6795"/>
      <state state_ref="oval:org.mitre.oval:ste:4716"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9614" version="1" comment="Patch 119435-26 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6759"/>
      <state state_ref="oval:org.mitre.oval:ste:4498"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9254" version="1" comment="Patch 138889-03 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6730"/>
      <state state_ref="oval:org.mitre.oval:ste:4110"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:8820" version="1" comment="Patch 138888-03 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6364"/>
      <state state_ref="oval:org.mitre.oval:ste:4110"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9197" version="1" comment="Patch 126133-03 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6489"/>
      <state state_ref="oval:org.mitre.oval:ste:4292"/>
    </patch_test>
    <textfilecontent_test id="oval:org.mitre.oval:tst:9165" version="1" comment="X11Forwarding is not enabled" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:6443"/>
    </textfilecontent_test>
    <patch_test id="oval:org.mitre.oval:tst:9157" version="1" comment="Patch 114357-13 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6316"/>
      <state state_ref="oval:org.mitre.oval:ste:4188"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9096" version="1" comment="Patch 114356-14 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6539"/>
      <state state_ref="oval:org.mitre.oval:ste:4323"/>
    </patch_test>
    <textfilecontent_test id="oval:org.mitre.oval:tst:9067" version="1" comment="X11Forwarding is enabled" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:6276"/>
    </textfilecontent_test>
    <patch_test id="oval:org.mitre.oval:tst:9048" version="1" comment="Patch 126134-03 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6547"/>
      <state state_ref="oval:org.mitre.oval:ste:4292"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9659" version="1" comment="Patch 140383-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6023"/>
      <state state_ref="oval:org.mitre.oval:ste:3980"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9523" version="1" comment="Patch 140384-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6436"/>
      <state state_ref="oval:org.mitre.oval:ste:3980"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9513" version="1" comment="Patch 113685-07 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6842"/>
      <state state_ref="oval:org.mitre.oval:ste:4695"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9498" version="1" comment="Patch 140427-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6724"/>
      <state state_ref="oval:org.mitre.oval:ste:3980"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9438" version="1" comment="Patch 113686-06 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6851"/>
      <state state_ref="oval:org.mitre.oval:ste:4694"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9267" version="1" comment="Patch 140426-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6798"/>
      <state state_ref="oval:org.mitre.oval:ste:3980"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9681" version="1" comment="Patch 116966-33 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6691"/>
      <state state_ref="oval:org.mitre.oval:ste:4524"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9661" version="1" comment="Patch 138889-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6641"/>
      <state state_ref="oval:org.mitre.oval:ste:4474"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9631" version="1" comment="Patch 116965-34 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6679"/>
      <state state_ref="oval:org.mitre.oval:ste:4673"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9582" version="1" comment="Patch 114344-37 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6802"/>
      <state state_ref="oval:org.mitre.oval:ste:4357"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9474" version="1" comment="Patch 138888-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6834"/>
      <state state_ref="oval:org.mitre.oval:ste:4474"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:8868" version="1" comment="Patch 119435-25 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6805"/>
      <state state_ref="oval:org.mitre.oval:ste:4559"/>
    </patch_test>
    <registry_test id="oval:org.mitre.oval:tst:113006" version="1" comment="Avast! AntiVirus is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:38118"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:10161" version="2" comment="Avast! AntiVirus old version is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:7103"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:10746" version="2" comment="Avast! version is less than 4.8.1356.0" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:7259"/>
      <state state_ref="oval:org.mitre.oval:ste:5702"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:9617" version="1" comment="Patch 112785-65 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6796"/>
      <state state_ref="oval:org.mitre.oval:ste:4653"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9572" version="1" comment="Patch 119067-11 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6637"/>
      <state state_ref="oval:org.mitre.oval:ste:4139"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9472" version="1" comment="Patch 119059-46 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6503"/>
      <state state_ref="oval:org.mitre.oval:ste:4535"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9453" version="1" comment="Patch 119068-11 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6434"/>
      <state state_ref="oval:org.mitre.oval:ste:4139"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9264" version="1" comment="Patch 119060-45 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6865"/>
      <state state_ref="oval:org.mitre.oval:ste:4426"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9118" version="1" comment="Patch 112786-54 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6825"/>
      <state state_ref="oval:org.mitre.oval:ste:4279"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3147" version="1" check="at least one" comment="cups version is less than 1.1.17-13.3" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1789"/>
      <state state_ref="oval:org.mitre.oval:ste:2943"/>
    </rpminfo_test>
    <inetlisteningservers_test id="oval:org.mitre.oval:tst:3146" version="2" check="at least one" comment="cupsd listens on the network" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1788"/>
      <state state_ref="oval:org.mitre.oval:ste:2942"/>
    </inetlisteningservers_test>
    <patch_test id="oval:org.mitre.oval:tst:9793" version="1" comment="Patch 118191-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6483"/>
      <state state_ref="oval:org.mitre.oval:ste:4814"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9763" version="1" comment="Patch 118191-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6407"/>
      <state state_ref="oval:org.mitre.oval:ste:4080"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9629" version="1" comment="Patch 139099-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6585"/>
      <state state_ref="oval:org.mitre.oval:ste:4080"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9674" version="1" comment="Patch 128624-09 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6758"/>
      <state state_ref="oval:org.mitre.oval:ste:3785"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9658" version="1" comment="Patch 139560-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6552"/>
      <state state_ref="oval:org.mitre.oval:ste:4680"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9593" version="1" comment="Patch 116053-03 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6620"/>
      <state state_ref="oval:org.mitre.oval:ste:4110"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9559" version="1" comment="Patch 113318-34 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6867"/>
      <state state_ref="oval:org.mitre.oval:ste:4549"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9544" version="1" comment="Patch 128625-09 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6658"/>
      <state state_ref="oval:org.mitre.oval:ste:3785"/>
    </patch_test>
    <process_test id="oval:org.mitre.oval:tst:9385" version="1" comment="autofs is enabled" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:6437"/>
      <state state_ref="oval:org.mitre.oval:ste:4490"/>
    </process_test>
    <patch_test id="oval:org.mitre.oval:tst:8913" version="1" comment="Patch 139561-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6284"/>
      <state state_ref="oval:org.mitre.oval:ste:4680"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2517" version="1" check="at least one" comment="sendmail version is less than 8.12.8-6.90" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1433"/>
      <state state_ref="oval:org.mitre.oval:ste:2357"/>
    </rpminfo_test>
    <inetlisteningservers_test id="oval:org.mitre.oval:tst:2516" version="2" check="at least one" comment="sendmail is listening to the network" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1432"/>
      <state state_ref="oval:org.mitre.oval:ste:2356"/>
    </inetlisteningservers_test>
    <registry_test id="oval:org.mitre.oval:tst:9354" version="1" comment="HKEY_CLASSES_ROOT\PROTOCOLS\Handler\cdo exists" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:6562"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:9141" version="1" comment="HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CDO exists" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:5685"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:8796" version="1" comment="HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\cdo exists" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:6258"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2518" version="1" check="at least one" comment="sendmail version is less than 8.12.8-9.90" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1434"/>
      <state state_ref="oval:org.mitre.oval:ste:2358"/>
    </rpminfo_test>
    <patch_test id="oval:org.mitre.oval:tst:9500" version="1" comment="Patch 138889-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6662"/>
      <state state_ref="oval:org.mitre.oval:ste:4411"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9457" version="1" comment="Patch 138888-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6811"/>
      <state state_ref="oval:org.mitre.oval:ste:4411"/>
    </patch_test>
    <registry_test id="oval:org.mitre.oval:tst:2519" version="3" comment="MSN Messenger 6.2.0205 or later is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1435"/>
      <state state_ref="oval:org.mitre.oval:ste:2359"/>
    </registry_test>
    <version_test id="oval:org.mitre.oval:tst:8890" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3386"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8807" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4062"/>
    </version_test>
    <file_test id="oval:org.mitre.oval:tst:274" version="1" check="at least one" comment="the version of nntpsvc.dll is less than 5.0.2195.6972" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:252"/>
      <state state_ref="oval:org.mitre.oval:ste:272"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:273" version="1" check="at least one" comment="Patch Windows2000-KB883935-x86-ENU.exe Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:251"/>
      <state state_ref="oval:org.mitre.oval:ste:271"/>
    </registry_test>
    <package_test id="oval:org.mitre.oval:tst:2525" version="1" check="all" comment="Remote Network Server Commands - Usr (SUNWrcmds) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1441"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:2524" version="1" check="all" comment="Patch 118239-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1440"/>
      <state state_ref="oval:org.mitre.oval:ste:2363"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:2523" version="1" check="all" comment="Patch 116984-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1439"/>
      <state state_ref="oval:org.mitre.oval:ste:2362"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:2522" version="1" check="all" comment="Patch 117455-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1438"/>
      <state state_ref="oval:org.mitre.oval:ste:2361"/>
    </patch_test>
    <process_test id="oval:org.mitre.oval:tst:2521" version="1" check="all" comment="in.rwhod is running" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1437"/>
    </process_test>
    <version_test id="oval:org.mitre.oval:tst:8864" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4073"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8803" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4014"/>
    </version_test>
    <patch_test id="oval:org.mitre.oval:tst:9857" version="1" comment="Patch 114265-14 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:7092"/>
      <state state_ref="oval:org.mitre.oval:ste:5323"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10777" version="1" comment="Patch 112837-15 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6933"/>
      <state state_ref="oval:org.mitre.oval:ste:4912"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10701" version="1" comment="Patch 109327-23 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6892"/>
      <state state_ref="oval:org.mitre.oval:ste:5346"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10663" version="1" comment="Patch 109326-23 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6869"/>
      <state state_ref="oval:org.mitre.oval:ste:5346"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10275" version="1" comment="Patch 119784-06 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6239"/>
      <state state_ref="oval:org.mitre.oval:ste:4396"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10241" version="1" comment="Patch 119783-06 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:7127"/>
      <state state_ref="oval:org.mitre.oval:ste:4396"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9516" version="1" comment="Patch 139459-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6856"/>
      <state state_ref="oval:org.mitre.oval:ste:4411"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9087" version="1" comment="Patch 138863-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6815"/>
      <state state_ref="oval:org.mitre.oval:ste:4464"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9239" version="1" comment="Patch 122213-18 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6341"/>
      <state state_ref="oval:org.mitre.oval:ste:4006"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:8318" version="1" comment="Patch 122212-18 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6515"/>
      <state state_ref="oval:org.mitre.oval:ste:4006"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9911" version="1" comment="Patch 141414-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6899"/>
      <state state_ref="oval:org.mitre.oval:ste:4488"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9619" version="1" comment="Patch 141415-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6058"/>
      <state state_ref="oval:org.mitre.oval:ste:4488"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:3002" version="1" check="at least one" comment="File %windir%\system32\rpcrt4.dll version is less than 5.0.2195.6106" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:254"/>
      <state state_ref="oval:org.mitre.oval:ste:2813"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:3001" version="1" check="at least one" comment="Patch Q331953_W2K_SP4_X86_EN.exe Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1718"/>
      <state state_ref="oval:org.mitre.oval:ste:2812"/>
    </registry_test>
    <line_test id="oval:org.mitre.oval:tst:9064" version="1" comment="config contains: ip inspect" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4174"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8757" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3896"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8245" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3161"/>
    </version_test>
    <patch_test id="oval:org.mitre.oval:tst:9291" version="1" comment="Patch 116479-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6461"/>
      <state state_ref="oval:org.mitre.oval:ste:4257"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9138" version="1" comment="Patch 113031-04 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6371"/>
      <state state_ref="oval:org.mitre.oval:ste:4016"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9137" version="1" comment="Patch 120831-06 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6624"/>
      <state state_ref="oval:org.mitre.oval:ste:4395"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9109" version="1" comment="Patch 120830-06 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6464"/>
      <state state_ref="oval:org.mitre.oval:ste:4395"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9009" version="1" comment="Patch 110904-08 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6578"/>
      <state state_ref="oval:org.mitre.oval:ste:4499"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:8986" version="1" comment="Patch 110903-08 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6565"/>
      <state state_ref="oval:org.mitre.oval:ste:4499"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9634" version="1" comment="Patch 114016-03 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6671"/>
      <state state_ref="oval:org.mitre.oval:ste:4819"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9605" version="1" comment="Patch 122911-15 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6144"/>
      <state state_ref="oval:org.mitre.oval:ste:4327"/>
    </patch_test>
    <package_test id="oval:org.mitre.oval:tst:9550" version="1" comment="SUNWtcatr is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6523"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:9480" version="1" comment="Patch 114017-03 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6835"/>
      <state state_ref="oval:org.mitre.oval:ste:4819"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9406" version="1" comment="Patch 122912-15 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6853"/>
      <state state_ref="oval:org.mitre.oval:ste:4327"/>
    </patch_test>
    <version_test id="oval:org.mitre.oval:tst:8788" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3454"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8596" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3964"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8613" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3704"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8476" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4105"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8847" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4103"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:9004" version="1" comment="config contains: no login" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4208"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8872" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3561"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8759" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3423"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8762" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4060"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8175" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4025"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8691" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4091"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8548" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3627"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8778" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3997"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8717" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4023"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:23865" version="1" comment="config contains: ip ips" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:6956"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8879" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3628"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8736" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3979"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8964" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6256"/>
      <state state_ref="oval:org.mitre.oval:ste:4184"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8643" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6256"/>
      <state state_ref="oval:org.mitre.oval:ste:3884"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8846" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3266"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:8725" version="1" comment="config contains: ipv6 address" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4055"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8702" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3507"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:8696" version="1" comment="config contains: ipv6 enabled" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:3918"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8873" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4069"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8582" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3160"/>
    </version_test>
    <process_test id="oval:org.mitre.oval:tst:1334" version="1" comment="The Xorg X server is running" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:923"/>
    </process_test>
    <patch_test id="oval:org.mitre.oval:tst:10579" version="1" comment="Patch 115158-11 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6860"/>
      <state state_ref="oval:org.mitre.oval:ste:5271"/>
    </patch_test>
    <package_test id="oval:org.mitre.oval:tst:10577" version="1" comment="SUNWxwsvr is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6872"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:10567" version="1" comment="Patch 120095-23 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6985"/>
      <state state_ref="oval:org.mitre.oval:ste:5262"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10472" version="1" comment="Patch 120094-23 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:7083"/>
      <state state_ref="oval:org.mitre.oval:ste:5262"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10441" version="1" comment="Patch 115299-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:7056"/>
      <state state_ref="oval:org.mitre.oval:ste:4953"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10429" version="1" comment="Patch 115159-11 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:7021"/>
      <state state_ref="oval:org.mitre.oval:ste:5271"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10067" version="1" comment="Patch 115298-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6862"/>
      <state state_ref="oval:org.mitre.oval:ste:4953"/>
    </patch_test>
    <version_test id="oval:org.mitre.oval:tst:8970" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6256"/>
      <state state_ref="oval:org.mitre.oval:ste:4154"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8821" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6256"/>
      <state state_ref="oval:org.mitre.oval:ste:4238"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:9043" version="1" comment="config contains: ^\s*ip http secure-server" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6197"/>
      <state state_ref="oval:org.mitre.oval:ste:4089"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:8992" version="1" comment="config contains: ^\s*no ip http secure-server" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6197"/>
      <state state_ref="oval:org.mitre.oval:ste:4183"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8760" version="2" comment="IOS vulnerable versions: 12.2(4)JA, 12.2(4)JA1, 12.2(8)JA, 12.2(11)JA" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6256"/>
      <state state_ref="oval:org.mitre.oval:ste:4252"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8865" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4097"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8199" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3417"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8895" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4061"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8850" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3563"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:9014" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6256"/>
      <state state_ref="oval:org.mitre.oval:ste:4248"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8738" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6256"/>
      <state state_ref="oval:org.mitre.oval:ste:4133"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8894" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3467"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8639" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4070"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:8603" version="1" comment="config contains: enable secret" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4166"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:8554" version="1" comment="config contains: ^\s*ip http authentication" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:3187"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:8515" version="1" comment="config contains: ^\s*ip http" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:3551"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:8120" version="1" comment="config contains: enable password" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:3698"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:9089" version="1" comment="config contains: aaa new-model" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4071"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8849" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3370"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8699" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3867"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:8908" version="1" comment="config contains: no cdp enable" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:3401"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:8904" version="1" comment="config contains: ^\s*no cdp run" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:3600"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8852" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3648"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:8789" version="1" comment="config contains: cdp enable" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:3227"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8782" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4024"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:8706" version="1" comment="config contains: ^\s*cdp run" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4172"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:8926" version="1" comment="config contains: dlsw local-peer" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4148"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8735" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4087"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8729" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3322"/>
    </version_test>
    <file_test id="oval:org.mitre.oval:tst:2536" version="1" check="at least one" comment="the version of msjava.dll is less than 5.0.3809.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1446"/>
      <state state_ref="oval:org.mitre.oval:ste:2371"/>
    </file_test>
    <version_test id="oval:org.mitre.oval:tst:8823" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4078"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8723" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4015"/>
    </version_test>
    <patch_test id="oval:org.mitre.oval:tst:9562" version="1" comment="Patch 109077-21 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6742"/>
      <state state_ref="oval:org.mitre.oval:ste:4521"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9503" version="1" comment="Patch 112837-16 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6801"/>
      <state state_ref="oval:org.mitre.oval:ste:4628"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9497" version="1" comment="Patch 109078-21 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6275"/>
      <state state_ref="oval:org.mitre.oval:ste:4521"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9355" version="1" comment="Patch 114265-15 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6517"/>
      <state state_ref="oval:org.mitre.oval:ste:4528"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9282" version="1" comment="Patch 138876-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6822"/>
      <state state_ref="oval:org.mitre.oval:ste:4411"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:8742" version="1" comment="Patch 138877-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6821"/>
      <state state_ref="oval:org.mitre.oval:ste:4411"/>
    </patch_test>
    <version_test id="oval:org.mitre.oval:tst:8545" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3962"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8111" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4041"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8886" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4114"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8714" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3304"/>
    </version_test>
    <patch_test id="oval:org.mitre.oval:tst:9595" version="1" comment="Patch 115168-18 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6744"/>
      <state state_ref="oval:org.mitre.oval:ste:4568"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9565" version="1" comment="Patch 112908-33 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6465"/>
      <state state_ref="oval:org.mitre.oval:ste:4247"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9364" version="1" comment="Patch 109806-19 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6548"/>
      <state state_ref="oval:org.mitre.oval:ste:4599"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9348" version="1" comment="Patch 139479-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6339"/>
      <state state_ref="oval:org.mitre.oval:ste:4411"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9258" version="1" comment="Patch 109805-19 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6775"/>
      <state state_ref="oval:org.mitre.oval:ste:4599"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9246" version="1" comment="Patch 139478-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6774"/>
      <state state_ref="oval:org.mitre.oval:ste:4411"/>
    </patch_test>
    <version_test id="oval:org.mitre.oval:tst:8885" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3326"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8684" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3318"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:40698" version="1" comment="SNMP v3 Test" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:11105"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8695" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3063"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8467" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3211"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:8983" version="1" comment="config contains: parameter-map type tms" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4259"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:8967" version="1" comment="config contains: method tls" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:3994"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:8848" version="1" comment="config contains: crypto signaling default trustpoint" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:3579"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8527" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3115"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8044" version="3" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3493"/>
    </version_test>
    <registry_test id="oval:org.mitre.oval:tst:77223" version="1" comment="Search Server 2008 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23396"/>
      <state state_ref="oval:org.mitre.oval:ste:17879"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:9391" version="2" comment="the version of Mssdmn.exe is less than 12.0.6318.5000" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23377"/>
      <state state_ref="oval:org.mitre.oval:ste:4572"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:9219" version="1" comment="Patch 121775-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6433"/>
      <state state_ref="oval:org.mitre.oval:ste:4142"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:8701" version="1" comment="Patch 122212-22 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6580"/>
      <state state_ref="oval:org.mitre.oval:ste:3520"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:8353" version="1" comment="Patch 122213-22 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6404"/>
      <state state_ref="oval:org.mitre.oval:ste:3520"/>
    </patch_test>
    <version_test id="oval:org.mitre.oval:tst:8785" version="2" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4037"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8567" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3084"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8756" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4008"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:8671" version="1" comment="config contains: no ip unreachables" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:3707"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8513" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3090"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:9081" version="1" comment="config contains: aaa authentication login \S+ group radius local none" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4189"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:9040" version="1" comment="config contains: aaa authentication ppp \S+ group radius local none" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4027"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:8909" version="1" comment="config contains: aaa authentication login \S+ group radius none" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4215"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8860" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3274"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8538" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3958"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:8410" version="1" comment="config contains: aaa authentication ppp \S+ group radius none" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4235"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8800" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3526"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8750" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4019"/>
    </version_test>
    <registry_test id="oval:org.mitre.oval:tst:2696" version="1" comment="the workstation service is enabled" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1544"/>
      <state state_ref="oval:org.mitre.oval:ste:2518"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2541" version="2" check="at least one" comment="the version of wkssvc.dll is less than 5.00.2195.6862" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1448"/>
      <state state_ref="oval:org.mitre.oval:ste:2376"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2540" version="1" check="at least one" comment="the patch q828748 is installed (Hotfix key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1447"/>
      <state state_ref="oval:org.mitre.oval:ste:2375"/>
    </registry_test>
    <line_test id="oval:org.mitre.oval:tst:8989" version="1" comment="config contains: cns config \S+ \S+ encrypt" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4229"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8866" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3109"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:8767" version="1" comment="config contains: ^\s*ip http secure-server" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:3998"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8625" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4018"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:8357" version="1" comment="config contains: ^\s*no ip http secure-server" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:3581"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:9110" version="1" comment="config contains: crypto isakmp profile" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4021"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:8976" version="1" comment="config contains: crypto map \S+ client authentication list" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4249"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8755" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3441"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8721" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4031"/>
    </version_test>
    <patch_test id="oval:org.mitre.oval:tst:8065" version="1" comment="Patch 137112-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5681"/>
      <state state_ref="oval:org.mitre.oval:ste:3173"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7853" version="1" comment="Patch 137111-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5849"/>
      <state state_ref="oval:org.mitre.oval:ste:3173"/>
    </patch_test>
    <line_test id="oval:org.mitre.oval:tst:8948" version="1" comment="config contains: crypto key generate rsa" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4047"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8661" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4036"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8424" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3231"/>
    </version_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2549" version="1" check="at least one" comment="sendmail version is less than 8.12.8-5.90" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1452"/>
      <state state_ref="oval:org.mitre.oval:ste:2383"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:2548" version="1" check="at least one" comment="sendmail is Set-UID" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1451"/>
      <state state_ref="oval:org.mitre.oval:ste:2382"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2547" version="1" check="at least one" comment="sendmail is Set-UID" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1451"/>
      <state state_ref="oval:org.mitre.oval:ste:2381"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2546" version="1" check="at least one" comment="sendmail is Set-UID" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1451"/>
      <state state_ref="oval:org.mitre.oval:ste:2380"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2545" version="1" check="at least one" comment="sendmail is Set-GID" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1451"/>
      <state state_ref="oval:org.mitre.oval:ste:2379"/>
    </file_test>
    <inetlisteningservers_test id="oval:org.mitre.oval:tst:2544" version="2" check="at least one" comment="sendmail listening" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1450"/>
      <state state_ref="oval:org.mitre.oval:ste:2378"/>
    </inetlisteningservers_test>
    <version_test id="oval:org.mitre.oval:tst:8851" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4111"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8481" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4043"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:8973" version="1" comment="config contains: dlsw local-peer" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4221"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8853" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3158"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8809" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4057"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8798" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4106"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8766" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4017"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8552" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3162"/>
    </version_test>
    <patch_test id="oval:org.mitre.oval:tst:9974" version="1" comment="Patch 138882-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6439"/>
      <state state_ref="oval:org.mitre.oval:ste:5074"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9832" version="1" comment="Patch 116669-34 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6704"/>
      <state state_ref="oval:org.mitre.oval:ste:5036"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9628" version="1" comment="Patch 138574-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6723"/>
      <state state_ref="oval:org.mitre.oval:ste:4115"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9259" version="1" comment="Patch 138632-03 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6521"/>
      <state state_ref="oval:org.mitre.oval:ste:4982"/>
    </patch_test>
    <version_test id="oval:org.mitre.oval:tst:8647" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3055"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8569" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3197"/>
    </version_test>
    <registry_test id="oval:org.mitre.oval:tst:7911" version="1" comment="Exchange Server 2007 SP1 is installed." check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:6032"/>
      <state state_ref="oval:org.mitre.oval:ste:3018"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:8570" version="1" comment="cdoex.dll is less than 8.0.813.0" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:513"/>
      <state state_ref="oval:org.mitre.oval:ste:3336"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:8531" version="1" comment="cdoex.dll is less than 8.1.291.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:513"/>
      <state state_ref="oval:org.mitre.oval:ste:3564"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:10676" version="1" comment="Patch 141414-05 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6610"/>
      <state state_ref="oval:org.mitre.oval:ste:4925"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10637" version="1" comment="Patch 122300-42 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6999"/>
      <state state_ref="oval:org.mitre.oval:ste:5169"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10535" version="1" comment="Patch 127722-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:7132"/>
      <state state_ref="oval:org.mitre.oval:ste:4812"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10485" version="1" comment="Patch 127721-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:7057"/>
      <state state_ref="oval:org.mitre.oval:ste:4812"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10432" version="1" comment="Patch 141415-05 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6462"/>
      <state state_ref="oval:org.mitre.oval:ste:4925"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10364" version="1" comment="Patch 122301-42 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:7077"/>
      <state state_ref="oval:org.mitre.oval:ste:5169"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2557" version="1" check="at least one" comment="wl version is less than 2.10.1-1.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1456"/>
      <state state_ref="oval:org.mitre.oval:ste:2391"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2556" version="1" check="at least one" comment="wl-xemacs version is less than 2.10.1-1.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1455"/>
      <state state_ref="oval:org.mitre.oval:ste:2390"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:2555" version="1" check="at least one" comment="/usr/bin/emacs is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1454"/>
      <state state_ref="oval:org.mitre.oval:ste:2389"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2554" version="1" check="at least one" comment="/usr/bin/emacs is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1454"/>
      <state state_ref="oval:org.mitre.oval:ste:2388"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2553" version="1" check="at least one" comment="/usr/bin/emacs is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1454"/>
      <state state_ref="oval:org.mitre.oval:ste:2387"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2552" version="1" check="at least one" comment="/usr/bin/xemacs is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1453"/>
      <state state_ref="oval:org.mitre.oval:ste:2386"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2551" version="1" check="at least one" comment="/usr/bin/xemacs is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1453"/>
      <state state_ref="oval:org.mitre.oval:ste:2385"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2550" version="1" check="at least one" comment="/usr/bin/xemacs is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1453"/>
      <state state_ref="oval:org.mitre.oval:ste:2384"/>
    </file_test>
    <version_test id="oval:org.mitre.oval:tst:8772" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3824"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8616" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3313"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8837" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4045"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:8252" version="1" comment="config contains: l2-filter block-arp" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:3309"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8121" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4083"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:8955" version="1" comment="config contains: ip nhrp network-id" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:3609"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8862" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4093"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8062" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3099"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8863" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3560"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8093" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3966"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8783" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4009"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8482" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3717"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:8920" version="1" comment="config contains: ^\s*no ip http server" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:3798"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8811" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3840"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8333" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3973"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:8123" version="1" comment="config contains: ^\s*ip http server" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4067"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:8747" version="1" comment="config contains: mpls traffic-eng tunnels" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4124"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:8682" version="1" comment="config contains: tag-switching ip" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4074"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:8652" version="1" comment="config contains: mpls ip" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:3984"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8506" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3996"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:7886" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3414"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8564" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4130"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8761" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3087"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8638" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3233"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:8841" version="1" comment="config contains: bgp log-neighbor-changes" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:3624"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8771" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4032"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:8694" version="1" comment="config contains: snmp-server enable traps bgp" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:3856"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8628" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3558"/>
    </version_test>
    <registry_test id="oval:org.mitre.oval:tst:3648" version="2" comment="Service Pack 1 for Microsoft Visual Studio .NET 2003 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:144"/>
      <state state_ref="oval:org.mitre.oval:ste:3827"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:80783" version="1" comment="Check if HKLM\SOFTWARE\Microsoft\VisualStudio\6.0\Setup\Microsoft Visual Basic!ProductDir exists" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23624"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:80295" version="1" comment="Check if file vb6.exe exists" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23704"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:77534" version="1" comment="Check if Microsoft Visual FoxPro is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:22438"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:9283" version="1" comment="Mschrt20.ocx version is less than 6.1.98.12" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:6745"/>
      <state state_ref="oval:org.mitre.oval:ste:4688"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:9209" version="1" comment="Mscomct2.ocx version is less than 6.1.98.12" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:6695"/>
      <state state_ref="oval:org.mitre.oval:ste:4361"/>
    </file_test>
    <line_test id="oval:org.mitre.oval:tst:8882" version="1" comment="config contains: mdt default" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:3239"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8722" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3203"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8529" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4077"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8826" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3267"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8793" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3353"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:8749" version="1" comment="config contains: router bgp" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4199"/>
    </line_test>
    <patch_test id="oval:org.mitre.oval:tst:9626" version="1" comment="Patch 139498-04 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6373"/>
      <state state_ref="oval:org.mitre.oval:ste:4749"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9460" version="1" comment="Patch 139499-04 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6132"/>
      <state state_ref="oval:org.mitre.oval:ste:4749"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2559" version="1" check="at least one" comment="samba version is less than 2.2.7a-8.9.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1458"/>
      <state state_ref="oval:org.mitre.oval:ste:2393"/>
    </rpminfo_test>
    <inetlisteningservers_test id="oval:org.mitre.oval:tst:2558" version="2" check="at least one" comment="smbd is listening on the network" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1457"/>
      <state state_ref="oval:org.mitre.oval:ste:2392"/>
    </inetlisteningservers_test>
    <patch_test id="oval:org.mitre.oval:tst:9984" version="1" comment="Patch 117351-60 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:7107"/>
      <state state_ref="oval:org.mitre.oval:ste:5229"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9621" version="1" comment="Patch 139484-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6938"/>
      <state state_ref="oval:org.mitre.oval:ste:5224"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10531" version="1" comment="Patch 139483-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6733"/>
      <state state_ref="oval:org.mitre.oval:ste:5224"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10524" version="1" comment="Patch 122300-34 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:7040"/>
      <state state_ref="oval:org.mitre.oval:ste:5183"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10320" version="1" comment="Patch 117350-60 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6528"/>
      <state state_ref="oval:org.mitre.oval:ste:5229"/>
    </patch_test>
    <textfilecontent_test id="oval:org.mitre.oval:tst:10049" version="1" comment="The system has UFS file systems mounted which are writable (read-write)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:7066"/>
      <state state_ref="oval:org.mitre.oval:ste:5132"/>
    </textfilecontent_test>
    <patch_test id="oval:org.mitre.oval:tst:10020" version="1" comment="Patch 122301-34 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:7141"/>
      <state state_ref="oval:org.mitre.oval:ste:5183"/>
    </patch_test>
    <line_test id="oval:org.mitre.oval:tst:8974" version="1" comment="config contains: no service dhcp" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4088"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8838" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3044"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:7843" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3206"/>
    </version_test>
    <patch_test id="oval:org.mitre.oval:tst:9079" version="1" comment="Patch 136717-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6494"/>
      <state state_ref="oval:org.mitre.oval:ste:3288"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9052" version="1" comment="Patch 114984-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5510"/>
      <state state_ref="oval:org.mitre.oval:ste:4065"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9022" version="1" comment="Patch 114971-03 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6391"/>
      <state state_ref="oval:org.mitre.oval:ste:4273"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9021" version="1" comment="Patch 114985-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6470"/>
      <state state_ref="oval:org.mitre.oval:ste:4065"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:8942" version="1" comment="Patch 138570-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6071"/>
      <state state_ref="oval:org.mitre.oval:ste:3288"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:8779" version="1" comment="Patch 136716-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5646"/>
      <state state_ref="oval:org.mitre.oval:ste:3288"/>
    </patch_test>
    <version_test id="oval:org.mitre.oval:tst:8833" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3121"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8719" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4005"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:8464" version="1" comment="config contains: ^\s*rtr responder" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4012"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8795" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3523"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8460" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3720"/>
    </version_test>
    <patch_test id="oval:org.mitre.oval:tst:3005" version="1" check="at least one" comment="Patch 111596-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1720"/>
      <state state_ref="oval:org.mitre.oval:ste:2815"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10550" version="1" comment="Patch 141733-03 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6876"/>
      <state state_ref="oval:org.mitre.oval:ste:3850"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10132" version="1" comment="Patch 141734-03 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:7129"/>
      <state state_ref="oval:org.mitre.oval:ste:3850"/>
    </patch_test>
    <version_test id="oval:org.mitre.oval:tst:8704" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3402"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:9093" version="1" comment="config contains: ip nat inside" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:3537"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:8816" version="1" comment="config contains: ip nat outside" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4233"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8748" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4165"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:8685" version="1" comment="config contains: ip access-group \S+ in" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4134"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8290" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4120"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:8910" version="1" comment="config contains: service mgcpapp" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4210"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:8899" version="1" comment="config contains: proxy h323" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4050"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:8786" version="1" comment="config contains: ip inspect name \S+ h323" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4198"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8891" version="2" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4064"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8453" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4177"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8676" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3394"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8519" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3130"/>
    </version_test>
    <patch_test id="oval:org.mitre.oval:tst:2562" version="1" check="all" comment="Patch 108376-25 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1460"/>
      <state state_ref="oval:org.mitre.oval:ste:2395"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:2561" version="1" check="all" comment="Patch 108652-30 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:876"/>
      <state state_ref="oval:org.mitre.oval:ste:2394"/>
    </patch_test>
    <package_test id="oval:org.mitre.oval:tst:2560" version="1" check="all" comment="X Window System platform software (SUNWxwplt) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1459"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:7743" version="1" comment="Patch 120413-08 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5528"/>
      <state state_ref="oval:org.mitre.oval:ste:3818"/>
    </patch_test>
    <package_test id="oval:org.mitre.oval:tst:7742" version="1" comment="Package SUNWtleu (Thai) is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5302"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:7700" version="1" comment="Patch 120414-20 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5473"/>
      <state state_ref="oval:org.mitre.oval:ste:3932"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7675" version="1" comment="Patch 120415-20 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5196"/>
      <state state_ref="oval:org.mitre.oval:ste:3932"/>
    </patch_test>
    <package_test id="oval:org.mitre.oval:tst:7614" version="1" comment="Package SUNWhleu2 (Traditional Chinese) is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5631"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:7399" version="1" comment="Patch 120412-08 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5539"/>
      <state state_ref="oval:org.mitre.oval:ste:3818"/>
    </patch_test>
    <package_test id="oval:org.mitre.oval:tst:7155" version="1" comment="Package SUNWkleu (Korean) is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5193"/>
    </package_test>
    <package_test id="oval:org.mitre.oval:tst:7115" version="1" comment="PPackage SUNWhkleu (Traditional Chinese (Hong Kong)) is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5617"/>
    </package_test>
    <package_test id="oval:org.mitre.oval:tst:6860" version="1" comment="Package SUNWcleu2 (Simplified Chinese) is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5610"/>
    </package_test>
    <version_test id="oval:org.mitre.oval:tst:8688" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3378"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8836" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3776"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:8618" version="1" comment="config contains: ip scp server enable" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4209"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8345" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3346"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8787" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3379"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8635" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3082"/>
    </version_test>
    <patch_test id="oval:org.mitre.oval:tst:7777" version="1" comment="Patch 124420-03 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5105"/>
      <state state_ref="oval:org.mitre.oval:ste:3069"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7736" version="1" comment="Patch 119812-05 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5446"/>
      <state state_ref="oval:org.mitre.oval:ste:3678"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7547" version="1" comment="Patch 116106-07 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5437"/>
      <state state_ref="oval:org.mitre.oval:ste:3880"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7493" version="1" comment="Patch 124421-03 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5486"/>
      <state state_ref="oval:org.mitre.oval:ste:3069"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7445" version="1" comment="Patch 116105-08 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5377"/>
      <state state_ref="oval:org.mitre.oval:ste:3821"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:6931" version="1" comment="Patch 119813-07 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5559"/>
      <state state_ref="oval:org.mitre.oval:ste:3880"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:2564" version="1" check="at least one" comment="the version of odbcbcp.dll is less than 2000.80.747.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:878"/>
      <state state_ref="oval:org.mitre.oval:ste:2397"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2563" version="1" check="at least one" comment="the version of sqlsrv32.dll is less than 2000.80.747.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1351"/>
      <state state_ref="oval:org.mitre.oval:ste:2396"/>
    </file_test>
    <version_test id="oval:org.mitre.oval:tst:9003" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6256"/>
      <state state_ref="oval:org.mitre.oval:ste:4214"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8884" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6256"/>
      <state state_ref="oval:org.mitre.oval:ste:4272"/>
    </version_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2566" version="1" check="at least one" comment="samba version is less than 2.2.7a-7.9.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1462"/>
      <state state_ref="oval:org.mitre.oval:ste:2399"/>
    </rpminfo_test>
    <inetlisteningservers_test id="oval:org.mitre.oval:tst:2565" version="2" check="at least one" comment="smbd listens on the network" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1461"/>
      <state state_ref="oval:org.mitre.oval:ste:2398"/>
    </inetlisteningservers_test>
    <patch_test id="oval:org.mitre.oval:tst:7854" version="1" comment="Patch 114344-32 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5519"/>
      <state state_ref="oval:org.mitre.oval:ste:3025"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7656" version="1" comment="Patch 116966-29 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5057"/>
      <state state_ref="oval:org.mitre.oval:ste:3532"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7608" version="1" comment="Patch 118822-27 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5736"/>
      <state state_ref="oval:org.mitre.oval:ste:3440"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7533" version="1" comment="Patch 116965-30 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5199"/>
      <state state_ref="oval:org.mitre.oval:ste:3898"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7175" version="1" comment="Patch 118844-28 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5511"/>
      <state state_ref="oval:org.mitre.oval:ste:3541"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:6892" version="1" comment="Patch 119435-20 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5644"/>
      <state state_ref="oval:org.mitre.oval:ste:3242"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9591" version="1" comment="Patch 139390-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6065"/>
      <state state_ref="oval:org.mitre.oval:ste:4680"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9551" version="1" comment="Patch 127127-11 installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6864"/>
      <state state_ref="oval:org.mitre.oval:ste:3721"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9422" version="1" comment="Patch 127128-11 installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6848"/>
      <state state_ref="oval:org.mitre.oval:ste:3721"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:8934" version="1" comment="Patch 139391-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6789"/>
      <state state_ref="oval:org.mitre.oval:ste:4680"/>
    </patch_test>
    <version_test id="oval:org.mitre.oval:tst:8550" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3043"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8512" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3216"/>
    </version_test>
    <patch_test id="oval:org.mitre.oval:tst:7711" version="1" comment="Patch 117350-53 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5357"/>
      <state state_ref="oval:org.mitre.oval:ste:3024"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7677" version="1" comment="Patch 117351-53 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5574"/>
      <state state_ref="oval:org.mitre.oval:ste:3024"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7708" version="1" comment="Patch 127111-08 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5654"/>
      <state state_ref="oval:org.mitre.oval:ste:2984"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7275" version="1" comment="Patch 127112-08 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5516"/>
      <state state_ref="oval:org.mitre.oval:ste:2984"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7809" version="1" comment="Patch 123402-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5599"/>
      <state state_ref="oval:org.mitre.oval:ste:3469"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7804" version="1" comment="Patch 123403-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5504"/>
      <state state_ref="oval:org.mitre.oval:ste:3469"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7796" version="1" comment="Patch 115553-29 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5662"/>
      <state state_ref="oval:org.mitre.oval:ste:3799"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:6972" version="1" comment="Patch 115554-25 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5194"/>
      <state state_ref="oval:org.mitre.oval:ste:3961"/>
    </patch_test>
    <line_test id="oval:org.mitre.oval:tst:8663" version="1" comment="config contains: ip inspect name \S+ http" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4063"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:8601" version="1" comment="config contains: ip ips \S+ in" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4107"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:8509" version="1" comment="config contains: ip ips \S+ out" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4163"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8806" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3862"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8258" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4081"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8734" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3387"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8670" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3198"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:8871" version="1" comment="config contains: router eigrp" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4121"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8536" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3155"/>
    </version_test>
    <patch_test id="oval:org.mitre.oval:tst:9227" version="1" comment="Patch 122301-30 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5623"/>
      <state state_ref="oval:org.mitre.oval:ste:4309"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9150" version="1" comment="Patch 117350-56 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6416"/>
      <state state_ref="oval:org.mitre.oval:ste:4260"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9075" version="1" comment="Patch 137111-05 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6052"/>
      <state state_ref="oval:org.mitre.oval:ste:3703"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9046" version="1" comment="Patch 122300-30 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6533"/>
      <state state_ref="oval:org.mitre.oval:ste:4309"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:8905" version="1" comment="Patch 137112-05 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6348"/>
      <state state_ref="oval:org.mitre.oval:ste:3703"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:8843" version="1" comment="Patch 117351-56 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6431"/>
      <state state_ref="oval:org.mitre.oval:ste:4260"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7688" version="1" comment="Patch 120011-04 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5717"/>
      <state state_ref="oval:org.mitre.oval:ste:3482"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7520" version="1" comment="Patch 120012-04 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5402"/>
      <state state_ref="oval:org.mitre.oval:ste:3482"/>
    </patch_test>
    <version_test id="oval:org.mitre.oval:tst:7897" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3741"/>
    </version_test>
    <patch_test id="oval:org.mitre.oval:tst:9125" version="1" comment="Patch 137112-04 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6478"/>
      <state state_ref="oval:org.mitre.oval:ste:4243"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9095" version="1" comment="Patch 137111-04 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5526"/>
      <state state_ref="oval:org.mitre.oval:ste:4243"/>
    </patch_test>
    <textfilecontent_test id="oval:org.mitre.oval:tst:8414" version="1" comment="deadman feature is enabled (kernel variable 'snooping' has a value of one)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:5723"/>
    </textfilecontent_test>
    <version_test id="oval:org.mitre.oval:tst:8869" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4068"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8728" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4112"/>
    </version_test>
    <patch_test id="oval:org.mitre.oval:tst:7869" version="1" comment="Patch 114678-15 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5639"/>
      <state state_ref="oval:org.mitre.oval:ste:3139"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7683" version="1" comment="Patch 119810-05 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5319"/>
      <state state_ref="oval:org.mitre.oval:ste:2980"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7086" version="1" comment="Patch 114677-15 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5309"/>
      <state state_ref="oval:org.mitre.oval:ste:3139"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:6971" version="1" comment="Patch 119811-05 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5365"/>
      <state state_ref="oval:org.mitre.oval:ste:2980"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9713" version="1" comment="Patch 138372-06 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6827"/>
      <state state_ref="oval:org.mitre.oval:ste:4378"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9655" version="1" comment="Patch 138371-06 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6718"/>
      <state state_ref="oval:org.mitre.oval:ste:4378"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9624" version="1" comment="Patch 112237-16 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6329"/>
      <state state_ref="oval:org.mitre.oval:ste:4802"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9606" version="1" comment="Patch 115168-19 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6116"/>
      <state state_ref="oval:org.mitre.oval:ste:4392"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9570" version="1" comment="Patch 112908-34 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6146"/>
      <state state_ref="oval:org.mitre.oval:ste:4850"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9370" version="1" comment="Patch 112238-15 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6741"/>
      <state state_ref="oval:org.mitre.oval:ste:4763"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9206" version="1" comment="Patch 112240-13 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6614"/>
      <state state_ref="oval:org.mitre.oval:ste:4724"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:8797" version="1" comment="Patch 112390-14 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6649"/>
      <state state_ref="oval:org.mitre.oval:ste:4539"/>
    </patch_test>
    <version_test id="oval:org.mitre.oval:tst:8576" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3708"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8546" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4153"/>
    </version_test>
    <patch_test id="oval:org.mitre.oval:tst:7670" version="1" comment="Patch 127112-06 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5637"/>
      <state state_ref="oval:org.mitre.oval:ste:3666"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7472" version="1" comment="Patch 127111-06 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:4952"/>
      <state state_ref="oval:org.mitre.oval:ste:3666"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3007" version="1" check="at least one" comment="ethereal version is less than 0.9.11-0.90.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1722"/>
      <state state_ref="oval:org.mitre.oval:ste:2816"/>
    </rpminfo_test>
    <version_test id="oval:org.mitre.oval:tst:8889" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4150"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8737" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3176"/>
    </version_test>
    <patch_test id="oval:org.mitre.oval:tst:7770" version="1" comment="Patch 112785-63 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5656"/>
      <state state_ref="oval:org.mitre.oval:ste:3080"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7764" version="1" comment="Patch 119060-37 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5438"/>
      <state state_ref="oval:org.mitre.oval:ste:3050"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7744" version="1" comment="Patch 125719-07 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5647"/>
      <state state_ref="oval:org.mitre.oval:ste:3574"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7694" version="1" comment="Patch 119059-38 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5085"/>
      <state state_ref="oval:org.mitre.oval:ste:3746"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7681" version="1" comment="Patch 119068-09 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5601"/>
      <state state_ref="oval:org.mitre.oval:ste:3415"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7606" version="1" comment="Patch 119067-09 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5340"/>
      <state state_ref="oval:org.mitre.oval:ste:3415"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7428" version="1" comment="Patch 118908-04 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5284"/>
      <state state_ref="oval:org.mitre.oval:ste:3390"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7423" version="1" comment="Patch 125720-17 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5655"/>
      <state state_ref="oval:org.mitre.oval:ste:3085"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7415" version="1" comment="Patch 112786-52 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5542"/>
      <state state_ref="oval:org.mitre.oval:ste:3150"/>
    </patch_test>
    <line_test id="oval:org.mitre.oval:tst:9102" version="1" comment="config contains: crypto map" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:3723"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:9066" version="1" comment="config contains: ip pmtu" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4051"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:8954" version="1" comment="config contains: tunnel path-mtu-discovery" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:3533"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:8933" version="1" comment="config contains: tunnel protection" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4001"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:8608" version="1" comment="config contains: ip tcp path-mtu-discovery" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:3970"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8503" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3053"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8451" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3059"/>
    </version_test>
    <patch_test id="oval:org.mitre.oval:tst:7909" version="1" comment="Patch 127719-05 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:4777"/>
      <state state_ref="oval:org.mitre.oval:ste:3709"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7859" version="1" comment="Patch 127718-05 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5293"/>
      <state state_ref="oval:org.mitre.oval:ste:3709"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:7756" version="1" comment="File /var/tmp/inetd.log exists" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:5540"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:8555" version="1" comment="owaauth.dll is less than 6.5.7653.38" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:6223"/>
      <state state_ref="oval:org.mitre.oval:ste:3464"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:9833" version="1" comment="Patch 116455-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6448"/>
      <state state_ref="oval:org.mitre.oval:ste:4929"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9695" version="1" comment="Patch 116453-03 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6831"/>
      <state state_ref="oval:org.mitre.oval:ste:4959"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10171" version="1" comment="Patch 116454-03 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6534"/>
      <state state_ref="oval:org.mitre.oval:ste:4959"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:10038" version="1" comment="Patch 116442-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6772"/>
      <state state_ref="oval:org.mitre.oval:ste:4929"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:8071" version="1" comment="Patch 127744-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5529"/>
      <state state_ref="oval:org.mitre.oval:ste:3305"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:8036" version="1" comment="Patch 120012-06 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5785"/>
      <state state_ref="oval:org.mitre.oval:ste:3256"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7858" version="1" comment="Patch 120011-06 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5338"/>
      <state state_ref="oval:org.mitre.oval:ste:3256"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7719" version="1" comment="Patch 127743-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5263"/>
      <state state_ref="oval:org.mitre.oval:ste:3305"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7761" version="1" comment="Patch 127112-08 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:4751"/>
      <state state_ref="oval:org.mitre.oval:ste:2995"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7721" version="1" comment="Patch 127111-08 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5384"/>
      <state state_ref="oval:org.mitre.oval:ste:2995"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9126" version="1" comment="Patch 108965-11 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5817"/>
      <state state_ref="oval:org.mitre.oval:ste:4289"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9103" version="1" comment="Patch 112915-05 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6179"/>
      <state state_ref="oval:org.mitre.oval:ste:3521"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:9062" version="1" comment="Patch 138083-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6020"/>
      <state state_ref="oval:org.mitre.oval:ste:4072"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:8936" version="1" comment="Patch 108964-11 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6325"/>
      <state state_ref="oval:org.mitre.oval:ste:4289"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:8854" version="1" comment="Patch 114262-04 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6213"/>
      <state state_ref="oval:org.mitre.oval:ste:3637"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:8152" version="1" comment="Patch 138084-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5903"/>
      <state state_ref="oval:org.mitre.oval:ste:4072"/>
    </patch_test>
    <line_test id="oval:org.mitre.oval:tst:8880" version="1" comment="config contains: ip auth-proxy" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4241"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8624" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4096"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8103" version="2" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4076"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8763" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4022"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8579" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4101"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8758" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4131"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8878" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3293"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8874" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3899"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:9094" version="1" comment="config contains: authentication open eap" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4128"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:9068" version="1" comment="config contains: dot1x pae both" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4234"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:8994" version="1" comment="config contains: wlccp authentication-server infrastructure" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4250"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:8941" version="1" comment="config contains: dot1x pae authenticator" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4195"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8877" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4085"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:8665" version="1" comment="config contains: authentication network-eap" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4161"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:8620" version="1" comment="config contains: wlccp authentication-server client" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:3397"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8533" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3971"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:9078" version="1" comment="config contains: protocol pptp" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4206"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:8950" version="1" comment="config contains: protocol any" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4086"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:8900" version="1" comment="config contains: vpdn-group" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4239"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:8784" version="1" comment="config contains: vpdn enable" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:3249"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8768" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3894"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8607" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3938"/>
    </version_test>
    <patch_test id="oval:org.mitre.oval:tst:7780" version="1" comment="Patch 113273-16 or earlier installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5233"/>
      <state state_ref="oval:org.mitre.oval:ste:3572"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7771" version="1" comment="Patch 122300-17 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5500"/>
      <state state_ref="oval:org.mitre.oval:ste:3257"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7746" version="1" comment="Patch 114858-09 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5606"/>
      <state state_ref="oval:org.mitre.oval:ste:3956"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7745" version="1" comment="Patch 113273-11 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5233"/>
      <state state_ref="oval:org.mitre.oval:ste:3356"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7712" version="1" comment="Patch 122301-17 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5533"/>
      <state state_ref="oval:org.mitre.oval:ste:3257"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7680" version="1" comment="Patch 114858-13 or earlier installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5606"/>
      <state state_ref="oval:org.mitre.oval:ste:3340"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7921" version="1" comment="Patch 113329-19 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5025"/>
      <state state_ref="oval:org.mitre.oval:ste:2993"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7873" version="1" comment="Patch 109321-20 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5815"/>
      <state state_ref="oval:org.mitre.oval:ste:3871"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7793" version="1" comment="Patch 127128-11 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5804"/>
      <state state_ref="oval:org.mitre.oval:ste:3098"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7759" version="1" comment="Patch 114980-20 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5227"/>
      <state state_ref="oval:org.mitre.oval:ste:3871"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7494" version="1" comment="Patch 109320-20 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5297"/>
      <state state_ref="oval:org.mitre.oval:ste:3871"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7382" version="1" comment="Patch 127127-11 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5642"/>
      <state state_ref="oval:org.mitre.oval:ste:3098"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:2572" version="1" check="at least one" comment="the version of mshtml.dll is less than 6.0.3790.118" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2405"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2571" version="1" check="at least one" comment="the patch q832894 is installed (Hotfix key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1463"/>
      <state state_ref="oval:org.mitre.oval:ste:2404"/>
    </registry_test>
    <patch_test id="oval:org.mitre.oval:tst:9899" version="1" comment="Patch 139100-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6655"/>
      <state state_ref="oval:org.mitre.oval:ste:4080"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:2575" version="1" check="at least one" comment="the version of odbcbcp.dll is less than 3.70.11.46" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:878"/>
      <state state_ref="oval:org.mitre.oval:ste:2408"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2574" version="1" check="at least one" comment="the version of sqlsrv32.dll is less than 3.70.11.46" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1351"/>
      <state state_ref="oval:org.mitre.oval:ste:2407"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2573" version="2" check="at least one" comment="the patch q832483 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1464"/>
      <state state_ref="oval:org.mitre.oval:ste:2406"/>
    </registry_test>
    <version_test id="oval:org.mitre.oval:tst:8641" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3461"/>
    </version_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2578" version="1" check="at least one" comment="postfix version is less than 1.1.12-1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1466"/>
      <state state_ref="oval:org.mitre.oval:ste:2411"/>
    </rpminfo_test>
    <inetlisteningservers_test id="oval:org.mitre.oval:tst:2577" version="2" check="at least one" comment="smtpd listens on the network" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1465"/>
      <state state_ref="oval:org.mitre.oval:ste:2410"/>
    </inetlisteningservers_test>
    <patch_test id="oval:org.mitre.oval:tst:7816" version="1" comment="Patch 114014-18 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5449"/>
      <state state_ref="oval:org.mitre.oval:ste:3154"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7732" version="1" comment="Patch 125731-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5567"/>
      <state state_ref="oval:org.mitre.oval:ste:3095"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7419" version="1" comment="Patch 125732-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5275"/>
      <state state_ref="oval:org.mitre.oval:ste:3095"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7223" version="1" comment="Patch 114015-18 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5635"/>
      <state state_ref="oval:org.mitre.oval:ste:3154"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7841" version="1" comment="Patch 118833-04 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5629"/>
      <state state_ref="oval:org.mitre.oval:ste:3975"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7786" version="1" comment="Patch 118855-03 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5019"/>
      <state state_ref="oval:org.mitre.oval:ste:3739"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7347" version="1" comment="Patch 125251-02 installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5564"/>
      <state state_ref="oval:org.mitre.oval:ste:3656"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7106" version="1" comment="Patch 125252-02 installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5515"/>
      <state state_ref="oval:org.mitre.oval:ste:3656"/>
    </patch_test>
    <version_test id="oval:org.mitre.oval:tst:8814" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4079"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8514" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3744"/>
    </version_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3011" version="1" check="at least one" comment="eog version is less than 2.2.0-2" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1724"/>
      <state state_ref="oval:org.mitre.oval:ste:2820"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:3010" version="1" check="at least one" comment="eog is world-executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1723"/>
      <state state_ref="oval:org.mitre.oval:ste:2819"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3009" version="1" check="at least one" comment="eog is group-executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1723"/>
      <state state_ref="oval:org.mitre.oval:ste:2818"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3008" version="1" check="at least one" comment="eog is owner-executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1723"/>
      <state state_ref="oval:org.mitre.oval:ste:2817"/>
    </file_test>
    <version_test id="oval:org.mitre.oval:tst:8859" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3989"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8446" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3112"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:24212" version="1" comment="Show Modules" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:7408"/>
      <state state_ref="oval:org.mitre.oval:ste:6884"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:24169" version="1" comment="Show Modules" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:6893"/>
    </line_test>
    <patch_test id="oval:org.mitre.oval:tst:7996" version="1" comment="Patch 127127-08 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5535"/>
      <state state_ref="oval:org.mitre.oval:ste:3693"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7373" version="1" comment="Patch 127128-08 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5679"/>
      <state state_ref="oval:org.mitre.oval:ste:3693"/>
    </patch_test>
    <package_test id="oval:org.mitre.oval:tst:280" version="1" check="all" comment="Separable help for CDE (SUNWdthep) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:258"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:279" version="1" check="all" comment="Patch 107178-03 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:257"/>
      <state state_ref="oval:org.mitre.oval:ste:277"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:278" version="1" check="all" comment="Patch 108949-08 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:256"/>
      <state state_ref="oval:org.mitre.oval:ste:276"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:277" version="1" check="all" comment="Patch 116308-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:255"/>
      <state state_ref="oval:org.mitre.oval:ste:275"/>
    </patch_test>
    <swlist_test id="oval:org.mitre.oval:tst:3415" version="1" comment="TOUR_PRODUCT.T-NET2-KRN with version less than A.03.00 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:2556"/>
      <state state_ref="oval:org.mitre.oval:ste:3929"/>
    </swlist_test>
    <version_test id="oval:org.mitre.oval:tst:8602" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4010"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8543" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4013"/>
    </version_test>
    <file_test id="oval:org.mitre.oval:tst:2579" version="1" check="at least one" comment="the version of mshtml.dll is less than 6.0.2800.1400" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2412"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:9073" version="1" comment="Patch 137111-04 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6131"/>
      <state state_ref="oval:org.mitre.oval:ste:4178"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:8753" version="1" comment="Patch 137112-04 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:6346"/>
      <state state_ref="oval:org.mitre.oval:ste:4178"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:2580" version="1" check="at least one" comment="the version of mshtml.dll is less than 6.0.2737.800" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2413"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2581" version="1" check="at least one" comment="the version of mshtml.dll is less than 5.50.4937.800" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2414"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2582" version="1" check="at least one" comment="the version of mshtml.dll is less than 5.0.3813.800" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2415"/>
    </file_test>
    <version_test id="oval:org.mitre.oval:tst:8922" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6256"/>
      <state state_ref="oval:org.mitre.oval:ste:4204"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8659" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6256"/>
      <state state_ref="oval:org.mitre.oval:ste:4264"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8832" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4026"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8472" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3100"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:24372" version="1" comment="SIP Test using Tcp brief all. result contains: 5060" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:7425"/>
      <state state_ref="oval:org.mitre.oval:ste:6767"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:24211" version="1" comment="SIP Test using ip socket. config contains: 5060" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:6946"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:24146" version="1" comment="SIP Test using runnning config. result contains: 5060" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:7436"/>
      <state state_ref="oval:org.mitre.oval:ste:6090"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:8637" version="1" comment="config contains: ftp-server enable" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:3281"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8479" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3407"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8323" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3111"/>
    </version_test>
    <file_test id="oval:org.mitre.oval:tst:3012" version="1" check="at least one" comment="the version of mshtml.dll is less than 5.0.3502.4856" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2821"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2587" version="1" check="at least one" comment="pine version is less than 4.44-19.90.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1468"/>
      <state state_ref="oval:org.mitre.oval:ste:2420"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:2586" version="1" check="at least one" comment="/usr/bin/pine is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1467"/>
      <state state_ref="oval:org.mitre.oval:ste:2419"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2585" version="1" check="at least one" comment="/usr/bin/pine is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1467"/>
      <state state_ref="oval:org.mitre.oval:ste:2418"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2584" version="1" check="at least one" comment="/usr/bin/pine is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1467"/>
      <state state_ref="oval:org.mitre.oval:ste:2417"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:328" version="1" check="at least one" comment="the patch KB892944 is installed (Hotfix key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:299"/>
      <state state_ref="oval:org.mitre.oval:ste:318"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:285" version="1" check="at least one" comment="the version of mqrt.dll is less than 5.0.0.799" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:261"/>
      <state state_ref="oval:org.mitre.oval:ste:282"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:292" version="2" comment="Is the Microsoft .NET Framework 1.0 installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:267"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:291" version="2" comment="Is the KB886905 patch installed for Microsoft .NET Framework v1.0 sp 2?" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:266"/>
      <state state_ref="oval:org.mitre.oval:ste:288"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:290" version="2" comment="the version of System.web.dll is less than 1.0.3705.556" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:263"/>
      <state state_ref="oval:org.mitre.oval:ste:287"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:289" version="2" comment="Is Service Pack 2 for Microsoft .NET Framework 1.0 installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:265"/>
      <state state_ref="oval:org.mitre.oval:ste:286"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:288" version="2" comment="Is Service Pack 3 for Microsoft .NET Framework 1.0 installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:264"/>
      <state state_ref="oval:org.mitre.oval:ste:285"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:287" version="2" comment="the version of System.web.dll is less than 1.0.3705.6021" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:263"/>
      <state state_ref="oval:org.mitre.oval:ste:284"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:286" version="2" comment="Is the KB886906 patch installed for Microsoft .NET Framework v1.0 sp 3?" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:262"/>
      <state state_ref="oval:org.mitre.oval:ste:283"/>
    </registry_test>
    <patch_test id="oval:org.mitre.oval:tst:7749" version="1" comment="Patch 127112-10 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5537"/>
      <state state_ref="oval:org.mitre.oval:ste:3052"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7682" version="1" comment="Patch 122301-23 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5310"/>
      <state state_ref="oval:org.mitre.oval:ste:2985"/>
    </patch_test>
    <line_test id="oval:org.mitre.oval:tst:8953" version="1" comment="config contains: router bgp" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6197"/>
      <state state_ref="oval:org.mitre.oval:ste:4162"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8462" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6256"/>
      <state state_ref="oval:org.mitre.oval:ste:4205"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8383" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6256"/>
      <state state_ref="oval:org.mitre.oval:ste:4258"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8828" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4122"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8227" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4038"/>
    </version_test>
    <registry_test id="oval:org.mitre.oval:tst:294" version="1" check="at least one" comment="MSN Messenger 6.2.0208 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:269"/>
      <state state_ref="oval:org.mitre.oval:ste:290"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2520" version="3" comment="MSN Messenger 6.2 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1436"/>
      <state state_ref="oval:org.mitre.oval:ste:2360"/>
    </registry_test>
    <version_test id="oval:org.mitre.oval:tst:8829" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4175"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8632" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4136"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8855" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3732"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8732" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3339"/>
    </version_test>
    <line_test id="oval:org.mitre.oval:tst:9042" version="2" comment="config contains: aaa authorization commands .*tacacs+" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:4044"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8876" version="2" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:4000"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8666" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3580"/>
    </version_test>
    <file_test id="oval:org.mitre.oval:tst:2589" version="1" check="at least one" comment="the version of mshtml.dll is less than 5.0.3526.800" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2422"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3014" version="1" check="at least one" comment="File %windir%\system32\mshtml.dll version is less than 5.0.3513.900" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2823"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2590" version="1" check="at least one" comment="Microsoft Data Access Components 2.7 (RTM) is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:359"/>
      <state state_ref="oval:org.mitre.oval:ste:2423"/>
    </registry_test>
    <version_test id="oval:org.mitre.oval:tst:8720" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3060"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8675" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3963"/>
    </version_test>
    <registry_test id="oval:org.mitre.oval:tst:297" version="1" check="at least one" comment="Microsoft Proxy Server 2.0 SP1 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:272"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:296" version="1" check="at least one" comment="the version of w3proxy.dll is less than 2.0.390.16" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:271"/>
      <state state_ref="oval:org.mitre.oval:ste:292"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:295" version="2" check="at least one" comment="the patch KB888258 for Proxy Server 2.0 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:270"/>
      <state state_ref="oval:org.mitre.oval:ste:291"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2592" version="1" check="at least one" comment="php version is less than 4.2.2-17.2" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1471"/>
      <state state_ref="oval:org.mitre.oval:ste:2425"/>
    </rpminfo_test>
    <line_test id="oval:org.mitre.oval:tst:8870" version="2" comment="config contains: call-manager-fallback" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:3189"/>
    </line_test>
    <line_test id="oval:org.mitre.oval:tst:8822" version="2" comment="config contains: telephony-service" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6385"/>
      <state state_ref="oval:org.mitre.oval:ste:3343"/>
    </line_test>
    <version_test id="oval:org.mitre.oval:tst:8727" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3636"/>
    </version_test>
    <version_test id="oval:org.mitre.oval:tst:8432" version="1" comment="IOS vulnerable versions" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <object object_ref="oval:org.mitre.oval:obj:6251"/>
      <state state_ref="oval:org.mitre.oval:ste:3508"/>
    </version_test>
    <patch_test id="oval:org.mitre.oval:tst:7975" version="1" comment="Patch 127111-11 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5645"/>
      <state state_ref="oval:org.mitre.oval:ste:3347"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7947" version="1" comment="Patch 116965-32 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5399"/>
      <state state_ref="oval:org.mitre.oval:ste:3822"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7881" version="1" comment="Patch 119435-22 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5239"/>
      <state state_ref="oval:org.mitre.oval:ste:3795"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7822" version="1" comment="Patch 127112-11 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5537"/>
      <state state_ref="oval:org.mitre.oval:ste:3347"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7668" version="1" comment="Patch 116966-31 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:4814"/>
      <state state_ref="oval:org.mitre.oval:ste:3481"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7482" version="1" comment="Patch 114344-34 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5700"/>
      <state state_ref="oval:org.mitre.oval:ste:3408"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:2594" version="1" check="at least one" comment="the version of sqlisapi.dll is less than 2000.80.309.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1472"/>
      <state state_ref="oval:org.mitre.oval:ste:2427"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2593" version="1" check="at least one" comment="the version of sqlservr.exe is less than 2000.80.760.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:843"/>
      <state state_ref="oval:org.mitre.oval:ste:2426"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:300" version="1" check="at least one" comment="Patch 108993-38 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:275"/>
      <state state_ref="oval:org.mitre.oval:ste:294"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:299" version="1" check="at least one" comment="Patch 112960-17 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:274"/>
      <state state_ref="oval:org.mitre.oval:ste:293"/>
    </patch_test>
    <textfilecontent_test id="oval:org.mitre.oval:tst:298" version="1" check="at least one" comment="/etc/nsswitch.conf configured to use LDAP with RBAC" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:273"/>
    </textfilecontent_test>
    <file_test id="oval:org.mitre.oval:tst:2595" version="1" check="at least one" comment="File %windir%\system32\inetsrv\ssinc.dll version is less than 5.0.2195.6624" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1473"/>
      <state state_ref="oval:org.mitre.oval:ste:2428"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:7952" version="1" comment="Patch 121095-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:4853"/>
      <state state_ref="oval:org.mitre.oval:ste:3571"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7912" version="1" comment="Patch 121096-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5698"/>
      <state state_ref="oval:org.mitre.oval:ste:3571"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:3017" version="2" check="at least one" comment="File admintool exists" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1726"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3016" version="2" check="at least one" comment="File admintool SUID and executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1726"/>
      <state state_ref="oval:org.mitre.oval:ste:2825"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2599" version="2" check="at least one" comment="the version of h32fltr.dll is less than 3.0.1200.291" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1477"/>
      <state state_ref="oval:org.mitre.oval:ste:2432"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2598" version="2" check="at least one" comment="the patch q816458 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1476"/>
      <state state_ref="oval:org.mitre.oval:ste:2431"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2597" version="2" check="at least one" comment="H.323 filter is enabled" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1475"/>
      <state state_ref="oval:org.mitre.oval:ste:2430"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2596" version="2" check="at least one" comment="Microsoft Firewall Service is not disabled" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1474"/>
      <state state_ref="oval:org.mitre.oval:ste:2429"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2605" version="1" comment="the version of exprox.dll is less than 6.5.6980.57" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1481"/>
      <state state_ref="oval:org.mitre.oval:ste:2434"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2604" version="1" comment="the patch KB832759 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1480"/>
    </registry_test>
    <unknown_test id="oval:org.mitre.oval:tst:2603" version="1" comment="this is a front-end server providing Outlook Web Access" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
    <unknown_test id="oval:org.mitre.oval:tst:2602" version="1" comment="the back-end server is Exchange Server 2003 running on Windows 2003" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
    <registry_test id="oval:org.mitre.oval:tst:2601" version="2" comment="HTTP connection reuse is disabled" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1479"/>
      <state state_ref="oval:org.mitre.oval:ste:2433"/>
    </registry_test>
    <unknown_test id="oval:org.mitre.oval:tst:2600" version="1" comment="Kerberos is disabled on the virtual server that hosts OWA on the Exchange Server 2003 back-end server" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
    <file_test id="oval:org.mitre.oval:tst:303" version="1" comment="the version of httpext.dll is less than 6.0.3790.212" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:278"/>
      <state state_ref="oval:org.mitre.oval:ste:297"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:304" version="1" check="at least one" comment="the version of gdi32.dll is less than 4.0.1381.33566" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:622"/>
      <state state_ref="oval:org.mitre.oval:ste:298"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:307" version="1" check="at least one" comment="the version of hypertrm.dll is less than 5.0.2195.7000" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:283"/>
      <state state_ref="oval:org.mitre.oval:ste:300"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:306" version="3" check="at least one" comment="the patch Windows2000-KB873339-x86-ENU.EXE is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:282"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:3723" version="1" comment="the version of umpnpmgr.dll is less than 5.0.2195.7057" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:2048"/>
      <state state_ref="oval:org.mitre.oval:ste:3872"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:3138" version="1" check="at least one" comment="Patch 108827-30 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1785"/>
      <state state_ref="oval:org.mitre.oval:ste:2937"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3137" version="1" check="at least one" comment="Patch 108901-06 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1784"/>
      <state state_ref="oval:org.mitre.oval:ste:2936"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:310" version="1" check="all" comment="Patch 108451-06 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:286"/>
      <state state_ref="oval:org.mitre.oval:ste:303"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:309" version="1" check="all" comment="Patch 113319-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:285"/>
      <state state_ref="oval:org.mitre.oval:ste:302"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:308" version="1" check="all" comment="Patch 112233-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:284"/>
      <state state_ref="oval:org.mitre.oval:ste:301"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:8027" version="1" comment="Patch 137017-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5543"/>
      <state state_ref="oval:org.mitre.oval:ste:3762"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:8019" version="1" comment="Patch 137018-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5552"/>
      <state state_ref="oval:org.mitre.oval:ste:3762"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7968" version="1" comment="Patch 109008-26 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5474"/>
      <state state_ref="oval:org.mitre.oval:ste:3428"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7905" version="1" comment="Patch 109007-26 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5381"/>
      <state state_ref="oval:org.mitre.oval:ste:3428"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7797" version="1" comment="Patch 122301-27 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5626"/>
      <state state_ref="oval:org.mitre.oval:ste:3017"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7763" version="1" comment="Patch 122300-27 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5217"/>
      <state state_ref="oval:org.mitre.oval:ste:3017"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:313" version="1" check="at least one" comment="the version of shell32.dll is less than 5.0.3900.7032" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:253"/>
      <state state_ref="oval:org.mitre.oval:ste:305"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:312" version="1" check="at least one" comment="the patch  KB893086 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:287"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2606" version="1" check="at least one" comment="File %windir%\system32\mshtml.dll version is less than 5.0.3510.1100" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2435"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2607" version="1" check="at least one" comment="perl-CGI version is less than 2.81-88.3" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1482"/>
      <state state_ref="oval:org.mitre.oval:ste:2436"/>
    </rpminfo_test>
    <patch_test id="oval:org.mitre.oval:tst:3018" version="1" check="at least one" comment="Patch 111826-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1727"/>
      <state state_ref="oval:org.mitre.oval:ste:2826"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2608" version="1" check="at least one" comment="pam_smb version is less than 1.1.6-9.9" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1483"/>
      <state state_ref="oval:org.mitre.oval:ste:2437"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:2743" version="1" comment="the patch KB896422 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1575"/>
      <state state_ref="oval:org.mitre.oval:ste:2564"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2612" version="1" check="all" comment="the version of srv.sys is less than 5.0.2195.7044" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:812"/>
      <state state_ref="oval:org.mitre.oval:ste:2441"/>
    </file_test>
    <process_test id="oval:org.mitre.oval:tst:314" version="1" comment="Kerberos Key Distribution Center (krb5kdc) running" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:288"/>
    </process_test>
    <patch_test id="oval:org.mitre.oval:tst:4114" version="1" comment="Patch 117470-07 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2299"/>
      <state state_ref="oval:org.mitre.oval:ste:3582"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:4069" version="1" comment="Patch 116966-18 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2065"/>
      <state state_ref="oval:org.mitre.oval:ste:3290"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:4028" version="1" comment="Patch 116965-19 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2315"/>
      <state state_ref="oval:org.mitre.oval:ste:3665"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3505" version="1" comment="Patch 118822-27 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2218"/>
      <state state_ref="oval:org.mitre.oval:ste:2997"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3302" version="1" comment="Patch 118844-28 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1890"/>
      <state state_ref="oval:org.mitre.oval:ste:3089"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3204" version="1" comment="Patch 118305-08 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2100"/>
      <state state_ref="oval:org.mitre.oval:ste:3192"/>
    </patch_test>
    <registry_test id="oval:org.mitre.oval:tst:2668" version="2" comment="the patch kb896358 is installed (Hotfix key)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1918"/>
      <state state_ref="oval:org.mitre.oval:ste:2492"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2613" version="1" check="at least one" comment="the version of hh.exe is less than 5.2.3790.309" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:859"/>
      <state state_ref="oval:org.mitre.oval:ste:2442"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2618" version="1" check="at least one" comment="openssl version is less than 0.9.7a-5" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1492"/>
      <state state_ref="oval:org.mitre.oval:ste:2447"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2617" version="1" check="at least one" comment="openssl-devel version is less than 0.9.7a-5" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1491"/>
      <state state_ref="oval:org.mitre.oval:ste:2446"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2616" version="1" check="at least one" comment="openssl-perl version is less than 0.9.7a-5" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1490"/>
      <state state_ref="oval:org.mitre.oval:ste:2445"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2615" version="1" check="at least one" comment="openssl096 version is less than 0.9.6-17" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1489"/>
      <state state_ref="oval:org.mitre.oval:ste:2444"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2614" version="1" check="at least one" comment="openssl096b version is less than 0.9.6b-6" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1488"/>
      <state state_ref="oval:org.mitre.oval:ste:2443"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:316" version="1" check="at least one" comment="the version of nddenb32.dll is less than 5.2.3790.173" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:260"/>
      <state state_ref="oval:org.mitre.oval:ste:307"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:315" version="1" check="at least one" comment="the version of netdde.exe is less than 5.2.3790.184" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:259"/>
      <state state_ref="oval:org.mitre.oval:ste:306"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:319" version="1" check="at least one" comment="Patch 106541-25 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:291"/>
      <state state_ref="oval:org.mitre.oval:ste:310"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:318" version="1" check="at least one" comment="Patch 108528-19 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:290"/>
      <state state_ref="oval:org.mitre.oval:ste:309"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:317" version="1" check="at least one" comment="Patch 112233-05 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:289"/>
      <state state_ref="oval:org.mitre.oval:ste:308"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:2621" version="1" check="at least one" comment="the version of sp3res.dll is less than 5.0.2195.6713" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1494"/>
      <state state_ref="oval:org.mitre.oval:ste:2450"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2620" version="1" check="at least one" comment="the version of umandlg.dll is less than 1.0.0.3" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:870"/>
      <state state_ref="oval:org.mitre.oval:ste:2449"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2619" version="1" check="at least one" comment="Patch KB822679 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1493"/>
      <state state_ref="oval:org.mitre.oval:ste:2448"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2627" version="1" check="at least one" comment="openssh-server version is less than 3.5p1-11" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1498"/>
      <state state_ref="oval:org.mitre.oval:ste:2454"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2629" version="1" check="at least one" comment="openssh-server version is less than 3.5p1-6.9" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1500"/>
      <state state_ref="oval:org.mitre.oval:ste:2456"/>
    </rpminfo_test>
    <inetlisteningservers_test id="oval:org.mitre.oval:tst:2628" version="2" check="at least one" comment="sshd listens on the network" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1499"/>
      <state state_ref="oval:org.mitre.oval:ste:2455"/>
    </inetlisteningservers_test>
    <patch_test id="oval:org.mitre.oval:tst:325" version="1" check="all" comment="Patch 112536-04 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:296"/>
      <state state_ref="oval:org.mitre.oval:ste:316"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:324" version="1" check="all" comment="Patch 110057-07 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:295"/>
      <state state_ref="oval:org.mitre.oval:ste:315"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:323" version="1" check="all" comment="Patch 110060-04 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:294"/>
      <state state_ref="oval:org.mitre.oval:ste:314"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:322" version="1" check="all" comment="Patch 116462-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:293"/>
      <state state_ref="oval:org.mitre.oval:ste:313"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2631" version="1" check="at least one" comment="nfs-utils version is less than 1.0.1-3.9" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1502"/>
      <state state_ref="oval:org.mitre.oval:ste:2458"/>
    </rpminfo_test>
    <inetlisteningservers_test id="oval:org.mitre.oval:tst:2630" version="2" check="at least one" comment="rpc.mountd listens on the network" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1501"/>
      <state state_ref="oval:org.mitre.oval:ste:2457"/>
    </inetlisteningservers_test>
    <registry_test id="oval:org.mitre.oval:tst:326" version="2" check="at least one" comment="the patch WindowsServer2003-KB883935-x86-enu.exe is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:297"/>
      <state state_ref="oval:org.mitre.oval:ste:317"/>
    </registry_test>
    <patch_test id="oval:org.mitre.oval:tst:330" version="1" check="at least one" comment="Patch 107115-12 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:300"/>
      <state state_ref="oval:org.mitre.oval:ste:320"/>
    </patch_test>
    <swlist_test id="oval:org.mitre.oval:tst:3962" version="1" check="at least one" comment="WUFTP-26.INETSVCS-FTP with version less than B.11.00.01.005 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:1871"/>
      <state state_ref="oval:org.mitre.oval:ste:3077"/>
    </swlist_test>
    <patch_test id="oval:org.mitre.oval:tst:331" version="1" check="at least one" comment="Patch 107893-05 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:301"/>
      <state state_ref="oval:org.mitre.oval:ste:321"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2634" version="1" check="at least one" comment="mysql-server version is less than 3.23.56-1.9" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1504"/>
      <state state_ref="oval:org.mitre.oval:ste:2461"/>
    </rpminfo_test>
    <inetlisteningservers_test id="oval:org.mitre.oval:tst:2633" version="2" check="at least one" comment="mysqld is listening to the network" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1503"/>
      <state state_ref="oval:org.mitre.oval:ste:2460"/>
    </inetlisteningservers_test>
    <file_test id="oval:org.mitre.oval:tst:332" version="1" check="at least one" comment="the version of shell32.dll is less than 5.0.3900.6970" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:253"/>
      <state state_ref="oval:org.mitre.oval:ste:322"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2638" version="1" check="at least one" comment="mutt version is less than 1.4.1-1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1506"/>
      <state state_ref="oval:org.mitre.oval:ste:2465"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:2637" version="1" check="at least one" comment="/usr/bin/mutt is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1505"/>
      <state state_ref="oval:org.mitre.oval:ste:2464"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2636" version="1" check="at least one" comment="/usr/bin/mutt is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1505"/>
      <state state_ref="oval:org.mitre.oval:ste:2463"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2635" version="1" check="at least one" comment="/usr/bin/mutt is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1505"/>
      <state state_ref="oval:org.mitre.oval:ste:2462"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:2946" version="1" check="at least one" comment="Patch 110896-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1686"/>
      <state state_ref="oval:org.mitre.oval:ste:2761"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:333" version="1" check="at least one" comment="the version of vdmdbg.dll is less than 5.0.2195.6946" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:302"/>
      <state state_ref="oval:org.mitre.oval:ste:323"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:334" version="1" check_existence="at_least_one_exists" check="at least one" comment="Microsoft Visual Studio .NET 2002 Installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:303"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2639" version="1" check="at least one" comment="lv version is less than 4.49.4-9.9.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1507"/>
      <state state_ref="oval:org.mitre.oval:ste:2466"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:338" version="1" comment="the version of msphlpr.dll is less than 3.0.1200.408" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:306"/>
      <state state_ref="oval:org.mitre.oval:ste:327"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:337" version="1" comment="the patch KB888258 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:305"/>
      <state state_ref="oval:org.mitre.oval:ste:326"/>
    </registry_test>
    <patch_test id="oval:org.mitre.oval:tst:6849" version="1" comment="Patch 118562-13 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3770"/>
      <state state_ref="oval:org.mitre.oval:ste:3955"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:6715" version="1" comment="Patch 121230-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:4474"/>
      <state state_ref="oval:org.mitre.oval:ste:3072"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:6483" version="1" comment="Patch 121229-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:4707"/>
      <state state_ref="oval:org.mitre.oval:ste:3072"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:6121" version="1" comment="Patch 118563-13 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:4744"/>
      <state state_ref="oval:org.mitre.oval:ste:3955"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:339" version="1" check="at least one" comment="the version of grpconv.exe (system32) is less than 5.2.3790.205" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:307"/>
      <state state_ref="oval:org.mitre.oval:ste:328"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2644" version="1" check="at least one" comment="the version of tlntsvr.exe is less than 5.0.33668.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1513"/>
      <state state_ref="oval:org.mitre.oval:ste:2470"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2643" version="1" check="at least one" comment="Patch Q307298 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1512"/>
      <state state_ref="oval:org.mitre.oval:ste:2469"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2642" version="1" check="at least one" comment="the telnet service is enabled" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1511"/>
      <state state_ref="oval:org.mitre.oval:ste:2468"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2647" version="1" check="at least one" comment="lprng version is less than 3.8.19-3.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1516"/>
      <state state_ref="oval:org.mitre.oval:ste:2473"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:2646" version="1" check="at least one" comment="psbanner is world-executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1515"/>
      <state state_ref="oval:org.mitre.oval:ste:2472"/>
    </file_test>
    <inetlisteningservers_test id="oval:org.mitre.oval:tst:2645" version="2" check="at least one" comment="lpd listening on the network" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1514"/>
      <state state_ref="oval:org.mitre.oval:ste:2471"/>
    </inetlisteningservers_test>
    <file_test id="oval:org.mitre.oval:tst:341" version="2" check="at least one" comment="the version of vgx.dll is less than 6.0.2800.1411" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:308"/>
      <state state_ref="oval:org.mitre.oval:ste:329"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3140" version="1" check="at least one" comment="File rpc.cmsd exists" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1781"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3139" version="1" check="at least one" comment="File dmispd exists" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1786"/>
    </file_test>
    <inetd_test id="oval:org.mitre.oval:tst:3136" version="2" check="at least one" comment="inetd.conf contains rpc.cmsd" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1783"/>
      <state state_ref="oval:org.mitre.oval:ste:2935"/>
    </inetd_test>
    <file_test id="oval:org.mitre.oval:tst:3134" version="1" check="at least one" comment="File rpc.cmsd executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1781"/>
      <state state_ref="oval:org.mitre.oval:ste:2933"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3133" version="1" check="at least one" comment="File rpc.cmsd executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1781"/>
      <state state_ref="oval:org.mitre.oval:ste:2932"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3132" version="1" check="at least one" comment="File rpc.cmsd executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1781"/>
      <state state_ref="oval:org.mitre.oval:ste:2931"/>
    </file_test>
    <process_test id="oval:org.mitre.oval:tst:3131" version="1" check="at least one" comment="dmispd running" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1780"/>
    </process_test>
    <patch_test id="oval:org.mitre.oval:tst:3026" version="1" check="at least one" comment="Patch 106942-22 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:484"/>
      <state state_ref="oval:org.mitre.oval:ste:2834"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3025" version="1" check="at least one" comment="Patch 108541-06 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1732"/>
      <state state_ref="oval:org.mitre.oval:ste:2833"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:345" version="1" check="all" comment="Patch 106938-06 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:313"/>
      <state state_ref="oval:org.mitre.oval:ste:332"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:344" version="1" check="all" comment="Patch 109326-09 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:312"/>
      <state state_ref="oval:org.mitre.oval:ste:331"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:343" version="1" check="all" comment="Patch 112970-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:311"/>
      <state state_ref="oval:org.mitre.oval:ste:330"/>
    </patch_test>
    <textfilecontent_test id="oval:org.mitre.oval:tst:342" version="1" check="all" comment="/etc/nsswitch.conf configured to resolve hosts through DNS" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:310"/>
    </textfilecontent_test>
    <file_test check="all" comment="the version of Aspnet_filter.dll is less than 2.0.50727.101" id="oval:org.mitre.oval:tst:8" version="2" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:180"/>
      <state state_ref="oval:org.mitre.oval:ste:98"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2656" version="1" check="at least one" comment="kdelibs version is less than 3.1-12" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1521"/>
      <state state_ref="oval:org.mitre.oval:ste:2481"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:2655" version="1" check="at least one" comment="/usr/bin/konqueror is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1520"/>
      <state state_ref="oval:org.mitre.oval:ste:2480"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2654" version="1" check="at least one" comment="/usr/bin/konqueror is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1520"/>
      <state state_ref="oval:org.mitre.oval:ste:2479"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2653" version="1" check="at least one" comment="/usr/bin/konqueror is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1520"/>
      <state state_ref="oval:org.mitre.oval:ste:2478"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3032" version="1" check="at least one" comment="File rpc.rwalld exists" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1733"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:3031" version="1" check="at least one" comment="Patch 112899-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1735"/>
      <state state_ref="oval:org.mitre.oval:ste:2839"/>
    </patch_test>
    <inetd_test id="oval:org.mitre.oval:tst:3030" version="2" check="at least one" comment="inetd.conf contains rpc.rwalld" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1734"/>
      <state state_ref="oval:org.mitre.oval:ste:2838"/>
    </inetd_test>
    <file_test id="oval:org.mitre.oval:tst:3029" version="1" check="at least one" comment="File rpc.rwalld executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1733"/>
      <state state_ref="oval:org.mitre.oval:ste:2837"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3028" version="1" check="at least one" comment="File rpc.rwalld executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1733"/>
      <state state_ref="oval:org.mitre.oval:ste:2836"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3027" version="1" check="at least one" comment="File rpc.rwalld executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1733"/>
      <state state_ref="oval:org.mitre.oval:ste:2835"/>
    </file_test>
    <package_test id="oval:org.mitre.oval:tst:352" version="1" check="all" comment="Solaris Print - Client - Root (SUNWpcr) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:319"/>
    </package_test>
    <package_test id="oval:org.mitre.oval:tst:351" version="1" check="all" comment="Solaris Print - Client - Usr (SUNWpcu) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:318"/>
    </package_test>
    <package_test id="oval:org.mitre.oval:tst:350" version="1" check="all" comment="Solaris Print - LP Server - Root (SUNWpsr) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:317"/>
    </package_test>
    <package_test id="oval:org.mitre.oval:tst:349" version="1" check="all" comment="Solaris Print - LP Server - Usr (SUNWpsu) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:316"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:348" version="1" check="all" comment="Patch 107115-13 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:300"/>
      <state state_ref="oval:org.mitre.oval:ste:335"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:347" version="1" check="all" comment="Patch 109320-07 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:315"/>
      <state state_ref="oval:org.mitre.oval:ste:334"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:346" version="1" check="all" comment="Patch 113329-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:314"/>
      <state state_ref="oval:org.mitre.oval:ste:333"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:6844" version="1" comment="Patch 113073-11 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3862"/>
      <state state_ref="oval:org.mitre.oval:ste:3495"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:6809" version="1" comment="Patch 118559-12 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:4147"/>
      <state state_ref="oval:org.mitre.oval:ste:3445"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:6795" version="1" comment="Patch 113026-03 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3901"/>
      <state state_ref="oval:org.mitre.oval:ste:2962"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:6632" version="1" comment="Patch 122371-07 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:4525"/>
      <state state_ref="oval:org.mitre.oval:ste:3388"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:6596" version="1" comment="Patch 113994-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:4501"/>
      <state state_ref="oval:org.mitre.oval:ste:2968"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:6587" version="1" comment="Patch 126257-04 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:4423"/>
      <state state_ref="oval:org.mitre.oval:ste:3671"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:6439" version="1" comment="Patch 124256-03 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3934"/>
      <state state_ref="oval:org.mitre.oval:ste:2962"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:5870" version="1" comment="Patch 116669-31 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:4599"/>
      <state state_ref="oval:org.mitre.oval:ste:2963"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:2658" version="1" check="at least one" comment="the version of shell32.dll is less than 6.0.3790.280" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:253"/>
      <state state_ref="oval:org.mitre.oval:ste:2482"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2657" version="2" check="at least one" comment="the patch  KB893086 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1522"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2662" version="1" comment="the version of w3proxy.exe is less than 3.0.1200.257" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1526"/>
      <state state_ref="oval:org.mitre.oval:ste:2486"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2661" version="1" comment="the version of wpsrv.exe is less than 3.0.1200.257" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1524"/>
      <state state_ref="oval:org.mitre.oval:ste:2485"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2660" version="1" comment="Patch isahf257 installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1523"/>
      <state state_ref="oval:org.mitre.oval:ste:2484"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2659" version="1" comment="Microsoft Firewall Service Enabled" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1474"/>
      <state state_ref="oval:org.mitre.oval:ste:2483"/>
    </registry_test>
    <patch_test id="oval:org.mitre.oval:tst:358" version="1" check="all" comment="Patch 108574-03 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:325"/>
      <state state_ref="oval:org.mitre.oval:ste:341"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:357" version="1" check="all" comment="Patch 108162-04 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:324"/>
      <state state_ref="oval:org.mitre.oval:ste:340"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:356" version="1" check="all" comment="Patch 108416-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:323"/>
      <state state_ref="oval:org.mitre.oval:ste:339"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:355" version="1" check="all" comment="Patch 110943-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:322"/>
      <state state_ref="oval:org.mitre.oval:ste:338"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:354" version="1" check="all" comment="Patch 110898-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:321"/>
      <state state_ref="oval:org.mitre.oval:ste:337"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:353" version="1" check="all" comment="Patch 109324-03 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:320"/>
      <state state_ref="oval:org.mitre.oval:ste:336"/>
    </patch_test>
    <registry_test id="oval:org.mitre.oval:tst:824" version="2" comment="the patch KB885250 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:624"/>
      <state state_ref="oval:org.mitre.oval:ste:739"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:359" version="1" check="at least one" comment="the version of mrxsmb.sys is less than 5.0.2195.7023" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:326"/>
      <state state_ref="oval:org.mitre.oval:ste:342"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:362" version="1" check="at least one" comment="Exchange Server 2003 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:330"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:361" version="1" check="at least one" comment="the version of xlsasink.dll is less than 6.5.6981.3" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:328"/>
      <state state_ref="oval:org.mitre.oval:ste:343"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:360" version="1" check="at least one" comment="the patch KB894549 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:327"/>
    </registry_test>
    <patch_test id="oval:org.mitre.oval:tst:365" version="1" check="at least one" comment="Patch 109613-07 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:333"/>
      <state state_ref="oval:org.mitre.oval:ste:345"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:364" version="1" check="at least one" comment="Patch 112810-06 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:332"/>
      <state state_ref="oval:org.mitre.oval:ste:344"/>
    </patch_test>
    <package_test id="oval:org.mitre.oval:tst:363" version="1" check="at least one" comment="CDE Desktop Applications (SUNWdtdst) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:331"/>
    </package_test>
    <registry_test id="oval:org.mitre.oval:tst:1592" version="1" check="at least one" comment="Microsoft Office XP Service Pack 3 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:334"/>
      <state state_ref="oval:org.mitre.oval:ste:1446"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:368" version="1" check="at least one" comment="the version of sxs.dll is less than 5.1.2600.1363" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:336"/>
      <state state_ref="oval:org.mitre.oval:ste:348"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:3898" version="1" check="at least one" comment="Patch 112238-12 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1830"/>
      <state state_ref="oval:org.mitre.oval:ste:2974"/>
    </patch_test>
    <package_test id="oval:org.mitre.oval:tst:3694" version="1" check="at least one" comment="Pkg SUNWcryr (Supplemental Encryption) is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2551"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:3640" version="1" check="at least one" comment="Patch 112390-11 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2709"/>
      <state state_ref="oval:org.mitre.oval:ste:3522"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3624" version="1" check="at least one" comment="Patch 115168-08 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1845"/>
      <state state_ref="oval:org.mitre.oval:ste:3074"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3567" version="1" check="at least one" comment="Patch 112237-13 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2466"/>
      <state state_ref="oval:org.mitre.oval:ste:3846"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3561" version="1" check="at least one" comment="Patch 120469-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2128"/>
      <state state_ref="oval:org.mitre.oval:ste:3272"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3497" version="1" check="at least one" comment="Patch 112240-10 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2599"/>
      <state state_ref="oval:org.mitre.oval:ste:2988"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3424" version="1" check="at least one" comment="Patch 112537-06 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2196"/>
      <state state_ref="oval:org.mitre.oval:ste:2965"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3418" version="1" check="at least one" comment="Patch 120470-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2752"/>
      <state state_ref="oval:org.mitre.oval:ste:3688"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3389" version="1" check="at least one" comment="Patch 112908-20 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2309"/>
      <state state_ref="oval:org.mitre.oval:ste:3041"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3209" version="1" check="at least one" comment="Patch 112536-06 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1847"/>
      <state state_ref="oval:org.mitre.oval:ste:3585"/>
    </patch_test>
    <package_test id="oval:org.mitre.oval:tst:3198" version="1" comment="Pkg SUNWcry (Supplemental Encryption) is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2361"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:372" version="1" check="all" comment="Patch 109326-16 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:312"/>
      <state state_ref="oval:org.mitre.oval:ste:350"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:371" version="1" check="all" comment="File /etc/named.conf exists" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <oval-def:note>The presence of /etc/named.conf indicates that system system is probably configured as a DNS server</oval-def:note>
      </oval-def:notes>
      <object object_ref="oval:org.mitre.oval:obj:338"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2663" version="1" check="at least one" comment="the version of mshtml.dll is less than 6.0.2734.1600" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2487"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:374" version="1" check="at least one" comment="the 32-bit version of zipfldr.dll is less than 6.0.3790.198" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:339"/>
      <state state_ref="oval:org.mitre.oval:ste:352"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1236" version="1" comment="the patch q873376 is installed (Hotfix key)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:864"/>
      <state state_ref="oval:org.mitre.oval:ste:1108"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1235" version="2" comment="Compressed Folders with zipfldr.dll are enabled" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:863"/>
      <state state_ref="oval:org.mitre.oval:ste:1107"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:375" version="1" check="at least one" comment="Microsoft Office XP Service Pack 2 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:334"/>
      <state state_ref="oval:org.mitre.oval:ste:353"/>
    </registry_test>
    <package_test id="oval:org.mitre.oval:tst:379" version="1" check="all" comment="NTP daemon - Usr (SUNWntpu) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:343"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:378" version="1" check="all" comment="Patch 109409-04 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:342"/>
      <state state_ref="oval:org.mitre.oval:ste:355"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:377" version="1" check="all" comment="Patch 109667-04 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:341"/>
      <state state_ref="oval:org.mitre.oval:ste:354"/>
    </patch_test>
    <process_test id="oval:org.mitre.oval:tst:376" version="1" check="all" comment="xntpd running" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:340"/>
    </process_test>
    <registry_test id="oval:org.mitre.oval:tst:382" version="1" check="at least one" comment="Project Professional 2003 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:345"/>
      <state state_ref="oval:org.mitre.oval:ste:358"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:3034" version="1" check="at least one" comment="the version of srvsvc.dll is less than 5.0.2195.4980" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:397"/>
      <state state_ref="oval:org.mitre.oval:ste:2841"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:3033" version="1" check="at least one" comment="Patch Q318593 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1736"/>
      <state state_ref="oval:org.mitre.oval:ste:2840"/>
    </registry_test>
    <patch_test id="oval:org.mitre.oval:tst:383" version="1" check="at least one" comment="Patch 113146-03 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:215"/>
      <state state_ref="oval:org.mitre.oval:ste:359"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:384" version="1" check="at least one" comment="the version of mshtml.dll is less than 5.50.4945.2800" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:360"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:42091" version="1" comment="Is the Microsoft .NET Framework 2.0 installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15477"/>
      <state state_ref="oval:org.mitre.oval:ste:11982"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:42" version="2" check="at least one" comment="the version of System.web.dll is less than 2.0.50727.210" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:4"/>
      <state state_ref="oval:org.mitre.oval:ste:33"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2338" version="1" check="all" comment="machine has followed the GDR update path and mshtml.dll is less than 6.0.2800.1498" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2189"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2337" version="1" check="all" comment="machine has followed the QFE update path and mshtml.dll is less than 6.0.2800.1499" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2188"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2336" version="1" check="at least one" comment="the patch kb890923 is installed (XP Win2K Hotfix key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1340"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2676" version="1" check="at least one" comment="the version of hhctrl.ocx is less than 5.2.3669.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:531"/>
      <state state_ref="oval:org.mitre.oval:ste:2500"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2675" version="1" check="at least one" comment="the version of hhsetup.dll is less than 5.2.3644.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1532"/>
      <state state_ref="oval:org.mitre.oval:ste:2499"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2674" version="1" check="at least one" comment="the version of itircl.dll is less than 5.2.3644.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1531"/>
      <state state_ref="oval:org.mitre.oval:ste:2498"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2673" version="1" check="at least one" comment="the version of itss.dll is less than 5.2.3644.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:966"/>
      <state state_ref="oval:org.mitre.oval:ste:2497"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2672" version="1" check="at least one" comment="the patch q323255 is installed (Hotfix key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1530"/>
      <state state_ref="oval:org.mitre.oval:ste:2496"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2988" version="1" check="at least one" comment="File %windir%\system32\inetsrv\asp.dll version is less than 5.0.2195.6672" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1709"/>
      <state state_ref="oval:org.mitre.oval:ste:2801"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3039" version="1" check="at least one" comment="File %windir%\system32\inetsrv\ism.dll version is less than 4.2.764.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1631"/>
      <state state_ref="oval:org.mitre.oval:ste:2846"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:3036" version="1" comment="Windows NT 4.0 Security Roll-up Package" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1737"/>
      <state state_ref="oval:org.mitre.oval:ste:2843"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:866" version="1" check="at least one" comment="the version of wins.exe is less than 5.2.3790.239" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:276"/>
      <state state_ref="oval:org.mitre.oval:ste:777"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2679" version="1" comment="the version of fp5areg.dll is less than 10.00.4205.0000" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1535"/>
      <state state_ref="oval:org.mitre.oval:ste:2502"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2678" version="1" comment="the version of fp30reg.dll is less than 10.00.4205.0000" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1534"/>
      <state state_ref="oval:org.mitre.oval:ste:2501"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:388" version="1" check="at least one" comment="libpng rpm older than 1.2.2-24, Epoch 2" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:349"/>
      <state state_ref="oval:org.mitre.oval:ste:364"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:387" version="1" check="at least one" comment="libpng-devel rpm older than 1.2.2-24, Epoch 2" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:348"/>
      <state state_ref="oval:org.mitre.oval:ste:363"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:386" version="1" check="at least one" comment="libpng10-devel rpm older than 1.0.13-14, Epoch 0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:347"/>
      <state state_ref="oval:org.mitre.oval:ste:362"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:385" version="1" check="at least one" comment="libpng10 rpm older than 1.0.13-14, Epoch 0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:346"/>
      <state state_ref="oval:org.mitre.oval:ste:361"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:2681" version="1" comment="the version of fp4areg.dll is less than 4.0.02.7523" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1537"/>
      <state state_ref="oval:org.mitre.oval:ste:2504"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2680" version="1" comment="the version of fp30reg.dll is less than 4.00.02.7523" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1536"/>
      <state state_ref="oval:org.mitre.oval:ste:2503"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:390" version="1" check="at least one" comment="Patch 108528-18 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:290"/>
      <state state_ref="oval:org.mitre.oval:ste:366"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:389" version="1" check="at least one" comment="Patch 112233-04 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:289"/>
      <state state_ref="oval:org.mitre.oval:ste:365"/>
    </patch_test>
    <unknown_test id="oval:org.mitre.oval:tst:393" version="1" comment="Sendmail has recipient or final rulesets" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <note xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">egrep "^[Srecipient=2|S2]|^[^#]*\$>2|^[^#]*\$>recipient|^[^#]*\$>4|^[^#]*\$>final" /etc/mail/sendmail.cf True if any lines returned</note>
      </oval-def:notes>
    </unknown_test>
    <patch_test id="oval:org.mitre.oval:tst:392" version="1" comment="Patch 107684-11 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:351"/>
      <state state_ref="oval:org.mitre.oval:ste:368"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:391" version="1" comment="Patch 110615-11 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:350"/>
      <state state_ref="oval:org.mitre.oval:ste:367"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:397" version="1" check="all" comment="Patch 106950-14 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:354"/>
      <state state_ref="oval:org.mitre.oval:ste:372"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:396" version="1" check="all" comment="Patch 109147-07 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:353"/>
      <state state_ref="oval:org.mitre.oval:ste:371"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:395" version="1" check="all" comment="Patch 112963-09 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:352"/>
      <state state_ref="oval:org.mitre.oval:ste:370"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:4067" version="1" check="at least one" comment="Patch 120954-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2778"/>
      <state state_ref="oval:org.mitre.oval:ste:3473"/>
    </patch_test>
    <package_test id="oval:org.mitre.oval:tst:3551" version="1" check="at least one" comment="Sun Java System Access Manager 7 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2033"/>
      <state state_ref="oval:org.mitre.oval:ste:3088"/>
    </package_test>
    <file_test id="oval:org.mitre.oval:tst:400" version="1" check="at least one" comment="the version of webvw.dll is less than 5.0.3900.7036" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:357"/>
      <state state_ref="oval:org.mitre.oval:ste:374"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:399" version="1" check="at least one" comment="the patch KB894320 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:356"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:398" version="1" check="at least one" comment="Webview is  Enabled" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:355"/>
      <state state_ref="oval:org.mitre.oval:ste:373"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:401" version="1" check="at least one" comment="the version of Llssrv.exe is less than 5.2.3790.242" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:277"/>
      <state state_ref="oval:org.mitre.oval:ste:375"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2683" version="1" check="all" comment="cpio rpm is older than 0:2.5-4.RHEL3" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1539"/>
      <state state_ref="oval:org.mitre.oval:ste:2506"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:2682" version="1" check="all" comment="/bin/cpio is executable by all" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1538"/>
      <state state_ref="oval:org.mitre.oval:ste:2505"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:403" version="1" check="at least one" comment="Microsoft Data Access Components 2.1 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:359"/>
      <state state_ref="oval:org.mitre.oval:ste:377"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:402" version="2" check="at least one" comment="the version of msadco.dll is less than 2.12.5118.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:358"/>
      <state state_ref="oval:org.mitre.oval:ste:376"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:406" version="1" check="at least one" comment="Patch 114332-08 installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:361"/>
      <state state_ref="oval:org.mitre.oval:ste:379"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:405" version="1" check="at least one" comment="Patch 114332-10 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:361"/>
      <state state_ref="oval:org.mitre.oval:ste:378"/>
    </patch_test>
    <textfilecontent_test id="oval:org.mitre.oval:tst:404" version="1" check="at least one" comment="/etc/system has BSM enabled" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:360"/>
    </textfilecontent_test>
    <registry_test id="oval:org.mitre.oval:tst:412" version="3" comment="Is the Microsoft .NET Framework 1.1 installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:365"/>
      <state state_ref="oval:org.mitre.oval:ste:11982"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:411" version="3" check="all" comment="Is Service Pack 1 for Microsoft .NET Framework 1.1 installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:364"/>
      <state state_ref="oval:org.mitre.oval:ste:384"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:410" version="2" check="at least one" comment="the version of System.web.dll is less than 1.1.4322.2037" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1808"/>
      <state state_ref="oval:org.mitre.oval:ste:383"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:409" version="2" check="all" comment="Is the KB886903 patch installed for Microsoft .NET Framework v1.1 sp 1?" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:363"/>
      <state state_ref="oval:org.mitre.oval:ste:382"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:408" version="2" check="at least one" comment="the version of System.web.dll is less than 1.1.4322.1085" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1808"/>
      <state state_ref="oval:org.mitre.oval:ste:381"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:407" version="2" check="all" comment="Is the KB886904 patch installed for Microsoft .NET Framework v1.1 Gold?" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:362"/>
      <state state_ref="oval:org.mitre.oval:ste:380"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:414" version="1" comment="the version of shell32.dll is less than 6.0.2600.151" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:253"/>
      <state state_ref="oval:org.mitre.oval:ste:386"/>
    </file_test>
    <package_test id="oval:org.mitre.oval:tst:417" version="1" check="at least one" comment="Secure Shell Server - Usr (SUNWsshdu) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:368"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:416" version="1" check="at least one" comment="Patch 113273-05 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:367"/>
      <state state_ref="oval:org.mitre.oval:ste:387"/>
    </patch_test>
    <textfilecontent_test id="oval:org.mitre.oval:tst:415" version="1" check="at least one" comment="/etc/ssh/sshd_config has 0.0.0.0 as ListenAddress" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:366"/>
    </textfilecontent_test>
    <file_test id="oval:org.mitre.oval:tst:2684" version="1" check="all" comment="/etc/httpd/conf.d/php.conf exists" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1540"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2686" version="1" check="at least one" comment="the version of mshtml.dll is less than 6.0.3790.94" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2508"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2685" version="1" check="at least one" comment="the patch q824145 is installed (Hotfix key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1541"/>
      <state state_ref="oval:org.mitre.oval:ste:2507"/>
    </registry_test>
    <patch_test id="oval:org.mitre.oval:tst:426" version="1" check="at least one" comment="Patch 113073-13 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:376"/>
      <state state_ref="oval:org.mitre.oval:ste:393"/>
    </patch_test>
    <package_test id="oval:org.mitre.oval:tst:425" version="1" check="at least one" comment="Solaris Volume Manager package installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:375"/>
    </package_test>
    <file_test id="oval:org.mitre.oval:tst:424" version="3" check="at least one" comment="svm.init init script exists" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:374"/>
    </file_test>
    <textfilecontent_test id="oval:org.mitre.oval:tst:423" version="2" check="all" comment="/etc/vfstab is configured with SVM devices" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:373"/>
    </textfilecontent_test>
    <file_test id="oval:org.mitre.oval:tst:427" version="2" check="all" comment="the version of dhtmled.ocx is less than 6.1.0.9232" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:377"/>
      <state state_ref="oval:org.mitre.oval:ste:394"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3760" version="1" comment="the version of rdpwd.sys is less than 5.2.3790.2465" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:2219"/>
      <state state_ref="oval:org.mitre.oval:ste:3006"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2687" version="1" check="all" comment="php RPM prior to  0:4.3.2-24.ent" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1542"/>
      <state state_ref="oval:org.mitre.oval:ste:2509"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:2688" version="1" check="at least one" comment="the version of mshtml.dll is less than 6.0.2800.1276" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2510"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2689" version="1" check="at least one" comment="the version of mshtml.dll is less than 5.50.4934.1600" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2511"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:720" version="1" comment="Patch Windows2000-kb841873-x86-enu.exe Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:565"/>
      <state state_ref="oval:org.mitre.oval:ste:646"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:429" version="1" check="at least one" comment="the version of mstask.dll is less than 4.71.2195.6920" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:379"/>
      <state state_ref="oval:org.mitre.oval:ste:396"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2690" version="1" check="at least one" comment="the version of mshtml.dll is less than 5.0.3810.1700" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2512"/>
    </file_test>
    <package_test id="oval:org.mitre.oval:tst:433" version="1" check="all" comment="Solaris Basic IP Commands (SUNWbip) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:383"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:432" version="1" check="at least one" comment="Patch 118313-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:382"/>
      <state state_ref="oval:org.mitre.oval:ste:399"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:431" version="1" check="at least one" comment="Patch 116986-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:381"/>
      <state state_ref="oval:org.mitre.oval:ste:398"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:430" version="1" check="at least one" comment="Patch 116774-03 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:380"/>
      <state state_ref="oval:org.mitre.oval:ste:397"/>
    </patch_test>
    <registry_test id="oval:org.mitre.oval:tst:2808" version="1" comment="the patch kb824141 is installed (Hotfix key)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1607"/>
      <state state_ref="oval:org.mitre.oval:ste:2628"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2806" version="1" comment="the utility manager Service is enabled" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1605"/>
      <state state_ref="oval:org.mitre.oval:ste:2626"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2691" version="1" check="at least one" comment="File %windir%\system32\user32.dll version is less than 5.0.2195.6799" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:390"/>
      <state state_ref="oval:org.mitre.oval:ste:2513"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3043" version="2" check="at least one" comment="File whodo exists" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1742"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:3042" version="1" check="at least one" comment="Patch 111600-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1741"/>
      <state state_ref="oval:org.mitre.oval:ste:2849"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:3041" version="2" check="at least one" comment="File whodo SUID" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1742"/>
      <state state_ref="oval:org.mitre.oval:ste:2848"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3040" version="2" check="at least one" comment="File whodo oexec set" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1742"/>
      <state state_ref="oval:org.mitre.oval:ste:2847"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:436" version="1" comment="the version of shell32.dll is less than 5.0.3900.6922" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:253"/>
      <state state_ref="oval:org.mitre.oval:ste:402"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:437" version="1" check="at least one" comment="the version of inetcomm.dll is less than 6.0.2742.200" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:385"/>
      <state state_ref="oval:org.mitre.oval:ste:403"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1353" version="1" check="at least one" comment="Microsoft Outlook Express 6 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:566"/>
      <state state_ref="oval:org.mitre.oval:ste:1215"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2693" version="1" check="at least one" comment="the version of mshtml.dll is less than 5.0.3523.1700" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2515"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2695" version="1" check="at least one" comment="the version of nntpsvc.dll is less than 5.0.2195.3881" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:252"/>
      <state state_ref="oval:org.mitre.oval:ste:2517"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2694" version="1" check="at least one" comment="Patch Q303984 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1543"/>
      <state state_ref="oval:org.mitre.oval:ste:2516"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:439" version="2" comment="Microsoft Office Visio 2003 is Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:387"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:438" version="1" check="at least one" comment="the version of gdiplus.dll is less than 6.0.3264.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:386"/>
      <state state_ref="oval:org.mitre.oval:ste:404"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:3044" version="1" check="at least one" comment="Patch 108376-38 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1460"/>
      <state state_ref="oval:org.mitre.oval:ste:2850"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:5577" version="1" comment="Patch 118855-03 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3490"/>
      <state state_ref="oval:org.mitre.oval:ste:3730"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:5429" version="1" comment="Patch 127111-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3164"/>
      <state state_ref="oval:org.mitre.oval:ste:3883"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:5394" version="1" comment="Patch 118833-04 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2843"/>
      <state state_ref="oval:org.mitre.oval:ste:3204"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:5048" version="1" comment="Patch 127112-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3264"/>
      <state state_ref="oval:org.mitre.oval:ste:3883"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:446" version="1" check="at least one" comment="the version of user32.dll is less than 5.0.2195.7017" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:390"/>
      <state state_ref="oval:org.mitre.oval:ste:412"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2807" version="2" comment="the patch kb891711 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1606"/>
      <state state_ref="oval:org.mitre.oval:ste:2627"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:448" version="2" check="at least one" comment="machine has followed the GDR update path and hlink.dll is less than 5.2.3790.225" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:391"/>
      <state state_ref="oval:org.mitre.oval:ste:414"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:447" version="2" check="at least one" comment="machine has followed the QFE update path and hlink.dll is less than 5.2.3790.227" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:391"/>
      <state state_ref="oval:org.mitre.oval:ste:413"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:5581" version="1" comment="Patch 126661-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2850"/>
      <state state_ref="oval:org.mitre.oval:ste:3957"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:5538" version="1" comment="Patch 126662-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3296"/>
      <state state_ref="oval:org.mitre.oval:ste:3957"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:5434" version="1" comment="Patch 126929-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2997"/>
      <state state_ref="oval:org.mitre.oval:ste:3957"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:5410" version="1" comment="Patch 126928-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3333"/>
      <state state_ref="oval:org.mitre.oval:ste:3957"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:5371" version="1" comment="Patch 113318-32 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3096"/>
      <state state_ref="oval:org.mitre.oval:ste:3589"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:5207" version="1" comment="Patch 117468-18 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3184"/>
      <state state_ref="oval:org.mitre.oval:ste:2983"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:2704" version="1" check="at least one" comment="the version of impprov.dll is less than 2000.80.650.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1551"/>
      <state state_ref="oval:org.mitre.oval:ste:2526"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:449" version="1" check="at least one" comment="The version of Ntoskrnl.exe is less than 5.0.2195.6159" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:335"/>
      <state state_ref="oval:org.mitre.oval:ste:415"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:451" version="2" check="at least one" comment="the patch Windows 2003 kb873339 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:392"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:450" version="1" check="at least one" comment="the version of hypertrm.dll is less than 5.2.3790.233" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:283"/>
      <state state_ref="oval:org.mitre.oval:ste:416"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:682" version="2" comment="the patch KB841533 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:544"/>
      <state state_ref="oval:org.mitre.oval:ste:611"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:453" version="1" check="at least one" comment="the version of netdde.exe is less than 5.0.2195.6952" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:393"/>
      <state state_ref="oval:org.mitre.oval:ste:418"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:452" version="2" check="at least one" comment="the version of nddenb32.dll is less than 5.0.2195.6922" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:260"/>
      <state state_ref="oval:org.mitre.oval:ste:417"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:3052" version="1" check="at least one" comment="Patch 110896-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1686"/>
      <state state_ref="oval:org.mitre.oval:ste:2858"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3050" version="1" check="at least one" comment="Patch 114008-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1745"/>
      <state state_ref="oval:org.mitre.oval:ste:2856"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:2708" version="1" comment="the version of shtml.dll is less than 4.00.02.7523" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1555"/>
      <state state_ref="oval:org.mitre.oval:ste:2529"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2707" version="1" check="at least one" comment="the patch q810217 is installed (Hotfix key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1554"/>
      <state state_ref="oval:org.mitre.oval:ste:2528"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2706" version="1" check="at least one" comment="FrontPage Server Extensions 2000 are enabled (2K, XP)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1553"/>
      <state state_ref="oval:org.mitre.oval:ste:2527"/>
    </registry_test>
    <metabase_test id="oval:org.mitre.oval:tst:2705" version="2" comment="SmartHTML interpreter is enabled" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1552"/>
    </metabase_test>
    <package_test id="oval:org.mitre.oval:tst:459" version="1" check="all" comment="CDE application basic runtime environment (SUNWdtbas/SUNWdtbax) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:396"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:458" version="1" check="at least one" comment="Patch 108219-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:395"/>
      <state state_ref="oval:org.mitre.oval:ste:423"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7630" version="1" comment="Patch 122092-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:4826"/>
      <state state_ref="oval:org.mitre.oval:ste:3291"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7556" version="1" comment="Patch 122091-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5697"/>
      <state state_ref="oval:org.mitre.oval:ste:3291"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2709" version="1" check="at least one" comment="kernel version is less than 2.4.20-19.9" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1556"/>
      <state state_ref="oval:org.mitre.oval:ste:2530"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:463" version="1" check="at least one" comment="the version of mso.dll is less than 10.0.6714.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:398"/>
      <state state_ref="oval:org.mitre.oval:ste:427"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:5374" version="1" comment="Patch 127112-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2923"/>
      <state state_ref="oval:org.mitre.oval:ste:3128"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:5341" version="1" comment="Patch 122301-13 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2962"/>
      <state state_ref="oval:org.mitre.oval:ste:3554"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:5306" version="1" comment="Patch 117351-50 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3109"/>
      <state state_ref="oval:org.mitre.oval:ste:3879"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:5260" version="1" comment="Patch 117350-50 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3097"/>
      <state state_ref="oval:org.mitre.oval:ste:3879"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:5241" version="1" comment="Patch 127111-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3170"/>
      <state state_ref="oval:org.mitre.oval:ste:3128"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:4570" version="1" comment="Patch 122300-13 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:3130"/>
      <state state_ref="oval:org.mitre.oval:ste:3554"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:3056" version="1" check="at least one" comment="File %windir%\system32\inetsrv\smtpsvc.dll version is less than 5.0.2195.4905" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:469"/>
      <state state_ref="oval:org.mitre.oval:ste:2861"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:3055" version="1" check="at least one" comment="Patch Q313450" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1747"/>
      <state state_ref="oval:org.mitre.oval:ste:2860"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2713" version="1" check="at least one" comment="the version of dbmslpcn.dll is less than 2000.80.818.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1561"/>
      <state state_ref="oval:org.mitre.oval:ste:2534"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2712" version="2" check="at least one" comment="the version of msgprox.dll is less than 2000.80.765.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1560"/>
      <state state_ref="oval:org.mitre.oval:ste:2533"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2711" version="2" check="at least one" comment="the version of replrec.dll is less than 2000.80.765.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1559"/>
      <state state_ref="oval:org.mitre.oval:ste:2532"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2710" version="2" check="at least one" comment="the version of sqlvdi.dll is less than 2000.80.765.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1557"/>
      <state state_ref="oval:org.mitre.oval:ste:2531"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:466" version="1" check="all" comment="Patch 107684-10 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:351"/>
      <state state_ref="oval:org.mitre.oval:ste:430"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:465" version="1" check="all" comment="Patch 110615-10 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:350"/>
      <state state_ref="oval:org.mitre.oval:ste:429"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:464" version="1" comment="Patch 113575-05 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:399"/>
      <state state_ref="oval:org.mitre.oval:ste:428"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:468" version="1" check="at least one" comment="Patch 116895-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:401"/>
      <state state_ref="oval:org.mitre.oval:ste:432"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:467" version="1" check="at least one" comment="Patch 117000-03 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:400"/>
      <state state_ref="oval:org.mitre.oval:ste:431"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3698" version="1" check="at least one" comment="Patch 119255-03 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2730"/>
      <state state_ref="oval:org.mitre.oval:ste:3374"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3284" version="1" check="at least one" comment="Patch 119254-03 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2444"/>
      <state state_ref="oval:org.mitre.oval:ste:3922"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:556" version="1" comment="the version of rpcrt4.dll is less than 5.1.2600.109" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:254"/>
      <state state_ref="oval:org.mitre.oval:ste:503"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:3000" version="1" check="at least one" comment="Patch Windows2000-KB823980-x86-ENU.exe Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1717"/>
      <state state_ref="oval:org.mitre.oval:ste:2811"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2714" version="1" check="at least one" comment="File %windir%\system32\rpcrt4.dll version is less than 5.0.2195.6753" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:254"/>
      <state state_ref="oval:org.mitre.oval:ste:2535"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2402" version="1" check="at least one" comment="the version of mshtml.dll is less than 6.0.2900.2604" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2250"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2717" version="1" check="at least one" comment="Microsoft Data Access Components 2.6 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:359"/>
      <state state_ref="oval:org.mitre.oval:ste:2538"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2716" version="2" check="at least one" comment="the version of msadco.dll is less than 2.62.9119.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:358"/>
      <state state_ref="oval:org.mitre.oval:ste:2537"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2975" version="1" check="at least one" comment="Mixed Mode Enabled" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1702"/>
      <state state_ref="oval:org.mitre.oval:ste:2789"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2718" version="1" check="at least one" comment="the version of sqlservr.exe is less than 2000.80.650.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:843"/>
      <state state_ref="oval:org.mitre.oval:ste:2539"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3059" version="1" check="at least one" comment="File %windir%\system32\inetsrv\ism.dll version is less than 5.0.2195.5671" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1631"/>
      <state state_ref="oval:org.mitre.oval:ste:2864"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:3058" version="1" check="at least one" comment="Patch Q321599 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1749"/>
      <state state_ref="oval:org.mitre.oval:ste:2863"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:138630" version="1" comment="Check if the version of Microsoft.office.policy.dll is less than 14.0.7149.5000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15985"/>
      <state state_ref="oval:org.mitre.oval:ste:38541"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:138608" version="2" comment="Check if the version of stswel.dll is less than 15.0.4719.1002" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:44015"/>
      <state state_ref="oval:org.mitre.oval:ste:38672"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:138555" version="1" comment="Check if the version of onetutil.dll is less than 14.0.7149.5000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:26888"/>
      <state state_ref="oval:org.mitre.oval:ste:38541"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:137831" version="1" comment="Check if the version of Microsoft.SharePoint.Portal.dll is less than 12.0.6721.5000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:43939"/>
      <state state_ref="oval:org.mitre.oval:ste:38210"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:150" version="1" check="at least one" comment="the version of WmiScriptUtils.dll is less than 8.0.50727.236" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:38"/>
      <state state_ref="oval:org.mitre.oval:ste:93"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2727" version="1" check="at least one" comment="Windows Media Player for Windows XP is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:757"/>
      <state state_ref="oval:org.mitre.oval:ste:2548"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2726" version="1" check="at least one" comment="the version of dxmasf.dll is less than 6.4.9.1121" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1568"/>
      <state state_ref="oval:org.mitre.oval:ste:2547"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2720" version="1" check="at least one" comment="the version of msdxm.ocx is less than 6.4.9.1121" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1564"/>
      <state state_ref="oval:org.mitre.oval:ste:2541"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2719" version="1" check="at least one" comment="Patch wm308567 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1563"/>
      <state state_ref="oval:org.mitre.oval:ste:2540"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:138824" version="1" comment="Check if Exchange Server 2013 Cumulative Update 8 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:26779"/>
      <state state_ref="oval:org.mitre.oval:ste:38813"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:139078" version="1" comment="Check if the version of Exsetup.exe is less than 15.0.847.41" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:26548"/>
      <state state_ref="oval:org.mitre.oval:ste:39001"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:139030" version="1" comment="Check if the version of Exsetup.exe is less than 15.0.1076.011" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:26548"/>
      <state state_ref="oval:org.mitre.oval:ste:38872"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:137998" version="1" comment="Check if the version of Microsoft.Office.Server.Search.dll is less than 15.0.4711.1000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:43159"/>
      <state state_ref="oval:org.mitre.oval:ste:38396"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:135743" version="1" comment="Check if the version of ExSetup.exe is less than 14.03.0224.001" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24092"/>
      <state state_ref="oval:org.mitre.oval:ste:37587"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:135507" version="1" comment="Check if the version of exsetup.exe is less than 8.03.0389.002" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24081"/>
      <state state_ref="oval:org.mitre.oval:ste:37084"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2721" version="1" check="at least one" comment="kernel version is less than 2.4.20-18.9" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1565"/>
      <state state_ref="oval:org.mitre.oval:ste:2542"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:135802" version="1" comment="Microsoft Exchange Server Cumulative Update 6 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:26779"/>
      <state state_ref="oval:org.mitre.oval:ste:37662"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:135793" version="1" comment="Check if the version of ExSetup.exe is less than 15.00.0847.035" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:26548"/>
      <state state_ref="oval:org.mitre.oval:ste:37067"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:135701" version="1" comment="Check if the version of ExSetup.exe is less than 15.00.0995.034" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:26548"/>
      <state state_ref="oval:org.mitre.oval:ste:36871"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:476" version="1" check="at least one" comment="kernel rpm older than 2.4.21-15.0.2.EL Epoch 0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:410"/>
      <state state_ref="oval:org.mitre.oval:ste:440"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:475" version="1" check="at least one" comment="kernel-hugemem rpm older than 2.4.21-15.0.2.EL Epoch 0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:409"/>
      <state state_ref="oval:org.mitre.oval:ste:439"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:474" version="1" check="at least one" comment="kernel-smp rpm older than 2.4.21-15.0.2.EL Epoch 0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:408"/>
      <state state_ref="oval:org.mitre.oval:ste:438"/>
    </rpminfo_test>
    <package_test id="oval:org.mitre.oval:tst:478" version="1" check="all" comment="X Window System Font Server (SUNWxwfs) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:412"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:477" version="1" check="all" comment="Patch 113923-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:411"/>
      <state state_ref="oval:org.mitre.oval:ste:441"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3061" version="1" check="at least one" comment="ddskk version is less than 11.6.0-11.90" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1751"/>
      <state state_ref="oval:org.mitre.oval:ste:2866"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3060" version="1" check="at least one" comment="ddskk-xemacs version is less than 11.6.0-11.90" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1750"/>
      <state state_ref="oval:org.mitre.oval:ste:2865"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:138458" version="1" comment="Check if Exchange Server 2013 Cumulative Update 7 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:26779"/>
      <state state_ref="oval:org.mitre.oval:ste:38334"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:138401" version="1" comment="Check if the version of Exsetup.exe is less than 15.0.847.38" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:26548"/>
      <state state_ref="oval:org.mitre.oval:ste:38372"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:138053" version="1" comment="Check if the version of Exsetup.exe is less than 15.0.1044.29" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:26548"/>
      <state state_ref="oval:org.mitre.oval:ste:38464"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:138454" version="1" comment="Check if the version of onetutil.dll is less than 14.0.7145.5000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:26888"/>
      <state state_ref="oval:org.mitre.oval:ste:38439"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:138449" version="1" comment="Check if the version of msoserverintl.dll is less than 15.0.4697.1000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:43915"/>
      <state state_ref="oval:org.mitre.oval:ste:37582"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:138441" version="1" comment="Check if the version of wwintl.dll is less than 15.0.4631.1000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:43884"/>
      <state state_ref="oval:org.mitre.oval:ste:38477"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:138393" version="1" comment="Check if the version of vutils.dll is less than 15.0.4701.1000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:44052"/>
      <state state_ref="oval:org.mitre.oval:ste:38093"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:138365" version="1" comment="Check if the version of msoserver.dll is less than 14.0.7145.5000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24128"/>
      <state state_ref="oval:org.mitre.oval:ste:38439"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:138351" version="1" comment="Check if the version of ascalc.dll is less than 15.0.4699.1000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:29038"/>
      <state state_ref="oval:org.mitre.oval:ste:38421"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:138339" version="1" comment="Check if the version of microsoft.office.infopath.server.dll is less than 15.0.4701.1000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:43614"/>
      <state state_ref="oval:org.mitre.oval:ste:38093"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:138254" version="1" comment="Check if the version of xlsrv.dll is less than 15.0.4701.1000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:26773"/>
      <state state_ref="oval:org.mitre.oval:ste:38093"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:138170" version="2" comment="Check if the version of stswel.dll is less than 15.0.4701.1000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:44015"/>
      <state state_ref="oval:org.mitre.oval:ste:38093"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:134500" version="2" comment="Check if the version of Onetutil.dll is less than 14.0.7137.5000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:26888"/>
      <state state_ref="oval:org.mitre.oval:ste:37438"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2730" version="1" check="at least one" comment="the version of srvsvc.dll is less than 5.0.2195.6110" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:397"/>
      <state state_ref="oval:org.mitre.oval:ste:2551"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2729" version="1" check="at least one" comment="Patch Q329170 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1570"/>
      <state state_ref="oval:org.mitre.oval:ste:2550"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2728" version="1" check="at least one" comment="SMB Signing enabled" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1569"/>
      <state state_ref="oval:org.mitre.oval:ste:2549"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:739" version="1" comment="the patch q841356 is installed (Hotfix key)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:571"/>
      <state state_ref="oval:org.mitre.oval:ste:665"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:479" version="1" check="at least one" comment="the version of grpconv.exe (system32) is less than 5.0.2195.6966" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:307"/>
      <state state_ref="oval:org.mitre.oval:ste:442"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:481" version="1" comment="Microsoft Office Visio Professional 2002 with service pack 2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:414"/>
      <state state_ref="oval:org.mitre.oval:ste:444"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:480" version="1" check="at least one" comment="Patch KB873354 installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:413"/>
      <state state_ref="oval:org.mitre.oval:ste:443"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:482" version="1" comment="the version of wins.exe is less than 4.0.1381.33618" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:276"/>
      <state state_ref="oval:org.mitre.oval:ste:445"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:483" version="2" check="at least one" comment="the version of msadco.dll is less than 2.53.6202.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:358"/>
      <state state_ref="oval:org.mitre.oval:ste:446"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2715" version="2" check="at least one" comment="Patch Q329414 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1562"/>
      <state state_ref="oval:org.mitre.oval:ste:2536"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2576" version="1" comment="Microsoft Data Access Components 2.5 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:359"/>
      <state state_ref="oval:org.mitre.oval:ste:2409"/>
    </registry_test>
    <patch_test id="oval:org.mitre.oval:tst:485" version="1" check="all" comment="Patch 113273-04 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:367"/>
      <state state_ref="oval:org.mitre.oval:ste:447"/>
    </patch_test>
    <process_test id="oval:org.mitre.oval:tst:484" version="1" comment="sshd running" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:415"/>
    </process_test>
    <file_test id="oval:org.mitre.oval:tst:2732" version="1" check="at least one" comment="File sqlservr.exe version3 is less than 2000.80.578.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:843"/>
      <state state_ref="oval:org.mitre.oval:ste:2553"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2731" version="1" check="at least one" comment="File xpstar.dll version3 is less than 2000.80.561.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:898"/>
      <state state_ref="oval:org.mitre.oval:ste:2552"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:3070" version="3" comment="Internet Explorer 5.01 Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:2875"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3069" version="3" comment="Internet Explorer 5.01 Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:2874"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3068" version="3" comment="Internet Explorer 5.01 Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:2873"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3067" version="3" comment="Internet Explorer 5.01 Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:2872"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3066" version="3" comment="Internet Explorer 5.01 Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:2871"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3065" version="3" comment="Internet Explorer 5.01 Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:2870"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3064" version="3" check="at least one" comment="Internet Explorer 5.01 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:2869"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:3062" version="1" check="at least one" comment="the version of mshtml.dll is less than 5.0.3504.2500" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2867"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1229" version="1" comment="the version of cryptdlg.dll is less then 5.0.1558.6072" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:728"/>
      <state state_ref="oval:org.mitre.oval:ste:1101"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:3750" version="1" comment="Windows XP is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:123"/>
      <state state_ref="oval:org.mitre.oval:ste:3066"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:3367" version="1" comment="the version of umpnpmgr.dll is less than 5.1.2600.1711" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:2048"/>
      <state state_ref="oval:org.mitre.oval:ste:3812"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:3257" version="1" comment="64-Bit (ia64 architecture) version of Windows is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:2113"/>
      <state state_ref="oval:org.mitre.oval:ste:3485"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:123329" version="1" comment="Check if the version of Deploy.resources.dll is less than 5.0.8308.420" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:41939"/>
      <state state_ref="oval:org.mitre.oval:ste:31615"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:123294" version="1" comment="Check if the version of Microsoft.Rtc.Acd.Workflow.dll is less than 5.0.8308.803" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:42109"/>
      <state state_ref="oval:org.mitre.oval:ste:33391"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:122801" version="1" comment="Check if the version of Microsoft.Rtc.Acd.Workflow.dll is less than 4.0.7577.276" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:42109"/>
      <state state_ref="oval:org.mitre.oval:ste:33946"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:497" version="1" comment="Patch 112604-02 or later installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:427"/>
      <state state_ref="oval:org.mitre.oval:ste:456"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:496" version="1" comment="Patch 112609-02 or later installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:426"/>
      <state state_ref="oval:org.mitre.oval:ste:455"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:495" version="1" comment="Patch 115172-01 or later installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:425"/>
      <state state_ref="oval:org.mitre.oval:ste:454"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:494" version="2" comment="Lance Ethernet (le) interface configured to start" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:424"/>
    </file_test>
    <unknown_test id="oval:org.mitre.oval:tst:493" version="1" comment="Lance Ethernet interface in use" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <note xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5"/>
      </oval-def:notes>
    </unknown_test>
    <file_test id="oval:org.mitre.oval:tst:499" version="1" check="at least one" comment="machine has followed the GDR update path and inetcomm.dll is less than 6.0.3790.181" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:385"/>
      <state state_ref="oval:org.mitre.oval:ste:458"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:498" version="1" check="at least one" comment="machine has followed the QFE update path and inetcomm.dll is less than 6.0.3790.185" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:385"/>
      <state state_ref="oval:org.mitre.oval:ste:457"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:123575" version="1" comment="Check if Microsoft Lync Server 2010 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24372"/>
      <state state_ref="oval:org.mitre.oval:ste:34174"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:81027" version="1" comment="Check if Microsoft Lync Server 2013 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24372"/>
      <state state_ref="oval:org.mitre.oval:ste:20728"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:123304" version="1" comment="Check if the version of wrtces.dll is less than 4.0.7577.230" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:42312"/>
      <state state_ref="oval:org.mitre.oval:ste:33474"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:123219" version="1" comment="Check if the version of SIPStack.dll is less than 5.0.8308.803" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:42322"/>
      <state state_ref="oval:org.mitre.oval:ste:33391"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:121842" version="1" comment="Check if the version of wsssetup.dll is less than 15.0.4641.1000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:38235"/>
      <state state_ref="oval:org.mitre.oval:ste:33464"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2740" version="1" check="all" comment="gaim RPM earlier than 1:1.3.1-0.el3" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1573"/>
      <state state_ref="oval:org.mitre.oval:ste:2561"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:2739" version="1" check="all" comment="/usr/bin/gaim is executable by any user" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1099"/>
      <state state_ref="oval:org.mitre.oval:ste:2560"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:501" version="1" check="at least one" comment="Patch 114796-04 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:429"/>
      <state state_ref="oval:org.mitre.oval:ste:459"/>
    </patch_test>
    <package_test id="oval:org.mitre.oval:tst:500" version="1" check="at least one" comment="Sun Crypto Accelerator 4000 software installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:428"/>
    </package_test>
    <registry_test id="oval:org.mitre.oval:tst:42359" version="3" comment="Internet Explorer 9 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:12091"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:122132" version="1" comment="Check if Internet Explorer 10 Consumer Preview is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:33632"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2885" version="1" comment="the patch Q811493 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1654"/>
      <state state_ref="oval:org.mitre.oval:ste:2701"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2741" version="1" check="at least one" comment="the version of kernel32.dll is less than 5.0.2195.6011" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1549"/>
      <state state_ref="oval:org.mitre.oval:ste:2562"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2742" version="1" check="at least one" comment="kernel version is less than 2.4.20-13.9" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1574"/>
      <state state_ref="oval:org.mitre.oval:ste:2563"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:3072" version="1" check="at least one" comment="the version of netman.dll is less than 5.0.2195.5974" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:658"/>
      <state state_ref="oval:org.mitre.oval:ste:2877"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:3071" version="1" check="at least one" comment="Patch Q326886 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1752"/>
      <state state_ref="oval:org.mitre.oval:ste:2876"/>
    </registry_test>
    <package_test id="oval:org.mitre.oval:tst:505" version="1" comment="Kodak Color Managment Server (KCMS) Runtime Environment (SUNWkcsrt/SUNWkcsrx) installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:433"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:504" version="1" comment="Patch 114636-01 or later installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:432"/>
      <state state_ref="oval:org.mitre.oval:ste:462"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:503" version="1" comment="Patch 107337-03 or later installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:431"/>
      <state state_ref="oval:org.mitre.oval:ste:461"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:502" version="1" comment="Patch 111400-02 or later installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:430"/>
      <state state_ref="oval:org.mitre.oval:ste:460"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:511" version="1" comment="Patch 113505-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:439"/>
      <state state_ref="oval:org.mitre.oval:ste:466"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:510" version="1" comment="Patch 113508-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:438"/>
      <state state_ref="oval:org.mitre.oval:ste:465"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:509" version="1" comment="Patch 115054-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:437"/>
      <state state_ref="oval:org.mitre.oval:ste:464"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:508" version="1" comment="Patch 115055-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:436"/>
      <state state_ref="oval:org.mitre.oval:ste:463"/>
    </patch_test>
    <package_test id="oval:org.mitre.oval:tst:507" version="1" comment="SunCluster Component SUNWscvw installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:435"/>
    </package_test>
    <process_test id="oval:org.mitre.oval:tst:506" version="2" comment="Apache running with SunPlex Manager config" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:434"/>
    </process_test>
    <file_test id="oval:org.mitre.oval:tst:2399" version="1" check="all" comment="the version of hlink.dll is less than 5.2.3790.227" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:391"/>
      <state state_ref="oval:org.mitre.oval:ste:2247"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2398" version="1" check="at least one" comment="the patch kb888113 is installed (Hotfix key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1370"/>
      <state state_ref="oval:org.mitre.oval:ste:2246"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:513" version="1" check="at least one" comment="the version of Llssrv.exe is less than 5.0.2195.7021" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:277"/>
      <state state_ref="oval:org.mitre.oval:ste:468"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2477" version="1" comment="the patch kb885834 is installed (Hotfix key)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1408"/>
      <state state_ref="oval:org.mitre.oval:ste:2321"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2475" version="1" comment="license logging service is enabled" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1407"/>
      <state state_ref="oval:org.mitre.oval:ste:2319"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:42403" version="1" comment="Mshtml.dll version is less than 8.0.7600.16722" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:12029"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:42393" version="1" comment="Mshtml.dll version is less than 8.0.7600.20861" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:12180"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:20848" version="1" comment="Mshtml.dll version is greater than or equal 8.0.7600.20000" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:6624"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2358" version="1" check="at least one" comment="The version of Ntoskrnl.exe is less than 5.0.2195.7035" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:335"/>
      <state state_ref="oval:org.mitre.oval:ste:2208"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:515" version="1" check="at least one" comment="the version of mshtml.dll is less than 6.0.3790.279" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:469"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:514" version="2" check="at least one" comment="the patch kb890923 is installed (Hotfix key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:440"/>
    </registry_test>
    <patch_test id="oval:org.mitre.oval:tst:4105" version="1" comment="Patch 112908-12 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2309"/>
      <state state_ref="oval:org.mitre.oval:ste:3777"/>
    </patch_test>
    <textfilecontent_test id="oval:org.mitre.oval:tst:4074" version="1" comment="pam_krb5 is an auth module with debug enabled" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:2563"/>
    </textfilecontent_test>
    <patch_test id="oval:org.mitre.oval:tst:4013" version="1" comment="Patch 115168-04 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1845"/>
      <state state_ref="oval:org.mitre.oval:ste:3539"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3957" version="1" comment="Patch 112908-13 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2309"/>
      <state state_ref="oval:org.mitre.oval:ste:3535"/>
    </patch_test>
    <textfilecontent_test id="oval:org.mitre.oval:tst:3487" version="1" comment="/etc/krb5/krb5.conf is configured as a kerberos client" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:2143"/>
    </textfilecontent_test>
    <textfilecontent_test id="oval:org.mitre.oval:tst:3394" version="1" comment="Logging of LOG_DEBUG level messages is enabled" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:1866"/>
    </textfilecontent_test>
    <patch_test id="oval:org.mitre.oval:tst:3258" version="1" comment="Patch 115168-03 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1845"/>
      <state state_ref="oval:org.mitre.oval:ste:3220"/>
    </patch_test>
    <registry_test id="oval:org.mitre.oval:tst:865" version="1" comment="the patch KB870763 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:651"/>
      <state state_ref="oval:org.mitre.oval:ste:776"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:517" version="1" check="at least one" comment="the version of wins.exe is less than 5.0.2195.7005" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:276"/>
      <state state_ref="oval:org.mitre.oval:ste:471"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2408" version="2" comment="this is an NT Server (stand-alone)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1550"/>
      <state state_ref="oval:org.mitre.oval:ste:2256"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2405" version="1" comment="the wins service is enabled" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1372"/>
      <state state_ref="oval:org.mitre.oval:ste:2253"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2753" version="1" check="at least one" comment="kernel version = 2.4.20-6" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1579"/>
      <state state_ref="oval:org.mitre.oval:ste:2574"/>
    </rpminfo_test>
    <uname_test id="oval:org.mitre.oval:tst:2752" version="1" comment="kernel 2.4.20-6 or earlier is running" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:2573"/>
    </uname_test>
    <file_test id="oval:org.mitre.oval:tst:519" version="1" check="at least one" comment="the version of mshtml.dll is less than 5.0.3534.2800" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:473"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:518" version="1" check="at least one" comment="the patch kb834707-ie501sp4 is installed (Hotfix key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:441"/>
      <state state_ref="oval:org.mitre.oval:ste:472"/>
    </registry_test>
    <package_test id="oval:org.mitre.oval:tst:527" version="1" check="all" comment="Kerberos v5 - Root (SUNWkrbr) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:449"/>
    </package_test>
    <package_test id="oval:org.mitre.oval:tst:526" version="1" check="all" comment="Kerberos v5 - Usr (SUNWkrbu/SUNWkrbux) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <oval-def:note>SUNWkrbu - 32bit, SUNWkrbux - 64bit</oval-def:note>
      </oval-def:notes>
      <object object_ref="oval:org.mitre.oval:obj:448"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:525" version="1" check="all" comment="Patch 112237-09 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:447"/>
      <state state_ref="oval:org.mitre.oval:ste:479"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:524" version="1" check="all" comment="Patch 112390-08 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:446"/>
      <state state_ref="oval:org.mitre.oval:ste:478"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:523" version="1" check="all" comment="Patch 112925-03 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:445"/>
      <state state_ref="oval:org.mitre.oval:ste:477"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:522" version="1" check="all" comment="Patch 112923-03 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:444"/>
      <state state_ref="oval:org.mitre.oval:ste:476"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:521" version="1" check="all" comment="Patch 112921-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:443"/>
      <state state_ref="oval:org.mitre.oval:ste:475"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:520" version="1" check="all" comment="Patch 112908-10 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:442"/>
      <state state_ref="oval:org.mitre.oval:ste:474"/>
    </patch_test>
    <registry_test id="oval:org.mitre.oval:tst:2754" version="1" check="at least one" comment="Patch Q305601 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1580"/>
      <state state_ref="oval:org.mitre.oval:ste:2575"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:114968" version="1" comment="Check if Microsoft Server Bus 1.1 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:39035"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:115300" version="1" comment="Check if the version of Microsoft.ServiceBus.dll is less than 2.1.40512.2" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:39286"/>
      <state state_ref="oval:org.mitre.oval:ste:31674"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:528" version="1" check="at least one" comment="the version of dplayx.dll is less than 5.2.3790.163" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:450"/>
      <state state_ref="oval:org.mitre.oval:ste:480"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:533" version="1" check="at least one" comment="the version of Sp3res.dll is less than 5.0.2195.6928" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:454"/>
      <state state_ref="oval:org.mitre.oval:ste:485"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:532" version="1" check="at least one" comment="the version of Umandlg.dll is less than 1.0.0.5" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:453"/>
      <state state_ref="oval:org.mitre.oval:ste:484"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:531" version="2" check="at least one" comment="the patch kb842526 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:452"/>
      <state state_ref="oval:org.mitre.oval:ste:483"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2756" version="1" check="at least one" comment="krb5-libs version is less than 1.2.7-14" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1582"/>
      <state state_ref="oval:org.mitre.oval:ste:2577"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2755" version="1" check="at least one" comment="krb5-workstation version is less than 1.2.7-14" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1581"/>
      <state state_ref="oval:org.mitre.oval:ste:2576"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:114167" version="1" comment="Check if the version of SWORD.DLL is less than 14.0.7123.5000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:39210"/>
      <state state_ref="oval:org.mitre.oval:ste:31098"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:113796" version="1" comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.1.30" check_existence="all_exist" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28098"/>
      <state state_ref="oval:org.mitre.oval:ste:30563"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:113616" version="1" comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.3.8" check_existence="all_exist" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28098"/>
      <state state_ref="oval:org.mitre.oval:ste:30854"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:113462" version="1" comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.2.22" check_existence="all_exist" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28098"/>
      <state state_ref="oval:org.mitre.oval:ste:30534"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2759" version="1" check="at least one" comment="the version of nntpsvc.dll is less than 6.0.3790.206" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:252"/>
      <state state_ref="oval:org.mitre.oval:ste:2580"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2758" version="2" check="at least one" comment="the patch WindowsServer2003-KB883935-ia64-enu.exe is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:297"/>
      <state state_ref="oval:org.mitre.oval:ste:2579"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2757" version="1" comment="the NNTP service is enabled" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1583"/>
      <state state_ref="oval:org.mitre.oval:ste:2578"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:114587" version="1" comment="Check if Microsoft SharePoint Server 2013 Client Components SDK is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:38219"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:114300" version="3" comment="Check if Web Apps Server 2013 SP1 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:39205"/>
      <state state_ref="oval:org.mitre.oval:ste:31306"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:114158" version="2" comment="Check if Sharepoint server 2013 SP1 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:39142"/>
      <state state_ref="oval:org.mitre.oval:ste:31017"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:114603" version="1" comment="Check if the version of Microsoft.Office.Server.Msg.dll is less than 15.0.4514.1000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:39002"/>
      <state state_ref="oval:org.mitre.oval:ste:24235"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:114600" version="1" comment="Check if the version of wsetupui.dll is less than 15.0.4561.1000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:39157"/>
      <state state_ref="oval:org.mitre.oval:ste:31289"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:114430" version="1" comment="Check if the version of msoserver.dll is less than 15.0.4615.1000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:30227"/>
      <state state_ref="oval:org.mitre.oval:ste:31346"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:114066" version="1" comment="Check if the version of Microsoft.sharepoint.client.dll is less than 15.0.4609.1000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:16213"/>
      <state state_ref="oval:org.mitre.oval:ste:31109"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:113960" version="1" comment="Check if the version of wsssetup.dll is less than 15.0.4615.1000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:38235"/>
      <state state_ref="oval:org.mitre.oval:ste:31346"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:535" version="1" check="at least one" comment="the version of mshtml.dll is less than 6.0.3790.219" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:487"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:534" version="1" check="at least one" comment="the patch kb834707 is installed (Hotfix key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:455"/>
      <state state_ref="oval:org.mitre.oval:ste:486"/>
    </registry_test>
    <patch_test id="oval:org.mitre.oval:tst:542" version="1" comment="Patch 106541-33 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:291"/>
      <state state_ref="oval:org.mitre.oval:ste:491"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:541" version="2" comment="Patch 109007-18 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:458"/>
      <state state_ref="oval:org.mitre.oval:ste:490"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:540" version="1" comment="Patch 114332-12 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:361"/>
      <state state_ref="oval:org.mitre.oval:ste:489"/>
    </patch_test>
    <unknown_test id="oval:org.mitre.oval:tst:539" version="1" comment="Basic Security Module enabled" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <note xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">grep c2audit /etc/system True if "set c2audit:audit_load = 1" or similiar</note>
      </oval-def:notes>
    </unknown_test>
    <unknown_test id="oval:org.mitre.oval:tst:538" version="1" comment="Auditing Administrative or System-Wide Administrative audit classes" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <note xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">egrep ^flags:.*a[sd] /etc/security/audit_control True if any lines returned</note>
      </oval-def:notes>
    </unknown_test>
    <package_test id="oval:org.mitre.oval:tst:547" version="1" check="all" comment="NIS Server - User (SUNWypu) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <oval-def:note>Package which contains /usr/lib/netsvc/yp/ypxfrd</oval-def:note>
      </oval-def:notes>
      <object object_ref="oval:org.mitre.oval:obj:462"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:546" version="1" check="all" comment="Patch 106541-24 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:291"/>
      <state state_ref="oval:org.mitre.oval:ste:494"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:545" version="1" check="all" comment="Patch 109328-03 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:461"/>
      <state state_ref="oval:org.mitre.oval:ste:493"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:544" version="1" check="all" comment="Patch 113579-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:460"/>
      <state state_ref="oval:org.mitre.oval:ste:492"/>
    </patch_test>
    <process_test id="oval:org.mitre.oval:tst:543" version="1" check="all" comment="ypxfrd running" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:459"/>
    </process_test>
    <file_test id="oval:org.mitre.oval:tst:548" version="2" check="at least one" comment="the version of dplayx.dll is less than 5.2.3790.163 on 64-bit edition" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:463"/>
      <state state_ref="oval:org.mitre.oval:ste:495"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:113418" version="1" comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.2.20" check_existence="all_exist" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28098"/>
      <state state_ref="oval:org.mitre.oval:ste:29920"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:113364" version="1" comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.3.6" check_existence="all_exist" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28098"/>
      <state state_ref="oval:org.mitre.oval:ste:30241"/>
    </file_test>
    <metabase_test id="oval:org.mitre.oval:tst:3074" version="2" comment="FTP Enabled" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1753"/>
      <state state_ref="oval:org.mitre.oval:ste:2879"/>
    </metabase_test>
    <file_test id="oval:org.mitre.oval:tst:551" version="1" comment="the version of shell32.dll is less than 6.0.3790.168" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:253"/>
      <state state_ref="oval:org.mitre.oval:ste:498"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1321" version="1" comment="the version of helpctr.exe is less than 5.1.2600.1515" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:886"/>
      <state state_ref="oval:org.mitre.oval:ste:1187"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:552" version="1" comment="The patch KB885492 is installed on Windows 2000" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:465"/>
      <state state_ref="oval:org.mitre.oval:ste:499"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2764" version="1" check="at least one" comment="the version of tshoot.ocx is less than 1.0.1.2125" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1586"/>
      <state state_ref="oval:org.mitre.oval:ste:2585"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2763" version="1" check="at least one" comment="the patch kb826232 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1585"/>
      <state state_ref="oval:org.mitre.oval:ste:2584"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2780" version="1" check="at least one" comment="File console.exe version3 is less than 2000.80.818.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1596"/>
      <state state_ref="oval:org.mitre.oval:ste:2601"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2779" version="1" check="at least one" comment="File dbmslpcn.dll version3 is less than 2000.80.818.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1561"/>
      <state state_ref="oval:org.mitre.oval:ste:2600"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2778" version="1" check="at least one" comment="File sqlmap70.dll version3 is less than 2000.80.811.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1595"/>
      <state state_ref="oval:org.mitre.oval:ste:2599"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2777" version="1" check="at least one" comment="File sqlrepss.dll version3 is less than 2000.80.765.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1594"/>
      <state state_ref="oval:org.mitre.oval:ste:2598"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2776" version="1" check="at least one" comment="the version of sqlservr.exe is less than 2000.80.818.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:843"/>
      <state state_ref="oval:org.mitre.oval:ste:2597"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2775" version="1" check="at least one" comment="the version of ssmslpcn.dll is less than 2000.80.818.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1593"/>
      <state state_ref="oval:org.mitre.oval:ste:2596"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2774" version="1" check="at least one" comment="the version of ssnetlib.dll is less than 2000.80.818.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:841"/>
      <state state_ref="oval:org.mitre.oval:ste:2595"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2773" version="1" check="at least one" comment="the version of ssnmpn70.dll is less than 2000.80.818.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1592"/>
      <state state_ref="oval:org.mitre.oval:ste:2594"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2772" version="1" check="at least one" comment="the version of ums.dll is less than 2000.80.816.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1591"/>
      <state state_ref="oval:org.mitre.oval:ste:2593"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2771" version="1" check="at least one" comment="the version of odsole70.dll is less than 2000.80.800.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:903"/>
      <state state_ref="oval:org.mitre.oval:ste:2592"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2770" version="1" check="at least one" comment="the version of xpweb70.dll is less than 2000.80.778.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:899"/>
      <state state_ref="oval:org.mitre.oval:ste:2591"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2769" version="1" check="at least one" comment="File msgprox.dll version3 is less than 2000.80.765.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1590"/>
      <state state_ref="oval:org.mitre.oval:ste:2590"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2768" version="2" check="at least one" comment="the version of replprov.dll is less than 2000.80.798.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1589"/>
      <state state_ref="oval:org.mitre.oval:ste:2589"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2767" version="1" check="at least one" comment="File replrec.dll version3 is less than 2000.80.765.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1588"/>
      <state state_ref="oval:org.mitre.oval:ste:2588"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2766" version="1" check="at least one" comment="File sqlvdi.dll version3 is less than 2000.80.765.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1587"/>
      <state state_ref="oval:org.mitre.oval:ste:2587"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:555" version="1" comment="Windows Project Professional 2002 Service Pack 1 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:466"/>
      <state state_ref="oval:org.mitre.oval:ste:502"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:554" version="1" check="at least one" comment="the version of mso.dll is less than 10.0.6735.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:467"/>
      <state state_ref="oval:org.mitre.oval:ste:501"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:553" version="2" check="at least one" comment="Patch KB873355 installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:466"/>
      <state state_ref="oval:org.mitre.oval:ste:500"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2966" version="1" check="at least one" comment="File sqlservr.exe version3 greater than or equal to 2000.80.384.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:843"/>
      <state state_ref="oval:org.mitre.oval:ste:2780"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2784" version="1" check="at least one" comment="File odsole70.dll Version3 is less than 2000.80.223.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:903"/>
      <state state_ref="oval:org.mitre.oval:ste:2605"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2783" version="1" check="at least one" comment="File xpqueue.dll Version3 is less than 2000.80.223.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:902"/>
      <state state_ref="oval:org.mitre.oval:ste:2604"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2782" version="1" check="at least one" comment="File xprepl.dll Version3 is less than 2000.80.223.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:901"/>
      <state state_ref="oval:org.mitre.oval:ste:2603"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2781" version="1" check="at least one" comment="File xpstar.dll Version3 is less than 2000.80.223.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:898"/>
      <state state_ref="oval:org.mitre.oval:ste:2602"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:558" version="1" check="at least one" comment="The version of smtpsvc.dll is less than 6.0.3790.211" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:469"/>
      <state state_ref="oval:org.mitre.oval:ste:505"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:557" version="2" check="at least one" comment="the patch WindowsServer2003-KB885881-x86-enu.exe is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:378"/>
      <state state_ref="oval:org.mitre.oval:ste:504"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3054" version="1" check="at least one" comment="SMTP Enabled" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1746"/>
      <state state_ref="oval:org.mitre.oval:ste:2859"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2760" version="2" comment="Exchange Server 2003 (gold edition) is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1584"/>
      <state state_ref="oval:org.mitre.oval:ste:2581"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2785" version="1" check="at least one" comment="krb5-server version is less than 1.2.7-14" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1597"/>
      <state state_ref="oval:org.mitre.oval:ste:2606"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:3075" version="1" check="at least one" comment="the version of mshtml.dll is less than 5.50.4725.2100" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2880"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:4391" version="1" comment="SharePoint has been upgraded from 2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:2606"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:4505" version="1" comment="the version of Mssdmn.exe is less than 12.0.6028.5000" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1840"/>
      <state state_ref="oval:org.mitre.oval:ste:2960"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:4297" version="1" comment="the version of Mssdmn.exe is less than 12.0.6031.5000" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1840"/>
      <state state_ref="oval:org.mitre.oval:ste:3953"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:567" version="1" check="at least one" comment="the version of mshtml.dll is less than 5.0.3826.2400" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:514"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:566" version="1" check="at least one" comment="the patch kb890923 is installed (Win2K SP4  Hotfix key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:474"/>
      <state state_ref="oval:org.mitre.oval:ste:513"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2786" version="1" check="at least one" comment="the version of mshtml.dll is less than 5.50.4922.900" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2607"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:581" version="1" check="at least one" comment="Patch 108748-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <oval-def:note>CVE-2002-1265</oval-def:note>
      </oval-def:notes>
      <object object_ref="oval:org.mitre.oval:obj:487"/>
      <state state_ref="oval:org.mitre.oval:ste:527"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:580" version="1" check="at least one" comment="Patch 108750-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <oval-def:note>CVE-2002-1265</oval-def:note>
      </oval-def:notes>
      <object object_ref="oval:org.mitre.oval:obj:486"/>
      <state state_ref="oval:org.mitre.oval:ste:526"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:579" version="1" check="at least one" comment="Patch 108752-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <oval-def:note>CVE-2002-1265</oval-def:note>
      </oval-def:notes>
      <object object_ref="oval:org.mitre.oval:obj:485"/>
      <state state_ref="oval:org.mitre.oval:ste:525"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:578" version="1" check="at least one" comment="Patch 106541-14 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <oval-def:note>CVE-2002-1265</oval-def:note>
      </oval-def:notes>
      <object object_ref="oval:org.mitre.oval:obj:291"/>
      <state state_ref="oval:org.mitre.oval:ste:524"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:577" version="1" check="at least one" comment="Patch 106942-09 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <oval-def:note>CVE-2002-1265</oval-def:note>
      </oval-def:notes>
      <object object_ref="oval:org.mitre.oval:obj:484"/>
      <state state_ref="oval:org.mitre.oval:ste:523"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:576" version="1" check="at least one" comment="Patch 107477-03 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <oval-def:note>CVE-2002-1265</oval-def:note>
      </oval-def:notes>
      <object object_ref="oval:org.mitre.oval:obj:483"/>
      <state state_ref="oval:org.mitre.oval:ste:522"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:575" version="1" check="at least one" comment="Patch 108551-03 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <oval-def:note>CVE-2002-1265</oval-def:note>
      </oval-def:notes>
      <object object_ref="oval:org.mitre.oval:obj:482"/>
      <state state_ref="oval:org.mitre.oval:ste:521"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:574" version="1" check="at least one" comment="Patch 108754-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <oval-def:note>CVE-2002-1265</oval-def:note>
      </oval-def:notes>
      <object object_ref="oval:org.mitre.oval:obj:481"/>
      <state state_ref="oval:org.mitre.oval:ste:520"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:573" version="1" check="at least one" comment="Patch 108756-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <oval-def:note>CVE-2002-1265</oval-def:note>
      </oval-def:notes>
      <object object_ref="oval:org.mitre.oval:obj:480"/>
      <state state_ref="oval:org.mitre.oval:ste:519"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:572" version="1" check="at least one" comment="Patch 108758-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <oval-def:note>CVE-2002-1265</oval-def:note>
      </oval-def:notes>
      <object object_ref="oval:org.mitre.oval:obj:479"/>
      <state state_ref="oval:org.mitre.oval:ste:518"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:571" version="1" check="at least one" comment="Patch 108760-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <oval-def:note>CVE-2002-1265</oval-def:note>
      </oval-def:notes>
      <object object_ref="oval:org.mitre.oval:obj:478"/>
      <state state_ref="oval:org.mitre.oval:ste:517"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:570" version="1" check="at least one" comment="Patch 108762-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <oval-def:note>CVE-2002-1265</oval-def:note>
      </oval-def:notes>
      <object object_ref="oval:org.mitre.oval:obj:477"/>
      <state state_ref="oval:org.mitre.oval:ste:516"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:569" version="1" check="at least one" comment="Patch 108764-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <oval-def:note>CVE-2002-1265</oval-def:note>
      </oval-def:notes>
      <object object_ref="oval:org.mitre.oval:obj:476"/>
      <state state_ref="oval:org.mitre.oval:ste:515"/>
    </patch_test>
    <process_test id="oval:org.mitre.oval:tst:568" version="1" check="at least one" comment="rpcbind running" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:475"/>
    </process_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:100449" version="1" comment="OpenSSL 1.0.1 before 1.0.1f" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:30443"/>
      <state state_ref="oval:org.mitre.oval:ste:27720"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:100260" version="1" comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.2.20" check_existence="all_exist" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28098"/>
      <state state_ref="oval:org.mitre.oval:ste:27934"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:100012" version="1" comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.3.4" check_existence="all_exist" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28098"/>
      <state state_ref="oval:org.mitre.oval:ste:27995"/>
    </file_test>
    <package_test check_existence="at_least_one_exists" comment="BIND DNS Name server (SUNWbind) is installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4225" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2397"/>
    </package_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119784-05 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3372" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2175"/>
      <state state_ref="oval:org.mitre.oval:ste:3329"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119783-05 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3255" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2327"/>
      <state state_ref="oval:org.mitre.oval:ste:3329"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 118855-15 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3399" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2735"/>
      <state state_ref="oval:org.mitre.oval:ste:3065"/>
    </patch_test>
    <package_test id="oval:org.mitre.oval:tst:587" version="1" check="all" comment="Sendmail - user (SUNWsndmu) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:489"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:586" version="1" check="all" comment="Patch 107684-08 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:351"/>
      <state state_ref="oval:org.mitre.oval:ste:531"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:585" version="1" check="all" comment="Patch 110615-08 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:350"/>
      <state state_ref="oval:org.mitre.oval:ste:530"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:584" version="1" check="all" comment="Patch 113575-03 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:399"/>
      <state state_ref="oval:org.mitre.oval:ste:529"/>
    </patch_test>
    <process_test id="oval:org.mitre.oval:tst:583" version="1" comment="Sendmail running" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:488"/>
    </process_test>
    <file_test id="oval:org.mitre.oval:tst:590" version="1" check="at least one" comment="the version of mshtml.dll is less than 6.0.2745.2800" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:534"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:589" version="2" check="at least one" comment="the patch kb834707 is installed (Installed Components key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:491"/>
      <state state_ref="oval:org.mitre.oval:ste:533"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:588" version="2" check="at least one" comment="Users not saving encrypted pages to disk  (DisableCachingOfSSLPages)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:490"/>
      <state state_ref="oval:org.mitre.oval:ste:532"/>
    </registry_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 122301-10 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4263" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2120"/>
      <state state_ref="oval:org.mitre.oval:ste:3912"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 117351-48 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4106" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2717"/>
      <state state_ref="oval:org.mitre.oval:ste:3690"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 117350-48 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4094" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2057"/>
      <state state_ref="oval:org.mitre.oval:ste:3690"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 125100-02 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3554" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2037"/>
      <state state_ref="oval:org.mitre.oval:ste:3048"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 125101-02 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3275" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1968"/>
      <state state_ref="oval:org.mitre.oval:ste:3048"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 122300-10 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3262" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2378"/>
      <state state_ref="oval:org.mitre.oval:ste:3912"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 113719-21 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3740" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1920"/>
      <state state_ref="oval:org.mitre.oval:ste:3458"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 113319-27 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3553" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2409"/>
      <state state_ref="oval:org.mitre.oval:ste:3668"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 108993-65 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3523" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1802"/>
      <state state_ref="oval:org.mitre.oval:ste:3341"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 108994-65 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3253" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2521"/>
      <state state_ref="oval:org.mitre.oval:ste:3341"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:49" version="2" comment="Microsoft XML Core Services 5 is installed." check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:47"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:179" version="1" comment="Microsoft XML Core Services 3 is installed." check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:3"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:87" version="2" comment="The version of Msxml5.dll is less than 5.10.2930.0." check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:47"/>
      <state state_ref="oval:org.mitre.oval:ste:199"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:72" version="1" comment="The version of Msxml4.dll is less than 4.20.9839.0." check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:191"/>
      <state state_ref="oval:org.mitre.oval:ste:60"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:34" version="1" comment="The version of Msxml3.dll is less than 8.70.1113.0." check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:3"/>
      <state state_ref="oval:org.mitre.oval:ste:28"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:32" version="1" comment="The version of Msxml6.dll is less than 6.0.3888.0." check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:190"/>
      <state state_ref="oval:org.mitre.oval:ste:150"/>
    </file_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 120068-02 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3727" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2194"/>
      <state state_ref="oval:org.mitre.oval:ste:3439"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 120069-02 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3199" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2584"/>
      <state state_ref="oval:org.mitre.oval:ste:3439"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:605" version="1" comment="the version of dplayx.dll is less than 5.2.3677.144" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:450"/>
      <state state_ref="oval:org.mitre.oval:ste:549"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:604" version="1" comment="DirectX 8.2 Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:499"/>
      <state state_ref="oval:org.mitre.oval:ste:548"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:603" version="1" comment="Patch DirectX82-KB839643-x86-ENU Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:501"/>
      <state state_ref="oval:org.mitre.oval:ste:547"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:602" version="1" comment="the version of dplayx.dll is less than 5.3.0.903" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:450"/>
      <state state_ref="oval:org.mitre.oval:ste:546"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:601" version="1" comment="DirectX 9.0x Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:499"/>
      <state state_ref="oval:org.mitre.oval:ste:545"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:600" version="1" comment="Patch DirectX90-KB839643-x86-ENU Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:500"/>
      <state state_ref="oval:org.mitre.oval:ste:544"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:599" version="1" comment="the version of dplayx.dll is less than 5.1.2600.148" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:450"/>
      <state state_ref="oval:org.mitre.oval:ste:543"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:598" version="1" comment="DirectX 8.1x Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:499"/>
      <state state_ref="oval:org.mitre.oval:ste:542"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:597" version="1" comment="the patch kb839643 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:498"/>
      <state state_ref="oval:org.mitre.oval:ste:541"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:596" version="1" comment="the version of dplayx.dll is less than 5.1.2600.1517" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:450"/>
      <state state_ref="oval:org.mitre.oval:ste:540"/>
    </file_test>
    <uname_test id="oval:org.mitre.oval:tst:3955" version="1" comment="Solaris 10 Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:3839"/>
    </uname_test>
    <isainfo_test id="oval:org.mitre.oval:tst:3884" version="2" comment="system is running in 64-bit mode" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2704"/>
      <state state_ref="oval:org.mitre.oval:ste:3528"/>
    </isainfo_test>
    <uname_test id="oval:org.mitre.oval:tst:3338" version="1" comment="ix86 architecture" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:3040"/>
    </uname_test>
    <patch_test id="oval:org.mitre.oval:tst:3195" version="1" comment="Patch 118844-14 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2090"/>
      <state state_ref="oval:org.mitre.oval:ste:3384"/>
    </patch_test>
    <registry_test id="oval:org.mitre.oval:tst:2352" version="1" comment="Enable Path MTU Discovery is Disabled" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1347"/>
      <state state_ref="oval:org.mitre.oval:ste:2202"/>
    </registry_test>
    <package_test id="oval:org.mitre.oval:tst:608" version="1" comment="Sendmail - root (SUNWsndmr) installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:502"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:607" version="1" check="all" comment="Patch 113575-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:399"/>
      <state state_ref="oval:org.mitre.oval:ste:551"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 109025-07 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4230" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2103"/>
      <state state_ref="oval:org.mitre.oval:ste:3219"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 118844-24 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4200" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1833"/>
      <state state_ref="oval:org.mitre.oval:ste:3701"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 117350-49 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3903" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1971"/>
      <state state_ref="oval:org.mitre.oval:ste:3076"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 117351-49 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3841" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2227"/>
      <state state_ref="oval:org.mitre.oval:ste:3076"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 118822-24 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3780" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2665"/>
      <state state_ref="oval:org.mitre.oval:ste:3701"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 109026-08 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3708" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2542"/>
      <state state_ref="oval:org.mitre.oval:ste:3726"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 122301-11 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3697" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2346"/>
      <state state_ref="oval:org.mitre.oval:ste:3301"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 122300-11 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3307" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2088"/>
      <state state_ref="oval:org.mitre.oval:ste:3301"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:4523" version="1" comment="Patch 127738-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1888"/>
      <state state_ref="oval:org.mitre.oval:ste:3658"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:4494" version="1" comment="Patch 127737-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2323"/>
      <state state_ref="oval:org.mitre.oval:ste:3658"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:4375" version="1" comment="Patch 117472-04 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2595"/>
      <state state_ref="oval:org.mitre.oval:ste:3745"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:4308" version="1" comment="Patch 109454-06 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2723"/>
      <state state_ref="oval:org.mitre.oval:ste:3900"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:4095" version="1" comment="Patch 109455-06 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1998"/>
      <state state_ref="oval:org.mitre.oval:ste:3900"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3569" version="1" comment="Patch 117471-04 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2294"/>
      <state state_ref="oval:org.mitre.oval:ste:3745"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:2792" version="1" comment="the version of itircl.dll is less than 5.2.3790.80" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1531"/>
      <state state_ref="oval:org.mitre.oval:ste:2612"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2791" version="1" comment="Patch KB825119 Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1600"/>
      <state state_ref="oval:org.mitre.oval:ste:2611"/>
    </registry_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 118997-09 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3445" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2755"/>
      <state state_ref="oval:org.mitre.oval:ste:3258"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 118833-18 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3220" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2190"/>
      <state state_ref="oval:org.mitre.oval:ste:3140"/>
    </patch_test>
    <package_test id="oval:org.mitre.oval:tst:615" version="1" check="all" comment="Samba (SUNWsmbar) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:507"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:614" version="1" check="all" comment="Patch 114684-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:506"/>
      <state state_ref="oval:org.mitre.oval:ste:556"/>
    </patch_test>
    <inetd_test id="oval:org.mitre.oval:tst:613" version="1" check="all" comment="inetd.conf contains smbd" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:505"/>
      <state state_ref="oval:org.mitre.oval:ste:555"/>
    </inetd_test>
    <file_test id="oval:org.mitre.oval:tst:2793" version="1" comment="the version of mshtml.dll is less than 5.0.3819.300" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2613"/>
    </file_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 114265-13 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4525" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2596"/>
      <state state_ref="oval:org.mitre.oval:ste:2969"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 112837-14 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4470" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1935"/>
      <state state_ref="oval:org.mitre.oval:ste:3033"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 109327-20 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4431" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2513"/>
      <state state_ref="oval:org.mitre.oval:ste:3321"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 109326-20 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4282" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2325"/>
      <state state_ref="oval:org.mitre.oval:ste:3321"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:99972" version="1" comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.2.18" check_existence="all_exist" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28098"/>
      <state state_ref="oval:org.mitre.oval:ste:28017"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:99957" version="1" comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.1.28" check_existence="all_exist" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28098"/>
      <state state_ref="oval:org.mitre.oval:ste:27873"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:99857" version="1" comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.2.0" check_existence="all_exist" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28098"/>
      <state state_ref="oval:org.mitre.oval:ste:27904"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:100166" version="1" comment="Check if Oracle VM VirtualBox version is less than  or equals to 4.3.2" check_existence="all_exist" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28098"/>
      <state state_ref="oval:org.mitre.oval:ste:27476"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:100120" version="1" comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.3.0" check_existence="all_exist" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28098"/>
      <state state_ref="oval:org.mitre.oval:ste:27456"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:100117" version="1" comment="Check if Oracle VM VirtualBox version is less than or equals to 3.2.18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28098"/>
      <state state_ref="oval:org.mitre.oval:ste:27928"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:100096" version="1" comment="Check if Oracle VM VirtualBox version is less than or equals to 4.0.20" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28098"/>
      <state state_ref="oval:org.mitre.oval:ste:27016"/>
    </file_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 120037-07 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4079" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2790"/>
      <state state_ref="oval:org.mitre.oval:ste:3223"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 126374-02 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3728" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2707"/>
      <state state_ref="oval:org.mitre.oval:ste:3439"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 112960-40 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3433" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2502"/>
      <state state_ref="oval:org.mitre.oval:ste:3568"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 120036-07 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3274" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2224"/>
      <state state_ref="oval:org.mitre.oval:ste:3223"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 126373-02 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3188" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2023"/>
      <state state_ref="oval:org.mitre.oval:ste:3439"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 114242-27 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3171" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2286"/>
      <state state_ref="oval:org.mitre.oval:ste:3668"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:616" version="1" comment="Patch 112908-15 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:442"/>
      <state state_ref="oval:org.mitre.oval:ste:557"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:617" version="1" check="at least one" comment="the version of inetcomm.dll is less than 5.50.4942.400" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:385"/>
      <state state_ref="oval:org.mitre.oval:ste:558"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2798" version="1" check="at least one" comment="the version of msgsvc.dll is less than 5.0.2195.6861" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1571"/>
      <state state_ref="oval:org.mitre.oval:ste:2618"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2797" version="2" check="at least one" comment="the version of wkssvc.dll is less than 5.0.2195.6861" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1448"/>
      <state state_ref="oval:org.mitre.oval:ste:2617"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2796" version="1" comment="the patch q828035 is installed (Hotfix key)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1602"/>
      <state state_ref="oval:org.mitre.oval:ste:2616"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2795" version="1" comment="the messenger service is enabled" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1601"/>
      <state state_ref="oval:org.mitre.oval:ste:2615"/>
    </registry_test>
    <patch_test id="oval:org.mitre.oval:tst:3655" version="1" check_existence="at_least_one_exists" check="at least one" comment="Patch 1119999-01 or later installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1837"/>
      <state state_ref="oval:org.mitre.oval:ste:3275"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3448" version="1" check_existence="at_least_one_exists" check="at least one" comment="Patch 119998-01 or later installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2441"/>
      <state state_ref="oval:org.mitre.oval:ste:3275"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:620" version="1" check="at least one" comment="the version of gdi32.dll is less than 5.0.2195.6945" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:279"/>
      <state state_ref="oval:org.mitre.oval:ste:560"/>
    </file_test>
    <uname_test id="oval:org.mitre.oval:tst:3901" version="2" comment="HP-UX B.11.23" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:3324"/>
    </uname_test>
    <patch_test id="oval:org.mitre.oval:tst:3439" version="2" comment="Patch PHNE_32606 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:2081"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:2762" version="1" comment="the version of mshtml.dll is less than 5.50.4943.400" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2583"/>
    </file_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 116966-21 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4061" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2205"/>
      <state state_ref="oval:org.mitre.oval:ste:3458"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 114344-20 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4036" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2490"/>
      <state state_ref="oval:org.mitre.oval:ste:3774"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119435-10 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3968" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1989"/>
      <state state_ref="oval:org.mitre.oval:ste:3141"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119075-13 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3800" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2061"/>
      <state state_ref="oval:org.mitre.oval:ste:3350"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 116965-22 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3455" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2171"/>
      <state state_ref="oval:org.mitre.oval:ste:3484"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119076-11 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3217" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1836"/>
      <state state_ref="oval:org.mitre.oval:ste:3282"/>
    </patch_test>
    <textfilecontent_test id="oval:org.mitre.oval:tst:4548" version="1" check="all" check_existence="at_least_one_exists" comment="Solaris auditing is enabled" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:2173"/>
    </textfilecontent_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 127112-01 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4336" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2557"/>
      <state state_ref="oval:org.mitre.oval:ste:3010"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 127111-01 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3953" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2696"/>
      <state state_ref="oval:org.mitre.oval:ste:3010"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:623" version="1" check="all" comment="Patch 106938-07 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:313"/>
      <state state_ref="oval:org.mitre.oval:ste:563"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:622" version="1" check="all" comment="Patch 109326-10 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:312"/>
      <state state_ref="oval:org.mitre.oval:ste:562"/>
    </patch_test>
    <package_test id="oval:org.mitre.oval:tst:2626" version="1" check="all" comment="Internet Domain Name Server (BIND, SUNWinamd) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1497"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:2625" version="1" check="all" comment="Patch 112970-03 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:311"/>
      <state state_ref="oval:org.mitre.oval:ste:2453"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3940" version="2" comment="SUSE Linux 10.1 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1798"/>
      <state state_ref="oval:org.mitre.oval:ste:3286"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3588" version="4" comment="SUSE Linux Enterprise Desktop 10 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1903"/>
      <state state_ref="oval:org.mitre.oval:ste:3857"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3669" version="4" comment="SUSE Linux Enterprise Server 10 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2240"/>
      <state state_ref="oval:org.mitre.oval:ste:3857"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3589" version="2" comment="openSUSE 10.2 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2455"/>
      <state state_ref="oval:org.mitre.oval:ste:3836"/>
    </rpminfo_test>
    <uname_test id="oval:org.mitre.oval:tst:4278" version="2" comment="ppc architecture" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:4167"/>
    </uname_test>
    <rpminfo_test check="all" comment="Package mono-jscript version-release is less than 1.1.18.1-12.2" id="oval:org.mitre.oval:tst:4162" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2537"/>
      <state state_ref="oval:org.mitre.oval:ste:3584"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-locale-extras version-release is less than 1.1.13.8-2.15" id="oval:org.mitre.oval:tst:4127" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2666"/>
      <state state_ref="oval:org.mitre.oval:ste:3682"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-data version-release is less than 1.1.18.1-12.2" id="oval:org.mitre.oval:tst:4120" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2334"/>
      <state state_ref="oval:org.mitre.oval:ste:3584"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-core-32bit version-release is less than 1.1.13.8-2.15" id="oval:org.mitre.oval:tst:4108" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2670"/>
      <state state_ref="oval:org.mitre.oval:ste:3682"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:4057" version="1" comment="mono-extras is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2211"/>
      <state state_ref="oval:org.mitre.oval:ste:4566"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-data version-release is less than 1.1.13.8-2.15" id="oval:org.mitre.oval:tst:4044" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2334"/>
      <state state_ref="oval:org.mitre.oval:ste:3682"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-basic version-release is less than 1.1.13.8-2.15" id="oval:org.mitre.oval:tst:4038" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1793"/>
      <state state_ref="oval:org.mitre.oval:ste:3622"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-extras version-release is less than 1.1.13.8-2.15" id="oval:org.mitre.oval:tst:4032" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2211"/>
      <state state_ref="oval:org.mitre.oval:ste:3682"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-web version-release is less than 1.1.18.1-12.2" id="oval:org.mitre.oval:tst:3999" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2285"/>
      <state state_ref="oval:org.mitre.oval:ste:3584"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-core-32bit version-release is less than 1.1.18.1-12.2" id="oval:org.mitre.oval:tst:3977" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2670"/>
      <state state_ref="oval:org.mitre.oval:ste:3584"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-data-oracle version-release is less than 1.1.18.1-12.2" id="oval:org.mitre.oval:tst:3932" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2673"/>
      <state state_ref="oval:org.mitre.oval:ste:3584"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3866" version="1" comment="mono-data-sqlite is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2117"/>
      <state state_ref="oval:org.mitre.oval:ste:4566"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-core version-release is less than 1.1.18.1-12.2" id="oval:org.mitre.oval:tst:3848" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1917"/>
      <state state_ref="oval:org.mitre.oval:ste:3584"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3838" version="1" comment="mono-web is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2285"/>
      <state state_ref="oval:org.mitre.oval:ste:4566"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package bytefx-data-mysql version-release is less than 1.1.13.8-2.15" id="oval:org.mitre.oval:tst:3816" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:58"/>
      <state state_ref="oval:org.mitre.oval:ste:3682"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-jscript version-release is less than 1.1.13.8-2.15" id="oval:org.mitre.oval:tst:3801" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2537"/>
      <state state_ref="oval:org.mitre.oval:ste:3682"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3776" version="1" comment="mono-core is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1917"/>
      <state state_ref="oval:org.mitre.oval:ste:4566"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3766" version="1" comment="mono-devel is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2553"/>
      <state state_ref="oval:org.mitre.oval:ste:4566"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-locale-extras version-release is less than 1.1.18.1-12.2" id="oval:org.mitre.oval:tst:3743" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2666"/>
      <state state_ref="oval:org.mitre.oval:ste:3584"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-data-sqlite version-release is less than 1.1.13.8-2.15" id="oval:org.mitre.oval:tst:3741" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2117"/>
      <state state_ref="oval:org.mitre.oval:ste:3682"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3718" version="1" comment="mono-data-sybase is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2429"/>
      <state state_ref="oval:org.mitre.oval:ste:4566"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-devel version-release is less than 1.1.13.8-2.15" id="oval:org.mitre.oval:tst:3706" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2553"/>
      <state state_ref="oval:org.mitre.oval:ste:3682"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-extras version-release is less than 1.1.18.1-12.2" id="oval:org.mitre.oval:tst:3671" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2211"/>
      <state state_ref="oval:org.mitre.oval:ste:3584"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3632" version="1" comment="mono-nunit is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2166"/>
      <state state_ref="oval:org.mitre.oval:ste:4566"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package ibm-data-db2 version-release is less than 1.1.18.1-12.2" id="oval:org.mitre.oval:tst:3613" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:168"/>
      <state state_ref="oval:org.mitre.oval:ste:3584"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3602" version="1" comment="mono-data is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2334"/>
      <state state_ref="oval:org.mitre.oval:ste:4566"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-data-firebird version-release is less than 1.1.18.1-12.2" id="oval:org.mitre.oval:tst:3601" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2478"/>
      <state state_ref="oval:org.mitre.oval:ste:3584"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-nunit version-release is less than 1.1.18.1-12.2" id="oval:org.mitre.oval:tst:3596" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2166"/>
      <state state_ref="oval:org.mitre.oval:ste:3584"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3595" version="1" comment="mono-basic is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1793"/>
      <state state_ref="oval:org.mitre.oval:ste:4668"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package bytefx-data-mysql version-release is less than 1.1.18.1-12.2" id="oval:org.mitre.oval:tst:3563" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:58"/>
      <state state_ref="oval:org.mitre.oval:ste:3584"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-devel version-release is less than 1.1.18.1-12.2" id="oval:org.mitre.oval:tst:3542" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2553"/>
      <state state_ref="oval:org.mitre.oval:ste:3584"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-core version-release is less than 1.1.13.8-2.15" id="oval:org.mitre.oval:tst:3511" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1917"/>
      <state state_ref="oval:org.mitre.oval:ste:3682"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-winforms version-release is less than 1.1.18.1-12.2" id="oval:org.mitre.oval:tst:3496" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1992"/>
      <state state_ref="oval:org.mitre.oval:ste:3584"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-data-sybase version-release is less than 1.1.13.8-2.15" id="oval:org.mitre.oval:tst:3485" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2429"/>
      <state state_ref="oval:org.mitre.oval:ste:3682"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package ibm-data-db2 version-release is less than 1.1.13.8-2.15" id="oval:org.mitre.oval:tst:3476" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:168"/>
      <state state_ref="oval:org.mitre.oval:ste:3682"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3447" version="1" comment="ibm-data-db2 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:168"/>
      <state state_ref="oval:org.mitre.oval:ste:4566"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3444" version="1" comment="mono-jscript is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2537"/>
      <state state_ref="oval:org.mitre.oval:ste:4566"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-data-firebird version-release is less than 1.1.13.8-2.15" id="oval:org.mitre.oval:tst:3441" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2478"/>
      <state state_ref="oval:org.mitre.oval:ste:3682"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-winforms version-release is less than 1.1.13.8-2.15" id="oval:org.mitre.oval:tst:3411" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1992"/>
      <state state_ref="oval:org.mitre.oval:ste:3682"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-data-postgresql version-release is less than 1.1.13.8-2.15" id="oval:org.mitre.oval:tst:3406" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2546"/>
      <state state_ref="oval:org.mitre.oval:ste:3682"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3345" version="1" comment="mono-winforms is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1992"/>
      <state state_ref="oval:org.mitre.oval:ste:4566"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-data-postgresql version-release is less than 1.1.18.1-12.2" id="oval:org.mitre.oval:tst:3314" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2546"/>
      <state state_ref="oval:org.mitre.oval:ste:3584"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3308" version="1" comment="mono-core-32bit is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2670"/>
      <state state_ref="oval:org.mitre.oval:ste:2953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3301" version="1" comment="mono-locale-extras is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2666"/>
      <state state_ref="oval:org.mitre.oval:ste:4566"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-data-oracle version-release is less than 1.1.13.8-2.15" id="oval:org.mitre.oval:tst:3299" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2673"/>
      <state state_ref="oval:org.mitre.oval:ste:3682"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3297" version="1" comment="mono-data-oracle is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2673"/>
      <state state_ref="oval:org.mitre.oval:ste:4566"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3283" version="1" comment="mono-data-postgresql is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2546"/>
      <state state_ref="oval:org.mitre.oval:ste:4566"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-data-sqlite version-release is less than 1.1.18.1-12.2" id="oval:org.mitre.oval:tst:3280" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2117"/>
      <state state_ref="oval:org.mitre.oval:ste:3584"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-web version-release is less than 1.1.13.8-2.15" id="oval:org.mitre.oval:tst:3277" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2285"/>
      <state state_ref="oval:org.mitre.oval:ste:3682"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-data-sybase version-release is less than 1.1.18.1-12.2" id="oval:org.mitre.oval:tst:3221" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2429"/>
      <state state_ref="oval:org.mitre.oval:ste:3584"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-basic version-release is less than 1.1.18-9.1" id="oval:org.mitre.oval:tst:3184" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1793"/>
      <state state_ref="oval:org.mitre.oval:ste:3622"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3169" version="1" comment="mono-data-firebird is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2478"/>
      <state state_ref="oval:org.mitre.oval:ste:4566"/>
    </rpminfo_test>
    <rpminfo_test check="all" comment="Package mono-nunit version-release is less than 1.1.13.8-2.15" id="oval:org.mitre.oval:tst:3165" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2166"/>
      <state state_ref="oval:org.mitre.oval:ste:3682"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3161" version="1" comment="bytefx-data-mysql is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:58"/>
      <state state_ref="oval:org.mitre.oval:ste:4566"/>
    </rpminfo_test>
    <uname_test id="oval:org.mitre.oval:tst:1547" version="1" comment="ix86 architecture" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:1401"/>
    </uname_test>
    <registry_test id="oval:org.mitre.oval:tst:90023" version="1" comment="Check if Visual Studio Team Foundation Server is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28866"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:89989" version="1" comment="Check if the version of Microsoft.AspNet.SignalR.Core.dll is less than 1.1.21022.0" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:29074"/>
      <state state_ref="oval:org.mitre.oval:ste:25547"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:99831" version="1" comment="Check if Msoserver.dll is present" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:30360"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:100108" version="1" comment="Check for the existence of SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Office15.WacServer" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:30150"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:90029" version="1" comment="Check if the version of ascalc.dll is less than 14.0.7011.1000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28661"/>
      <state state_ref="oval:org.mitre.oval:ste:25427"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:89884" version="1" comment="Check if the version of ascalc.dll is less than 15.0.4545.1000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:29038"/>
      <state state_ref="oval:org.mitre.oval:ste:25327"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:100103" version="1" comment="Msoserver.Dll is less than 15.0.4551.1007" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:30227"/>
      <state state_ref="oval:org.mitre.oval:ste:27906"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:625" version="1" check="at least one" comment="the version of mshtml.dll is less than 5.0.3821.2800" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:565"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:624" version="1" check="at least one" comment="the patch kb834707-ie501sp3 is installed (Hotfix key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:509"/>
      <state state_ref="oval:org.mitre.oval:ste:564"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2800" version="1" comment="the version of mshtml.dll is less than 6.0.3790.191" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2620"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2799" version="1" comment="the patch kb867801 is installed (Hotfix key)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1603"/>
      <state state_ref="oval:org.mitre.oval:ste:2619"/>
    </registry_test>
    <patch_test id="oval:org.mitre.oval:tst:630" version="1" check="at least one" comment="Patch 112908-13 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:442"/>
      <state state_ref="oval:org.mitre.oval:ste:568"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:629" version="1" check="at least one" comment="Patch 112908-12 installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:442"/>
      <state state_ref="oval:org.mitre.oval:ste:567"/>
    </patch_test>
    <textfilecontent_test id="oval:org.mitre.oval:tst:628" version="1" check="all" comment="/etc/pam.conf is configured to use pam_krb5 as an 'auth' module and the debug feature of pam_krb5 is enabled" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:511"/>
    </textfilecontent_test>
    <textfilecontent_test id="oval:org.mitre.oval:tst:627" version="1" check="all" comment="/etc/syslog.conf is configured to log &quot;debug&quot; level messages for at least daemon" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:510"/>
    </textfilecontent_test>
    <registry_test id="oval:org.mitre.oval:tst:3063" version="3" comment="Internet Explorer 5.01 Service Pack 2 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:2868"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2803" version="1" comment="the version of mshtml.dll is less than 5.0.3532.300" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2623"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:7813" version="1" comment="devenv.exe exists as a Microsoft Visual Studio 2002 component" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:5503"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:3317" version="2" comment="Service Pack 1 for Microsoft Visual Studio .NET 2002 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:10"/>
      <state state_ref="oval:org.mitre.oval:ste:3827"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:80280" version="1" comment="Check if HKLM\Software\Microsoft\VisualStudio\8.0!InstallDir exists" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:5581"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:7741" version="1" comment="devenv.exe exists as a Microsoft Visual Studio 2005 component" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:5602"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:80757" version="1" comment="Registry key specifying where Microsoft Visual Studio 2003 exists" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:5745"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:7817" version="1" comment="devenv.exe exists as a Microsoft Visual Studio 2003 component" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:5682"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:4172" version="2" check="at least one" comment="crpe32.dll version is less than 9.1.2.1871" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:2628"/>
      <state state_ref="oval:org.mitre.oval:ste:2972"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3483" version="2" check="at least one" comment="crpe32.dll version is less than 10.2.0.1222" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:2628"/>
      <state state_ref="oval:org.mitre.oval:ste:3261"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:632" version="1" check="at least one" comment="the version of shell32.dll is less than 5.0.3900.7009" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:253"/>
      <state state_ref="oval:org.mitre.oval:ste:570"/>
    </file_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 124998-01 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4023" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2330"/>
      <state state_ref="oval:org.mitre.oval:ste:2958"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 124997-01 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3829" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2473"/>
      <state state_ref="oval:org.mitre.oval:ste:2958"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 123368-01 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3805" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2261"/>
      <state state_ref="oval:org.mitre.oval:ste:2958"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 111505-02 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3755" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1813"/>
      <state state_ref="oval:org.mitre.oval:ste:3439"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 111504-02 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3623" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2201"/>
      <state state_ref="oval:org.mitre.oval:ste:3439"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 123369-01 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3273" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2459"/>
      <state state_ref="oval:org.mitre.oval:ste:2958"/>
    </patch_test>
    <textfilecontent_test id="oval:org.mitre.oval:tst:4148" version="1" check="all" comment="Gnome (minor version is equal to 0) Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:2304"/>
    </textfilecontent_test>
    <patch_test id="oval:org.mitre.oval:tst:3700" version="1" check="at least one" comment="Patch 115159-03 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2027"/>
      <state state_ref="oval:org.mitre.oval:ste:3348"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3643" version="1" check="at least one" comment="Patch 115298-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2290"/>
      <state state_ref="oval:org.mitre.oval:ste:3323"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3586" version="1" check="at least one" comment="Patch 115158-03 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2662"/>
      <state state_ref="oval:org.mitre.oval:ste:3348"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3440" version="1" check="at least one" comment="Patch 115299-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2432"/>
      <state state_ref="oval:org.mitre.oval:ste:3323"/>
    </patch_test>
    <textfilecontent_test id="oval:org.mitre.oval:tst:3407" version="1" check="all" comment="Gnome (major version is equal to 2) Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:2413"/>
    </textfilecontent_test>
    <file_test id="oval:org.mitre.oval:tst:633" version="2" check="all" comment="cdoex.dll is less than 6.5.7233.69" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:513"/>
      <state state_ref="oval:org.mitre.oval:ste:571"/>
    </file_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 112786-42 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3965" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2775"/>
      <state state_ref="oval:org.mitre.oval:ste:3514"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 112785-53 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3734" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2337"/>
      <state state_ref="oval:org.mitre.oval:ste:3156"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119068-02 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3473" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2016"/>
      <state state_ref="oval:org.mitre.oval:ste:3439"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119067-02 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3413" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2590"/>
      <state state_ref="oval:org.mitre.oval:ste:3439"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3934" version="1" check="at least one" comment="Patch 121288-03 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1803"/>
      <state state_ref="oval:org.mitre.oval:ste:3221"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3679" version="1" check="at least one" comment="Patch 121289-04 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2579"/>
      <state state_ref="oval:org.mitre.oval:ste:3184"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:635" version="1" check="all" comment="Patch 112300-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:515"/>
      <state state_ref="oval:org.mitre.oval:ste:573"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:634" version="1" check="all" comment="Patch 111085-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:514"/>
      <state state_ref="oval:org.mitre.oval:ste:572"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 115553-28 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4284" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2317"/>
      <state state_ref="oval:org.mitre.oval:ste:3310"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 115554-24 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4255" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2476"/>
      <state state_ref="oval:org.mitre.oval:ste:3831"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 125124-01 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4246" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2132"/>
      <state state_ref="oval:org.mitre.oval:ste:3510"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 125123-01 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3599" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2540"/>
      <state state_ref="oval:org.mitre.oval:ste:3510"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 109896-35 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3285" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2386"/>
      <state state_ref="oval:org.mitre.oval:ste:3718"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:638" version="1" check="at least one" comment="the version of cdo.dll is less than 5.5.2558.10" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:518"/>
      <state state_ref="oval:org.mitre.oval:ste:575"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:637" version="2" check="at least one" comment="the  patch kb842436 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:517"/>
      <state state_ref="oval:org.mitre.oval:ste:574"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:636" version="2" check="at least one" comment="Outlook Web Access exists" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:516"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2492" version="2" check="at least one" comment="Exchange 5.5 with SP4 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:732"/>
      <state state_ref="oval:org.mitre.oval:ste:2333"/>
    </registry_test>
    <patch_test id="oval:org.mitre.oval:tst:3818" version="1" check="at least one" check_existence="at_least_one_exists" comment="Patch 113241-13 or later installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2307"/>
      <state state_ref="oval:org.mitre.oval:ste:3480"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3803" version="1" check="at least one" check_existence="at_least_one_exists" comment="Patch 125279-02 or later installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2270"/>
      <state state_ref="oval:org.mitre.oval:ste:3607"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3725" version="1" check="at least one" check_existence="at_least_one_exists" comment="Patch 125280-02 or later installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1891"/>
      <state state_ref="oval:org.mitre.oval:ste:3607"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3656" version="1" check="at least one" check_existence="at_least_one_exists" comment="Patch 109354-26 or later installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2462"/>
      <state state_ref="oval:org.mitre.oval:ste:3167"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3474" version="1" check="at least one" check_existence="at_least_one_exists" comment="Patch 109355-25 or later installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2745"/>
      <state state_ref="oval:org.mitre.oval:ste:3273"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3196" version="1" check="at least one" check_existence="at_least_one_exists" comment="Patch 113240-13 or later installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2518"/>
      <state state_ref="oval:org.mitre.oval:ste:3480"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:642" version="1" check="at least one" comment="Patch 106938-08 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:313"/>
      <state state_ref="oval:org.mitre.oval:ste:578"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:641" version="1" check="at least one" comment="Patch 109326-13 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:312"/>
      <state state_ref="oval:org.mitre.oval:ste:577"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:640" version="1" check="at least one" comment="Patch 112970-06 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:311"/>
      <state state_ref="oval:org.mitre.oval:ste:576"/>
    </patch_test>
    <package_test id="oval:org.mitre.oval:tst:639" version="1" check="all" comment="Core Solaris (SUNWcsu/SUNWcsxu) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <oval-def:note>SUNWcsu = 32bit, SUNWcsxu = 64bit</oval-def:note>
      </oval-def:notes>
      <object object_ref="oval:org.mitre.oval:obj:519"/>
    </package_test>
    <process_test id="oval:org.mitre.oval:tst:2624" version="1" comment="in.named running" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1496"/>
    </process_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119254-26 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3525" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2185"/>
      <state state_ref="oval:org.mitre.oval:ste:3629"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119255-26 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3358" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2126"/>
      <state state_ref="oval:org.mitre.oval:ste:3629"/>
    </patch_test>
    <registry_test id="oval:org.mitre.oval:tst:89964" version="1" comment="Check if Exchange Server 2013 Cumulative Update 3 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:26779"/>
      <state state_ref="oval:org.mitre.oval:ste:25628"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:89992" version="1" comment="Check if the version of exsetup.exe is less than 15.0.775.41" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:26548"/>
      <state state_ref="oval:org.mitre.oval:ste:25503"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:89888" version="1" comment="Check if the version of exsetup.exe is less than 15.0.712.31" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:26548"/>
      <state state_ref="oval:org.mitre.oval:ste:24953"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:89886" version="1" comment="Check if the version of exsetup.exe is less than 8.3.342.4" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24081"/>
      <state state_ref="oval:org.mitre.oval:ste:25434"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:89845" version="1" comment="Check if the version of exsetup.exe is less than 14.3.174.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24092"/>
      <state state_ref="oval:org.mitre.oval:ste:25649"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:89663" version="1" comment="Check if the version of exsetup.exe is less than 14.2.390.3" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24092"/>
      <state state_ref="oval:org.mitre.oval:ste:25043"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:648" version="1" comment="Kerberos 5 installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:521"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:647" version="1" check="at least one" comment="Patch 112908-16 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:442"/>
      <state state_ref="oval:org.mitre.oval:ste:582"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:646" version="1" check="at least one" comment="Patch 112536-05 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:296"/>
      <state state_ref="oval:org.mitre.oval:ste:581"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:645" version="1" check="at least one" comment="Patch 112237-11 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:447"/>
      <state state_ref="oval:org.mitre.oval:ste:580"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:644" version="1" check="at least one" comment="Patch 112390-09 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:446"/>
      <state state_ref="oval:org.mitre.oval:ste:579"/>
    </patch_test>
    <textfilecontent_test id="oval:org.mitre.oval:tst:643" version="1" check="all" comment="/etc/krb5/krb5.conf is configured with explicit or rules-based mapping" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:520"/>
    </textfilecontent_test>
    <registry_test id="oval:org.mitre.oval:tst:2904" version="2" check="at least one" comment="the patch js56nen.exe (5.6.0.8513 version) is installed" check_existence="at_least_one_exists" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1666"/>
      <state state_ref="oval:org.mitre.oval:ste:2720"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:3083" version="1" check="at least one" comment="the version of rpcss.dll is less than 5.0.2195.6810" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:709"/>
      <state state_ref="oval:org.mitre.oval:ste:2888"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3151" version="1" check="at least one" comment="balsa version is less than 2.0.6-2" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1791"/>
      <state state_ref="oval:org.mitre.oval:ste:2947"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:3150" version="1" check="at least one" comment="/usr/bin/balsa is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1790"/>
      <state state_ref="oval:org.mitre.oval:ste:2946"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3149" version="1" check="at least one" comment="/usr/bin/balsa is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1790"/>
      <state state_ref="oval:org.mitre.oval:ste:2945"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3148" version="1" check="at least one" comment="/usr/bin/balsa is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1790"/>
      <state state_ref="oval:org.mitre.oval:ste:2944"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:651" version="2" check="all" comment="cdoex.dll is less than 6.5.7650.29" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:513"/>
      <state state_ref="oval:org.mitre.oval:ste:585"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2816" version="2" check="at least one" comment="Terminal Server Version" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1612"/>
      <state state_ref="oval:org.mitre.oval:ste:2636"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2815" version="1" check="at least one" comment="File %windir%\system32\drivers\rdpwd.sys version is less than 5.0.2195.5880" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:220"/>
      <state state_ref="oval:org.mitre.oval:ste:2635"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2814" version="1" check="at least one" comment="Patch Q324380 installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1611"/>
      <state state_ref="oval:org.mitre.oval:ste:2634"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2813" version="1" check="at least one" comment="RDP Enabled" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1610"/>
      <state state_ref="oval:org.mitre.oval:ste:2633"/>
    </registry_test>
    <patch_test id="oval:org.mitre.oval:tst:4460" version="1" comment="Patch 127751-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2394"/>
      <state state_ref="oval:org.mitre.oval:ste:3658"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:4419" version="1" comment="Patch 114154-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2231"/>
      <state state_ref="oval:org.mitre.oval:ste:3070"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3534" version="1" comment="Patch 117419-03 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2093"/>
      <state state_ref="oval:org.mitre.oval:ste:3105"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:656" version="1" check="at least one" comment="Patch 116973-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:217"/>
      <state state_ref="oval:org.mitre.oval:ste:588"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:655" version="1" check="at least one" comment="Patch 113146-05 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:215"/>
      <state state_ref="oval:org.mitre.oval:ste:587"/>
    </patch_test>
    <package_test id="oval:org.mitre.oval:tst:653" version="1" comment="Apache (SUNWapchu) installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:525"/>
    </package_test>
    <registry_test id="oval:org.mitre.oval:tst:2841" version="1" comment="Patch WindowsXP-KB823182-x86-ENU Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1629"/>
      <state state_ref="oval:org.mitre.oval:ste:2660"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2840" version="1" comment="downloading of signed ActiveX controls is enabled for the local machine" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1628"/>
      <state state_ref="oval:org.mitre.oval:ste:2659"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2839" version="1" comment="downloading of signed ActiveX controls is enabled for the current user" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1627"/>
      <state state_ref="oval:org.mitre.oval:ste:2658"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2817" version="1" check="at least one" comment="File %windir%\system32\cryptui.dll version is less than 5.131.2195.6758" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1613"/>
      <state state_ref="oval:org.mitre.oval:ste:2637"/>
    </file_test>
    <package_test id="oval:org.mitre.oval:tst:661" version="1" check="all" comment="FTP Server - Usr (SUNWftpu) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:530"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:660" version="1" check="all" comment="Patch 114564-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:529"/>
      <state state_ref="oval:org.mitre.oval:ste:592"/>
    </patch_test>
    <inetd_test id="oval:org.mitre.oval:tst:659" version="2" check="all" comment="inetd.conf contains in.ftpd" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:528"/>
      <state state_ref="oval:org.mitre.oval:ste:591"/>
    </inetd_test>
    <registry_test id="oval:org.mitre.oval:tst:2990" version="1" check="at least one" comment="Windows 2000 Security Roll-up 1 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1710"/>
      <state state_ref="oval:org.mitre.oval:ste:2803"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2820" version="1" check="at least one" comment="File %windir%\system32\idq.dll version is less than 5.0.2195.3645" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1616"/>
      <state state_ref="oval:org.mitre.oval:ste:2640"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2819" version="1" check="at least one" comment="Patch Q300972 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1615"/>
      <state state_ref="oval:org.mitre.oval:ste:2639"/>
    </registry_test>
    <metabase_test id="oval:org.mitre.oval:tst:2818" version="2" check="at least one" comment="idq.dll mapping exists" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1552"/>
      <state state_ref="oval:org.mitre.oval:ste:2638"/>
    </metabase_test>
    <patch_test id="oval:org.mitre.oval:tst:3373" version="1" check="at least one" comment="Patch 114435-12 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2127"/>
      <state state_ref="oval:org.mitre.oval:ste:3157"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3350" version="1" check="at least one" comment="Patch 113451-13 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2191"/>
      <state state_ref="oval:org.mitre.oval:ste:3383"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:3233" version="1" check="at least one" comment="/etc/inet/ike/config exists" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2772"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:664" version="1" comment="the version of hhctrl.ocx is less than 5.2.3790.1280" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:531"/>
      <state state_ref="oval:org.mitre.oval:ste:595"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:4073" version="1" check="at least one" comment="Patch 116960-16 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2408"/>
      <state state_ref="oval:org.mitre.oval:ste:3457"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3914" version="1" check="at least one" comment="Patch 113318-29 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2433"/>
      <state state_ref="oval:org.mitre.oval:ste:3253"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3605" version="1" check="at least one" comment="Patch 117468-15 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2005"/>
      <state state_ref="oval:org.mitre.oval:ste:3421"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3570" version="1" check="at least one" comment="Patch 116959-16 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1955"/>
      <state state_ref="oval:org.mitre.oval:ste:3457"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3414" version="1" check="at least one" comment="Patch 124259-04 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2095"/>
      <state state_ref="oval:org.mitre.oval:ste:3062"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3213" version="1" check="at least one" comment="Patch 124258-04 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2351"/>
      <state state_ref="oval:org.mitre.oval:ste:3062"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:669" version="1" check="at least one" comment="the version of inetcomm.dll is less than 6.0.2800.1441" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:385"/>
      <state state_ref="oval:org.mitre.oval:ste:600"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:668" version="3" check="at least one" comment="the patch kb823353 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:533"/>
      <state state_ref="oval:org.mitre.oval:ste:599"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:667" version="2" check="at least one" comment="all users have the preview pane disabled" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:532"/>
      <state state_ref="oval:org.mitre.oval:ste:598"/>
    </registry_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 127034-01 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3705" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2497"/>
      <state state_ref="oval:org.mitre.oval:ste:3592"/>
    </patch_test>
    <textfilecontent_test id="oval:org.mitre.oval:tst:3659" version="1" check="at least one" comment="Some role has been created on the system" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:2360"/>
    </textfilecontent_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 127033-01 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3566" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1921"/>
      <state state_ref="oval:org.mitre.oval:ste:3592"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 127112-01 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4169" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2147"/>
      <state state_ref="oval:org.mitre.oval:ste:3780"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 127111-01 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3557" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1946"/>
      <state state_ref="oval:org.mitre.oval:ste:3780"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2826" version="1" check="at least one" comment="kdebase version is less than 3.1-15" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1619"/>
      <state state_ref="oval:org.mitre.oval:ste:2646"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:2825" version="1" check="at least one" comment="/usr/bin/kdm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1618"/>
      <state state_ref="oval:org.mitre.oval:ste:2645"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2824" version="1" check="at least one" comment="/usr/bin/kdm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1618"/>
      <state state_ref="oval:org.mitre.oval:ste:2644"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2823" version="1" check="at least one" comment="/usr/bin/kdm is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1618"/>
      <state state_ref="oval:org.mitre.oval:ste:2643"/>
    </file_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 109329-06 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4121" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1985"/>
      <state state_ref="oval:org.mitre.oval:ste:3615"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 122078-02 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3928" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2714"/>
      <state state_ref="oval:org.mitre.oval:ste:3439"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 123186-01 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3820" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2786"/>
      <state state_ref="oval:org.mitre.oval:ste:2958"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 114342-09 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3508" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2232"/>
      <state state_ref="oval:org.mitre.oval:ste:3258"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 113579-09 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3489" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2376"/>
      <state state_ref="oval:org.mitre.oval:ste:3258"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 109328-06 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3189" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2169"/>
      <state state_ref="oval:org.mitre.oval:ste:3615"/>
    </patch_test>
    <package_test check_existence="at_least_one_exists" comment="SRS Net Connect Software 3.2.3 is installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4171" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1852"/>
      <state state_ref="oval:org.mitre.oval:ste:3449"/>
    </package_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 123870-02 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4014" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2069"/>
      <state state_ref="oval:org.mitre.oval:ste:3439"/>
    </patch_test>
    <package_test check_existence="at_least_one_exists" comment="SRS Net Connect Software 3.2.4 is installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3230" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1852"/>
      <state state_ref="oval:org.mitre.oval:ste:3317"/>
    </package_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 125713-01 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3206" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2460"/>
      <state state_ref="oval:org.mitre.oval:ste:2958"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:2827" version="1" check="at least one" comment="Patch 110286-10 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1620"/>
      <state state_ref="oval:org.mitre.oval:ste:2647"/>
    </patch_test>
    <registry_test id="oval:org.mitre.oval:tst:87180" version="1" comment="Check if Microsoft SharePoint Foundation 2013 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:26394"/>
      <state state_ref="oval:org.mitre.oval:ste:24179"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:87020" version="1" comment="Check if Microsoft SharePoint Foundation 2010 SP2 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24020"/>
      <state state_ref="oval:org.mitre.oval:ste:24309"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:87199" version="3" comment="Check if the version of onetutil.dll is less than 14.0.7105.5000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:26888"/>
      <state state_ref="oval:org.mitre.oval:ste:23634"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:87074" version="1" comment="Check if the version of microsoft.office.server.native.dll is less than 14.0.7005.1000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24032"/>
      <state state_ref="oval:org.mitre.oval:ste:24352"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:87023" version="1" comment="Check if the version of Microsoft.office.server.native.dll is less than 15.0.4535.1000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:26607"/>
      <state state_ref="oval:org.mitre.oval:ste:24141"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:86965" version="1" comment="Check if the version of xlsrv.dll is less than 14.0.7104.5000 (sharepoint server)" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:26571"/>
      <state state_ref="oval:org.mitre.oval:ste:23691"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:86497" version="2" comment="Check if the version of Onfda.dll is less than 15.0.4535.1000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:26407"/>
      <state state_ref="oval:org.mitre.oval:ste:24141"/>
    </file_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 124922-01 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3922" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2610"/>
      <state state_ref="oval:org.mitre.oval:ste:2958"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 113986-22 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3819" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1839"/>
      <state state_ref="oval:org.mitre.oval:ste:3484"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 112963-27 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3790" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2077"/>
      <state state_ref="oval:org.mitre.oval:ste:3668"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 109147-42 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3395" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2049"/>
      <state state_ref="oval:org.mitre.oval:ste:3514"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 109148-41 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3236" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2328"/>
      <state state_ref="oval:org.mitre.oval:ste:3094"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 124923-01 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3173" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2254"/>
      <state state_ref="oval:org.mitre.oval:ste:2958"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:674" version="1" check="at least one" comment="Patch 107702-12 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:538"/>
      <state state_ref="oval:org.mitre.oval:ste:605"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:673" version="1" check="at least one" comment="Patch 109354-19 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:537"/>
      <state state_ref="oval:org.mitre.oval:ste:604"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:672" version="1" check="at least one" comment="Patch 114497-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:536"/>
      <state state_ref="oval:org.mitre.oval:ste:603"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:2831" version="1" check="at least one" comment="the version of xenroll.dll is less than 5.131.3659.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1622"/>
      <state state_ref="oval:org.mitre.oval:ste:2651"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2830" version="1" check="at least one" comment="Patch Q323172 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1621"/>
      <state state_ref="oval:org.mitre.oval:ste:2650"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2829" version="1" check="at least one" comment="ActiveX Enabled In At Least One Zone" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:988"/>
      <state state_ref="oval:org.mitre.oval:ste:2649"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:3086" version="1" check="at least one" comment="the version of mshtml.dll is less than 6.0.2716.2200" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2891"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:86576" version="3" comment="Check if Microsoft Office Web Apps 2010 SP2 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:26572"/>
      <state state_ref="oval:org.mitre.oval:ste:23381"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:86608" version="2" comment="Check if Microsoft SharePoint 2010 SP2 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24062"/>
      <state state_ref="oval:org.mitre.oval:ste:23979"/>
    </registry_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 118855-19 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3362" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2735"/>
      <state state_ref="oval:org.mitre.oval:ste:3172"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 118833-23 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3263" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2190"/>
      <state state_ref="oval:org.mitre.oval:ste:3926"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 126449-04 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4545" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1960"/>
      <state state_ref="oval:org.mitre.oval:ste:3287"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 126448-04 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4307" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1827"/>
      <state state_ref="oval:org.mitre.oval:ste:3287"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:2834" version="1" check="at least one" comment="the version of xactsrv.dll is less than 5.0.2195.5971" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1625"/>
      <state state_ref="oval:org.mitre.oval:ste:2654"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2833" version="1" check="at least one" comment="Patch Q326830 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1624"/>
      <state state_ref="oval:org.mitre.oval:ste:2653"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2832" version="1" check="at least one" comment="Lanman enabled" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1623"/>
      <state state_ref="oval:org.mitre.oval:ste:2652"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:80134" version="1" comment="Check if Microsoft Web Apps is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23425"/>
      <state state_ref="oval:org.mitre.oval:ste:19893"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:80139" version="3" comment="Check if Microsoft Office Web Apps SP1 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24131"/>
      <state state_ref="oval:org.mitre.oval:ste:19818"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:87179" version="1" comment="Check if the version of msoserver.dll is less than 14.0.7106.5000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23683"/>
      <state state_ref="oval:org.mitre.oval:ste:24088"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:87135" version="1" comment="Check if the version of WdsrvWorker.dll is less than 14.0.6112.5000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:26369"/>
      <state state_ref="oval:org.mitre.oval:ste:24114"/>
    </file_test>
    <package_test id="oval:org.mitre.oval:tst:680" version="1" check="at least one" comment="CDE Daemons (SUNWdtdmn) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:543"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:679" version="1" check="at least one" comment="Patch 108221-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:542"/>
      <state state_ref="oval:org.mitre.oval:ste:609"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:681" version="1" check="at least one" comment="the version of vdmdbg.dll is less than 5.1.2600.1560" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:302"/>
      <state state_ref="oval:org.mitre.oval:ste:610"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2356" version="1" comment="the patch KB840987 is installed (Hotfix key)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1349"/>
      <state state_ref="oval:org.mitre.oval:ste:2206"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:782" version="1" comment="the version of Wjgdw400.dll is less than 106.0.0.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:590"/>
      <state state_ref="oval:org.mitre.oval:ste:701"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:685" version="1" comment="the version of mrxsmb.sys is less than 5.0.2195.7097" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:326"/>
      <state state_ref="oval:org.mitre.oval:ste:614"/>
    </file_test>
    <package_test id="oval:org.mitre.oval:tst:690" version="1" check="all" comment="NIS/NIS+ Utilities installed (SUNWnisu)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:547"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:689" version="1" check="all" comment="Patch 108750-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:486"/>
      <state state_ref="oval:org.mitre.oval:ste:617"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:688" version="1" check="all" comment="Patch 110322-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:546"/>
      <state state_ref="oval:org.mitre.oval:ste:616"/>
    </patch_test>
    <process_test id="oval:org.mitre.oval:tst:687" version="1" check="all" comment="ypbind running" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:545"/>
    </process_test>
    <patch_test id="oval:org.mitre.oval:tst:700" version="1" check="at least one" comment="Patch 108993-14 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:275"/>
      <state state_ref="oval:org.mitre.oval:ste:627"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:699" version="1" check="at least one" comment="Patch 108993-51 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:275"/>
      <state state_ref="oval:org.mitre.oval:ste:626"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:698" version="1" check="at least one" comment="Patch 115677-02 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:552"/>
      <state state_ref="oval:org.mitre.oval:ste:625"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:697" version="1" check="at least one" comment="Patch 121321-01 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:551"/>
      <state state_ref="oval:org.mitre.oval:ste:624"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:696" version="1" check="at least one" comment="Patch 108994-14 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:550"/>
      <state state_ref="oval:org.mitre.oval:ste:623"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:695" version="1" check="at least one" comment="Patch 108994-51 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:550"/>
      <state state_ref="oval:org.mitre.oval:ste:622"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:694" version="1" check="at least one" comment="Patch 115678-02 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:549"/>
      <state state_ref="oval:org.mitre.oval:ste:621"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:693" version="1" check="at least one" comment="Patch 121322-01 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:548"/>
      <state state_ref="oval:org.mitre.oval:ste:620"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:4096" version="1" check="at least one" comment="Patch 120095-11 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2302"/>
      <state state_ref="oval:org.mitre.oval:ste:3868"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3833" version="1" check="at least one" comment="Patch 120094-11 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2236"/>
      <state state_ref="oval:org.mitre.oval:ste:3868"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:4081" version="1" check="at least one" comment="Patch 107475-04 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2183"/>
      <state state_ref="oval:org.mitre.oval:ste:3062"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3951" version="1" check="at least one" comment="Patch 110061-10 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2608"/>
      <state state_ref="oval:org.mitre.oval:ste:3569"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3852" version="1" check="at least one" comment="Patch 107476-04 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1943"/>
      <state state_ref="oval:org.mitre.oval:ste:3062"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3634" version="1" check="at least one" comment="Patch 110669-03 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2401"/>
      <state state_ref="oval:org.mitre.oval:ste:3410"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3494" version="1" check="at least one" comment="Patch 110057-04 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1963"/>
      <state state_ref="oval:org.mitre.oval:ste:3062"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3463" version="1" check="at least one" comment="Patch 110668-03 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2573"/>
      <state state_ref="oval:org.mitre.oval:ste:3410"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3408" version="1" check="at least one" comment="Patch 110060-10 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1892"/>
      <state state_ref="oval:org.mitre.oval:ste:3569"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3361" version="1" check="at least one" comment="Patch 110058-04 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2464"/>
      <state state_ref="oval:org.mitre.oval:ste:3062"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:706" version="1" check="at least one" comment="the version of wmp.dll is less than 9.0.0.3349" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:527"/>
      <state state_ref="oval:org.mitre.oval:ste:633"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2847" version="1" check="at least one" comment="File %windir%\system32\inetsrv\ism.dll version is less than 4.2.776.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1631"/>
      <state state_ref="oval:org.mitre.oval:ste:2665"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2846" version="1" check="at least one" comment="Patch Q321599 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1630"/>
      <state state_ref="oval:org.mitre.oval:ste:2664"/>
    </registry_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119213-10 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3926" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1884"/>
      <state state_ref="oval:org.mitre.oval:ste:3141"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119214-10 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3572" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1899"/>
      <state state_ref="oval:org.mitre.oval:ste:3141"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:707" version="2" check="all" comment="cdoex.dll is less than 6.0.6618.4" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:513"/>
      <state state_ref="oval:org.mitre.oval:ste:634"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:86178" version="1" comment="Check if Exchange Server 2013 is installed Cumulative Update 1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:26779"/>
      <state state_ref="oval:org.mitre.oval:ste:23384"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:86283" version="1" comment="Check if Exchange Server 2013 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:26779"/>
      <state state_ref="oval:org.mitre.oval:ste:23477"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:86716" version="1" comment="Check if Exchange Server 2013 is installed Cumulative Update 2" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:26779"/>
      <state state_ref="oval:org.mitre.oval:ste:23682"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:85809" version="1" comment="Check if Microsoft Exchange Server 2010 SP3 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23564"/>
      <state state_ref="oval:org.mitre.oval:ste:5469"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:86148" version="1" comment="Check if the version of ExSetup.exe is less than 15.0.620.34" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:26548"/>
      <state state_ref="oval:org.mitre.oval:ste:23870"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:86102" version="1" comment="Check if the version of ExSetup.exe is less than 15.0.712.28" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:26548"/>
      <state state_ref="oval:org.mitre.oval:ste:23895"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:85977" version="1" comment="Check if the version of ExSetup.exe is less than 14.2.375.0" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24092"/>
      <state state_ref="oval:org.mitre.oval:ste:22603"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:85968" version="1" comment="Check if the version of exsetup.exe is less than 8.3.327.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24081"/>
      <state state_ref="oval:org.mitre.oval:ste:22653"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:85918" version="1" comment="Check if the version of ExSetup.exe is less than 14.3.158.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24092"/>
      <state state_ref="oval:org.mitre.oval:ste:23067"/>
    </file_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119813-04 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3930" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2303"/>
      <state state_ref="oval:org.mitre.oval:ste:3808"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119812-03 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3921" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1812"/>
      <state state_ref="oval:org.mitre.oval:ste:3874"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 116106-06 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3765" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2306"/>
      <state state_ref="oval:org.mitre.oval:ste:3540"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 124421-02 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3676" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2503"/>
      <state state_ref="oval:org.mitre.oval:ste:3619"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 124420-02 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3470" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2467"/>
      <state state_ref="oval:org.mitre.oval:ste:3619"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 116105-07 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3197" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2075"/>
      <state state_ref="oval:org.mitre.oval:ste:3735"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:710" version="1" check="at least one" comment="The version of Ipnathlp.dll is less than 5.0.2195.6902" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:522"/>
      <state state_ref="oval:org.mitre.oval:ste:636"/>
    </file_test>
    <metabase_test id="oval:org.mitre.oval:tst:709" version="2" comment="Negotiate is enabled" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:556"/>
    </metabase_test>
    <file_test id="oval:org.mitre.oval:tst:711" version="1" check="at least one" comment="the version of wmpui.dll is less than 8.0.0.4496" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:558"/>
      <state state_ref="oval:org.mitre.oval:ste:637"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3633" version="1" comment="the version of rdpwd.sys is less than 5.0.2195.7055" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:2219"/>
      <state state_ref="oval:org.mitre.oval:ste:3781"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:3381" version="1" comment="Windows 2000 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:123"/>
      <state state_ref="oval:org.mitre.oval:ste:3492"/>
    </registry_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 112785-56 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4065" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2337"/>
      <state state_ref="oval:org.mitre.oval:ste:3787"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 112786-45 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4004" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2775"/>
      <state state_ref="oval:org.mitre.oval:ste:3328"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119067-03 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3849" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2590"/>
      <state state_ref="oval:org.mitre.oval:ste:3807"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119059-16 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3650" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2121"/>
      <state state_ref="oval:org.mitre.oval:ste:3663"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119068-03 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3615" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2016"/>
      <state state_ref="oval:org.mitre.oval:ste:3807"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119060-15 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3329" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2313"/>
      <state state_ref="oval:org.mitre.oval:ste:3065"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:2583" version="1" comment="the version of mshtml.dll is less than 6.0.2743.600" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2416"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:714" version="1" comment="the version of mrxsmb.sys is less than 5.2.3790.529" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:326"/>
      <state state_ref="oval:org.mitre.oval:ste:640"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2964" version="1" check="at least one" comment="File lbxproxy exists" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1696"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2962" version="1" check="at least one" comment="File lbxproxy SGID and executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1696"/>
      <state state_ref="oval:org.mitre.oval:ste:2777"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2961" version="1" check="at least one" comment="File lbxproxy SGID and executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1696"/>
      <state state_ref="oval:org.mitre.oval:ste:2776"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:2848" version="1" check="at least one" comment="Patch 107654-10 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1632"/>
      <state state_ref="oval:org.mitre.oval:ste:2666"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:718" version="2" comment="the version of Tcpip.sys is less than 5.0.2195.7087" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:588"/>
      <state state_ref="oval:org.mitre.oval:ste:644"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:723" version="2" check="at least one" comment="Microsoft Outlook Express 5.5 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:566"/>
      <state state_ref="oval:org.mitre.oval:ste:649"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:722" version="1" check="at least one" comment="the version of inetcomm.dll is less than 5.50.4963.1700" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:385"/>
      <state state_ref="oval:org.mitre.oval:ste:648"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:3078" version="2" check="at least one" comment="Internet Explorer 5.5 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:2883"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3077" version="2" check="at least one" comment="Internet Explorer 5.5 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:2882"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3076" version="2" check="at least one" comment="Internet Explorer 5.5 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:2881"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3013" version="1" check="at least one" comment="the patch q813489 is installed (Installed Components key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1725"/>
      <state state_ref="oval:org.mitre.oval:ste:2822"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2849" version="1" check="at least one" comment="the version of mshtml.dll is less than 5.50.4923.2500" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2667"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:729" version="1" comment="Microsoft Data Access Components 2.5 (SP3) is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:359"/>
      <state state_ref="oval:org.mitre.oval:ste:655"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:728" version="2" check="at least one" comment="the version of msadco.dll is less than 2.53.6306.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:358"/>
      <state state_ref="oval:org.mitre.oval:ste:654"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:727" version="2" check="at least one" comment="the version of msadco.dll is less than 2.71.9053.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:358"/>
      <state state_ref="oval:org.mitre.oval:ste:653"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:726" version="2" check="at least one" comment="the version of msadco.dll is less than 2.80.1062.0000" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:358"/>
      <state state_ref="oval:org.mitre.oval:ste:652"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:725" version="1" comment="Microsoft Data Access Components 2.8 (SP1) is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:359"/>
      <state state_ref="oval:org.mitre.oval:ste:651"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:724" version="2" check="at least one" comment="the version of msadco.dll is less than 2.81.1124.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:358"/>
      <state state_ref="oval:org.mitre.oval:ste:650"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2382" version="1" comment="Microsoft Data Access Components 2.7 (SP1) is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:359"/>
      <state state_ref="oval:org.mitre.oval:ste:2231"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2363" version="1" comment="Microsoft Data Access Components 2.8 (RTM) is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:359"/>
      <state state_ref="oval:org.mitre.oval:ste:2213"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:730" version="2" comment="the version of Tcpip.sys is less than 5.2.3790.537" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:588"/>
      <state state_ref="oval:org.mitre.oval:ste:656"/>
    </file_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 125794-02 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4051" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1969"/>
      <state state_ref="oval:org.mitre.oval:ste:3315"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 121132-03 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3927" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2736"/>
      <state state_ref="oval:org.mitre.oval:ste:3596"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 114717-05 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3799" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2291"/>
      <state state_ref="oval:org.mitre.oval:ste:3092"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 114669-04 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3763" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1950"/>
      <state state_ref="oval:org.mitre.oval:ste:3942"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 114716-05 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3667" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2247"/>
      <state state_ref="oval:org.mitre.oval:ste:3092"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 114670-04 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3608" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2699"/>
      <state state_ref="oval:org.mitre.oval:ste:3942"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 110671-04 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3592" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2035"/>
      <state state_ref="oval:org.mitre.oval:ste:3942"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 110670-04 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3292" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2564"/>
      <state state_ref="oval:org.mitre.oval:ste:3942"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:2850" version="1" check="at least one" comment="Patch 107893-20 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:301"/>
      <state state_ref="oval:org.mitre.oval:ste:2668"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:733" version="1" comment="the version of shell32.dll is less than 6.0.3790.503" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:253"/>
      <state state_ref="oval:org.mitre.oval:ste:659"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:734" version="1" comment="the version of rpcrt4.dll is less than 5.0.2195.7085" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:254"/>
      <state state_ref="oval:org.mitre.oval:ste:660"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:736" version="2" check="at least one" comment="Patch PHNE_34544 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:568"/>
    </patch_test>
    <swlist_test id="oval:org.mitre.oval:tst:735" version="1" check="at least one" comment="WUFTP-26.INETSVCS-FTP with version less than B.11.11.01.008 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:567"/>
      <state state_ref="oval:org.mitre.oval:ste:661"/>
    </swlist_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 111845-04 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4176" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2167"/>
      <state state_ref="oval:org.mitre.oval:ste:3676"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 124830-01 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3994" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1902"/>
      <state state_ref="oval:org.mitre.oval:ste:2958"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 124457-01 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3954" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2310"/>
      <state state_ref="oval:org.mitre.oval:ste:2958"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 124831-01 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3585" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2651"/>
      <state state_ref="oval:org.mitre.oval:ste:2958"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 124458-01 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3425" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2427"/>
      <state state_ref="oval:org.mitre.oval:ste:2958"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 111844-04 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3324" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2710"/>
      <state state_ref="oval:org.mitre.oval:ste:3676"/>
    </patch_test>
    <uname_test id="oval:org.mitre.oval:tst:3571" version="1" comment="HP Release B.11.00" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:3813"/>
    </uname_test>
    <patch_test id="oval:org.mitre.oval:tst:3393" version="2" comment="Patch PHNE_33395 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:1973"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:835" version="1" comment="the version of jgdw400.dll is less than 106.0.0.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:631"/>
      <state state_ref="oval:org.mitre.oval:ste:748"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2677" version="1" comment="FrontPage Server Extensions 2002 are enabled (NT, 2K, XP)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1533"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:744" version="2" comment="Fpadmdll.dll version is less than 10.0.6790.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:573"/>
      <state state_ref="oval:org.mitre.oval:ste:670"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:747" version="1" comment="the version of rasmans.dll is less than 5.0.2195.7093" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:535"/>
      <state state_ref="oval:org.mitre.oval:ste:673"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:749" version="1" check="at least one" comment="the version of mshtml.dll is less than 5.0.3528.700" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:675"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81660" version="2" comment="openSUSE 11.4 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2455"/>
      <state state_ref="oval:org.mitre.oval:ste:21043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81765" version="1" comment="Package fail2ban is less than 0.8.6-2.9.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24586"/>
      <state state_ref="oval:org.mitre.oval:ste:20779"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81672" version="1" comment="Package fail2ban is less than 0.8.4-22.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24586"/>
      <state state_ref="oval:org.mitre.oval:ste:20648"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81573" version="1" comment="Package fail2ban is less than 0.8.8-2.8.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24586"/>
      <state state_ref="oval:org.mitre.oval:ste:21165"/>
    </rpminfo_test>
    <package_test id="oval:org.mitre.oval:tst:753" version="1" check="all" comment="SunSoft Print - Client - Usr (SUNWpcu) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:575"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:752" version="1" check="at least one" comment="Patch 107115-14 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:300"/>
      <state state_ref="oval:org.mitre.oval:ste:678"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:751" version="1" check="at least one" comment="Patch 109320-09 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:315"/>
      <state state_ref="oval:org.mitre.oval:ste:677"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:750" version="1" check="at least one" comment="Patch 113329-05 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:314"/>
      <state state_ref="oval:org.mitre.oval:ste:676"/>
    </patch_test>
    <package_test id="oval:org.mitre.oval:tst:3971" version="1" comment="Sun Enterprise Authentication Mechanism (SEAM, SUNWkr5ma) installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2485"/>
    </package_test>
    <process_test id="oval:org.mitre.oval:tst:3331" version="1" comment="Key Distribution Center (kadmind) process running" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1988"/>
    </process_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81626" version="2" comment="openSUSE 12.2 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2455"/>
      <state state_ref="oval:org.mitre.oval:ste:20258"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81816" version="1" comment="Package openconnect-doc is less than 3.20-2.4.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24374"/>
      <state state_ref="oval:org.mitre.oval:ste:21072"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81495" version="1" comment="Package openconnect-debuginfo is less than 3.20-2.4.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24455"/>
      <state state_ref="oval:org.mitre.oval:ste:21072"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81334" version="1" comment="Package openconnect is less than 3.20-2.4.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24152"/>
      <state state_ref="oval:org.mitre.oval:ste:21072"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81319" version="1" comment="Package openconnect-debugsource is less than 3.20-2.4.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24548"/>
      <state state_ref="oval:org.mitre.oval:ste:21072"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81297" version="1" comment="Package openconnect-lang is less than 3.20-2.4.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24112"/>
      <state state_ref="oval:org.mitre.oval:ste:21165"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:80847" version="1" comment="Package openconnect-devel is less than 3.20-2.4.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24504"/>
      <state state_ref="oval:org.mitre.oval:ste:21072"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:756" version="1" check_existence="at_least_one_exists" check="at least one" comment="Microsoft Visual Studio .NET 2003 Installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:578"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:755" version="3" comment="the version of Gdiplus.dll for Microsoft Visual Studio .NET is less than 5.1.3102.1355" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:6109"/>
      <state state_ref="oval:org.mitre.oval:ste:680"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:757" version="1" comment="the version of rasmans.dll is less than 5.2.3790.529" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:535"/>
      <state state_ref="oval:org.mitre.oval:ste:681"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:759" version="1" check="at least one" comment="The version of Ntoskrnl.exe is less than 4.0.1381.7265" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:335"/>
      <state state_ref="oval:org.mitre.oval:ste:683"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:758" version="1" check="at least one" comment="The version of Ntoskrnl.exe is less than 4.0.1381.33563" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:335"/>
      <state state_ref="oval:org.mitre.oval:ste:682"/>
    </file_test>
    <package_test id="oval:org.mitre.oval:tst:762" version="1" comment="Sun Enterprise Storage Manager installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:580"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:761" version="1" comment="Patch 117367-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:579"/>
      <state state_ref="oval:org.mitre.oval:ste:685"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:763" version="2" check="all" comment="the version of wdhtmled.ocx is less than 6.1.0.9232" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:280"/>
      <state state_ref="oval:org.mitre.oval:ste:686"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:4070" version="1" check="at least one" comment="Patch 112669-03 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2288"/>
      <state state_ref="oval:org.mitre.oval:ste:3850"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:4005" version="1" check="at least one" comment="Patch 112668-03 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1949"/>
      <state state_ref="oval:org.mitre.oval:ste:3228"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3778" version="1" check="at least one" comment="Patch 116341-04 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2548"/>
      <state state_ref="oval:org.mitre.oval:ste:3562"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3666" version="1" check="at least one" comment="Patch 116340-04 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2010"/>
      <state state_ref="oval:org.mitre.oval:ste:3405"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3621" version="1" check="at least one" comment="Patch 120720-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2637"/>
      <state state_ref="oval:org.mitre.oval:ste:3667"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3295" version="1" check="at least one" comment="Patch 120719-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2345"/>
      <state state_ref="oval:org.mitre.oval:ste:3869"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:3091" version="1" check="at least one" comment="the version of mshtml.dll is less than 6.0.2713.1100" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2896"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:765" version="1" comment="Patch 118966-14 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:581"/>
      <state state_ref="oval:org.mitre.oval:ste:688"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:764" version="1" comment="Patch 118966-17 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:581"/>
      <state state_ref="oval:org.mitre.oval:ste:687"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:768" version="1" check="at least one" comment="the version of mshtml.dll is less than 6.0.2900.2627" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:689"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:767" version="2" check="at least one" comment="the patch kb890923  is installed (XP SP2 Hotfix key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:583"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81675" version="1" comment="Package openstack-nova-cert is less than 2012.2.4+git.1363297910.9561484-2.10.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24589"/>
      <state state_ref="oval:org.mitre.oval:ste:21014"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81604" version="1" comment="Package python-greenlet-devel is less than 0.4.0-3.3.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24231"/>
      <state state_ref="oval:org.mitre.oval:ste:20811"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81583" version="1" comment="Package python-greenlet-debugsource is less than 0.4.0-3.3.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24584"/>
      <state state_ref="oval:org.mitre.oval:ste:20582"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81574" version="1" comment="Package openstack-nova is less than 2012.2.4+git.1363297910.9561484-2.10.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24391"/>
      <state state_ref="oval:org.mitre.oval:ste:21014"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81551" version="1" comment="Package openstack-nova-vncproxy is less than 2012.2.4+git.1363297910.9561484-2.10.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24447"/>
      <state state_ref="oval:org.mitre.oval:ste:21014"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81518" version="1" comment="Package openstack-nova-scheduler is less than 2012.2.4+git.1363297910.9561484-2.10.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24292"/>
      <state state_ref="oval:org.mitre.oval:ste:21014"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81497" version="1" comment="Package python-nova is less than 2012.2.4+git.1363297910.9561484-2.10.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24243"/>
      <state state_ref="oval:org.mitre.oval:ste:21014"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81451" version="1" comment="Package openstack-nova-volume is less than 2012.2.4+git.1363297910.9561484-2.10.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24445"/>
      <state state_ref="oval:org.mitre.oval:ste:21014"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81430" version="1" comment="Package openstack-nova-objectstore is less than 2012.2.4+git.1363297910.9561484-2.10.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24450"/>
      <state state_ref="oval:org.mitre.oval:ste:21014"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81394" version="1" comment="Package openstack-nova-api is less than 2012.2.4+git.1363297910.9561484-2.10.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24258"/>
      <state state_ref="oval:org.mitre.oval:ste:21014"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81378" version="1" comment="Package openstack-nova-test is less than 2012.2.4+git.1363297910.9561484-2.10.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24505"/>
      <state state_ref="oval:org.mitre.oval:ste:21014"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81313" version="1" comment="Package openstack-nova-novncproxy is less than 2012.2.4+git.1363297910.9561484-2.10.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24530"/>
      <state state_ref="oval:org.mitre.oval:ste:21014"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81246" version="1" comment="Package openstack-nova-doc is less than 2012.2.4+git.1363297910.9561484-2.10.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24535"/>
      <state state_ref="oval:org.mitre.oval:ste:21014"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81133" version="1" comment="Package openstack-nova-network is less than 2012.2.4+git.1363297910.9561484-2.10.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24312"/>
      <state state_ref="oval:org.mitre.oval:ste:21014"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81069" version="1" comment="Package openstack-nova-compute is less than 2012.2.4+git.1363297910.9561484-2.10.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24529"/>
      <state state_ref="oval:org.mitre.oval:ste:21014"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:80831" version="1" comment="Package python-greenlet-debuginfo is less than 0.4.0-3.3.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24472"/>
      <state state_ref="oval:org.mitre.oval:ste:20582"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:80685" version="1" comment="Package python-greenlet is less than 0.4.0-3.3.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:23729"/>
      <state state_ref="oval:org.mitre.oval:ste:20582"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81669" version="1" comment="Package python-keystoneclient-doc is less than 0.2.1.3.gd37a3fb+git.1357543650.d37a3fb-2.8.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24605"/>
      <state state_ref="oval:org.mitre.oval:ste:21062"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81644" version="1" comment="Package python-keystoneclient is less than 0.2.1.3.gd37a3fb+git.1357543650.d37a3fb-2.8.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24190"/>
      <state state_ref="oval:org.mitre.oval:ste:21062"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:80967" version="1" comment="Package python-keystoneclient-test is less than 0.2.1.3.gd37a3fb+git.1357543650.d37a3fb-2.8.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24414"/>
      <state state_ref="oval:org.mitre.oval:ste:21062"/>
    </rpminfo_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 112785-62 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4150" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2096"/>
      <state state_ref="oval:org.mitre.oval:ste:3368"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 112786-51 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4112" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2793"/>
      <state state_ref="oval:org.mitre.oval:ste:3849"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119067-08 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3777" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2533"/>
      <state state_ref="oval:org.mitre.oval:ste:3603"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119059-26 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3735" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2071"/>
      <state state_ref="oval:org.mitre.oval:ste:3096"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119060-25 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3541" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1868"/>
      <state state_ref="oval:org.mitre.oval:ste:3278"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119068-08 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3386" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2148"/>
      <state state_ref="oval:org.mitre.oval:ste:3603"/>
    </patch_test>
    <registry_test id="oval:org.mitre.oval:tst:81231" version="1" comment="Check if version of Oracle GoldenGate Director is 11.1.1.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23724"/>
      <state state_ref="oval:org.mitre.oval:ste:20749"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:80940" version="1" comment="Check if version for Oracle GoldenGate Veridata is 3.0.0.11.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24195"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2852" version="1" check="at least one" comment="httpd version is less than 2.0.40-21.5" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1634"/>
      <state state_ref="oval:org.mitre.oval:ste:2670"/>
    </rpminfo_test>
    <inetlisteningservers_test id="oval:org.mitre.oval:tst:2851" version="2" check="at least one" comment="httpd.worker is listening on the network" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1633"/>
      <state state_ref="oval:org.mitre.oval:ste:2669"/>
    </inetlisteningservers_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:7751" version="1" comment="sendmail version is less than 8.12.11-4" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:587"/>
      <state state_ref="oval:org.mitre.oval:ste:3042"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:774" version="3" comment="sendmail before 8.12.x is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:587"/>
      <state state_ref="oval:org.mitre.oval:ste:694"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:773" version="1" comment="sendmail 8.12.x before 8.12.11 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:587"/>
      <state state_ref="oval:org.mitre.oval:ste:693"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:772" version="1" comment="sendmail 8.13.x before 8.13.6 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:587"/>
      <state state_ref="oval:org.mitre.oval:ste:692"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:7716" version="1" comment="sendmail version is less than 8.13.1-3" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:587"/>
      <state state_ref="oval:org.mitre.oval:ste:3851"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81728" version="1" comment="Package xdm-debugsource is less than 1.1.10-14.10.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24451"/>
      <state state_ref="oval:org.mitre.oval:ste:21110"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81585" version="1" comment="Package xdm is less than 1.1.10-14.10.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24370"/>
      <state state_ref="oval:org.mitre.oval:ste:21110"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81554" version="1" comment="Package xdm-debuginfo is less than 1.1.10-14.10.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24350"/>
      <state state_ref="oval:org.mitre.oval:ste:21110"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81714" version="2" comment="openSUSE 12.3 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2455"/>
      <state state_ref="oval:org.mitre.oval:ste:20860"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81732" version="1" comment="Package dbus-1-devel is less than 1-1.6.8-2.6.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24399"/>
      <state state_ref="oval:org.mitre.oval:ste:20610"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81721" version="1" comment="Package dbus-1-32bit is less than 1-1.6.8-2.6.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24429"/>
      <state state_ref="oval:org.mitre.oval:ste:20901"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81715" version="1" comment="Package libdbus-1-3-debuginfo is less than 1-1.6.8-2.6.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24090"/>
      <state state_ref="oval:org.mitre.oval:ste:20610"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81685" version="1" comment="Package dbus-1-x11 is less than 1-1.6.8-2.6.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24506"/>
      <state state_ref="oval:org.mitre.oval:ste:20610"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81667" version="1" comment="Package dbus-1-x11-debugsource is less than 1-1.6.8-2.6.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24541"/>
      <state state_ref="oval:org.mitre.oval:ste:20610"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81666" version="1" comment="Package dbus-1-x11-debuginfo is less than 1-1.6.8-2.6.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24593"/>
      <state state_ref="oval:org.mitre.oval:ste:20610"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81591" version="1" comment="Package libdbus-1-3-32bit is less than 1-1.6.8-2.6.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24279"/>
      <state state_ref="oval:org.mitre.oval:ste:20901"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81578" version="1" comment="Package dbus-1-devel-32bit is less than 1-1.6.8-2.6.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24369"/>
      <state state_ref="oval:org.mitre.oval:ste:20901"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81483" version="1" comment="Package dbus-1-debuginfo-32bit is less than 1-1.6.8-2.6.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24355"/>
      <state state_ref="oval:org.mitre.oval:ste:20901"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81468" version="1" comment="Package dbus-1-debuginfo is less than 1-1.6.8-2.6.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24514"/>
      <state state_ref="oval:org.mitre.oval:ste:20610"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81340" version="1" comment="Package dbus-1-debugsource is less than 1-1.6.8-2.6.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24427"/>
      <state state_ref="oval:org.mitre.oval:ste:20610"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81293" version="1" comment="Package dbus-1-devel-doc is less than 1-1.6.8-2.6.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24421"/>
      <state state_ref="oval:org.mitre.oval:ste:21072"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81268" version="1" comment="Package dbus-1 is less than 1-1.6.8-2.6.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24539"/>
      <state state_ref="oval:org.mitre.oval:ste:20610"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81156" version="1" comment="Package libdbus-1-3-debuginfo-32bit is less than 1-1.6.8-2.6.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24425"/>
      <state state_ref="oval:org.mitre.oval:ste:20901"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81143" version="1" comment="Package libdbus-1-3 is less than 1-1.6.8-2.6.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24412"/>
      <state state_ref="oval:org.mitre.oval:ste:20610"/>
    </rpminfo_test>
    <patch_test id="oval:org.mitre.oval:tst:778" version="1" check="at least one" comment="Patch 108528-27 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:290"/>
      <state state_ref="oval:org.mitre.oval:ste:698"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:777" version="1" check="at least one" comment="Patch 112233-12 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:289"/>
      <state state_ref="oval:org.mitre.oval:ste:697"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3382" version="1" check="at least one" comment="Patch 121308-04 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2272"/>
      <state state_ref="oval:org.mitre.oval:ste:3196"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3336" version="1" check="at least one" comment="Patch 111313-06 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2631"/>
      <state state_ref="oval:org.mitre.oval:ste:3022"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3316" version="1" check="at least one" comment="Patch 121309-04 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2336"/>
      <state state_ref="oval:org.mitre.oval:ste:3196"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3246" version="1" check="at least one" comment="Patch 111314-06 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2387"/>
      <state state_ref="oval:org.mitre.oval:ste:3022"/>
    </patch_test>
    <registry_test id="oval:org.mitre.oval:tst:781" version="1" comment="Patch S03-KB914798 is installed." check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:589"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2854" version="1" check="at least one" comment="the version of inetcomm.dll is less than 6.0.3790.326" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:385"/>
      <state state_ref="oval:org.mitre.oval:ste:2672"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:3825" version="1" check="at least one" comment="Patch 125101-06 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2567"/>
      <state state_ref="oval:org.mitre.oval:ste:3949"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3442" version="1" check="at least one" comment="Patch 125100-06 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1849"/>
      <state state_ref="oval:org.mitre.oval:ste:3949"/>
    </patch_test>
    <registry_test id="oval:org.mitre.oval:tst:786" version="3" comment="Windows Media Player 9 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:593"/>
      <state state_ref="oval:org.mitre.oval:ste:705"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:785" version="1" check="at least one" comment="the version of Wmp.dll is less than 9.0.0.3344" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:592"/>
      <state state_ref="oval:org.mitre.oval:ste:704"/>
    </file_test>
    <package_test id="oval:org.mitre.oval:tst:790" version="1" check="all" comment="GNU Zip (gzip, SUNWgzip) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:597"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:789" version="1" check="all" comment="Patch 112668-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:596"/>
      <state state_ref="oval:org.mitre.oval:ste:708"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:791" version="1" comment="the version of Imekr61.ime is less than 6.1.3790.1 (S03-Gold)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:591"/>
      <state state_ref="oval:org.mitre.oval:ste:709"/>
    </file_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 118372-08 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4168" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2354"/>
      <state state_ref="oval:org.mitre.oval:ste:2990"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 114435-11 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3665" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2235"/>
      <state state_ref="oval:org.mitre.oval:ste:3282"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 113451-12 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3311" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2520"/>
      <state state_ref="oval:org.mitre.oval:ste:3029"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 118371-08 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3260" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1820"/>
      <state state_ref="oval:org.mitre.oval:ste:2990"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:80956" version="2" comment="Check if the version of Onfda.dll is less than 14.0.6134.5000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23783"/>
      <state state_ref="oval:org.mitre.oval:ste:19698"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2860" version="1" check="all" comment="openssl-perl is older than 0.9.7a-33.15" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1639"/>
      <state state_ref="oval:org.mitre.oval:ste:2678"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2859" version="1" check="all" comment="openssl-devel older than 0.9.7a-33.15" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1638"/>
      <state state_ref="oval:org.mitre.oval:ste:2677"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2858" version="1" check="all" comment="openssl older than 0.9.7a-33.15" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1637"/>
      <state state_ref="oval:org.mitre.oval:ste:2676"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2857" version="1" check="all" comment="openssl096b package is older than 0.9.6b-16.22.3.i386.rpm" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1636"/>
      <state state_ref="oval:org.mitre.oval:ste:2675"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:2856" version="1" check="all" comment="/tmp is writable by everyone" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1420"/>
      <state state_ref="oval:org.mitre.oval:ste:2674"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:793" version="1" check="at least one" comment="the version of mshtml.dll is less than 5.0.3837.1200" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:711"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:801" version="1" comment="Patch 109764-06 or later installed (SPARC-8)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:605"/>
      <state state_ref="oval:org.mitre.oval:ste:719"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:800" version="1" comment="Patch 116047-03 or later installed (SPARC-9)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:604"/>
      <state state_ref="oval:org.mitre.oval:ste:718"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:799" version="1" comment="Patch 119596-03 or later installed (SPARC-10)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:603"/>
      <state state_ref="oval:org.mitre.oval:ste:717"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:798" version="1" comment="Patch 109765-06 or later installed (x86-8)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:602"/>
      <state state_ref="oval:org.mitre.oval:ste:716"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:797" version="1" comment="Patch 121995-01 or later installed (x86-9)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:601"/>
      <state state_ref="oval:org.mitre.oval:ste:715"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:796" version="1" comment="Patch 118813-03 or later installed (x86-10)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:600"/>
      <state state_ref="oval:org.mitre.oval:ste:714"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 121316-02 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4159" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2133"/>
      <state state_ref="oval:org.mitre.oval:ste:3439"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 123703-01 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4110" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2131"/>
      <state state_ref="oval:org.mitre.oval:ste:2958"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 117350-40 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3986" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2644"/>
      <state state_ref="oval:org.mitre.oval:ste:3568"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 116960-15 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3895" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2012"/>
      <state state_ref="oval:org.mitre.oval:ste:3065"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 117125-03 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3881" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2726"/>
      <state state_ref="oval:org.mitre.oval:ste:3807"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 120884-02 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3804" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2642"/>
      <state state_ref="oval:org.mitre.oval:ste:3439"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 118558-30 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3713" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2050"/>
      <state state_ref="oval:org.mitre.oval:ste:3669"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 120662-04 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3712" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2445"/>
      <state state_ref="oval:org.mitre.oval:ste:3676"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 123704-01 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3681" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2357"/>
      <state state_ref="oval:org.mitre.oval:ste:2958"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 121317-02 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3661" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2411"/>
      <state state_ref="oval:org.mitre.oval:ste:3439"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 118559-30 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3545" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1986"/>
      <state state_ref="oval:org.mitre.oval:ste:3669"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119439-06 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3522" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1926"/>
      <state state_ref="oval:org.mitre.oval:ste:3615"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 113278-14 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3472" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2715"/>
      <state state_ref="oval:org.mitre.oval:ste:3925"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 116959-15 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3349" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2636"/>
      <state state_ref="oval:org.mitre.oval:ste:3065"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 117351-40 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3264" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1984"/>
      <state state_ref="oval:org.mitre.oval:ste:3568"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 118822-19 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3190" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2428"/>
      <state state_ref="oval:org.mitre.oval:ste:3172"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 120661-03 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3180" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2186"/>
      <state state_ref="oval:org.mitre.oval:ste:3807"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 118844-19 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3175" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2086"/>
      <state state_ref="oval:org.mitre.oval:ste:3172"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:99346" version="1" comment="Check if Oracle VM VirtualBox version is less than 4.2.0" check_existence="all_exist" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28098"/>
      <state state_ref="oval:org.mitre.oval:ste:27989"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:88836" version="1" comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.1.0" check_existence="all_exist" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28098"/>
      <state state_ref="oval:org.mitre.oval:ste:24690"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:80229" version="1" comment="Check if Windows Essentials 2012 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23758"/>
      <state state_ref="oval:org.mitre.oval:ste:20712"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:80928" version="1" comment="Check if Windows Essentials 2011 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23758"/>
      <state state_ref="oval:org.mitre.oval:ste:20651"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:80220" version="1" comment="Check if Windows Essentials is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24148"/>
      <state state_ref="oval:org.mitre.oval:ste:20601"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:81120" version="1" comment="Check if the version of Windowslivewriter.exe is less than 16.4.3508.205" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23851"/>
      <state state_ref="oval:org.mitre.oval:ste:20477"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:80872" version="1" comment="Check if the version ExSetup.exe is less than 8.3.298.3" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24081"/>
      <state state_ref="oval:org.mitre.oval:ste:20432"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:80598" version="1" comment="Check if the version ExSetup.exe is less than 14.2.342.2" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24092"/>
      <state state_ref="oval:org.mitre.oval:ste:20072"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:808" version="1" comment="Patch 117350-33 or later installed (SPARC-8)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:611"/>
      <state state_ref="oval:org.mitre.oval:ste:726"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:807" version="1" comment="Patch 118558-22 or later installed (SPARC-9)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:610"/>
      <state state_ref="oval:org.mitre.oval:ste:725"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:806" version="1" comment="Patch 118822-29 or later installed (SPARC-10)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:609"/>
      <state state_ref="oval:org.mitre.oval:ste:724"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:805" version="1" comment="Patch 117351-33 or later installed (x86-8)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:608"/>
      <state state_ref="oval:org.mitre.oval:ste:723"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:804" version="1" comment="Patch 118559-22 or later installed (x86-9)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:607"/>
      <state state_ref="oval:org.mitre.oval:ste:722"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:803" version="1" comment="Patch 118844-29 or later installed (x86-10)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:606"/>
      <state state_ref="oval:org.mitre.oval:ste:721"/>
    </patch_test>
    <textfilecontent_test id="oval:org.mitre.oval:tst:818" version="1" comment="Gnome 2.0.0 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:621"/>
    </textfilecontent_test>
    <patch_test id="oval:org.mitre.oval:tst:817" version="1" comment="Patch 114644-03 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:620"/>
      <state state_ref="oval:org.mitre.oval:ste:733"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:816" version="1" comment="Patch 114645-03 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:619"/>
      <state state_ref="oval:org.mitre.oval:ste:732"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:815" version="1" comment="Patch 114686-03 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:618"/>
      <state state_ref="oval:org.mitre.oval:ste:731"/>
    </patch_test>
    <textfilecontent_test id="oval:org.mitre.oval:tst:814" version="1" comment="Gnome 2.0.2 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:617"/>
    </textfilecontent_test>
    <patch_test id="oval:org.mitre.oval:tst:813" version="1" comment="Patch 115738-04 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:616"/>
      <state state_ref="oval:org.mitre.oval:ste:730"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:812" version="1" comment="Patch 114687-03 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:615"/>
      <state state_ref="oval:org.mitre.oval:ste:729"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:811" version="1" comment="Patch 115739-04 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:614"/>
      <state state_ref="oval:org.mitre.oval:ste:728"/>
    </patch_test>
    <textfilecontent_test id="oval:org.mitre.oval:tst:810" version="1" comment="JDS release 2 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:613"/>
    </textfilecontent_test>
    <patch_test id="oval:org.mitre.oval:tst:809" version="1" comment="Patch 121092-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:612"/>
      <state state_ref="oval:org.mitre.oval:ste:727"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:89006" version="1" comment="Check if Sun xVM VirtualBox version  is greater than or equals to 2.2.0" check_existence="at_least_one_exists" check="at least one" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28309"/>
      <state state_ref="oval:org.mitre.oval:ste:24709"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:88902" version="1" comment="Check if Sun xVM VirtualBox version is less than or equals to 3.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28309"/>
      <state state_ref="oval:org.mitre.oval:ste:24192"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:819" version="1" comment="the version of Gdi32.dll is less than 5.2.3790.462" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:622"/>
      <state state_ref="oval:org.mitre.oval:ste:734"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:80570" version="1" comment="Check if the version of vseshr.dll is less than 8.3.7.207" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24185"/>
      <state state_ref="oval:org.mitre.oval:ste:20405"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:822" version="1" comment="Patch 118822-24 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:609"/>
      <state state_ref="oval:org.mitre.oval:ste:737"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:2409" version="1" comment="Patch 118844-24 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:606"/>
      <state state_ref="oval:org.mitre.oval:ste:2257"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:823" version="2" comment="Patch PHNE_33159 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:623"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:829" version="1" check="at least one" comment="the version of hypertrm.dll is less than 5.1.2600.1609" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:283"/>
      <state state_ref="oval:org.mitre.oval:ste:742"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:828" version="2" comment="the patch WindowsXP-KB87339-x86-ENU.exe is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:627"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:827" version="1" comment="If key present hyperterminal will automatically open session files" check_existence="none_exist" check="none satisfy" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:626"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:826" version="4" comment="If the Hyperterminal client is registered as the default telnet client" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:625"/>
      <state state_ref="oval:org.mitre.oval:ste:741"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:831" version="1" check="at least one" comment="Windows ME Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:629"/>
      <state state_ref="oval:org.mitre.oval:ste:744"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:4033" version="1" comment="Windows Server 2003 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:123"/>
      <state state_ref="oval:org.mitre.oval:ste:3591"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:3535" version="1" comment="the version of umpnpmgr.dll is less than 5.2.3790.2477" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:2048"/>
      <state state_ref="oval:org.mitre.oval:ste:3916"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:3342" version="3" comment="Win2K/XP/2003 service pack 1 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:717"/>
      <state state_ref="oval:org.mitre.oval:ste:3833"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:833" version="3" comment="Windows Media Player 10 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:630"/>
      <state state_ref="oval:org.mitre.oval:ste:746"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:832" version="1" check="at least one" comment="the version of Wmp.dll is less than 10.0.0.4019" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:592"/>
      <state state_ref="oval:org.mitre.oval:ste:745"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:80439" version="1" comment="Check if the version ExSetup.exe is less than 14.1.438.0" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24092"/>
      <state state_ref="oval:org.mitre.oval:ste:20061"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:80396" version="1" comment="Check if the version ExSetup.exe is less than 14.2.328.10" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24092"/>
      <state state_ref="oval:org.mitre.oval:ste:20194"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:79624" version="1" comment="Check if the version ExSetup.exe is less than 8.3.297.2" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24081"/>
      <state state_ref="oval:org.mitre.oval:ste:19800"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:839" version="2" comment="The version of Ntkrnlpa.exe is less than 5.0.2195.7071" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:633"/>
      <state state_ref="oval:org.mitre.oval:ste:752"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:845" version="1" check="at least one" comment="Patch 120329-02 or later installed (SPARC-10)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:638"/>
      <state state_ref="oval:org.mitre.oval:ste:757"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:844" version="1" check="at least one" comment="Patch 120330-02 or later installed (SPARC-10)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:637"/>
      <state state_ref="oval:org.mitre.oval:ste:756"/>
    </patch_test>
    <textfilecontent_test id="oval:org.mitre.oval:tst:843" version="1" check="all" comment="Target is configured to reference pam_krb5" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:636"/>
    </textfilecontent_test>
    <registry_test id="oval:org.mitre.oval:tst:80002" version="1" comment="Check if Microsoft System Center Configuration Manager 2007 R2 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24036"/>
      <state state_ref="oval:org.mitre.oval:ste:19625"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:79954" version="1" comment="Check if Microsoft System Center Configuration Manager 2007 R3 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24054"/>
      <state state_ref="oval:org.mitre.oval:ste:19960"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:80024" version="1" comment="Check if Microsoft System Center Configuration Manager 2007 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23424"/>
      <state state_ref="oval:org.mitre.oval:ste:19054"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:80097" version="1" comment="Check if Microsoft System Center Configuration Manager 2007 SP2 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23878"/>
      <state state_ref="oval:org.mitre.oval:ste:19796"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:80078" version="1" comment="Check if Microsoft Systems Management Server 2003 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23424"/>
      <state state_ref="oval:org.mitre.oval:ste:19789"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:79365" version="1" comment="Check if Microsoft Systems Management Server 2003 SP3 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23937"/>
      <state state_ref="oval:org.mitre.oval:ste:20055"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:80096" version="2" comment="Check if version of ReportingInstall.exe (SCCM 2007) is less than 4.0.6487.2216" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23970"/>
      <state state_ref="oval:org.mitre.oval:ste:19846"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:80064" version="1" comment="Check if version of ReportingInstall.exe (SMS 2003) is less than 2.50.4253.3129" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23970"/>
      <state state_ref="oval:org.mitre.oval:ste:19066"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:846" version="1" check="at least one" comment="the version of Wmpui.dll is less than 7.10.0.3077" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:639"/>
      <state state_ref="oval:org.mitre.oval:ste:758"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:80166" version="1" comment="Check if Visual Studio Team Foundation Server 2010 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23676"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:79804" version="1" comment="Check if Visual Studio Team Foundation Server 2010 SP1 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23859"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:79715" version="2" comment="Check if the version of Microsoft.TeamFoundation.WebAccess.dll is less than 10.0.40219.417" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23829"/>
      <state state_ref="oval:org.mitre.oval:ste:19971"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:847" version="2" comment="Patch PHCO_29249 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:640"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:99835" version="1" comment="Check if Oracle VM VirtualBox version is less than 4.3.0" check_existence="all_exist" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28098"/>
      <state state_ref="oval:org.mitre.oval:ste:27240"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:88945" version="1" comment="Check if Oracle VM VirtualBox version is less than or equals to 4.0.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28098"/>
      <state state_ref="oval:org.mitre.oval:ste:24051"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:88912" version="1" comment="Check if Oracle VM VirtualBox version  is greater than or equals to 4.0.8" check_existence="all_exist" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28098"/>
      <state state_ref="oval:org.mitre.oval:ste:24064"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:80596" version="1" comment="Check if Microsoft System Center Operations Manager 2007 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24053"/>
      <state state_ref="oval:org.mitre.oval:ste:20030"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:80567" version="1" comment="Check if the version of Microsoft System Center Operations Manager 2007 is greater than or equal to 6.0.6278.0" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23673"/>
      <state state_ref="oval:org.mitre.oval:ste:20330"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:80638" version="1" comment="Check if Microsoft System Center Operations Manager 2007 R2 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24053"/>
      <state state_ref="oval:org.mitre.oval:ste:19376"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:80576" version="1" comment="Check if the version of AuditingMessages.dll is less than or equal to 6.0.6278.0" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24080"/>
      <state state_ref="oval:org.mitre.oval:ste:19787"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:80122" version="1" comment="Check if the version of AuditingMessages.dll is less than 6.1.7221.110" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24080"/>
      <state state_ref="oval:org.mitre.oval:ste:20336"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:80504" version="1" comment="Check if SharePoint Server 2013 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23891"/>
      <state state_ref="oval:org.mitre.oval:ste:20292"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:81077" version="1" comment="Check if the version of Microsoft.office.server.dll is less than 15.0.4481.1507" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24129"/>
      <state state_ref="oval:org.mitre.oval:ste:20425"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:853" version="1" comment="The patch KB885492 is installed on Windows Server 2003" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:465"/>
      <state state_ref="oval:org.mitre.oval:ste:765"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:856" version="1" check="at least one" comment="the version of mshtml.dll is less than 6.0.2800.1476" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:768"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:855" version="1" check="at least one" comment="the patch kb834707 is installed (Installed Components key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:646"/>
      <state state_ref="oval:org.mitre.oval:ste:767"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:857" version="1" check="at least one" comment="The version of Ntoskrnl.exe is less than 5.0.2195.6992" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:335"/>
      <state state_ref="oval:org.mitre.oval:ste:769"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2622" version="1" comment="the patch kb885835is installed (Hotfix key)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1495"/>
      <state state_ref="oval:org.mitre.oval:ste:2451"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:79390" version="2" comment="Check if Microsoft SharePoint Foundation 2010 Service Pack 1 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24020"/>
      <state state_ref="oval:org.mitre.oval:ste:19815"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:80093" version="3" comment="Check if Microsoft SharePoint Server 2010 Service Pack 1 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24062"/>
      <state state_ref="oval:org.mitre.oval:ste:19908"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:79844" version="1" comment="Check if the version of Microsoft.office.server.native.dll is less than 14.0.6108.5000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24032"/>
      <state state_ref="oval:org.mitre.oval:ste:19858"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:79803" version="2" comment="Check if the version of Onfda.dll is less than 14.0.6106.5000" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23783"/>
      <state state_ref="oval:org.mitre.oval:ste:12737"/>
    </file_test>
    <swlist_test id="oval:org.mitre.oval:tst:1442" version="1" comment="Networking.NET2-KRN is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:984"/>
    </swlist_test>
    <file_test id="oval:org.mitre.oval:tst:867" version="1" comment="the version of webclnt.dll is less than 5.2.3790.453 (S03-Gold)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:628"/>
      <state state_ref="oval:org.mitre.oval:ste:778"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:868" version="1" check="all" comment="nwwks.dll is less than 5.2.3790.386" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:652"/>
      <state state_ref="oval:org.mitre.oval:ste:779"/>
    </file_test>
    <swlist_test id="oval:org.mitre.oval:tst:869" version="1" check="at least one" comment="Secure_Shell.SECURE_SHELL with version less than A.04.20.004 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:653"/>
      <state state_ref="oval:org.mitre.oval:ste:780"/>
    </swlist_test>
    <file_test id="oval:org.mitre.oval:tst:872" version="1" comment="shell32.dll is less than 6.0.3790.413" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:253"/>
      <state state_ref="oval:org.mitre.oval:ste:783"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:873" version="1" check="all" comment="nwwks.dll is less than 5.0.2195.7065" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:652"/>
      <state state_ref="oval:org.mitre.oval:ste:784"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:874" version="1" check="all" comment="mshtml.dll is less than 5.0.3833.200" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:785"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:878" version="1" comment="Patch 111570-04 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:657"/>
      <state state_ref="oval:org.mitre.oval:ste:789"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:877" version="1" comment="Patch 111571-04 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:656"/>
      <state state_ref="oval:org.mitre.oval:ste:788"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:876" version="1" comment="Patch 113322-03 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:655"/>
      <state state_ref="oval:org.mitre.oval:ste:787"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:875" version="1" comment="Patch 115880-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:654"/>
      <state state_ref="oval:org.mitre.oval:ste:786"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:880" version="1" check="at least one" comment="Patch 110943-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:322"/>
      <state state_ref="oval:org.mitre.oval:ste:791"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 113072-08 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4119" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2465"/>
      <state state_ref="oval:org.mitre.oval:ste:2990"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 114423-07 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3870" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2355"/>
      <state state_ref="oval:org.mitre.oval:ste:3223"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 108975-10 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3837" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2268"/>
      <state state_ref="oval:org.mitre.oval:ste:3141"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 108976-10 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3332" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2592"/>
      <state state_ref="oval:org.mitre.oval:ste:3141"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:881" version="1" check="at least one" comment="Xlview.exe is installed with a version less than 11.0.8012.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:659"/>
      <state state_ref="oval:org.mitre.oval:ste:792"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:2864" version="1" check="at least one" comment="Patch 108117-06 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1642"/>
      <state state_ref="oval:org.mitre.oval:ste:2682"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2866" version="1" check="at least one" comment="httpd version is less than 2.0.40-21.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1644"/>
      <state state_ref="oval:org.mitre.oval:ste:2684"/>
    </rpminfo_test>
    <inetlisteningservers_test id="oval:org.mitre.oval:tst:2865" version="2" check="at least one" comment="httpd listening on the network" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1643"/>
      <state state_ref="oval:org.mitre.oval:ste:2683"/>
    </inetlisteningservers_test>
    <file_test id="oval:org.mitre.oval:tst:3105" version="1" check="at least one" comment="File rpc.ttdbserverd exists" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1762"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:3104" version="1" check="at least one" comment="Patch 110286-09 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1620"/>
      <state state_ref="oval:org.mitre.oval:ste:2909"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:3102" version="1" check="at least one" comment="File rpc.ttdbserverd executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1762"/>
      <state state_ref="oval:org.mitre.oval:ste:2907"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3101" version="1" check="at least one" comment="File rpc.ttdbserverd executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1762"/>
      <state state_ref="oval:org.mitre.oval:ste:2906"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3100" version="1" check="at least one" comment="File rpc.ttdbserverd executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1762"/>
      <state state_ref="oval:org.mitre.oval:ste:2905"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2441" version="2" check="at least one" comment="Mozilla Suite installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:230"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2440" version="3" check="at least one" comment="Mozilla Suite is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1386"/>
      <state state_ref="oval:org.mitre.oval:ste:2285"/>
    </registry_test>
    <swlist_test id="oval:org.mitre.oval:tst:890" version="1" check="at least one" comment="Webproxy is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:666"/>
    </swlist_test>
    <patch_test id="oval:org.mitre.oval:tst:889" version="2" check="at least one" comment="Patch PHSS_34163 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:665"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 111400-04 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4123" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2243"/>
      <state state_ref="oval:org.mitre.oval:ste:3676"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 114637-04 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3583" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2632"/>
      <state state_ref="oval:org.mitre.oval:ste:3676"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 111401-04 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3456" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2690"/>
      <state state_ref="oval:org.mitre.oval:ste:3676"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 114636-04 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3416" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2000"/>
      <state state_ref="oval:org.mitre.oval:ste:3676"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:2873" version="1" check="at least one" comment="File fs.auto exists" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1648"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2872" version="1" check="at least one" comment="File xfs exists" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1645"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:2871" version="1" check="at least one" comment="Patch 109862-03 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1647"/>
      <state state_ref="oval:org.mitre.oval:ste:2689"/>
    </patch_test>
    <inetd_test id="oval:org.mitre.oval:tst:2870" version="2" check="at least one" comment="inetd.conf contains fs.auto" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1646"/>
      <state state_ref="oval:org.mitre.oval:ste:2688"/>
    </inetd_test>
    <file_test id="oval:org.mitre.oval:tst:2869" version="1" check="at least one" comment="File xfs executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1645"/>
      <state state_ref="oval:org.mitre.oval:ste:2687"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2868" version="1" check="at least one" comment="File xfs executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1645"/>
      <state state_ref="oval:org.mitre.oval:ste:2686"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2867" version="1" check="at least one" comment="File xfs executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1645"/>
      <state state_ref="oval:org.mitre.oval:ste:2685"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:893" version="1" check="at least one" comment="the version of mshtml.dll is less than 5.0.3835.2200" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:802"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:79595" version="2" comment="Check if Microsoft Lync 2010 Attendee (user level install) is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23843"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:79186" version="1" comment="Check if Microsoft Lync 2010 Attendant is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23492"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:79499" version="1" comment="Check if Microsoft Lync 2010 Attendee (admin level install) is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23972"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:79642" version="1" comment="Check if Microsoft Lync 2010 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23068"/>
      <state state_ref="oval:org.mitre.oval:ste:19769"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:80016" version="1" comment="Check if version of Attendantconsole.exe is less than 4.0.7577.4098" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24023"/>
      <state state_ref="oval:org.mitre.oval:ste:19700"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:79972" version="1" comment="Check if version of Communicator.exe (Lync 2010) is less than 4.0.7577.4098" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23751"/>
      <state state_ref="oval:org.mitre.oval:ste:19700"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:79686" version="2" comment="Check if version of ogl.dll (Lync 2010 Attendee for user) is less than 4.0.7577.4098" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24024"/>
      <state state_ref="oval:org.mitre.oval:ste:19700"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:79522" version="1" comment="Check if version of ogl.dll (Lync 2010 Attendee for admin) is less than 4.0.7577.4098" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24009"/>
      <state state_ref="oval:org.mitre.oval:ste:19700"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:77686" version="2" comment="Determine if the version of IBM DB2 UDB is less than or equal to 9.7" check_existence="at_least_one_exists" check="all" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15025"/>
      <state state_ref="oval:org.mitre.oval:ste:18185"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:77532" version="2" comment="Determine if the version of IBM DB2 UDB is greater than or equal to 9.1" check_existence="at_least_one_exists" check="all" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15025"/>
      <state state_ref="oval:org.mitre.oval:ste:18088"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:79536" version="1" comment="Check if FAST Search Server 2010 for SharePoint is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24140"/>
      <state state_ref="oval:org.mitre.oval:ste:19463"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:80116" version="2" comment="Check if Exchange Server 2007 SP3 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:6032"/>
      <state state_ref="oval:org.mitre.oval:ste:5469"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:78247" version="1" comment="Microsoft Exchange Server 2010 SP1 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23564"/>
      <state state_ref="oval:org.mitre.oval:ste:18812"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:78176" version="1" comment="Microsoft Exchange Server 2010 SP2 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23564"/>
      <state state_ref="oval:org.mitre.oval:ste:18859"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:77602" version="1" comment="Microsoft Exchange Server 2010 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23591"/>
      <state state_ref="oval:org.mitre.oval:ste:18889"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:80199" version="2" comment="Check if the version of transcodingservice.exe is less than 14.1.421.2" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24069"/>
      <state state_ref="oval:org.mitre.oval:ste:19804"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:80087" version="2" comment="Check if the version of transcodingservice.exe is less than 8.3.279.4" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23395"/>
      <state state_ref="oval:org.mitre.oval:ste:19614"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:80085" version="1" comment="Check if the version of Microsoft.sharepoint.search.extended.administration.dll is less than 14.0.334.11" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23754"/>
      <state state_ref="oval:org.mitre.oval:ste:19994"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:79908" version="2" comment="Check if the version of transcodingservice.exe is less than 14.2.318.4" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:24069"/>
      <state state_ref="oval:org.mitre.oval:ste:19493"/>
    </file_test>
    <package_test id="oval:org.mitre.oval:tst:900" version="1" check="at least one" comment="Solaris Management Console Web Components (SUNWwbmc) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:674"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:899" version="1" check="at least one" comment="Patch 111313-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:673"/>
      <state state_ref="oval:org.mitre.oval:ste:807"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:898" version="1" check="at least one" comment="Patch 116807-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:672"/>
      <state state_ref="oval:org.mitre.oval:ste:806"/>
    </patch_test>
    <process_test id="oval:org.mitre.oval:tst:897" version="1" check="at least one" comment="smcboot running" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <oval-def:note>Solaris Management Console web interface</oval-def:note>
      </oval-def:notes>
      <object object_ref="oval:org.mitre.oval:obj:671"/>
    </process_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2877" version="1" check="at least one" comment="gtkhtml version is less than 1.1.9-0.9.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1650"/>
      <state state_ref="oval:org.mitre.oval:ste:2693"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:2876" version="1" check="at least one" comment="/usr/bin/evolution is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1649"/>
      <state state_ref="oval:org.mitre.oval:ste:2692"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2875" version="1" check="at least one" comment="/usr/bin/evolution is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1649"/>
      <state state_ref="oval:org.mitre.oval:ste:2691"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2874" version="1" check="at least one" comment="/usr/bin/evolution is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1649"/>
      <state state_ref="oval:org.mitre.oval:ste:2690"/>
    </file_test>
    <package_test id="oval:org.mitre.oval:tst:901" version="1" check="all" comment="Netscape installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:675"/>
    </package_test>
    <file_test id="oval:org.mitre.oval:tst:902" version="1" comment="the version of Msdtctm.dll is less than 2001.12.4720.480" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:534"/>
      <state state_ref="oval:org.mitre.oval:ste:808"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:138897" version="1" comment="Determine if the version of Lotus Notes is greater than or equal to 8.0" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:44121"/>
      <state state_ref="oval:org.mitre.oval:ste:38823"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:138810" version="1" comment="Determine if the version of Lotus Notes is equal to 7.0" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:44121"/>
      <state state_ref="oval:org.mitre.oval:ste:38764"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:138551" version="1" comment="Determine if the version of Lotus Notes is less than or equal to 8.5" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:44121"/>
      <state state_ref="oval:org.mitre.oval:ste:38821"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:77830" version="2" comment="Determine if the version of IBM DB2 UDB is less than or equal to 9.7.0.4" check_existence="at_least_one_exists" check="all" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15025"/>
      <state state_ref="oval:org.mitre.oval:ste:18414"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:77780" version="2" comment="Determine if the version of IBM DB2 UDB is greater than or equal to 9.7.0.1" check_existence="at_least_one_exists" check="all" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15025"/>
      <state state_ref="oval:org.mitre.oval:ste:18325"/>
    </registry_test>
    <patch_test id="oval:org.mitre.oval:tst:910" version="1" check="at least one" comment="Patch 109023-05 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:683"/>
      <state state_ref="oval:org.mitre.oval:ste:816"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:909" version="1" check="at least one" comment="Patch 120240-01 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:682"/>
      <state state_ref="oval:org.mitre.oval:ste:815"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:908" version="1" check="at least one" comment="Patch 109024-05 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:681"/>
      <state state_ref="oval:org.mitre.oval:ste:814"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:907" version="1" check="at least one" comment="Patch 120239-01 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:680"/>
      <state state_ref="oval:org.mitre.oval:ste:813"/>
    </patch_test>
    <registry_test id="oval:org.mitre.oval:tst:3087" version="1" comment="Patch Q313829 Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1756"/>
      <state state_ref="oval:org.mitre.oval:ste:2892"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2878" version="1" check="at least one" comment="the version of shell32.dll is less than 5.0.3502.4718" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:253"/>
      <state state_ref="oval:org.mitre.oval:ste:2694"/>
    </file_test>
    <package_test id="oval:org.mitre.oval:tst:914" version="1" check="all" comment="Samba - Usr (SUNWsmbau) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:685"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:913" version="1" check="all" comment="Patch 114684-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:506"/>
      <state state_ref="oval:org.mitre.oval:ste:818"/>
    </patch_test>
    <process_test id="oval:org.mitre.oval:tst:912" version="1" check="all" comment="smbd running" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:684"/>
    </process_test>
    <patch_test id="oval:org.mitre.oval:tst:915" version="2" comment="Patch PHSS_34102 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:686"/>
    </patch_test>
    <swlist_test id="oval:org.mitre.oval:tst:920" version="1" check="at least one" comment="CIFS-Server.CIFS-RUN with version less than A.01.11.04 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:690"/>
      <state state_ref="oval:org.mitre.oval:ste:824"/>
    </swlist_test>
    <swlist_test id="oval:org.mitre.oval:tst:919" version="1" check="at least one" comment="CIFS-Server.CIFS-UTIL with version less than A.01.11.04 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:689"/>
      <state state_ref="oval:org.mitre.oval:ste:823"/>
    </swlist_test>
    <swlist_test id="oval:org.mitre.oval:tst:918" version="1" check="at least one" comment="CIFS-Server.CIFS-ADMIN with version less than A.01.11.04 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:688"/>
      <state state_ref="oval:org.mitre.oval:ste:822"/>
    </swlist_test>
    <swlist_test id="oval:org.mitre.oval:tst:917" version="1" check="at least one" comment="CIFS-Server.CIFS-LIB with version less than A.01.11.04 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:687"/>
      <state state_ref="oval:org.mitre.oval:ste:821"/>
    </swlist_test>
    <file_test id="oval:org.mitre.oval:tst:923" version="1" check="all" comment="mshtml.dll is less than 6.0.3790.418" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:827"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:924" version="2" comment="Patch PHCO_30402 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:693"/>
    </patch_test>
    <registry_test id="oval:org.mitre.oval:tst:77406" version="3" comment="Determine if the version of IBM DB2 UDB is equal to 9.5" check_existence="at_least_one_exists" check="all" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15025"/>
      <state state_ref="oval:org.mitre.oval:ste:18040"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:138693" version="1" comment="Determine if the version of Lotus Notes is equal to 8.5" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:44121"/>
      <state state_ref="oval:org.mitre.oval:ste:38545"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:927" version="3" check="at least one" comment="Internet Explorer 5.01 (any patch level) is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:831"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:926" version="1" check="at least one" comment="the version of mshtml.dll is less than 5.0.3839.2200" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:830"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:933" version="1" check="at least one" comment="Patch 111313-03 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:673"/>
      <state state_ref="oval:org.mitre.oval:ste:837"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:932" version="1" check="at least one" comment="Patch 111314-03 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:697"/>
      <state state_ref="oval:org.mitre.oval:ste:836"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:931" version="1" check="at least one" comment="Patch 116807-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:672"/>
      <state state_ref="oval:org.mitre.oval:ste:835"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:930" version="1" check="at least one" comment="Patch 116808-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:696"/>
      <state state_ref="oval:org.mitre.oval:ste:834"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:929" version="1" check="at least one" comment="Patch 121308-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:695"/>
      <state state_ref="oval:org.mitre.oval:ste:833"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:928" version="1" check="at least one" comment="Patch 121309-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:694"/>
      <state state_ref="oval:org.mitre.oval:ste:832"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:4134" version="1" check="at least one" comment="Patch 125100-09 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1994"/>
      <state state_ref="oval:org.mitre.oval:ste:3251"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:4040" version="1" check="at least one" comment="Patch 125101-09 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2712"/>
      <state state_ref="oval:org.mitre.oval:ste:3251"/>
    </patch_test>
    <registry_test id="oval:org.mitre.oval:tst:2959" version="1" comment="Patch Q314147 Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1695"/>
      <state state_ref="oval:org.mitre.oval:ste:2774"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2958" version="1" comment="the SNMP service is enabled" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1694"/>
      <state state_ref="oval:org.mitre.oval:ste:2773"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2883" version="1" comment="the version of snmp.exe is less than 5.0.2195.4919" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:973"/>
      <state state_ref="oval:org.mitre.oval:ste:2699"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:78074" version="1" comment="Microsoft.SharePoint.Taxonomy.dll version is less than 14.0.6113.5000" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15529"/>
      <state state_ref="oval:org.mitre.oval:ste:18595"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:77961" version="1" comment="OWSSVR.DLL version is less than 14.0.6114.5001" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:16246"/>
      <state state_ref="oval:org.mitre.oval:ste:18732"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:939" version="1" comment="File /usr/dt/bin/dtlogin exists" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:703"/>
    </file_test>
    <process_test id="oval:org.mitre.oval:tst:938" version="1" comment="dtlogin running" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:702"/>
    </process_test>
    <patch_test id="oval:org.mitre.oval:tst:937" version="3" comment="Patch 108919-21 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:701"/>
      <state state_ref="oval:org.mitre.oval:ste:841"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:936" version="1" comment="Patch 112807-09 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:700"/>
      <state state_ref="oval:org.mitre.oval:ste:840"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:935" version="1" comment="Patch 107180-31 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:699"/>
      <state state_ref="oval:org.mitre.oval:ste:839"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:138392" version="1" comment="Determine if the version of Lotus Notes is greater than or equal to 8.0.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:44121"/>
      <state state_ref="oval:org.mitre.oval:ste:38156"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:138083" version="1" comment="Determine if the version of Lotus Notes is less than or equal to 8.5.1.4" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:44121"/>
      <state state_ref="oval:org.mitre.oval:ste:38726"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:77867" version="2" comment="Anti-Cross Site Scripting Library 3.x or 4.0 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1436"/>
      <state state_ref="oval:org.mitre.oval:ste:18471"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:943" version="1" comment="the version of Gdi32.dll is less than 5.0.2195.7073" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:622"/>
      <state state_ref="oval:org.mitre.oval:ste:845"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2884" version="1" check="at least one" comment="the version of mshtml.dll is less than 6.0.2722.900" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2700"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:42372" version="1" comment="Check if IBM DB2 UDB is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15025"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:77535" version="2" comment="Determine if the version of IBM DB2 UDB is equal to 9.7.0.1" check_existence="at_least_one_exists" check="all" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15025"/>
      <state state_ref="oval:org.mitre.oval:ste:18065"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:951" version="1" comment="the version of Quartz.dll is greater than or equal to 6.4.3790.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:704"/>
      <state state_ref="oval:org.mitre.oval:ste:853"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:950" version="1" comment="the version of Quartz.dll is less than 6.4.3790.399" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:704"/>
      <state state_ref="oval:org.mitre.oval:ste:852"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:952" version="1" check="at least one" comment="the version of mshtml.dll is less than 6.0.3790.536" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:854"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:953" version="1" comment="cdosys.dll is less than 6.1.3940.42" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:661"/>
      <state state_ref="oval:org.mitre.oval:ste:855"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:957" version="1" check="at least one" comment="the version of mshtml.dll is less than 5.0.3841.1900" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:859"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:959" version="1" comment="the version of ole32.dll is less than 5.2.3790.374" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:406"/>
      <state state_ref="oval:org.mitre.oval:ste:861"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:958" version="1" comment="the version of rpcss.dll is less than 5.2.3790.374" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:709"/>
      <state state_ref="oval:org.mitre.oval:ste:860"/>
    </file_test>
    <package_test id="oval:org.mitre.oval:tst:963" version="1" check="all" comment="the SUNWlzas package (for slsadmin) is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:713"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:962" version="1" check="at least one" comment="Patch 121332-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:712"/>
      <state state_ref="oval:org.mitre.oval:ste:863"/>
    </patch_test>
    <swlist_test id="oval:org.mitre.oval:tst:966" version="1" comment="IPSec.IPSEC2-KRN is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:716"/>
    </swlist_test>
    <swlist_test id="oval:org.mitre.oval:tst:965" version="1" comment="IPSec.IPSEC2-KRN with version less than A.2.00.01 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:715"/>
      <state state_ref="oval:org.mitre.oval:ste:865"/>
    </swlist_test>
    <swlist_test id="oval:org.mitre.oval:tst:964" version="1" comment="TOUR_PRODUCT.T-NET2-KRN with version less than A.03.00 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:714"/>
      <state state_ref="oval:org.mitre.oval:ste:864"/>
    </swlist_test>
    <patch_test id="oval:org.mitre.oval:tst:1441" version="2" comment="Patch PHNE_32606 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:983"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:9683" version="1" comment="SQL Server 2000 GDR - the version of sqlservr.exe is greater than 2000.80.2000.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:843"/>
      <state state_ref="oval:org.mitre.oval:ste:4347"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:9191" version="2" comment="SQL Server 2000 QFE - the version of sqlservr.exe is greater than 2000.80.2000.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:843"/>
      <state state_ref="oval:org.mitre.oval:ste:4347"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:77541" version="1" comment="Check if version of Sqlservr.exe is less than 2000.80.2273.0" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:843"/>
      <state state_ref="oval:org.mitre.oval:ste:18112"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:77466" version="1" comment="Check if version of Sqlservr.exe is less than 2000.80.2050.0" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:843"/>
      <state state_ref="oval:org.mitre.oval:ste:18145"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:969" version="4" comment="Win2K/XP/2003 service pack 1 (or later) is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:717"/>
      <state state_ref="oval:org.mitre.oval:ste:868"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:968" version="1" check="at least one" comment="the version of Spoolsv.exe is less than 5.2.3790.346" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:223"/>
      <state state_ref="oval:org.mitre.oval:ste:867"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3109" version="1" comment="File Xsun exists" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1764"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:3108" version="1" check="at least one" comment="Patch 108652-52 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:876"/>
      <state state_ref="oval:org.mitre.oval:ste:2912"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:3107" version="1" check="at least one" comment="File Xsun SGID and executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1764"/>
      <state state_ref="oval:org.mitre.oval:ste:2911"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3106" version="1" check="at least one" comment="File Xsun SGID and executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1764"/>
      <state state_ref="oval:org.mitre.oval:ste:2910"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:77468" version="1" comment="Check if Microsoft Forefront Security for SharePoint is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23183"/>
      <state state_ref="oval:org.mitre.oval:ste:17733"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:77816" version="1" comment="Check if Microsoft Antigen for Exchange is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23399"/>
      <state state_ref="oval:org.mitre.oval:ste:18034"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:77631" version="1" comment="Check if Microsoft Forefront Security for Exchange Server is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23054"/>
      <state state_ref="oval:org.mitre.oval:ste:18376"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:77748" version="1" comment="Check if Microsoft Windows Defender is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:22631"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:77523" version="1" comment="Check if Microsoft Antigen for SMTP Gateway is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23128"/>
      <state state_ref="oval:org.mitre.oval:ste:18235"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:77777" version="1" comment="Check if Microsoft Windows Live OneCare is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23334"/>
      <state state_ref="oval:org.mitre.oval:ste:18173"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:77829" version="1" comment="Check if Antigen for Exchange EngineVersion is less than 0.1.13.192" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:22702"/>
      <state state_ref="oval:org.mitre.oval:ste:18354"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:77823" version="1" comment="Check if Windows Defender EngineVersion is less than 1.1.3520.0" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23403"/>
      <state state_ref="oval:org.mitre.oval:ste:17784"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:77776" version="1" comment="Check if Live OneCare EngineVersion is less than 1.1.3520.0" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23386"/>
      <state state_ref="oval:org.mitre.oval:ste:17784"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:77774" version="1" comment="Check if Forefront Security for Exchange Server EngineVersion is less than 0.1.13.192" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23298"/>
      <state state_ref="oval:org.mitre.oval:ste:18354"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:77719" version="1" comment="Check if Forefront Security for SharePoint EngineVersion is less than 0.1.13.192" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23297"/>
      <state state_ref="oval:org.mitre.oval:ste:18354"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:77570" version="1" comment="Check if Antigen for SMTP Gateway EngineVersion is less than 0.1.13.192" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:23374"/>
      <state state_ref="oval:org.mitre.oval:ste:18354"/>
    </registry_test>
    <uname_test id="oval:org.mitre.oval:tst:3576" version="1" comment="Solaris 7 Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:3679"/>
    </uname_test>
    <uname_test id="oval:org.mitre.oval:tst:4234" version="1" comment="Solaris 2.6 Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:3351"/>
    </uname_test>
    <patch_test id="oval:org.mitre.oval:tst:4247" version="1" comment="Patch 108529-27 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2635"/>
      <state state_ref="oval:org.mitre.oval:ste:3046"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:4228" version="1" comment="Patch 108528-27 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2074"/>
      <state state_ref="oval:org.mitre.oval:ste:3046"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:4002" version="1" comment="Patch 106541-29 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2498"/>
      <state state_ref="oval:org.mitre.oval:ste:3923"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3937" version="1" comment="Patch 112234-11 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2137"/>
      <state state_ref="oval:org.mitre.oval:ste:3391"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3814" version="1" comment="Patch 112233-11 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2483"/>
      <state state_ref="oval:org.mitre.oval:ste:3391"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3794" version="1" comment="Patch 105181-37 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2170"/>
      <state state_ref="oval:org.mitre.oval:ste:3308"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3686" version="1" comment="Patch 106542-29 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2773"/>
      <state state_ref="oval:org.mitre.oval:ste:3923"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3479" version="1" comment="Patch 105182-37 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2072"/>
      <state state_ref="oval:org.mitre.oval:ste:3308"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2897" version="1" check="at least one" comment="gtkhtml version is less than 1.1.9-0.9" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1663"/>
      <state state_ref="oval:org.mitre.oval:ste:2713"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:41876" version="1" comment="Check if IBM Lotus Notes is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15861"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:138913" version="1" comment="Determine if the version of Lotus Notes is less than or equal to 8.5.2.2" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:44121"/>
      <state state_ref="oval:org.mitre.oval:ste:38665"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:138910" version="1" comment="Determine if the version of Lotus Notes is less than or equal to 5.2" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:44121"/>
      <state state_ref="oval:org.mitre.oval:ste:38473"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:138900" version="1" comment="Determine if the version of Lotus Notes is greater than or equal to 7.0.0" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:44121"/>
      <state state_ref="oval:org.mitre.oval:ste:38658"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:138813" version="1" comment="Determine if the version of Lotus Notes is greater than or equal to 6.0.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:44121"/>
      <state state_ref="oval:org.mitre.oval:ste:38770"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:138776" version="1" comment="Determine if the version of Lotus Notes is less than or equal to 6.5.6" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:44121"/>
      <state state_ref="oval:org.mitre.oval:ste:38668"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:138741" version="1" comment="Determine if the version of Lotus Notes is greater than or equal to 5:0a" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:44121"/>
      <state state_ref="oval:org.mitre.oval:ste:38859"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:138685" version="1" comment="Determine if the version of Lotus Notes is less than or equal to 4.6" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:44121"/>
      <state state_ref="oval:org.mitre.oval:ste:38438"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:138657" version="1" comment="Determine if the version of Lotus Notes is greater than or equal to 4.2.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:44121"/>
      <state state_ref="oval:org.mitre.oval:ste:38836"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:138653" version="1" comment="Determine if the version of Lotus Notes is less than or equal to 7.0.4" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:44121"/>
      <state state_ref="oval:org.mitre.oval:ste:38483"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:138612" version="1" comment="Determine if the version of Lotus Notes is greater than or equal to 3.0.0.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:44121"/>
      <state state_ref="oval:org.mitre.oval:ste:38858"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:138507" version="1" comment="Determine if the version of Lotus Notes is greater than or equal to 8.0.0" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:44121"/>
      <state state_ref="oval:org.mitre.oval:ste:38806"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:138223" version="1" comment="Determine if the version of Lotus Notes is less than or equal to 3.0.0.2" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:44121"/>
      <state state_ref="oval:org.mitre.oval:ste:38882"/>
    </file_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 118855-10 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4131" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2735"/>
      <state state_ref="oval:org.mitre.oval:ste:3141"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 118305-07 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4029" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1965"/>
      <state state_ref="oval:org.mitre.oval:ste:3223"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 117470-06 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3792" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2463"/>
      <state state_ref="oval:org.mitre.oval:ste:3615"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 116966-16 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3767" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2205"/>
      <state state_ref="oval:org.mitre.oval:ste:3663"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 116965-17 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3268" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2171"/>
      <state state_ref="oval:org.mitre.oval:ste:3037"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 118833-12 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3185" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2190"/>
      <state state_ref="oval:org.mitre.oval:ste:3029"/>
    </patch_test>
    <registry_test id="oval:org.mitre.oval:tst:1202" version="2" comment="Exchange Server 2003,SP2 is installed." check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:732"/>
      <state state_ref="oval:org.mitre.oval:ste:1075"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:992" version="2" comment="Exchange Server 2000,SP3 is installed." check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:732"/>
      <state state_ref="oval:org.mitre.oval:ste:890"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1108" version="2" comment="Exchange Server 2003,SP1 is installed." check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:732"/>
      <state state_ref="oval:org.mitre.oval:ste:990"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:8498" version="1" comment="No Exchange Server 2007 SP is installed." check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:6032"/>
      <state state_ref="oval:org.mitre.oval:ste:3489"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:4122" version="1" check="all" comment="cdoex.dll is less than 8.0.709.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:513"/>
      <state state_ref="oval:org.mitre.oval:ste:3424"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3975" version="1" check="all" comment="cdoex.dll is less than 6.0.6619.12" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:513"/>
      <state state_ref="oval:org.mitre.oval:ste:3460"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3925" version="1" check="all" comment="cdoex.dll is less than 6.5.7235.2" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:513"/>
      <state state_ref="oval:org.mitre.oval:ste:3775"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3618" version="1" check="all" comment="cdoex.dll is less than 6.5.7652.24" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:513"/>
      <state state_ref="oval:org.mitre.oval:ste:3544"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2898" version="1" check="at least one" comment="the version of msjava.dll is less than 5.0.3810.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1446"/>
      <state state_ref="oval:org.mitre.oval:ste:2714"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2901" version="1" check="at least one" comment="gnupg version is less than 1.2.1-4" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1665"/>
      <state state_ref="oval:org.mitre.oval:ste:2717"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:2900" version="1" check="at least one" comment="/usr/bin/gnupg is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1664"/>
      <state state_ref="oval:org.mitre.oval:ste:2716"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2899" version="1" check="at least one" comment="/usr/bin/gnupg is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1664"/>
      <state state_ref="oval:org.mitre.oval:ste:2715"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:972" version="1" comment="the patch kb890175 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:720"/>
      <state state_ref="oval:org.mitre.oval:ste:871"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:971" version="1" comment="the version of hhctrl.ocx is less than 5.2.3790.233" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:531"/>
      <state state_ref="oval:org.mitre.oval:ste:870"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:974" version="1" check="all" comment="FreeRADIUS rpm older than 1.0.1-1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:722"/>
      <state state_ref="oval:org.mitre.oval:ste:873"/>
    </rpminfo_test>
    <inetlisteningservers_test id="oval:org.mitre.oval:tst:973" version="2" check="all" comment="radiusd is listening on the network" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:721"/>
      <state state_ref="oval:org.mitre.oval:ste:872"/>
    </inetlisteningservers_test>
    <swlist_test id="oval:org.mitre.oval:tst:2388" version="1" check="at least one" comment="hpuxwsAPACHE is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:1365"/>
    </swlist_test>
    <swlist_test id="oval:org.mitre.oval:tst:2387" version="1" check="at least one" comment="hpuxwsAPACHE has a version greater than or equal (A|B).2.0.55.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:1364"/>
      <state state_ref="oval:org.mitre.oval:ste:2236"/>
    </swlist_test>
    <patch_test id="oval:org.mitre.oval:tst:3909" version="1" check="at least one" comment="Patch 114193-35 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1850"/>
      <state state_ref="oval:org.mitre.oval:ste:3144"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3891" version="1" check="at least one" comment="Patch 112945-45 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2751"/>
      <state state_ref="oval:org.mitre.oval:ste:3594"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3783" version="1" check="at least one" comment="Patch 121308-09 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2272"/>
      <state state_ref="oval:org.mitre.oval:ste:3844"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3715" version="1" check="at least one" comment="Patch 111313-05 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2631"/>
      <state state_ref="oval:org.mitre.oval:ste:3217"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3352" version="1" check="at least one" comment="Patch 111314-05 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2387"/>
      <state state_ref="oval:org.mitre.oval:ste:3217"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3261" version="1" check="at least one" comment="Patch 121309-09 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2336"/>
      <state state_ref="oval:org.mitre.oval:ste:3844"/>
    </patch_test>
    <package_test id="oval:org.mitre.oval:tst:3160" version="1" check="at least one" comment="Package SUNWwbmc installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2477"/>
    </package_test>
    <file_test id="oval:org.mitre.oval:tst:719" version="1" comment="the version of Jscript.dll is greater than or equal to 5.6.0.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:564"/>
      <state state_ref="oval:org.mitre.oval:ste:645"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:42062" version="1" comment="the version of Jscript.dll is greater than or equal to 5.5.0.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:564"/>
      <state state_ref="oval:org.mitre.oval:ste:12089"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2907" version="1" comment="the version of jscript.dll is less than 5.1.0.8513" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:564"/>
      <state state_ref="oval:org.mitre.oval:ste:2723"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2906" version="1" comment="the version of jscript.dll is less than 5.5.0.8513" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:564"/>
      <state state_ref="oval:org.mitre.oval:ste:2722"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2905" version="1" comment="the version of jscript.dll is less than 5.6.0.8513" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:564"/>
      <state state_ref="oval:org.mitre.oval:ste:2721"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:10504" version="1" comment="Jscript.dll for JScript 5.1 or later is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:564"/>
      <state state_ref="oval:org.mitre.oval:ste:5393"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:978" version="1" check="at least one" comment="the version of mshtml.dll is less than 6.0.3790.259" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:877"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:977" version="2" check="at least one" comment="the patch kb834707(wildcard*) is installed (Hotfix key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:724"/>
      <state state_ref="oval:org.mitre.oval:ste:876"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2801" version="3" comment="Internet Explorer 6  for Windows Server 2003 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:2621"/>
    </registry_test>
    <swlist_test id="oval:org.mitre.oval:tst:981" version="1" check="at least one" comment="InternetSrvcs.INETSVCS-RUN is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:727"/>
    </swlist_test>
    <patch_test id="oval:org.mitre.oval:tst:980" version="2" check="at least one" comment="Patch PHNE_34543 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:726"/>
    </patch_test>
    <swlist_test id="oval:org.mitre.oval:tst:979" version="1" check="at least one" comment="WUFTP-26.INETSVCS-FTP with version less than B.11.11.01.006 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:725"/>
      <state state_ref="oval:org.mitre.oval:ste:878"/>
    </swlist_test>
    <file_test id="oval:org.mitre.oval:tst:982" version="1" check="at least one" comment="the version of cryptdlg.dll is less than 5.0.1558.6608" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:728"/>
      <state state_ref="oval:org.mitre.oval:ste:880"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:985" version="1" check="at least one" comment="the version of httpext.dll is less than 5.0.2195.6958" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:278"/>
      <state state_ref="oval:org.mitre.oval:ste:883"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:984" version="2" comment="the patch KB824151 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:729"/>
      <state state_ref="oval:org.mitre.oval:ste:882"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2953" version="1" comment="WebDav is disabled(for iis 5.0)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1691"/>
      <state state_ref="oval:org.mitre.oval:ste:2768"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2911" version="1" check="at least one" comment="ghostscript version is less than 7.05-32.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1668"/>
      <state state_ref="oval:org.mitre.oval:ste:2727"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:2910" version="1" check="at least one" comment="/usr/bin/gs is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1667"/>
      <state state_ref="oval:org.mitre.oval:ste:2726"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2909" version="1" check="at least one" comment="/usr/bin/gs is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1667"/>
      <state state_ref="oval:org.mitre.oval:ste:2725"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2908" version="1" check="at least one" comment="/usr/bin/gs is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1667"/>
      <state state_ref="oval:org.mitre.oval:ste:2724"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2664" version="1" check="at least one" comment="the version of mshtml.dll is less than 5.0.3831.1800" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2488"/>
    </file_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 125720-03 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:4003" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2019"/>
      <state state_ref="oval:org.mitre.oval:ste:3874"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 112785-61 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3874" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1925"/>
      <state state_ref="oval:org.mitre.oval:ste:3524"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119059-25 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3577" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2398"/>
      <state state_ref="oval:org.mitre.oval:ste:3205"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 112786-50 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3471" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2015"/>
      <state state_ref="oval:org.mitre.oval:ste:3681"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 124833-02 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3278" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2737"/>
      <state state_ref="oval:org.mitre.oval:ste:3619"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119060-24 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3231" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2067"/>
      <state state_ref="oval:org.mitre.oval:ste:3432"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119068-07 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3216" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2036"/>
      <state state_ref="oval:org.mitre.oval:ste:3735"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 119067-07 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3167" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2152"/>
      <state state_ref="oval:org.mitre.oval:ste:3735"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:987" version="2" check="at least one" comment="the version of msadco.dll is less than 2.80.1062.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:358"/>
      <state state_ref="oval:org.mitre.oval:ste:885"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:3097" version="1" comment="this is an NT Terminal Server" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1761"/>
      <state state_ref="oval:org.mitre.oval:ste:2902"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:3096" version="2" check="at least one" comment="the version of w3svc.dll is less than 4.2.775.1" check_existence="at_least_one_exists" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:496"/>
      <state state_ref="oval:org.mitre.oval:ste:2901"/>
    </file_test>
    <metabase_test id="oval:org.mitre.oval:tst:3092" version="3" check="at least one" comment="asp.dll mapping exists" check_existence="at_least_one_exists" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1552"/>
      <state state_ref="oval:org.mitre.oval:ste:2897"/>
    </metabase_test>
    <file_test id="oval:org.mitre.oval:tst:990" version="1" check="at least one" comment="the version of Mdbmsg.dll greater than or equal 5.0.1460.9 (Exchange Server 5.0,SP2 is installed)." check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:730"/>
      <state state_ref="oval:org.mitre.oval:ste:888"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:989" version="1" check="at least one" comment="the version of Mdbmsg.dll is less than 5.0.1462.22" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:730"/>
      <state state_ref="oval:org.mitre.oval:ste:887"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:88607" version="1" comment="Check if Oracle VM VirtualBox version is greater than or equals to 4.0.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28098"/>
      <state state_ref="oval:org.mitre.oval:ste:24096"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:993" version="2" comment="the version of Tcpip.sys is less than 5.2.3790.468 (S03-Gold)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:588"/>
      <state state_ref="oval:org.mitre.oval:ste:891"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:2912" version="1" check="at least one" comment="Patch 108376-30 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1460"/>
      <state state_ref="oval:org.mitre.oval:ste:2728"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:994" version="1" check="at least one" comment="the version of mshtml.dll is less than 5.0.3825.700" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:892"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:999" version="2" comment=".wvx EXISTS" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:737"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:998" version="2" comment=".wpl EXISTS" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:736"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:997" version="2" comment=".wmx EXISTS" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:735"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:996" version="2" comment=".wms EXISTS" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:734"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:995" version="2" comment=".wmz EXISTS" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:733"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1004" version="2" comment="Windows Media Player 9.0 installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:593"/>
      <state state_ref="oval:org.mitre.oval:ste:895"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1003" version="1" comment="the version of wmp.dll is les than 9.0.0.3250" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:527"/>
      <state state_ref="oval:org.mitre.oval:ste:894"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1002" version="1" comment="The patch KB885492 is installed on Windows XP" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:740"/>
      <state state_ref="oval:org.mitre.oval:ste:893"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1001" version="2" comment=".asx EXISTS" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:739"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1000" version="2" comment=".wax EXISTS" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:738"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3095" version="1" comment="Patch Q319733 Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1760"/>
      <state state_ref="oval:org.mitre.oval:ste:2900"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:3080" version="2" check="at least one" comment="the version of w3svc.dll is less than 5.0.2195.5269" check_existence="at_least_one_exists" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:496"/>
      <state state_ref="oval:org.mitre.oval:ste:2885"/>
    </file_test>
    <metabase_test id="oval:org.mitre.oval:tst:3057" version="2" check="at least one" comment="ism.dll mapping exists" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1552"/>
      <state state_ref="oval:org.mitre.oval:ste:2862"/>
    </metabase_test>
    <file_test id="oval:org.mitre.oval:tst:89093" version="1" comment="Check if Sun xVM VirtualBox version is less than or equals to 3.0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28309"/>
      <state state_ref="oval:org.mitre.oval:ste:24439"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:88842" version="1" comment="Check if Oracle VM VirtualBox version is greater than or equals to 3.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28098"/>
      <state state_ref="oval:org.mitre.oval:ste:24702"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:88496" version="1" comment="Check if Sun xVM VirtualBox version is greater than or equals to 3.0.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28309"/>
      <state state_ref="oval:org.mitre.oval:ste:24728"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:88483" version="1" comment="Check if Sun VirtualBox version is greater than or equals to 3.0.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28362"/>
      <state state_ref="oval:org.mitre.oval:ste:24567"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:88393" version="1" comment="Check if Sun VirtualBox version is less than or equals to 3.1.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28362"/>
      <state state_ref="oval:org.mitre.oval:ste:24310"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:100062" version="1" comment="Check if Oracle VM VirtualBox version is less than 4.1.0" check_existence="all_exist" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28098"/>
      <state state_ref="oval:org.mitre.oval:ste:27978"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1010" version="1" check="at least one" comment="the patch kb889293 is installed (Installed Components key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:742"/>
      <state state_ref="oval:org.mitre.oval:ste:901"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1009" version="1" check="at least one" comment="the patch kb889293 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:741"/>
      <state state_ref="oval:org.mitre.oval:ste:900"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:8356" version="5" comment="Microsoft Host Integration Server 2004 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:6633"/>
      <state state_ref="oval:org.mitre.oval:ste:4180"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:44390" version="2" comment="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Host Integration Server\6.0!ProductVersion = 6.0.2403.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:16103"/>
      <state state_ref="oval:org.mitre.oval:ste:12720"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:9310" version="3" comment="Microsoft Host Integration Server 2006 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:6684"/>
      <state state_ref="oval:org.mitre.oval:ste:4446"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:44117" version="1" comment="Microsoft Host Integration Server 2009 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15393"/>
      <state state_ref="oval:org.mitre.oval:ste:13366"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:43549" version="1" comment="Microsoft Host Integration Server 2010 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15393"/>
      <state state_ref="oval:org.mitre.oval:ste:12694"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:44254" version="1" comment="Snadmod.dll version is less than 7.0.4220.0" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15716"/>
      <state state_ref="oval:org.mitre.oval:ste:13119"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:44243" version="1" comment="Snadmod.dll version is greater than or equal to 8.0.3870.0" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:16346"/>
      <state state_ref="oval:org.mitre.oval:ste:13331"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:44232" version="1" comment="Snadmod.dll version is less than 8.5.4317.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:16346"/>
      <state state_ref="oval:org.mitre.oval:ste:12777"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:44184" version="1" comment="Snadmod.dll version is less than 8.5.4369.2" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:16346"/>
      <state state_ref="oval:org.mitre.oval:ste:13329"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:44027" version="1" comment="Snadmod.dll version is less than 8.0.3850.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:16346"/>
      <state state_ref="oval:org.mitre.oval:ste:13397"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:43888" version="1" comment="Snadmod.dll version is less than 6.0.2445.0" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:16295"/>
      <state state_ref="oval:org.mitre.oval:ste:13132"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:43857" version="1" comment="Snadmod.dll version is less than 8.0.3872.2" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:16346"/>
      <state state_ref="oval:org.mitre.oval:ste:13133"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:43281" version="1" comment="Snadmod.dll version is greater than or equal to 8.5.4360.0" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:16346"/>
      <state state_ref="oval:org.mitre.oval:ste:13383"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1011" version="1" comment="netman.dll is less than 5.0.2195.7061" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:658"/>
      <state state_ref="oval:org.mitre.oval:ste:902"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2353" version="1" comment="the patch KB893066 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1348"/>
      <state state_ref="oval:org.mitre.oval:ste:2203"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1012" version="1" check="at least one" comment="the version of Tcpip.sys is less than 5.0.2195.7035" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:588"/>
      <state state_ref="oval:org.mitre.oval:ste:903"/>
    </file_test>
    <uname_test id="oval:org.mitre.oval:tst:2512" version="1" comment="HP Release B.11.00" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:2352"/>
    </uname_test>
    <uname_test id="oval:org.mitre.oval:tst:1015" version="1" comment="HP Release B.11.22" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:905"/>
    </uname_test>
    <swlist_test id="oval:org.mitre.oval:tst:1014" version="1" check="at least one" comment="Mozilla is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:744"/>
    </swlist_test>
    <swlist_test id="oval:org.mitre.oval:tst:1013" version="1" check="at least one" comment="Mozilla v1.7.12 (1.7.12.0.00) or later is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:743"/>
      <state state_ref="oval:org.mitre.oval:ste:904"/>
    </swlist_test>
    <file_test id="oval:org.mitre.oval:tst:42957" version="1" comment="the version of Onetutil.dll is less than 12.0.6565.5001" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:12206"/>
      <state state_ref="oval:org.mitre.oval:ste:13076"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:27622" version="2" comment="Microsoft Windows SharePoint Services 3.0 are installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:12311"/>
      <state state_ref="oval:org.mitre.oval:ste:7274"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1016" version="1" comment="msieftp.dll is less than 6.0.3790.383" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:708"/>
      <state state_ref="oval:org.mitre.oval:ste:906"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1017" version="1" check="at least one" comment="the version of mscms.dll is less than 5.0.2195.7054" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:745"/>
      <state state_ref="oval:org.mitre.oval:ste:907"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1345" version="1" check="at least one" comment="Windows 98 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:629"/>
      <state state_ref="oval:org.mitre.oval:ste:1207"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:43555" version="2" comment="SharePoint Server 2010 is installed." check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:16204"/>
      <state state_ref="oval:org.mitre.oval:ste:12994"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:43939" version="1" comment="SharePoint Foundation 2010 is installed." check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:16233"/>
      <state state_ref="oval:org.mitre.oval:ste:12950"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:43900" version="1" comment="Eawfap.dll version is less than 14.0.6106.5001" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:16268"/>
      <state state_ref="oval:org.mitre.oval:ste:13043"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:43892" version="1" comment="Microsoft.office.policy.dll version is less than 14.0.6106.5001" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15985"/>
      <state state_ref="oval:org.mitre.oval:ste:12754"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:43889" version="1" comment="OWSSVR.DLL version is less than 14.0.6106.5008" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:16246"/>
      <state state_ref="oval:org.mitre.oval:ste:13090"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:43686" version="1" comment="Microsoft.SharePoint.Taxonomy.dll version is less than 14.0.6106.5001" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15529"/>
      <state state_ref="oval:org.mitre.oval:ste:13021"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:43419" version="1" comment="Microsoft.SharePoint.Client.dll version is less than 14.0.6106.5001" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:16213"/>
      <state state_ref="oval:org.mitre.oval:ste:12982"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:43358" version="1" comment="Microsoft.office.server.dll version is less than 14.0.6106.5001" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15305"/>
      <state state_ref="oval:org.mitre.oval:ste:12699"/>
    </file_test>
    <package_test id="oval:org.mitre.oval:tst:1024" version="1" check="at least one" comment="System and Network Administration Framework Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:752"/>
    </package_test>
    <inetd_test id="oval:org.mitre.oval:tst:1023" version="2" comment="inetd.conf contains sadmind" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:751"/>
      <state state_ref="oval:org.mitre.oval:ste:913"/>
    </inetd_test>
    <patch_test id="oval:org.mitre.oval:tst:1022" version="1" check="at least one" comment="Patch 116457-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:750"/>
      <state state_ref="oval:org.mitre.oval:ste:912"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:1021" version="1" check="at least one" comment="Patch 116442-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:749"/>
      <state state_ref="oval:org.mitre.oval:ste:911"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:1020" version="2" check="at least one" comment="Patch 116454-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:748"/>
      <state state_ref="oval:org.mitre.oval:ste:910"/>
    </patch_test>
    <inetd_test id="oval:org.mitre.oval:tst:1019" version="2" check="at least one" comment="Sadmin called using strong authentication" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:747"/>
      <state state_ref="oval:org.mitre.oval:ste:909"/>
    </inetd_test>
    <registry_test id="oval:org.mitre.oval:tst:2737" version="1" comment="the patch KB890859 is installed (Hotfix key)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1572"/>
      <state state_ref="oval:org.mitre.oval:ste:2558"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1025" version="1" check="at least one" comment="The version of Ntoskrnl.exe is less than 5.2.3790.280" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:335"/>
      <state state_ref="oval:org.mitre.oval:ste:914"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:42572" version="1" comment="Check if Apache Tomcat version is equal to 7.0.11" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15812"/>
      <state state_ref="oval:org.mitre.oval:ste:12438"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3079" version="4" comment="Win2K/XP/2003 service pack 3 (or later) is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:717"/>
      <state state_ref="oval:org.mitre.oval:ste:2884"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2913" version="1" comment="DCOM is enabled" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1669"/>
      <state state_ref="oval:org.mitre.oval:ste:2729"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3073" version="5" comment="SP4 or later Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:717"/>
      <state state_ref="oval:org.mitre.oval:ste:2878"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1027" version="1" check="at least one" comment="the version of Quartz.dll is greater than or equal to 6.1.9.726" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:704"/>
      <state state_ref="oval:org.mitre.oval:ste:916"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1026" version="1" check="at least one" comment="the version of Quartz.dll is less than 6.1.9.732" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:704"/>
      <state state_ref="oval:org.mitre.oval:ste:915"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1029" version="1" check="at least one" comment="Mozilla Firefox version 1.0.7 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:753"/>
      <state state_ref="oval:org.mitre.oval:ste:918"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1028" version="2" check="at least one" comment="Firefox version 1.0.7 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:228"/>
      <state state_ref="oval:org.mitre.oval:ste:917"/>
    </registry_test>
    <patch_test id="oval:org.mitre.oval:tst:1030" version="2" check="at least one" comment="Patch PHNE_34306 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:754"/>
    </patch_test>
    <registry_test id="oval:org.mitre.oval:tst:81733" version="1" comment="The registry key that holds the location of Threat Management Gateway exists" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15320"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:42607" version="1" comment="Fwcmgmt.exe version is less than 7.0.7734.182" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15824"/>
      <state state_ref="oval:org.mitre.oval:ste:12636"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2436" version="1" comment="the version of Gdi32.dll is less than 5.2.3790.419" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:622"/>
      <state state_ref="oval:org.mitre.oval:ste:2281"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:42438" version="1" comment="Check if the version of PHP is equal to 5.3.2 or equal to 5.3.3" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15679"/>
      <state state_ref="oval:org.mitre.oval:ste:11777"/>
    </registry_test>
    <swlist_test id="oval:org.mitre.oval:tst:1033" version="1" check="at least one" comment="Secure_Shell.SECURE_SHELL is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:756"/>
    </swlist_test>
    <swlist_test id="oval:org.mitre.oval:tst:1032" version="1" check="at least one" comment="Secure_Shell.SECURE_SHELL with version less than A.04.20.005 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:755"/>
      <state state_ref="oval:org.mitre.oval:ste:921"/>
    </swlist_test>
    <file_test id="oval:org.mitre.oval:tst:3003" version="1" check="at least one" comment="the version of mshtml.dll is less than 6.0.2723.2500" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2814"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2482" version="1" check="all" comment="mozilla RPM is earlier than 37:1.7.10-1.1.3.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <oval-def:note>Multiple RPMs were updated in this release, but all but mozilla-nspr have mozilla-with-their-same-version as an installation dependency.  So, if mozilla is up to date, mozilla-chat, mozilla-devel, ... , mozilla-js-debugger are all up to date.  Mozilla itself requires that mozilla-nspr and mozilla-nss be installed with the same version as itself.  This closes the loop -- if mozilla is up to date, so are the other mozilla-FOO RPMs.</oval-def:note>
      </oval-def:notes>
      <object object_ref="oval:org.mitre.oval:obj:1413"/>
      <state state_ref="oval:org.mitre.oval:ste:2326"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:44050" version="1" comment="Check if Sun VirtualBox is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:16340"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:41938" version="1" comment="Check if Sun xVM VirtualBox is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15730"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:88790" version="1" comment="Check if Oracle VM VirtualBox version equal to 4.0.0" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:28098"/>
      <state state_ref="oval:org.mitre.oval:ste:24189"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:42006" version="2" comment="Check if Oracle VM VirtualBox is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15297"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1035" version="3" check_existence="at_least_one_exists" check="at least one" comment="Windows Media Player 8 is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:757"/>
      <state state_ref="oval:org.mitre.oval:ste:923"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1034" version="1" check="at least one" comment="the version of Wmpui.dll is less than 8.0.0.4495" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:639"/>
      <state state_ref="oval:org.mitre.oval:ste:922"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2568" version="1" comment="the version of ole32.dll is less than 5.0.2195.7059" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:406"/>
      <state state_ref="oval:org.mitre.oval:ste:2401"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2567" version="1" comment="the version of rpcss.dll is less than 5.0.2195.7059" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:709"/>
      <state state_ref="oval:org.mitre.oval:ste:2400"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:3537" version="1" comment="Patch 121211-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2053"/>
      <state state_ref="oval:org.mitre.oval:ste:3804"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3315" version="1" comment="Patch 121212-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2675"/>
      <state state_ref="oval:org.mitre.oval:ste:3804"/>
    </patch_test>
    <textfilecontent_test id="oval:org.mitre.oval:tst:10318" version="1" comment="Sun Java Web Console version is 2.2.2, 2.2.3, 2.2.4 or 2.2.5" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:6531"/>
    </textfilecontent_test>
    <file_test id="oval:org.mitre.oval:tst:1038" version="1" comment="netman.dll is less than 5.2.3790.396" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:658"/>
      <state state_ref="oval:org.mitre.oval:ste:926"/>
    </file_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 118833-28 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3688" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2190"/>
      <state state_ref="oval:org.mitre.oval:ste:3618"/>
    </patch_test>
    <patch_test check_existence="at_least_one_exists" comment="Patch 118855-28 or later installed" check="at least one" version="1" id="oval:org.mitre.oval:tst:3526" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2735"/>
      <state state_ref="oval:org.mitre.oval:ste:3618"/>
    </patch_test>
    <registry_test id="oval:org.mitre.oval:tst:42069" version="1" comment="Check if the version of PHP is 5.2 before 5.2.15 or 5.3 before 5.3.4" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15679"/>
      <state state_ref="oval:org.mitre.oval:ste:12101"/>
    </registry_test>
    <uname_test id="oval:org.mitre.oval:tst:1276" version="1" comment="HP Release B.11.04" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:1145"/>
    </uname_test>
    <swlist_test id="oval:org.mitre.oval:tst:1040" version="1" check="at least one" comment="VirusVault is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:759"/>
    </swlist_test>
    <patch_test id="oval:org.mitre.oval:tst:1039" version="2" check="at least one" comment="Patch PHSS_34123 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:758"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1042" version="2" check="all" comment="gedit RPM earlier than 1:2.2.2-4rhel3" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:761"/>
      <state state_ref="oval:org.mitre.oval:ste:929"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1041" version="1" check="all" comment="/usr/bin/gedit is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:760"/>
      <state state_ref="oval:org.mitre.oval:ste:928"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1043" version="1" comment="umpnpmgr.dll is less than 5.0.2195.7069" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:224"/>
      <state state_ref="oval:org.mitre.oval:ste:930"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1046" version="1" check="all" comment="sudo RPM earlier than 0:1.6.7p5-1.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:764"/>
      <state state_ref="oval:org.mitre.oval:ste:932"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1045" version="1" check="at least one" comment="/etc/sudoers exists" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:763"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1044" version="1" check="all" comment="/usr/bin/sudo is executable by everyone" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:762"/>
      <state state_ref="oval:org.mitre.oval:ste:931"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3053" version="1" check="at least one" comment="File cachefsd exists" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1743"/>
    </file_test>
    <inetd_test id="oval:org.mitre.oval:tst:3049" version="2" check="at least one" comment="inetd.conf contains cachefsd" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1744"/>
      <state state_ref="oval:org.mitre.oval:ste:2855"/>
    </inetd_test>
    <file_test id="oval:org.mitre.oval:tst:3048" version="1" check="at least one" comment="File cachefsd executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1743"/>
      <state state_ref="oval:org.mitre.oval:ste:2854"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3047" version="1" check="at least one" comment="File cachefsd executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1743"/>
      <state state_ref="oval:org.mitre.oval:ste:2853"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3046" version="1" check="at least one" comment="File cachefsd executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1743"/>
      <state state_ref="oval:org.mitre.oval:ste:2852"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:3024" version="1" check="at least one" comment="Patch 108800-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1731"/>
      <state state_ref="oval:org.mitre.oval:ste:2832"/>
    </patch_test>
    <registry_test id="oval:org.mitre.oval:tst:42273" version="1" comment="Check if the version of PHP is less than 5.3.4" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15679"/>
      <state state_ref="oval:org.mitre.oval:ste:12420"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2794" version="3" comment="Internet Explorer 5.01 Service Pack 4 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:2614"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2359" version="1" check="at least one" comment="the version of mshtml.dll is less than 5.0.3828.2700" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2209"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:41921" version="1" comment="Check if Apache Tomcat is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15348"/>
      <state state_ref="oval:org.mitre.oval:ste:11759"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:42406" version="1" comment="Check if Apache Tomcat version is in range 7.0 through 7.0.11" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15812"/>
      <state state_ref="oval:org.mitre.oval:ste:12384"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:178" version="3" comment="Internet Explorer 7 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:115"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2333" version="4" comment="Internet Explorer 6 (any patch level) is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:2185"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1066" version="4" comment="Windows Media Player 7.1 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:780"/>
      <state state_ref="oval:org.mitre.oval:ste:952"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1065" version="1" check="at least one" comment="the version of wmpui.dll is less than 7.10.0.3076" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:558"/>
      <state state_ref="oval:org.mitre.oval:ste:951"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2918" version="1" check="at least one" comment="the version of mshtml.dll is less than 6.0.2800.1264" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2734"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2915" version="1" comment=".hta applications are enabled" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1670"/>
      <state state_ref="oval:org.mitre.oval:ste:2731"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:41865" version="1" comment="Check if the version of PHP is less than 5.3.4" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15645"/>
      <state state_ref="oval:org.mitre.oval:ste:12022"/>
    </registry_test>
    <package_test id="oval:org.mitre.oval:tst:1070" version="1" check="all" comment="Mozilla (SUNWmoznav) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:784"/>
    </package_test>
    <package_test id="oval:org.mitre.oval:tst:1069" version="1" check="all" comment="Mozilla Mail (SUNWmozmail) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:783"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:1068" version="1" check="all" comment="Patch 117765-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:782"/>
      <state state_ref="oval:org.mitre.oval:ste:954"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:1067" version="1" check="all" comment="Patch 117767-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:781"/>
      <state state_ref="oval:org.mitre.oval:ste:953"/>
    </patch_test>
    <registry_test id="oval:org.mitre.oval:tst:1073" version="1" check="at least one" comment="Microsoft Interactive Training is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <oval-def:note>As stated in the iDefense security advisory, if this key exists and contains a value, then the system has Interactive Training installed, and it will process .cbo files.</oval-def:note>
      </oval-def:notes>
      <object object_ref="oval:org.mitre.oval:obj:787"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1072" version="1" check="at least one" comment="the version of Orun32.exe is less than 3.5.0.117" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:786"/>
      <state state_ref="oval:org.mitre.oval:ste:955"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1071" version="1" check="at least one" comment="the patch kb898458  is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:785"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1074" version="1" comment="the version of Msdtctm.dll is less than 2000.2.3535.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:534"/>
      <state state_ref="oval:org.mitre.oval:ste:956"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1192" version="1" comment="the patch kb893756 is installed (Hotfix key)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:846"/>
      <state state_ref="oval:org.mitre.oval:ste:1065"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1191" version="1" comment="the Telephony service is enabled" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:845"/>
      <state state_ref="oval:org.mitre.oval:ste:1064"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1075" version="1" check="at least one" comment="the version of tapisrv.dll is less than 5.0.2195.7057" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:221"/>
      <state state_ref="oval:org.mitre.oval:ste:957"/>
    </file_test>
    <uname_test id="oval:org.mitre.oval:tst:1077" version="1" comment="HP Release B.10.24" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:959"/>
    </uname_test>
    <patch_test id="oval:org.mitre.oval:tst:1076" version="2" check="at least one" comment="Patch PHNE_24394 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:788"/>
    </patch_test>
    <registry_test id="oval:org.mitre.oval:tst:2977" version="1" comment="SQL Server 2000 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1470"/>
      <state state_ref="oval:org.mitre.oval:ste:2791"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2926" version="1" check="at least one" comment="the version of sqlservr.exe is less than 2000.80.608.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:843"/>
      <state state_ref="oval:org.mitre.oval:ste:2742"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2925" version="1" check="at least one" comment="the version of odsole70.dll is less than 2000.80.606.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:903"/>
      <state state_ref="oval:org.mitre.oval:ste:2741"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2924" version="1" check="at least one" comment="the version of xpqueue.dll is less than 2000.80.606.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:902"/>
      <state state_ref="oval:org.mitre.oval:ste:2740"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2923" version="1" check="at least one" comment="the version of xprepl.dll is less than 2000.80.606.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:901"/>
      <state state_ref="oval:org.mitre.oval:ste:2739"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2922" version="1" check="at least one" comment="the version of xplog70.dll is less than 2000.80.606.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:900"/>
      <state state_ref="oval:org.mitre.oval:ste:2738"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2921" version="1" check="at least one" comment="the version of xpweb70.dll is less than 2000.80.606.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:899"/>
      <state state_ref="oval:org.mitre.oval:ste:2737"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2920" version="1" check="at least one" comment="the version of xpstar.dll is less than 2000.80.628.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:898"/>
      <state state_ref="oval:org.mitre.oval:ste:2736"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2365" version="1" check="at least one" comment="the version of mshtml.dll is less than 6.0.2800.1505 (RTMGDR)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2215"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2364" version="1" check="at least one" comment="the version of mshtml.dll is less than 6.0.2800.1506 (RTMQFE)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2214"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:81589" version="1" comment="The registry key that holds the install path of Novell File Reporter exists" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15643"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:42124" version="1" comment="Check if Novell File Reporter is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15628"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:41915" version="1" comment="Check if Novell File Reporter version is less than 1.0.4.2" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15628"/>
      <state state_ref="oval:org.mitre.oval:ste:12537"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:8521" version="1" comment="Exchange Server 2007 is installed." check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:5992"/>
      <state state_ref="oval:org.mitre.oval:ste:3119"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:41731" version="1" comment="Exchange Server 2007 SP2 is installed." check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:6032"/>
      <state state_ref="oval:org.mitre.oval:ste:12105"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:40974" version="1" comment="the version of cdoex.dll is less than 8.2.301.0" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:513"/>
      <state state_ref="oval:org.mitre.oval:ste:11513"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:42097" version="1" comment="Check if the version of PHP is less than 5.2.15" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15645"/>
      <state state_ref="oval:org.mitre.oval:ste:12157"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2931" version="1" comment="File kcms_server exists" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1672"/>
    </file_test>
    <inetd_test id="oval:org.mitre.oval:tst:2930" version="2" comment="inetd.conf contains kcms_server" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1673"/>
      <state state_ref="oval:org.mitre.oval:ste:2746"/>
    </inetd_test>
    <file_test id="oval:org.mitre.oval:tst:2929" version="1" comment="File kcms_server executable and SUID or SGID" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1672"/>
      <state state_ref="oval:org.mitre.oval:ste:2745"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2928" version="1" comment="File kcms_server executable and SUID or SGID" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1672"/>
      <state state_ref="oval:org.mitre.oval:ste:2744"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2927" version="1" comment="File kcms_server executable and SUID or SGID" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1672"/>
      <state state_ref="oval:org.mitre.oval:ste:2743"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3122" version="1" check="at least one" comment="the version of mshtml.dll is less than 5.50.4913.1100" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2925"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:3121" version="1" check="at least one" comment="the patch q316059 is installed (Installed Components key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1776"/>
      <state state_ref="oval:org.mitre.oval:ste:2924"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3120" version="1" check="at least one" comment="the patch q319282 is installed (Installed Components key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1775"/>
      <state state_ref="oval:org.mitre.oval:ste:2923"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1083" version="1" check="at least one" comment="the version of mshtml.dll is less than 5.0.3539.2400" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:965"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1082" version="1" check="at least one" comment="the patch kb890923  is installed (Win2K SP3  Hotfix key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:790"/>
      <state state_ref="oval:org.mitre.oval:ste:964"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1085" version="1" check="all" comment="libgd RPM is earlier than 0:1.8.4-12.3.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:792"/>
      <state state_ref="oval:org.mitre.oval:ste:967"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1084" version="1" check="all" comment="libgd-devel RPM is earlier than 0:1.8.4-12.3.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:791"/>
      <state state_ref="oval:org.mitre.oval:ste:966"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:9294" version="3" comment="Microsoft Office XP is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1339"/>
      <state state_ref="oval:org.mitre.oval:ste:4586"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2327" version="5" comment="Microsoft Office XP OEM is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1339"/>
      <state state_ref="oval:org.mitre.oval:ste:2179"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:41798" version="1" comment="Mso.dll version is less than 10.0.6867.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:467"/>
      <state state_ref="oval:org.mitre.oval:ste:11291"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:42177" version="1" comment="Check if PHP lower versions are installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15805"/>
      <state state_ref="oval:org.mitre.oval:ste:12451"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:41246" version="1" comment="Check if PHP is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15719"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:42457" version="1" comment="Check if the version of PHP is less than 5.2.15 or 5.3.x before 5.3.4" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15679"/>
      <state state_ref="oval:org.mitre.oval:ste:11536"/>
    </registry_test>
    <patch_test id="oval:org.mitre.oval:tst:3729" version="1" check="at least one" check_existence="at_least_one_exists" comment="Patch 113273-15 or later installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2198"/>
      <state state_ref="oval:org.mitre.oval:ste:3610"/>
    </patch_test>
    <textfilecontent_test id="oval:org.mitre.oval:tst:3689" version="1" check="all" check_existence="at_least_one_exists" comment="sshd is configured to use default versions (including version 1)" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:1952"/>
    </textfilecontent_test>
    <patch_test id="oval:org.mitre.oval:tst:3582" version="1" check="at least one" check_existence="at_least_one_exists" comment="Patch 123324-03 or later installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2085"/>
      <state state_ref="oval:org.mitre.oval:ste:3578"/>
    </patch_test>
    <textfilecontent_test id="oval:org.mitre.oval:tst:3385" version="1" check="all" check_existence="at_least_one_exists" comment="sshd is configured to use version 1 of the protocol" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:2471"/>
    </textfilecontent_test>
    <patch_test id="oval:org.mitre.oval:tst:3276" version="1" check="at least one" check_existence="at_least_one_exists" comment="Patch 114858-12 or later installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2076"/>
      <state state_ref="oval:org.mitre.oval:ste:3859"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3239" version="1" check="at least one" check_existence="at_least_one_exists" comment="Patch 123325-03 or later installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2576"/>
      <state state_ref="oval:org.mitre.oval:ste:3578"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:1086" version="1" comment="shell32.dll is less than 5.0.3900.7071" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:253"/>
      <state state_ref="oval:org.mitre.oval:ste:968"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31212" version="1" comment="krb5-server is earlier than 0:1.3.4-10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14452"/>
      <state state_ref="oval:org.mitre.oval:ste:9586"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31115" version="1" comment="krb5 is earlier than 0:1.3.4-10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14120"/>
      <state state_ref="oval:org.mitre.oval:ste:9586"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31085" version="1" comment="krb5-devel is earlier than 0:1.3.4-10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14100"/>
      <state state_ref="oval:org.mitre.oval:ste:9586"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31053" version="1" comment="krb5-libs is earlier than 0:1.3.4-10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14395"/>
      <state state_ref="oval:org.mitre.oval:ste:9586"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30987" version="1" comment="krb5-workstation is earlier than 0:1.3.4-10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14279"/>
      <state state_ref="oval:org.mitre.oval:ste:9586"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1087" version="1" comment="the version of shell32.dll is less than 5.0.3900.7078" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:253"/>
      <state state_ref="oval:org.mitre.oval:ste:969"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1406" version="1" comment="the version of itss.dll is less than 5.2.3790.185" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:966"/>
      <state state_ref="oval:org.mitre.oval:ste:1265"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1405" version="1" comment="the patch kb840315 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:965"/>
      <state state_ref="oval:org.mitre.oval:ste:1264"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1404" version="2" comment="HTML Help is registered" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:964"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32320" version="1" comment="kdelibs-devel is earlier than 6:3.3.1-3.14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14126"/>
      <state state_ref="oval:org.mitre.oval:ste:9160"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31891" version="1" comment="kdelibs is earlier than 6:3.3.1-3.14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13933"/>
      <state state_ref="oval:org.mitre.oval:ste:9160"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33245" version="1" comment="openssh-askpass is earlier than 0:3.6.1p2-33.30.13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14577"/>
      <state state_ref="oval:org.mitre.oval:ste:10149"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33197" version="1" comment="openssh-clients is earlier than 0:3.9p1-8.RHEL4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14409"/>
      <state state_ref="oval:org.mitre.oval:ste:9639"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33141" version="1" comment="openssh-clients is earlier than 0:3.6.1p2-33.30.13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14409"/>
      <state state_ref="oval:org.mitre.oval:ste:10149"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33139" version="1" comment="openssh-server is earlier than 0:3.6.1p2-33.30.13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14544"/>
      <state state_ref="oval:org.mitre.oval:ste:10149"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33097" version="1" comment="openssh is earlier than 0:3.9p1-8.RHEL4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14581"/>
      <state state_ref="oval:org.mitre.oval:ste:9639"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33044" version="1" comment="openssh-server is earlier than 0:3.9p1-8.RHEL4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14544"/>
      <state state_ref="oval:org.mitre.oval:ste:9639"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33036" version="1" comment="openssh-askpass-gnome is earlier than 0:3.9p1-8.RHEL4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14434"/>
      <state state_ref="oval:org.mitre.oval:ste:9639"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33000" version="1" comment="openssh is earlier than 0:3.6.1p2-33.30.13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14581"/>
      <state state_ref="oval:org.mitre.oval:ste:10149"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32553" version="1" comment="openssh-askpass is earlier than 0:3.9p1-8.RHEL4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14577"/>
      <state state_ref="oval:org.mitre.oval:ste:9639"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32291" version="1" comment="openssh-askpass-gnome is earlier than 0:3.6.1p2-33.30.13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14434"/>
      <state state_ref="oval:org.mitre.oval:ste:10149"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:9082" version="2" comment="Internet Explorer 8 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:4421"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:42050" version="3" comment="Check if Microsoft Internet Explorer version is equal to 8.0.7600.16385" check_existence="at_least_one_exists" check="all" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:12178"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2933" version="1" check="at least one" comment="File %windir%\system32\Drivers\SRV.SYS is less than 5.0.2195.6699" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:384"/>
      <state state_ref="oval:org.mitre.oval:ste:2748"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2932" version="1" check="at least one" comment="Patch Windows2000-KB817606-x86-ENU.exe Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1674"/>
      <state state_ref="oval:org.mitre.oval:ste:2747"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31105" version="1" comment="openmotif is earlier than 0:2.2.3-4.RHEL3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14408"/>
      <state state_ref="oval:org.mitre.oval:ste:9776"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30867" version="1" comment="openmotif21 is earlier than 0:2.1.30-9.RHEL3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14483"/>
      <state state_ref="oval:org.mitre.oval:ste:9243"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30744" version="1" comment="openmotif-devel is earlier than 0:2.2.3-4.RHEL3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14324"/>
      <state state_ref="oval:org.mitre.oval:ste:9776"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30983" version="1" comment="gaim is earlier than 1:1.0.1-1.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14159"/>
      <state state_ref="oval:org.mitre.oval:ste:9506"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31314" version="1" comment="cups-libs is earlier than 1:1.1.17-13.3.24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:9546"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31296" version="1" comment="cups-devel is earlier than 1:1.1.17-13.3.24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:9546"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31027" version="1" comment="cups is earlier than 1:1.1.17-13.3.24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:9546"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30886" version="1" comment="xpdf is earlier than 1:2.02-9.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14398"/>
      <state state_ref="oval:org.mitre.oval:ste:9361"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1100" version="1" check="at least one" comment="the version of mshtml.dll is less than 6.0.3790.507" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:982"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33628" version="1" comment="gnomemeeting is earlier than 0:1.0.2-9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14609"/>
      <state state_ref="oval:org.mitre.oval:ste:10219"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32840" version="1" comment="gnomemeeting is earlier than 0:0.96.0-5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14609"/>
      <state state_ref="oval:org.mitre.oval:ste:10422"/>
    </rpminfo_test>
    <patch_test id="oval:org.mitre.oval:tst:3779" version="2" comment="Patch PHNE_33159 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:2756"/>
    </patch_test>
    <uname_test id="oval:org.mitre.oval:tst:3704" version="2" comment="HP-UX B.11.11" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:3389"/>
    </uname_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37719" version="1" comment="libxml2-python is earlier than 0:2.6.26-2.1.2.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13780"/>
      <state state_ref="oval:org.mitre.oval:ste:10279"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37713" version="1" comment="libxml2-devel is earlier than 0:2.6.16-12.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14212"/>
      <state state_ref="oval:org.mitre.oval:ste:11003"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37705" version="1" comment="libxml2-python is earlier than 0:2.5.10-13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13780"/>
      <state state_ref="oval:org.mitre.oval:ste:10962"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37620" version="1" comment="libxml2 is earlier than 0:2.6.26-2.1.2.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14133"/>
      <state state_ref="oval:org.mitre.oval:ste:10279"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37446" version="1" comment="libxml2-python is earlier than 0:2.6.16-12.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13780"/>
      <state state_ref="oval:org.mitre.oval:ste:11003"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37341" version="1" comment="libxml2 is earlier than 0:2.6.16-12.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14133"/>
      <state state_ref="oval:org.mitre.oval:ste:11003"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37156" version="1" comment="libxml2 is earlier than 0:2.5.10-13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14133"/>
      <state state_ref="oval:org.mitre.oval:ste:10962"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36760" version="1" comment="libxml2-devel is earlier than 0:2.5.10-13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14212"/>
      <state state_ref="oval:org.mitre.oval:ste:10962"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36730" version="1" comment="libxml2-devel is earlier than 0:2.6.26-2.1.2.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14212"/>
      <state state_ref="oval:org.mitre.oval:ste:10279"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30673" version="1" comment="openssl is earlier than 0:0.9.7a-33.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13882"/>
      <state state_ref="oval:org.mitre.oval:ste:8759"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30638" version="1" comment="openssl-perl is earlier than 0:0.9.7a-33.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14122"/>
      <state state_ref="oval:org.mitre.oval:ste:8759"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30479" version="1" comment="openssl096b is earlier than 0:0.9.6b-16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14258"/>
      <state state_ref="oval:org.mitre.oval:ste:9284"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30381" version="1" comment="openssl-devel is earlier than 0:0.9.7a-33.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13920"/>
      <state state_ref="oval:org.mitre.oval:ste:8759"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40054" version="1" comment="bind-sdb is earlier than 30:9.3.6-4.P1.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14433"/>
      <state state_ref="oval:org.mitre.oval:ste:11063"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40044" version="1" comment="bind-utils is earlier than 30:9.3.6-4.P1.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14263"/>
      <state state_ref="oval:org.mitre.oval:ste:11063"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39904" version="1" comment="bind-devel is earlier than 30:9.3.6-4.P1.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14242"/>
      <state state_ref="oval:org.mitre.oval:ste:11063"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39892" version="1" comment="caching-nameserver is earlier than 30:9.3.6-4.P1.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14701"/>
      <state state_ref="oval:org.mitre.oval:ste:11063"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39885" version="1" comment="bind-libs is earlier than 30:9.3.6-4.P1.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14348"/>
      <state state_ref="oval:org.mitre.oval:ste:11063"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39693" version="1" comment="bind-chroot is earlier than 30:9.3.6-4.P1.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14363"/>
      <state state_ref="oval:org.mitre.oval:ste:11063"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39542" version="1" comment="bind-libbind-devel is earlier than 30:9.3.6-4.P1.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14729"/>
      <state state_ref="oval:org.mitre.oval:ste:11063"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39489" version="1" comment="bind is earlier than 30:9.3.6-4.P1.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14143"/>
      <state state_ref="oval:org.mitre.oval:ste:11063"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:4279" version="4" comment="SharePoint Server 2007 is installed." check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:2686"/>
      <state state_ref="oval:org.mitre.oval:ste:3235"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:41953" version="1" comment="microsoft.office.server.conversions.launcher.exe version is less than 12.0.6547.5000" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:15616"/>
      <state state_ref="oval:org.mitre.oval:ste:12084"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30809" version="1" comment="cups-devel is earlier than 1:1.1.17-13.3.13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:9772"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30723" version="1" comment="cups is earlier than 1:1.1.17-13.3.13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:9772"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29988" version="1" comment="cups-libs is earlier than 1:1.1.17-13.3.13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:9772"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1102" version="1" check="all" comment="libxml RPM is earlier than 1:1.8.17-9.2" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:800"/>
      <state state_ref="oval:org.mitre.oval:ste:984"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1101" version="1" check="all" comment="libxml-devel RPM is earlier than 1:1.8.17-9.2" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:799"/>
      <state state_ref="oval:org.mitre.oval:ste:983"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34669" version="1" comment="evolution-devel is earlier than 0:1.4.5-21.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14585"/>
      <state state_ref="oval:org.mitre.oval:ste:10446"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34459" version="1" comment="evolution is earlier than 0:2.0.2-35.0.4.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14477"/>
      <state state_ref="oval:org.mitre.oval:ste:10479"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34388" version="1" comment="evolution-data-server is earlier than 0:1.8.0-15.0.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14939"/>
      <state state_ref="oval:org.mitre.oval:ste:9709"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34172" version="1" comment="evolution-data-server-devel is earlier than 0:1.8.0-15.0.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14847"/>
      <state state_ref="oval:org.mitre.oval:ste:9709"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33987" version="1" comment="evolution is earlier than 0:1.4.5-21.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14477"/>
      <state state_ref="oval:org.mitre.oval:ste:10446"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33713" version="1" comment="evolution-devel is earlier than 0:2.0.2-35.0.4.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14585"/>
      <state state_ref="oval:org.mitre.oval:ste:10479"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39410" version="1" comment="neon-devel is earlier than 0:0.25.5-10.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15061"/>
      <state state_ref="oval:org.mitre.oval:ste:11167"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39020" version="1" comment="neon is earlier than 0:0.25.5-10.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14799"/>
      <state state_ref="oval:org.mitre.oval:ste:11167"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38882" version="1" comment="neon-devel is earlier than 0:0.24.7-4.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15061"/>
      <state state_ref="oval:org.mitre.oval:ste:11079"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38525" version="1" comment="neon is earlier than 0:0.24.7-4.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14799"/>
      <state state_ref="oval:org.mitre.oval:ste:11079"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40371" version="1" comment="automake14 is earlier than 0:1.4p6-13.el5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15201"/>
      <state state_ref="oval:org.mitre.oval:ste:10938"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40330" version="1" comment="automake is earlier than 0:1.9.6-2.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15221"/>
      <state state_ref="oval:org.mitre.oval:ste:10824"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40083" version="1" comment="automake15 is earlier than 0:1.5-16.el5.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15166"/>
      <state state_ref="oval:org.mitre.oval:ste:11353"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39860" version="1" comment="automake17 is earlier than 0:1.7.9-7.el5.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15372"/>
      <state state_ref="oval:org.mitre.oval:ste:11174"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39807" version="1" comment="automake16 is earlier than 0:1.6.3-8.el5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15334"/>
      <state state_ref="oval:org.mitre.oval:ste:11374"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31096" version="1" comment="kdegraphics is earlier than 7:3.1.3-3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14241"/>
      <state state_ref="oval:org.mitre.oval:ste:9707"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30890" version="1" comment="kdegraphics-devel is earlier than 7:3.1.3-3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14596"/>
      <state state_ref="oval:org.mitre.oval:ste:9707"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30629" version="1" comment="libpng-devel is earlier than 2:1.2.2-21" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14221"/>
      <state state_ref="oval:org.mitre.oval:ste:9557"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30587" version="1" comment="libpng is earlier than 2:1.2.2-21" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14194"/>
      <state state_ref="oval:org.mitre.oval:ste:9557"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30412" version="1" comment="libpng10 is earlier than 0:1.0.13-12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14370"/>
      <state state_ref="oval:org.mitre.oval:ste:9738"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30075" version="1" comment="libpng10-devel is earlier than 0:1.0.13-12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13985"/>
      <state state_ref="oval:org.mitre.oval:ste:9738"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:2935" version="2" comment="ISA Server 2000 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1676"/>
      <state state_ref="oval:org.mitre.oval:ste:2750"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2934" version="1" comment="ISA2000-KB816456-x86.exe" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1675"/>
      <state state_ref="oval:org.mitre.oval:ste:2749"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33372" version="1" comment="acroread-plugin is earlier than 0:7.0.9-1.1.1.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14489"/>
      <state state_ref="oval:org.mitre.oval:ste:10369"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33353" version="1" comment="acroread-libs-pango is earlier than 0:1.6.0-1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14220"/>
      <state state_ref="oval:org.mitre.oval:ste:9927"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33267" version="1" comment="acroread-plugin is earlier than 0:7.0.9-1.2.0.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14489"/>
      <state state_ref="oval:org.mitre.oval:ste:9438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33249" version="1" comment="acroread-libs-glib2 is earlier than 0:2.4.7-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14490"/>
      <state state_ref="oval:org.mitre.oval:ste:10366"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33161" version="1" comment="acroread-libs-gtk2 is earlier than 0:2.4.13-1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14645"/>
      <state state_ref="oval:org.mitre.oval:ste:9862"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32959" version="1" comment="acroread is earlier than 0:7.0.9-1.1.1.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14858"/>
      <state state_ref="oval:org.mitre.oval:ste:10369"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32952" version="1" comment="acroread-libs-atk is earlier than 0:1.8.0-1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14402"/>
      <state state_ref="oval:org.mitre.oval:ste:10316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32938" version="1" comment="acroread is earlier than 0:7.0.9-1.2.0.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14858"/>
      <state state_ref="oval:org.mitre.oval:ste:9438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32853" version="1" comment="acroread-libs-gtk2-engines is earlier than 0:2.2.0-1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14819"/>
      <state state_ref="oval:org.mitre.oval:ste:10283"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37512" version="1" comment="pidgin-devel is earlier than 0:2.3.1-2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14642"/>
      <state state_ref="oval:org.mitre.oval:ste:10993"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37440" version="1" comment="finch-devel is earlier than 0:2.3.1-2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15074"/>
      <state state_ref="oval:org.mitre.oval:ste:10993"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37413" version="1" comment="libpurple-perl is earlier than 0:2.3.1-2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15144"/>
      <state state_ref="oval:org.mitre.oval:ste:10993"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37369" version="1" comment="pidgin is earlier than 0:1.5.1-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15157"/>
      <state state_ref="oval:org.mitre.oval:ste:10958"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37347" version="1" comment="pidgin-perl is earlier than 0:2.3.1-2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14202"/>
      <state state_ref="oval:org.mitre.oval:ste:10993"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37332" version="1" comment="libpurple-devel is earlier than 0:2.3.1-2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15112"/>
      <state state_ref="oval:org.mitre.oval:ste:10993"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37243" version="1" comment="finch is earlier than 0:2.3.1-2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15156"/>
      <state state_ref="oval:org.mitre.oval:ste:10993"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37098" version="1" comment="pidgin is earlier than 0:2.3.1-2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15157"/>
      <state state_ref="oval:org.mitre.oval:ste:10993"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36776" version="1" comment="libpurple-tcl is earlier than 0:2.3.1-2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14238"/>
      <state state_ref="oval:org.mitre.oval:ste:10993"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36524" version="1" comment="libpurple is earlier than 0:2.3.1-2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14700"/>
      <state state_ref="oval:org.mitre.oval:ste:10993"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36472" version="1" comment="pidgin is earlier than 0:1.5.1-2.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15157"/>
      <state state_ref="oval:org.mitre.oval:ste:10604"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:2666" version="1" check="all" comment="/usr/bin/gzip is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1528"/>
      <state state_ref="oval:org.mitre.oval:ste:2490"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2665" version="1" check="all" comment="/usr/bin/gunzip is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1527"/>
      <state state_ref="oval:org.mitre.oval:ste:2489"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39986" version="1" comment="gcc-ppc32 is earlier than 0:3.4.6-11.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14146"/>
      <state state_ref="oval:org.mitre.oval:ste:11423"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39960" version="1" comment="libgcj is earlier than 0:3.4.6-11.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14800"/>
      <state state_ref="oval:org.mitre.oval:ste:11423"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39937" version="1" comment="cpp is earlier than 0:3.4.6-11.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14644"/>
      <state state_ref="oval:org.mitre.oval:ste:11423"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39888" version="1" comment="gcc-ppc32 is earlier than 0:3.2.3-60" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14146"/>
      <state state_ref="oval:org.mitre.oval:ste:11300"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39878" version="1" comment="libgnat is earlier than 0:3.4.6-11.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14094"/>
      <state state_ref="oval:org.mitre.oval:ste:11423"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39874" version="1" comment="libgcj4-src is earlier than 0:4.1.2-44.EL4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14629"/>
      <state state_ref="oval:org.mitre.oval:ste:10878"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39863" version="1" comment="gcc-objc++ is earlier than 0:4.1.2-46.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15230"/>
      <state state_ref="oval:org.mitre.oval:ste:11106"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39853" version="1" comment="gcc4-java is earlier than 0:4.1.2-44.EL4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15128"/>
      <state state_ref="oval:org.mitre.oval:ste:10878"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39841" version="1" comment="gcc-java is earlier than 0:4.1.2-46.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14877"/>
      <state state_ref="oval:org.mitre.oval:ste:11106"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39836" version="1" comment="libgcj-devel is earlier than 0:3.2.3-60" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14563"/>
      <state state_ref="oval:org.mitre.oval:ste:11300"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39829" version="1" comment="gcc-g77 is earlier than 0:3.2.3-60" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14428"/>
      <state state_ref="oval:org.mitre.oval:ste:11300"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39820" version="1" comment="libmudflap-devel is earlier than 0:4.1.2-46.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15228"/>
      <state state_ref="oval:org.mitre.oval:ste:11106"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39809" version="1" comment="libstdc++-devel is earlier than 0:3.4.6-11.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14610"/>
      <state state_ref="oval:org.mitre.oval:ste:11423"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39808" version="1" comment="libstdc++ is earlier than 0:4.1.2-46.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14487"/>
      <state state_ref="oval:org.mitre.oval:ste:11106"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39791" version="1" comment="gcc-objc is earlier than 0:3.2.3-60" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14727"/>
      <state state_ref="oval:org.mitre.oval:ste:11300"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39790" version="1" comment="libobjc is earlier than 0:4.1.2-46.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14780"/>
      <state state_ref="oval:org.mitre.oval:ste:11106"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39783" version="1" comment="libobjc is earlier than 0:3.4.6-11.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14780"/>
      <state state_ref="oval:org.mitre.oval:ste:11423"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39781" version="1" comment="gcc is earlier than 0:3.2.3-60" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14175"/>
      <state state_ref="oval:org.mitre.oval:ste:11300"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39779" version="1" comment="gcc-c++ is earlier than 0:4.1.2-46.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14776"/>
      <state state_ref="oval:org.mitre.oval:ste:11106"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39778" version="1" comment="gcc-gnat is earlier than 0:3.2.3-60" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14920"/>
      <state state_ref="oval:org.mitre.oval:ste:11300"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39777" version="1" comment="libgcj is earlier than 0:4.1.2-46.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14800"/>
      <state state_ref="oval:org.mitre.oval:ste:11106"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39774" version="1" comment="libtool is earlier than 0:1.5.22-7.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15211"/>
      <state state_ref="oval:org.mitre.oval:ste:10889"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39768" version="1" comment="libf2c is earlier than 0:3.4.6-11.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14613"/>
      <state state_ref="oval:org.mitre.oval:ste:11423"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39750" version="1" comment="gcc-gnat is earlier than 0:3.4.6-11.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14920"/>
      <state state_ref="oval:org.mitre.oval:ste:11423"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39736" version="1" comment="gcc-java is earlier than 0:3.4.6-11.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14877"/>
      <state state_ref="oval:org.mitre.oval:ste:11423"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39694" version="1" comment="cpp is earlier than 0:3.2.3-60" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14644"/>
      <state state_ref="oval:org.mitre.oval:ste:11300"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39690" version="1" comment="libgfortran is earlier than 0:4.1.2-44.EL4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15134"/>
      <state state_ref="oval:org.mitre.oval:ste:10878"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39689" version="1" comment="libgfortran is earlier than 0:4.1.2-46.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15134"/>
      <state state_ref="oval:org.mitre.oval:ste:11106"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39676" version="1" comment="libstdc++-devel is earlier than 0:4.1.2-46.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14610"/>
      <state state_ref="oval:org.mitre.oval:ste:11106"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39661" version="1" comment="gcc-objc is earlier than 0:3.4.6-11.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14727"/>
      <state state_ref="oval:org.mitre.oval:ste:11423"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39648" version="1" comment="gcc-c++ is earlier than 0:3.2.3-60" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14776"/>
      <state state_ref="oval:org.mitre.oval:ste:11300"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39643" version="1" comment="libobjc is earlier than 0:3.2.3-60" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14780"/>
      <state state_ref="oval:org.mitre.oval:ste:11300"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39639" version="1" comment="libmudflap-devel is earlier than 0:4.1.2-44.EL4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15228"/>
      <state state_ref="oval:org.mitre.oval:ste:10878"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39638" version="1" comment="libgcj-devel is earlier than 0:4.1.2-46.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14563"/>
      <state state_ref="oval:org.mitre.oval:ste:11106"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39632" version="1" comment="libtool-ltdl-devel is earlier than 0:1.5.22-7.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14788"/>
      <state state_ref="oval:org.mitre.oval:ste:10889"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39622" version="1" comment="gcc-c++-ppc32 is earlier than 0:3.2.3-60" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14668"/>
      <state state_ref="oval:org.mitre.oval:ste:11300"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39601" version="1" comment="libtool-ltdl is earlier than 0:1.5.22-7.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15285"/>
      <state state_ref="oval:org.mitre.oval:ste:10889"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39599" version="1" comment="libgcj4 is earlier than 0:4.1.2-44.EL4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15010"/>
      <state state_ref="oval:org.mitre.oval:ste:10878"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39597" version="1" comment="gcc4-c++ is earlier than 0:4.1.2-44.EL4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15264"/>
      <state state_ref="oval:org.mitre.oval:ste:10878"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39596" version="1" comment="libgcj4-devel is earlier than 0:4.1.2-44.EL4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14377"/>
      <state state_ref="oval:org.mitre.oval:ste:10878"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39594" version="1" comment="cpp is earlier than 0:4.1.2-46.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14644"/>
      <state state_ref="oval:org.mitre.oval:ste:11106"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39577" version="1" comment="libstdc++-devel is earlier than 0:3.2.3-60" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14610"/>
      <state state_ref="oval:org.mitre.oval:ste:11300"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39571" version="1" comment="libgnat is earlier than 0:3.2.3-60" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14094"/>
      <state state_ref="oval:org.mitre.oval:ste:11300"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39567" version="1" comment="libgcj-devel is earlier than 0:3.4.6-11.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14563"/>
      <state state_ref="oval:org.mitre.oval:ste:11423"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39563" version="1" comment="libtool-libs is earlier than 0:1.5.6-5.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15029"/>
      <state state_ref="oval:org.mitre.oval:ste:11400"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39540" version="1" comment="libmudflap is earlier than 0:4.1.2-46.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14905"/>
      <state state_ref="oval:org.mitre.oval:ste:11106"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39537" version="1" comment="gcc-gnat is earlier than 0:4.1.2-46.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14920"/>
      <state state_ref="oval:org.mitre.oval:ste:11106"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39523" version="1" comment="libgcj-src is earlier than 0:4.1.2-46.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15194"/>
      <state state_ref="oval:org.mitre.oval:ste:11106"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39498" version="1" comment="gcc4-gfortran is earlier than 0:4.1.2-44.EL4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14648"/>
      <state state_ref="oval:org.mitre.oval:ste:10878"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39491" version="1" comment="libgomp is earlier than 0:4.1.2-44.EL4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14964"/>
      <state state_ref="oval:org.mitre.oval:ste:10878"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39483" version="1" comment="gcc is earlier than 0:4.1.2-46.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14175"/>
      <state state_ref="oval:org.mitre.oval:ste:11106"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39462" version="1" comment="gcc4 is earlier than 0:4.1.2-44.EL4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14323"/>
      <state state_ref="oval:org.mitre.oval:ste:10878"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39459" version="1" comment="libgnat is earlier than 0:4.1.2-46.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14094"/>
      <state state_ref="oval:org.mitre.oval:ste:11106"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39452" version="1" comment="libtool is earlier than 0:1.5.6-5.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15211"/>
      <state state_ref="oval:org.mitre.oval:ste:11400"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39446" version="1" comment="gcc-java is earlier than 0:3.2.3-60" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14877"/>
      <state state_ref="oval:org.mitre.oval:ste:11300"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39424" version="1" comment="gcc-gfortran is earlier than 0:4.1.2-46.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15152"/>
      <state state_ref="oval:org.mitre.oval:ste:11106"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39409" version="1" comment="gcc-objc is earlier than 0:4.1.2-46.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14727"/>
      <state state_ref="oval:org.mitre.oval:ste:11106"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39401" version="1" comment="libgcc is earlier than 0:3.2.3-60" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14254"/>
      <state state_ref="oval:org.mitre.oval:ste:11300"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39400" version="1" comment="libtool-libs is earlier than 0:1.4.3-7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15029"/>
      <state state_ref="oval:org.mitre.oval:ste:11052"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39370" version="1" comment="gcc is earlier than 0:3.4.6-11.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14175"/>
      <state state_ref="oval:org.mitre.oval:ste:11423"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39324" version="1" comment="libf2c is earlier than 0:3.2.3-60" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14613"/>
      <state state_ref="oval:org.mitre.oval:ste:11300"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39314" version="1" comment="libtool is earlier than 0:1.4.3-7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15211"/>
      <state state_ref="oval:org.mitre.oval:ste:11052"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39305" version="1" comment="gcc-c++ is earlier than 0:3.4.6-11.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14776"/>
      <state state_ref="oval:org.mitre.oval:ste:11423"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39297" version="1" comment="libstdc++ is earlier than 0:3.2.3-60" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14487"/>
      <state state_ref="oval:org.mitre.oval:ste:11300"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39254" version="1" comment="libstdc++ is earlier than 0:3.4.6-11.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14487"/>
      <state state_ref="oval:org.mitre.oval:ste:11423"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39013" version="1" comment="gcc-g77 is earlier than 0:3.4.6-11.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14428"/>
      <state state_ref="oval:org.mitre.oval:ste:11423"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38996" version="1" comment="gcc-c++-ppc32 is earlier than 0:3.4.6-11.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14668"/>
      <state state_ref="oval:org.mitre.oval:ste:11423"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38965" version="1" comment="libgcc is earlier than 0:3.4.6-11.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14254"/>
      <state state_ref="oval:org.mitre.oval:ste:11423"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38946" version="1" comment="libgcc is earlier than 0:4.1.2-46.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14254"/>
      <state state_ref="oval:org.mitre.oval:ste:11106"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38912" version="1" comment="libmudflap is earlier than 0:4.1.2-44.EL4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14905"/>
      <state state_ref="oval:org.mitre.oval:ste:10878"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38894" version="1" comment="libgcj is earlier than 0:3.2.3-60" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14800"/>
      <state state_ref="oval:org.mitre.oval:ste:11300"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31717" version="1" comment="wget is earlier than 0:1.10.1-2.4E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14591"/>
      <state state_ref="oval:org.mitre.oval:ste:9455"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31680" version="1" comment="wget is earlier than 0:1.10.1-1.30E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14591"/>
      <state state_ref="oval:org.mitre.oval:ste:10085"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:2421" version="1" comment="Word for Windows 6.0 Converter is enabled" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1378"/>
      <state state_ref="oval:org.mitre.oval:ste:2268"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1104" version="1" comment="the patch kb885836 is installed (Hotfix key)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:802"/>
      <state state_ref="oval:org.mitre.oval:ste:986"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1103" version="2" check="at least one" comment="the version of mswrd632.wpc is less than 2004.10.25.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:801"/>
      <state state_ref="oval:org.mitre.oval:ste:985"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30998" version="1" comment="cyrus-sasl-plain is earlier than 0:2.1.15-10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14379"/>
      <state state_ref="oval:org.mitre.oval:ste:9418"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30974" version="1" comment="cyrus-sasl-gssapi is earlier than 0:2.1.15-10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14137"/>
      <state state_ref="oval:org.mitre.oval:ste:9418"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30879" version="1" comment="cyrus-sasl-md5 is earlier than 0:2.1.15-10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14081"/>
      <state state_ref="oval:org.mitre.oval:ste:9418"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30854" version="1" comment="cyrus-sasl-devel is earlier than 0:2.1.15-10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14038"/>
      <state state_ref="oval:org.mitre.oval:ste:9418"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30727" version="1" comment="cyrus-sasl is earlier than 0:2.1.15-10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14473"/>
      <state state_ref="oval:org.mitre.oval:ste:9418"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32654" version="1" comment="squirrelmail is earlier than 0:1.4.6-7.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14331"/>
      <state state_ref="oval:org.mitre.oval:ste:9246"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32403" version="1" comment="squirrelmail is earlier than 0:1.4.6-7.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14331"/>
      <state state_ref="oval:org.mitre.oval:ste:9978"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31973" version="1" comment="ImageMagick is earlier than 0:6.0.7.1-12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13854"/>
      <state state_ref="oval:org.mitre.oval:ste:9874"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31946" version="1" comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14240"/>
      <state state_ref="oval:org.mitre.oval:ste:9874"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31915" version="1" comment="ImageMagick-c++ is earlier than 0:5.5.6-15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13475"/>
      <state state_ref="oval:org.mitre.oval:ste:10052"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31900" version="1" comment="ImageMagick is earlier than 0:5.5.6-15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13854"/>
      <state state_ref="oval:org.mitre.oval:ste:10052"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31831" version="1" comment="ImageMagick-c++-devel is earlier than 0:5.5.6-15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14240"/>
      <state state_ref="oval:org.mitre.oval:ste:10052"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31810" version="1" comment="ImageMagick-devel is earlier than 0:5.5.6-15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13484"/>
      <state state_ref="oval:org.mitre.oval:ste:10052"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31676" version="1" comment="ImageMagick-devel is earlier than 0:6.0.7.1-12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13484"/>
      <state state_ref="oval:org.mitre.oval:ste:9874"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31629" version="1" comment="ImageMagick-c++ is earlier than 0:6.0.7.1-12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13475"/>
      <state state_ref="oval:org.mitre.oval:ste:9874"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31596" version="1" comment="ImageMagick-perl is earlier than 0:6.0.7.1-12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14270"/>
      <state state_ref="oval:org.mitre.oval:ste:9874"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31493" version="1" comment="ImageMagick-perl is earlier than 0:5.5.6-15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14270"/>
      <state state_ref="oval:org.mitre.oval:ste:10052"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31766" version="1" comment="net-snmp-devel is earlier than 0:5.1.2-11.EL4.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14339"/>
      <state state_ref="oval:org.mitre.oval:ste:9700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31691" version="1" comment="net-snmp-perl is earlier than 0:5.1.2-11.EL4.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14516"/>
      <state state_ref="oval:org.mitre.oval:ste:9700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31684" version="1" comment="net-snmp-libs is earlier than 0:5.0.9-2.30E.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14316"/>
      <state state_ref="oval:org.mitre.oval:ste:9358"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31547" version="1" comment="net-snmp-perl is earlier than 0:5.0.9-2.30E.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14516"/>
      <state state_ref="oval:org.mitre.oval:ste:9358"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31414" version="1" comment="net-snmp-libs is earlier than 0:5.1.2-11.EL4.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14316"/>
      <state state_ref="oval:org.mitre.oval:ste:9700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31408" version="1" comment="net-snmp-utils is earlier than 0:5.1.2-11.EL4.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14287"/>
      <state state_ref="oval:org.mitre.oval:ste:9700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31395" version="1" comment="net-snmp-utils is earlier than 0:5.0.9-2.30E.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14287"/>
      <state state_ref="oval:org.mitre.oval:ste:9358"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31390" version="1" comment="net-snmp-devel is earlier than 0:5.0.9-2.30E.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14339"/>
      <state state_ref="oval:org.mitre.oval:ste:9358"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30993" version="1" comment="net-snmp is earlier than 0:5.1.2-11.EL4.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14390"/>
      <state state_ref="oval:org.mitre.oval:ste:9700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30763" version="1" comment="net-snmp is earlier than 0:5.0.9-2.30E.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14390"/>
      <state state_ref="oval:org.mitre.oval:ste:9358"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40875" version="1" comment="perl-Archive-Tar is earlier than 1:1.39.1-1.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15210"/>
      <state state_ref="oval:org.mitre.oval:ste:11456"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40767" version="1" comment="perl-Archive-Tar is earlier than 0:1.39.1-1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15210"/>
      <state state_ref="oval:org.mitre.oval:ste:11306"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33042" version="1" comment="openssl-devel is earlier than 0:0.9.7a-33.18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13920"/>
      <state state_ref="oval:org.mitre.oval:ste:10296"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32884" version="1" comment="openssl-devel is earlier than 0:0.9.7a-43.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13920"/>
      <state state_ref="oval:org.mitre.oval:ste:10257"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32845" version="1" comment="openssl096b is earlier than 0:0.9.6b-16.43" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14258"/>
      <state state_ref="oval:org.mitre.oval:ste:10066"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32805" version="1" comment="openssl-perl is earlier than 0:0.9.7a-33.18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14122"/>
      <state state_ref="oval:org.mitre.oval:ste:10296"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32770" version="1" comment="openssl is earlier than 0:0.9.7a-43.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13882"/>
      <state state_ref="oval:org.mitre.oval:ste:10257"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32520" version="1" comment="openssl is earlier than 0:0.9.7a-33.18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13882"/>
      <state state_ref="oval:org.mitre.oval:ste:10296"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32336" version="1" comment="openssl096b is earlier than 0:0.9.6b-22.43" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14258"/>
      <state state_ref="oval:org.mitre.oval:ste:10147"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32332" version="1" comment="openssl-perl is earlier than 0:0.9.7a-43.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14122"/>
      <state state_ref="oval:org.mitre.oval:ste:10257"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37986" version="1" comment="gnutls-utils is earlier than 0:1.4.1-3.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15003"/>
      <state state_ref="oval:org.mitre.oval:ste:10693"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37768" version="1" comment="gnutls is earlier than 0:1.4.1-3.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14386"/>
      <state state_ref="oval:org.mitre.oval:ste:10693"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37721" version="1" comment="gnutls-devel is earlier than 0:1.4.1-3.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14558"/>
      <state state_ref="oval:org.mitre.oval:ste:10693"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30378" version="1" comment="ethereal-gnome is earlier than 0:0.9.16-0.30E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14338"/>
      <state state_ref="oval:org.mitre.oval:ste:9344"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29663" version="1" comment="ethereal is earlier than 0:0.9.16-0.30E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14030"/>
      <state state_ref="oval:org.mitre.oval:ste:9344"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32153" version="1" comment="netpbm-devel is earlier than 0:9.24-11.30.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14399"/>
      <state state_ref="oval:org.mitre.oval:ste:9788"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32140" version="1" comment="netpbm is earlier than 0:10.25-2.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14185"/>
      <state state_ref="oval:org.mitre.oval:ste:10012"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32045" version="1" comment="netpbm-devel is earlier than 0:10.25-2.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14399"/>
      <state state_ref="oval:org.mitre.oval:ste:10012"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32033" version="1" comment="netpbm is earlier than 0:9.24-11.30.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14185"/>
      <state state_ref="oval:org.mitre.oval:ste:9788"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32026" version="1" comment="netpbm-progs is earlier than 0:10.25-2.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13960"/>
      <state state_ref="oval:org.mitre.oval:ste:10012"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31648" version="1" comment="netpbm-progs is earlier than 0:9.24-11.30.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13960"/>
      <state state_ref="oval:org.mitre.oval:ste:9788"/>
    </rpminfo_test>
    <patch_test id="oval:org.mitre.oval:tst:3960" version="1" check="at least one" comment="Patch 118844-14 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1890"/>
      <state state_ref="oval:org.mitre.oval:ste:3645"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30657" version="1" comment="libxml2 is earlier than 0:2.5.10-6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14133"/>
      <state state_ref="oval:org.mitre.oval:ste:9476"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30643" version="1" comment="libxml2-devel is earlier than 0:2.5.10-6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14212"/>
      <state state_ref="oval:org.mitre.oval:ste:9476"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30458" version="1" comment="libxml2-python is earlier than 0:2.5.10-6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13780"/>
      <state state_ref="oval:org.mitre.oval:ste:9476"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37522" version="1" comment="devhelp is earlier than 0:0.12-18.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14497"/>
      <state state_ref="oval:org.mitre.oval:ste:10475"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37474" version="1" comment="xulrunner-devel is earlier than 0:1.9.0.1-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15100"/>
      <state state_ref="oval:org.mitre.oval:ste:10081"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37422" version="1" comment="nspluginwrapper is earlier than 0:0.9.91.5-22.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14675"/>
      <state state_ref="oval:org.mitre.oval:ste:10561"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37414" version="1" comment="xulrunner-devel-unstable is earlier than 0:1.9.0.1-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15048"/>
      <state state_ref="oval:org.mitre.oval:ste:10081"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37409" version="1" comment="xulrunner is earlier than 0:1.9.0.1-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15057"/>
      <state state_ref="oval:org.mitre.oval:ste:10081"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37297" version="1" comment="firefox is earlier than 0:3.0.1-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10948"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37176" version="1" comment="devhelp-devel is earlier than 0:0.12-18.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14520"/>
      <state state_ref="oval:org.mitre.oval:ste:10475"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37008" version="1" comment="yelp is earlier than 0:2.16.0-20.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14764"/>
      <state state_ref="oval:org.mitre.oval:ste:11026"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36910" version="1" comment="firefox is earlier than 0:1.5.0.12-0.21.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:11040"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38474" version="1" comment="systemtap-testsuite is earlier than 0:0.6.2-2.el4_7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14298"/>
      <state state_ref="oval:org.mitre.oval:ste:10881"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38454" version="1" comment="systemtap-runtime is earlier than 0:0.7.2-3.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15292"/>
      <state state_ref="oval:org.mitre.oval:ste:11089"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38427" version="1" comment="systemtap-testsuite is earlier than 0:0.7.2-3.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14298"/>
      <state state_ref="oval:org.mitre.oval:ste:11089"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38404" version="1" comment="systemtap-server is earlier than 0:0.7.2-3.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14954"/>
      <state state_ref="oval:org.mitre.oval:ste:11089"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38353" version="1" comment="systemtap is earlier than 0:0.6.2-2.el4_7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15026"/>
      <state state_ref="oval:org.mitre.oval:ste:10881"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38233" version="1" comment="systemtap is earlier than 0:0.7.2-3.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15026"/>
      <state state_ref="oval:org.mitre.oval:ste:11089"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38210" version="1" comment="systemtap-client is earlier than 0:0.7.2-3.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15212"/>
      <state state_ref="oval:org.mitre.oval:ste:11089"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37988" version="1" comment="systemtap-runtime is earlier than 0:0.6.2-2.el4_7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15292"/>
      <state state_ref="oval:org.mitre.oval:ste:10881"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40545" version="1" comment="krb5-libs is earlier than 0:1.3.4-62.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14395"/>
      <state state_ref="oval:org.mitre.oval:ste:11182"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40540" version="1" comment="krb5-workstation is earlier than 0:1.3.4-62.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14279"/>
      <state state_ref="oval:org.mitre.oval:ste:11182"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40497" version="1" comment="krb5-libs is earlier than 0:1.2.7-72" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14395"/>
      <state state_ref="oval:org.mitre.oval:ste:11484"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40475" version="1" comment="krb5-workstation is earlier than 0:1.6.1-36.el5_5.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14279"/>
      <state state_ref="oval:org.mitre.oval:ste:11163"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40469" version="1" comment="krb5-devel is earlier than 0:1.3.4-62.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14100"/>
      <state state_ref="oval:org.mitre.oval:ste:11182"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40461" version="1" comment="krb5-devel is earlier than 0:1.6.1-36.el5_5.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14100"/>
      <state state_ref="oval:org.mitre.oval:ste:11163"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40456" version="1" comment="krb5-devel is earlier than 0:1.2.7-72" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14100"/>
      <state state_ref="oval:org.mitre.oval:ste:11484"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40429" version="1" comment="krb5-libs is earlier than 0:1.6.1-36.el5_5.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14395"/>
      <state state_ref="oval:org.mitre.oval:ste:11163"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40256" version="1" comment="krb5 is earlier than 0:1.2.7-72" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14120"/>
      <state state_ref="oval:org.mitre.oval:ste:11484"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40211" version="1" comment="krb5-server is earlier than 0:1.6.1-36.el5_5.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14452"/>
      <state state_ref="oval:org.mitre.oval:ste:11163"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40084" version="1" comment="krb5-workstation is earlier than 0:1.2.7-72" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14279"/>
      <state state_ref="oval:org.mitre.oval:ste:11484"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40034" version="1" comment="krb5-server is earlier than 0:1.3.4-62.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14452"/>
      <state state_ref="oval:org.mitre.oval:ste:11182"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39992" version="1" comment="krb5 is earlier than 0:1.3.4-62.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14120"/>
      <state state_ref="oval:org.mitre.oval:ste:11182"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39803" version="1" comment="krb5 is earlier than 0:1.6.1-36.el5_5.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14120"/>
      <state state_ref="oval:org.mitre.oval:ste:11163"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39569" version="1" comment="krb5-server is earlier than 0:1.2.7-72" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14452"/>
      <state state_ref="oval:org.mitre.oval:ste:11484"/>
    </rpminfo_test>
    <uname_test id="oval:org.mitre.oval:tst:3437" version="1" comment="Solaris 8 Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:3700"/>
    </uname_test>
    <patch_test id="oval:org.mitre.oval:tst:7522" version="1" comment="Patch 122092-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5744"/>
      <state state_ref="oval:org.mitre.oval:ste:3291"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:7098" version="1" comment="Patch 122091-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:5670"/>
      <state state_ref="oval:org.mitre.oval:ste:3291"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3771" version="1" comment="Patch 119450-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2245"/>
      <state state_ref="oval:org.mitre.oval:ste:3724"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3644" version="1" comment="Patch 119449-01 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2729"/>
      <state state_ref="oval:org.mitre.oval:ste:3291"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36108" version="1" comment="libxml2 is earlier than 0:2.6.16-10.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14133"/>
      <state state_ref="oval:org.mitre.oval:ste:10780"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36081" version="1" comment="libxml2-devel is earlier than 0:2.6.26-2.1.2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14212"/>
      <state state_ref="oval:org.mitre.oval:ste:10800"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36040" version="1" comment="libxml2 is earlier than 0:2.5.10-8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14133"/>
      <state state_ref="oval:org.mitre.oval:ste:10625"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36021" version="1" comment="libxml2-devel is earlier than 0:2.5.10-8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14212"/>
      <state state_ref="oval:org.mitre.oval:ste:10625"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36010" version="1" comment="libxml2-python is earlier than 0:2.6.16-10.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13780"/>
      <state state_ref="oval:org.mitre.oval:ste:10780"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36005" version="1" comment="libxml2-python is earlier than 0:2.6.26-2.1.2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13780"/>
      <state state_ref="oval:org.mitre.oval:ste:10800"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35997" version="1" comment="libxml2-devel is earlier than 0:2.6.16-10.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14212"/>
      <state state_ref="oval:org.mitre.oval:ste:10780"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35956" version="1" comment="libxml2 is earlier than 0:2.6.26-2.1.2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14133"/>
      <state state_ref="oval:org.mitre.oval:ste:10800"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35780" version="1" comment="libxml2-python is earlier than 0:2.5.10-8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13780"/>
      <state state_ref="oval:org.mitre.oval:ste:10625"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39194" version="1" comment="kernel-source is earlier than 0:2.4.21-60.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14186"/>
      <state state_ref="oval:org.mitre.oval:ste:10861"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39188" version="1" comment="kernel is earlier than 0:2.6.9-89.0.9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:11333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39182" version="1" comment="kernel-doc is earlier than 0:2.6.9-89.0.9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:11333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39175" version="1" comment="kernel-kdump is earlier than 0:2.6.18-128.7.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:10657"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39164" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-89.0.9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:11333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39155" version="1" comment="kernel-PAE is earlier than 0:2.6.18-128.7.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:10657"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39114" version="1" comment="kernel-hugemem is earlier than 0:2.4.21-60.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:10861"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39072" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-128.7.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:10657"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39066" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-128.7.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:10657"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39065" version="1" comment="kernel-devel is earlier than 0:2.6.9-89.0.9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:11333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39057" version="1" comment="kernel is earlier than 0:2.6.18-128.7.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10657"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39044" version="1" comment="kernel is earlier than 0:2.4.21-60.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10861"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39035" version="1" comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14060"/>
      <state state_ref="oval:org.mitre.oval:ste:11333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39017" version="1" comment="kernel-xen is earlier than 0:2.6.18-128.7.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:10657"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39011" version="1" comment="kernel-BOOT is earlier than 0:2.4.21-60.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14219"/>
      <state state_ref="oval:org.mitre.oval:ste:10861"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39007" version="1" comment="kernel-xenU is earlier than 0:2.6.9-89.0.9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14301"/>
      <state state_ref="oval:org.mitre.oval:ste:11333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38992" version="1" comment="kernel-smp-unsupported is earlier than 0:2.4.21-60.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14218"/>
      <state state_ref="oval:org.mitre.oval:ste:10861"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38973" version="1" comment="kernel-debug-devel is earlier than 0:2.6.18-128.7.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15023"/>
      <state state_ref="oval:org.mitre.oval:ste:10657"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38949" version="1" comment="kernel-headers is earlier than 0:2.6.18-128.7.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:10657"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38920" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:11333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38868" version="1" comment="kernel-devel is earlier than 0:2.6.18-128.7.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10657"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38859" version="1" comment="kernel-smp is earlier than 0:2.4.21-60.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:10861"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38848" version="1" comment="kernel-debug is earlier than 0:2.6.18-128.7.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14957"/>
      <state state_ref="oval:org.mitre.oval:ste:10657"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38832" version="1" comment="kernel-doc is earlier than 0:2.4.21-60.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10861"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38800" version="1" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-60.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14372"/>
      <state state_ref="oval:org.mitre.oval:ste:10861"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38739" version="1" comment="kernel-unsupported is earlier than 0:2.4.21-60.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14229"/>
      <state state_ref="oval:org.mitre.oval:ste:10861"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38673" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:11333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38642" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-89.0.9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:11333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38624" version="1" comment="kernel-smp is earlier than 0:2.6.9-89.0.9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:11333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38510" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:11333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38459" version="1" comment="kernel-doc is earlier than 0:2.6.18-128.7.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10657"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38199" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-128.7.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:10657"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:1485" version="1" comment="the patch KB873333 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1008"/>
      <state state_ref="oval:org.mitre.oval:ste:1342"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1109" version="1" check="at least one" comment="the version of ole32.dll is less than 5.0.2195.7021" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:406"/>
      <state state_ref="oval:org.mitre.oval:ste:991"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34770" version="1" comment="httpd-suexec is earlier than 0:2.0.52-32.3.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14611"/>
      <state state_ref="oval:org.mitre.oval:ste:10472"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34746" version="1" comment="httpd-devel is earlier than 0:2.0.52-32.3.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:10472"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34654" version="1" comment="httpd is earlier than 0:2.0.46-68.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:10471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34650" version="1" comment="mod_ssl is earlier than 1:2.0.52-32.3.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:10282"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34520" version="1" comment="httpd is earlier than 0:2.0.52-32.3.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:10472"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34512" version="1" comment="httpd-devel is earlier than 0:2.0.46-68.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:10471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33919" version="1" comment="mod_ssl is earlier than 1:2.0.46-68.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:10357"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33780" version="1" comment="httpd-manual is earlier than 0:2.0.52-32.3.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14457"/>
      <state state_ref="oval:org.mitre.oval:ste:10472"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32319" version="1" comment="squid is earlier than 7:2.5.STABLE6-3.4E.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14403"/>
      <state state_ref="oval:org.mitre.oval:ste:9789"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32217" version="1" comment="squid is earlier than 7:2.5.STABLE3-6.3E.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14403"/>
      <state state_ref="oval:org.mitre.oval:ste:9834"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35978" version="1" comment="samba is earlier than 0:3.0.9-1.3E.14.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13931"/>
      <state state_ref="oval:org.mitre.oval:ste:10587"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35870" version="1" comment="samba-client is earlier than 0:3.0.9-1.3E.14.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13861"/>
      <state state_ref="oval:org.mitre.oval:ste:10587"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35751" version="1" comment="samba-swat is earlier than 0:3.0.25b-1.el5_1.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13707"/>
      <state state_ref="oval:org.mitre.oval:ste:10298"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35741" version="1" comment="samba-common is earlier than 0:3.0.9-1.3E.14.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14032"/>
      <state state_ref="oval:org.mitre.oval:ste:10587"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35677" version="1" comment="samba is earlier than 0:3.0.25b-1.el5_1.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13931"/>
      <state state_ref="oval:org.mitre.oval:ste:10298"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35595" version="1" comment="samba-common is earlier than 0:3.0.25b-1.el4_6.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14032"/>
      <state state_ref="oval:org.mitre.oval:ste:10399"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35516" version="1" comment="samba-common is earlier than 0:3.0.25b-1.el5_1.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14032"/>
      <state state_ref="oval:org.mitre.oval:ste:10298"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35481" version="1" comment="samba-client is earlier than 0:3.0.25b-1.el4_6.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13861"/>
      <state state_ref="oval:org.mitre.oval:ste:10399"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35374" version="1" comment="samba-swat is earlier than 0:3.0.9-1.3E.14.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13707"/>
      <state state_ref="oval:org.mitre.oval:ste:10587"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35306" version="1" comment="samba-swat is earlier than 0:3.0.25b-1.el4_6.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13707"/>
      <state state_ref="oval:org.mitre.oval:ste:10399"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35294" version="1" comment="samba is earlier than 0:3.0.25b-1.el4_6.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13931"/>
      <state state_ref="oval:org.mitre.oval:ste:10399"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35112" version="1" comment="samba-client is earlier than 0:3.0.25b-1.el5_1.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13861"/>
      <state state_ref="oval:org.mitre.oval:ste:10298"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37567" version="1" comment="rdesktop is earlier than 0:1.3.1-9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14647"/>
      <state state_ref="oval:org.mitre.oval:ste:10161"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37386" version="1" comment="rdesktop is earlier than 0:1.2.0-3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14647"/>
      <state state_ref="oval:org.mitre.oval:ste:10935"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37100" version="1" comment="rdesktop is earlier than 0:1.4.1-6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14647"/>
      <state state_ref="oval:org.mitre.oval:ste:10645"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1113" version="1" comment="the version of CrystalDecisions.Web.dll is less than 9.1.9800.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:806"/>
      <state state_ref="oval:org.mitre.oval:ste:994"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1112" version="1" comment="the w3svc service is enabled" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:805"/>
      <state state_ref="oval:org.mitre.oval:ste:993"/>
    </registry_test>
    <unknown_test id="oval:org.mitre.oval:tst:1111" version="1" comment="a website linked to the Crystal Reports Viewer is active" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
    <rpminfo_test id="oval:org.mitre.oval:tst:38572" version="1" comment="cups is earlier than 1:1.1.17-13.3.58" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:11194"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38543" version="1" comment="cups-libs is earlier than 1:1.1.17-13.3.58" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:11194"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38537" version="1" comment="cups-devel is earlier than 1:1.1.17-13.3.58" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:11194"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38647" version="1" comment="nfs-utils is earlier than 1:1.0.9-42.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14333"/>
      <state state_ref="oval:org.mitre.oval:ste:11486"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31979" version="1" comment="openssh-clients is earlier than 0:3.6.1p2-33.30.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14409"/>
      <state state_ref="oval:org.mitre.oval:ste:10020"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31909" version="1" comment="openssh-askpass-gnome is earlier than 0:3.6.1p2-33.30.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14434"/>
      <state state_ref="oval:org.mitre.oval:ste:10020"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31887" version="1" comment="openssh is earlier than 0:3.6.1p2-33.30.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14581"/>
      <state state_ref="oval:org.mitre.oval:ste:10020"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31809" version="1" comment="openssh-server is earlier than 0:3.6.1p2-33.30.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14544"/>
      <state state_ref="oval:org.mitre.oval:ste:10020"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31483" version="1" comment="openssh-askpass is earlier than 0:3.6.1p2-33.30.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14577"/>
      <state state_ref="oval:org.mitre.oval:ste:10020"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:2385" version="1" check="all" comment="/usr/bin/bzip2 is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1362"/>
      <state state_ref="oval:org.mitre.oval:ste:2234"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33056" version="1" comment="squirrelmail is earlier than 0:1.4.8-2.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14331"/>
      <state state_ref="oval:org.mitre.oval:ste:10270"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33006" version="1" comment="squirrelmail is earlier than 0:1.4.8-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14331"/>
      <state state_ref="oval:org.mitre.oval:ste:10334"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40654" version="1" comment="perl-suidperl is earlier than 3:5.8.5-53.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13815"/>
      <state state_ref="oval:org.mitre.oval:ste:11515"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40615" version="1" comment="perl is earlier than 2:5.8.0-101.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14460"/>
      <state state_ref="oval:org.mitre.oval:ste:11559"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40554" version="1" comment="perl-suidperl is earlier than 2:5.8.0-101.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13815"/>
      <state state_ref="oval:org.mitre.oval:ste:11559"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40417" version="1" comment="perl is earlier than 3:5.8.5-53.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14460"/>
      <state state_ref="oval:org.mitre.oval:ste:11515"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40367" version="1" comment="perl-DB_File is earlier than 2:5.8.0-101.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14438"/>
      <state state_ref="oval:org.mitre.oval:ste:11559"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40065" version="1" comment="perl-CGI is earlier than 2:5.8.0-101.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14319"/>
      <state state_ref="oval:org.mitre.oval:ste:11559"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39713" version="1" comment="perl-CPAN is earlier than 2:5.8.0-101.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14597"/>
      <state state_ref="oval:org.mitre.oval:ste:11559"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33429" version="1" comment="bind-devel is earlier than 20:9.2.4-20.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14242"/>
      <state state_ref="oval:org.mitre.oval:ste:9832"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33404" version="1" comment="bind-libs is earlier than 20:9.2.4-24.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14348"/>
      <state state_ref="oval:org.mitre.oval:ste:10002"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33357" version="1" comment="bind-devel is earlier than 20:9.2.4-24.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14242"/>
      <state state_ref="oval:org.mitre.oval:ste:10002"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33331" version="1" comment="bind-libs is earlier than 30:9.3.3-8.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14348"/>
      <state state_ref="oval:org.mitre.oval:ste:10242"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33314" version="1" comment="bind-devel is earlier than 30:9.3.3-8.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14242"/>
      <state state_ref="oval:org.mitre.oval:ste:10242"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33256" version="1" comment="bind-libs is earlier than 20:9.2.4-20.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14348"/>
      <state state_ref="oval:org.mitre.oval:ste:9832"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33237" version="1" comment="bind-utils is earlier than 30:9.3.3-8.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14263"/>
      <state state_ref="oval:org.mitre.oval:ste:10242"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33177" version="1" comment="bind-chroot is earlier than 20:9.2.4-20.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14363"/>
      <state state_ref="oval:org.mitre.oval:ste:9832"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33164" version="1" comment="caching-nameserver is earlier than 30:9.3.3-8.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14701"/>
      <state state_ref="oval:org.mitre.oval:ste:10242"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33136" version="1" comment="bind is earlier than 20:9.2.4-24.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14143"/>
      <state state_ref="oval:org.mitre.oval:ste:10002"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33126" version="1" comment="bind is earlier than 20:9.2.4-20.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14143"/>
      <state state_ref="oval:org.mitre.oval:ste:9832"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33115" version="1" comment="bind is earlier than 30:9.3.3-8.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14143"/>
      <state state_ref="oval:org.mitre.oval:ste:10242"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33109" version="1" comment="bind-sdb is earlier than 30:9.3.3-8.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14433"/>
      <state state_ref="oval:org.mitre.oval:ste:10242"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32936" version="1" comment="bind-chroot is earlier than 30:9.3.3-8.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14363"/>
      <state state_ref="oval:org.mitre.oval:ste:10242"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32727" version="1" comment="bind-utils is earlier than 20:9.2.4-24.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14263"/>
      <state state_ref="oval:org.mitre.oval:ste:10002"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32675" version="1" comment="bind-chroot is earlier than 20:9.2.4-24.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14363"/>
      <state state_ref="oval:org.mitre.oval:ste:10002"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32565" version="1" comment="bind-libbind-devel is earlier than 30:9.3.3-8.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14729"/>
      <state state_ref="oval:org.mitre.oval:ste:10242"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32461" version="1" comment="bind-utils is earlier than 20:9.2.4-20.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14263"/>
      <state state_ref="oval:org.mitre.oval:ste:9832"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32549" version="1" comment="python-tools is earlier than 0:2.3.4-14.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14208"/>
      <state state_ref="oval:org.mitre.oval:ste:9939"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32535" version="1" comment="python-tools is earlier than 0:2.2.3-6.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14208"/>
      <state state_ref="oval:org.mitre.oval:ste:9859"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32523" version="1" comment="python is earlier than 0:2.3.4-14.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14556"/>
      <state state_ref="oval:org.mitre.oval:ste:9939"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32462" version="1" comment="python-devel is earlier than 0:2.2.3-6.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14166"/>
      <state state_ref="oval:org.mitre.oval:ste:9859"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32327" version="1" comment="python-devel is earlier than 0:2.3.4-14.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14166"/>
      <state state_ref="oval:org.mitre.oval:ste:9939"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32283" version="1" comment="tkinter is earlier than 0:2.2.3-6.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14092"/>
      <state state_ref="oval:org.mitre.oval:ste:9859"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32198" version="1" comment="python is earlier than 0:2.2.3-6.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14556"/>
      <state state_ref="oval:org.mitre.oval:ste:9859"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32184" version="1" comment="pcre-devel is earlier than 0:4.5-3.2.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14619"/>
      <state state_ref="oval:org.mitre.oval:ste:9232"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32077" version="1" comment="pcre is earlier than 0:4.5-3.2.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14505"/>
      <state state_ref="oval:org.mitre.oval:ste:9232"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32020" version="1" comment="tkinter is earlier than 0:2.3.4-14.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14092"/>
      <state state_ref="oval:org.mitre.oval:ste:9939"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31925" version="1" comment="pcre is earlier than 0:3.9-10.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14505"/>
      <state state_ref="oval:org.mitre.oval:ste:9370"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31757" version="1" comment="python-docs is earlier than 0:2.3.4-14.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14500"/>
      <state state_ref="oval:org.mitre.oval:ste:9939"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31703" version="1" comment="pcre-devel is earlier than 0:3.9-10.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14619"/>
      <state state_ref="oval:org.mitre.oval:ste:9370"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31688" version="1" comment="exim-sa is earlier than 0:4.43-1.RHEL4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14247"/>
      <state state_ref="oval:org.mitre.oval:ste:9330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31631" version="1" comment="exim is earlier than 0:4.43-1.RHEL4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14578"/>
      <state state_ref="oval:org.mitre.oval:ste:9330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31599" version="1" comment="exim-doc is earlier than 0:4.43-1.RHEL4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14594"/>
      <state state_ref="oval:org.mitre.oval:ste:9330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31475" version="1" comment="exim-mon is earlier than 0:4.43-1.RHEL4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14228"/>
      <state state_ref="oval:org.mitre.oval:ste:9330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35868" version="1" comment="htdig is earlier than 3:3.2.0b6-9.0.1.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14251"/>
      <state state_ref="oval:org.mitre.oval:ste:10702"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35833" version="1" comment="htdig is earlier than 3:3.2.0b6-4.el4_6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14251"/>
      <state state_ref="oval:org.mitre.oval:ste:10663"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35790" version="1" comment="htdig-web is earlier than 3:3.2.0b6-9.0.1.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13963"/>
      <state state_ref="oval:org.mitre.oval:ste:10702"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35695" version="1" comment="htdig-web is earlier than 3:3.2.0b6-4.el4_6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13963"/>
      <state state_ref="oval:org.mitre.oval:ste:10663"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36298" version="1" comment="java-1.5.0-sun-src is earlier than 0:1.5.0.14-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15113"/>
      <state state_ref="oval:org.mitre.oval:ste:10765"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36268" version="1" comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.14-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14507"/>
      <state state_ref="oval:org.mitre.oval:ste:10559"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36255" version="1" comment="java-1.5.0-sun is earlier than 0:1.5.0.14-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14988"/>
      <state state_ref="oval:org.mitre.oval:ste:10559"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36147" version="1" comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.14-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14499"/>
      <state state_ref="oval:org.mitre.oval:ste:10559"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36135" version="1" comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.14-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14479"/>
      <state state_ref="oval:org.mitre.oval:ste:10765"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36088" version="1" comment="java-1.5.0-sun is earlier than 0:1.5.0.14-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14988"/>
      <state state_ref="oval:org.mitre.oval:ste:10765"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36042" version="1" comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.14-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14507"/>
      <state state_ref="oval:org.mitre.oval:ste:10765"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36038" version="1" comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.14-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14479"/>
      <state state_ref="oval:org.mitre.oval:ste:10559"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35947" version="1" comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.14-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14499"/>
      <state state_ref="oval:org.mitre.oval:ste:10765"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35767" version="1" comment="java-1.5.0-sun-src is earlier than 0:1.5.0.14-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15113"/>
      <state state_ref="oval:org.mitre.oval:ste:10559"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35652" version="1" comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.14-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14809"/>
      <state state_ref="oval:org.mitre.oval:ste:10559"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35342" version="1" comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.14-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14809"/>
      <state state_ref="oval:org.mitre.oval:ste:10765"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32083" version="1" comment="zlib is earlier than 0:1.2.1.2-1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14630"/>
      <state state_ref="oval:org.mitre.oval:ste:9948"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31702" version="1" comment="zlib-devel is earlier than 0:1.2.1.2-1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14435"/>
      <state state_ref="oval:org.mitre.oval:ste:9948"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34035" version="1" comment="sendmail is earlier than 0:8.13.1-3.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14016"/>
      <state state_ref="oval:org.mitre.oval:ste:10370"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33996" version="1" comment="sendmail-cf is earlier than 0:8.13.1-3.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14583"/>
      <state state_ref="oval:org.mitre.oval:ste:10370"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33824" version="1" comment="sendmail-devel is earlier than 0:8.13.1-3.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14230"/>
      <state state_ref="oval:org.mitre.oval:ste:10370"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33657" version="1" comment="sendmail-doc is earlier than 0:8.13.1-3.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14631"/>
      <state state_ref="oval:org.mitre.oval:ste:10370"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34879" version="1" comment="flash-plugin is earlier than 0:9.0.48.0-1.el3.with.oss" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14752"/>
      <state state_ref="oval:org.mitre.oval:ste:10405"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34699" version="1" comment="flash-plugin is earlier than 0:9.0.48.0-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14752"/>
      <state state_ref="oval:org.mitre.oval:ste:10175"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34473" version="1" comment="flash-plugin is earlier than 0:9.0.48.0-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14752"/>
      <state state_ref="oval:org.mitre.oval:ste:10444"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1123" version="1" comment="the version of Quartz.dll is greater than or equal to 6.5.3790.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:704"/>
      <state state_ref="oval:org.mitre.oval:ste:1004"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1122" version="1" comment="the version of Quartz.dll is less than 6.5.3790.2519" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:704"/>
      <state state_ref="oval:org.mitre.oval:ste:1003"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1121" version="1" comment="the version of Quartz.dll is less than 6.3.1.889" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:704"/>
      <state state_ref="oval:org.mitre.oval:ste:1002"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1120" version="2" comment="DirectX 9.x Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:499"/>
      <state state_ref="oval:org.mitre.oval:ste:1001"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37614" version="1" comment="libtiff-devel is earlier than 0:3.5.7-31.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14174"/>
      <state state_ref="oval:org.mitre.oval:ste:10684"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37573" version="1" comment="libtiff-devel is earlier than 0:3.6.1-12.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14174"/>
      <state state_ref="oval:org.mitre.oval:ste:10910"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37555" version="1" comment="libtiff is earlier than 0:3.6.1-12.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14341"/>
      <state state_ref="oval:org.mitre.oval:ste:10910"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37515" version="1" comment="libtiff-devel is earlier than 0:3.8.2-7.el5_2.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14174"/>
      <state state_ref="oval:org.mitre.oval:ste:10965"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37373" version="1" comment="libtiff is earlier than 0:3.5.7-31.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14341"/>
      <state state_ref="oval:org.mitre.oval:ste:10684"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37340" version="1" comment="libtiff is earlier than 0:3.8.2-7.el5_2.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14341"/>
      <state state_ref="oval:org.mitre.oval:ste:10965"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40306" version="1" comment="pidgin-perl is earlier than 0:2.6.6-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14202"/>
      <state state_ref="oval:org.mitre.oval:ste:11527"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40248" version="1" comment="libpurple-tcl is earlier than 0:2.6.6-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14238"/>
      <state state_ref="oval:org.mitre.oval:ste:11527"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40218" version="1" comment="libpurple-perl is earlier than 0:2.6.6-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15144"/>
      <state state_ref="oval:org.mitre.oval:ste:11243"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40214" version="1" comment="pidgin is earlier than 0:2.6.6-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15157"/>
      <state state_ref="oval:org.mitre.oval:ste:11243"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40202" version="1" comment="pidgin-devel is earlier than 0:2.6.6-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14642"/>
      <state state_ref="oval:org.mitre.oval:ste:11527"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40181" version="1" comment="libpurple-tcl is earlier than 0:2.6.6-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14238"/>
      <state state_ref="oval:org.mitre.oval:ste:11243"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40176" version="1" comment="libpurple-perl is earlier than 0:2.6.6-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15144"/>
      <state state_ref="oval:org.mitre.oval:ste:11527"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40141" version="1" comment="libpurple-devel is earlier than 0:2.6.6-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15112"/>
      <state state_ref="oval:org.mitre.oval:ste:11527"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40093" version="1" comment="libpurple is earlier than 0:2.6.6-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14700"/>
      <state state_ref="oval:org.mitre.oval:ste:11243"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40080" version="1" comment="libpurple is earlier than 0:2.6.6-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14700"/>
      <state state_ref="oval:org.mitre.oval:ste:11527"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40052" version="1" comment="pidgin-devel is earlier than 0:2.6.6-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14642"/>
      <state state_ref="oval:org.mitre.oval:ste:11243"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40004" version="1" comment="pidgin-perl is earlier than 0:2.6.6-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14202"/>
      <state state_ref="oval:org.mitre.oval:ste:11243"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39993" version="1" comment="pidgin is earlier than 0:2.6.6-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15157"/>
      <state state_ref="oval:org.mitre.oval:ste:11527"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39983" version="1" comment="libpurple-devel is earlier than 0:2.6.6-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15112"/>
      <state state_ref="oval:org.mitre.oval:ste:11243"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39974" version="1" comment="finch-devel is earlier than 0:2.6.6-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15074"/>
      <state state_ref="oval:org.mitre.oval:ste:11527"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39933" version="1" comment="finch is earlier than 0:2.6.6-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15156"/>
      <state state_ref="oval:org.mitre.oval:ste:11243"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39917" version="1" comment="finch is earlier than 0:2.6.6-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15156"/>
      <state state_ref="oval:org.mitre.oval:ste:11527"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39911" version="1" comment="finch-devel is earlier than 0:2.6.6-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15074"/>
      <state state_ref="oval:org.mitre.oval:ste:11243"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29623" version="1" comment="cvs is earlier than 0:1.11.2-14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14275"/>
      <state state_ref="oval:org.mitre.oval:ste:9667"/>
    </rpminfo_test>
    <uname_test id="oval:org.mitre.oval:tst:2514" version="1" comment="HP Release B.11.11" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:2354"/>
    </uname_test>
    <swlist_test id="oval:org.mitre.oval:tst:1124" version="1" check="at least one" comment="WUFTP-26.INETSVCS-FTP with version less than B.11.00.01.004 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:811"/>
      <state state_ref="oval:org.mitre.oval:ste:1005"/>
    </swlist_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39100" version="1" comment="subversion-perl is earlier than 0:1.1.4-3.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14470"/>
      <state state_ref="oval:org.mitre.oval:ste:11282"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39069" version="1" comment="subversion-perl is earlier than 0:1.4.2-4.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14470"/>
      <state state_ref="oval:org.mitre.oval:ste:11337"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38984" version="1" comment="mod_dav_svn is earlier than 0:1.4.2-4.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14514"/>
      <state state_ref="oval:org.mitre.oval:ste:11337"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38978" version="1" comment="subversion-devel is earlier than 0:1.4.2-4.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14983"/>
      <state state_ref="oval:org.mitre.oval:ste:11337"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38928" version="1" comment="subversion is earlier than 0:1.1.4-3.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15298"/>
      <state state_ref="oval:org.mitre.oval:ste:11282"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38861" version="1" comment="subversion-javahl is earlier than 0:1.4.2-4.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15180"/>
      <state state_ref="oval:org.mitre.oval:ste:11337"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38842" version="1" comment="subversion-ruby is earlier than 0:1.4.2-4.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15192"/>
      <state state_ref="oval:org.mitre.oval:ste:11337"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38702" version="1" comment="mod_dav_svn is earlier than 0:1.1.4-3.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14514"/>
      <state state_ref="oval:org.mitre.oval:ste:11282"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38651" version="1" comment="subversion is earlier than 0:1.4.2-4.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15298"/>
      <state state_ref="oval:org.mitre.oval:ste:11337"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38517" version="1" comment="subversion-devel is earlier than 0:1.1.4-3.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14983"/>
      <state state_ref="oval:org.mitre.oval:ste:11282"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34161" version="1" comment="vixie-cron is earlier than 4:4.1-70.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13978"/>
      <state state_ref="oval:org.mitre.oval:ste:10469"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33912" version="1" comment="vixie-cron is earlier than 0:4.1-19.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13978"/>
      <state state_ref="oval:org.mitre.oval:ste:9777"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33630" version="1" comment="vixie-cron is earlier than 4:4.1-47.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13978"/>
      <state state_ref="oval:org.mitre.oval:ste:10440"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:2569" version="3" comment="Win2K/XP/2003 service pack 4 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:717"/>
      <state state_ref="oval:org.mitre.oval:ste:2402"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1125" version="1" comment="msieftp.dll is less than 5.50.4956.500" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:708"/>
      <state state_ref="oval:org.mitre.oval:ste:1006"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33891" version="1" comment="xscreensaver is earlier than 1:4.18-5.rhel4.14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14733"/>
      <state state_ref="oval:org.mitre.oval:ste:10500"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33474" version="1" comment="xscreensaver is earlier than 1:4.10-21.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14733"/>
      <state state_ref="oval:org.mitre.oval:ste:10193"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35727" version="1" comment="autofs is earlier than 1:5.0.1-0.rc2.55.el5.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14848"/>
      <state state_ref="oval:org.mitre.oval:ste:10718"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35487" version="1" comment="autofs5 is earlier than 1:5.0.1-0.rc2.55.el4_6.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15008"/>
      <state state_ref="oval:org.mitre.oval:ste:10537"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32376" version="1" comment="openssl-perl is earlier than 0:0.9.7a-33.17" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14122"/>
      <state state_ref="oval:org.mitre.oval:ste:9751"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32370" version="1" comment="openssl-devel is earlier than 0:0.9.7a-33.17" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13920"/>
      <state state_ref="oval:org.mitre.oval:ste:9751"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32357" version="1" comment="openssl is earlier than 0:0.9.7a-33.17" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13882"/>
      <state state_ref="oval:org.mitre.oval:ste:9751"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32241" version="1" comment="openssl096b is earlier than 0:0.9.6b-22.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14258"/>
      <state state_ref="oval:org.mitre.oval:ste:9774"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32196" version="1" comment="openssl is earlier than 0:0.9.7a-43.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13882"/>
      <state state_ref="oval:org.mitre.oval:ste:9982"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32193" version="1" comment="openssl096b is earlier than 0:0.9.6b-16.22.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14258"/>
      <state state_ref="oval:org.mitre.oval:ste:9946"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31826" version="1" comment="openssl-devel is earlier than 0:0.9.7a-43.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13920"/>
      <state state_ref="oval:org.mitre.oval:ste:9982"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31576" version="1" comment="openssl-perl is earlier than 0:0.9.7a-43.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14122"/>
      <state state_ref="oval:org.mitre.oval:ste:9982"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32146" version="1" comment="httpd is earlier than 0:2.0.52-12.1.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:9876"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31975" version="1" comment="mod_ssl is earlier than 1:2.0.46-46.2.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:9612"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31948" version="1" comment="httpd-devel is earlier than 0:2.0.52-12.1.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:9876"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31906" version="1" comment="mod_ssl is earlier than 1:2.0.52-12.1.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:10011"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31890" version="1" comment="httpd-manual is earlier than 0:2.0.52-12.1.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14457"/>
      <state state_ref="oval:org.mitre.oval:ste:9876"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31790" version="1" comment="httpd-suexec is earlier than 0:2.0.52-12.1.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14611"/>
      <state state_ref="oval:org.mitre.oval:ste:9876"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31786" version="1" comment="httpd-devel is earlier than 0:2.0.46-46.2.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:9599"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31650" version="1" comment="httpd is earlier than 0:2.0.46-46.2.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:9599"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38911" version="1" comment="ruby-libs is earlier than 0:1.8.5-5.el5_3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14388"/>
      <state state_ref="oval:org.mitre.oval:ste:11364"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38864" version="1" comment="ruby is earlier than 0:1.8.1-7.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14305"/>
      <state state_ref="oval:org.mitre.oval:ste:11087"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38837" version="1" comment="ruby-libs is earlier than 0:1.8.1-7.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14388"/>
      <state state_ref="oval:org.mitre.oval:ste:11087"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38762" version="1" comment="ruby-rdoc is earlier than 0:1.8.5-5.el5_3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14244"/>
      <state state_ref="oval:org.mitre.oval:ste:11364"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38751" version="1" comment="ruby-mode is earlier than 0:1.8.5-5.el5_3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14380"/>
      <state state_ref="oval:org.mitre.oval:ste:11364"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38738" version="1" comment="ruby-tcltk is earlier than 0:1.8.5-5.el5_3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14273"/>
      <state state_ref="oval:org.mitre.oval:ste:11364"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38715" version="1" comment="ruby-devel is earlier than 0:1.8.1-7.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14187"/>
      <state state_ref="oval:org.mitre.oval:ste:11087"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38694" version="1" comment="ruby-mode is earlier than 0:1.8.1-7.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14380"/>
      <state state_ref="oval:org.mitre.oval:ste:11087"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38591" version="1" comment="ruby-docs is earlier than 0:1.8.1-7.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14446"/>
      <state state_ref="oval:org.mitre.oval:ste:11087"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38574" version="1" comment="ruby-irb is earlier than 0:1.8.5-5.el5_3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14777"/>
      <state state_ref="oval:org.mitre.oval:ste:11364"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38549" version="1" comment="irb is earlier than 0:1.8.1-7.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13649"/>
      <state state_ref="oval:org.mitre.oval:ste:11087"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38523" version="1" comment="ruby-tcltk is earlier than 0:1.8.1-7.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14273"/>
      <state state_ref="oval:org.mitre.oval:ste:11087"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38362" version="1" comment="ruby-devel is earlier than 0:1.8.5-5.el5_3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14187"/>
      <state state_ref="oval:org.mitre.oval:ste:11364"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38178" version="1" comment="ruby-ri is earlier than 0:1.8.5-5.el5_3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14461"/>
      <state state_ref="oval:org.mitre.oval:ste:11364"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38133" version="1" comment="ruby is earlier than 0:1.8.5-5.el5_3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14305"/>
      <state state_ref="oval:org.mitre.oval:ste:11364"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38045" version="1" comment="ruby-docs is earlier than 0:1.8.5-5.el5_3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14446"/>
      <state state_ref="oval:org.mitre.oval:ste:11364"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:2611" version="1" comment="ISA Server 2000 SP2 (or earlier) is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1487"/>
      <state state_ref="oval:org.mitre.oval:ste:2440"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2610" version="1" comment="the version of w3proxy.exe is less than 3.0.1200.430" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1485"/>
      <state state_ref="oval:org.mitre.oval:ste:2439"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2609" version="1" comment="the patch KB899753 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1484"/>
      <state state_ref="oval:org.mitre.oval:ste:2438"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34227" version="1" comment="squirrelmail is earlier than 0:1.4.8-4.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14331"/>
      <state state_ref="oval:org.mitre.oval:ste:10256"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33871" version="1" comment="squirrelmail is earlier than 0:1.4.8-4.0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14331"/>
      <state state_ref="oval:org.mitre.oval:ste:10435"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33850" version="1" comment="squirrelmail is earlier than 0:1.4.8-6.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14331"/>
      <state state_ref="oval:org.mitre.oval:ste:9696"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32530" version="1" comment="kdegraphics-devel is earlier than 7:3.3.1-3.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14596"/>
      <state state_ref="oval:org.mitre.oval:ste:10105"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32495" version="1" comment="kdegraphics is earlier than 7:3.3.1-3.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14241"/>
      <state state_ref="oval:org.mitre.oval:ste:10105"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33558" version="1" comment="rh-postgresql-devel is earlier than 0:7.3.18-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14466"/>
      <state state_ref="oval:org.mitre.oval:ste:10280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33539" version="1" comment="rh-postgresql is earlier than 0:7.3.18-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14320"/>
      <state state_ref="oval:org.mitre.oval:ste:10280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33537" version="1" comment="rh-postgresql-tcl is earlier than 0:7.3.18-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13874"/>
      <state state_ref="oval:org.mitre.oval:ste:10280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33534" version="1" comment="postgresql-python is earlier than 0:7.4.16-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14546"/>
      <state state_ref="oval:org.mitre.oval:ste:10018"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33531" version="1" comment="postgresql-docs is earlier than 0:7.4.16-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14365"/>
      <state state_ref="oval:org.mitre.oval:ste:10018"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33496" version="1" comment="postgresql-devel is earlier than 0:7.4.16-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14290"/>
      <state state_ref="oval:org.mitre.oval:ste:10018"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33464" version="1" comment="rh-postgresql-docs is earlier than 0:7.3.18-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13876"/>
      <state state_ref="oval:org.mitre.oval:ste:10280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33442" version="1" comment="postgresql is earlier than 0:7.4.16-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14586"/>
      <state state_ref="oval:org.mitre.oval:ste:10018"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33432" version="1" comment="rh-postgresql-libs is earlier than 0:7.3.18-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14436"/>
      <state state_ref="oval:org.mitre.oval:ste:10280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33427" version="1" comment="postgresql-test is earlier than 0:7.4.16-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14367"/>
      <state state_ref="oval:org.mitre.oval:ste:10018"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33317" version="1" comment="rh-postgresql-pl is earlier than 0:7.3.18-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14453"/>
      <state state_ref="oval:org.mitre.oval:ste:10280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33285" version="1" comment="rh-postgresql-python is earlier than 0:7.3.18-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14328"/>
      <state state_ref="oval:org.mitre.oval:ste:10280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33246" version="1" comment="rh-postgresql-jdbc is earlier than 0:7.3.18-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14295"/>
      <state state_ref="oval:org.mitre.oval:ste:10280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33243" version="1" comment="rh-postgresql-contrib is earlier than 0:7.3.18-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13927"/>
      <state state_ref="oval:org.mitre.oval:ste:10280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33220" version="1" comment="rh-postgresql-server is earlier than 0:7.3.18-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14152"/>
      <state state_ref="oval:org.mitre.oval:ste:10280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33173" version="1" comment="postgresql-jdbc is earlier than 0:7.4.16-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14547"/>
      <state state_ref="oval:org.mitre.oval:ste:10018"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33144" version="1" comment="postgresql-libs is earlier than 0:7.4.16-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14383"/>
      <state state_ref="oval:org.mitre.oval:ste:10018"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33104" version="1" comment="rh-postgresql-test is earlier than 0:7.3.18-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14347"/>
      <state state_ref="oval:org.mitre.oval:ste:10280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33069" version="1" comment="postgresql-server is earlier than 0:7.4.16-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14158"/>
      <state state_ref="oval:org.mitre.oval:ste:10018"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33065" version="1" comment="postgresql-pl is earlier than 0:7.4.16-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14537"/>
      <state state_ref="oval:org.mitre.oval:ste:10018"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33007" version="1" comment="postgresql-contrib is earlier than 0:7.4.16-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14293"/>
      <state state_ref="oval:org.mitre.oval:ste:10018"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32982" version="1" comment="postgresql-tcl is earlier than 0:7.4.16-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14486"/>
      <state state_ref="oval:org.mitre.oval:ste:10018"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33756" version="1" comment="openoffice.org-testtools is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14135"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33749" version="1" comment="openoffice.org-xsltfilter is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14530"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33679" version="1" comment="openoffice.org-writer is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14758"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33670" version="1" comment="openoffice.org-langpack-th_TH is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14732"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33659" version="1" comment="openoffice.org-langpack-sv is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14529"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33643" version="1" comment="openoffice.org-langpack-sl_SI is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14869"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33638" version="1" comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14056"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33611" version="1" comment="openoffice.org-langpack-fr is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14772"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33606" version="1" comment="openoffice.org-langpack-ko_KR is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14190"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33604" version="1" comment="openoffice.org-langpack-pt_PT is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14571"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33599" version="1" comment="openoffice.org-pyuno is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14806"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33579" version="1" comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14728"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33553" version="1" comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14738"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33552" version="1" comment="openoffice.org-langpack-tr_TR is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14886"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33544" version="1" comment="openoffice.org-langpack-bn is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14706"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33543" version="1" comment="openoffice.org-langpack-ru is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14766"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33533" version="1" comment="openoffice.org-langpack-ml_IN is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14257"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33529" version="1" comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14432"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33517" version="1" comment="openoffice.org-math is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14557"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33514" version="1" comment="openoffice.org-langpack-fi_FI is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14625"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33513" version="1" comment="openoffice.org-langpack-as_IN is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14576"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33511" version="1" comment="openoffice.org-langpack-ja_JP is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14155"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33490" version="1" comment="openoffice.org-langpack-eu_ES is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14813"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33486" version="1" comment="openoffice.org-langpack-ms_MY is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14787"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33485" version="1" comment="openoffice.org-langpack-pa_IN is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14746"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33484" version="1" comment="openoffice.org-langpack-st_ZA is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14851"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33480" version="1" comment="openoffice.org-langpack-es is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14604"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33477" version="1" comment="openoffice.org-langpack-ur is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14671"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33476" version="1" comment="openoffice.org-langpack-nl is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14909"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33471" version="1" comment="openoffice.org-langpack-cy_GB is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14501"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33463" version="1" comment="openoffice.org-langpack-ga_IE is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14635"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33452" version="1" comment="openoffice.org-langpack-kn_IN is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14714"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33451" version="1" comment="openoffice.org-draw is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14828"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33450" version="1" comment="openoffice.org-langpack-hu_HU is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14694"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33448" version="1" comment="openoffice.org-emailmerge is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14522"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33446" version="1" comment="openoffice.org is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33424" version="1" comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14562"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33420" version="1" comment="openoffice.org-langpack-mr_IN is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14855"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33401" version="1" comment="openoffice.org-langpack-it is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14812"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33393" version="1" comment="openoffice.org-impress is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14707"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33389" version="1" comment="openoffice.org-core is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14450"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33388" version="1" comment="openoffice.org-langpack-sk_SK is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14266"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33387" version="1" comment="openoffice.org-langpack-sr_CS is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14189"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33377" version="1" comment="openoffice.org-langpack-af_ZA is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14506"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33367" version="1" comment="openoffice.org-langpack-et_EE is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14280"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33365" version="1" comment="openoffice.org-graphicfilter is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14526"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33364" version="1" comment="openoffice.org-langpack-bg_BG is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14589"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33358" version="1" comment="openoffice.org-langpack-he_IL is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14442"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33355" version="1" comment="openoffice.org-langpack-hr_HR is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14336"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33324" version="1" comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14865"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33323" version="1" comment="openoffice.org-langpack-hi_IN is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14717"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33313" version="1" comment="openoffice.org-langpack-ar is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14872"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33302" version="1" comment="openoffice.org-langpack-da_DK is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14748"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33301" version="1" comment="openoffice.org-langpack-zh_TW is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14392"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33271" version="1" comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14651"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33254" version="1" comment="openoffice.org-langpack-te_IN is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14832"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33212" version="1" comment="openoffice.org-langpack-lt_LT is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13921"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33201" version="1" comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13974"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33168" version="1" comment="openoffice.org-langpack-nb_NO is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14807"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33160" version="1" comment="openoffice.org-langpack-zh_CN is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14839"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33157" version="1" comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14900"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33147" version="1" comment="openoffice.org-langpack-de is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14539"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33142" version="1" comment="openoffice.org-langpack-ta_IN is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14637"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33111" version="1" comment="openoffice.org-calc is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14623"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33060" version="1" comment="openoffice.org-base is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14548"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33051" version="1" comment="openoffice.org-langpack-nn_NO is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14779"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33048" version="1" comment="openoffice.org-javafilter is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14566"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33039" version="1" comment="openoffice.org-langpack-ca_ES is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14778"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33023" version="1" comment="openoffice.org-langpack-gl_ES is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14792"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33013" version="1" comment="openoffice.org-langpack-pl_PL is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14767"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33009" version="1" comment="openoffice.org-langpack-or_IN is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14588"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32762" version="1" comment="openoffice.org-langpack-el_GR is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14359"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32740" version="1" comment="openoffice.org-langpack-gu_IN is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14269"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32682" version="1" comment="openoffice.org-langpack-pt_BR is earlier than 1:2.0.4-5.4.17.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14822"/>
      <state state_ref="oval:org.mitre.oval:ste:10043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40146" version="1" comment="systemtap-client is earlier than 0:0.9.7-5.el5_4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15212"/>
      <state state_ref="oval:org.mitre.oval:ste:10594"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40046" version="1" comment="systemtap-testsuite is earlier than 0:0.9.7-5.el5_4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14298"/>
      <state state_ref="oval:org.mitre.oval:ste:10594"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39973" version="1" comment="systemtap-initscript is earlier than 0:0.9.7-5.el5_4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15362"/>
      <state state_ref="oval:org.mitre.oval:ste:10594"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39868" version="1" comment="systemtap is earlier than 0:0.9.7-5.el5_4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15026"/>
      <state state_ref="oval:org.mitre.oval:ste:10594"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39856" version="1" comment="systemtap-runtime is earlier than 0:0.9.7-5.el5_4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15292"/>
      <state state_ref="oval:org.mitre.oval:ste:10594"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39484" version="1" comment="systemtap-server is earlier than 0:0.9.7-5.el5_4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14954"/>
      <state state_ref="oval:org.mitre.oval:ste:10594"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39433" version="1" comment="systemtap-sdt-devel is earlier than 0:0.9.7-5.el5_4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14608"/>
      <state state_ref="oval:org.mitre.oval:ste:10594"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40810" version="1" comment="kernel-xenU is earlier than 0:2.6.9-89.0.26.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14301"/>
      <state state_ref="oval:org.mitre.oval:ste:11417"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40801" version="1" comment="kernel is earlier than 0:2.6.9-89.0.26.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:11417"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40798" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-89.0.26.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:11417"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40784" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.26.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:11417"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40737" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.26.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:11417"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40711" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.26.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:11417"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40705" version="1" comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.26.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14060"/>
      <state state_ref="oval:org.mitre.oval:ste:11417"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40665" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-89.0.26.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:11417"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40648" version="1" comment="kernel-smp is earlier than 0:2.6.9-89.0.26.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:11417"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40523" version="1" comment="kernel-doc is earlier than 0:2.6.9-89.0.26.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:11417"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40491" version="1" comment="kernel-devel is earlier than 0:2.6.9-89.0.26.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:11417"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34738" version="1" comment="coolkey is earlier than 0:1.1.0-5.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14552"/>
      <state state_ref="oval:org.mitre.oval:ste:10284"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33897" version="1" comment="coolkey-devel is earlier than 0:1.1.0-5.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14771"/>
      <state state_ref="oval:org.mitre.oval:ste:10284"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31597" version="1" comment="kernel is earlier than 0:2.4.21-32.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:9594"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31530" version="1" comment="kernel-unsupported is earlier than 0:2.4.21-32.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14229"/>
      <state state_ref="oval:org.mitre.oval:ste:9594"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31518" version="1" comment="kernel-source is earlier than 0:2.4.21-32.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14186"/>
      <state state_ref="oval:org.mitre.oval:ste:9594"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31511" version="1" comment="kernel-doc is earlier than 0:2.4.21-32.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:9594"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31430" version="1" comment="kernel-BOOT is earlier than 0:2.4.21-32.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14219"/>
      <state state_ref="oval:org.mitre.oval:ste:9594"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31413" version="1" comment="kernel-smp is earlier than 0:2.4.21-32.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:9594"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31347" version="1" comment="kernel-smp-unsupported is earlier than 0:2.4.21-32.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14218"/>
      <state state_ref="oval:org.mitre.oval:ste:9594"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31236" version="1" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-32.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14372"/>
      <state state_ref="oval:org.mitre.oval:ste:9594"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31051" version="1" comment="kernel-hugemem is earlier than 0:2.4.21-32.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:9594"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33332" version="1" comment="flash-plugin is earlier than 0:7.0.69-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14752"/>
      <state state_ref="oval:org.mitre.oval:ste:9892"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32385" version="1" comment="flash-plugin is earlier than 0:7.0.69-1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14752"/>
      <state state_ref="oval:org.mitre.oval:ste:10179"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39198" version="1" comment="rgmanager is earlier than 0:2.0.52-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14870"/>
      <state state_ref="oval:org.mitre.oval:ste:11326"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38338" version="1" comment="gfs2-utils is earlier than 0:0.1.62-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15064"/>
      <state state_ref="oval:org.mitre.oval:ste:10717"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31912" version="1" comment="zlib-devel is earlier than 0:1.2.1.2-1.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14435"/>
      <state state_ref="oval:org.mitre.oval:ste:9870"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31730" version="1" comment="zlib is earlier than 0:1.2.1.2-1.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14630"/>
      <state state_ref="oval:org.mitre.oval:ste:9870"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38341" version="1" comment="glib2 is earlier than 0:2.12.3-4.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14782"/>
      <state state_ref="oval:org.mitre.oval:ste:11039"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38292" version="1" comment="glib2-devel is earlier than 0:2.12.3-4.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15038"/>
      <state state_ref="oval:org.mitre.oval:ste:11039"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:2418" version="1" check="at least one" comment="the version of mshtml.dll is less than 6.0.2800.1515 (RTMGDR)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2266"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:2417" version="1" check="at least one" comment="the version of mshtml.dll is less than 6.0.2800.1516 (RTMQFE)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2265"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1129" version="1" check="at least one" comment="the patch kb896727 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:813"/>
      <state state_ref="oval:org.mitre.oval:ste:1010"/>
    </registry_test>
    <patch_test id="oval:org.mitre.oval:tst:2994" version="1" check="at least one" comment="Patch 107709-19 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:868"/>
      <state state_ref="oval:org.mitre.oval:ste:2806"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40017" version="2" comment="brlapi-devel is earlier than 0:0.4.1-4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15308"/>
      <state state_ref="oval:org.mitre.oval:ste:20118"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39539" version="2" comment="brlapi is earlier than 0:0.4.1-4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14702"/>
      <state state_ref="oval:org.mitre.oval:ste:20118"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39476" version="1" comment="brltty is earlier than 0:3.7.2-4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14899"/>
      <state state_ref="oval:org.mitre.oval:ste:10634"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35464" version="1" comment="opal-devel is earlier than 0:2.2.2-1.1.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15085"/>
      <state state_ref="oval:org.mitre.oval:ste:10682"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35402" version="1" comment="opal is earlier than 0:2.2.2-1.1.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14960"/>
      <state state_ref="oval:org.mitre.oval:ste:10682"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40363" version="1" comment="kernel-debug is earlier than 0:2.6.18-194.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14957"/>
      <state state_ref="oval:org.mitre.oval:ste:10976"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40319" version="1" comment="gfs-kmod is earlier than 0:0.1.34-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15293"/>
      <state state_ref="oval:org.mitre.oval:ste:11557"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40313" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-194.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:10976"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40302" version="1" comment="kernel is earlier than 0:2.6.18-194.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10976"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40182" version="1" comment="kernel-headers is earlier than 0:2.6.18-194.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:10976"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40161" version="1" comment="kmod-gfs-xen is earlier than 0:0.1.34-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15088"/>
      <state state_ref="oval:org.mitre.oval:ste:11557"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40151" version="1" comment="kernel-xen is earlier than 0:2.6.18-194.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:10976"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40126" version="1" comment="kmod-gfs-PAE is earlier than 0:0.1.34-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15284"/>
      <state state_ref="oval:org.mitre.oval:ste:11557"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40090" version="1" comment="kernel-PAE is earlier than 0:2.6.18-194.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:10976"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40070" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-194.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:10976"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39864" version="1" comment="kmod-gfs is earlier than 0:0.1.34-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15291"/>
      <state state_ref="oval:org.mitre.oval:ste:11557"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39840" version="1" comment="kernel-doc is earlier than 0:2.6.18-194.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10976"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39718" version="1" comment="kernel-kdump is earlier than 0:2.6.18-194.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:10976"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39519" version="1" comment="kernel-debug-devel is earlier than 0:2.6.18-194.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15023"/>
      <state state_ref="oval:org.mitre.oval:ste:10976"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39472" version="1" comment="kernel-devel is earlier than 0:2.6.18-194.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10976"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39440" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-194.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:10976"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1131" version="1" check="all" comment="telnet RPM earlier than 1:0.17-20.EL3.3" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:815"/>
      <state state_ref="oval:org.mitre.oval:ste:1012"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1130" version="1" check="all" comment="/usr/bin/telnet is executable by any user" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:814"/>
      <state state_ref="oval:org.mitre.oval:ste:1011"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30979" version="1" comment="httpd is earlier than 0:2.0.46-40.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:9486"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30928" version="1" comment="mod_ssl is earlier than 1:2.0.46-40.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:9680"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30894" version="1" comment="httpd-devel is earlier than 0:2.0.46-40.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:9486"/>
    </rpminfo_test>
    <patch_test id="oval:org.mitre.oval:tst:4058" version="1" check_existence="at_least_one_exists" check="at least one" comment="Patch 123325-03 or later installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1896"/>
      <state state_ref="oval:org.mitre.oval:ste:3860"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3976" version="1" check_existence="at_least_one_exists" check="at least one" comment="Patch 114357-11 or later installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2022"/>
      <state state_ref="oval:org.mitre.oval:ste:3838"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3920" version="1" check_existence="at_least_one_exists" check="at least one" comment="Patch 123324-03 or later installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2647"/>
      <state state_ref="oval:org.mitre.oval:ste:3860"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3383" version="1" check_existence="at_least_one_exists" check="at least one" comment="Patch 114356-12 or later installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2697"/>
      <state state_ref="oval:org.mitre.oval:ste:3725"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39353" version="1" comment="pidgin is earlier than 0:1.5.1-6.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15157"/>
      <state state_ref="oval:org.mitre.oval:ste:11206"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31382" version="1" comment="thunderbird is earlier than 0:1.0.2-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:9172"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31302" version="1" comment="firefox is earlier than 0:1.0.2-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:9172"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36413" version="1" comment="squid is earlier than 0:2.5.STABLE3-9.3E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14403"/>
      <state state_ref="oval:org.mitre.oval:ste:10655"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36396" version="1" comment="squid is earlier than 0:2.5.STABLE14-1.4E.el4_6.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14403"/>
      <state state_ref="oval:org.mitre.oval:ste:10696"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36064" version="1" comment="squid is earlier than 0:2.6.STABLE6-5.el5_1.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14403"/>
      <state state_ref="oval:org.mitre.oval:ste:10906"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32031" version="1" comment="telnet is earlier than 1:0.17-31.EL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14191"/>
      <state state_ref="oval:org.mitre.oval:ste:9735"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31911" version="1" comment="telnet is earlier than 1:0.17-26.EL3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14191"/>
      <state state_ref="oval:org.mitre.oval:ste:9849"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31637" version="1" comment="telnet-server is earlier than 1:0.17-31.EL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14237"/>
      <state state_ref="oval:org.mitre.oval:ste:9735"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31044" version="1" comment="telnet-server is earlier than 1:0.17-26.EL3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14237"/>
      <state state_ref="oval:org.mitre.oval:ste:9849"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32393" version="1" comment="gdk-pixbuf-gnome is earlier than 1:0.22.0-13.el3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14410"/>
      <state state_ref="oval:org.mitre.oval:ste:9932"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32388" version="1" comment="gdk-pixbuf is earlier than 1:0.22.0-13.el3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14361"/>
      <state state_ref="oval:org.mitre.oval:ste:9932"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32331" version="1" comment="gdk-pixbuf is earlier than 1:0.22.0-17.el4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14361"/>
      <state state_ref="oval:org.mitre.oval:ste:10000"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32239" version="1" comment="gdk-pixbuf-devel is earlier than 1:0.22.0-17.el4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13883"/>
      <state state_ref="oval:org.mitre.oval:ste:10000"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32203" version="1" comment="gdk-pixbuf-devel is earlier than 1:0.22.0-13.el3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13883"/>
      <state state_ref="oval:org.mitre.oval:ste:9932"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38657" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-40.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10220"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38650" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-0.36.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10205"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38646" version="1" comment="xulrunner-devel is earlier than 0:1.9.0.7-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15100"/>
      <state state_ref="oval:org.mitre.oval:ste:11111"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38636" version="1" comment="firefox is earlier than 0:3.0.7-3.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10622"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38632" version="1" comment="seamonkey is earlier than 0:1.0.9-40.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10220"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38616" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-40.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10220"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38583" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-40.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10220"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38550" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-0.36.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10205"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38483" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.36.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:10205"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38435" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.36.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:10205"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38434" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-0.36.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10205"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38356" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.36.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10205"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38352" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.36.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10205"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38301" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-0.36.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:10205"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38297" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-40.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10220"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38281" version="1" comment="xulrunner-devel-unstable is earlier than 0:1.9.0.7-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15048"/>
      <state state_ref="oval:org.mitre.oval:ste:11111"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38265" version="1" comment="seamonkey is earlier than 0:1.0.9-0.36.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10205"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38227" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-0.36.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:10205"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38205" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-40.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10220"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37687" version="1" comment="xulrunner is earlier than 0:1.9.0.7-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15057"/>
      <state state_ref="oval:org.mitre.oval:ste:11111"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38843" version="1" comment="libicu is earlier than 0:3.6-5.11.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14735"/>
      <state state_ref="oval:org.mitre.oval:ste:11222"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38818" version="1" comment="libicu-doc is earlier than 0:3.6-5.11.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14890"/>
      <state state_ref="oval:org.mitre.oval:ste:11222"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38626" version="1" comment="libicu-devel is earlier than 0:3.6-5.11.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14587"/>
      <state state_ref="oval:org.mitre.oval:ste:11222"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38160" version="1" comment="icu is earlier than 0:3.6-5.11.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14949"/>
      <state state_ref="oval:org.mitre.oval:ste:11222"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37327" version="1" comment="openoffice.org is earlier than 0:1.1.5-10.6.0.5.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:10806"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37258" version="1" comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.5.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14455"/>
      <state state_ref="oval:org.mitre.oval:ste:10806"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37231" version="1" comment="openoffice.org-i18n is earlier than 0:1.1.2-42.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14215"/>
      <state state_ref="oval:org.mitre.oval:ste:10568"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37101" version="1" comment="openoffice.org is earlier than 0:1.1.2-42.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:10568"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37041" version="1" comment="openoffice.org-libs is earlier than 0:1.1.2-42.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14455"/>
      <state state_ref="oval:org.mitre.oval:ste:10568"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37002" version="1" comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.5.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14215"/>
      <state state_ref="oval:org.mitre.oval:ste:10806"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36748" version="1" comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.5.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13698"/>
      <state state_ref="oval:org.mitre.oval:ste:10806"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31081" version="1" comment="rh-postgresql-libs is earlier than 0:7.3.8-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14436"/>
      <state state_ref="oval:org.mitre.oval:ste:9706"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31030" version="1" comment="rh-postgresql is earlier than 0:7.3.8-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14320"/>
      <state state_ref="oval:org.mitre.oval:ste:9706"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30996" version="1" comment="rh-postgresql-python is earlier than 0:7.3.8-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14328"/>
      <state state_ref="oval:org.mitre.oval:ste:9706"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30966" version="1" comment="rh-postgresql-pl is earlier than 0:7.3.8-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14453"/>
      <state state_ref="oval:org.mitre.oval:ste:9706"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30961" version="1" comment="rh-postgresql-test is earlier than 0:7.3.8-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14347"/>
      <state state_ref="oval:org.mitre.oval:ste:9706"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30959" version="1" comment="rh-postgresql-contrib is earlier than 0:7.3.8-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13927"/>
      <state state_ref="oval:org.mitre.oval:ste:9706"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30917" version="1" comment="rh-postgresql-docs is earlier than 0:7.3.8-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13876"/>
      <state state_ref="oval:org.mitre.oval:ste:9706"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30916" version="1" comment="rh-postgresql-jdbc is earlier than 0:7.3.8-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14295"/>
      <state state_ref="oval:org.mitre.oval:ste:9706"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30911" version="1" comment="rh-postgresql-server is earlier than 0:7.3.8-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14152"/>
      <state state_ref="oval:org.mitre.oval:ste:9706"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30824" version="1" comment="rh-postgresql-devel is earlier than 0:7.3.8-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14466"/>
      <state state_ref="oval:org.mitre.oval:ste:9706"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30232" version="1" comment="rh-postgresql-tcl is earlier than 0:7.3.8-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13874"/>
      <state state_ref="oval:org.mitre.oval:ste:9706"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36317" version="1" comment="kernel-headers is earlier than 0:2.6.18-53.1.13.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:10626"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36291" version="1" comment="kernel-xen is earlier than 0:2.6.18-53.1.13.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:10626"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36274" version="1" comment="kernel is earlier than 0:2.6.18-53.1.13.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10626"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36258" version="1" comment="kernel-devel is earlier than 0:2.6.18-53.1.13.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10626"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36222" version="1" comment="kernel-PAE is earlier than 0:2.6.18-53.1.13.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:10626"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36182" version="1" comment="kernel-debug is earlier than 0:2.6.18-53.1.13.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14957"/>
      <state state_ref="oval:org.mitre.oval:ste:10626"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35988" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.13.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:10626"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35976" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.13.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:10626"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35952" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.13.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:10626"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35846" version="1" comment="kernel-doc is earlier than 0:2.6.18-53.1.13.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10626"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35729" version="1" comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.13.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15023"/>
      <state state_ref="oval:org.mitre.oval:ste:10626"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35356" version="1" comment="kernel-kdump is earlier than 0:2.6.18-53.1.13.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:10626"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32921" version="1" comment="samba-swat is earlier than 0:3.0.10-1.4E.6.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13707"/>
      <state state_ref="oval:org.mitre.oval:ste:10177"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32912" version="1" comment="samba-common is earlier than 0:3.0.9-1.3E.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14032"/>
      <state state_ref="oval:org.mitre.oval:ste:10126"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32826" version="1" comment="samba is earlier than 0:3.0.10-1.4E.6.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13931"/>
      <state state_ref="oval:org.mitre.oval:ste:10177"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32794" version="1" comment="samba-common is earlier than 0:3.0.10-1.4E.6.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14032"/>
      <state state_ref="oval:org.mitre.oval:ste:10177"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32746" version="1" comment="samba-client is earlier than 0:3.0.9-1.3E.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13861"/>
      <state state_ref="oval:org.mitre.oval:ste:10126"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32584" version="1" comment="samba is earlier than 0:3.0.9-1.3E.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13931"/>
      <state state_ref="oval:org.mitre.oval:ste:10126"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32338" version="1" comment="samba-client is earlier than 0:3.0.10-1.4E.6.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13861"/>
      <state state_ref="oval:org.mitre.oval:ste:10177"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32281" version="1" comment="samba-swat is earlier than 0:3.0.9-1.3E.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13707"/>
      <state state_ref="oval:org.mitre.oval:ste:10126"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30351" version="1" comment="squid is earlier than 7:2.5.STABLE3-5.3E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14403"/>
      <state state_ref="oval:org.mitre.oval:ste:9542"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32266" version="1" comment="gnupg is earlier than 0:1.2.1-17" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13847"/>
      <state state_ref="oval:org.mitre.oval:ste:9558"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32119" version="1" comment="gnupg is earlier than 0:1.2.6-6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13847"/>
      <state state_ref="oval:org.mitre.oval:ste:10151"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37623" version="1" comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14432"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37622" version="1" comment="openoffice.org-emailmerge is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14522"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37616" version="1" comment="openoffice.org-draw is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14828"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37608" version="1" comment="openoffice.org-base is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14548"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37591" version="1" comment="openoffice.org-langpack-ar is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14872"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37590" version="1" comment="openoffice.org-langpack-or_IN is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14588"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37586" version="1" comment="openoffice.org-graphicfilter is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14526"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37585" version="1" comment="openoffice.org-langpack-hr_HR is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14336"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37576" version="1" comment="openoffice.org-langpack-nn_NO is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14779"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37572" version="1" comment="openoffice.org-langpack-it is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14812"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37571" version="1" comment="openoffice.org-langpack-ur is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14671"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37570" version="1" comment="openoffice.org-langpack-sr_CS is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14189"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37566" version="1" comment="openoffice.org-langpack-et_EE is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14280"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37565" version="1" comment="openoffice.org-langpack-zh_TW is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14392"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37560" version="1" comment="openoffice.org-langpack-de is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14539"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37559" version="1" comment="openoffice.org-langpack-ca_ES is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14778"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37558" version="1" comment="openoffice.org-langpack-lt_LT is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13921"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37550" version="1" comment="openoffice.org-langpack-tr_TR is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14886"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37549" version="1" comment="openoffice.org is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37547" version="1" comment="openoffice.org-langpack-zh_CN is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14839"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37541" version="1" comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14865"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37540" version="1" comment="openoffice.org-langpack-el_GR is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14359"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37539" version="1" comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14728"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37537" version="1" comment="openoffice.org-xsltfilter is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14530"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37530" version="1" comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13974"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37526" version="1" comment="openoffice.org-writer is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14758"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37519" version="1" comment="openoffice.org-langpack-hu_HU is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14694"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37516" version="1" comment="openoffice.org-langpack-mr_IN is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14855"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37513" version="1" comment="openoffice.org-langpack-ml_IN is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14257"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37503" version="1" comment="openoffice.org-langpack-nb_NO is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14807"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37500" version="1" comment="openoffice.org-langpack-gu_IN is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14269"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37494" version="1" comment="openoffice.org-langpack-he_IL is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14442"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37482" version="1" comment="openoffice.org-langpack-es is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14604"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37478" version="1" comment="openoffice.org-langpack-ja_JP is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14155"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37477" version="1" comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14056"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37476" version="1" comment="openoffice.org-pyuno is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14806"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37473" version="1" comment="openoffice.org-langpack-fi_FI is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14625"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37469" version="1" comment="openoffice.org-langpack-ko_KR is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14190"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37451" version="1" comment="openoffice.org-langpack-ms_MY is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14787"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37442" version="1" comment="openoffice.org-langpack-eu_ES is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14813"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37437" version="1" comment="openoffice.org-langpack-cy_GB is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14501"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37387" version="1" comment="openoffice.org-langpack-te_IN is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14832"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37385" version="1" comment="openoffice.org-langpack-sv is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14529"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37381" version="1" comment="openoffice.org-langpack-pt_BR is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14822"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37380" version="1" comment="openoffice.org-langpack-as_IN is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14576"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37376" version="1" comment="openoffice.org-langpack-hi_IN is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14717"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37364" version="1" comment="openoffice.org-langpack-pt_PT is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14571"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37336" version="1" comment="openoffice.org-core is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14450"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37317" version="1" comment="openoffice.org-sdk is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14664"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37314" version="1" comment="openoffice.org-langpack-pa_IN is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14746"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37309" version="1" comment="openoffice.org-langpack-fr is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14772"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37301" version="1" comment="openoffice.org-testtools is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14135"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37253" version="1" comment="openoffice.org-langpack-bg_BG is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14589"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37246" version="1" comment="openoffice.org-impress is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14707"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37237" version="1" comment="openoffice.org-langpack-bn is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14706"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37222" version="1" comment="openoffice.org-langpack-th_TH is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14732"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37209" version="1" comment="openoffice.org-langpack-ga_IE is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14635"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37197" version="1" comment="openoffice.org-langpack-nl is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14909"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37173" version="1" comment="openoffice.org-headless is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14864"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37145" version="1" comment="openoffice.org-langpack-ru is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14766"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37096" version="1" comment="openoffice.org-langpack-af_ZA is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14506"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37094" version="1" comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14651"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37089" version="1" comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14738"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37081" version="1" comment="openoffice.org-langpack-pl_PL is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14767"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37074" version="1" comment="openoffice.org-javafilter is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14566"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37029" version="1" comment="openoffice.org-langpack-ta_IN is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14637"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37013" version="1" comment="openoffice.org-langpack-sk_SK is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14266"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36998" version="1" comment="openoffice.org-langpack-da_DK is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14748"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36965" version="1" comment="openoffice.org-calc is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14623"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36952" version="1" comment="openoffice.org-langpack-st_ZA is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14851"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36950" version="1" comment="openoffice.org-sdk-doc is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14165"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36893" version="1" comment="openoffice.org-langpack-gl_ES is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14792"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36829" version="1" comment="openoffice.org-math is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14557"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36796" version="1" comment="openoffice.org-langpack-sl_SI is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14869"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36758" version="1" comment="openoffice.org-langpack-kn_IN is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14714"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36640" version="1" comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14562"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36628" version="1" comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.3.0-6.5.2.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14900"/>
      <state state_ref="oval:org.mitre.oval:ste:10960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31653" version="1" comment="sudo is earlier than 0:1.6.7p5-30.1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14246"/>
      <state state_ref="oval:org.mitre.oval:ste:9949"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31628" version="1" comment="sudo is earlier than 0:1.6.7p5-1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14246"/>
      <state state_ref="oval:org.mitre.oval:ste:9265"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31211" version="1" comment="postfix is earlier than 2:2.1.5-4.2.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14124"/>
      <state state_ref="oval:org.mitre.oval:ste:9177"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30929" version="1" comment="postfix-pflogsumm is earlier than 2:2.1.5-4.2.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14593"/>
      <state state_ref="oval:org.mitre.oval:ste:9177"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30585" version="1" comment="glibc-common is earlier than 0:2.3.2-95.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14374"/>
      <state state_ref="oval:org.mitre.oval:ste:9500"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30446" version="1" comment="glibc-profile is earlier than 0:2.3.2-95.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14243"/>
      <state state_ref="oval:org.mitre.oval:ste:9500"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30414" version="1" comment="glibc is earlier than 0:2.3.2-95.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14142"/>
      <state state_ref="oval:org.mitre.oval:ste:9500"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30380" version="1" comment="nptl-devel is earlier than 0:2.3.2-95.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14095"/>
      <state state_ref="oval:org.mitre.oval:ste:9500"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30269" version="1" comment="glibc-utils is earlier than 0:2.3.2-95.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14059"/>
      <state state_ref="oval:org.mitre.oval:ste:9500"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30097" version="1" comment="nscd is earlier than 0:2.3.2-95.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14360"/>
      <state state_ref="oval:org.mitre.oval:ste:9500"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30030" version="1" comment="glibc-headers is earlier than 0:2.3.2-95.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13936"/>
      <state state_ref="oval:org.mitre.oval:ste:9500"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29718" version="1" comment="glibc-devel is earlier than 0:2.3.2-95.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14346"/>
      <state state_ref="oval:org.mitre.oval:ste:9500"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32797" version="1" comment="kernel-doc is earlier than 0:2.6.9-34.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10120"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32641" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-34.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:10120"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32569" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-34.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:10120"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32539" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-34.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:10120"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32477" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-34.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:10120"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32419" version="1" comment="kernel-smp is earlier than 0:2.6.9-34.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:10120"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32186" version="1" comment="kernel-devel is earlier than 0:2.6.9-34.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10120"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31895" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-34.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:10120"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31838" version="1" comment="kernel is earlier than 0:2.6.9-34.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10120"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:2802" version="1" comment="the patch kb832894 is installed (Installed Components key)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1604"/>
      <state state_ref="oval:org.mitre.oval:ste:2622"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2765" version="1" comment="the version of mshtml.dll is less than 6.0.2800.1458" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2586"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39441" version="1" comment="kvm-tools is earlier than 0:83-105.el5_4.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15126"/>
      <state state_ref="oval:org.mitre.oval:ste:10987"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39372" version="1" comment="kvm-qemu-img is earlier than 0:83-105.el5_4.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15183"/>
      <state state_ref="oval:org.mitre.oval:ste:10987"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39281" version="1" comment="kmod-kvm is earlier than 0:83-105.el5_4.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15240"/>
      <state state_ref="oval:org.mitre.oval:ste:10987"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39186" version="1" comment="kvm is earlier than 0:83-105.el5_4.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15123"/>
      <state state_ref="oval:org.mitre.oval:ste:10987"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34305" version="1" comment="freetype-demos is earlier than 0:2.2.1-19.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14713"/>
      <state state_ref="oval:org.mitre.oval:ste:10340"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33877" version="1" comment="freetype-devel is earlier than 0:2.2.1-19.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14561"/>
      <state state_ref="oval:org.mitre.oval:ste:10340"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33863" version="1" comment="freetype is earlier than 0:2.2.1-19.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14103"/>
      <state state_ref="oval:org.mitre.oval:ste:10340"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37941" version="1" comment="httpd-devel is earlier than 0:2.0.46-71.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:11006"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37897" version="1" comment="httpd-suexec is earlier than 0:2.0.52-41.ent.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14611"/>
      <state state_ref="oval:org.mitre.oval:ste:11062"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37895" version="1" comment="httpd-manual is earlier than 0:2.2.3-11.el5_2.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14457"/>
      <state state_ref="oval:org.mitre.oval:ste:10570"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37862" version="1" comment="httpd-devel is earlier than 0:2.0.52-41.ent.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:11062"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37803" version="1" comment="httpd is earlier than 0:2.2.3-11.el5_2.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:10570"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37730" version="1" comment="httpd-devel is earlier than 0:2.2.3-11.el5_2.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:10570"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37679" version="1" comment="mod_ssl is earlier than 0:2.0.52-41.ent.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:11062"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37670" version="1" comment="httpd-manual is earlier than 0:2.0.52-41.ent.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14457"/>
      <state state_ref="oval:org.mitre.oval:ste:11062"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37595" version="1" comment="httpd is earlier than 0:2.0.46-71.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:11006"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37575" version="1" comment="httpd is earlier than 0:2.0.52-41.ent.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:11062"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37561" version="1" comment="mod_ssl is earlier than 0:2.0.46-71.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:11006"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36990" version="1" comment="mod_ssl is earlier than 0:2.2.3-11.el5_2.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:10570"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30897" version="1" comment="xchat is earlier than 1:2.0.4-4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14441"/>
      <state state_ref="oval:org.mitre.oval:ste:9525"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31122" version="1" comment="imap is earlier than 1:2002d-11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14565"/>
      <state state_ref="oval:org.mitre.oval:ste:9744"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31094" version="1" comment="imap-devel is earlier than 1:2002d-11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14474"/>
      <state state_ref="oval:org.mitre.oval:ste:9744"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30984" version="1" comment="imap-utils is earlier than 1:2002d-11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14484"/>
      <state state_ref="oval:org.mitre.oval:ste:9744"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32143" version="1" comment="vim-X11 is earlier than 1:6.3.046-0.40E.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14549"/>
      <state state_ref="oval:org.mitre.oval:ste:9702"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32128" version="1" comment="vim-enhanced is earlier than 1:6.3.046-0.40E.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14043"/>
      <state state_ref="oval:org.mitre.oval:ste:9702"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32111" version="1" comment="vim-minimal is earlier than 1:6.3.046-0.40E.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14513"/>
      <state state_ref="oval:org.mitre.oval:ste:9702"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32110" version="1" comment="vim is earlier than 1:6.3.046-0.30E.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13610"/>
      <state state_ref="oval:org.mitre.oval:ste:9933"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31994" version="1" comment="vim-common is earlier than 1:6.3.046-0.40E.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14345"/>
      <state state_ref="oval:org.mitre.oval:ste:9702"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31943" version="1" comment="vim-minimal is earlier than 1:6.3.046-0.30E.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14513"/>
      <state state_ref="oval:org.mitre.oval:ste:9933"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31844" version="1" comment="vim-enhanced is earlier than 1:6.3.046-0.30E.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14043"/>
      <state state_ref="oval:org.mitre.oval:ste:9933"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31668" version="1" comment="vim is earlier than 1:6.3.046-0.40E.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13610"/>
      <state state_ref="oval:org.mitre.oval:ste:9702"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31611" version="1" comment="vim-X11 is earlier than 1:6.3.046-0.30E.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14549"/>
      <state state_ref="oval:org.mitre.oval:ste:9933"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31602" version="1" comment="vim-common is earlier than 1:6.3.046-0.30E.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14345"/>
      <state state_ref="oval:org.mitre.oval:ste:9933"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1136" version="1" comment="cdosys.dll is less than 6.5.6749.0" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:661"/>
      <state state_ref="oval:org.mitre.oval:ste:1017"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32064" version="1" comment="php-mbstring is earlier than 0:4.3.9-3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13746"/>
      <state state_ref="oval:org.mitre.oval:ste:9579"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32058" version="1" comment="php-mysql is earlier than 0:4.3.2-24.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:9969"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32047" version="1" comment="php-domxml is earlier than 0:4.3.9-3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14496"/>
      <state state_ref="oval:org.mitre.oval:ste:9579"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32022" version="1" comment="php-devel is earlier than 0:4.3.2-24.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:9969"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32011" version="1" comment="php-ldap is earlier than 0:4.3.2-24.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:9969"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32010" version="1" comment="php-odbc is earlier than 0:4.3.9-3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:9579"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31997" version="1" comment="php-pgsql is earlier than 0:4.3.2-24.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:9969"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31996" version="1" comment="php-snmp is earlier than 0:4.3.9-3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14508"/>
      <state state_ref="oval:org.mitre.oval:ste:9579"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31993" version="1" comment="php-xmlrpc is earlier than 0:4.3.9-3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14445"/>
      <state state_ref="oval:org.mitre.oval:ste:9579"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31988" version="1" comment="php-ldap is earlier than 0:4.3.9-3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:9579"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31903" version="1" comment="php is earlier than 0:4.3.2-24.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:9969"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31882" version="1" comment="php-pear is earlier than 0:4.3.9-3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14130"/>
      <state state_ref="oval:org.mitre.oval:ste:9579"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31873" version="1" comment="php-devel is earlier than 0:4.3.9-3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:9579"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31829" version="1" comment="php-gd is earlier than 0:4.3.9-3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14335"/>
      <state state_ref="oval:org.mitre.oval:ste:9579"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31769" version="1" comment="php-imap is earlier than 0:4.3.2-24.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:9969"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31718" version="1" comment="php-imap is earlier than 0:4.3.9-3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:9579"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31662" version="1" comment="php-ncurses is earlier than 0:4.3.9-3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14227"/>
      <state state_ref="oval:org.mitre.oval:ste:9579"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31623" version="1" comment="php-pgsql is earlier than 0:4.3.9-3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:9579"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31610" version="1" comment="php-odbc is earlier than 0:4.3.2-24.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:9969"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31303" version="1" comment="php-mysql is earlier than 0:4.3.9-3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:9579"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31181" version="1" comment="php is earlier than 0:4.3.9-3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:9579"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31686" version="1" comment="gaim is earlier than 1:1.2.1-4.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14159"/>
      <state state_ref="oval:org.mitre.oval:ste:9926"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31403" version="1" comment="gaim is earlier than 1:1.2.1-4.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14159"/>
      <state state_ref="oval:org.mitre.oval:ste:9913"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30768" version="1" comment="kdelibs-devel is earlier than 6:3.1.3-6.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14126"/>
      <state state_ref="oval:org.mitre.oval:ste:9678"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30731" version="1" comment="kdebase is earlier than 6:3.1.3-5.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14264"/>
      <state state_ref="oval:org.mitre.oval:ste:9572"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30063" version="1" comment="kdelibs is earlier than 6:3.1.3-6.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13933"/>
      <state state_ref="oval:org.mitre.oval:ste:9678"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29837" version="1" comment="kdebase-devel is earlier than 6:3.1.3-5.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14419"/>
      <state state_ref="oval:org.mitre.oval:ste:9572"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39201" version="1" comment="openssh-askpass is earlier than 0:4.3p2-36.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14577"/>
      <state state_ref="oval:org.mitre.oval:ste:11259"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39180" version="1" comment="openssh is earlier than 0:4.3p2-36.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14581"/>
      <state state_ref="oval:org.mitre.oval:ste:11259"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39089" version="1" comment="openssh-clients is earlier than 0:4.3p2-36.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14409"/>
      <state state_ref="oval:org.mitre.oval:ste:11259"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39045" version="1" comment="openssh-server is earlier than 0:4.3p2-36.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14544"/>
      <state state_ref="oval:org.mitre.oval:ste:11259"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39828" version="1" comment="krb5-server is earlier than 0:1.6.1-36.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14452"/>
      <state state_ref="oval:org.mitre.oval:ste:11413"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39799" version="1" comment="krb5-workstation is earlier than 0:1.2.7-71" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14279"/>
      <state state_ref="oval:org.mitre.oval:ste:11452"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39771" version="1" comment="krb5-devel is earlier than 0:1.2.7-71" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14100"/>
      <state state_ref="oval:org.mitre.oval:ste:11452"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39769" version="1" comment="krb5-libs is earlier than 0:1.6.1-36.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14395"/>
      <state state_ref="oval:org.mitre.oval:ste:11413"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39761" version="1" comment="krb5 is earlier than 0:1.2.7-71" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14120"/>
      <state state_ref="oval:org.mitre.oval:ste:11452"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39715" version="1" comment="krb5-server is earlier than 0:1.3.4-62.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14452"/>
      <state state_ref="oval:org.mitre.oval:ste:11401"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39679" version="1" comment="krb5-devel is earlier than 0:1.3.4-62.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14100"/>
      <state state_ref="oval:org.mitre.oval:ste:11401"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39626" version="1" comment="krb5-server is earlier than 0:1.2.7-71" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14452"/>
      <state state_ref="oval:org.mitre.oval:ste:11452"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39572" version="1" comment="krb5-devel is earlier than 0:1.6.1-36.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14100"/>
      <state state_ref="oval:org.mitre.oval:ste:11413"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39546" version="1" comment="krb5 is earlier than 0:1.3.4-62.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14120"/>
      <state state_ref="oval:org.mitre.oval:ste:11401"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39532" version="1" comment="krb5 is earlier than 0:1.6.1-36.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14120"/>
      <state state_ref="oval:org.mitre.oval:ste:11413"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39242" version="1" comment="krb5-workstation is earlier than 0:1.3.4-62.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14279"/>
      <state state_ref="oval:org.mitre.oval:ste:11401"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39236" version="1" comment="krb5-libs is earlier than 0:1.3.4-62.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14395"/>
      <state state_ref="oval:org.mitre.oval:ste:11401"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39227" version="1" comment="krb5-libs is earlier than 0:1.2.7-71" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14395"/>
      <state state_ref="oval:org.mitre.oval:ste:11452"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39207" version="1" comment="krb5-workstation is earlier than 0:1.6.1-36.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14279"/>
      <state state_ref="oval:org.mitre.oval:ste:11413"/>
    </rpminfo_test>
    <package_test id="oval:org.mitre.oval:tst:1140" version="1" check="at least one" comment="Networking UUCP Utilities - Usr (SUNWbnuu) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:818"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:1139" version="1" check="at least one" comment="Patch 106952-04 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:817"/>
      <state state_ref="oval:org.mitre.oval:ste:1020"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:1138" version="1" check="at least one" comment="Patch 111570-03 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:657"/>
      <state state_ref="oval:org.mitre.oval:ste:1019"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:1137" version="1" check="at least one" comment="Patch 113322-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:655"/>
      <state state_ref="oval:org.mitre.oval:ste:1018"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34015" version="1" comment="freetype-devel is earlier than 0:2.2.1-17.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14561"/>
      <state state_ref="oval:org.mitre.oval:ste:10030"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33977" version="1" comment="freetype-utils is earlier than 0:2.1.9-5.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14720"/>
      <state state_ref="oval:org.mitre.oval:ste:10391"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33906" version="1" comment="freetype is earlier than 0:2.1.4-6.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14103"/>
      <state state_ref="oval:org.mitre.oval:ste:10264"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33869" version="1" comment="freetype-demos is earlier than 0:2.1.9-5.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14713"/>
      <state state_ref="oval:org.mitre.oval:ste:10391"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33866" version="1" comment="freetype-devel is earlier than 0:2.1.9-5.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14561"/>
      <state state_ref="oval:org.mitre.oval:ste:10391"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33835" version="1" comment="freetype-devel is earlier than 0:2.1.4-6.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14561"/>
      <state state_ref="oval:org.mitre.oval:ste:10264"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33827" version="1" comment="freetype-demos is earlier than 0:2.2.1-17.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14713"/>
      <state state_ref="oval:org.mitre.oval:ste:10030"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33796" version="1" comment="freetype is earlier than 0:2.1.9-5.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14103"/>
      <state state_ref="oval:org.mitre.oval:ste:10391"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33677" version="1" comment="freetype is earlier than 0:2.2.1-17.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14103"/>
      <state state_ref="oval:org.mitre.oval:ste:10030"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31374" version="1" comment="squid is earlier than 7:2.5.STABLE3-6.3E.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14403"/>
      <state state_ref="oval:org.mitre.oval:ste:9524"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31315" version="1" comment="squid is earlier than 7:2.5.STABLE6-3.4E.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14403"/>
      <state state_ref="oval:org.mitre.oval:ste:9815"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1142" version="1" comment="the version of Fontsub.dll is less than 5.2.3790.426" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:668"/>
      <state state_ref="oval:org.mitre.oval:ste:1022"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1141" version="1" comment="the version of T2embed.dll is less than 5.2.3790.426" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:667"/>
      <state state_ref="oval:org.mitre.oval:ste:1021"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32652" version="1" comment="gimp-devel is earlier than 1:2.0.5-6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14747"/>
      <state state_ref="oval:org.mitre.oval:ste:10178"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32460" version="1" comment="gimp is earlier than 1:2.0.5-6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14077"/>
      <state state_ref="oval:org.mitre.oval:ste:10178"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35679" version="1" comment="net-snmp-libs is earlier than 0:5.0.9-2.30E.23" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14316"/>
      <state state_ref="oval:org.mitre.oval:ste:10660"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35674" version="1" comment="net-snmp-libs is earlier than 0:5.1.2-11.el4_6.11.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14316"/>
      <state state_ref="oval:org.mitre.oval:ste:9952"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35655" version="1" comment="net-snmp-devel is earlier than 1:5.3.1-19.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14339"/>
      <state state_ref="oval:org.mitre.oval:ste:10245"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35534" version="1" comment="net-snmp is earlier than 1:5.3.1-19.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14390"/>
      <state state_ref="oval:org.mitre.oval:ste:10245"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35500" version="1" comment="net-snmp-utils is earlier than 0:5.0.9-2.30E.23" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14287"/>
      <state state_ref="oval:org.mitre.oval:ste:10660"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35497" version="1" comment="net-snmp-utils is earlier than 1:5.3.1-19.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14287"/>
      <state state_ref="oval:org.mitre.oval:ste:10245"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35426" version="1" comment="net-snmp-perl is earlier than 1:5.3.1-19.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14516"/>
      <state state_ref="oval:org.mitre.oval:ste:10245"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35414" version="1" comment="net-snmp-perl is earlier than 0:5.1.2-11.el4_6.11.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14516"/>
      <state state_ref="oval:org.mitre.oval:ste:9952"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35401" version="1" comment="net-snmp-devel is earlier than 0:5.0.9-2.30E.23" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14339"/>
      <state state_ref="oval:org.mitre.oval:ste:10660"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35387" version="1" comment="net-snmp-devel is earlier than 0:5.1.2-11.el4_6.11.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14339"/>
      <state state_ref="oval:org.mitre.oval:ste:9952"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35376" version="1" comment="net-snmp-libs is earlier than 1:5.3.1-19.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14316"/>
      <state state_ref="oval:org.mitre.oval:ste:10245"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35260" version="1" comment="net-snmp-perl is earlier than 0:5.0.9-2.30E.23" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14516"/>
      <state state_ref="oval:org.mitre.oval:ste:10660"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35223" version="1" comment="net-snmp is earlier than 0:5.1.2-11.el4_6.11.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14390"/>
      <state state_ref="oval:org.mitre.oval:ste:9952"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35214" version="1" comment="net-snmp is earlier than 0:5.0.9-2.30E.23" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14390"/>
      <state state_ref="oval:org.mitre.oval:ste:10660"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35099" version="1" comment="net-snmp-utils is earlier than 0:5.1.2-11.el4_6.11.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14287"/>
      <state state_ref="oval:org.mitre.oval:ste:9952"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31776" version="1" comment="nasm-doc is earlier than 0:0.98.38-3.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14464"/>
      <state state_ref="oval:org.mitre.oval:ste:9794"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31746" version="1" comment="nasm is earlier than 0:0.98.38-3.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14689"/>
      <state state_ref="oval:org.mitre.oval:ste:9794"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31654" version="1" comment="nasm-rdoff is earlier than 0:0.98.38-3.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14203"/>
      <state state_ref="oval:org.mitre.oval:ste:9794"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31348" version="1" comment="nasm is earlier than 0:0.98.35-3.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14689"/>
      <state state_ref="oval:org.mitre.oval:ste:9796"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32742" version="1" comment="sendmail-devel is earlier than 0:8.12.11-4.RHEL3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14230"/>
      <state state_ref="oval:org.mitre.oval:ste:10061"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32636" version="1" comment="sendmail is earlier than 0:8.12.11-4.RHEL3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14016"/>
      <state state_ref="oval:org.mitre.oval:ste:10061"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32603" version="1" comment="sendmail-doc is earlier than 0:8.13.1-3.RHEL4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14631"/>
      <state state_ref="oval:org.mitre.oval:ste:10210"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32526" version="1" comment="sendmail-cf is earlier than 0:8.13.1-3.RHEL4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14583"/>
      <state state_ref="oval:org.mitre.oval:ste:10210"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32452" version="1" comment="sendmail-devel is earlier than 0:8.13.1-3.RHEL4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14230"/>
      <state state_ref="oval:org.mitre.oval:ste:10210"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32406" version="1" comment="sendmail is earlier than 0:8.13.1-3.RHEL4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14016"/>
      <state state_ref="oval:org.mitre.oval:ste:10210"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32247" version="1" comment="sendmail-doc is earlier than 0:8.12.11-4.RHEL3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14631"/>
      <state state_ref="oval:org.mitre.oval:ste:10061"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32182" version="1" comment="sendmail-cf is earlier than 0:8.12.11-4.RHEL3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14583"/>
      <state state_ref="oval:org.mitre.oval:ste:10061"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33619" version="1" comment="unzip is earlier than 0:5.51-9.EL4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14303"/>
      <state state_ref="oval:org.mitre.oval:ste:10424"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30464" version="1" comment="unzip is earlier than 0:5.50-35.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14303"/>
      <state state_ref="oval:org.mitre.oval:ste:9263"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35639" version="1" comment="cairo is earlier than 0:1.2.4-3.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15049"/>
      <state state_ref="oval:org.mitre.oval:ste:10051"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35609" version="1" comment="cairo-devel is earlier than 0:1.2.4-3.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15056"/>
      <state state_ref="oval:org.mitre.oval:ste:10051"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:2697" version="1" comment="the patch KB901214 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1545"/>
      <state state_ref="oval:org.mitre.oval:ste:2519"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1143" version="1" check="at least one" comment="the version of mscms.dll is less than 5.2.3790.359" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:745"/>
      <state state_ref="oval:org.mitre.oval:ste:1023"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39982" version="1" comment="scsi-target-utils is earlier than 0:0.0-6.20091205snap.el5_5.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15332"/>
      <state state_ref="oval:org.mitre.oval:ste:11495"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1144" version="1" check="all" comment="fetchmail RPM earlier than 0:6.2.5-6.el4.2" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:819"/>
      <state state_ref="oval:org.mitre.oval:ste:1024"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38719" version="1" comment="ntp is earlier than 0:4.2.2p1-9.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14371"/>
      <state state_ref="oval:org.mitre.oval:ste:11123"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38589" version="1" comment="ntp is earlier than 0:4.2.0.a.20040617-8.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14371"/>
      <state state_ref="oval:org.mitre.oval:ste:11108"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33174" version="1" comment="gnupg is earlier than 0:1.2.6-8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13847"/>
      <state state_ref="oval:org.mitre.oval:ste:9825"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32348" version="1" comment="gnupg is earlier than 0:1.2.1-19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13847"/>
      <state state_ref="oval:org.mitre.oval:ste:10109"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36674" version="1" comment="poppler-utils is earlier than 0:0.5.4-4.4.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14640"/>
      <state state_ref="oval:org.mitre.oval:ste:10913"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36630" version="1" comment="gpdf is earlier than 0:2.8.2-7.7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14337"/>
      <state state_ref="oval:org.mitre.oval:ste:10609"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36617" version="1" comment="poppler-devel is earlier than 0:0.5.4-4.4.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14966"/>
      <state state_ref="oval:org.mitre.oval:ste:10913"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36491" version="1" comment="poppler is earlier than 0:0.5.4-4.4.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14394"/>
      <state state_ref="oval:org.mitre.oval:ste:10913"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36487" version="1" comment="xpdf is earlier than 1:3.00-16.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14398"/>
      <state state_ref="oval:org.mitre.oval:ste:10515"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36440" version="1" comment="kdegraphics-devel is earlier than 0:3.3.1-9.el4_6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14596"/>
      <state state_ref="oval:org.mitre.oval:ste:10770"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36266" version="1" comment="kdegraphics is earlier than 0:3.3.1-9.el4_6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14241"/>
      <state state_ref="oval:org.mitre.oval:ste:10770"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39300" version="1" comment="ntp is earlier than 0:4.1.2-6.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14371"/>
      <state state_ref="oval:org.mitre.oval:ste:11077"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39285" version="1" comment="ntp is earlier than 0:4.2.0.a.20040617-8.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14371"/>
      <state state_ref="oval:org.mitre.oval:ste:11202"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38798" version="1" comment="ntp is earlier than 0:4.2.2p1-9.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14371"/>
      <state state_ref="oval:org.mitre.oval:ste:11242"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32057" version="1" comment="dia is earlier than 1:0.94-5.7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14682"/>
      <state state_ref="oval:org.mitre.oval:ste:9716"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30611" version="1" comment="ipsec-tools is earlier than 0:0.2.5-0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14216"/>
      <state state_ref="oval:org.mitre.oval:ste:9681"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40315" version="1" comment="cups-libs is earlier than 1:1.3.7-11.el5_4.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:11059"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40281" version="1" comment="cups is earlier than 1:1.3.7-11.el5_4.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:11059"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40009" version="1" comment="cups-lpd is earlier than 1:1.3.7-11.el5_4.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14688"/>
      <state state_ref="oval:org.mitre.oval:ste:11059"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39827" version="1" comment="cups-devel is earlier than 1:1.3.7-11.el5_4.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:11059"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33186" version="1" comment="elinks is earlier than 0:0.9.2-3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14684"/>
      <state state_ref="oval:org.mitre.oval:ste:10314"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38656" version="1" comment="ghostscript is earlier than 0:7.07-33.2.el4_7.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14541"/>
      <state state_ref="oval:org.mitre.oval:ste:10956"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38598" version="1" comment="ghostscript-devel is earlier than 0:7.05-32.1.20" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14524"/>
      <state state_ref="oval:org.mitre.oval:ste:10886"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38506" version="1" comment="ghostscript is earlier than 0:7.05-32.1.20" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14541"/>
      <state state_ref="oval:org.mitre.oval:ste:10886"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38482" version="1" comment="ghostscript-devel is earlier than 0:7.07-33.2.el4_7.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14524"/>
      <state state_ref="oval:org.mitre.oval:ste:10956"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38408" version="1" comment="ghostscript-gtk is earlier than 0:7.07-33.2.el4_7.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14614"/>
      <state state_ref="oval:org.mitre.oval:ste:10956"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38025" version="1" comment="hpijs is earlier than 0:7.05-32.1.20" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14471"/>
      <state state_ref="oval:org.mitre.oval:ste:10886"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31609" version="1" comment="HelixPlayer is earlier than 1:1.0.4-1.1.EL4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14632"/>
      <state state_ref="oval:org.mitre.oval:ste:9809"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37925" version="1" comment="lynx is earlier than 0:2.8.5-18.2.el4_7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14519"/>
      <state state_ref="oval:org.mitre.oval:ste:10088"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37898" version="1" comment="lynx is earlier than 0:2.8.5-28.1.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14519"/>
      <state state_ref="oval:org.mitre.oval:ste:10734"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37424" version="1" comment="lynx is earlier than 0:2.8.5-11.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14519"/>
      <state state_ref="oval:org.mitre.oval:ste:10721"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2936" version="1" check="at least one" comment="gdm version is less than 2.4.1.3-5.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1677"/>
      <state state_ref="oval:org.mitre.oval:ste:2751"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39698" version="1" comment="gd-devel is earlier than 0:2.0.33-9.4.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14396"/>
      <state state_ref="oval:org.mitre.oval:ste:11024"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39670" version="1" comment="gd-devel is earlier than 0:2.0.28-5.4E.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14396"/>
      <state state_ref="oval:org.mitre.oval:ste:11455"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39615" version="1" comment="gd-progs is earlier than 0:2.0.28-5.4E.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14462"/>
      <state state_ref="oval:org.mitre.oval:ste:11455"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39559" version="1" comment="gd is earlier than 0:2.0.28-5.4E.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14414"/>
      <state state_ref="oval:org.mitre.oval:ste:11455"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39488" version="1" comment="gd-progs is earlier than 0:2.0.33-9.4.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14462"/>
      <state state_ref="oval:org.mitre.oval:ste:11024"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39431" version="1" comment="gd is earlier than 0:2.0.33-9.4.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14414"/>
      <state state_ref="oval:org.mitre.oval:ste:11024"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32225" version="1" comment="initscripts is earlier than 0:7.31.30.EL-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14411"/>
      <state state_ref="oval:org.mitre.oval:ste:9941"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32220" version="1" comment="initscripts is earlier than 0:7.93.24.EL-1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14411"/>
      <state state_ref="oval:org.mitre.oval:ste:10049"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32469" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-34.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:9739"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32434" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-34.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:9739"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32401" version="1" comment="kernel is earlier than 0:2.6.9-34.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:9739"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32399" version="1" comment="kernel-smp is earlier than 0:2.6.9-34.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:9739"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32347" version="1" comment="kernel-doc is earlier than 0:2.6.9-34.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:9739"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32240" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-34.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:9739"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32212" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-34.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:9739"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32060" version="1" comment="kernel-devel is earlier than 0:2.6.9-34.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:9739"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31918" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-34.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:9739"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37731" version="1" comment="xen is earlier than 0:3.0.3-64.el5_2.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14646"/>
      <state state_ref="oval:org.mitre.oval:ste:11004"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37651" version="1" comment="xen-libs is earlier than 0:3.0.3-64.el5_2.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14810"/>
      <state state_ref="oval:org.mitre.oval:ste:11004"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37638" version="1" comment="xen-devel is earlier than 0:3.0.3-64.el5_2.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14567"/>
      <state state_ref="oval:org.mitre.oval:ste:11004"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37321" version="1" comment="freetype is earlier than 0:2.2.1-20.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14103"/>
      <state state_ref="oval:org.mitre.oval:ste:10828"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37312" version="1" comment="freetype-demos is earlier than 0:2.2.1-20.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14713"/>
      <state state_ref="oval:org.mitre.oval:ste:10828"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37160" version="1" comment="freetype-devel is earlier than 0:2.2.1-20.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14561"/>
      <state state_ref="oval:org.mitre.oval:ste:10828"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38721" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-78.0.22.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:11011"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38490" version="1" comment="kernel-devel is earlier than 0:2.6.9-78.0.22.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:11011"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38437" version="1" comment="kernel-xenU is earlier than 0:2.6.9-78.0.22.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14301"/>
      <state state_ref="oval:org.mitre.oval:ste:11011"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38384" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-78.0.22.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:11011"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38348" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-78.0.22.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:11011"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38346" version="1" comment="kernel is earlier than 0:2.6.9-78.0.22.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:11011"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38302" version="1" comment="kernel-smp is earlier than 0:2.6.9-78.0.22.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:11011"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38289" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-78.0.22.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:11011"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38262" version="1" comment="kernel-doc is earlier than 0:2.6.9-78.0.22.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:11011"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38116" version="1" comment="kernel-xenU-devel is earlier than 0:2.6.9-78.0.22.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14060"/>
      <state state_ref="oval:org.mitre.oval:ste:11011"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37805" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-78.0.22.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:11011"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39680" version="1" comment="cups is earlier than 1:1.3.7-11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:11424"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39673" version="1" comment="cups-lpd is earlier than 1:1.3.7-11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14688"/>
      <state state_ref="oval:org.mitre.oval:ste:11424"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39517" version="1" comment="cups-libs is earlier than 1:1.3.7-11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:11424"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39211" version="1" comment="cups-devel is earlier than 1:1.3.7-11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:11424"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30427" version="1" comment="lftp is earlier than 0:2.6.3-5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13476"/>
      <state state_ref="oval:org.mitre.oval:ste:9323"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:3082" version="1" comment="the patch kb824146 is installed (Hotfix key)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1755"/>
      <state state_ref="oval:org.mitre.oval:ste:2887"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2914" version="1" check="at least one" comment="the version of rpcrt4.dll is less than 5.0.2195.6802" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:254"/>
      <state state_ref="oval:org.mitre.oval:ste:2730"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2790" version="4" comment="Win2K/XP/2003 service pack 5 (or later) is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:717"/>
      <state state_ref="oval:org.mitre.oval:ste:2610"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40368" version="1" comment="openldap-clients is earlier than 0:2.3.43-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13745"/>
      <state state_ref="oval:org.mitre.oval:ste:11551"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40337" version="1" comment="openldap is earlier than 0:2.3.43-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14650"/>
      <state state_ref="oval:org.mitre.oval:ste:11551"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40204" version="1" comment="openldap-servers is earlier than 0:2.3.43-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14676"/>
      <state state_ref="oval:org.mitre.oval:ste:11551"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40201" version="1" comment="openldap-servers-overlays is earlier than 0:2.3.43-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14536"/>
      <state state_ref="oval:org.mitre.oval:ste:11551"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40105" version="1" comment="openldap-devel is earlier than 0:2.3.43-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14680"/>
      <state state_ref="oval:org.mitre.oval:ste:11551"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39447" version="1" comment="compat-openldap is earlier than 0:2.3.43-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14705"/>
      <state state_ref="oval:org.mitre.oval:ste:11551"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39375" version="1" comment="openldap-servers-sql is earlier than 0:2.3.43-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14387"/>
      <state state_ref="oval:org.mitre.oval:ste:11551"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32334" version="1" comment="gd-devel is earlier than 0:2.0.28-4.4E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14396"/>
      <state state_ref="oval:org.mitre.oval:ste:9860"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32294" version="1" comment="gd-progs is earlier than 0:2.0.28-4.4E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14462"/>
      <state state_ref="oval:org.mitre.oval:ste:9860"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32218" version="1" comment="gd is earlier than 0:2.0.28-4.4E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14414"/>
      <state state_ref="oval:org.mitre.oval:ste:9860"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31109" version="1" comment="gd-devel is earlier than 0:1.8.4-12.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14396"/>
      <state state_ref="oval:org.mitre.oval:ste:9158"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31083" version="1" comment="gd-progs is earlier than 0:1.8.4-12.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14462"/>
      <state state_ref="oval:org.mitre.oval:ste:9158"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31045" version="1" comment="gd is earlier than 0:1.8.4-12.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14414"/>
      <state state_ref="oval:org.mitre.oval:ste:9158"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31042" version="1" comment="libtiff is earlier than 0:3.5.7-20.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14341"/>
      <state state_ref="oval:org.mitre.oval:ste:9561"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31022" version="1" comment="libtiff-devel is earlier than 0:3.5.7-20.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14174"/>
      <state state_ref="oval:org.mitre.oval:ste:9561"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38998" version="1" comment="seamonkey is earlier than 0:1.0.9-0.41.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:11334"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38982" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-0.41.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:11334"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38804" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.41.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:11334"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38780" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-0.41.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:11334"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38777" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.41.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:11334"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38691" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-0.41.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:11334"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38528" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.41.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:11334"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38293" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.41.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:11334"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38261" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-0.41.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:11334"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38019" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-0.41.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:11334"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1148" version="1" check="all" comment="kernel RPM earlier than 0:2.4.21-32.0.1.EL" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:822"/>
      <state state_ref="oval:org.mitre.oval:ste:1028"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1147" version="1" check="all" comment="kernel-hugemem RPM earlier than 0:2.4.21-32.0.1.EL" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:821"/>
      <state state_ref="oval:org.mitre.oval:ste:1027"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1146" version="1" check="all" comment="kernel-smp RPM earlier than 0:2.4.21-32.0.1.EL" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:820"/>
      <state state_ref="oval:org.mitre.oval:ste:1026"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32304" version="1" comment="netpbm-progs is earlier than 0:9.24-11.30.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13960"/>
      <state state_ref="oval:org.mitre.oval:ste:9829"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32233" version="1" comment="netpbm is earlier than 0:9.24-11.30.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14185"/>
      <state state_ref="oval:org.mitre.oval:ste:9829"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32108" version="1" comment="netpbm-devel is earlier than 0:9.24-11.30.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14399"/>
      <state state_ref="oval:org.mitre.oval:ste:9829"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35271" version="1" comment="qt-ODBC is earlier than 1:3.3.6-23.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13884"/>
      <state state_ref="oval:org.mitre.oval:ste:9670"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35255" version="1" comment="qt-devel is earlier than 1:3.1.2-17.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14278"/>
      <state state_ref="oval:org.mitre.oval:ste:10260"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35175" version="1" comment="qt-PostgreSQL is earlier than 1:3.3.3-13.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14674"/>
      <state state_ref="oval:org.mitre.oval:ste:9643"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35149" version="1" comment="qt-PostgreSQL is earlier than 1:3.3.6-23.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14674"/>
      <state state_ref="oval:org.mitre.oval:ste:9670"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35125" version="1" comment="qt is earlier than 1:3.3.3-13.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14421"/>
      <state state_ref="oval:org.mitre.oval:ste:9643"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35117" version="1" comment="qt is earlier than 1:3.1.2-17.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14421"/>
      <state state_ref="oval:org.mitre.oval:ste:10260"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35114" version="1" comment="qt-devel-docs is earlier than 1:3.3.6-23.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15050"/>
      <state state_ref="oval:org.mitre.oval:ste:9670"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35097" version="1" comment="qt-devel is earlier than 1:3.3.6-23.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14278"/>
      <state state_ref="oval:org.mitre.oval:ste:9670"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35085" version="1" comment="qt-config is earlier than 1:3.3.3-13.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14145"/>
      <state state_ref="oval:org.mitre.oval:ste:9643"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35054" version="1" comment="qt-designer is earlier than 1:3.3.3-13.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14074"/>
      <state state_ref="oval:org.mitre.oval:ste:9643"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35050" version="1" comment="qt-devel is earlier than 1:3.3.3-13.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14278"/>
      <state state_ref="oval:org.mitre.oval:ste:9643"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35041" version="1" comment="qt-MySQL is earlier than 1:3.1.2-17.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14384"/>
      <state state_ref="oval:org.mitre.oval:ste:10260"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35004" version="1" comment="qt-designer is earlier than 1:3.1.2-17.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14074"/>
      <state state_ref="oval:org.mitre.oval:ste:10260"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34922" version="1" comment="qt-ODBC is earlier than 1:3.1.2-17.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13884"/>
      <state state_ref="oval:org.mitre.oval:ste:10260"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34921" version="1" comment="qt-config is earlier than 1:3.1.2-17.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14145"/>
      <state state_ref="oval:org.mitre.oval:ste:10260"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34886" version="1" comment="qt-ODBC is earlier than 1:3.3.3-13.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13884"/>
      <state state_ref="oval:org.mitre.oval:ste:9643"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34816" version="1" comment="qt is earlier than 1:3.3.6-23.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14421"/>
      <state state_ref="oval:org.mitre.oval:ste:9670"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34806" version="1" comment="qt-config is earlier than 1:3.3.6-23.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14145"/>
      <state state_ref="oval:org.mitre.oval:ste:9670"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34736" version="1" comment="qt-designer is earlier than 1:3.3.6-23.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14074"/>
      <state state_ref="oval:org.mitre.oval:ste:9670"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34568" version="1" comment="qt-MySQL is earlier than 1:3.3.3-13.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14384"/>
      <state state_ref="oval:org.mitre.oval:ste:9643"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34466" version="1" comment="qt-MySQL is earlier than 1:3.3.6-23.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14384"/>
      <state state_ref="oval:org.mitre.oval:ste:9670"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34215" version="1" comment="freeradius is earlier than 0:1.0.1-3.RHEL4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14420"/>
      <state state_ref="oval:org.mitre.oval:ste:10521"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34157" version="1" comment="freeradius-mysql is earlier than 0:1.1.3-1.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14691"/>
      <state state_ref="oval:org.mitre.oval:ste:10055"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34112" version="1" comment="freeradius is earlier than 0:1.1.3-1.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14420"/>
      <state state_ref="oval:org.mitre.oval:ste:10055"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33896" version="1" comment="freeradius-mysql is earlier than 0:1.0.1-3.RHEL4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14691"/>
      <state state_ref="oval:org.mitre.oval:ste:10521"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33854" version="1" comment="freeradius-postgresql is earlier than 0:1.1.3-1.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14475"/>
      <state state_ref="oval:org.mitre.oval:ste:10055"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33852" version="1" comment="freeradius-postgresql is earlier than 0:1.0.1-3.RHEL4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14475"/>
      <state state_ref="oval:org.mitre.oval:ste:10521"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33848" version="1" comment="freeradius is earlier than 0:1.0.1-2.RHEL3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14420"/>
      <state state_ref="oval:org.mitre.oval:ste:10467"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33406" version="1" comment="freeradius-unixODBC is earlier than 0:1.1.3-1.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13705"/>
      <state state_ref="oval:org.mitre.oval:ste:10055"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33347" version="1" comment="freeradius-unixODBC is earlier than 0:1.0.1-3.RHEL4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13705"/>
      <state state_ref="oval:org.mitre.oval:ste:10521"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:2749" version="2" comment="PNG image rendering enabled in Internet Explorer" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1577"/>
      <state state_ref="oval:org.mitre.oval:ste:2570"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1150" version="1" check="at least one" comment="the version of mshtml.dll is less than 6.0.2900.2668" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:1030"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34961" version="1" comment="tetex-latex is earlier than 0:3.0-33.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13878"/>
      <state state_ref="oval:org.mitre.oval:ste:10347"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34952" version="1" comment="tetex is earlier than 0:3.0-33.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14329"/>
      <state state_ref="oval:org.mitre.oval:ste:10347"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34945" version="1" comment="xpdf is earlier than 1:2.02-10.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14398"/>
      <state state_ref="oval:org.mitre.oval:ste:10195"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34926" version="1" comment="poppler-utils is earlier than 0:0.5.4-4.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14640"/>
      <state state_ref="oval:org.mitre.oval:ste:10145"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34900" version="1" comment="tetex is earlier than 0:2.0.2-22.0.1.EL4.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14329"/>
      <state state_ref="oval:org.mitre.oval:ste:10318"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34899" version="1" comment="kdegraphics is earlier than 7:3.5.4-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14241"/>
      <state state_ref="oval:org.mitre.oval:ste:10235"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34882" version="1" comment="tetex-afm is earlier than 0:3.0-33.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14389"/>
      <state state_ref="oval:org.mitre.oval:ste:10347"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34876" version="1" comment="tetex-fonts is earlier than 0:3.0-33.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14502"/>
      <state state_ref="oval:org.mitre.oval:ste:10347"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34861" version="1" comment="kdegraphics-devel is earlier than 7:3.3.1-4.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14596"/>
      <state state_ref="oval:org.mitre.oval:ste:10571"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34847" version="1" comment="cups-libs is earlier than 1:1.2.4-11.5.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:10459"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34842" version="1" comment="tetex-dvips is earlier than 0:1.0.7-67.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14207"/>
      <state state_ref="oval:org.mitre.oval:ste:9691"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34841" version="1" comment="tetex-afm is earlier than 0:1.0.7-67.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14389"/>
      <state state_ref="oval:org.mitre.oval:ste:9691"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34822" version="1" comment="tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14389"/>
      <state state_ref="oval:org.mitre.oval:ste:10318"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34800" version="1" comment="cups-devel is earlier than 1:1.2.4-11.5.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:10459"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34799" version="1" comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.20.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:10496"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34798" version="1" comment="tetex-fonts is earlier than 0:1.0.7-67.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14502"/>
      <state state_ref="oval:org.mitre.oval:ste:9691"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34785" version="1" comment="poppler-devel is earlier than 0:0.5.4-4.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14966"/>
      <state state_ref="oval:org.mitre.oval:ste:10145"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34757" version="1" comment="cups is earlier than 1:1.1.22-0.rc1.9.20.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:10496"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34753" version="1" comment="cups-libs is earlier than 1:1.1.17-13.3.45" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:10138"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34745" version="1" comment="cups is earlier than 1:1.1.17-13.3.45" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:10138"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34721" version="1" comment="tetex-xdvi is earlier than 0:1.0.7-67.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14182"/>
      <state state_ref="oval:org.mitre.oval:ste:9691"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34703" version="1" comment="cups-lpd is earlier than 1:1.2.4-11.5.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14688"/>
      <state state_ref="oval:org.mitre.oval:ste:10459"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34702" version="1" comment="tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14182"/>
      <state state_ref="oval:org.mitre.oval:ste:10318"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34695" version="1" comment="tetex-doc is earlier than 0:3.0-33.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14554"/>
      <state state_ref="oval:org.mitre.oval:ste:10347"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34693" version="1" comment="gpdf is earlier than 0:2.8.2-7.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14337"/>
      <state state_ref="oval:org.mitre.oval:ste:10518"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34658" version="1" comment="tetex-latex is earlier than 0:1.0.7-67.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13878"/>
      <state state_ref="oval:org.mitre.oval:ste:9691"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34652" version="1" comment="tetex-xdvi is earlier than 0:3.0-33.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14182"/>
      <state state_ref="oval:org.mitre.oval:ste:10347"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34651" version="1" comment="cups is earlier than 1:1.2.4-11.5.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:10459"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34643" version="1" comment="tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14554"/>
      <state state_ref="oval:org.mitre.oval:ste:10318"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34637" version="1" comment="kdegraphics-devel is earlier than 7:3.5.4-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14596"/>
      <state state_ref="oval:org.mitre.oval:ste:10235"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34599" version="1" comment="xpdf is earlier than 1:3.00-12.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14398"/>
      <state state_ref="oval:org.mitre.oval:ste:10546"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34583" version="1" comment="tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13878"/>
      <state state_ref="oval:org.mitre.oval:ste:10318"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34436" version="1" comment="cups-devel is earlier than 1:1.1.17-13.3.45" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:10138"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34428" version="1" comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.20.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:10496"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34413" version="1" comment="tetex is earlier than 0:1.0.7-67.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14329"/>
      <state state_ref="oval:org.mitre.oval:ste:9691"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34394" version="1" comment="tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14207"/>
      <state state_ref="oval:org.mitre.oval:ste:10318"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34314" version="1" comment="kdegraphics is earlier than 7:3.3.1-4.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14241"/>
      <state state_ref="oval:org.mitre.oval:ste:10571"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34259" version="1" comment="tetex-dvips is earlier than 0:3.0-33.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14207"/>
      <state state_ref="oval:org.mitre.oval:ste:10347"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34143" version="1" comment="tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14502"/>
      <state state_ref="oval:org.mitre.oval:ste:10318"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34090" version="1" comment="poppler is earlier than 0:0.5.4-4.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14394"/>
      <state state_ref="oval:org.mitre.oval:ste:10145"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32040" version="1" comment="arpwatch is earlier than 14:2.1a13-10.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14116"/>
      <state state_ref="oval:org.mitre.oval:ste:10005"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31954" version="1" comment="libpcap is earlier than 14:0.8.3-10.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13587"/>
      <state state_ref="oval:org.mitre.oval:ste:9979"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31923" version="1" comment="tcpdump is earlier than 14:3.8.2-10.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14318"/>
      <state state_ref="oval:org.mitre.oval:ste:10029"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38105" version="1" comment="kernel-debug is earlier than 0:2.6.18-92.1.22.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14957"/>
      <state state_ref="oval:org.mitre.oval:ste:10898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38100" version="1" comment="kernel-headers is earlier than 0:2.6.18-92.1.22.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:10898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38076" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-92.1.22.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:10898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38034" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-92.1.22.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:10898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38024" version="1" comment="kernel-xen is earlier than 0:2.6.18-92.1.22.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:10898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38013" version="1" comment="kernel-PAE is earlier than 0:2.6.18-92.1.22.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:10898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37945" version="1" comment="kernel-devel is earlier than 0:2.6.18-92.1.22.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37781" version="1" comment="kernel is earlier than 0:2.6.18-92.1.22.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37636" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-92.1.22.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:10898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37532" version="1" comment="kernel-doc is earlier than 0:2.6.18-92.1.22.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37458" version="1" comment="kernel-kdump is earlier than 0:2.6.18-92.1.22.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:10898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37261" version="1" comment="kernel-debug-devel is earlier than 0:2.6.18-92.1.22.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15023"/>
      <state state_ref="oval:org.mitre.oval:ste:10898"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:2748" version="1" comment="32-Bit version of Windows is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1576"/>
      <state state_ref="oval:org.mitre.oval:ste:2569"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1152" version="2" check="all" comment="the version of dhtmled.ocx is less than 6.1.0.9231" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:377"/>
      <state state_ref="oval:org.mitre.oval:ste:1032"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1151" version="2" check="at least one" comment="the patch kb891781 is installed (Hotfix key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:823"/>
      <state state_ref="oval:org.mitre.oval:ste:1031"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30661" version="1" comment="kernel is earlier than 0:2.4.21-9.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:9695"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30656" version="1" comment="s390utils is earlier than 2:1.2.4-3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14283"/>
      <state state_ref="oval:org.mitre.oval:ste:9728"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30613" version="1" comment="kernel-BOOT is earlier than 0:2.4.21-9.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14219"/>
      <state state_ref="oval:org.mitre.oval:ste:9695"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30573" version="1" comment="kernel-smp is earlier than 0:2.4.21-9.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:9695"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30548" version="1" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-9.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14372"/>
      <state state_ref="oval:org.mitre.oval:ste:9695"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30520" version="1" comment="kernel-hugemem is earlier than 0:2.4.21-9.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:9695"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30188" version="1" comment="kernel-doc is earlier than 0:2.4.21-9.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:9695"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30187" version="1" comment="kernel-source is earlier than 0:2.4.21-9.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14186"/>
      <state state_ref="oval:org.mitre.oval:ste:9695"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30096" version="1" comment="kernel-unsupported is earlier than 0:2.4.21-9.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14229"/>
      <state state_ref="oval:org.mitre.oval:ste:9695"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30089" version="1" comment="kernel-smp-unsupported is earlier than 0:2.4.21-9.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14218"/>
      <state state_ref="oval:org.mitre.oval:ste:9695"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40317" version="1" comment="kvm-qemu-img is earlier than 0:83-164.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15183"/>
      <state state_ref="oval:org.mitre.oval:ste:11232"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40219" version="1" comment="kmod-kvm is earlier than 0:83-164.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15240"/>
      <state state_ref="oval:org.mitre.oval:ste:11232"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40168" version="1" comment="kvm-tools is earlier than 0:83-164.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15126"/>
      <state state_ref="oval:org.mitre.oval:ste:11232"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39953" version="1" comment="kvm is earlier than 0:83-164.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15123"/>
      <state state_ref="oval:org.mitre.oval:ste:11232"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32971" version="1" comment="ImageMagick is earlier than 0:6.0.7.1-16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13854"/>
      <state state_ref="oval:org.mitre.oval:ste:9726"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32946" version="1" comment="ImageMagick-devel is earlier than 0:6.0.7.1-16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13484"/>
      <state state_ref="oval:org.mitre.oval:ste:9726"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32852" version="1" comment="ImageMagick-devel is earlier than 0:5.5.6-20" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13484"/>
      <state state_ref="oval:org.mitre.oval:ste:9521"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32748" version="1" comment="ImageMagick-perl is earlier than 0:6.0.7.1-16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14270"/>
      <state state_ref="oval:org.mitre.oval:ste:9726"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32735" version="1" comment="ImageMagick-c++ is earlier than 0:5.5.6-20" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13475"/>
      <state state_ref="oval:org.mitre.oval:ste:9521"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32699" version="1" comment="ImageMagick is earlier than 0:5.5.6-20" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13854"/>
      <state state_ref="oval:org.mitre.oval:ste:9521"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32588" version="1" comment="ImageMagick-perl is earlier than 0:5.5.6-20" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14270"/>
      <state state_ref="oval:org.mitre.oval:ste:9521"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32537" version="1" comment="ImageMagick-c++ is earlier than 0:6.0.7.1-16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13475"/>
      <state state_ref="oval:org.mitre.oval:ste:9726"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32383" version="1" comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14240"/>
      <state state_ref="oval:org.mitre.oval:ste:9726"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32037" version="1" comment="ImageMagick-c++-devel is earlier than 0:5.5.6-20" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14240"/>
      <state state_ref="oval:org.mitre.oval:ste:9521"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30909" version="1" comment="ruby-devel is earlier than 0:1.6.8-9.EL3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14187"/>
      <state state_ref="oval:org.mitre.oval:ste:9471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30845" version="1" comment="ruby-libs is earlier than 0:1.6.8-9.EL3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14388"/>
      <state state_ref="oval:org.mitre.oval:ste:9471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30648" version="1" comment="ruby-mode is earlier than 0:1.6.8-9.EL3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14380"/>
      <state state_ref="oval:org.mitre.oval:ste:9471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30352" version="1" comment="ruby is earlier than 0:1.6.8-9.EL3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14305"/>
      <state state_ref="oval:org.mitre.oval:ste:9471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30679" version="1" comment="httpd-devel is earlier than 0:2.0.46-38.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:9657"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30662" version="1" comment="mod_ssl is earlier than 1:2.0.46-38.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:9585"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30443" version="1" comment="httpd is earlier than 0:2.0.46-38.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:9657"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32493" version="1" comment="spamassassin is earlier than 0:3.0.5-3.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14376"/>
      <state state_ref="oval:org.mitre.oval:ste:9960"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34954" version="1" comment="pam is earlier than 0:0.77-66.23" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14730"/>
      <state state_ref="oval:org.mitre.oval:ste:9990"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34850" version="1" comment="pam-devel is earlier than 0:0.77-66.23" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14734"/>
      <state state_ref="oval:org.mitre.oval:ste:9990"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34670" version="1" comment="pam-devel is earlier than 0:0.99.6.2-3.26.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14734"/>
      <state state_ref="oval:org.mitre.oval:ste:10308"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34359" version="1" comment="pam is earlier than 0:0.99.6.2-3.26.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14730"/>
      <state state_ref="oval:org.mitre.oval:ste:10308"/>
    </rpminfo_test>
    <uname_test id="oval:org.mitre.oval:tst:4124" version="1" comment="800-series HP" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:3073"/>
    </uname_test>
    <patch_test id="oval:org.mitre.oval:tst:3468" version="2" comment="Patch PHNE_33427 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <object object_ref="oval:org.mitre.oval:obj:2678"/>
    </patch_test>
    <uname_test id="oval:org.mitre.oval:tst:3443" version="1" comment="700-series HP" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:3773"/>
    </uname_test>
    <uname_test id="oval:org.mitre.oval:tst:3294" version="1" comment="HP Release B.11.04" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:3271"/>
    </uname_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31552" version="1" comment="mailman is earlier than 3:2.1.5-33.rhel4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14521"/>
      <state state_ref="oval:org.mitre.oval:ste:9570"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31464" version="1" comment="mailman is earlier than 3:2.1.5-25.rhel3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14521"/>
      <state state_ref="oval:org.mitre.oval:ste:9773"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31392" version="1" comment="cups is earlier than 1:1.1.17-13.3.27" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:9897"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31250" version="1" comment="cups-libs is earlier than 1:1.1.17-13.3.27" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:9897"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30818" version="1" comment="cups-devel is earlier than 1:1.1.17-13.3.27" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:9897"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30695" version="1" comment="xpdf is earlier than 1:2.02-9.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14398"/>
      <state state_ref="oval:org.mitre.oval:ste:9184"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32494" version="1" comment="vixie-cron is earlier than 0:4.1-10.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13978"/>
      <state state_ref="oval:org.mitre.oval:ste:10134"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31057" version="1" comment="vixie-cron is earlier than 4:4.1-36.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13978"/>
      <state state_ref="oval:org.mitre.oval:ste:9886"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32714" version="1" comment="irb is earlier than 0:1.8.1-7.EL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13649"/>
      <state state_ref="oval:org.mitre.oval:ste:9873"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32685" version="1" comment="ruby is earlier than 0:1.8.1-7.EL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14305"/>
      <state state_ref="oval:org.mitre.oval:ste:9873"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32572" version="1" comment="ruby-mode is earlier than 0:1.8.1-7.EL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14380"/>
      <state state_ref="oval:org.mitre.oval:ste:9873"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32552" version="1" comment="ruby-docs is earlier than 0:1.8.1-7.EL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14446"/>
      <state state_ref="oval:org.mitre.oval:ste:9873"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32367" version="1" comment="ruby-devel is earlier than 0:1.8.1-7.EL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14187"/>
      <state state_ref="oval:org.mitre.oval:ste:9873"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32276" version="1" comment="ruby-libs is earlier than 0:1.8.1-7.EL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14388"/>
      <state state_ref="oval:org.mitre.oval:ste:9873"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32099" version="1" comment="ruby-tcltk is earlier than 0:1.8.1-7.EL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14273"/>
      <state state_ref="oval:org.mitre.oval:ste:9873"/>
    </rpminfo_test>
    <package_test id="oval:org.mitre.oval:tst:1161" version="1" check="at least one" comment="Sun Enterprise Authentication Mechanism (SEAM, SUNWkr5sv) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:828"/>
    </package_test>
    <package_test id="oval:org.mitre.oval:tst:1160" version="1" check="at least one" comment=" Sun Enterprise Authentication Mechanism (SEAM, SUNWkr5sl) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:827"/>
    </package_test>
    <package_test id="oval:org.mitre.oval:tst:1159" version="1" check="at least one" comment=" Sun Enterprise Authentication Mechanism (SEAM, SUNWkrgdo) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:826"/>
    </package_test>
    <package_test id="oval:org.mitre.oval:tst:1158" version="1" check="at least one" comment=" Sun Enterprise Authentication Mechanism (SEAM, SUNWkrggl) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:825"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:1157" version="1" check="at least one" comment="Patch 112536-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:296"/>
      <state state_ref="oval:org.mitre.oval:ste:1036"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:1156" version="1" check="at least one" comment="Patch 112908-04 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:442"/>
      <state state_ref="oval:org.mitre.oval:ste:1035"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:1155" version="1" check="at least one" comment="Patch 112237-07 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:447"/>
      <state state_ref="oval:org.mitre.oval:ste:1034"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:1154" version="1" check="at least one" comment="Patch 112390-07 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:446"/>
      <state state_ref="oval:org.mitre.oval:ste:1033"/>
    </patch_test>
    <textfilecontent_test id="oval:org.mitre.oval:tst:1153" version="1" comment="/etc/krb5/krb5.conf is configured with a kerberos domain" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <note xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">Rough translation of the Sun recommended test of: % grep default_realm /etc/krb5/krb5.conf | grep -v ___default_realm___  default_realm = EXAMPLE.COM</note>
      </oval-def:notes>
      <object object_ref="oval:org.mitre.oval:obj:824"/>
    </textfilecontent_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39672" version="1" comment="wget is earlier than 0:1.10.2-0.30E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14591"/>
      <state state_ref="oval:org.mitre.oval:ste:11488"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39136" version="1" comment="wget is earlier than 0:1.10.2-1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14591"/>
      <state state_ref="oval:org.mitre.oval:ste:11469"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39024" version="1" comment="wget is earlier than 0:1.11.4-2.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14591"/>
      <state state_ref="oval:org.mitre.oval:ste:11494"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35154" version="1" comment="star is earlier than 0:1.5a08-5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14692"/>
      <state state_ref="oval:org.mitre.oval:ste:10591"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34991" version="1" comment="star is earlier than 0:1.5a75-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14692"/>
      <state state_ref="oval:org.mitre.oval:ste:9972"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34243" version="1" comment="star is earlier than 0:1.5a25-8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14692"/>
      <state state_ref="oval:org.mitre.oval:ste:10458"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38708" version="1" comment="httpd-manual is earlier than 0:2.2.3-22.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14457"/>
      <state state_ref="oval:org.mitre.oval:ste:10943"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38358" version="1" comment="httpd is earlier than 0:2.2.3-22.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:10943"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38104" version="1" comment="mod_ssl is earlier than 0:2.2.3-22.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:10943"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38006" version="1" comment="httpd-devel is earlier than 0:2.2.3-22.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:10943"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31587" version="1" comment="sharutils is earlier than 0:4.2.1-16.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14672"/>
      <state state_ref="oval:org.mitre.oval:ste:9600"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31528" version="1" comment="sharutils is earlier than 0:4.2.1-22.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14672"/>
      <state state_ref="oval:org.mitre.oval:ste:9139"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40806" version="1" comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14885"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40779" version="1" comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15006"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40778" version="1" comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14765"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40777" version="1" comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14892"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40774" version="1" comment="openoffice.org-ure is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14811"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40769" version="1" comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14759"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40768" version="1" comment="openoffice.org-langpack-nl is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14909"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40764" version="1" comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14606"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40762" version="1" comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14995"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40760" version="1" comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14660"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40757" version="1" comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14762"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40752" version="1" comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14401"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40750" version="1" comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14969"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40748" version="1" comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14090"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40742" version="1" comment="openoffice.org-langpack-or_IN is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14588"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40741" version="1" comment="openoffice.org-langpack-kn_IN is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14714"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40740" version="1" comment="openoffice.org-langpack-ta_IN is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14637"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40739" version="1" comment="openoffice.org-langpack-hi_IN is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14717"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40735" version="1" comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14980"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40734" version="1" comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14971"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40733" version="1" comment="openoffice.org-langpack-ko_KR is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14190"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40730" version="1" comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14600"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40728" version="1" comment="openoffice.org-langpack-et_EE is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14280"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40718" version="1" comment="openoffice.org-langpack-zh_TW is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14392"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40715" version="1" comment="openoffice.org-langpack-zh_CN is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14839"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40713" version="1" comment="openoffice.org-langpack-ja_JP is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14155"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40708" version="1" comment="openoffice.org-langpack-te_IN is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14832"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40707" version="1" comment="openoffice.org-langpack-he_IL is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14442"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40706" version="1" comment="openoffice.org-langpack-pt_BR is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14822"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40702" version="1" comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14744"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40693" version="1" comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14834"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40692" version="1" comment="openoffice.org-impress is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14707"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40691" version="1" comment="openoffice.org-langpack-pl_PL is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14767"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40690" version="1" comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14831"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40688" version="1" comment="openoffice.org-core is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14450"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40685" version="1" comment="openoffice.org-langpack-ga_IE is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14635"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40681" version="1" comment="openoffice.org-sdk is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14664"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40680" version="1" comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14882"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40678" version="1" comment="openoffice.org-base is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14548"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40662" version="1" comment="openoffice.org-langpack-pt_PT is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14571"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40659" version="1" comment="openoffice.org-langpack-gl_ES is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14792"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40656" version="1" comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14737"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40652" version="1" comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14754"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40650" version="1" comment="openoffice.org-langpack-bg_BG is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14589"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40649" version="1" comment="openoffice.org-langpack-tr_TR is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14886"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40647" version="1" comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14845"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40645" version="1" comment="openoffice.org-math is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14557"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40642" version="1" comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14901"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40634" version="1" comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14963"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40633" version="1" comment="openoffice.org-langpack-gu_IN is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14269"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40632" version="1" comment="openoffice.org-langpack-pa_IN is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14746"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40629" version="1" comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14472"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40623" version="1" comment="openoffice.org-langpack-es is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14604"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40621" version="1" comment="openoffice.org-langpack-nn_NO is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14779"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40618" version="1" comment="openoffice.org-langpack-ar is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14872"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40614" version="1" comment="openoffice.org-langpack-it is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14812"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40613" version="1" comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14193"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40612" version="1" comment="openoffice.org-langpack-el_GR is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14359"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40611" version="1" comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14599"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40610" version="1" comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15005"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40608" version="1" comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14322"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40602" version="1" comment="openoffice.org-langpack-nso_ZA is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13974"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40599" version="1" comment="openoffice.org-langpack-de is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14539"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40595" version="1" comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14696"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40594" version="1" comment="openoffice.org-langpack-ml_IN is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14257"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40590" version="1" comment="openoffice.org-javafilter is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14566"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40587" version="1" comment="openoffice.org-langpack-sl_SI is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14869"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40585" version="1" comment="openoffice.org-langpack-lt_LT is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13921"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40584" version="1" comment="openoffice.org-headless is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14864"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40583" version="1" comment="openoffice.org-langpack-da_DK is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14748"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40579" version="1" comment="openoffice.org-langpack-ca_ES is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14778"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40578" version="1" comment="openoffice.org-langpack-ss_ZA is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14728"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40575" version="1" comment="openoffice.org-langpack-bn is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14706"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40571" version="1" comment="openoffice.org-langpack-xh_ZA is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14738"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40569" version="1" comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14903"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40568" version="1" comment="openoffice.org-langpack-hr_HR is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14336"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40567" version="1" comment="openoffice.org2 is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14437"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40564" version="1" comment="openoffice.org-langpack-ms_MY is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14787"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40544" version="1" comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14768"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40536" version="1" comment="openoffice.org-langpack-sk_SK is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14266"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40531" version="1" comment="openoffice.org-calc is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14623"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40522" version="1" comment="openoffice.org is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40518" version="1" comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14617"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40507" version="1" comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14763"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40506" version="1" comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14456"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40499" version="1" comment="openoffice.org-langpack-sv is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14529"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40489" version="1" comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14708"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40482" version="1" comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14826"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40478" version="1" comment="openoffice.org-sdk-doc is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14165"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40472" version="1" comment="openoffice.org-langpack-ru is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14766"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40471" version="1" comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14984"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40463" version="1" comment="openoffice.org-langpack-nb_NO is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14807"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40460" version="1" comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14649"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40457" version="1" comment="openoffice.org-graphicfilter is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14526"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40454" version="1" comment="openoffice.org-draw is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14828"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40447" version="1" comment="openoffice.org-langpack-ts_ZA is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14056"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40434" version="1" comment="openoffice.org-langpack-cy_GB is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14501"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40420" version="1" comment="openoffice.org-langpack-sr_CS is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14189"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40416" version="1" comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14907"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40412" version="1" comment="openoffice.org-pyuno is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14806"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40411" version="1" comment="openoffice.org-emailmerge is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14522"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40410" version="1" comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14849"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40407" version="1" comment="openoffice.org-writer is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14758"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40400" version="1" comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15018"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40397" version="1" comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14986"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40394" version="1" comment="openoffice.org-testtools is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14135"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40388" version="1" comment="openoffice.org-langpack-st_ZA is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14851"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40384" version="1" comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15000"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40383" version="1" comment="openoffice.org-langpack-as_IN is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14576"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40382" version="1" comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14476"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40375" version="1" comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14976"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40355" version="1" comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14894"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40346" version="1" comment="openoffice.org-langpack-tn_ZA is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14432"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40334" version="1" comment="openoffice.org-langpack-fr is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14772"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40321" version="1" comment="openoffice.org-langpack-ur is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14671"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40298" version="1" comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14956"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40288" version="1" comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14987"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40230" version="1" comment="openoffice.org-langpack-zu_ZA is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14562"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40205" version="1" comment="openoffice.org-langpack-cs_CZ is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14865"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40191" version="1" comment="openoffice.org-langpack-fi_FI is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14625"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40128" version="1" comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14990"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40127" version="1" comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14369"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40121" version="1" comment="openoffice.org-langpack-nr_ZA is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14651"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40113" version="1" comment="openoffice.org-langpack-ve_ZA is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14900"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40091" version="1" comment="openoffice.org-langpack-af_ZA is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14506"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40051" version="1" comment="openoffice.org-langpack-hu_HU is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14694"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40041" version="1" comment="openoffice.org-langpack-eu_ES is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14813"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40036" version="1" comment="openoffice.org-xsltfilter is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14530"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40018" version="1" comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14997"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39994" version="1" comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14814"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39981" version="1" comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14569"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39970" version="1" comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14875"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39884" version="1" comment="openoffice.org-langpack-th_TH is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14732"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39852" version="1" comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14937"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39822" version="1" comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14321"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39801" version="1" comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.6.1.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14716"/>
      <state state_ref="oval:org.mitre.oval:ste:11280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39780" version="1" comment="openoffice.org-langpack-mr_IN is earlier than 1:3.1.1-19.5.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14855"/>
      <state state_ref="oval:org.mitre.oval:ste:11355"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39692" version="1" comment="kvm-qemu-img is earlier than 0:83-105.el5_4.13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15183"/>
      <state state_ref="oval:org.mitre.oval:ste:10957"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39486" version="1" comment="kmod-kvm is earlier than 0:83-105.el5_4.13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15240"/>
      <state state_ref="oval:org.mitre.oval:ste:10957"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39465" version="1" comment="kvm is earlier than 0:83-105.el5_4.13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15123"/>
      <state state_ref="oval:org.mitre.oval:ste:10957"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39425" version="1" comment="kvm-tools is earlier than 0:83-105.el5_4.13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15126"/>
      <state state_ref="oval:org.mitre.oval:ste:10957"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32835" version="1" comment="openoffice.org-kde is earlier than 0:1.1.2-34.6.0.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13698"/>
      <state state_ref="oval:org.mitre.oval:ste:10101"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32791" version="1" comment="openoffice.org-i18n is earlier than 0:1.1.2-34.6.0.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14215"/>
      <state state_ref="oval:org.mitre.oval:ste:10101"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32773" version="1" comment="openoffice.org is earlier than 0:1.1.2-34.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:10058"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32763" version="1" comment="openoffice.org-libs is earlier than 0:1.1.2-34.6.0.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14455"/>
      <state state_ref="oval:org.mitre.oval:ste:10101"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32657" version="1" comment="openoffice.org is earlier than 0:1.1.2-34.6.0.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:10101"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32211" version="1" comment="openoffice.org-libs is earlier than 0:1.1.2-34.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14455"/>
      <state state_ref="oval:org.mitre.oval:ste:10058"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31834" version="1" comment="openoffice.org-i18n is earlier than 0:1.1.2-34.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14215"/>
      <state state_ref="oval:org.mitre.oval:ste:10058"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31753" version="1" comment="kdelibs-devel is earlier than 6:3.3.1-3.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14126"/>
      <state state_ref="oval:org.mitre.oval:ste:9964"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31670" version="1" comment="kdelibs is earlier than 6:3.3.1-3.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13933"/>
      <state state_ref="oval:org.mitre.oval:ste:9964"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38828" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-43.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10777"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38793" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-43.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10777"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38791" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-0.38.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:11161"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38742" version="1" comment="seamonkey is earlier than 0:1.0.9-0.38.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:11161"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38736" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.38.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:11161"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38724" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-0.38.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:11161"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38655" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-43.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10777"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38531" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-43.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10777"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38452" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.38.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:11161"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38432" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.38.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:11161"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38336" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-0.38.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:11161"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38280" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-43.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10777"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38264" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-0.38.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:11161"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38213" version="1" comment="seamonkey is earlier than 0:1.0.9-43.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10777"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38069" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.38.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:11161"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37902" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-0.38.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:11161"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38863" version="1" comment="openswan-doc is earlier than 0:2.6.14-1.el5_3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15278"/>
      <state state_ref="oval:org.mitre.oval:ste:11281"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38779" version="1" comment="openswan is earlier than 0:2.6.14-1.el5_3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14994"/>
      <state state_ref="oval:org.mitre.oval:ste:11281"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40657" version="1" comment="perl-suidperl is earlier than 4:5.8.8-32.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13815"/>
      <state state_ref="oval:org.mitre.oval:ste:11462"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39926" version="1" comment="perl is earlier than 4:5.8.8-32.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14460"/>
      <state state_ref="oval:org.mitre.oval:ste:11462"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32643" version="1" comment="sendmail-doc is earlier than 0:8.12.11-4.RHEL3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14631"/>
      <state state_ref="oval:org.mitre.oval:ste:9995"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32623" version="1" comment="sendmail is earlier than 0:8.12.11-4.RHEL3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14016"/>
      <state state_ref="oval:org.mitre.oval:ste:9995"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32556" version="1" comment="sendmail is earlier than 0:8.13.1-3.RHEL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14016"/>
      <state state_ref="oval:org.mitre.oval:ste:9981"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32467" version="1" comment="sendmail-devel is earlier than 0:8.12.11-4.RHEL3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14230"/>
      <state state_ref="oval:org.mitre.oval:ste:9995"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32409" version="1" comment="sendmail-cf is earlier than 0:8.13.1-3.RHEL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14583"/>
      <state state_ref="oval:org.mitre.oval:ste:9981"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32379" version="1" comment="sendmail-doc is earlier than 0:8.13.1-3.RHEL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14631"/>
      <state state_ref="oval:org.mitre.oval:ste:9981"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31921" version="1" comment="sendmail-devel is earlier than 0:8.13.1-3.RHEL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14230"/>
      <state state_ref="oval:org.mitre.oval:ste:9981"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31735" version="1" comment="sendmail-cf is earlier than 0:8.12.11-4.RHEL3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14583"/>
      <state state_ref="oval:org.mitre.oval:ste:9995"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34082" version="1" comment="java-1.4.2-ibm is earlier than 0:1.4.2.8-1jpp.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14781"/>
      <state state_ref="oval:org.mitre.oval:ste:10431"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34078" version="1" comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.8-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14829"/>
      <state state_ref="oval:org.mitre.oval:ste:10084"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34074" version="1" comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.4-1jpp.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14795"/>
      <state state_ref="oval:org.mitre.oval:ste:10354"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34068" version="1" comment="java-1.5.0-ibm is earlier than 1:1.5.0.4-1jpp.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14898"/>
      <state state_ref="oval:org.mitre.oval:ste:10354"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34067" version="1" comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.8-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14163"/>
      <state state_ref="oval:org.mitre.oval:ste:10084"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34064" version="1" comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.8-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14312"/>
      <state state_ref="oval:org.mitre.oval:ste:10084"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34040" version="1" comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.8-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14837"/>
      <state state_ref="oval:org.mitre.oval:ste:10084"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34027" version="1" comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.8-1jpp.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14312"/>
      <state state_ref="oval:org.mitre.oval:ste:10377"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33998" version="1" comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.4-1jpp.3.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14918"/>
      <state state_ref="oval:org.mitre.oval:ste:10263"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33991" version="1" comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.4-1jpp.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14679"/>
      <state state_ref="oval:org.mitre.oval:ste:10354"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33972" version="1" comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.8-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14755"/>
      <state state_ref="oval:org.mitre.oval:ste:10084"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33956" version="1" comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.8-1jpp.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14755"/>
      <state state_ref="oval:org.mitre.oval:ste:10431"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33948" version="1" comment="java-1.5.0-ibm is earlier than 1:1.5.0.4-1jpp.3.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14898"/>
      <state state_ref="oval:org.mitre.oval:ste:10263"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33943" version="1" comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.4-1jpp.3.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14824"/>
      <state state_ref="oval:org.mitre.oval:ste:10263"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33853" version="1" comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.4-1jpp.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14824"/>
      <state state_ref="oval:org.mitre.oval:ste:10354"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33845" version="1" comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.8-1jpp.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14829"/>
      <state state_ref="oval:org.mitre.oval:ste:10431"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33836" version="1" comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.4-1jpp.3.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14679"/>
      <state state_ref="oval:org.mitre.oval:ste:10263"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33765" version="1" comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.8-1jpp.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14837"/>
      <state state_ref="oval:org.mitre.oval:ste:10431"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33762" version="1" comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.4-1jpp.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14760"/>
      <state state_ref="oval:org.mitre.oval:ste:10354"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33733" version="1" comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.8-1jpp.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14829"/>
      <state state_ref="oval:org.mitre.oval:ste:10377"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33728" version="1" comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.8-1jpp.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14703"/>
      <state state_ref="oval:org.mitre.oval:ste:10377"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33723" version="1" comment="java-1.4.2-ibm is earlier than 0:1.4.2.8-1jpp.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14781"/>
      <state state_ref="oval:org.mitre.oval:ste:10377"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33708" version="1" comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.4-1jpp.3.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14789"/>
      <state state_ref="oval:org.mitre.oval:ste:10263"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33702" version="1" comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.8-1jpp.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14312"/>
      <state state_ref="oval:org.mitre.oval:ste:10431"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33682" version="1" comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.8-1jpp.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14703"/>
      <state state_ref="oval:org.mitre.oval:ste:10431"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33618" version="1" comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.4-1jpp.3.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14760"/>
      <state state_ref="oval:org.mitre.oval:ste:10263"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33614" version="1" comment="java-1.4.2-ibm is earlier than 0:1.4.2.8-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14781"/>
      <state state_ref="oval:org.mitre.oval:ste:10084"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33572" version="1" comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.4-1jpp.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14918"/>
      <state state_ref="oval:org.mitre.oval:ste:10354"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33566" version="1" comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.4-1jpp.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14789"/>
      <state state_ref="oval:org.mitre.oval:ste:10354"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33444" version="1" comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.8-1jpp.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14163"/>
      <state state_ref="oval:org.mitre.oval:ste:10377"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33411" version="1" comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.8-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14703"/>
      <state state_ref="oval:org.mitre.oval:ste:10084"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33309" version="1" comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.8-1jpp.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14755"/>
      <state state_ref="oval:org.mitre.oval:ste:10377"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33137" version="1" comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.4-1jpp.3.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14795"/>
      <state state_ref="oval:org.mitre.oval:ste:10263"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33083" version="1" comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.8-1jpp.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14163"/>
      <state state_ref="oval:org.mitre.oval:ste:10431"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32136" version="1" comment="gdb is earlier than 0:6.3.0.0-1.63" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13437"/>
      <state state_ref="oval:org.mitre.oval:ste:9655"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29887" version="1" comment="gdb is earlier than 0:6.3.0.0-1.62" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13437"/>
      <state state_ref="oval:org.mitre.oval:ste:9666"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39474" version="1" comment="finch-devel is earlier than 0:2.6.2-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15074"/>
      <state state_ref="oval:org.mitre.oval:ste:11478"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39450" version="1" comment="pidgin is earlier than 0:2.6.2-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15157"/>
      <state state_ref="oval:org.mitre.oval:ste:11478"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39428" version="1" comment="libpurple is earlier than 0:2.6.2-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14700"/>
      <state state_ref="oval:org.mitre.oval:ste:11131"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39423" version="1" comment="libpurple is earlier than 0:2.6.2-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14700"/>
      <state state_ref="oval:org.mitre.oval:ste:11478"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39414" version="1" comment="libpurple-perl is earlier than 0:2.6.2-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15144"/>
      <state state_ref="oval:org.mitre.oval:ste:11131"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39404" version="1" comment="libpurple-devel is earlier than 0:2.6.2-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15112"/>
      <state state_ref="oval:org.mitre.oval:ste:11131"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39395" version="1" comment="libpurple-devel is earlier than 0:2.6.2-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15112"/>
      <state state_ref="oval:org.mitre.oval:ste:11478"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39381" version="1" comment="pidgin-perl is earlier than 0:2.6.2-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14202"/>
      <state state_ref="oval:org.mitre.oval:ste:11478"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39376" version="1" comment="finch is earlier than 0:2.6.2-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15156"/>
      <state state_ref="oval:org.mitre.oval:ste:11478"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39341" version="1" comment="pidgin-perl is earlier than 0:2.6.2-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14202"/>
      <state state_ref="oval:org.mitre.oval:ste:11131"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39332" version="1" comment="pidgin-devel is earlier than 0:2.6.2-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14642"/>
      <state state_ref="oval:org.mitre.oval:ste:11478"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39307" version="1" comment="libpurple-perl is earlier than 0:2.6.2-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15144"/>
      <state state_ref="oval:org.mitre.oval:ste:11478"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39264" version="1" comment="libpurple-tcl is earlier than 0:2.6.2-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14238"/>
      <state state_ref="oval:org.mitre.oval:ste:11478"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39246" version="1" comment="finch-devel is earlier than 0:2.6.2-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15074"/>
      <state state_ref="oval:org.mitre.oval:ste:11131"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39169" version="1" comment="pidgin is earlier than 0:2.6.2-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15157"/>
      <state state_ref="oval:org.mitre.oval:ste:11131"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39139" version="1" comment="finch is earlier than 0:2.6.2-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15156"/>
      <state state_ref="oval:org.mitre.oval:ste:11131"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39006" version="1" comment="libpurple-tcl is earlier than 0:2.6.2-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14238"/>
      <state state_ref="oval:org.mitre.oval:ste:11131"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38683" version="1" comment="pidgin-devel is earlier than 0:2.6.2-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14642"/>
      <state state_ref="oval:org.mitre.oval:ste:11131"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2667" version="1" check="all" comment="gzip RPM earlier than 0:1.3.3-12rhel3" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1529"/>
      <state state_ref="oval:org.mitre.oval:ste:2491"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1162" version="1" check="all" comment="/usr/bin/zgrep is executable by any user" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:829"/>
      <state state_ref="oval:org.mitre.oval:ste:1037"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36397" version="1" comment="flash-plugin is earlier than 0:9.0.124.0-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14752"/>
      <state state_ref="oval:org.mitre.oval:ste:9928"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36022" version="1" comment="flash-plugin is earlier than 0:9.0.124.0-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14752"/>
      <state state_ref="oval:org.mitre.oval:ste:10901"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36002" version="1" comment="flash-plugin is earlier than 0:9.0.124.0-1.el3.with.oss" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14752"/>
      <state state_ref="oval:org.mitre.oval:ste:10869"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35230" version="1" comment="mysql is earlier than 0:4.1.20-2.RHEL4.1.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14355"/>
      <state state_ref="oval:org.mitre.oval:ste:9638"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35229" version="1" comment="mysql is earlier than 0:5.0.22-2.1.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14355"/>
      <state state_ref="oval:org.mitre.oval:ste:10547"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35148" version="1" comment="mysql-server is earlier than 0:5.0.22-2.1.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14342"/>
      <state state_ref="oval:org.mitre.oval:ste:10547"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34993" version="1" comment="mysql-devel is earlier than 0:4.1.20-2.RHEL4.1.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14481"/>
      <state state_ref="oval:org.mitre.oval:ste:9638"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34731" version="1" comment="mysql-bench is earlier than 0:4.1.20-2.RHEL4.1.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14400"/>
      <state state_ref="oval:org.mitre.oval:ste:9638"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34535" version="1" comment="mysql-bench is earlier than 0:5.0.22-2.1.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14400"/>
      <state state_ref="oval:org.mitre.oval:ste:10547"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34271" version="1" comment="mysql-test is earlier than 0:5.0.22-2.1.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14941"/>
      <state state_ref="oval:org.mitre.oval:ste:10547"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34268" version="1" comment="mysql-devel is earlier than 0:5.0.22-2.1.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14481"/>
      <state state_ref="oval:org.mitre.oval:ste:10547"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34256" version="1" comment="mysql-server is earlier than 0:4.1.20-2.RHEL4.1.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14342"/>
      <state state_ref="oval:org.mitre.oval:ste:9638"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31113" version="1" comment="kdebase is earlier than 6:3.1.3-5.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14264"/>
      <state state_ref="oval:org.mitre.oval:ste:9495"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31092" version="1" comment="kdebase-devel is earlier than 6:3.1.3-5.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14419"/>
      <state state_ref="oval:org.mitre.oval:ste:9495"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30826" version="1" comment="kdelibs-devel is earlier than 6:3.1.3-6.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14126"/>
      <state state_ref="oval:org.mitre.oval:ste:8953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30244" version="1" comment="kdelibs is earlier than 6:3.1.3-6.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13933"/>
      <state state_ref="oval:org.mitre.oval:ste:8953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38532" version="1" comment="curl-devel is earlier than 0:7.12.1-11.1.el4_7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14469"/>
      <state state_ref="oval:org.mitre.oval:ste:10344"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38524" version="1" comment="curl-devel is earlier than 0:7.10.6-9.rhel3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14469"/>
      <state state_ref="oval:org.mitre.oval:ste:10773"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38496" version="1" comment="curl is earlier than 0:7.12.1-11.1.el4_7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14575"/>
      <state state_ref="oval:org.mitre.oval:ste:10344"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38443" version="1" comment="curl-devel is earlier than 0:7.15.5-2.1.el5_3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14469"/>
      <state state_ref="oval:org.mitre.oval:ste:11124"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38312" version="1" comment="curl is earlier than 0:7.15.5-2.1.el5_3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14575"/>
      <state state_ref="oval:org.mitre.oval:ste:11124"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37776" version="1" comment="curl is earlier than 0:7.10.6-9.rhel3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14575"/>
      <state state_ref="oval:org.mitre.oval:ste:10773"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:2744" version="1" comment="64-Bit (x64 architecture) version of Windows is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1576"/>
      <state state_ref="oval:org.mitre.oval:ste:2565"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1164" version="1" check="at least one" comment="the version of sxs.dll is less than 5.2.3790.121" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:336"/>
      <state state_ref="oval:org.mitre.oval:ste:1039"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30385" version="1" comment="vsftpd is earlier than 0:1.2.1-3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14284"/>
      <state state_ref="oval:org.mitre.oval:ste:9469"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34370" version="1" comment="quagga is earlier than 0:0.98.3-2.4.0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14268"/>
      <state state_ref="oval:org.mitre.oval:ste:10249"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34361" version="1" comment="quagga-contrib is earlier than 0:0.98.6-2.1.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14111"/>
      <state state_ref="oval:org.mitre.oval:ste:10343"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34316" version="1" comment="quagga is earlier than 0:0.96.2-12.3E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14268"/>
      <state state_ref="oval:org.mitre.oval:ste:10346"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34264" version="1" comment="quagga is earlier than 0:0.98.6-2.1.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14268"/>
      <state state_ref="oval:org.mitre.oval:ste:10343"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34212" version="1" comment="quagga-devel is earlier than 0:0.98.6-2.1.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14340"/>
      <state state_ref="oval:org.mitre.oval:ste:10343"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34203" version="1" comment="quagga-contrib is earlier than 0:0.98.3-2.4.0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14111"/>
      <state state_ref="oval:org.mitre.oval:ste:10249"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34117" version="1" comment="quagga-devel is earlier than 0:0.98.3-2.4.0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14340"/>
      <state state_ref="oval:org.mitre.oval:ste:10249"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29793" version="1" comment="lha is earlier than 0:1.14i-10.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14382"/>
      <state state_ref="oval:org.mitre.oval:ste:9743"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33999" version="1" comment="cups-libs is earlier than 0:1.1.22-0.rc1.9.18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:10278"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33974" version="1" comment="cups is earlier than 0:1.1.22-0.rc1.9.18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:10278"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33961" version="1" comment="cups-libs is earlier than 0:1.2.4-11.5.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:10494"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33927" version="1" comment="cups-devel is earlier than 0:1.2.4-11.5.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:10494"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33887" version="1" comment="cups is earlier than 0:1.2.4-11.5.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:10494"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33872" version="1" comment="cups-libs is earlier than 1:1.1.17-13.3.42" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:9760"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33766" version="1" comment="cups-lpd is earlier than 0:1.2.4-11.5.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14688"/>
      <state state_ref="oval:org.mitre.oval:ste:10494"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33504" version="1" comment="cups-devel is earlier than 0:1.1.22-0.rc1.9.18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:10278"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33418" version="1" comment="cups-devel is earlier than 1:1.1.17-13.3.42" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:9760"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33293" version="1" comment="cups is earlier than 1:1.1.17-13.3.42" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:9760"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39511" version="1" comment="cups is earlier than 1:1.3.7-11.el5_4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:10964"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39430" version="1" comment="cups-lpd is earlier than 1:1.3.7-11.el5_4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14688"/>
      <state state_ref="oval:org.mitre.oval:ste:10964"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39383" version="1" comment="poppler-utils is earlier than 0:0.5.4-4.4.el5_4.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14640"/>
      <state state_ref="oval:org.mitre.oval:ste:11292"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39346" version="1" comment="poppler-devel is earlier than 0:0.5.4-4.4.el5_4.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14966"/>
      <state state_ref="oval:org.mitre.oval:ste:11292"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39290" version="1" comment="poppler is earlier than 0:0.5.4-4.4.el5_4.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14394"/>
      <state state_ref="oval:org.mitre.oval:ste:11292"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38854" version="1" comment="cups-libs is earlier than 1:1.3.7-11.el5_4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:10964"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38836" version="1" comment="cups-devel is earlier than 1:1.3.7-11.el5_4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:10964"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:1166" version="1" check="at least one" comment="DirectX 9.0-gold Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:499"/>
      <state state_ref="oval:org.mitre.oval:ste:1041"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1165" version="1" check="at least one" comment="DirectX 9.0a Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:499"/>
      <state state_ref="oval:org.mitre.oval:ste:1040"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37493" version="1" comment="kernel-smp is earlier than 0:2.6.9-67.0.22.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:10849"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37465" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-67.0.22.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:10849"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37447" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-67.0.22.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:10849"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37431" version="1" comment="kernel-doc is earlier than 0:2.6.9-67.0.22.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10849"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37398" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-67.0.22.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:10849"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37392" version="1" comment="kernel-xenU-devel is earlier than 0:2.6.9-67.0.22.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14060"/>
      <state state_ref="oval:org.mitre.oval:ste:10849"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37240" version="1" comment="kernel is earlier than 0:2.6.9-67.0.22.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10849"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37233" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-67.0.22.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:10849"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37193" version="1" comment="kernel-xenU is earlier than 0:2.6.9-67.0.22.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14301"/>
      <state state_ref="oval:org.mitre.oval:ste:10849"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37178" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-67.0.22.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:10849"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37091" version="1" comment="kernel-devel is earlier than 0:2.6.9-67.0.22.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10849"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30343" version="1" comment="slocate is earlier than 0:2.7-3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14141"/>
      <state state_ref="oval:org.mitre.oval:ste:8734"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35881" version="1" comment="libexif-devel is earlier than 0:0.5.12-5.1.0.2.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14518"/>
      <state state_ref="oval:org.mitre.oval:ste:10769"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35851" version="1" comment="libexif is earlier than 0:0.5.12-5.1.0.2.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14343"/>
      <state state_ref="oval:org.mitre.oval:ste:10769"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35823" version="1" comment="libexif is earlier than 0:0.6.13-4.0.2.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14343"/>
      <state state_ref="oval:org.mitre.oval:ste:10398"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35024" version="1" comment="libexif-devel is earlier than 0:0.6.13-4.0.2.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14518"/>
      <state state_ref="oval:org.mitre.oval:ste:10398"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31193" version="1" comment="less is earlier than 0:378-12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13951"/>
      <state state_ref="oval:org.mitre.oval:ste:9813"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30678" version="1" comment="ethereal is earlier than 0:0.10.3-0.30E.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14030"/>
      <state state_ref="oval:org.mitre.oval:ste:9445"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30484" version="1" comment="ethereal-gnome is earlier than 0:0.10.3-0.30E.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14338"/>
      <state state_ref="oval:org.mitre.oval:ste:9445"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39810" version="1" comment="PyXML is earlier than 0:0.8.3-6.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15205"/>
      <state state_ref="oval:org.mitre.oval:ste:11483"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39666" version="1" comment="4Suite is earlier than 0:0.11.1-15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15219"/>
      <state state_ref="oval:org.mitre.oval:ste:11384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39576" version="1" comment="4Suite is earlier than 0:1.0-3.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15219"/>
      <state state_ref="oval:org.mitre.oval:ste:11317"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39204" version="1" comment="PyXML is earlier than 0:0.8.4-4.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15205"/>
      <state state_ref="oval:org.mitre.oval:ste:11229"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31952" version="1" comment="HelixPlayer is earlier than 1:1.0.6-0.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14632"/>
      <state state_ref="oval:org.mitre.oval:ste:10039"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35858" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-7.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:10758"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35812" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.7.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:10730"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35809" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-0.7.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10730"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35775" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-0.7.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:10730"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35763" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.7.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:10730"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35754" version="1" comment="seamonkey is earlier than 0:1.0.9-0.7.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10730"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35742" version="1" comment="thunderbird is earlier than 0:1.5.0.12-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:9814"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35702" version="1" comment="seamonkey is earlier than 0:1.0.9-7.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10758"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35697" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-7.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10758"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35664" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-7.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:10758"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35651" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-0.7.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10730"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35628" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-7.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10758"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35602" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-7.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:10758"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35528" version="1" comment="firefox is earlier than 0:1.5.0.12-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:9814"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35523" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-7.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10758"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35520" version="1" comment="thunderbird is earlier than 0:1.5.0.12-7.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:10474"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35499" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-7.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10758"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35423" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.7.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10730"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35421" version="1" comment="firefox-devel is earlier than 0:1.5.0.12-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14876"/>
      <state state_ref="oval:org.mitre.oval:ste:9814"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35338" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.7.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10730"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35267" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-7.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:10758"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35246" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-0.7.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:10730"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35146" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-0.7.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10730"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34917" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-7.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10758"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34811" version="1" comment="firefox is earlier than 0:1.5.0.12-0.8.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10514"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34414" version="1" comment="file is earlier than 0:4.10-3.0.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14618"/>
      <state state_ref="oval:org.mitre.oval:ste:10128"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33605" version="1" comment="file is earlier than 0:4.17-9.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14618"/>
      <state state_ref="oval:org.mitre.oval:ste:10247"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:3126" version="1" check="at least one" comment="File snmpdx exists" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1778"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:3125" version="1" check="at least one" comment="Patch 108869-16 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:867"/>
      <state state_ref="oval:org.mitre.oval:ste:2927"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39837" version="1" comment="kdegraphics-devel is earlier than 7:3.3.1-17.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14596"/>
      <state state_ref="oval:org.mitre.oval:ste:11516"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39815" version="1" comment="gpdf is earlier than 0:2.8.2-7.7.2.el4_8.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14337"/>
      <state state_ref="oval:org.mitre.oval:ste:10977"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39216" version="1" comment="xpdf is earlier than 1:3.00-23.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14398"/>
      <state state_ref="oval:org.mitre.oval:ste:11387"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38931" version="1" comment="kdegraphics is earlier than 7:3.3.1-17.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14241"/>
      <state state_ref="oval:org.mitre.oval:ste:11516"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38639" version="1" comment="giflib is earlier than 0:4.1.3-7.1.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15258"/>
      <state state_ref="oval:org.mitre.oval:ste:10939"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38622" version="1" comment="giflib-utils is earlier than 0:4.1.3-7.1.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15115"/>
      <state state_ref="oval:org.mitre.oval:ste:10939"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38143" version="1" comment="giflib-devel is earlier than 0:4.1.3-7.1.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15149"/>
      <state state_ref="oval:org.mitre.oval:ste:10939"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32398" version="1" comment="libungif-progs is earlier than 0:4.1.3-1.el4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14615"/>
      <state state_ref="oval:org.mitre.oval:ste:9847"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32066" version="1" comment="libungif is earlier than 0:4.1.0-15.el3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14114"/>
      <state state_ref="oval:org.mitre.oval:ste:9879"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31956" version="1" comment="libungif is earlier than 0:4.1.3-1.el4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14114"/>
      <state state_ref="oval:org.mitre.oval:ste:9847"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31940" version="1" comment="libungif-devel is earlier than 0:4.1.0-15.el3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14669"/>
      <state state_ref="oval:org.mitre.oval:ste:9879"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31871" version="1" comment="libungif-devel is earlier than 0:4.1.3-1.el4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14669"/>
      <state state_ref="oval:org.mitre.oval:ste:9847"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39730" version="1" comment="libvorbis-devel is earlier than 1:1.1.0-3.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14840"/>
      <state state_ref="oval:org.mitre.oval:ste:11354"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39681" version="1" comment="libvorbis is earlier than 1:1.0-12.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14657"/>
      <state state_ref="oval:org.mitre.oval:ste:10820"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39644" version="1" comment="libvorbis is earlier than 1:1.1.0-3.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14657"/>
      <state state_ref="oval:org.mitre.oval:ste:11354"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39336" version="1" comment="libvorbis-devel is earlier than 1:1.0-12.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14840"/>
      <state state_ref="oval:org.mitre.oval:ste:10820"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39104" version="1" comment="libvorbis is earlier than 1:1.1.2-3.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14657"/>
      <state state_ref="oval:org.mitre.oval:ste:11097"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39068" version="1" comment="libvorbis-devel is earlier than 1:1.1.2-3.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14840"/>
      <state state_ref="oval:org.mitre.oval:ste:11097"/>
    </rpminfo_test>
    <process_test id="oval:org.mitre.oval:tst:3135" version="2" comment="inetd running" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1782"/>
      <state state_ref="oval:org.mitre.oval:ste:2934"/>
    </process_test>
    <inetd_test id="oval:org.mitre.oval:tst:3103" version="2" check="at least one" comment="inetd.conf contains rpc.ttdbserverd" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1763"/>
      <state state_ref="oval:org.mitre.oval:ste:2908"/>
    </inetd_test>
    <package_test id="oval:org.mitre.oval:tst:1169" version="1" check="all" comment="Toolktalk (SUNWtltk/SUNWtltkx) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:831"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:1168" version="1" check="at least one" comment="Patch 112808-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:830"/>
      <state state_ref="oval:org.mitre.oval:ste:1043"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34307" version="1" comment="mod_perl is earlier than 0:2.0.2-6.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14816"/>
      <state state_ref="oval:org.mitre.oval:ste:10092"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34277" version="1" comment="mod_perl-devel is earlier than 0:1.99_16-4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14026"/>
      <state state_ref="oval:org.mitre.oval:ste:10460"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34267" version="1" comment="mod_perl-devel is earlier than 0:2.0.2-6.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14026"/>
      <state state_ref="oval:org.mitre.oval:ste:10092"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34220" version="1" comment="mod_perl is earlier than 0:1.99_09-12.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14816"/>
      <state state_ref="oval:org.mitre.oval:ste:10007"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34145" version="1" comment="mod_perl-devel is earlier than 0:1.99_09-12.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14026"/>
      <state state_ref="oval:org.mitre.oval:ste:10007"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34069" version="1" comment="mod_perl is earlier than 0:1.99_16-4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14816"/>
      <state state_ref="oval:org.mitre.oval:ste:10460"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30485" version="1" comment="gnupg is earlier than 0:1.2.1-10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13847"/>
      <state state_ref="oval:org.mitre.oval:ste:9405"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36619" version="1" comment="thunderbird is earlier than 0:1.5.0.12-11.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:10919"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36605" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.16.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:10739"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36602" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-15.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10795"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36587" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-15.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:10795"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36586" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-15.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:10795"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36574" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.16.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:10739"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36570" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.16.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10739"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36566" version="1" comment="firefox-devel is earlier than 0:1.5.0.12-14.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14876"/>
      <state state_ref="oval:org.mitre.oval:ste:10539"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36557" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-15.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:10795"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36547" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-0.16.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:10739"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36540" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-15.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10795"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36533" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-0.16.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10739"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36511" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-15.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10795"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36500" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-15.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:10795"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36379" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-0.16.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:10739"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36355" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.16.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10739"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36333" version="1" comment="seamonkey is earlier than 0:1.0.9-15.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10795"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36305" version="1" comment="firefox is earlier than 0:1.5.0.12-14.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10539"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36259" version="1" comment="thunderbird is earlier than 0:1.5.0.12-10.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:10870"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36221" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-15.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10795"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35884" version="1" comment="firefox is earlier than 0:1.5.0.12-0.14.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10753"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35874" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-0.16.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10739"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35752" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-15.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10795"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35672" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-0.16.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10739"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35661" version="1" comment="seamonkey is earlier than 0:1.0.9-0.16.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10739"/>
    </rpminfo_test>
    <uname_test id="oval:org.mitre.oval:tst:2515" version="1" comment="700-series HP" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:2355"/>
    </uname_test>
    <uname_test id="oval:org.mitre.oval:tst:2513" version="1" comment="800-series HP" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:2353"/>
    </uname_test>
    <uname_test id="oval:org.mitre.oval:tst:2511" version="1" comment="HP Release B.11.23" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:2351"/>
    </uname_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30524" version="1" comment="netpbm-progs is earlier than 0:9.24-11.30.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13960"/>
      <state state_ref="oval:org.mitre.oval:ste:9697"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30423" version="1" comment="netpbm is earlier than 0:9.24-11.30.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14185"/>
      <state state_ref="oval:org.mitre.oval:ste:9697"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29931" version="1" comment="netpbm-devel is earlier than 0:9.24-11.30.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14399"/>
      <state state_ref="oval:org.mitre.oval:ste:9697"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36288" version="1" comment="netpbm is earlier than 0:10.25-2.EL4.6.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14185"/>
      <state state_ref="oval:org.mitre.oval:ste:10781"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36235" version="1" comment="netpbm is earlier than 0:9.24-11.30.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14185"/>
      <state state_ref="oval:org.mitre.oval:ste:10477"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36177" version="1" comment="netpbm-progs is earlier than 0:9.24-11.30.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13960"/>
      <state state_ref="oval:org.mitre.oval:ste:10477"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36139" version="1" comment="netpbm-devel is earlier than 0:10.25-2.EL4.6.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14399"/>
      <state state_ref="oval:org.mitre.oval:ste:10781"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36136" version="1" comment="netpbm-progs is earlier than 0:10.25-2.EL4.6.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13960"/>
      <state state_ref="oval:org.mitre.oval:ste:10781"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35689" version="1" comment="netpbm-devel is earlier than 0:9.24-11.30.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14399"/>
      <state state_ref="oval:org.mitre.oval:ste:10477"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37527" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-92.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:10582"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37508" version="1" comment="kernel-devel is earlier than 0:2.6.18-92.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10582"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37410" version="1" comment="kernel is earlier than 0:2.6.18-92.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10582"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37323" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-92.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:10582"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37262" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-92.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:10582"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37188" version="1" comment="kernel-doc is earlier than 0:2.6.18-92.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10582"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37180" version="1" comment="kernel-debug-devel is earlier than 0:2.6.18-92.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15023"/>
      <state state_ref="oval:org.mitre.oval:ste:10582"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37153" version="1" comment="kernel-PAE is earlier than 0:2.6.18-92.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:10582"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37079" version="1" comment="kernel-xen is earlier than 0:2.6.18-92.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:10582"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36957" version="1" comment="kernel-headers is earlier than 0:2.6.18-92.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:10582"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36954" version="1" comment="kernel-debug is earlier than 0:2.6.18-92.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14957"/>
      <state state_ref="oval:org.mitre.oval:ste:10582"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36537" version="1" comment="kernel-kdump is earlier than 0:2.6.18-92.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:10582"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31344" version="1" comment="dbus-python is earlier than 0:0.22-12.EL.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14429"/>
      <state state_ref="oval:org.mitre.oval:ste:9845"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31335" version="1" comment="dbus-glib is earlier than 0:0.22-12.EL.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14393"/>
      <state state_ref="oval:org.mitre.oval:ste:9845"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31135" version="1" comment="dbus-x11 is earlier than 0:0.22-12.EL.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14132"/>
      <state state_ref="oval:org.mitre.oval:ste:9845"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30912" version="1" comment="dbus-devel is earlier than 0:0.22-12.EL.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14425"/>
      <state state_ref="oval:org.mitre.oval:ste:9845"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30814" version="1" comment="dbus is earlier than 0:0.22-12.EL.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14213"/>
      <state state_ref="oval:org.mitre.oval:ste:9845"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33274" version="1" comment="tar is earlier than 0:1.14-12.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14170"/>
      <state state_ref="oval:org.mitre.oval:ste:10305"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32733" version="1" comment="tar is earlier than 0:1.13.25-15.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14170"/>
      <state state_ref="oval:org.mitre.oval:ste:10204"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:1466" version="2" check="at least one" comment="Internet Explorer 5.5 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:1324"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1465" version="2" check="at least one" comment="Internet Explorer 5.5 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:1323"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1464" version="2" check="at least one" comment="Internet Explorer 5.5 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:1322"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1461" version="1" check="at least one" comment="Patch Q295106 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:994"/>
      <state state_ref="oval:org.mitre.oval:ste:1319"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1171" version="1" check="at least one" comment="File %windir%\system32\mshtml.dll version is less than 5.50.4616.200" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:1045"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1170" version="1" check="at least one" comment="File %windir%\system32\urlmon.dll version is less than 5.50.4701.2400" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:1044"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38728" version="1" comment="libwmf-devel is earlier than 0:0.2.8.4-10.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14833"/>
      <state state_ref="oval:org.mitre.oval:ste:11155"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38423" version="1" comment="libwmf is earlier than 0:0.2.8.3-5.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14677"/>
      <state state_ref="oval:org.mitre.oval:ste:11267"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38315" version="1" comment="libwmf-devel is earlier than 0:0.2.8.3-5.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14833"/>
      <state state_ref="oval:org.mitre.oval:ste:11267"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38125" version="1" comment="libwmf is earlier than 0:0.2.8.4-10.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14677"/>
      <state state_ref="oval:org.mitre.oval:ste:11155"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40075" version="1" comment="kvm-tools is earlier than 0:83-105.el5_4.22" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15126"/>
      <state state_ref="oval:org.mitre.oval:ste:11210"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39965" version="1" comment="kvm-qemu-img is earlier than 0:83-105.el5_4.22" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15183"/>
      <state state_ref="oval:org.mitre.oval:ste:11210"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39907" version="1" comment="kmod-kvm is earlier than 0:83-105.el5_4.22" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15240"/>
      <state state_ref="oval:org.mitre.oval:ste:11210"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39881" version="1" comment="kvm is earlier than 0:83-105.el5_4.22" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15123"/>
      <state state_ref="oval:org.mitre.oval:ste:11210"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:1173" version="2" comment="DirectX 8.x Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:499"/>
      <state state_ref="oval:org.mitre.oval:ste:1047"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1172" version="2" check="at least one" comment="Patch Windows2000-KB819696-x86-ENU.EXE Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:832"/>
      <state state_ref="oval:org.mitre.oval:ste:1046"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33701" version="1" comment="ekiga is earlier than 0:2.0.2-7.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14503"/>
      <state state_ref="oval:org.mitre.oval:ste:10234"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38065" version="1" comment="nss is earlier than 0:3.12.1.1-3.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14917"/>
      <state state_ref="oval:org.mitre.oval:ste:10708"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38021" version="1" comment="xulrunner is earlier than 0:1.9.0.4-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15057"/>
      <state state_ref="oval:org.mitre.oval:ste:10762"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37958" version="1" comment="devhelp is earlier than 0:0.12-20.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14497"/>
      <state state_ref="oval:org.mitre.oval:ste:10560"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37936" version="1" comment="nss-tools is earlier than 0:3.12.1.1-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15090"/>
      <state state_ref="oval:org.mitre.oval:ste:10157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37904" version="1" comment="firefox is earlier than 0:3.0.4-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:9810"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37899" version="1" comment="xulrunner-devel is earlier than 0:1.9.0.4-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15100"/>
      <state state_ref="oval:org.mitre.oval:ste:10762"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37840" version="1" comment="nss-devel is earlier than 0:3.12.1.1-3.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14656"/>
      <state state_ref="oval:org.mitre.oval:ste:10708"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37773" version="1" comment="devhelp-devel is earlier than 0:0.12-20.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14520"/>
      <state state_ref="oval:org.mitre.oval:ste:10560"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37648" version="1" comment="nss-devel is earlier than 0:3.12.1.1-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14656"/>
      <state state_ref="oval:org.mitre.oval:ste:10157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37645" version="1" comment="yelp is earlier than 0:2.16.0-22.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14764"/>
      <state state_ref="oval:org.mitre.oval:ste:10628"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37531" version="1" comment="nss-pkcs11-devel is earlier than 0:3.12.1.1-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14171"/>
      <state state_ref="oval:org.mitre.oval:ste:10157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37454" version="1" comment="nss is earlier than 0:3.12.1.1-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14917"/>
      <state state_ref="oval:org.mitre.oval:ste:10157"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37388" version="1" comment="xulrunner-devel-unstable is earlier than 0:1.9.0.4-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15048"/>
      <state state_ref="oval:org.mitre.oval:ste:10762"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37066" version="1" comment="firefox is earlier than 0:3.0.4-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:11035"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40320" version="1" comment="mysql-bench is earlier than 0:5.0.77-4.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14400"/>
      <state state_ref="oval:org.mitre.oval:ste:11359"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40252" version="1" comment="mysql-test is earlier than 0:5.0.77-4.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14941"/>
      <state state_ref="oval:org.mitre.oval:ste:11359"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40085" version="1" comment="mysql is earlier than 0:5.0.77-4.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14355"/>
      <state state_ref="oval:org.mitre.oval:ste:11359"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39916" version="1" comment="mysql-server is earlier than 0:5.0.77-4.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14342"/>
      <state state_ref="oval:org.mitre.oval:ste:11359"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39585" version="1" comment="mysql-devel is earlier than 0:5.0.77-4.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14481"/>
      <state state_ref="oval:org.mitre.oval:ste:11359"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:3123" version="2" comment="Internet Explorer 5.5 Service Pack 2 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:2926"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1454" version="1" check="at least one" comment="the version of mshtml.dll is less than 5.50.4926.2500" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:1312"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31144" version="1" comment="samba-client is earlier than 0:3.0.7-1.3E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13861"/>
      <state state_ref="oval:org.mitre.oval:ste:9587"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31136" version="1" comment="samba is earlier than 0:3.0.7-1.3E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13931"/>
      <state state_ref="oval:org.mitre.oval:ste:9587"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31128" version="1" comment="samba-swat is earlier than 0:3.0.7-1.3E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13707"/>
      <state state_ref="oval:org.mitre.oval:ste:9587"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30820" version="1" comment="samba-common is earlier than 0:3.0.7-1.3E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14032"/>
      <state state_ref="oval:org.mitre.oval:ste:9587"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36811" version="1" comment="gnutls-utils is earlier than 0:1.4.1-3.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15003"/>
      <state state_ref="oval:org.mitre.oval:ste:10658"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36609" version="1" comment="gnutls-devel is earlier than 0:1.0.20-4.el4_6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14558"/>
      <state state_ref="oval:org.mitre.oval:ste:10549"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36294" version="1" comment="gnutls is earlier than 0:1.4.1-3.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14386"/>
      <state state_ref="oval:org.mitre.oval:ste:10658"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36194" version="1" comment="gnutls is earlier than 0:1.0.20-4.el4_6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14386"/>
      <state state_ref="oval:org.mitre.oval:ste:10549"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35940" version="1" comment="gnutls-devel is earlier than 0:1.4.1-3.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14558"/>
      <state state_ref="oval:org.mitre.oval:ste:10658"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31037" version="1" comment="squid is earlier than 7:2.5.STABLE3-6.3E.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14403"/>
      <state state_ref="oval:org.mitre.oval:ste:8777"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1509" version="1" check="at least one" comment="the version of schannel.dll is less than 5.2.3790.132" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1002"/>
      <state state_ref="oval:org.mitre.oval:ste:1363"/>
    </file_test>
    <metabase_test id="oval:org.mitre.oval:tst:1508" version="2" comment="SSL is enabled" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1014"/>
    </metabase_test>
    <registry_test id="oval:org.mitre.oval:tst:1503" version="1" comment="PCT support is disabled" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1011"/>
      <state state_ref="oval:org.mitre.oval:ste:1358"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35204" version="1" comment="pwlib is earlier than 0:1.10.1-7.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14248"/>
      <state state_ref="oval:org.mitre.oval:ste:10662"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35049" version="1" comment="pwlib-devel is earlier than 0:1.10.1-7.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14906"/>
      <state state_ref="oval:org.mitre.oval:ste:10662"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31595" version="1" comment="HelixPlayer is earlier than 1:1.0.3-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14632"/>
      <state state_ref="oval:org.mitre.oval:ste:9417"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38455" version="1" comment="libvolume_id is earlier than 0:095-14.20.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14494"/>
      <state state_ref="oval:org.mitre.oval:ste:10276"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38411" version="1" comment="udev is earlier than 0:095-14.20.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14607"/>
      <state state_ref="oval:org.mitre.oval:ste:10276"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38203" version="1" comment="libvolume_id-devel is earlier than 0:095-14.20.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15260"/>
      <state state_ref="oval:org.mitre.oval:ste:10276"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37423" version="1" comment="pam_krb5 is earlier than 0:2.2.14-1.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15087"/>
      <state state_ref="oval:org.mitre.oval:ste:11078"/>
    </rpminfo_test>
    <uname_test id="oval:org.mitre.oval:tst:3680" version="1" comment="Solaris 10 Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:3597"/>
    </uname_test>
    <patch_test id="oval:org.mitre.oval:tst:4018" version="1" check="at least one" comment="Patch 125100-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1994"/>
      <state state_ref="oval:org.mitre.oval:ste:3275"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3945" version="1" check="at least one" comment="Patch 125101-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2712"/>
      <state state_ref="oval:org.mitre.oval:ste:3275"/>
    </patch_test>
    <process_test id="oval:org.mitre.oval:tst:3396" version="1" check="at least one" comment="NFS Server running (nfsd)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2706"/>
    </process_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30833" version="1" comment="kernel-doc is earlier than 0:2.4.21-15.0.4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:8775"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30830" version="1" comment="kernel-smp is earlier than 0:2.4.21-15.0.4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:8775"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30827" version="1" comment="kernel-BOOT is earlier than 0:2.4.21-15.0.4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14219"/>
      <state state_ref="oval:org.mitre.oval:ste:8775"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30823" version="1" comment="kernel-hugemem is earlier than 0:2.4.21-15.0.4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:8775"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30750" version="1" comment="kernel is earlier than 0:2.4.21-15.0.4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:8775"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30676" version="1" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-15.0.4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14372"/>
      <state state_ref="oval:org.mitre.oval:ste:8775"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30627" version="1" comment="kernel-smp-unsupported is earlier than 0:2.4.21-15.0.4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14218"/>
      <state state_ref="oval:org.mitre.oval:ste:8775"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30622" version="1" comment="kernel-unsupported is earlier than 0:2.4.21-15.0.4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14229"/>
      <state state_ref="oval:org.mitre.oval:ste:8775"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30596" version="1" comment="kernel-source is earlier than 0:2.4.21-15.0.4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14186"/>
      <state state_ref="oval:org.mitre.oval:ste:8775"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30495" version="1" comment="freeradius is earlier than 0:0.9.3-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14420"/>
      <state state_ref="oval:org.mitre.oval:ste:9224"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35925" version="1" comment="squid is earlier than 7:2.5.STABLE14-1.4E.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14403"/>
      <state state_ref="oval:org.mitre.oval:ste:10218"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35839" version="1" comment="squid is earlier than 7:2.6.STABLE6-5.el5_1.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14403"/>
      <state state_ref="oval:org.mitre.oval:ste:10321"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35706" version="1" comment="squid is earlier than 7:2.5.STABLE3-8.3E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14403"/>
      <state state_ref="oval:org.mitre.oval:ste:10423"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30671" version="1" comment="openoffice.org is earlier than 0:1.1.0-15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:9395"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30342" version="1" comment="openoffice.org-libs is earlier than 0:1.1.0-15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14455"/>
      <state state_ref="oval:org.mitre.oval:ste:9395"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29960" version="1" comment="openoffice.org-i18n is earlier than 0:1.1.0-15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14215"/>
      <state state_ref="oval:org.mitre.oval:ste:9395"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29928" version="1" comment="iproute is earlier than 0:2.4.7-11.30E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14282"/>
      <state state_ref="oval:org.mitre.oval:ste:9153"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30603" version="1" comment="kernel-hugemem is earlier than 0:2.4.21-9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:9614"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30492" version="1" comment="kernel-BOOT is earlier than 0:2.4.21-9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14219"/>
      <state state_ref="oval:org.mitre.oval:ste:9614"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30486" version="1" comment="kernel is earlier than 0:2.4.21-9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:9614"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30477" version="1" comment="kernel-doc is earlier than 0:2.4.21-9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:9614"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30442" version="1" comment="kernel-smp is earlier than 0:2.4.21-9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:9614"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30430" version="1" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14372"/>
      <state state_ref="oval:org.mitre.oval:ste:9614"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30341" version="1" comment="kernel-source is earlier than 0:2.4.21-9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14186"/>
      <state state_ref="oval:org.mitre.oval:ste:9614"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30319" version="1" comment="kernel-unsupported is earlier than 0:2.4.21-9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14229"/>
      <state state_ref="oval:org.mitre.oval:ste:9614"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30091" version="1" comment="kernel-smp-unsupported is earlier than 0:2.4.21-9.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14218"/>
      <state state_ref="oval:org.mitre.oval:ste:9614"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:1177" version="3" comment="Internet Explorer 6 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:1051"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1176" version="1" comment="the version of mshtml.dll is less than 6.0.3790.449" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:1050"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1175" version="2" comment="Server 2003 IE Enhanced Security (Administror) is installed and set." check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:834"/>
      <state state_ref="oval:org.mitre.oval:ste:1049"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1174" version="2" comment="Server 2003 IE Enhanced Security (User) is installed and set." check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:833"/>
      <state state_ref="oval:org.mitre.oval:ste:1048"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35580" version="1" comment="openssl is earlier than 0:0.9.7a-43.17.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13882"/>
      <state state_ref="oval:org.mitre.oval:ste:10639"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35545" version="1" comment="openssl-perl is earlier than 0:0.9.7a-43.17.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14122"/>
      <state state_ref="oval:org.mitre.oval:ste:10639"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35457" version="1" comment="openssl-devel is earlier than 0:0.9.7a-43.17.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13920"/>
      <state state_ref="oval:org.mitre.oval:ste:10639"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35001" version="1" comment="openssl-perl is earlier than 0:0.9.7a-33.24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14122"/>
      <state state_ref="oval:org.mitre.oval:ste:10080"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34962" version="1" comment="openssl-devel is earlier than 0:0.9.7a-33.24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13920"/>
      <state state_ref="oval:org.mitre.oval:ste:10080"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34324" version="1" comment="openssl is earlier than 0:0.9.7a-33.24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13882"/>
      <state state_ref="oval:org.mitre.oval:ste:10080"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31857" version="1" comment="spamassassin is earlier than 0:3.0.4-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14376"/>
      <state state_ref="oval:org.mitre.oval:ste:9810"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:2938" version="1" check="at least one" comment="the version of ntdll.dll is less than 5.0.2195.6685" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1679"/>
      <state state_ref="oval:org.mitre.oval:ste:2753"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2937" version="1" check="at least one" comment="the patch q815021 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1678"/>
      <state state_ref="oval:org.mitre.oval:ste:2752"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31621" version="1" comment="xloadimage is earlier than 0:4.1-34.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14261"/>
      <state state_ref="oval:org.mitre.oval:ste:9672"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31232" version="1" comment="xloadimage is earlier than 0:4.1-34.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14261"/>
      <state state_ref="oval:org.mitre.oval:ste:9540"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37521" version="1" comment="vim-minimal is earlier than 1:6.3.046-1.el4_7.5z" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14513"/>
      <state state_ref="oval:org.mitre.oval:ste:10759"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37520" version="1" comment="vim-X11 is earlier than 1:6.3.046-1.el4_7.5z" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14549"/>
      <state state_ref="oval:org.mitre.oval:ste:10759"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37492" version="1" comment="vim-common is earlier than 1:6.3.046-0.30E.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14345"/>
      <state state_ref="oval:org.mitre.oval:ste:11013"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37429" version="1" comment="vim is earlier than 1:6.3.046-0.30E.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13610"/>
      <state state_ref="oval:org.mitre.oval:ste:11013"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37390" version="1" comment="vim-X11 is earlier than 1:6.3.046-0.30E.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14549"/>
      <state state_ref="oval:org.mitre.oval:ste:11013"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37326" version="1" comment="vim-enhanced is earlier than 1:6.3.046-1.el4_7.5z" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14043"/>
      <state state_ref="oval:org.mitre.oval:ste:10759"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37284" version="1" comment="vim-common is earlier than 1:6.3.046-1.el4_7.5z" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14345"/>
      <state state_ref="oval:org.mitre.oval:ste:10759"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37217" version="1" comment="vim-minimal is earlier than 1:6.3.046-0.30E.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14513"/>
      <state state_ref="oval:org.mitre.oval:ste:11013"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37049" version="1" comment="vim-enhanced is earlier than 1:6.3.046-0.30E.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14043"/>
      <state state_ref="oval:org.mitre.oval:ste:11013"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36926" version="1" comment="vim is earlier than 1:6.3.046-1.el4_7.5z" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13610"/>
      <state state_ref="oval:org.mitre.oval:ste:10759"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33120" version="1" comment="seamonkey-nspr is earlier than 0:1.0.5-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:9877"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33079" version="1" comment="seamonkey-nss is earlier than 0:1.0.5-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:9877"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33077" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.5-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:9877"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33072" version="1" comment="seamonkey-chat is earlier than 0:1.0.5-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:9877"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33062" version="1" comment="devhelp is earlier than 0:0.10-0.4.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14497"/>
      <state state_ref="oval:org.mitre.oval:ste:10252"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33061" version="1" comment="seamonkey-nss is earlier than 0:1.0.5-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:10281"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33010" version="1" comment="seamonkey-chat is earlier than 0:1.0.5-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10281"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32989" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.5-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10281"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32981" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.5-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10281"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32978" version="1" comment="seamonkey-mail is earlier than 0:1.0.5-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:9877"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32954" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.5-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:10281"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32933" version="1" comment="seamonkey is earlier than 0:1.0.5-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:9877"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32842" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.5-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:9877"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32811" version="1" comment="seamonkey-devel is earlier than 0:1.0.5-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10281"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32809" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.5-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:10281"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32779" version="1" comment="seamonkey is earlier than 0:1.0.5-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10281"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32759" version="1" comment="seamonkey-nspr is earlier than 0:1.0.5-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:10281"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32677" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.5-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:9877"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32668" version="1" comment="seamonkey-mail is earlier than 0:1.0.5-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10281"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32243" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.5-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:9877"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32121" version="1" comment="seamonkey-devel is earlier than 0:1.0.5-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:9877"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32072" version="1" comment="devhelp-devel is earlier than 0:0.10-0.4.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14520"/>
      <state state_ref="oval:org.mitre.oval:ste:10252"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30483" version="1" comment="oprofile-devel is earlier than 0:0.8.1-23" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14308"/>
      <state state_ref="oval:org.mitre.oval:ste:9317"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30429" version="1" comment="oprofile is earlier than 0:0.8.1-23" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14306"/>
      <state state_ref="oval:org.mitre.oval:ste:9317"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:2535" version="3" check="at least one" comment="Mozilla Suite version 1.7.10 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1445"/>
      <state state_ref="oval:org.mitre.oval:ste:2370"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2534" version="1" check="at least one" comment="Mozilla Suite version 1.7.10 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:230"/>
      <state state_ref="oval:org.mitre.oval:ste:2369"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2533" version="1" check="at least one" comment="Firefox version 1.0.6 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:228"/>
      <state state_ref="oval:org.mitre.oval:ste:2368"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2532" version="3" check="at least one" comment="Mozilla Firefox version 1.0.6 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1444"/>
      <state state_ref="oval:org.mitre.oval:ste:2367"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30839" version="1" comment="cpio is earlier than 0:2.5-7.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14426"/>
      <state state_ref="oval:org.mitre.oval:ste:9875"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30735" version="1" comment="cpio is earlier than 0:2.5-3e.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14426"/>
      <state state_ref="oval:org.mitre.oval:ste:9057"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34885" version="1" comment="gdm is earlier than 1:2.16.0-31.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14698"/>
      <state state_ref="oval:org.mitre.oval:ste:10569"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31492" version="1" comment="evolution-devel is earlier than 0:2.0.2-16.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14585"/>
      <state state_ref="oval:org.mitre.oval:ste:9891"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31372" version="1" comment="evolution-devel is earlier than 0:1.4.5-16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14585"/>
      <state state_ref="oval:org.mitre.oval:ste:9783"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31247" version="1" comment="evolution is earlier than 0:2.0.2-16.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14477"/>
      <state state_ref="oval:org.mitre.oval:ste:9891"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31035" version="1" comment="evolution is earlier than 0:1.4.5-16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14477"/>
      <state state_ref="oval:org.mitre.oval:ste:9783"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:2853" version="1" check="at least one" comment="Patch KB897715 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1635"/>
      <state state_ref="oval:org.mitre.oval:ste:2671"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1514" version="1" comment="Microsoft Outlook Express 5.5 SP2 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:566"/>
      <state state_ref="oval:org.mitre.oval:ste:1368"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1178" version="1" check="at least one" comment="the version of inetcomm.dll is less than 5.50.4952.2800" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:385"/>
      <state state_ref="oval:org.mitre.oval:ste:1052"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38219" version="1" comment="bind-utils is earlier than 30:9.3.4-6.0.3.P1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14263"/>
      <state state_ref="oval:org.mitre.oval:ste:11116"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38195" version="1" comment="bind-devel is earlier than 30:9.3.4-6.0.3.P1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14242"/>
      <state state_ref="oval:org.mitre.oval:ste:11116"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38183" version="1" comment="bind-sdb is earlier than 30:9.3.4-6.0.3.P1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14433"/>
      <state state_ref="oval:org.mitre.oval:ste:11116"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38166" version="1" comment="bind-libbind-devel is earlier than 30:9.3.4-6.0.3.P1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14729"/>
      <state state_ref="oval:org.mitre.oval:ste:11116"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38156" version="1" comment="bind is earlier than 20:9.2.4-30.el4_7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14143"/>
      <state state_ref="oval:org.mitre.oval:ste:10771"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38144" version="1" comment="bind-libs is earlier than 20:9.2.4-30.el4_7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14348"/>
      <state state_ref="oval:org.mitre.oval:ste:10771"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38139" version="1" comment="bind-chroot is earlier than 20:9.2.4-30.el4_7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14363"/>
      <state state_ref="oval:org.mitre.oval:ste:10771"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38028" version="1" comment="bind-devel is earlier than 20:9.2.4-23.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14242"/>
      <state state_ref="oval:org.mitre.oval:ste:11050"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38016" version="1" comment="bind-utils is earlier than 20:9.2.4-30.el4_7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14263"/>
      <state state_ref="oval:org.mitre.oval:ste:10771"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37979" version="1" comment="bind-chroot is earlier than 20:9.2.4-23.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14363"/>
      <state state_ref="oval:org.mitre.oval:ste:11050"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37959" version="1" comment="bind-devel is earlier than 20:9.2.4-30.el4_7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14242"/>
      <state state_ref="oval:org.mitre.oval:ste:10771"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37880" version="1" comment="bind-libs is earlier than 30:9.3.4-6.0.3.P1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14348"/>
      <state state_ref="oval:org.mitre.oval:ste:11116"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37793" version="1" comment="bind is earlier than 30:9.3.4-6.0.3.P1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14143"/>
      <state state_ref="oval:org.mitre.oval:ste:11116"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37741" version="1" comment="bind-utils is earlier than 20:9.2.4-23.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14263"/>
      <state state_ref="oval:org.mitre.oval:ste:11050"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37716" version="1" comment="bind-libs is earlier than 20:9.2.4-23.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14348"/>
      <state state_ref="oval:org.mitre.oval:ste:11050"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37568" version="1" comment="bind-chroot is earlier than 30:9.3.4-6.0.3.P1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14363"/>
      <state state_ref="oval:org.mitre.oval:ste:11116"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37251" version="1" comment="bind is earlier than 20:9.2.4-23.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14143"/>
      <state state_ref="oval:org.mitre.oval:ste:11050"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37245" version="1" comment="caching-nameserver is earlier than 30:9.3.4-6.0.3.P1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14701"/>
      <state state_ref="oval:org.mitre.oval:ste:11116"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31243" version="1" comment="htdig-web is earlier than 3:3.2.0b6-3.40.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13963"/>
      <state state_ref="oval:org.mitre.oval:ste:9462"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30895" version="1" comment="htdig is earlier than 3:3.2.0b6-3.40.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14251"/>
      <state state_ref="oval:org.mitre.oval:ste:9462"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37479" version="1" comment="yum-rhn-plugin is earlier than 0:0.5.3-12.el5_2.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15021"/>
      <state state_ref="oval:org.mitre.oval:ste:11068"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33440" version="1" comment="openoffice.org-libs is earlier than 0:1.1.2-38.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14455"/>
      <state state_ref="oval:org.mitre.oval:ste:9458"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33436" version="1" comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14215"/>
      <state state_ref="oval:org.mitre.oval:ste:10155"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33421" version="1" comment="openoffice.org-i18n is earlier than 0:1.1.2-38.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14215"/>
      <state state_ref="oval:org.mitre.oval:ste:9458"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33398" version="1" comment="libwpd is earlier than 0:0.8.7-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14739"/>
      <state state_ref="oval:org.mitre.oval:ste:10328"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33392" version="1" comment="libwpd-tools is earlier than 0:0.8.7-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14773"/>
      <state state_ref="oval:org.mitre.oval:ste:10328"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33359" version="1" comment="libwpd-devel is earlier than 0:0.8.7-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14480"/>
      <state state_ref="oval:org.mitre.oval:ste:10328"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33334" version="1" comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14455"/>
      <state state_ref="oval:org.mitre.oval:ste:10155"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33265" version="1" comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13698"/>
      <state state_ref="oval:org.mitre.oval:ste:10155"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33202" version="1" comment="openoffice.org is earlier than 0:1.1.5-10.6.0.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:10155"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33125" version="1" comment="openoffice.org is earlier than 0:1.1.2-38.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:9458"/>
    </rpminfo_test>
    <process_test id="oval:org.mitre.oval:tst:2432" version="1" check="all" comment="postmaster (the PostgreSQL master daemon) is running" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1383"/>
    </process_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1180" version="1" check="all" comment="rh-postgresql-contrib rpm is earlier than 0:7.3.10-1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:836"/>
      <state state_ref="oval:org.mitre.oval:ste:1053"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1179" version="1" check="all" comment="/usr/lib/pgsql/tsearch.so (PostgreSQL's tsearch module) exists as a regular file" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:835"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38769" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:10955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38726" version="1" comment="kernel is earlier than 0:2.6.18-128.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10748"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38714" version="1" comment="kernel-devel is earlier than 0:2.6.9-89.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38701" version="1" comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15023"/>
      <state state_ref="oval:org.mitre.oval:ste:10748"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38700" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:10748"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38680" version="1" comment="kernel-debug is earlier than 0:2.6.18-128.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14957"/>
      <state state_ref="oval:org.mitre.oval:ste:10748"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38678" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:10955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38674" version="1" comment="kernel-xen is earlier than 0:2.6.18-128.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:10748"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38666" version="1" comment="kernel-xenU is earlier than 0:2.6.9-89.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14301"/>
      <state state_ref="oval:org.mitre.oval:ste:10955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38663" version="1" comment="kernel-kdump is earlier than 0:2.6.18-128.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:10748"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38654" version="1" comment="kernel-headers is earlier than 0:2.6.18-128.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:10748"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38592" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-89.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:10955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38581" version="1" comment="kernel-doc is earlier than 0:2.6.9-89.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38547" version="1" comment="kernel-devel is earlier than 0:2.6.18-128.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10748"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38538" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-89.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:10955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38450" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-89.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:10955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38439" version="1" comment="kernel-smp is earlier than 0:2.6.9-89.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:10955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38412" version="1" comment="kernel-PAE is earlier than 0:2.6.18-128.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:10748"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38390" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:10748"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38368" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:10748"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38363" version="1" comment="kernel is earlier than 0:2.6.9-89.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38129" version="1" comment="kernel-doc is earlier than 0:2.6.18-128.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10748"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37790" version="1" comment="kernel-xenU-devel is earlier than 0:2.6.9-89.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14060"/>
      <state state_ref="oval:org.mitre.oval:ste:10955"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36450" version="1" comment="cups-libs is earlier than 0:1.1.17-13.3.51" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:10695"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36438" version="1" comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:10686"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36393" version="1" comment="cups is earlier than 0:1.1.17-13.3.51" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:10695"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36392" version="1" comment="cups-devel is earlier than 0:1.1.17-13.3.51" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:10695"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36243" version="1" comment="cups is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:10686"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35932" version="1" comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:10686"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38374" version="1" comment="sudo is earlier than 0:1.6.9p17-3.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14246"/>
      <state state_ref="oval:org.mitre.oval:ste:11042"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32257" version="1" comment="curl-devel is earlier than 0:7.12.1-8.rhel4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14469"/>
      <state state_ref="oval:org.mitre.oval:ste:10096"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32234" version="1" comment="curl is earlier than 0:7.12.1-8.rhel4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14575"/>
      <state state_ref="oval:org.mitre.oval:ste:10096"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32249" version="1" comment="udev is earlier than 0:039-10.10.EL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14607"/>
      <state state_ref="oval:org.mitre.oval:ste:10024"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32646" version="1" comment="kdegraphics-devel is earlier than 7:3.3.1-3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14596"/>
      <state state_ref="oval:org.mitre.oval:ste:10121"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32365" version="1" comment="kdegraphics is earlier than 7:3.3.1-3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14241"/>
      <state state_ref="oval:org.mitre.oval:ste:10121"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31720" version="1" comment="xpdf is earlier than 1:3.00-11.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14398"/>
      <state state_ref="oval:org.mitre.oval:ste:10038"/>
    </rpminfo_test>
    <uname_test id="oval:org.mitre.oval:tst:3912" version="1" comment="ix86 architecture" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:3443"/>
    </uname_test>
    <patch_test id="oval:org.mitre.oval:tst:3900" version="1" check="at least one" comment="Patch 122300-06 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1913"/>
      <state state_ref="oval:org.mitre.oval:ste:3949"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:3594" version="1" check="at least one" comment="Patch 122301-06 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:2682"/>
      <state state_ref="oval:org.mitre.oval:ste:3949"/>
    </patch_test>
    <uname_test id="oval:org.mitre.oval:tst:3237" version="1" comment="sparc architecture" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:3478"/>
    </uname_test>
    <uname_test id="oval:org.mitre.oval:tst:3172" version="1" comment="Solaris 9 Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:3891"/>
    </uname_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36459" version="1" comment="ImageMagick is earlier than 0:6.0.7.1-17.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13854"/>
      <state state_ref="oval:org.mitre.oval:ste:9868"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36419" version="1" comment="ImageMagick-c++-devel is earlier than 0:6.2.8.0-4.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14240"/>
      <state state_ref="oval:org.mitre.oval:ste:10599"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36388" version="1" comment="ImageMagick-perl is earlier than 0:6.2.8.0-4.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14270"/>
      <state state_ref="oval:org.mitre.oval:ste:10599"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36360" version="1" comment="ImageMagick is earlier than 0:6.2.8.0-4.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13854"/>
      <state state_ref="oval:org.mitre.oval:ste:10599"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36349" version="1" comment="ImageMagick-perl is earlier than 0:6.0.7.1-17.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14270"/>
      <state state_ref="oval:org.mitre.oval:ste:9868"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36311" version="1" comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-17.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14240"/>
      <state state_ref="oval:org.mitre.oval:ste:9868"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36260" version="1" comment="ImageMagick-perl is earlier than 0:5.5.6-28" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14270"/>
      <state state_ref="oval:org.mitre.oval:ste:10579"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36208" version="1" comment="ImageMagick-devel is earlier than 0:5.5.6-28" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13484"/>
      <state state_ref="oval:org.mitre.oval:ste:10579"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36184" version="1" comment="ImageMagick is earlier than 0:5.5.6-28" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13854"/>
      <state state_ref="oval:org.mitre.oval:ste:10579"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36133" version="1" comment="ImageMagick-c++ is earlier than 0:6.2.8.0-4.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13475"/>
      <state state_ref="oval:org.mitre.oval:ste:10599"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36106" version="1" comment="ImageMagick-c++ is earlier than 0:6.0.7.1-17.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13475"/>
      <state state_ref="oval:org.mitre.oval:ste:9868"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36056" version="1" comment="ImageMagick-c++ is earlier than 0:5.5.6-28" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13475"/>
      <state state_ref="oval:org.mitre.oval:ste:10579"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36023" version="1" comment="ImageMagick-c++-devel is earlier than 0:5.5.6-28" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14240"/>
      <state state_ref="oval:org.mitre.oval:ste:10579"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35927" version="1" comment="ImageMagick-devel is earlier than 0:6.0.7.1-17.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13484"/>
      <state state_ref="oval:org.mitre.oval:ste:9868"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35921" version="1" comment="ImageMagick-devel is earlier than 0:6.2.8.0-4.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13484"/>
      <state state_ref="oval:org.mitre.oval:ste:10599"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34253" version="1" comment="php-devel is earlier than 0:4.3.9-3.22.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:10534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34251" version="1" comment="php-xmlrpc is earlier than 0:4.3.9-3.22.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14445"/>
      <state state_ref="oval:org.mitre.oval:ste:10534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34240" version="1" comment="php-mbstring is earlier than 0:4.3.9-3.22.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13746"/>
      <state state_ref="oval:org.mitre.oval:ste:10534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34225" version="1" comment="php-imap is earlier than 0:4.3.9-3.22.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:10534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34209" version="1" comment="php-odbc is earlier than 0:4.3.9-3.22.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:10534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34150" version="1" comment="php-pear is earlier than 0:4.3.9-3.22.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14130"/>
      <state state_ref="oval:org.mitre.oval:ste:10534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34104" version="1" comment="php-mysql is earlier than 0:4.3.9-3.22.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:10534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34018" version="1" comment="php-ncurses is earlier than 0:4.3.9-3.22.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14227"/>
      <state state_ref="oval:org.mitre.oval:ste:10534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33981" version="1" comment="php-gd is earlier than 0:4.3.9-3.22.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14335"/>
      <state state_ref="oval:org.mitre.oval:ste:10534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33911" version="1" comment="php-pgsql is earlier than 0:4.3.9-3.22.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:10534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33681" version="1" comment="php-domxml is earlier than 0:4.3.9-3.22.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14496"/>
      <state state_ref="oval:org.mitre.oval:ste:10534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33655" version="1" comment="php is earlier than 0:4.3.9-3.22.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:10534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33540" version="1" comment="php-snmp is earlier than 0:4.3.9-3.22.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14508"/>
      <state state_ref="oval:org.mitre.oval:ste:10534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33287" version="1" comment="php-ldap is earlier than 0:4.3.9-3.22.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:10534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30703" version="1" comment="mozilla-js-debugger is earlier than 37:1.4.2-3.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13991"/>
      <state state_ref="oval:org.mitre.oval:ste:9634"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30682" version="1" comment="mozilla is earlier than 37:1.4.2-3.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14405"/>
      <state state_ref="oval:org.mitre.oval:ste:9634"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30659" version="1" comment="mozilla-nspr-devel is earlier than 37:1.4.2-3.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13716"/>
      <state state_ref="oval:org.mitre.oval:ste:9634"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30646" version="1" comment="mozilla-dom-inspector is earlier than 37:1.4.2-3.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13776"/>
      <state state_ref="oval:org.mitre.oval:ste:9634"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30528" version="1" comment="mozilla-nss-devel is earlier than 37:1.4.2-3.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14415"/>
      <state state_ref="oval:org.mitre.oval:ste:9634"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30482" version="1" comment="mozilla-nspr is earlier than 37:1.4.2-3.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14160"/>
      <state state_ref="oval:org.mitre.oval:ste:9634"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30390" version="1" comment="mozilla-nss is earlier than 37:1.4.2-3.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14069"/>
      <state state_ref="oval:org.mitre.oval:ste:9634"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29961" version="1" comment="mozilla-mail is earlier than 37:1.4.2-3.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14423"/>
      <state state_ref="oval:org.mitre.oval:ste:9634"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29813" version="1" comment="mozilla-chat is earlier than 37:1.4.2-3.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14196"/>
      <state state_ref="oval:org.mitre.oval:ste:9634"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31934" version="1" comment="cvs is earlier than 0:1.11.2-28" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14275"/>
      <state state_ref="oval:org.mitre.oval:ste:9989"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31687" version="1" comment="cvs is earlier than 0:1.11.17-8.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14275"/>
      <state state_ref="oval:org.mitre.oval:ste:9541"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40360" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-0.52.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:11475"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40345" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-54.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:11396"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40304" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-54.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:11396"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40250" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-54.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:11396"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40246" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-0.52.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:11475"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40184" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.52.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:11475"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40183" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-54.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:11396"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40133" version="1" comment="seamonkey is earlier than 0:1.0.9-0.52.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:11475"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40114" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.52.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:11475"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40081" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-54.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:11396"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40059" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-0.52.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:11475"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39946" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-0.52.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:11475"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39945" version="1" comment="seamonkey is earlier than 0:1.0.9-54.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:11396"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39934" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.52.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:11475"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39775" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.52.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:11475"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39403" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-0.52.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:11475"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31535" version="1" comment="libexif is earlier than 0:0.5.12-5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14343"/>
      <state state_ref="oval:org.mitre.oval:ste:9840"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31456" version="1" comment="libexif-devel is earlier than 0:0.5.12-5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14518"/>
      <state state_ref="oval:org.mitre.oval:ste:9840"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31747" version="1" comment="tetex-xdvi is earlier than 0:1.0.7-67.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14182"/>
      <state state_ref="oval:org.mitre.oval:ste:9385"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31693" version="1" comment="tetex-dvips is earlier than 0:1.0.7-67.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14207"/>
      <state state_ref="oval:org.mitre.oval:ste:9385"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31685" version="1" comment="tetex-afm is earlier than 0:1.0.7-67.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14389"/>
      <state state_ref="oval:org.mitre.oval:ste:9385"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31615" version="1" comment="tetex-fonts is earlier than 0:1.0.7-67.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14502"/>
      <state state_ref="oval:org.mitre.oval:ste:9385"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31603" version="1" comment="tetex is earlier than 0:1.0.7-67.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14329"/>
      <state state_ref="oval:org.mitre.oval:ste:9385"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31559" version="1" comment="tetex-latex is earlier than 0:1.0.7-67.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13878"/>
      <state state_ref="oval:org.mitre.oval:ste:9385"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31323" version="1" comment="kdegraphics is earlier than 7:3.3.1-3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14241"/>
      <state state_ref="oval:org.mitre.oval:ste:9300"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31305" version="1" comment="tetex-doc is earlier than 0:2.0.2-22.EL4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14554"/>
      <state state_ref="oval:org.mitre.oval:ste:9400"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31263" version="1" comment="kdegraphics-devel is earlier than 7:3.3.1-3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14596"/>
      <state state_ref="oval:org.mitre.oval:ste:9300"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31257" version="1" comment="tetex-fonts is earlier than 0:2.0.2-22.EL4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14502"/>
      <state state_ref="oval:org.mitre.oval:ste:9400"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31241" version="1" comment="xpdf is earlier than 1:2.02-9.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14398"/>
      <state state_ref="oval:org.mitre.oval:ste:9730"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31187" version="1" comment="tetex-dvips is earlier than 0:2.0.2-22.EL4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14207"/>
      <state state_ref="oval:org.mitre.oval:ste:9400"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31111" version="1" comment="tetex-afm is earlier than 0:2.0.2-22.EL4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14389"/>
      <state state_ref="oval:org.mitre.oval:ste:9400"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31002" version="1" comment="tetex-latex is earlier than 0:2.0.2-22.EL4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13878"/>
      <state state_ref="oval:org.mitre.oval:ste:9400"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30846" version="1" comment="tetex-xdvi is earlier than 0:2.0.2-22.EL4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14182"/>
      <state state_ref="oval:org.mitre.oval:ste:9400"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30790" version="1" comment="gpdf is earlier than 0:2.8.2-4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14337"/>
      <state state_ref="oval:org.mitre.oval:ste:9778"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30716" version="1" comment="tetex is earlier than 0:2.0.2-22.EL4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14329"/>
      <state state_ref="oval:org.mitre.oval:ste:9400"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30331" version="1" comment="xpdf is earlier than 1:3.00-11.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14398"/>
      <state state_ref="oval:org.mitre.oval:ste:9831"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38557" version="1" comment="NetworkManager-glib-devel is earlier than 1:0.7.0-4.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15012"/>
      <state state_ref="oval:org.mitre.oval:ste:11122"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38491" version="1" comment="NetworkManager is earlier than 0:0.3.1-5.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15163"/>
      <state state_ref="oval:org.mitre.oval:ste:11118"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38451" version="1" comment="NetworkManager is earlier than 1:0.7.0-4.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15163"/>
      <state state_ref="oval:org.mitre.oval:ste:11122"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38177" version="1" comment="NetworkManager-gnome is earlier than 1:0.7.0-4.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15031"/>
      <state state_ref="oval:org.mitre.oval:ste:11122"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38175" version="1" comment="NetworkManager-glib is earlier than 1:0.7.0-4.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14206"/>
      <state state_ref="oval:org.mitre.oval:ste:11122"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38098" version="1" comment="NetworkManager-devel is earlier than 1:0.7.0-4.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14736"/>
      <state state_ref="oval:org.mitre.oval:ste:11122"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37787" version="1" comment="NetworkManager-gnome is earlier than 0:0.3.1-5.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15031"/>
      <state state_ref="oval:org.mitre.oval:ste:11118"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37554" version="1" comment="libxslt-python is earlier than 0:1.1.17-2.el5_2.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14955"/>
      <state state_ref="oval:org.mitre.oval:ste:11081"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37536" version="1" comment="libxslt is earlier than 0:1.1.11-1.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15147"/>
      <state state_ref="oval:org.mitre.oval:ste:10761"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37418" version="1" comment="libxslt-devel is earlier than 0:1.1.17-2.el5_2.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15150"/>
      <state state_ref="oval:org.mitre.oval:ste:11081"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37375" version="1" comment="libxslt-devel is earlier than 0:1.1.11-1.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15150"/>
      <state state_ref="oval:org.mitre.oval:ste:10761"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37304" version="1" comment="libxslt is earlier than 0:1.1.17-2.el5_2.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15147"/>
      <state state_ref="oval:org.mitre.oval:ste:11081"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37068" version="1" comment="libxslt-python is earlier than 0:1.1.11-1.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14955"/>
      <state state_ref="oval:org.mitre.oval:ste:10761"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32916" version="1" comment="mutt is earlier than 5:1.4.1-3.5.rhel3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14378"/>
      <state state_ref="oval:org.mitre.oval:ste:10237"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32764" version="1" comment="mutt is earlier than 5:1.4.1-11.rhel4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14378"/>
      <state state_ref="oval:org.mitre.oval:ste:10211"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38306" version="1" comment="libicu-doc is earlier than 0:3.6-5.11.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14890"/>
      <state state_ref="oval:org.mitre.oval:ste:10926"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38291" version="1" comment="libicu-devel is earlier than 0:3.6-5.11.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14587"/>
      <state state_ref="oval:org.mitre.oval:ste:10926"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38218" version="1" comment="libicu is earlier than 0:3.6-5.11.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14735"/>
      <state state_ref="oval:org.mitre.oval:ste:10926"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37894" version="1" comment="icu is earlier than 0:3.6-5.11.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14949"/>
      <state state_ref="oval:org.mitre.oval:ste:10926"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39711" version="1" comment="bind-libbind-devel is earlier than 30:9.3.6-4.P1.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14729"/>
      <state state_ref="oval:org.mitre.oval:ste:11312"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39685" version="1" comment="bind-utils is earlier than 30:9.3.6-4.P1.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14263"/>
      <state state_ref="oval:org.mitre.oval:ste:11312"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39631" version="1" comment="bind-devel is earlier than 30:9.3.6-4.P1.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14242"/>
      <state state_ref="oval:org.mitre.oval:ste:11312"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39349" version="1" comment="bind-libs is earlier than 30:9.3.6-4.P1.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14348"/>
      <state state_ref="oval:org.mitre.oval:ste:11312"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39252" version="1" comment="bind-sdb is earlier than 30:9.3.6-4.P1.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14433"/>
      <state state_ref="oval:org.mitre.oval:ste:11312"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39043" version="1" comment="bind-chroot is earlier than 30:9.3.6-4.P1.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14363"/>
      <state state_ref="oval:org.mitre.oval:ste:11312"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39039" version="1" comment="bind is earlier than 30:9.3.6-4.P1.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14143"/>
      <state state_ref="oval:org.mitre.oval:ste:11312"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38819" version="1" comment="caching-nameserver is earlier than 30:9.3.6-4.P1.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14701"/>
      <state state_ref="oval:org.mitre.oval:ste:11312"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37070" version="1" comment="net-snmp-libs is earlier than 0:5.0.9-2.30E.24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14316"/>
      <state state_ref="oval:org.mitre.oval:ste:10845"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37054" version="1" comment="net-snmp is earlier than 1:5.3.1-24.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14390"/>
      <state state_ref="oval:org.mitre.oval:ste:10703"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37050" version="1" comment="net-snmp-perl is earlier than 0:5.1.2-11.el4_6.11.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14516"/>
      <state state_ref="oval:org.mitre.oval:ste:10827"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37027" version="1" comment="net-snmp is earlier than 0:5.0.9-2.30E.24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14390"/>
      <state state_ref="oval:org.mitre.oval:ste:10845"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36969" version="1" comment="net-snmp-utils is earlier than 1:5.3.1-24.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14287"/>
      <state state_ref="oval:org.mitre.oval:ste:10703"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36958" version="1" comment="net-snmp-devel is earlier than 0:5.0.9-2.30E.24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14339"/>
      <state state_ref="oval:org.mitre.oval:ste:10845"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36948" version="1" comment="net-snmp-devel is earlier than 0:5.1.2-11.el4_6.11.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14339"/>
      <state state_ref="oval:org.mitre.oval:ste:10827"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36912" version="1" comment="net-snmp-perl is earlier than 0:5.0.9-2.30E.24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14516"/>
      <state state_ref="oval:org.mitre.oval:ste:10845"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36887" version="1" comment="net-snmp-devel is earlier than 1:5.3.1-24.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14339"/>
      <state state_ref="oval:org.mitre.oval:ste:10703"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36883" version="1" comment="net-snmp-libs is earlier than 1:5.3.1-24.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14316"/>
      <state state_ref="oval:org.mitre.oval:ste:10703"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36880" version="1" comment="net-snmp is earlier than 0:5.1.2-11.el4_6.11.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14390"/>
      <state state_ref="oval:org.mitre.oval:ste:10827"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36847" version="1" comment="net-snmp-perl is earlier than 1:5.3.1-24.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14516"/>
      <state state_ref="oval:org.mitre.oval:ste:10703"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36843" version="1" comment="net-snmp-utils is earlier than 0:5.1.2-11.el4_6.11.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14287"/>
      <state state_ref="oval:org.mitre.oval:ste:10827"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36837" version="1" comment="net-snmp-utils is earlier than 0:5.0.9-2.30E.24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14287"/>
      <state state_ref="oval:org.mitre.oval:ste:10845"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36663" version="1" comment="net-snmp-libs is earlier than 0:5.1.2-11.el4_6.11.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14316"/>
      <state state_ref="oval:org.mitre.oval:ste:10827"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1182" version="1" check="at least one" comment="the version of Mapi32.dll is greater than or equal 6.0.6603.0 (Exchange 2000 Server,SP3 is installed)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:837"/>
      <state state_ref="oval:org.mitre.oval:ste:1055"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1181" version="1" check="at least one" comment="the version of Mapi32.dll is less than 6.0.6617.47" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:837"/>
      <state state_ref="oval:org.mitre.oval:ste:1054"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31969" version="1" comment="ruby-docs is earlier than 0:1.8.1-7.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14446"/>
      <state state_ref="oval:org.mitre.oval:ste:9837"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31935" version="1" comment="ruby-tcltk is earlier than 0:1.8.1-7.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14273"/>
      <state state_ref="oval:org.mitre.oval:ste:9837"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31813" version="1" comment="irb is earlier than 0:1.8.1-7.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13649"/>
      <state state_ref="oval:org.mitre.oval:ste:9837"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31778" version="1" comment="ruby is earlier than 0:1.8.1-7.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14305"/>
      <state state_ref="oval:org.mitre.oval:ste:9837"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31750" version="1" comment="ruby-mode is earlier than 0:1.8.1-7.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14380"/>
      <state state_ref="oval:org.mitre.oval:ste:9837"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31607" version="1" comment="ruby-devel is earlier than 0:1.8.1-7.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14187"/>
      <state state_ref="oval:org.mitre.oval:ste:9837"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31402" version="1" comment="ruby-libs is earlier than 0:1.8.1-7.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14388"/>
      <state state_ref="oval:org.mitre.oval:ste:9837"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30704" version="1" comment="cvs is earlier than 0:1.11.2-18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14275"/>
      <state state_ref="oval:org.mitre.oval:ste:9342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39746" version="1" comment="sudo is earlier than 0:1.6.9p17-6.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14246"/>
      <state state_ref="oval:org.mitre.oval:ste:11432"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36594" version="1" comment="gnome-screensaver is earlier than 0:2.16.1-8.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14431"/>
      <state state_ref="oval:org.mitre.oval:ste:10664"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35615" version="1" comment="pcre-devel is earlier than 0:4.5-4.el4_6.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14619"/>
      <state state_ref="oval:org.mitre.oval:ste:10697"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35501" version="1" comment="pcre is earlier than 0:4.5-4.el4_6.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14505"/>
      <state state_ref="oval:org.mitre.oval:ste:10697"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35251" version="1" comment="pcre-devel is earlier than 0:6.6-2.el5_1.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14619"/>
      <state state_ref="oval:org.mitre.oval:ste:9756"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35032" version="1" comment="pcre is earlier than 0:6.6-2.el5_1.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14505"/>
      <state state_ref="oval:org.mitre.oval:ste:9756"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2386" version="1" check="all" comment="bzip2 RPM earlier than 0:1.0.2-11.EL3.4" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1363"/>
      <state state_ref="oval:org.mitre.oval:ste:2235"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1183" version="1" check="all" comment="/usr/bin/bzgrep is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:838"/>
      <state state_ref="oval:org.mitre.oval:ste:1056"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37607" version="1" comment="openssh-clients is earlier than 0:3.9p1-11.el4_7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14409"/>
      <state state_ref="oval:org.mitre.oval:ste:11046"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37596" version="1" comment="openssh-askpass is earlier than 0:3.9p1-11.el4_7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14577"/>
      <state state_ref="oval:org.mitre.oval:ste:11046"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37491" version="1" comment="openssh-askpass-gnome is earlier than 0:3.9p1-11.el4_7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14434"/>
      <state state_ref="oval:org.mitre.oval:ste:11046"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37404" version="1" comment="openssh is earlier than 0:3.9p1-11.el4_7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14581"/>
      <state state_ref="oval:org.mitre.oval:ste:11046"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37370" version="1" comment="openssh is earlier than 0:4.3p2-26.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14581"/>
      <state state_ref="oval:org.mitre.oval:ste:10741"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37281" version="1" comment="openssh-askpass is earlier than 0:4.3p2-26.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14577"/>
      <state state_ref="oval:org.mitre.oval:ste:10741"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37206" version="1" comment="openssh-server is earlier than 0:3.9p1-11.el4_7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14544"/>
      <state state_ref="oval:org.mitre.oval:ste:11046"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36828" version="1" comment="openssh-server is earlier than 0:4.3p2-26.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14544"/>
      <state state_ref="oval:org.mitre.oval:ste:10741"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36657" version="1" comment="openssh-clients is earlier than 0:4.3p2-26.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14409"/>
      <state state_ref="oval:org.mitre.oval:ste:10741"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31274" version="1" comment="enscript is earlier than 0:1.6.1-28.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14574"/>
      <state state_ref="oval:org.mitre.oval:ste:9676"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30796" version="1" comment="enscript is earlier than 0:1.6.1-24.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14574"/>
      <state state_ref="oval:org.mitre.oval:ste:9214"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34063" version="1" comment="shadow-utils is earlier than 2:4.0.3-29.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13969"/>
      <state state_ref="oval:org.mitre.oval:ste:10203"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33184" version="1" comment="shadow-utils is earlier than 2:4.0.3-61.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13969"/>
      <state state_ref="oval:org.mitre.oval:ste:10236"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38835" version="1" comment="lftp is earlier than 0:3.7.11-4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13476"/>
      <state state_ref="oval:org.mitre.oval:ste:10485"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35783" version="1" comment="python-tools is earlier than 0:2.3.4-14.4.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14208"/>
      <state state_ref="oval:org.mitre.oval:ste:10529"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35717" version="1" comment="python-devel is earlier than 0:2.2.3-6.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14166"/>
      <state state_ref="oval:org.mitre.oval:ste:10413"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35704" version="1" comment="tkinter is earlier than 0:2.2.3-6.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14092"/>
      <state state_ref="oval:org.mitre.oval:ste:10413"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35688" version="1" comment="python is earlier than 0:2.2.3-6.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14556"/>
      <state state_ref="oval:org.mitre.oval:ste:10413"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35616" version="1" comment="python-tools is earlier than 0:2.2.3-6.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14208"/>
      <state state_ref="oval:org.mitre.oval:ste:10413"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35573" version="1" comment="python is earlier than 0:2.3.4-14.4.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14556"/>
      <state state_ref="oval:org.mitre.oval:ste:10529"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35468" version="1" comment="tkinter is earlier than 0:2.3.4-14.4.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14092"/>
      <state state_ref="oval:org.mitre.oval:ste:10529"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35282" version="1" comment="python-devel is earlier than 0:2.3.4-14.4.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14166"/>
      <state state_ref="oval:org.mitre.oval:ste:10529"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35259" version="1" comment="python-docs is earlier than 0:2.3.4-14.4.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14500"/>
      <state state_ref="oval:org.mitre.oval:ste:10529"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34708" version="1" comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14553"/>
      <state state_ref="oval:org.mitre.oval:ste:10013"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34707" version="1" comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14089"/>
      <state state_ref="oval:org.mitre.oval:ste:10013"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34661" version="1" comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14169"/>
      <state state_ref="oval:org.mitre.oval:ste:10013"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34647" version="1" comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13643"/>
      <state state_ref="oval:org.mitre.oval:ste:10013"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34638" version="1" comment="xorg-x11-xfs-utils is earlier than 1:1.0.2-4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14770"/>
      <state state_ref="oval:org.mitre.oval:ste:10456"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34634" version="1" comment="xorg-x11 is earlier than 0:6.8.2-1.EL.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14592"/>
      <state state_ref="oval:org.mitre.oval:ste:10013"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34628" version="1" comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14097"/>
      <state state_ref="oval:org.mitre.oval:ste:10013"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34616" version="1" comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14478"/>
      <state state_ref="oval:org.mitre.oval:ste:10013"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34604" version="1" comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14291"/>
      <state state_ref="oval:org.mitre.oval:ste:10013"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34588" version="1" comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14515"/>
      <state state_ref="oval:org.mitre.oval:ste:10013"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34587" version="1" comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14184"/>
      <state state_ref="oval:org.mitre.oval:ste:10013"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34572" version="1" comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14624"/>
      <state state_ref="oval:org.mitre.oval:ste:10013"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34566" version="1" comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14580"/>
      <state state_ref="oval:org.mitre.oval:ste:10013"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34530" version="1" comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14595"/>
      <state state_ref="oval:org.mitre.oval:ste:10013"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34437" version="1" comment="xorg-x11-xfs is earlier than 1:1.0.2-4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14089"/>
      <state state_ref="oval:org.mitre.oval:ste:10456"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34425" version="1" comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14031"/>
      <state state_ref="oval:org.mitre.oval:ste:10013"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34421" version="1" comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14262"/>
      <state state_ref="oval:org.mitre.oval:ste:10013"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34401" version="1" comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14572"/>
      <state state_ref="oval:org.mitre.oval:ste:10013"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34299" version="1" comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14129"/>
      <state state_ref="oval:org.mitre.oval:ste:10013"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34175" version="1" comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14168"/>
      <state state_ref="oval:org.mitre.oval:ste:10013"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35103" version="1" comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.9-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14755"/>
      <state state_ref="oval:org.mitre.oval:ste:10028"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35093" version="1" comment="java-1.4.2-ibm is earlier than 0:1.4.2.9-1jpp.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14781"/>
      <state state_ref="oval:org.mitre.oval:ste:10415"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35075" version="1" comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.9-1jpp.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14755"/>
      <state state_ref="oval:org.mitre.oval:ste:10415"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35071" version="1" comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.9-1jpp.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14312"/>
      <state state_ref="oval:org.mitre.oval:ste:10251"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35030" version="1" comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.9-1jpp.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14312"/>
      <state state_ref="oval:org.mitre.oval:ste:10415"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35025" version="1" comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.9-1jpp.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14829"/>
      <state state_ref="oval:org.mitre.oval:ste:10415"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35020" version="1" comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.9-1jpp.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14703"/>
      <state state_ref="oval:org.mitre.oval:ste:10251"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35018" version="1" comment="java-1.4.2-ibm is earlier than 0:1.4.2.9-1jpp.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14781"/>
      <state state_ref="oval:org.mitre.oval:ste:10251"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35014" version="1" comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.9-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14829"/>
      <state state_ref="oval:org.mitre.oval:ste:10028"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35013" version="1" comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.9-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14312"/>
      <state state_ref="oval:org.mitre.oval:ste:10028"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34995" version="1" comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.9-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14163"/>
      <state state_ref="oval:org.mitre.oval:ste:10028"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34974" version="1" comment="java-1.4.2-ibm is earlier than 0:1.4.2.9-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14781"/>
      <state state_ref="oval:org.mitre.oval:ste:10028"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34941" version="1" comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.9-1jpp.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14703"/>
      <state state_ref="oval:org.mitre.oval:ste:10415"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34906" version="1" comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.9-1jpp.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14755"/>
      <state state_ref="oval:org.mitre.oval:ste:10251"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34851" version="1" comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.9-1jpp.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14163"/>
      <state state_ref="oval:org.mitre.oval:ste:10251"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34845" version="1" comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.9-1jpp.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14837"/>
      <state state_ref="oval:org.mitre.oval:ste:10415"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34754" version="1" comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.9-1jpp.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14829"/>
      <state state_ref="oval:org.mitre.oval:ste:10251"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34621" version="1" comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.9-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14703"/>
      <state state_ref="oval:org.mitre.oval:ste:10028"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34528" version="1" comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.9-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14837"/>
      <state state_ref="oval:org.mitre.oval:ste:10028"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34400" version="1" comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.9-1jpp.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14163"/>
      <state state_ref="oval:org.mitre.oval:ste:10415"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39125" version="1" comment="cman-devel is earlier than 0:2.0.115-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14802"/>
      <state state_ref="oval:org.mitre.oval:ste:11228"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39064" version="1" comment="cman is earlier than 0:2.0.115-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14620"/>
      <state state_ref="oval:org.mitre.oval:ste:11228"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38658" version="1" comment="gstreamer-plugins-good-devel is earlier than 0:0.10.9-1.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14946"/>
      <state state_ref="oval:org.mitre.oval:ste:10388"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38206" version="1" comment="gstreamer-plugins-good is earlier than 0:0.10.9-1.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15182"/>
      <state state_ref="oval:org.mitre.oval:ste:10388"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37581" version="1" comment="kernel-xenU-devel is earlier than 0:2.6.9-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14060"/>
      <state state_ref="oval:org.mitre.oval:ste:10829"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37548" version="1" comment="kernel is earlier than 0:2.6.9-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10829"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37535" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:10829"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37393" version="1" comment="kernel-doc is earlier than 0:2.6.9-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10829"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37299" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:10829"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37213" version="1" comment="kernel-xenU is earlier than 0:2.6.9-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14301"/>
      <state state_ref="oval:org.mitre.oval:ste:10829"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37152" version="1" comment="kernel-devel is earlier than 0:2.6.9-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10829"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37124" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:10829"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37071" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:10829"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37024" version="1" comment="kernel-smp is earlier than 0:2.6.9-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:10829"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36859" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-78.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:10829"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33133" version="1" comment="python is earlier than 0:2.3.4-14.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14556"/>
      <state state_ref="oval:org.mitre.oval:ste:9713"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33099" version="1" comment="python-devel is earlier than 0:2.3.4-14.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14166"/>
      <state state_ref="oval:org.mitre.oval:ste:9713"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33032" version="1" comment="tkinter is earlier than 0:2.2.3-6.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14092"/>
      <state state_ref="oval:org.mitre.oval:ste:10223"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33017" version="1" comment="python-devel is earlier than 0:2.2.3-6.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14166"/>
      <state state_ref="oval:org.mitre.oval:ste:10223"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32998" version="1" comment="python is earlier than 0:2.2.3-6.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14556"/>
      <state state_ref="oval:org.mitre.oval:ste:10223"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32973" version="1" comment="python-docs is earlier than 0:2.3.4-14.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14500"/>
      <state state_ref="oval:org.mitre.oval:ste:9713"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32889" version="1" comment="python-tools is earlier than 0:2.2.3-6.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14208"/>
      <state state_ref="oval:org.mitre.oval:ste:10223"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32724" version="1" comment="tkinter is earlier than 0:2.3.4-14.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14092"/>
      <state state_ref="oval:org.mitre.oval:ste:9713"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32432" version="1" comment="python-tools is earlier than 0:2.3.4-14.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14208"/>
      <state state_ref="oval:org.mitre.oval:ste:9713"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36430" version="1" comment="kernel-headers is earlier than 0:2.6.18-53.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:10784"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36409" version="1" comment="kernel is earlier than 0:2.6.18-53.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10784"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36335" version="1" comment="kernel-xen is earlier than 0:2.6.18-53.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:10784"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36251" version="1" comment="kernel-doc is earlier than 0:2.6.18-53.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10784"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36215" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:10784"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36192" version="1" comment="kernel-kdump is earlier than 0:2.6.18-53.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:10784"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36176" version="1" comment="kernel-debug is earlier than 0:2.6.18-53.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14957"/>
      <state state_ref="oval:org.mitre.oval:ste:10784"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36150" version="1" comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15023"/>
      <state state_ref="oval:org.mitre.oval:ste:10784"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35974" version="1" comment="kernel-devel is earlier than 0:2.6.18-53.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10784"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35944" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:10784"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35791" version="1" comment="kernel-PAE is earlier than 0:2.6.18-53.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:10784"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35484" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:10784"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37950" version="1" comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14744"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37930" version="1" comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14763"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37926" version="1" comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14814"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37915" version="1" comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14090"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37913" version="1" comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14617"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37901" version="1" comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14569"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37896" version="1" comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14754"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37892" version="1" comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14599"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37890" version="1" comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14849"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37889" version="1" comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14875"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37888" version="1" comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14716"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37884" version="1" comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14696"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37878" version="1" comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14845"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37871" version="1" comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14472"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37866" version="1" comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14193"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37864" version="1" comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14708"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37858" version="1" comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15018"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37856" version="1" comment="openoffice.org-langpack-el_GR is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14359"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37853" version="1" comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14984"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37851" version="1" comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14401"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37849" version="1" comment="openoffice.org-writer is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14758"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37848" version="1" comment="openoffice.org is earlier than 0:1.1.5-10.6.0.7.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:11031"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37847" version="1" comment="openoffice.org-langpack-bg_BG is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14589"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37843" version="1" comment="openoffice.org-langpack-hr_HR is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14336"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37837" version="1" comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14651"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37829" version="1" comment="openoffice.org-langpack-tr_TR is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14886"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37824" version="1" comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14892"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37820" version="1" comment="openoffice.org-langpack-nb_NO is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14807"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37816" version="1" comment="openoffice.org-langpack-nn_NO is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14779"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37815" version="1" comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14606"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37814" version="1" comment="openoffice.org-langpack-gl_ES is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14792"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37813" version="1" comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15005"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37810" version="1" comment="openoffice.org-langpack-te_IN is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14832"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37807" version="1" comment="openoffice.org-draw is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14828"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37796" version="1" comment="openoffice.org2 is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14437"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37795" version="1" comment="openoffice.org-langpack-he_IL is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14442"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37792" version="1" comment="openoffice.org-langpack-es is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14604"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37791" version="1" comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.7.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14455"/>
      <state state_ref="oval:org.mitre.oval:ste:11031"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37788" version="1" comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14321"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37786" version="1" comment="openoffice.org-langpack-cy_GB is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14501"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37783" version="1" comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14369"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37780" version="1" comment="openoffice.org-langpack-sk_SK is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14266"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37770" version="1" comment="openoffice.org-langpack-mr_IN is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14855"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37767" version="1" comment="openoffice.org-langpack-da_DK is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14748"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37766" version="1" comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14056"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37765" version="1" comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14901"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37763" version="1" comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.7.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14215"/>
      <state state_ref="oval:org.mitre.oval:ste:11031"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37761" version="1" comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14865"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37756" version="1" comment="openoffice.org-langpack-nl is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14909"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37755" version="1" comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14649"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37754" version="1" comment="openoffice.org-javafilter is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14566"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37752" version="1" comment="openoffice.org-langpack-st_ZA is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14851"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37750" version="1" comment="openoffice.org-langpack-pt_BR is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14822"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37744" version="1" comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14762"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37739" version="1" comment="openoffice.org-sdk-doc is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14165"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37729" version="1" comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14765"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37728" version="1" comment="openoffice.org-langpack-pa_IN is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14746"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37727" version="1" comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14971"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37724" version="1" comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14768"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37723" version="1" comment="openoffice.org-math is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14557"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37712" version="1" comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14476"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37711" version="1" comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14660"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37708" version="1" comment="openoffice.org-langpack-ja_JP is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14155"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37701" version="1" comment="openoffice.org-langpack-et_EE is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14280"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37696" version="1" comment="openoffice.org-headless is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14864"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37695" version="1" comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14737"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37693" version="1" comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14882"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37690" version="1" comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14432"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37689" version="1" comment="openoffice.org-langpack-af_ZA is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14506"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37682" version="1" comment="openoffice.org-pyuno is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14806"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37677" version="1" comment="openoffice.org-langpack-zh_CN is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14839"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37676" version="1" comment="openoffice.org-langpack-sv is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14529"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37669" version="1" comment="openoffice.org-langpack-ml_IN is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14257"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37660" version="1" comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14600"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37657" version="1" comment="openoffice.org-sdk is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14664"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37654" version="1" comment="openoffice.org-langpack-ru is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14766"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37653" version="1" comment="openoffice.org-langpack-hi_IN is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14717"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37650" version="1" comment="openoffice.org-langpack-ga_IE is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14635"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37647" version="1" comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14997"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37642" version="1" comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14937"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37637" version="1" comment="openoffice.org-i18n is earlier than 0:1.1.2-43.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14215"/>
      <state state_ref="oval:org.mitre.oval:ste:10674"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37628" version="1" comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.7.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13698"/>
      <state state_ref="oval:org.mitre.oval:ste:11031"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37626" version="1" comment="openoffice.org-langpack-sr_CS is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14189"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37618" version="1" comment="openoffice.org-libs is earlier than 0:1.1.2-43.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14455"/>
      <state state_ref="oval:org.mitre.oval:ste:10674"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37615" version="1" comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14759"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37613" version="1" comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14456"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37611" version="1" comment="openoffice.org-langpack-th_TH is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14732"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37605" version="1" comment="openoffice.org is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37603" version="1" comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14907"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37597" version="1" comment="openoffice.org-langpack-zh_TW is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14392"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37594" version="1" comment="openoffice.org-graphicfilter is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14526"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37587" version="1" comment="openoffice.org-langpack-as_IN is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14576"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37583" version="1" comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14894"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37582" version="1" comment="openoffice.org-langpack-sl_SI is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14869"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37580" version="1" comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14885"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37579" version="1" comment="openoffice.org-langpack-or_IN is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14588"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37562" version="1" comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14834"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37557" version="1" comment="openoffice.org-langpack-kn_IN is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14714"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37553" version="1" comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14980"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37545" version="1" comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14963"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37544" version="1" comment="openoffice.org-langpack-ms_MY is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14787"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37533" version="1" comment="openoffice.org-testtools is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14135"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37529" version="1" comment="openoffice.org-langpack-eu_ES is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14813"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37523" version="1" comment="openoffice.org is earlier than 0:1.1.2-43.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:10674"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37506" version="1" comment="openoffice.org-langpack-fr is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14772"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37505" version="1" comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14322"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37496" version="1" comment="openoffice.org-xsltfilter is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14530"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37488" version="1" comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14900"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37484" version="1" comment="openoffice.org-calc is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14623"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37466" version="1" comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14562"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37464" version="1" comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14738"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37459" version="1" comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14969"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37457" version="1" comment="openoffice.org-langpack-ta_IN is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14637"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37453" version="1" comment="openoffice.org-langpack-pl_PL is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14767"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37443" version="1" comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13974"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37434" version="1" comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14987"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37421" version="1" comment="openoffice.org-langpack-lt_LT is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13921"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37399" version="1" comment="openoffice.org-langpack-fi_FI is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14625"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37382" version="1" comment="openoffice.org-core is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14450"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37377" version="1" comment="openoffice.org-langpack-ar is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14872"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37372" version="1" comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14831"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37367" version="1" comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15000"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37360" version="1" comment="openoffice.org-langpack-pt_PT is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14571"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37354" version="1" comment="openoffice.org-langpack-gu_IN is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14269"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37348" version="1" comment="openoffice.org-base is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14548"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37343" version="1" comment="openoffice.org-emailmerge is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14522"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37333" version="1" comment="openoffice.org-langpack-bn is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14706"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37287" version="1" comment="openoffice.org-langpack-ca_ES is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14778"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37267" version="1" comment="openoffice.org-langpack-de is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14539"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37158" version="1" comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14976"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37133" version="1" comment="openoffice.org-impress is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14707"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37112" version="1" comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15006"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37058" version="1" comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14995"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37056" version="1" comment="openoffice.org-langpack-it is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14812"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37037" version="1" comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14826"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37012" version="1" comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14728"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36989" version="1" comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14990"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36963" version="1" comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14956"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36956" version="1" comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14986"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36922" version="1" comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.6.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14903"/>
      <state state_ref="oval:org.mitre.oval:ste:11041"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36919" version="1" comment="openoffice.org-langpack-hu_HU is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14694"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36879" version="1" comment="openoffice.org-langpack-ko_KR is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14190"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36864" version="1" comment="openoffice.org-langpack-ur is earlier than 1:2.3.0-6.5.4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14671"/>
      <state state_ref="oval:org.mitre.oval:ste:10700"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32531" version="1" comment="libpng is earlier than 2:1.2.7-1.el4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14194"/>
      <state state_ref="oval:org.mitre.oval:ste:10123"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32372" version="1" comment="libpng-devel is earlier than 2:1.2.7-1.el4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14221"/>
      <state state_ref="oval:org.mitre.oval:ste:10123"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39134" version="1" comment="gnutls-devel is earlier than 0:1.0.20-4.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14558"/>
      <state state_ref="oval:org.mitre.oval:ste:10445"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39082" version="1" comment="gnutls is earlier than 0:1.4.1-3.el5_3.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14386"/>
      <state state_ref="oval:org.mitre.oval:ste:11335"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38830" version="1" comment="gnutls is earlier than 0:1.0.20-4.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14386"/>
      <state state_ref="oval:org.mitre.oval:ste:10445"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38774" version="1" comment="gnutls-devel is earlier than 0:1.4.1-3.el5_3.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14558"/>
      <state state_ref="oval:org.mitre.oval:ste:11335"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38560" version="1" comment="gnutls-utils is earlier than 0:1.4.1-3.el5_3.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15003"/>
      <state state_ref="oval:org.mitre.oval:ste:11335"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40282" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.50.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:11310"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40277" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-0.50.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:11310"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40264" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-52.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:11470"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40258" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-52.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:11470"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40185" version="1" comment="seamonkey is earlier than 0:1.0.9-52.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:11470"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40160" version="1" comment="seamonkey is earlier than 0:1.0.9-0.50.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:11310"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40147" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-52.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:11470"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40145" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-0.50.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:11310"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40130" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-52.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:11470"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40087" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-52.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:11470"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40001" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.50.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:11310"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39963" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-0.50.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:11310"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39910" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-0.50.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:11310"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39865" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.50.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:11310"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39749" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-0.50.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:11310"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39327" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.50.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:11310"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30971" version="1" comment="imlib-devel is earlier than 1:1.9.13-13.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13792"/>
      <state state_ref="oval:org.mitre.oval:ste:8839"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30893" version="1" comment="imlib is earlier than 1:1.9.13-13.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14150"/>
      <state state_ref="oval:org.mitre.oval:ste:8839"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1189" version="1" check="at least one" comment="the version of sqlservr.exe is less than 2000.80.636.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:843"/>
      <state state_ref="oval:org.mitre.oval:ste:1062"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1188" version="1" check="at least one" comment="the version of ssnetlib.dll is less than 2000.80.636.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:841"/>
      <state state_ref="oval:org.mitre.oval:ste:1061"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38134" version="1" comment="gnome-vfs2 is earlier than 0:2.8.2-8.7.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13764"/>
      <state state_ref="oval:org.mitre.oval:ste:11141"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38035" version="1" comment="gnome-vfs2-devel is earlier than 0:2.2.5-2E.3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14144"/>
      <state state_ref="oval:org.mitre.oval:ste:10836"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37577" version="1" comment="gnome-vfs2 is earlier than 0:2.2.5-2E.3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13764"/>
      <state state_ref="oval:org.mitre.oval:ste:10836"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37268" version="1" comment="gnome-vfs2-smb is earlier than 0:2.8.2-8.7.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15130"/>
      <state state_ref="oval:org.mitre.oval:ste:11141"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37162" version="1" comment="gnome-vfs2-devel is earlier than 0:2.8.2-8.7.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14144"/>
      <state state_ref="oval:org.mitre.oval:ste:11141"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40074" version="1" comment="openssl-devel is earlier than 0:0.9.8e-12.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13920"/>
      <state state_ref="oval:org.mitre.oval:ste:11437"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39755" version="1" comment="openssl is earlier than 0:0.9.8e-12.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13882"/>
      <state state_ref="oval:org.mitre.oval:ste:11437"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39135" version="1" comment="openssl-perl is earlier than 0:0.9.8e-12.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14122"/>
      <state state_ref="oval:org.mitre.oval:ste:11437"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31600" version="1" comment="glibc-common is earlier than 0:2.3.2-95.33" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14374"/>
      <state state_ref="oval:org.mitre.oval:ste:9637"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31542" version="1" comment="glibc-devel is earlier than 0:2.3.2-95.33" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14346"/>
      <state state_ref="oval:org.mitre.oval:ste:9637"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31467" version="1" comment="nptl-devel is earlier than 0:2.3.2-95.33" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14095"/>
      <state state_ref="oval:org.mitre.oval:ste:9637"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31462" version="1" comment="glibc-profile is earlier than 0:2.3.2-95.33" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14243"/>
      <state state_ref="oval:org.mitre.oval:ste:9637"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31166" version="1" comment="glibc-utils is earlier than 0:2.3.2-95.33" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14059"/>
      <state state_ref="oval:org.mitre.oval:ste:9637"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31153" version="1" comment="glibc-headers is earlier than 0:2.3.2-95.33" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13936"/>
      <state state_ref="oval:org.mitre.oval:ste:9637"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31047" version="1" comment="glibc is earlier than 0:2.3.2-95.33" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14142"/>
      <state state_ref="oval:org.mitre.oval:ste:9637"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30743" version="1" comment="nscd is earlier than 0:2.3.2-95.33" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14360"/>
      <state state_ref="oval:org.mitre.oval:ste:9637"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40171" version="1" comment="curl is earlier than 0:7.10.6-11.rhel3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14575"/>
      <state state_ref="oval:org.mitre.oval:ste:11524"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40040" version="1" comment="curl is earlier than 0:7.12.1-11.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14575"/>
      <state state_ref="oval:org.mitre.oval:ste:11449"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40007" version="1" comment="curl-devel is earlier than 0:7.10.6-11.rhel3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14469"/>
      <state state_ref="oval:org.mitre.oval:ste:11524"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39882" version="1" comment="curl-devel is earlier than 0:7.15.5-9.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14469"/>
      <state state_ref="oval:org.mitre.oval:ste:11357"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39857" version="1" comment="curl is earlier than 0:7.15.5-9.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14575"/>
      <state state_ref="oval:org.mitre.oval:ste:11357"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39393" version="1" comment="curl-devel is earlier than 0:7.12.1-11.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14469"/>
      <state state_ref="oval:org.mitre.oval:ste:11449"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38914" version="1" comment="dhcp is earlier than 7:3.0.1-65.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15132"/>
      <state state_ref="oval:org.mitre.oval:ste:11146"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38535" version="1" comment="dhcp is earlier than 7:3.0.1-10.2_EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15132"/>
      <state state_ref="oval:org.mitre.oval:ste:11239"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38520" version="1" comment="dhcp-devel is earlier than 7:3.0.1-65.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15055"/>
      <state state_ref="oval:org.mitre.oval:ste:11146"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38360" version="1" comment="dhclient is earlier than 7:3.0.1-10.2_EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15218"/>
      <state state_ref="oval:org.mitre.oval:ste:11239"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38243" version="1" comment="dhcp-devel is earlier than 7:3.0.1-10.2_EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15055"/>
      <state state_ref="oval:org.mitre.oval:ste:11239"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38216" version="1" comment="dhclient is earlier than 7:3.0.1-65.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15218"/>
      <state state_ref="oval:org.mitre.oval:ste:11146"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36606" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-0.17.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10851"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36571" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-16.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10453"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36554" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-16.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:10453"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36552" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-0.17.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:10851"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36550" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-16.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10453"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36528" version="1" comment="thunderbird is earlier than 0:1.5.0.12-12.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:10911"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36517" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-16.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:10453"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36510" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-16.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10453"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36431" version="1" comment="firefox-devel is earlier than 0:1.5.0.12-15.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14876"/>
      <state state_ref="oval:org.mitre.oval:ste:10681"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36424" version="1" comment="seamonkey is earlier than 0:1.0.9-0.17.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10851"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36420" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-0.17.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10851"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36404" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.17.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:10851"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36399" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-16.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10453"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36394" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-16.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:10453"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36390" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.17.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10851"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36361" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-16.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10453"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36344" version="1" comment="firefox is earlier than 0:1.5.0.12-0.15.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10724"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36269" version="1" comment="thunderbird is earlier than 0:1.5.0.12-11.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:10896"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36252" version="1" comment="firefox is earlier than 0:1.5.0.12-15.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10681"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36226" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-0.17.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:10851"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36183" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-0.17.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10851"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36180" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-16.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:10453"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36167" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.17.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10851"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36017" version="1" comment="seamonkey is earlier than 0:1.0.9-16.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10453"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35928" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.17.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:10851"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38999" version="1" comment="nss-pkcs11-devel is earlier than 0:3.12.3.99.3-1.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14171"/>
      <state state_ref="oval:org.mitre.oval:ste:10876"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38995" version="1" comment="nspr is earlier than 0:4.7.4-1.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14745"/>
      <state state_ref="oval:org.mitre.oval:ste:11322"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38960" version="1" comment="nss-tools is earlier than 0:3.12.3.99.3-1.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15090"/>
      <state state_ref="oval:org.mitre.oval:ste:10945"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38950" version="1" comment="nss is earlier than 0:3.12.3.99.3-1.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14917"/>
      <state state_ref="oval:org.mitre.oval:ste:10876"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38841" version="1" comment="nss-tools is earlier than 0:3.12.3.99.3-1.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15090"/>
      <state state_ref="oval:org.mitre.oval:ste:10876"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38829" version="1" comment="nspr is earlier than 0:4.7.4-1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14745"/>
      <state state_ref="oval:org.mitre.oval:ste:11324"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38823" version="1" comment="nspr-devel is earlier than 0:4.7.4-1.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15145"/>
      <state state_ref="oval:org.mitre.oval:ste:11322"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38731" version="1" comment="nspr-devel is earlier than 0:4.7.4-1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15145"/>
      <state state_ref="oval:org.mitre.oval:ste:11324"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38630" version="1" comment="nss is earlier than 0:3.12.3.99.3-1.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14917"/>
      <state state_ref="oval:org.mitre.oval:ste:10945"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38609" version="1" comment="nss-devel is earlier than 0:3.12.3.99.3-1.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14656"/>
      <state state_ref="oval:org.mitre.oval:ste:10876"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38342" version="1" comment="nss-devel is earlier than 0:3.12.3.99.3-1.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14656"/>
      <state state_ref="oval:org.mitre.oval:ste:10945"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38015" version="1" comment="thunderbird is earlier than 0:2.0.0.18-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:10757"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38009" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-28.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10651"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37991" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-28.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10651"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37970" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-0.25.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10706"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37955" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-28.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10651"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37934" version="1" comment="seamonkey is earlier than 0:1.0.9-0.25.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10706"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37932" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-0.25.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10706"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37914" version="1" comment="seamonkey is earlier than 0:1.0.9-28.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10651"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37875" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.25.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10706"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37872" version="1" comment="thunderbird is earlier than 0:1.5.0.12-17.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:10882"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37852" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.25.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10706"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37844" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-0.25.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:10706"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37777" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-28.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10651"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37671" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.25.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:10706"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37357" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-0.25.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10706"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37293" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.25.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:10706"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37232" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-28.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10651"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37159" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-0.25.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:10706"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36273" version="1" comment="openldap-clients is earlier than 0:2.3.27-8.el5_1.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13745"/>
      <state state_ref="oval:org.mitre.oval:ste:10566"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36270" version="1" comment="openldap is earlier than 0:2.2.13-8.el4_6.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14650"/>
      <state state_ref="oval:org.mitre.oval:ste:10688"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36239" version="1" comment="openldap-servers-sql is earlier than 0:2.2.13-8.el4_6.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14387"/>
      <state state_ref="oval:org.mitre.oval:ste:10688"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36158" version="1" comment="openldap is earlier than 0:2.3.27-8.el5_1.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14650"/>
      <state state_ref="oval:org.mitre.oval:ste:10566"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36157" version="1" comment="openldap-devel is earlier than 0:2.2.13-8.el4_6.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14680"/>
      <state state_ref="oval:org.mitre.oval:ste:10688"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36122" version="1" comment="compat-openldap is earlier than 0:2.1.30-8.el4_6.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14705"/>
      <state state_ref="oval:org.mitre.oval:ste:10752"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36065" version="1" comment="openldap-servers-sql is earlier than 0:2.3.27-8.el5_1.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14387"/>
      <state state_ref="oval:org.mitre.oval:ste:10566"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35900" version="1" comment="openldap-devel is earlier than 0:2.3.27-8.el5_1.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14680"/>
      <state state_ref="oval:org.mitre.oval:ste:10566"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35877" version="1" comment="openldap-servers is earlier than 0:2.2.13-8.el4_6.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14676"/>
      <state state_ref="oval:org.mitre.oval:ste:10688"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35700" version="1" comment="compat-openldap is earlier than 0:2.3.27_2.2.29-8.el5_1.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14705"/>
      <state state_ref="oval:org.mitre.oval:ste:10182"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35412" version="1" comment="openldap-clients is earlier than 0:2.2.13-8.el4_6.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13745"/>
      <state state_ref="oval:org.mitre.oval:ste:10688"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35300" version="1" comment="openldap-servers is earlier than 0:2.3.27-8.el5_1.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14676"/>
      <state state_ref="oval:org.mitre.oval:ste:10566"/>
    </rpminfo_test>
    <patch_test id="oval:org.mitre.oval:tst:1197" version="1" check="at least one" comment="Patch 119985-02 or later installed (SPARC-10)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:848"/>
      <state state_ref="oval:org.mitre.oval:ste:1070"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:1196" version="1" check="at least one" comment="Patch 122082-01 or later installed (x86-10)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:847"/>
      <state state_ref="oval:org.mitre.oval:ste:1069"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35510" version="1" comment="ruby-rdoc is earlier than 0:1.8.5-5.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14244"/>
      <state state_ref="oval:org.mitre.oval:ste:9940"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35472" version="1" comment="ruby-irb is earlier than 0:1.8.5-5.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14777"/>
      <state state_ref="oval:org.mitre.oval:ste:9940"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35433" version="1" comment="ruby-devel is earlier than 0:1.8.5-5.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14187"/>
      <state state_ref="oval:org.mitre.oval:ste:9940"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35370" version="1" comment="ruby-tcltk is earlier than 0:1.8.5-5.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14273"/>
      <state state_ref="oval:org.mitre.oval:ste:9940"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35269" version="1" comment="ruby-ri is earlier than 0:1.8.5-5.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14461"/>
      <state state_ref="oval:org.mitre.oval:ste:9940"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35159" version="1" comment="ruby-libs is earlier than 0:1.8.5-5.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14388"/>
      <state state_ref="oval:org.mitre.oval:ste:9940"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35003" version="1" comment="ruby-mode is earlier than 0:1.8.5-5.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14380"/>
      <state state_ref="oval:org.mitre.oval:ste:9940"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34894" version="1" comment="ruby is earlier than 0:1.8.5-5.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14305"/>
      <state state_ref="oval:org.mitre.oval:ste:9940"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34553" version="1" comment="ruby-docs is earlier than 0:1.8.5-5.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14446"/>
      <state state_ref="oval:org.mitre.oval:ste:9940"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30549" version="1" comment="sysstat is earlier than 0:4.0.7-4.EL3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14125"/>
      <state state_ref="oval:org.mitre.oval:ste:9731"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30666" version="1" comment="kernel is earlier than 0:2.4.21-9.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:9652"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30645" version="1" comment="kernel-smp is earlier than 0:2.4.21-9.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:9652"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30632" version="1" comment="kernel-hugemem is earlier than 0:2.4.21-9.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:9652"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30608" version="1" comment="kernel-doc is earlier than 0:2.4.21-9.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:9652"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30538" version="1" comment="kernel-smp-unsupported is earlier than 0:2.4.21-9.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14218"/>
      <state state_ref="oval:org.mitre.oval:ste:9652"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30516" version="1" comment="kernel-unsupported is earlier than 0:2.4.21-9.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14229"/>
      <state state_ref="oval:org.mitre.oval:ste:9652"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30491" version="1" comment="kernel-BOOT is earlier than 0:2.4.21-9.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14219"/>
      <state state_ref="oval:org.mitre.oval:ste:9652"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30296" version="1" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-9.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14372"/>
      <state state_ref="oval:org.mitre.oval:ste:9652"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30053" version="1" comment="kernel-source is earlier than 0:2.4.21-9.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14186"/>
      <state state_ref="oval:org.mitre.oval:ste:9652"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2651" version="1" check="all" comment="mozilla RPM is earlier than 37:1.7.10-1.4.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <oval-def:note>Multiple RPMs were updated in this release, but all but mozilla-nspr have mozilla-with-their-same-version as an installation dependency.  So, if mozilla is up to date, mozilla-chat, mozilla-devel, ... , mozilla-js-debugger are all up to date.  Mozilla itself requires that mozilla-nspr and mozilla-nss be installed with the same version as itself.  This closes the loop -- if mozilla is up to date, so are the other mozilla-FOO RPMs.</oval-def:note>
      </oval-def:notes>
      <object object_ref="oval:org.mitre.oval:obj:1519"/>
      <state state_ref="oval:org.mitre.oval:ste:2476"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:2650" version="1" check="all" comment="/usr/bin/mozilla is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1030"/>
      <state state_ref="oval:org.mitre.oval:ste:2475"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33842" version="1" comment="mysql-devel is earlier than 0:4.1.20-2.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14481"/>
      <state state_ref="oval:org.mitre.oval:ste:10288"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33840" version="1" comment="mysql-bench is earlier than 0:4.1.20-2.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14400"/>
      <state state_ref="oval:org.mitre.oval:ste:10288"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33592" version="1" comment="mysql is earlier than 0:4.1.20-2.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14355"/>
      <state state_ref="oval:org.mitre.oval:ste:10288"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33576" version="1" comment="mysql-server is earlier than 0:4.1.20-2.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14342"/>
      <state state_ref="oval:org.mitre.oval:ste:10288"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39991" version="1" comment="nss_db is earlier than 0:2.2-35.4.el5_5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14753"/>
      <state state_ref="oval:org.mitre.oval:ste:11564"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39379" version="1" comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14875"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39377" version="1" comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15005"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39367" version="1" comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.7.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13698"/>
      <state state_ref="oval:org.mitre.oval:ste:11103"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39365" version="1" comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15018"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39358" version="1" comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14763"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39352" version="1" comment="openoffice.org is earlier than 0:1.1.5-10.6.0.7.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:11103"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39338" version="1" comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14708"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39334" version="1" comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14990"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39333" version="1" comment="openoffice.org2 is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14437"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39322" version="1" comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14997"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39319" version="1" comment="openoffice.org-libs is earlier than 0:1.1.2-44.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14455"/>
      <state state_ref="oval:org.mitre.oval:ste:10915"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39318" version="1" comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14995"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39315" version="1" comment="openoffice.org-impress is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14707"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39313" version="1" comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14606"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39312" version="1" comment="openoffice.org-langpack-ko_KR is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14190"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39311" version="1" comment="openoffice.org-langpack-cy_GB is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14501"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39308" version="1" comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14696"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39306" version="1" comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15006"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39304" version="1" comment="openoffice.org-langpack-ru is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14766"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39303" version="1" comment="openoffice.org-graphicfilter is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14526"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39292" version="1" comment="openoffice.org-langpack-mr_IN is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14855"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39291" version="1" comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13974"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39288" version="1" comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14768"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39287" version="1" comment="openoffice.org-draw is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14828"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39282" version="1" comment="openoffice.org-langpack-te_IN is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14832"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39279" version="1" comment="openoffice.org-langpack-eu_ES is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14813"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39278" version="1" comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14971"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39275" version="1" comment="openoffice.org-langpack-ga_IE is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14635"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39272" version="1" comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14894"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39268" version="1" comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14090"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39263" version="1" comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14987"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39262" version="1" comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.7.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14215"/>
      <state state_ref="oval:org.mitre.oval:ste:11103"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39261" version="1" comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14369"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39258" version="1" comment="openoffice.org-langpack-ca_ES is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14778"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39256" version="1" comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14900"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39248" version="1" comment="openoffice.org is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39243" version="1" comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14322"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39241" version="1" comment="openoffice.org-langpack-pt_PT is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14571"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39238" version="1" comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14617"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39235" version="1" comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14649"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39232" version="1" comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14849"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39231" version="1" comment="openoffice.org-langpack-sv is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14529"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39230" version="1" comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14969"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39229" version="1" comment="openoffice.org-writer is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14758"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39226" version="1" comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14903"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39225" version="1" comment="openoffice.org-langpack-pl_PL is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14767"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39224" version="1" comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14901"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39218" version="1" comment="openoffice.org-sdk-doc is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14165"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39215" version="1" comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14834"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39214" version="1" comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14937"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39212" version="1" comment="openoffice.org-emailmerge is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14522"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39210" version="1" comment="openoffice.org-langpack-pa_IN is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14746"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39202" version="1" comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14569"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39200" version="1" comment="openoffice.org-langpack-et_EE is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14280"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39196" version="1" comment="openoffice.org-langpack-de is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14539"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39191" version="1" comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14738"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39190" version="1" comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14759"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39185" version="1" comment="openoffice.org-langpack-st_ZA is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14851"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39184" version="1" comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14456"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39173" version="1" comment="openoffice.org-pyuno is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14806"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39172" version="1" comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14321"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39165" version="1" comment="openoffice.org-langpack-bg_BG is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14589"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39161" version="1" comment="openoffice.org-langpack-th_TH is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14732"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39157" version="1" comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14744"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39154" version="1" comment="openoffice.org-langpack-bn is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14706"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39148" version="1" comment="openoffice.org-langpack-gl_ES is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14792"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39146" version="1" comment="openoffice.org-i18n is earlier than 0:1.1.2-44.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14215"/>
      <state state_ref="oval:org.mitre.oval:ste:10915"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39144" version="1" comment="openoffice.org-headless is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14864"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39140" version="1" comment="openoffice.org-sdk is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14664"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39138" version="1" comment="openoffice.org-xsltfilter is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14530"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39127" version="1" comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14892"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39113" version="1" comment="openoffice.org-langpack-he_IL is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14442"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39110" version="1" comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14831"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39107" version="1" comment="openoffice.org-langpack-zh_TW is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14392"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39102" version="1" comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14826"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39092" version="1" comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14193"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39087" version="1" comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14956"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39086" version="1" comment="openoffice.org-langpack-ml_IN is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14257"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39085" version="1" comment="openoffice.org-langpack-af_ZA is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14506"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39076" version="1" comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14651"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39074" version="1" comment="openoffice.org-langpack-or_IN is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14588"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39073" version="1" comment="openoffice.org-langpack-fr is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14772"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39070" version="1" comment="openoffice.org-langpack-nn_NO is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14779"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39067" version="1" comment="openoffice.org-langpack-hu_HU is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14694"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39063" version="1" comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14476"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39060" version="1" comment="openoffice.org-langpack-sl_SI is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14869"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39055" version="1" comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.7.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14455"/>
      <state state_ref="oval:org.mitre.oval:ste:11103"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39052" version="1" comment="openoffice.org-langpack-da_DK is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14748"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39050" version="1" comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14762"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39040" version="1" comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14660"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39038" version="1" comment="openoffice.org-langpack-ms_MY is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14787"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39034" version="1" comment="openoffice.org-langpack-tr_TR is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14886"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39029" version="1" comment="openoffice.org-langpack-fi_FI is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14625"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39028" version="1" comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14845"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39023" version="1" comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14885"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39022" version="1" comment="openoffice.org-langpack-as_IN is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14576"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39015" version="1" comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14401"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39010" version="1" comment="openoffice.org-langpack-ja_JP is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14155"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39008" version="1" comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15000"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38997" version="1" comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14728"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38990" version="1" comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14963"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38980" version="1" comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14754"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38979" version="1" comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14432"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38977" version="1" comment="openoffice.org-langpack-it is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14812"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38975" version="1" comment="openoffice.org-langpack-ur is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14671"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38961" version="1" comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14980"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38959" version="1" comment="openoffice.org-langpack-ta_IN is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14637"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38952" version="1" comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14986"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38951" version="1" comment="openoffice.org-langpack-nl is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14909"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38945" version="1" comment="openoffice.org-langpack-ar is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14872"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38940" version="1" comment="openoffice.org-langpack-sr_CS is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14189"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38936" version="1" comment="openoffice.org-langpack-sk_SK is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14266"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38930" version="1" comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14737"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38927" version="1" comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14716"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38906" version="1" comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14056"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38896" version="1" comment="openoffice.org-langpack-hi_IN is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14717"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38893" version="1" comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14600"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38888" version="1" comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14814"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38885" version="1" comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14976"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38884" version="1" comment="openoffice.org-testtools is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14135"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38874" version="1" comment="openoffice.org-langpack-el_GR is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14359"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38870" version="1" comment="openoffice.org-langpack-es is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14604"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38852" version="1" comment="openoffice.org-langpack-gu_IN is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14269"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38808" version="1" comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14472"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38807" version="1" comment="openoffice.org-langpack-lt_LT is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13921"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38790" version="1" comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14984"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38776" version="1" comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14599"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38758" version="1" comment="openoffice.org-math is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14557"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38745" version="1" comment="openoffice.org-calc is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14623"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38741" version="1" comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14882"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38740" version="1" comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14765"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38717" version="1" comment="openoffice.org-langpack-nb_NO is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14807"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38712" version="1" comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.6.0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14907"/>
      <state state_ref="oval:org.mitre.oval:ste:11330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38711" version="1" comment="openoffice.org-langpack-hr_HR is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14336"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38612" version="1" comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14562"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38603" version="1" comment="openoffice.org-javafilter is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14566"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38586" version="1" comment="openoffice.org-langpack-kn_IN is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14714"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38582" version="1" comment="openoffice.org-core is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14450"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38565" version="1" comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14865"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38548" version="1" comment="openoffice.org-base is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14548"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38453" version="1" comment="openoffice.org-langpack-zh_CN is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14839"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38381" version="1" comment="openoffice.org is earlier than 0:1.1.2-44.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:10915"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38378" version="1" comment="openoffice.org-langpack-pt_BR is earlier than 1:2.3.0-6.11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14822"/>
      <state state_ref="oval:org.mitre.oval:ste:11033"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31853" version="1" comment="gaim is earlier than 1:1.2.1-6.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14159"/>
      <state state_ref="oval:org.mitre.oval:ste:9945"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31563" version="1" comment="gaim is earlier than 1:1.2.1-6.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14159"/>
      <state state_ref="oval:org.mitre.oval:ste:9712"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32224" version="1" comment="losetup is earlier than 0:2.11y-31.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14579"/>
      <state state_ref="oval:org.mitre.oval:ste:10125"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32222" version="1" comment="util-linux is earlier than 0:2.11y-31.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14723"/>
      <state state_ref="oval:org.mitre.oval:ste:10125"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31892" version="1" comment="util-linux is earlier than 0:2.12a-16.EL4.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14723"/>
      <state state_ref="oval:org.mitre.oval:ste:10127"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31332" version="1" comment="mount is earlier than 0:2.11y-31.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14598"/>
      <state state_ref="oval:org.mitre.oval:ste:10125"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30770" version="1" comment="squid is earlier than 7:2.5.STABLE3-6.3E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14403"/>
      <state state_ref="oval:org.mitre.oval:ste:9703"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37981" version="1" comment="kernel-doc is earlier than 0:2.4.21-58.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10922"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37931" version="1" comment="kernel-BOOT is earlier than 0:2.4.21-58.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14219"/>
      <state state_ref="oval:org.mitre.oval:ste:10922"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37885" version="1" comment="kernel-source is earlier than 0:2.4.21-58.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14186"/>
      <state state_ref="oval:org.mitre.oval:ste:10922"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37846" version="1" comment="kernel-unsupported is earlier than 0:2.4.21-58.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14229"/>
      <state state_ref="oval:org.mitre.oval:ste:10922"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37817" version="1" comment="kernel-smp-unsupported is earlier than 0:2.4.21-58.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14218"/>
      <state state_ref="oval:org.mitre.oval:ste:10922"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37799" version="1" comment="kernel-hugemem is earlier than 0:2.4.21-58.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:10922"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37663" version="1" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-58.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14372"/>
      <state state_ref="oval:org.mitre.oval:ste:10922"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37117" version="1" comment="kernel-smp is earlier than 0:2.4.21-58.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:10922"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37063" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-92.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:10623"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37039" version="1" comment="kernel-debug is earlier than 0:2.6.18-92.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14957"/>
      <state state_ref="oval:org.mitre.oval:ste:10623"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37028" version="1" comment="kernel is earlier than 0:2.4.21-58.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10922"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37020" version="1" comment="kernel-smp is earlier than 0:2.6.9-67.0.20.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:10743"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37005" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-92.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:10623"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36996" version="1" comment="kernel-debug-devel is earlier than 0:2.6.18-92.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15023"/>
      <state state_ref="oval:org.mitre.oval:ste:10623"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36992" version="1" comment="kernel-kdump is earlier than 0:2.6.18-92.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:10623"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36981" version="1" comment="kernel is earlier than 0:2.6.18-92.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10623"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36972" version="1" comment="kernel-xenU is earlier than 0:2.6.9-67.0.20.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14301"/>
      <state state_ref="oval:org.mitre.oval:ste:10743"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36961" version="1" comment="kernel is earlier than 0:2.6.9-67.0.20.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10743"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36949" version="1" comment="kernel-devel is earlier than 0:2.6.9-67.0.20.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10743"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36937" version="1" comment="kernel-devel is earlier than 0:2.6.18-92.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10623"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36936" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-67.0.20.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:10743"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36894" version="1" comment="kernel-doc is earlier than 0:2.6.9-67.0.20.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10743"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36869" version="1" comment="kernel-doc is earlier than 0:2.6.18-92.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10623"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36840" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-67.0.20.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:10743"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36799" version="1" comment="kernel-headers is earlier than 0:2.6.18-92.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:10623"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36741" version="1" comment="kernel-xenU-devel is earlier than 0:2.6.9-67.0.20.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14060"/>
      <state state_ref="oval:org.mitre.oval:ste:10743"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36704" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-92.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:10623"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36703" version="1" comment="kernel-PAE is earlier than 0:2.6.18-92.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:10623"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36460" version="1" comment="kernel-xen is earlier than 0:2.6.18-92.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:10623"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36433" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-67.0.20.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:10743"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36412" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-67.0.20.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:10743"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36367" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-67.0.20.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:10743"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34794" version="1" comment="libgtop2-devel is earlier than 0:2.8.0-1.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14277"/>
      <state state_ref="oval:org.mitre.oval:ste:10451"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34547" version="1" comment="libgtop2 is earlier than 0:2.8.0-1.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15106"/>
      <state state_ref="oval:org.mitre.oval:ste:10451"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1198" version="1" check="at least one" comment="the version of comsvcs.dll is less than 2001.12.4414.53" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:849"/>
      <state state_ref="oval:org.mitre.oval:ste:1071"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36138" version="1" comment="kernel-xen is earlier than 0:2.6.18-53.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:10654"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36097" version="1" comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15023"/>
      <state state_ref="oval:org.mitre.oval:ste:10654"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36090" version="1" comment="kernel-xenU is earlier than 0:2.6.9-67.0.4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14301"/>
      <state state_ref="oval:org.mitre.oval:ste:10670"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36085" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:10654"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36084" version="1" comment="kernel-PAE is earlier than 0:2.6.18-53.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:10654"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36072" version="1" comment="kernel-devel is earlier than 0:2.6.9-67.0.4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10670"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36062" version="1" comment="kernel-headers is earlier than 0:2.6.18-53.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:10654"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36041" version="1" comment="kernel-doc is earlier than 0:2.6.9-67.0.4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10670"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36035" version="1" comment="kernel-doc is earlier than 0:2.6.18-53.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10654"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36030" version="1" comment="kernel-kdump is earlier than 0:2.6.18-53.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:10654"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36026" version="1" comment="kernel-devel is earlier than 0:2.6.18-53.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10654"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36007" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-67.0.4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:10670"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35990" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:10654"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35982" version="1" comment="kernel is earlier than 0:2.6.9-67.0.4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10670"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35969" version="1" comment="kernel is earlier than 0:2.6.18-53.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10654"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35901" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-67.0.4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:10670"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35832" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-67.0.4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:10670"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35766" version="1" comment="kernel-debug is earlier than 0:2.6.18-53.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14957"/>
      <state state_ref="oval:org.mitre.oval:ste:10654"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35662" version="1" comment="kernel-smp is earlier than 0:2.6.9-67.0.4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:10670"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35648" version="1" comment="kernel-debuginfo-common is earlier than 0:2.6.18-53.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14853"/>
      <state state_ref="oval:org.mitre.oval:ste:10654"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35611" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:10654"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35525" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-67.0.4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:10670"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35364" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-67.0.4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:10670"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35126" version="1" comment="kernel-xenU-devel is earlier than 0:2.6.9-67.0.4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14060"/>
      <state state_ref="oval:org.mitre.oval:ste:10670"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38101" version="1" comment="enscript is earlier than 0:1.6.4-4.1.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14574"/>
      <state state_ref="oval:org.mitre.oval:ste:10592"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37804" version="1" comment="enscript is earlier than 0:1.6.1-33.el4_7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14574"/>
      <state state_ref="oval:org.mitre.oval:ste:10846"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37704" version="1" comment="enscript is earlier than 0:1.6.1-24.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14574"/>
      <state state_ref="oval:org.mitre.oval:ste:10969"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34250" version="1" comment="php-devel is earlier than 0:5.1.6-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:10333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34226" version="1" comment="php-ldap is earlier than 0:5.1.6-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:10333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34217" version="1" comment="php-imap is earlier than 0:5.1.6-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:10333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34211" version="1" comment="php-bcmath is earlier than 0:5.1.6-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14639"/>
      <state state_ref="oval:org.mitre.oval:ste:10333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34207" version="1" comment="php-soap is earlier than 0:5.1.6-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14366"/>
      <state state_ref="oval:org.mitre.oval:ste:10333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34180" version="1" comment="php is earlier than 0:5.1.6-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:10333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34151" version="1" comment="php-pdo is earlier than 0:5.1.6-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14154"/>
      <state state_ref="oval:org.mitre.oval:ste:10333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34139" version="1" comment="php-dba is earlier than 0:5.1.6-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14512"/>
      <state state_ref="oval:org.mitre.oval:ste:10333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34129" version="1" comment="php-ncurses is earlier than 0:5.1.6-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14227"/>
      <state state_ref="oval:org.mitre.oval:ste:10333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34113" version="1" comment="php-mysql is earlier than 0:5.1.6-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:10333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34097" version="1" comment="php-cli is earlier than 0:5.1.6-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14922"/>
      <state state_ref="oval:org.mitre.oval:ste:10333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34065" version="1" comment="php-common is earlier than 0:5.1.6-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14841"/>
      <state state_ref="oval:org.mitre.oval:ste:10333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34061" version="1" comment="php-snmp is earlier than 0:5.1.6-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14508"/>
      <state state_ref="oval:org.mitre.oval:ste:10333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34056" version="1" comment="php-pgsql is earlier than 0:5.1.6-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:10333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34013" version="1" comment="php-gd is earlier than 0:5.1.6-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14335"/>
      <state state_ref="oval:org.mitre.oval:ste:10333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33993" version="1" comment="php-xmlrpc is earlier than 0:5.1.6-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14445"/>
      <state state_ref="oval:org.mitre.oval:ste:10333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33924" version="1" comment="php-xml is earlier than 0:5.1.6-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14560"/>
      <state state_ref="oval:org.mitre.oval:ste:10333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33453" version="1" comment="php-mbstring is earlier than 0:5.1.6-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13746"/>
      <state state_ref="oval:org.mitre.oval:ste:10333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33397" version="1" comment="php-odbc is earlier than 0:5.1.6-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:10333"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31062" version="1" comment="cups-devel is earlier than 1:1.1.17-13.3.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:9722"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30949" version="1" comment="cups is earlier than 1:1.1.17-13.3.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:9722"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30852" version="1" comment="cups-libs is earlier than 1:1.1.17-13.3.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:9722"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32179" version="1" comment="nss_ldap is earlier than 0:207-17" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14699"/>
      <state state_ref="oval:org.mitre.oval:ste:9824"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32086" version="1" comment="openldap is earlier than 0:2.0.27-20" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14650"/>
      <state state_ref="oval:org.mitre.oval:ste:10006"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32018" version="1" comment="openldap-devel is earlier than 0:2.0.27-20" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14680"/>
      <state state_ref="oval:org.mitre.oval:ste:10006"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31961" version="1" comment="openldap-servers is earlier than 0:2.0.27-20" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14676"/>
      <state state_ref="oval:org.mitre.oval:ste:10006"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31815" version="1" comment="openldap-clients is earlier than 0:2.0.27-20" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13745"/>
      <state state_ref="oval:org.mitre.oval:ste:10006"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36545" version="1" comment="evolution-devel is earlier than 0:2.8.0-40.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14585"/>
      <state state_ref="oval:org.mitre.oval:ste:10821"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36496" version="1" comment="evolution is earlier than 0:2.8.0-40.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14477"/>
      <state state_ref="oval:org.mitre.oval:ste:10821"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36362" version="1" comment="evolution28-devel is earlier than 0:2.8.0-53.el4_6.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14947"/>
      <state state_ref="oval:org.mitre.oval:ste:10782"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36352" version="1" comment="evolution is earlier than 0:2.0.2-35.0.4.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14477"/>
      <state state_ref="oval:org.mitre.oval:ste:10412"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36296" version="1" comment="evolution-devel is earlier than 0:2.0.2-35.0.4.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14585"/>
      <state state_ref="oval:org.mitre.oval:ste:10412"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36237" version="1" comment="evolution28 is earlier than 0:2.8.0-53.el4_6.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15104"/>
      <state state_ref="oval:org.mitre.oval:ste:10782"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31970" version="1" comment="bzip2-devel is earlier than 0:1.0.2-11.EL3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14253"/>
      <state state_ref="oval:org.mitre.oval:ste:10016"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31944" version="1" comment="bzip2 is earlier than 0:1.0.2-11.EL3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14678"/>
      <state state_ref="oval:org.mitre.oval:ste:10016"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31845" version="1" comment="bzip2 is earlier than 0:1.0.2-13.EL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14678"/>
      <state state_ref="oval:org.mitre.oval:ste:9959"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31594" version="1" comment="bzip2-libs is earlier than 0:1.0.2-11.EL3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14666"/>
      <state state_ref="oval:org.mitre.oval:ste:10016"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31440" version="1" comment="bzip2-devel is earlier than 0:1.0.2-13.EL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14253"/>
      <state state_ref="oval:org.mitre.oval:ste:9959"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30992" version="1" comment="bzip2-libs is earlier than 0:1.0.2-13.EL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14666"/>
      <state state_ref="oval:org.mitre.oval:ste:9959"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2939" version="1" check="at least one" comment="evolution version is less than 1.2.2-5" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1680"/>
      <state state_ref="oval:org.mitre.oval:ste:2754"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38337" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-0.32.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10961"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38326" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.32.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10961"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38323" version="1" comment="seamonkey is earlier than 0:1.0.9-0.32.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10961"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38309" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-35.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10527"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38278" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-35.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10527"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38241" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.32.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:10961"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38238" version="1" comment="thunderbird is earlier than 0:1.5.0.12-19.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:10996"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38228" version="1" comment="seamonkey is earlier than 0:1.0.9-35.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10527"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38221" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.32.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:10961"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38186" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-0.32.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:10961"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38184" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-35.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10527"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38181" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.32.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10961"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38173" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-0.32.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:10961"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38135" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-0.32.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10961"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37944" version="1" comment="thunderbird is earlier than 0:2.0.0.21-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:10319"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37943" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-35.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10527"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37433" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-35.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10527"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37355" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-0.32.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10961"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40301" version="1" comment="firefox is earlier than 0:3.0.18-1.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:11481"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40174" version="1" comment="xulrunner-devel is earlier than 0:1.9.0.18-1.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15100"/>
      <state state_ref="oval:org.mitre.oval:ste:11088"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39897" version="1" comment="firefox is earlier than 0:3.0.18-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:11289"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39533" version="1" comment="xulrunner is earlier than 0:1.9.0.18-1.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15057"/>
      <state state_ref="oval:org.mitre.oval:ste:11088"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39323" version="1" comment="xulrunner-devel-unstable is earlier than 0:1.9.0.18-1.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15048"/>
      <state state_ref="oval:org.mitre.oval:ste:11088"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29839" version="1" comment="redhat-config-nfs is earlier than 0:1.0.13-6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14412"/>
      <state state_ref="oval:org.mitre.oval:ste:9514"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38628" version="1" comment="krb5-devel is earlier than 0:1.3.4-60.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14100"/>
      <state state_ref="oval:org.mitre.oval:ste:11181"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38594" version="1" comment="krb5 is earlier than 0:1.2.7-70" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14120"/>
      <state state_ref="oval:org.mitre.oval:ste:10652"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38566" version="1" comment="krb5-workstation is earlier than 0:1.3.4-60.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14279"/>
      <state state_ref="oval:org.mitre.oval:ste:11181"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38522" version="1" comment="krb5-libs is earlier than 0:1.3.4-60.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14395"/>
      <state state_ref="oval:org.mitre.oval:ste:11181"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38469" version="1" comment="krb5-libs is earlier than 0:1.2.7-70" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14395"/>
      <state state_ref="oval:org.mitre.oval:ste:10652"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38393" version="1" comment="krb5 is earlier than 0:1.3.4-60.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14120"/>
      <state state_ref="oval:org.mitre.oval:ste:11181"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38311" version="1" comment="krb5-workstation is earlier than 0:1.2.7-70" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14279"/>
      <state state_ref="oval:org.mitre.oval:ste:10652"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38275" version="1" comment="krb5-devel is earlier than 0:1.2.7-70" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14100"/>
      <state state_ref="oval:org.mitre.oval:ste:10652"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38266" version="1" comment="krb5-server is earlier than 0:1.2.7-70" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14452"/>
      <state state_ref="oval:org.mitre.oval:ste:10652"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38185" version="1" comment="krb5-server is earlier than 0:1.3.4-60.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14452"/>
      <state state_ref="oval:org.mitre.oval:ste:11181"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35476" version="1" comment="hpijs is earlier than 0:1.6.7-4.1.el5_0.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14471"/>
      <state state_ref="oval:org.mitre.oval:ste:9720"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35432" version="1" comment="libsane-hpaio is earlier than 0:1.6.7-4.1.el5_0.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14491"/>
      <state state_ref="oval:org.mitre.oval:ste:9720"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35375" version="1" comment="hplip is earlier than 0:1.6.7-4.1.el5_0.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14793"/>
      <state state_ref="oval:org.mitre.oval:ste:9720"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38908" version="1" comment="cyrus-imapd-perl is earlier than 0:2.3.7-2.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14774"/>
      <state state_ref="oval:org.mitre.oval:ste:10691"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38902" version="1" comment="cyrus-imapd-devel is earlier than 0:2.2.12-10.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14695"/>
      <state state_ref="oval:org.mitre.oval:ste:11100"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38850" version="1" comment="cyrus-imapd-utils is earlier than 0:2.3.7-2.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14555"/>
      <state state_ref="oval:org.mitre.oval:ste:10691"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38815" version="1" comment="cyrus-imapd-utils is earlier than 0:2.2.12-10.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14555"/>
      <state state_ref="oval:org.mitre.oval:ste:11100"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38803" version="1" comment="cyrus-imapd is earlier than 0:2.2.12-10.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14534"/>
      <state state_ref="oval:org.mitre.oval:ste:11100"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38783" version="1" comment="cyrus-imapd-nntp is earlier than 0:2.2.12-10.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14271"/>
      <state state_ref="oval:org.mitre.oval:ste:11100"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38744" version="1" comment="cyrus-imapd-murder is earlier than 0:2.2.12-10.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14681"/>
      <state state_ref="oval:org.mitre.oval:ste:11100"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38737" version="1" comment="cyrus-imapd is earlier than 0:2.3.7-2.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14534"/>
      <state state_ref="oval:org.mitre.oval:ste:10691"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38615" version="1" comment="cyrus-imapd-devel is earlier than 0:2.3.7-2.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14695"/>
      <state state_ref="oval:org.mitre.oval:ste:10691"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38571" version="1" comment="perl-Cyrus is earlier than 0:2.2.12-10.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14532"/>
      <state state_ref="oval:org.mitre.oval:ste:11100"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1205" version="1" check="at least one" comment="File %windir%\System32\Msw3prt.dll is less than 5.0.2195.2956" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:998"/>
      <state state_ref="oval:org.mitre.oval:ste:1077"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37471" version="1" comment="ed is earlier than 0:0.2-39.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15110"/>
      <state state_ref="oval:org.mitre.oval:ste:10815"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37238" version="1" comment="ed is earlier than 0:0.2-33.30E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15110"/>
      <state state_ref="oval:org.mitre.oval:ste:10904"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37191" version="1" comment="ed is earlier than 0:0.2-36.el4_7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15110"/>
      <state state_ref="oval:org.mitre.oval:ste:10890"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30625" version="1" comment="samba-common is earlier than 0:3.0.2-6.3E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14032"/>
      <state state_ref="oval:org.mitre.oval:ste:9727"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30618" version="1" comment="samba-swat is earlier than 0:3.0.2-6.3E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13707"/>
      <state state_ref="oval:org.mitre.oval:ste:9727"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30521" version="1" comment="samba is earlier than 0:3.0.2-6.3E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13931"/>
      <state state_ref="oval:org.mitre.oval:ste:9727"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29955" version="1" comment="samba-client is earlier than 0:3.0.2-6.3E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13861"/>
      <state state_ref="oval:org.mitre.oval:ste:9727"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31833" version="1" comment="cyrus-imapd is earlier than 0:2.2.12-3.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14534"/>
      <state state_ref="oval:org.mitre.oval:ste:9866"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31820" version="1" comment="perl-Cyrus is earlier than 0:2.2.12-3.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14532"/>
      <state state_ref="oval:org.mitre.oval:ste:9866"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31770" version="1" comment="cyrus-imapd-nntp is earlier than 0:2.2.12-3.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14271"/>
      <state state_ref="oval:org.mitre.oval:ste:9866"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31719" version="1" comment="cyrus-imapd-utils is earlier than 0:2.2.12-3.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14555"/>
      <state state_ref="oval:org.mitre.oval:ste:9866"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31340" version="1" comment="cyrus-imapd-devel is earlier than 0:2.2.12-3.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14695"/>
      <state state_ref="oval:org.mitre.oval:ste:9866"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30986" version="1" comment="cyrus-imapd-murder is earlier than 0:2.2.12-3.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14681"/>
      <state state_ref="oval:org.mitre.oval:ste:9866"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33045" version="1" comment="XFree86-doc is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14406"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33035" version="1" comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14121"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33029" version="1" comment="XFree86-twm is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13667"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33020" version="1" comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13712"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33004" version="1" comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.13.37" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14169"/>
      <state state_ref="oval:org.mitre.oval:ste:10190"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32991" version="1" comment="XFree86-tools is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13693"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32987" version="1" comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.13.37" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14624"/>
      <state state_ref="oval:org.mitre.oval:ste:10190"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32976" version="1" comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14127"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32970" version="1" comment="XFree86 is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14255"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32968" version="1" comment="XFree86-xdm is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13658"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32960" version="1" comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.13.37" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14168"/>
      <state state_ref="oval:org.mitre.oval:ste:10190"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32957" version="1" comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.13.37" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14478"/>
      <state state_ref="oval:org.mitre.oval:ste:10190"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32948" version="1" comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.13.37" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14515"/>
      <state state_ref="oval:org.mitre.oval:ste:10190"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32939" version="1" comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14315"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32898" version="1" comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.13.37" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14262"/>
      <state state_ref="oval:org.mitre.oval:ste:10190"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32888" version="1" comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.13.37" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14089"/>
      <state state_ref="oval:org.mitre.oval:ste:10190"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32885" version="1" comment="XFree86-Xvfb is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13644"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32871" version="1" comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.13.37" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14184"/>
      <state state_ref="oval:org.mitre.oval:ste:10190"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32869" version="1" comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14082"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32866" version="1" comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14067"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32851" version="1" comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14226"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32834" version="1" comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.13.37" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14580"/>
      <state state_ref="oval:org.mitre.oval:ste:10190"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32831" version="1" comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.13.37" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14097"/>
      <state state_ref="oval:org.mitre.oval:ste:10190"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32828" version="1" comment="XFree86-syriac-fonts is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14198"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32778" version="1" comment="XFree86-base-fonts is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14407"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32774" version="1" comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14281"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32767" version="1" comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.13.37" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14129"/>
      <state state_ref="oval:org.mitre.oval:ste:10190"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32761" version="1" comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.13.37" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14572"/>
      <state state_ref="oval:org.mitre.oval:ste:10190"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32757" version="1" comment="XFree86-devel is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14397"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32726" version="1" comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14288"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32715" version="1" comment="XFree86-font-utils is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14385"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32658" version="1" comment="XFree86-Xnest is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14053"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32653" version="1" comment="freetype-devel is earlier than 0:2.1.9-1.rhel4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14561"/>
      <state state_ref="oval:org.mitre.oval:ste:9787"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32627" version="1" comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14364"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32625" version="1" comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.13.37" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13643"/>
      <state state_ref="oval:org.mitre.oval:ste:10190"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32616" version="1" comment="freetype-devel is earlier than 0:2.1.4-4.0.rhel3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14561"/>
      <state state_ref="oval:org.mitre.oval:ste:10230"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32605" version="1" comment="freetype-demos is earlier than 0:2.1.9-1.rhel4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14713"/>
      <state state_ref="oval:org.mitre.oval:ste:9787"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32599" version="1" comment="freetype is earlier than 0:2.1.4-4.0.rhel3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14103"/>
      <state state_ref="oval:org.mitre.oval:ste:10230"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32586" version="1" comment="XFree86-libs is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14259"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32582" version="1" comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14260"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32534" version="1" comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14351"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32524" version="1" comment="XFree86-xfs is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14311"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32498" version="1" comment="XFree86-sdk is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14107"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32421" version="1" comment="xorg-x11 is earlier than 0:6.8.2-1.EL.13.37" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14592"/>
      <state state_ref="oval:org.mitre.oval:ste:10190"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32417" version="1" comment="freetype-utils is earlier than 0:2.1.9-1.rhel4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14720"/>
      <state state_ref="oval:org.mitre.oval:ste:9787"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32354" version="1" comment="XFree86-xauth is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14352"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32309" version="1" comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.13.37" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14553"/>
      <state state_ref="oval:org.mitre.oval:ste:10190"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32298" version="1" comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.13.37" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14031"/>
      <state state_ref="oval:org.mitre.oval:ste:10190"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32228" version="1" comment="XFree86-libs-data is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14326"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32221" version="1" comment="XFree86-truetype-fonts is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14354"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32112" version="1" comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-111.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14045"/>
      <state state_ref="oval:org.mitre.oval:ste:10287"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32106" version="1" comment="freetype is earlier than 0:2.1.9-1.rhel4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14103"/>
      <state state_ref="oval:org.mitre.oval:ste:9787"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32051" version="1" comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.13.37" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14595"/>
      <state state_ref="oval:org.mitre.oval:ste:10190"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32049" version="1" comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.13.37" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14291"/>
      <state state_ref="oval:org.mitre.oval:ste:10190"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31984" version="1" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-32.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14372"/>
      <state state_ref="oval:org.mitre.oval:ste:9821"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31960" version="1" comment="kernel-smp is earlier than 0:2.4.21-32.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:9821"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31941" version="1" comment="kernel-source is earlier than 0:2.4.21-32.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14186"/>
      <state state_ref="oval:org.mitre.oval:ste:9821"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31870" version="1" comment="kernel-BOOT is earlier than 0:2.4.21-32.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14219"/>
      <state state_ref="oval:org.mitre.oval:ste:9821"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31839" version="1" comment="kernel is earlier than 0:2.4.21-32.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:9821"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31760" version="1" comment="kernel-doc is earlier than 0:2.4.21-32.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:9821"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31657" version="1" comment="kernel-unsupported is earlier than 0:2.4.21-32.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14229"/>
      <state state_ref="oval:org.mitre.oval:ste:9821"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31642" version="1" comment="kernel-smp-unsupported is earlier than 0:2.4.21-32.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14218"/>
      <state state_ref="oval:org.mitre.oval:ste:9821"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31213" version="1" comment="kernel-hugemem is earlier than 0:2.4.21-32.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:9821"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:792" version="1" comment="the version of Jscript.dll is less than 5.1.0.12512" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:564"/>
      <state state_ref="oval:org.mitre.oval:ste:710"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:42119" version="1" comment="the version of Jscript.dll is greater than or equal to 5.5.0.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:564"/>
      <state state_ref="oval:org.mitre.oval:ste:12296"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1206" version="1" comment="the version of Jscript.dll is less than 5.6.0.8831" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:564"/>
      <state state_ref="oval:org.mitre.oval:ste:1078"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35486" version="1" comment="perl-DB_File is earlier than 2:1.806-97.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14438"/>
      <state state_ref="oval:org.mitre.oval:ste:9880"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35425" version="1" comment="perl-suidperl is earlier than 4:5.8.8-10.el5_0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13815"/>
      <state state_ref="oval:org.mitre.oval:ste:10567"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35335" version="1" comment="perl is earlier than 3:5.8.5-36.el4_5.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14460"/>
      <state state_ref="oval:org.mitre.oval:ste:10631"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35292" version="1" comment="perl-suidperl is earlier than 3:5.8.5-36.el4_5.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13815"/>
      <state state_ref="oval:org.mitre.oval:ste:10631"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35264" version="1" comment="perl-CGI is earlier than 2:2.89-97.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14319"/>
      <state state_ref="oval:org.mitre.oval:ste:10614"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35250" version="1" comment="perl is earlier than 2:5.8.0-97.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14460"/>
      <state state_ref="oval:org.mitre.oval:ste:10637"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35122" version="1" comment="perl-CPAN is earlier than 2:1.61-97.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14597"/>
      <state state_ref="oval:org.mitre.oval:ste:10646"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35039" version="1" comment="perl is earlier than 4:5.8.8-10.el5_0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14460"/>
      <state state_ref="oval:org.mitre.oval:ste:10567"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34857" version="1" comment="perl-suidperl is earlier than 2:5.8.0-97.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13815"/>
      <state state_ref="oval:org.mitre.oval:ste:10637"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39339" version="1" comment="squirrelmail is earlier than 0:1.4.8-16.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14331"/>
      <state state_ref="oval:org.mitre.oval:ste:11373"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38987" version="1" comment="squirrelmail is earlier than 0:1.4.8-5.el4_8.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14331"/>
      <state state_ref="oval:org.mitre.oval:ste:11468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38545" version="1" comment="squirrelmail is earlier than 0:1.4.8-5.el5_4.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14331"/>
      <state state_ref="oval:org.mitre.oval:ste:11096"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34881" version="1" comment="wireshark-gnome is earlier than 0:0.99.6-EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14663"/>
      <state state_ref="oval:org.mitre.oval:ste:10620"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34784" version="1" comment="wireshark-gnome is earlier than 0:0.99.6-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14663"/>
      <state state_ref="oval:org.mitre.oval:ste:10619"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34755" version="1" comment="wireshark is earlier than 0:0.99.6-EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14711"/>
      <state state_ref="oval:org.mitre.oval:ste:10620"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34336" version="1" comment="wireshark is earlier than 0:0.99.6-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14711"/>
      <state state_ref="oval:org.mitre.oval:ste:10619"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37416" version="1" comment="openldap-devel is earlier than 0:2.3.27-8.el5_2.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14680"/>
      <state state_ref="oval:org.mitre.oval:ste:10419"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37374" version="1" comment="openldap-servers is earlier than 0:2.3.27-8.el5_2.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14676"/>
      <state state_ref="oval:org.mitre.oval:ste:10419"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37272" version="1" comment="openldap-devel is earlier than 0:2.2.13-8.el4_6.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14680"/>
      <state state_ref="oval:org.mitre.oval:ste:10523"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37263" version="1" comment="openldap is earlier than 0:2.2.13-8.el4_6.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14650"/>
      <state state_ref="oval:org.mitre.oval:ste:10523"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37250" version="1" comment="openldap-clients is earlier than 0:2.2.13-8.el4_6.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13745"/>
      <state state_ref="oval:org.mitre.oval:ste:10523"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37196" version="1" comment="openldap is earlier than 0:2.3.27-8.el5_2.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14650"/>
      <state state_ref="oval:org.mitre.oval:ste:10419"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37164" version="1" comment="openldap-servers-sql is earlier than 0:2.2.13-8.el4_6.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14387"/>
      <state state_ref="oval:org.mitre.oval:ste:10523"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37106" version="1" comment="openldap-clients is earlier than 0:2.3.27-8.el5_2.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13745"/>
      <state state_ref="oval:org.mitre.oval:ste:10419"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37032" version="1" comment="compat-openldap is earlier than 0:2.3.27_2.2.29-8.el5_2.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14705"/>
      <state state_ref="oval:org.mitre.oval:ste:10647"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36938" version="1" comment="openldap-servers is earlier than 0:2.2.13-8.el4_6.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14676"/>
      <state state_ref="oval:org.mitre.oval:ste:10523"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36875" version="1" comment="compat-openldap is earlier than 0:2.1.30-8.el4_6.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14705"/>
      <state state_ref="oval:org.mitre.oval:ste:9999"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36462" version="1" comment="openldap-servers-sql is earlier than 0:2.3.27-8.el5_2.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14387"/>
      <state state_ref="oval:org.mitre.oval:ste:10419"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33336" version="1" comment="seamonkey-devel is earlier than 0:1.0.7-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10336"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33300" version="1" comment="seamonkey-devel is earlier than 0:1.0.7-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:9994"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33284" version="1" comment="devhelp is earlier than 0:0.10-0.6.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14497"/>
      <state state_ref="oval:org.mitre.oval:ste:10299"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33273" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.7-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:10336"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33266" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.7-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:9994"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33263" version="1" comment="seamonkey-nss is earlier than 0:1.0.7-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:9994"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33259" version="1" comment="seamonkey is earlier than 0:1.0.7-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10336"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33251" version="1" comment="seamonkey-nss is earlier than 0:1.0.7-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:10336"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33239" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.7-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:10336"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33236" version="1" comment="seamonkey-nspr is earlier than 0:1.0.7-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:10336"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33229" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.7-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10336"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33227" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.7-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:9994"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33195" version="1" comment="devhelp-devel is earlier than 0:0.10-0.6.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14520"/>
      <state state_ref="oval:org.mitre.oval:ste:10299"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33183" version="1" comment="seamonkey-mail is earlier than 0:1.0.7-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:9994"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33153" version="1" comment="seamonkey-mail is earlier than 0:1.0.7-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10336"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33146" version="1" comment="seamonkey is earlier than 0:1.0.7-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:9994"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33095" version="1" comment="seamonkey-chat is earlier than 0:1.0.7-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:9994"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33015" version="1" comment="seamonkey-chat is earlier than 0:1.0.7-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10336"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32996" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.7-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:9994"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32844" version="1" comment="thunderbird is earlier than 0:1.5.0.9-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:10240"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32815" version="1" comment="firefox is earlier than 0:1.5.0.9-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10240"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32785" version="1" comment="seamonkey-nspr is earlier than 0:1.0.7-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:9994"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32408" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.7-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10336"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32352" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.7-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:9994"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1207" version="1" check="at least one" comment="the version of comsvcs.dll is less than 2001.12.4720.130" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:849"/>
      <state state_ref="oval:org.mitre.oval:ste:1079"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36140" version="1" comment="libsmi-devel is earlier than 0:0.4.5-3.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14861"/>
      <state state_ref="oval:org.mitre.oval:ste:10642"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36111" version="1" comment="wireshark is earlier than 0:0.99.7-EL3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14711"/>
      <state state_ref="oval:org.mitre.oval:ste:10698"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36043" version="1" comment="wireshark-gnome is earlier than 0:0.99.7-EL3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14663"/>
      <state state_ref="oval:org.mitre.oval:ste:10698"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35411" version="1" comment="libsmi is earlier than 0:0.4.5-3.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14945"/>
      <state state_ref="oval:org.mitre.oval:ste:10642"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33865" version="1" comment="file is earlier than 0:4.17-9.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14618"/>
      <state state_ref="oval:org.mitre.oval:ste:10115"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33575" version="1" comment="file is earlier than 0:4.10-3.EL4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14618"/>
      <state state_ref="oval:org.mitre.oval:ste:10116"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31357" version="1" comment="mailman is earlier than 3:2.1.5-31.rhel4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14521"/>
      <state state_ref="oval:org.mitre.oval:ste:9611"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31345" version="1" comment="mailman is earlier than 3:2.1.5-24.rhel3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14521"/>
      <state state_ref="oval:org.mitre.oval:ste:9684"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34477" version="1" comment="iscsi-initiator-utils is earlier than 0:6.2.0.742-0.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14897"/>
      <state state_ref="oval:org.mitre.oval:ste:10324"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32744" version="1" comment="quagga-devel is earlier than 0:0.98.3-2.4E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14340"/>
      <state state_ref="oval:org.mitre.oval:ste:10031"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32544" version="1" comment="quagga-contrib is earlier than 0:0.98.3-2.4E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14111"/>
      <state state_ref="oval:org.mitre.oval:ste:10031"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32541" version="1" comment="quagga is earlier than 0:0.96.2-11.3E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14268"/>
      <state state_ref="oval:org.mitre.oval:ste:9902"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32471" version="1" comment="quagga is earlier than 0:0.98.3-2.4E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14268"/>
      <state state_ref="oval:org.mitre.oval:ste:10031"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1223" version="1" check="at least one" comment="openoffice version is less than 1.1.0-15.EL" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:857"/>
      <state state_ref="oval:org.mitre.oval:ste:1095"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1222" version="1" check="at least one" comment="/usr/bin/oocalc is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:856"/>
      <state state_ref="oval:org.mitre.oval:ste:1094"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1221" version="1" check="at least one" comment="/usr/bin/oocalc is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:856"/>
      <state state_ref="oval:org.mitre.oval:ste:1093"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1220" version="1" check="at least one" comment="/usr/bin/oocalc is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:856"/>
      <state state_ref="oval:org.mitre.oval:ste:1092"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1219" version="1" check="at least one" comment="/usr/bin/oodraw is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:855"/>
      <state state_ref="oval:org.mitre.oval:ste:1091"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1218" version="1" check="at least one" comment="/usr/bin/oodraw is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:855"/>
      <state state_ref="oval:org.mitre.oval:ste:1090"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1217" version="1" check="at least one" comment="/usr/bin/oodraw is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:855"/>
      <state state_ref="oval:org.mitre.oval:ste:1089"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1216" version="1" check="at least one" comment="/usr/bin/ooffice is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:854"/>
      <state state_ref="oval:org.mitre.oval:ste:1088"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1215" version="1" check="at least one" comment="/usr/bin/ooffice is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:854"/>
      <state state_ref="oval:org.mitre.oval:ste:1087"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1214" version="1" check="at least one" comment="/usr/bin/ooffice is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:854"/>
      <state state_ref="oval:org.mitre.oval:ste:1086"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1213" version="1" check="at least one" comment="/usr/bin/ooimpress is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:853"/>
      <state state_ref="oval:org.mitre.oval:ste:1085"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1212" version="1" check="at least one" comment="/usr/bin/ooimpress is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:853"/>
      <state state_ref="oval:org.mitre.oval:ste:1084"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1211" version="1" check="at least one" comment="/usr/bin/ooimpress is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:853"/>
      <state state_ref="oval:org.mitre.oval:ste:1083"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1210" version="1" check="at least one" comment="/usr/bin/oowriter is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:852"/>
      <state state_ref="oval:org.mitre.oval:ste:1082"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1209" version="1" check="at least one" comment="/usr/bin/oowriter is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:852"/>
      <state state_ref="oval:org.mitre.oval:ste:1081"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1208" version="1" check="at least one" comment="/usr/bin/oowriter is executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:852"/>
      <state state_ref="oval:org.mitre.oval:ste:1080"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30107" version="1" comment="mutt is earlier than 5:1.4.1-3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14378"/>
      <state state_ref="oval:org.mitre.oval:ste:9363"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38709" version="1" comment="wireshark-gnome is earlier than 0:1.0.8-1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14663"/>
      <state state_ref="oval:org.mitre.oval:ste:11241"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38670" version="1" comment="wireshark is earlier than 0:1.0.8-1.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14711"/>
      <state state_ref="oval:org.mitre.oval:ste:11277"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38635" version="1" comment="wireshark is earlier than 0:1.0.8-1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14711"/>
      <state state_ref="oval:org.mitre.oval:ste:11241"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38619" version="1" comment="wireshark-gnome is earlier than 0:1.0.8-1.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14663"/>
      <state state_ref="oval:org.mitre.oval:ste:11277"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38534" version="1" comment="wireshark-gnome is earlier than 0:1.0.8-EL3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14663"/>
      <state state_ref="oval:org.mitre.oval:ste:11268"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38258" version="1" comment="wireshark is earlier than 0:1.0.8-EL3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14711"/>
      <state state_ref="oval:org.mitre.oval:ste:11268"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33012" version="1" comment="kdegraphics is earlier than 7:3.1.3-3.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14241"/>
      <state state_ref="oval:org.mitre.oval:ste:10060"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32922" version="1" comment="libtiff is earlier than 0:3.6.1-12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14341"/>
      <state state_ref="oval:org.mitre.oval:ste:10113"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32843" version="1" comment="libtiff-devel is earlier than 0:3.5.7-25.el3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14174"/>
      <state state_ref="oval:org.mitre.oval:ste:10047"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32819" version="1" comment="kdegraphics-devel is earlier than 7:3.1.3-3.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14596"/>
      <state state_ref="oval:org.mitre.oval:ste:10060"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32413" version="1" comment="libtiff-devel is earlier than 0:3.6.1-12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14174"/>
      <state state_ref="oval:org.mitre.oval:ste:10113"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32069" version="1" comment="libtiff is earlier than 0:3.5.7-25.el3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14341"/>
      <state state_ref="oval:org.mitre.oval:ste:10047"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37910" version="1" comment="nfs-utils is earlier than 0:1.0.6-93.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14333"/>
      <state state_ref="oval:org.mitre.oval:ste:10583"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36762" version="1" comment="nfs-utils is earlier than 1:1.0.9-35z.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14333"/>
      <state state_ref="oval:org.mitre.oval:ste:10807"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39442" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-89.0.11.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:11485"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39435" version="1" comment="kernel-doc is earlier than 0:2.6.9-89.0.11.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:11485"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39407" version="1" comment="kernel-devel is earlier than 0:2.6.9-89.0.11.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:11485"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39357" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-89.0.11.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:11485"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39331" version="1" comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.11.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14060"/>
      <state state_ref="oval:org.mitre.oval:ste:11485"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39316" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.11.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:11485"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39274" version="1" comment="kernel is earlier than 0:2.6.9-89.0.11.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:11485"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39101" version="1" comment="kernel-xenU is earlier than 0:2.6.9-89.0.11.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14301"/>
      <state state_ref="oval:org.mitre.oval:ste:11485"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39054" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.11.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:11485"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38568" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.11.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:11485"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38473" version="1" comment="kernel-smp is earlier than 0:2.6.9-89.0.11.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:11485"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30564" version="1" comment="lvm is earlier than 0:1.0.8-5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13777"/>
      <state state_ref="oval:org.mitre.oval:ste:9313"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34767" version="1" comment="krb5-server is earlier than 0:1.3.4-49" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14452"/>
      <state state_ref="oval:org.mitre.oval:ste:10231"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34749" version="1" comment="krb5-libs is earlier than 0:1.3.4-49" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14395"/>
      <state state_ref="oval:org.mitre.oval:ste:10231"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34729" version="1" comment="krb5-server is earlier than 0:1.5-26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14452"/>
      <state state_ref="oval:org.mitre.oval:ste:10317"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34728" version="1" comment="krb5-workstation is earlier than 0:1.5-26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14279"/>
      <state state_ref="oval:org.mitre.oval:ste:10317"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34660" version="1" comment="krb5-devel is earlier than 0:1.3.4-49" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14100"/>
      <state state_ref="oval:org.mitre.oval:ste:10231"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34640" version="1" comment="krb5-workstation is earlier than 0:1.3.4-49" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14279"/>
      <state state_ref="oval:org.mitre.oval:ste:10231"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34575" version="1" comment="krb5-libs is earlier than 0:1.5-26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14395"/>
      <state state_ref="oval:org.mitre.oval:ste:10317"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34350" version="1" comment="krb5 is earlier than 0:1.5-26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14120"/>
      <state state_ref="oval:org.mitre.oval:ste:10317"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34238" version="1" comment="krb5 is earlier than 0:1.2.7-66" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14120"/>
      <state state_ref="oval:org.mitre.oval:ste:10437"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34202" version="1" comment="krb5 is earlier than 0:1.3.4-49" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14120"/>
      <state state_ref="oval:org.mitre.oval:ste:10231"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34195" version="1" comment="krb5-devel is earlier than 0:1.5-26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14100"/>
      <state state_ref="oval:org.mitre.oval:ste:10317"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34171" version="1" comment="krb5-libs is earlier than 0:1.2.7-66" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14395"/>
      <state state_ref="oval:org.mitre.oval:ste:10437"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34147" version="1" comment="krb5-devel is earlier than 0:1.2.7-66" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14100"/>
      <state state_ref="oval:org.mitre.oval:ste:10437"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33767" version="1" comment="krb5-server is earlier than 0:1.2.7-66" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14452"/>
      <state state_ref="oval:org.mitre.oval:ste:10437"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33627" version="1" comment="krb5-workstation is earlier than 0:1.2.7-66" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14279"/>
      <state state_ref="oval:org.mitre.oval:ste:10437"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1398" version="1" comment="the version of mf3216.dll is less than 5.0.2195.6898" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:858"/>
      <state state_ref="oval:org.mitre.oval:ste:1260"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1227" version="1" comment="the version of Gdi32.dll is less than 5.0.2195.7069" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:622"/>
      <state state_ref="oval:org.mitre.oval:ste:1099"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38117" version="1" comment="xen-libs is earlier than 0:3.0.3-64.el5_2.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14810"/>
      <state state_ref="oval:org.mitre.oval:ste:10814"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38017" version="1" comment="xen-devel is earlier than 0:3.0.3-64.el5_2.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14567"/>
      <state state_ref="oval:org.mitre.oval:ste:10814"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37962" version="1" comment="xen is earlier than 0:3.0.3-64.el5_2.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14646"/>
      <state state_ref="oval:org.mitre.oval:ste:10814"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36713" version="1" comment="nss_ldap is earlier than 0:253-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14699"/>
      <state state_ref="oval:org.mitre.oval:ste:10306"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36591" version="1" comment="nss_ldap is earlier than 0:253-5.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14699"/>
      <state state_ref="oval:org.mitre.oval:ste:10632"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31983" version="1" comment="openssl-devel is earlier than 0:0.9.7a-33.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13920"/>
      <state state_ref="oval:org.mitre.oval:ste:10008"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31947" version="1" comment="openssl096b is earlier than 0:0.9.6b-22.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14258"/>
      <state state_ref="oval:org.mitre.oval:ste:10023"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31889" version="1" comment="openssl is earlier than 0:0.9.7a-43.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13882"/>
      <state state_ref="oval:org.mitre.oval:ste:9056"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31812" version="1" comment="openssl-perl is earlier than 0:0.9.7a-33.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14122"/>
      <state state_ref="oval:org.mitre.oval:ste:10008"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31774" version="1" comment="openssl-devel is earlier than 0:0.9.7a-43.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13920"/>
      <state state_ref="oval:org.mitre.oval:ste:9056"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31638" version="1" comment="openssl-perl is earlier than 0:0.9.7a-43.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14122"/>
      <state state_ref="oval:org.mitre.oval:ste:9056"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31624" version="1" comment="openssl is earlier than 0:0.9.7a-33.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13882"/>
      <state state_ref="oval:org.mitre.oval:ste:10008"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31581" version="1" comment="openssl096b is earlier than 0:0.9.6b-16.22.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14258"/>
      <state state_ref="oval:org.mitre.oval:ste:9454"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1228" version="1" check="at least one" comment="the version of comsvcs.dll is less than 2000.2.3511.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:849"/>
      <state state_ref="oval:org.mitre.oval:ste:1100"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30773" version="1" comment="php-mysql is earlier than 0:4.3.2-11.1.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:9545"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30765" version="1" comment="php-pgsql is earlier than 0:4.3.2-11.1.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:9545"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30741" version="1" comment="php is earlier than 0:4.3.2-11.1.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:9545"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30729" version="1" comment="php-odbc is earlier than 0:4.3.2-11.1.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:9545"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30707" version="1" comment="php-imap is earlier than 0:4.3.2-11.1.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:9545"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30554" version="1" comment="php-ldap is earlier than 0:4.3.2-11.1.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:9545"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32719" version="1" comment="rh-postgresql-test is earlier than 0:7.3.15-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14347"/>
      <state state_ref="oval:org.mitre.oval:ste:10207"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32648" version="1" comment="postgresql-libs is earlier than 0:7.4.13-2.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14383"/>
      <state state_ref="oval:org.mitre.oval:ste:9669"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32628" version="1" comment="rh-postgresql is earlier than 0:7.3.15-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14320"/>
      <state state_ref="oval:org.mitre.oval:ste:10207"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32626" version="1" comment="postgresql-python is earlier than 0:7.4.13-2.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14546"/>
      <state state_ref="oval:org.mitre.oval:ste:9669"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32621" version="1" comment="rh-postgresql-pl is earlier than 0:7.3.15-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14453"/>
      <state state_ref="oval:org.mitre.oval:ste:10207"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32618" version="1" comment="rh-postgresql-server is earlier than 0:7.3.15-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14152"/>
      <state state_ref="oval:org.mitre.oval:ste:10207"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32604" version="1" comment="postgresql-jdbc is earlier than 0:7.4.13-2.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14547"/>
      <state state_ref="oval:org.mitre.oval:ste:9669"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32601" version="1" comment="rh-postgresql-contrib is earlier than 0:7.3.15-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13927"/>
      <state state_ref="oval:org.mitre.oval:ste:10207"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32564" version="1" comment="postgresql-pl is earlier than 0:7.4.13-2.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14537"/>
      <state state_ref="oval:org.mitre.oval:ste:9669"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32527" version="1" comment="rh-postgresql-libs is earlier than 0:7.3.15-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14436"/>
      <state state_ref="oval:org.mitre.oval:ste:10207"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32497" version="1" comment="rh-postgresql-python is earlier than 0:7.3.15-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14328"/>
      <state state_ref="oval:org.mitre.oval:ste:10207"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32472" version="1" comment="postgresql-server is earlier than 0:7.4.13-2.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14158"/>
      <state state_ref="oval:org.mitre.oval:ste:9669"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32465" version="1" comment="rh-postgresql-devel is earlier than 0:7.3.15-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14466"/>
      <state state_ref="oval:org.mitre.oval:ste:10207"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32392" version="1" comment="rh-postgresql-docs is earlier than 0:7.3.15-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13876"/>
      <state state_ref="oval:org.mitre.oval:ste:10207"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32278" version="1" comment="postgresql-devel is earlier than 0:7.4.13-2.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14290"/>
      <state state_ref="oval:org.mitre.oval:ste:9669"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32195" version="1" comment="rh-postgresql-tcl is earlier than 0:7.3.15-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13874"/>
      <state state_ref="oval:org.mitre.oval:ste:10207"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32101" version="1" comment="postgresql is earlier than 0:7.4.13-2.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14586"/>
      <state state_ref="oval:org.mitre.oval:ste:9669"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32038" version="1" comment="postgresql-tcl is earlier than 0:7.4.13-2.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14486"/>
      <state state_ref="oval:org.mitre.oval:ste:9669"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31976" version="1" comment="postgresql-docs is earlier than 0:7.4.13-2.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14365"/>
      <state state_ref="oval:org.mitre.oval:ste:9669"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31950" version="1" comment="postgresql-test is earlier than 0:7.4.13-2.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14367"/>
      <state state_ref="oval:org.mitre.oval:ste:9669"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31936" version="1" comment="rh-postgresql-jdbc is earlier than 0:7.3.15-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14295"/>
      <state state_ref="oval:org.mitre.oval:ste:10207"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31768" version="1" comment="postgresql-contrib is earlier than 0:7.4.13-2.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14293"/>
      <state state_ref="oval:org.mitre.oval:ste:9669"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31360" version="1" comment="mod_python is earlier than 0:3.1.3-5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13988"/>
      <state state_ref="oval:org.mitre.oval:ste:9863"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31355" version="1" comment="mod_python is earlier than 0:3.0.3-5.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13988"/>
      <state state_ref="oval:org.mitre.oval:ste:9838"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32538" version="1" comment="ethereal-gnome is earlier than 0:0.10.14-1.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14338"/>
      <state state_ref="oval:org.mitre.oval:ste:10068"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32466" version="1" comment="ethereal is earlier than 0:0.10.14-1.EL3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14030"/>
      <state state_ref="oval:org.mitre.oval:ste:9903"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32303" version="1" comment="ethereal-gnome is earlier than 0:0.10.14-1.EL3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14338"/>
      <state state_ref="oval:org.mitre.oval:ste:9903"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32039" version="1" comment="ethereal is earlier than 0:0.10.14-1.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14030"/>
      <state state_ref="oval:org.mitre.oval:ste:10068"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35550" version="1" comment="libpng10 is earlier than 0:1.0.13-18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14370"/>
      <state state_ref="oval:org.mitre.oval:ste:10040"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35548" version="1" comment="libpng10 is earlier than 0:1.0.16-3.el4_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14370"/>
      <state state_ref="oval:org.mitre.oval:ste:10613"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35536" version="1" comment="libpng-devel is earlier than 2:1.2.2-28" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14221"/>
      <state state_ref="oval:org.mitre.oval:ste:10517"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35492" version="1" comment="libpng10-devel is earlier than 0:1.0.13-18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13985"/>
      <state state_ref="oval:org.mitre.oval:ste:10040"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35461" version="1" comment="libpng-devel is earlier than 2:1.2.10-7.1.el5_0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14221"/>
      <state state_ref="oval:org.mitre.oval:ste:10238"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35452" version="1" comment="libpng is earlier than 2:1.2.2-28" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14194"/>
      <state state_ref="oval:org.mitre.oval:ste:10517"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35443" version="1" comment="libpng is earlier than 2:1.2.10-7.1.el5_0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14194"/>
      <state state_ref="oval:org.mitre.oval:ste:10238"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35302" version="1" comment="libpng is earlier than 2:1.2.7-3.el4_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14194"/>
      <state state_ref="oval:org.mitre.oval:ste:10339"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34929" version="1" comment="libpng-devel is earlier than 2:1.2.7-3.el4_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14221"/>
      <state state_ref="oval:org.mitre.oval:ste:10339"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34609" version="1" comment="libpng10-devel is earlier than 0:1.0.16-3.el4_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13985"/>
      <state state_ref="oval:org.mitre.oval:ste:10613"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39733" version="1" comment="expat is earlier than 0:1.95.7-4.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14999"/>
      <state state_ref="oval:org.mitre.oval:ste:11204"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39660" version="1" comment="expat-devel is earlier than 0:1.95.7-4.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15283"/>
      <state state_ref="oval:org.mitre.oval:ste:11204"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39654" version="1" comment="expat is earlier than 0:1.95.5-6.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14999"/>
      <state state_ref="oval:org.mitre.oval:ste:11093"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39647" version="1" comment="expat-devel is earlier than 0:1.95.8-8.3.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15283"/>
      <state state_ref="oval:org.mitre.oval:ste:11253"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39521" version="1" comment="expat is earlier than 0:1.95.8-8.3.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14999"/>
      <state state_ref="oval:org.mitre.oval:ste:11253"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39129" version="1" comment="expat-devel is earlier than 0:1.95.5-6.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15283"/>
      <state state_ref="oval:org.mitre.oval:ste:11093"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33361" version="1" comment="ImageMagick-c++ is earlier than 0:6.0.7.1-16.0.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13475"/>
      <state state_ref="oval:org.mitre.oval:ste:10097"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33326" version="1" comment="ImageMagick is earlier than 0:6.0.7.1-16.0.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13854"/>
      <state state_ref="oval:org.mitre.oval:ste:10097"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33318" version="1" comment="ImageMagick is earlier than 0:5.5.6-24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13854"/>
      <state state_ref="oval:org.mitre.oval:ste:9864"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33315" version="1" comment="ImageMagick-c++ is earlier than 0:5.5.6-24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13475"/>
      <state state_ref="oval:org.mitre.oval:ste:9864"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33269" version="1" comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-16.0.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14240"/>
      <state state_ref="oval:org.mitre.oval:ste:10097"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33189" version="1" comment="ImageMagick-c++-devel is earlier than 0:5.5.6-24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14240"/>
      <state state_ref="oval:org.mitre.oval:ste:9864"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33102" version="1" comment="ImageMagick-perl is earlier than 0:5.5.6-24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14270"/>
      <state state_ref="oval:org.mitre.oval:ste:9864"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33080" version="1" comment="ImageMagick-devel is earlier than 0:5.5.6-24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13484"/>
      <state state_ref="oval:org.mitre.oval:ste:9864"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32926" version="1" comment="ImageMagick-perl is earlier than 0:6.0.7.1-16.0.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14270"/>
      <state state_ref="oval:org.mitre.oval:ste:10097"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32622" version="1" comment="ImageMagick-devel is earlier than 0:6.0.7.1-16.0.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13484"/>
      <state state_ref="oval:org.mitre.oval:ste:10097"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38343" version="1" comment="nss is earlier than 0:3.12.2.0-3.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14917"/>
      <state state_ref="oval:org.mitre.oval:ste:10988"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38272" version="1" comment="firefox is earlier than 0:3.0.6-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10787"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38172" version="1" comment="nss-tools is earlier than 0:3.12.2.0-3.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15090"/>
      <state state_ref="oval:org.mitre.oval:ste:10988"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38040" version="1" comment="nss-devel is earlier than 0:3.12.2.0-4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14656"/>
      <state state_ref="oval:org.mitre.oval:ste:11160"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37933" version="1" comment="nss-pkcs11-devel is earlier than 0:3.12.2.0-4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14171"/>
      <state state_ref="oval:org.mitre.oval:ste:11160"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37923" version="1" comment="nss-devel is earlier than 0:3.12.2.0-3.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14656"/>
      <state state_ref="oval:org.mitre.oval:ste:10988"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37867" version="1" comment="nss-tools is earlier than 0:3.12.2.0-4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15090"/>
      <state state_ref="oval:org.mitre.oval:ste:11160"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37835" version="1" comment="xulrunner is earlier than 0:1.9.0.6-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15057"/>
      <state state_ref="oval:org.mitre.oval:ste:11120"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37823" version="1" comment="firefox is earlier than 0:3.0.6-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10173"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37808" version="1" comment="xulrunner-devel is earlier than 0:1.9.0.6-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15100"/>
      <state state_ref="oval:org.mitre.oval:ste:11120"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37556" version="1" comment="xulrunner-devel-unstable is earlier than 0:1.9.0.6-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15048"/>
      <state state_ref="oval:org.mitre.oval:ste:11120"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37350" version="1" comment="nss is earlier than 0:3.12.2.0-4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14917"/>
      <state state_ref="oval:org.mitre.oval:ste:11160"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:2403" version="2" check="at least one" comment="Internet Explorer 6.0 Installed XP SP2" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:2251"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2331" version="1" check="at least one" comment="the version of mshtml.dll is less than 6.0.2900.2722" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2183"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39813" version="1" comment="kernel-xen is earlier than 0:2.6.18-164.10.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:11406"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39797" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-89.0.19.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:11533"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39789" version="1" comment="kernel-debug-devel is earlier than 0:2.6.18-164.10.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15023"/>
      <state state_ref="oval:org.mitre.oval:ste:11406"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39773" version="1" comment="kernel is earlier than 0:2.6.9-89.0.19.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:11533"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39770" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-164.10.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:11406"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39763" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.19.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:11533"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39719" version="1" comment="kernel-PAE is earlier than 0:2.6.18-164.10.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:11406"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39709" version="1" comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.19.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14060"/>
      <state state_ref="oval:org.mitre.oval:ste:11533"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39702" version="1" comment="kernel-xenU is earlier than 0:2.6.9-89.0.19.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14301"/>
      <state state_ref="oval:org.mitre.oval:ste:11533"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39700" version="1" comment="kernel is earlier than 0:2.6.18-164.10.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:11406"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39662" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-89.0.19.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:11533"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39657" version="1" comment="kernel-smp is earlier than 0:2.6.9-89.0.19.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:11533"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39650" version="1" comment="kernel-debug is earlier than 0:2.6.18-164.10.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14957"/>
      <state state_ref="oval:org.mitre.oval:ste:11406"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39645" version="1" comment="kernel-kdump is earlier than 0:2.6.18-164.10.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:11406"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39617" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.19.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:11533"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39590" version="1" comment="kernel-devel is earlier than 0:2.6.18-164.10.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:11406"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39516" version="1" comment="kernel-devel is earlier than 0:2.6.9-89.0.19.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:11533"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39503" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.19.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:11533"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39408" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-164.10.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:11406"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39099" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-164.10.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:11406"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39095" version="1" comment="kernel-headers is earlier than 0:2.6.18-164.10.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:11406"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39093" version="1" comment="kernel-doc is earlier than 0:2.6.9-89.0.19.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:11533"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38905" version="1" comment="kernel-doc is earlier than 0:2.6.18-164.10.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:11406"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30694" version="1" comment="httpd-devel is earlier than 0:2.0.46-32.ent.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:9434"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30628" version="1" comment="httpd is earlier than 0:2.0.46-32.ent.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:9434"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30285" version="1" comment="mod_ssl is earlier than 1:2.0.46-32.ent.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:9394"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35559" version="1" comment="cups-devel is earlier than 1:1.2.4-11.14.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:10396"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35533" version="1" comment="cups is earlier than 0:1.1.17-13.3.46" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:10300"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35505" version="1" comment="cups-lpd is earlier than 1:1.2.4-11.14.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14688"/>
      <state state_ref="oval:org.mitre.oval:ste:10396"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35491" version="1" comment="cups-devel is earlier than 0:1.1.17-13.3.46" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:10300"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35303" version="1" comment="cups-libs is earlier than 1:1.2.4-11.14.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:10396"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35245" version="1" comment="cups is earlier than 1:1.2.4-11.14.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:10396"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35218" version="1" comment="cups-libs is earlier than 0:1.1.17-13.3.46" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:10300"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32389" version="1" comment="mod_auth_pgsql is earlier than 0:2.0.1-7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13888"/>
      <state state_ref="oval:org.mitre.oval:ste:9484"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31577" version="1" comment="mod_auth_pgsql is earlier than 0:2.0.1-4.ent.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13888"/>
      <state state_ref="oval:org.mitre.oval:ste:9780"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30562" version="1" comment="libpcap is earlier than 14:0.7.2-7.E3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13587"/>
      <state state_ref="oval:org.mitre.oval:ste:9675"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30488" version="1" comment="tcpdump is earlier than 14:3.7.2-7.E3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14318"/>
      <state state_ref="oval:org.mitre.oval:ste:9566"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32515" version="1" comment="perl-suidperl is earlier than 3:5.8.5-24.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13815"/>
      <state state_ref="oval:org.mitre.oval:ste:10076"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32481" version="1" comment="perl is earlier than 3:5.8.5-24.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14460"/>
      <state state_ref="oval:org.mitre.oval:ste:10076"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35863" version="1" comment="kernel-devel is earlier than 0:2.6.9-67.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10004"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35848" version="1" comment="kernel is earlier than 0:2.6.9-67.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10004"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35824" version="1" comment="kernel-smp is earlier than 0:2.6.9-67.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:10004"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35705" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-67.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:10004"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35693" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-67.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:10004"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35637" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-67.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:10004"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35622" version="1" comment="kernel-xenU-devel is earlier than 0:2.6.9-67.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14060"/>
      <state state_ref="oval:org.mitre.oval:ste:10004"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35593" version="1" comment="kernel-debug is earlier than 0:2.6.18-53.1.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14957"/>
      <state state_ref="oval:org.mitre.oval:ste:10102"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35555" version="1" comment="kernel-PAE is earlier than 0:2.6.18-53.1.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:10102"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35543" version="1" comment="kernel-debuginfo-common is earlier than 0:2.6.18-53.1.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14853"/>
      <state state_ref="oval:org.mitre.oval:ste:10102"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35511" version="1" comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15023"/>
      <state state_ref="oval:org.mitre.oval:ste:10102"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35503" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-67.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:10004"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35474" version="1" comment="kernel-doc is earlier than 0:2.6.18-53.1.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10102"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35434" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-67.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:10004"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35357" version="1" comment="kernel-xen is earlier than 0:2.6.18-53.1.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:10102"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35332" version="1" comment="kernel-xenU is earlier than 0:2.6.9-67.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14301"/>
      <state state_ref="oval:org.mitre.oval:ste:10004"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35284" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:10102"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35219" version="1" comment="kernel-kdump is earlier than 0:2.6.18-53.1.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:10102"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35215" version="1" comment="kernel-devel is earlier than 0:2.6.18-53.1.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10102"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35139" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:10102"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35088" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:10102"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35021" version="1" comment="kernel-headers is earlier than 0:2.6.18-53.1.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:10102"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34990" version="1" comment="kernel-doc is earlier than 0:2.6.9-67.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10004"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34595" version="1" comment="kernel is earlier than 0:2.6.18-53.1.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10102"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34803" version="1" comment="perl-Net-DNS is earlier than 0:0.59-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14638"/>
      <state state_ref="oval:org.mitre.oval:ste:10406"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34732" version="1" comment="perl-Net-DNS is earlier than 0:0.31-4.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14638"/>
      <state state_ref="oval:org.mitre.oval:ste:10291"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34311" version="1" comment="kernel-xen is earlier than 0:2.6.18-8.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:10503"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34306" version="1" comment="kernel is earlier than 0:2.6.18-8.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10503"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34290" version="1" comment="kernel-kdump is earlier than 0:2.6.18-8.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:10503"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34278" version="1" comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14853"/>
      <state state_ref="oval:org.mitre.oval:ste:10503"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34261" version="1" comment="kernel-PAE is earlier than 0:2.6.18-8.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:10503"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34210" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:10503"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34185" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:10503"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34168" version="1" comment="kernel-devel is earlier than 0:2.6.18-8.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10503"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34155" version="1" comment="kernel-doc is earlier than 0:2.6.18-8.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10503"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34033" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:10503"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34023" version="1" comment="kernel-headers is earlier than 0:2.6.18-8.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:10503"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32689" version="1" comment="libtiff is earlier than 0:3.5.7-25.el3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14341"/>
      <state state_ref="oval:org.mitre.oval:ste:9617"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32637" version="1" comment="libtiff-devel is earlier than 0:3.6.1-10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14174"/>
      <state state_ref="oval:org.mitre.oval:ste:9819"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32435" version="1" comment="libtiff-devel is earlier than 0:3.5.7-25.el3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14174"/>
      <state state_ref="oval:org.mitre.oval:ste:9617"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32329" version="1" comment="libtiff is earlier than 0:3.6.1-10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14341"/>
      <state state_ref="oval:org.mitre.oval:ste:9819"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40327" version="1" comment="squid is earlier than 7:2.6.STABLE21-6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14403"/>
      <state state_ref="oval:org.mitre.oval:ste:11398"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40068" version="1" comment="mysql-bench is earlier than 0:4.1.22-2.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14400"/>
      <state state_ref="oval:org.mitre.oval:ste:11534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40047" version="1" comment="mysql-server is earlier than 0:4.1.22-2.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14342"/>
      <state state_ref="oval:org.mitre.oval:ste:11534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39985" version="1" comment="mysql-devel is earlier than 0:4.1.22-2.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14481"/>
      <state state_ref="oval:org.mitre.oval:ste:11534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39929" version="1" comment="mysql is earlier than 0:4.1.22-2.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14355"/>
      <state state_ref="oval:org.mitre.oval:ste:11534"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32353" version="1" comment="xloadimage is earlier than 0:4.1-36.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14261"/>
      <state state_ref="oval:org.mitre.oval:ste:9589"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32292" version="1" comment="xloadimage is earlier than 0:4.1-36.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14261"/>
      <state state_ref="oval:org.mitre.oval:ste:9389"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33209" version="1" comment="info is earlier than 0:4.7-5.el4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14823"/>
      <state state_ref="oval:org.mitre.oval:ste:10169"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33143" version="1" comment="texinfo is earlier than 0:4.5-3.el3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14791"/>
      <state state_ref="oval:org.mitre.oval:ste:10315"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33067" version="1" comment="info is earlier than 0:4.5-3.el3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14823"/>
      <state state_ref="oval:org.mitre.oval:ste:10315"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32963" version="1" comment="texinfo is earlier than 0:4.7-5.el4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14791"/>
      <state state_ref="oval:org.mitre.oval:ste:10169"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37987" version="1" comment="cups-devel is earlier than 1:1.2.4-11.18.el5_2.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:10621"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37957" version="1" comment="cups is earlier than 1:1.2.4-11.18.el5_2.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:10621"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37762" version="1" comment="cups-lpd is earlier than 1:1.2.4-11.18.el5_2.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14688"/>
      <state state_ref="oval:org.mitre.oval:ste:10621"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37400" version="1" comment="cups-libs is earlier than 1:1.2.4-11.18.el5_2.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:10621"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38789" version="1" comment="ipsec-tools is earlier than 0:0.6.5-13.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14216"/>
      <state state_ref="oval:org.mitre.oval:ste:11265"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40588" version="1" comment="sudo is earlier than 0:1.7.2p1-7.el5_5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14246"/>
      <state state_ref="oval:org.mitre.oval:ste:11270"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37073" version="1" comment="perl-suidperl is earlier than 3:5.8.5-36.el4_6.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13815"/>
      <state state_ref="oval:org.mitre.oval:ste:10822"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37067" version="1" comment="perl-suidperl is earlier than 0:5.8.8-10.el5_2.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13815"/>
      <state state_ref="oval:org.mitre.oval:ste:10544"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37057" version="1" comment="perl is earlier than 0:5.8.8-10.el5_2.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14460"/>
      <state state_ref="oval:org.mitre.oval:ste:10544"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36930" version="1" comment="perl-CGI is earlier than 2:2.89-98.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14319"/>
      <state state_ref="oval:org.mitre.oval:ste:10917"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36906" version="1" comment="perl-suidperl is earlier than 2:5.8.0-98.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13815"/>
      <state state_ref="oval:org.mitre.oval:ste:10675"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36773" version="1" comment="perl-DB_File is earlier than 2:1.806-98.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14438"/>
      <state state_ref="oval:org.mitre.oval:ste:10449"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36728" version="1" comment="perl is earlier than 3:5.8.5-36.el4_6.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14460"/>
      <state state_ref="oval:org.mitre.oval:ste:10822"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36708" version="1" comment="perl-CPAN is earlier than 2:1.61-98.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14597"/>
      <state state_ref="oval:org.mitre.oval:ste:10531"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36672" version="1" comment="perl is earlier than 2:5.8.0-98.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14460"/>
      <state state_ref="oval:org.mitre.oval:ste:10675"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34765" version="1" comment="tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.1.0.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14750"/>
      <state state_ref="oval:org.mitre.oval:ste:10363"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34682" version="1" comment="tomcat5-webapps is earlier than 0:5.5.23-0jpp.1.0.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14332"/>
      <state state_ref="oval:org.mitre.oval:ste:10363"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34681" version="1" comment="tomcat5-common-lib is earlier than 0:5.5.23-0jpp.1.0.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14815"/>
      <state state_ref="oval:org.mitre.oval:ste:10363"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34673" version="1" comment="tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.1.0.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14686"/>
      <state state_ref="oval:org.mitre.oval:ste:10363"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34601" version="1" comment="tomcat5-server-lib is earlier than 0:5.5.23-0jpp.1.0.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14509"/>
      <state state_ref="oval:org.mitre.oval:ste:10363"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34549" version="1" comment="tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.1.0.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14808"/>
      <state state_ref="oval:org.mitre.oval:ste:10363"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34534" version="1" comment="tomcat5 is earlier than 0:5.5.23-0jpp.1.0.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14612"/>
      <state state_ref="oval:org.mitre.oval:ste:10363"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34526" version="1" comment="tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.1.0.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14662"/>
      <state state_ref="oval:org.mitre.oval:ste:10363"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34509" version="1" comment="tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.1.0.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14685"/>
      <state state_ref="oval:org.mitre.oval:ste:10363"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34133" version="1" comment="tomcat5-jasper is earlier than 0:5.5.23-0jpp.1.0.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14210"/>
      <state state_ref="oval:org.mitre.oval:ste:10363"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33925" version="1" comment="tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.1.0.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14622"/>
      <state state_ref="oval:org.mitre.oval:ste:10363"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37524" version="1" comment="tomcat5-jasper is earlier than 0:5.5.23-0jpp.7.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14210"/>
      <state state_ref="oval:org.mitre.oval:ste:10653"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37501" version="1" comment="tomcat5 is earlier than 0:5.5.23-0jpp.7.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14612"/>
      <state state_ref="oval:org.mitre.oval:ste:10653"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37498" version="1" comment="tomcat5-common-lib is earlier than 0:5.5.23-0jpp.7.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14815"/>
      <state state_ref="oval:org.mitre.oval:ste:10653"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37489" version="1" comment="tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14662"/>
      <state state_ref="oval:org.mitre.oval:ste:10653"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37452" version="1" comment="tomcat5-webapps is earlier than 0:5.5.23-0jpp.7.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14332"/>
      <state state_ref="oval:org.mitre.oval:ste:10653"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37415" version="1" comment="tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.7.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14808"/>
      <state state_ref="oval:org.mitre.oval:ste:10653"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37396" version="1" comment="tomcat5-server-lib is earlier than 0:5.5.23-0jpp.7.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14509"/>
      <state state_ref="oval:org.mitre.oval:ste:10653"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37275" version="1" comment="tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.7.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14750"/>
      <state state_ref="oval:org.mitre.oval:ste:10653"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37266" version="1" comment="tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.7.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14685"/>
      <state state_ref="oval:org.mitre.oval:ste:10653"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37182" version="1" comment="tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.7.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14686"/>
      <state state_ref="oval:org.mitre.oval:ste:10653"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36583" version="1" comment="tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14622"/>
      <state state_ref="oval:org.mitre.oval:ste:10653"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32404" version="1" comment="kernel-devel is earlier than 0:2.6.9-22.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:9871"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32387" version="1" comment="kernel is earlier than 0:2.6.9-22.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:9871"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32382" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-22.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:9871"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32373" version="1" comment="kernel-smp is earlier than 0:2.6.9-22.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:9871"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32355" version="1" comment="kernel-doc is earlier than 0:2.6.9-22.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:9871"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32210" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:9871"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32096" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-22.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:9871"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30685" version="1" comment="gdk-pixbuf-gnome is earlier than 1:0.22.0-6.1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14410"/>
      <state state_ref="oval:org.mitre.oval:ste:9588"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30675" version="1" comment="gdk-pixbuf is earlier than 1:0.22.0-6.1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14361"/>
      <state state_ref="oval:org.mitre.oval:ste:9588"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30626" version="1" comment="gdk-pixbuf-devel is earlier than 1:0.22.0-6.1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13883"/>
      <state state_ref="oval:org.mitre.oval:ste:9588"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35046" version="1" comment="libvorbis-devel is earlier than 1:1.1.2-3.el5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14840"/>
      <state state_ref="oval:org.mitre.oval:ste:9947"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35016" version="1" comment="libvorbis is earlier than 1:1.0-8.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14657"/>
      <state state_ref="oval:org.mitre.oval:ste:10520"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35005" version="1" comment="libvorbis-devel is earlier than 1:1.0-8.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14840"/>
      <state state_ref="oval:org.mitre.oval:ste:10520"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34951" version="1" comment="libvorbis-devel is earlier than 1:1.1.0-2.el4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14840"/>
      <state state_ref="oval:org.mitre.oval:ste:10462"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34625" version="1" comment="libvorbis is earlier than 1:1.1.0-2.el4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14657"/>
      <state state_ref="oval:org.mitre.oval:ste:10462"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34551" version="1" comment="libvorbis is earlier than 1:1.1.2-3.el5.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14657"/>
      <state state_ref="oval:org.mitre.oval:ste:9947"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30956" version="1" comment="squirrelmail is earlier than 0:1.4.3a-9.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14331"/>
      <state state_ref="oval:org.mitre.oval:ste:9508"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30441" version="1" comment="squirrelmail is earlier than 0:1.4.3a-9.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14331"/>
      <state state_ref="oval:org.mitre.oval:ste:9835"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33350" version="1" comment="fetchmail is earlier than 0:6.2.5-6.el4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14633"/>
      <state state_ref="oval:org.mitre.oval:ste:10373"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33046" version="1" comment="fetchmail is earlier than 0:6.2.0-3.el3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14633"/>
      <state state_ref="oval:org.mitre.oval:ste:10383"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32430" version="1" comment="ruby-devel is earlier than 0:1.8.1-7.EL4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14187"/>
      <state state_ref="oval:org.mitre.oval:ste:9909"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32416" version="1" comment="ruby-devel is earlier than 0:1.6.8-9.EL3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14187"/>
      <state state_ref="oval:org.mitre.oval:ste:10056"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32400" version="1" comment="ruby is earlier than 0:1.6.8-9.EL3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14305"/>
      <state state_ref="oval:org.mitre.oval:ste:10056"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32339" version="1" comment="ruby-docs is earlier than 0:1.6.8-9.EL3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14446"/>
      <state state_ref="oval:org.mitre.oval:ste:10056"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32318" version="1" comment="ruby-libs is earlier than 0:1.8.1-7.EL4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14388"/>
      <state state_ref="oval:org.mitre.oval:ste:9909"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32307" version="1" comment="ruby-mode is earlier than 0:1.6.8-9.EL3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14380"/>
      <state state_ref="oval:org.mitre.oval:ste:10056"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32263" version="1" comment="ruby-mode is earlier than 0:1.8.1-7.EL4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14380"/>
      <state state_ref="oval:org.mitre.oval:ste:9909"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32262" version="1" comment="irb is earlier than 0:1.8.1-7.EL4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13649"/>
      <state state_ref="oval:org.mitre.oval:ste:9909"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32256" version="1" comment="ruby-tcltk is earlier than 0:1.8.1-7.EL4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14273"/>
      <state state_ref="oval:org.mitre.oval:ste:9909"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32115" version="1" comment="ruby-docs is earlier than 0:1.8.1-7.EL4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14446"/>
      <state state_ref="oval:org.mitre.oval:ste:9909"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32081" version="1" comment="ruby is earlier than 0:1.8.1-7.EL4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14305"/>
      <state state_ref="oval:org.mitre.oval:ste:9909"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32073" version="1" comment="irb is earlier than 0:1.6.8-9.EL3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13649"/>
      <state state_ref="oval:org.mitre.oval:ste:10056"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32005" version="1" comment="ruby-libs is earlier than 0:1.6.8-9.EL3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14388"/>
      <state state_ref="oval:org.mitre.oval:ste:10056"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31981" version="1" comment="ruby-tcltk is earlier than 0:1.6.8-9.EL3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14273"/>
      <state state_ref="oval:org.mitre.oval:ste:10056"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35613" version="1" comment="pcre-devel is earlier than 0:3.9-10.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14619"/>
      <state state_ref="oval:org.mitre.oval:ste:9765"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35598" version="1" comment="pcre is earlier than 0:3.9-10.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14505"/>
      <state state_ref="oval:org.mitre.oval:ste:9765"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35420" version="1" comment="pcre-devel is earlier than 0:6.6-2.el5_0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14619"/>
      <state state_ref="oval:org.mitre.oval:ste:10577"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35187" version="1" comment="pcre is earlier than 0:6.6-2.el5_0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14505"/>
      <state state_ref="oval:org.mitre.oval:ste:10577"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34893" version="1" comment="pcre is earlier than 0:4.5-4.el4_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14505"/>
      <state state_ref="oval:org.mitre.oval:ste:9737"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34556" version="1" comment="pcre-devel is earlier than 0:4.5-4.el4_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14619"/>
      <state state_ref="oval:org.mitre.oval:ste:9737"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30761" version="1" comment="rsync is earlier than 0:2.5.7-5.3E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14274"/>
      <state state_ref="oval:org.mitre.oval:ste:9157"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:2837" version="4" comment="Win2K/XP/2003 service pack 2 (or later) is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:717"/>
      <state state_ref="oval:org.mitre.oval:ste:2656"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1232" version="1" check="at least one" comment="the version of crypt32.dll is less than 5.131.2600.1123" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:861"/>
      <state state_ref="oval:org.mitre.oval:ste:1104"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1231" version="1" comment="the patch Q329115 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:860"/>
      <state state_ref="oval:org.mitre.oval:ste:1103"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31039" version="1" comment="mysql-bench is earlier than 0:3.23.58-2.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14400"/>
      <state state_ref="oval:org.mitre.oval:ste:9426"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31033" version="1" comment="mysql is earlier than 0:3.23.58-2.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14355"/>
      <state state_ref="oval:org.mitre.oval:ste:9426"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30615" version="1" comment="mysql-devel is earlier than 0:3.23.58-2.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14481"/>
      <state state_ref="oval:org.mitre.oval:ste:9426"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39347" version="1" comment="acpid is earlier than 0:1.0.4-9.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14820"/>
      <state state_ref="oval:org.mitre.oval:ste:11029"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35065" version="1" comment="RealPlayer is earlier than 0:10.0.9-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15037"/>
      <state state_ref="oval:org.mitre.oval:ste:10434"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34808" version="1" comment="RealPlayer is earlier than 0:10.0.9-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15037"/>
      <state state_ref="oval:org.mitre.oval:ste:10551"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34710" version="1" comment="realplayer is earlier than 0:10.0.9-0.rhel3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15058"/>
      <state state_ref="oval:org.mitre.oval:ste:10003"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34506" version="1" comment="HelixPlayer is earlier than 1:1.0.6-0.EL4.2.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14632"/>
      <state state_ref="oval:org.mitre.oval:ste:10267"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32787" version="1" comment="mailman is earlier than 3:2.1.5.1-34.rhel4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14521"/>
      <state state_ref="oval:org.mitre.oval:ste:9663"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32470" version="1" comment="mailman is earlier than 3:2.1.5.1-25.rhel3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14521"/>
      <state state_ref="oval:org.mitre.oval:ste:9956"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30891" version="1" comment="perl-DBI is earlier than 0:1.32-9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14568"/>
      <state state_ref="oval:org.mitre.oval:ste:9753"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30771" version="1" comment="perl-DBI is earlier than 0:1.40-8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14568"/>
      <state state_ref="oval:org.mitre.oval:ste:9885"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38111" version="1" comment="squirrelmail is earlier than 0:1.4.8-8.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14331"/>
      <state state_ref="oval:org.mitre.oval:ste:10894"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37956" version="1" comment="squirrelmail is earlier than 0:1.4.8-5.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14331"/>
      <state state_ref="oval:org.mitre.oval:ste:11138"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37617" version="1" comment="squirrelmail is earlier than 0:1.4.8-5.el5_2.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14331"/>
      <state state_ref="oval:org.mitre.oval:ste:11145"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39855" version="1" comment="gzip is earlier than 0:1.3.5-11.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14444"/>
      <state state_ref="oval:org.mitre.oval:ste:11223"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39795" version="1" comment="gzip is earlier than 0:1.3.3-15.rhel3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14444"/>
      <state state_ref="oval:org.mitre.oval:ste:11482"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39345" version="1" comment="gzip is earlier than 0:1.3.3-18.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14444"/>
      <state state_ref="oval:org.mitre.oval:ste:11379"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38527" version="1" comment="ghostscript-devel is earlier than 0:7.05-32.1.17" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14524"/>
      <state state_ref="oval:org.mitre.oval:ste:11129"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38448" version="1" comment="hpijs is earlier than 0:7.05-32.1.17" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14471"/>
      <state state_ref="oval:org.mitre.oval:ste:11129"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38438" version="1" comment="ghostscript-devel is earlier than 0:7.07-33.2.el4_7.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14524"/>
      <state state_ref="oval:org.mitre.oval:ste:10726"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38418" version="1" comment="ghostscript-gtk is earlier than 0:8.15.2-9.4.el5_3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14614"/>
      <state state_ref="oval:org.mitre.oval:ste:11166"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38396" version="1" comment="ghostscript-devel is earlier than 0:8.15.2-9.4.el5_3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14524"/>
      <state state_ref="oval:org.mitre.oval:ste:11166"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38369" version="1" comment="ghostscript is earlier than 0:7.07-33.2.el4_7.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14541"/>
      <state state_ref="oval:org.mitre.oval:ste:10726"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38244" version="1" comment="ghostscript-gtk is earlier than 0:7.07-33.2.el4_7.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14614"/>
      <state state_ref="oval:org.mitre.oval:ste:10726"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37905" version="1" comment="ghostscript is earlier than 0:8.15.2-9.4.el5_3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14541"/>
      <state state_ref="oval:org.mitre.oval:ste:11166"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37828" version="1" comment="ghostscript is earlier than 0:7.05-32.1.17" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14541"/>
      <state state_ref="oval:org.mitre.oval:ste:11129"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34296" version="1" comment="mutt is earlier than 5:1.4.1-5.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14378"/>
      <state state_ref="oval:org.mitre.oval:ste:10466"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34260" version="1" comment="mutt is earlier than 5:1.4.1-12.0.3.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14378"/>
      <state state_ref="oval:org.mitre.oval:ste:10402"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34241" version="1" comment="mutt is earlier than 5:1.4.2.2-3.0.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14378"/>
      <state state_ref="oval:org.mitre.oval:ste:10427"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32583" version="1" comment="gnutls is earlier than 0:1.0.20-3.2.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14386"/>
      <state state_ref="oval:org.mitre.oval:ste:9827"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32570" version="1" comment="gnutls-devel is earlier than 0:1.0.20-3.2.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14558"/>
      <state state_ref="oval:org.mitre.oval:ste:9827"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40322" version="1" comment="NetworkManager-gnome is earlier than 1:0.7.0-9.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15031"/>
      <state state_ref="oval:org.mitre.oval:ste:11403"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40305" version="1" comment="NetworkManager-devel is earlier than 1:0.7.0-9.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14736"/>
      <state state_ref="oval:org.mitre.oval:ste:11403"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40269" version="1" comment="NetworkManager-glib-devel is earlier than 1:0.7.0-9.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15012"/>
      <state state_ref="oval:org.mitre.oval:ste:11403"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39987" version="1" comment="NetworkManager is earlier than 1:0.7.0-9.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15163"/>
      <state state_ref="oval:org.mitre.oval:ste:11403"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39697" version="1" comment="NetworkManager-glib is earlier than 1:0.7.0-9.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14206"/>
      <state state_ref="oval:org.mitre.oval:ste:11403"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38956" version="1" comment="dnsmasq is earlier than 0:2.45-1.1.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14690"/>
      <state state_ref="oval:org.mitre.oval:ste:11258"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32433" version="1" comment="php-pgsql is earlier than 0:4.3.2-26.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:10048"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32429" version="1" comment="php-mysql is earlier than 0:4.3.2-26.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:10048"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32420" version="1" comment="php-gd is earlier than 0:4.3.9-3.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14335"/>
      <state state_ref="oval:org.mitre.oval:ste:9528"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32405" version="1" comment="php-pear is earlier than 0:4.3.9-3.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14130"/>
      <state state_ref="oval:org.mitre.oval:ste:9528"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32397" version="1" comment="php-ldap is earlier than 0:4.3.9-3.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:9528"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32346" version="1" comment="php-domxml is earlier than 0:4.3.9-3.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14496"/>
      <state state_ref="oval:org.mitre.oval:ste:9528"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32337" version="1" comment="php is earlier than 0:4.3.9-3.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:9528"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32325" version="1" comment="php-imap is earlier than 0:4.3.9-3.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:9528"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32322" version="1" comment="php-ldap is earlier than 0:4.3.2-26.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:10048"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32321" version="1" comment="php-odbc is earlier than 0:4.3.9-3.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:9528"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32301" version="1" comment="php-imap is earlier than 0:4.3.2-26.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:10048"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32287" version="1" comment="php-mbstring is earlier than 0:4.3.9-3.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13746"/>
      <state state_ref="oval:org.mitre.oval:ste:9528"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32261" version="1" comment="php-xmlrpc is earlier than 0:4.3.9-3.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14445"/>
      <state state_ref="oval:org.mitre.oval:ste:9528"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32253" version="1" comment="php-odbc is earlier than 0:4.3.2-26.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:10048"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32207" version="1" comment="php-ncurses is earlier than 0:4.3.9-3.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14227"/>
      <state state_ref="oval:org.mitre.oval:ste:9528"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32114" version="1" comment="php-mysql is earlier than 0:4.3.9-3.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:9528"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32105" version="1" comment="php is earlier than 0:4.3.2-26.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:10048"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32050" version="1" comment="php-devel is earlier than 0:4.3.2-26.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:10048"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32016" version="1" comment="php-pgsql is earlier than 0:4.3.9-3.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:9528"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32003" version="1" comment="php-snmp is earlier than 0:4.3.9-3.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14508"/>
      <state state_ref="oval:org.mitre.oval:ste:9528"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31926" version="1" comment="php-devel is earlier than 0:4.3.9-3.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:9528"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32667" version="1" comment="kdebase-devel is earlier than 6:3.1.3-5.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14419"/>
      <state state_ref="oval:org.mitre.oval:ste:10241"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32514" version="1" comment="kdebase is earlier than 6:3.1.3-5.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14264"/>
      <state state_ref="oval:org.mitre.oval:ste:10241"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39529" version="1" comment="kdegraphics is earlier than 7:3.5.4-15.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14241"/>
      <state state_ref="oval:org.mitre.oval:ste:11450"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39438" version="1" comment="kdegraphics-devel is earlier than 7:3.3.1-15.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14596"/>
      <state state_ref="oval:org.mitre.oval:ste:11278"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39361" version="1" comment="xpdf is earlier than 1:2.02-17.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14398"/>
      <state state_ref="oval:org.mitre.oval:ste:11212"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39221" version="1" comment="gpdf is earlier than 0:2.8.2-7.7.2.el4_8.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14337"/>
      <state state_ref="oval:org.mitre.oval:ste:11394"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39094" version="1" comment="kdegraphics is earlier than 7:3.3.1-15.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14241"/>
      <state state_ref="oval:org.mitre.oval:ste:11278"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39062" version="1" comment="kdegraphics-devel is earlier than 7:3.5.4-15.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14596"/>
      <state state_ref="oval:org.mitre.oval:ste:11450"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38963" version="1" comment="xpdf is earlier than 1:3.00-22.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14398"/>
      <state state_ref="oval:org.mitre.oval:ste:11329"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38765" version="1" comment="cups-devel is earlier than 1:1.1.17-13.3.62" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:10530"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38748" version="1" comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:11234"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38735" version="1" comment="cups-libs is earlier than 1:1.1.17-13.3.62" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:10530"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38503" version="1" comment="cups is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:11234"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38351" version="1" comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:11234"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37797" version="1" comment="cups is earlier than 1:1.1.17-13.3.62" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:10530"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31842" version="1" comment="evolution-devel is earlier than 0:2.0.2-16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14585"/>
      <state state_ref="oval:org.mitre.oval:ste:9937"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31620" version="1" comment="evolution is earlier than 0:2.0.2-16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14477"/>
      <state state_ref="oval:org.mitre.oval:ste:9937"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38084" version="1" comment="python-lcms is earlier than 0:1.15-1.2.2.el5_2.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14958"/>
      <state state_ref="oval:org.mitre.oval:ste:11121"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38042" version="1" comment="lcms-devel is earlier than 0:1.15-1.2.2.el5_2.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14904"/>
      <state state_ref="oval:org.mitre.oval:ste:11121"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37821" version="1" comment="lcms is earlier than 0:1.15-1.2.2.el5_2.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15079"/>
      <state state_ref="oval:org.mitre.oval:ste:11121"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35449" version="1" comment="ruby-mode is earlier than 0:1.8.1-7.EL4.8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14380"/>
      <state state_ref="oval:org.mitre.oval:ste:10586"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35444" version="1" comment="ruby is earlier than 0:1.8.1-7.EL4.8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14305"/>
      <state state_ref="oval:org.mitre.oval:ste:10586"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35440" version="1" comment="irb is earlier than 0:1.8.1-7.EL4.8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13649"/>
      <state state_ref="oval:org.mitre.oval:ste:10586"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35355" version="1" comment="ruby-docs is earlier than 0:1.8.1-7.EL4.8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14446"/>
      <state state_ref="oval:org.mitre.oval:ste:10586"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35320" version="1" comment="ruby-devel is earlier than 0:1.8.1-7.EL4.8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14187"/>
      <state state_ref="oval:org.mitre.oval:ste:10586"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35295" version="1" comment="ruby-tcltk is earlier than 0:1.8.1-7.EL4.8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14273"/>
      <state state_ref="oval:org.mitre.oval:ste:10586"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34852" version="1" comment="ruby-libs is earlier than 0:1.8.1-7.EL4.8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14388"/>
      <state state_ref="oval:org.mitre.oval:ste:10586"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39380" version="1" comment="fetchmail is earlier than 0:6.3.6-1.1.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14633"/>
      <state state_ref="oval:org.mitre.oval:ste:11438"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39046" version="1" comment="fetchmail is earlier than 0:6.2.5-6.0.1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14633"/>
      <state state_ref="oval:org.mitre.oval:ste:11439"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38901" version="1" comment="fetchmail is earlier than 0:6.2.0-3.el3.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14633"/>
      <state state_ref="oval:org.mitre.oval:ste:11224"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30536" version="1" comment="htdig is earlier than 2:3.1.6-7.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14251"/>
      <state state_ref="oval:org.mitre.oval:ste:8698"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34966" version="1" comment="httpd-manual is earlier than 0:2.0.52-38.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14457"/>
      <state state_ref="oval:org.mitre.oval:ste:10143"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34958" version="1" comment="httpd-manual is earlier than 0:2.2.3-11.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14457"/>
      <state state_ref="oval:org.mitre.oval:ste:10194"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34935" version="1" comment="mod_ssl is earlier than 1:2.2.3-11.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:9983"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34930" version="1" comment="httpd is earlier than 0:2.0.52-38.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:10143"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34915" version="1" comment="httpd is earlier than 0:2.2.3-11.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:10194"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34832" version="1" comment="mod_ssl is earlier than 1:2.0.52-38.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:10107"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34801" version="1" comment="httpd-suexec is earlier than 0:2.0.52-38.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14611"/>
      <state state_ref="oval:org.mitre.oval:ste:10143"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34739" version="1" comment="httpd-devel is earlier than 0:2.2.3-11.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:10194"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34434" version="1" comment="httpd-devel is earlier than 0:2.0.52-38.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:10143"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37342" version="1" comment="ruby is earlier than 0:1.6.8-12.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14305"/>
      <state state_ref="oval:org.mitre.oval:ste:10542"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37305" version="1" comment="ruby-libs is earlier than 0:1.6.8-12.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14388"/>
      <state state_ref="oval:org.mitre.oval:ste:10542"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37296" version="1" comment="ruby-tcltk is earlier than 0:1.8.1-7.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14273"/>
      <state state_ref="oval:org.mitre.oval:ste:10952"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37289" version="1" comment="ruby-tcltk is earlier than 0:1.8.5-5.el5_2.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14273"/>
      <state state_ref="oval:org.mitre.oval:ste:10933"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37252" version="1" comment="irb is earlier than 0:1.6.8-12.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13649"/>
      <state state_ref="oval:org.mitre.oval:ste:10542"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37242" version="1" comment="ruby-docs is earlier than 0:1.8.1-7.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14446"/>
      <state state_ref="oval:org.mitre.oval:ste:10952"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37219" version="1" comment="ruby-libs is earlier than 0:1.8.1-7.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14388"/>
      <state state_ref="oval:org.mitre.oval:ste:10952"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37203" version="1" comment="ruby-rdoc is earlier than 0:1.8.5-5.el5_2.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14244"/>
      <state state_ref="oval:org.mitre.oval:ste:10933"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37199" version="1" comment="ruby-ri is earlier than 0:1.8.5-5.el5_2.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14461"/>
      <state state_ref="oval:org.mitre.oval:ste:10933"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37171" version="1" comment="ruby-mode is earlier than 0:1.8.1-7.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14380"/>
      <state state_ref="oval:org.mitre.oval:ste:10952"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37148" version="1" comment="ruby-irb is earlier than 0:1.8.5-5.el5_2.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14777"/>
      <state state_ref="oval:org.mitre.oval:ste:10933"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37140" version="1" comment="ruby-tcltk is earlier than 0:1.6.8-12.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14273"/>
      <state state_ref="oval:org.mitre.oval:ste:10542"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37119" version="1" comment="ruby-libs is earlier than 0:1.8.5-5.el5_2.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14388"/>
      <state state_ref="oval:org.mitre.oval:ste:10933"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37000" version="1" comment="ruby-docs is earlier than 0:1.6.8-12.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14446"/>
      <state state_ref="oval:org.mitre.oval:ste:10542"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36968" version="1" comment="ruby-mode is earlier than 0:1.6.8-12.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14380"/>
      <state state_ref="oval:org.mitre.oval:ste:10542"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36870" version="1" comment="ruby-devel is earlier than 0:1.8.5-5.el5_2.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14187"/>
      <state state_ref="oval:org.mitre.oval:ste:10933"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36808" version="1" comment="irb is earlier than 0:1.8.1-7.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13649"/>
      <state state_ref="oval:org.mitre.oval:ste:10952"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36747" version="1" comment="ruby-devel is earlier than 0:1.6.8-12.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14187"/>
      <state state_ref="oval:org.mitre.oval:ste:10542"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36738" version="1" comment="ruby is earlier than 0:1.8.5-5.el5_2.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14305"/>
      <state state_ref="oval:org.mitre.oval:ste:10933"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36604" version="1" comment="ruby-mode is earlier than 0:1.8.5-5.el5_2.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14380"/>
      <state state_ref="oval:org.mitre.oval:ste:10933"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36569" version="1" comment="ruby-devel is earlier than 0:1.8.1-7.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14187"/>
      <state state_ref="oval:org.mitre.oval:ste:10952"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36516" version="1" comment="ruby-docs is earlier than 0:1.8.5-5.el5_2.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14446"/>
      <state state_ref="oval:org.mitre.oval:ste:10933"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36468" version="1" comment="ruby is earlier than 0:1.8.1-7.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14305"/>
      <state state_ref="oval:org.mitre.oval:ste:10952"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33984" version="1" comment="XFree86-libs is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14259"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33982" version="1" comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.13.37.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14168"/>
      <state state_ref="oval:org.mitre.oval:ste:10208"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33976" version="1" comment="XFree86-truetype-fonts is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14354"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33963" version="1" comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14288"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33958" version="1" comment="XFree86-libs-data is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14326"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33951" version="1" comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14315"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33950" version="1" comment="XFree86-xdm is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13658"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33938" version="1" comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.13.37.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14572"/>
      <state state_ref="oval:org.mitre.oval:ste:10208"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33936" version="1" comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14364"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33932" version="1" comment="XFree86-sdk is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14107"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33930" version="1" comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14082"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33929" version="1" comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14351"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33928" version="1" comment="XFree86-font-utils is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14385"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33903" version="1" comment="libXfont is earlier than 0:1.2.2-1.0.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14504"/>
      <state state_ref="oval:org.mitre.oval:ste:10492"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33886" version="1" comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.13.37.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14580"/>
      <state state_ref="oval:org.mitre.oval:ste:10208"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33884" version="1" comment="XFree86-Xvfb is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13644"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33875" version="1" comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.13.37.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14089"/>
      <state state_ref="oval:org.mitre.oval:ste:10208"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33867" version="1" comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13712"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33856" version="1" comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.13.37.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14624"/>
      <state state_ref="oval:org.mitre.oval:ste:10208"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33846" version="1" comment="XFree86-xfs is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14311"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33829" version="1" comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.13.37.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14595"/>
      <state state_ref="oval:org.mitre.oval:ste:10208"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33815" version="1" comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.13.37.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14129"/>
      <state state_ref="oval:org.mitre.oval:ste:10208"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33811" version="1" comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.13.37.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14553"/>
      <state state_ref="oval:org.mitre.oval:ste:10208"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33799" version="1" comment="XFree86-twm is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13667"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33791" version="1" comment="XFree86-doc is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14406"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33790" version="1" comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.13.37.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14291"/>
      <state state_ref="oval:org.mitre.oval:ste:10208"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33789" version="1" comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.13.37.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14031"/>
      <state state_ref="oval:org.mitre.oval:ste:10208"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33788" version="1" comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14260"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33764" version="1" comment="XFree86-base-fonts is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14407"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33738" version="1" comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.13.37.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14515"/>
      <state state_ref="oval:org.mitre.oval:ste:10208"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33719" version="1" comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14127"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33716" version="1" comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14121"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33715" version="1" comment="xorg-x11 is earlier than 0:6.8.2-1.EL.13.37.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14592"/>
      <state state_ref="oval:org.mitre.oval:ste:10208"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33704" version="1" comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.13.37.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14262"/>
      <state state_ref="oval:org.mitre.oval:ste:10208"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33696" version="1" comment="XFree86-devel is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14397"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33689" version="1" comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14281"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33687" version="1" comment="XFree86-syriac-fonts is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14198"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33674" version="1" comment="libXfont-devel is earlier than 0:1.2.2-1.0.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14538"/>
      <state state_ref="oval:org.mitre.oval:ste:10492"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33663" version="1" comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.13.37.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14184"/>
      <state state_ref="oval:org.mitre.oval:ste:10208"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33660" version="1" comment="XFree86-tools is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13693"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33656" version="1" comment="XFree86 is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14255"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33567" version="1" comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.13.37.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14169"/>
      <state state_ref="oval:org.mitre.oval:ste:10208"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33550" version="1" comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14226"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33499" version="1" comment="XFree86-xauth is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14352"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33466" version="1" comment="XFree86-Xnest is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14053"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33447" version="1" comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14045"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33434" version="1" comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.13.37.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14097"/>
      <state state_ref="oval:org.mitre.oval:ste:10208"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33258" version="1" comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.13.37.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14478"/>
      <state state_ref="oval:org.mitre.oval:ste:10208"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33070" version="1" comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-120.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14067"/>
      <state state_ref="oval:org.mitre.oval:ste:10420"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33066" version="1" comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.13.37.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13643"/>
      <state state_ref="oval:org.mitre.oval:ste:10208"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:1239" version="1" check="at least one" comment="the software MailSite Express version 6.1.20 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:865"/>
      <state state_ref="oval:org.mitre.oval:ste:1111"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31291" version="1" comment="php-ldap is earlier than 0:4.3.9-3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:9341"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31279" version="1" comment="php-mysql is earlier than 0:4.3.9-3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:9341"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31271" version="1" comment="php-snmp is earlier than 0:4.3.9-3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14508"/>
      <state state_ref="oval:org.mitre.oval:ste:9341"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31260" version="1" comment="php-gd is earlier than 0:4.3.9-3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14335"/>
      <state state_ref="oval:org.mitre.oval:ste:9341"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31248" version="1" comment="php-xmlrpc is earlier than 0:4.3.9-3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14445"/>
      <state state_ref="oval:org.mitre.oval:ste:9341"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31235" version="1" comment="php-domxml is earlier than 0:4.3.9-3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14496"/>
      <state state_ref="oval:org.mitre.oval:ste:9341"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31210" version="1" comment="php-odbc is earlier than 0:4.3.9-3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:9341"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31196" version="1" comment="php-mbstring is earlier than 0:4.3.9-3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13746"/>
      <state state_ref="oval:org.mitre.oval:ste:9341"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31183" version="1" comment="php is earlier than 0:4.3.2-19.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:9762"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31168" version="1" comment="php-ncurses is earlier than 0:4.3.9-3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14227"/>
      <state state_ref="oval:org.mitre.oval:ste:9341"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31119" version="1" comment="php-pgsql is earlier than 0:4.3.2-19.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:9762"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31087" version="1" comment="php-imap is earlier than 0:4.3.9-3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:9341"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31082" version="1" comment="php-odbc is earlier than 0:4.3.2-19.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:9762"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31078" version="1" comment="php-imap is earlier than 0:4.3.2-19.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:9762"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31008" version="1" comment="php-pear is earlier than 0:4.3.9-3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14130"/>
      <state state_ref="oval:org.mitre.oval:ste:9341"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30937" version="1" comment="php-devel is earlier than 0:4.3.2-19.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:9762"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30756" version="1" comment="php-mysql is earlier than 0:4.3.2-19.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:9762"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30709" version="1" comment="php is earlier than 0:4.3.9-3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:9341"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30361" version="1" comment="php-ldap is earlier than 0:4.3.2-19.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:9762"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30329" version="1" comment="php-devel is earlier than 0:4.3.9-3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:9341"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30324" version="1" comment="php-pgsql is earlier than 0:4.3.9-3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:9341"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40555" version="1" comment="postgresql84-python is earlier than 0:8.4.4-1.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15270"/>
      <state state_ref="oval:org.mitre.oval:ste:11520"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40551" version="1" comment="rh-postgresql-contrib is earlier than 0:7.3.21-3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13927"/>
      <state state_ref="oval:org.mitre.oval:ste:11594"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40538" version="1" comment="postgresql-pl is earlier than 0:8.1.21-1.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14537"/>
      <state state_ref="oval:org.mitre.oval:ste:11552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40521" version="1" comment="postgresql-docs is earlier than 0:7.4.29-1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14365"/>
      <state state_ref="oval:org.mitre.oval:ste:11249"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40516" version="1" comment="postgresql-tcl is earlier than 0:7.4.29-1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14486"/>
      <state state_ref="oval:org.mitre.oval:ste:11249"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40515" version="1" comment="postgresql-libs is earlier than 0:8.1.21-1.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14383"/>
      <state state_ref="oval:org.mitre.oval:ste:11552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40512" version="1" comment="postgresql-python is earlier than 0:7.4.29-1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14546"/>
      <state state_ref="oval:org.mitre.oval:ste:11249"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40509" version="1" comment="postgresql-server is earlier than 0:8.1.21-1.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14158"/>
      <state state_ref="oval:org.mitre.oval:ste:11552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40505" version="1" comment="postgresql-contrib is earlier than 0:8.1.21-1.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14293"/>
      <state state_ref="oval:org.mitre.oval:ste:11552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40502" version="1" comment="rh-postgresql-pl is earlier than 0:7.3.21-3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14453"/>
      <state state_ref="oval:org.mitre.oval:ste:11594"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40486" version="1" comment="postgresql is earlier than 0:7.4.29-1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14586"/>
      <state state_ref="oval:org.mitre.oval:ste:11249"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40470" version="1" comment="postgresql84-test is earlier than 0:8.4.4-1.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15176"/>
      <state state_ref="oval:org.mitre.oval:ste:11520"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40465" version="1" comment="postgresql-devel is earlier than 0:7.4.29-1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14290"/>
      <state state_ref="oval:org.mitre.oval:ste:11249"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40455" version="1" comment="postgresql84-tcl is earlier than 0:8.4.4-1.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14440"/>
      <state state_ref="oval:org.mitre.oval:ste:11520"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40452" version="1" comment="postgresql84-pltcl is earlier than 0:8.4.4-1.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15092"/>
      <state state_ref="oval:org.mitre.oval:ste:11520"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40440" version="1" comment="rh-postgresql-server is earlier than 0:7.3.21-3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14152"/>
      <state state_ref="oval:org.mitre.oval:ste:11594"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40428" version="1" comment="postgresql-jdbc is earlier than 0:7.4.29-1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14547"/>
      <state state_ref="oval:org.mitre.oval:ste:11249"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40426" version="1" comment="rh-postgresql-python is earlier than 0:7.3.21-3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14328"/>
      <state state_ref="oval:org.mitre.oval:ste:11594"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40402" version="1" comment="postgresql-docs is earlier than 0:8.1.21-1.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14365"/>
      <state state_ref="oval:org.mitre.oval:ste:11552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40401" version="1" comment="postgresql is earlier than 0:8.1.21-1.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14586"/>
      <state state_ref="oval:org.mitre.oval:ste:11552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40399" version="1" comment="postgresql-contrib is earlier than 0:7.4.29-1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14293"/>
      <state state_ref="oval:org.mitre.oval:ste:11249"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40396" version="1" comment="postgresql84-plpython is earlier than 0:8.4.4-1.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15356"/>
      <state state_ref="oval:org.mitre.oval:ste:11520"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40379" version="1" comment="postgresql84 is earlier than 0:8.4.4-1.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15160"/>
      <state state_ref="oval:org.mitre.oval:ste:11520"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40369" version="1" comment="postgresql84-devel is earlier than 0:8.4.4-1.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15349"/>
      <state state_ref="oval:org.mitre.oval:ste:11520"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40366" version="1" comment="postgresql-server is earlier than 0:7.4.29-1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14158"/>
      <state state_ref="oval:org.mitre.oval:ste:11249"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40314" version="1" comment="postgresql-test is earlier than 0:7.4.29-1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14367"/>
      <state state_ref="oval:org.mitre.oval:ste:11249"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40309" version="1" comment="postgresql-devel is earlier than 0:8.1.21-1.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14290"/>
      <state state_ref="oval:org.mitre.oval:ste:11552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40294" version="1" comment="postgresql84-plperl is earlier than 0:8.4.4-1.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14866"/>
      <state state_ref="oval:org.mitre.oval:ste:11520"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40292" version="1" comment="postgresql-pl is earlier than 0:7.4.29-1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14537"/>
      <state state_ref="oval:org.mitre.oval:ste:11249"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40291" version="1" comment="postgresql84-server is earlier than 0:8.4.4-1.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15020"/>
      <state state_ref="oval:org.mitre.oval:ste:11520"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40257" version="1" comment="postgresql84-docs is earlier than 0:8.4.4-1.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15371"/>
      <state state_ref="oval:org.mitre.oval:ste:11520"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40253" version="1" comment="postgresql-test is earlier than 0:8.1.21-1.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14367"/>
      <state state_ref="oval:org.mitre.oval:ste:11552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40251" version="1" comment="postgresql-python is earlier than 0:8.1.21-1.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14546"/>
      <state state_ref="oval:org.mitre.oval:ste:11552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40220" version="1" comment="rh-postgresql-libs is earlier than 0:7.3.21-3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14436"/>
      <state state_ref="oval:org.mitre.oval:ste:11594"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40193" version="1" comment="postgresql84-libs is earlier than 0:8.4.4-1.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15091"/>
      <state state_ref="oval:org.mitre.oval:ste:11520"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40180" version="1" comment="rh-postgresql-devel is earlier than 0:7.3.21-3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14466"/>
      <state state_ref="oval:org.mitre.oval:ste:11594"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40140" version="1" comment="rh-postgresql-test is earlier than 0:7.3.21-3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14347"/>
      <state state_ref="oval:org.mitre.oval:ste:11594"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40137" version="1" comment="rh-postgresql is earlier than 0:7.3.21-3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14320"/>
      <state state_ref="oval:org.mitre.oval:ste:11594"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40108" version="1" comment="postgresql84-contrib is earlier than 0:8.4.4-1.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15329"/>
      <state state_ref="oval:org.mitre.oval:ste:11520"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40106" version="1" comment="rh-postgresql-jdbc is earlier than 0:7.3.21-3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14295"/>
      <state state_ref="oval:org.mitre.oval:ste:11594"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40066" version="1" comment="postgresql-libs is earlier than 0:7.4.29-1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14383"/>
      <state state_ref="oval:org.mitre.oval:ste:11249"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39925" version="1" comment="rh-postgresql-tcl is earlier than 0:7.3.21-3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13874"/>
      <state state_ref="oval:org.mitre.oval:ste:11594"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39839" version="1" comment="postgresql-tcl is earlier than 0:8.1.21-1.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14486"/>
      <state state_ref="oval:org.mitre.oval:ste:11552"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39618" version="1" comment="rh-postgresql-docs is earlier than 0:7.3.21-3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13876"/>
      <state state_ref="oval:org.mitre.oval:ste:11594"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:3020" version="1" comment="Patch Q293826 Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1728"/>
      <state state_ref="oval:org.mitre.oval:ste:2828"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1240" version="1" check="at least one" comment="File %windir%\System32\msw3prt.dll is less than 5.0.2195.3649" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:866"/>
      <state state_ref="oval:org.mitre.oval:ste:1112"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35955" version="1" comment="mysql is earlier than 0:4.1.20-3.RHEL4.1.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14355"/>
      <state state_ref="oval:org.mitre.oval:ste:9971"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35917" version="1" comment="mysql-server is earlier than 0:4.1.20-3.RHEL4.1.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14342"/>
      <state state_ref="oval:org.mitre.oval:ste:9971"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35904" version="1" comment="mysql-devel is earlier than 0:4.1.20-3.RHEL4.1.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14481"/>
      <state state_ref="oval:org.mitre.oval:ste:9971"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35902" version="1" comment="mysql is earlier than 0:5.0.22-2.2.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14355"/>
      <state state_ref="oval:org.mitre.oval:ste:10401"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35838" version="1" comment="mysql-bench is earlier than 0:5.0.22-2.2.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14400"/>
      <state state_ref="oval:org.mitre.oval:ste:10401"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35707" version="1" comment="mysql-devel is earlier than 0:5.0.22-2.2.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14481"/>
      <state state_ref="oval:org.mitre.oval:ste:10401"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35488" version="1" comment="mysql-test is earlier than 0:5.0.22-2.2.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14941"/>
      <state state_ref="oval:org.mitre.oval:ste:10401"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35382" version="1" comment="mysql-bench is earlier than 0:4.1.20-3.RHEL4.1.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14400"/>
      <state state_ref="oval:org.mitre.oval:ste:9971"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35066" version="1" comment="mysql-server is earlier than 0:5.0.22-2.2.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14342"/>
      <state state_ref="oval:org.mitre.oval:ste:10401"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36028" version="1" comment="libicu is earlier than 0:3.6-5.11.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14735"/>
      <state state_ref="oval:org.mitre.oval:ste:10705"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35887" version="1" comment="icu is earlier than 0:3.6-5.11.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14949"/>
      <state state_ref="oval:org.mitre.oval:ste:10705"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35820" version="1" comment="libicu-doc is earlier than 0:3.6-5.11.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14890"/>
      <state state_ref="oval:org.mitre.oval:ste:10705"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35153" version="1" comment="libicu-devel is earlier than 0:3.6-5.11.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14587"/>
      <state state_ref="oval:org.mitre.oval:ste:10705"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30887" version="1" comment="gdk-pixbuf-devel is earlier than 1:0.22.0-11.3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13883"/>
      <state state_ref="oval:org.mitre.oval:ste:9169"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30822" version="1" comment="gdk-pixbuf-gnome is earlier than 1:0.22.0-11.3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14410"/>
      <state state_ref="oval:org.mitre.oval:ste:9169"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30817" version="1" comment="gtk2-devel is earlier than 0:2.2.4-8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14350"/>
      <state state_ref="oval:org.mitre.oval:ste:9294"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30571" version="1" comment="gdk-pixbuf is earlier than 1:0.22.0-11.3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14361"/>
      <state state_ref="oval:org.mitre.oval:ste:9169"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30146" version="1" comment="gtk2 is earlier than 0:2.2.4-8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14106"/>
      <state state_ref="oval:org.mitre.oval:ste:9294"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31134" version="1" comment="libxml-devel is earlier than 1:1.8.17-9.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14286"/>
      <state state_ref="oval:org.mitre.oval:ste:9754"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31026" version="1" comment="libxml2 is earlier than 0:2.5.10-7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14133"/>
      <state state_ref="oval:org.mitre.oval:ste:9419"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31007" version="1" comment="libxml2-python is earlier than 0:2.5.10-7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13780"/>
      <state state_ref="oval:org.mitre.oval:ste:9419"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30957" version="1" comment="libxml is earlier than 1:1.8.17-9.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14454"/>
      <state state_ref="oval:org.mitre.oval:ste:9754"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30847" version="1" comment="libxml2-devel is earlier than 0:2.5.10-7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14212"/>
      <state state_ref="oval:org.mitre.oval:ste:9419"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34135" version="1" comment="ipsec-tools is earlier than 0:0.6.5-8.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14216"/>
      <state state_ref="oval:org.mitre.oval:ste:10153"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34880" version="1" comment="kernel-source is earlier than 0:2.4.21-51.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14186"/>
      <state state_ref="oval:org.mitre.oval:ste:10443"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34872" version="1" comment="kernel-smp is earlier than 0:2.4.21-51.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:10443"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34865" version="1" comment="kernel-smp-unsupported is earlier than 0:2.4.21-51.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14218"/>
      <state state_ref="oval:org.mitre.oval:ste:10443"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34813" version="1" comment="kernel-doc is earlier than 0:2.4.21-51.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10443"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34807" version="1" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-51.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14372"/>
      <state state_ref="oval:org.mitre.oval:ste:10443"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34725" version="1" comment="kernel-BOOT is earlier than 0:2.4.21-51.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14219"/>
      <state state_ref="oval:org.mitre.oval:ste:10443"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34508" version="1" comment="kernel-hugemem is earlier than 0:2.4.21-51.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:10443"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34431" version="1" comment="kernel-unsupported is earlier than 0:2.4.21-51.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14229"/>
      <state state_ref="oval:org.mitre.oval:ste:10443"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33889" version="1" comment="kernel is earlier than 0:2.4.21-51.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10443"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31585" version="1" comment="squirrelmail is earlier than 0:1.4.3a-11.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14331"/>
      <state state_ref="oval:org.mitre.oval:ste:9781"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31556" version="1" comment="squirrelmail is earlier than 0:1.4.3a-12.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14331"/>
      <state state_ref="oval:org.mitre.oval:ste:9967"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34201" version="1" comment="tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.1.0.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14686"/>
      <state state_ref="oval:org.mitre.oval:ste:10368"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34190" version="1" comment="tomcat5-webapps is earlier than 0:5.5.23-0jpp.1.0.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14332"/>
      <state state_ref="oval:org.mitre.oval:ste:10368"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34110" version="1" comment="tomcat5 is earlier than 0:5.5.23-0jpp.1.0.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14612"/>
      <state state_ref="oval:org.mitre.oval:ste:10368"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34103" version="1" comment="jakarta-commons-modeler is earlier than 0:1.1-8jpp.1.0.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14883"/>
      <state state_ref="oval:org.mitre.oval:ste:10295"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34093" version="1" comment="tomcat5-jasper is earlier than 0:5.5.23-0jpp.1.0.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14210"/>
      <state state_ref="oval:org.mitre.oval:ste:10368"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34091" version="1" comment="tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.1.0.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14808"/>
      <state state_ref="oval:org.mitre.oval:ste:10368"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34030" version="1" comment="tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.1.0.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14685"/>
      <state state_ref="oval:org.mitre.oval:ste:10368"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33946" version="1" comment="jakarta-commons-modeler-javadoc is earlier than 0:1.1-8jpp.1.0.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14944"/>
      <state state_ref="oval:org.mitre.oval:ste:10295"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33926" version="1" comment="tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.1.0.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14750"/>
      <state state_ref="oval:org.mitre.oval:ste:10368"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33900" version="1" comment="tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.1.0.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14662"/>
      <state state_ref="oval:org.mitre.oval:ste:10368"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33860" version="1" comment="tomcat5-common-lib is earlier than 0:5.5.23-0jpp.1.0.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14815"/>
      <state state_ref="oval:org.mitre.oval:ste:10368"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33729" version="1" comment="tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.1.0.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14622"/>
      <state state_ref="oval:org.mitre.oval:ste:10368"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33402" version="1" comment="tomcat5-server-lib is earlier than 0:5.5.23-0jpp.1.0.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14509"/>
      <state state_ref="oval:org.mitre.oval:ste:10368"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30523" version="1" comment="kdepim is earlier than 6:3.1.3-3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13930"/>
      <state state_ref="oval:org.mitre.oval:ste:9520"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30195" version="1" comment="kdepim-devel is earlier than 6:3.1.3-3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14134"/>
      <state state_ref="oval:org.mitre.oval:ste:9520"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31249" version="1" comment="krb5-workstation is earlier than 0:1.2.7-38" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14279"/>
      <state state_ref="oval:org.mitre.oval:ste:9823"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31238" version="1" comment="krb5 is earlier than 0:1.2.7-38" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14120"/>
      <state state_ref="oval:org.mitre.oval:ste:9823"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30935" version="1" comment="krb5-devel is earlier than 0:1.2.7-38" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14100"/>
      <state state_ref="oval:org.mitre.oval:ste:9823"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30907" version="1" comment="krb5-libs is earlier than 0:1.2.7-38" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14395"/>
      <state state_ref="oval:org.mitre.oval:ste:9823"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30640" version="1" comment="krb5-server is earlier than 0:1.2.7-38" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14452"/>
      <state state_ref="oval:org.mitre.oval:ste:9823"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33904" version="1" comment="gnupg is earlier than 0:1.2.1-20" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13847"/>
      <state state_ref="oval:org.mitre.oval:ste:10393"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33746" version="1" comment="gnupg is earlier than 0:1.2.6-9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13847"/>
      <state state_ref="oval:org.mitre.oval:ste:9988"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33465" version="1" comment="gnupg is earlier than 0:1.4.5-13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13847"/>
      <state state_ref="oval:org.mitre.oval:ste:10213"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32476" version="1" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-40.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14372"/>
      <state state_ref="oval:org.mitre.oval:ste:10124"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32444" version="1" comment="kernel-unsupported is earlier than 0:2.4.21-40.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14229"/>
      <state state_ref="oval:org.mitre.oval:ste:10124"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32362" version="1" comment="kernel-source is earlier than 0:2.4.21-40.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14186"/>
      <state state_ref="oval:org.mitre.oval:ste:10124"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32345" version="1" comment="kernel-BOOT is earlier than 0:2.4.21-40.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14219"/>
      <state state_ref="oval:org.mitre.oval:ste:10124"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32343" version="1" comment="kernel-hugemem is earlier than 0:2.4.21-40.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:10124"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32190" version="1" comment="kernel-doc is earlier than 0:2.4.21-40.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10124"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32109" version="1" comment="kernel-smp-unsupported is earlier than 0:2.4.21-40.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14218"/>
      <state state_ref="oval:org.mitre.oval:ste:10124"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31899" version="1" comment="kernel-smp is earlier than 0:2.4.21-40.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:10124"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31877" version="1" comment="kernel is earlier than 0:2.4.21-40.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10124"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36772" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.21.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:10905"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36727" version="1" comment="kernel-xen is earlier than 0:2.6.18-53.1.21.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:10905"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36697" version="1" comment="kernel-kdump is earlier than 0:2.6.18-53.1.21.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:10905"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36670" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.21.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:10905"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36665" version="1" comment="kernel-devel is earlier than 0:2.6.18-53.1.21.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10905"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36637" version="1" comment="kernel-doc is earlier than 0:2.6.18-53.1.21.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10905"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36610" version="1" comment="kernel-debug is earlier than 0:2.6.18-53.1.21.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14957"/>
      <state state_ref="oval:org.mitre.oval:ste:10905"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36539" version="1" comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.21.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15023"/>
      <state state_ref="oval:org.mitre.oval:ste:10905"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36502" version="1" comment="kernel is earlier than 0:2.6.18-53.1.21.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10905"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35977" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.21.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:10905"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35799" version="1" comment="kernel-headers is earlier than 0:2.6.18-53.1.21.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:10905"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35765" version="1" comment="kernel-PAE is earlier than 0:2.6.18-53.1.21.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:10905"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32917" version="1" comment="wireshark is earlier than 0:0.99.2-EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14711"/>
      <state state_ref="oval:org.mitre.oval:ste:9894"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32882" version="1" comment="wireshark is earlier than 0:0.99.2-EL3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14711"/>
      <state state_ref="oval:org.mitre.oval:ste:10229"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32738" version="1" comment="wireshark-gnome is earlier than 0:0.99.2-EL3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14663"/>
      <state state_ref="oval:org.mitre.oval:ste:10229"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32447" version="1" comment="wireshark-gnome is earlier than 0:0.99.2-EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14663"/>
      <state state_ref="oval:org.mitre.oval:ste:9894"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33352" version="1" comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.13.37.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14624"/>
      <state state_ref="oval:org.mitre.oval:ste:10141"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33346" version="1" comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.13.37.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14184"/>
      <state state_ref="oval:org.mitre.oval:ste:10141"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33343" version="1" comment="XFree86-libs-data is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14326"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33340" version="1" comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.13.37.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14089"/>
      <state state_ref="oval:org.mitre.oval:ste:10141"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33337" version="1" comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.13.37.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14168"/>
      <state state_ref="oval:org.mitre.oval:ste:10141"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33329" version="1" comment="XFree86-font-utils is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14385"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33322" version="1" comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.13.37.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14478"/>
      <state state_ref="oval:org.mitre.oval:ste:10141"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33308" version="1" comment="XFree86 is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14255"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33297" version="1" comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.13.37.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14169"/>
      <state state_ref="oval:org.mitre.oval:ste:10141"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33294" version="1" comment="XFree86-Xnest is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14053"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33289" version="1" comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.13.37.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14097"/>
      <state state_ref="oval:org.mitre.oval:ste:10141"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33283" version="1" comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.13.37.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14580"/>
      <state state_ref="oval:org.mitre.oval:ste:10141"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33279" version="1" comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14045"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33270" version="1" comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14281"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33262" version="1" comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14260"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33260" version="1" comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14067"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33242" version="1" comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.13.37.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14262"/>
      <state state_ref="oval:org.mitre.oval:ste:10141"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33238" version="1" comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13712"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33234" version="1" comment="XFree86-xauth is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14352"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33228" version="1" comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.13.37.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14031"/>
      <state state_ref="oval:org.mitre.oval:ste:10141"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33222" version="1" comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.13.37.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13643"/>
      <state state_ref="oval:org.mitre.oval:ste:10141"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33217" version="1" comment="XFree86-base-fonts is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14407"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33211" version="1" comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.13.37.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14515"/>
      <state state_ref="oval:org.mitre.oval:ste:10141"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33206" version="1" comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.13.37.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14572"/>
      <state state_ref="oval:org.mitre.oval:ste:10141"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33187" version="1" comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.13.37.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14595"/>
      <state state_ref="oval:org.mitre.oval:ste:10141"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33180" version="1" comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14127"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33176" version="1" comment="XFree86-xfs is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14311"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33163" version="1" comment="XFree86-sdk is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14107"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33159" version="1" comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14315"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33158" version="1" comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.13.37.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14553"/>
      <state state_ref="oval:org.mitre.oval:ste:10141"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33135" version="1" comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14226"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33134" version="1" comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14364"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33122" version="1" comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.13.37.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14129"/>
      <state state_ref="oval:org.mitre.oval:ste:10141"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33106" version="1" comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14121"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33068" version="1" comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.13.37.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14291"/>
      <state state_ref="oval:org.mitre.oval:ste:10141"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33053" version="1" comment="XFree86-xdm is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13658"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33033" version="1" comment="XFree86-Xvfb is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13644"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33026" version="1" comment="XFree86-twm is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13667"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32993" version="1" comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14082"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32984" version="1" comment="xorg-x11 is earlier than 0:6.8.2-1.EL.13.37.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14592"/>
      <state state_ref="oval:org.mitre.oval:ste:10141"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32975" version="1" comment="XFree86-libs is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14259"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32909" version="1" comment="XFree86-syriac-fonts is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14198"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32868" version="1" comment="XFree86-doc is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14406"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32802" version="1" comment="XFree86-tools is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13693"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32796" version="1" comment="XFree86-devel is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14397"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32756" version="1" comment="XFree86-truetype-fonts is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14354"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32574" version="1" comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14351"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32484" version="1" comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-115.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14288"/>
      <state state_ref="oval:org.mitre.oval:ste:9898"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1484" version="1" check="at least one" comment="openssl version is less than 0.9.7a-20" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1007"/>
      <state state_ref="oval:org.mitre.oval:ste:1341"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1483" version="1" check="at least one" comment="openssl-devel version is less than 0.9.7a-20" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1006"/>
      <state state_ref="oval:org.mitre.oval:ste:1340"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1482" version="1" check="at least one" comment="openssl-perl version is less than 0.9.7a-20" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1005"/>
      <state state_ref="oval:org.mitre.oval:ste:1339"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1481" version="1" check="at least one" comment="openssl096 version is less than 0.9.6-25.9" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1004"/>
      <state state_ref="oval:org.mitre.oval:ste:1338"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1480" version="1" check="at least one" comment="openssl096b version is less than 0.9.6b-15" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1003"/>
      <state state_ref="oval:org.mitre.oval:ste:1337"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30864" version="1" comment="squid is earlier than 7:2.5.STABLE3-6.3E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14403"/>
      <state state_ref="oval:org.mitre.oval:ste:9633"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32951" version="1" comment="firefox is earlier than 0:1.5.0.7-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10327"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32910" version="1" comment="thunderbird is earlier than 0:1.5.0.7-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:10327"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33978" version="1" comment="xen-devel is earlier than 0:3.0.3-25.0.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14567"/>
      <state state_ref="oval:org.mitre.oval:ste:10133"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33680" version="1" comment="xen-libs is earlier than 0:3.0.3-25.0.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14810"/>
      <state state_ref="oval:org.mitre.oval:ste:10133"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33632" version="1" comment="xen is earlier than 0:3.0.3-25.0.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14646"/>
      <state state_ref="oval:org.mitre.oval:ste:10133"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38373" version="1" comment="imap-devel is earlier than 1:2002d-15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14474"/>
      <state state_ref="oval:org.mitre.oval:ste:11144"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38247" version="1" comment="imap is earlier than 1:2002d-15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14565"/>
      <state state_ref="oval:org.mitre.oval:ste:11144"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38130" version="1" comment="imap-utils is earlier than 1:2002d-15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14484"/>
      <state state_ref="oval:org.mitre.oval:ste:11144"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31265" version="1" comment="ethereal-gnome is earlier than 0:0.10.9-1.EL3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14338"/>
      <state state_ref="oval:org.mitre.oval:ste:9152"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31218" version="1" comment="ethereal is earlier than 0:0.10.9-1.EL3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14030"/>
      <state state_ref="oval:org.mitre.oval:ste:9152"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31103" version="1" comment="ethereal is earlier than 0:0.10.9-1.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14030"/>
      <state state_ref="oval:org.mitre.oval:ste:9749"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31097" version="1" comment="ethereal-gnome is earlier than 0:0.10.9-1.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14338"/>
      <state state_ref="oval:org.mitre.oval:ste:9749"/>
    </rpminfo_test>
    <process_test id="oval:org.mitre.oval:tst:3124" version="1" check="at least one" comment="snmpdx running" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1777"/>
    </process_test>
    <package_test id="oval:org.mitre.oval:tst:1243" version="1" check="at least one" comment="Solstice Enterprise Agents SNMP (SUNWsasnm) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:869"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:1242" version="1" check="at least one" comment="Patch 107709-18 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:868"/>
      <state state_ref="oval:org.mitre.oval:ste:1114"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:1241" version="1" check="at least one" comment="Patch 108869-15 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:867"/>
      <state state_ref="oval:org.mitre.oval:ste:1113"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38775" version="1" comment="pidgin is earlier than 0:2.5.5-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15157"/>
      <state state_ref="oval:org.mitre.oval:ste:11225"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38766" version="1" comment="pidgin is earlier than 0:1.5.1-3.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15157"/>
      <state state_ref="oval:org.mitre.oval:ste:11248"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38749" version="1" comment="finch is earlier than 0:2.5.5-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15156"/>
      <state state_ref="oval:org.mitre.oval:ste:10835"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38730" version="1" comment="pidgin is earlier than 0:2.5.5-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15157"/>
      <state state_ref="oval:org.mitre.oval:ste:10835"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38729" version="1" comment="libpurple is earlier than 0:2.5.5-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14700"/>
      <state state_ref="oval:org.mitre.oval:ste:11225"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38687" version="1" comment="libpurple-tcl is earlier than 0:2.5.5-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14238"/>
      <state state_ref="oval:org.mitre.oval:ste:10835"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38686" version="1" comment="libpurple-perl is earlier than 0:2.5.5-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15144"/>
      <state state_ref="oval:org.mitre.oval:ste:10835"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38675" version="1" comment="libpurple-tcl is earlier than 0:2.5.5-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14238"/>
      <state state_ref="oval:org.mitre.oval:ste:11225"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38659" version="1" comment="libpurple-perl is earlier than 0:2.5.5-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15144"/>
      <state state_ref="oval:org.mitre.oval:ste:11225"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38640" version="1" comment="pidgin-perl is earlier than 0:2.5.5-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14202"/>
      <state state_ref="oval:org.mitre.oval:ste:11225"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38606" version="1" comment="libpurple-devel is earlier than 0:2.5.5-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15112"/>
      <state state_ref="oval:org.mitre.oval:ste:10835"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38593" version="1" comment="finch is earlier than 0:2.5.5-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15156"/>
      <state state_ref="oval:org.mitre.oval:ste:11225"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38580" version="1" comment="finch-devel is earlier than 0:2.5.5-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15074"/>
      <state state_ref="oval:org.mitre.oval:ste:11225"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38579" version="1" comment="libpurple is earlier than 0:2.5.5-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14700"/>
      <state state_ref="oval:org.mitre.oval:ste:10835"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38576" version="1" comment="pidgin-perl is earlier than 0:2.5.5-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14202"/>
      <state state_ref="oval:org.mitre.oval:ste:10835"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38564" version="1" comment="finch-devel is earlier than 0:2.5.5-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15074"/>
      <state state_ref="oval:org.mitre.oval:ste:10835"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38431" version="1" comment="libpurple-devel is earlier than 0:2.5.5-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15112"/>
      <state state_ref="oval:org.mitre.oval:ste:11225"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38361" version="1" comment="pidgin-devel is earlier than 0:2.5.5-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14642"/>
      <state state_ref="oval:org.mitre.oval:ste:11225"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38223" version="1" comment="pidgin-devel is earlier than 0:2.5.5-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14642"/>
      <state state_ref="oval:org.mitre.oval:ste:10835"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32543" version="1" comment="perl-CGI is earlier than 2:2.89-90.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14319"/>
      <state state_ref="oval:org.mitre.oval:ste:9791"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32488" version="1" comment="perl-DB_File is earlier than 2:1.806-90.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14438"/>
      <state state_ref="oval:org.mitre.oval:ste:9901"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32487" version="1" comment="perl is earlier than 2:5.8.0-90.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14460"/>
      <state state_ref="oval:org.mitre.oval:ste:10140"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32422" version="1" comment="perl-suidperl is earlier than 2:5.8.0-90.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13815"/>
      <state state_ref="oval:org.mitre.oval:ste:10140"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32255" version="1" comment="perl-CPAN is earlier than 2:1.61-90.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14597"/>
      <state state_ref="oval:org.mitre.oval:ste:9931"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32092" version="1" comment="perl-suidperl is earlier than 3:5.8.5-16.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13815"/>
      <state state_ref="oval:org.mitre.oval:ste:9842"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31700" version="1" comment="perl is earlier than 3:5.8.5-16.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14460"/>
      <state state_ref="oval:org.mitre.oval:ste:9842"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31150" version="1" comment="ImageMagick is earlier than 0:5.5.6-7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13854"/>
      <state state_ref="oval:org.mitre.oval:ste:9679"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31132" version="1" comment="ImageMagick-devel is earlier than 0:5.5.6-7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13484"/>
      <state state_ref="oval:org.mitre.oval:ste:9679"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30857" version="1" comment="ImageMagick-perl is earlier than 0:5.5.6-7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14270"/>
      <state state_ref="oval:org.mitre.oval:ste:9679"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30848" version="1" comment="ImageMagick-c++ is earlier than 0:5.5.6-7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13475"/>
      <state state_ref="oval:org.mitre.oval:ste:9679"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30831" version="1" comment="ImageMagick-c++-devel is earlier than 0:5.5.6-7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14240"/>
      <state state_ref="oval:org.mitre.oval:ste:9679"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37043" version="1" comment="evolution is earlier than 0:1.4.5-22.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14477"/>
      <state state_ref="oval:org.mitre.oval:ste:10719"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37022" version="1" comment="evolution-devel is earlier than 0:1.4.5-22.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14585"/>
      <state state_ref="oval:org.mitre.oval:ste:10719"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36907" version="1" comment="evolution-devel is earlier than 0:2.0.2-35.0.4.el4_6.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14585"/>
      <state state_ref="oval:org.mitre.oval:ste:10776"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36690" version="1" comment="evolution is earlier than 0:2.0.2-35.0.4.el4_6.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14477"/>
      <state state_ref="oval:org.mitre.oval:ste:10776"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38417" version="1" comment="kernel-PAE is earlier than 0:2.6.18-128.1.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:10912"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38354" version="1" comment="kernel-xen is earlier than 0:2.6.18-128.1.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:10912"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38313" version="1" comment="kernel-headers is earlier than 0:2.6.18-128.1.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:10912"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38257" version="1" comment="kernel-doc is earlier than 0:2.6.18-128.1.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10912"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38198" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:10912"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38191" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:10912"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38174" version="1" comment="kernel is earlier than 0:2.6.18-128.1.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10912"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38124" version="1" comment="kernel-devel is earlier than 0:2.6.18-128.1.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10912"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38060" version="1" comment="kernel-debug is earlier than 0:2.6.18-128.1.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14957"/>
      <state state_ref="oval:org.mitre.oval:ste:10912"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37887" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:10912"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37779" version="1" comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15023"/>
      <state state_ref="oval:org.mitre.oval:ste:10912"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37732" version="1" comment="kernel-kdump is earlier than 0:2.6.18-128.1.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:10912"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33591" version="1" comment="wireshark-gnome is earlier than 0:0.99.5-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14663"/>
      <state state_ref="oval:org.mitre.oval:ste:10273"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33535" version="1" comment="wireshark-gnome is earlier than 0:0.99.5-EL3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14663"/>
      <state state_ref="oval:org.mitre.oval:ste:10436"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33530" version="1" comment="wireshark-gnome is earlier than 0:0.99.5-EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14663"/>
      <state state_ref="oval:org.mitre.oval:ste:10382"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33509" version="1" comment="wireshark is earlier than 0:0.99.5-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14711"/>
      <state state_ref="oval:org.mitre.oval:ste:10273"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33506" version="1" comment="wireshark is earlier than 0:0.99.5-EL3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14711"/>
      <state state_ref="oval:org.mitre.oval:ste:10436"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33380" version="1" comment="wireshark is earlier than 0:0.99.5-EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14711"/>
      <state state_ref="oval:org.mitre.oval:ste:10382"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31063" version="1" comment="nfs-utils is earlier than 0:1.0.6-33EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14333"/>
      <state state_ref="oval:org.mitre.oval:ste:9717"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34450" version="1" comment="gdb is earlier than 0:6.3.0.0-1.138.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13437"/>
      <state state_ref="oval:org.mitre.oval:ste:10470"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33905" version="1" comment="gdb is earlier than 0:6.3.0.0-1.143.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13437"/>
      <state state_ref="oval:org.mitre.oval:ste:10313"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33167" version="1" comment="openssh-askpass-gnome is earlier than 0:3.9p1-8.RHEL4.17" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14434"/>
      <state state_ref="oval:org.mitre.oval:ste:10202"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33151" version="1" comment="openssh-server is earlier than 0:3.9p1-8.RHEL4.17" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14544"/>
      <state state_ref="oval:org.mitre.oval:ste:10202"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33091" version="1" comment="openssh is earlier than 0:3.6.1p2-33.30.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14581"/>
      <state state_ref="oval:org.mitre.oval:ste:10168"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33089" version="1" comment="openssh-askpass is earlier than 0:3.6.1p2-33.30.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14577"/>
      <state state_ref="oval:org.mitre.oval:ste:10168"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33040" version="1" comment="openssh-clients is earlier than 0:3.9p1-8.RHEL4.17" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14409"/>
      <state state_ref="oval:org.mitre.oval:ste:10202"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32994" version="1" comment="openssh is earlier than 0:3.9p1-8.RHEL4.17" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14581"/>
      <state state_ref="oval:org.mitre.oval:ste:10202"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32813" version="1" comment="openssh-askpass is earlier than 0:3.9p1-8.RHEL4.17" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14577"/>
      <state state_ref="oval:org.mitre.oval:ste:10202"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32799" version="1" comment="openssh-clients is earlier than 0:3.6.1p2-33.30.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14409"/>
      <state state_ref="oval:org.mitre.oval:ste:10168"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32651" version="1" comment="openssh-server is earlier than 0:3.6.1p2-33.30.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14544"/>
      <state state_ref="oval:org.mitre.oval:ste:10168"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32173" version="1" comment="openssh-askpass-gnome is earlier than 0:3.6.1p2-33.30.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14434"/>
      <state state_ref="oval:org.mitre.oval:ste:10168"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30711" version="1" comment="samba-common is earlier than 0:3.0.4-6.3E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14032"/>
      <state state_ref="oval:org.mitre.oval:ste:9490"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30674" version="1" comment="samba-client is earlier than 0:3.0.4-6.3E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13861"/>
      <state state_ref="oval:org.mitre.oval:ste:9490"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30601" version="1" comment="samba is earlier than 0:3.0.4-6.3E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13931"/>
      <state state_ref="oval:org.mitre.oval:ste:9490"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30328" version="1" comment="samba-swat is earlier than 0:3.0.4-6.3E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13707"/>
      <state state_ref="oval:org.mitre.oval:ste:9490"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40284" version="1" comment="firefox is earlier than 0:3.0.19-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:11090"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40265" version="1" comment="xulrunner-devel-unstable is earlier than 0:1.9.0.19-1.el5_5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15048"/>
      <state state_ref="oval:org.mitre.oval:ste:11179"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40164" version="1" comment="xulrunner is earlier than 0:1.9.0.19-1.el5_5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15057"/>
      <state state_ref="oval:org.mitre.oval:ste:11179"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40064" version="1" comment="firefox is earlier than 0:3.0.19-1.el5_5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:11547"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39621" version="1" comment="xulrunner-devel is earlier than 0:1.9.0.19-1.el5_5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15100"/>
      <state state_ref="oval:org.mitre.oval:ste:11179"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1244" version="1" check="at least one" comment="the version of umandlg.dll is less than 1.0.0.4" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:870"/>
      <state state_ref="oval:org.mitre.oval:ste:1115"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36019" version="1" comment="dovecot is earlier than 0:1.0.7-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14550"/>
      <state state_ref="oval:org.mitre.oval:ste:10407"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32063" version="1" comment="gaim is earlier than 1:1.3.1-0.el3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14159"/>
      <state state_ref="oval:org.mitre.oval:ste:9922"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31738" version="1" comment="gaim is earlier than 1:1.3.1-0.el4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14159"/>
      <state state_ref="oval:org.mitre.oval:ste:9986"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36096" version="1" comment="setroubleshoot-server is earlier than 0:2.0.5-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14296"/>
      <state state_ref="oval:org.mitre.oval:ste:10750"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35813" version="1" comment="setroubleshoot-plugins is earlier than 0:2.0.4-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15093"/>
      <state state_ref="oval:org.mitre.oval:ste:10788"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35777" version="1" comment="setroubleshoot is earlier than 0:2.0.5-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15036"/>
      <state state_ref="oval:org.mitre.oval:ste:10750"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33698" version="1" comment="cpio is earlier than 0:2.5-13.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14426"/>
      <state state_ref="oval:org.mitre.oval:ste:10425"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:1247" version="3" check="at least one" comment="Win2K/XP/2003 service pack 4 (or earlier) is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:717"/>
      <state state_ref="oval:org.mitre.oval:ste:1118"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1246" version="1" check="at least one" comment="the version of Spoolsv.exe is less than 5.0.2195.7059" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:223"/>
      <state state_ref="oval:org.mitre.oval:ste:1117"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1245" version="1" check="at least one" comment="the patch KB896423 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:871"/>
      <state state_ref="oval:org.mitre.oval:ste:1116"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37646" version="1" comment="ipsec-tools is earlier than 0:0.3.3-7.el4_7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14216"/>
      <state state_ref="oval:org.mitre.oval:ste:10188"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37619" version="1" comment="ipsec-tools is earlier than 0:0.6.5-9.el5_2.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14216"/>
      <state state_ref="oval:org.mitre.oval:ste:11044"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36720" version="1" comment="ipsec-tools is earlier than 0:0.2.5-0.7.rhel3.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14216"/>
      <state state_ref="oval:org.mitre.oval:ste:10981"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38734" version="1" comment="firefox is earlier than 0:3.0.10-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10830"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38551" version="1" comment="xulrunner-devel-unstable is earlier than 0:1.9.0.10-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15048"/>
      <state state_ref="oval:org.mitre.oval:ste:11269"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38406" version="1" comment="firefox is earlier than 0:3.0.10-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:11159"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38068" version="1" comment="xulrunner is earlier than 0:1.9.0.10-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15057"/>
      <state state_ref="oval:org.mitre.oval:ste:11269"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37733" version="1" comment="xulrunner-devel is earlier than 0:1.9.0.10-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15100"/>
      <state state_ref="oval:org.mitre.oval:ste:11269"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38669" version="1" comment="squirrelmail is earlier than 0:1.4.8-5.el4_8.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14331"/>
      <state state_ref="oval:org.mitre.oval:ste:11285"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38027" version="1" comment="squirrelmail is earlier than 0:1.4.8-13.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14331"/>
      <state state_ref="oval:org.mitre.oval:ste:10979"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37946" version="1" comment="squirrelmail is earlier than 0:1.4.8-5.el5_3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14331"/>
      <state state_ref="oval:org.mitre.oval:ste:10813"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39710" version="1" comment="firefox is earlier than 0:3.0.15-3.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10825"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39636" version="1" comment="xulrunner is earlier than 0:1.9.0.15-3.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15057"/>
      <state state_ref="oval:org.mitre.oval:ste:11405"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39602" version="1" comment="xulrunner-devel-unstable is earlier than 0:1.9.0.15-3.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15048"/>
      <state state_ref="oval:org.mitre.oval:ste:11405"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39579" version="1" comment="nspr-devel is earlier than 0:4.7.6-1.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15145"/>
      <state state_ref="oval:org.mitre.oval:ste:10498"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39541" version="1" comment="xulrunner-devel is earlier than 0:1.9.0.15-3.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15100"/>
      <state state_ref="oval:org.mitre.oval:ste:11405"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39525" version="1" comment="nspr is earlier than 0:4.7.6-1.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14745"/>
      <state state_ref="oval:org.mitre.oval:ste:11313"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39294" version="1" comment="firefox is earlier than 0:3.0.15-3.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:11344"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39168" version="1" comment="nspr is earlier than 0:4.7.6-1.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14745"/>
      <state state_ref="oval:org.mitre.oval:ste:10498"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38755" version="1" comment="nspr-devel is earlier than 0:4.7.6-1.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15145"/>
      <state state_ref="oval:org.mitre.oval:ste:11313"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1336" version="1" comment="File Xorg exists" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:924"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:1254" version="1" check="at least one" comment="Patch 108652-94 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:876"/>
      <state state_ref="oval:org.mitre.oval:ste:1124"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:1253" version="1" check="at least one" comment="Patch 112785-52 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:211"/>
      <state state_ref="oval:org.mitre.oval:ste:1123"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:1252" version="1" check="at least one" comment="Patch 119059-08 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:875"/>
      <state state_ref="oval:org.mitre.oval:ste:1122"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:1251" version="1" check="at least one" comment="Patch 108653-83 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:874"/>
      <state state_ref="oval:org.mitre.oval:ste:1121"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:1250" version="1" check="at least one" comment="Patch 112786-41 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:210"/>
      <state state_ref="oval:org.mitre.oval:ste:1120"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:1249" version="1" check="at least one" comment="Patch 119060-08 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:873"/>
      <state state_ref="oval:org.mitre.oval:ste:1119"/>
    </patch_test>
    <process_test id="oval:org.mitre.oval:tst:1248" version="1" check="at least one" comment="The Xsun X server is running" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:872"/>
    </process_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31177" version="1" comment="kernel-source is earlier than 0:2.4.21-27.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14186"/>
      <state state_ref="oval:org.mitre.oval:ste:9692"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31101" version="1" comment="kernel-BOOT is earlier than 0:2.4.21-27.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14219"/>
      <state state_ref="oval:org.mitre.oval:ste:9692"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30999" version="1" comment="kernel-hugemem is earlier than 0:2.4.21-27.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:9692"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30944" version="1" comment="kernel-unsupported is earlier than 0:2.4.21-27.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14229"/>
      <state state_ref="oval:org.mitre.oval:ste:9692"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30940" version="1" comment="kernel is earlier than 0:2.4.21-27.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:9692"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30903" version="1" comment="kernel-doc is earlier than 0:2.4.21-27.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:9692"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30786" version="1" comment="kernel-smp is earlier than 0:2.4.21-27.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:9692"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30752" version="1" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14372"/>
      <state state_ref="oval:org.mitre.oval:ste:9692"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30205" version="1" comment="kernel-smp-unsupported is earlier than 0:2.4.21-27.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14218"/>
      <state state_ref="oval:org.mitre.oval:ste:9692"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35456" version="1" comment="flac is earlier than 0:1.1.0-7.el4_5.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15053"/>
      <state state_ref="oval:org.mitre.oval:ste:10359"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35447" version="1" comment="flac-devel is earlier than 0:1.1.2-28.el5_0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14740"/>
      <state state_ref="oval:org.mitre.oval:ste:10556"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35386" version="1" comment="xmms-flac is earlier than 0:1.1.0-7.el4_5.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15075"/>
      <state state_ref="oval:org.mitre.oval:ste:10359"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35166" version="1" comment="flac is earlier than 0:1.1.2-28.el5_0.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15053"/>
      <state state_ref="oval:org.mitre.oval:ste:10556"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35162" version="1" comment="flac-devel is earlier than 0:1.1.0-7.el4_5.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14740"/>
      <state state_ref="oval:org.mitre.oval:ste:10359"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39658" version="1" comment="samba is earlier than 0:3.0.33-0.18.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13931"/>
      <state state_ref="oval:org.mitre.oval:ste:11350"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39633" version="1" comment="samba-common is earlier than 0:3.0.33-3.15.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14032"/>
      <state state_ref="oval:org.mitre.oval:ste:11296"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39603" version="1" comment="samba-client is earlier than 0:3.0.33-0.18.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13861"/>
      <state state_ref="oval:org.mitre.oval:ste:11350"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39589" version="1" comment="samba-swat is earlier than 0:3.0.33-0.18.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13707"/>
      <state state_ref="oval:org.mitre.oval:ste:11350"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39493" version="1" comment="samba-client is earlier than 0:3.0.33-3.15.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13861"/>
      <state state_ref="oval:org.mitre.oval:ste:11296"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39222" version="1" comment="samba-swat is earlier than 0:3.0.33-3.15.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13707"/>
      <state state_ref="oval:org.mitre.oval:ste:11296"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39205" version="1" comment="samba is earlier than 0:3.0.33-3.15.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13931"/>
      <state state_ref="oval:org.mitre.oval:ste:11296"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39162" version="1" comment="samba-common is earlier than 0:3.0.33-0.18.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14032"/>
      <state state_ref="oval:org.mitre.oval:ste:11350"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31466" version="1" comment="kdelibs-devel is earlier than 6:3.3.1-3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14126"/>
      <state state_ref="oval:org.mitre.oval:ste:9792"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31460" version="1" comment="kdelibs-devel is earlier than 6:3.1.3-6.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14126"/>
      <state state_ref="oval:org.mitre.oval:ste:9673"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31321" version="1" comment="kdelibs is earlier than 6:3.1.3-6.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13933"/>
      <state state_ref="oval:org.mitre.oval:ste:9673"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31019" version="1" comment="kdelibs is earlier than 6:3.3.1-3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13933"/>
      <state state_ref="oval:org.mitre.oval:ste:9792"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35377" version="1" comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.31" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14097"/>
      <state state_ref="oval:org.mitre.oval:ste:10575"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35359" version="1" comment="xorg-x11 is earlier than 0:6.8.2-1.EL.31" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14592"/>
      <state state_ref="oval:org.mitre.oval:ste:10575"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35344" version="1" comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.31" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14572"/>
      <state state_ref="oval:org.mitre.oval:ste:10575"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35323" version="1" comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.31" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14262"/>
      <state state_ref="oval:org.mitre.oval:ste:10575"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35305" version="1" comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.31" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14129"/>
      <state state_ref="oval:org.mitre.oval:ste:10575"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35228" version="1" comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.31" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14089"/>
      <state state_ref="oval:org.mitre.oval:ste:10575"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35212" version="1" comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.31" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14553"/>
      <state state_ref="oval:org.mitre.oval:ste:10575"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35209" version="1" comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.31" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14580"/>
      <state state_ref="oval:org.mitre.oval:ste:10575"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35195" version="1" comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.31" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14515"/>
      <state state_ref="oval:org.mitre.oval:ste:10575"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35141" version="1" comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.31" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14169"/>
      <state state_ref="oval:org.mitre.oval:ste:10575"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35118" version="1" comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.31" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14291"/>
      <state state_ref="oval:org.mitre.oval:ste:10575"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35106" version="1" comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.31" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14168"/>
      <state state_ref="oval:org.mitre.oval:ste:10575"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35069" version="1" comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.31" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14031"/>
      <state state_ref="oval:org.mitre.oval:ste:10575"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34992" version="1" comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.31" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13643"/>
      <state state_ref="oval:org.mitre.oval:ste:10575"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34984" version="1" comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.31" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14595"/>
      <state state_ref="oval:org.mitre.oval:ste:10575"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34940" version="1" comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.31" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14184"/>
      <state state_ref="oval:org.mitre.oval:ste:10575"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34931" version="1" comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.31" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14624"/>
      <state state_ref="oval:org.mitre.oval:ste:10575"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34821" version="1" comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.31" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14478"/>
      <state state_ref="oval:org.mitre.oval:ste:10575"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34718" version="1" comment="xterm is earlier than 0:192-8.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14838"/>
      <state state_ref="oval:org.mitre.oval:ste:9626"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35142" version="1" comment="tar is earlier than 2:1.15.1-23.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14170"/>
      <state state_ref="oval:org.mitre.oval:ste:10450"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35115" version="1" comment="tar is earlier than 0:1.14-12.5.1.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14170"/>
      <state state_ref="oval:org.mitre.oval:ste:10335"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1255" version="1" check="at least one" comment="cvs version is less than 1.11.2-18" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:877"/>
      <state state_ref="oval:org.mitre.oval:ste:1125"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32721" version="1" comment="squirrelmail is earlier than 0:1.4.6-5.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14331"/>
      <state state_ref="oval:org.mitre.oval:ste:9178"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32265" version="1" comment="squirrelmail is earlier than 0:1.4.6-5.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14331"/>
      <state state_ref="oval:org.mitre.oval:ste:9826"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32824" version="1" comment="nss_ldap is earlier than 0:226-17" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14699"/>
      <state state_ref="oval:org.mitre.oval:ste:10196"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36099" version="1" comment="tomcat5-jasper is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14210"/>
      <state state_ref="oval:org.mitre.oval:ste:10676"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36027" version="1" comment="tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14808"/>
      <state state_ref="oval:org.mitre.oval:ste:10676"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35985" version="1" comment="tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14662"/>
      <state state_ref="oval:org.mitre.oval:ste:10676"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35936" version="1" comment="tomcat5-webapps is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14332"/>
      <state state_ref="oval:org.mitre.oval:ste:10676"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35862" version="1" comment="tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14685"/>
      <state state_ref="oval:org.mitre.oval:ste:10676"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35716" version="1" comment="tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14750"/>
      <state state_ref="oval:org.mitre.oval:ste:10676"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35676" version="1" comment="tomcat5-server-lib is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14509"/>
      <state state_ref="oval:org.mitre.oval:ste:10676"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35572" version="1" comment="tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14622"/>
      <state state_ref="oval:org.mitre.oval:ste:10676"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35569" version="1" comment="tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14686"/>
      <state state_ref="oval:org.mitre.oval:ste:10676"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35526" version="1" comment="tomcat5 is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14612"/>
      <state state_ref="oval:org.mitre.oval:ste:10676"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35522" version="1" comment="tomcat5-common-lib is earlier than 0:5.5.23-0jpp.3.0.3.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14815"/>
      <state state_ref="oval:org.mitre.oval:ste:10676"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38988" version="1" comment="bind is earlier than 20:9.2.4-25.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14143"/>
      <state state_ref="oval:org.mitre.oval:ste:11382"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38970" version="1" comment="bind-chroot is earlier than 20:9.2.4-30.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14363"/>
      <state state_ref="oval:org.mitre.oval:ste:11140"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38966" version="1" comment="bind-chroot is earlier than 30:9.3.4-10.P1.el5_3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14363"/>
      <state state_ref="oval:org.mitre.oval:ste:10941"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38957" version="1" comment="bind is earlier than 30:9.3.4-10.P1.el5_3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14143"/>
      <state state_ref="oval:org.mitre.oval:ste:10941"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38941" version="1" comment="bind-libs is earlier than 20:9.2.4-25.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14348"/>
      <state state_ref="oval:org.mitre.oval:ste:11382"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38933" version="1" comment="bind-libs is earlier than 20:9.2.4-30.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14348"/>
      <state state_ref="oval:org.mitre.oval:ste:11140"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38929" version="1" comment="bind-utils is earlier than 20:9.2.4-25.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14263"/>
      <state state_ref="oval:org.mitre.oval:ste:11382"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38919" version="1" comment="bind-devel is earlier than 30:9.3.4-10.P1.el5_3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14242"/>
      <state state_ref="oval:org.mitre.oval:ste:10941"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38899" version="1" comment="bind-chroot is earlier than 20:9.2.4-25.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14363"/>
      <state state_ref="oval:org.mitre.oval:ste:11382"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38752" version="1" comment="bind-utils is earlier than 30:9.3.4-10.P1.el5_3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14263"/>
      <state state_ref="oval:org.mitre.oval:ste:10941"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38638" version="1" comment="bind-sdb is earlier than 30:9.3.4-10.P1.el5_3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14433"/>
      <state state_ref="oval:org.mitre.oval:ste:10941"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38627" version="1" comment="bind-libs is earlier than 30:9.3.4-10.P1.el5_3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14348"/>
      <state state_ref="oval:org.mitre.oval:ste:10941"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38478" version="1" comment="bind-devel is earlier than 20:9.2.4-25.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14242"/>
      <state state_ref="oval:org.mitre.oval:ste:11382"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38468" version="1" comment="bind-libbind-devel is earlier than 30:9.3.4-10.P1.el5_3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14729"/>
      <state state_ref="oval:org.mitre.oval:ste:10941"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38224" version="1" comment="bind-devel is earlier than 20:9.2.4-30.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14242"/>
      <state state_ref="oval:org.mitre.oval:ste:11140"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38212" version="1" comment="bind is earlier than 20:9.2.4-30.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14143"/>
      <state state_ref="oval:org.mitre.oval:ste:11140"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38159" version="1" comment="caching-nameserver is earlier than 30:9.3.4-10.P1.el5_3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14701"/>
      <state state_ref="oval:org.mitre.oval:ste:10941"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37998" version="1" comment="bind-utils is earlier than 20:9.2.4-30.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14263"/>
      <state state_ref="oval:org.mitre.oval:ste:11140"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30947" version="1" comment="spamassassin is earlier than 0:2.55-3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14376"/>
      <state state_ref="oval:org.mitre.oval:ste:9624"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31841" version="1" comment="openmotif-devel is earlier than 0:2.2.3-5.RHEL3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14324"/>
      <state state_ref="oval:org.mitre.oval:ste:9388"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31793" version="1" comment="openmotif is earlier than 0:2.2.3-9.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14408"/>
      <state state_ref="oval:org.mitre.oval:ste:9752"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31748" version="1" comment="openmotif21 is earlier than 0:2.1.30-9.RHEL3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14483"/>
      <state state_ref="oval:org.mitre.oval:ste:9865"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31666" version="1" comment="openmotif-devel is earlier than 0:2.2.3-9.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14324"/>
      <state state_ref="oval:org.mitre.oval:ste:9752"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31659" version="1" comment="openmotif21 is earlier than 0:2.1.30-11.RHEL4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14483"/>
      <state state_ref="oval:org.mitre.oval:ste:9906"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31588" version="1" comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14045"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31578" version="1" comment="XFree86-xfs is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14311"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31567" version="1" comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14364"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31564" version="1" comment="openmotif is earlier than 0:2.2.3-5.RHEL3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14408"/>
      <state state_ref="oval:org.mitre.oval:ste:9388"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31561" version="1" comment="fonts-xorg-ISO8859-9-100dpi is earlier than 0:6.8.1.1-1.EL.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14498"/>
      <state state_ref="oval:org.mitre.oval:ste:9685"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31549" version="1" comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13712"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31544" version="1" comment="XFree86-libs-data is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14326"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31540" version="1" comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14067"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31537" version="1" comment="XFree86-xauth is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14352"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31536" version="1" comment="fonts-xorg-ISO8859-2-100dpi is earlier than 0:6.8.1.1-1.EL.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14468"/>
      <state state_ref="oval:org.mitre.oval:ste:9685"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31524" version="1" comment="XFree86-Xnest is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14053"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31513" version="1" comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14260"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31504" version="1" comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.13.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14129"/>
      <state state_ref="oval:org.mitre.oval:ste:9895"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31501" version="1" comment="fonts-xorg-100dpi is earlier than 0:6.8.1.1-1.EL.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14179"/>
      <state state_ref="oval:org.mitre.oval:ste:9685"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31490" version="1" comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14281"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31471" version="1" comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.13.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14580"/>
      <state state_ref="oval:org.mitre.oval:ste:9895"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31461" version="1" comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.13.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14097"/>
      <state state_ref="oval:org.mitre.oval:ste:9895"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31455" version="1" comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14288"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31451" version="1" comment="fonts-xorg-75dpi is earlier than 0:6.8.1.1-1.EL.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14528"/>
      <state state_ref="oval:org.mitre.oval:ste:9685"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31441" version="1" comment="fonts-xorg-truetype is earlier than 0:6.8.1.1-1.EL.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14313"/>
      <state state_ref="oval:org.mitre.oval:ste:9685"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31437" version="1" comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.13.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14031"/>
      <state state_ref="oval:org.mitre.oval:ste:9895"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31434" version="1" comment="XFree86-xdm is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13658"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31431" version="1" comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.13.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14089"/>
      <state state_ref="oval:org.mitre.oval:ste:9895"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31416" version="1" comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.13.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14169"/>
      <state state_ref="oval:org.mitre.oval:ste:9895"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31407" version="1" comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.13.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14553"/>
      <state state_ref="oval:org.mitre.oval:ste:9895"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31405" version="1" comment="fonts-xorg-ISO8859-15-100dpi is earlier than 0:6.8.1.1-1.EL.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14485"/>
      <state state_ref="oval:org.mitre.oval:ste:9685"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31400" version="1" comment="XFree86-twm is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13667"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31396" version="1" comment="xorg-x11 is earlier than 0:6.8.2-1.EL.13.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14592"/>
      <state state_ref="oval:org.mitre.oval:ste:9895"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31394" version="1" comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14127"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31387" version="1" comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14226"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31370" version="1" comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.13.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14515"/>
      <state state_ref="oval:org.mitre.oval:ste:9895"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31362" version="1" comment="XFree86-devel is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14397"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31352" version="1" comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.13.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14478"/>
      <state state_ref="oval:org.mitre.oval:ste:9895"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31324" version="1" comment="fonts-xorg-ISO8859-14-100dpi is earlier than 0:6.8.1.1-1.EL.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14582"/>
      <state state_ref="oval:org.mitre.oval:ste:9685"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31293" version="1" comment="XFree86-libs is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14259"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31220" version="1" comment="XFree86-truetype-fonts is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14354"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31216" version="1" comment="XFree86-sdk is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14107"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31206" version="1" comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14082"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31182" version="1" comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.13.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14291"/>
      <state state_ref="oval:org.mitre.oval:ste:9895"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31169" version="1" comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.13.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14168"/>
      <state state_ref="oval:org.mitre.oval:ste:9895"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31164" version="1" comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14351"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31154" version="1" comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14121"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31145" version="1" comment="XFree86-Xvfb is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13644"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31127" version="1" comment="XFree86-doc is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14406"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31125" version="1" comment="fonts-xorg-ISO8859-14-75dpi is earlier than 0:6.8.1.1-1.EL.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14404"/>
      <state state_ref="oval:org.mitre.oval:ste:9685"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31100" version="1" comment="fonts-xorg-ISO8859-2-75dpi is earlier than 0:6.8.1.1-1.EL.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14439"/>
      <state state_ref="oval:org.mitre.oval:ste:9685"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31073" version="1" comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.13.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14572"/>
      <state state_ref="oval:org.mitre.oval:ste:9895"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31040" version="1" comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14315"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31028" version="1" comment="fonts-xorg is earlier than 0:6.8.1.1-1.EL.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14510"/>
      <state state_ref="oval:org.mitre.oval:ste:9685"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31010" version="1" comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.13.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13643"/>
      <state state_ref="oval:org.mitre.oval:ste:9895"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30982" version="1" comment="XFree86-font-utils is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14385"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30969" version="1" comment="fonts-xorg-base is earlier than 0:6.8.1.1-1.EL.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14465"/>
      <state state_ref="oval:org.mitre.oval:ste:9685"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30932" version="1" comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.13.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14624"/>
      <state state_ref="oval:org.mitre.oval:ste:9895"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30908" version="1" comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.13.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14595"/>
      <state state_ref="oval:org.mitre.oval:ste:9895"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30898" version="1" comment="fonts-xorg-syriac is earlier than 0:6.8.1.1-1.EL.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14621"/>
      <state state_ref="oval:org.mitre.oval:ste:9685"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30869" version="1" comment="fonts-xorg-cyrillic is earlier than 0:6.8.1.1-1.EL.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14602"/>
      <state state_ref="oval:org.mitre.oval:ste:9685"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30853" version="1" comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.13.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14184"/>
      <state state_ref="oval:org.mitre.oval:ste:9895"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30844" version="1" comment="fonts-xorg-ISO8859-15-75dpi is earlier than 0:6.8.1.1-1.EL.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14443"/>
      <state state_ref="oval:org.mitre.oval:ste:9685"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30836" version="1" comment="XFree86 is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14255"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30693" version="1" comment="XFree86-base-fonts is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14407"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30683" version="1" comment="XFree86-syriac-fonts is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14198"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30634" version="1" comment="XFree86-tools is earlier than 0:4.3.0-81.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13693"/>
      <state state_ref="oval:org.mitre.oval:ste:9916"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30605" version="1" comment="fonts-xorg-ISO8859-9-75dpi is earlier than 0:6.8.1.1-1.EL.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14327"/>
      <state state_ref="oval:org.mitre.oval:ste:9685"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30507" version="1" comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.13.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14262"/>
      <state state_ref="oval:org.mitre.oval:ste:9895"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32528" version="1" comment="kernel-devel is earlier than 0:2.6.9-22.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10104"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32450" version="1" comment="kernel-smp is earlier than 0:2.6.9-22.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:10104"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32446" version="1" comment="kernel-doc is earlier than 0:2.6.9-22.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10104"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32415" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-22.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:10104"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32205" version="1" comment="kernel is earlier than 0:2.6.9-22.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10104"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32137" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-22.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:10104"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31866" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:10104"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30332" version="1" comment="lha is earlier than 0:1.14i-10.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14382"/>
      <state state_ref="oval:org.mitre.oval:ste:9747"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35778" version="1" comment="pcre is earlier than 0:6.6-2.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14505"/>
      <state state_ref="oval:org.mitre.oval:ste:10593"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35771" version="1" comment="pcre is earlier than 0:4.5-4.el4_5.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14505"/>
      <state state_ref="oval:org.mitre.oval:ste:10595"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35756" version="1" comment="pcre-devel is earlier than 0:6.6-2.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14619"/>
      <state state_ref="oval:org.mitre.oval:ste:10593"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35582" version="1" comment="pcre-devel is earlier than 0:4.5-4.el4_5.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14619"/>
      <state state_ref="oval:org.mitre.oval:ste:10595"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30714" version="1" comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13712"/>
      <state state_ref="oval:org.mitre.oval:ste:9729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30669" version="1" comment="XFree86-doc is earlier than 0:4.3.0-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14406"/>
      <state state_ref="oval:org.mitre.oval:ste:9729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30636" version="1" comment="XFree86-syriac-fonts is earlier than 0:4.3.0-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14198"/>
      <state state_ref="oval:org.mitre.oval:ste:9729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30631" version="1" comment="XFree86-tools is earlier than 0:4.3.0-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13693"/>
      <state state_ref="oval:org.mitre.oval:ste:9729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30610" version="1" comment="XFree86-font-utils is earlier than 0:4.3.0-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14385"/>
      <state state_ref="oval:org.mitre.oval:ste:9729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30593" version="1" comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14127"/>
      <state state_ref="oval:org.mitre.oval:ste:9729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30588" version="1" comment="XFree86 is earlier than 0:4.3.0-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14255"/>
      <state state_ref="oval:org.mitre.oval:ste:9729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30567" version="1" comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14045"/>
      <state state_ref="oval:org.mitre.oval:ste:9729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30560" version="1" comment="XFree86-twm is earlier than 0:4.3.0-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13667"/>
      <state state_ref="oval:org.mitre.oval:ste:9729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30537" version="1" comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14121"/>
      <state state_ref="oval:org.mitre.oval:ste:9729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30530" version="1" comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14315"/>
      <state state_ref="oval:org.mitre.oval:ste:9729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30525" version="1" comment="XFree86-xfs is earlier than 0:4.3.0-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14311"/>
      <state state_ref="oval:org.mitre.oval:ste:9729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30518" version="1" comment="XFree86-xdm is earlier than 0:4.3.0-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13658"/>
      <state state_ref="oval:org.mitre.oval:ste:9729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30503" version="1" comment="XFree86-devel is earlier than 0:4.3.0-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14397"/>
      <state state_ref="oval:org.mitre.oval:ste:9729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30500" version="1" comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14281"/>
      <state state_ref="oval:org.mitre.oval:ste:9729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30489" version="1" comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14082"/>
      <state state_ref="oval:org.mitre.oval:ste:9729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30460" version="1" comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14226"/>
      <state state_ref="oval:org.mitre.oval:ste:9729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30316" version="1" comment="XFree86-libs-data is earlier than 0:4.3.0-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14326"/>
      <state state_ref="oval:org.mitre.oval:ste:9729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30273" version="1" comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14067"/>
      <state state_ref="oval:org.mitre.oval:ste:9729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30258" version="1" comment="XFree86-truetype-fonts is earlier than 0:4.3.0-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14354"/>
      <state state_ref="oval:org.mitre.oval:ste:9729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30206" version="1" comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14288"/>
      <state state_ref="oval:org.mitre.oval:ste:9729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30123" version="1" comment="XFree86-xauth is earlier than 0:4.3.0-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14352"/>
      <state state_ref="oval:org.mitre.oval:ste:9729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30113" version="1" comment="XFree86-Xnest is earlier than 0:4.3.0-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14053"/>
      <state state_ref="oval:org.mitre.oval:ste:9729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30100" version="1" comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14364"/>
      <state state_ref="oval:org.mitre.oval:ste:9729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30064" version="1" comment="XFree86-Xvfb is earlier than 0:4.3.0-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13644"/>
      <state state_ref="oval:org.mitre.oval:ste:9729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29998" version="1" comment="XFree86-base-fonts is earlier than 0:4.3.0-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14407"/>
      <state state_ref="oval:org.mitre.oval:ste:9729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29952" version="1" comment="XFree86-libs is earlier than 0:4.3.0-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14259"/>
      <state state_ref="oval:org.mitre.oval:ste:9729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29808" version="1" comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14351"/>
      <state state_ref="oval:org.mitre.oval:ste:9729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29649" version="1" comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14260"/>
      <state state_ref="oval:org.mitre.oval:ste:9729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31361" version="1" comment="perl-suidperl is earlier than 2:5.8.0-89.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13815"/>
      <state state_ref="oval:org.mitre.oval:ste:9701"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31227" version="1" comment="perl-CGI is earlier than 2:2.81-89.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14319"/>
      <state state_ref="oval:org.mitre.oval:ste:9858"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31120" version="1" comment="perl is earlier than 3:5.8.5-12.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14460"/>
      <state state_ref="oval:org.mitre.oval:ste:9531"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31049" version="1" comment="perl-suidperl is earlier than 3:5.8.5-12.1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13815"/>
      <state state_ref="oval:org.mitre.oval:ste:9861"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30945" version="1" comment="perl-DB_File is earlier than 2:1.804-89.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14438"/>
      <state state_ref="oval:org.mitre.oval:ste:9032"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30931" version="1" comment="perl is earlier than 2:5.8.0-89.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14460"/>
      <state state_ref="oval:org.mitre.oval:ste:9701"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30901" version="1" comment="perl-CPAN is earlier than 2:1.61-89.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14597"/>
      <state state_ref="oval:org.mitre.oval:ste:9869"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:182" version="1" comment="Microsoft XML Core Services 6 is installed." check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:190"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:30" version="1" comment="Microsoft XML Core Services 4 is installed." check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:191"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:62" version="1" check="at least one" comment="The version of Msxml4.dll is less than 4.20.9841.0." check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:191"/>
      <state state_ref="oval:org.mitre.oval:ste:117"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:138" version="1" check="at least one" comment="The version of Msxml6.dll is less than 6.0.3890.0." check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:190"/>
      <state state_ref="oval:org.mitre.oval:ste:48"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35989" version="1" comment="e2fsprogs-devel is earlier than 0:1.32-15.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14726"/>
      <state state_ref="oval:org.mitre.oval:ste:10409"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35924" version="1" comment="e2fsprogs-libs is earlier than 0:1.39-10.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15065"/>
      <state state_ref="oval:org.mitre.oval:ste:10429"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35882" version="1" comment="e2fsprogs is earlier than 0:1.32-15.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15117"/>
      <state state_ref="oval:org.mitre.oval:ste:10409"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35816" version="1" comment="e2fsprogs is earlier than 0:1.39-10.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15117"/>
      <state state_ref="oval:org.mitre.oval:ste:10429"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35745" version="1" comment="e2fsprogs-devel is earlier than 0:1.39-10.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14726"/>
      <state state_ref="oval:org.mitre.oval:ste:10429"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35686" version="1" comment="e2fsprogs-devel is earlier than 0:1.35-12.11.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14726"/>
      <state state_ref="oval:org.mitre.oval:ste:10804"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35445" version="1" comment="e2fsprogs is earlier than 0:1.35-12.11.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15117"/>
      <state state_ref="oval:org.mitre.oval:ste:10804"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31170" version="1" comment="cups-libs is earlier than 1:1.1.17-13.3.22" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:8893"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31108" version="1" comment="cups is earlier than 1:1.1.17-13.3.22" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:8893"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31093" version="1" comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:9406"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31056" version="1" comment="cups is earlier than 1:1.1.22-0.rc1.9.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:9406"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30919" version="1" comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:9406"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30882" version="1" comment="cups-devel is earlier than 1:1.1.17-13.3.22" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:8893"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32113" version="1" comment="thunderbird is earlier than 0:1.0.6-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:9970"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39473" version="1" comment="kernel-xen is earlier than 0:2.6.18-164.2.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:11186"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39429" version="1" comment="kernel-debug is earlier than 0:2.6.18-164.2.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14957"/>
      <state state_ref="oval:org.mitre.oval:ste:11186"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39426" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-164.2.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:11186"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39421" version="1" comment="kernel-devel is earlier than 0:2.6.18-164.2.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:11186"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39399" version="1" comment="kernel-headers is earlier than 0:2.6.18-164.2.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:11186"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39391" version="1" comment="kernel-debug-devel is earlier than 0:2.6.18-164.2.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15023"/>
      <state state_ref="oval:org.mitre.oval:ste:11186"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39269" version="1" comment="kernel-PAE is earlier than 0:2.6.18-164.2.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:11186"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39260" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-164.2.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:11186"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39257" version="1" comment="kernel-kdump is earlier than 0:2.6.18-164.2.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:11186"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39233" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-164.2.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:11186"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39203" version="1" comment="kernel is earlier than 0:2.6.18-164.2.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:11186"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39000" version="1" comment="kernel-doc is earlier than 0:2.6.18-164.2.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:11186"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39784" version="1" comment="kernel-devel is earlier than 0:2.6.18-164.9.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:11304"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39772" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-164.9.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:11304"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39766" version="1" comment="kernel-headers is earlier than 0:2.6.18-164.9.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:11304"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39742" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-164.9.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:11304"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39731" version="1" comment="kernel-debug-devel is earlier than 0:2.6.18-164.9.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15023"/>
      <state state_ref="oval:org.mitre.oval:ste:11304"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39674" version="1" comment="kernel-kdump is earlier than 0:2.6.18-164.9.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:11304"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39635" version="1" comment="kernel-debug is earlier than 0:2.6.18-164.9.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14957"/>
      <state state_ref="oval:org.mitre.oval:ste:11304"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39630" version="1" comment="kernel-xen is earlier than 0:2.6.18-164.9.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:11304"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39625" version="1" comment="kernel-PAE is earlier than 0:2.6.18-164.9.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:11304"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39608" version="1" comment="kernel-doc is earlier than 0:2.6.9-89.0.15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:11286"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39556" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:11286"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39526" version="1" comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14060"/>
      <state state_ref="oval:org.mitre.oval:ste:11286"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39509" version="1" comment="kernel-doc is earlier than 0:2.6.18-164.9.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:11304"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39492" version="1" comment="kernel-devel is earlier than 0:2.6.9-89.0.15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:11286"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39485" version="1" comment="kernel is earlier than 0:2.6.9-89.0.15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:11286"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39477" version="1" comment="kernel-xenU is earlier than 0:2.6.9-89.0.15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14301"/>
      <state state_ref="oval:org.mitre.oval:ste:11286"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39456" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-89.0.15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:11286"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39295" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-164.9.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:11304"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39277" version="1" comment="kernel-smp is earlier than 0:2.6.9-89.0.15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:11286"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39250" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:11286"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38900" version="1" comment="kernel is earlier than 0:2.6.18-164.9.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:11304"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38895" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:11286"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38676" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-89.0.15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:11286"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:1395" version="1" deprecated="true" check="at least one" comment="DEPRECATED: Unused; Patch Q823718 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:962"/>
      <state state_ref="oval:org.mitre.oval:ste:1257"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1260" version="1" deprecated="true" check="at least one" comment="DEPRECATED: Unused; File %windir%\System32\odbcbcp.dll is less than 2000.81.9001.40" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:878"/>
      <state state_ref="oval:org.mitre.oval:ste:1130"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1259" version="1" comment="File %windir%\System32\odbcbcp.dll is less than 2000.81.9041.40" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:878"/>
      <state state_ref="oval:org.mitre.oval:ste:1129"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1258" version="1" comment="Microsoft Data Access Components 2.7 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:359"/>
      <state state_ref="oval:org.mitre.oval:ste:1128"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33127" version="1" comment="kernel-source is earlier than 0:2.4.21-47.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14186"/>
      <state state_ref="oval:org.mitre.oval:ste:9554"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33103" version="1" comment="kernel-smp-unsupported is earlier than 0:2.4.21-47.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14218"/>
      <state state_ref="oval:org.mitre.oval:ste:9554"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33074" version="1" comment="kernel-BOOT is earlier than 0:2.4.21-47.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14219"/>
      <state state_ref="oval:org.mitre.oval:ste:9554"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33021" version="1" comment="kernel-smp is earlier than 0:2.4.21-47.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:9554"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33001" version="1" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-47.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14372"/>
      <state state_ref="oval:org.mitre.oval:ste:9554"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32937" version="1" comment="kernel-hugemem is earlier than 0:2.4.21-47.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:9554"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32855" version="1" comment="kernel-doc is earlier than 0:2.4.21-47.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:9554"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32633" version="1" comment="kernel-unsupported is earlier than 0:2.4.21-47.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14229"/>
      <state state_ref="oval:org.mitre.oval:ste:9554"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32280" version="1" comment="kernel is earlier than 0:2.4.21-47.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:9554"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35121" version="1" comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.12-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14479"/>
      <state state_ref="oval:org.mitre.oval:ste:10573"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35033" version="1" comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.12-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14507"/>
      <state state_ref="oval:org.mitre.oval:ste:10573"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34910" version="1" comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.12-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14809"/>
      <state state_ref="oval:org.mitre.oval:ste:10573"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34884" version="1" comment="java-1.5.0-sun-src is earlier than 0:1.5.0.12-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15113"/>
      <state state_ref="oval:org.mitre.oval:ste:10573"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34363" version="1" comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.12-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14499"/>
      <state state_ref="oval:org.mitre.oval:ste:10573"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34327" version="1" comment="java-1.5.0-sun is earlier than 0:1.5.0.12-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14988"/>
      <state state_ref="oval:org.mitre.oval:ste:10573"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30989" version="1" comment="httpd is earlier than 0:2.0.46-44.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:9564"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30849" version="1" comment="httpd-devel is earlier than 0:2.0.46-44.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:9564"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30832" version="1" comment="mod_ssl is earlier than 1:2.0.46-44.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:8994"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37954" version="1" comment="kernel-PAE is earlier than 0:2.6.18-92.1.18.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:10768"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37947" version="1" comment="kernel-doc is earlier than 0:2.6.18-92.1.18.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10768"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37881" version="1" comment="kernel-headers is earlier than 0:2.6.18-92.1.18.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:10768"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37870" version="1" comment="kernel-xen is earlier than 0:2.6.18-92.1.18.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:10768"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37855" version="1" comment="kernel-debug is earlier than 0:2.6.18-92.1.18.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14957"/>
      <state state_ref="oval:org.mitre.oval:ste:10768"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37778" version="1" comment="kernel-kdump is earlier than 0:2.6.18-92.1.18.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:10768"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37774" version="1" comment="kernel is earlier than 0:2.6.18-92.1.18.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10768"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37738" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-92.1.18.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:10768"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37715" version="1" comment="kernel-devel is earlier than 0:2.6.18-92.1.18.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10768"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37668" version="1" comment="kernel-debug-devel is earlier than 0:2.6.18-92.1.18.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15023"/>
      <state state_ref="oval:org.mitre.oval:ste:10768"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37504" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-92.1.18.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:10768"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37247" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-92.1.18.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:10768"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2483" version="1" check="at least one" comment="Red Hat Enterprise 3 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1414"/>
      <state state_ref="oval:org.mitre.oval:ste:2327"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1262" version="1" check="all" comment="fetchmail RPM older than 0:6.2.0-3.el3.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:880"/>
      <state state_ref="oval:org.mitre.oval:ste:1132"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1261" version="1" check="all" comment="/usr/bin/fetchmail is executable by any user" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:879"/>
      <state state_ref="oval:org.mitre.oval:ste:1131"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31048" version="1" comment="mozilla-nss-devel is earlier than 37:1.4.3-3.0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14415"/>
      <state state_ref="oval:org.mitre.oval:ste:9376"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31000" version="1" comment="mozilla-dom-inspector is earlier than 37:1.4.3-3.0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13776"/>
      <state state_ref="oval:org.mitre.oval:ste:9376"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30964" version="1" comment="mozilla is earlier than 37:1.4.3-3.0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14405"/>
      <state state_ref="oval:org.mitre.oval:ste:9376"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30915" version="1" comment="mozilla-js-debugger is earlier than 37:1.4.3-3.0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13991"/>
      <state state_ref="oval:org.mitre.oval:ste:9376"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30905" version="1" comment="mozilla-chat is earlier than 37:1.4.3-3.0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14196"/>
      <state state_ref="oval:org.mitre.oval:ste:9376"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30856" version="1" comment="mozilla-nspr is earlier than 37:1.4.3-3.0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14160"/>
      <state state_ref="oval:org.mitre.oval:ste:9376"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30834" version="1" comment="mozilla-nspr-devel is earlier than 37:1.4.3-3.0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13716"/>
      <state state_ref="oval:org.mitre.oval:ste:9376"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30762" version="1" comment="mozilla-nss is earlier than 37:1.4.3-3.0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14069"/>
      <state state_ref="oval:org.mitre.oval:ste:9376"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30635" version="1" comment="mozilla-mail is earlier than 37:1.4.3-3.0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14423"/>
      <state state_ref="oval:org.mitre.oval:ste:9376"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30111" version="1" comment="mozilla-devel is earlier than 37:1.4.3-3.0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14231"/>
      <state state_ref="oval:org.mitre.oval:ste:9376"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33784" version="1" comment="php-dba is earlier than 0:5.1.6-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14512"/>
      <state state_ref="oval:org.mitre.oval:ste:10062"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33748" version="1" comment="php-mysql is earlier than 0:4.3.2-39.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:10266"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33747" version="1" comment="php-pgsql is earlier than 0:5.1.6-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:10062"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33735" version="1" comment="php-xml is earlier than 0:5.1.6-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14560"/>
      <state state_ref="oval:org.mitre.oval:ste:10062"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33725" version="1" comment="php-mbstring is earlier than 0:4.3.9-3.22.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13746"/>
      <state state_ref="oval:org.mitre.oval:ste:10187"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33706" version="1" comment="php-cli is earlier than 0:5.1.6-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14922"/>
      <state state_ref="oval:org.mitre.oval:ste:10062"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33691" version="1" comment="php-ldap is earlier than 0:4.3.9-3.22.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:10187"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33686" version="1" comment="php-odbc is earlier than 0:5.1.6-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:10062"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33676" version="1" comment="php-pdo is earlier than 0:5.1.6-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14154"/>
      <state state_ref="oval:org.mitre.oval:ste:10062"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33666" version="1" comment="php-devel is earlier than 0:5.1.6-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:10062"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33665" version="1" comment="php-odbc is earlier than 0:4.3.2-39.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:10266"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33662" version="1" comment="php-odbc is earlier than 0:4.3.9-3.22.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:10187"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33652" version="1" comment="php-snmp is earlier than 0:5.1.6-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14508"/>
      <state state_ref="oval:org.mitre.oval:ste:10062"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33640" version="1" comment="php-devel is earlier than 0:4.3.9-3.22.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:10187"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33636" version="1" comment="php-snmp is earlier than 0:4.3.9-3.22.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14508"/>
      <state state_ref="oval:org.mitre.oval:ste:10187"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33617" version="1" comment="php-mysql is earlier than 0:5.1.6-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:10062"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33615" version="1" comment="php is earlier than 0:5.1.6-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:10062"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33562" version="1" comment="php-gd is earlier than 0:4.3.9-3.22.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14335"/>
      <state state_ref="oval:org.mitre.oval:ste:10187"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33561" version="1" comment="php-imap is earlier than 0:5.1.6-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:10062"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33548" version="1" comment="php-domxml is earlier than 0:4.3.9-3.22.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14496"/>
      <state state_ref="oval:org.mitre.oval:ste:10187"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33527" version="1" comment="php-common is earlier than 0:5.1.6-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14841"/>
      <state state_ref="oval:org.mitre.oval:ste:10062"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33526" version="1" comment="php-mbstring is earlier than 0:5.1.6-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13746"/>
      <state state_ref="oval:org.mitre.oval:ste:10062"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33508" version="1" comment="php-xmlrpc is earlier than 0:5.1.6-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14445"/>
      <state state_ref="oval:org.mitre.oval:ste:10062"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33502" version="1" comment="php-ncurses is earlier than 0:5.1.6-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14227"/>
      <state state_ref="oval:org.mitre.oval:ste:10062"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33501" version="1" comment="php-pear is earlier than 0:4.3.9-3.22.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14130"/>
      <state state_ref="oval:org.mitre.oval:ste:10187"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33500" version="1" comment="php is earlier than 0:4.3.9-3.22.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:10187"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33475" version="1" comment="php-devel is earlier than 0:4.3.2-39.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:10266"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33459" version="1" comment="php is earlier than 0:4.3.2-39.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:10266"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33419" version="1" comment="php-imap is earlier than 0:4.3.2-39.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:10266"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33407" version="1" comment="php-imap is earlier than 0:4.3.9-3.22.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:10187"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33403" version="1" comment="php-ldap is earlier than 0:5.1.6-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:10062"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33385" version="1" comment="php-gd is earlier than 0:5.1.6-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14335"/>
      <state state_ref="oval:org.mitre.oval:ste:10062"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33371" version="1" comment="php-pgsql is earlier than 0:4.3.2-39.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:10266"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33282" version="1" comment="php-xmlrpc is earlier than 0:4.3.9-3.22.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14445"/>
      <state state_ref="oval:org.mitre.oval:ste:10187"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33240" version="1" comment="php-soap is earlier than 0:5.1.6-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14366"/>
      <state state_ref="oval:org.mitre.oval:ste:10062"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33156" version="1" comment="php-mysql is earlier than 0:4.3.9-3.22.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:10187"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33105" version="1" comment="php-pgsql is earlier than 0:4.3.9-3.22.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:10187"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33090" version="1" comment="php-ldap is earlier than 0:4.3.2-39.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:10266"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33087" version="1" comment="php-ncurses is earlier than 0:4.3.9-3.22.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14227"/>
      <state state_ref="oval:org.mitre.oval:ste:10187"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32784" version="1" comment="php-bcmath is earlier than 0:5.1.6-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14639"/>
      <state state_ref="oval:org.mitre.oval:ste:10062"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38149" version="1" comment="dovecot is earlier than 0:1.0.7-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14550"/>
      <state state_ref="oval:org.mitre.oval:ste:11139"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35987" version="1" comment="xorg-x11-server-Xephyr is earlier than 0:1.1.1-48.26.el5_1.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14842"/>
      <state state_ref="oval:org.mitre.oval:ste:10751"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35935" version="1" comment="xorg-x11-server-Xorg is earlier than 0:1.1.1-48.26.el5_1.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14653"/>
      <state state_ref="oval:org.mitre.oval:ste:10751"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35908" version="1" comment="xorg-x11-server-Xdmx is earlier than 0:1.1.1-48.26.el5_1.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14353"/>
      <state state_ref="oval:org.mitre.oval:ste:10751"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35861" version="1" comment="xorg-x11-server is earlier than 0:1.1.1-48.26.el5_1.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14418"/>
      <state state_ref="oval:org.mitre.oval:ste:10751"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35690" version="1" comment="xorg-x11-server-Xnest is earlier than 0:1.1.1-48.26.el5_1.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14794"/>
      <state state_ref="oval:org.mitre.oval:ste:10751"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35517" version="1" comment="xorg-x11-server-sdk is earlier than 0:1.1.1-48.26.el5_1.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14873"/>
      <state state_ref="oval:org.mitre.oval:ste:10751"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35399" version="1" comment="xorg-x11-server-Xvfb is earlier than 0:1.1.1-48.26.el5_1.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14709"/>
      <state state_ref="oval:org.mitre.oval:ste:10751"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32188" version="1" comment="openldap-servers-sql is earlier than 0:2.2.13-4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14387"/>
      <state state_ref="oval:org.mitre.oval:ste:9767"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32089" version="1" comment="openldap-devel is earlier than 0:2.2.13-4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14680"/>
      <state state_ref="oval:org.mitre.oval:ste:9767"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32065" version="1" comment="compat-openldap is earlier than 0:2.1.30-4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14705"/>
      <state state_ref="oval:org.mitre.oval:ste:10046"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32059" version="1" comment="openldap-servers is earlier than 0:2.2.13-4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14676"/>
      <state state_ref="oval:org.mitre.oval:ste:9767"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31977" version="1" comment="nss_ldap is earlier than 0:226-10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14699"/>
      <state state_ref="oval:org.mitre.oval:ste:9919"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31874" version="1" comment="openldap-clients is earlier than 0:2.2.13-4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13745"/>
      <state state_ref="oval:org.mitre.oval:ste:9767"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31301" version="1" comment="openldap is earlier than 0:2.2.13-4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14650"/>
      <state state_ref="oval:org.mitre.oval:ste:9767"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:2439" version="3" check="at least one" comment="A pre-release of SeaMonkey 1.0 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1385"/>
      <state state_ref="oval:org.mitre.oval:ste:2284"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2438" version="2" check="at least one" comment="A pre-release of SeaMonkey 1.0 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:794"/>
      <state state_ref="oval:org.mitre.oval:ste:2283"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1268" version="3" check="at least one" comment="Mozilla Firefox version 1.0.7 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:883"/>
      <state state_ref="oval:org.mitre.oval:ste:1138"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1267" version="1" check="at least one" comment="Firefox version 1.0.7 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:228"/>
      <state state_ref="oval:org.mitre.oval:ste:1137"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1266" version="3" check="at least one" comment="Mozilla Thunderbird version 1.0.7 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:882"/>
      <state state_ref="oval:org.mitre.oval:ste:1136"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1265" version="2" check="at least one" comment="Mozilla Thunderbird version 1.0.7 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:226"/>
      <state state_ref="oval:org.mitre.oval:ste:1135"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1264" version="1" check="at least one" comment="Mozilla Suite version 1.7.12 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:230"/>
      <state state_ref="oval:org.mitre.oval:ste:1134"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1263" version="3" check="at least one" comment="Mozilla Suite version 1.7.12 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:881"/>
      <state state_ref="oval:org.mitre.oval:ste:1133"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31939" version="1" comment="gaim is earlier than 1:1.3.1-0.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14159"/>
      <state state_ref="oval:org.mitre.oval:ste:9784"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31762" version="1" comment="gaim is earlier than 1:1.3.1-0.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14159"/>
      <state state_ref="oval:org.mitre.oval:ste:9887"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32302" version="1" comment="mozilla-devel is earlier than 37:1.7.12-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14231"/>
      <state state_ref="oval:org.mitre.oval:ste:9759"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32300" version="1" comment="mozilla-chat is earlier than 37:1.7.12-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14196"/>
      <state state_ref="oval:org.mitre.oval:ste:9759"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32293" version="1" comment="mozilla-nspr is earlier than 37:1.7.12-1.1.3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14160"/>
      <state state_ref="oval:org.mitre.oval:ste:9918"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32289" version="1" comment="mozilla-dom-inspector is earlier than 37:1.7.12-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13776"/>
      <state state_ref="oval:org.mitre.oval:ste:9759"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32248" version="1" comment="mozilla-nss-devel is earlier than 37:1.7.12-1.1.3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14415"/>
      <state state_ref="oval:org.mitre.oval:ste:9918"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32244" version="1" comment="mozilla-js-debugger is earlier than 37:1.7.12-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13991"/>
      <state state_ref="oval:org.mitre.oval:ste:9759"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32242" version="1" comment="mozilla-chat is earlier than 37:1.7.12-1.1.3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14196"/>
      <state state_ref="oval:org.mitre.oval:ste:9918"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32226" version="1" comment="mozilla-mail is earlier than 37:1.7.12-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14423"/>
      <state state_ref="oval:org.mitre.oval:ste:9759"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32209" version="1" comment="mozilla-nspr is earlier than 37:1.7.12-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14160"/>
      <state state_ref="oval:org.mitre.oval:ste:9759"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32170" version="1" comment="devhelp is earlier than 0:0.9.2-2.4.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14497"/>
      <state state_ref="oval:org.mitre.oval:ste:9766"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32169" version="1" comment="mozilla-js-debugger is earlier than 37:1.7.12-1.1.3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13991"/>
      <state state_ref="oval:org.mitre.oval:ste:9918"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32151" version="1" comment="mozilla-mail is earlier than 37:1.7.12-1.1.3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14423"/>
      <state state_ref="oval:org.mitre.oval:ste:9918"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32150" version="1" comment="mozilla-nss is earlier than 37:1.7.12-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14069"/>
      <state state_ref="oval:org.mitre.oval:ste:9759"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32147" version="1" comment="firefox is earlier than 0:1.0.7-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:9322"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32144" version="1" comment="mozilla-devel is earlier than 37:1.7.12-1.1.3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14231"/>
      <state state_ref="oval:org.mitre.oval:ste:9918"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32090" version="1" comment="mozilla-nss-devel is earlier than 37:1.7.12-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14415"/>
      <state state_ref="oval:org.mitre.oval:ste:9759"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32088" version="1" comment="mozilla-nspr-devel is earlier than 37:1.7.12-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13716"/>
      <state state_ref="oval:org.mitre.oval:ste:9759"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32068" version="1" comment="mozilla-nss is earlier than 37:1.7.12-1.1.3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14069"/>
      <state state_ref="oval:org.mitre.oval:ste:9918"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32044" version="1" comment="mozilla-nspr-devel is earlier than 37:1.7.12-1.1.3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13716"/>
      <state state_ref="oval:org.mitre.oval:ste:9918"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32014" version="1" comment="mozilla-dom-inspector is earlier than 37:1.7.12-1.1.3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13776"/>
      <state state_ref="oval:org.mitre.oval:ste:9918"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32012" version="1" comment="devhelp-devel is earlier than 0:0.9.2-2.4.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14520"/>
      <state state_ref="oval:org.mitre.oval:ste:9766"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31897" version="1" comment="mozilla is earlier than 37:1.7.12-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14405"/>
      <state state_ref="oval:org.mitre.oval:ste:9759"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31729" version="1" comment="mozilla is earlier than 37:1.7.12-1.1.3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14405"/>
      <state state_ref="oval:org.mitre.oval:ste:9918"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31477" version="1" comment="thunderbird is earlier than 0:1.0.7-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:9322"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40819" version="1" comment="cups-devel is earlier than 1:1.3.7-18.el5_5.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:11419"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40805" version="1" comment="cups-lpd is earlier than 1:1.3.7-18.el5_5.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14688"/>
      <state state_ref="oval:org.mitre.oval:ste:11419"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40803" version="1" comment="cups is earlier than 1:1.3.7-18.el5_5.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:11419"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40758" version="1" comment="cups is earlier than 1:1.1.17-13.3.65" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:11467"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40697" version="1" comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.32.el4_8.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:10980"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40609" version="1" comment="cups is earlier than 1:1.1.22-0.rc1.9.32.el4_8.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:10980"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40606" version="1" comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.32.el4_8.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:10980"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40547" version="1" comment="cups-devel is earlier than 1:1.1.17-13.3.65" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:11467"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40393" version="1" comment="cups-libs is earlier than 1:1.3.7-18.el5_5.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:11419"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40348" version="1" comment="cups-libs is earlier than 1:1.1.17-13.3.65" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:11467"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35363" version="1" comment="php-domxml is earlier than 0:4.3.9-3.22.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14496"/>
      <state state_ref="oval:org.mitre.oval:ste:10597"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35361" version="1" comment="php-mbstring is earlier than 0:5.1.6-15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13746"/>
      <state state_ref="oval:org.mitre.oval:ste:9682"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35309" version="1" comment="php-odbc is earlier than 0:4.3.9-3.22.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:10597"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35298" version="1" comment="php-pear is earlier than 0:4.3.9-3.22.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14130"/>
      <state state_ref="oval:org.mitre.oval:ste:10597"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35289" version="1" comment="php-ldap is earlier than 0:4.3.9-3.22.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:10597"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35279" version="1" comment="php-bcmath is earlier than 0:5.1.6-15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14639"/>
      <state state_ref="oval:org.mitre.oval:ste:9682"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35270" version="1" comment="php is earlier than 0:5.1.6-15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:9682"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35263" version="1" comment="php-ncurses is earlier than 0:4.3.9-3.22.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14227"/>
      <state state_ref="oval:org.mitre.oval:ste:10597"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35249" version="1" comment="php-imap is earlier than 0:4.3.9-3.22.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:10597"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35221" version="1" comment="php-devel is earlier than 0:5.1.6-15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:9682"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35216" version="1" comment="php is earlier than 0:4.3.2-43.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:10171"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35171" version="1" comment="php-odbc is earlier than 0:4.3.2-43.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:10171"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35170" version="1" comment="php-pdo is earlier than 0:5.1.6-15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14154"/>
      <state state_ref="oval:org.mitre.oval:ste:9682"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35164" version="1" comment="php-ldap is earlier than 0:4.3.2-43.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:10171"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35108" version="1" comment="php-xml is earlier than 0:5.1.6-15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14560"/>
      <state state_ref="oval:org.mitre.oval:ste:9682"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35087" version="1" comment="php-pgsql is earlier than 0:4.3.9-3.22.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:10597"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35084" version="1" comment="php-mysql is earlier than 0:5.1.6-15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:9682"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35078" version="1" comment="php-imap is earlier than 0:5.1.6-15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:9682"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35077" version="1" comment="php-xmlrpc is earlier than 0:5.1.6-15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14445"/>
      <state state_ref="oval:org.mitre.oval:ste:9682"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35044" version="1" comment="php-devel is earlier than 0:4.3.9-3.22.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:10597"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35037" version="1" comment="php-ldap is earlier than 0:5.1.6-15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:9682"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35012" version="1" comment="php-pgsql is earlier than 0:4.3.2-43.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:10171"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35010" version="1" comment="php-mysql is earlier than 0:4.3.9-3.22.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:10597"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35008" version="1" comment="php-xmlrpc is earlier than 0:4.3.9-3.22.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14445"/>
      <state state_ref="oval:org.mitre.oval:ste:10597"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34976" version="1" comment="php-mbstring is earlier than 0:4.3.9-3.22.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13746"/>
      <state state_ref="oval:org.mitre.oval:ste:10597"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34964" version="1" comment="php-soap is earlier than 0:5.1.6-15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14366"/>
      <state state_ref="oval:org.mitre.oval:ste:9682"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34943" version="1" comment="php-odbc is earlier than 0:5.1.6-15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:9682"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34934" version="1" comment="php-snmp is earlier than 0:5.1.6-15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14508"/>
      <state state_ref="oval:org.mitre.oval:ste:9682"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34896" version="1" comment="php-common is earlier than 0:5.1.6-15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14841"/>
      <state state_ref="oval:org.mitre.oval:ste:9682"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34820" version="1" comment="php-devel is earlier than 0:4.3.2-43.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:10171"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34818" version="1" comment="php-imap is earlier than 0:4.3.2-43.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:10171"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34802" version="1" comment="php-gd is earlier than 0:5.1.6-15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14335"/>
      <state state_ref="oval:org.mitre.oval:ste:9682"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34796" version="1" comment="php-snmp is earlier than 0:4.3.9-3.22.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14508"/>
      <state state_ref="oval:org.mitre.oval:ste:10597"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34787" version="1" comment="php-mysql is earlier than 0:4.3.2-43.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:10171"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34769" version="1" comment="php-pgsql is earlier than 0:5.1.6-15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:9682"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34764" version="1" comment="php-cli is earlier than 0:5.1.6-15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14922"/>
      <state state_ref="oval:org.mitre.oval:ste:9682"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34689" version="1" comment="php-ncurses is earlier than 0:5.1.6-15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14227"/>
      <state state_ref="oval:org.mitre.oval:ste:9682"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34683" version="1" comment="php-gd is earlier than 0:4.3.9-3.22.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14335"/>
      <state state_ref="oval:org.mitre.oval:ste:10597"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34376" version="1" comment="php-dba is earlier than 0:5.1.6-15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14512"/>
      <state state_ref="oval:org.mitre.oval:ste:9682"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34365" version="1" comment="php is earlier than 0:4.3.9-3.22.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:10597"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31099" version="1" comment="thunderbird is earlier than 0:1.0-1.1.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:9820"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32664" version="1" comment="dia is earlier than 1:0.94-5.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14682"/>
      <state state_ref="oval:org.mitre.oval:ste:10073"/>
    </rpminfo_test>
    <unknown_test id="oval:org.mitre.oval:tst:1271" version="1" comment="Affected bkupexec.exe versions 3.60.1.298" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <oval-def:notes xmlns:oval1="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <note xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">We think, but are not sure that the affected version of bkupexec.exe is 3.60.1.298 The file should be found in C:\Program Files\VERITAS\Backup Exec\NT\bkupexec.exe</note>
      </oval-def:notes>
    </unknown_test>
    <registry_test id="oval:org.mitre.oval:tst:1270" version="1" comment="Veritas Backup Exec 8.5 Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:885"/>
      <state state_ref="oval:org.mitre.oval:ste:1140"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1269" version="1" comment="RestrictAnonymous registry value allows anonymous connections" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:884"/>
      <state state_ref="oval:org.mitre.oval:ste:1139"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40344" version="1" comment="httpd-manual is earlier than 0:2.2.3-31.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14457"/>
      <state state_ref="oval:org.mitre.oval:ste:11510"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40311" version="1" comment="httpd is earlier than 0:2.2.3-31.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:11510"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40285" version="1" comment="mod_ssl is earlier than 0:2.0.52-41.ent.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:11055"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40118" version="1" comment="mod_ssl is earlier than 0:2.2.3-31.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:11510"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40049" version="1" comment="httpd-devel is earlier than 0:2.0.52-41.ent.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:11055"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40037" version="1" comment="httpd-suexec is earlier than 0:2.0.52-41.ent.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14611"/>
      <state state_ref="oval:org.mitre.oval:ste:11055"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39967" version="1" comment="httpd is earlier than 0:2.0.52-41.ent.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:11055"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39553" version="1" comment="httpd-devel is earlier than 0:2.2.3-31.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:11510"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39371" version="1" comment="httpd-manual is earlier than 0:2.0.52-41.ent.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14457"/>
      <state state_ref="oval:org.mitre.oval:ste:11055"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33268" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.6-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:9797"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33241" version="1" comment="seamonkey-nspr is earlier than 0:1.0.6-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:9797"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33216" version="1" comment="thunderbird is earlier than 0:1.5.0.8-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:10176"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33214" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.6-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:9797"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33198" version="1" comment="devhelp-devel is earlier than 0:0.10-0.5.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14520"/>
      <state state_ref="oval:org.mitre.oval:ste:10320"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33188" version="1" comment="seamonkey-chat is earlier than 0:1.0.6-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10329"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33185" version="1" comment="devhelp is earlier than 0:0.10-0.5.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14497"/>
      <state state_ref="oval:org.mitre.oval:ste:10320"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33171" version="1" comment="seamonkey-nss is earlier than 0:1.0.6-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:9797"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33140" version="1" comment="firefox is earlier than 0:1.5.0.8-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10176"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33131" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.6-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10329"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33128" version="1" comment="seamonkey is earlier than 0:1.0.6-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10329"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33118" version="1" comment="seamonkey-chat is earlier than 0:1.0.6-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:9797"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33113" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.6-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10329"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33088" version="1" comment="seamonkey-mail is earlier than 0:1.0.6-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:9797"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33022" version="1" comment="seamonkey-nss is earlier than 0:1.0.6-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:10329"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32940" version="1" comment="seamonkey-nspr is earlier than 0:1.0.6-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:10329"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32857" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.6-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:9797"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32856" version="1" comment="seamonkey-devel is earlier than 0:1.0.6-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:9797"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32780" version="1" comment="seamonkey-devel is earlier than 0:1.0.6-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10329"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32752" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.6-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:9797"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32596" version="1" comment="seamonkey-mail is earlier than 0:1.0.6-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10329"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32536" version="1" comment="seamonkey is earlier than 0:1.0.6-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:9797"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32275" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.6-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:10329"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32259" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.6-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:10329"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36474" version="1" comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:10715"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36403" version="1" comment="cups-libs is earlier than 1:1.1.17-13.3.52" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:10907"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36214" version="1" comment="cups is earlier than 1:1.1.17-13.3.52" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:10907"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36146" version="1" comment="cups-devel is earlier than 1:1.1.17-13.3.52" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:10907"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36036" version="1" comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:10715"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35913" version="1" comment="cups is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:10715"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31240" version="1" comment="alsa-lib is earlier than 0:1.0.6-5.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14245"/>
      <state state_ref="oval:org.mitre.oval:ste:9817"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31116" version="1" comment="alsa-lib-devel is earlier than 0:1.0.6-5.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14304"/>
      <state state_ref="oval:org.mitre.oval:ste:9817"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34686" version="1" comment="spamassassin is earlier than 0:3.1.9-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14376"/>
      <state state_ref="oval:org.mitre.oval:ste:9803"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33970" version="1" comment="spamassassin is earlier than 0:3.1.9-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14376"/>
      <state state_ref="oval:org.mitre.oval:ste:10310"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32522" version="1" comment="ImageMagick-devel is earlier than 0:6.0.7.1-14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13484"/>
      <state state_ref="oval:org.mitre.oval:ste:10009"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32517" version="1" comment="ImageMagick-perl is earlier than 0:5.5.6-18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14270"/>
      <state state_ref="oval:org.mitre.oval:ste:10110"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32501" version="1" comment="ImageMagick is earlier than 0:5.5.6-18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13854"/>
      <state state_ref="oval:org.mitre.oval:ste:10110"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32474" version="1" comment="ImageMagick-c++ is earlier than 0:5.5.6-18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13475"/>
      <state state_ref="oval:org.mitre.oval:ste:10110"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32456" version="1" comment="ImageMagick-c++ is earlier than 0:6.0.7.1-14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13475"/>
      <state state_ref="oval:org.mitre.oval:ste:10009"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32445" version="1" comment="ImageMagick-perl is earlier than 0:6.0.7.1-14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14270"/>
      <state state_ref="oval:org.mitre.oval:ste:10009"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32312" version="1" comment="ImageMagick-c++-devel is earlier than 0:5.5.6-18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14240"/>
      <state state_ref="oval:org.mitre.oval:ste:10110"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32268" version="1" comment="ImageMagick is earlier than 0:6.0.7.1-14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13854"/>
      <state state_ref="oval:org.mitre.oval:ste:10009"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32118" version="1" comment="ImageMagick-devel is earlier than 0:5.5.6-18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13484"/>
      <state state_ref="oval:org.mitre.oval:ste:10110"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32085" version="1" comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14240"/>
      <state state_ref="oval:org.mitre.oval:ste:10009"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32965" version="1" comment="httpd-manual is earlier than 0:2.0.52-28.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14457"/>
      <state state_ref="oval:org.mitre.oval:ste:10117"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32872" version="1" comment="httpd-suexec is earlier than 0:2.0.52-28.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14611"/>
      <state state_ref="oval:org.mitre.oval:ste:10117"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32846" version="1" comment="mod_ssl is earlier than 1:2.0.52-28.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:10199"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32782" version="1" comment="httpd-devel is earlier than 0:2.0.46-61.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:10248"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32713" version="1" comment="mod_ssl is earlier than 1:2.0.46-61.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:10103"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32712" version="1" comment="httpd is earlier than 0:2.0.52-28.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:10117"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32473" version="1" comment="httpd is earlier than 0:2.0.46-61.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:10248"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32459" version="1" comment="httpd-devel is earlier than 0:2.0.52-28.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:10117"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34419" version="1" comment="mcstrans is earlier than 0:0.2.6-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14952"/>
      <state state_ref="oval:org.mitre.oval:ste:9998"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39397" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.45.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:10490"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39389" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-0.45.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:10490"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39378" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-0.45.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:10490"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39364" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-48.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:11466"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39359" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.45.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10490"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39351" version="1" comment="nspr-devel is earlier than 0:4.7.5-1.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15145"/>
      <state state_ref="oval:org.mitre.oval:ste:10576"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39320" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-48.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:11466"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39293" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-48.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:11466"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39284" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-0.45.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10490"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39270" version="1" comment="seamonkey is earlier than 0:1.0.9-0.45.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10490"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39223" version="1" comment="nspr is earlier than 0:4.7.5-1.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14745"/>
      <state state_ref="oval:org.mitre.oval:ste:11191"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39208" version="1" comment="xulrunner-devel-unstable is earlier than 0:1.9.0.14-1.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15048"/>
      <state state_ref="oval:org.mitre.oval:ste:11386"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39206" version="1" comment="xulrunner is earlier than 0:1.9.0.14-1.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15057"/>
      <state state_ref="oval:org.mitre.oval:ste:11386"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39195" version="1" comment="firefox is earlier than 0:3.0.14-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:11214"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39181" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-48.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:11466"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39150" version="1" comment="nspr-devel is earlier than 0:4.7.5-1.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15145"/>
      <state state_ref="oval:org.mitre.oval:ste:11191"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39118" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-0.45.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10490"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39097" version="1" comment="firefox is earlier than 0:3.0.14-1.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:11336"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39088" version="1" comment="nspr is earlier than 0:4.7.5-1.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14745"/>
      <state state_ref="oval:org.mitre.oval:ste:10576"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39081" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-48.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:11466"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39036" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.45.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:10490"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39001" version="1" comment="xulrunner-devel is earlier than 0:1.9.0.14-1.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15100"/>
      <state state_ref="oval:org.mitre.oval:ste:11386"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38976" version="1" comment="seamonkey is earlier than 0:1.0.9-48.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:11466"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38466" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.45.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10490"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38444" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-0.45.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10490"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36448" version="1" comment="gd-devel is earlier than 0:2.0.33-9.4.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14396"/>
      <state state_ref="oval:org.mitre.oval:ste:10350"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36408" version="1" comment="gd-devel is earlier than 0:2.0.28-5.4E.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14396"/>
      <state state_ref="oval:org.mitre.oval:ste:10794"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36386" version="1" comment="gd is earlier than 0:2.0.28-5.4E.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14414"/>
      <state state_ref="oval:org.mitre.oval:ste:10794"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36297" version="1" comment="gd is earlier than 0:2.0.33-9.4.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14414"/>
      <state state_ref="oval:org.mitre.oval:ste:10350"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35759" version="1" comment="gd-progs is earlier than 0:2.0.33-9.4.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14462"/>
      <state state_ref="oval:org.mitre.oval:ste:10350"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35731" version="1" comment="gd-progs is earlier than 0:2.0.28-5.4E.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14462"/>
      <state state_ref="oval:org.mitre.oval:ste:10794"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31290" version="1" comment="exim is earlier than 0:4.43-1.RHEL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14578"/>
      <state state_ref="oval:org.mitre.oval:ste:9291"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31133" version="1" comment="exim-doc is earlier than 0:4.43-1.RHEL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14594"/>
      <state state_ref="oval:org.mitre.oval:ste:9291"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30863" version="1" comment="exim-sa is earlier than 0:4.43-1.RHEL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14247"/>
      <state state_ref="oval:org.mitre.oval:ste:9291"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30769" version="1" comment="exim-mon is earlier than 0:4.43-1.RHEL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14228"/>
      <state state_ref="oval:org.mitre.oval:ste:9291"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35343" version="1" comment="kdebase-devel is earlier than 0:3.3.1-6.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14419"/>
      <state state_ref="oval:org.mitre.oval:ste:10360"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35321" version="1" comment="kdebase-devel is earlier than 0:3.5.4-15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14419"/>
      <state state_ref="oval:org.mitre.oval:ste:9708"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34844" version="1" comment="kdebase is earlier than 0:3.5.4-15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14264"/>
      <state state_ref="oval:org.mitre.oval:ste:9708"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34380" version="1" comment="kdebase is earlier than 0:3.3.1-6.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14264"/>
      <state state_ref="oval:org.mitre.oval:ste:10360"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30913" version="1" comment="samba-client is earlier than 0:3.0.7-1.3E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13861"/>
      <state state_ref="oval:org.mitre.oval:ste:9653"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30778" version="1" comment="samba is earlier than 0:3.0.7-1.3E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13931"/>
      <state state_ref="oval:org.mitre.oval:ste:9653"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30580" version="1" comment="samba-common is earlier than 0:3.0.7-1.3E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14032"/>
      <state state_ref="oval:org.mitre.oval:ste:9653"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30191" version="1" comment="samba-swat is earlier than 0:3.0.7-1.3E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13707"/>
      <state state_ref="oval:org.mitre.oval:ste:9653"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33914" version="1" comment="kernel-devel is earlier than 0:2.6.18-8.1.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10358"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33902" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:10358"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33879" version="1" comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14853"/>
      <state state_ref="oval:org.mitre.oval:ste:10358"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33839" version="1" comment="kernel-xen is earlier than 0:2.6.18-8.1.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:10358"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33740" version="1" comment="kernel is earlier than 0:2.6.18-8.1.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10358"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33736" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:10358"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33730" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:10358"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33717" version="1" comment="kernel-kdump is earlier than 0:2.6.18-8.1.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:10358"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33621" version="1" comment="kernel-doc is earlier than 0:2.6.18-8.1.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10358"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33489" version="1" comment="kernel-PAE is earlier than 0:2.6.18-8.1.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:10358"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33412" version="1" comment="kernel-headers is earlier than 0:2.6.18-8.1.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:10358"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39247" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-164.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:11434"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39245" version="1" comment="kernel-doc is earlier than 0:2.6.18-164.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:11434"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39145" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-164.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:11434"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39130" version="1" comment="kernel-PAE is earlier than 0:2.6.18-164.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:11434"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39122" version="1" comment="kernel-xen is earlier than 0:2.6.18-164.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:11434"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39058" version="1" comment="kernel-headers is earlier than 0:2.6.18-164.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:11434"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38831" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-164.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:11434"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38795" version="1" comment="kernel is earlier than 0:2.6.18-164.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:11434"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38585" version="1" comment="kernel-devel is earlier than 0:2.6.18-164.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:11434"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38567" version="1" comment="kernel-debug-devel is earlier than 0:2.6.18-164.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15023"/>
      <state state_ref="oval:org.mitre.oval:ste:11434"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38332" version="1" comment="kernel-debug is earlier than 0:2.6.18-164.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14957"/>
      <state state_ref="oval:org.mitre.oval:ste:11434"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38255" version="1" comment="kernel-kdump is earlier than 0:2.6.18-164.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:11434"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36470" version="1" comment="java-1.5.0-bea-src is earlier than 0:1.5.0.14-1jpp.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15140"/>
      <state state_ref="oval:org.mitre.oval:ste:10775"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36452" version="1" comment="java-1.5.0-bea-missioncontrol is earlier than 0:1.5.0.14-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14859"/>
      <state state_ref="oval:org.mitre.oval:ste:10785"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36444" version="1" comment="java-1.5.0-bea is earlier than 0:1.5.0.14-1jpp.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15042"/>
      <state state_ref="oval:org.mitre.oval:ste:10775"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36435" version="1" comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.14-1jpp.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14721"/>
      <state state_ref="oval:org.mitre.oval:ste:10775"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36374" version="1" comment="java-1.5.0-bea is earlier than 0:1.5.0.14-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15042"/>
      <state state_ref="oval:org.mitre.oval:ste:10785"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36372" version="1" comment="java-1.5.0-bea-src is earlier than 0:1.5.0.14-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15140"/>
      <state state_ref="oval:org.mitre.oval:ste:10785"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36337" version="1" comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.14-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14356"/>
      <state state_ref="oval:org.mitre.oval:ste:10785"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36290" version="1" comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.14-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14721"/>
      <state state_ref="oval:org.mitre.oval:ste:10785"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36263" version="1" comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.14-1jpp.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14427"/>
      <state state_ref="oval:org.mitre.oval:ste:10775"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36261" version="1" comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.14-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14427"/>
      <state state_ref="oval:org.mitre.oval:ste:10785"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36151" version="1" comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.14-1jpp.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14356"/>
      <state state_ref="oval:org.mitre.oval:ste:10775"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35673" version="1" comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.6-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14679"/>
      <state state_ref="oval:org.mitre.oval:ste:10584"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35644" version="1" comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.6-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14760"/>
      <state state_ref="oval:org.mitre.oval:ste:10714"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35633" version="1" comment="java-1.5.0-ibm-accessibility is earlier than 1:1.5.0.6-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14643"/>
      <state state_ref="oval:org.mitre.oval:ste:10714"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35624" version="1" comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.6-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14789"/>
      <state state_ref="oval:org.mitre.oval:ste:10714"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35617" version="1" comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.6-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14760"/>
      <state state_ref="oval:org.mitre.oval:ste:10584"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35584" version="1" comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.6-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14824"/>
      <state state_ref="oval:org.mitre.oval:ste:10714"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35478" version="1" comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.6-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14918"/>
      <state state_ref="oval:org.mitre.oval:ste:10584"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35465" version="1" comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.6-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14795"/>
      <state state_ref="oval:org.mitre.oval:ste:10584"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35453" version="1" comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.6-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14795"/>
      <state state_ref="oval:org.mitre.oval:ste:10714"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35437" version="1" comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.13-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14499"/>
      <state state_ref="oval:org.mitre.oval:ste:10365"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35429" version="1" comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.6-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14679"/>
      <state state_ref="oval:org.mitre.oval:ste:10714"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35413" version="1" comment="java-1.5.0-sun-src is earlier than 0:1.5.0.13-1jpp.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15113"/>
      <state state_ref="oval:org.mitre.oval:ste:10557"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35392" version="1" comment="java-1.5.0-sun-src is earlier than 0:1.5.0.13-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15113"/>
      <state state_ref="oval:org.mitre.oval:ste:10365"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35384" version="1" comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.13-1jpp.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14507"/>
      <state state_ref="oval:org.mitre.oval:ste:10557"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35317" version="1" comment="java-1.5.0-sun is earlier than 0:1.5.0.13-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14988"/>
      <state state_ref="oval:org.mitre.oval:ste:10365"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35280" version="1" comment="java-1.5.0-ibm is earlier than 1:1.5.0.6-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14898"/>
      <state state_ref="oval:org.mitre.oval:ste:10714"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35272" version="1" comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.13-1jpp.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14809"/>
      <state state_ref="oval:org.mitre.oval:ste:10557"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35256" version="1" comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.13-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14507"/>
      <state state_ref="oval:org.mitre.oval:ste:10365"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35191" version="1" comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.13-1jpp.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14499"/>
      <state state_ref="oval:org.mitre.oval:ste:10557"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35144" version="1" comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.6-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14918"/>
      <state state_ref="oval:org.mitre.oval:ste:10714"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35110" version="1" comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.6-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14789"/>
      <state state_ref="oval:org.mitre.oval:ste:10584"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35057" version="1" comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.13-1jpp.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14479"/>
      <state state_ref="oval:org.mitre.oval:ste:10557"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34849" version="1" comment="java-1.5.0-sun is earlier than 0:1.5.0.13-1jpp.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14988"/>
      <state state_ref="oval:org.mitre.oval:ste:10557"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34772" version="1" comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.13-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14479"/>
      <state state_ref="oval:org.mitre.oval:ste:10365"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34760" version="1" comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.13-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14809"/>
      <state state_ref="oval:org.mitre.oval:ste:10365"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34688" version="1" comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.6-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14824"/>
      <state state_ref="oval:org.mitre.oval:ste:10584"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34668" version="1" comment="java-1.5.0-ibm is earlier than 1:1.5.0.6-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14898"/>
      <state state_ref="oval:org.mitre.oval:ste:10584"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31780" version="1" comment="mozilla-devel is earlier than 37:1.7.7-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14231"/>
      <state state_ref="oval:org.mitre.oval:ste:9503"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31758" version="1" comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13716"/>
      <state state_ref="oval:org.mitre.oval:ste:9503"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31751" version="1" comment="mozilla is earlier than 37:1.7.7-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14405"/>
      <state state_ref="oval:org.mitre.oval:ste:9503"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31749" version="1" comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13776"/>
      <state state_ref="oval:org.mitre.oval:ste:9503"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31716" version="1" comment="mozilla-nspr is earlier than 37:1.7.7-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14160"/>
      <state state_ref="oval:org.mitre.oval:ste:9503"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31658" version="1" comment="devhelp is earlier than 0:0.9.2-2.4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14497"/>
      <state state_ref="oval:org.mitre.oval:ste:9795"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31647" version="1" comment="mozilla-chat is earlier than 37:1.7.7-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14196"/>
      <state state_ref="oval:org.mitre.oval:ste:9503"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31636" version="1" comment="mozilla-nss is earlier than 37:1.7.7-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14069"/>
      <state state_ref="oval:org.mitre.oval:ste:9503"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31488" version="1" comment="devhelp-devel is earlier than 0:0.9.2-2.4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14520"/>
      <state state_ref="oval:org.mitre.oval:ste:9795"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31478" version="1" comment="mozilla-js-debugger is earlier than 37:1.7.7-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13991"/>
      <state state_ref="oval:org.mitre.oval:ste:9503"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30850" version="1" comment="mozilla-mail is earlier than 37:1.7.7-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14423"/>
      <state state_ref="oval:org.mitre.oval:ste:9503"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30828" version="1" comment="mozilla-nss-devel is earlier than 37:1.7.7-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14415"/>
      <state state_ref="oval:org.mitre.oval:ste:9503"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37064" version="1" comment="evolution-devel is earlier than 0:2.12.3-8.el5_2.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14585"/>
      <state state_ref="oval:org.mitre.oval:ste:10930"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36885" version="1" comment="evolution is earlier than 0:2.12.3-8.el5_2.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14477"/>
      <state state_ref="oval:org.mitre.oval:ste:10930"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36803" version="1" comment="evolution-help is earlier than 0:2.12.3-8.el5_2.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14325"/>
      <state state_ref="oval:org.mitre.oval:ste:10930"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36592" version="1" comment="evolution28-devel is earlier than 0:2.8.0-53.el4_6.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14947"/>
      <state state_ref="oval:org.mitre.oval:ste:10897"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36506" version="1" comment="evolution28 is earlier than 0:2.8.0-53.el4_6.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15104"/>
      <state state_ref="oval:org.mitre.oval:ste:10897"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35007" version="1" comment="elinks is earlier than 0:0.9.2-3.3.5.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14684"/>
      <state state_ref="oval:org.mitre.oval:ste:10694"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34505" version="1" comment="elinks is earlier than 0:0.11.1-5.1.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14684"/>
      <state state_ref="oval:org.mitre.oval:ste:10635"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36102" version="1" comment="rh-postgresql-devel is earlier than 0:7.3.21-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14466"/>
      <state state_ref="oval:org.mitre.oval:ste:10680"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35951" version="1" comment="rh-postgresql-pl is earlier than 0:7.3.21-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14453"/>
      <state state_ref="oval:org.mitre.oval:ste:10680"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35943" version="1" comment="rh-postgresql is earlier than 0:7.3.21-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14320"/>
      <state state_ref="oval:org.mitre.oval:ste:10680"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35938" version="1" comment="rh-postgresql-test is earlier than 0:7.3.21-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14347"/>
      <state state_ref="oval:org.mitre.oval:ste:10680"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35930" version="1" comment="rh-postgresql-jdbc is earlier than 0:7.3.21-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14295"/>
      <state state_ref="oval:org.mitre.oval:ste:10680"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35867" version="1" comment="rh-postgresql-contrib is earlier than 0:7.3.21-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13927"/>
      <state state_ref="oval:org.mitre.oval:ste:10680"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35830" version="1" comment="rh-postgresql-docs is earlier than 0:7.3.21-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13876"/>
      <state state_ref="oval:org.mitre.oval:ste:10680"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35807" version="1" comment="rh-postgresql-server is earlier than 0:7.3.21-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14152"/>
      <state state_ref="oval:org.mitre.oval:ste:10680"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35743" version="1" comment="rh-postgresql-libs is earlier than 0:7.3.21-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14436"/>
      <state state_ref="oval:org.mitre.oval:ste:10680"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35406" version="1" comment="rh-postgresql-tcl is earlier than 0:7.3.21-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13874"/>
      <state state_ref="oval:org.mitre.oval:ste:10680"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35304" version="1" comment="rh-postgresql-python is earlier than 0:7.3.21-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14328"/>
      <state state_ref="oval:org.mitre.oval:ste:10680"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40005" version="1" comment="pidgin-devel is earlier than 0:2.6.5-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14642"/>
      <state state_ref="oval:org.mitre.oval:ste:11502"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39961" version="1" comment="pidgin is earlier than 0:2.6.5-1.el4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15157"/>
      <state state_ref="oval:org.mitre.oval:ste:11540"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39950" version="1" comment="libpurple is earlier than 0:2.6.5-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14700"/>
      <state state_ref="oval:org.mitre.oval:ste:11502"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39949" version="1" comment="pidgin-perl is earlier than 0:2.6.5-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14202"/>
      <state state_ref="oval:org.mitre.oval:ste:11502"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39944" version="1" comment="finch-devel is earlier than 0:2.6.5-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15074"/>
      <state state_ref="oval:org.mitre.oval:ste:11502"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39834" version="1" comment="finch-devel is earlier than 0:2.6.5-1.el4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15074"/>
      <state state_ref="oval:org.mitre.oval:ste:11540"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39825" version="1" comment="pidgin-devel is earlier than 0:2.6.5-1.el4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14642"/>
      <state state_ref="oval:org.mitre.oval:ste:11540"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39824" version="1" comment="pidgin-perl is earlier than 0:2.6.5-1.el4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14202"/>
      <state state_ref="oval:org.mitre.oval:ste:11540"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39816" version="1" comment="libpurple is earlier than 0:2.6.5-1.el4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14700"/>
      <state state_ref="oval:org.mitre.oval:ste:11540"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39793" version="1" comment="finch is earlier than 0:2.6.5-1.el4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15156"/>
      <state state_ref="oval:org.mitre.oval:ste:11540"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39758" version="1" comment="libpurple-devel is earlier than 0:2.6.5-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15112"/>
      <state state_ref="oval:org.mitre.oval:ste:11502"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39649" version="1" comment="libpurple-tcl is earlier than 0:2.6.5-1.el4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14238"/>
      <state state_ref="oval:org.mitre.oval:ste:11540"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39623" version="1" comment="pidgin is earlier than 0:2.6.5-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15157"/>
      <state state_ref="oval:org.mitre.oval:ste:11502"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39620" version="1" comment="finch is earlier than 0:2.6.5-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15156"/>
      <state state_ref="oval:org.mitre.oval:ste:11502"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39598" version="1" comment="libpurple-tcl is earlier than 0:2.6.5-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14238"/>
      <state state_ref="oval:org.mitre.oval:ste:11502"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39510" version="1" comment="libpurple-devel is earlier than 0:2.6.5-1.el4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15112"/>
      <state state_ref="oval:org.mitre.oval:ste:11540"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39344" version="1" comment="libpurple-perl is earlier than 0:2.6.5-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15144"/>
      <state state_ref="oval:org.mitre.oval:ste:11502"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39021" version="1" comment="libpurple-perl is earlier than 0:2.6.5-1.el4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15144"/>
      <state state_ref="oval:org.mitre.oval:ste:11540"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36120" version="1" comment="wireshark-gnome is earlier than 0:0.99.7-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14663"/>
      <state state_ref="oval:org.mitre.oval:ste:10607"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36051" version="1" comment="wireshark is earlier than 0:0.99.7-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14711"/>
      <state state_ref="oval:org.mitre.oval:ste:10791"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35980" version="1" comment="wireshark-gnome is earlier than 0:0.99.7-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14663"/>
      <state state_ref="oval:org.mitre.oval:ste:10791"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35941" version="1" comment="libsmi-devel is earlier than 0:0.4.5-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14861"/>
      <state state_ref="oval:org.mitre.oval:ste:10192"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35801" version="1" comment="libsmi-devel is earlier than 0:0.4.5-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14861"/>
      <state state_ref="oval:org.mitre.oval:ste:10608"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35712" version="1" comment="libsmi is earlier than 0:0.4.5-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14945"/>
      <state state_ref="oval:org.mitre.oval:ste:10608"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35709" version="1" comment="wireshark is earlier than 0:0.99.7-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14711"/>
      <state state_ref="oval:org.mitre.oval:ste:10607"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35669" version="1" comment="libsmi is earlier than 0:0.4.5-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14945"/>
      <state state_ref="oval:org.mitre.oval:ste:10192"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30825" version="1" comment="qt-config is earlier than 1:3.1.2-13.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14145"/>
      <state state_ref="oval:org.mitre.oval:ste:9719"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30758" version="1" comment="qt-MySQL is earlier than 1:3.1.2-13.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14384"/>
      <state state_ref="oval:org.mitre.oval:ste:9719"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30732" version="1" comment="qt-devel is earlier than 1:3.1.2-13.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14278"/>
      <state state_ref="oval:org.mitre.oval:ste:9719"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30487" version="1" comment="qt is earlier than 1:3.1.2-13.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14421"/>
      <state state_ref="oval:org.mitre.oval:ste:9719"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30345" version="1" comment="qt-designer is earlier than 1:3.1.2-13.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14074"/>
      <state state_ref="oval:org.mitre.oval:ste:9719"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33370" version="1" comment="gtk2-devel is earlier than 0:2.4.13-22" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14350"/>
      <state state_ref="oval:org.mitre.oval:ste:9580"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32893" version="1" comment="gtk2 is earlier than 0:2.4.13-22" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14106"/>
      <state state_ref="oval:org.mitre.oval:ste:9580"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32631" version="1" comment="ethereal is earlier than 0:0.99.0-EL3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14030"/>
      <state state_ref="oval:org.mitre.oval:ste:10050"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32590" version="1" comment="ethereal-gnome is earlier than 0:0.99.0-EL3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14338"/>
      <state state_ref="oval:org.mitre.oval:ste:10050"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32299" version="1" comment="ethereal-gnome is earlier than 0:0.99.0-EL4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14338"/>
      <state state_ref="oval:org.mitre.oval:ste:10057"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32238" version="1" comment="ethereal is earlier than 0:0.99.0-EL4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14030"/>
      <state state_ref="oval:org.mitre.oval:ste:10057"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39160" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.7.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:10796"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39133" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-89.0.7.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:10796"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39048" version="1" comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.7.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14060"/>
      <state state_ref="oval:org.mitre.oval:ste:10796"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39030" version="1" comment="kernel is earlier than 0:2.6.9-89.0.7.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10796"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39012" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.7.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:10796"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38985" version="1" comment="kernel-smp is earlier than 0:2.6.9-89.0.7.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:10796"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38938" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-89.0.7.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:10796"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38877" version="1" comment="kernel-xenU is earlier than 0:2.6.9-89.0.7.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14301"/>
      <state state_ref="oval:org.mitre.oval:ste:10796"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38799" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.7.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:10796"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38637" version="1" comment="kernel-devel is earlier than 0:2.6.9-89.0.7.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10796"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38231" version="1" comment="kernel-doc is earlier than 0:2.6.9-89.0.7.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10796"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31582" version="1" comment="kernel-source is earlier than 0:2.4.21-27.0.4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14186"/>
      <state state_ref="oval:org.mitre.oval:ste:9198"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31565" version="1" comment="kernel-hugemem is earlier than 0:2.4.21-27.0.4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:9198"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31562" version="1" comment="kernel is earlier than 0:2.4.21-27.0.4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:9198"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31534" version="1" comment="kernel-smp is earlier than 0:2.4.21-27.0.4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:9198"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31473" version="1" comment="kernel-unsupported is earlier than 0:2.4.21-27.0.4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14229"/>
      <state state_ref="oval:org.mitre.oval:ste:9198"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31282" version="1" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14372"/>
      <state state_ref="oval:org.mitre.oval:ste:9198"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31178" version="1" comment="kernel-smp-unsupported is earlier than 0:2.4.21-27.0.4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14218"/>
      <state state_ref="oval:org.mitre.oval:ste:9198"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31148" version="1" comment="kernel-BOOT is earlier than 0:2.4.21-27.0.4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14219"/>
      <state state_ref="oval:org.mitre.oval:ste:9198"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30730" version="1" comment="kernel-doc is earlier than 0:2.4.21-27.0.4.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:9198"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:1477" version="1" comment="the HCP Protocol is registered" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1001"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1320" version="1" comment="the patch kb840374 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:917"/>
      <state state_ref="oval:org.mitre.oval:ste:1186"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1272" version="1" check="at least one" comment="the version of helpctr.exe is less than 5.2.3790.161" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:886"/>
      <state state_ref="oval:org.mitre.oval:ste:1141"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39143" version="1" comment="finch is earlier than 0:2.5.9-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15156"/>
      <state state_ref="oval:org.mitre.oval:ste:11378"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39132" version="1" comment="libpurple-tcl is earlier than 0:2.5.9-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14238"/>
      <state state_ref="oval:org.mitre.oval:ste:10867"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39131" version="1" comment="pidgin is earlier than 0:2.5.9-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15157"/>
      <state state_ref="oval:org.mitre.oval:ste:11378"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39112" version="1" comment="libpurple-tcl is earlier than 0:2.5.9-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14238"/>
      <state state_ref="oval:org.mitre.oval:ste:11378"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39103" version="1" comment="libpurple is earlier than 0:2.5.9-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14700"/>
      <state state_ref="oval:org.mitre.oval:ste:10867"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39041" version="1" comment="finch is earlier than 0:2.5.9-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15156"/>
      <state state_ref="oval:org.mitre.oval:ste:10867"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38968" version="1" comment="libpurple-devel is earlier than 0:2.5.9-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15112"/>
      <state state_ref="oval:org.mitre.oval:ste:11378"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38937" version="1" comment="finch-devel is earlier than 0:2.5.9-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15074"/>
      <state state_ref="oval:org.mitre.oval:ste:10867"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38935" version="1" comment="pidgin is earlier than 0:1.5.1-4.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15157"/>
      <state state_ref="oval:org.mitre.oval:ste:11119"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38907" version="1" comment="libpurple-devel is earlier than 0:2.5.9-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15112"/>
      <state state_ref="oval:org.mitre.oval:ste:10867"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38903" version="1" comment="pidgin-devel is earlier than 0:2.5.9-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14642"/>
      <state state_ref="oval:org.mitre.oval:ste:10867"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38844" version="1" comment="pidgin-perl is earlier than 0:2.5.9-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14202"/>
      <state state_ref="oval:org.mitre.oval:ste:10867"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38792" version="1" comment="libpurple-perl is earlier than 0:2.5.9-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15144"/>
      <state state_ref="oval:org.mitre.oval:ste:11378"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38754" version="1" comment="libpurple is earlier than 0:2.5.9-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14700"/>
      <state state_ref="oval:org.mitre.oval:ste:11378"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38623" version="1" comment="finch-devel is earlier than 0:2.5.9-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15074"/>
      <state state_ref="oval:org.mitre.oval:ste:11378"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38602" version="1" comment="libpurple-perl is earlier than 0:2.5.9-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15144"/>
      <state state_ref="oval:org.mitre.oval:ste:10867"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38578" version="1" comment="pidgin-devel is earlier than 0:2.5.9-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14642"/>
      <state state_ref="oval:org.mitre.oval:ste:11378"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38197" version="1" comment="pidgin-perl is earlier than 0:2.5.9-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14202"/>
      <state state_ref="oval:org.mitre.oval:ste:11378"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38196" version="1" comment="pidgin is earlier than 0:2.5.9-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15157"/>
      <state state_ref="oval:org.mitre.oval:ste:10867"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32708" version="1" comment="kernel-smp is earlier than 0:2.4.21-47.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:10100"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32704" version="1" comment="kernel-smp-unsupported is earlier than 0:2.4.21-47.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14218"/>
      <state state_ref="oval:org.mitre.oval:ste:10100"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32589" version="1" comment="kernel-unsupported is earlier than 0:2.4.21-47.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14229"/>
      <state state_ref="oval:org.mitre.oval:ste:10100"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32562" version="1" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-47.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14372"/>
      <state state_ref="oval:org.mitre.oval:ste:10100"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32513" version="1" comment="kernel is earlier than 0:2.4.21-47.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10100"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32231" version="1" comment="kernel-source is earlier than 0:2.4.21-47.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14186"/>
      <state state_ref="oval:org.mitre.oval:ste:10100"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32158" version="1" comment="kernel-BOOT is earlier than 0:2.4.21-47.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14219"/>
      <state state_ref="oval:org.mitre.oval:ste:10100"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32097" version="1" comment="kernel-doc is earlier than 0:2.4.21-47.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10100"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32078" version="1" comment="kernel-hugemem is earlier than 0:2.4.21-47.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:10100"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38509" version="1" comment="libpng is earlier than 2:1.2.2-29" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14194"/>
      <state state_ref="oval:org.mitre.oval:ste:10994"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38492" version="1" comment="libpng10 is earlier than 0:1.0.13-20" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14370"/>
      <state state_ref="oval:org.mitre.oval:ste:11057"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38419" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.34.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:11134"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38413" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-0.34.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:11134"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38410" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-0.34.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:11134"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38409" version="1" comment="libpng10-devel is earlier than 0:1.0.16-3.el4_7.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13985"/>
      <state state_ref="oval:org.mitre.oval:ste:10448"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38405" version="1" comment="firefox is earlier than 0:3.0.7-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10992"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38398" version="1" comment="libpng is earlier than 2:1.2.7-3.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14194"/>
      <state state_ref="oval:org.mitre.oval:ste:10332"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38394" version="1" comment="libpng10-devel is earlier than 0:1.0.13-20" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13985"/>
      <state state_ref="oval:org.mitre.oval:ste:11057"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38386" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-0.34.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:11134"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38372" version="1" comment="firefox is earlier than 0:3.0.7-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10760"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38365" version="1" comment="xulrunner is earlier than 0:1.9.0.7-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15057"/>
      <state state_ref="oval:org.mitre.oval:ste:11156"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38364" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-38.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:11109"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38355" version="1" comment="seamonkey is earlier than 0:1.0.9-38.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:11109"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38347" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-0.34.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:11134"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38283" version="1" comment="libpng is earlier than 2:1.2.10-7.1.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14194"/>
      <state state_ref="oval:org.mitre.oval:ste:11117"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38217" version="1" comment="seamonkey is earlier than 0:1.0.9-0.34.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:11134"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38214" version="1" comment="libpng-devel is earlier than 2:1.2.7-3.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14221"/>
      <state state_ref="oval:org.mitre.oval:ste:10332"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38204" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-38.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:11109"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38188" version="1" comment="libpng-devel is earlier than 2:1.2.10-7.1.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14221"/>
      <state state_ref="oval:org.mitre.oval:ste:11117"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38168" version="1" comment="xulrunner-devel-unstable is earlier than 0:1.9.0.7-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15048"/>
      <state state_ref="oval:org.mitre.oval:ste:11156"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38163" version="1" comment="libpng10 is earlier than 0:1.0.16-3.el4_7.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14370"/>
      <state state_ref="oval:org.mitre.oval:ste:10448"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38148" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-38.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:11109"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38132" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-38.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:11109"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38110" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.34.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:11134"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38030" version="1" comment="libpng-devel is earlier than 2:1.2.2-29" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14221"/>
      <state state_ref="oval:org.mitre.oval:ste:10994"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37995" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.34.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:11134"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37953" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.34.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:11134"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37842" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-38.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:11109"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37833" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-0.34.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:11134"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37685" version="1" comment="xulrunner-devel is earlier than 0:1.9.0.7-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15100"/>
      <state state_ref="oval:org.mitre.oval:ste:11156"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34182" version="1" comment="xen-libs is earlier than 0:3.0.3-25.0.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14810"/>
      <state state_ref="oval:org.mitre.oval:ste:10432"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34003" version="1" comment="xen-devel is earlier than 0:3.0.3-25.0.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14567"/>
      <state state_ref="oval:org.mitre.oval:ste:10432"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33194" version="1" comment="xen is earlier than 0:3.0.3-25.0.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14646"/>
      <state state_ref="oval:org.mitre.oval:ste:10432"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38892" version="1" comment="kernel-xenU is earlier than 0:2.6.9-89.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14301"/>
      <state state_ref="oval:org.mitre.oval:ste:10937"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38890" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:10866"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38847" version="1" comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14060"/>
      <state state_ref="oval:org.mitre.oval:ste:10937"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38840" version="1" comment="kernel is earlier than 0:2.6.18-128.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10866"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38838" version="1" comment="kernel-headers is earlier than 0:2.6.18-128.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:10866"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38834" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:10937"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38820" version="1" comment="kernel-debug is earlier than 0:2.6.18-128.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14957"/>
      <state state_ref="oval:org.mitre.oval:ste:10866"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38814" version="1" comment="kernel-smp is earlier than 0:2.6.9-89.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:10937"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38813" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:10866"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38699" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:10866"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38667" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-89.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:10937"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38641" version="1" comment="kernel-xen is earlier than 0:2.6.18-128.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:10866"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38529" version="1" comment="kernel-devel is earlier than 0:2.6.18-128.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10866"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38513" version="1" comment="kernel is earlier than 0:2.6.9-89.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10937"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38388" version="1" comment="kernel-doc is earlier than 0:2.6.18-128.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10866"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38350" version="1" comment="kernel-PAE is earlier than 0:2.6.18-128.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:10866"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38317" version="1" comment="kernel-devel is earlier than 0:2.6.9-89.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10937"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38277" version="1" comment="kernel-doc is earlier than 0:2.6.9-89.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10937"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38222" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-89.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:10937"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38158" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:10937"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38066" version="1" comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15023"/>
      <state state_ref="oval:org.mitre.oval:ste:10866"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37971" version="1" comment="kernel-kdump is earlier than 0:2.6.18-128.1.14.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:10866"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37924" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:10937"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32560" version="1" comment="mysql-server is earlier than 0:4.1.20-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14342"/>
      <state state_ref="oval:org.mitre.oval:ste:9812"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32551" version="1" comment="mysql-devel is earlier than 0:4.1.20-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14481"/>
      <state state_ref="oval:org.mitre.oval:ste:9812"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32252" version="1" comment="mysql is earlier than 0:4.1.20-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14355"/>
      <state state_ref="oval:org.mitre.oval:ste:9812"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32245" version="1" comment="mysql-bench is earlier than 0:4.1.20-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14400"/>
      <state state_ref="oval:org.mitre.oval:ste:9812"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33081" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-42.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:9758"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33014" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:9758"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32956" version="1" comment="kernel-devel is earlier than 0:2.6.9-42.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:9758"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32947" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:9758"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32944" version="1" comment="kernel is earlier than 0:2.6.9-42.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:9758"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32900" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:9758"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32892" version="1" comment="kernel-smp is earlier than 0:2.6.9-42.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:9758"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32678" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-42.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:9758"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32602" version="1" comment="kernel-doc is earlier than 0:2.6.9-42.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:9758"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39846" version="1" comment="dbus is earlier than 0:1.1.2-12.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14213"/>
      <state state_ref="oval:org.mitre.oval:ste:11506"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39826" version="1" comment="dbus-libs is earlier than 0:1.1.2-12.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15234"/>
      <state state_ref="oval:org.mitre.oval:ste:11506"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39398" version="1" comment="dbus-x11 is earlier than 0:1.1.2-12.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14132"/>
      <state state_ref="oval:org.mitre.oval:ste:11506"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39328" version="1" comment="dbus-devel is earlier than 0:1.1.2-12.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14425"/>
      <state state_ref="oval:org.mitre.oval:ste:11506"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31858" version="1" comment="php-mysql is earlier than 0:4.3.2-23.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:9854"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31847" version="1" comment="php-pear is earlier than 0:4.3.9-3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14130"/>
      <state state_ref="oval:org.mitre.oval:ste:9535"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31830" version="1" comment="php-imap is earlier than 0:4.3.9-3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:9535"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31819" version="1" comment="php-devel is earlier than 0:4.3.2-23.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:9854"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31787" version="1" comment="php-mysql is earlier than 0:4.3.9-3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:9535"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31779" version="1" comment="php-odbc is earlier than 0:4.3.9-3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:9535"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31759" version="1" comment="php is earlier than 0:4.3.2-23.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:9854"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31737" version="1" comment="php-domxml is earlier than 0:4.3.9-3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14496"/>
      <state state_ref="oval:org.mitre.oval:ste:9535"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31733" version="1" comment="php-devel is earlier than 0:4.3.9-3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:9535"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31704" version="1" comment="php-ldap is earlier than 0:4.3.2-23.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:9854"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31697" version="1" comment="php-pgsql is earlier than 0:4.3.9-3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:9535"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31679" version="1" comment="php-imap is earlier than 0:4.3.2-23.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:9854"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31673" version="1" comment="php-snmp is earlier than 0:4.3.9-3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14508"/>
      <state state_ref="oval:org.mitre.oval:ste:9535"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31557" version="1" comment="php is earlier than 0:4.3.9-3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:9535"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31541" version="1" comment="php-mbstring is earlier than 0:4.3.9-3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13746"/>
      <state state_ref="oval:org.mitre.oval:ste:9535"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31523" version="1" comment="php-ldap is earlier than 0:4.3.9-3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:9535"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31505" version="1" comment="php-odbc is earlier than 0:4.3.2-23.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:9854"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31383" version="1" comment="php-gd is earlier than 0:4.3.9-3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14335"/>
      <state state_ref="oval:org.mitre.oval:ste:9535"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31329" version="1" comment="php-xmlrpc is earlier than 0:4.3.9-3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14445"/>
      <state state_ref="oval:org.mitre.oval:ste:9535"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31261" version="1" comment="php-ncurses is earlier than 0:4.3.9-3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14227"/>
      <state state_ref="oval:org.mitre.oval:ste:9535"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30948" version="1" comment="php-pgsql is earlier than 0:4.3.2-23.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:9854"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38318" version="1" comment="gstreamer-plugins-good is earlier than 0:0.10.9-1.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15182"/>
      <state state_ref="oval:org.mitre.oval:ste:11114"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38180" version="1" comment="gstreamer-plugins-good-devel is earlier than 0:0.10.9-1.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14946"/>
      <state state_ref="oval:org.mitre.oval:ste:11114"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33049" version="1" comment="XFree86-libs is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14259"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33034" version="1" comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.13.37.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14291"/>
      <state state_ref="oval:org.mitre.oval:ste:10233"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33030" version="1" comment="XFree86-twm is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13667"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33027" version="1" comment="XFree86-xauth is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14352"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33018" version="1" comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14364"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33008" version="1" comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.13.37.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14595"/>
      <state state_ref="oval:org.mitre.oval:ste:10233"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33005" version="1" comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.13.37.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13643"/>
      <state state_ref="oval:org.mitre.oval:ste:10233"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32995" version="1" comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14351"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32967" version="1" comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13712"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32966" version="1" comment="XFree86 is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14255"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32949" version="1" comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.13.37.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14572"/>
      <state state_ref="oval:org.mitre.oval:ste:10233"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32945" version="1" comment="XFree86-tools is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13693"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32943" version="1" comment="XFree86-xdm is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13658"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32941" version="1" comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.13.37.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14184"/>
      <state state_ref="oval:org.mitre.oval:ste:10233"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32935" version="1" comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.13.37.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14168"/>
      <state state_ref="oval:org.mitre.oval:ste:10233"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32931" version="1" comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14288"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32927" version="1" comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14121"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32923" version="1" comment="XFree86-truetype-fonts is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14354"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32914" version="1" comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14045"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32908" version="1" comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.13.37.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14624"/>
      <state state_ref="oval:org.mitre.oval:ste:10233"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32907" version="1" comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.13.37.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14262"/>
      <state state_ref="oval:org.mitre.oval:ste:10233"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32901" version="1" comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14067"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32899" version="1" comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.13.37.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14515"/>
      <state state_ref="oval:org.mitre.oval:ste:10233"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32897" version="1" comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14281"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32863" version="1" comment="XFree86-libs-data is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14326"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32850" version="1" comment="XFree86-devel is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14397"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32849" version="1" comment="XFree86-xfs is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14311"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32847" version="1" comment="XFree86-Xnest is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14053"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32830" version="1" comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.13.37.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14097"/>
      <state state_ref="oval:org.mitre.oval:ste:10233"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32827" version="1" comment="XFree86-syriac-fonts is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14198"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32821" version="1" comment="XFree86-font-utils is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14385"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32798" version="1" comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14315"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32792" version="1" comment="xorg-x11 is earlier than 0:6.8.2-1.EL.13.37.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14592"/>
      <state state_ref="oval:org.mitre.oval:ste:10233"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32775" version="1" comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.13.37.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14169"/>
      <state state_ref="oval:org.mitre.oval:ste:10233"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32769" version="1" comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.13.37.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14089"/>
      <state state_ref="oval:org.mitre.oval:ste:10233"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32766" version="1" comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14260"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32743" version="1" comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14226"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32741" version="1" comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.13.37.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14580"/>
      <state state_ref="oval:org.mitre.oval:ste:10233"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32731" version="1" comment="XFree86-Xvfb is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13644"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32709" version="1" comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.13.37.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14129"/>
      <state state_ref="oval:org.mitre.oval:ste:10233"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32642" version="1" comment="XFree86-base-fonts is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14407"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32518" version="1" comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.13.37.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14478"/>
      <state state_ref="oval:org.mitre.oval:ste:10233"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32455" version="1" comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.13.37.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14553"/>
      <state state_ref="oval:org.mitre.oval:ste:10233"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32324" version="1" comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14127"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32286" version="1" comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14082"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32227" version="1" comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.13.37.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14031"/>
      <state state_ref="oval:org.mitre.oval:ste:10233"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32071" version="1" comment="XFree86-sdk is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14107"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32067" version="1" comment="XFree86-doc is earlier than 0:4.3.0-113.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14406"/>
      <state state_ref="oval:org.mitre.oval:ste:9468"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31506" version="1" comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14240"/>
      <state state_ref="oval:org.mitre.oval:ste:9258"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31459" version="1" comment="ImageMagick-c++ is earlier than 0:6.0.7.1-10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13475"/>
      <state state_ref="oval:org.mitre.oval:ste:9258"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31401" version="1" comment="ImageMagick is earlier than 0:6.0.7.1-10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13854"/>
      <state state_ref="oval:org.mitre.oval:ste:9258"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31198" version="1" comment="ImageMagick-perl is earlier than 0:6.0.7.1-10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14270"/>
      <state state_ref="oval:org.mitre.oval:ste:9258"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31075" version="1" comment="ImageMagick-devel is earlier than 0:6.0.7.1-10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13484"/>
      <state state_ref="oval:org.mitre.oval:ste:9258"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30938" version="1" comment="ImageMagick-c++ is earlier than 0:5.5.6-13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13475"/>
      <state state_ref="oval:org.mitre.oval:ste:9857"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30918" version="1" comment="ImageMagick-devel is earlier than 0:5.5.6-13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13484"/>
      <state state_ref="oval:org.mitre.oval:ste:9857"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30877" version="1" comment="ImageMagick-perl is earlier than 0:5.5.6-13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14270"/>
      <state state_ref="oval:org.mitre.oval:ste:9857"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30471" version="1" comment="ImageMagick-c++-devel is earlier than 0:5.5.6-13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14240"/>
      <state state_ref="oval:org.mitre.oval:ste:9857"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30355" version="1" comment="ImageMagick is earlier than 0:5.5.6-13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13854"/>
      <state state_ref="oval:org.mitre.oval:ste:9857"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:2703" version="1" comment="this is an NT Workstation" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1550"/>
      <state state_ref="oval:org.mitre.oval:ste:2525"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1499" version="1" comment="the patch kb828741 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1010"/>
      <state state_ref="oval:org.mitre.oval:ste:1354"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1383" version="1" comment="COM Internet Services are enabled" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:955"/>
      <state state_ref="oval:org.mitre.oval:ste:1245"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1274" version="2" check="at least one" comment="machine has followed the GDR update path and rpcproxy.dll is less than 5.2.3790.137" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:887"/>
      <state state_ref="oval:org.mitre.oval:ste:1143"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1273" version="2" check="at least one" comment="machine has followed the QFE update path and rpcproxy.dll is less than 5.2.3790.141" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:887"/>
      <state state_ref="oval:org.mitre.oval:ste:1142"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31205" version="1" comment="kernel is earlier than 0:2.6.9-5.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:9595"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31009" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-5.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:9595"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30633" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:9595"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30616" version="1" comment="kernel-smp is earlier than 0:2.6.9-5.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:9595"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30594" version="1" comment="kernel-doc is earlier than 0:2.6.9-5.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:9595"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30421" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:9595"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30369" version="1" comment="kernel-devel is earlier than 0:2.6.9-5.0.3.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:9595"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36541" version="1" comment="krb5-workstation is earlier than 0:1.3.4-54.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14279"/>
      <state state_ref="oval:org.mitre.oval:ste:10826"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36482" version="1" comment="krb5-server is earlier than 0:1.3.4-54.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14452"/>
      <state state_ref="oval:org.mitre.oval:ste:10826"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36418" version="1" comment="krb5 is earlier than 0:1.3.4-54.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14120"/>
      <state state_ref="oval:org.mitre.oval:ste:10826"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36371" version="1" comment="krb5-libs is earlier than 0:1.3.4-54.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14395"/>
      <state state_ref="oval:org.mitre.oval:ste:10826"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36318" version="1" comment="krb5-workstation is earlier than 0:1.6.1-17.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14279"/>
      <state state_ref="oval:org.mitre.oval:ste:10545"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36285" version="1" comment="krb5 is earlier than 0:1.6.1-17.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14120"/>
      <state state_ref="oval:org.mitre.oval:ste:10545"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36233" version="1" comment="krb5-server is earlier than 0:1.6.1-17.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14452"/>
      <state state_ref="oval:org.mitre.oval:ste:10545"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36207" version="1" comment="krb5-devel is earlier than 0:1.3.4-54.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14100"/>
      <state state_ref="oval:org.mitre.oval:ste:10826"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36199" version="1" comment="krb5-devel is earlier than 0:1.6.1-17.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14100"/>
      <state state_ref="oval:org.mitre.oval:ste:10545"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36069" version="1" comment="krb5-libs is earlier than 0:1.6.1-17.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14395"/>
      <state state_ref="oval:org.mitre.oval:ste:10545"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30710" version="1" comment="krb5-devel is earlier than 0:1.2.7-24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14100"/>
      <state state_ref="oval:org.mitre.oval:ste:9688"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30697" version="1" comment="krb5-libs is earlier than 0:1.2.7-24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14395"/>
      <state state_ref="oval:org.mitre.oval:ste:9688"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30630" version="1" comment="krb5-workstation is earlier than 0:1.2.7-24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14279"/>
      <state state_ref="oval:org.mitre.oval:ste:9688"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30609" version="1" comment="krb5 is earlier than 0:1.2.7-24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14120"/>
      <state state_ref="oval:org.mitre.oval:ste:9688"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30438" version="1" comment="krb5-server is earlier than 0:1.2.7-24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14452"/>
      <state state_ref="oval:org.mitre.oval:ste:9688"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30881" version="1" comment="openoffice.org-libs is earlier than 0:1.1.0-16.14.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14455"/>
      <state state_ref="oval:org.mitre.oval:ste:9689"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30547" version="1" comment="openoffice.org-i18n is earlier than 0:1.1.0-16.14.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14215"/>
      <state state_ref="oval:org.mitre.oval:ste:9689"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30168" version="1" comment="openoffice.org is earlier than 0:1.1.0-16.14.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:9689"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35064" version="1" comment="caching-nameserver is earlier than 30:9.3.3-9.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14701"/>
      <state state_ref="oval:org.mitre.oval:ste:10565"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35061" version="1" comment="bind-devel is earlier than 30:9.3.3-9.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14242"/>
      <state state_ref="oval:org.mitre.oval:ste:10565"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35056" version="1" comment="bind-libs is earlier than 30:9.3.3-9.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14348"/>
      <state state_ref="oval:org.mitre.oval:ste:10565"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35029" version="1" comment="bind-libs is earlier than 20:9.2.4-27.0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14348"/>
      <state state_ref="oval:org.mitre.oval:ste:9915"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35026" version="1" comment="bind-sdb is earlier than 30:9.3.3-9.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14433"/>
      <state state_ref="oval:org.mitre.oval:ste:10565"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34979" version="1" comment="bind-chroot is earlier than 30:9.3.3-9.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14363"/>
      <state state_ref="oval:org.mitre.oval:ste:10565"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34973" version="1" comment="bind is earlier than 30:9.3.3-9.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14143"/>
      <state state_ref="oval:org.mitre.oval:ste:10565"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34959" version="1" comment="bind-utils is earlier than 20:9.2.4-21.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14263"/>
      <state state_ref="oval:org.mitre.oval:ste:10201"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34858" version="1" comment="bind is earlier than 20:9.2.4-21.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14143"/>
      <state state_ref="oval:org.mitre.oval:ste:10201"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34848" version="1" comment="bind-chroot is earlier than 20:9.2.4-27.0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14363"/>
      <state state_ref="oval:org.mitre.oval:ste:9915"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34763" version="1" comment="bind-devel is earlier than 20:9.2.4-27.0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14242"/>
      <state state_ref="oval:org.mitre.oval:ste:9915"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34759" version="1" comment="bind-utils is earlier than 20:9.2.4-27.0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14263"/>
      <state state_ref="oval:org.mitre.oval:ste:9915"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34742" version="1" comment="bind is earlier than 20:9.2.4-27.0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14143"/>
      <state state_ref="oval:org.mitre.oval:ste:9915"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34722" version="1" comment="bind-devel is earlier than 20:9.2.4-21.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14242"/>
      <state state_ref="oval:org.mitre.oval:ste:10201"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34701" version="1" comment="bind-utils is earlier than 30:9.3.3-9.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14263"/>
      <state state_ref="oval:org.mitre.oval:ste:10565"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34620" version="1" comment="bind-libbind-devel is earlier than 30:9.3.3-9.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14729"/>
      <state state_ref="oval:org.mitre.oval:ste:10565"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34537" version="1" comment="bind-chroot is earlier than 20:9.2.4-21.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14363"/>
      <state state_ref="oval:org.mitre.oval:ste:10201"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34076" version="1" comment="bind-libs is earlier than 20:9.2.4-21.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14348"/>
      <state state_ref="oval:org.mitre.oval:ste:10201"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33965" version="1" comment="squid is earlier than 7:2.6.STABLE6-4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14403"/>
      <state state_ref="oval:org.mitre.oval:ste:10356"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36357" version="1" comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14829"/>
      <state state_ref="oval:org.mitre.oval:ste:10683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36350" version="1" comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14703"/>
      <state state_ref="oval:org.mitre.oval:ste:9850"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36338" version="1" comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14755"/>
      <state state_ref="oval:org.mitre.oval:ste:9833"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36312" version="1" comment="java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14781"/>
      <state state_ref="oval:org.mitre.oval:ste:9833"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36301" version="1" comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14837"/>
      <state state_ref="oval:org.mitre.oval:ste:9850"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36292" version="1" comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14755"/>
      <state state_ref="oval:org.mitre.oval:ste:10683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36227" version="1" comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14829"/>
      <state state_ref="oval:org.mitre.oval:ste:9850"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36219" version="1" comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14703"/>
      <state state_ref="oval:org.mitre.oval:ste:10683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36198" version="1" comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14312"/>
      <state state_ref="oval:org.mitre.oval:ste:9850"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36170" version="1" comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14829"/>
      <state state_ref="oval:org.mitre.oval:ste:9833"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36131" version="1" comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15119"/>
      <state state_ref="oval:org.mitre.oval:ste:10650"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36128" version="1" comment="java-1.4.2-bea-src is earlier than 0:1.4.2.16-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14805"/>
      <state state_ref="oval:org.mitre.oval:ste:10541"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36127" version="1" comment="java-1.4.2-bea-demo is earlier than 0:1.4.2.16-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14803"/>
      <state state_ref="oval:org.mitre.oval:ste:10541"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36087" version="1" comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15119"/>
      <state state_ref="oval:org.mitre.oval:ste:10541"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36067" version="1" comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15119"/>
      <state state_ref="oval:org.mitre.oval:ste:10563"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36020" version="1" comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14488"/>
      <state state_ref="oval:org.mitre.oval:ste:10650"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36003" version="1" comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14163"/>
      <state state_ref="oval:org.mitre.oval:ste:9850"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35972" version="1" comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15068"/>
      <state state_ref="oval:org.mitre.oval:ste:10541"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35892" version="1" comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14312"/>
      <state state_ref="oval:org.mitre.oval:ste:10683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35886" version="1" comment="java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14781"/>
      <state state_ref="oval:org.mitre.oval:ste:9850"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35875" version="1" comment="java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14781"/>
      <state state_ref="oval:org.mitre.oval:ste:10683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35854" version="1" comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15068"/>
      <state state_ref="oval:org.mitre.oval:ste:10563"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35850" version="1" comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14488"/>
      <state state_ref="oval:org.mitre.oval:ste:10563"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35822" version="1" comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14755"/>
      <state state_ref="oval:org.mitre.oval:ste:9850"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35815" version="1" comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14837"/>
      <state state_ref="oval:org.mitre.oval:ste:10683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35718" version="1" comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14163"/>
      <state state_ref="oval:org.mitre.oval:ste:9833"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35578" version="1" comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15068"/>
      <state state_ref="oval:org.mitre.oval:ste:10650"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35532" version="1" comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14163"/>
      <state state_ref="oval:org.mitre.oval:ste:10683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35439" version="1" comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14703"/>
      <state state_ref="oval:org.mitre.oval:ste:9833"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35438" version="1" comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14312"/>
      <state state_ref="oval:org.mitre.oval:ste:9833"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35349" version="1" comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.11-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14721"/>
      <state state_ref="oval:org.mitre.oval:ste:9985"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35346" version="1" comment="java-1.5.0-bea-src is earlier than 0:1.5.0.11-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15140"/>
      <state state_ref="oval:org.mitre.oval:ste:9985"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35322" version="1" comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.11-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14427"/>
      <state state_ref="oval:org.mitre.oval:ste:9985"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35296" version="1" comment="java-1.4.2-bea-missioncontrol is earlier than 0:1.4.2.16-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14942"/>
      <state state_ref="oval:org.mitre.oval:ste:10541"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35253" version="1" comment="java-1.5.0-bea is earlier than 0:1.5.0.11-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15042"/>
      <state state_ref="oval:org.mitre.oval:ste:10648"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35247" version="1" comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.11-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14427"/>
      <state state_ref="oval:org.mitre.oval:ste:10648"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35192" version="1" comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14488"/>
      <state state_ref="oval:org.mitre.oval:ste:10541"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35189" version="1" comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.11-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14356"/>
      <state state_ref="oval:org.mitre.oval:ste:9985"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35180" version="1" comment="java-1.5.0-bea-missioncontrol is earlier than 0:1.5.0.11-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14859"/>
      <state state_ref="oval:org.mitre.oval:ste:10648"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35169" version="1" comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.11-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14721"/>
      <state state_ref="oval:org.mitre.oval:ste:10648"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35150" version="1" comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.11-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14356"/>
      <state state_ref="oval:org.mitre.oval:ste:10648"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35140" version="1" comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.5-1jpp.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14918"/>
      <state state_ref="oval:org.mitre.oval:ste:10323"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35124" version="1" comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.5-1jpp.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14789"/>
      <state state_ref="oval:org.mitre.oval:ste:10323"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35062" version="1" comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.5-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14795"/>
      <state state_ref="oval:org.mitre.oval:ste:10302"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35015" version="1" comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.5-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14918"/>
      <state state_ref="oval:org.mitre.oval:ste:10302"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34956" version="1" comment="java-1.5.0-ibm is earlier than 1:1.5.0.5-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14898"/>
      <state state_ref="oval:org.mitre.oval:ste:10302"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34955" version="1" comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.5-1jpp.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14679"/>
      <state state_ref="oval:org.mitre.oval:ste:10323"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34949" version="1" comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.5-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14679"/>
      <state state_ref="oval:org.mitre.oval:ste:10302"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34920" version="1" comment="java-1.5.0-bea is earlier than 0:1.5.0.11-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15042"/>
      <state state_ref="oval:org.mitre.oval:ste:9985"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34890" version="1" comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.5-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14824"/>
      <state state_ref="oval:org.mitre.oval:ste:10302"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34859" version="1" comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.5-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14760"/>
      <state state_ref="oval:org.mitre.oval:ste:10302"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34825" version="1" comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.5-1jpp.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14760"/>
      <state state_ref="oval:org.mitre.oval:ste:10323"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34724" version="1" comment="java-1.5.0-ibm is earlier than 1:1.5.0.5-1jpp.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14898"/>
      <state state_ref="oval:org.mitre.oval:ste:10323"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34692" version="1" comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.5-1jpp.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14795"/>
      <state state_ref="oval:org.mitre.oval:ste:10323"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34613" version="1" comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.5-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14789"/>
      <state state_ref="oval:org.mitre.oval:ste:10302"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34479" version="1" comment="java-1.5.0-bea-src is earlier than 0:1.5.0.11-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15140"/>
      <state state_ref="oval:org.mitre.oval:ste:10648"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34270" version="1" comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.5-1jpp.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14824"/>
      <state state_ref="oval:org.mitre.oval:ste:10323"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38391" version="1" comment="net-snmp is earlier than 0:5.0.9-2.30E.27" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14390"/>
      <state state_ref="oval:org.mitre.oval:ste:10553"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38335" version="1" comment="net-snmp-utils is earlier than 0:5.0.9-2.30E.27" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14287"/>
      <state state_ref="oval:org.mitre.oval:ste:10553"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38215" version="1" comment="net-snmp-libs is earlier than 0:5.0.9-2.30E.27" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14316"/>
      <state state_ref="oval:org.mitre.oval:ste:10553"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38141" version="1" comment="net-snmp-perl is earlier than 0:5.0.9-2.30E.27" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14516"/>
      <state state_ref="oval:org.mitre.oval:ste:10553"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37845" version="1" comment="net-snmp-devel is earlier than 0:5.0.9-2.30E.27" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14339"/>
      <state state_ref="oval:org.mitre.oval:ste:10553"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35460" version="1" comment="openssl-devel is earlier than 0:0.9.8b-8.3.el5_0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13920"/>
      <state state_ref="oval:org.mitre.oval:ste:10325"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35181" version="1" comment="openssl-perl is earlier than 0:0.9.8b-8.3.el5_0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14122"/>
      <state state_ref="oval:org.mitre.oval:ste:10325"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35053" version="1" comment="openssl is earlier than 0:0.9.8b-8.3.el5_0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13882"/>
      <state state_ref="oval:org.mitre.oval:ste:10325"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32490" version="1" comment="cups-libs is earlier than 1:1.1.17-13.3.34" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:10078"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32463" version="1" comment="cups-devel is earlier than 1:1.1.17-13.3.34" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:10078"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32431" version="1" comment="cups is earlier than 1:1.1.22-0.rc1.9.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:9965"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32368" version="1" comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:9965"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32230" version="1" comment="gpdf is earlier than 0:2.8.2-7.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14337"/>
      <state state_ref="oval:org.mitre.oval:ste:9724"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31551" version="1" comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:9965"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31538" version="1" comment="cups is earlier than 1:1.1.17-13.3.34" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:10078"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38569" version="1" comment="php-odbc is earlier than 0:5.1.6-23.2.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:10671"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38536" version="1" comment="php-devel is earlier than 0:5.1.6-23.2.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:10671"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38511" version="1" comment="php-pgsql is earlier than 0:5.1.6-23.2.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:10671"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38507" version="1" comment="php-xmlrpc is earlier than 0:5.1.6-23.2.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14445"/>
      <state state_ref="oval:org.mitre.oval:ste:10671"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38505" version="1" comment="php-pgsql is earlier than 0:4.3.9-3.22.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:10184"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38499" version="1" comment="php-gd is earlier than 0:4.3.9-3.22.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14335"/>
      <state state_ref="oval:org.mitre.oval:ste:10184"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38494" version="1" comment="php-pear is earlier than 0:4.3.9-3.22.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14130"/>
      <state state_ref="oval:org.mitre.oval:ste:10184"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38493" version="1" comment="php-pdo is earlier than 0:5.1.6-23.2.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14154"/>
      <state state_ref="oval:org.mitre.oval:ste:10671"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38440" version="1" comment="php-ncurses is earlier than 0:5.1.6-23.2.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14227"/>
      <state state_ref="oval:org.mitre.oval:ste:10671"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38421" version="1" comment="php-cli is earlier than 0:5.1.6-23.2.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14922"/>
      <state state_ref="oval:org.mitre.oval:ste:10671"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38415" version="1" comment="php-mbstring is earlier than 0:5.1.6-23.2.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13746"/>
      <state state_ref="oval:org.mitre.oval:ste:10671"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38401" version="1" comment="php is earlier than 0:4.3.9-3.22.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:10184"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38387" version="1" comment="php-odbc is earlier than 0:4.3.9-3.22.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:10184"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38367" version="1" comment="php-ldap is earlier than 0:5.1.6-23.2.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:10671"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38324" version="1" comment="php-xmlrpc is earlier than 0:4.3.9-3.22.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14445"/>
      <state state_ref="oval:org.mitre.oval:ste:10184"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38316" version="1" comment="php-snmp is earlier than 0:5.1.6-23.2.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14508"/>
      <state state_ref="oval:org.mitre.oval:ste:10671"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38305" version="1" comment="php-soap is earlier than 0:5.1.6-23.2.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14366"/>
      <state state_ref="oval:org.mitre.oval:ste:10671"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38298" version="1" comment="php-mysql is earlier than 0:5.1.6-23.2.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:10671"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38288" version="1" comment="php-snmp is earlier than 0:4.3.9-3.22.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14508"/>
      <state state_ref="oval:org.mitre.oval:ste:10184"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38268" version="1" comment="php-common is earlier than 0:5.1.6-23.2.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14841"/>
      <state state_ref="oval:org.mitre.oval:ste:10671"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38202" version="1" comment="php-devel is earlier than 0:4.3.9-3.22.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:10184"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38154" version="1" comment="php-imap is earlier than 0:4.3.9-3.22.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:10184"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38147" version="1" comment="php-bcmath is earlier than 0:5.1.6-23.2.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14639"/>
      <state state_ref="oval:org.mitre.oval:ste:10671"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38115" version="1" comment="php-xml is earlier than 0:5.1.6-23.2.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14560"/>
      <state state_ref="oval:org.mitre.oval:ste:10671"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38099" version="1" comment="php is earlier than 0:5.1.6-23.2.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:10671"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38075" version="1" comment="php-ldap is earlier than 0:4.3.9-3.22.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:10184"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38058" version="1" comment="php-ncurses is earlier than 0:4.3.9-3.22.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14227"/>
      <state state_ref="oval:org.mitre.oval:ste:10184"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38029" version="1" comment="php-domxml is earlier than 0:4.3.9-3.22.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14496"/>
      <state state_ref="oval:org.mitre.oval:ste:10184"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38018" version="1" comment="php-mbstring is earlier than 0:4.3.9-3.22.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13746"/>
      <state state_ref="oval:org.mitre.oval:ste:10184"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38010" version="1" comment="php is earlier than 0:4.3.2-51.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:10737"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37994" version="1" comment="php-ldap is earlier than 0:4.3.2-51.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:10737"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37974" version="1" comment="php-mysql is earlier than 0:4.3.9-3.22.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:10184"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37952" version="1" comment="php-gd is earlier than 0:5.1.6-23.2.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14335"/>
      <state state_ref="oval:org.mitre.oval:ste:10671"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37938" version="1" comment="php-devel is earlier than 0:4.3.2-51.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:10737"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37882" version="1" comment="php-imap is earlier than 0:5.1.6-23.2.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:10671"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37746" version="1" comment="php-odbc is earlier than 0:4.3.2-51.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:10737"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37683" version="1" comment="php-pgsql is earlier than 0:4.3.2-51.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:10737"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37667" version="1" comment="php-dba is earlier than 0:5.1.6-23.2.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14512"/>
      <state state_ref="oval:org.mitre.oval:ste:10671"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37569" version="1" comment="php-imap is earlier than 0:4.3.2-51.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:10737"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37468" version="1" comment="php-mysql is earlier than 0:4.3.2-51.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:10737"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30702" version="1" comment="kernel-smp-unsupported is earlier than 0:2.4.21-15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14218"/>
      <state state_ref="oval:org.mitre.oval:ste:9428"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30654" version="1" comment="kernel-doc is earlier than 0:2.4.21-15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:9428"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30513" version="1" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14372"/>
      <state state_ref="oval:org.mitre.oval:ste:9428"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30508" version="1" comment="kernel-source is earlier than 0:2.4.21-15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14186"/>
      <state state_ref="oval:org.mitre.oval:ste:9428"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30346" version="1" comment="kernel-BOOT is earlier than 0:2.4.21-15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14219"/>
      <state state_ref="oval:org.mitre.oval:ste:9428"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30307" version="1" comment="kernel-smp is earlier than 0:2.4.21-15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:9428"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30280" version="1" comment="kernel-hugemem is earlier than 0:2.4.21-15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:9428"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30056" version="1" comment="kernel is earlier than 0:2.4.21-15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:9428"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30006" version="1" comment="kernel-unsupported is earlier than 0:2.4.21-15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14229"/>
      <state state_ref="oval:org.mitre.oval:ste:9428"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31286" version="1" comment="ghostscript is earlier than 0:7.05-32.1.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14541"/>
      <state state_ref="oval:org.mitre.oval:ste:9761"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31159" version="1" comment="hpijs is earlier than 0:1.3-32.1.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14471"/>
      <state state_ref="oval:org.mitre.oval:ste:9446"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31011" version="1" comment="ghostscript-devel is earlier than 0:7.05-32.1.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14524"/>
      <state state_ref="oval:org.mitre.oval:ste:9761"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39591" version="1" comment="kernel-BOOT is earlier than 0:2.4.21-63.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14219"/>
      <state state_ref="oval:org.mitre.oval:ste:11305"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39586" version="1" comment="kernel-smp-unsupported is earlier than 0:2.4.21-63.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14218"/>
      <state state_ref="oval:org.mitre.oval:ste:11305"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39468" version="1" comment="kernel-source is earlier than 0:2.4.21-63.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14186"/>
      <state state_ref="oval:org.mitre.oval:ste:11305"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39460" version="1" comment="kernel-doc is earlier than 0:2.4.21-63.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:11305"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39396" version="1" comment="kernel-unsupported is earlier than 0:2.4.21-63.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14229"/>
      <state state_ref="oval:org.mitre.oval:ste:11305"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39299" version="1" comment="kernel-hugemem is earlier than 0:2.4.21-63.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:11305"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39171" version="1" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-63.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14372"/>
      <state state_ref="oval:org.mitre.oval:ste:11305"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39151" version="1" comment="kernel is earlier than 0:2.4.21-63.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:11305"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38810" version="1" comment="kernel-smp is earlier than 0:2.4.21-63.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:11305"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38294" version="1" comment="kernel is earlier than 0:2.6.18-128.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10491"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38259" version="1" comment="kernel-xen is earlier than 0:2.6.18-128.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:10491"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38226" version="1" comment="kernel-debug-devel is earlier than 0:2.6.18-128.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15023"/>
      <state state_ref="oval:org.mitre.oval:ste:10491"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38161" version="1" comment="kernel-kdump is earlier than 0:2.6.18-128.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:10491"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38094" version="1" comment="kernel-doc is earlier than 0:2.6.18-128.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10491"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38086" version="1" comment="kernel-PAE is earlier than 0:2.6.18-128.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:10491"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38054" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-128.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:10491"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38043" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-78.0.13.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:11101"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38003" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-128.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:10491"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38002" version="1" comment="kernel-smp is earlier than 0:2.6.9-78.0.13.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:11101"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37996" version="1" comment="kernel-debug is earlier than 0:2.6.18-128.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14957"/>
      <state state_ref="oval:org.mitre.oval:ste:10491"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37989" version="1" comment="kernel is earlier than 0:2.6.9-78.0.13.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:11101"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37984" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-78.0.13.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:11101"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37968" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-78.0.13.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:11101"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37939" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-128.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:10491"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37908" version="1" comment="kernel-devel is earlier than 0:2.6.9-78.0.13.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:11101"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37830" version="1" comment="kernel-xenU is earlier than 0:2.6.9-78.0.13.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14301"/>
      <state state_ref="oval:org.mitre.oval:ste:11101"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37825" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-78.0.13.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:11101"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37748" version="1" comment="kernel-doc is earlier than 0:2.6.9-78.0.13.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:11101"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37633" version="1" comment="kernel-xenU-devel is earlier than 0:2.6.9-78.0.13.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14060"/>
      <state state_ref="oval:org.mitre.oval:ste:11101"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37366" version="1" comment="kernel-headers is earlier than 0:2.6.18-128.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:10491"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37352" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-78.0.13.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:11101"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37318" version="1" comment="kernel-devel is earlier than 0:2.6.18-128.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10491"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35906" version="1" comment="tog-pegasus-devel is earlier than 2:2.6.1-2.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15071"/>
      <state state_ref="oval:org.mitre.oval:ste:10745"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35855" version="1" comment="tog-pegasus-devel is earlier than 2:2.5.1-5.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15071"/>
      <state state_ref="oval:org.mitre.oval:ste:10144"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35849" version="1" comment="tog-pegasus-test is earlier than 2:2.5.1-5.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14784"/>
      <state state_ref="oval:org.mitre.oval:ste:10144"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35802" version="1" comment="tog-pegasus is earlier than 2:2.5.1-5.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14965"/>
      <state state_ref="oval:org.mitre.oval:ste:10144"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35798" version="1" comment="tog-pegasus is earlier than 2:2.6.1-2.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14965"/>
      <state state_ref="oval:org.mitre.oval:ste:10745"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32141" version="1" comment="kdenetwork-devel is earlier than 7:3.3.1-2.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14299"/>
      <state state_ref="oval:org.mitre.oval:ste:9930"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32125" version="1" comment="kdenetwork-nowlistening is earlier than 7:3.3.1-2.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14652"/>
      <state state_ref="oval:org.mitre.oval:ste:9930"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31965" version="1" comment="kdenetwork is earlier than 7:3.3.1-2.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14300"/>
      <state state_ref="oval:org.mitre.oval:ste:9930"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32180" version="1" comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:10017"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32177" version="1" comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:10017"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32165" version="1" comment="gpdf is earlier than 0:2.8.2-4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14337"/>
      <state state_ref="oval:org.mitre.oval:ste:9818"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32164" version="1" comment="cups-libs is earlier than 1:1.1.17-13.3.31" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:9872"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32104" version="1" comment="kdegraphics is earlier than 7:3.3.1-3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14241"/>
      <state state_ref="oval:org.mitre.oval:ste:9968"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32087" version="1" comment="xpdf is earlier than 1:3.00-11.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14398"/>
      <state state_ref="oval:org.mitre.oval:ste:9905"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32007" version="1" comment="cups is earlier than 1:1.1.17-13.3.31" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:9872"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31852" version="1" comment="kdegraphics-devel is earlier than 7:3.3.1-3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14596"/>
      <state state_ref="oval:org.mitre.oval:ste:9968"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31811" version="1" comment="cups-devel is earlier than 1:1.1.17-13.3.31" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:9872"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31672" version="1" comment="cups is earlier than 1:1.1.22-0.rc1.9.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:10017"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:2855" version="1" check_existence="at_least_one_exists" check="at least one" comment="Microsoft Outlook Express 6 for Windows 2003 is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:566"/>
      <state state_ref="oval:org.mitre.oval:ste:2673"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1281" version="1" check="at least one" comment="the version of inetcomm.dll is less than 6.00.3790.137" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:385"/>
      <state state_ref="oval:org.mitre.oval:ste:1150"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1280" version="1" check="at least one" comment="the patch kb837009 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:892"/>
      <state state_ref="oval:org.mitre.oval:ste:1149"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31646" version="1" comment="firefox is earlier than 0:1.0.3-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:9690"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36732" version="1" comment="java-1.5.0-bea is earlier than 0:1.5.0.14-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15042"/>
      <state state_ref="oval:org.mitre.oval:ste:10559"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36707" version="1" comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.4.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15068"/>
      <state state_ref="oval:org.mitre.oval:ste:10818"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36696" version="1" comment="java-1.5.0-bea-src is earlier than 0:1.5.0.14-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15140"/>
      <state state_ref="oval:org.mitre.oval:ste:10559"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36686" version="1" comment="java-1.5.0-bea is earlier than 0:1.5.0.14-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15042"/>
      <state state_ref="oval:org.mitre.oval:ste:10765"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36683" version="1" comment="java-1.6.0-bea-missioncontrol is earlier than 1:1.6.0.03-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14358"/>
      <state state_ref="oval:org.mitre.oval:ste:10832"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36678" version="1" comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.14-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14427"/>
      <state state_ref="oval:org.mitre.oval:ste:10559"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36658" version="1" comment="java-1.6.0-bea-jdbc is earlier than 1:1.6.0.03-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14751"/>
      <state state_ref="oval:org.mitre.oval:ste:10832"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36644" version="1" comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.2.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14488"/>
      <state state_ref="oval:org.mitre.oval:ste:10862"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36643" version="1" comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15119"/>
      <state state_ref="oval:org.mitre.oval:ste:10667"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36629" version="1" comment="java-1.4.2-bea-missioncontrol is earlier than 0:1.4.2.16-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14942"/>
      <state state_ref="oval:org.mitre.oval:ste:10667"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36626" version="1" comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15068"/>
      <state state_ref="oval:org.mitre.oval:ste:10667"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36614" version="1" comment="java-1.5.0-ibm-plugin is earlier than 0:1.5.0.7-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14679"/>
      <state state_ref="oval:org.mitre.oval:ste:10823"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36613" version="1" comment="java-1.5.0-ibm-jdbc is earlier than 0:1.5.0.7-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14795"/>
      <state state_ref="oval:org.mitre.oval:ste:10823"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36590" version="1" comment="java-1.6.0-bea-src is earlier than 1:1.6.0.03-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15133"/>
      <state state_ref="oval:org.mitre.oval:ste:10832"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36580" version="1" comment="java-1.5.0-bea-src is earlier than 0:1.5.0.14-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15140"/>
      <state state_ref="oval:org.mitre.oval:ste:10765"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36576" version="1" comment="java-1.4.2-bea-src is earlier than 0:1.4.2.16-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14805"/>
      <state state_ref="oval:org.mitre.oval:ste:10667"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36565" version="1" comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.14-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14356"/>
      <state state_ref="oval:org.mitre.oval:ste:10559"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36558" version="1" comment="java-1.5.0-ibm-javacomm is earlier than 0:1.5.0.7-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14760"/>
      <state state_ref="oval:org.mitre.oval:ste:10707"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36549" version="1" comment="java-1.4.2-bea-jdbc is earlier than 0:1.4.2.16-1jpp.2.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15068"/>
      <state state_ref="oval:org.mitre.oval:ste:10862"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36548" version="1" comment="java-1.5.0-ibm-javacomm is earlier than 0:1.5.0.7-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14760"/>
      <state state_ref="oval:org.mitre.oval:ste:10823"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36535" version="1" comment="java-1.5.0-ibm-src is earlier than 0:1.5.0.7-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14789"/>
      <state state_ref="oval:org.mitre.oval:ste:10707"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36527" version="1" comment="java-1.4.2-bea-demo is earlier than 0:1.4.2.16-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14803"/>
      <state state_ref="oval:org.mitre.oval:ste:10667"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36523" version="1" comment="java-1.5.0-ibm-demo is earlier than 0:1.5.0.7-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14918"/>
      <state state_ref="oval:org.mitre.oval:ste:10707"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36494" version="1" comment="java-1.5.0-bea-jdbc is earlier than 0:1.5.0.14-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14427"/>
      <state state_ref="oval:org.mitre.oval:ste:10765"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36485" version="1" comment="java-1.5.0-ibm-devel is earlier than 0:1.5.0.7-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14824"/>
      <state state_ref="oval:org.mitre.oval:ste:10707"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36455" version="1" comment="java-1.5.0-ibm-devel is earlier than 0:1.5.0.7-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14824"/>
      <state state_ref="oval:org.mitre.oval:ste:10823"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36423" version="1" comment="java-1.6.0-bea-devel is earlier than 1:1.6.0.03-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14919"/>
      <state state_ref="oval:org.mitre.oval:ste:10832"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36422" version="1" comment="java-1.5.0-ibm-src is earlier than 0:1.5.0.7-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14789"/>
      <state state_ref="oval:org.mitre.oval:ste:10823"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36406" version="1" comment="java-1.5.0-ibm-demo is earlier than 0:1.5.0.7-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14918"/>
      <state state_ref="oval:org.mitre.oval:ste:10823"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36343" version="1" comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.14-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14721"/>
      <state state_ref="oval:org.mitre.oval:ste:10765"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36340" version="1" comment="java-1.5.0-ibm-jdbc is earlier than 0:1.5.0.7-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14795"/>
      <state state_ref="oval:org.mitre.oval:ste:10707"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36331" version="1" comment="java-1.6.0-bea-demo is earlier than 1:1.6.0.03-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14993"/>
      <state state_ref="oval:org.mitre.oval:ste:10832"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36323" version="1" comment="java-1.5.0-ibm-accessibility is earlier than 0:1.5.0.7-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14643"/>
      <state state_ref="oval:org.mitre.oval:ste:10707"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36265" version="1" comment="java-1.5.0-ibm-plugin is earlier than 0:1.5.0.7-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14679"/>
      <state state_ref="oval:org.mitre.oval:ste:10707"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36234" version="1" comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14488"/>
      <state state_ref="oval:org.mitre.oval:ste:10667"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36211" version="1" comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.2.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15119"/>
      <state state_ref="oval:org.mitre.oval:ste:10862"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36210" version="1" comment="java-1.5.0-bea-demo is earlier than 0:1.5.0.14-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14721"/>
      <state state_ref="oval:org.mitre.oval:ste:10559"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36195" version="1" comment="java-1.6.0-bea is earlier than 1:1.6.0.03-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14852"/>
      <state state_ref="oval:org.mitre.oval:ste:10832"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36173" version="1" comment="java-1.4.2-bea is earlier than 0:1.4.2.16-1jpp.4.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14488"/>
      <state state_ref="oval:org.mitre.oval:ste:10818"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36155" version="1" comment="java-1.5.0-ibm is earlier than 0:1.5.0.7-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14898"/>
      <state state_ref="oval:org.mitre.oval:ste:10823"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36079" version="1" comment="java-1.5.0-bea-devel is earlier than 0:1.5.0.14-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14356"/>
      <state state_ref="oval:org.mitre.oval:ste:10765"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36047" version="1" comment="java-1.5.0-bea-missioncontrol is earlier than 0:1.5.0.14-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14859"/>
      <state state_ref="oval:org.mitre.oval:ste:10765"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35890" version="1" comment="java-1.5.0-ibm is earlier than 0:1.5.0.7-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14898"/>
      <state state_ref="oval:org.mitre.oval:ste:10707"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35840" version="1" comment="java-1.4.2-bea-devel is earlier than 0:1.4.2.16-1jpp.4.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15119"/>
      <state state_ref="oval:org.mitre.oval:ste:10818"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40260" version="1" comment="cpio is earlier than 0:2.6-23.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14426"/>
      <state state_ref="oval:org.mitre.oval:ste:11037"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40247" version="1" comment="tar is earlier than 0:1.14-13.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14170"/>
      <state state_ref="oval:org.mitre.oval:ste:11019"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40238" version="1" comment="tar is earlier than 0:1.13.25-16.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14170"/>
      <state state_ref="oval:org.mitre.oval:ste:10580"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40031" version="1" comment="cpio is earlier than 0:2.5-6.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14426"/>
      <state state_ref="oval:org.mitre.oval:ste:11489"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39957" version="1" comment="tar is earlier than 2:1.15.1-23.0.1.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14170"/>
      <state state_ref="oval:org.mitre.oval:ste:11498"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39924" version="1" comment="cpio is earlier than 0:2.5-16.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14426"/>
      <state state_ref="oval:org.mitre.oval:ste:11165"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32129" version="1" comment="squid is earlier than 7:2.5.STABLE3-6.3E.14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14403"/>
      <state state_ref="oval:org.mitre.oval:ste:9976"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32053" version="1" comment="squid is earlier than 7:2.5.STABLE6-3.4E.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14403"/>
      <state state_ref="oval:org.mitre.oval:ste:9127"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32148" version="1" comment="kernel-doc is earlier than 0:2.4.21-37.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:9991"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32093" version="1" comment="kernel is earlier than 0:2.4.21-37.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:9991"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31990" version="1" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14372"/>
      <state state_ref="oval:org.mitre.oval:ste:9991"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31968" version="1" comment="kernel-source is earlier than 0:2.4.21-37.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14186"/>
      <state state_ref="oval:org.mitre.oval:ste:9991"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31953" version="1" comment="kernel-unsupported is earlier than 0:2.4.21-37.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14229"/>
      <state state_ref="oval:org.mitre.oval:ste:9991"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31879" version="1" comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14218"/>
      <state state_ref="oval:org.mitre.oval:ste:9991"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31741" version="1" comment="kernel-smp is earlier than 0:2.4.21-37.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:9991"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31485" version="1" comment="kernel-hugemem is earlier than 0:2.4.21-37.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:9991"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31411" version="1" comment="kernel-BOOT is earlier than 0:2.4.21-37.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14219"/>
      <state state_ref="oval:org.mitre.oval:ste:9991"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29772" version="1" comment="squirrelmail is earlier than 0:1.4.3-0.e3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14331"/>
      <state state_ref="oval:org.mitre.oval:ste:9664"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31486" version="1" comment="curl-devel is earlier than 0:7.10.6-6.rhel3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14469"/>
      <state state_ref="oval:org.mitre.oval:ste:9846"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31484" version="1" comment="curl is earlier than 0:7.12.1-5.rhel4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14575"/>
      <state state_ref="oval:org.mitre.oval:ste:9354"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31295" version="1" comment="curl-devel is earlier than 0:7.12.1-5.rhel4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14469"/>
      <state state_ref="oval:org.mitre.oval:ste:9354"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30960" version="1" comment="curl is earlier than 0:7.10.6-6.rhel3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14575"/>
      <state state_ref="oval:org.mitre.oval:ste:9846"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36016" version="1" comment="mod_ssl is earlier than 0:2.0.46-70.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:10558"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35973" version="1" comment="httpd-manual is earlier than 0:2.0.52-38.ent.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14457"/>
      <state state_ref="oval:org.mitre.oval:ste:10601"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35916" version="1" comment="httpd-devel is earlier than 0:2.0.52-38.ent.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:10601"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35852" version="1" comment="mod_ssl is earlier than 0:2.0.52-38.ent.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:10601"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35773" version="1" comment="httpd-devel is earlier than 0:2.0.46-70.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:10558"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35768" version="1" comment="httpd is earlier than 0:2.0.52-38.ent.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:10601"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35606" version="1" comment="httpd-suexec is earlier than 0:2.0.52-38.ent.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14611"/>
      <state state_ref="oval:org.mitre.oval:ste:10601"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35281" version="1" comment="httpd is earlier than 0:2.0.46-70.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:10558"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39753" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-50.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10842"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39727" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-0.47.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:11383"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39724" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-0.47.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:11383"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39720" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.47.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:11383"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39691" version="1" comment="seamonkey is earlier than 0:1.0.9-0.47.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:11383"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39683" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-50.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10842"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39675" version="1" comment="seamonkey is earlier than 0:1.0.9-50.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10842"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39583" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.47.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:11383"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39575" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.47.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:11383"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39570" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-0.47.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:11383"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39550" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-0.47.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:11383"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39547" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-50.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10842"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39481" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-50.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10842"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39466" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.47.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:11383"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39280" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-0.47.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:11383"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39031" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-50.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10842"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38886" version="1" comment="apr-util is earlier than 0:0.9.4-22.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14992"/>
      <state state_ref="oval:org.mitre.oval:ste:11098"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38871" version="1" comment="apr-util-devel is earlier than 0:1.2.7-7.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15236"/>
      <state state_ref="oval:org.mitre.oval:ste:10949"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38833" version="1" comment="httpd-devel is earlier than 0:2.0.46-73.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:10887"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38826" version="1" comment="httpd is earlier than 0:2.0.46-73.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:10887"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38794" version="1" comment="mod_ssl is earlier than 0:2.0.46-73.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:10887"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38788" version="1" comment="apr-util is earlier than 0:1.2.7-7.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14992"/>
      <state state_ref="oval:org.mitre.oval:ste:10949"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38344" version="1" comment="apr-util-docs is earlier than 0:1.2.7-7.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15199"/>
      <state state_ref="oval:org.mitre.oval:ste:10949"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38152" version="1" comment="apr-util-devel is earlier than 0:0.9.4-22.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15236"/>
      <state state_ref="oval:org.mitre.oval:ste:11098"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:1296" version="1" comment="DirectX 7.0x Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:499"/>
      <state state_ref="oval:org.mitre.oval:ste:1165"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1295" version="1" check="at least one" comment="File %windir%\system32\dplayx.dll version is less than 5.0.2195.6927" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:450"/>
      <state state_ref="oval:org.mitre.oval:ste:1164"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1294" version="1" check="at least one" comment="Patch Windows2000-KB839643-x86-ENU.EXE Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:897"/>
      <state state_ref="oval:org.mitre.oval:ste:1163"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1293" version="1" check="at least one" comment="DirectX 8.0x Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:499"/>
      <state state_ref="oval:org.mitre.oval:ste:1162"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1292" version="1" check="at least one" comment="File %windir%\system32\dplayx.dll version is less than 5.0.2258.410" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:450"/>
      <state state_ref="oval:org.mitre.oval:ste:1161"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1291" version="1" check="at least one" comment="Patch DirectX80-KB839643-x86-ENU Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:896"/>
      <state state_ref="oval:org.mitre.oval:ste:1160"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1290" version="1" check="at least one" comment="DirectX 8.1x Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:499"/>
      <state state_ref="oval:org.mitre.oval:ste:1159"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1289" version="1" check="at least one" comment="File %windir%\system32\dplayx.dll version is less than 5.1.2600.891" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:450"/>
      <state state_ref="oval:org.mitre.oval:ste:1158"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1288" version="1" check="at least one" comment="Patch DirectX81-KB839643-x86-ENU Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:895"/>
      <state state_ref="oval:org.mitre.oval:ste:1157"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1287" version="1" check="at least one" comment="DirectX 8.2x Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:499"/>
      <state state_ref="oval:org.mitre.oval:ste:1156"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1286" version="1" check="at least one" comment="File %windir%\system32\dplayx.dll version is less than 5.2.3677.144" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:450"/>
      <state state_ref="oval:org.mitre.oval:ste:1155"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1285" version="1" check="at least one" comment="Patch DirectX82-KB839643-x86-ENU Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:894"/>
      <state state_ref="oval:org.mitre.oval:ste:1154"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1284" version="1" check="at least one" comment="DirectX 9.0x Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:499"/>
      <state state_ref="oval:org.mitre.oval:ste:1153"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1283" version="1" check="at least one" comment="File %windir%\system32\dplayx.dll version is less than 5.3.0.903" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:450"/>
      <state state_ref="oval:org.mitre.oval:ste:1152"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1282" version="1" check="at least one" comment="Patch DirectX90-KB839643-x86-ENU Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:893"/>
      <state state_ref="oval:org.mitre.oval:ste:1151"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31149" version="1" comment="ruby-libs is earlier than 0:1.6.8-9.EL3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14388"/>
      <state state_ref="oval:org.mitre.oval:ste:9601"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31023" version="1" comment="ruby-devel is earlier than 0:1.6.8-9.EL3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14187"/>
      <state state_ref="oval:org.mitre.oval:ste:9601"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31004" version="1" comment="ruby-tcltk is earlier than 0:1.6.8-9.EL3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14273"/>
      <state state_ref="oval:org.mitre.oval:ste:9601"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30955" version="1" comment="ruby-mode is earlier than 0:1.6.8-9.EL3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14380"/>
      <state state_ref="oval:org.mitre.oval:ste:9601"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30888" version="1" comment="ruby-docs is earlier than 0:1.6.8-9.EL3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14446"/>
      <state state_ref="oval:org.mitre.oval:ste:9601"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30791" version="1" comment="irb is earlier than 0:1.6.8-9.EL3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13649"/>
      <state state_ref="oval:org.mitre.oval:ste:9601"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30751" version="1" comment="ruby is earlier than 0:1.6.8-9.EL3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14305"/>
      <state state_ref="oval:org.mitre.oval:ste:9601"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37794" version="1" comment="cups is earlier than 1:1.2.4-11.18.el5_2.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:10588"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37772" version="1" comment="cups is earlier than 1:1.1.17-13.3.54" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:10512"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37714" version="1" comment="cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:11053"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37702" version="1" comment="cups-libs is earlier than 1:1.2.4-11.18.el5_2.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:10588"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37699" version="1" comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:11053"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37546" version="1" comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:11053"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37394" version="1" comment="cups-libs is earlier than 1:1.1.17-13.3.54" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:10512"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37378" version="1" comment="cups-devel is earlier than 1:1.2.4-11.18.el5_2.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:10588"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37294" version="1" comment="cups-devel is earlier than 1:1.1.17-13.3.54" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:10512"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37215" version="1" comment="cups-lpd is earlier than 1:1.2.4-11.18.el5_2.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14688"/>
      <state state_ref="oval:org.mitre.oval:ste:10588"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32920" version="1" comment="libwmf-devel is earlier than 0:0.2.8.3-5.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14833"/>
      <state state_ref="oval:org.mitre.oval:ste:10172"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32737" version="1" comment="libwmf is earlier than 0:0.2.8.3-5.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14677"/>
      <state state_ref="oval:org.mitre.oval:ste:10172"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38720" version="1" comment="kdelibs-devel is earlier than 6:3.5.4-22.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14126"/>
      <state state_ref="oval:org.mitre.oval:ste:10554"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38389" version="1" comment="kdelibs is earlier than 6:3.5.4-22.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13933"/>
      <state state_ref="oval:org.mitre.oval:ste:10554"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38299" version="1" comment="kdelibs-devel is earlier than 6:3.3.1-14.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14126"/>
      <state state_ref="oval:org.mitre.oval:ste:11069"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38102" version="1" comment="kdelibs-apidocs is earlier than 6:3.5.4-22.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15138"/>
      <state state_ref="oval:org.mitre.oval:ste:10554"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37977" version="1" comment="kdelibs is earlier than 6:3.3.1-14.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13933"/>
      <state state_ref="oval:org.mitre.oval:ste:11069"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:3015" version="3" comment="Internet Explorer 5.01 Service Pack 3 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:2824"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:2751" version="1" check="at least one" comment="the version of mshtml.dll is less than 5.0.3541.2700" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:2572"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:2750" version="1" comment="the patch kb883939 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1578"/>
      <state state_ref="oval:org.mitre.oval:ste:2571"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30602" version="1" comment="mod_python is earlier than 0:3.0.3-3.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13988"/>
      <state state_ref="oval:org.mitre.oval:ste:9364"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40529" version="1" comment="mysql is earlier than 0:5.0.77-4.el5_5.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14355"/>
      <state state_ref="oval:org.mitre.oval:ste:11601"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40525" version="1" comment="mysql-bench is earlier than 0:5.0.77-4.el5_5.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14400"/>
      <state state_ref="oval:org.mitre.oval:ste:11601"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40467" version="1" comment="mysql-devel is earlier than 0:5.0.77-4.el5_5.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14481"/>
      <state state_ref="oval:org.mitre.oval:ste:11601"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40387" version="1" comment="mysql-test is earlier than 0:5.0.77-4.el5_5.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14941"/>
      <state state_ref="oval:org.mitre.oval:ste:11601"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39669" version="1" comment="mysql-server is earlier than 0:5.0.77-4.el5_5.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14342"/>
      <state state_ref="oval:org.mitre.oval:ste:11601"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40318" version="1" comment="sendmail-cf is earlier than 0:8.13.8-8.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14583"/>
      <state state_ref="oval:org.mitre.oval:ste:11444"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40111" version="1" comment="sendmail-doc is earlier than 0:8.13.8-8.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14631"/>
      <state state_ref="oval:org.mitre.oval:ste:11444"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40026" version="1" comment="sendmail is earlier than 0:8.13.8-8.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14016"/>
      <state state_ref="oval:org.mitre.oval:ste:11444"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39935" version="1" comment="sendmail-devel is earlier than 0:8.13.8-8.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14230"/>
      <state state_ref="oval:org.mitre.oval:ste:11444"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38142" version="1" comment="dbus-devel is earlier than 0:1.0.0-7.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14425"/>
      <state state_ref="oval:org.mitre.oval:ste:10793"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37929" version="1" comment="dbus-x11 is earlier than 0:1.0.0-7.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14132"/>
      <state state_ref="oval:org.mitre.oval:ste:10793"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37644" version="1" comment="dbus is earlier than 0:1.0.0-7.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14213"/>
      <state state_ref="oval:org.mitre.oval:ste:10793"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30522" version="1" comment="ethereal is earlier than 0:0.10.5-0.30E.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14030"/>
      <state state_ref="oval:org.mitre.oval:ste:9393"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29799" version="1" comment="ethereal-gnome is earlier than 0:0.10.5-0.30E.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14338"/>
      <state state_ref="oval:org.mitre.oval:ste:9393"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38077" version="1" comment="irb is earlier than 0:1.8.1-7.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13649"/>
      <state state_ref="oval:org.mitre.oval:ste:10538"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38049" version="1" comment="ruby-docs is earlier than 0:1.8.1-7.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14446"/>
      <state state_ref="oval:org.mitre.oval:ste:10538"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38014" version="1" comment="ruby is earlier than 0:1.8.5-5.el5_2.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14305"/>
      <state state_ref="oval:org.mitre.oval:ste:11056"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38004" version="1" comment="ruby-devel is earlier than 0:1.8.1-7.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14187"/>
      <state state_ref="oval:org.mitre.oval:ste:10538"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37976" version="1" comment="ruby-tcltk is earlier than 0:1.8.5-5.el5_2.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14273"/>
      <state state_ref="oval:org.mitre.oval:ste:11056"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37942" version="1" comment="ruby-libs is earlier than 0:1.8.5-5.el5_2.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14388"/>
      <state state_ref="oval:org.mitre.oval:ste:11056"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37876" version="1" comment="ruby is earlier than 0:1.8.1-7.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14305"/>
      <state state_ref="oval:org.mitre.oval:ste:10538"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37873" version="1" comment="ruby-ri is earlier than 0:1.8.5-5.el5_2.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14461"/>
      <state state_ref="oval:org.mitre.oval:ste:11056"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37832" version="1" comment="ruby-tcltk is earlier than 0:1.8.1-7.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14273"/>
      <state state_ref="oval:org.mitre.oval:ste:10538"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37831" version="1" comment="ruby-docs is earlier than 0:1.8.5-5.el5_2.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14446"/>
      <state state_ref="oval:org.mitre.oval:ste:11056"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37818" version="1" comment="ruby-libs is earlier than 0:1.8.1-7.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14388"/>
      <state state_ref="oval:org.mitre.oval:ste:10538"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37675" version="1" comment="ruby-irb is earlier than 0:1.8.5-5.el5_2.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14777"/>
      <state state_ref="oval:org.mitre.oval:ste:11056"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37201" version="1" comment="ruby-mode is earlier than 0:1.8.5-5.el5_2.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14380"/>
      <state state_ref="oval:org.mitre.oval:ste:11056"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37163" version="1" comment="ruby-devel is earlier than 0:1.8.5-5.el5_2.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14187"/>
      <state state_ref="oval:org.mitre.oval:ste:11056"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37111" version="1" comment="ruby-rdoc is earlier than 0:1.8.5-5.el5_2.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14244"/>
      <state state_ref="oval:org.mitre.oval:ste:11056"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37108" version="1" comment="ruby-mode is earlier than 0:1.8.1-7.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14380"/>
      <state state_ref="oval:org.mitre.oval:ste:10538"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:2591" version="1" check="at least one" comment="SQL Server 2000 installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1470"/>
      <state state_ref="oval:org.mitre.oval:ste:2424"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1303" version="1" check="at least one" comment="the version of sqlservr.exe is less than 2000.80.650.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:843"/>
      <state state_ref="oval:org.mitre.oval:ste:1172"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1302" version="1" check="at least one" comment="the version of odsole70.dll is less than 2000.80.606.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:903"/>
      <state state_ref="oval:org.mitre.oval:ste:1171"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1301" version="1" check="at least one" comment="the version of xpqueue.dll is less than 2000.80.606.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:902"/>
      <state state_ref="oval:org.mitre.oval:ste:1170"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1300" version="1" check="at least one" comment="the version of xprepl.dll is less than 2000.80.606.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:901"/>
      <state state_ref="oval:org.mitre.oval:ste:1169"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1299" version="1" check="at least one" comment="the version of xplog70.dll is less than 2000.80.606.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:900"/>
      <state state_ref="oval:org.mitre.oval:ste:1168"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1298" version="1" check="at least one" comment="the version of xpweb70.dll is less than 2000.80.606.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:899"/>
      <state state_ref="oval:org.mitre.oval:ste:1167"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1297" version="1" check="at least one" comment="the version of xpstar.dll is less than 2000.80.628.0" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:898"/>
      <state state_ref="oval:org.mitre.oval:ste:1166"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36559" version="1" comment="openoffice.org-langpack-it is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14812"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36546" version="1" comment="openoffice.org-langpack-ve_ZA is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14900"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36544" version="1" comment="openoffice.org-langpack-pt_PT is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14571"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36520" version="1" comment="openoffice.org-langpack-hi_IN is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14717"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36514" version="1" comment="openoffice.org-pyuno is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14806"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36508" version="1" comment="openoffice.org-langpack-gl_ES is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14792"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36507" version="1" comment="openoffice.org-langpack-zh_CN is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14839"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36505" version="1" comment="openoffice.org-langpack-zh_TW is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14392"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36503" version="1" comment="openoffice.org is earlier than 0:1.1.2-41.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:10564"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36501" version="1" comment="openoffice.org2-langpack-zh_CN is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14990"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36498" version="1" comment="openoffice.org2-testtools is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14696"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36492" version="1" comment="openoffice.org-langpack-sl_SI is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14869"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36486" version="1" comment="openoffice.org-langpack-ml_IN is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14257"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36483" version="1" comment="openoffice.org-langpack-pl_PL is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14767"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36481" version="1" comment="openoffice.org-javafilter is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14566"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36473" version="1" comment="openoffice.org2-langpack-pt_PT is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15000"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36471" version="1" comment="openoffice.org-langpack-sr_CS is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14189"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36467" version="1" comment="openoffice.org-langpack-pt_BR is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14822"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36466" version="1" comment="openoffice.org-langpack-ur is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14671"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36465" version="1" comment="openoffice.org-langpack-as_IN is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14576"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36457" version="1" comment="openoffice.org-langpack-tr_TR is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14886"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36451" version="1" comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.3.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14455"/>
      <state state_ref="oval:org.mitre.oval:ste:10641"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36441" version="1" comment="openoffice.org-langpack-et_EE is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14280"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36437" version="1" comment="openoffice.org-langpack-ca_ES is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14778"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36434" version="1" comment="openoffice.org2-langpack-zu_ZA is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14814"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36429" version="1" comment="openoffice.org2-langpack-bg_BG is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14617"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36421" version="1" comment="openoffice.org is earlier than 0:1.1.5-10.6.0.3.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:10641"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36417" version="1" comment="openoffice.org2-pyuno is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14980"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36411" version="1" comment="openoffice.org2-langpack-sk_SK is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14885"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36405" version="1" comment="openoffice.org-langpack-nb_NO is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14807"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36401" version="1" comment="openoffice.org2-langpack-et_EE is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14708"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36400" version="1" comment="openoffice.org-langpack-af_ZA is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14506"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36398" version="1" comment="openoffice.org-langpack-sv is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14529"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36395" version="1" comment="openoffice.org-libs is earlier than 0:1.1.2-41.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14455"/>
      <state state_ref="oval:org.mitre.oval:ste:10564"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36391" version="1" comment="openoffice.org-langpack-te_IN is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14832"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36384" version="1" comment="openoffice.org2-langpack-pa_IN is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15006"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36382" version="1" comment="openoffice.org2-langpack-hi_IN is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14768"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36378" version="1" comment="openoffice.org-testtools is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14135"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36376" version="1" comment="openoffice.org-math is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14557"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36369" version="1" comment="openoffice.org-draw is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14828"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36366" version="1" comment="openoffice.org2-math is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14759"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36358" version="1" comment="openoffice.org-langpack-ms_MY is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14787"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36348" version="1" comment="openoffice.org-langpack-xh_ZA is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14738"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36345" version="1" comment="openoffice.org2-langpack-ar is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14963"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36341" version="1" comment="openoffice.org-langpack-eu_ES is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14813"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36339" version="1" comment="openoffice.org-impress is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14707"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36332" version="1" comment="openoffice.org2-langpack-el_GR is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14401"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36329" version="1" comment="openoffice.org-base is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14548"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36328" version="1" comment="openoffice.org-langpack-fr is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14772"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36322" version="1" comment="openoffice.org-langpack-ko_KR is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14190"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36314" version="1" comment="openoffice.org2-langpack-eu_ES is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15005"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36308" version="1" comment="openoffice.org-langpack-nso_ZA is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13974"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36307" version="1" comment="openoffice.org is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36306" version="1" comment="openoffice.org-langpack-mr_IN is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14855"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36303" version="1" comment="openoffice.org-langpack-cy_GB is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14501"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36302" version="1" comment="openoffice.org2-langpack-da_DK is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14456"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36299" version="1" comment="openoffice.org2-langpack-de is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14737"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36289" version="1" comment="openoffice.org2-langpack-hr_HR is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14322"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36287" version="1" comment="openoffice.org2-base is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14937"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36286" version="1" comment="openoffice.org2-impress is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14569"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36283" version="1" comment="openoffice.org-langpack-ta_IN is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14637"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36282" version="1" comment="openoffice.org-langpack-es is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14604"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36276" version="1" comment="openoffice.org2-graphicfilter is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14987"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36271" version="1" comment="openoffice.org2-langpack-hu_HU is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14600"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36257" version="1" comment="openoffice.org-xsltfilter is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14530"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36254" version="1" comment="openoffice.org2-langpack-it is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14716"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36253" version="1" comment="openoffice.org2-core is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14849"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36248" version="1" comment="openoffice.org2-langpack-pl_PL is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14476"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36244" version="1" comment="openoffice.org-langpack-da_DK is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14748"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36240" version="1" comment="openoffice.org-i18n is earlier than 0:1.1.2-41.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14215"/>
      <state state_ref="oval:org.mitre.oval:ste:10564"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36232" version="1" comment="openoffice.org-langpack-fi_FI is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14625"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36224" version="1" comment="openoffice.org2-langpack-sv is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14875"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36223" version="1" comment="openoffice.org2-langpack-es is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14907"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36220" version="1" comment="openoffice.org-langpack-nl is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14909"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36218" version="1" comment="openoffice.org-langpack-lt_LT is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13921"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36216" version="1" comment="openoffice.org2-langpack-gu_IN is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14826"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36212" version="1" comment="openoffice.org2-calc is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14894"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36206" version="1" comment="openoffice.org-langpack-or_IN is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14588"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36204" version="1" comment="openoffice.org-langpack-he_IL is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14442"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36191" version="1" comment="openoffice.org-langpack-de is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14539"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36190" version="1" comment="openoffice.org2-langpack-ga_IE is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14834"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36189" version="1" comment="openoffice.org-langpack-ss_ZA is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14728"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36187" version="1" comment="openoffice.org-langpack-ar is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14872"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36185" version="1" comment="openoffice.org2-langpack-gl_ES is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14956"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36181" version="1" comment="openoffice.org2-langpack-bn is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14976"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36178" version="1" comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.3.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14215"/>
      <state state_ref="oval:org.mitre.oval:ste:10641"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36174" version="1" comment="openoffice.org2-langpack-cy_GB is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14193"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36172" version="1" comment="openoffice.org2-langpack-ko_KR is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14599"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36168" version="1" comment="openoffice.org-langpack-ga_IE is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14635"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36163" version="1" comment="openoffice.org2-draw is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14369"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36162" version="1" comment="openoffice.org-langpack-sk_SK is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14266"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36160" version="1" comment="openoffice.org-langpack-gu_IN is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14269"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36159" version="1" comment="openoffice.org2-langpack-fi_FI is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14903"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36154" version="1" comment="openoffice.org2-langpack-ms_MY is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14606"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36152" version="1" comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.3.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13698"/>
      <state state_ref="oval:org.mitre.oval:ste:10641"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36148" version="1" comment="openoffice.org2-langpack-nb_NO is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14901"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36145" version="1" comment="openoffice.org-writer is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14758"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36144" version="1" comment="openoffice.org2-langpack-th_TH is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14997"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36130" version="1" comment="openoffice.org-langpack-nr_ZA is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14651"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36118" version="1" comment="openoffice.org2-langpack-fr is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14986"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36117" version="1" comment="openoffice.org-langpack-cs_CZ is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14865"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36114" version="1" comment="openoffice.org2-langpack-he_IL is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15018"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36101" version="1" comment="openoffice.org-langpack-zu_ZA is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14562"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36091" version="1" comment="openoffice.org2-langpack-cs_CZ is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14762"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36089" version="1" comment="openoffice.org-graphicfilter is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14526"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36083" version="1" comment="openoffice.org2-langpack-ja_JP is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14845"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36073" version="1" comment="openoffice.org2-langpack-nl is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14763"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36070" version="1" comment="openoffice.org-langpack-hu_HU is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14694"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36058" version="1" comment="openoffice.org-langpack-ja_JP is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14155"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36057" version="1" comment="openoffice.org2-writer is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14765"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36037" version="1" comment="openoffice.org-langpack-bg_BG is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14589"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36032" version="1" comment="openoffice.org-langpack-nn_NO is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14779"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36013" version="1" comment="openoffice.org-langpack-hr_HR is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14336"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36009" version="1" comment="openoffice.org2-langpack-ta_IN is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14744"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36006" version="1" comment="openoffice.org2-langpack-lt_LT is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14971"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36000" version="1" comment="openoffice.org2-langpack-ca_ES is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14995"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35999" version="1" comment="openoffice.org-langpack-st_ZA is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14851"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35966" version="1" comment="openoffice.org-langpack-th_TH is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14732"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35963" version="1" comment="openoffice.org2-xsltfilter is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14969"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35957" version="1" comment="openoffice.org2-langpack-tr_TR is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14831"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35954" version="1" comment="openoffice.org2-langpack-zh_TW is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14649"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35931" version="1" comment="openoffice.org2-javafilter is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14660"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35864" version="1" comment="openoffice.org2 is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14437"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35845" version="1" comment="openoffice.org-langpack-kn_IN is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14714"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35843" version="1" comment="openoffice.org-core is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14450"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35841" version="1" comment="openoffice.org-langpack-pa_IN is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14746"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35829" version="1" comment="openoffice.org2-langpack-ru is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14472"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35811" version="1" comment="openoffice.org2-langpack-pt_BR is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14984"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35810" version="1" comment="openoffice.org-langpack-ts_ZA is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14056"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35797" version="1" comment="openoffice.org-langpack-tn_ZA is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14432"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35732" version="1" comment="openoffice.org-calc is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14623"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35683" version="1" comment="openoffice.org2-emailmerge is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14754"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35657" version="1" comment="openoffice.org-langpack-bn is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14706"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35640" version="1" comment="openoffice.org2-langpack-af_ZA is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14090"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35570" version="1" comment="openoffice.org-langpack-ru is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14766"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35561" version="1" comment="openoffice.org-langpack-el_GR is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14359"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35521" version="1" comment="openoffice.org-emailmerge is earlier than 0:2.0.4-5.4.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14522"/>
      <state state_ref="oval:org.mitre.oval:ste:10303"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35502" version="1" comment="openoffice.org2-langpack-sr_CS is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14321"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35495" version="1" comment="openoffice.org2-langpack-sl_SI is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14882"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35494" version="1" comment="openoffice.org2-langpack-nn_NO is earlier than 0:2.0.4-5.7.0.4.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14892"/>
      <state state_ref="oval:org.mitre.oval:ste:10416"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40354" version="1" comment="kernel is earlier than 0:2.6.9-89.0.23.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:11581"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40326" version="1" comment="kernel-devel is earlier than 0:2.6.9-89.0.23.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:11581"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40308" version="1" comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.23.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14060"/>
      <state state_ref="oval:org.mitre.oval:ste:11581"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40241" version="1" comment="kernel-xenU is earlier than 0:2.6.9-89.0.23.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14301"/>
      <state state_ref="oval:org.mitre.oval:ste:11581"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40210" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.23.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:11581"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40139" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.23.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:11581"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40097" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-89.0.23.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:11581"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40082" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.23.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:11581"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39940" version="1" comment="kernel-doc is earlier than 0:2.6.9-89.0.23.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:11581"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39805" version="1" comment="kernel-smp is earlier than 0:2.6.9-89.0.23.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:11581"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39363" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-89.0.23.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:11581"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32919" version="1" comment="seamonkey is earlier than 0:1.0.2-0.1.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10212"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32918" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.2-0.1.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:10212"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32902" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.2-0.1.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10212"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32864" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.2-0.1.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:10212"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32859" version="1" comment="seamonkey-chat is earlier than 0:1.0.2-0.1.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10212"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32837" version="1" comment="seamonkey-nss is earlier than 0:1.0.2-0.1.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:10212"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32674" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.2-0.1.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10212"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32659" version="1" comment="seamonkey-mail is earlier than 0:1.0.2-0.1.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10212"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32575" version="1" comment="seamonkey-nspr is earlier than 0:1.0.2-0.1.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:10212"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32511" version="1" comment="seamonkey-devel is earlier than 0:1.0.2-0.1.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10212"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37412" version="1" comment="vim-minimal is earlier than 2:7.0.109-4.el5_2.4z" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14513"/>
      <state state_ref="oval:org.mitre.oval:ste:10167"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37405" version="1" comment="vim is earlier than 2:7.0.109-4.el5_2.4z" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13610"/>
      <state state_ref="oval:org.mitre.oval:ste:10167"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37384" version="1" comment="vim-X11 is earlier than 2:7.0.109-4.el5_2.4z" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14549"/>
      <state state_ref="oval:org.mitre.oval:ste:10167"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37365" version="1" comment="vim-common is earlier than 2:7.0.109-4.el5_2.4z" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14345"/>
      <state state_ref="oval:org.mitre.oval:ste:10167"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37218" version="1" comment="vim-enhanced is earlier than 2:7.0.109-4.el5_2.4z" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14043"/>
      <state state_ref="oval:org.mitre.oval:ste:10167"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35316" version="1" comment="kdelibs-apidocs is earlier than 6:3.5.4-13.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15138"/>
      <state state_ref="oval:org.mitre.oval:ste:10351"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35293" version="1" comment="kdelibs is earlier than 6:3.5.4-13.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13933"/>
      <state state_ref="oval:org.mitre.oval:ste:10351"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35252" version="1" comment="kdelibs-devel is earlier than 6:3.3.1-9.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14126"/>
      <state state_ref="oval:org.mitre.oval:ste:10122"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35165" version="1" comment="kdelibs is earlier than 6:3.3.1-9.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13933"/>
      <state state_ref="oval:org.mitre.oval:ste:10122"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34994" version="1" comment="kdelibs-devel is earlier than 6:3.5.4-13.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14126"/>
      <state state_ref="oval:org.mitre.oval:ste:10351"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31566" version="1" comment="gzip is earlier than 0:1.3.3-15.rhel4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14444"/>
      <state state_ref="oval:org.mitre.oval:ste:9651"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30880" version="1" comment="gzip is earlier than 0:1.3.3-12.rhel3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14444"/>
      <state state_ref="oval:org.mitre.oval:ste:9746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33207" version="1" comment="php-pgsql is earlier than 0:4.3.2-37.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:10132"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33191" version="1" comment="php-pear is earlier than 0:4.3.9-3.22" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14130"/>
      <state state_ref="oval:org.mitre.oval:ste:10216"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33119" version="1" comment="php-devel is earlier than 0:4.3.9-3.22" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:10216"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33110" version="1" comment="php-imap is earlier than 0:4.3.9-3.22" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:10216"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33085" version="1" comment="php-ldap is earlier than 0:4.3.2-37.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:10132"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33084" version="1" comment="php-gd is earlier than 0:4.3.9-3.22" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14335"/>
      <state state_ref="oval:org.mitre.oval:ste:10216"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33075" version="1" comment="php is earlier than 0:4.3.9-3.22" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:10216"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33002" version="1" comment="php-ldap is earlier than 0:4.3.9-3.22" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:10216"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32999" version="1" comment="php-odbc is earlier than 0:4.3.2-37.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:10132"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32992" version="1" comment="php-imap is earlier than 0:4.3.2-37.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:10132"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32977" version="1" comment="php-domxml is earlier than 0:4.3.9-3.22" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14496"/>
      <state state_ref="oval:org.mitre.oval:ste:10216"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32972" version="1" comment="php is earlier than 0:4.3.2-37.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:10132"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32890" version="1" comment="php-ncurses is earlier than 0:4.3.9-3.22" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14227"/>
      <state state_ref="oval:org.mitre.oval:ste:10216"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32753" version="1" comment="php-odbc is earlier than 0:4.3.9-3.22" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:10216"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32649" version="1" comment="php-mysql is earlier than 0:4.3.9-3.22" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:10216"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32559" version="1" comment="php-mbstring is earlier than 0:4.3.9-3.22" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13746"/>
      <state state_ref="oval:org.mitre.oval:ste:10216"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32508" version="1" comment="php-xmlrpc is earlier than 0:4.3.9-3.22" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14445"/>
      <state state_ref="oval:org.mitre.oval:ste:10216"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32500" version="1" comment="php-mysql is earlier than 0:4.3.2-37.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:10132"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32402" version="1" comment="php-snmp is earlier than 0:4.3.9-3.22" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14508"/>
      <state state_ref="oval:org.mitre.oval:ste:10216"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32232" version="1" comment="php-pgsql is earlier than 0:4.3.9-3.22" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:10216"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32213" version="1" comment="php-devel is earlier than 0:4.3.2-37.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:10132"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35134" version="1" comment="krb5 is earlier than 0:1.5-29" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14120"/>
      <state state_ref="oval:org.mitre.oval:ste:10533"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35091" version="1" comment="krb5-server is earlier than 0:1.5-29" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14452"/>
      <state state_ref="oval:org.mitre.oval:ste:10533"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34927" version="1" comment="krb5-devel is earlier than 0:1.5-29" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14100"/>
      <state state_ref="oval:org.mitre.oval:ste:10533"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34835" version="1" comment="krb5-workstation is earlier than 0:1.5-29" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14279"/>
      <state state_ref="oval:org.mitre.oval:ste:10533"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34559" version="1" comment="krb5-libs is earlier than 0:1.5-29" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14395"/>
      <state state_ref="oval:org.mitre.oval:ste:10533"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38771" version="1" comment="xulrunner-devel-unstable is earlier than 0:1.9.0.11-3.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15048"/>
      <state state_ref="oval:org.mitre.oval:ste:11255"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38718" version="1" comment="xulrunner is earlier than 0:1.9.0.11-3.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15057"/>
      <state state_ref="oval:org.mitre.oval:ste:11255"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38689" version="1" comment="firefox is earlier than 0:3.0.11-4.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:11230"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38682" version="1" comment="firefox is earlier than 0:3.0.11-2.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10297"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38371" version="1" comment="xulrunner-devel is earlier than 0:1.9.0.11-3.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15100"/>
      <state state_ref="oval:org.mitre.oval:ste:11255"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31155" version="1" comment="samba-swat is earlier than 0:3.0.9-1.3E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13707"/>
      <state state_ref="oval:org.mitre.oval:ste:9369"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30939" version="1" comment="samba is earlier than 0:3.0.9-1.3E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13931"/>
      <state state_ref="oval:org.mitre.oval:ste:9369"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30802" version="1" comment="samba-common is earlier than 0:3.0.9-1.3E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14032"/>
      <state state_ref="oval:org.mitre.oval:ste:9369"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30780" version="1" comment="samba-client is earlier than 0:3.0.9-1.3E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13861"/>
      <state state_ref="oval:org.mitre.oval:ste:9369"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36109" version="1" comment="postgresql-python is earlier than 0:8.1.11-1.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14546"/>
      <state state_ref="oval:org.mitre.oval:ste:10154"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36105" version="1" comment="postgresql-test is earlier than 0:7.4.19-1.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14367"/>
      <state state_ref="oval:org.mitre.oval:ste:10678"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36098" version="1" comment="postgresql-libs is earlier than 0:7.4.19-1.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14383"/>
      <state state_ref="oval:org.mitre.oval:ste:10678"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36094" version="1" comment="postgresql-devel is earlier than 0:7.4.19-1.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14290"/>
      <state state_ref="oval:org.mitre.oval:ste:10678"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36066" version="1" comment="postgresql-contrib is earlier than 0:7.4.19-1.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14293"/>
      <state state_ref="oval:org.mitre.oval:ste:10678"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36045" version="1" comment="postgresql-pl is earlier than 0:7.4.19-1.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14537"/>
      <state state_ref="oval:org.mitre.oval:ste:10678"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36044" version="1" comment="postgresql-devel is earlier than 0:8.1.11-1.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14290"/>
      <state state_ref="oval:org.mitre.oval:ste:10154"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35993" version="1" comment="postgresql-docs is earlier than 0:7.4.19-1.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14365"/>
      <state state_ref="oval:org.mitre.oval:ste:10678"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35949" version="1" comment="postgresql-tcl is earlier than 0:7.4.19-1.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14486"/>
      <state state_ref="oval:org.mitre.oval:ste:10678"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35948" version="1" comment="postgresql is earlier than 0:7.4.19-1.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14586"/>
      <state state_ref="oval:org.mitre.oval:ste:10678"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35942" version="1" comment="postgresql-python is earlier than 0:7.4.19-1.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14546"/>
      <state state_ref="oval:org.mitre.oval:ste:10678"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35907" version="1" comment="postgresql-docs is earlier than 0:8.1.11-1.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14365"/>
      <state state_ref="oval:org.mitre.oval:ste:10154"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35894" version="1" comment="postgresql-libs is earlier than 0:8.1.11-1.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14383"/>
      <state state_ref="oval:org.mitre.oval:ste:10154"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35856" version="1" comment="postgresql-server is earlier than 0:8.1.11-1.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14158"/>
      <state state_ref="oval:org.mitre.oval:ste:10154"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35835" version="1" comment="postgresql-jdbc is earlier than 0:7.4.19-1.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14547"/>
      <state state_ref="oval:org.mitre.oval:ste:10678"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35781" version="1" comment="postgresql-contrib is earlier than 0:8.1.11-1.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14293"/>
      <state state_ref="oval:org.mitre.oval:ste:10154"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35597" version="1" comment="postgresql-server is earlier than 0:7.4.19-1.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14158"/>
      <state state_ref="oval:org.mitre.oval:ste:10678"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35319" version="1" comment="postgresql-pl is earlier than 0:8.1.11-1.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14537"/>
      <state state_ref="oval:org.mitre.oval:ste:10154"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35308" version="1" comment="postgresql-test is earlier than 0:8.1.11-1.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14367"/>
      <state state_ref="oval:org.mitre.oval:ste:10154"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35261" version="1" comment="postgresql is earlier than 0:8.1.11-1.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14586"/>
      <state state_ref="oval:org.mitre.oval:ste:10154"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35123" version="1" comment="postgresql-tcl is earlier than 0:8.1.11-1.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14486"/>
      <state state_ref="oval:org.mitre.oval:ste:10154"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31281" version="1" comment="squid is earlier than 7:2.5.STABLE6-3.4E.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14403"/>
      <state state_ref="oval:org.mitre.oval:ste:9852"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30954" version="1" comment="squid is earlier than 7:2.5.STABLE3-6.3E.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14403"/>
      <state state_ref="oval:org.mitre.oval:ste:9193"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38955" version="1" comment="tomcat5-common-lib is earlier than 0:5.5.23-0jpp.7.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14815"/>
      <state state_ref="oval:org.mitre.oval:ste:11321"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38944" version="1" comment="tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.7.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14685"/>
      <state state_ref="oval:org.mitre.oval:ste:11321"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38891" version="1" comment="tomcat5-jasper is earlier than 0:5.5.23-0jpp.7.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14210"/>
      <state state_ref="oval:org.mitre.oval:ste:11321"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38824" version="1" comment="tomcat5-server-lib is earlier than 0:5.5.23-0jpp.7.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14509"/>
      <state state_ref="oval:org.mitre.oval:ste:11321"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38805" version="1" comment="tomcat5-webapps is earlier than 0:5.5.23-0jpp.7.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14332"/>
      <state state_ref="oval:org.mitre.oval:ste:11321"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38688" version="1" comment="tomcat5 is earlier than 0:5.5.23-0jpp.7.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14612"/>
      <state state_ref="oval:org.mitre.oval:ste:11321"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38428" version="1" comment="tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.7.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14808"/>
      <state state_ref="oval:org.mitre.oval:ste:11321"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38333" version="1" comment="tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14686"/>
      <state state_ref="oval:org.mitre.oval:ste:11321"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38239" version="1" comment="tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.7.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14750"/>
      <state state_ref="oval:org.mitre.oval:ste:11321"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38108" version="1" comment="tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14662"/>
      <state state_ref="oval:org.mitre.oval:ste:11321"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37963" version="1" comment="tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14622"/>
      <state state_ref="oval:org.mitre.oval:ste:11321"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35588" version="1" comment="samba-swat is earlier than 0:3.0.25b-1.el5_1.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13707"/>
      <state state_ref="oval:org.mitre.oval:ste:9851"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35587" version="1" comment="samba-common is earlier than 0:3.0.25b-1.el4_6.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14032"/>
      <state state_ref="oval:org.mitre.oval:ste:10540"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35579" version="1" comment="samba-client is earlier than 0:3.0.25b-1.el5_1.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13861"/>
      <state state_ref="oval:org.mitre.oval:ste:9851"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35567" version="1" comment="samba-client is earlier than 0:3.0.25b-1.el4_6.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13861"/>
      <state state_ref="oval:org.mitre.oval:ste:10540"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35544" version="1" comment="samba-swat is earlier than 0:3.0.9-1.3E.14.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13707"/>
      <state state_ref="oval:org.mitre.oval:ste:10640"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35435" version="1" comment="samba-client is earlier than 0:3.0.9-1.3E.14.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13861"/>
      <state state_ref="oval:org.mitre.oval:ste:10640"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35430" version="1" comment="samba-swat is earlier than 0:3.0.25b-1.el4_6.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13707"/>
      <state state_ref="oval:org.mitre.oval:ste:10540"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35285" version="1" comment="samba is earlier than 0:3.0.25b-1.el4_6.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13931"/>
      <state state_ref="oval:org.mitre.oval:ste:10540"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35226" version="1" comment="samba is earlier than 0:3.0.25b-1.el5_1.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13931"/>
      <state state_ref="oval:org.mitre.oval:ste:9851"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35042" version="1" comment="samba is earlier than 0:3.0.9-1.3E.14.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13931"/>
      <state state_ref="oval:org.mitre.oval:ste:10640"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35031" version="1" comment="samba-common is earlier than 0:3.0.9-1.3E.14.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14032"/>
      <state state_ref="oval:org.mitre.oval:ste:10640"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34598" version="1" comment="samba-common is earlier than 0:3.0.25b-1.el5_1.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14032"/>
      <state state_ref="oval:org.mitre.oval:ste:9851"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31317" version="1" comment="kernel-unsupported is earlier than 0:2.4.21-27.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14229"/>
      <state state_ref="oval:org.mitre.oval:ste:9619"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31297" version="1" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14372"/>
      <state state_ref="oval:org.mitre.oval:ste:9619"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31259" version="1" comment="kernel-hugemem is earlier than 0:2.4.21-27.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:9619"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31165" version="1" comment="kernel-smp-unsupported is earlier than 0:2.4.21-27.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14218"/>
      <state state_ref="oval:org.mitre.oval:ste:9619"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31090" version="1" comment="kernel-BOOT is earlier than 0:2.4.21-27.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14219"/>
      <state state_ref="oval:org.mitre.oval:ste:9619"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31029" version="1" comment="kernel-source is earlier than 0:2.4.21-27.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14186"/>
      <state state_ref="oval:org.mitre.oval:ste:9619"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31014" version="1" comment="kernel-doc is earlier than 0:2.4.21-27.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:9619"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30920" version="1" comment="kernel-smp is earlier than 0:2.4.21-27.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:9619"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30906" version="1" comment="kernel is earlier than 0:2.4.21-27.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:9619"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38321" version="1" comment="wireshark-gnome is earlier than 0:1.0.6-EL3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14663"/>
      <state state_ref="oval:org.mitre.oval:ste:10902"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38236" version="1" comment="wireshark is earlier than 0:1.0.6-2.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14711"/>
      <state state_ref="oval:org.mitre.oval:ste:10729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38085" version="1" comment="wireshark-gnome is earlier than 0:1.0.6-2.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14663"/>
      <state state_ref="oval:org.mitre.oval:ste:10729"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38041" version="1" comment="wireshark-gnome is earlier than 0:1.0.6-2.el4_7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14663"/>
      <state state_ref="oval:org.mitre.oval:ste:11132"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38023" version="1" comment="wireshark is earlier than 0:1.0.6-EL3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14711"/>
      <state state_ref="oval:org.mitre.oval:ste:10902"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38000" version="1" comment="wireshark is earlier than 0:1.0.6-2.el4_7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14711"/>
      <state state_ref="oval:org.mitre.oval:ste:11132"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30440" version="1" comment="gaim is earlier than 1:0.75-3.2.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14159"/>
      <state state_ref="oval:org.mitre.oval:ste:9517"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37509" version="1" comment="java-1.6.0-sun-demo is earlier than 1:1.6.0.7-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14967"/>
      <state state_ref="oval:org.mitre.oval:ste:10095"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37490" version="1" comment="java-1.6.0-sun-jdbc is earlier than 1:1.6.0.7-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14769"/>
      <state state_ref="oval:org.mitre.oval:ste:10095"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37487" version="1" comment="java-1.5.0-sun is earlier than 0:1.5.0.16-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14988"/>
      <state state_ref="oval:org.mitre.oval:ste:10550"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37483" version="1" comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.16-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14479"/>
      <state state_ref="oval:org.mitre.oval:ste:10550"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37481" version="1" comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.16-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14499"/>
      <state state_ref="oval:org.mitre.oval:ste:10550"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37475" version="1" comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.16-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14507"/>
      <state state_ref="oval:org.mitre.oval:ste:10550"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37461" version="1" comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.16-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14479"/>
      <state state_ref="oval:org.mitre.oval:ste:10612"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37445" version="1" comment="java-1.5.0-sun-src is earlier than 0:1.5.0.16-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15113"/>
      <state state_ref="oval:org.mitre.oval:ste:10550"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37441" version="1" comment="java-1.6.0-sun-plugin is earlier than 1:1.6.0.7-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15162"/>
      <state state_ref="oval:org.mitre.oval:ste:10095"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37426" version="1" comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.16-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14809"/>
      <state state_ref="oval:org.mitre.oval:ste:10612"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37368" version="1" comment="java-1.5.0-sun is earlier than 0:1.5.0.16-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14988"/>
      <state state_ref="oval:org.mitre.oval:ste:10612"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37359" version="1" comment="java-1.5.0-sun-src is earlier than 0:1.5.0.16-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15113"/>
      <state state_ref="oval:org.mitre.oval:ste:10612"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37315" version="1" comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.16-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14507"/>
      <state state_ref="oval:org.mitre.oval:ste:10612"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37229" version="1" comment="java-1.6.0-sun is earlier than 1:1.6.0.7-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14936"/>
      <state state_ref="oval:org.mitre.oval:ste:10095"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37181" version="1" comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.16-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14499"/>
      <state state_ref="oval:org.mitre.oval:ste:10612"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37035" version="1" comment="java-1.6.0-sun-src is earlier than 1:1.6.0.7-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14923"/>
      <state state_ref="oval:org.mitre.oval:ste:10095"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36778" version="1" comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.16-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14809"/>
      <state state_ref="oval:org.mitre.oval:ste:10550"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36649" version="1" comment="java-1.6.0-sun-devel is earlier than 1:1.6.0.7-1jpp.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14712"/>
      <state state_ref="oval:org.mitre.oval:ste:10095"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33192" version="1" comment="qt-designer is earlier than 1:3.3.3-10.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14074"/>
      <state state_ref="oval:org.mitre.oval:ste:10053"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33172" version="1" comment="qt-devel is earlier than 1:3.1.2-14.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14278"/>
      <state state_ref="oval:org.mitre.oval:ste:10159"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33165" version="1" comment="qt is earlier than 1:3.1.2-14.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14421"/>
      <state state_ref="oval:org.mitre.oval:ste:10159"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33162" version="1" comment="qt-config is earlier than 1:3.1.2-14.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14145"/>
      <state state_ref="oval:org.mitre.oval:ste:10159"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33132" version="1" comment="qt-designer is earlier than 1:3.1.2-14.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14074"/>
      <state state_ref="oval:org.mitre.oval:ste:10159"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33071" version="1" comment="qt-ODBC is earlier than 1:3.1.2-14.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13884"/>
      <state state_ref="oval:org.mitre.oval:ste:10159"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33041" version="1" comment="kdelibs-devel is earlier than 6:3.3.1-6.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14126"/>
      <state state_ref="oval:org.mitre.oval:ste:10156"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33038" version="1" comment="qt-ODBC is earlier than 1:3.3.3-10.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13884"/>
      <state state_ref="oval:org.mitre.oval:ste:10053"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33019" version="1" comment="qt-config is earlier than 1:3.3.3-10.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14145"/>
      <state state_ref="oval:org.mitre.oval:ste:10053"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32969" version="1" comment="qt-devel is earlier than 1:3.3.3-10.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14278"/>
      <state state_ref="oval:org.mitre.oval:ste:10053"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32950" version="1" comment="qt-MySQL is earlier than 1:3.3.3-10.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14384"/>
      <state state_ref="oval:org.mitre.oval:ste:10053"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32911" version="1" comment="kdelibs is earlier than 6:3.3.1-6.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13933"/>
      <state state_ref="oval:org.mitre.oval:ste:10156"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32854" version="1" comment="qt-MySQL is earlier than 1:3.1.2-14.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14384"/>
      <state state_ref="oval:org.mitre.oval:ste:10159"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32790" version="1" comment="kdelibs is earlier than 6:3.1.3-6.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13933"/>
      <state state_ref="oval:org.mitre.oval:ste:10271"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32585" version="1" comment="kdelibs-devel is earlier than 6:3.1.3-6.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14126"/>
      <state state_ref="oval:org.mitre.oval:ste:10271"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32439" version="1" comment="qt-PostgreSQL is earlier than 1:3.3.3-10.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14674"/>
      <state state_ref="oval:org.mitre.oval:ste:10053"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32208" version="1" comment="qt is earlier than 1:3.3.3-10.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14421"/>
      <state state_ref="oval:org.mitre.oval:ste:10053"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33757" version="1" comment="aide is earlier than 0:0.13.1-2.0.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14953"/>
      <state state_ref="oval:org.mitre.oval:ste:10372"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32316" version="1" comment="vixie-cron is earlier than 4:4.1-44.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13978"/>
      <state state_ref="oval:org.mitre.oval:ste:10045"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31601" version="1" comment="gaim is earlier than 1:1.1.4-1.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14159"/>
      <state state_ref="oval:org.mitre.oval:ste:9798"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31086" version="1" comment="gaim is earlier than 1:1.1.4-1.EL3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14159"/>
      <state state_ref="oval:org.mitre.oval:ste:9800"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31622" version="1" comment="mozilla-mail is earlier than 37:1.7.6-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14423"/>
      <state state_ref="oval:org.mitre.oval:ste:9889"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31606" version="1" comment="mozilla-dom-inspector is earlier than 37:1.4.4-1.3.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13776"/>
      <state state_ref="oval:org.mitre.oval:ste:9714"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31604" version="1" comment="mozilla is earlier than 37:1.7.6-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14405"/>
      <state state_ref="oval:org.mitre.oval:ste:9889"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31598" version="1" comment="mozilla-nspr-devel is earlier than 37:1.4.4-1.3.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13716"/>
      <state state_ref="oval:org.mitre.oval:ste:9714"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31560" version="1" comment="devhelp is earlier than 0:0.9.2-2.4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14497"/>
      <state state_ref="oval:org.mitre.oval:ste:9360"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31558" version="1" comment="evolution-devel is earlier than 0:2.0.2-14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14585"/>
      <state state_ref="oval:org.mitre.oval:ste:9733"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31515" version="1" comment="mozilla is earlier than 37:1.4.4-1.3.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14405"/>
      <state state_ref="oval:org.mitre.oval:ste:9714"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31499" version="1" comment="devhelp-devel is earlier than 0:0.9.2-2.4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14520"/>
      <state state_ref="oval:org.mitre.oval:ste:9360"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31480" version="1" comment="mozilla-devel is earlier than 37:1.4.4-1.3.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14231"/>
      <state state_ref="oval:org.mitre.oval:ste:9714"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31469" version="1" comment="mozilla-nspr is earlier than 37:1.4.4-1.3.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14160"/>
      <state state_ref="oval:org.mitre.oval:ste:9714"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31465" version="1" comment="mozilla-mail is earlier than 37:1.4.4-1.3.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14423"/>
      <state state_ref="oval:org.mitre.oval:ste:9714"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31418" version="1" comment="mozilla-nspr-devel is earlier than 37:1.7.6-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13716"/>
      <state state_ref="oval:org.mitre.oval:ste:9889"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31417" version="1" comment="mozilla-nss is earlier than 37:1.4.4-1.3.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14069"/>
      <state state_ref="oval:org.mitre.oval:ste:9714"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31404" version="1" comment="mozilla-devel is earlier than 37:1.7.6-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14231"/>
      <state state_ref="oval:org.mitre.oval:ste:9889"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31381" version="1" comment="mozilla-chat is earlier than 37:1.7.6-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14196"/>
      <state state_ref="oval:org.mitre.oval:ste:9889"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31375" version="1" comment="mozilla-nss-devel is earlier than 37:1.7.6-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14415"/>
      <state state_ref="oval:org.mitre.oval:ste:9889"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31313" version="1" comment="mozilla-nss-devel is earlier than 37:1.4.4-1.3.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14415"/>
      <state state_ref="oval:org.mitre.oval:ste:9714"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31278" version="1" comment="mozilla-chat is earlier than 37:1.4.4-1.3.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14196"/>
      <state state_ref="oval:org.mitre.oval:ste:9714"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31110" version="1" comment="mozilla-nss is earlier than 37:1.7.6-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14069"/>
      <state state_ref="oval:org.mitre.oval:ste:9889"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31106" version="1" comment="mozilla-nspr is earlier than 37:1.7.6-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14160"/>
      <state state_ref="oval:org.mitre.oval:ste:9889"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31003" version="1" comment="evolution is earlier than 0:2.0.2-14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14477"/>
      <state state_ref="oval:org.mitre.oval:ste:9733"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30819" version="1" comment="mozilla-js-debugger is earlier than 37:1.4.4-1.3.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13991"/>
      <state state_ref="oval:org.mitre.oval:ste:9714"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30665" version="1" comment="mozilla-js-debugger is earlier than 37:1.7.6-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13991"/>
      <state state_ref="oval:org.mitre.oval:ste:9889"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30651" version="1" comment="mozilla-dom-inspector is earlier than 37:1.7.6-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13776"/>
      <state state_ref="oval:org.mitre.oval:ste:9889"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35926" version="1" comment="flash-plugin is earlier than 0:9.0.115.0-1.el3.with.oss" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14752"/>
      <state state_ref="oval:org.mitre.oval:ste:10727"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35776" version="1" comment="flash-plugin is earlier than 0:9.0.115.0-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14752"/>
      <state state_ref="oval:org.mitre.oval:ste:9888"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35400" version="1" comment="flash-plugin is earlier than 0:9.0.115.0-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14752"/>
      <state state_ref="oval:org.mitre.oval:ste:10732"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39759" version="1" comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.18.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14060"/>
      <state state_ref="oval:org.mitre.oval:ste:11319"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39738" version="1" comment="kernel is earlier than 0:2.6.18-164.6.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:11262"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39734" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.18.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:11319"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39722" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.18.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:11319"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39704" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.18.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:11319"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39699" version="1" comment="kernel-headers is earlier than 0:2.6.18-164.6.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:11262"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39665" version="1" comment="kernel-kdump is earlier than 0:2.6.18-164.6.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:11262"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39663" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-164.6.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:11262"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39609" version="1" comment="kernel-smp is earlier than 0:2.6.9-89.0.18.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:11319"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39604" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-89.0.18.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:11319"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39578" version="1" comment="kernel-devel is earlier than 0:2.6.9-89.0.18.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:11319"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39538" version="1" comment="kernel-xen is earlier than 0:2.6.18-164.6.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:11262"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39536" version="1" comment="kernel-devel is earlier than 0:2.6.18-164.6.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:11262"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39518" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-164.6.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:11262"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39504" version="1" comment="kernel-xenU is earlier than 0:2.6.9-89.0.18.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14301"/>
      <state state_ref="oval:org.mitre.oval:ste:11319"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39394" version="1" comment="kernel is earlier than 0:2.6.9-89.0.18.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:11319"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39362" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-89.0.18.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:11319"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39350" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-164.6.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:11262"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39189" version="1" comment="kernel-PAE is earlier than 0:2.6.18-164.6.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:11262"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39179" version="1" comment="kernel-doc is earlier than 0:2.6.18-164.6.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:11262"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39142" version="1" comment="kernel-debug is earlier than 0:2.6.18-164.6.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14957"/>
      <state state_ref="oval:org.mitre.oval:ste:11262"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39141" version="1" comment="kernel-debug-devel is earlier than 0:2.6.18-164.6.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15023"/>
      <state state_ref="oval:org.mitre.oval:ste:11262"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39019" version="1" comment="kernel-doc is earlier than 0:2.6.9-89.0.18.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:11319"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33549" version="1" comment="bluez-utils-cups is earlier than 0:2.10-2.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14559"/>
      <state state_ref="oval:org.mitre.oval:ste:9984"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33457" version="1" comment="bluez-utils is earlier than 0:2.10-2.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14881"/>
      <state state_ref="oval:org.mitre.oval:ste:9984"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33093" version="1" comment="openssl is earlier than 0:0.9.7a-43.14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13882"/>
      <state state_ref="oval:org.mitre.oval:ste:9883"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33058" version="1" comment="openssl-devel is earlier than 0:0.9.7a-43.14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13920"/>
      <state state_ref="oval:org.mitre.oval:ste:9883"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32990" version="1" comment="openssl-perl is earlier than 0:0.9.7a-33.21" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14122"/>
      <state state_ref="oval:org.mitre.oval:ste:10255"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32875" version="1" comment="openssl-perl is earlier than 0:0.9.7a-43.14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14122"/>
      <state state_ref="oval:org.mitre.oval:ste:9883"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32812" version="1" comment="openssl is earlier than 0:0.9.7a-33.21" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13882"/>
      <state state_ref="oval:org.mitre.oval:ste:10255"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32789" version="1" comment="openssl096b is earlier than 0:0.9.6b-22.46" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14258"/>
      <state state_ref="oval:org.mitre.oval:ste:10200"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32771" version="1" comment="openssl096b is earlier than 0:0.9.6b-16.46" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14258"/>
      <state state_ref="oval:org.mitre.oval:ste:9656"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32592" version="1" comment="openssl-devel is earlier than 0:0.9.7a-33.21" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13920"/>
      <state state_ref="oval:org.mitre.oval:ste:10255"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37680" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-0.24.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10148"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37664" version="1" comment="nss-tools is earlier than 0:3.12.1.1-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15090"/>
      <state state_ref="oval:org.mitre.oval:ste:11015"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37634" version="1" comment="thunderbird is earlier than 0:1.5.0.12-16.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:10991"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37609" version="1" comment="seamonkey is earlier than 0:1.0.9-26.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:11045"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37584" version="1" comment="yelp is earlier than 0:2.16.0-21.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14764"/>
      <state state_ref="oval:org.mitre.oval:ste:10114"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37578" version="1" comment="xulrunner is earlier than 0:1.9.0.2-5.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15057"/>
      <state state_ref="oval:org.mitre.oval:ste:11070"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37564" version="1" comment="devhelp-devel is earlier than 0:0.10-0.10.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14520"/>
      <state state_ref="oval:org.mitre.oval:ste:11074"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37552" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-26.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:11045"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37543" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-26.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:11045"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37528" version="1" comment="seamonkey is earlier than 0:1.0.9-0.24.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10148"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37499" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-26.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:11045"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37495" version="1" comment="xulrunner-devel is earlier than 0:1.9.0.2-5.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15100"/>
      <state state_ref="oval:org.mitre.oval:ste:11070"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37486" version="1" comment="nss-pkcs11-devel is earlier than 0:3.12.1.1-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14171"/>
      <state state_ref="oval:org.mitre.oval:ste:11015"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37449" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.24.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10148"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37444" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-26.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:11045"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37435" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-0.24.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10148"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37411" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-0.24.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:10148"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37406" version="1" comment="xulrunner-devel-unstable is earlier than 0:1.9.0.2-5.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15048"/>
      <state state_ref="oval:org.mitre.oval:ste:11070"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37356" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-0.24.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:10148"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37353" version="1" comment="devhelp is earlier than 0:0.12-19.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14497"/>
      <state state_ref="oval:org.mitre.oval:ste:10974"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37306" version="1" comment="devhelp is earlier than 0:0.10-0.10.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14497"/>
      <state state_ref="oval:org.mitre.oval:ste:11074"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37248" version="1" comment="devhelp-devel is earlier than 0:0.12-19.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14520"/>
      <state state_ref="oval:org.mitre.oval:ste:10974"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37230" version="1" comment="thunderbird is earlier than 0:2.0.0.17-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:10493"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37225" version="1" comment="firefox is earlier than 0:3.0.2-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10735"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37195" version="1" comment="firefox is earlier than 0:3.0.2-3.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10929"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37044" version="1" comment="nss is earlier than 0:3.12.1.1-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14917"/>
      <state state_ref="oval:org.mitre.oval:ste:11015"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37031" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.24.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:10148"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36913" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-26.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:11045"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36726" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.24.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:10148"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36725" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-0.24.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10148"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36691" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.24.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10148"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36664" version="1" comment="nss-devel is earlier than 0:3.12.1.1-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14656"/>
      <state state_ref="oval:org.mitre.oval:ste:11015"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34077" version="1" comment="openssh is earlier than 0:3.9p1-8.RHEL4.20" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14581"/>
      <state state_ref="oval:org.mitre.oval:ste:10421"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34075" version="1" comment="openssh-server is earlier than 0:3.9p1-8.RHEL4.20" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14544"/>
      <state state_ref="oval:org.mitre.oval:ste:10421"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34060" version="1" comment="openssh-clients is earlier than 0:3.9p1-8.RHEL4.20" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14409"/>
      <state state_ref="oval:org.mitre.oval:ste:10421"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33820" version="1" comment="openssh-askpass is earlier than 0:3.9p1-8.RHEL4.20" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14577"/>
      <state state_ref="oval:org.mitre.oval:ste:10421"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33524" version="1" comment="openssh-askpass-gnome is earlier than 0:3.9p1-8.RHEL4.20" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14434"/>
      <state state_ref="oval:org.mitre.oval:ste:10421"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32545" version="1" comment="gpdf is earlier than 0:2.8.2-7.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14337"/>
      <state state_ref="oval:org.mitre.oval:ste:9993"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32507" version="1" comment="tetex is earlier than 0:1.0.7-67.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14329"/>
      <state state_ref="oval:org.mitre.oval:ste:9848"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32499" version="1" comment="cups is earlier than 1:1.1.22-0.rc1.9.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:9505"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32489" version="1" comment="tetex-fonts is earlier than 0:2.0.2-22.EL4.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14502"/>
      <state state_ref="oval:org.mitre.oval:ste:10071"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32437" version="1" comment="cups-libs is earlier than 1:1.1.17-13.3.36" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:9839"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32436" version="1" comment="tetex-latex is earlier than 0:1.0.7-67.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13878"/>
      <state state_ref="oval:org.mitre.oval:ste:9848"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32395" version="1" comment="kdegraphics-devel is earlier than 7:3.3.1-3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14596"/>
      <state state_ref="oval:org.mitre.oval:ste:9147"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32377" version="1" comment="tetex-afm is earlier than 0:1.0.7-67.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14389"/>
      <state state_ref="oval:org.mitre.oval:ste:9848"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32333" version="1" comment="tetex-xdvi is earlier than 0:2.0.2-22.EL4.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14182"/>
      <state state_ref="oval:org.mitre.oval:ste:10071"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32317" version="1" comment="tetex-doc is earlier than 0:2.0.2-22.EL4.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14554"/>
      <state state_ref="oval:org.mitre.oval:ste:10071"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32311" version="1" comment="tetex-dvips is earlier than 0:1.0.7-67.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14207"/>
      <state state_ref="oval:org.mitre.oval:ste:9848"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32308" version="1" comment="tetex-afm is earlier than 0:2.0.2-22.EL4.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14389"/>
      <state state_ref="oval:org.mitre.oval:ste:10071"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32284" version="1" comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:9505"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32279" version="1" comment="tetex-fonts is earlier than 0:1.0.7-67.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14502"/>
      <state state_ref="oval:org.mitre.oval:ste:9848"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32260" version="1" comment="tetex-latex is earlier than 0:2.0.2-22.EL4.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13878"/>
      <state state_ref="oval:org.mitre.oval:ste:10071"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32254" version="1" comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:9505"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32206" version="1" comment="cups-devel is earlier than 1:1.1.17-13.3.36" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:9839"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32199" version="1" comment="tetex is earlier than 0:2.0.2-22.EL4.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14329"/>
      <state state_ref="oval:org.mitre.oval:ste:10071"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32152" version="1" comment="xpdf is earlier than 1:3.00-11.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14398"/>
      <state state_ref="oval:org.mitre.oval:ste:10042"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32095" version="1" comment="tetex-dvips is earlier than 0:2.0.2-22.EL4.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14207"/>
      <state state_ref="oval:org.mitre.oval:ste:10071"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31805" version="1" comment="kdegraphics is earlier than 7:3.3.1-3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14241"/>
      <state state_ref="oval:org.mitre.oval:ste:9147"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31613" version="1" comment="tetex-xdvi is earlier than 0:1.0.7-67.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14182"/>
      <state state_ref="oval:org.mitre.oval:ste:9848"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31553" version="1" comment="cups is earlier than 1:1.1.17-13.3.36" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:9839"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31474" version="1" comment="xpdf is earlier than 1:2.02-9.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14398"/>
      <state state_ref="oval:org.mitre.oval:ste:10087"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:3006" version="1" check="at least one" comment="File rpc.yppasswdd exists" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1721"/>
    </file_test>
    <process_test id="oval:org.mitre.oval:tst:3004" version="1" check="at least one" comment="rpc.yppasswdd running" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1719"/>
    </process_test>
    <patch_test id="oval:org.mitre.oval:tst:2943" version="1" check="at least one" comment="Patch 111590-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:1684"/>
      <state state_ref="oval:org.mitre.oval:ste:2758"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33205" version="1" comment="wireshark is earlier than 0:0.99.4-EL3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14711"/>
      <state state_ref="oval:org.mitre.oval:ste:10074"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33170" version="1" comment="wireshark-gnome is earlier than 0:0.99.4-EL3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14663"/>
      <state state_ref="oval:org.mitre.oval:ste:10074"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33152" version="1" comment="wireshark-gnome is earlier than 0:0.99.4-EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14663"/>
      <state state_ref="oval:org.mitre.oval:ste:10098"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32550" version="1" comment="wireshark is earlier than 0:0.99.4-EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14711"/>
      <state state_ref="oval:org.mitre.oval:ste:10098"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39059" version="1" comment="openssl-perl is earlier than 0:0.9.8e-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14122"/>
      <state state_ref="oval:org.mitre.oval:ste:11339"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38660" version="1" comment="openssl is earlier than 0:0.9.8e-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13882"/>
      <state state_ref="oval:org.mitre.oval:ste:11339"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38295" version="1" comment="openssl-devel is earlier than 0:0.9.8e-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13920"/>
      <state state_ref="oval:org.mitre.oval:ste:11339"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40299" version="1" comment="thunderbird is earlier than 0:1.5.0.12-25.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:11463"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40249" version="1" comment="thunderbird is earlier than 0:2.0.0.24-2.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:11021"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38947" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-45.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:11018"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38924" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-0.40.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:11219"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38923" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-0.40.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:11219"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38918" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-0.40.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:11219"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38881" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-0.40.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:11219"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38876" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-45.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:11018"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38851" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.40.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:11219"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38811" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.40.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:11219"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38772" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-45.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:11018"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38690" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.40.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:11219"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38644" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-0.40.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:11219"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38504" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-45.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:11018"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38475" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.40.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:11219"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38366" version="1" comment="seamonkey is earlier than 0:1.0.9-0.40.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:11219"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38194" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-45.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:11018"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37948" version="1" comment="seamonkey is earlier than 0:1.0.9-45.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:11018"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35553" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-0.5.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10348"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35552" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-0.5.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10348"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35541" version="1" comment="seamonkey is earlier than 0:1.0.9-0.5.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10348"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35540" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.5.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10348"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35512" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-0.5.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:10348"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35489" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-6.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:9881"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35482" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-6.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:9881"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35454" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-6.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:9881"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35441" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-0.5.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:10348"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35398" version="1" comment="firefox is earlier than 0:1.5.0.12-0.7.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10574"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35394" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.5.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:10348"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35351" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-6.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:9881"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35324" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-6.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:9881"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35311" version="1" comment="seamonkey is earlier than 0:1.0.9-6.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:9881"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35291" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-6.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:9881"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35262" version="1" comment="firefox-devel is earlier than 0:1.5.0.12-6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14876"/>
      <state state_ref="oval:org.mitre.oval:ste:10387"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35241" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.5.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:10348"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35240" version="1" comment="thunderbird is earlier than 0:1.5.0.12-0.5.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:10590"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35202" version="1" comment="firefox is earlier than 0:1.5.0.12-6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10387"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35182" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-6.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:9881"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35177" version="1" comment="thunderbird is earlier than 0:1.5.0.12-5.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:10244"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35155" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.5.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10348"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34924" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-0.5.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10348"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34790" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-6.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:9881"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34577" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-6.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:9881"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31937" version="1" comment="mikmod-devel is earlier than 0:3.1.6-32.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14463"/>
      <state state_ref="oval:org.mitre.oval:ste:10025"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31867" version="1" comment="mikmod-devel is earlier than 0:3.1.6-22.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14463"/>
      <state state_ref="oval:org.mitre.oval:ste:9460"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31851" version="1" comment="mikmod is earlier than 0:3.1.6-22.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14302"/>
      <state state_ref="oval:org.mitre.oval:ste:9460"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31059" version="1" comment="mikmod is earlier than 0:3.1.6-32.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14302"/>
      <state state_ref="oval:org.mitre.oval:ste:10025"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32270" version="1" comment="pam is earlier than 0:0.77-66.13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14730"/>
      <state state_ref="oval:org.mitre.oval:ste:9658"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31898" version="1" comment="pam-devel is earlier than 0:0.77-66.13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14734"/>
      <state state_ref="oval:org.mitre.oval:ste:9658"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36844" version="1" comment="compiz is earlier than 0:0.0.13-0.37.20060817git.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14930"/>
      <state state_ref="oval:org.mitre.oval:ste:10756"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36745" version="1" comment="compiz-devel is earlier than 0:0.0.13-0.37.20060817git.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15154"/>
      <state state_ref="oval:org.mitre.oval:ste:10756"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39655" version="1" comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.7.b09.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14925"/>
      <state state_ref="oval:org.mitre.oval:ste:11325"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39616" version="1" comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.7.b09.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14889"/>
      <state state_ref="oval:org.mitre.oval:ste:11325"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39531" version="1" comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.7.b09.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14531"/>
      <state state_ref="oval:org.mitre.oval:ste:11325"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39115" version="1" comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.7.b09.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15114"/>
      <state state_ref="oval:org.mitre.oval:ste:11325"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38878" version="1" comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.7.b09.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15274"/>
      <state state_ref="oval:org.mitre.oval:ste:11325"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36833" version="1" comment="caching-nameserver is earlier than 0:9.3.4-6.P1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14701"/>
      <state state_ref="oval:org.mitre.oval:ste:10841"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36755" version="1" comment="bind is earlier than 0:9.3.4-6.P1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14143"/>
      <state state_ref="oval:org.mitre.oval:ste:10841"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36695" version="1" comment="bind-devel is earlier than 0:9.3.4-6.P1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14242"/>
      <state state_ref="oval:org.mitre.oval:ste:10841"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36618" version="1" comment="bind-chroot is earlier than 0:9.3.4-6.P1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14363"/>
      <state state_ref="oval:org.mitre.oval:ste:10841"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36573" version="1" comment="bind-libbind-devel is earlier than 0:9.3.4-6.P1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14729"/>
      <state state_ref="oval:org.mitre.oval:ste:10841"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36572" version="1" comment="bind-sdb is earlier than 0:9.3.4-6.P1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14433"/>
      <state state_ref="oval:org.mitre.oval:ste:10841"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36364" version="1" comment="bind-libs is earlier than 0:9.3.4-6.P1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14348"/>
      <state state_ref="oval:org.mitre.oval:ste:10841"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35853" version="1" comment="bind-utils is earlier than 0:9.3.4-6.P1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14263"/>
      <state state_ref="oval:org.mitre.oval:ste:10841"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30590" version="1" comment="kernel-smp-unsupported is earlier than 0:2.4.21-4.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14218"/>
      <state state_ref="oval:org.mitre.oval:ste:9425"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30576" version="1" comment="kernel is earlier than 0:2.4.21-4.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:9425"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30559" version="1" comment="kernel-hugemem is earlier than 0:2.4.21-4.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:9425"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30558" version="1" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-4.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14372"/>
      <state state_ref="oval:org.mitre.oval:ste:9425"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30257" version="1" comment="kernel-BOOT is earlier than 0:2.4.21-4.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14219"/>
      <state state_ref="oval:org.mitre.oval:ste:9425"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30204" version="1" comment="kernel-doc is earlier than 0:2.4.21-4.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:9425"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30082" version="1" comment="kernel-smp is earlier than 0:2.4.21-4.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:9425"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30040" version="1" comment="kernel-unsupported is earlier than 0:2.4.21-4.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14229"/>
      <state state_ref="oval:org.mitre.oval:ste:9425"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29964" version="1" comment="kernel-source is earlier than 0:2.4.21-4.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14186"/>
      <state state_ref="oval:org.mitre.oval:ste:9425"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37725" version="1" comment="wireshark-gnome is earlier than 0:1.0.3-3.el4_7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14663"/>
      <state state_ref="oval:org.mitre.oval:ste:10630"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37624" version="1" comment="wireshark is earlier than 0:1.0.3-EL3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14711"/>
      <state state_ref="oval:org.mitre.oval:ste:10710"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37542" version="1" comment="wireshark is earlier than 0:1.0.3-4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14711"/>
      <state state_ref="oval:org.mitre.oval:ste:10497"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37460" version="1" comment="wireshark-gnome is earlier than 0:1.0.3-4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14663"/>
      <state state_ref="oval:org.mitre.oval:ste:10497"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37249" version="1" comment="wireshark is earlier than 0:1.0.3-3.el4_7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14711"/>
      <state state_ref="oval:org.mitre.oval:ste:10630"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37207" version="1" comment="wireshark-gnome is earlier than 0:1.0.3-EL3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14663"/>
      <state state_ref="oval:org.mitre.oval:ste:10710"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39354" version="1" comment="xmlsec1-gnutls-devel is earlier than 0:1.2.9-8.1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15241"/>
      <state state_ref="oval:org.mitre.oval:ste:11418"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39337" version="1" comment="xmlsec1-nss-devel is earlier than 0:1.2.9-8.1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15222"/>
      <state state_ref="oval:org.mitre.oval:ste:11418"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39330" version="1" comment="xmlsec1-devel is earlier than 0:1.2.9-8.1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15290"/>
      <state state_ref="oval:org.mitre.oval:ste:11418"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39289" version="1" comment="xmlsec1-gnutls is earlier than 0:1.2.9-8.1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15043"/>
      <state state_ref="oval:org.mitre.oval:ste:11418"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39276" version="1" comment="xmlsec1-openssl is earlier than 0:1.2.6-3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15197"/>
      <state state_ref="oval:org.mitre.oval:ste:11399"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39237" version="1" comment="xmlsec1 is earlier than 0:1.2.9-8.1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15214"/>
      <state state_ref="oval:org.mitre.oval:ste:11418"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39163" version="1" comment="xmlsec1 is earlier than 0:1.2.6-3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15214"/>
      <state state_ref="oval:org.mitre.oval:ste:11399"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39123" version="1" comment="xmlsec1-openssl-devel is earlier than 0:1.2.6-3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15175"/>
      <state state_ref="oval:org.mitre.oval:ste:11399"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38981" version="1" comment="xmlsec1-devel is earlier than 0:1.2.6-3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15290"/>
      <state state_ref="oval:org.mitre.oval:ste:11399"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38943" version="1" comment="xmlsec1-openssl is earlier than 0:1.2.9-8.1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15197"/>
      <state state_ref="oval:org.mitre.oval:ste:11418"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38733" version="1" comment="xmlsec1-openssl-devel is earlier than 0:1.2.9-8.1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15175"/>
      <state state_ref="oval:org.mitre.oval:ste:11418"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38383" version="1" comment="xmlsec1-nss is earlier than 0:1.2.9-8.1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14874"/>
      <state state_ref="oval:org.mitre.oval:ste:11418"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33138" version="1" comment="ruby-devel is earlier than 0:1.8.1-7.EL4.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14187"/>
      <state state_ref="oval:org.mitre.oval:ste:10253"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33129" version="1" comment="ruby-docs is earlier than 0:1.8.1-7.EL4.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14446"/>
      <state state_ref="oval:org.mitre.oval:ste:10253"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33100" version="1" comment="ruby-mode is earlier than 0:1.8.1-7.EL4.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14380"/>
      <state state_ref="oval:org.mitre.oval:ste:10253"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33098" version="1" comment="irb is earlier than 0:1.8.1-7.EL4.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13649"/>
      <state state_ref="oval:org.mitre.oval:ste:10253"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33076" version="1" comment="ruby-mode is earlier than 0:1.6.8-9.EL3.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14380"/>
      <state state_ref="oval:org.mitre.oval:ste:9671"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33050" version="1" comment="ruby is earlier than 0:1.6.8-9.EL3.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14305"/>
      <state state_ref="oval:org.mitre.oval:ste:9671"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33028" version="1" comment="ruby is earlier than 0:1.8.1-7.EL4.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14305"/>
      <state state_ref="oval:org.mitre.oval:ste:10253"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33003" version="1" comment="irb is earlier than 0:1.6.8-9.EL3.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13649"/>
      <state state_ref="oval:org.mitre.oval:ste:9671"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32988" version="1" comment="ruby-libs is earlier than 0:1.8.1-7.EL4.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14388"/>
      <state state_ref="oval:org.mitre.oval:ste:10253"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32986" version="1" comment="ruby-devel is earlier than 0:1.6.8-9.EL3.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14187"/>
      <state state_ref="oval:org.mitre.oval:ste:9671"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32953" version="1" comment="ruby-docs is earlier than 0:1.6.8-9.EL3.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14446"/>
      <state state_ref="oval:org.mitre.oval:ste:9671"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32878" version="1" comment="ruby-tcltk is earlier than 0:1.8.1-7.EL4.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14273"/>
      <state state_ref="oval:org.mitre.oval:ste:10253"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32749" version="1" comment="ruby-libs is earlier than 0:1.6.8-9.EL3.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14388"/>
      <state state_ref="oval:org.mitre.oval:ste:9671"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32638" version="1" comment="ruby-tcltk is earlier than 0:1.6.8-9.EL3.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14273"/>
      <state state_ref="oval:org.mitre.oval:ste:9671"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31933" version="1" comment="krb5-libs is earlier than 0:1.2.7-47" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14395"/>
      <state state_ref="oval:org.mitre.oval:ste:10021"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31927" version="1" comment="krb5-server is earlier than 0:1.2.7-47" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14452"/>
      <state state_ref="oval:org.mitre.oval:ste:10021"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31846" version="1" comment="krb5 is earlier than 0:1.3.4-17" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14120"/>
      <state state_ref="oval:org.mitre.oval:ste:9553"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31800" version="1" comment="krb5-workstation is earlier than 0:1.3.4-17" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14279"/>
      <state state_ref="oval:org.mitre.oval:ste:9553"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31781" version="1" comment="krb5-devel is earlier than 0:1.3.4-17" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14100"/>
      <state state_ref="oval:org.mitre.oval:ste:9553"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31772" version="1" comment="krb5-devel is earlier than 0:1.2.7-47" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14100"/>
      <state state_ref="oval:org.mitre.oval:ste:10021"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31712" version="1" comment="krb5-workstation is earlier than 0:1.2.7-47" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14279"/>
      <state state_ref="oval:org.mitre.oval:ste:10021"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31706" version="1" comment="krb5-server is earlier than 0:1.3.4-17" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14452"/>
      <state state_ref="oval:org.mitre.oval:ste:9553"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31378" version="1" comment="rsh-server is earlier than 0:0.17-25.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14564"/>
      <state state_ref="oval:org.mitre.oval:ste:9687"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31346" version="1" comment="openssh is earlier than 0:3.6.1p2-33.30.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14581"/>
      <state state_ref="oval:org.mitre.oval:ste:9799"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31333" version="1" comment="rsh is earlier than 0:0.17-25.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13972"/>
      <state state_ref="oval:org.mitre.oval:ste:9687"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31277" version="1" comment="rsh-server is earlier than 0:0.17-17.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14564"/>
      <state state_ref="oval:org.mitre.oval:ste:9207"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31184" version="1" comment="rsh is earlier than 0:0.17-17.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13972"/>
      <state state_ref="oval:org.mitre.oval:ste:9207"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31172" version="1" comment="krb5-libs is earlier than 0:1.3.4-17" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14395"/>
      <state state_ref="oval:org.mitre.oval:ste:9553"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31160" version="1" comment="openssh-server is earlier than 0:3.6.1p2-33.30.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14544"/>
      <state state_ref="oval:org.mitre.oval:ste:9799"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31141" version="1" comment="openssh-askpass is earlier than 0:3.6.1p2-33.30.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14577"/>
      <state state_ref="oval:org.mitre.oval:ste:9799"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31130" version="1" comment="openssh-askpass-gnome is earlier than 0:3.6.1p2-33.30.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14434"/>
      <state state_ref="oval:org.mitre.oval:ste:9799"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31065" version="1" comment="krb5 is earlier than 0:1.2.7-47" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14120"/>
      <state state_ref="oval:org.mitre.oval:ste:10021"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30865" version="1" comment="openssh-clients is earlier than 0:3.6.1p2-33.30.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14409"/>
      <state state_ref="oval:org.mitre.oval:ste:9799"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35632" version="1" comment="compat-openldap is earlier than 0:2.1.30-8.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14705"/>
      <state state_ref="oval:org.mitre.oval:ste:10713"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35621" version="1" comment="openldap-clients is earlier than 0:2.2.13-8.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13745"/>
      <state state_ref="oval:org.mitre.oval:ste:10511"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35607" version="1" comment="openldap-servers-sql is earlier than 0:2.3.27-8.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14387"/>
      <state state_ref="oval:org.mitre.oval:ste:9811"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35594" version="1" comment="openldap-servers-sql is earlier than 0:2.2.13-8.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14387"/>
      <state state_ref="oval:org.mitre.oval:ste:10511"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35560" version="1" comment="compat-openldap is earlier than 0:2.3.27_2.2.29-8.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14705"/>
      <state state_ref="oval:org.mitre.oval:ste:10528"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35477" version="1" comment="openldap is earlier than 0:2.3.27-8.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14650"/>
      <state state_ref="oval:org.mitre.oval:ste:9811"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35473" version="1" comment="openldap-devel is earlier than 0:2.2.13-8.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14680"/>
      <state state_ref="oval:org.mitre.oval:ste:10511"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35471" version="1" comment="openldap-servers is earlier than 0:2.2.13-8.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14676"/>
      <state state_ref="oval:org.mitre.oval:ste:10511"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35431" version="1" comment="openldap-servers is earlier than 0:2.3.27-8.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14676"/>
      <state state_ref="oval:org.mitre.oval:ste:9811"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35403" version="1" comment="openldap is earlier than 0:2.2.13-8.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14650"/>
      <state state_ref="oval:org.mitre.oval:ste:10511"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35257" version="1" comment="openldap-devel is earlier than 0:2.3.27-8.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14680"/>
      <state state_ref="oval:org.mitre.oval:ste:9811"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35184" version="1" comment="openldap-clients is earlier than 0:2.3.27-8.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13745"/>
      <state state_ref="oval:org.mitre.oval:ste:9811"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35991" version="1" comment="mod_ssl is earlier than 0:2.2.3-11.el5_1.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:10481"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35953" version="1" comment="httpd-manual is earlier than 0:2.2.3-11.el5_1.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14457"/>
      <state state_ref="oval:org.mitre.oval:ste:10481"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35696" version="1" comment="httpd is earlier than 0:2.2.3-11.el5_1.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:10481"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35668" version="1" comment="httpd-devel is earlier than 0:2.2.3-11.el5_1.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:10481"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31612" version="1" comment="mysql-devel is earlier than 0:4.1.10a-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14481"/>
      <state state_ref="oval:org.mitre.oval:ste:9459"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31452" version="1" comment="mysql-bench is earlier than 0:4.1.10a-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14400"/>
      <state state_ref="oval:org.mitre.oval:ste:9459"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31391" version="1" comment="mysql-bench is earlier than 0:3.23.58-15.RHEL3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14400"/>
      <state state_ref="oval:org.mitre.oval:ste:9226"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31367" version="1" comment="mysql is earlier than 0:3.23.58-15.RHEL3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14355"/>
      <state state_ref="oval:org.mitre.oval:ste:9226"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31299" version="1" comment="mysql-devel is earlier than 0:3.23.58-15.RHEL3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14481"/>
      <state state_ref="oval:org.mitre.oval:ste:9226"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31294" version="1" comment="mysql-server is earlier than 0:4.1.10a-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14342"/>
      <state state_ref="oval:org.mitre.oval:ste:9459"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30977" version="1" comment="mysql is earlier than 0:4.1.10a-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14355"/>
      <state state_ref="oval:org.mitre.oval:ste:9459"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:3099" version="1" comment="IIS 4.0 Major Version" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1754"/>
      <state state_ref="oval:org.mitre.oval:ste:2904"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3038" version="1" check="at least one" comment="Patch Q295534 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1739"/>
      <state state_ref="oval:org.mitre.oval:ste:2845"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3037" version="1" comment="Patch Q301625 Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1738"/>
      <state state_ref="oval:org.mitre.oval:ste:2844"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1314" version="2" check="at least one" comment="File %windir%\System32\w3svc.dll is less than 4.2.764.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:496"/>
      <state state_ref="oval:org.mitre.oval:ste:1180"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34016" version="1" comment="php-xmlrpc is earlier than 0:4.3.9-3.22.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14445"/>
      <state state_ref="oval:org.mitre.oval:ste:10408"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34008" version="1" comment="php-gd is earlier than 0:5.1.6-11.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14335"/>
      <state state_ref="oval:org.mitre.oval:ste:10064"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34005" version="1" comment="php-cli is earlier than 0:5.1.6-11.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14922"/>
      <state state_ref="oval:org.mitre.oval:ste:10064"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33997" version="1" comment="php-soap is earlier than 0:5.1.6-11.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14366"/>
      <state state_ref="oval:org.mitre.oval:ste:10064"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33995" version="1" comment="php-mbstring is earlier than 0:4.3.9-3.22.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13746"/>
      <state state_ref="oval:org.mitre.oval:ste:10408"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33960" version="1" comment="php-ncurses is earlier than 0:5.1.6-11.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14227"/>
      <state state_ref="oval:org.mitre.oval:ste:10064"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33959" version="1" comment="php is earlier than 0:5.1.6-11.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:10064"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33957" version="1" comment="php-domxml is earlier than 0:4.3.9-3.22.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14496"/>
      <state state_ref="oval:org.mitre.oval:ste:10408"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33945" version="1" comment="php-pear is earlier than 0:4.3.9-3.22.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14130"/>
      <state state_ref="oval:org.mitre.oval:ste:10408"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33941" version="1" comment="php-xml is earlier than 0:5.1.6-11.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14560"/>
      <state state_ref="oval:org.mitre.oval:ste:10064"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33939" version="1" comment="php-snmp is earlier than 0:5.1.6-11.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14508"/>
      <state state_ref="oval:org.mitre.oval:ste:10064"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33923" version="1" comment="php-devel is earlier than 0:5.1.6-11.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:10064"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33920" version="1" comment="php-devel is earlier than 0:4.3.9-3.22.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:10408"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33915" version="1" comment="php-imap is earlier than 0:4.3.2-40.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:9610"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33892" version="1" comment="php-pgsql is earlier than 0:4.3.9-3.22.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:10408"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33880" version="1" comment="php-ldap is earlier than 0:5.1.6-11.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:10064"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33878" version="1" comment="php-odbc is earlier than 0:5.1.6-11.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:10064"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33857" version="1" comment="php-odbc is earlier than 0:4.3.9-3.22.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:10408"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33828" version="1" comment="php-mysql is earlier than 0:5.1.6-11.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:10064"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33822" version="1" comment="php-odbc is earlier than 0:4.3.2-40.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:9610"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33817" version="1" comment="php-pgsql is earlier than 0:4.3.2-40.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:9610"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33809" version="1" comment="php-bcmath is earlier than 0:5.1.6-11.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14639"/>
      <state state_ref="oval:org.mitre.oval:ste:10064"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33776" version="1" comment="php is earlier than 0:4.3.2-40.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:9610"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33770" version="1" comment="php-dba is earlier than 0:5.1.6-11.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14512"/>
      <state state_ref="oval:org.mitre.oval:ste:10064"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33769" version="1" comment="php-mysql is earlier than 0:4.3.2-40.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:9610"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33722" version="1" comment="php-pgsql is earlier than 0:5.1.6-11.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:10064"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33711" version="1" comment="php-ldap is earlier than 0:4.3.9-3.22.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:10408"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33690" version="1" comment="php is earlier than 0:4.3.9-3.22.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:10408"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33644" version="1" comment="php-ncurses is earlier than 0:4.3.9-3.22.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14227"/>
      <state state_ref="oval:org.mitre.oval:ste:10408"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33642" version="1" comment="php-imap is earlier than 0:4.3.9-3.22.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:10408"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33626" version="1" comment="php-pdo is earlier than 0:5.1.6-11.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14154"/>
      <state state_ref="oval:org.mitre.oval:ste:10064"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33560" version="1" comment="php-mbstring is earlier than 0:5.1.6-11.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13746"/>
      <state state_ref="oval:org.mitre.oval:ste:10064"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33551" version="1" comment="php-xmlrpc is earlier than 0:5.1.6-11.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14445"/>
      <state state_ref="oval:org.mitre.oval:ste:10064"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33528" version="1" comment="php-ldap is earlier than 0:4.3.2-40.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:9610"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33441" version="1" comment="php-imap is earlier than 0:5.1.6-11.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:10064"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33405" version="1" comment="php-mysql is earlier than 0:4.3.9-3.22.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:10408"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33395" version="1" comment="php-snmp is earlier than 0:4.3.9-3.22.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14508"/>
      <state state_ref="oval:org.mitre.oval:ste:10408"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33351" version="1" comment="php-devel is earlier than 0:4.3.2-40.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:9610"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33290" version="1" comment="php-common is earlier than 0:5.1.6-11.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14841"/>
      <state state_ref="oval:org.mitre.oval:ste:10064"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33024" version="1" comment="php-gd is earlier than 0:4.3.9-3.22.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14335"/>
      <state state_ref="oval:org.mitre.oval:ste:10408"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34877" version="1" comment="openssh-askpass-gnome is earlier than 0:3.9p1-8.RHEL4.24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14434"/>
      <state state_ref="oval:org.mitre.oval:ste:10258"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34819" version="1" comment="openssh-askpass is earlier than 0:3.9p1-8.RHEL4.24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14577"/>
      <state state_ref="oval:org.mitre.oval:ste:10258"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34791" version="1" comment="openssh is earlier than 0:3.9p1-8.RHEL4.24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14581"/>
      <state state_ref="oval:org.mitre.oval:ste:10258"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34713" version="1" comment="openssh-clients is earlier than 0:3.9p1-8.RHEL4.24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14409"/>
      <state state_ref="oval:org.mitre.oval:ste:10258"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34696" version="1" comment="openssh-server is earlier than 0:4.3p2-24.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14544"/>
      <state state_ref="oval:org.mitre.oval:ste:10532"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34627" version="1" comment="openssh-clients is earlier than 0:4.3p2-24.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14409"/>
      <state state_ref="oval:org.mitre.oval:ste:10532"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34563" version="1" comment="openssh-askpass is earlier than 0:4.3p2-24.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14577"/>
      <state state_ref="oval:org.mitre.oval:ste:10532"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34395" version="1" comment="openssh is earlier than 0:4.3p2-24.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14581"/>
      <state state_ref="oval:org.mitre.oval:ste:10532"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34393" version="1" comment="openssh-server is earlier than 0:3.9p1-8.RHEL4.24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14544"/>
      <state state_ref="oval:org.mitre.oval:ste:10258"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35083" version="1" comment="kernel-xenU is earlier than 0:2.6.9-55.0.6.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14301"/>
      <state state_ref="oval:org.mitre.oval:ste:10286"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35059" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.0.6.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:10286"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34937" version="1" comment="kernel-smp is earlier than 0:2.6.9-55.0.6.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:10286"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34889" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-55.0.6.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:10286"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34855" version="1" comment="kernel-xenU-devel is earlier than 0:2.6.9-55.0.6.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14060"/>
      <state state_ref="oval:org.mitre.oval:ste:10286"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34846" version="1" comment="kernel-doc is earlier than 0:2.6.9-55.0.6.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10286"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34543" version="1" comment="kernel-devel is earlier than 0:2.6.9-55.0.6.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10286"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34524" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-55.0.6.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:10286"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34373" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.0.6.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:10286"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34123" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-55.0.6.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:10286"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34080" version="1" comment="kernel is earlier than 0:2.6.9-55.0.6.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10286"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31221" version="1" comment="kdelibs is earlier than 6:3.3.1-3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13933"/>
      <state state_ref="oval:org.mitre.oval:ste:8977"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30975" version="1" comment="kdelibs-devel is earlier than 6:3.3.1-3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14126"/>
      <state state_ref="oval:org.mitre.oval:ste:8977"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38246" version="1" comment="mod_auth_mysql is earlier than 1:3.0.0-3.2.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14493"/>
      <state state_ref="oval:org.mitre.oval:ste:10999"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38958" version="1" comment="tkinter is earlier than 0:2.4.3-24.el5_3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14092"/>
      <state state_ref="oval:org.mitre.oval:ste:11328"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38939" version="1" comment="python is earlier than 0:2.3.4-14.7.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14556"/>
      <state state_ref="oval:org.mitre.oval:ste:11177"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38916" version="1" comment="python-devel is earlier than 0:2.3.4-14.7.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14166"/>
      <state state_ref="oval:org.mitre.oval:ste:11177"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38889" version="1" comment="python-devel is earlier than 0:2.4.3-24.el5_3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14166"/>
      <state state_ref="oval:org.mitre.oval:ste:11328"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38872" version="1" comment="python-tools is earlier than 0:2.2.3-6.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14208"/>
      <state state_ref="oval:org.mitre.oval:ste:11251"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38827" version="1" comment="python-tools is earlier than 0:2.4.3-24.el5_3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14208"/>
      <state state_ref="oval:org.mitre.oval:ste:11328"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38787" version="1" comment="python-tools is earlier than 0:2.3.4-14.7.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14208"/>
      <state state_ref="oval:org.mitre.oval:ste:11177"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38704" version="1" comment="python-devel is earlier than 0:2.2.3-6.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14166"/>
      <state state_ref="oval:org.mitre.oval:ste:11251"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38703" version="1" comment="tkinter is earlier than 0:2.3.4-14.7.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14092"/>
      <state state_ref="oval:org.mitre.oval:ste:11177"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38695" version="1" comment="tkinter is earlier than 0:2.2.3-6.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14092"/>
      <state state_ref="oval:org.mitre.oval:ste:11251"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38617" version="1" comment="python is earlier than 0:2.2.3-6.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14556"/>
      <state state_ref="oval:org.mitre.oval:ste:11251"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38282" version="1" comment="python is earlier than 0:2.4.3-24.el5_3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14556"/>
      <state state_ref="oval:org.mitre.oval:ste:11328"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38081" version="1" comment="python-docs is earlier than 0:2.3.4-14.7.el4_8.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14500"/>
      <state state_ref="oval:org.mitre.oval:ste:11177"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37965" version="1" comment="python-docs is earlier than 0:2.2.3-6.11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14500"/>
      <state state_ref="oval:org.mitre.oval:ste:11251"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1315" version="1" check="at least one" comment="kernel version is less than 2.4.21-15.EL" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:915"/>
      <state state_ref="oval:org.mitre.oval:ste:1181"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30551" version="1" comment="quagga-devel is earlier than 0:0.96.2-8.3E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14340"/>
      <state state_ref="oval:org.mitre.oval:ste:9630"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30411" version="1" comment="quagga is earlier than 0:0.96.2-8.3E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14268"/>
      <state state_ref="oval:org.mitre.oval:ste:9630"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30149" version="1" comment="quagga-contrib is earlier than 0:0.96.2-8.3E" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14111"/>
      <state state_ref="oval:org.mitre.oval:ste:9630"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40828" version="1" comment="yelp is earlier than 0:2.16.0-26.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14764"/>
      <state state_ref="oval:org.mitre.oval:ste:10932"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40814" version="1" comment="devhelp is earlier than 0:0.12-21.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14497"/>
      <state state_ref="oval:org.mitre.oval:ste:11593"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40813" version="1" comment="gnome-python2-gtkhtml2 is earlier than 0:2.14.2-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15336"/>
      <state state_ref="oval:org.mitre.oval:ste:11598"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40800" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-0.55.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:11208"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40782" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-58.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:11490"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40755" version="1" comment="firefox is earlier than 0:3.6.4-8.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:11505"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40749" version="1" comment="totem is earlier than 0:2.16.7-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15296"/>
      <state state_ref="oval:org.mitre.oval:ste:11504"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40736" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-0.55.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:11208"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40722" version="1" comment="gnome-python2-gtkmozembed is earlier than 0:2.14.2-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15358"/>
      <state state_ref="oval:org.mitre.oval:ste:11598"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40721" version="1" comment="gnome-python2-libegg is earlier than 0:2.14.2-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15161"/>
      <state state_ref="oval:org.mitre.oval:ste:11598"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40703" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.55.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:11208"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40686" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-0.55.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:11208"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40651" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.55.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:11208"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40637" version="1" comment="totem-devel is earlier than 0:2.16.7-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15311"/>
      <state state_ref="oval:org.mitre.oval:ste:11504"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40624" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-58.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:11490"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40620" version="1" comment="totem-mozplugin is earlier than 0:2.16.7-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15001"/>
      <state state_ref="oval:org.mitre.oval:ste:11504"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40598" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-0.55.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:11208"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40593" version="1" comment="seamonkey is earlier than 0:1.0.9-0.55.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:11208"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40552" version="1" comment="devhelp-devel is earlier than 0:0.12-21.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14520"/>
      <state state_ref="oval:org.mitre.oval:ste:11593"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40524" version="1" comment="firefox is earlier than 0:3.6.4-8.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:11568"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40480" version="1" comment="xulrunner-devel is earlier than 0:1.9.2.4-10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15100"/>
      <state state_ref="oval:org.mitre.oval:ste:11185"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40449" version="1" comment="seamonkey is earlier than 0:1.0.9-58.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:11490"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40435" version="1" comment="gnome-python2-extras is earlier than 0:2.14.2-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15252"/>
      <state state_ref="oval:org.mitre.oval:ste:11598"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40431" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-58.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:11490"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40385" version="1" comment="gnome-python2-gtkspell is earlier than 0:2.14.2-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15102"/>
      <state state_ref="oval:org.mitre.oval:ste:11598"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40296" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-58.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:11490"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40273" version="1" comment="esc is earlier than 0:1.1.0-12.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15321"/>
      <state state_ref="oval:org.mitre.oval:ste:11397"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40221" version="1" comment="xulrunner is earlier than 0:1.9.2.4-10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15057"/>
      <state state_ref="oval:org.mitre.oval:ste:11185"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39947" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.55.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:11208"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39850" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-58.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:11490"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39844" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.55.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:11208"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39843" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-0.55.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:11208"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36706" version="1" comment="java-1.6.0-ibm-plugin is earlier than 0:1.6.0.1-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14915"/>
      <state state_ref="oval:org.mitre.oval:ste:10738"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36688" version="1" comment="java-1.6.0-ibm-javacomm is earlier than 0:1.6.0.1-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14233"/>
      <state state_ref="oval:org.mitre.oval:ste:10738"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36622" version="1" comment="java-1.6.0-ibm-src is earlier than 0:1.6.0.1-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14715"/>
      <state state_ref="oval:org.mitre.oval:ste:10738"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36582" version="1" comment="java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14988"/>
      <state state_ref="oval:org.mitre.oval:ste:10853"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36568" version="1" comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14479"/>
      <state state_ref="oval:org.mitre.oval:ste:10853"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36555" version="1" comment="java-1.6.0-ibm-accessibility is earlier than 0:1.6.0.1-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15027"/>
      <state state_ref="oval:org.mitre.oval:ste:10738"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36515" version="1" comment="java-1.6.0-ibm-demo is earlier than 0:1.6.0.1-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14927"/>
      <state state_ref="oval:org.mitre.oval:ste:10738"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36509" version="1" comment="java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14479"/>
      <state state_ref="oval:org.mitre.oval:ste:10499"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36414" version="1" comment="java-1.6.0-ibm-jdbc is earlier than 0:1.6.0.1-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15033"/>
      <state state_ref="oval:org.mitre.oval:ste:10738"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36334" version="1" comment="java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14988"/>
      <state state_ref="oval:org.mitre.oval:ste:10499"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36319" version="1" comment="java-1.6.0-ibm is earlier than 0:1.6.0.1-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15019"/>
      <state state_ref="oval:org.mitre.oval:ste:10738"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36295" version="1" comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14809"/>
      <state state_ref="oval:org.mitre.oval:ste:10499"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36267" version="1" comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14499"/>
      <state state_ref="oval:org.mitre.oval:ste:10499"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36205" version="1" comment="java-1.6.0-ibm-devel is earlier than 0:1.6.0.1-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14584"/>
      <state state_ref="oval:org.mitre.oval:ste:10738"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36068" version="1" comment="java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15113"/>
      <state state_ref="oval:org.mitre.oval:ste:10853"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35872" version="1" comment="java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14809"/>
      <state state_ref="oval:org.mitre.oval:ste:10853"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35719" version="1" comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14507"/>
      <state state_ref="oval:org.mitre.oval:ste:10853"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35708" version="1" comment="java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14507"/>
      <state state_ref="oval:org.mitre.oval:ste:10499"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35698" version="1" comment="java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14499"/>
      <state state_ref="oval:org.mitre.oval:ste:10853"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35618" version="1" comment="java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15113"/>
      <state state_ref="oval:org.mitre.oval:ste:10499"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39530" version="1" comment="postgresql-devel is earlier than 0:8.1.18-2.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14290"/>
      <state state_ref="oval:org.mitre.oval:ste:11284"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39514" version="1" comment="postgresql-server is earlier than 0:8.1.18-2.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14158"/>
      <state state_ref="oval:org.mitre.oval:ste:11284"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39513" version="1" comment="postgresql-libs is earlier than 0:7.4.26-1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14383"/>
      <state state_ref="oval:org.mitre.oval:ste:11479"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39512" version="1" comment="rh-postgresql is earlier than 0:7.3.21-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14320"/>
      <state state_ref="oval:org.mitre.oval:ste:11218"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39502" version="1" comment="rh-postgresql-pl is earlier than 0:7.3.21-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14453"/>
      <state state_ref="oval:org.mitre.oval:ste:11218"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39497" version="1" comment="postgresql-python is earlier than 0:8.1.18-2.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14546"/>
      <state state_ref="oval:org.mitre.oval:ste:11284"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39478" version="1" comment="postgresql-contrib is earlier than 0:7.4.26-1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14293"/>
      <state state_ref="oval:org.mitre.oval:ste:11479"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39457" version="1" comment="postgresql-test is earlier than 0:7.4.26-1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14367"/>
      <state state_ref="oval:org.mitre.oval:ste:11479"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39453" version="1" comment="postgresql-jdbc is earlier than 0:7.4.26-1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14547"/>
      <state state_ref="oval:org.mitre.oval:ste:11479"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39444" version="1" comment="rh-postgresql-test is earlier than 0:7.3.21-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14347"/>
      <state state_ref="oval:org.mitre.oval:ste:11218"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39434" version="1" comment="postgresql-docs is earlier than 0:7.4.26-1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14365"/>
      <state state_ref="oval:org.mitre.oval:ste:11479"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39390" version="1" comment="rh-postgresql-python is earlier than 0:7.3.21-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14328"/>
      <state state_ref="oval:org.mitre.oval:ste:11218"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39271" version="1" comment="postgresql-python is earlier than 0:7.4.26-1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14546"/>
      <state state_ref="oval:org.mitre.oval:ste:11479"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39266" version="1" comment="postgresql-devel is earlier than 0:7.4.26-1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14290"/>
      <state state_ref="oval:org.mitre.oval:ste:11479"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39265" version="1" comment="postgresql-contrib is earlier than 0:8.1.18-2.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14293"/>
      <state state_ref="oval:org.mitre.oval:ste:11284"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39255" version="1" comment="rh-postgresql-libs is earlier than 0:7.3.21-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14436"/>
      <state state_ref="oval:org.mitre.oval:ste:11218"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39251" version="1" comment="rh-postgresql-contrib is earlier than 0:7.3.21-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13927"/>
      <state state_ref="oval:org.mitre.oval:ste:11218"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39234" version="1" comment="rh-postgresql-devel is earlier than 0:7.3.21-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14466"/>
      <state state_ref="oval:org.mitre.oval:ste:11218"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39220" version="1" comment="rh-postgresql-tcl is earlier than 0:7.3.21-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13874"/>
      <state state_ref="oval:org.mitre.oval:ste:11218"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39217" version="1" comment="postgresql-tcl is earlier than 0:7.4.26-1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14486"/>
      <state state_ref="oval:org.mitre.oval:ste:11479"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39193" version="1" comment="postgresql is earlier than 0:8.1.18-2.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14586"/>
      <state state_ref="oval:org.mitre.oval:ste:11284"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39177" version="1" comment="rh-postgresql-jdbc is earlier than 0:7.3.21-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14295"/>
      <state state_ref="oval:org.mitre.oval:ste:11218"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39167" version="1" comment="postgresql-pl is earlier than 0:7.4.26-1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14537"/>
      <state state_ref="oval:org.mitre.oval:ste:11479"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39153" version="1" comment="postgresql-docs is earlier than 0:8.1.18-2.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14365"/>
      <state state_ref="oval:org.mitre.oval:ste:11284"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39152" version="1" comment="postgresql-pl is earlier than 0:8.1.18-2.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14537"/>
      <state state_ref="oval:org.mitre.oval:ste:11284"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39147" version="1" comment="rh-postgresql-server is earlier than 0:7.3.21-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14152"/>
      <state state_ref="oval:org.mitre.oval:ste:11218"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39121" version="1" comment="postgresql is earlier than 0:7.4.26-1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14586"/>
      <state state_ref="oval:org.mitre.oval:ste:11479"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39091" version="1" comment="postgresql-libs is earlier than 0:8.1.18-2.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14383"/>
      <state state_ref="oval:org.mitre.oval:ste:11284"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38994" version="1" comment="postgresql-tcl is earlier than 0:8.1.18-2.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14486"/>
      <state state_ref="oval:org.mitre.oval:ste:11284"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38989" version="1" comment="rh-postgresql-docs is earlier than 0:7.3.21-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13876"/>
      <state state_ref="oval:org.mitre.oval:ste:11218"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38750" version="1" comment="postgresql-test is earlier than 0:8.1.18-2.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14367"/>
      <state state_ref="oval:org.mitre.oval:ste:11284"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38533" version="1" comment="postgresql-server is earlier than 0:7.4.26-1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14158"/>
      <state state_ref="oval:org.mitre.oval:ste:11479"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38449" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-78.0.17.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:10180"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38430" version="1" comment="kernel-PAE is earlier than 0:2.6.18-128.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:11136"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38429" version="1" comment="kernel-doc is earlier than 0:2.6.9-78.0.17.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10180"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38416" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-78.0.17.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:10180"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38397" version="1" comment="kernel-doc is earlier than 0:2.6.18-128.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:11136"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38380" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-128.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:11136"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38359" version="1" comment="kernel-xenU-devel is earlier than 0:2.6.9-78.0.17.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14060"/>
      <state state_ref="oval:org.mitre.oval:ste:10180"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38339" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-78.0.17.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:10180"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38237" version="1" comment="kernel is earlier than 0:2.6.9-78.0.17.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10180"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38169" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-78.0.17.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:10180"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38167" version="1" comment="kernel-xen is earlier than 0:2.6.18-128.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:11136"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38155" version="1" comment="kernel-smp is earlier than 0:2.6.9-78.0.17.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:10180"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38127" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-128.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:11136"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38113" version="1" comment="kernel-kdump is earlier than 0:2.6.18-128.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:11136"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38109" version="1" comment="kernel-devel is earlier than 0:2.6.18-128.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:11136"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38107" version="1" comment="kernel-debug is earlier than 0:2.6.18-128.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14957"/>
      <state state_ref="oval:org.mitre.oval:ste:11136"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38093" version="1" comment="kernel is earlier than 0:2.6.18-128.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:11136"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38064" version="1" comment="kernel-headers is earlier than 0:2.6.18-128.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:11136"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38048" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-78.0.17.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:10180"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37961" version="1" comment="kernel-xenU is earlier than 0:2.6.9-78.0.17.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14301"/>
      <state state_ref="oval:org.mitre.oval:ste:10180"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37920" version="1" comment="kernel-devel is earlier than 0:2.6.9-78.0.17.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10180"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37764" version="1" comment="kernel-debug-devel is earlier than 0:2.6.18-128.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15023"/>
      <state state_ref="oval:org.mitre.oval:ste:11136"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37672" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-128.1.6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:11136"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38867" version="1" comment="kdegraphics-devel is earlier than 7:3.5.4-13.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14596"/>
      <state state_ref="oval:org.mitre.oval:ste:10744"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38855" version="1" comment="kdegraphics is earlier than 7:3.5.4-13.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14241"/>
      <state state_ref="oval:org.mitre.oval:ste:10744"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31001" version="1" comment="XFree86-libs-data is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14326"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30963" version="1" comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14127"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30951" version="1" comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14281"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30943" version="1" comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14288"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30933" version="1" comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14315"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30925" version="1" comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13712"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30914" version="1" comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14045"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30902" version="1" comment="XFree86-xdm is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13658"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30899" version="1" comment="XFree86 is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14255"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30889" version="1" comment="XFree86-doc is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14406"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30875" version="1" comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14067"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30843" version="1" comment="XFree86-xauth is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14352"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30841" version="1" comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14351"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30838" version="1" comment="XFree86-base-fonts is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14407"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30805" version="1" comment="XFree86-syriac-fonts is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14198"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30783" version="1" comment="XFree86-truetype-fonts is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14354"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30779" version="1" comment="XFree86-libs is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14259"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30748" version="1" comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14226"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30747" version="1" comment="XFree86-Xnest is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14053"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30701" version="1" comment="XFree86-tools is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13693"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30677" version="1" comment="XFree86-devel is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14397"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30619" version="1" comment="XFree86-sdk is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14107"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30612" version="1" comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14082"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30599" version="1" comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14260"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30544" version="1" comment="XFree86-font-utils is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14385"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30347" version="1" comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14121"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30145" version="1" comment="XFree86-xfs is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14311"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30052" version="1" comment="XFree86-twm is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13667"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30029" version="1" comment="XFree86-Xvfb is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13644"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30003" version="1" comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-69.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14364"/>
      <state state_ref="oval:org.mitre.oval:ste:9316"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:3035" version="2" comment="this is an NT Server (domain controller)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1550"/>
      <state state_ref="oval:org.mitre.oval:ste:2842"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1511" version="1" check="at least one" comment="the version of lsasrv.dll is less than 5.0.2195.6902" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:512"/>
      <state state_ref="oval:org.mitre.oval:ste:1365"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1510" version="1" comment="the patch kb835732 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1015"/>
      <state state_ref="oval:org.mitre.oval:ste:1364"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31864" version="1" comment="arpwatch is earlier than 14:2.1a13-9.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14116"/>
      <state state_ref="oval:org.mitre.oval:ste:9532"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31836" version="1" comment="tcpdump is earlier than 14:3.7.2-7.E3.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14318"/>
      <state state_ref="oval:org.mitre.oval:ste:9808"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31788" version="1" comment="tcpdump is earlier than 14:3.8.2-9.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14318"/>
      <state state_ref="oval:org.mitre.oval:ste:9973"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31652" version="1" comment="libpcap is earlier than 14:0.7.2-7.E3.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13587"/>
      <state state_ref="oval:org.mitre.oval:ste:9938"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30922" version="1" comment="libpcap is earlier than 14:0.8.3-9.RHEL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13587"/>
      <state state_ref="oval:org.mitre.oval:ste:9958"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35920" version="1" comment="autofs is earlier than 1:5.0.1-0.rc2.55.el5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14848"/>
      <state state_ref="oval:org.mitre.oval:ste:10457"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35636" version="1" comment="autofs5 is earlier than 1:5.0.1-0.rc2.55.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15008"/>
      <state state_ref="oval:org.mitre.oval:ste:10364"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32580" version="1" comment="freeradius is earlier than 0:1.0.1-3.RHEL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14420"/>
      <state state_ref="oval:org.mitre.oval:ste:10130"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32573" version="1" comment="freeradius-postgresql is earlier than 0:1.0.1-3.RHEL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14475"/>
      <state state_ref="oval:org.mitre.oval:ste:10130"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32285" version="1" comment="freeradius-mysql is earlier than 0:1.0.1-3.RHEL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14691"/>
      <state state_ref="oval:org.mitre.oval:ste:10130"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31967" version="1" comment="freeradius-unixODBC is earlier than 0:1.0.1-3.RHEL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13705"/>
      <state state_ref="oval:org.mitre.oval:ste:10130"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31893" version="1" comment="freeradius is earlier than 0:1.0.1-2.RHEL3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14420"/>
      <state state_ref="oval:org.mitre.oval:ste:10010"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30772" version="1" comment="kernel-hugemem is earlier than 0:2.4.21-15.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:9560"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30739" version="1" comment="kernel-unsupported is earlier than 0:2.4.21-15.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14229"/>
      <state state_ref="oval:org.mitre.oval:ste:9560"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30721" version="1" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-15.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14372"/>
      <state state_ref="oval:org.mitre.oval:ste:9560"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30681" version="1" comment="kernel-doc is earlier than 0:2.4.21-15.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:9560"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30655" version="1" comment="kernel is earlier than 0:2.4.21-15.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:9560"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30574" version="1" comment="kernel-source is earlier than 0:2.4.21-15.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14186"/>
      <state state_ref="oval:org.mitre.oval:ste:9560"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30449" version="1" comment="kernel-BOOT is earlier than 0:2.4.21-15.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14219"/>
      <state state_ref="oval:org.mitre.oval:ste:9560"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30418" version="1" comment="kernel-smp-unsupported is earlier than 0:2.4.21-15.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14218"/>
      <state state_ref="oval:org.mitre.oval:ste:9560"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30207" version="1" comment="kernel-smp is earlier than 0:2.4.21-15.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:9560"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34730" version="1" comment="httpd-manual is earlier than 0:2.2.3-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14457"/>
      <state state_ref="oval:org.mitre.oval:ste:10292"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34677" version="1" comment="httpd-devel is earlier than 0:2.2.3-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:10292"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34632" version="1" comment="httpd is earlier than 0:2.0.52-32.2.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:10389"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34605" version="1" comment="httpd is earlier than 0:2.2.3-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:10292"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34603" version="1" comment="httpd-devel is earlier than 0:2.0.52-32.2.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:10389"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34500" version="1" comment="mod_ssl is earlier than 1:2.0.46-67.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:9745"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34481" version="1" comment="httpd is earlier than 0:2.0.46-67.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:10189"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34468" version="1" comment="httpd-manual is earlier than 0:2.0.52-32.2.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14457"/>
      <state state_ref="oval:org.mitre.oval:ste:10389"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34461" version="1" comment="mod_ssl is earlier than 1:2.0.52-32.2.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:10411"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34399" version="1" comment="mod_ssl is earlier than 1:2.2.3-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:10294"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34223" version="1" comment="httpd-devel is earlier than 0:2.0.46-67.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:10189"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34166" version="1" comment="httpd-suexec is earlier than 0:2.0.52-32.2.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14611"/>
      <state state_ref="oval:org.mitre.oval:ste:10389"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35918" version="1" comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14369"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35911" version="1" comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15005"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35898" version="1" comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14990"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35896" version="1" comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14984"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35893" version="1" comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14956"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35891" version="1" comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14569"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35888" version="1" comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14476"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35883" version="1" comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14649"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35880" version="1" comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14599"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35878" version="1" comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14980"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35873" version="1" comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14759"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35871" version="1" comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15018"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35869" version="1" comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14882"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35866" version="1" comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14907"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35859" version="1" comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14995"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35844" version="1" comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14997"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35828" version="1" comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14894"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35827" version="1" comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14831"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35825" version="1" comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14660"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35821" version="1" comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14401"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35819" version="1" comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14193"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35817" version="1" comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14845"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35814" version="1" comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14744"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35808" version="1" comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14762"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35806" version="1" comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14969"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35803" version="1" comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14987"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35796" version="1" comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14472"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35784" version="1" comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14754"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35779" version="1" comment="openoffice.org-langpack-sl_SI is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14869"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35772" version="1" comment="openoffice.org-langpack-or_IN is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14588"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35770" version="1" comment="openoffice.org-langpack-ms_MY is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14787"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35764" version="1" comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15006"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35761" version="1" comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14875"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35760" version="1" comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14971"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35755" version="1" comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14456"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35749" version="1" comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14056"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35746" version="1" comment="openoffice.org-langpack-ko_KR is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14190"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35740" version="1" comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14562"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35736" version="1" comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14321"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35735" version="1" comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14826"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35734" version="1" comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14976"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35730" version="1" comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14963"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35728" version="1" comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14849"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35725" version="1" comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14937"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35723" version="1" comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14765"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35721" version="1" comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14834"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35720" version="1" comment="openoffice.org-langpack-pt_PT is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14571"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35713" version="1" comment="openoffice.org-langpack-nn_NO is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14779"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35710" version="1" comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14737"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35703" version="1" comment="openoffice.org-langpack-zh_TW is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14392"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35701" version="1" comment="openoffice.org-langpack-lt_LT is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13921"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35694" version="1" comment="openoffice.org-xsltfilter is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14530"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35692" version="1" comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14708"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35691" version="1" comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13974"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35687" version="1" comment="openoffice.org-langpack-th_TH is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14732"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35685" version="1" comment="openoffice.org-langpack-ar is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14872"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35682" version="1" comment="hsqldb is earlier than 1:1.8.0.4-3jpp.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15016"/>
      <state state_ref="oval:org.mitre.oval:ste:10487"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35680" version="1" comment="openoffice.org-javafilter is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14566"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35670" version="1" comment="openoffice.org-langpack-tr_TR is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14886"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35667" version="1" comment="openoffice.org-langpack-bg_BG is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14589"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35659" version="1" comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14090"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35658" version="1" comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14716"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35650" version="1" comment="openoffice.org-langpack-gl_ES is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14792"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35649" version="1" comment="openoffice.org-langpack-sr_CS is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14189"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35647" version="1" comment="openoffice.org-langpack-nl is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14909"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35646" version="1" comment="openoffice.org-langpack-sv is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14529"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35645" version="1" comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14738"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35642" version="1" comment="openoffice.org-langpack-pa_IN is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14746"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35641" version="1" comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14768"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35638" version="1" comment="openoffice.org-langpack-gu_IN is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14269"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35630" version="1" comment="openoffice.org-langpack-sk_SK is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14266"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35626" version="1" comment="openoffice.org-impress is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14707"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35623" version="1" comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14900"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35605" version="1" comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14986"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35604" version="1" comment="openoffice.org-langpack-ga_IE is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14635"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35599" version="1" comment="openoffice.org-langpack-da_DK is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14748"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35596" version="1" comment="openoffice.org-langpack-nb_NO is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14807"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35592" version="1" comment="openoffice.org-pyuno is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14806"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35590" version="1" comment="openoffice.org-emailmerge is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14522"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35589" version="1" comment="openoffice.org-base is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14548"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35586" version="1" comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14696"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35581" version="1" comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14600"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35577" version="1" comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14728"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35576" version="1" comment="openoffice.org-math is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14557"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35575" version="1" comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14814"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35571" version="1" comment="hsqldb-demo is earlier than 1:1.8.0.4-3jpp.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15142"/>
      <state state_ref="oval:org.mitre.oval:ste:10487"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35568" version="1" comment="openoffice.org-draw is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14828"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35566" version="1" comment="openoffice.org-langpack-ru is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14766"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35565" version="1" comment="openoffice.org-langpack-hr_HR is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14336"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35563" version="1" comment="openoffice.org-calc is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14623"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35562" version="1" comment="openoffice.org-langpack-zh_CN is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14839"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35558" version="1" comment="hsqldb-manual is earlier than 1:1.8.0.4-3jpp.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15139"/>
      <state state_ref="oval:org.mitre.oval:ste:10487"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35557" version="1" comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14901"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35556" version="1" comment="openoffice.org-langpack-as_IN is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14576"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35547" version="1" comment="hsqldb-javadoc is earlier than 1:1.8.0.4-3jpp.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14924"/>
      <state state_ref="oval:org.mitre.oval:ste:10487"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35539" version="1" comment="openoffice.org is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35535" version="1" comment="openoffice.org-langpack-bn is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14706"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35524" version="1" comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14865"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35519" version="1" comment="openoffice.org-langpack-he_IL is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14442"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35518" version="1" comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14885"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35513" version="1" comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14651"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35493" version="1" comment="openoffice.org-langpack-es is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14604"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35490" version="1" comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14763"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35485" version="1" comment="openoffice.org-langpack-hi_IN is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14717"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35475" version="1" comment="openoffice.org-langpack-ur is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14671"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35470" version="1" comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14606"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35463" version="1" comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14322"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35451" version="1" comment="openoffice.org-langpack-ja_JP is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14155"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35450" version="1" comment="openoffice.org-langpack-pl_PL is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14767"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35448" version="1" comment="openoffice.org-langpack-cy_GB is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14501"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35436" version="1" comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14617"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35417" version="1" comment="openoffice.org-langpack-pt_BR is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14822"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35416" version="1" comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14432"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35409" version="1" comment="openoffice.org2 is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14437"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35388" version="1" comment="openoffice.org-langpack-mr_IN is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14855"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35385" version="1" comment="openoffice.org-core is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14450"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35383" version="1" comment="openoffice.org-langpack-fr is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14772"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35368" version="1" comment="openoffice.org-graphicfilter is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14526"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35362" version="1" comment="openoffice.org-langpack-el_GR is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14359"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35354" version="1" comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14903"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35350" version="1" comment="openoffice.org-testtools is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14135"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35273" version="1" comment="openoffice.org-langpack-ta_IN is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14637"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35268" version="1" comment="openoffice.org-langpack-fi_FI is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14625"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35244" version="1" comment="openoffice.org-langpack-af_ZA is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14506"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35197" version="1" comment="openoffice.org-langpack-it is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14812"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35183" version="1" comment="openoffice.org-langpack-ml_IN is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14257"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35174" version="1" comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14892"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35161" version="1" comment="openoffice.org-langpack-kn_IN is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14714"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35136" version="1" comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.3.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15000"/>
      <state state_ref="oval:org.mitre.oval:ste:10480"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35133" version="1" comment="openoffice.org-langpack-ca_ES is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14778"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34965" version="1" comment="openoffice.org-langpack-st_ZA is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14851"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34933" version="1" comment="openoffice.org-langpack-te_IN is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14832"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34908" version="1" comment="openoffice.org-langpack-eu_ES is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14813"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34836" version="1" comment="openoffice.org-langpack-de is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14539"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34780" version="1" comment="openoffice.org-writer is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14758"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34778" version="1" comment="openoffice.org-langpack-hu_HU is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14694"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34700" version="1" comment="openoffice.org-langpack-et_EE is earlier than 1:2.0.4-5.4.25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14280"/>
      <state state_ref="oval:org.mitre.oval:ste:10309"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:2838" version="1" comment="Windows XP is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:419"/>
      <state state_ref="oval:org.mitre.oval:ste:2657"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1318" version="3" comment="Win2K/XP/2003 service pack 2 (or earlier) is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:717"/>
      <state state_ref="oval:org.mitre.oval:ste:1184"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1317" version="1" check="at least one" comment="the version of shell32.dll is less than 6.0.2900.2578" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:253"/>
      <state state_ref="oval:org.mitre.oval:ste:1183"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1316" version="2" check="at least one" comment="Drag-and-Drop disabled when set to 3" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:916"/>
      <state state_ref="oval:org.mitre.oval:ste:1182"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38559" version="1" comment="freetype-demos is earlier than 0:2.2.1-21.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14713"/>
      <state state_ref="oval:org.mitre.oval:ste:11233"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38488" version="1" comment="freetype-devel is earlier than 0:2.2.1-21.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14561"/>
      <state state_ref="oval:org.mitre.oval:ste:11233"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38442" version="1" comment="freetype-devel is earlier than 0:2.1.9-10.el4.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14561"/>
      <state state_ref="oval:org.mitre.oval:ste:11071"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38414" version="1" comment="freetype is earlier than 0:2.1.9-10.el4.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14103"/>
      <state state_ref="oval:org.mitre.oval:ste:11071"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38399" version="1" comment="freetype is earlier than 0:2.2.1-21.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14103"/>
      <state state_ref="oval:org.mitre.oval:ste:11233"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38395" version="1" comment="freetype-demos is earlier than 0:2.1.9-10.el4.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14713"/>
      <state state_ref="oval:org.mitre.oval:ste:11071"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38284" version="1" comment="freetype-demos is earlier than 0:2.1.4-12.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14713"/>
      <state state_ref="oval:org.mitre.oval:ste:10699"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38245" version="1" comment="freetype-devel is earlier than 0:2.1.4-12.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14561"/>
      <state state_ref="oval:org.mitre.oval:ste:10699"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38234" version="1" comment="freetype-utils is earlier than 0:2.1.9-10.el4.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14720"/>
      <state state_ref="oval:org.mitre.oval:ste:11071"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38008" version="1" comment="freetype-utils is earlier than 0:2.1.4-12.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14720"/>
      <state state_ref="oval:org.mitre.oval:ste:10699"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37450" version="1" comment="freetype is earlier than 0:2.1.4-12.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14103"/>
      <state state_ref="oval:org.mitre.oval:ste:10699"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31436" version="1" comment="rh-postgresql-python is earlier than 0:7.3.9-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14328"/>
      <state state_ref="oval:org.mitre.oval:ste:9805"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31424" version="1" comment="postgresql-server is earlier than 0:7.4.7-2.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14158"/>
      <state state_ref="oval:org.mitre.oval:ste:8906"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31415" version="1" comment="rh-postgresql is earlier than 0:7.3.9-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14320"/>
      <state state_ref="oval:org.mitre.oval:ste:9805"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31398" version="1" comment="postgresql-docs is earlier than 0:7.4.7-2.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14365"/>
      <state state_ref="oval:org.mitre.oval:ste:8906"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31342" version="1" comment="rh-postgresql-test is earlier than 0:7.3.9-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14347"/>
      <state state_ref="oval:org.mitre.oval:ste:9805"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31336" version="1" comment="postgresql is earlier than 0:7.4.7-2.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14586"/>
      <state state_ref="oval:org.mitre.oval:ste:8906"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31325" version="1" comment="postgresql-devel is earlier than 0:7.4.7-2.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14290"/>
      <state state_ref="oval:org.mitre.oval:ste:8906"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31318" version="1" comment="postgresql-test is earlier than 0:7.4.7-2.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14367"/>
      <state state_ref="oval:org.mitre.oval:ste:8906"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31273" version="1" comment="postgresql-jdbc is earlier than 0:7.4.7-2.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14547"/>
      <state state_ref="oval:org.mitre.oval:ste:8906"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31233" version="1" comment="rh-postgresql-jdbc is earlier than 0:7.3.9-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14295"/>
      <state state_ref="oval:org.mitre.oval:ste:9805"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31229" version="1" comment="postgresql-pl is earlier than 0:7.4.7-2.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14537"/>
      <state state_ref="oval:org.mitre.oval:ste:8906"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31217" version="1" comment="rh-postgresql-pl is earlier than 0:7.3.9-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14453"/>
      <state state_ref="oval:org.mitre.oval:ste:9805"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31215" version="1" comment="postgresql-libs is earlier than 0:7.4.7-2.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14383"/>
      <state state_ref="oval:org.mitre.oval:ste:8906"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31199" version="1" comment="rh-postgresql-tcl is earlier than 0:7.3.9-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13874"/>
      <state state_ref="oval:org.mitre.oval:ste:9805"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31126" version="1" comment="postgresql-python is earlier than 0:7.4.7-2.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14546"/>
      <state state_ref="oval:org.mitre.oval:ste:8906"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31064" version="1" comment="rh-postgresql-libs is earlier than 0:7.3.9-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14436"/>
      <state state_ref="oval:org.mitre.oval:ste:9805"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31005" version="1" comment="rh-postgresql-contrib is earlier than 0:7.3.9-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13927"/>
      <state state_ref="oval:org.mitre.oval:ste:9805"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30946" version="1" comment="postgresql-tcl is earlier than 0:7.4.7-2.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14486"/>
      <state state_ref="oval:org.mitre.oval:ste:8906"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30936" version="1" comment="rh-postgresql-devel is earlier than 0:7.3.9-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14466"/>
      <state state_ref="oval:org.mitre.oval:ste:9805"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30803" version="1" comment="rh-postgresql-server is earlier than 0:7.3.9-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14152"/>
      <state state_ref="oval:org.mitre.oval:ste:9805"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30784" version="1" comment="postgresql-contrib is earlier than 0:7.4.7-2.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14293"/>
      <state state_ref="oval:org.mitre.oval:ste:8906"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30591" version="1" comment="rh-postgresql-docs is earlier than 0:7.3.9-2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13876"/>
      <state state_ref="oval:org.mitre.oval:ste:9805"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38925" version="1" comment="libtiff-devel is earlier than 0:3.6.1-12.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14174"/>
      <state state_ref="oval:org.mitre.oval:ste:11201"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38921" version="1" comment="libtiff-devel is earlier than 0:3.5.7-33.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14174"/>
      <state state_ref="oval:org.mitre.oval:ste:10971"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38786" version="1" comment="libtiff is earlier than 0:3.6.1-12.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14341"/>
      <state state_ref="oval:org.mitre.oval:ste:11201"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38773" version="1" comment="libtiff is earlier than 0:3.8.2-7.el5_3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14341"/>
      <state state_ref="oval:org.mitre.oval:ste:11025"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38552" version="1" comment="libtiff is earlier than 0:3.5.7-33.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14341"/>
      <state state_ref="oval:org.mitre.oval:ste:10971"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37937" version="1" comment="libtiff-devel is earlier than 0:3.8.2-7.el5_3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14174"/>
      <state state_ref="oval:org.mitre.oval:ste:11025"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39912" version="1" comment="HelixPlayer is earlier than 1:1.0.6-1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14632"/>
      <state state_ref="oval:org.mitre.oval:ste:11187"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32023" version="1" comment="kernel-smp is earlier than 0:2.6.9-22.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:9705"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31924" version="1" comment="kernel-doc is earlier than 0:2.6.9-22.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:9705"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31914" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-22.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:9705"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31896" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-22.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:9705"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31885" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-22.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:9705"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31861" version="1" comment="kernel-devel is earlier than 0:2.6.9-22.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:9705"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31550" version="1" comment="kernel is earlier than 0:2.6.9-22.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:9705"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38171" version="1" comment="netpbm-devel is earlier than 0:10.25-2.1.el4_7.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14399"/>
      <state state_ref="oval:org.mitre.oval:ste:11137"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38005" version="1" comment="netpbm-progs is earlier than 0:10.25-2.1.el4_7.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13960"/>
      <state state_ref="oval:org.mitre.oval:ste:11137"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37861" version="1" comment="netpbm is earlier than 0:10.25-2.1.el4_7.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14185"/>
      <state state_ref="oval:org.mitre.oval:ste:11137"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37722" version="1" comment="netpbm-progs is earlier than 0:10.35-6.1.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13960"/>
      <state state_ref="oval:org.mitre.oval:ste:10875"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37534" version="1" comment="netpbm is earlier than 0:10.35-6.1.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14185"/>
      <state state_ref="oval:org.mitre.oval:ste:10875"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37227" version="1" comment="netpbm-devel is earlier than 0:10.35-6.1.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14399"/>
      <state state_ref="oval:org.mitre.oval:ste:10875"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32979" version="1" comment="gzip is earlier than 0:1.3.3-16.rhel4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14444"/>
      <state state_ref="oval:org.mitre.oval:ste:10191"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32961" version="1" comment="gzip is earlier than 0:1.3.3-13.rhel3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14444"/>
      <state state_ref="oval:org.mitre.oval:ste:10041"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:3119" version="1" check="at least one" comment="the patch q321232 is installed (Installed Components key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1774"/>
      <state state_ref="oval:org.mitre.oval:ste:2922"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3118" version="1" check="at least one" comment="the patch q323759 is installed (Installed Components key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1773"/>
      <state state_ref="oval:org.mitre.oval:ste:2921"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3117" version="1" check="at least one" comment="the patch q328970 is installed (Installed Components key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1772"/>
      <state state_ref="oval:org.mitre.oval:ste:2920"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3116" version="1" check="at least one" comment="the patch q324929 is installed (Installed Components key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1771"/>
      <state state_ref="oval:org.mitre.oval:ste:2919"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3115" version="1" check="at least one" comment="the patch q810847 is installed (Installed Components key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1770"/>
      <state state_ref="oval:org.mitre.oval:ste:2918"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3114" version="1" check="at least one" comment="the patch q813489 is installed (Installed Components key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1769"/>
      <state state_ref="oval:org.mitre.oval:ste:2917"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3113" version="1" check="at least one" comment="the patch q818529 is installed (Installed Components key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1768"/>
      <state state_ref="oval:org.mitre.oval:ste:2916"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3112" version="1" check="at least one" comment="the patch q822925 is installed (Installed Components key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1767"/>
      <state state_ref="oval:org.mitre.oval:ste:2915"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3111" version="1" check="at least one" comment="the patch q828750 is installed (Installed Components key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1766"/>
      <state state_ref="oval:org.mitre.oval:ste:2914"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3110" version="1" check="at least one" comment="the patch q824145 is installed (Installed Components key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1765"/>
      <state state_ref="oval:org.mitre.oval:ste:2913"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3090" version="2" comment="Internet Explorer 6 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:2895"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2588" version="1" check="at least one" comment="the patch q832894 is installed (Installed Components key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1469"/>
      <state state_ref="oval:org.mitre.oval:ste:2421"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1460" version="1" check="at least one" comment="the version of mshtml.dll is less than 6.0.2712.0300" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:1318"/>
    </file_test>
    <registry_test id="oval:org.mitre.oval:tst:1459" version="1" check="at least one" comment="Patch Q313675 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:993"/>
      <state state_ref="oval:org.mitre.oval:ste:1317"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1458" version="1" check="at least one" comment="Patch Q316059.exe Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:992"/>
      <state state_ref="oval:org.mitre.oval:ste:1316"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1457" version="1" check="at least one" comment="Patch Q319282 Installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:991"/>
      <state state_ref="oval:org.mitre.oval:ste:1315"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1456" version="1" check="at least one" comment="Use Machine Settings" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:990"/>
      <state state_ref="oval:org.mitre.oval:ste:1314"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1455" version="1" check="at least one" comment="File Downloads Allowed In At Least One Zone" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:989"/>
      <state state_ref="oval:org.mitre.oval:ste:1313"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40287" version="1" comment="kvm-qemu-img is earlier than 0:83-105.el5_4.27" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15183"/>
      <state state_ref="oval:org.mitre.oval:ste:11496"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40222" version="1" comment="kmod-kvm is earlier than 0:83-105.el5_4.27" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15240"/>
      <state state_ref="oval:org.mitre.oval:ste:11496"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39956" version="1" comment="kvm is earlier than 0:83-105.el5_4.27" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15123"/>
      <state state_ref="oval:org.mitre.oval:ste:11496"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39931" version="1" comment="kvm-tools is earlier than 0:83-105.el5_4.27" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15126"/>
      <state state_ref="oval:org.mitre.oval:ste:11496"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37322" version="1" comment="vsftpd is earlier than 0:1.2.1-3E.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14284"/>
      <state state_ref="oval:org.mitre.oval:ste:10863"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36917" version="1" comment="vsftpd is earlier than 0:2.0.1-6.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14284"/>
      <state state_ref="oval:org.mitre.oval:ste:10880"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38782" version="1" comment="evolution28-pango-devel is earlier than 0:1.14.9-11.el4_7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15030"/>
      <state state_ref="oval:org.mitre.oval:ste:10755"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38707" version="1" comment="pango is earlier than 0:1.2.5-8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15101"/>
      <state state_ref="oval:org.mitre.oval:ste:11283"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38693" version="1" comment="pango-devel is earlier than 0:1.14.9-5.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15280"/>
      <state state_ref="oval:org.mitre.oval:ste:10616"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38610" version="1" comment="pango-devel is earlier than 0:1.2.5-8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15280"/>
      <state state_ref="oval:org.mitre.oval:ste:11283"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38599" version="1" comment="evolution28-pango is earlier than 0:1.14.9-11.el4_7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15094"/>
      <state state_ref="oval:org.mitre.oval:ste:10755"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38573" version="1" comment="pango is earlier than 0:1.14.9-5.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15101"/>
      <state state_ref="oval:org.mitre.oval:ste:10616"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38498" version="1" comment="pango-devel is earlier than 0:1.6.0-14.4_7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15280"/>
      <state state_ref="oval:org.mitre.oval:ste:11158"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38407" version="1" comment="pango is earlier than 0:1.6.0-14.4_7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15101"/>
      <state state_ref="oval:org.mitre.oval:ste:11158"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37514" version="1" comment="hplip is earlier than 0:1.6.7-4.1.el5_2.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14793"/>
      <state state_ref="oval:org.mitre.oval:ste:11005"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37507" version="1" comment="libsane-hpaio is earlier than 0:1.6.7-4.1.el5_2.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14491"/>
      <state state_ref="oval:org.mitre.oval:ste:11005"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37257" version="1" comment="hpijs is earlier than 0:1.6.7-4.1.el5_2.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14471"/>
      <state state_ref="oval:org.mitre.oval:ste:11005"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32056" version="1" comment="netpbm is earlier than 0:10.25-2.EL4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14185"/>
      <state state_ref="oval:org.mitre.oval:ste:10079"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31802" version="1" comment="netpbm-progs is earlier than 0:10.25-2.EL4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13960"/>
      <state state_ref="oval:org.mitre.oval:ste:10079"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31443" version="1" comment="netpbm-devel is earlier than 0:10.25-2.EL4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14399"/>
      <state state_ref="oval:org.mitre.oval:ste:10079"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33754" version="1" comment="java-1.5.0-ibm-plugin is earlier than 1:1.5.0.3-1jpp.3.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14679"/>
      <state state_ref="oval:org.mitre.oval:ste:10224"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33667" version="1" comment="java-1.5.0-ibm is earlier than 1:1.5.0.3-1jpp.3.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14898"/>
      <state state_ref="oval:org.mitre.oval:ste:10224"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33585" version="1" comment="java-1.5.0-ibm-devel is earlier than 1:1.5.0.3-1jpp.3.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14824"/>
      <state state_ref="oval:org.mitre.oval:ste:10224"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33563" version="1" comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.7-1jpp.4.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14312"/>
      <state state_ref="oval:org.mitre.oval:ste:10304"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33547" version="1" comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.7-1jpp.4.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14703"/>
      <state state_ref="oval:org.mitre.oval:ste:10304"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33521" version="1" comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.7-1jpp.4.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14755"/>
      <state state_ref="oval:org.mitre.oval:ste:10262"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33515" version="1" comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.7-1jpp.4.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14829"/>
      <state state_ref="oval:org.mitre.oval:ste:10262"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33481" version="1" comment="java-1.5.0-ibm-demo is earlier than 1:1.5.0.3-1jpp.3.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14918"/>
      <state state_ref="oval:org.mitre.oval:ste:10224"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33479" version="1" comment="java-1.4.2-ibm is earlier than 0:1.4.2.7-1jpp.4.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14781"/>
      <state state_ref="oval:org.mitre.oval:ste:10304"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33472" version="1" comment="java-1.4.2-ibm-src is earlier than 0:1.4.2.7-1jpp.4.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14829"/>
      <state state_ref="oval:org.mitre.oval:ste:10304"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33428" version="1" comment="java-1.4.2-ibm is earlier than 0:1.4.2.7-1jpp.4.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14781"/>
      <state state_ref="oval:org.mitre.oval:ste:10262"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33417" version="1" comment="java-1.4.2-ibm-demo is earlier than 0:1.4.2.7-1jpp.4.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14703"/>
      <state state_ref="oval:org.mitre.oval:ste:10262"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33376" version="1" comment="java-1.4.2-ibm-devel is earlier than 0:1.4.2.7-1jpp.4.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14312"/>
      <state state_ref="oval:org.mitre.oval:ste:10262"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33366" version="1" comment="java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.3-1jpp.3.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14795"/>
      <state state_ref="oval:org.mitre.oval:ste:10224"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33298" version="1" comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.7-1jpp.4.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14163"/>
      <state state_ref="oval:org.mitre.oval:ste:10262"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33199" version="1" comment="java-1.4.2-ibm-plugin is earlier than 0:1.4.2.7-1jpp.4.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14163"/>
      <state state_ref="oval:org.mitre.oval:ste:10304"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33073" version="1" comment="java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.7-1jpp.4.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14755"/>
      <state state_ref="oval:org.mitre.oval:ste:10304"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33064" version="1" comment="java-1.5.0-ibm-src is earlier than 1:1.5.0.3-1jpp.3.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14789"/>
      <state state_ref="oval:org.mitre.oval:ste:10224"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32903" version="1" comment="java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.7-1jpp.4.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14837"/>
      <state state_ref="oval:org.mitre.oval:ste:10304"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32803" version="1" comment="java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.3-1jpp.3.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14760"/>
      <state state_ref="oval:org.mitre.oval:ste:10224"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39228" version="1" comment="mysql-devel is earlier than 0:5.0.77-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14481"/>
      <state state_ref="oval:org.mitre.oval:ste:11411"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39199" version="1" comment="mysql-bench is earlier than 0:5.0.77-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14400"/>
      <state state_ref="oval:org.mitre.oval:ste:11411"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39156" version="1" comment="mysql-server is earlier than 0:5.0.77-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14342"/>
      <state state_ref="oval:org.mitre.oval:ste:11411"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39025" version="1" comment="mysql is earlier than 0:5.0.77-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14355"/>
      <state state_ref="oval:org.mitre.oval:ste:11411"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38934" version="1" comment="mysql-test is earlier than 0:5.0.77-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14941"/>
      <state state_ref="oval:org.mitre.oval:ste:11411"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37456" version="1" comment="mysql-devel is earlier than 0:4.1.22-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14481"/>
      <state state_ref="oval:org.mitre.oval:ste:11027"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37224" version="1" comment="mysql-server is earlier than 0:4.1.22-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14342"/>
      <state state_ref="oval:org.mitre.oval:ste:11027"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37045" version="1" comment="mysql is earlier than 0:4.1.22-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14355"/>
      <state state_ref="oval:org.mitre.oval:ste:11027"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36967" version="1" comment="mysql-bench is earlier than 0:4.1.22-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14400"/>
      <state state_ref="oval:org.mitre.oval:ste:11027"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32171" version="1" comment="mozilla-dom-inspector is earlier than 37:1.7.10-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13776"/>
      <state state_ref="oval:org.mitre.oval:ste:9569"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32167" version="1" comment="firefox is earlier than 0:1.0.6-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:9970"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32162" version="1" comment="mozilla-devel is earlier than 37:1.7.10-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14231"/>
      <state state_ref="oval:org.mitre.oval:ste:9569"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32154" version="1" comment="mozilla-chat is earlier than 37:1.7.10-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14196"/>
      <state state_ref="oval:org.mitre.oval:ste:9569"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32149" version="1" comment="mozilla-nss-devel is earlier than 37:1.7.10-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14415"/>
      <state state_ref="oval:org.mitre.oval:ste:9924"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32142" version="1" comment="mozilla-js-debugger is earlier than 37:1.7.10-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13991"/>
      <state state_ref="oval:org.mitre.oval:ste:9569"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32131" version="1" comment="mozilla is earlier than 37:1.7.10-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14405"/>
      <state state_ref="oval:org.mitre.oval:ste:9569"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32120" version="1" comment="mozilla-js-debugger is earlier than 37:1.7.10-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13991"/>
      <state state_ref="oval:org.mitre.oval:ste:9924"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32100" version="1" comment="mozilla-chat is earlier than 37:1.7.10-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14196"/>
      <state state_ref="oval:org.mitre.oval:ste:9924"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32061" version="1" comment="mozilla-nspr-devel is earlier than 37:1.7.10-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13716"/>
      <state state_ref="oval:org.mitre.oval:ste:9924"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32041" version="1" comment="mozilla-nss-devel is earlier than 37:1.7.10-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14415"/>
      <state state_ref="oval:org.mitre.oval:ste:9569"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32004" version="1" comment="mozilla-nspr is earlier than 37:1.7.10-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14160"/>
      <state state_ref="oval:org.mitre.oval:ste:9569"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32001" version="1" comment="mozilla-mail is earlier than 37:1.7.10-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14423"/>
      <state state_ref="oval:org.mitre.oval:ste:9569"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31998" version="1" comment="mozilla-nspr is earlier than 37:1.7.10-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14160"/>
      <state state_ref="oval:org.mitre.oval:ste:9924"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31951" version="1" comment="mozilla-nss is earlier than 37:1.7.10-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14069"/>
      <state state_ref="oval:org.mitre.oval:ste:9924"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31904" version="1" comment="mozilla-dom-inspector is earlier than 37:1.7.10-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13776"/>
      <state state_ref="oval:org.mitre.oval:ste:9924"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31837" version="1" comment="mozilla is earlier than 37:1.7.10-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14405"/>
      <state state_ref="oval:org.mitre.oval:ste:9924"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31821" version="1" comment="mozilla-mail is earlier than 37:1.7.10-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14423"/>
      <state state_ref="oval:org.mitre.oval:ste:9924"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31814" version="1" comment="devhelp is earlier than 0:0.9.2-2.4.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14497"/>
      <state state_ref="oval:org.mitre.oval:ste:9771"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31782" version="1" comment="mozilla-nss is earlier than 37:1.7.10-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14069"/>
      <state state_ref="oval:org.mitre.oval:ste:9569"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31633" version="1" comment="devhelp-devel is earlier than 0:0.9.2-2.4.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14520"/>
      <state state_ref="oval:org.mitre.oval:ste:9771"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31554" version="1" comment="mozilla-devel is earlier than 37:1.7.10-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14231"/>
      <state state_ref="oval:org.mitre.oval:ste:9924"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31353" version="1" comment="mozilla-nspr-devel is earlier than 37:1.7.10-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13716"/>
      <state state_ref="oval:org.mitre.oval:ste:9569"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38119" version="1" comment="pidgin-perl is earlier than 0:2.5.2-6.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14202"/>
      <state state_ref="oval:org.mitre.oval:ste:11034"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38103" version="1" comment="finch-devel is earlier than 0:2.5.2-6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15074"/>
      <state state_ref="oval:org.mitre.oval:ste:10764"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38090" version="1" comment="libpurple is earlier than 0:2.5.2-6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14700"/>
      <state state_ref="oval:org.mitre.oval:ste:10764"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38052" version="1" comment="pidgin is earlier than 0:2.5.2-6.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15157"/>
      <state state_ref="oval:org.mitre.oval:ste:11034"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38050" version="1" comment="pidgin-perl is earlier than 0:2.5.2-6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14202"/>
      <state state_ref="oval:org.mitre.oval:ste:10764"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38038" version="1" comment="libpurple-devel is earlier than 0:2.5.2-6.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15112"/>
      <state state_ref="oval:org.mitre.oval:ste:11034"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38020" version="1" comment="libpurple-tcl is earlier than 0:2.5.2-6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14238"/>
      <state state_ref="oval:org.mitre.oval:ste:10764"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37997" version="1" comment="libpurple-perl is earlier than 0:2.5.2-6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15144"/>
      <state state_ref="oval:org.mitre.oval:ste:10764"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37980" version="1" comment="finch-devel is earlier than 0:2.5.2-6.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15074"/>
      <state state_ref="oval:org.mitre.oval:ste:11034"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37973" version="1" comment="finch is earlier than 0:2.5.2-6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15156"/>
      <state state_ref="oval:org.mitre.oval:ste:10764"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37969" version="1" comment="pidgin-devel is earlier than 0:2.5.2-6.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14642"/>
      <state state_ref="oval:org.mitre.oval:ste:11034"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37865" version="1" comment="pidgin-devel is earlier than 0:2.5.2-6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14642"/>
      <state state_ref="oval:org.mitre.oval:ste:10764"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37838" version="1" comment="pidgin is earlier than 0:2.5.2-6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15157"/>
      <state state_ref="oval:org.mitre.oval:ste:10764"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37827" version="1" comment="libpurple-perl is earlier than 0:2.5.2-6.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15144"/>
      <state state_ref="oval:org.mitre.oval:ste:11034"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37822" version="1" comment="finch is earlier than 0:2.5.2-6.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15156"/>
      <state state_ref="oval:org.mitre.oval:ste:11034"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37809" version="1" comment="libpurple-devel is earlier than 0:2.5.2-6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15112"/>
      <state state_ref="oval:org.mitre.oval:ste:10764"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37775" version="1" comment="pidgin-docs is earlier than 0:2.5.2-6.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14724"/>
      <state state_ref="oval:org.mitre.oval:ste:10764"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37625" version="1" comment="libpurple is earlier than 0:2.5.2-6.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14700"/>
      <state state_ref="oval:org.mitre.oval:ste:11034"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37120" version="1" comment="libpurple-tcl is earlier than 0:2.5.2-6.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14238"/>
      <state state_ref="oval:org.mitre.oval:ste:11034"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34231" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:10186"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34224" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:10186"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34219" version="1" comment="kernel-xen is earlier than 0:2.6.18-8.1.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:10186"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34205" version="1" comment="kernel-headers is earlier than 0:2.6.18-8.1.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:10186"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34146" version="1" comment="kernel-kdump is earlier than 0:2.6.18-8.1.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:10186"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34073" version="1" comment="kernel-devel is earlier than 0:2.6.18-8.1.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10186"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34059" version="1" comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14853"/>
      <state state_ref="oval:org.mitre.oval:ste:10186"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33862" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:10186"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33861" version="1" comment="kernel-PAE is earlier than 0:2.6.18-8.1.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:10186"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33837" version="1" comment="kernel is earlier than 0:2.6.18-8.1.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10186"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33594" version="1" comment="kernel-doc is earlier than 0:2.6.18-8.1.4.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10186"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30561" version="1" comment="kernel-smp is earlier than 0:2.6.9-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:9607"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30542" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:9607"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30504" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:9607"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30432" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:9607"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30424" version="1" comment="kernel-devel is earlier than 0:2.6.9-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:9607"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30299" version="1" comment="kernel-doc is earlier than 0:2.6.9-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:9607"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30268" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:9607"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30189" version="1" comment="kernel-xenU is earlier than 0:2.6.9-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14301"/>
      <state state_ref="oval:org.mitre.oval:ste:9607"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30169" version="1" comment="kernel-xenU-devel is earlier than 0:2.6.9-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14060"/>
      <state state_ref="oval:org.mitre.oval:ste:9607"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29669" version="1" comment="kernel is earlier than 0:2.6.9-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:9607"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29589" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-55.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:9607"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1342" version="1" check="at least one" comment="kernel version is less than 2.4.21-15.EL" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:930"/>
      <state state_ref="oval:org.mitre.oval:ste:1204"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39183" version="1" comment="libxml2-devel is earlier than 0:2.6.26-2.1.2.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14212"/>
      <state state_ref="oval:org.mitre.oval:ste:11340"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39178" version="1" comment="libxml2 is earlier than 0:2.6.26-2.1.2.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14133"/>
      <state state_ref="oval:org.mitre.oval:ste:11340"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39158" version="1" comment="libxml2 is earlier than 0:2.5.10-15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14133"/>
      <state state_ref="oval:org.mitre.oval:ste:11147"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39128" version="1" comment="libxml2 is earlier than 0:2.6.16-12.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14133"/>
      <state state_ref="oval:org.mitre.oval:ste:10838"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39096" version="1" comment="libxml2-devel is earlier than 0:2.5.10-15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14212"/>
      <state state_ref="oval:org.mitre.oval:ste:11147"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39083" version="1" comment="libxml2-devel is earlier than 0:2.6.16-12.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14212"/>
      <state state_ref="oval:org.mitre.oval:ste:10838"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39077" version="1" comment="libxml2-python is earlier than 0:2.5.10-15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13780"/>
      <state state_ref="oval:org.mitre.oval:ste:11147"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38887" version="1" comment="libxml2-python is earlier than 0:2.6.16-12.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13780"/>
      <state state_ref="oval:org.mitre.oval:ste:10838"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38679" version="1" comment="libxml2-python is earlier than 0:2.6.26-2.1.2.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13780"/>
      <state state_ref="oval:org.mitre.oval:ste:11340"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38526" version="1" comment="libxml is earlier than 1:1.8.17-9.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14454"/>
      <state state_ref="oval:org.mitre.oval:ste:11245"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38476" version="1" comment="libxml-devel is earlier than 1:1.8.17-9.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14286"/>
      <state state_ref="oval:org.mitre.oval:ste:11245"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38518" version="1" comment="libvirt-python is earlier than 0:0.3.3-14.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15191"/>
      <state state_ref="oval:org.mitre.oval:ste:10975"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38242" version="1" comment="libvirt-devel is earlier than 0:0.3.3-14.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14880"/>
      <state state_ref="oval:org.mitre.oval:ste:10975"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38026" version="1" comment="libvirt is earlier than 0:0.3.3-14.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15209"/>
      <state state_ref="oval:org.mitre.oval:ste:10975"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39490" version="1" comment="elinks is earlier than 0:0.11.1-6.el5_4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14684"/>
      <state state_ref="oval:org.mitre.oval:ste:11477"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39356" version="1" comment="elinks is earlier than 0:0.9.2-4.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14684"/>
      <state state_ref="oval:org.mitre.oval:ste:11361"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33025" version="1" comment="wireshark is earlier than 0:0.99.3-EL4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14711"/>
      <state state_ref="oval:org.mitre.oval:ste:10054"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33011" version="1" comment="wireshark is earlier than 0:0.99.3-EL3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14711"/>
      <state state_ref="oval:org.mitre.oval:ste:9340"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32974" version="1" comment="wireshark-gnome is earlier than 0:0.99.3-EL4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14663"/>
      <state state_ref="oval:org.mitre.oval:ste:10054"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32323" version="1" comment="wireshark-gnome is earlier than 0:0.99.3-EL3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14663"/>
      <state state_ref="oval:org.mitre.oval:ste:9340"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31080" version="1" comment="kernel-doc is earlier than 0:2.4.21-20.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:9721"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30934" version="1" comment="kernel-BOOT is earlier than 0:2.4.21-20.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14219"/>
      <state state_ref="oval:org.mitre.oval:ste:9721"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30892" version="1" comment="kernel is earlier than 0:2.4.21-20.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:9721"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30874" version="1" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-20.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14372"/>
      <state state_ref="oval:org.mitre.oval:ste:9721"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30873" version="1" comment="kernel-source is earlier than 0:2.4.21-20.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14186"/>
      <state state_ref="oval:org.mitre.oval:ste:9721"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30866" version="1" comment="kernel-smp is earlier than 0:2.4.21-20.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:9721"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30794" version="1" comment="kernel-hugemem is earlier than 0:2.4.21-20.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:9721"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30708" version="1" comment="kernel-unsupported is earlier than 0:2.4.21-20.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14229"/>
      <state state_ref="oval:org.mitre.oval:ste:9721"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30577" version="1" comment="kernel-smp-unsupported is earlier than 0:2.4.21-20.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14218"/>
      <state state_ref="oval:org.mitre.oval:ste:9721"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33603" version="1" comment="postgresql-python is earlier than 0:8.1.8-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14546"/>
      <state state_ref="oval:org.mitre.oval:ste:9502"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33593" version="1" comment="postgresql-pl is earlier than 0:8.1.8-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14537"/>
      <state state_ref="oval:org.mitre.oval:ste:9502"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33568" version="1" comment="postgresql-libs is earlier than 0:8.1.8-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14383"/>
      <state state_ref="oval:org.mitre.oval:ste:9502"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33536" version="1" comment="postgresql-devel is earlier than 0:8.1.8-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14290"/>
      <state state_ref="oval:org.mitre.oval:ste:9502"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33488" version="1" comment="postgresql-docs is earlier than 0:8.1.8-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14365"/>
      <state state_ref="oval:org.mitre.oval:ste:9502"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33396" version="1" comment="postgresql-contrib is earlier than 0:8.1.8-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14293"/>
      <state state_ref="oval:org.mitre.oval:ste:9502"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33181" version="1" comment="postgresql is earlier than 0:8.1.8-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14586"/>
      <state state_ref="oval:org.mitre.oval:ste:9502"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33121" version="1" comment="postgresql-tcl is earlier than 0:8.1.8-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14486"/>
      <state state_ref="oval:org.mitre.oval:ste:9502"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32997" version="1" comment="postgresql-server is earlier than 0:8.1.8-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14158"/>
      <state state_ref="oval:org.mitre.oval:ste:9502"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32610" version="1" comment="postgresql-test is earlier than 0:8.1.8-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14367"/>
      <state state_ref="oval:org.mitre.oval:ste:9502"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33059" version="1" comment="php-gd is earlier than 0:4.3.9-3.18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14335"/>
      <state state_ref="oval:org.mitre.oval:ste:10341"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33052" version="1" comment="php-ldap is earlier than 0:4.3.9-3.18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:10341"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33047" version="1" comment="php-pgsql is earlier than 0:4.3.9-3.18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:10341"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32985" version="1" comment="php-xmlrpc is earlier than 0:4.3.9-3.18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14445"/>
      <state state_ref="oval:org.mitre.oval:ste:10341"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32964" version="1" comment="php-odbc is earlier than 0:4.3.9-3.18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:10341"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32962" version="1" comment="php-snmp is earlier than 0:4.3.9-3.18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14508"/>
      <state state_ref="oval:org.mitre.oval:ste:10341"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32928" version="1" comment="php is earlier than 0:4.3.2-36.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:10129"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32876" version="1" comment="php-mbstring is earlier than 0:4.3.9-3.18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13746"/>
      <state state_ref="oval:org.mitre.oval:ste:10341"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32870" version="1" comment="php-pgsql is earlier than 0:4.3.2-36.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:10129"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32860" version="1" comment="php-devel is earlier than 0:4.3.2-36.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:10129"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32829" version="1" comment="php-mysql is earlier than 0:4.3.2-36.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:10129"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32808" version="1" comment="php-domxml is earlier than 0:4.3.9-3.18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14496"/>
      <state state_ref="oval:org.mitre.oval:ste:10341"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32788" version="1" comment="php-imap is earlier than 0:4.3.9-3.18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:10341"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32754" version="1" comment="php is earlier than 0:4.3.9-3.18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:10341"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32700" version="1" comment="php-ncurses is earlier than 0:4.3.9-3.18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14227"/>
      <state state_ref="oval:org.mitre.oval:ste:10341"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32491" version="1" comment="php-odbc is earlier than 0:4.3.2-36.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:10129"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32485" version="1" comment="php-ldap is earlier than 0:4.3.2-36.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:10129"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32483" version="1" comment="php-pear is earlier than 0:4.3.9-3.18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14130"/>
      <state state_ref="oval:org.mitre.oval:ste:10341"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32272" version="1" comment="php-devel is earlier than 0:4.3.9-3.18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:10341"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32258" version="1" comment="php-imap is earlier than 0:4.3.2-36.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:10129"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32175" version="1" comment="php-mysql is earlier than 0:4.3.9-3.18" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:10341"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35769" version="1" comment="kernel is earlier than 0:2.4.21-53.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10376"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35699" version="1" comment="kernel-doc is earlier than 0:2.4.21-53.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10376"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35663" version="1" comment="kernel-smp-unsupported is earlier than 0:2.4.21-53.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14218"/>
      <state state_ref="oval:org.mitre.oval:ste:10376"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35660" version="1" comment="kernel-BOOT is earlier than 0:2.4.21-53.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14219"/>
      <state state_ref="oval:org.mitre.oval:ste:10376"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35653" version="1" comment="kernel-hugemem is earlier than 0:2.4.21-53.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:10376"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35627" version="1" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-53.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14372"/>
      <state state_ref="oval:org.mitre.oval:ste:10376"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35620" version="1" comment="kernel-unsupported is earlier than 0:2.4.21-53.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14229"/>
      <state state_ref="oval:org.mitre.oval:ste:10376"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35373" version="1" comment="kernel is earlier than 0:2.6.9-55.0.12.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10629"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35366" version="1" comment="kernel-devel is earlier than 0:2.6.18-8.1.15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:9711"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35345" version="1" comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14853"/>
      <state state_ref="oval:org.mitre.oval:ste:9711"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35339" version="1" comment="kernel-xen is earlier than 0:2.6.18-8.1.15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:9711"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35337" version="1" comment="kernel-headers is earlier than 0:2.6.18-8.1.15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:9711"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35330" version="1" comment="kernel-kdump is earlier than 0:2.6.18-8.1.15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:9711"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35327" version="1" comment="kernel-smp is earlier than 0:2.6.9-55.0.12.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:10629"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35326" version="1" comment="kernel-doc is earlier than 0:2.6.18-8.1.15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:9711"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35276" version="1" comment="kernel is earlier than 0:2.6.18-8.1.15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:9711"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35258" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-55.0.12.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:10629"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35254" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.0.12.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:10629"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35227" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:9711"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35208" version="1" comment="kernel-PAE is earlier than 0:2.6.18-8.1.15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:9711"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35145" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.0.12.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:10629"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35043" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:9711"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35035" version="1" comment="kernel-source is earlier than 0:2.4.21-53.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14186"/>
      <state state_ref="oval:org.mitre.oval:ste:10376"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35017" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-55.0.12.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:10629"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34923" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-55.0.12.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:10629"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34911" version="1" comment="kernel-doc is earlier than 0:2.6.9-55.0.12.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10629"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34864" version="1" comment="kernel-xenU is earlier than 0:2.6.9-55.0.12.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14301"/>
      <state state_ref="oval:org.mitre.oval:ste:10629"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34809" version="1" comment="kernel-smp is earlier than 0:2.4.21-53.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:10376"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34480" version="1" comment="kernel-devel is earlier than 0:2.6.9-55.0.12.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10629"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34448" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:9711"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34442" version="1" comment="kernel-xenU-devel is earlier than 0:2.6.9-55.0.12.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14060"/>
      <state state_ref="oval:org.mitre.oval:ste:10629"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32783" version="1" comment="php-odbc is earlier than 0:4.3.9-3.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:9769"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32734" version="1" comment="php-ldap is earlier than 0:4.3.2-33.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:10163"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32732" version="1" comment="php-devel is earlier than 0:4.3.9-3.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:9769"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32729" version="1" comment="php-imap is earlier than 0:4.3.9-3.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:9769"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32718" version="1" comment="php-ncurses is earlier than 0:4.3.9-3.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14227"/>
      <state state_ref="oval:org.mitre.oval:ste:9769"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32698" version="1" comment="php-devel is earlier than 0:4.3.2-33.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:10163"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32694" version="1" comment="php is earlier than 0:4.3.2-33.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:10163"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32676" version="1" comment="php-gd is earlier than 0:4.3.9-3.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14335"/>
      <state state_ref="oval:org.mitre.oval:ste:9769"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32635" version="1" comment="php-pgsql is earlier than 0:4.3.2-33.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:10163"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32619" version="1" comment="php-xmlrpc is earlier than 0:4.3.9-3.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14445"/>
      <state state_ref="oval:org.mitre.oval:ste:9769"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32609" version="1" comment="php-snmp is earlier than 0:4.3.9-3.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14508"/>
      <state state_ref="oval:org.mitre.oval:ste:9769"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32607" version="1" comment="php is earlier than 0:4.3.9-3.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:9769"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32594" version="1" comment="php-odbc is earlier than 0:4.3.2-33.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:10163"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32506" version="1" comment="php-imap is earlier than 0:4.3.2-33.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:10163"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32412" version="1" comment="php-mbstring is earlier than 0:4.3.9-3.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13746"/>
      <state state_ref="oval:org.mitre.oval:ste:9769"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32271" version="1" comment="php-pear is earlier than 0:4.3.9-3.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14130"/>
      <state state_ref="oval:org.mitre.oval:ste:9769"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32269" version="1" comment="php-ldap is earlier than 0:4.3.9-3.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:9769"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32094" version="1" comment="php-mysql is earlier than 0:4.3.2-33.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:10163"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32084" version="1" comment="php-pgsql is earlier than 0:4.3.9-3.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:9769"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31938" version="1" comment="php-domxml is earlier than 0:4.3.9-3.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14496"/>
      <state state_ref="oval:org.mitre.oval:ste:9769"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31791" version="1" comment="php-mysql is earlier than 0:4.3.9-3.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:9769"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34873" version="1" comment="kernel-devel is earlier than 0:2.6.18-8.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10410"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34870" version="1" comment="kernel-PAE is earlier than 0:2.6.18-8.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:10410"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34837" version="1" comment="kernel-headers is earlier than 0:2.6.18-8.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:10410"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34804" version="1" comment="kernel-kdump is earlier than 0:2.6.18-8.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:10410"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34795" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:10410"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34662" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-55.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:10375"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34659" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-55.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:10375"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34630" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-55.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:10375"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34562" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:10410"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34560" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-55.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:10375"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34557" version="1" comment="kernel-xen is earlier than 0:2.6.18-8.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:10410"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34496" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-55.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:10375"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34493" version="1" comment="kernel is earlier than 0:2.6.9-55.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10375"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34475" version="1" comment="kernel-xenU is earlier than 0:2.6.9-55.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14301"/>
      <state state_ref="oval:org.mitre.oval:ste:10375"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34379" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:10410"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34375" version="1" comment="kernel-xenU-devel is earlier than 0:2.6.9-55.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14060"/>
      <state state_ref="oval:org.mitre.oval:ste:10375"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34374" version="1" comment="kernel-doc is earlier than 0:2.6.18-8.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10410"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34357" version="1" comment="kernel is earlier than 0:2.6.18-8.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10410"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34337" version="1" comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.10.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14853"/>
      <state state_ref="oval:org.mitre.oval:ste:10410"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34302" version="1" comment="kernel-devel is earlier than 0:2.6.9-55.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10375"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34295" version="1" comment="kernel-doc is earlier than 0:2.6.9-55.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10375"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33694" version="1" comment="kernel-smp is earlier than 0:2.6.9-55.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:10375"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30183" version="1" comment="utempter is earlier than 0:0.5.5-1.3EL.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13679"/>
      <state state_ref="oval:org.mitre.oval:ste:9031"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39159" version="1" comment="curl-devel is earlier than 0:7.15.5-2.1.el5_3.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14469"/>
      <state state_ref="oval:org.mitre.oval:ste:11126"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39078" version="1" comment="curl-devel is earlier than 0:7.12.1-11.1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14469"/>
      <state state_ref="oval:org.mitre.oval:ste:11360"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38926" version="1" comment="curl-devel is earlier than 0:7.10.6-10.rhel3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14469"/>
      <state state_ref="oval:org.mitre.oval:ste:11054"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38865" version="1" comment="curl is earlier than 0:7.12.1-11.1.el4_8.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14575"/>
      <state state_ref="oval:org.mitre.oval:ste:11360"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38671" version="1" comment="curl is earlier than 0:7.10.6-10.rhel3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14575"/>
      <state state_ref="oval:org.mitre.oval:ste:11054"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38300" version="1" comment="curl is earlier than 0:7.15.5-2.1.el5_3.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14575"/>
      <state state_ref="oval:org.mitre.oval:ste:11126"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32929" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:9980"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32925" version="1" comment="seamonkey-devel is earlier than 0:1.0.3-0.el4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:9980"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32924" version="1" comment="seamonkey-devel is earlier than 0:1.0.3-0.el3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10243"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32915" version="1" comment="seamonkey-chat is earlier than 0:1.0.3-0.el3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10243"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32906" version="1" comment="seamonkey-chat is earlier than 0:1.0.3-0.el4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:9980"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32905" version="1" comment="seamonkey-nss is earlier than 0:1.0.3-0.el4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:9980"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32904" version="1" comment="seamonkey-mail is earlier than 0:1.0.3-0.el3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10243"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32896" version="1" comment="firefox is earlier than 0:1.5.0.5-0.el4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10135"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32886" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:9980"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32877" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10243"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32873" version="1" comment="devhelp-devel is earlier than 0:0.10-0.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14520"/>
      <state state_ref="oval:org.mitre.oval:ste:10215"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32822" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10243"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32816" version="1" comment="seamonkey is earlier than 0:1.0.3-0.el3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10243"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32810" version="1" comment="thunderbird is earlier than 0:1.5.0.5-0.el4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:10135"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32777" version="1" comment="devhelp is earlier than 0:0.10-0.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14497"/>
      <state state_ref="oval:org.mitre.oval:ste:10215"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32722" version="1" comment="seamonkey-mail is earlier than 0:1.0.3-0.el4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:9980"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32693" version="1" comment="seamonkey-nspr is earlier than 0:1.0.3-0.el4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:9980"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32624" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:9980"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32555" version="1" comment="seamonkey-nss is earlier than 0:1.0.3-0.el3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:10243"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32496" version="1" comment="seamonkey is earlier than 0:1.0.3-0.el4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:9980"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32418" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:9980"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32342" version="1" comment="seamonkey-nspr is earlier than 0:1.0.3-0.el3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:10243"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32080" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:10243"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31982" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:10243"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40488" version="1" comment="xorg-x11-server-Xdmx is earlier than 0:1.1.1-48.76.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14353"/>
      <state state_ref="oval:org.mitre.oval:ste:11390"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40442" version="1" comment="xorg-x11-server-Xephyr is earlier than 0:1.1.1-48.76.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14842"/>
      <state state_ref="oval:org.mitre.oval:ste:11390"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40423" version="1" comment="xorg-x11-server-Xnest is earlier than 0:1.1.1-48.76.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14794"/>
      <state state_ref="oval:org.mitre.oval:ste:11390"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40408" version="1" comment="xorg-x11-server-Xvnc-source is earlier than 0:1.1.1-48.76.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14667"/>
      <state state_ref="oval:org.mitre.oval:ste:11390"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40255" version="1" comment="xorg-x11-server-Xorg is earlier than 0:1.1.1-48.76.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14653"/>
      <state state_ref="oval:org.mitre.oval:ste:11390"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40199" version="1" comment="xorg-x11-server-Xvfb is earlier than 0:1.1.1-48.76.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14709"/>
      <state state_ref="oval:org.mitre.oval:ste:11390"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40175" version="1" comment="xorg-x11-server is earlier than 0:1.1.1-48.76.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14418"/>
      <state state_ref="oval:org.mitre.oval:ste:11390"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39942" version="1" comment="xorg-x11-server-sdk is earlier than 0:1.1.1-48.76.el5_5.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14873"/>
      <state state_ref="oval:org.mitre.oval:ste:11390"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38801" version="1" comment="thunderbird is earlier than 0:2.0.0.22-2.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:11227"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38716" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-41.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10970"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38697" version="1" comment="seamonkey is earlier than 0:1.0.9-41.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10970"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38685" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-41.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10970"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38677" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-0.37.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:11154"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38634" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-41.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10970"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38597" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-0.37.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:11154"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38596" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-41.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10970"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38577" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.37.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:11154"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38562" version="1" comment="thunderbird is earlier than 0:1.5.0.12-23.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:10972"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38542" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.37.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:11154"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38540" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-0.37.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:11154"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38521" version="1" comment="seamonkey is earlier than 0:1.0.9-0.37.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:11154"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38403" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.37.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:11154"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38375" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.37.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:11154"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38190" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-41.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10970"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38096" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-0.37.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:11154"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37726" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-0.37.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:11154"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:3098" version="1" comment="IIS minor version equals 0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:938"/>
      <state state_ref="oval:org.mitre.oval:ste:2903"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1447" version="1" check="at least one" comment="File %windir%\System32\msw3prt.dll is less than 5.0.2195.5807" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:866"/>
      <state state_ref="oval:org.mitre.oval:ste:1305"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37018" version="1" comment="xorg-x11-server-randr-source is earlier than 0:1.1.1-48.41.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15083"/>
      <state state_ref="oval:org.mitre.oval:ste:10766"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36986" version="1" comment="xorg-x11-server is earlier than 0:1.1.1-48.41.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14418"/>
      <state state_ref="oval:org.mitre.oval:ste:10766"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36985" version="1" comment="XFree86-font-utils is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14385"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36979" version="1" comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.33.0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14262"/>
      <state state_ref="oval:org.mitre.oval:ste:10728"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36977" version="1" comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.33.0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14031"/>
      <state state_ref="oval:org.mitre.oval:ste:10728"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36976" version="1" comment="XFree86-tools is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13693"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36973" version="1" comment="XFree86-libs-data is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14326"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36951" version="1" comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13712"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36946" version="1" comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14045"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36944" version="1" comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.33.0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14572"/>
      <state state_ref="oval:org.mitre.oval:ste:10728"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36943" version="1" comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14127"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36941" version="1" comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.33.0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14129"/>
      <state state_ref="oval:org.mitre.oval:ste:10728"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36939" version="1" comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.33.0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14595"/>
      <state state_ref="oval:org.mitre.oval:ste:10728"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36934" version="1" comment="XFree86-twm is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13667"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36933" version="1" comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.33.0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14291"/>
      <state state_ref="oval:org.mitre.oval:ste:10728"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36932" version="1" comment="xorg-x11 is earlier than 0:6.8.2-1.EL.33.0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14592"/>
      <state state_ref="oval:org.mitre.oval:ste:10728"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36931" version="1" comment="XFree86-Xnest is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14053"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36918" version="1" comment="XFree86-sdk is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14107"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36908" version="1" comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.33.0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14553"/>
      <state state_ref="oval:org.mitre.oval:ste:10728"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36905" version="1" comment="XFree86-devel is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14397"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36895" version="1" comment="XFree86-libs is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14259"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36881" version="1" comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14226"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36873" version="1" comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.33.0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14168"/>
      <state state_ref="oval:org.mitre.oval:ste:10728"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36867" version="1" comment="XFree86-syriac-fonts is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14198"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36866" version="1" comment="XFree86-truetype-fonts is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14354"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36851" version="1" comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14121"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36836" version="1" comment="xorg-x11-server-Xnest is earlier than 0:1.1.1-48.41.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14794"/>
      <state state_ref="oval:org.mitre.oval:ste:10766"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36805" version="1" comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14082"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36794" version="1" comment="XFree86-xauth is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14352"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36756" version="1" comment="XFree86-doc is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14406"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36754" version="1" comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14315"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36752" version="1" comment="XFree86-xfs is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14311"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36742" version="1" comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.33.0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14580"/>
      <state state_ref="oval:org.mitre.oval:ste:10728"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36740" version="1" comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14260"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36734" version="1" comment="XFree86-xdm is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13658"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36685" version="1" comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.33.0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14478"/>
      <state state_ref="oval:org.mitre.oval:ste:10728"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36662" version="1" comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.33.0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14169"/>
      <state state_ref="oval:org.mitre.oval:ste:10728"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36651" version="1" comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.33.0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14089"/>
      <state state_ref="oval:org.mitre.oval:ste:10728"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36641" version="1" comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.33.0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14184"/>
      <state state_ref="oval:org.mitre.oval:ste:10728"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36632" version="1" comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14351"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36607" version="1" comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.33.0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13643"/>
      <state state_ref="oval:org.mitre.oval:ste:10728"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36579" version="1" comment="XFree86-Xvfb is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13644"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36542" version="1" comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14364"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36499" version="1" comment="XFree86 is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14255"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36469" version="1" comment="XFree86-base-fonts is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14407"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36402" version="1" comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14288"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36385" version="1" comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.33.0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14097"/>
      <state state_ref="oval:org.mitre.oval:ste:10728"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36380" version="1" comment="xorg-x11-server-sdk is earlier than 0:1.1.1-48.41.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14873"/>
      <state state_ref="oval:org.mitre.oval:ste:10766"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36368" version="1" comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14067"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36359" version="1" comment="xorg-x11-server-Xorg is earlier than 0:1.1.1-48.41.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14653"/>
      <state state_ref="oval:org.mitre.oval:ste:10766"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36309" version="1" comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.33.0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14515"/>
      <state state_ref="oval:org.mitre.oval:ste:10728"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36115" version="1" comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-128.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14281"/>
      <state state_ref="oval:org.mitre.oval:ste:10746"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36063" version="1" comment="xorg-x11-server-Xvfb is earlier than 0:1.1.1-48.41.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14709"/>
      <state state_ref="oval:org.mitre.oval:ste:10766"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36055" version="1" comment="xorg-x11-server-Xephyr is earlier than 0:1.1.1-48.41.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14842"/>
      <state state_ref="oval:org.mitre.oval:ste:10766"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36029" version="1" comment="xorg-x11-server-Xdmx is earlier than 0:1.1.1-48.41.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14353"/>
      <state state_ref="oval:org.mitre.oval:ste:10766"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35995" version="1" comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.33.0.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14624"/>
      <state state_ref="oval:org.mitre.oval:ste:10728"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38252" version="1" comment="squirrelmail is earlier than 0:1.4.8-5.el5_2.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14331"/>
      <state state_ref="oval:org.mitre.oval:ste:10589"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38208" version="1" comment="squirrelmail is earlier than 0:1.4.8-5.el4_7.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14331"/>
      <state state_ref="oval:org.mitre.oval:ste:10966"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37673" version="1" comment="squirrelmail is earlier than 0:1.4.8-9.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14331"/>
      <state state_ref="oval:org.mitre.oval:ste:11064"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38633" version="1" comment="xulrunner-devel is earlier than 0:1.9.0.9-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15100"/>
      <state state_ref="oval:org.mitre.oval:ste:11107"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38462" version="1" comment="xulrunner is earlier than 0:1.9.0.9-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15057"/>
      <state state_ref="oval:org.mitre.oval:ste:11107"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38379" version="1" comment="firefox is earlier than 0:3.0.9-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10918"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38370" version="1" comment="firefox is earlier than 0:3.0.9-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:11133"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38308" version="1" comment="xulrunner-devel-unstable is earlier than 0:1.9.0.9-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15048"/>
      <state state_ref="oval:org.mitre.oval:ste:11107"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36831" version="1" comment="mysql-bench is earlier than 0:5.0.45-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14400"/>
      <state state_ref="oval:org.mitre.oval:ste:10852"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36750" version="1" comment="mysql-test is earlier than 0:5.0.45-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14941"/>
      <state state_ref="oval:org.mitre.oval:ste:10852"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36749" version="1" comment="mysql-devel is earlier than 0:5.0.45-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14481"/>
      <state state_ref="oval:org.mitre.oval:ste:10852"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36646" version="1" comment="mysql-server is earlier than 0:5.0.45-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14342"/>
      <state state_ref="oval:org.mitre.oval:ste:10852"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36197" version="1" comment="mysql is earlier than 0:5.0.45-7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14355"/>
      <state state_ref="oval:org.mitre.oval:ste:10852"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36710" version="1" comment="libvorbis is earlier than 0:1.1.2-3.el5_1.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14657"/>
      <state state_ref="oval:org.mitre.oval:ste:10891"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36699" version="1" comment="libvorbis is earlier than 1:1.0-10.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14657"/>
      <state state_ref="oval:org.mitre.oval:ste:10265"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36659" version="1" comment="libvorbis-devel is earlier than 1:1.0-10.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14840"/>
      <state state_ref="oval:org.mitre.oval:ste:10265"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36519" version="1" comment="libvorbis-devel is earlier than 0:1.1.0-3.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14840"/>
      <state state_ref="oval:org.mitre.oval:ste:10749"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36439" version="1" comment="libvorbis-devel is earlier than 0:1.1.2-3.el5_1.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14840"/>
      <state state_ref="oval:org.mitre.oval:ste:10891"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36387" version="1" comment="libvorbis is earlier than 0:1.1.0-3.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14657"/>
      <state state_ref="oval:org.mitre.oval:ste:10749"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40437" version="1" comment="wireshark is earlier than 0:1.0.11-1.el4_8.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14711"/>
      <state state_ref="oval:org.mitre.oval:ste:11231"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40430" version="1" comment="wireshark-gnome is earlier than 0:1.0.11-EL3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14663"/>
      <state state_ref="oval:org.mitre.oval:ste:11008"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40351" version="1" comment="wireshark is earlier than 0:1.0.11-1.el5_5.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14711"/>
      <state state_ref="oval:org.mitre.oval:ste:11235"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40208" version="1" comment="wireshark-gnome is earlier than 0:1.0.11-1.el5_5.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14663"/>
      <state state_ref="oval:org.mitre.oval:ste:11235"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39877" version="1" comment="wireshark-gnome is earlier than 0:1.0.11-1.el4_8.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14663"/>
      <state state_ref="oval:org.mitre.oval:ste:11231"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39600" version="1" comment="wireshark is earlier than 0:1.0.11-EL3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14711"/>
      <state state_ref="oval:org.mitre.oval:ste:11008"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35458" version="1" comment="util-linux is earlier than 0:2.12a-17.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14723"/>
      <state state_ref="oval:org.mitre.oval:ste:10454"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35348" version="1" comment="util-linux is earlier than 0:2.11y-31.24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14723"/>
      <state state_ref="oval:org.mitre.oval:ste:10483"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35312" version="1" comment="losetup is earlier than 0:2.11y-31.24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14579"/>
      <state state_ref="oval:org.mitre.oval:ste:10483"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35286" version="1" comment="mount is earlier than 0:2.11y-31.24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14598"/>
      <state state_ref="oval:org.mitre.oval:ste:10483"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35243" version="1" comment="util-linux is earlier than 0:2.13-0.45.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14723"/>
      <state state_ref="oval:org.mitre.oval:ste:10668"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34004" version="1" comment="evolution is earlier than 0:2.8.0-33.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14477"/>
      <state state_ref="oval:org.mitre.oval:ste:10083"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33858" version="1" comment="evolution-devel is earlier than 0:2.8.0-33.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14585"/>
      <state state_ref="oval:org.mitre.oval:ste:10083"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:1512" version="1" check="at least one" comment="the patch kb837009 is installed (installed components key)" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1016"/>
      <state state_ref="oval:org.mitre.oval:ste:1366"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1355" version="1" comment="Microsoft Outlook Express 6 SP1 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:566"/>
      <state state_ref="oval:org.mitre.oval:ste:1217"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1319" version="1" check="at least one" comment="the version of inetcomm.dll is less than 6.00.2800.1409" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:385"/>
      <state state_ref="oval:org.mitre.oval:ste:1185"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3153" version="1" check="at least one" comment="Red Hat 9 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1414"/>
      <state state_ref="oval:org.mitre.oval:ste:2949"/>
    </rpminfo_test>
    <uname_test id="oval:org.mitre.oval:tst:3152" version="1" comment="ix86 architecture" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:2948"/>
    </uname_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2985" version="1" check="at least one" comment="ethereal version is less than 0.9.13-1.90.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1706"/>
      <state state_ref="oval:org.mitre.oval:ste:2798"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2984" version="1" check="at least one" comment="ethereal-gnome version is less than 0.9.13-1.90.1" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1705"/>
      <state state_ref="oval:org.mitre.oval:ste:2797"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34697" version="1" comment="gimp is earlier than 0:2.2.13-2.0.7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14077"/>
      <state state_ref="oval:org.mitre.oval:ste:10361"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34679" version="1" comment="gimp-devel is earlier than 0:2.0.5-7.0.7.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14747"/>
      <state state_ref="oval:org.mitre.oval:ste:10272"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34574" version="1" comment="gimp-devel is earlier than 0:2.2.13-2.0.7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14747"/>
      <state state_ref="oval:org.mitre.oval:ste:10361"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34552" version="1" comment="gimp-perl is earlier than 0:1.2.3-20.9.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14862"/>
      <state state_ref="oval:org.mitre.oval:ste:10367"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34504" version="1" comment="gimp is earlier than 0:1.2.3-20.9.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14077"/>
      <state state_ref="oval:org.mitre.oval:ste:10367"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34499" version="1" comment="gimp is earlier than 0:2.0.5-7.0.7.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14077"/>
      <state state_ref="oval:org.mitre.oval:ste:10272"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34469" version="1" comment="gimp-libs is earlier than 0:2.2.13-2.0.7.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14790"/>
      <state state_ref="oval:org.mitre.oval:ste:10361"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34383" version="1" comment="gimp-devel is earlier than 0:1.2.3-20.9.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14747"/>
      <state state_ref="oval:org.mitre.oval:ste:10367"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36375" version="1" comment="tk-devel is earlier than 0:8.4.13-5.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14156"/>
      <state state_ref="oval:org.mitre.oval:ste:10802"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36356" version="1" comment="tk-devel is earlier than 0:8.4.7-3.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14156"/>
      <state state_ref="oval:org.mitre.oval:ste:10783"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36316" version="1" comment="tk-devel is earlier than 0:8.3.5-92.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14156"/>
      <state state_ref="oval:org.mitre.oval:ste:10418"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36313" version="1" comment="tcl is earlier than 0:8.3.5-92.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14962"/>
      <state state_ref="oval:org.mitre.oval:ste:10418"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36225" version="1" comment="tk is earlier than 0:8.4.7-3.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14225"/>
      <state state_ref="oval:org.mitre.oval:ste:10783"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36200" version="1" comment="tix is earlier than 0:8.1.4-92.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14860"/>
      <state state_ref="oval:org.mitre.oval:ste:10834"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36175" version="1" comment="expect-devel is earlier than 0:5.38.0-92.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15013"/>
      <state state_ref="oval:org.mitre.oval:ste:10611"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36169" version="1" comment="tcltk is earlier than 0:8.3.5-92.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14757"/>
      <state state_ref="oval:org.mitre.oval:ste:10418"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36018" version="1" comment="tk is earlier than 0:8.3.5-92.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14225"/>
      <state state_ref="oval:org.mitre.oval:ste:10418"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35961" version="1" comment="tcl-devel is earlier than 0:8.3.5-92.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15002"/>
      <state state_ref="oval:org.mitre.oval:ste:10418"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35879" version="1" comment="itcl is earlier than 0:3.2-92.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15099"/>
      <state state_ref="oval:org.mitre.oval:ste:10548"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35860" version="1" comment="tk is earlier than 0:8.4.13-5.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14225"/>
      <state state_ref="oval:org.mitre.oval:ste:10802"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35800" version="1" comment="tclx is earlier than 0:8.3-92.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14921"/>
      <state state_ref="oval:org.mitre.oval:ste:10596"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35369" version="1" comment="expect is earlier than 0:5.38.0-92.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14272"/>
      <state state_ref="oval:org.mitre.oval:ste:10611"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30227" version="1" comment="ethereal is earlier than 0:0.10.0a-0.30E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14030"/>
      <state state_ref="oval:org.mitre.oval:ste:9650"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29895" version="1" comment="ethereal-gnome is earlier than 0:0.10.0a-0.30E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14338"/>
      <state state_ref="oval:org.mitre.oval:ste:9650"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32246" version="1" comment="xscreensaver is earlier than 1:4.10-20" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14733"/>
      <state state_ref="oval:org.mitre.oval:ste:10063"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31661" version="1" comment="kernel-devel is earlier than 0:2.6.9-5.0.5.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:8986"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31605" version="1" comment="kernel-doc is earlier than 0:2.6.9-5.0.5.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:8986"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31545" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-5.0.5.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:8986"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31539" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-5.0.5.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:8986"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31482" version="1" comment="kernel is earlier than 0:2.6.9-5.0.5.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:8986"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31330" version="1" comment="kernel-smp is earlier than 0:2.6.9-5.0.5.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:8986"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31112" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-5.0.5.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:8986"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34297" version="1" comment="libpng is earlier than 2:1.2.2-27" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14194"/>
      <state state_ref="oval:org.mitre.oval:ste:10510"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34285" version="1" comment="libpng10 is earlier than 0:1.0.16-3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14370"/>
      <state state_ref="oval:org.mitre.oval:ste:10489"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34276" version="1" comment="libpng10-devel is earlier than 0:1.0.13-17" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13985"/>
      <state state_ref="oval:org.mitre.oval:ste:10070"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34237" version="1" comment="libpng is earlier than 2:1.2.7-3.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14194"/>
      <state state_ref="oval:org.mitre.oval:ste:10430"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34234" version="1" comment="libpng-devel is earlier than 2:1.2.2-27" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14221"/>
      <state state_ref="oval:org.mitre.oval:ste:10510"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34200" version="1" comment="libpng10 is earlier than 0:1.0.13-17" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14370"/>
      <state state_ref="oval:org.mitre.oval:ste:10070"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34051" version="1" comment="libpng10-devel is earlier than 0:1.0.16-3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13985"/>
      <state state_ref="oval:org.mitre.oval:ste:10489"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33778" version="1" comment="libpng is earlier than 2:1.2.10-7.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14194"/>
      <state state_ref="oval:org.mitre.oval:ste:10403"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33581" version="1" comment="libpng-devel is earlier than 2:1.2.7-3.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14221"/>
      <state state_ref="oval:org.mitre.oval:ste:10430"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33339" version="1" comment="libpng-devel is earlier than 2:1.2.10-7.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14221"/>
      <state state_ref="oval:org.mitre.oval:ste:10403"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40842" version="1" comment="kernel-headers is earlier than 0:2.6.18-194.8.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:11556"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40830" version="1" comment="kernel is earlier than 0:2.6.18-194.8.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:11556"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40807" version="1" comment="kernel-xen is earlier than 0:2.6.18-194.8.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:11556"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40793" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-194.8.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:11556"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40791" version="1" comment="kernel-debug-devel is earlier than 0:2.6.18-194.8.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15023"/>
      <state state_ref="oval:org.mitre.oval:ste:11556"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40732" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-194.8.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:11556"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40580" version="1" comment="kernel-doc is earlier than 0:2.6.18-194.8.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:11556"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40501" version="1" comment="kernel-kdump is earlier than 0:2.6.18-194.8.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:11556"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40349" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-194.8.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:11556"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40283" version="1" comment="kernel-debug is earlier than 0:2.6.18-194.8.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14957"/>
      <state state_ref="oval:org.mitre.oval:ste:11556"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39978" version="1" comment="kernel-devel is earlier than 0:2.6.18-194.8.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:11556"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39896" version="1" comment="kernel-PAE is earlier than 0:2.6.18-194.8.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:11556"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34131" version="1" comment="gdm is earlier than 1:2.6.0.5-7.rhel4.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14698"/>
      <state state_ref="oval:org.mitre.oval:ste:10035"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40063" version="1" comment="kernel-headers is earlier than 0:2.6.18-164.11.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:11375"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40057" version="1" comment="kernel-devel is earlier than 0:2.6.18-164.11.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:11375"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40053" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-89.0.20.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:11543"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40050" version="1" comment="kernel-kdump is earlier than 0:2.6.18-164.11.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:11375"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40039" version="1" comment="kernel-doc is earlier than 0:2.6.18-164.11.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:11375"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40029" version="1" comment="kernel-PAE is earlier than 0:2.6.18-164.11.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:11375"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40016" version="1" comment="kernel is earlier than 0:2.6.9-89.0.20.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:11543"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40011" version="1" comment="kernel-smp is earlier than 0:2.6.9-89.0.20.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:11543"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39984" version="1" comment="kernel-xenU is earlier than 0:2.6.9-89.0.20.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14301"/>
      <state state_ref="oval:org.mitre.oval:ste:11543"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39932" version="1" comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.20.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14060"/>
      <state state_ref="oval:org.mitre.oval:ste:11543"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39894" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.20.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:11543"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39873" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.20.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:11543"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39862" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-164.11.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:11375"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39858" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.20.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:11543"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39849" version="1" comment="kernel-debug-devel is earlier than 0:2.6.18-164.11.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15023"/>
      <state state_ref="oval:org.mitre.oval:ste:11375"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39833" version="1" comment="kernel-devel is earlier than 0:2.6.9-89.0.20.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:11543"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39703" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-164.11.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:11375"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39555" version="1" comment="kernel-doc is earlier than 0:2.6.9-89.0.20.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:11543"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39464" version="1" comment="kernel-debug is earlier than 0:2.6.18-164.11.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14957"/>
      <state state_ref="oval:org.mitre.oval:ste:11375"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39443" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-164.11.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:11375"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39325" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-89.0.20.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:11543"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39090" version="1" comment="kernel-xen is earlier than 0:2.6.18-164.11.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:11375"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39080" version="1" comment="kernel is earlier than 0:2.6.18-164.11.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:11375"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34213" version="1" comment="rh-postgresql-devel is earlier than 0:7.3.19-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14466"/>
      <state state_ref="oval:org.mitre.oval:ste:10349"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34206" version="1" comment="rh-postgresql-contrib is earlier than 0:7.3.19-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13927"/>
      <state state_ref="oval:org.mitre.oval:ste:10349"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34198" version="1" comment="rh-postgresql-python is earlier than 0:7.3.19-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14328"/>
      <state state_ref="oval:org.mitre.oval:ste:10349"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34194" version="1" comment="postgresql is earlier than 0:8.1.9-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14586"/>
      <state state_ref="oval:org.mitre.oval:ste:10535"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34192" version="1" comment="postgresql-tcl is earlier than 0:7.4.17-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14486"/>
      <state state_ref="oval:org.mitre.oval:ste:9537"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34174" version="1" comment="postgresql-devel is earlier than 0:8.1.9-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14290"/>
      <state state_ref="oval:org.mitre.oval:ste:10535"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34165" version="1" comment="postgresql-server is earlier than 0:8.1.9-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14158"/>
      <state state_ref="oval:org.mitre.oval:ste:10535"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34158" version="1" comment="postgresql-contrib is earlier than 0:8.1.9-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14293"/>
      <state state_ref="oval:org.mitre.oval:ste:10535"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34148" version="1" comment="postgresql-docs is earlier than 0:7.4.17-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14365"/>
      <state state_ref="oval:org.mitre.oval:ste:9537"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34119" version="1" comment="postgresql-tcl is earlier than 0:8.1.9-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14486"/>
      <state state_ref="oval:org.mitre.oval:ste:10535"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34102" version="1" comment="rh-postgresql is earlier than 0:7.3.19-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14320"/>
      <state state_ref="oval:org.mitre.oval:ste:10349"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34094" version="1" comment="postgresql-pl is earlier than 0:7.4.17-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14537"/>
      <state state_ref="oval:org.mitre.oval:ste:9537"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34088" version="1" comment="rh-postgresql-jdbc is earlier than 0:7.3.19-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14295"/>
      <state state_ref="oval:org.mitre.oval:ste:10349"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34087" version="1" comment="rh-postgresql-pl is earlier than 0:7.3.19-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14453"/>
      <state state_ref="oval:org.mitre.oval:ste:10349"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34083" version="1" comment="postgresql-devel is earlier than 0:7.4.17-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14290"/>
      <state state_ref="oval:org.mitre.oval:ste:9537"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34009" version="1" comment="postgresql-contrib is earlier than 0:7.4.17-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14293"/>
      <state state_ref="oval:org.mitre.oval:ste:9537"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33910" version="1" comment="rh-postgresql-docs is earlier than 0:7.3.19-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13876"/>
      <state state_ref="oval:org.mitre.oval:ste:10349"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33898" version="1" comment="postgresql-libs is earlier than 0:8.1.9-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14383"/>
      <state state_ref="oval:org.mitre.oval:ste:10535"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33888" version="1" comment="rh-postgresql-test is earlier than 0:7.3.19-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14347"/>
      <state state_ref="oval:org.mitre.oval:ste:10349"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33870" version="1" comment="postgresql-pl is earlier than 0:8.1.9-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14537"/>
      <state state_ref="oval:org.mitre.oval:ste:10535"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33849" version="1" comment="postgresql-python is earlier than 0:7.4.17-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14546"/>
      <state state_ref="oval:org.mitre.oval:ste:9537"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33825" version="1" comment="postgresql-server is earlier than 0:7.4.17-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14158"/>
      <state state_ref="oval:org.mitre.oval:ste:9537"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33803" version="1" comment="postgresql-test is earlier than 0:7.4.17-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14367"/>
      <state state_ref="oval:org.mitre.oval:ste:9537"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33802" version="1" comment="postgresql is earlier than 0:7.4.17-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14586"/>
      <state state_ref="oval:org.mitre.oval:ste:9537"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33800" version="1" comment="rh-postgresql-libs is earlier than 0:7.3.19-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14436"/>
      <state state_ref="oval:org.mitre.oval:ste:10349"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33794" version="1" comment="postgresql-libs is earlier than 0:7.4.17-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14383"/>
      <state state_ref="oval:org.mitre.oval:ste:9537"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33763" version="1" comment="postgresql-python is earlier than 0:8.1.9-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14546"/>
      <state state_ref="oval:org.mitre.oval:ste:10535"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33753" version="1" comment="postgresql-jdbc is earlier than 0:7.4.17-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14547"/>
      <state state_ref="oval:org.mitre.oval:ste:9537"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33565" version="1" comment="postgresql-docs is earlier than 0:8.1.9-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14365"/>
      <state state_ref="oval:org.mitre.oval:ste:10535"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33555" version="1" comment="postgresql-test is earlier than 0:8.1.9-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14367"/>
      <state state_ref="oval:org.mitre.oval:ste:10535"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33483" version="1" comment="rh-postgresql-server is earlier than 0:7.3.19-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14152"/>
      <state state_ref="oval:org.mitre.oval:ste:10349"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33360" version="1" comment="rh-postgresql-tcl is earlier than 0:7.3.19-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13874"/>
      <state state_ref="oval:org.mitre.oval:ste:10349"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:3094" version="1" comment="Patch Q327696 Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1759"/>
      <state state_ref="oval:org.mitre.oval:ste:2899"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3093" version="1" comment="Patch Q811114 Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1758"/>
      <state state_ref="oval:org.mitre.oval:ste:2898"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3081" version="1" comment="IIS major version equals 5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1754"/>
      <state state_ref="oval:org.mitre.oval:ste:2886"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:1357" version="1" comment="IIS 5.1 Minor Version" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:938"/>
      <state state_ref="oval:org.mitre.oval:ste:1219"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1356" version="2" check="at least one" comment="File %windir%\System32\w3svc.dll is less than 5.1.2600.1125" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:496"/>
      <state state_ref="oval:org.mitre.oval:ste:1218"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32661" version="1" comment="gnupg is earlier than 0:1.2.1-16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13847"/>
      <state state_ref="oval:org.mitre.oval:ste:10214"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31825" version="1" comment="gnupg is earlier than 0:1.2.6-5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13847"/>
      <state state_ref="oval:org.mitre.oval:ste:10181"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40361" version="1" comment="openssl-devel is earlier than 0:0.9.8e-12.el5_4.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13920"/>
      <state state_ref="oval:org.mitre.oval:ste:10873"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40358" version="1" comment="openssl-devel is earlier than 0:0.9.7a-43.17.el4_8.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13920"/>
      <state state_ref="oval:org.mitre.oval:ste:11430"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40356" version="1" comment="nss-tools is earlier than 0:3.12.6-1.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15090"/>
      <state state_ref="oval:org.mitre.oval:ste:11295"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40347" version="1" comment="nss is earlier than 0:3.12.6-1.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14917"/>
      <state state_ref="oval:org.mitre.oval:ste:11295"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40339" version="1" comment="nspr-devel is earlier than 0:4.8.4-1.1.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15145"/>
      <state state_ref="oval:org.mitre.oval:ste:11429"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40338" version="1" comment="nspr is earlier than 0:4.8.4-1.1.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14745"/>
      <state state_ref="oval:org.mitre.oval:ste:11429"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40271" version="1" comment="openssl-devel is earlier than 0:0.9.7a-33.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13920"/>
      <state state_ref="oval:org.mitre.oval:ste:11211"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40268" version="1" comment="gnutls is earlier than 0:1.4.1-3.el5_4.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14386"/>
      <state state_ref="oval:org.mitre.oval:ste:11051"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40261" version="1" comment="openssl is earlier than 0:0.9.7a-33.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13882"/>
      <state state_ref="oval:org.mitre.oval:ste:11211"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40254" version="1" comment="nss-pkcs11-devel is earlier than 0:3.12.6-1.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14171"/>
      <state state_ref="oval:org.mitre.oval:ste:10963"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40244" version="1" comment="nspr-devel is earlier than 0:4.8.4-1.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15145"/>
      <state state_ref="oval:org.mitre.oval:ste:11217"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40233" version="1" comment="gnutls-devel is earlier than 0:1.0.20-4.el4_8.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14558"/>
      <state state_ref="oval:org.mitre.oval:ste:11560"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40177" version="1" comment="nss-devel is earlier than 0:3.12.6-1.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14656"/>
      <state state_ref="oval:org.mitre.oval:ste:10963"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40162" version="1" comment="gnutls-devel is earlier than 0:1.4.1-3.el5_4.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14558"/>
      <state state_ref="oval:org.mitre.oval:ste:11051"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40109" version="1" comment="nss-devel is earlier than 0:3.12.6-1.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14656"/>
      <state state_ref="oval:org.mitre.oval:ste:11295"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40102" version="1" comment="openssl is earlier than 0:0.9.8e-12.el5_4.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13882"/>
      <state state_ref="oval:org.mitre.oval:ste:10873"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40073" version="1" comment="gnutls-utils is earlier than 0:1.4.1-3.el5_4.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15003"/>
      <state state_ref="oval:org.mitre.oval:ste:11051"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40028" version="1" comment="openssl-perl is earlier than 0:0.9.7a-33.26" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14122"/>
      <state state_ref="oval:org.mitre.oval:ste:11211"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39971" version="1" comment="gnutls is earlier than 0:1.0.20-4.el4_8.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14386"/>
      <state state_ref="oval:org.mitre.oval:ste:11560"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39952" version="1" comment="openssl-perl is earlier than 0:0.9.8e-12.el5_4.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14122"/>
      <state state_ref="oval:org.mitre.oval:ste:10873"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39943" version="1" comment="openssl is earlier than 0:0.9.7a-43.17.el4_8.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13882"/>
      <state state_ref="oval:org.mitre.oval:ste:11430"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39906" version="1" comment="nss is earlier than 0:3.12.6-1.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14917"/>
      <state state_ref="oval:org.mitre.oval:ste:10963"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39887" version="1" comment="openssl097a is earlier than 0:0.9.7a-9.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14181"/>
      <state state_ref="oval:org.mitre.oval:ste:11554"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39782" version="1" comment="nss-tools is earlier than 0:3.12.6-1.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15090"/>
      <state state_ref="oval:org.mitre.oval:ste:10963"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39756" version="1" comment="httpd is earlier than 0:2.2.3-31.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:11348"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39739" version="1" comment="openssl-perl is earlier than 0:0.9.7a-43.17.el4_8.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14122"/>
      <state state_ref="oval:org.mitre.oval:ste:11430"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39716" version="1" comment="mod_ssl is earlier than 0:2.0.52-41.ent.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:10644"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39712" version="1" comment="nspr is earlier than 0:4.8.4-1.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14745"/>
      <state state_ref="oval:org.mitre.oval:ste:11217"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39671" version="1" comment="mod_ssl is earlier than 0:2.0.46-77.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:11195"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39640" version="1" comment="httpd-devel is earlier than 0:2.2.3-31.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:11348"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39637" version="1" comment="httpd-devel is earlier than 0:2.0.46-77.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:11195"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39613" version="1" comment="mod_ssl is earlier than 0:2.2.3-31.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:11348"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39611" version="1" comment="httpd is earlier than 0:2.0.46-77.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:11195"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39551" version="1" comment="httpd is earlier than 0:2.0.52-41.ent.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:10644"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39501" version="1" comment="httpd-manual is earlier than 0:2.0.52-41.ent.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14457"/>
      <state state_ref="oval:org.mitre.oval:ste:10644"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39448" version="1" comment="httpd-suexec is earlier than 0:2.0.52-41.ent.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14611"/>
      <state state_ref="oval:org.mitre.oval:ste:10644"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39267" version="1" comment="httpd-manual is earlier than 0:2.2.3-31.el5_4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14457"/>
      <state state_ref="oval:org.mitre.oval:ste:11348"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38802" version="1" comment="httpd-devel is earlier than 0:2.0.52-41.ent.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:10644"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37363" version="1" comment="thunderbird is earlier than 0:2.0.0.16-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:10685"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37351" version="1" comment="xulrunner-devel is earlier than 0:1.9-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15100"/>
      <state state_ref="oval:org.mitre.oval:ste:10509"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37331" version="1" comment="seamonkey is earlier than 0:1.0.9-16.3.el4_6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10946"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37320" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-16.3.el4_6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:10946"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37291" version="1" comment="yelp is earlier than 0:2.16.0-19.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14764"/>
      <state state_ref="oval:org.mitre.oval:ste:10908"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37286" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-0.20.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:10940"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37279" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-0.20.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10940"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37274" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-16.3.el4_6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10946"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37271" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.20.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:10940"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37236" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-16.3.el4_6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:10946"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37234" version="1" comment="devhelp is earlier than 0:0.12-17.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14497"/>
      <state state_ref="oval:org.mitre.oval:ste:10950"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37226" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-16.3.el4_6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10946"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37192" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-16.3.el4_6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10946"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37189" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-0.20.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10940"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37174" version="1" comment="firefox is earlier than 0:1.5.0.12-0.19.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10269"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37126" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.20.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:10940"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37107" version="1" comment="devhelp-devel is earlier than 0:0.12-17.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14520"/>
      <state state_ref="oval:org.mitre.oval:ste:10950"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37105" version="1" comment="seamonkey is earlier than 0:1.0.9-0.20.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10940"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37060" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-0.20.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10940"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37033" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.20.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10940"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36999" version="1" comment="thunderbird is earlier than 0:1.5.0.12-14.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:11067"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36984" version="1" comment="xulrunner is earlier than 0:1.9-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15057"/>
      <state state_ref="oval:org.mitre.oval:ste:10509"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36916" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-0.20.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:10940"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36886" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-16.3.el4_6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:10946"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36826" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-16.3.el4_6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10946"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36814" version="1" comment="firefox is earlier than 0:3.0-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10704"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36766" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-16.3.el4_6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10946"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36476" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.20.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10940"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36436" version="1" comment="xulrunner-devel-unstable is earlier than 0:1.9-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15048"/>
      <state state_ref="oval:org.mitre.oval:ste:10509"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36365" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-16.3.el4_6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:10946"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36593" version="1" comment="cups-lpd is earlier than 1:1.2.4-11.14.el5_1.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14688"/>
      <state state_ref="oval:org.mitre.oval:ste:9925"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36567" version="1" comment="cups-libs is earlier than 1:1.2.4-11.14.el5_1.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:9925"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36521" version="1" comment="cups-devel is earlier than 1:1.2.4-11.14.el5_1.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:9925"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36179" version="1" comment="cups is earlier than 1:1.2.4-11.14.el5_1.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:9925"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30788" version="1" comment="libpng is earlier than 2:1.2.2-25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14194"/>
      <state state_ref="oval:org.mitre.oval:ste:9381"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30512" version="1" comment="libpng10 is earlier than 0:1.0.13-15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14370"/>
      <state state_ref="oval:org.mitre.oval:ste:9374"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30405" version="1" comment="libpng-devel is earlier than 2:1.2.2-25" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14221"/>
      <state state_ref="oval:org.mitre.oval:ste:9381"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29821" version="1" comment="libpng10-devel is earlier than 0:1.0.13-15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13985"/>
      <state state_ref="oval:org.mitre.oval:ste:9374"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39469" version="1" comment="cyrus-imapd is earlier than 0:2.3.7-7.el5_4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14534"/>
      <state state_ref="oval:org.mitre.oval:ste:11084"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39418" version="1" comment="cyrus-imapd-utils is earlier than 0:2.3.7-7.el5_4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14555"/>
      <state state_ref="oval:org.mitre.oval:ste:11084"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39412" version="1" comment="cyrus-imapd-perl is earlier than 0:2.3.7-7.el5_4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14774"/>
      <state state_ref="oval:org.mitre.oval:ste:11084"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39405" version="1" comment="cyrus-imapd-nntp is earlier than 0:2.2.12-10.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14271"/>
      <state state_ref="oval:org.mitre.oval:ste:11250"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39259" version="1" comment="cyrus-imapd-utils is earlier than 0:2.2.12-10.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14555"/>
      <state state_ref="oval:org.mitre.oval:ste:11250"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39219" version="1" comment="cyrus-imapd-devel is earlier than 0:2.3.7-7.el5_4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14695"/>
      <state state_ref="oval:org.mitre.oval:ste:11084"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39197" version="1" comment="perl-Cyrus is earlier than 0:2.2.12-10.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14532"/>
      <state state_ref="oval:org.mitre.oval:ste:11250"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39051" version="1" comment="cyrus-imapd is earlier than 0:2.2.12-10.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14534"/>
      <state state_ref="oval:org.mitre.oval:ste:11250"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39014" version="1" comment="cyrus-imapd-devel is earlier than 0:2.2.12-10.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14695"/>
      <state state_ref="oval:org.mitre.oval:ste:11250"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38953" version="1" comment="cyrus-imapd-murder is earlier than 0:2.2.12-10.el4_8.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14681"/>
      <state state_ref="oval:org.mitre.oval:ste:11250"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38514" version="1" comment="evolution-data-server-devel is earlier than 0:1.12.3-10.el5_3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14847"/>
      <state state_ref="oval:org.mitre.oval:ste:10797"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38489" version="1" comment="evolution is earlier than 0:2.0.2-41.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14477"/>
      <state state_ref="oval:org.mitre.oval:ste:10504"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38477" version="1" comment="evolution-data-server is earlier than 0:1.0.2-14.el4_7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14939"/>
      <state state_ref="oval:org.mitre.oval:ste:11180"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38464" version="1" comment="evolution-data-server-devel is earlier than 0:1.0.2-14.el4_7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14847"/>
      <state state_ref="oval:org.mitre.oval:ste:11180"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38422" version="1" comment="evolution-devel is earlier than 0:1.4.5-25.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14585"/>
      <state state_ref="oval:org.mitre.oval:ste:11151"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38285" version="1" comment="evolution is earlier than 0:1.4.5-25.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14477"/>
      <state state_ref="oval:org.mitre.oval:ste:11151"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38193" version="1" comment="evolution28-evolution-data-server is earlier than 0:1.8.0-37.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15151"/>
      <state state_ref="oval:org.mitre.oval:ste:10850"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38140" version="1" comment="evolution28-evolution-data-server-devel is earlier than 0:1.8.0-37.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14267"/>
      <state state_ref="oval:org.mitre.oval:ste:10850"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38059" version="1" comment="evolution-devel is earlier than 0:2.0.2-41.el4_7.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14585"/>
      <state state_ref="oval:org.mitre.oval:ste:10504"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37983" version="1" comment="evolution-data-server is earlier than 0:1.12.3-10.el5_3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14939"/>
      <state state_ref="oval:org.mitre.oval:ste:10797"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37891" version="1" comment="evolution-data-server-doc is earlier than 0:1.12.3-10.el5_3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15054"/>
      <state state_ref="oval:org.mitre.oval:ste:10797"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37328" version="1" comment="php-snmp is earlier than 0:5.1.6-20.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14508"/>
      <state state_ref="oval:org.mitre.oval:ste:10864"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37319" version="1" comment="php-odbc is earlier than 0:4.3.9-3.22.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:10888"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37302" version="1" comment="php-xmlrpc is earlier than 0:4.3.9-3.22.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14445"/>
      <state state_ref="oval:org.mitre.oval:ste:10888"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37283" version="1" comment="php-ncurses is earlier than 0:5.1.6-20.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14227"/>
      <state state_ref="oval:org.mitre.oval:ste:10864"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37282" version="1" comment="php-mbstring is earlier than 0:5.1.6-20.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13746"/>
      <state state_ref="oval:org.mitre.oval:ste:10864"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37280" version="1" comment="php-imap is earlier than 0:4.3.2-48.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:10636"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37269" version="1" comment="php-snmp is earlier than 0:4.3.9-3.22.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14508"/>
      <state state_ref="oval:org.mitre.oval:ste:10888"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37260" version="1" comment="php is earlier than 0:5.1.6-20.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:10864"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37255" version="1" comment="php-devel is earlier than 0:4.3.2-48.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:10636"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37254" version="1" comment="php-ldap is earlier than 0:4.3.2-48.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:10636"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37239" version="1" comment="php-devel is earlier than 0:4.3.9-3.22.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:10888"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37223" version="1" comment="php-pear is earlier than 0:4.3.9-3.22.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14130"/>
      <state state_ref="oval:org.mitre.oval:ste:10888"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37204" version="1" comment="php-imap is earlier than 0:5.1.6-20.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:10864"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37202" version="1" comment="php-pgsql is earlier than 0:4.3.9-3.22.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:10888"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37185" version="1" comment="php is earlier than 0:4.3.2-48.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:10636"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37179" version="1" comment="php-mysql is earlier than 0:5.1.6-20.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:10864"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37165" version="1" comment="php-cli is earlier than 0:5.1.6-20.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14922"/>
      <state state_ref="oval:org.mitre.oval:ste:10864"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37155" version="1" comment="php-imap is earlier than 0:4.3.9-3.22.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:10888"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37146" version="1" comment="php-common is earlier than 0:5.1.6-20.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14841"/>
      <state state_ref="oval:org.mitre.oval:ste:10864"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37144" version="1" comment="php-dba is earlier than 0:5.1.6-20.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14512"/>
      <state state_ref="oval:org.mitre.oval:ste:10864"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37143" version="1" comment="php-gd is earlier than 0:4.3.9-3.22.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14335"/>
      <state state_ref="oval:org.mitre.oval:ste:10888"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37138" version="1" comment="php-soap is earlier than 0:5.1.6-20.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14366"/>
      <state state_ref="oval:org.mitre.oval:ste:10864"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37127" version="1" comment="php-devel is earlier than 0:5.1.6-20.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:10864"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37125" version="1" comment="php-mbstring is earlier than 0:4.3.9-3.22.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13746"/>
      <state state_ref="oval:org.mitre.oval:ste:10888"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37118" version="1" comment="php-odbc is earlier than 0:5.1.6-20.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:10864"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37114" version="1" comment="php-xml is earlier than 0:5.1.6-20.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14560"/>
      <state state_ref="oval:org.mitre.oval:ste:10864"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37113" version="1" comment="php-ncurses is earlier than 0:4.3.9-3.22.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14227"/>
      <state state_ref="oval:org.mitre.oval:ste:10888"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37086" version="1" comment="php-xmlrpc is earlier than 0:5.1.6-20.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14445"/>
      <state state_ref="oval:org.mitre.oval:ste:10864"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37036" version="1" comment="php-pdo is earlier than 0:5.1.6-20.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14154"/>
      <state state_ref="oval:org.mitre.oval:ste:10864"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37010" version="1" comment="php-ldap is earlier than 0:4.3.9-3.22.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:10888"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36983" version="1" comment="php-pgsql is earlier than 0:4.3.2-48.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:10636"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36955" version="1" comment="php-gd is earlier than 0:5.1.6-20.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14335"/>
      <state state_ref="oval:org.mitre.oval:ste:10864"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36927" version="1" comment="php-bcmath is earlier than 0:5.1.6-20.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14639"/>
      <state state_ref="oval:org.mitre.oval:ste:10864"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36878" version="1" comment="php-pgsql is earlier than 0:5.1.6-20.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:10864"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36854" version="1" comment="php-mysql is earlier than 0:4.3.9-3.22.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:10888"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36781" version="1" comment="php is earlier than 0:4.3.9-3.22.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:10888"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36771" version="1" comment="php-domxml is earlier than 0:4.3.9-3.22.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14496"/>
      <state state_ref="oval:org.mitre.oval:ste:10888"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36761" version="1" comment="php-mysql is earlier than 0:4.3.2-48.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:10636"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36634" version="1" comment="php-ldap is earlier than 0:5.1.6-20.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:10864"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36584" version="1" comment="php-odbc is earlier than 0:4.3.2-48.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:10636"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38620" version="1" comment="openswan-doc is earlier than 0:2.6.14-1.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15278"/>
      <state state_ref="oval:org.mitre.oval:ste:11148"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38176" version="1" comment="openswan is earlier than 0:2.6.14-1.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14994"/>
      <state state_ref="oval:org.mitre.oval:ste:11148"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35173" version="1" comment="tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.3.0.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14662"/>
      <state state_ref="oval:org.mitre.oval:ste:10086"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35160" version="1" comment="tomcat5-jasper is earlier than 0:5.5.23-0jpp.3.0.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14210"/>
      <state state_ref="oval:org.mitre.oval:ste:10086"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35076" version="1" comment="tomcat5-webapps is earlier than 0:5.5.23-0jpp.3.0.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14332"/>
      <state state_ref="oval:org.mitre.oval:ste:10086"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35047" version="1" comment="tomcat5-server-lib is earlier than 0:5.5.23-0jpp.3.0.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14509"/>
      <state state_ref="oval:org.mitre.oval:ste:10086"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35009" version="1" comment="tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.3.0.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14622"/>
      <state state_ref="oval:org.mitre.oval:ste:10086"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35000" version="1" comment="tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.3.0.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14808"/>
      <state state_ref="oval:org.mitre.oval:ste:10086"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34953" version="1" comment="tomcat5-common-lib is earlier than 0:5.5.23-0jpp.3.0.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14815"/>
      <state state_ref="oval:org.mitre.oval:ste:10086"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34950" version="1" comment="tomcat5 is earlier than 0:5.5.23-0jpp.3.0.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14612"/>
      <state state_ref="oval:org.mitre.oval:ste:10086"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34843" version="1" comment="tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.3.0.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14685"/>
      <state state_ref="oval:org.mitre.oval:ste:10086"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34831" version="1" comment="tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.3.0.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14750"/>
      <state state_ref="oval:org.mitre.oval:ste:10086"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34829" version="1" comment="tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.3.0.2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14686"/>
      <state state_ref="oval:org.mitre.oval:ste:10086"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38760" version="1" comment="poppler is earlier than 0:0.5.4-4.4.el5_3.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14394"/>
      <state state_ref="oval:org.mitre.oval:ste:10725"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38649" version="1" comment="xpdf is earlier than 1:3.00-20.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14398"/>
      <state state_ref="oval:org.mitre.oval:ste:10998"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38618" version="1" comment="kdegraphics-devel is earlier than 7:3.5.4-12.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14596"/>
      <state state_ref="oval:org.mitre.oval:ste:11260"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38607" version="1" comment="cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:11192"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38541" version="1" comment="cups-libs is earlier than 1:1.3.7-8.el5_3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:11099"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38512" version="1" comment="poppler-utils is earlier than 0:0.5.4-4.4.el5_3.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14640"/>
      <state state_ref="oval:org.mitre.oval:ste:10725"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38500" version="1" comment="poppler-devel is earlier than 0:0.5.4-4.4.el5_3.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14966"/>
      <state state_ref="oval:org.mitre.oval:ste:10725"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38481" version="1" comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:11192"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38471" version="1" comment="cups-lpd is earlier than 1:1.3.7-8.el5_3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14688"/>
      <state state_ref="oval:org.mitre.oval:ste:11099"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38436" version="1" comment="gpdf is earlier than 0:2.8.2-7.7.2.el4_7.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14337"/>
      <state state_ref="oval:org.mitre.oval:ste:10942"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38334" version="1" comment="cups is earlier than 1:1.3.7-8.el5_3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:11099"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38322" version="1" comment="xpdf is earlier than 1:2.02-14.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14398"/>
      <state state_ref="oval:org.mitre.oval:ste:11207"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38271" version="1" comment="kdegraphics is earlier than 7:3.5.4-12.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14241"/>
      <state state_ref="oval:org.mitre.oval:ste:11260"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38230" version="1" comment="kdegraphics is earlier than 7:3.3.1-13.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14241"/>
      <state state_ref="oval:org.mitre.oval:ste:11142"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38145" version="1" comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:11192"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38126" version="1" comment="kdegraphics-devel is earlier than 7:3.3.1-13.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14596"/>
      <state state_ref="oval:org.mitre.oval:ste:11142"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37935" version="1" comment="cups-devel is earlier than 1:1.3.7-8.el5_3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:11099"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36284" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-0.9.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10198"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36281" version="1" comment="firefox-devel is earlier than 0:1.5.0.12-9.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14876"/>
      <state state_ref="oval:org.mitre.oval:ste:10605"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36279" version="1" comment="seamonkey is earlier than 0:1.0.9-0.9.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10198"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36256" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-0.9.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:10198"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36236" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.9.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10198"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36203" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-9.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10809"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36202" version="1" comment="thunderbird is earlier than 0:1.5.0.12-8.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:10227"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36193" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-9.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:10809"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36164" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-9.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:10809"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36141" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-9.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10809"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36093" version="1" comment="seamonkey is earlier than 0:1.0.9-9.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10809"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36053" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-9.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:10809"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36052" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-0.9.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10198"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36050" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-9.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10809"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36046" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.9.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:10198"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36034" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-0.9.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10198"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35996" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.9.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:10198"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35994" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-0.9.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:10198"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35919" version="1" comment="firefox is earlier than 0:1.5.0.12-0.10.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10810"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35748" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.9.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10198"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35684" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-9.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10809"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35675" version="1" comment="thunderbird is earlier than 0:1.5.0.12-8.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:10659"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35600" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-9.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10809"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35480" version="1" comment="firefox is earlier than 0:1.5.0.12-9.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10605"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35397" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-9.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:10809"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32341" version="1" comment="ethereal-gnome is earlier than 0:0.10.13-1.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14338"/>
      <state state_ref="oval:org.mitre.oval:ste:10094"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32202" version="1" comment="ethereal is earlier than 0:0.10.13-1.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14030"/>
      <state state_ref="oval:org.mitre.oval:ste:10094"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32189" version="1" comment="ethereal-gnome is earlier than 0:0.10.13-1.EL3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14338"/>
      <state state_ref="oval:org.mitre.oval:ste:10034"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32138" version="1" comment="ethereal is earlier than 0:0.10.13-1.EL3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14030"/>
      <state state_ref="oval:org.mitre.oval:ste:10034"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39037" version="1" comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.2.b09.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14925"/>
      <state state_ref="oval:org.mitre.oval:ste:10397"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38972" version="1" comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.2.b09.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15114"/>
      <state state_ref="oval:org.mitre.oval:ste:10397"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38942" version="1" comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.2.b09.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15274"/>
      <state state_ref="oval:org.mitre.oval:ste:10397"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38825" version="1" comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.2.b09.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14889"/>
      <state state_ref="oval:org.mitre.oval:ste:10397"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38267" version="1" comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.2.b09.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14531"/>
      <state state_ref="oval:org.mitre.oval:ste:10397"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39056" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-128.4.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:11043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39009" version="1" comment="kernel-PAE is earlier than 0:2.6.18-128.4.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:11043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38991" version="1" comment="kernel is earlier than 0:2.6.18-128.4.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:11043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38983" version="1" comment="kernel-doc is earlier than 0:2.6.18-128.4.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:11043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38969" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-128.4.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:11043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38948" version="1" comment="kernel-headers is earlier than 0:2.6.18-128.4.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:11043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38883" version="1" comment="kernel-xen is earlier than 0:2.6.18-128.4.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:11043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38817" version="1" comment="kernel-devel is earlier than 0:2.6.18-128.4.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:11043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38732" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-128.4.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:11043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38672" version="1" comment="kernel-debug-devel is earlier than 0:2.6.18-128.4.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15023"/>
      <state state_ref="oval:org.mitre.oval:ste:11043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38668" version="1" comment="kernel-debug is earlier than 0:2.6.18-128.4.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14957"/>
      <state state_ref="oval:org.mitre.oval:ste:11043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38128" version="1" comment="kernel-kdump is earlier than 0:2.6.18-128.4.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:11043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31854" version="1" comment="squid is earlier than 7:2.5.STABLE6-3.4E.9" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14403"/>
      <state state_ref="oval:org.mitre.oval:ste:9088"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31246" version="1" comment="squid is earlier than 7:2.5.STABLE3-6.3E.13" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14403"/>
      <state state_ref="oval:org.mitre.oval:ste:9804"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30480" version="1" comment="cvs is earlier than 0:1.11.2-24" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14275"/>
      <state state_ref="oval:org.mitre.oval:ste:9757"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38743" version="1" comment="cscope is earlier than 0:15.5-16.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14970"/>
      <state state_ref="oval:org.mitre.oval:ste:11220"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38706" version="1" comment="cscope is earlier than 0:15.5-15.1.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14970"/>
      <state state_ref="oval:org.mitre.oval:ste:11261"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38662" version="1" comment="cscope is earlier than 0:15.5-10.RHEL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14970"/>
      <state state_ref="oval:org.mitre.oval:ste:11085"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40444" version="1" comment="tetex-latex is earlier than 0:3.0-33.8.el5_5.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13878"/>
      <state state_ref="oval:org.mitre.oval:ste:11431"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40413" version="1" comment="tetex is earlier than 0:3.0-33.8.el5_5.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14329"/>
      <state state_ref="oval:org.mitre.oval:ste:11431"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40398" version="1" comment="tetex-doc is earlier than 0:3.0-33.8.el5_5.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14554"/>
      <state state_ref="oval:org.mitre.oval:ste:11431"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40312" version="1" comment="tetex-dvips is earlier than 0:3.0-33.8.el5_5.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14207"/>
      <state state_ref="oval:org.mitre.oval:ste:11431"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40122" version="1" comment="tetex-fonts is earlier than 0:3.0-33.8.el5_5.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14502"/>
      <state state_ref="oval:org.mitre.oval:ste:11431"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40008" version="1" comment="tetex-afm is earlier than 0:3.0-33.8.el5_5.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14389"/>
      <state state_ref="oval:org.mitre.oval:ste:11431"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39920" version="1" comment="tetex-xdvi is earlier than 0:3.0-33.8.el5_5.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14182"/>
      <state state_ref="oval:org.mitre.oval:ste:11431"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37759" version="1" comment="bzip2 is earlier than 0:1.0.2-14.el4_7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14678"/>
      <state state_ref="oval:org.mitre.oval:ste:10874"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37740" version="1" comment="bzip2-libs is earlier than 0:1.0.3-4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14666"/>
      <state state_ref="oval:org.mitre.oval:ste:10497"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37643" version="1" comment="bzip2-libs is earlier than 0:1.0.2-14.el4_7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14666"/>
      <state state_ref="oval:org.mitre.oval:ste:10874"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37601" version="1" comment="bzip2 is earlier than 0:1.0.2-12.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14678"/>
      <state state_ref="oval:org.mitre.oval:ste:10362"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37592" version="1" comment="bzip2-devel is earlier than 0:1.0.2-12.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14253"/>
      <state state_ref="oval:org.mitre.oval:ste:10362"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37480" version="1" comment="bzip2-devel is earlier than 0:1.0.2-14.el4_7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14253"/>
      <state state_ref="oval:org.mitre.oval:ste:10874"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37448" version="1" comment="bzip2-libs is earlier than 0:1.0.2-12.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14666"/>
      <state state_ref="oval:org.mitre.oval:ste:10362"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37205" version="1" comment="bzip2-devel is earlier than 0:1.0.3-4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14253"/>
      <state state_ref="oval:org.mitre.oval:ste:10497"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37051" version="1" comment="bzip2 is earlier than 0:1.0.3-4.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14678"/>
      <state state_ref="oval:org.mitre.oval:ste:10497"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34446" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10044"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34445" version="1" comment="firefox-devel is earlier than 0:1.5.0.12-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14876"/>
      <state state_ref="oval:org.mitre.oval:ste:10301"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34432" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:10536"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34409" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:10536"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34371" version="1" comment="firefox is earlier than 0:1.5.0.12-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:9665"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34366" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:10044"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34334" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:10044"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34331" version="1" comment="thunderbird is earlier than 0:1.5.0.12-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:9665"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34323" version="1" comment="devhelp-devel is earlier than 0:0.12-11.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14520"/>
      <state state_ref="oval:org.mitre.oval:ste:10442"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34322" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10044"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34313" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10536"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34293" version="1" comment="devhelp is earlier than 0:0.10-0.8.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14497"/>
      <state state_ref="oval:org.mitre.oval:ste:10032"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34281" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10536"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34262" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10044"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34257" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10536"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34249" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:10044"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34228" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:10536"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34204" version="1" comment="devhelp is earlier than 0:0.12-11.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14497"/>
      <state state_ref="oval:org.mitre.oval:ste:10442"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34162" version="1" comment="firefox is earlier than 0:1.5.0.12-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10301"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34021" version="1" comment="seamonkey is earlier than 0:1.0.9-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10044"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33994" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10044"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33988" version="1" comment="seamonkey is earlier than 0:1.0.9-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10536"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33979" version="1" comment="thunderbird is earlier than 0:1.5.0.12-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:10301"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33931" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:10044"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33894" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10536"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33844" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10044"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33721" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:10536"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33693" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-0.1.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10536"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33625" version="1" comment="devhelp-devel is earlier than 0:0.10-0.8.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14520"/>
      <state state_ref="oval:org.mitre.oval:ste:10032"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33445" version="1" comment="yelp is earlier than 0:2.16.0-15.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14764"/>
      <state state_ref="oval:org.mitre.oval:ste:10390"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36731" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-67.0.15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:9953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36702" version="1" comment="kernel-xenU-devel is earlier than 0:2.6.9-67.0.15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14060"/>
      <state state_ref="oval:org.mitre.oval:ste:9953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36615" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-67.0.15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:9953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36612" version="1" comment="kernel-doc is earlier than 0:2.4.21-57.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10799"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36600" version="1" comment="kernel-debug is earlier than 0:2.6.18-53.1.19.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14957"/>
      <state state_ref="oval:org.mitre.oval:ste:10855"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36597" version="1" comment="kernel-source is earlier than 0:2.4.21-57.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14186"/>
      <state state_ref="oval:org.mitre.oval:ste:10799"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36560" version="1" comment="kernel-debuginfo-common is earlier than 0:2.6.18-53.1.19.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14853"/>
      <state state_ref="oval:org.mitre.oval:ste:10855"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36534" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-67.0.15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:9953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36532" version="1" comment="kernel-PAE is earlier than 0:2.6.18-53.1.19.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:10855"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36529" version="1" comment="kernel-xen is earlier than 0:2.6.18-53.1.19.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:10855"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36526" version="1" comment="kernel-headers is earlier than 0:2.6.18-53.1.19.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:10855"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36518" version="1" comment="kernel is earlier than 0:2.4.21-57.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10799"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36513" version="1" comment="kernel-smp-unsupported is earlier than 0:2.4.21-57.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14218"/>
      <state state_ref="oval:org.mitre.oval:ste:10799"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36490" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-67.0.15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:9953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36480" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-53.1.19.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:10855"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36463" version="1" comment="kernel is earlier than 0:2.6.18-53.1.19.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10855"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36442" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-53.1.19.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:10855"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36373" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-67.0.15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:9953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36370" version="1" comment="kernel is earlier than 0:2.6.9-67.0.15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:9953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36278" version="1" comment="kernel-debug-devel is earlier than 0:2.6.18-53.1.19.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15023"/>
      <state state_ref="oval:org.mitre.oval:ste:10855"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36264" version="1" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-57.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14372"/>
      <state state_ref="oval:org.mitre.oval:ste:10799"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36249" version="1" comment="kernel-doc is earlier than 0:2.6.9-67.0.15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:9953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36238" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-53.1.19.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:10855"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36201" version="1" comment="kernel-xenU is earlier than 0:2.6.9-67.0.15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14301"/>
      <state state_ref="oval:org.mitre.oval:ste:9953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36171" version="1" comment="kernel-smp is earlier than 0:2.4.21-57.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:10799"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36161" version="1" comment="kernel-hugemem is earlier than 0:2.4.21-57.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:10799"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36107" version="1" comment="kernel-kdump is earlier than 0:2.6.18-53.1.19.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:10855"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35915" version="1" comment="kernel-BOOT is earlier than 0:2.4.21-57.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14219"/>
      <state state_ref="oval:org.mitre.oval:ste:10799"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35876" version="1" comment="kernel-devel is earlier than 0:2.6.18-53.1.19.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10855"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35794" version="1" comment="kernel-unsupported is earlier than 0:2.4.21-57.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14229"/>
      <state state_ref="oval:org.mitre.oval:ste:10799"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35738" version="1" comment="kernel-devel is earlier than 0:2.6.9-67.0.15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:9953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35733" version="1" comment="kernel-smp is earlier than 0:2.6.9-67.0.15.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:9953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35724" version="1" comment="kernel-doc is earlier than 0:2.6.18-53.1.19.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10855"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32711" version="1" comment="php-mysql is earlier than 0:4.3.2-30.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:10146"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32707" version="1" comment="php-odbc is earlier than 0:4.3.9-3.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:10072"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32695" version="1" comment="php-devel is earlier than 0:4.3.2-30.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:10146"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32639" version="1" comment="php-gd is earlier than 0:4.3.9-3.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14335"/>
      <state state_ref="oval:org.mitre.oval:ste:10072"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32613" version="1" comment="php-pgsql is earlier than 0:4.3.2-30.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:10146"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32606" version="1" comment="php-domxml is earlier than 0:4.3.9-3.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14496"/>
      <state state_ref="oval:org.mitre.oval:ste:10072"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32591" version="1" comment="php-ldap is earlier than 0:4.3.9-3.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:10072"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32579" version="1" comment="php is earlier than 0:4.3.2-30.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:10146"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32578" version="1" comment="php-pear is earlier than 0:4.3.9-3.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14130"/>
      <state state_ref="oval:org.mitre.oval:ste:10072"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32577" version="1" comment="php-mbstring is earlier than 0:4.3.9-3.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13746"/>
      <state state_ref="oval:org.mitre.oval:ste:10072"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32547" version="1" comment="php-ncurses is earlier than 0:4.3.9-3.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14227"/>
      <state state_ref="oval:org.mitre.oval:ste:10072"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32546" version="1" comment="php is earlier than 0:4.3.9-3.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:10072"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32509" version="1" comment="php-snmp is earlier than 0:4.3.9-3.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14508"/>
      <state state_ref="oval:org.mitre.oval:ste:10072"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32503" version="1" comment="php-mysql is earlier than 0:4.3.9-3.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:10072"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32425" version="1" comment="php-ldap is earlier than 0:4.3.2-30.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:10146"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32236" version="1" comment="php-pgsql is earlier than 0:4.3.9-3.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:10072"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32185" version="1" comment="php-imap is earlier than 0:4.3.9-3.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:10072"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32166" version="1" comment="php-imap is earlier than 0:4.3.2-30.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:10146"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32107" version="1" comment="php-odbc is earlier than 0:4.3.2-30.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:10146"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31742" version="1" comment="php-xmlrpc is earlier than 0:4.3.9-3.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14445"/>
      <state state_ref="oval:org.mitre.oval:ste:10072"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31727" version="1" comment="php-devel is earlier than 0:4.3.9-3.12" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:10072"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32673" version="1" comment="gnupg is earlier than 0:1.2.1-15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13847"/>
      <state state_ref="oval:org.mitre.oval:ste:9496"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32159" version="1" comment="gnupg is earlier than 0:1.2.6-3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13847"/>
      <state state_ref="oval:org.mitre.oval:ste:9975"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34266" version="1" comment="samba-common is earlier than 0:3.0.23c-2.el5.2.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14032"/>
      <state state_ref="oval:org.mitre.oval:ste:10275"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34247" version="1" comment="samba-common is earlier than 0:3.0.9-1.3E.13.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14032"/>
      <state state_ref="oval:org.mitre.oval:ste:10378"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34199" version="1" comment="samba-swat is earlier than 0:3.0.10-1.4E.12.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13707"/>
      <state state_ref="oval:org.mitre.oval:ste:10476"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34156" version="1" comment="samba is earlier than 0:3.0.10-1.4E.12.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13931"/>
      <state state_ref="oval:org.mitre.oval:ste:10476"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34130" version="1" comment="samba is earlier than 0:3.0.23c-2.el5.2.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13931"/>
      <state state_ref="oval:org.mitre.oval:ste:10275"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34121" version="1" comment="samba-common is earlier than 0:3.0.10-1.4E.12.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14032"/>
      <state state_ref="oval:org.mitre.oval:ste:10476"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34107" version="1" comment="samba-client is earlier than 0:3.0.10-1.4E.12.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13861"/>
      <state state_ref="oval:org.mitre.oval:ste:10476"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33962" version="1" comment="samba is earlier than 0:3.0.9-1.3E.13.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13931"/>
      <state state_ref="oval:org.mitre.oval:ste:10378"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33913" version="1" comment="samba-client is earlier than 0:3.0.9-1.3E.13.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13861"/>
      <state state_ref="oval:org.mitre.oval:ste:10378"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33727" version="1" comment="samba-swat is earlier than 0:3.0.9-1.3E.13.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13707"/>
      <state state_ref="oval:org.mitre.oval:ste:10378"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33487" version="1" comment="samba-swat is earlier than 0:3.0.23c-2.el5.2.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13707"/>
      <state state_ref="oval:org.mitre.oval:ste:10275"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33303" version="1" comment="samba-client is earlier than 0:3.0.23c-2.el5.2.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13861"/>
      <state state_ref="oval:org.mitre.oval:ste:10275"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40352" version="1" comment="kernel-PAE is earlier than 0:2.6.18-164.15.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:11545"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40240" version="1" comment="kernel-devel is earlier than 0:2.6.18-164.15.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:11545"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40237" version="1" comment="kernel is earlier than 0:2.6.18-164.15.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:11545"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40231" version="1" comment="kernel-xen is earlier than 0:2.6.18-164.15.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:11545"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40228" version="1" comment="kernel-kdump is earlier than 0:2.6.18-164.15.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:11545"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40098" version="1" comment="kernel-debug is earlier than 0:2.6.18-164.15.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14957"/>
      <state state_ref="oval:org.mitre.oval:ste:11545"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40088" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-164.15.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:11545"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40055" version="1" comment="kernel-doc is earlier than 0:2.6.18-164.15.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:11545"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39997" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-164.15.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:11545"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39938" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-164.15.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:11545"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39930" version="1" comment="kernel-debug-devel is earlier than 0:2.6.18-164.15.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15023"/>
      <state state_ref="oval:org.mitre.oval:ste:11545"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39918" version="1" comment="kernel-headers is earlier than 0:2.6.18-164.15.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:11545"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32958" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:10158"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32880" version="1" comment="kernel-devel is earlier than 0:2.6.9-42.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10158"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32865" version="1" comment="kernel is earlier than 0:2.6.9-42.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10158"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32838" version="1" comment="kernel-smp is earlier than 0:2.6.9-42.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:10158"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32814" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:10158"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32801" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:10158"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32747" version="1" comment="kernel-doc is earlier than 0:2.6.9-42.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10158"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32576" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-42.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:10158"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32200" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-42.0.2.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:10158"/>
    </rpminfo_test>
    <inetlisteningservers_test id="oval:org.mitre.oval:tst:1630" version="2" check="at least one" comment="httpd is listening on the network" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1101"/>
      <state state_ref="oval:org.mitre.oval:ste:1482"/>
    </inetlisteningservers_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1327" version="1" check="at least one" comment="squirrelmail rpm version prior to 1.4.3-0.e3.1 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:920"/>
      <state state_ref="oval:org.mitre.oval:ste:1191"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1326" version="1" check="at least one" comment="php rpm is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:919"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1325" version="1" check="at least one" comment="/etc/httpd/modules/libphp4.so exists" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:918"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38112" version="1" comment="cups-libs is earlier than 1:1.1.17-13.3.55" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:10816"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38046" version="1" comment="cups is earlier than 1:1.1.17-13.3.55" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:10816"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37802" version="1" comment="cups-devel is earlier than 1:1.1.17-13.3.55" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:10816"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40307" version="1" comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14925"/>
      <state state_ref="oval:org.mitre.oval:ste:11190"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40225" version="1" comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15114"/>
      <state state_ref="oval:org.mitre.oval:ste:11190"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40023" version="1" comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14531"/>
      <state state_ref="oval:org.mitre.oval:ste:11190"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39831" version="1" comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15274"/>
      <state state_ref="oval:org.mitre.oval:ste:11190"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39445" version="1" comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14889"/>
      <state state_ref="oval:org.mitre.oval:ste:11190"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30514" version="1" comment="pwlib is earlier than 0:1.4.7-7.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14248"/>
      <state state_ref="oval:org.mitre.oval:ste:9464"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32717" version="1" comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13716"/>
      <state state_ref="oval:org.mitre.oval:ste:10108"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32701" version="1" comment="mozilla-chat is earlier than 37:1.7.13-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14196"/>
      <state state_ref="oval:org.mitre.oval:ste:10108"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32697" version="1" comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13776"/>
      <state state_ref="oval:org.mitre.oval:ste:9911"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32679" version="1" comment="devhelp-devel is earlier than 0:0.9.2-2.4.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14520"/>
      <state state_ref="oval:org.mitre.oval:ste:10137"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32671" version="1" comment="mozilla-nss-devel is earlier than 37:1.7.13-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14415"/>
      <state state_ref="oval:org.mitre.oval:ste:9911"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32666" version="1" comment="mozilla-nspr is earlier than 37:1.7.13-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14160"/>
      <state state_ref="oval:org.mitre.oval:ste:9911"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32663" version="1" comment="mozilla-js-debugger is earlier than 37:1.7.13-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13991"/>
      <state state_ref="oval:org.mitre.oval:ste:9911"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32644" version="1" comment="mozilla-devel is earlier than 37:1.7.13-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14231"/>
      <state state_ref="oval:org.mitre.oval:ste:10108"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32598" version="1" comment="mozilla-nspr is earlier than 37:1.7.13-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14160"/>
      <state state_ref="oval:org.mitre.oval:ste:10108"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32593" version="1" comment="mozilla-js-debugger is earlier than 37:1.7.13-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13991"/>
      <state state_ref="oval:org.mitre.oval:ste:10108"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32561" version="1" comment="mozilla-nspr-devel is earlier than 37:1.7.13-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13716"/>
      <state state_ref="oval:org.mitre.oval:ste:9911"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32558" version="1" comment="mozilla-devel is earlier than 37:1.7.13-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14231"/>
      <state state_ref="oval:org.mitre.oval:ste:9911"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32557" version="1" comment="mozilla-dom-inspector is earlier than 37:1.7.13-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13776"/>
      <state state_ref="oval:org.mitre.oval:ste:10108"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32451" version="1" comment="mozilla-mail is earlier than 37:1.7.13-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14423"/>
      <state state_ref="oval:org.mitre.oval:ste:9911"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32440" version="1" comment="mozilla-nss-devel is earlier than 37:1.7.13-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14415"/>
      <state state_ref="oval:org.mitre.oval:ste:10108"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32428" version="1" comment="mozilla-mail is earlier than 37:1.7.13-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14423"/>
      <state state_ref="oval:org.mitre.oval:ste:10108"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32427" version="1" comment="mozilla-nss is earlier than 37:1.7.13-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14069"/>
      <state state_ref="oval:org.mitre.oval:ste:9911"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32349" version="1" comment="mozilla-nss is earlier than 37:1.7.13-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14069"/>
      <state state_ref="oval:org.mitre.oval:ste:10108"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32326" version="1" comment="mozilla is earlier than 37:1.7.13-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14405"/>
      <state state_ref="oval:org.mitre.oval:ste:9911"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32229" version="1" comment="devhelp is earlier than 0:0.9.2-2.4.8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14497"/>
      <state state_ref="oval:org.mitre.oval:ste:10137"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32219" version="1" comment="firefox is earlier than 0:1.0.8-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10164"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32133" version="1" comment="mozilla is earlier than 37:1.7.13-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14405"/>
      <state state_ref="oval:org.mitre.oval:ste:10108"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31987" version="1" comment="mozilla-chat is earlier than 37:1.7.13-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14196"/>
      <state state_ref="oval:org.mitre.oval:ste:9911"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34208" version="1" comment="gimp is earlier than 1:2.0.5-6.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14077"/>
      <state state_ref="oval:org.mitre.oval:ste:10404"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34142" version="1" comment="gimp-devel is earlier than 2:2.2.13-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14747"/>
      <state state_ref="oval:org.mitre.oval:ste:10525"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34066" version="1" comment="gimp-devel is earlier than 1:2.0.5-6.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14747"/>
      <state state_ref="oval:org.mitre.oval:ste:10404"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33917" version="1" comment="gimp is earlier than 2:2.2.13-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14077"/>
      <state state_ref="oval:org.mitre.oval:ste:10525"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33883" version="1" comment="gimp-devel is earlier than 1:1.2.3-20.3.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14747"/>
      <state state_ref="oval:org.mitre.oval:ste:10089"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33771" version="1" comment="gimp is earlier than 1:1.2.3-20.3.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14077"/>
      <state state_ref="oval:org.mitre.oval:ste:10089"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33671" version="1" comment="gimp-perl is earlier than 1:1.2.3-20.3.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14862"/>
      <state state_ref="oval:org.mitre.oval:ste:10089"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33430" version="1" comment="gimp-libs is earlier than 2:2.2.13-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14790"/>
      <state state_ref="oval:org.mitre.oval:ste:10525"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37951" version="1" comment="kernel-doc is earlier than 0:2.6.9-78.0.8.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:11073"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37826" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-78.0.8.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:11073"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37811" version="1" comment="kernel-devel is earlier than 0:2.6.9-78.0.8.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:11073"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37782" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-78.0.8.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:11073"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37747" version="1" comment="kernel is earlier than 0:2.6.9-78.0.8.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:11073"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37734" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-78.0.8.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:11073"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37710" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-92.1.13.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:10722"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37703" version="1" comment="kernel-PAE is earlier than 0:2.6.18-92.1.13.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:10722"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37698" version="1" comment="kernel-devel is earlier than 0:2.6.18-92.1.13.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10722"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37692" version="1" comment="kernel-headers is earlier than 0:2.6.18-92.1.13.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:10722"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37688" version="1" comment="kernel is earlier than 0:2.6.18-92.1.13.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10722"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37681" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-92.1.13.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:10722"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37665" version="1" comment="kernel-debug-devel is earlier than 0:2.6.18-92.1.13.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15023"/>
      <state state_ref="oval:org.mitre.oval:ste:10722"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37662" version="1" comment="kernel-smp is earlier than 0:2.6.9-78.0.8.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:11073"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37656" version="1" comment="kernel-xenU-devel is earlier than 0:2.6.9-78.0.8.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14060"/>
      <state state_ref="oval:org.mitre.oval:ste:11073"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37649" version="1" comment="kernel-doc is earlier than 0:2.6.18-92.1.13.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10722"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37600" version="1" comment="kernel-xen is earlier than 0:2.6.18-92.1.13.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:10722"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37589" version="1" comment="kernel-kdump is earlier than 0:2.6.18-92.1.13.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:10722"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37485" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-78.0.8.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:11073"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37470" version="1" comment="kernel-xenU is earlier than 0:2.6.9-78.0.8.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14301"/>
      <state state_ref="oval:org.mitre.oval:ste:11073"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37432" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-78.0.8.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:11073"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37288" version="1" comment="kernel-debug is earlier than 0:2.6.18-92.1.13.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14957"/>
      <state state_ref="oval:org.mitre.oval:ste:10722"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37104" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-92.1.13.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:10722"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40473" version="1" comment="tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14502"/>
      <state state_ref="oval:org.mitre.oval:ste:11115"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40389" version="1" comment="tetex-fonts is earlier than 0:1.0.7-67.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14502"/>
      <state state_ref="oval:org.mitre.oval:ste:10606"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40364" version="1" comment="tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14182"/>
      <state state_ref="oval:org.mitre.oval:ste:11115"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40329" version="1" comment="tetex-afm is earlier than 0:1.0.7-67.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14389"/>
      <state state_ref="oval:org.mitre.oval:ste:10606"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40316" version="1" comment="tetex is earlier than 0:2.0.2-22.0.1.EL4.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14329"/>
      <state state_ref="oval:org.mitre.oval:ste:11115"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40303" version="1" comment="tetex is earlier than 0:1.0.7-67.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14329"/>
      <state state_ref="oval:org.mitre.oval:ste:10606"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40209" version="1" comment="tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14389"/>
      <state state_ref="oval:org.mitre.oval:ste:11115"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40150" version="1" comment="tetex-doc is earlier than 0:1.0.7-67.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14554"/>
      <state state_ref="oval:org.mitre.oval:ste:10606"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40095" version="1" comment="tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13878"/>
      <state state_ref="oval:org.mitre.oval:ste:11115"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40077" version="1" comment="tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14554"/>
      <state state_ref="oval:org.mitre.oval:ste:11115"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40032" version="1" comment="tetex-dvips is earlier than 0:1.0.7-67.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14207"/>
      <state state_ref="oval:org.mitre.oval:ste:10606"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40000" version="1" comment="tetex-xdvi is earlier than 0:1.0.7-67.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14182"/>
      <state state_ref="oval:org.mitre.oval:ste:10606"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39543" version="1" comment="tetex-latex is earlier than 0:1.0.7-67.19" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13878"/>
      <state state_ref="oval:org.mitre.oval:ste:10606"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39528" version="1" comment="tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.16" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14207"/>
      <state state_ref="oval:org.mitre.oval:ste:11115"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33221" version="1" comment="mod_auth_kerb is earlier than 0:5.0-1.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14416"/>
      <state state_ref="oval:org.mitre.oval:ste:10268"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31880" version="1" comment="postgresql-docs is earlier than 0:7.4.8-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14365"/>
      <state state_ref="oval:org.mitre.oval:ste:9748"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31832" version="1" comment="postgresql is earlier than 0:7.4.8-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14586"/>
      <state state_ref="oval:org.mitre.oval:ste:9748"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31824" version="1" comment="rh-postgresql-devel is earlier than 0:7.3.10-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14466"/>
      <state state_ref="oval:org.mitre.oval:ste:9203"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31799" version="1" comment="postgresql-python is earlier than 0:7.4.8-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14546"/>
      <state state_ref="oval:org.mitre.oval:ste:9748"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31798" version="1" comment="postgresql-test is earlier than 0:7.4.8-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14367"/>
      <state state_ref="oval:org.mitre.oval:ste:9748"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31756" version="1" comment="postgresql-contrib is earlier than 0:7.4.8-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14293"/>
      <state state_ref="oval:org.mitre.oval:ste:9748"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31754" version="1" comment="rh-postgresql-contrib is earlier than 0:7.3.10-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13927"/>
      <state state_ref="oval:org.mitre.oval:ste:9203"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31726" version="1" comment="rh-postgresql-docs is earlier than 0:7.3.10-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13876"/>
      <state state_ref="oval:org.mitre.oval:ste:9203"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31715" version="1" comment="rh-postgresql-tcl is earlier than 0:7.3.10-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13874"/>
      <state state_ref="oval:org.mitre.oval:ste:9203"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31711" version="1" comment="rh-postgresql-python is earlier than 0:7.3.10-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14328"/>
      <state state_ref="oval:org.mitre.oval:ste:9203"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31708" version="1" comment="postgresql-devel is earlier than 0:7.4.8-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14290"/>
      <state state_ref="oval:org.mitre.oval:ste:9748"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31681" version="1" comment="rh-postgresql-test is earlier than 0:7.3.10-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14347"/>
      <state state_ref="oval:org.mitre.oval:ste:9203"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31669" version="1" comment="postgresql-tcl is earlier than 0:7.4.8-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14486"/>
      <state state_ref="oval:org.mitre.oval:ste:9748"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31618" version="1" comment="postgresql-jdbc is earlier than 0:7.4.8-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14547"/>
      <state state_ref="oval:org.mitre.oval:ste:9748"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31608" version="1" comment="rh-postgresql-libs is earlier than 0:7.3.10-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14436"/>
      <state state_ref="oval:org.mitre.oval:ste:9203"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31527" version="1" comment="postgresql-pl is earlier than 0:7.4.8-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14537"/>
      <state state_ref="oval:org.mitre.oval:ste:9748"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31510" version="1" comment="rh-postgresql is earlier than 0:7.3.10-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14320"/>
      <state state_ref="oval:org.mitre.oval:ste:9203"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31507" version="1" comment="rh-postgresql-jdbc is earlier than 0:7.3.10-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14295"/>
      <state state_ref="oval:org.mitre.oval:ste:9203"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31497" version="1" comment="rh-postgresql-pl is earlier than 0:7.3.10-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14453"/>
      <state state_ref="oval:org.mitre.oval:ste:9203"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31468" version="1" comment="postgresql-server is earlier than 0:7.4.8-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14158"/>
      <state state_ref="oval:org.mitre.oval:ste:9748"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31255" version="1" comment="rh-postgresql-server is earlier than 0:7.3.10-1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14152"/>
      <state state_ref="oval:org.mitre.oval:ste:9203"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31129" version="1" comment="postgresql-libs is earlier than 0:7.4.8-1.RHEL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14383"/>
      <state state_ref="oval:org.mitre.oval:ste:9748"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:2951" version="1" comment="use machine settings rather than individual user settings" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:990"/>
      <state state_ref="oval:org.mitre.oval:ste:2766"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2919" version="3" comment="Internet Explorer 6 Service Pack 1 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:247"/>
      <state state_ref="oval:org.mitre.oval:ste:2735"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2917" version="1" comment="ActiveX controls are enabled for the current user" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1671"/>
      <state state_ref="oval:org.mitre.oval:ste:2733"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2916" version="1" comment="ActiveX controls are enabled for the local machine" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:988"/>
      <state state_ref="oval:org.mitre.oval:ste:2732"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2812" version="1" comment="active scripting is enabled for the current user" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1609"/>
      <state state_ref="oval:org.mitre.oval:ste:2632"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2811" version="1" comment="active scripting is enabled for the local machine" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:1608"/>
      <state state_ref="oval:org.mitre.oval:ste:2631"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:1329" version="1" check="all" comment="machine has followed the GDR update path and mshtml.dll is less than 6.0.2800.1491" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:1193"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1328" version="1" check="all" comment="machine has followed the QFE update path and mshtml.dll is less than 6.0.2800.1492" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:222"/>
      <state state_ref="oval:org.mitre.oval:ste:1192"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31865" version="1" comment="ethereal is earlier than 0:0.10.11-1.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14030"/>
      <state state_ref="oval:org.mitre.oval:ste:9951"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31674" version="1" comment="ethereal-gnome is earlier than 0:0.10.11-1.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14338"/>
      <state state_ref="oval:org.mitre.oval:ste:9951"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31546" version="1" comment="ethereal is earlier than 0:0.10.11-1.EL3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14030"/>
      <state state_ref="oval:org.mitre.oval:ste:9421"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31458" version="1" comment="ethereal-gnome is earlier than 0:0.10.11-1.EL3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14338"/>
      <state state_ref="oval:org.mitre.oval:ste:9421"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31593" version="1" comment="ethereal-gnome is earlier than 0:0.10.10-1.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14338"/>
      <state state_ref="oval:org.mitre.oval:ste:9899"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31548" version="1" comment="ethereal is earlier than 0:0.10.10-1.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14030"/>
      <state state_ref="oval:org.mitre.oval:ste:9899"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31514" version="1" comment="ethereal-gnome is earlier than 0:0.10.10-1.EL3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14338"/>
      <state state_ref="oval:org.mitre.oval:ste:9828"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31448" version="1" comment="ethereal is earlier than 0:0.10.10-1.EL3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14030"/>
      <state state_ref="oval:org.mitre.oval:ste:9828"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39838" version="1" comment="xulrunner-devel-unstable is earlier than 0:1.9.0.16-2.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15048"/>
      <state state_ref="oval:org.mitre.oval:ste:11458"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39832" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-51.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10555"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39752" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-0.48.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:11162"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39735" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-51.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10555"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39721" version="1" comment="firefox is earlier than 0:3.0.16-1.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10723"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39678" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.48.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:11162"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39656" version="1" comment="seamonkey is earlier than 0:1.0.9-51.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10555"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39651" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-0.48.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:11162"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39646" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-51.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10555"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39628" version="1" comment="seamonkey is earlier than 0:1.0.9-0.48.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:11162"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39624" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.48.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:11162"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39610" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-0.48.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:11162"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39588" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-0.48.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:11162"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39558" version="1" comment="xulrunner is earlier than 0:1.9.0.16-2.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15057"/>
      <state state_ref="oval:org.mitre.oval:ste:11458"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39524" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-0.48.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:11162"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39451" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.48.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:11162"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39283" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-51.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10555"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39176" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-51.el4_8" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10555"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39032" version="1" comment="xulrunner-devel is earlier than 0:1.9.0.16-2.el5_4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15100"/>
      <state state_ref="oval:org.mitre.oval:ste:11458"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39002" version="1" comment="firefox is earlier than 0:3.0.16-4.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:11252"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38845" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.48.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:11162"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33885" version="1" comment="krb5-server is earlier than 0:1.5-23" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14452"/>
      <state state_ref="oval:org.mitre.oval:ste:10326"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33831" version="1" comment="krb5-libs is earlier than 0:1.5-23" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14395"/>
      <state state_ref="oval:org.mitre.oval:ste:10326"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33826" version="1" comment="krb5 is earlier than 0:1.2.7-61" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14120"/>
      <state state_ref="oval:org.mitre.oval:ste:9962"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33816" version="1" comment="krb5-devel is earlier than 0:1.3.4-46" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14100"/>
      <state state_ref="oval:org.mitre.oval:ste:10197"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33812" version="1" comment="krb5 is earlier than 0:1.3.4-46" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14120"/>
      <state state_ref="oval:org.mitre.oval:ste:10197"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33804" version="1" comment="krb5-workstation is earlier than 0:1.3.4-46" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14279"/>
      <state state_ref="oval:org.mitre.oval:ste:10197"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33795" version="1" comment="krb5-libs is earlier than 0:1.3.4-46" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14395"/>
      <state state_ref="oval:org.mitre.oval:ste:10197"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33785" version="1" comment="krb5-devel is earlier than 0:1.5-23" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14100"/>
      <state state_ref="oval:org.mitre.oval:ste:10326"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33714" version="1" comment="krb5 is earlier than 0:1.5-23" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14120"/>
      <state state_ref="oval:org.mitre.oval:ste:10326"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33700" version="1" comment="krb5-devel is earlier than 0:1.2.7-61" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14100"/>
      <state state_ref="oval:org.mitre.oval:ste:9962"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33622" version="1" comment="krb5-server is earlier than 0:1.2.7-61" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14452"/>
      <state state_ref="oval:org.mitre.oval:ste:9962"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33590" version="1" comment="krb5-workstation is earlier than 0:1.2.7-61" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14279"/>
      <state state_ref="oval:org.mitre.oval:ste:9962"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33344" version="1" comment="krb5-workstation is earlier than 0:1.5-23" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14279"/>
      <state state_ref="oval:org.mitre.oval:ste:10326"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32895" version="1" comment="krb5-server is earlier than 0:1.3.4-46" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14452"/>
      <state state_ref="oval:org.mitre.oval:ste:10197"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32858" version="1" comment="krb5-libs is earlier than 0:1.2.7-61" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14395"/>
      <state state_ref="oval:org.mitre.oval:ste:9962"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31986" version="1" comment="mozilla-nss is earlier than 37:1.7.8-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14069"/>
      <state state_ref="oval:org.mitre.oval:ste:9251"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31917" version="1" comment="mozilla-mail is earlier than 37:1.7.8-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14423"/>
      <state state_ref="oval:org.mitre.oval:ste:9741"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31913" version="1" comment="mozilla-dom-inspector is earlier than 37:1.7.8-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13776"/>
      <state state_ref="oval:org.mitre.oval:ste:9251"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31901" version="1" comment="mozilla-nspr-devel is earlier than 37:1.7.8-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13716"/>
      <state state_ref="oval:org.mitre.oval:ste:9741"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31894" version="1" comment="mozilla-chat is earlier than 37:1.7.8-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14196"/>
      <state state_ref="oval:org.mitre.oval:ste:9251"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31868" version="1" comment="mozilla-nss-devel is earlier than 37:1.7.8-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14415"/>
      <state state_ref="oval:org.mitre.oval:ste:9251"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31860" version="1" comment="mozilla is earlier than 37:1.7.8-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14405"/>
      <state state_ref="oval:org.mitre.oval:ste:9251"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31816" version="1" comment="mozilla-nss-devel is earlier than 37:1.7.8-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14415"/>
      <state state_ref="oval:org.mitre.oval:ste:9741"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31723" version="1" comment="mozilla-nspr-devel is earlier than 37:1.7.8-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13716"/>
      <state state_ref="oval:org.mitre.oval:ste:9251"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31692" version="1" comment="devhelp is earlier than 0:0.9.2-2.4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14497"/>
      <state state_ref="oval:org.mitre.oval:ste:9035"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31644" version="1" comment="mozilla-dom-inspector is earlier than 37:1.7.8-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13776"/>
      <state state_ref="oval:org.mitre.oval:ste:9741"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31625" version="1" comment="mozilla-devel is earlier than 37:1.7.8-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14231"/>
      <state state_ref="oval:org.mitre.oval:ste:9741"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31619" version="1" comment="mozilla is earlier than 37:1.7.8-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14405"/>
      <state state_ref="oval:org.mitre.oval:ste:9741"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31590" version="1" comment="mozilla-js-debugger is earlier than 37:1.7.8-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13991"/>
      <state state_ref="oval:org.mitre.oval:ste:9251"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31571" version="1" comment="devhelp-devel is earlier than 0:0.9.2-2.4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14520"/>
      <state state_ref="oval:org.mitre.oval:ste:9035"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31531" version="1" comment="mozilla-js-debugger is earlier than 37:1.7.8-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13991"/>
      <state state_ref="oval:org.mitre.oval:ste:9741"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31450" version="1" comment="mozilla-nspr is earlier than 37:1.7.8-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14160"/>
      <state state_ref="oval:org.mitre.oval:ste:9741"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31435" version="1" comment="mozilla-nss is earlier than 37:1.7.8-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14069"/>
      <state state_ref="oval:org.mitre.oval:ste:9741"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31365" version="1" comment="mozilla-devel is earlier than 37:1.7.8-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14231"/>
      <state state_ref="oval:org.mitre.oval:ste:9251"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31311" version="1" comment="firefox is earlier than 0:1.0.4-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:9698"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31245" version="1" comment="mozilla-mail is earlier than 37:1.7.8-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14423"/>
      <state state_ref="oval:org.mitre.oval:ste:9251"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31225" version="1" comment="mozilla-chat is earlier than 37:1.7.8-1.1.3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14196"/>
      <state state_ref="oval:org.mitre.oval:ste:9741"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30985" version="1" comment="mozilla-nspr is earlier than 37:1.7.8-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14160"/>
      <state state_ref="oval:org.mitre.oval:ste:9251"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38553" version="1" comment="krb5-devel is earlier than 0:1.6.1-31.el5_3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14100"/>
      <state state_ref="oval:org.mitre.oval:ste:11110"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38479" version="1" comment="krb5 is earlier than 0:1.6.1-31.el5_3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14120"/>
      <state state_ref="oval:org.mitre.oval:ste:11110"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38425" version="1" comment="krb5-workstation is earlier than 0:1.6.1-31.el5_3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14279"/>
      <state state_ref="oval:org.mitre.oval:ste:11110"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38211" version="1" comment="krb5-server is earlier than 0:1.6.1-31.el5_3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14452"/>
      <state state_ref="oval:org.mitre.oval:ste:11110"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37893" version="1" comment="krb5-libs is earlier than 0:1.6.1-31.el5_3.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14395"/>
      <state state_ref="oval:org.mitre.oval:ste:11110"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32426" version="1" comment="httpd-suexec is earlier than 0:2.0.52-22.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14611"/>
      <state state_ref="oval:org.mitre.oval:ste:9992"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32356" version="1" comment="mod_ssl is earlier than 1:2.0.46-56.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:9790"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32315" version="1" comment="httpd-devel is earlier than 0:2.0.46-56.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:9822"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32282" version="1" comment="mod_ssl is earlier than 1:2.0.52-22.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:9628"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32132" version="1" comment="httpd is earlier than 0:2.0.52-22.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:9992"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32098" version="1" comment="httpd is earlier than 0:2.0.46-56.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:9822"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31907" version="1" comment="httpd-manual is earlier than 0:2.0.52-22.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14457"/>
      <state state_ref="oval:org.mitre.oval:ste:9992"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31584" version="1" comment="httpd-devel is earlier than 0:2.0.52-22.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:9992"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36324" version="1" comment="acroread-plugin is earlier than 0:8.1.2-1.el3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14489"/>
      <state state_ref="oval:org.mitre.oval:ste:10585"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36293" version="1" comment="acroread is earlier than 0:8.1.2-1.el4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14858"/>
      <state state_ref="oval:org.mitre.oval:ste:10505"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36156" version="1" comment="acroread-plugin is earlier than 0:8.1.2-1.el4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14489"/>
      <state state_ref="oval:org.mitre.oval:ste:10505"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36153" version="1" comment="acroread is earlier than 0:8.1.2-1.el3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14858"/>
      <state state_ref="oval:org.mitre.oval:ste:10585"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35912" version="1" comment="acroread is earlier than 0:8.1.2-1.el5.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14858"/>
      <state state_ref="oval:org.mitre.oval:ste:10831"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35792" version="1" comment="acroread-plugin is earlier than 0:8.1.2-1.el5.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14489"/>
      <state state_ref="oval:org.mitre.oval:ste:10831"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33325" version="1" comment="redhat-release is version 5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13430"/>
      <state state_ref="oval:org.mitre.oval:ste:10246"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30337" version="1" comment="redhat-release is version 3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13430"/>
      <state state_ref="oval:org.mitre.oval:ste:8849"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29709" version="1" comment="redhat-release is version 4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13430"/>
      <state state_ref="oval:org.mitre.oval:ste:9429"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32703" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-34.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:9230"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32614" version="1" comment="kernel is earlier than 0:2.6.9-34.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:9230"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32611" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-34.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:9230"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32525" version="1" comment="kernel-BOOT is earlier than 0:2.4.21-37.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14219"/>
      <state state_ref="oval:org.mitre.oval:ste:10022"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32464" version="1" comment="kernel-hugemem is earlier than 0:2.4.21-37.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:10022"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32438" version="1" comment="kernel-doc is earlier than 0:2.4.21-37.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10022"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32381" version="1" comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14218"/>
      <state state_ref="oval:org.mitre.oval:ste:10022"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32371" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-34.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:9230"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32366" version="1" comment="kernel-unsupported is earlier than 0:2.4.21-37.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14229"/>
      <state state_ref="oval:org.mitre.oval:ste:10022"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32314" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-34.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:9230"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32310" version="1" comment="kernel-doc is earlier than 0:2.6.9-34.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:9230"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32305" version="1" comment="kernel-smp is earlier than 0:2.6.9-34.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:9230"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32295" version="1" comment="kernel-devel is earlier than 0:2.6.9-34.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:9230"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32288" version="1" comment="kernel is earlier than 0:2.4.21-37.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10022"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32235" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-34.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:9230"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32215" version="1" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14372"/>
      <state state_ref="oval:org.mitre.oval:ste:10022"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32070" version="1" comment="kernel-smp is earlier than 0:2.4.21-37.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:10022"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31978" version="1" comment="kernel-source is earlier than 0:2.4.21-37.0.1.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14186"/>
      <state state_ref="oval:org.mitre.oval:ste:10022"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32836" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:9884"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32833" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:9884"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32825" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-42.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:9884"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32795" version="1" comment="kernel-smp is earlier than 0:2.6.9-42.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:9884"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32793" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-42.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:9884"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32736" version="1" comment="kernel is earlier than 0:2.6.9-42.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:9884"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32361" version="1" comment="kernel-doc is earlier than 0:2.6.9-42.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:9884"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32335" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-42.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:9884"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31931" version="1" comment="kernel-devel is earlier than 0:2.6.9-42.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:9884"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32690" version="1" comment="mailman is earlier than 3:2.1.5.1-25.rhel3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14521"/>
      <state state_ref="oval:org.mitre.oval:ste:9997"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32390" version="1" comment="mailman is earlier than 3:2.1.5.1-34.rhel4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14521"/>
      <state state_ref="oval:org.mitre.oval:ste:10090"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31902" version="1" comment="kernel-doc is earlier than 0:2.6.9-11.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:9816"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31876" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-11.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:9816"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31817" version="1" comment="kernel-smp is earlier than 0:2.6.9-11.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:9816"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31783" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-11.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:9816"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31714" version="1" comment="kernel is earlier than 0:2.6.9-11.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:9816"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31592" version="1" comment="kernel-devel is earlier than 0:2.6.9-11.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:9816"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31522" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-11.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:9816"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35634" version="1" comment="xpdf is earlier than 0:2.02-11.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14398"/>
      <state state_ref="oval:org.mitre.oval:ste:10709"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35591" version="1" comment="tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14182"/>
      <state state_ref="oval:org.mitre.oval:ste:10656"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35585" version="1" comment="tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14389"/>
      <state state_ref="oval:org.mitre.oval:ste:10656"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35574" version="1" comment="gpdf is earlier than 0:2.8.2-7.7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14337"/>
      <state state_ref="oval:org.mitre.oval:ste:10111"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35549" version="1" comment="poppler is earlier than 0:0.5.4-4.3.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14394"/>
      <state state_ref="oval:org.mitre.oval:ste:10731"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35537" version="1" comment="cups is earlier than 0:1.1.22-0.rc1.9.20.2.el4_5.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:10643"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35530" version="1" comment="cups is earlier than 0:1.2.4-11.14.el5_1.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14199"/>
      <state state_ref="oval:org.mitre.oval:ste:10381"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35527" version="1" comment="tetex-fonts is earlier than 0:3.0-33.2.el5_1.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14502"/>
      <state state_ref="oval:org.mitre.oval:ste:10572"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35509" version="1" comment="tetex-dvips is earlier than 0:3.0-33.2.el5_1.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14207"/>
      <state state_ref="oval:org.mitre.oval:ste:10572"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35508" version="1" comment="cups-devel is earlier than 0:1.2.4-11.14.el5_1.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:10381"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35498" version="1" comment="tetex-latex is earlier than 0:3.0-33.2.el5_1.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13878"/>
      <state state_ref="oval:org.mitre.oval:ste:10572"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35496" version="1" comment="poppler-devel is earlier than 0:0.5.4-4.3.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14966"/>
      <state state_ref="oval:org.mitre.oval:ste:10731"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35459" version="1" comment="tetex is earlier than 0:3.0-33.2.el5_1.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14329"/>
      <state state_ref="oval:org.mitre.oval:ste:10572"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35455" version="1" comment="tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14502"/>
      <state state_ref="oval:org.mitre.oval:ste:10656"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35446" version="1" comment="kdegraphics-devel is earlier than 7:3.3.1-6.el4_5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14596"/>
      <state state_ref="oval:org.mitre.oval:ste:10285"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35427" version="1" comment="cups-libs is earlier than 0:1.2.4-11.14.el5_1.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:10381"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35415" version="1" comment="cups-libs is earlier than 0:1.1.22-0.rc1.9.20.2.el4_5.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14195"/>
      <state state_ref="oval:org.mitre.oval:ste:10643"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35407" version="1" comment="tetex-afm is earlier than 0:3.0-33.2.el5_1.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14389"/>
      <state state_ref="oval:org.mitre.oval:ste:10572"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35404" version="1" comment="kdegraphics is earlier than 7:3.3.1-6.el4_5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14241"/>
      <state state_ref="oval:org.mitre.oval:ste:10285"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35315" version="1" comment="xpdf is earlier than 1:3.00-14.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14398"/>
      <state state_ref="oval:org.mitre.oval:ste:10598"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35283" version="1" comment="tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14554"/>
      <state state_ref="oval:org.mitre.oval:ste:10656"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35274" version="1" comment="cups-lpd is earlier than 0:1.2.4-11.14.el5_1.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14688"/>
      <state state_ref="oval:org.mitre.oval:ste:10381"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35178" version="1" comment="tetex is earlier than 0:2.0.2-22.0.1.EL4.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14329"/>
      <state state_ref="oval:org.mitre.oval:ste:10656"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35156" version="1" comment="tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14207"/>
      <state state_ref="oval:org.mitre.oval:ste:10656"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35147" version="1" comment="poppler-utils is earlier than 0:0.5.4-4.3.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14640"/>
      <state state_ref="oval:org.mitre.oval:ste:10731"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34998" version="1" comment="tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.10" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13878"/>
      <state state_ref="oval:org.mitre.oval:ste:10656"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34735" version="1" comment="cups-devel is earlier than 0:1.1.22-0.rc1.9.20.2.el4_5.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14076"/>
      <state state_ref="oval:org.mitre.oval:ste:10643"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34727" version="1" comment="tetex-doc is earlier than 0:3.0-33.2.el5_1.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14554"/>
      <state state_ref="oval:org.mitre.oval:ste:10572"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34618" version="1" comment="tetex-xdvi is earlier than 0:3.0-33.2.el5_1.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14182"/>
      <state state_ref="oval:org.mitre.oval:ste:10572"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38251" version="1" comment="ntp is earlier than 0:4.2.0.a.20040617-8.el4_7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14371"/>
      <state state_ref="oval:org.mitre.oval:ste:11030"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38033" version="1" comment="ntp is earlier than 0:4.2.2p1-9.el5_3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14371"/>
      <state state_ref="oval:org.mitre.oval:ste:10162"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37760" version="1" comment="ruby-tcltk is earlier than 0:1.6.8-13.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14273"/>
      <state state_ref="oval:org.mitre.oval:ste:10997"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37757" version="1" comment="ruby-tcltk is earlier than 0:1.8.5-5.el5_2.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14273"/>
      <state state_ref="oval:org.mitre.oval:ste:11017"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37751" version="1" comment="irb is earlier than 0:1.6.8-13.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13649"/>
      <state state_ref="oval:org.mitre.oval:ste:10997"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37736" version="1" comment="ruby-docs is earlier than 0:1.6.8-13.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14446"/>
      <state state_ref="oval:org.mitre.oval:ste:10997"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37735" version="1" comment="ruby-ri is earlier than 0:1.8.5-5.el5_2.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14461"/>
      <state state_ref="oval:org.mitre.oval:ste:11017"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37720" version="1" comment="ruby-libs is earlier than 0:1.8.1-7.el4_7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14388"/>
      <state state_ref="oval:org.mitre.oval:ste:10995"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37697" version="1" comment="ruby-docs is earlier than 0:1.8.5-5.el5_2.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14446"/>
      <state state_ref="oval:org.mitre.oval:ste:11017"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37678" version="1" comment="ruby is earlier than 0:1.8.1-7.el4_7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14305"/>
      <state state_ref="oval:org.mitre.oval:ste:10995"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37674" version="1" comment="irb is earlier than 0:1.8.1-7.el4_7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13649"/>
      <state state_ref="oval:org.mitre.oval:ste:10995"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37630" version="1" comment="ruby-docs is earlier than 0:1.8.1-7.el4_7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14446"/>
      <state state_ref="oval:org.mitre.oval:ste:10995"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37606" version="1" comment="ruby-mode is earlier than 0:1.6.8-13.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14380"/>
      <state state_ref="oval:org.mitre.oval:ste:10997"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37563" version="1" comment="ruby is earlier than 0:1.8.5-5.el5_2.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14305"/>
      <state state_ref="oval:org.mitre.oval:ste:11017"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37497" version="1" comment="ruby is earlier than 0:1.6.8-13.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14305"/>
      <state state_ref="oval:org.mitre.oval:ste:10997"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37463" version="1" comment="ruby-irb is earlier than 0:1.8.5-5.el5_2.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14777"/>
      <state state_ref="oval:org.mitre.oval:ste:11017"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37462" version="1" comment="ruby-mode is earlier than 0:1.8.1-7.el4_7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14380"/>
      <state state_ref="oval:org.mitre.oval:ste:10995"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37438" version="1" comment="ruby-libs is earlier than 0:1.8.5-5.el5_2.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14388"/>
      <state state_ref="oval:org.mitre.oval:ste:11017"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37427" version="1" comment="ruby-devel is earlier than 0:1.6.8-13.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14187"/>
      <state state_ref="oval:org.mitre.oval:ste:10997"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37344" version="1" comment="ruby-mode is earlier than 0:1.8.5-5.el5_2.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14380"/>
      <state state_ref="oval:org.mitre.oval:ste:11017"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37273" version="1" comment="ruby-devel is earlier than 0:1.8.5-5.el5_2.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14187"/>
      <state state_ref="oval:org.mitre.oval:ste:11017"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37172" version="1" comment="ruby-rdoc is earlier than 0:1.8.5-5.el5_2.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14244"/>
      <state state_ref="oval:org.mitre.oval:ste:11017"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36902" version="1" comment="ruby-tcltk is earlier than 0:1.8.1-7.el4_7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14273"/>
      <state state_ref="oval:org.mitre.oval:ste:10995"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36810" version="1" comment="ruby-devel is earlier than 0:1.8.1-7.el4_7.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14187"/>
      <state state_ref="oval:org.mitre.oval:ste:10995"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36770" version="1" comment="ruby-libs is earlier than 0:1.6.8-13.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14388"/>
      <state state_ref="oval:org.mitre.oval:ste:10997"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37655" version="1" comment="postfix is earlier than 2:2.2.10-1.2.1.el4_7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14124"/>
      <state state_ref="oval:org.mitre.oval:ste:11082"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37632" version="1" comment="postfix-pflogsumm is earlier than 2:2.2.10-1.2.1.el4_7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14593"/>
      <state state_ref="oval:org.mitre.oval:ste:11082"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37629" version="1" comment="postfix-pflogsumm is earlier than 2:2.3.3-2.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14593"/>
      <state state_ref="oval:org.mitre.oval:ste:11061"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37330" version="1" comment="postfix is earlier than 2:2.0.16-14.1.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14124"/>
      <state state_ref="oval:org.mitre.oval:ste:10973"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37265" version="1" comment="postfix is earlier than 2:2.3.3-2.1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14124"/>
      <state state_ref="oval:org.mitre.oval:ste:11061"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30813" version="1" comment="mozilla-nspr is earlier than 37:1.4.3-3.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14160"/>
      <state state_ref="oval:org.mitre.oval:ste:9280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30799" version="1" comment="mozilla-js-debugger is earlier than 37:1.4.3-3.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13991"/>
      <state state_ref="oval:org.mitre.oval:ste:9280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30755" version="1" comment="mozilla-chat is earlier than 37:1.4.3-3.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14196"/>
      <state state_ref="oval:org.mitre.oval:ste:9280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30660" version="1" comment="mozilla-nspr-devel is earlier than 37:1.4.3-3.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13716"/>
      <state state_ref="oval:org.mitre.oval:ste:9280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30570" version="1" comment="mozilla-mail is earlier than 37:1.4.3-3.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14423"/>
      <state state_ref="oval:org.mitre.oval:ste:9280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30339" version="1" comment="mozilla-nss-devel is earlier than 37:1.4.3-3.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14415"/>
      <state state_ref="oval:org.mitre.oval:ste:9280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30323" version="1" comment="mozilla-nss is earlier than 37:1.4.3-3.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14069"/>
      <state state_ref="oval:org.mitre.oval:ste:9280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30288" version="1" comment="mozilla-devel is earlier than 37:1.4.3-3.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14231"/>
      <state state_ref="oval:org.mitre.oval:ste:9280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30278" version="1" comment="mozilla is earlier than 37:1.4.3-3.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14405"/>
      <state state_ref="oval:org.mitre.oval:ste:9280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30230" version="1" comment="mozilla-dom-inspector is earlier than 37:1.4.3-3.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13776"/>
      <state state_ref="oval:org.mitre.oval:ste:9280"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38853" version="1" comment="firefox is earlier than 0:3.0.12-1.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:11370"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38809" version="1" comment="firefox is earlier than 0:3.0.12-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:11076"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38575" version="1" comment="xulrunner-devel is earlier than 0:1.9.0.12-1.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15100"/>
      <state state_ref="oval:org.mitre.oval:ste:11149"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38563" version="1" comment="xulrunner is earlier than 0:1.9.0.12-1.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15057"/>
      <state state_ref="oval:org.mitre.oval:ste:11149"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38249" version="1" comment="xulrunner-devel-unstable is earlier than 0:1.9.0.12-1.el5_3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15048"/>
      <state state_ref="oval:org.mitre.oval:ste:11149"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36995" version="1" comment="coreutils is earlier than 0:5.2.1-31.8.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14424"/>
      <state state_ref="oval:org.mitre.oval:ste:10617"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31519" version="1" comment="ipsec-tools is earlier than 0:0.3.3-6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14216"/>
      <state state_ref="oval:org.mitre.oval:ste:9715"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31280" version="1" comment="ipsec-tools is earlier than 0:0.2.5-0.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14216"/>
      <state state_ref="oval:org.mitre.oval:ste:9197"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40493" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-194.3.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:11574"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40487" version="1" comment="kernel-headers is earlier than 0:2.6.18-194.3.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:11574"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40483" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-89.0.25.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:11257"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40459" version="1" comment="kernel-debug is earlier than 0:2.6.18-194.3.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14957"/>
      <state state_ref="oval:org.mitre.oval:ste:11574"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40458" version="1" comment="kernel-devel is earlier than 0:2.6.18-194.3.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:11574"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40445" version="1" comment="kernel is earlier than 0:2.6.18-194.3.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:11574"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40390" version="1" comment="kernel-PAE is earlier than 0:2.6.18-194.3.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:11574"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40380" version="1" comment="kernel-doc is earlier than 0:2.6.9-89.0.25.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:11257"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40373" version="1" comment="kernel-xen is earlier than 0:2.6.18-194.3.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:11574"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40332" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-194.3.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:11574"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40331" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-194.3.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:11574"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40310" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-89.0.25.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:11257"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40272" version="1" comment="kernel-xenU is earlier than 0:2.6.9-89.0.25.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14301"/>
      <state state_ref="oval:org.mitre.oval:ste:11257"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40165" version="1" comment="kernel is earlier than 0:2.6.9-89.0.25.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:11257"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40131" version="1" comment="kernel-devel is earlier than 0:2.6.9-89.0.25.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:11257"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40115" version="1" comment="kernel-smp is earlier than 0:2.6.9-89.0.25.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:11257"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40096" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-89.0.25.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:11257"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40062" version="1" comment="kernel-xenU-devel is earlier than 0:2.6.9-89.0.25.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14060"/>
      <state state_ref="oval:org.mitre.oval:ste:11257"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39968" version="1" comment="kernel-kdump is earlier than 0:2.6.18-194.3.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:11574"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39955" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-89.0.25.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:11257"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39921" version="1" comment="kernel-debug-devel is earlier than 0:2.6.18-194.3.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15023"/>
      <state state_ref="oval:org.mitre.oval:ste:11574"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39895" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-89.0.25.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:11257"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39890" version="1" comment="kernel-doc is earlier than 0:2.6.18-194.3.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:11574"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36495" version="1" comment="speex is earlier than 0:1.0.4-4.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15028"/>
      <state state_ref="oval:org.mitre.oval:ste:10754"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36456" version="1" comment="speex-devel is earlier than 0:1.0.5-4.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15080"/>
      <state state_ref="oval:org.mitre.oval:ste:10839"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36383" version="1" comment="speex-devel is earlier than 0:1.0.4-4.el4_6.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15080"/>
      <state state_ref="oval:org.mitre.oval:ste:10754"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36321" version="1" comment="speex is earlier than 0:1.0.5-4.el5_1.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15028"/>
      <state state_ref="oval:org.mitre.oval:ste:10839"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38044" version="1" comment="libxml2-devel is earlier than 0:2.6.26-2.1.2.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14212"/>
      <state state_ref="oval:org.mitre.oval:ste:11075"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38036" version="1" comment="libxml2 is earlier than 0:2.5.10-14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14133"/>
      <state state_ref="oval:org.mitre.oval:ste:10984"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37940" version="1" comment="libxml2 is earlier than 0:2.6.16-12.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14133"/>
      <state state_ref="oval:org.mitre.oval:ste:11016"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37860" version="1" comment="libxml2-devel is earlier than 0:2.5.10-14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14212"/>
      <state state_ref="oval:org.mitre.oval:ste:10984"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37841" version="1" comment="libxml2-devel is earlier than 0:2.6.16-12.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14212"/>
      <state state_ref="oval:org.mitre.oval:ste:11016"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37839" version="1" comment="libxml2-python is earlier than 0:2.6.16-12.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13780"/>
      <state state_ref="oval:org.mitre.oval:ste:11016"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37771" version="1" comment="libxml2-python is earlier than 0:2.5.10-14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13780"/>
      <state state_ref="oval:org.mitre.oval:ste:10984"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37694" version="1" comment="libxml2 is earlier than 0:2.6.26-2.1.2.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14133"/>
      <state state_ref="oval:org.mitre.oval:ste:11075"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37640" version="1" comment="libxml2-python is earlier than 0:2.6.26-2.1.2.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13780"/>
      <state state_ref="oval:org.mitre.oval:ste:11075"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31016" version="1" comment="freeradius is earlier than 0:1.0.1-1.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14420"/>
      <state state_ref="oval:org.mitre.oval:ste:8783"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38561" version="1" comment="java-1.6.0-openjdk is earlier than 1:1.6.0.0-0.30.b09.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14925"/>
      <state state_ref="oval:org.mitre.oval:ste:11032"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38555" version="1" comment="python-lcms is earlier than 0:1.18-0.1.beta1.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14958"/>
      <state state_ref="oval:org.mitre.oval:ste:10508"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38276" version="1" comment="java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-0.30.b09.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15274"/>
      <state state_ref="oval:org.mitre.oval:ste:11032"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38260" version="1" comment="lcms is earlier than 0:1.18-0.1.beta1.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15079"/>
      <state state_ref="oval:org.mitre.oval:ste:10508"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37972" version="1" comment="lcms-devel is earlier than 0:1.18-0.1.beta1.el5_3.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14904"/>
      <state state_ref="oval:org.mitre.oval:ste:10508"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37769" version="1" comment="java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-0.30.b09.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14531"/>
      <state state_ref="oval:org.mitre.oval:ste:11032"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37661" version="1" comment="java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-0.30.b09.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14889"/>
      <state state_ref="oval:org.mitre.oval:ste:11032"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37652" version="1" comment="java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-0.30.b09.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15114"/>
      <state state_ref="oval:org.mitre.oval:ste:11032"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40293" version="1" comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14900"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40280" version="1" comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14995"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40279" version="1" comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.7.EL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13698"/>
      <state state_ref="oval:org.mitre.oval:ste:11279"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40278" version="1" comment="openoffice.org-emailmerge is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14522"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40275" version="1" comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14980"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40266" version="1" comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14984"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40262" version="1" comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14903"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40245" version="1" comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14849"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40242" version="1" comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.7.EL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14215"/>
      <state state_ref="oval:org.mitre.oval:ste:11279"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40236" version="1" comment="openoffice.org-langpack-pt_PT is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14571"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40232" version="1" comment="openoffice.org-libs is earlier than 0:1.1.2-46.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14455"/>
      <state state_ref="oval:org.mitre.oval:ste:11555"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40223" version="1" comment="openoffice.org-math is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14557"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40217" version="1" comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14456"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40213" version="1" comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14987"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40207" version="1" comment="openoffice.org-langpack-ta_IN is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14637"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40206" version="1" comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14875"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40203" version="1" comment="openoffice.org-langpack-gu_IN is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14269"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40197" version="1" comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14401"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40195" version="1" comment="openoffice.org-langpack-sv is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14529"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40192" version="1" comment="openoffice.org-langpack-gl_ES is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14792"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40190" version="1" comment="openoffice.org-sdk is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14664"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40188" version="1" comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14476"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40187" version="1" comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14369"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40186" version="1" comment="openoffice.org-langpack-ga_IE is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14635"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40178" version="1" comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14901"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40173" version="1" comment="openoffice.org-impress is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14707"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40170" version="1" comment="openoffice.org-headless is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14864"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40169" version="1" comment="openoffice.org-javafilter is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14566"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40167" version="1" comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14716"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40166" version="1" comment="openoffice.org-langpack-pt_BR is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14822"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40163" version="1" comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14649"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40158" version="1" comment="openoffice.org-langpack-ms_MY is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14787"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40157" version="1" comment="openoffice.org-langpack-ca_ES is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14778"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40155" version="1" comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14963"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40143" version="1" comment="openoffice.org-langpack-sk_SK is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14266"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40138" version="1" comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14976"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40135" version="1" comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15006"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40123" version="1" comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14894"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40120" version="1" comment="openoffice.org-langpack-bn is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14706"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40119" version="1" comment="openoffice.org-langpack-tr_TR is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14886"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40110" version="1" comment="openoffice.org-langpack-ru is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14766"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40104" version="1" comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14831"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40101" version="1" comment="openoffice.org-langpack-nl is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14909"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40100" version="1" comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13974"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40092" version="1" comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14708"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40086" version="1" comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14834"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40079" version="1" comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15018"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40078" version="1" comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.7.EL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14455"/>
      <state state_ref="oval:org.mitre.oval:ste:11279"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40076" version="1" comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15000"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40069" version="1" comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14599"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40061" version="1" comment="openoffice.org-langpack-pl_PL is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14767"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40060" version="1" comment="openoffice.org-langpack-ml_IN is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14257"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40058" version="1" comment="openoffice.org2 is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14437"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40048" version="1" comment="openoffice.org-langpack-bg_BG is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14589"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40043" version="1" comment="openoffice.org-langpack-sr_CS is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14189"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40042" version="1" comment="openoffice.org-langpack-lt_LT is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13921"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40038" version="1" comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14696"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40033" version="1" comment="openoffice.org-langpack-et_EE is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14280"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40027" version="1" comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14562"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40025" version="1" comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14193"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40024" version="1" comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14090"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40019" version="1" comment="openoffice.org-langpack-fr is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14772"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40015" version="1" comment="openoffice.org-langpack-hr_HR is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14336"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40006" version="1" comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14762"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40002" version="1" comment="openoffice.org-langpack-eu_ES is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14813"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39999" version="1" comment="openoffice.org-langpack-kn_IN is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14714"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39998" version="1" comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14606"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39996" version="1" comment="openoffice.org-pyuno is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14806"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39995" version="1" comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14865"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39989" version="1" comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14651"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39979" version="1" comment="openoffice.org-graphicfilter is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14526"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39977" version="1" comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14569"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39976" version="1" comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14997"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39975" version="1" comment="openoffice.org-core is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14450"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39972" version="1" comment="openoffice.org-langpack-es is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14604"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39966" version="1" comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14763"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39962" version="1" comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14845"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39959" version="1" comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15005"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39958" version="1" comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14768"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39951" version="1" comment="openoffice.org-langpack-th_TH is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14732"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39941" version="1" comment="openoffice.org-langpack-ko_KR is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14190"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39939" version="1" comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14738"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39936" version="1" comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14617"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39923" version="1" comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14056"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39922" version="1" comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14728"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39914" version="1" comment="openoffice.org-langpack-sl_SI is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14869"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39905" version="1" comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14432"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39903" version="1" comment="openoffice.org-xsltfilter is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14530"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39900" version="1" comment="openoffice.org-langpack-hi_IN is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14717"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39898" version="1" comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14971"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39893" version="1" comment="openoffice.org-i18n is earlier than 0:1.1.2-46.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14215"/>
      <state state_ref="oval:org.mitre.oval:ste:11555"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39889" version="1" comment="openoffice.org-langpack-as_IN is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14576"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39879" version="1" comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14321"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39872" version="1" comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14885"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39870" version="1" comment="openoffice.org-langpack-da_DK is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14748"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39861" version="1" comment="openoffice.org is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39851" version="1" comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14744"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39847" version="1" comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14969"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39845" version="1" comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14472"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39842" version="1" comment="openoffice.org-calc is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14623"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39835" version="1" comment="openoffice.org-langpack-or_IN is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14588"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39830" version="1" comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14322"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39823" version="1" comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14937"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39819" version="1" comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14882"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39818" version="1" comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14826"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39814" version="1" comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14990"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39800" version="1" comment="openoffice.org-langpack-ja_JP is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14155"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39796" version="1" comment="openoffice.org-langpack-pa_IN is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14746"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39792" version="1" comment="openoffice.org-langpack-nb_NO is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14807"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39786" version="1" comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14759"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39776" version="1" comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14814"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39767" version="1" comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14765"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39764" version="1" comment="openoffice.org-langpack-fi_FI is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14625"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39762" version="1" comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14600"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39760" version="1" comment="openoffice.org is earlier than 0:1.1.5-10.6.0.7.EL4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:11279"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39754" version="1" comment="openoffice.org-langpack-mr_IN is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14855"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39745" version="1" comment="openoffice.org-langpack-st_ZA is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14851"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39726" version="1" comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14754"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39723" version="1" comment="openoffice.org-draw is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14828"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39695" version="1" comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14956"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39688" version="1" comment="openoffice.org-sdk-doc is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14165"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39687" version="1" comment="openoffice.org-langpack-it is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14812"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39682" version="1" comment="openoffice.org-langpack-nn_NO is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14779"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39653" version="1" comment="openoffice.org-langpack-ar is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14872"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39641" version="1" comment="openoffice.org-langpack-cy_GB is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14501"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39612" version="1" comment="openoffice.org-langpack-zh_CN is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14839"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39574" version="1" comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14892"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39552" version="1" comment="openoffice.org is earlier than 0:1.1.2-46.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:11555"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39522" version="1" comment="openoffice.org-langpack-te_IN is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14832"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39506" version="1" comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14737"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39500" version="1" comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14907"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39496" version="1" comment="openoffice.org-langpack-hu_HU is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14694"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39480" version="1" comment="openoffice.org-base is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14548"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39455" version="1" comment="openoffice.org-langpack-de is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14539"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39422" version="1" comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14986"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39416" version="1" comment="openoffice.org-langpack-el_GR is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14359"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39388" version="1" comment="openoffice.org-testtools is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14135"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39384" version="1" comment="openoffice.org-langpack-zh_TW is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14392"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39321" version="1" comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14660"/>
      <state state_ref="oval:org.mitre.oval:ste:10953"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39301" version="1" comment="openoffice.org-langpack-he_IL is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14442"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39239" version="1" comment="openoffice.org-langpack-af_ZA is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14506"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39209" version="1" comment="openoffice.org-writer is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14758"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39119" version="1" comment="openoffice.org-langpack-ur is earlier than 1:2.3.0-6.11.el5_4.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14671"/>
      <state state_ref="oval:org.mitre.oval:ste:11471"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36116" version="1" comment="xorg-x11-twm is earlier than 0:6.8.2-1.EL.33.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14572"/>
      <state state_ref="oval:org.mitre.oval:ste:10507"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36103" version="1" comment="xorg-x11-deprecated-libs-devel is earlier than 0:6.8.2-1.EL.33.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14031"/>
      <state state_ref="oval:org.mitre.oval:ste:10507"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36074" version="1" comment="xorg-x11-Xvfb is earlier than 0:6.8.2-1.EL.33.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14097"/>
      <state state_ref="oval:org.mitre.oval:ste:10507"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36060" version="1" comment="xorg-x11-devel is earlier than 0:6.8.2-1.EL.33.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14595"/>
      <state state_ref="oval:org.mitre.oval:ste:10507"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36031" version="1" comment="XFree86-xfs is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14311"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36025" version="1" comment="XFree86-doc is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14406"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36014" version="1" comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14226"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36012" version="1" comment="xorg-x11-xdm is earlier than 0:6.8.2-1.EL.33.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14580"/>
      <state state_ref="oval:org.mitre.oval:ste:10507"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36011" version="1" comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14364"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36004" version="1" comment="xorg-x11-Xdmx is earlier than 0:6.8.2-1.EL.33.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13643"/>
      <state state_ref="oval:org.mitre.oval:ste:10507"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35998" version="1" comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14288"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35984" version="1" comment="xorg-x11-Xnest is earlier than 0:6.8.2-1.EL.33.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14168"/>
      <state state_ref="oval:org.mitre.oval:ste:10507"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35975" version="1" comment="XFree86-Xnest is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14053"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35971" version="1" comment="XFree86-tools is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13693"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35965" version="1" comment="XFree86-font-utils is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14385"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35946" version="1" comment="xorg-x11-Mesa-libGLU is earlier than 0:6.8.2-1.EL.33.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14515"/>
      <state state_ref="oval:org.mitre.oval:ste:10507"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35934" version="1" comment="xorg-x11-libs is earlier than 0:6.8.2-1.EL.33.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14478"/>
      <state state_ref="oval:org.mitre.oval:ste:10507"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35933" version="1" comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14281"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35929" version="1" comment="XFree86-libs is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14259"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35923" version="1" comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14045"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35922" version="1" comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14082"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35914" version="1" comment="XFree86-sdk is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14107"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35909" version="1" comment="xorg-x11-tools is earlier than 0:6.8.2-1.EL.33.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14129"/>
      <state state_ref="oval:org.mitre.oval:ste:10507"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35905" version="1" comment="xorg-x11-sdk is earlier than 0:6.8.2-1.EL.33.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14291"/>
      <state state_ref="oval:org.mitre.oval:ste:10507"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35903" version="1" comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14260"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35897" version="1" comment="libXfont-devel is earlier than 0:1.2.2-1.0.3.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14538"/>
      <state state_ref="oval:org.mitre.oval:ste:10578"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35895" version="1" comment="xorg-x11-deprecated-libs is earlier than 0:6.8.2-1.EL.33.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14262"/>
      <state state_ref="oval:org.mitre.oval:ste:10507"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35865" version="1" comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14067"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35857" version="1" comment="xorg-x11 is earlier than 0:6.8.2-1.EL.33.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14592"/>
      <state state_ref="oval:org.mitre.oval:ste:10507"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35836" version="1" comment="XFree86-truetype-fonts is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14354"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35831" version="1" comment="XFree86 is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14255"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35826" version="1" comment="XFree86-xauth is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14352"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35804" version="1" comment="XFree86-base-fonts is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14407"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35795" version="1" comment="xorg-x11-doc is earlier than 0:6.8.2-1.EL.33.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14553"/>
      <state state_ref="oval:org.mitre.oval:ste:10507"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35793" version="1" comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14121"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35789" version="1" comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14351"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35753" version="1" comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14127"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35726" version="1" comment="XFree86-twm is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13667"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35715" version="1" comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13712"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35711" version="1" comment="XFree86-syriac-fonts is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14198"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35681" version="1" comment="xorg-x11-font-utils is earlier than 0:6.8.2-1.EL.33.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14624"/>
      <state state_ref="oval:org.mitre.oval:ste:10507"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35678" version="1" comment="XFree86-devel is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14397"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35665" version="1" comment="XFree86-Xvfb is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13644"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35610" version="1" comment="XFree86-libs-data is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14326"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35583" version="1" comment="libXfont is earlier than 0:1.2.2-1.0.3.el5_1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14504"/>
      <state state_ref="oval:org.mitre.oval:ste:10578"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35504" version="1" comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14315"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35483" version="1" comment="xorg-x11-xfs is earlier than 0:6.8.2-1.EL.33.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14089"/>
      <state state_ref="oval:org.mitre.oval:ste:10507"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35467" version="1" comment="xorg-x11-xauth is earlier than 0:6.8.2-1.EL.33.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14169"/>
      <state state_ref="oval:org.mitre.oval:ste:10507"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35116" version="1" comment="xorg-x11-Mesa-libGL is earlier than 0:6.8.2-1.EL.33.0.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14184"/>
      <state state_ref="oval:org.mitre.oval:ste:10507"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35045" version="1" comment="XFree86-xdm is earlier than 0:4.3.0-126.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13658"/>
      <state state_ref="oval:org.mitre.oval:ste:10384"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36807" version="1" comment="samba-client is earlier than 0:3.0.9-1.3E.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13861"/>
      <state state_ref="oval:org.mitre.oval:ste:10386"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36789" version="1" comment="samba-common is earlier than 0:3.0.25b-1.el4_6.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14032"/>
      <state state_ref="oval:org.mitre.oval:ste:10805"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36764" version="1" comment="samba is earlier than 0:3.0.25b-1.el4_6.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13931"/>
      <state state_ref="oval:org.mitre.oval:ste:10805"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36743" version="1" comment="samba-client is earlier than 0:3.0.25b-1.el4_6.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13861"/>
      <state state_ref="oval:org.mitre.oval:ste:10805"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36715" version="1" comment="samba-swat is earlier than 0:3.0.28-1.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13707"/>
      <state state_ref="oval:org.mitre.oval:ste:10689"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36653" version="1" comment="samba is earlier than 0:3.0.28-1.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13931"/>
      <state state_ref="oval:org.mitre.oval:ste:10689"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36627" version="1" comment="samba-swat is earlier than 0:3.0.25b-1.el4_6.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13707"/>
      <state state_ref="oval:org.mitre.oval:ste:10805"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36581" version="1" comment="samba is earlier than 0:3.0.9-1.3E.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13931"/>
      <state state_ref="oval:org.mitre.oval:ste:10386"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36458" version="1" comment="samba-swat is earlier than 0:3.0.9-1.3E.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13707"/>
      <state state_ref="oval:org.mitre.oval:ste:10386"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36330" version="1" comment="samba-common is earlier than 0:3.0.9-1.3E.15" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14032"/>
      <state state_ref="oval:org.mitre.oval:ste:10386"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36275" version="1" comment="samba-common is earlier than 0:3.0.28-1.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14032"/>
      <state state_ref="oval:org.mitre.oval:ste:10689"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35847" version="1" comment="samba-client is earlier than 0:3.0.28-1.el5_2.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13861"/>
      <state state_ref="oval:org.mitre.oval:ste:10689"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38629" version="1" comment="ghostscript is earlier than 0:8.15.2-9.4.el5_3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14541"/>
      <state state_ref="oval:org.mitre.oval:ste:10779"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38588" version="1" comment="ghostscript-devel is earlier than 0:8.15.2-9.4.el5_3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14524"/>
      <state state_ref="oval:org.mitre.oval:ste:10779"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38457" version="1" comment="ghostscript-gtk is earlier than 0:8.15.2-9.4.el5_3.7" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14614"/>
      <state state_ref="oval:org.mitre.oval:ste:10779"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33739" version="1" comment="spamassassin is earlier than 0:3.1.8-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14376"/>
      <state state_ref="oval:org.mitre.oval:ste:10426"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33518" version="1" comment="spamassassin is earlier than 0:3.1.8-2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14376"/>
      <state state_ref="oval:org.mitre.oval:ste:9943"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32103" version="1" comment="mod_ssl is earlier than 1:2.0.52-12.2.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:9882"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32102" version="1" comment="httpd-suexec is earlier than 0:2.0.52-12.2.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14611"/>
      <state state_ref="oval:org.mitre.oval:ste:10037"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32055" version="1" comment="httpd-devel is earlier than 0:2.0.52-12.2.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:10037"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32030" version="1" comment="mod_ssl is earlier than 1:2.0.46-46.3.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14422"/>
      <state state_ref="oval:org.mitre.oval:ste:9908"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32015" version="1" comment="httpd is earlier than 0:2.0.52-12.2.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:10037"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31872" version="1" comment="httpd-devel is earlier than 0:2.0.46-46.3.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14256"/>
      <state state_ref="oval:org.mitre.oval:ste:10014"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31655" version="1" comment="httpd-manual is earlier than 0:2.0.52-12.2.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14457"/>
      <state state_ref="oval:org.mitre.oval:ste:10037"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31190" version="1" comment="httpd is earlier than 0:2.0.46-46.3.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14173"/>
      <state state_ref="oval:org.mitre.oval:ste:10014"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32647" version="1" comment="mozilla-nspr is earlier than 37:1.7.12-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14160"/>
      <state state_ref="oval:org.mitre.oval:ste:9740"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32548" version="1" comment="mozilla-dom-inspector is earlier than 37:1.7.12-1.1.3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13776"/>
      <state state_ref="oval:org.mitre.oval:ste:10136"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32540" version="1" comment="mozilla-nss-devel is earlier than 37:1.7.12-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14415"/>
      <state state_ref="oval:org.mitre.oval:ste:9740"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32519" version="1" comment="mozilla-nss is earlier than 37:1.7.12-1.1.3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14069"/>
      <state state_ref="oval:org.mitre.oval:ste:10136"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32504" version="1" comment="mozilla-js-debugger is earlier than 37:1.7.12-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13991"/>
      <state state_ref="oval:org.mitre.oval:ste:9740"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32502" version="1" comment="mozilla is earlier than 37:1.7.12-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14405"/>
      <state state_ref="oval:org.mitre.oval:ste:9740"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32492" version="1" comment="mozilla-js-debugger is earlier than 37:1.7.12-1.1.3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13991"/>
      <state state_ref="oval:org.mitre.oval:ste:10136"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32486" version="1" comment="mozilla is earlier than 37:1.7.12-1.1.3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14405"/>
      <state state_ref="oval:org.mitre.oval:ste:10136"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32478" version="1" comment="mozilla-nss-devel is earlier than 37:1.7.12-1.1.3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14415"/>
      <state state_ref="oval:org.mitre.oval:ste:10136"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32458" version="1" comment="mozilla-dom-inspector is earlier than 37:1.7.12-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13776"/>
      <state state_ref="oval:org.mitre.oval:ste:9740"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32454" version="1" comment="mozilla-nspr-devel is earlier than 37:1.7.12-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13716"/>
      <state state_ref="oval:org.mitre.oval:ste:9740"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32384" version="1" comment="firefox is earlier than 0:1.0.7-1.4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:9853"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32359" version="1" comment="mozilla-devel is earlier than 37:1.7.12-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14231"/>
      <state state_ref="oval:org.mitre.oval:ste:9740"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32216" version="1" comment="mozilla-nss is earlier than 37:1.7.12-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14069"/>
      <state state_ref="oval:org.mitre.oval:ste:9740"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32204" version="1" comment="thunderbird is earlier than 0:1.0.8-1.4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:10164"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32176" version="1" comment="mozilla-chat is earlier than 37:1.7.12-1.1.3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14196"/>
      <state state_ref="oval:org.mitre.oval:ste:10136"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31980" version="1" comment="mozilla-devel is earlier than 37:1.7.12-1.1.3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14231"/>
      <state state_ref="oval:org.mitre.oval:ste:10136"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31881" version="1" comment="mozilla-nspr-devel is earlier than 37:1.7.12-1.1.3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13716"/>
      <state state_ref="oval:org.mitre.oval:ste:10136"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31856" version="1" comment="mozilla-mail is earlier than 37:1.7.12-1.1.3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14423"/>
      <state state_ref="oval:org.mitre.oval:ste:10136"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31709" version="1" comment="mozilla-nspr is earlier than 37:1.7.12-1.1.3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14160"/>
      <state state_ref="oval:org.mitre.oval:ste:10136"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31656" version="1" comment="mozilla-mail is earlier than 37:1.7.12-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14423"/>
      <state state_ref="oval:org.mitre.oval:ste:9740"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31570" version="1" comment="mozilla-chat is earlier than 37:1.7.12-1.4.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14196"/>
      <state state_ref="oval:org.mitre.oval:ste:9740"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34071" version="1" comment="kernel-xen is earlier than 0:2.6.18-8.1.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14710"/>
      <state state_ref="oval:org.mitre.oval:ste:10441"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34058" version="1" comment="kernel-doc is earlier than 0:2.6.18-8.1.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:10441"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34055" version="1" comment="kernel-xen-devel is earlier than 0:2.6.18-8.1.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14821"/>
      <state state_ref="oval:org.mitre.oval:ste:10441"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34043" version="1" comment="kernel-debuginfo-common is earlier than 0:2.6.18-8.1.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14853"/>
      <state state_ref="oval:org.mitre.oval:ste:10441"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34011" version="1" comment="kernel is earlier than 0:2.6.18-8.1.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:10441"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33985" version="1" comment="kernel-kdump-devel is earlier than 0:2.6.18-8.1.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14761"/>
      <state state_ref="oval:org.mitre.oval:ste:10441"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33899" version="1" comment="kernel-devel is earlier than 0:2.6.18-8.1.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:10441"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33805" version="1" comment="kernel-PAE-devel is earlier than 0:2.6.18-8.1.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14863"/>
      <state state_ref="oval:org.mitre.oval:ste:10441"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33709" version="1" comment="kernel-PAE is earlier than 0:2.6.18-8.1.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14641"/>
      <state state_ref="oval:org.mitre.oval:ste:10441"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33503" version="1" comment="kernel-kdump is earlier than 0:2.6.18-8.1.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14801"/>
      <state state_ref="oval:org.mitre.oval:ste:10441"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33478" version="1" comment="kernel-headers is earlier than 0:2.6.18-8.1.3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14830"/>
      <state state_ref="oval:org.mitre.oval:ste:10441"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30764" version="1" comment="krb5-libs is earlier than 0:1.2.7-28" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14395"/>
      <state state_ref="oval:org.mitre.oval:ste:9635"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30623" version="1" comment="krb5-workstation is earlier than 0:1.2.7-28" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14279"/>
      <state state_ref="oval:org.mitre.oval:ste:9635"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30595" version="1" comment="krb5-devel is earlier than 0:1.2.7-28" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14100"/>
      <state state_ref="oval:org.mitre.oval:ste:9635"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30376" version="1" comment="krb5-server is earlier than 0:1.2.7-28" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14452"/>
      <state state_ref="oval:org.mitre.oval:ste:9635"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30237" version="1" comment="krb5 is earlier than 0:1.2.7-28" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14120"/>
      <state state_ref="oval:org.mitre.oval:ste:9635"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30448" version="1" comment="ethereal is earlier than 0:0.10.3-0.30E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14030"/>
      <state state_ref="oval:org.mitre.oval:ste:9510"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:29720" version="1" comment="ethereal-gnome is earlier than 0:0.10.3-0.30E.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14338"/>
      <state state_ref="oval:org.mitre.oval:ste:9510"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33761" version="1" comment="yelp is earlier than 0:2.16.0-14.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14764"/>
      <state state_ref="oval:org.mitre.oval:ste:9699"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33759" version="1" comment="firefox is earlier than 0:1.5.0.10-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10433"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33744" version="1" comment="devhelp-devel is earlier than 0:0.12-10.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14520"/>
      <state state_ref="oval:org.mitre.oval:ste:10352"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33724" version="1" comment="seamonkey is earlier than 0:1.0.8-0.2.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10254"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33712" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:10289"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33705" version="1" comment="seamonkey is earlier than 0:1.0.8-0.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10289"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33697" version="1" comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:10289"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33695" version="1" comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10289"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33688" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10254"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33678" version="1" comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10289"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33675" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:10254"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33658" version="1" comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10254"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33649" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10254"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33648" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10289"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33645" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10289"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33616" version="1" comment="firefox is earlier than 0:1.5.0.10-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10464"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33554" version="1" comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:10289"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33510" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:10254"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33493" version="1" comment="thunderbird is earlier than 0:1.5.0.10-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:9935"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33467" version="1" comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10254"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33461" version="1" comment="firefox-devel is earlier than 0:1.5.0.10-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14876"/>
      <state state_ref="oval:org.mitre.oval:ste:10464"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33415" version="1" comment="devhelp is earlier than 0:0.12-10.0.1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14497"/>
      <state state_ref="oval:org.mitre.oval:ste:10352"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33409" version="1" comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10254"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33400" version="1" comment="devhelp is earlier than 0:0.10-0.7.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14497"/>
      <state state_ref="oval:org.mitre.oval:ste:10331"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33391" version="1" comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:10254"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33381" version="1" comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:10254"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33379" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:10289"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33244" version="1" comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10289"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32765" version="1" comment="thunderbird is earlier than 0:1.5.0.10-0.1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:10433"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32760" version="1" comment="devhelp-devel is earlier than 0:0.10-0.7.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14520"/>
      <state state_ref="oval:org.mitre.oval:ste:10331"/>
    </rpminfo_test>
    <package_test id="oval:org.mitre.oval:tst:675" version="1" check="at least one" comment="CDE Desktop Window Manager (SUNWdtwm) installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:539"/>
    </package_test>
    <uname_test id="oval:org.mitre.oval:tst:2459" version="1" comment="Solaris 10 Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:2303"/>
    </uname_test>
    <patch_test id="oval:org.mitre.oval:tst:209" version="1" check="at least one" comment="Patch 118953-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:209"/>
      <state state_ref="oval:org.mitre.oval:ste:207"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:208" version="1" check="at least one" comment="Patch 118954-02 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:208"/>
      <state state_ref="oval:org.mitre.oval:ste:206"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:207" version="1" check="at least one" comment="Patch 109931-10 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:207"/>
      <state state_ref="oval:org.mitre.oval:ste:205"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:206" version="1" check="at least one" comment="Patch 109932-10 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:206"/>
      <state state_ref="oval:org.mitre.oval:ste:204"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:205" version="1" check="at least one" comment="Patch 114219-11 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:205"/>
      <state state_ref="oval:org.mitre.oval:ste:203"/>
    </patch_test>
    <package_test id="oval:org.mitre.oval:tst:204" version="1" check="at least one" comment="Pkg SUNWTiff is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:204"/>
    </package_test>
    <package_test id="oval:org.mitre.oval:tst:203" version="1" check="at least one" comment="Pkg SUNWTiffx is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:203"/>
    </package_test>
    <patch_test id="oval:org.mitre.oval:tst:202" version="1" check="at least one" comment="Patch 114220-11 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:202"/>
      <state state_ref="oval:org.mitre.oval:ste:202"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:201" version="1" check="at least one" comment="Patch 119900-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:201"/>
      <state state_ref="oval:org.mitre.oval:ste:201"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:200" version="1" check="at least one" comment="Patch 119901-01 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:200"/>
      <state state_ref="oval:org.mitre.oval:ste:200"/>
    </patch_test>
    <uname_test id="oval:org.mitre.oval:tst:3045" version="1" comment="Solaris 7 Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:2851"/>
    </uname_test>
    <patch_test id="oval:org.mitre.oval:tst:213" version="1" check="at least one" comment="Patch 111844-03 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:213"/>
      <state state_ref="oval:org.mitre.oval:ste:211"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:212" version="1" check="at least one" comment="Patch 111845-03 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:212"/>
      <state state_ref="oval:org.mitre.oval:ste:210"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:211" version="1" check="at least one" comment="Patch 112785-38 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:211"/>
      <state state_ref="oval:org.mitre.oval:ste:209"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:210" version="1" check="at least one" comment="Patch 112786-27 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:210"/>
      <state state_ref="oval:org.mitre.oval:ste:208"/>
    </patch_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34483" version="1" comment="pam-devel is earlier than 0:0.75-72" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14734"/>
      <state state_ref="oval:org.mitre.oval:ste:10465"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34405" version="1" comment="cdrecord is earlier than 8:2.01.0.a32-0.EL3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13849"/>
      <state state_ref="oval:org.mitre.oval:ste:10330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34392" version="1" comment="mkisofs is earlier than 8:2.01.0.a32-0.EL3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13769"/>
      <state state_ref="oval:org.mitre.oval:ste:10330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34274" version="1" comment="pam is earlier than 0:0.75-72" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14730"/>
      <state state_ref="oval:org.mitre.oval:ste:10465"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34263" version="1" comment="cdrecord-devel is earlier than 8:2.01.0.a32-0.EL3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14153"/>
      <state state_ref="oval:org.mitre.oval:ste:10330"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33947" version="1" comment="cdrtools is earlier than 8:2.01.0.a32-0.EL3.6" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14205"/>
      <state state_ref="oval:org.mitre.oval:ste:10330"/>
    </rpminfo_test>
    <process_test id="oval:org.mitre.oval:tst:654" version="1" comment="Apache running (httpd)" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:526"/>
    </process_test>
    <uname_test id="oval:org.mitre.oval:tst:3051" version="1" comment="Solaris 9 Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:2857"/>
    </uname_test>
    <uname_test id="oval:org.mitre.oval:tst:2465" version="1" comment="Installed architecture is sparc" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:2309"/>
    </uname_test>
    <uname_test id="oval:org.mitre.oval:tst:2463" version="1" comment="ix86 architecture" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:2307"/>
    </uname_test>
    <patch_test id="oval:org.mitre.oval:tst:217" version="1" comment="Patch 116973-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:217"/>
      <state state_ref="oval:org.mitre.oval:ste:215"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:216" version="1" comment="Patch 116974-02 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:216"/>
      <state state_ref="oval:org.mitre.oval:ste:214"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:215" version="1" comment="Patch 113146-05 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:215"/>
      <state state_ref="oval:org.mitre.oval:ste:213"/>
    </patch_test>
    <patch_test id="oval:org.mitre.oval:tst:214" version="1" comment="Patch 114145-04 or later installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:214"/>
      <state state_ref="oval:org.mitre.oval:ste:212"/>
    </patch_test>
    <registry_test id="oval:org.mitre.oval:tst:2761" version="1" comment="Windows Server 2003 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:419"/>
      <state state_ref="oval:org.mitre.oval:ste:2582"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:2437" version="4" comment="Win2K/XP/2003 is patched" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:717"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:218" version="1" comment="the version of kerberos.dll is less than 5.2.3790.347" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:218"/>
      <state state_ref="oval:org.mitre.oval:ste:216"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31785" version="1" comment="mozilla-nss-devel is earlier than 37:1.7.7-1.1.3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14415"/>
      <state state_ref="oval:org.mitre.oval:ste:9240"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31695" version="1" comment="mozilla-nspr is earlier than 37:1.7.7-1.1.3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14160"/>
      <state state_ref="oval:org.mitre.oval:ste:9240"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31645" version="1" comment="mozilla-chat is earlier than 37:1.7.7-1.1.3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14196"/>
      <state state_ref="oval:org.mitre.oval:ste:9240"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31626" version="1" comment="mozilla-nspr-devel is earlier than 37:1.7.7-1.1.3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13716"/>
      <state state_ref="oval:org.mitre.oval:ste:9240"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31569" version="1" comment="mozilla-dom-inspector is earlier than 37:1.7.7-1.1.3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13776"/>
      <state state_ref="oval:org.mitre.oval:ste:9240"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31520" version="1" comment="mozilla is earlier than 37:1.7.7-1.1.3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14405"/>
      <state state_ref="oval:org.mitre.oval:ste:9240"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31516" version="1" comment="mozilla-mail is earlier than 37:1.7.7-1.1.3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14423"/>
      <state state_ref="oval:org.mitre.oval:ste:9240"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31512" version="1" comment="mozilla-nss is earlier than 37:1.7.7-1.1.3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14069"/>
      <state state_ref="oval:org.mitre.oval:ste:9240"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31283" version="1" comment="mozilla-js-debugger is earlier than 37:1.7.7-1.1.3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13991"/>
      <state state_ref="oval:org.mitre.oval:ste:9240"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31143" version="1" comment="mozilla-devel is earlier than 37:1.7.7-1.1.3.4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14231"/>
      <state state_ref="oval:org.mitre.oval:ste:9240"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31118" version="1" comment="firefox is earlier than 0:1.0.1-1.4.3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:9208"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2861" version="1" comment="Red Hat Enterprise 3 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1414"/>
      <state state_ref="oval:org.mitre.oval:ste:2679"/>
    </rpminfo_test>
    <file_test id="oval:org.mitre.oval:tst:1381" version="1" comment="/usr/bin/cvs is executable" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:953"/>
      <state state_ref="oval:org.mitre.oval:ste:1243"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1380" version="1" comment="/usr/bin/cvs is executable" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:953"/>
      <state state_ref="oval:org.mitre.oval:ste:1242"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:1379" version="1" comment="/usr/bin/cvs is executable" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:953"/>
      <state state_ref="oval:org.mitre.oval:ste:1241"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:1347" version="1" comment="cvs rpm version prior to 1.11.2-24 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:933"/>
      <state state_ref="oval:org.mitre.oval:ste:1209"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:3085" version="1" comment="Windows 2000 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:419"/>
      <state state_ref="oval:org.mitre.oval:ste:2890"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:3084" version="4" comment="Win2K/XP/2003 service pack 4 (or later) is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:717"/>
      <state state_ref="oval:org.mitre.oval:ste:2889"/>
    </registry_test>
    <file_test id="oval:org.mitre.oval:tst:222" version="1" comment="the version of kerberos.dll is less than 5.0.2195.7053" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:218"/>
      <state state_ref="oval:org.mitre.oval:ste:220"/>
    </file_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34981" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-4.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10250"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34971" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-4.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10250"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34968" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-4.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:10250"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34957" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-4.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:10250"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34925" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-0.3.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10221"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34888" version="1" comment="thunderbird is earlier than 0:1.5.0.12-0.3.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:10524"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34869" version="1" comment="thunderbird is earlier than 0:1.5.0.12-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:9987"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34868" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-4.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:10250"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34839" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.3.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:10221"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34828" version="1" comment="firefox is earlier than 0:1.5.0.12-0.3.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10524"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34827" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.3.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10221"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34814" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.3.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:10221"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34810" version="1" comment="firefox-devel is earlier than 0:1.5.0.12-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14876"/>
      <state state_ref="oval:org.mitre.oval:ste:9987"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34775" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-4.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:10250"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34762" version="1" comment="seamonkey is earlier than 0:1.0.9-0.3.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10221"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34747" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-0.3.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:10221"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34723" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.3.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10221"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34694" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-0.3.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10221"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34684" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-0.3.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10221"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34667" version="1" comment="firefox is earlier than 0:1.5.0.12-3.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:9987"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34608" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-4.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10250"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34550" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-4.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10250"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34492" version="1" comment="seamonkey is earlier than 0:1.0.9-4.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10250"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34335" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-4.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10250"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33986" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-0.3.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:10221"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:30434" version="1" comment="gaim is earlier than 1:0.82.1-0.RHEL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14159"/>
      <state state_ref="oval:org.mitre.oval:ste:9563"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32122" version="1" comment="ethereal-gnome is earlier than 0:0.10.12-1.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14338"/>
      <state state_ref="oval:org.mitre.oval:ste:9083"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32076" version="1" comment="ethereal is earlier than 0:0.10.12-1.EL3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14030"/>
      <state state_ref="oval:org.mitre.oval:ste:9936"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32035" version="1" comment="ethereal is earlier than 0:0.10.12-1.EL4.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14030"/>
      <state state_ref="oval:org.mitre.oval:ste:9083"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31966" version="1" comment="ethereal-gnome is earlier than 0:0.10.12-1.EL3.1" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14338"/>
      <state state_ref="oval:org.mitre.oval:ste:9936"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34623" version="1" comment="kernel is earlier than 0:2.4.21-50.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:9867"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34622" version="1" comment="kernel-source is earlier than 0:2.4.21-50.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14186"/>
      <state state_ref="oval:org.mitre.oval:ste:9867"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34585" version="1" comment="kernel-smp-unsupported is earlier than 0:2.4.21-50.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14218"/>
      <state state_ref="oval:org.mitre.oval:ste:9867"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34576" version="1" comment="kernel-smp is earlier than 0:2.4.21-50.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:9867"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34567" version="1" comment="kernel-doc is earlier than 0:2.4.21-50.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:9867"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34527" version="1" comment="kernel-hugemem is earlier than 0:2.4.21-50.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:9867"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34516" version="1" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-50.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14372"/>
      <state state_ref="oval:org.mitre.oval:ste:9867"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34214" version="1" comment="kernel-unsupported is earlier than 0:2.4.21-50.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14229"/>
      <state state_ref="oval:org.mitre.oval:ste:9867"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34140" version="1" comment="kernel-BOOT is earlier than 0:2.4.21-50.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14219"/>
      <state state_ref="oval:org.mitre.oval:ste:9867"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33306" version="1" comment="kernel-smp-devel is earlier than 0:2.6.9-42.0.8.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14109"/>
      <state state_ref="oval:org.mitre.oval:ste:9348"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33278" version="1" comment="kernel-hugemem-devel is earlier than 0:2.6.9-42.0.8.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13719"/>
      <state state_ref="oval:org.mitre.oval:ste:9348"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33204" version="1" comment="kernel-hugemem is earlier than 0:2.6.9-42.0.8.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14362"/>
      <state state_ref="oval:org.mitre.oval:ste:9348"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33145" version="1" comment="kernel is earlier than 0:2.6.9-42.0.8.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14285"/>
      <state state_ref="oval:org.mitre.oval:ste:9348"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33107" version="1" comment="kernel-devel is earlier than 0:2.6.9-42.0.8.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13732"/>
      <state state_ref="oval:org.mitre.oval:ste:9348"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33057" version="1" comment="kernel-smp is earlier than 0:2.6.9-42.0.8.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14265"/>
      <state state_ref="oval:org.mitre.oval:ste:9348"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32645" version="1" comment="kernel-largesmp is earlier than 0:2.6.9-42.0.8.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14138"/>
      <state state_ref="oval:org.mitre.oval:ste:9348"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32620" version="1" comment="kernel-doc is earlier than 0:2.6.9-42.0.8.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13422"/>
      <state state_ref="oval:org.mitre.oval:ste:9348"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:32378" version="1" comment="kernel-largesmp-devel is earlier than 0:2.6.9-42.0.8.EL" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14209"/>
      <state state_ref="oval:org.mitre.oval:ste:9348"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:233" version="2" check="at least one" comment="Firefox version 0.9 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:228"/>
      <state state_ref="oval:org.mitre.oval:ste:231"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:232" version="3" check="at least one" comment="Mozilla Firefox version 0.9 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:227"/>
      <state state_ref="oval:org.mitre.oval:ste:230"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:231" version="2" check="at least one" comment="Mozilla Thunderbird version 0.6-0.8 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:226"/>
      <state state_ref="oval:org.mitre.oval:ste:229"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:230" version="3" check="at least one" comment="Mozilla Thunderbird version 0.6-0.8 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:225"/>
      <state state_ref="oval:org.mitre.oval:ste:228"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40010" version="1" comment="php-snmp is earlier than 0:4.3.9-3.29" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14508"/>
      <state state_ref="oval:org.mitre.oval:ste:11362"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:40003" version="1" comment="php-imap is earlier than 0:4.3.2-54.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:10843"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39980" version="1" comment="php-pgsql is earlier than 0:5.1.6-24.el5_4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:11221"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39969" version="1" comment="php-snmp is earlier than 0:5.1.6-24.el5_4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14508"/>
      <state state_ref="oval:org.mitre.oval:ste:11221"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39954" version="1" comment="php-ldap is earlier than 0:5.1.6-24.el5_4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:11221"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39927" version="1" comment="php-domxml is earlier than 0:4.3.9-3.29" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14496"/>
      <state state_ref="oval:org.mitre.oval:ste:11362"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39915" version="1" comment="php-mysql is earlier than 0:4.3.2-54.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:10843"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39913" version="1" comment="php-dba is earlier than 0:5.1.6-24.el5_4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14512"/>
      <state state_ref="oval:org.mitre.oval:ste:11221"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39908" version="1" comment="php-devel is earlier than 0:4.3.9-3.29" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:11362"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39901" version="1" comment="php-odbc is earlier than 0:4.3.2-54.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:10843"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39899" version="1" comment="php is earlier than 0:4.3.9-3.29" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:11362"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39886" version="1" comment="php-odbc is earlier than 0:4.3.9-3.29" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:11362"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39883" version="1" comment="php-bcmath is earlier than 0:5.1.6-24.el5_4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14639"/>
      <state state_ref="oval:org.mitre.oval:ste:11221"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39875" version="1" comment="php-mysql is earlier than 0:5.1.6-24.el5_4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:11221"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39854" version="1" comment="php-mbstring is earlier than 0:5.1.6-24.el5_4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13746"/>
      <state state_ref="oval:org.mitre.oval:ste:11221"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39848" version="1" comment="php-ncurses is earlier than 0:4.3.9-3.29" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14227"/>
      <state state_ref="oval:org.mitre.oval:ste:11362"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39821" version="1" comment="php-pgsql is earlier than 0:4.3.9-3.29" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:11362"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39804" version="1" comment="php-common is earlier than 0:5.1.6-24.el5_4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14841"/>
      <state state_ref="oval:org.mitre.oval:ste:11221"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39802" version="1" comment="php-gd is earlier than 0:5.1.6-24.el5_4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14335"/>
      <state state_ref="oval:org.mitre.oval:ste:11221"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39765" version="1" comment="php-cli is earlier than 0:5.1.6-24.el5_4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14922"/>
      <state state_ref="oval:org.mitre.oval:ste:11221"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39748" version="1" comment="php-imap is earlier than 0:5.1.6-24.el5_4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:11221"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39741" version="1" comment="php-ldap is earlier than 0:4.3.2-54.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:10843"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39717" version="1" comment="php is earlier than 0:4.3.2-54.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:10843"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39664" version="1" comment="php-pdo is earlier than 0:5.1.6-24.el5_4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14154"/>
      <state state_ref="oval:org.mitre.oval:ste:11221"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39642" version="1" comment="php-mbstring is earlier than 0:4.3.9-3.29" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13746"/>
      <state state_ref="oval:org.mitre.oval:ste:11362"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39634" version="1" comment="php-devel is earlier than 0:5.1.6-24.el5_4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:11221"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39629" version="1" comment="php-pgsql is earlier than 0:4.3.2-54.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14148"/>
      <state state_ref="oval:org.mitre.oval:ste:10843"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39627" version="1" comment="php-ldap is earlier than 0:4.3.9-3.29" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14375"/>
      <state state_ref="oval:org.mitre.oval:ste:11362"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39619" version="1" comment="php-mysql is earlier than 0:4.3.9-3.29" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14080"/>
      <state state_ref="oval:org.mitre.oval:ste:11362"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39581" version="1" comment="php-xml is earlier than 0:5.1.6-24.el5_4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14560"/>
      <state state_ref="oval:org.mitre.oval:ste:11221"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39580" version="1" comment="php-xmlrpc is earlier than 0:4.3.9-3.29" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14445"/>
      <state state_ref="oval:org.mitre.oval:ste:11362"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39544" version="1" comment="php-soap is earlier than 0:5.1.6-24.el5_4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14366"/>
      <state state_ref="oval:org.mitre.oval:ste:11221"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39463" version="1" comment="php-ncurses is earlier than 0:5.1.6-24.el5_4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14227"/>
      <state state_ref="oval:org.mitre.oval:ste:11221"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39461" version="1" comment="php-pear is earlier than 0:4.3.9-3.29" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14130"/>
      <state state_ref="oval:org.mitre.oval:ste:11362"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39436" version="1" comment="php-xmlrpc is earlier than 0:5.1.6-24.el5_4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14445"/>
      <state state_ref="oval:org.mitre.oval:ste:11221"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39417" version="1" comment="php-gd is earlier than 0:4.3.9-3.29" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14335"/>
      <state state_ref="oval:org.mitre.oval:ste:11362"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39326" version="1" comment="php-devel is earlier than 0:4.3.2-54.ent" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13492"/>
      <state state_ref="oval:org.mitre.oval:ste:10843"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39111" version="1" comment="php-imap is earlier than 0:4.3.9-3.29" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14250"/>
      <state state_ref="oval:org.mitre.oval:ste:11362"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39053" version="1" comment="php is earlier than 0:5.1.6-24.el5_4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14294"/>
      <state state_ref="oval:org.mitre.oval:ste:11221"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:39018" version="1" comment="php-odbc is earlier than 0:5.1.6-24.el5_4.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14183"/>
      <state state_ref="oval:org.mitre.oval:ste:11221"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:235" version="2" check="at least one" comment="Mozilla Suite version 1.7.4 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:230"/>
      <state state_ref="oval:org.mitre.oval:ste:233"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:234" version="3" check="at least one" comment="Mozilla Suite version 1.7.4 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:229"/>
      <state state_ref="oval:org.mitre.oval:ste:232"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:237" version="2" check="at least one" comment="Mozilla Thunderbird version 0.8 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:226"/>
      <state state_ref="oval:org.mitre.oval:ste:235"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:236" version="3" check="at least one" comment="Mozilla Thunderbird version 0.8 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:231"/>
      <state state_ref="oval:org.mitre.oval:ste:234"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:241" version="2" check="at least one" comment="Mozilla Thunderbird version 0.6-0.9 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:226"/>
      <state state_ref="oval:org.mitre.oval:ste:239"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:240" version="3" check="at least one" comment="Mozilla Thunderbird version 0.6-0.9 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:233"/>
      <state state_ref="oval:org.mitre.oval:ste:238"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:239" version="2" check="at least one" comment="Mozilla Suite version 1.7-1.7.3 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:230"/>
      <state state_ref="oval:org.mitre.oval:ste:237"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:238" version="3" check="at least one" comment="Mozilla Suite version 1.7-1.7.3 is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:232"/>
      <state state_ref="oval:org.mitre.oval:ste:236"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:243" version="2" check="at least one" comment="Firefox version 0.9 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:228"/>
      <state state_ref="oval:org.mitre.oval:ste:241"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:242" version="3" check="at least one" comment="Mozilla Firefox version 0.9 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:234"/>
      <state state_ref="oval:org.mitre.oval:ste:240"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38917" version="1" comment="libpurple-devel is earlier than 0:2.5.8-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15112"/>
      <state state_ref="oval:org.mitre.oval:ste:11038"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38904" version="1" comment="libpurple is earlier than 0:2.5.8-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14700"/>
      <state state_ref="oval:org.mitre.oval:ste:11038"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38856" version="1" comment="finch-devel is earlier than 0:2.5.8-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15074"/>
      <state state_ref="oval:org.mitre.oval:ste:10837"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38821" version="1" comment="pidgin-devel is earlier than 0:2.5.8-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14642"/>
      <state state_ref="oval:org.mitre.oval:ste:11038"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38796" version="1" comment="libpurple-tcl is earlier than 0:2.5.8-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14238"/>
      <state state_ref="oval:org.mitre.oval:ste:11038"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38746" version="1" comment="pidgin is earlier than 0:2.5.8-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15157"/>
      <state state_ref="oval:org.mitre.oval:ste:11038"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38722" version="1" comment="libpurple-perl is earlier than 0:2.5.8-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15144"/>
      <state state_ref="oval:org.mitre.oval:ste:10837"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38684" version="1" comment="pidgin-perl is earlier than 0:2.5.8-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14202"/>
      <state state_ref="oval:org.mitre.oval:ste:10837"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38643" version="1" comment="finch is earlier than 0:2.5.8-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15156"/>
      <state state_ref="oval:org.mitre.oval:ste:11038"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38611" version="1" comment="libpurple-perl is earlier than 0:2.5.8-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15144"/>
      <state state_ref="oval:org.mitre.oval:ste:11038"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38608" version="1" comment="pidgin-devel is earlier than 0:2.5.8-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14642"/>
      <state state_ref="oval:org.mitre.oval:ste:10837"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38590" version="1" comment="libpurple-tcl is earlier than 0:2.5.8-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14238"/>
      <state state_ref="oval:org.mitre.oval:ste:10837"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38502" version="1" comment="libpurple is earlier than 0:2.5.8-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14700"/>
      <state state_ref="oval:org.mitre.oval:ste:10837"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38445" version="1" comment="pidgin-perl is earlier than 0:2.5.8-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14202"/>
      <state state_ref="oval:org.mitre.oval:ste:11038"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38296" version="1" comment="pidgin is earlier than 0:2.5.8-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15157"/>
      <state state_ref="oval:org.mitre.oval:ste:10837"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38269" version="1" comment="finch is earlier than 0:2.5.8-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15156"/>
      <state state_ref="oval:org.mitre.oval:ste:10837"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38106" version="1" comment="finch-devel is earlier than 0:2.5.8-1.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15074"/>
      <state state_ref="oval:org.mitre.oval:ste:11038"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38063" version="1" comment="libpurple-devel is earlier than 0:2.5.8-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15112"/>
      <state state_ref="oval:org.mitre.oval:ste:10837"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31855" version="1" comment="ImageMagick-c++ is earlier than 0:5.5.6-14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13475"/>
      <state state_ref="oval:org.mitre.oval:ste:9507"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31789" version="1" comment="ImageMagick-perl is earlier than 0:6.0.7.1-11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14270"/>
      <state state_ref="oval:org.mitre.oval:ste:9723"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31740" version="1" comment="ImageMagick-c++ is earlier than 0:6.0.7.1-11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13475"/>
      <state state_ref="oval:org.mitre.oval:ste:9723"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31696" version="1" comment="ImageMagick-c++-devel is earlier than 0:5.5.6-14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14240"/>
      <state state_ref="oval:org.mitre.oval:ste:9507"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31690" version="1" comment="ImageMagick is earlier than 0:6.0.7.1-11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13854"/>
      <state state_ref="oval:org.mitre.oval:ste:9723"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31632" version="1" comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14240"/>
      <state state_ref="oval:org.mitre.oval:ste:9723"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31429" version="1" comment="ImageMagick-devel is earlier than 0:6.0.7.1-11" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13484"/>
      <state state_ref="oval:org.mitre.oval:ste:9723"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31121" version="1" comment="ImageMagick-devel is earlier than 0:5.5.6-14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13484"/>
      <state state_ref="oval:org.mitre.oval:ste:9507"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31088" version="1" comment="ImageMagick-perl is earlier than 0:5.5.6-14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14270"/>
      <state state_ref="oval:org.mitre.oval:ste:9507"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:31067" version="1" comment="ImageMagick is earlier than 0:5.5.6-14" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13854"/>
      <state state_ref="oval:org.mitre.oval:ste:9507"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:245" version="2" check="at least one" comment="Firefox version 1.0 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:228"/>
      <state state_ref="oval:org.mitre.oval:ste:243"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:244" version="3" check="at least one" comment="Mozilla Firefox version 1.0 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:235"/>
      <state state_ref="oval:org.mitre.oval:ste:242"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:249" version="2" check="at least one" comment="Mozilla Thunderbird version 1.0 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:226"/>
      <state state_ref="oval:org.mitre.oval:ste:247"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:248" version="3" check="at least one" comment="Mozilla Thunderbird version 1.0 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:237"/>
      <state state_ref="oval:org.mitre.oval:ste:246"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:247" version="2" check="at least one" comment="Mozilla Suite version 1.7.5 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:230"/>
      <state state_ref="oval:org.mitre.oval:ste:245"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:246" version="3" check="at least one" comment="Mozilla Suite version 1.7.5 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:236"/>
      <state state_ref="oval:org.mitre.oval:ste:244"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:251" version="2" check="at least one" comment="Firefox version 1.0.1 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:228"/>
      <state state_ref="oval:org.mitre.oval:ste:249"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:250" version="3" check="at least one" comment="Mozilla Firefox version 1.0.1 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:238"/>
      <state state_ref="oval:org.mitre.oval:ste:248"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34664" version="1" comment="openoffice.org-langpack-zh_TW is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14392"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34648" version="1" comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14728"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34646" version="1" comment="openoffice.org-langpack-ms_MY is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14787"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34642" version="1" comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14056"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34641" version="1" comment="openoffice.org-langpack-pt_BR is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14822"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34615" version="1" comment="openoffice.org-langpack-mr_IN is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14855"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34614" version="1" comment="openoffice.org-langpack-da_DK is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14748"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34607" version="1" comment="openoffice.org-langpack-ur is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14671"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34606" version="1" comment="openoffice.org-langpack-eu_ES is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14813"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34596" version="1" comment="openoffice.org-langpack-hu_HU is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14694"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34593" version="1" comment="openoffice.org-langpack-pa_IN is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14746"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34589" version="1" comment="openoffice.org-langpack-hr_HR is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14336"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34584" version="1" comment="openoffice.org-langpack-zh_CN is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14839"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34580" version="1" comment="openoffice.org-langpack-bn is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14706"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34579" version="1" comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13974"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34578" version="1" comment="openoffice.org-langpack-ru is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14766"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34570" version="1" comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14562"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34565" version="1" comment="openoffice.org-base is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14548"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34564" version="1" comment="openoffice.org-langpack-sv is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14529"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34555" version="1" comment="openoffice.org-langpack-fr is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14772"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34542" version="1" comment="openoffice.org-langpack-et_EE is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14280"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34538" version="1" comment="openoffice.org-pyuno is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14806"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34529" version="1" comment="openoffice.org-langpack-nl is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14909"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34525" version="1" comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14321"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34523" version="1" comment="openoffice.org-langpack-th_TH is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14732"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34521" version="1" comment="openoffice.org-langpack-es is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14604"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34517" version="1" comment="openoffice.org-langpack-pt_PT is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14571"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34513" version="1" comment="openoffice.org-langpack-hi_IN is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14717"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34511" version="1" comment="openoffice.org-langpack-pl_PL is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14767"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34510" version="1" comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14472"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34507" version="1" comment="openoffice.org-langpack-cy_GB is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14501"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34501" version="1" comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14892"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34498" version="1" comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14599"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34494" version="1" comment="openoffice.org-langpack-gl_ES is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14792"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34491" version="1" comment="openoffice.org-testtools is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14135"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34490" version="1" comment="openoffice.org-langpack-af_ZA is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14506"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34489" version="1" comment="openoffice.org-langpack-te_IN is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14832"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34487" version="1" comment="openoffice.org-langpack-ja_JP is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14155"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34485" version="1" comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14716"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34478" version="1" comment="openoffice.org-langpack-or_IN is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14588"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34476" version="1" comment="openoffice.org-langpack-de is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14539"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34470" version="1" comment="openoffice.org-langpack-ta_IN is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14637"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34467" version="1" comment="openoffice.org-langpack-it is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14812"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34465" version="1" comment="openoffice.org-langpack-as_IN is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14576"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34463" version="1" comment="openoffice.org-langpack-ko_KR is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14190"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34462" version="1" comment="openoffice.org-langpack-ml_IN is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14257"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34456" version="1" comment="openoffice.org-langpack-nb_NO is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14807"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34455" version="1" comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14882"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34454" version="1" comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15000"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34453" version="1" comment="openoffice.org is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34447" version="1" comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14322"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34444" version="1" comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14849"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34443" version="1" comment="openoffice.org-langpack-ga_IE is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14635"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34441" version="1" comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14696"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34438" version="1" comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14708"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34435" version="1" comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14903"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34430" version="1" comment="openoffice.org-langpack-sr_CS is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14189"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34424" version="1" comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15018"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34420" version="1" comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14432"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34417" version="1" comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14744"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34416" version="1" comment="openoffice.org-calc is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14623"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34415" version="1" comment="openoffice.org-math is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14557"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34407" version="1" comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14090"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34406" version="1" comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14990"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34404" version="1" comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14984"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34403" version="1" comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14814"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34396" version="1" comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14606"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34390" version="1" comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15006"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34385" version="1" comment="openoffice.org-libs is earlier than 0:1.1.2-39.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14455"/>
      <state state_ref="oval:org.mitre.oval:ste:10075"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34372" version="1" comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14768"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34368" version="1" comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14401"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34367" version="1" comment="openoffice.org-draw is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14828"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34362" version="1" comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14765"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34356" version="1" comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14937"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34355" version="1" comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14971"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34354" version="1" comment="openoffice.org-langpack-gu_IN is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14269"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34347" version="1" comment="openoffice.org-langpack-el_GR is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14359"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34346" version="1" comment="openoffice.org-langpack-sl_SI is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14869"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34345" version="1" comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14569"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34344" version="1" comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14369"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34342" version="1" comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14737"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34341" version="1" comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14759"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34340" version="1" comment="openoffice.org-langpack-lt_LT is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13921"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34339" version="1" comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.1.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13698"/>
      <state state_ref="oval:org.mitre.oval:ste:10385"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34333" version="1" comment="openoffice.org-core is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14450"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34326" version="1" comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14193"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34325" version="1" comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15005"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34310" version="1" comment="openoffice.org-langpack-ar is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14872"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34309" version="1" comment="openoffice.org-langpack-ca_ES is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14778"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34308" version="1" comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14900"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34303" version="1" comment="openoffice.org-langpack-st_ZA is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14851"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34301" version="1" comment="openoffice.org-i18n is earlier than 0:1.1.2-39.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14215"/>
      <state state_ref="oval:org.mitre.oval:ste:10075"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34291" version="1" comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14600"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34289" version="1" comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14617"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34282" version="1" comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14738"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34280" version="1" comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14986"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34279" version="1" comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14956"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34275" version="1" comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14885"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34255" version="1" comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14875"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34254" version="1" comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14976"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34235" version="1" comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14969"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34232" version="1" comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14894"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34229" version="1" comment="openoffice.org is earlier than 0:1.1.5-10.6.0.1.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:10385"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34221" version="1" comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14651"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34218" version="1" comment="openoffice.org-graphicfilter is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14526"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34183" version="1" comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14762"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34179" version="1" comment="openoffice.org-langpack-sk_SK is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14266"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34178" version="1" comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14995"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34176" version="1" comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14649"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34137" version="1" comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14987"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34127" version="1" comment="openoffice.org2 is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14437"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34126" version="1" comment="openoffice.org-langpack-tr_TR is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14886"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34099" version="1" comment="openoffice.org-emailmerge is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14522"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34050" version="1" comment="openoffice.org-impress is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14707"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34048" version="1" comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14901"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34007" version="1" comment="openoffice.org-langpack-kn_IN is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14714"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:34000" version="1" comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14963"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33969" version="1" comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14834"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33964" version="1" comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14997"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33944" version="1" comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14980"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33934" version="1" comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14865"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33921" version="1" comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.1.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14215"/>
      <state state_ref="oval:org.mitre.oval:ste:10385"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33855" version="1" comment="openoffice.org-xsltfilter is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14530"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33851" version="1" comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14845"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33834" version="1" comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.1.EL4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14455"/>
      <state state_ref="oval:org.mitre.oval:ste:10385"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33772" version="1" comment="openoffice.org is earlier than 0:1.1.2-39.2.0.EL3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13461"/>
      <state state_ref="oval:org.mitre.oval:ste:10075"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33768" version="1" comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14907"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33760" version="1" comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14754"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33737" version="1" comment="openoffice.org-langpack-he_IL is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14442"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33720" version="1" comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14476"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33692" version="1" comment="openoffice.org-writer is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14758"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33684" version="1" comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14456"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33664" version="1" comment="openoffice.org-langpack-nn_NO is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14779"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33651" version="1" comment="openoffice.org-langpack-fi_FI is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14625"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33634" version="1" comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14660"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33633" version="1" comment="openoffice.org-langpack-bg_BG is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14589"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33609" version="1" comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14831"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33584" version="1" comment="openoffice.org-javafilter is earlier than 1:2.0.4-5.4.17.2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14566"/>
      <state state_ref="oval:org.mitre.oval:ste:10342"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33512" version="1" comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14763"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:33458" version="1" comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.1.0" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14826"/>
      <state state_ref="oval:org.mitre.oval:ste:9683"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:253" version="2" check="at least one" comment="Mozilla Suite version 1.7.6 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:230"/>
      <state state_ref="oval:org.mitre.oval:ste:251"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:252" version="3" check="at least one" comment="Mozilla Suite version 1.7.6 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:239"/>
      <state state_ref="oval:org.mitre.oval:ste:250"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:255" version="3" check="at least one" comment="Mozilla Firefox version 1.0.3 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:241"/>
      <state state_ref="oval:org.mitre.oval:ste:253"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:254" version="3" check="at least one" comment="Mozilla Suite version 1.7.7 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:240"/>
      <state state_ref="oval:org.mitre.oval:ste:252"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:257" version="2" check="at least one" comment="Mozilla Thunderbird version 1.0.2 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:226"/>
      <state state_ref="oval:org.mitre.oval:ste:255"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:256" version="3" check="at least one" comment="Mozilla Thunderbird version 1.0.2 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:242"/>
      <state state_ref="oval:org.mitre.oval:ste:254"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:259" version="2" check="at least one" comment="Firefox version 1.0.2 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:228"/>
      <state state_ref="oval:org.mitre.oval:ste:257"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:258" version="3" check="at least one" comment="Mozilla Firefox version 1.0.2 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:243"/>
      <state state_ref="oval:org.mitre.oval:ste:256"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:80206" version="1" comment="CentOS Linux 3.x is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24078"/>
      <state state_ref="oval:org.mitre.oval:ste:19938"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:80582" version="1" comment="CentOS Linux 4.x is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24078"/>
      <state state_ref="oval:org.mitre.oval:ste:20410"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:80147" version="2" comment="Oracle Linux 4.x is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:30416"/>
      <state state_ref="oval:org.mitre.oval:ste:20410"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:2652" version="3" comment="Red Hat Enterprise 4 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1414"/>
      <state state_ref="oval:org.mitre.oval:ste:11366"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:7836" version="3" comment="Red Hat Enterprise 3 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1414"/>
      <state state_ref="oval:org.mitre.oval:ste:11298"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38137" version="1" comment="seamonkey-nspr is earlier than 0:1.0.9-0.29.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13864"/>
      <state state_ref="oval:org.mitre.oval:ste:11009"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38118" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-32.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:10909"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38114" version="1" comment="firefox is earlier than 0:3.0.5-1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:11060"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38092" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-0.29.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:11009"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38083" version="1" comment="xulrunner is earlier than 0:1.9.0.5-1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15057"/>
      <state state_ref="oval:org.mitre.oval:ste:10924"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38080" version="1" comment="firefox is earlier than 0:3.0.5-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13805"/>
      <state state_ref="oval:org.mitre.oval:ste:10669"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38073" version="1" comment="seamonkey-nss is earlier than 0:1.0.9-0.29.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14224"/>
      <state state_ref="oval:org.mitre.oval:ste:11009"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38072" version="1" comment="nss-pkcs11-devel is earlier than 0:3.12.2.0-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14171"/>
      <state state_ref="oval:org.mitre.oval:ste:10978"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38071" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-32.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:10909"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38062" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.29.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:11009"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38053" version="1" comment="thunderbird is earlier than 0:2.0.0.19-1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:10936"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38039" version="1" comment="seamonkey-devel is earlier than 0:1.0.9-0.29.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13924"/>
      <state state_ref="oval:org.mitre.oval:ste:11009"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:38037" version="1" comment="xulrunner-devel is earlier than 0:1.9.0.5-1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15100"/>
      <state state_ref="oval:org.mitre.oval:ste:10924"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37999" version="1" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.29.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14131"/>
      <state state_ref="oval:org.mitre.oval:ste:11009"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37918" version="1" comment="nspr-devel is earlier than 0:4.7.3-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15145"/>
      <state state_ref="oval:org.mitre.oval:ste:10118"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37907" version="1" comment="seamonkey is earlier than 0:1.0.9-0.29.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:11009"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37886" version="1" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.29.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14292"/>
      <state state_ref="oval:org.mitre.oval:ste:11009"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37869" version="1" comment="seamonkey-mail is earlier than 0:1.0.9-32.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13848"/>
      <state state_ref="oval:org.mitre.oval:ste:10909"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37857" version="1" comment="nss is earlier than 0:3.12.2.0-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14917"/>
      <state state_ref="oval:org.mitre.oval:ste:10990"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37854" version="1" comment="nss is earlier than 0:3.12.2.0-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14917"/>
      <state state_ref="oval:org.mitre.oval:ste:10978"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37812" version="1" comment="seamonkey is earlier than 0:1.0.9-32.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13938"/>
      <state state_ref="oval:org.mitre.oval:ste:10909"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37789" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-32.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:10909"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37745" version="1" comment="seamonkey-chat is earlier than 0:1.0.9-0.29.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14525"/>
      <state state_ref="oval:org.mitre.oval:ste:11009"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37737" version="1" comment="nss-devel is earlier than 0:3.12.2.0-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14656"/>
      <state state_ref="oval:org.mitre.oval:ste:10978"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37709" version="1" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.29.el3" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13838"/>
      <state state_ref="oval:org.mitre.oval:ste:11009"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37631" version="1" comment="xulrunner-devel-unstable is earlier than 0:1.9.0.5-1.el5_2" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15048"/>
      <state state_ref="oval:org.mitre.oval:ste:10924"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37574" version="1" comment="nspr is earlier than 0:4.7.3-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14745"/>
      <state state_ref="oval:org.mitre.oval:ste:10118"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37420" version="1" comment="nspr is earlier than 0:4.7.3-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14745"/>
      <state state_ref="oval:org.mitre.oval:ste:10603"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37419" version="1" comment="nspr-devel is earlier than 0:4.7.3-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15145"/>
      <state state_ref="oval:org.mitre.oval:ste:10603"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37403" version="1" comment="nss-tools is earlier than 0:3.12.2.0-2.el5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:15090"/>
      <state state_ref="oval:org.mitre.oval:ste:10978"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37395" version="1" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-32.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:13953"/>
      <state state_ref="oval:org.mitre.oval:ste:10909"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37200" version="1" comment="thunderbird is earlier than 0:1.5.0.12-18.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14449"/>
      <state state_ref="oval:org.mitre.oval:ste:11010"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:37139" version="1" comment="nss-devel is earlier than 0:3.12.2.0-1.el4" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14656"/>
      <state state_ref="oval:org.mitre.oval:ste:10990"/>
    </rpminfo_test>
    <registry_test id="oval:org.mitre.oval:tst:263" version="2" check="at least one" comment="Firefox version 1.0.4 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:228"/>
      <state state_ref="oval:org.mitre.oval:ste:261"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:262" version="3" check="at least one" comment="Mozilla Firefox version 1.0.4 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:245"/>
      <state state_ref="oval:org.mitre.oval:ste:260"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:261" version="2" check="at least one" comment="Mozilla Suite version 1.7.8 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:230"/>
      <state state_ref="oval:org.mitre.oval:ste:259"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:260" version="3" check="at least one" comment="Mozilla Suite version 1.7.8 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:244"/>
      <state state_ref="oval:org.mitre.oval:ste:258"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:265" version="2" check="at least one" comment="Firefox version 1.0.3 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:228"/>
      <state state_ref="oval:org.mitre.oval:ste:263"/>
    </registry_test>
    <registry_test id="oval:org.mitre.oval:tst:264" version="2" check="at least one" comment="Mozilla Suite version 1.7.7 or earlier is installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <object object_ref="oval:org.mitre.oval:obj:230"/>
      <state state_ref="oval:org.mitre.oval:ste:262"/>
    </registry_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:80416" version="2" comment="CentOS Linux 5.x is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24078"/>
      <state state_ref="oval:org.mitre.oval:ste:20137"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:80718" version="3" comment="Oracle Linux 5.x is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:23691"/>
      <state state_ref="oval:org.mitre.oval:ste:20137"/>
    </rpminfo_test>
    <family_test id="oval:org.mitre.oval:tst:4424" version="1" comment="the installed operating system is part of the Unix family" check_existence="at_least_one_exists" check="only one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:org.mitre.oval:obj:99"/>
      <state state_ref="oval:org.mitre.oval:ste:3907"/>
    </family_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:3846" version="3" comment="Red Hat Enterprise 5 is installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:1414"/>
      <state state_ref="oval:org.mitre.oval:ste:11314"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36543" version="1" comment="xen is earlier than 0:3.0.3-41.el5_1.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14646"/>
      <state state_ref="oval:org.mitre.oval:ste:10923"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:36530" version="1" comment="xen-libs is earlier than 0:3.0.3-41.el5_1.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14810"/>
      <state state_ref="oval:org.mitre.oval:ste:10923"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:35758" version="1" comment="xen-devel is earlier than 0:3.0.3-41.el5_1.5" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:14567"/>
      <state state_ref="oval:org.mitre.oval:ste:10923"/>
    </rpminfo_test>
    <uname_test id="oval:org.mitre.oval:tst:3145" version="1" comment="Solaris 8 Installed" check_existence="at_least_one_exists" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:2759"/>
      <state state_ref="oval:org.mitre.oval:ste:2941"/>
    </uname_test>
    <file_test id="oval:org.mitre.oval:tst:3130" version="1" check="at least one" comment="File xlock exists" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1779"/>
    </file_test>
    <patch_test id="oval:org.mitre.oval:tst:3129" version="1" check="at least one" comment="Patch 108652-38 or later installed" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <object object_ref="oval:org.mitre.oval:obj:876"/>
      <state state_ref="oval:org.mitre.oval:ste:2930"/>
    </patch_test>
    <file_test id="oval:org.mitre.oval:tst:3128" version="1" check="at least one" comment="File xlock SUID and executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1779"/>
      <state state_ref="oval:org.mitre.oval:ste:2929"/>
    </file_test>
    <file_test id="oval:org.mitre.oval:tst:3127" version="1" check="at least one" comment="File xlock SUID and executable" check_existence="at_least_one_exists" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:org.mitre.oval:obj:1779"/>
      <state state_ref="oval:org.mitre.oval:ste:2928"/>
    </file_test>
  </tests>
  <objects>
    <rpminfo_object id="oval:org.mitre.oval:obj:13995" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>lm_sensors</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14545" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>lm_sensors-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14417" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>avahi-glib-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14998" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>avahi-compat-howl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14459" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>avahi-compat-howl-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14742" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>avahi-qt3</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14977" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>avahi-compat-libdns_sd-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14570" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>avahi-qt3-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14856" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>avahi-compat-libdns_sd</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14590" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>avahi-glib</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14891" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>avahi</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15172" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>avahi-tools</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14981" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>avahi-devel</name>
    </rpminfo_object>
    <patch_object id="oval:org.mitre.oval:obj:925" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118908</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14979" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>bluez-libs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14975" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>bluez-libs-devel</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:929" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/proc/tty/driver</path>
      <filename>serial</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:928" version="2" comment="The /proc/tty/driver directory" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/proc/tty/driver</path>
      <filename xsi:nil="true"/>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:927" version="2" comment="The /proc/tty directory" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/proc/tty</path>
      <filename xsi:nil="true"/>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:926" version="2" comment="The /proc directory" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/proc</path>
      <filename xsi:nil="true"/>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:932" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>vserver.vxd</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:931" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SYSTEM\CurrentControlSet\Services\UtilMan{5c773859-bb96- 48fa-875b-6a58aae072f4}</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15116" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>apr</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15034" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>apr-docs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15174" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>apr-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13812" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gftp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:937" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>krb5-libs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14756" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gstreamer-plugins</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14658" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gstreamer-plugins-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14147" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ricci</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14950" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>luci</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15022" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>conga</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14804" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cyrus-sasl-sql</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14825" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cyrus-sasl-ntlm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15239" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba3x-winbind-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14991" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba3x-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15146" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tdb-tools</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15202" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba3x-swat</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15124" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba3x</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14854" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba3x-client</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15045" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba3x-domainjoin-gui</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15217" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libtdb</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15341" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libtalloc-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15335" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libsmbclient-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15095" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba3x-winbind</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15383" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libtalloc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14673" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba3x-common</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15389" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libsmbclient</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15186" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libtdb-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14451" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libc-client</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14542" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libc-client-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14140" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>zip</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14276" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gedit-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14381" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gedit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:940" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ethereal</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:939" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ethereal-gnome</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14357" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sox-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14349" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sox</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:942" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>squid</name>
    </rpminfo_object>
    <inetlisteningservers_object id="oval:org.mitre.oval:obj:941" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <protocol operation="pattern match">.*</protocol>
      <local_address operation="pattern match">.*</local_address>
      <local_port datatype="int" operation="greater than or equal">0</local_port>
    </inetlisteningservers_object>
    <registry_object id="oval:org.mitre.oval:obj:1685" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes</key>
      <name operation="equals">gopher</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:944" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>utempter</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:943" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/sbin</path>
      <filename>utempter</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14749" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libX11</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14309" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libX11-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14626" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-apps</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:946" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>lha</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:945" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>lha</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:948" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tcpdump</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:952" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libpng</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:951" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libpng-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:950" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libpng</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:949" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libpng-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:954" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cvs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14634" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gstreamer-plugins-base</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14467" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gstreamer-plugins-base-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:959" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>rsync</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14996" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>newt-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14373" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>newt</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14857" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>w3c-libwww</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14868" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>w3c-libwww-apps</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14718" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>w3c-libwww-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15097" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-tools-libra-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15047" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-cim-client-manual</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15044" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-cmpi-samba-test</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14887" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-cmpi-sysfs-test</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14985" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-cmpi-samba-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14573" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-wbemcli</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14933" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-gather</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15046" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-cmpi-params</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15024" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-cmpi-base</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14982" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-cmpi-fsvol-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15011" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-cmpi-nfsv3-test</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14843" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-gather-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15009" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-cim-client</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14533" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-cim-client-javadoc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14836" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-cmpi-dns-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14540" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-cmpi-fsvol-test</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15098" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-cmpi-params-test</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15040" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-cmpi-fsvol</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14896" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-cmpi-network-test</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15032" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-testsuite</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14786" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-cmpi-base-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15007" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-cmpi-network</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15136" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-cmpi-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14913" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-tools-libra</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14785" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-cmpi-nfsv3</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14551" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-cmpi-nfsv4</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15035" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-cmpi-base-test</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14844" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-gather-provider</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15062" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-cmpi-syslog</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15015" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14895" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-cmpi-network-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14989" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-cmpi-dns-test</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14940" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-cmpi-nfsv4-test</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15153" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-cmpi-dns</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14912" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-cmpi-samba</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14879" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-gather-test</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14334" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-cmpi-syslog-test</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14683" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sblim-cmpi-sysfs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14929" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>selinux-policy-targeted-sources</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14731" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>selinux-policy-targeted</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14914" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>selinux-policy-strict</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15143" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>selinux-policy-mls</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15077" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>selinux-policy-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15111" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>selinux-policy</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15120" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ecryptfs-utils</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15070" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ecryptfs-utils-gui</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15215" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ecryptfs-utils-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:963" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ImageMagick</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:1690" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\[0-4]$</key>
      <name operation="equals">1A02</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1689" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_CURRENT_USER</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\[0-4]$</key>
      <name operation="equals">1A02</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1688" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\[0-4]$</key>
      <name operation="equals">1A03</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1687" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_CURRENT_USER</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\[0-4]$</key>
      <name operation="equals">1A03</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15103" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libsoup</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15129" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libsoup-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14951" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>evolution28-libsoup</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14798" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>evolution28-libsoup-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15107" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gdm-docs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:972" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdelibs</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:971" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/kerberos/bin</path>
      <filename>telnet</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:970" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>rlogin</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:969" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/kerberos/bin</path>
      <filename>rlogin</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:968" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ssh</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:967" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>kmail</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14024" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libpcap-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15165" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>perl-DBD-Pg</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14087" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>busybox</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14307" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>busybox-anaconda</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:975" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ipsec-tools</name>
    </rpminfo_object>
    <inetlisteningservers_object id="oval:org.mitre.oval:obj:974" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <protocol operation="equals">UDP</protocol>
      <local_address operation="pattern match">.*</local_address>
      <local_port datatype="int" operation="greater than or equal">0</local_port>
    </inetlisteningservers_object>
    <patch_object id="oval:org.mitre.oval:obj:1996" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112785</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2544" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119059</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:1927" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/openwin/bin</path>
      <filename>Xprt</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:2024" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119060</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2362" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112786</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2405" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">108652</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2007" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">108653</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:2350" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/openwin/bin</path>
      <filename>Xsun</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14693" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libgsf</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14636" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libgsf-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14430" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sysreport</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:976" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>squid</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14482" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>emacs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14297" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>emacs-common</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14025" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xemacs-el</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13695" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xemacs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14511" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>emacs-nox</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14222" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xemacs-common</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14495" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xemacs-info</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14413" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>emacs-el</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14447" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xemacs-nox</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14605" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>emacs-leim</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:977" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/bin</path>
      <filename>mount</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:980" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:979" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-smp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:978" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-hugemem</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14665" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>nfs-utils-lib</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15073" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>nfs-utils-lib-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14180" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ncompress</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15059" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>vnc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14330" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>vnc-server</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:960" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>nsiislog.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:982" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB817772</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:981" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB822343</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15179" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xerces-j2-javadoc-xni</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15310" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xerces-j2-demo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14775" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xerces-j2-javadoc-other</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14818" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xerces-j2-javadoc-impl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14314" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xerces-j2-scripts</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14948" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xerces-j2-javadoc-apis</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15189" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xerces-j2</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:985" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\Hotfix\Q811114</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:987" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>code.asp</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:986" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q232449</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14391" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>rhn-check</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15131" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>rhn-setup-gnome</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14911" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>rhn-setup</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15281" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>rhn-client-tools</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15272" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>device-mapper-multipath</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15125" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kpartx</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:995" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">Software\Microsoft\Active Setup\Installed Components\{A954CDD5-A95F-414F-B3FE-FBEF9D2AECEA}</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <process_object id="oval:org.mitre.oval:obj:2840" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command operation="pattern match" datatype="string">^.*kssl.*</command>
    </process_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2927" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">121475</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:3629" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">121474</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:996" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-nss</name>
    </rpminfo_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2949" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119435</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:3143" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114344</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:3187" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116966</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:3358" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116965</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14697" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>elfutils-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14627" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>elfutils-libelf-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14628" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>elfutils</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14492" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>elfutils-libelf</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14543" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>binutils</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:961" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>h323.tsp</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:922" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>helpctr.dll</filename>
    </file_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:3253" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">125101</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:3289" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">125100</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14661" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dstat</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:999" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>wintrust.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1653" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:201" var_check="all"/>
      <filename>mup.sys</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1693" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q311967</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1013" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ethereal</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1012" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ethereal-gnome</name>
    </rpminfo_object>
    <patch_object id="oval:org.mitre.oval:obj:1021" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118535</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:1020" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">121004</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:1019" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109325</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:1018" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118536</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:1017" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">121005</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1026" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ethereal</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1025" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ethereal-gnome</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1022" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>tethereal</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1028" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>squid</name>
    </rpminfo_object>
    <inetlisteningservers_object id="oval:org.mitre.oval:obj:1027" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <protocol operation="pattern match">.*</protocol>
      <local_address operation="pattern match">.*</local_address>
      <local_port datatype="int" operation="greater than or equal">0</local_port>
    </inetlisteningservers_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1029" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mod_ssl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1031" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1032" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-nss</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1036" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1035" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1034" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl-perl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1033" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl096b</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1038" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>net-snmp</name>
    </rpminfo_object>
    <inetlisteningservers_object id="oval:org.mitre.oval:obj:1037" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <protocol operation="pattern match">.*</protocol>
      <local_address operation="pattern match">.*</local_address>
      <local_port datatype="int" operation="greater than or equal">0</local_port>
    </inetlisteningservers_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1039" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1042" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1041" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-smp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1040" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-bigmem</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1043" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cvs</name>
    </rpminfo_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:3500" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">125101</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:3100" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118855</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2998" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">125100</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:3346" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118833</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1044" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdepim</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1045" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>httpd</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1046" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>httpd</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1047" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sysstat</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1049" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>nfs-utils</name>
    </rpminfo_object>
    <inetlisteningservers_object id="oval:org.mitre.oval:obj:1048" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <protocol operation="pattern match">.*</protocol>
      <local_address operation="pattern match">.*</local_address>
      <local_port datatype="int" operation="greater than or equal">0</local_port>
    </inetlisteningservers_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1052" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1051" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-smp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1050" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-bigmem</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1054" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdepim</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1053" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/share/services</path>
      <filename>kfile_vcf.desktop</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1057" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ethereal</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1056" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ethereal=gnome</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1024" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ethereal</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1023" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/sbin</path>
      <filename>ethereal</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1055" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/sbin</path>
      <filename>tethereal</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1059" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cvs</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1058" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/</path>
      <filename xsi:nil="true"/>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1060" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tcpdump</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1061" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sysstat</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1062" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tcpdump</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:947" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/sbin</path>
      <filename>tcpdump</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1065" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gdk-pixbuf</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1064" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gdk-pixbuf-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1063" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gdk-pixbuf-gnome</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1068" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gdk-pixbuf</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1067" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gdk-pixbuf-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1066" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gdk-pixbuf-gnome</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:1078" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\NetShow</key>
      <name>Version</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:1077" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:248" var_check="all"/>
      <filename>nscm.exe</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1076" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:248" var_check="all"/>
      <filename>nspmon.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1075" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Updates\Windows Media Services\KB832359</key>
      <name>IsInstalled</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1074" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SYSTEM\CurrentControlSet\Services\nsstation</key>
      <name>Start</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1073" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Updates\Windows Media Services\KB832359</key>
      <name>Start</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1079" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mutt</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1082" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1081" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-smp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1080" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-bigmem</name>
    </rpminfo_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2948" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119067</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:3667" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119060</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:3059" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112786</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:3006" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119059</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:3789" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119068</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:3119" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112785</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1085" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libxml2</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1084" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libxml2-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1083" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libxml2-python</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1086" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2182" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sld-release</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3647" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-hunspell</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3680" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org1-da</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2967" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-nb</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3101" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org1-hu</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3091" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org1-sk</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3711" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org1-zh-CN</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2945" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-af</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3639" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org1-ca</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2979" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-et</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3761" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org1-pt</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3275" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org1-pl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3728" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-cy</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3551" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-galleries</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2819" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-ru</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3185" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-ko</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3660" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org1-es</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3390" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org1-ar</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3799" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-xh</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3129" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-zu</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3019" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-vi</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3106" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org1-ko</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3721" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org1-sv</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2974" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-da</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3202" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org1-tr</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3332" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-gu-IN</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2832" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-be-BY</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3790" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-pt-BR</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3514" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-sk</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3160" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org1-ru</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3731" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org1-ja</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3382" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-pt</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2820" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org1-gnome</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3234" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-gnome</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3315" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3566" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-es</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2963" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org1-el</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3401" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-it</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3330" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org1-et</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2881" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org1</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3240" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-ja</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3238" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org1-sl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3537" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-sl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2854" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org1-kde</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2860" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org1-nl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3114" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-sv</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3062" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org1-it</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3448" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org1-en</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2913" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-nl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3511" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-fr</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3324" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org1-cs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3748" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org1-fi</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3643" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-pl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3039" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-ca</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3654" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-mono</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2809" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-officebean</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2816" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-de</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2954" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org1-fr</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3385" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org1-zh-TW</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3564" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org1-de</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3345" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-cs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3222" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-zh-CN</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3436" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-en</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3658" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-hr</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3050" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-nn</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2859" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-kde</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2813" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-fi</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3047" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-el</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3494" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-hu</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3693" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-en-GB</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3267" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-bg</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3172" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-tr</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3021" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-pa-IN</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2964" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-ar</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:3726" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>OpenOffice_org-zh-TW</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1088" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mod_python</name>
    </rpminfo_object>
    <inetlisteningservers_object id="oval:org.mitre.oval:obj:1087" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <protocol operation="equals">TCP</protocol>
      <local_address operation="pattern match">.*</local_address>
      <local_port datatype="int" operation="greater than or equal">0</local_port>
    </inetlisteningservers_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:3397" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">123373</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:3779" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">123372</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:3142" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">124970</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:3061" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">124245</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:3259" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">124969</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2936" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">124244</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1089" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1090" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>pwlib</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1093" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1092" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-smp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1091" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-hugemem</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1094" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdelibs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1096" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mc</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1095" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>mc</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1098" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>slocate</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1097" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>slocate</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1698" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:243" var_check="all"/>
      <filename>ssmsrp70.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1697" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>dbmsrpcn.dll</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1100" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gaim</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1102" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mailman</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1103" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mutt</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1106" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>netpbm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1105" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>netpbm-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1104" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>netpbm-progs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1108" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1107" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/X11R6/bin</path>
      <filename>XFree86</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1336" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>netpbm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1335" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>netpbm-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1334" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>netpbm-progs</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1333" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>411toppm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1332" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>asciitopgm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1331" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>atktopbm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1330" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>bioradtopgm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1329" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>bmptoppm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1328" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>brushtopbm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1327" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>cmuwmtopbm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1326" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>eyuvtoppm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1325" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>fiascotopnm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1324" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>fitstopnm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1323" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>fstopgm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1322" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>g3topbm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1321" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>gemtopbm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1320" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>gemtopnm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1319" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>giftopnm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1318" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>gouldtoppm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1317" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>hipstopgm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1316" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>hpcdtoppm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1315" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>icontopbm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1314" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ilbmtoppm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1313" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>imgtoppm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1312" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>jpegtopnm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1311" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>leaftoppm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1310" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>lispmtopgm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1309" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>macptopbm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1308" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>mdatopbm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1307" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>mgrtopbm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1306" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>mtvtoppm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1305" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>neotoppm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1304" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>palmtopnm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1303" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pamchannel</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1302" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pamcut</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1301" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pamdeinterlace</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1300" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pamfile</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1299" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pamoil</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1298" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pamstretch</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1297" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pamtopnm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1296" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmclean</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1295" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmlife</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1294" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmmake</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1293" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmmask</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1292" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmpage</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1291" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmpscale</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1290" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmreduce</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1289" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtext</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1288" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmto10x</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1287" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmto4425</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1286" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtoascii</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1285" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtoatk</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1284" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtobbnbg</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1283" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtocmuwm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1282" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtoepsi</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1281" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtoepson</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1280" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtog3</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1279" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtogem</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1278" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtogo</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1277" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtoicon</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1276" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtolj</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1275" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtoln03</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1274" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtolps</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1273" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtomacp</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1272" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtomda</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1271" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtomgr</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1270" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtonokia</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1269" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtopgm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1268" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtopi3</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1267" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtopk</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1266" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtoplot</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1265" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtoppa</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1264" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtopsg3</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1263" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtoptx</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1262" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtowbmp</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1261" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtox10bm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1260" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtoxbm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1259" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtoybm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1258" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmtozinc</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1257" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pbmupc</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1256" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pcxtoppm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1255" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pgmbentley</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1254" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pgmcrater</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1253" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pgmedge</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1252" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pgmenhance</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1251" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pgmhist</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1250" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pgmkernel</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1249" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pgmnoise</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1248" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pgmnorm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1247" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pgmoil</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1246" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pgmramp</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1245" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pgmslice</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1244" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pgmtexture</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1243" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pgmtofs</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1242" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pgmtolispm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1241" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pgmtopbm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1240" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pgmtoppm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1239" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pi1toppm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1238" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pi3topbm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1237" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pjtoppm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1236" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pktopbm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1235" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pngtopnm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1234" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmalias</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1233" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmarith</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1232" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmcat</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1231" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmcolormap</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1230" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmcomp</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1229" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmconvol</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1228" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmcrop</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1227" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmcut</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1226" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmdepth</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1225" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmenlarge</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1224" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmfile</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1223" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmflip</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1222" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmgamma</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1221" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmhisteq</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1220" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmhistmap</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1219" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnminterp</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1218" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnminvert</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1217" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmmontage</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1216" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmnlfilt</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1215" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmnoraw</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1214" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmpad</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1213" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmpaste</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1212" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmpsnr</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1211" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmremap</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1210" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmrotate</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1209" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmscale</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1208" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmtopict</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1207" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmtopj</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1206" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmtopjxl</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1205" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmtopuzz</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1204" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmtorgb3</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1203" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmtosixel</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1202" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmtotga</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1201" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmtouil</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1200" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmtowinicon</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1199" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmtoxpm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1198" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmtoyuv</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1197" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmtoyuvsplit</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1196" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmtv</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1195" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>psidtopgm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1194" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pstopnm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1193" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>qrttoppm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1192" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>rasttopnm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1191" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>rawtopgm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1190" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>rawtoppm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1189" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>rgb3toppm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1188" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>rletopnm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1187" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>sbigtopgm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1186" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>sgitopnm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1185" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>sirtopnm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1184" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>sldtoppm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1183" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>spctoppm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1182" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>spottopgm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1181" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>sputoppm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1180" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>tgatoppm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1179" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>thinkjettopbm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1178" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>tifftopnm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1177" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>wbmptopbm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1176" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>winicontoppm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1175" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>xbmtopbm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1174" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ximtoppm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1173" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>xpmtoppm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1172" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>xvminitoppm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1171" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>xwdtopnm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1170" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ybmtopbm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1169" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>yuvsplittoppm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1168" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>yuvtoppm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1167" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>zeisstopnm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1166" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmscalefixed</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1165" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmshear</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1164" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmsmooth</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1163" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmsplit</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1162" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmtile</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1161" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmtoddif</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1160" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmtofiasco</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1159" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmtofits</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1158" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmtojpeg</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1157" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmtopalm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1156" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmtoplainpnm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1155" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmtopng</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1154" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmtops</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1153" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmtorast</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1152" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmtorle</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1151" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmtosgi</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1150" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmtosir</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1149" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmtotiff</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1148" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmtotiffcmyk</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1147" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pnmtoxwd</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1146" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppm3d</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1145" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmbrighten</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1144" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmchange</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1143" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmcie</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1142" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmcolormask</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1141" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmcolors</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1140" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmdim</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1139" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmdist</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1138" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmdither</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1137" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmflash</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1136" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmforge</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1135" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmhist</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1134" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmlabel</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1133" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmmake</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1132" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmmix</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1131" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmnorm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1130" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmntsc</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1129" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmpat</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1128" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmquant</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1127" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmqvga</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1126" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmrelief</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1125" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmshift</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1124" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmspread</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1123" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmtoacad</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1122" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmtobmp</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1121" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmtoeyuv</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1120" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmtogif</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1119" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmtoicr</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1118" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmtoilbm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1117" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmtojpeg</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1116" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmtoleaf</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1115" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmtolj</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1114" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmtomitsu</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1113" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmtompeg</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1112" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmtoneo</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1111" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmtopcx</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1110" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmtopgm</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1109" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ppmtopi1</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1338" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>pwlib</name>
    </rpminfo_object>
    <inetlisteningservers_object id="oval:org.mitre.oval:obj:1337" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <protocol operation="pattern match">.*</protocol>
      <local_address operation="pattern match">.*</local_address>
      <local_port datatype="int" operation="equals">1720</local_port>
    </inetlisteningservers_object>
    <patch_object id="oval:org.mitre.oval:obj:1699" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">112846</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:1346" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Updates\Microsoft Services for UNIX\KB896428</key>
      <name>Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1345" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Services for UNIX</key>
      <name>Current_Release</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:816" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>telnet.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1361" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Shared Tools\Web Server Extensions\Setup Packages</key>
      <name>SharePoint</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:1641" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>smss.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1700" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q320206</key>
      <name>Installed</name>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:2616" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120955</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:246" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB834707</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:1701" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">106934</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:1366" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>Imekr70.ime</filename>
    </file_object>
    <package_object id="oval:org.mitre.oval:obj:2655" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst>SUNWkrgdo</pkginst>
    </package_object>
    <package_object id="oval:org.mitre.oval:obj:2213" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst>SUNWkr5sv</pkginst>
    </package_object>
    <package_object id="oval:org.mitre.oval:obj:2138" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst>SUNWkrggl</pkginst>
    </package_object>
    <package_object id="oval:org.mitre.oval:obj:2617" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst>SUNWkr5sl</pkginst>
    </package_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1369" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gftp</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1368" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>gftp</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1371" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ImageMagick</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:1373" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB830352</key>
      <name>Installed</name>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:1376" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112234</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:1375" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">117172</base>
    </patch_object>
    <inetd_object id="oval:org.mitre.oval:obj:1704" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <protocol operation="pattern match">.*</protocol>
      <service_name operation="equals">dtspc</service_name>
    </inetd_object>
    <file_object id="oval:org.mitre.oval:obj:1703" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/dt/bin</path>
      <filename>dtspcd</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:148" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:363" var_check="all"/>
      <filename>vbe6.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1000" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:759" var_check="all"/>
      <filename>agentdpv.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1380" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB890046</key>
      <name>Installed</name>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:1707" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">108721</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1384" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>rh-postgresql-server</name>
    </rpminfo_object>
    <patch_object id="oval:org.mitre.oval:obj:1708" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">110453</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1391" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ypserv</name>
    </rpminfo_object>
    <inetlisteningservers_object id="oval:org.mitre.oval:obj:1390" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <protocol operation="pattern match">.*</protocol>
      <local_address operation="pattern match">.*</local_address>
      <local_port datatype="int" operation="greater than or equal">0</local_port>
    </inetlisteningservers_object>
    <registry_object id="oval:org.mitre.oval:obj:7552" version="1" comment="The registry key holds the location of Kingsoft Antivirus installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Kingsoft\AntiVirus</key>
      <name>ProgramPath</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:6964" version="1" comment="Object holds the path to kavfm.sys" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:817" var_check="all"/>
      <filename>kavfm.sys</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:7697" version="1" comment="The registry key holds the path of Kingsoft Antivirus installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Kingsoft\KISCommon\Install\kiscommon</key>
      <name>ProgramPath</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1393" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xpdf</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1392" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>xpdf</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:1398" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109321</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:1397" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114890</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:1396" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120467</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:1395" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120468</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:1394" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path operation="pattern match">^/etc/lp/printers/.*</path>
      <filename xsi:nil="true"/>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1400" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xinetd</name>
    </rpminfo_object>
    <inetlisteningservers_object id="oval:org.mitre.oval:obj:1399" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <protocol operation="pattern match">.*</protocol>
      <local_address operation="pattern match">.*</local_address>
      <local_port datatype="int" operation="greater than or equal">0</local_port>
    </inetlisteningservers_object>
    <file_object id="oval:org.mitre.oval:obj:844" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>msasn1.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1401" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB828028</key>
      <name>Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:1787" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/openwin/bin</path>
      <filename>kcms_configure</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1406" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mikmod</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1405" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>mikmod</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1640" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>netlogon.dll</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:6156" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">141414</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:7090" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">141415</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:7039" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">141415</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:7080" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">141414</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1417" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>vsftpd</name>
    </rpminfo_object>
    <inetlisteningservers_object id="oval:org.mitre.oval:obj:1416" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <protocol operation="equals">TCP</protocol>
      <local_address operation="pattern match">.*</local_address>
      <local_port datatype="int" operation="greater than or equal">0</local_port>
    </inetlisteningservers_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1419" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>up2date</name>
    </rpminfo_object>
    <process_object id="oval:org.mitre.oval:obj:1418" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command operation="pattern match" datatype="string">^.*rhnsd.*$</command>
    </process_object>
    <registry_object id="oval:org.mitre.oval:obj:1716" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Ras\CurrentVersion</key>
      <name>PathName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1715" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q318138</key>
      <name>Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1714" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SYSTEM\CurrentControlSet\Services\RasMan</key>
      <name>Start</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:1711" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>rasman.dll</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:6959" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122300</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6988" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122301</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1421" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sysreport</name>
    </rpminfo_object>
    <patch_object id="oval:org.mitre.oval:obj:7096" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113329</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6794" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114980</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6192" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109320</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6561" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109321</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6809" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114014</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5877" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">125732</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6507" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114015</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6832" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">125731</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6568" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">141008</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6310" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">141009</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:1713" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path operation="equals">/usr/lib/snmp</path>
      <filename>mibiisa</filename>
    </file_object>
    <process_object id="oval:org.mitre.oval:obj:1712" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command operation="pattern match" datatype="string">^.*mibiisa.*</command>
    </process_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1423" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>unzip</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1422" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>unzip</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:6427" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">138896</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6393" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">140837</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6252" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">138897</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6426" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">140838</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6731" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">141014</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6824" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">141015</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:7121" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">140922</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6893" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">140921</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:7064" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122301</base>
    </patch_object>
    <textfilecontent_object id="oval:org.mitre.oval:obj:6927" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc</path>
      <filename>system</filename>
      <line operation="pattern match">^[^*].+c2audit</line>
    </textfilecontent_object>
    <patch_object id="oval:org.mitre.oval:obj:7019" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122300</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:6766" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Classes\Installer\Products\768AAF4834783C442BE25B1A2554D677</key>
      <name>ProductName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:6995" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Classes\Installer\Products\899384DAA9E2504438FFE605A34FC9BB</key>
      <name>ProductName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:6939" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Classes\Installer\Products\42AAC7A832B7B0147A3C9F490B491406</key>
      <name>ProductName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:2202" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Classes\Installer\Products\813ACF1D304B0FB43A2E440E1CF2ADD3</key>
      <name>ProductName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:2004" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Classes\Installer\Products\EDDFACCCCECE4EA4DB79400767BB4D9A</key>
      <name>ProductName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:2423" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Classes\Installer\Products\0EEDF7F0258333042A16F38A4BEC64C6</key>
      <name>ProductName</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:6776" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:201" var_check="all"/>
      <filename>VMM.sys</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:6664" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">139555</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6169" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">139556</base>
    </patch_object>
    <swlist_object id="oval:org.mitre.oval:obj:2161" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <swlist>WUFTP-26.INETSVCS-FTP</swlist>
    </swlist_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1424" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>squirrelmail</name>
    </rpminfo_object>
    <patch_object id="oval:org.mitre.oval:obj:6807" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119346</base>
    </patch_object>
    <package_object id="oval:org.mitre.oval:obj:6468" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst>SUNWsasl</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:6713" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">115343</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6967" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">115328</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6646" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">115342</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:7005" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119345</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6170" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114435</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6546" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113451</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:6569" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/etc/inet/ike</path>
      <filename>config</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:6037" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">140196</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6748" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">140414</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2358" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <patch_name>PHCO_23261</patch_name>
    </patch_object>
    <swlist_object id="oval:org.mitre.oval:obj:1876" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <swlist>OS-Core.C2400-UTIL</swlist>
    </swlist_object>
    <swlist_object id="oval:org.mitre.oval:obj:2208" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <swlist>OS-Core.ADMN-ENG-A-MAN</swlist>
    </swlist_object>
    <patch_object id="oval:org.mitre.oval:obj:6900" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118192</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6344" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118192</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6795" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114344</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6759" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119435</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6730" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">138889</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6364" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">138888</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6489" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">126133</base>
    </patch_object>
    <textfilecontent_object id="oval:org.mitre.oval:obj:6443" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc/ssh</path>
      <filename>sshd_config</filename>
      <line operation="pattern match">^\s*X11Forwarding\s+no\s*</line>
    </textfilecontent_object>
    <patch_object id="oval:org.mitre.oval:obj:6316" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114357</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6539" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114356</base>
    </patch_object>
    <textfilecontent_object id="oval:org.mitre.oval:obj:6276" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc/ssh</path>
      <filename>sshd_config</filename>
      <line operation="pattern match">^\s*X11Forwarding\s+yes\s*</line>
    </textfilecontent_object>
    <patch_object id="oval:org.mitre.oval:obj:6547" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">126134</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6023" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">140383</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6436" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">140384</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6842" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113685</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6724" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">140427</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6851" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113686</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6798" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">140426</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6691" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116966</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6641" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">138889</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6679" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116965</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6802" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114344</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6834" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">138888</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6805" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119435</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:38118" version="1" comment="Check for Avast! is Installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\AVAST Software\Avast</key>
      <name xsi:nil="true"/>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:7103" version="2" comment="Check for Avast! old version is Installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\ALWIL Software\\Avast\\([0-9.]+)$</key>
      <name xsi:nil="true"/>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:7259" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:592" var_check="all"/>
      <filename>ashAvast.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:7262" version="1" comment="The registry key that holds the location of the Avast AntiVirus directory." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\ashAvast.exe</key>
      <name>Path</name>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:6796" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112785</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6637" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119067</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6503" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119059</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6434" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119068</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6865" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119060</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6825" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112786</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1789" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cups</name>
    </rpminfo_object>
    <inetlisteningservers_object id="oval:org.mitre.oval:obj:1788" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <protocol operation="pattern match">.*</protocol>
      <local_address operation="pattern match">.*</local_address>
      <local_port datatype="int" operation="greater than or equal">0</local_port>
    </inetlisteningservers_object>
    <patch_object id="oval:org.mitre.oval:obj:6483" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118191</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6407" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118191</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6585" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">139099</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6758" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">128624</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6552" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">139560</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6620" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116053</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6867" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113318</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6658" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">128625</base>
    </patch_object>
    <process_object id="oval:org.mitre.oval:obj:6437" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command operation="pattern match">autofs</command>
    </process_object>
    <patch_object id="oval:org.mitre.oval:obj:6284" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">139561</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1433" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sendmail</name>
    </rpminfo_object>
    <inetlisteningservers_object id="oval:org.mitre.oval:obj:1432" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <protocol operation="pattern match">.*</protocol>
      <local_address operation="pattern match">.*</local_address>
      <local_port datatype="int" operation="greater than or equal">0</local_port>
    </inetlisteningservers_object>
    <registry_object id="oval:org.mitre.oval:obj:6562" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_CLASSES_ROOT</hive>
      <key>PROTOCOLS\Handler</key>
      <name>cdo</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:5685" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Classes</key>
      <name>CDO</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:6258" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Classes\PROTOCOLS\Handler</key>
      <name>cdo</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1434" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sendmail</name>
    </rpminfo_object>
    <patch_object id="oval:org.mitre.oval:obj:6662" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">138889</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6811" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">138888</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:1435" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\.*</key>
      <name>DisplayVersion</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:251" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB883935</key>
      <name>Installed</name>
    </registry_object>
    <package_object id="oval:org.mitre.oval:obj:1441" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWrcmds</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:1440" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">118239</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:1439" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">116984</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:1438" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">117455</base>
    </patch_object>
    <process_object id="oval:org.mitre.oval:obj:1437" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command operation="equals" datatype="string">/usr/sbin/in.rwhod</command>
    </process_object>
    <patch_object id="oval:org.mitre.oval:obj:7092" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114265</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6933" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112837</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6892" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109327</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6869" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109326</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6239" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119784</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:7127" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119783</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6856" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">139459</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6815" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">138863</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6341" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122213</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6515" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122212</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6899" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">141414</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6058" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">141415</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:1718" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\Q331953</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:6461" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116479</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6371" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113031</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6624" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120831</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6464" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120830</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6578" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">110904</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6565" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">110903</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6671" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114016</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6144" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122911</base>
    </patch_object>
    <package_object id="oval:org.mitre.oval:obj:6523" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst>SUNWtcatr</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:6835" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114017</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6853" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122912</base>
    </patch_object>
    <process_object id="oval:org.mitre.oval:obj:923" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command operation="pattern match">.*Xorg\b.*</command>
    </process_object>
    <patch_object id="oval:org.mitre.oval:obj:6860" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">115158</base>
    </patch_object>
    <package_object id="oval:org.mitre.oval:obj:6872" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst>SUNWxwsvr</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:6985" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120095</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:7083" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120094</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:7056" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">115299</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:7021" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">115159</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6862" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">115298</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6742" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109077</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6801" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112837</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6275" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109078</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6517" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114265</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6822" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">138876</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6821" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">138877</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6744" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">115168</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6465" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112908</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6548" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109806</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6339" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">139479</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6775" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109805</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6774" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">139478</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:23396" version="1" comment="The registry has a value of Microsoft Search Server 2008" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Office\12.0\Registration\{90120000-1125-0000-0000-0000000FF1CE}</key>
      <name>ProductName</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:23377" version="1" comment="Object holds Mssdmn.exe file location" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1060" var_check="all"/>
      <filename>mssdmn.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:23273" version="1" comment="The registry key that identifies the locaton of the Office Servers directory" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90120000-1015-0409-0000-0000000FF1CE}</key>
      <name>InstallLocation</name>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:6433" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">121775</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6580" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122212</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6404" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122213</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:1544" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SYSTEM\CurrentControlSet\Services\lanmanworkstation</key>
      <name>Start</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1447" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB828749</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:5681" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">137112</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5849" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">137111</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1452" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sendmail</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1451" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/sbin</path>
      <filename>sendmail.sendmail</filename>
    </file_object>
    <inetlisteningservers_object id="oval:org.mitre.oval:obj:1450" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <protocol operation="equals">TCP</protocol>
      <local_address operation="pattern match">.*</local_address>
      <local_port datatype="int" operation="greater than or equal">0</local_port>
    </inetlisteningservers_object>
    <patch_object id="oval:org.mitre.oval:obj:6439" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">138882</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6704" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116669</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6723" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">138574</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6521" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">138632</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6610" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">141414</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6999" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122300</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:7132" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127722</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:7057" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127721</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6462" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">141415</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:7077" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122301</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1456" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>wl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1455" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>wl-xemacs</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1454" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>emacs</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1453" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>xemacs</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:144" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Updates\Visual Studio\7.1\S918007</key>
      <name>Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:23704" version="1" comment="Object holds file location vb6.exe" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1468"/>
      <filename>vb6.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:23624" version="1" comment="Object holds directory path for vb6.exe" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\VisualStudio\6.0\Setup\Microsoft Visual Basic</key>
      <name>ProductDir</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:22438" version="1" comment="The registry holds if Visual FoxPro is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Visual FoxPro.*$</key>
      <name>DisplayName</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:6745" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>Mschrt20.ocx</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:6695" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>Mscomct2.ocx</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:6373" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">139498</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6132" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">139499</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1458" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba</name>
    </rpminfo_object>
    <inetlisteningservers_object id="oval:org.mitre.oval:obj:1457" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <protocol operation="pattern match">.*</protocol>
      <local_address operation="pattern match">.*</local_address>
      <local_port datatype="int" operation="greater than or equal">0</local_port>
    </inetlisteningservers_object>
    <patch_object id="oval:org.mitre.oval:obj:7107" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">117351</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6938" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">139484</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6733" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">139483</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:7040" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122300</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6528" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">117350</base>
    </patch_object>
    <textfilecontent_object id="oval:org.mitre.oval:obj:7066" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc</path>
      <filename>mnttab</filename>
      <line operation="pattern match">^[^\t]+\t[^\t]+\tufs\t(.+)</line>
    </textfilecontent_object>
    <patch_object id="oval:org.mitre.oval:obj:7141" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122301</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6494" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">136717</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5510" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114984</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6391" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114971</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6470" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114985</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6071" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">138570</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5646" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">136716</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:1720" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">111596</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6876" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">141733</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:7129" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">141734</base>
    </patch_object>
    <package_object id="oval:org.mitre.oval:obj:1459" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWxwplt</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:5528" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120413</base>
    </patch_object>
    <package_object id="oval:org.mitre.oval:obj:5302" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst>SUNWtleu</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:5473" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120414</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5196" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120415</base>
    </patch_object>
    <package_object id="oval:org.mitre.oval:obj:5631" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst>SUNWhleu2</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:5539" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120412</base>
    </patch_object>
    <package_object id="oval:org.mitre.oval:obj:5193" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst>SUNWkleu</pkginst>
    </package_object>
    <package_object id="oval:org.mitre.oval:obj:5617" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst>SUNWhkleu</pkginst>
    </package_object>
    <package_object id="oval:org.mitre.oval:obj:5610" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst>SUNWcleu2</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:5105" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">124420</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5446" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119812</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5437" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116106</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5486" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">124421</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5377" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116105</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5559" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119813</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1462" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba</name>
    </rpminfo_object>
    <inetlisteningservers_object id="oval:org.mitre.oval:obj:1461" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <protocol operation="equals">TCP</protocol>
      <local_address operation="pattern match">.*</local_address>
      <local_port datatype="int" operation="greater than or equal">0</local_port>
    </inetlisteningservers_object>
    <patch_object id="oval:org.mitre.oval:obj:5519" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114344</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5057" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116966</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5736" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118822</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5199" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116965</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5511" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118844</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5644" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119435</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6065" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">139390</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6864" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127127</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6848" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127128</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6789" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">139391</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5357" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">117350</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5574" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">117351</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5654" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127111</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5516" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127112</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5599" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">123402</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5504" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">123403</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5662" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">115553</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5194" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">115554</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5623" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122301</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6416" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">117350</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6052" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">137111</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6533" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122300</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6348" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">137112</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6431" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">117351</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5717" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120011</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5402" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120012</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6478" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">137112</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5526" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">137111</base>
    </patch_object>
    <textfilecontent_object id="oval:org.mitre.oval:obj:5723" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc</path>
      <filename>system</filename>
      <line operation="pattern match">set\s+snooping\s*=\s*1\s</line>
    </textfilecontent_object>
    <patch_object id="oval:org.mitre.oval:obj:5639" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114678</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5319" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119810</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5309" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114677</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5365" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119811</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6827" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">138372</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6718" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">138371</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6329" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112237</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6116" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">115168</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6146" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112908</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6741" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112238</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6614" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112240</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6649" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112390</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5637" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127112</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:4952" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127111</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1722" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ethereal</name>
    </rpminfo_object>
    <patch_object id="oval:org.mitre.oval:obj:5656" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112785</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5438" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119060</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5647" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">125719</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5085" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119059</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5601" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119068</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5340" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119067</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5284" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118908</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5655" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">125720</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5542" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112786</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:4777" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127719</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5293" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127718</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:5540" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/var/tmp</path>
      <filename>inetd.log</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:6223" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:425" var_check="all"/>
      <filename>owaauth.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:5478" version="1" comment="This registry key identifies the exchange services root." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Exchange\Setup</key>
      <name>Services</name>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:6448" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116455</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6831" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116453</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6534" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116454</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6772" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116442</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5529" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127744</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5785" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120012</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5338" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120011</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5263" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127743</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:4751" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127112</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5384" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127111</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5817" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">108965</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6179" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112915</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6020" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">138083</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6325" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">108964</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6213" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114262</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5903" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">138084</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5500" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122300</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5233" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113273</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5533" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122301</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5606" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114858</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5025" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113329</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5815" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109321</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5804" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127128</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5227" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114980</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5297" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109320</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5642" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127127</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:1463" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB832894</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:6655" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">139100</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:1351" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>sqlsrv32.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1464" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Updates\DataAccess\Q832483</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1466" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postfix</name>
    </rpminfo_object>
    <inetlisteningservers_object id="oval:org.mitre.oval:obj:1465" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <protocol operation="pattern match">.*</protocol>
      <local_address operation="pattern match">.*</local_address>
      <local_port datatype="int" operation="greater than or equal">0</local_port>
    </inetlisteningservers_object>
    <patch_object id="oval:org.mitre.oval:obj:5449" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114014</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5567" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">125731</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5275" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">125732</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5635" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114015</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5629" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118833</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5019" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118855</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5564" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">125251</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5515" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">125252</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1724" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>eog</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1723" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>eog</filename>
    </file_object>
    <line_object id="oval:org.mitre.oval:obj:7408" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show module</show_subcommand>
    </line_object>
    <patch_object id="oval:org.mitre.oval:obj:5535" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127127</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5679" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127128</base>
    </patch_object>
    <package_object id="oval:org.mitre.oval:obj:258" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWdthep</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:257" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">107178</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:256" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">108949</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:255" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">116308</base>
    </patch_object>
    <swlist_object id="oval:org.mitre.oval:obj:2556" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <swlist>TOUR_PRODUCT.T-NET2-KRN</swlist>
    </swlist_object>
    <patch_object id="oval:org.mitre.oval:obj:6131" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">137111</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:6346" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">137112</base>
    </patch_object>
    <line_object id="oval:org.mitre.oval:obj:7425" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show ip sockets</show_subcommand>
    </line_object>
    <line_object id="oval:org.mitre.oval:obj:7436" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show tcp brief all</show_subcommand>
    </line_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1468" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>pine</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1467" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>pine</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:299" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB892944</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:261" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>mqrt.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:267" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\.NETFramework\policy\v1.0</key>
      <name>3705</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:266" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Updates\NET Framework Setup\1.0\M886905</key>
      <name>Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:265" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Active Setup\Installed Components\{78705f0d-e8db-4b2d-8193-982bdda15ecd}</key>
      <name>Version</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:264" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Active Setup\Installed Components\{78705f0d-e8db-4b2d-8193-982bdda15ecd}</key>
      <name>Version</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:263" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1041" var_check="all"/>
      <filename>System.web.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:262" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Updates\.NETFramework Setup\1.0\M886906</key>
      <name>Installed</name>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:5310" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122301</base>
    </patch_object>
    <line_object id="oval:org.mitre.oval:obj:6197" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
    </line_object>
    <version_object id="oval:org.mitre.oval:obj:6256" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios"/>
    <registry_object id="oval:org.mitre.oval:obj:269" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{ABEB838C-A1A7-4C5D-B7E1-8B4314600208}</key>
      <name>DisplayVersion</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:272" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Proxy Server</key>
      <name operation="equals">Microsoft Proxy Server</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:271" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:205" var_check="all"/>
      <filename>w3proxy.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:270" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB888258</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1471" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php</name>
    </rpminfo_object>
    <line_object id="oval:org.mitre.oval:obj:6385" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
    </line_object>
    <version_object id="oval:org.mitre.oval:obj:6251" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios"/>
    <patch_object id="oval:org.mitre.oval:obj:5645" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127111</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5399" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116965</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5239" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119435</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5537" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127112</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:4814" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116966</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5700" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114344</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:1472" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:249" var_check="all"/>
      <filename>sqlisapi.dll</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:274" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">112960</base>
    </patch_object>
    <textfilecontent_object id="oval:org.mitre.oval:obj:273" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path operation="equals">/etc</path>
      <filename>nsswitch.conf</filename>
      <line operation="pattern match">^[^#].*_attr.*ldap</line>
    </textfilecontent_object>
    <file_object id="oval:org.mitre.oval:obj:1473" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:203" var_check="all"/>
      <filename>ssinc.dll</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:4853" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">121095</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5698" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">121096</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:1726" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path operation="pattern match">^(/usr)?/bin$</path>
      <filename>admintool</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1477" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:250" var_check="all"/>
      <filename>h323fltr.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1476" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Fpc\Hotfixes\SP1\291</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1475" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Fpc\\Arrays\\\{[^\\]+\}\\Extensions\\Proxy-Plugins\\\{FE440D49-AB26-11D2-A101-00C04FB6CFB6\}$</key>
      <name operation="equals">msFPCEnabled</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:1481" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:210" var_check="all"/>
      <filename>exprox.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1480" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Updates\Exchange Server 2003\SP1\832759</key>
      <name xsi:nil="true"/>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1479" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SYSTEM\CurrentControlSet\Services\MSExchangeWEB\DAV</key>
      <name>ReuseConnections</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:282" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Updates\Windows 2000\SP5\KB873339\Filelist</key>
      <name xsi:nil="true"/>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:1785" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">108827</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:1784" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">108901</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:286" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">108451</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:285" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">113319</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:284" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">11233</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5543" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">137017</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5552" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">137018</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5474" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109008</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5381" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109007</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5626" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122301</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5217" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122300</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:287" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Updates\Windows 2000\SP5\KB893086\Filelist</key>
      <name xsi:nil="true"/>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1482" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>perl-CGI</name>
    </rpminfo_object>
    <patch_object id="oval:org.mitre.oval:obj:1727" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">111826</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1483" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>pam_smb</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:1575" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896422</key>
      <name>Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:812" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:201" var_check="all"/>
      <filename>srv.sys</filename>
    </file_object>
    <process_object id="oval:org.mitre.oval:obj:288" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command operation="pattern match">.*krb5kdc.*</command>
    </process_object>
    <patch_object id="oval:org.mitre.oval:obj:2299" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">117470</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2065" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116966</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2315" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116965</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2218" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118822</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2100" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118305</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:1918" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896358</key>
      <name>Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:859" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:244" var_check="all"/>
      <filename>hh.exe</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1492" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1491" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1490" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl-perl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1489" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl096</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1488" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl096b</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:259" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:203" var_check="all"/>
      <filename>netdde.exe</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1494" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>sp3res.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1493" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB822679</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1498" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssh-server</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1500" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssh-server</name>
    </rpminfo_object>
    <inetlisteningservers_object id="oval:org.mitre.oval:obj:1499" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <protocol operation="pattern match">.*</protocol>
      <local_address operation="pattern match">.*</local_address>
      <local_port datatype="int" operation="greater than or equal">0</local_port>
    </inetlisteningservers_object>
    <patch_object id="oval:org.mitre.oval:obj:295" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">110057</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:294" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">110060</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:293" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">116462</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1502" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>nfs-utils</name>
    </rpminfo_object>
    <inetlisteningservers_object id="oval:org.mitre.oval:obj:1501" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <protocol operation="pattern match">.*</protocol>
      <local_address operation="pattern match">.*</local_address>
      <local_port datatype="int" operation="greater than or equal">0</local_port>
    </inetlisteningservers_object>
    <swlist_object id="oval:org.mitre.oval:obj:1871" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <swlist>WUFTP-26.INETSVCS-FTP</swlist>
    </swlist_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1504" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mysql-server</name>
    </rpminfo_object>
    <inetlisteningservers_object id="oval:org.mitre.oval:obj:1503" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <protocol operation="pattern match">.*</protocol>
      <local_address operation="pattern match">.*</local_address>
      <local_port datatype="int" operation="greater than or equal">0</local_port>
    </inetlisteningservers_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1506" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mutt</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1505" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>mutt</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:303" comment="Registry key set when Microsoft Visual Studio .NET 2002 is installed" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>Software\Microsoft\VisualStudio\7.0</key>
      <name xsi:nil="true"/>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1507" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>lv</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:306" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:208" var_check="all"/>
      <filename>msphlpr.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:39" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Fpc</key>
      <name>InstallDirectory</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:305" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Fpc\Hotfixes\SP1\408</key>
      <name>Kbs</name>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:3770" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118562</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:4474" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">121230</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:4707" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">121229</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:4744" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118563</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:1513" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>tlntsvr.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1512" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q307298</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1511" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SYSTEM\CurrentControlSet\Services\Tlntsvr</key>
      <name operation="equals">Start</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1516" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>lprng</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1515" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/libexec/filters</path>
      <filename>psbanner</filename>
    </file_object>
    <inetlisteningservers_object id="oval:org.mitre.oval:obj:1514" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <protocol operation="pattern match">.*</protocol>
      <local_address operation="pattern match">.*</local_address>
      <local_port datatype="int" operation="greater than or equal">0</local_port>
    </inetlisteningservers_object>
    <file_object id="oval:org.mitre.oval:obj:308" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:209" var_check="all"/>
      <filename>vgx.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1786" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path operation="equals">/usr/lib/dmi</path>
      <filename>dmispd</filename>
    </file_object>
    <inetd_object id="oval:org.mitre.oval:obj:1783" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <protocol operation="pattern match">.*</protocol>
      <service_name operation="equals">100068/2-5</service_name>
    </inetd_object>
    <file_object id="oval:org.mitre.oval:obj:1781" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/dt/bin</path>
      <filename>rpc.cmsd</filename>
    </file_object>
    <process_object id="oval:org.mitre.oval:obj:1780" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command operation="pattern match" datatype="string">^.*dmispd.*</command>
    </process_object>
    <patch_object id="oval:org.mitre.oval:obj:1732" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">108541</base>
    </patch_object>
    <textfilecontent_object id="oval:org.mitre.oval:obj:310" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path operation="equals">/etc</path>
      <filename>nsswitch.conf</filename>
      <line operation="pattern match">^[^#]*hosts:.*dns</line>
    </textfilecontent_object>
    <file_object id="oval:org.mitre.oval:obj:180" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1061" var_check="all"/>
      <filename>aspnet_filter.dll</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1521" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdelibs</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1520" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>konqueror</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:1735" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">112899</base>
    </patch_object>
    <inetd_object id="oval:org.mitre.oval:obj:1734" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <protocol operation="pattern match">.*</protocol>
      <service_name operation="equals">walld/1</service_name>
    </inetd_object>
    <file_object id="oval:org.mitre.oval:obj:1733" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/lib/netsvc/rwall</path>
      <filename>rpc.rwalld</filename>
    </file_object>
    <package_object id="oval:org.mitre.oval:obj:319" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWpcr</pkginst>
    </package_object>
    <package_object id="oval:org.mitre.oval:obj:318" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWpcu</pkginst>
    </package_object>
    <package_object id="oval:org.mitre.oval:obj:317" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWpsr</pkginst>
    </package_object>
    <package_object id="oval:org.mitre.oval:obj:316" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWpsu</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:3862" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113073</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:4147" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118559</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:3901" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113026</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:4525" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122371</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:4501" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113994</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:4423" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">126257</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:3934" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">124256</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:4599" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116669</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:1522" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Updates\Windows Server 2003\SP1\KB893086\Filelist</key>
      <name xsi:nil="true"/>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:1526" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:253" var_check="all"/>
      <filename>w3proxy.exe</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1524" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:253" var_check="all"/>
      <filename>wspsrv.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1525" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft ISA Server</key>
      <name>InstallationLocation</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1523" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Fpc\Hotfixes\SP1\257</key>
      <name>Kbs</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1474" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SYSTEM\CurrentControlSet\Services\Fwsrv</key>
      <name>Start</name>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:325" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">108574</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:324" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">108162</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:323" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">108416</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:321" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">110898</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:320" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109324</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:624" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB885250</key>
      <name>Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:330" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\9161A261-6ABE-4668-BBFA-AD06B3F642CF</key>
      <name operation="equals">Microsoft Exchange</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:328" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:210" var_check="all"/>
      <filename>xlsasink.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:327" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Updates\Exchange Server 2003\SP1\KB894549</key>
      <name operation="pattern match">.*</name>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:333" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">109613</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:332" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">112810</base>
    </patch_object>
    <package_object id="oval:org.mitre.oval:obj:331" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWdtdst</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:1830" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112238</base>
    </patch_object>
    <package_object id="oval:org.mitre.oval:obj:2551" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst>SUNWCryr</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:2709" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112390</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2466" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112237</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2128" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120469</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2599" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112240</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2196" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112537</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2752" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120470</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:1847" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112536</base>
    </patch_object>
    <package_object id="oval:org.mitre.oval:obj:2361" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst>SUNWCry</pkginst>
    </package_object>
    <file_object id="oval:org.mitre.oval:obj:338" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path operation="equals">/etc</path>
      <filename>named.conf</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:339" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>zipfldr.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:864" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB873376</key>
      <name>Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:863" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Classes\CompressedFolder</key>
      <name>FriendlyTypeName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:334" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90280409-6000-11D3-8CFE-0050048383C9}</key>
      <name>DisplayVersion</name>
    </registry_object>
    <package_object id="oval:org.mitre.oval:obj:343" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWntpu</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:342" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">109409</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:341" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">109667</base>
    </patch_object>
    <process_object id="oval:org.mitre.oval:obj:340" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command operation="equals" datatype="string">/usr/lib/inet/xntpd</command>
    </process_object>
    <registry_object id="oval:org.mitre.oval:obj:345" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>Software\Microsoft\Windows\CurrentVersion\Uninstall\{903B0409-6000-11D3-8CFE-0150048383C9}</key>
      <name>DisplayVersion</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1736" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q318593</key>
      <name>Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:15477" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\NET Framework Setup\NDP\v2.0.50727</key>
      <name>Install</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:4" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1061" var_check="all"/>
      <filename>System.web.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1340" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB890923-IE6SP1-20050225.103456</key>
      <name xsi:nil="true"/>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:1532" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>hhsetup.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1530" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q323255</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:1709" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:203" var_check="all"/>
      <filename>asp.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1737" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q299444</key>
      <name>Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:1535" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:254" var_check="all"/>
      <filename>fp5areg.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1534" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:254" var_check="all"/>
      <filename>fp30reg.dll</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:349" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libpng</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:348" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libpng-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:347" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libpng10-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:346" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libpng10</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1537" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:255" var_check="all"/>
      <filename>fp4areg.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1536" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:255" var_check="all"/>
      <filename>fp30reg.dll</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:354" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">106950</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:353" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">109147</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:352" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">112963</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2778" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120954</base>
    </patch_object>
    <package_object id="oval:org.mitre.oval:obj:2033" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst>SUNWamsvc</pkginst>
    </package_object>
    <file_object id="oval:org.mitre.oval:obj:357" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>webvw.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:356" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Updates\Windows 2000\SP5\KB894320\Filelist</key>
      <name xsi:nil="true"/>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:355" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_CURRENT_USER</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced</key>
      <name operation="equals">WebView</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1539" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cpio</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1538" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/bin</path>
      <filename>cpio</filename>
    </file_object>
    <textfilecontent_object id="oval:org.mitre.oval:obj:360" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path operation="equals">/etc</path>
      <filename>system</filename>
      <line operation="pattern match">^[^\*]*set.*c2audit.*</line>
    </textfilecontent_object>
    <registry_object id="oval:org.mitre.oval:obj:365" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\NET Framework Setup\NDP\v1.1.4322</key>
      <name>Install</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:364" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">Software\Microsoft\NET Framework Setup\NDP\v1.1.4322</key>
      <name operation="equals">SP</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:363" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Updates\.NETFramework Setup\1.1\M886903</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:1808" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1051" var_check="all"/>
      <filename>System.web.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:362" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Updates\.NETFramework Setup\1.1\M886904</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <package_object id="oval:org.mitre.oval:obj:368" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWsshdu</pkginst>
    </package_object>
    <textfilecontent_object id="oval:org.mitre.oval:obj:366" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path operation="equals">/etc/ssh</path>
      <filename>sshd_config</filename>
      <line operation="pattern match">^[^#]*ListenAddress.*0\.0\.0\.0</line>
    </textfilecontent_object>
    <file_object id="oval:org.mitre.oval:obj:1540" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path operation="equals">/etc/httpd/conf.d</path>
      <filename>php.conf</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1541" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB824245</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:376" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">113073</base>
    </patch_object>
    <package_object id="oval:org.mitre.oval:obj:375" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWlvmr</pkginst>
    </package_object>
    <file_object id="oval:org.mitre.oval:obj:374" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path operation="pattern match">^/etc/rc[2-4]\.d$</path>
      <filename operation="pattern match">^S[0-9][0-9]svm\.init$</filename>
    </file_object>
    <textfilecontent_object id="oval:org.mitre.oval:obj:373" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path operation="equals">/etc</path>
      <filename>vfstab</filename>
      <line operation="pattern match">^/dev/md/</line>
    </textfilecontent_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1542" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:565" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB841873</key>
      <name>Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:379" version="1" comment="The path to the mstask.dll in the system root directory." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>mstask.dll</filename>
    </file_object>
    <package_object id="oval:org.mitre.oval:obj:383" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWbip</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:382" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">118313</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:381" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">116986</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:380" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">116774</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:1607" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB824141</key>
      <name>Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1605" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SYSTEM\CurrentControlSet\Services\UtilMan</key>
      <name>Start</name>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:1741" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">111600</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:1742" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path operation="pattern match">^/usr/sbin/sparcv.$</path>
      <filename>whodo</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1543" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q303984</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:387" version="2" comment="Microsoft Office Visio 2003" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <set xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
        <object_reference>oval:org.mitre.oval:obj:44208</object_reference>
        <object_reference>oval:org.mitre.oval:obj:43819</object_reference>
      </set>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:44208" version="1" comment="Microsoft Office Visio Professional 2003" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>Software\Microsoft\Windows\CurrentVersion\Uninstall\{90510409-6000-11D3-8CFE-0150048383C9}</key>
      <name xsi:nil="true"/>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:43819" version="1" comment="Microsoft Office Visio Standard 2003" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>Software\Microsoft\Windows\CurrentVersion\Uninstall\{90530409-6000-11D3-8CFE-0150048383C9}</key>
      <name xsi:nil="true"/>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:386" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:214" var_check="all"/>
      <filename>GDIPLUS.DLL</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:3490" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118855</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:3164" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127111</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2843" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118833</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:3264" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127112</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:390" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>user32.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1606" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB891711</key>
      <name>Installed</name>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:2850" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">126661</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:3296" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">126662</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2997" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">126929</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:3333" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">126928</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:3096" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113318</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:3184" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">117468</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:1551" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:243" var_check="all"/>
      <filename>impprov.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:392" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Updates\Windows Server 2003\SP1\KB873339\Filelist</key>
      <name xsi:nil="true"/>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:544" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB841533</key>
      <name>Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:393" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>netdde.exe</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:260" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:203" var_check="all"/>
      <filename>nddenb32.dll</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:1686" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">110896</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:1745" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">114008</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:1555" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:256" var_check="all"/>
      <filename>shtml.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1554" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB810217</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1553" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\OC Manager\Subcomponents</key>
      <name operation="equals">fp_extensions</name>
    </registry_object>
    <package_object id="oval:org.mitre.oval:obj:396" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="pattern match" datatype="string">SUNWdtba[sx]</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:395" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">108219</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:4826" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122092</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5697" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122091</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1556" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:398" version="1" comment="MSO.DLL for Office 11 in its installation directory" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:214" var_check="all"/>
      <filename>MSO.DLL</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:2923" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127112</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2962" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122301</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:3109" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">117351</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:3097" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">117350</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:3170" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127111</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:3130" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122300</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:1747" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q313450</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:1560" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:257" var_check="all"/>
      <filename>msgprox.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1559" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:257" var_check="all"/>
      <filename>replrec.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1557" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:257" var_check="all"/>
      <filename>sqlvdi.dll</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:401" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">116895</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:400" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">117000</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2730" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119255</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2444" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119254</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:1717" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB823980</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1702" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\MSSQLServer\MSSQLServer</key>
      <name operation="equals">LoginMode</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1749" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Updates\Windows 2000\SP4\Q321599</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:43939" version="1" comment="Object holds the details of Microsoft.SharePoint.Portal.dll" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:834" var_check="at least one"/>
      <filename>Microsoft.SharePoint.Portal.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:38" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:443" var_check="all"/>
      <filename>WmiScriptUtils.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1568" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>dxmasf.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1564" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>msdxm.ocx</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1563" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Updates\Windows Media Player\wm308567</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:43159" version="1" comment="Object holds the information of Microsoft.Office.Server.Search.dll" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1086" var_check="at least one"/>
      <filename>Microsoft.Office.Server.Search.dll</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1565" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:410" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:409" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-hugemem</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:408" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-smp</name>
    </rpminfo_object>
    <package_object id="oval:org.mitre.oval:obj:412" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWxwfs</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:411" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">113923</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1751" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ddskk</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1750" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ddskk-xemacs</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:43915" version="1" comment="Object holds the details of msoserverintl.dll" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1431" var_check="at least one"/>
      <filename>msoserverintl.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:43884" version="1" comment="Object holds the details of wwintl.dll" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1672" var_check="at least one"/>
      <filename>wwintl.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:44052" version="1" comment="Object holds the details of vutils.dll" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1902" var_check="at least one"/>
      <filename>vutils.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:24128" version="1" comment="Object holds the details of Msoserver.Dll(Sharepoint Server)" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1921"/>
      <filename>Msoserver.Dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:43614" version="1" comment="Object holds the path to microsoft.office.infopath.server.dll" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1870" var_check="at least one"/>
      <filename>microsoft.office.infopath.server.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:44137" version="1" comment="Object holds the path to Office Server 15 bin directory" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>Software\Microsoft\Office Server\15.0</key>
      <name>BinPath</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:26773" version="1" comment="Object holds the details of xlsrv.dll in Microsoft Office 2013 Excel Services" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1658" var_check="at least one"/>
      <filename>xlsrv.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:44015" version="2" comment="Object holds the details of stswel.dll (Foundation 2013)" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1569" var_check="at least one"/>
      <filename>stswel.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:397" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>srvsvc.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1570" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q329170</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1569" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SYSTEM\CurrentControlSet\Services\lanmanserver\parameters</key>
      <name operation="equals">enablesecuritysignature</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:571" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>Software\Microsoft\Windows NT\CurrentVersion\Hotfix\KB841356</key>
      <name>Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:307" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>grpconv.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:414" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>Software\Microsoft\Windows\CurrentVersion\Uninstall\{90510409-6D54-11D4-BEE3-00C04F990354}</key>
      <name>DisplayVersion</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:413" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90510409-6D54-11D4-BEE3-00C04F990354}</key>
      <name operation="equals">WindowsInstaller</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1562" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q329414</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:367" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">113273</base>
    </patch_object>
    <process_object id="oval:org.mitre.oval:obj:415" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command operation="pattern match">^.*sshd.*</command>
    </process_object>
    <registry_object id="oval:org.mitre.oval:obj:2113" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SYSTEM\CurrentControlSet\Control\Session Manager\Environment</key>
      <name>PROCESSOR_ARCHITECTURE</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:41939" version="1" comment="Object holds the path to Deploy.resources.dll" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1930" var_check="at least one"/>
      <filename>Deploy.resources.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:42109" version="1" comment="Object holds the path to Microsoft.Rtc.Acd.Workflow.dll" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1370" var_check="at least one"/>
      <filename>Microsoft.Rtc.Acd.Workflow.dll</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:427" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112604</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:426" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112609</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:425" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">115172</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:424" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/etc</path>
      <filename operation="pattern match">hostname6?\.le.*</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:24372" version="1" comment="The registry holds if Microsoft Lync Server 2013 is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\\{.*\}$</key>
      <name>DisplayName</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:42312" version="1" comment="Object holds the path to wrtces.dll" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1410" var_check="at least one"/>
      <filename>wrtces.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:42322" version="1" comment="Object holds the path to SIPStack.dll" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1410" var_check="at least one"/>
      <filename>SIPStack.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:42038" version="1" comment="Object holds the path to Microsoft Lync Server" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Real-Time Communications\{A593FD00-64F1-4288-A6F4-E699ED9DCA35}</key>
      <name>InstallDir</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1573" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gaim</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1099" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>gaim</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:429" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">114796</base>
    </patch_object>
    <package_object id="oval:org.mitre.oval:obj:428" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWkcl2r</pkginst>
    </package_object>
    <registry_object id="oval:org.mitre.oval:obj:1654" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q811493</key>
      <name>Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:1549" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>kernel32.dll</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1574" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:1752" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q326886</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <package_object id="oval:org.mitre.oval:obj:433" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="pattern match">SUNWkcsr[tx]</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:432" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114636</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:431" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">107337</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:430" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">111400</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:439" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113505</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:438" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113508</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:437" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">115054</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:436" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">115055</base>
    </patch_object>
    <package_object id="oval:org.mitre.oval:obj:435" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst>SUNWscvw</pkginst>
    </package_object>
    <process_object id="oval:org.mitre.oval:obj:434" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command operation="pattern match">^/usr/apache/bin/httpd.*SUNWscvw/conf/httpd\.conf.*</command>
    </process_object>
    <file_object id="oval:org.mitre.oval:obj:391" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>hlink.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1370" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB888113</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:277" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>llssrv.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1408" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB885834</key>
      <name>Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1407" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SYSTEM\CurrentControlSet\Services\LicenseService</key>
      <name>Start</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:440" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Updates\Windows Server 2003\SP1\KB890923\Filelist</key>
      <name xsi:nil="true"/>
    </registry_object>
    <textfilecontent_object id="oval:org.mitre.oval:obj:2563" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc</path>
      <filename>pam.conf</filename>
      <line operation="pattern match">[^#]*pam_krb5.+debug.*/etc/pam\.conf.*</line>
    </textfilecontent_object>
    <patch_object id="oval:org.mitre.oval:obj:2309" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112908</base>
    </patch_object>
    <textfilecontent_object id="oval:org.mitre.oval:obj:2143" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc/krb5</path>
      <filename>krb5.conf</filename>
      <line operation="pattern match">[^(#|_)]*default_realm[^_]*</line>
    </textfilecontent_object>
    <textfilecontent_object id="oval:org.mitre.oval:obj:1866" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc</path>
      <filename>syslog.conf</filename>
      <line operation="pattern match">[^#]*(debug|daemon\.debug).*/etc/syslog\.conf</line>
    </textfilecontent_object>
    <patch_object id="oval:org.mitre.oval:obj:1845" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">115168</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:651" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB870763</key>
      <name>Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:276" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>wins.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1372" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SYSTEM\CurrentControlSet\Services\wins</key>
      <name>Start</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1579" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:441" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB834707-ie501sp4-20040929.111451</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <package_object id="oval:org.mitre.oval:obj:449" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWkrbr</pkginst>
    </package_object>
    <package_object id="oval:org.mitre.oval:obj:448" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="pattern match" datatype="string">SUNWkrbux?</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:445" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">112925</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:444" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">112923</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:443" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">112921</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:1580" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\Q305601</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:39286" version="1" comment="Object holds the path to Microsoft.ServiceBus.dll" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:953" var_check="at least one"/>
      <filename>Microsoft.ServiceBus.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:39035" version="1" comment="Object holds if Microsoft Service Bus 1.1 is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Service Bus\1.1</key>
      <name>INSTALLDIR</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:454" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>Sp3res.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:453" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>Umandlg.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:452" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB842526</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1582" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>krb5-libs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1581" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>krb5-workstation</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:39210" version="1" comment="Object holds the path to SWORD.DLL" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1938" var_check="at least one"/>
      <filename>SWORD.DLL</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:39236" version="1" comment="The registry holds the install location of sharepoint server 2010" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Office14.WCSERVER</key>
      <name>InstallLocation</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:252" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:203" var_check="all"/>
      <filename>nntpsvc.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:297" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB883935</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1583" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SYSTEM\CurrentControlSet\Services\NntpSvc</key>
      <name>Start</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:38219" version="1" comment="Registry holds if Microsoft SharePoint Server 2013 Client Components SDK is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\SharePoint Client Components\15.0</key>
      <name>Location</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:39205" version="3" comment="Registry holds if Web Apps Server 2013 SP1 is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\\{90150000-101F-0401-1000-0000000FF1CE\}_Office15\.WacServer\-\{[\w\-]+\}$</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:39142" version="2" comment="Registry holds if sharepoint server 2013 SP1 is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\\{90150000-1014-0000-1000-0000000FF1CE}_Office15\.OSERVER\{[\w\-]+\}$</key>
      <name>DisplayName</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:39002" version="1" comment="Object holds the path to Microsoft.Office.Server.Msg.dll (sharepoint 2013)" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1682" var_check="at least one"/>
      <filename>Microsoft.Office.Server.Msg.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:39157" version="1" comment="Object holds the path to wsetupui.dll" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1227" var_check="at least one"/>
      <filename>wsetupui.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:38235" version="1" comment="Object holds the path to Wsssetup.dll (foundation 2013)" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1886" var_check="at least one"/>
      <filename>Wsssetup.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:455" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB834707</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:458" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109007</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:361" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114332</base>
    </patch_object>
    <package_object id="oval:org.mitre.oval:obj:462" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWypu</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:461" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">109328</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:460" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">113579</base>
    </patch_object>
    <process_object id="oval:org.mitre.oval:obj:459" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command operation="pattern match" datatype="string">^.*ypxfrd.*</command>
    </process_object>
    <file_object id="oval:org.mitre.oval:obj:463" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:202" var_check="all"/>
      <filename>dplayx.dll</filename>
    </file_object>
    <metabase_object id="oval:org.mitre.oval:obj:1753" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <key operation="pattern match">^LM/MSFTPSVC/.*$</key>
      <id datatype="int">1016</id>
    </metabase_object>
    <file_object id="oval:org.mitre.oval:obj:1586" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>tshoot.ocx</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1585" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB826232</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:1596" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:243" var_check="all"/>
      <filename>console.exe</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1561" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>dbmslpcn.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1595" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:243" var_check="all"/>
      <filename>sqlmap70.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1594" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:243" var_check="all"/>
      <filename>sqlrepss.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1593" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:243" var_check="all"/>
      <filename>ssmslpcn.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1592" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:243" var_check="all"/>
      <filename>ssnmpn70.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1591" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:243" var_check="all"/>
      <filename>ums.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1590" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:243" var_check="all"/>
      <filename>msgprox.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1589" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:257" var_check="all"/>
      <filename>replprov.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1558" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Microsoft SQL Server\80</key>
      <name>SharedCode</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:1588" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:243" var_check="all"/>
      <filename>replrec.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1587" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:243" var_check="all"/>
      <filename>sqlvdi.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:466" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{903B0409-6000-11D3-8CFE-0050048383C9}</key>
      <name>DisplayVersion</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:469" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:203" var_check="all"/>
      <filename>smtpsvc.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:378" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB885881</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1746" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SYSTEM\CurrentControlSet\Services\SMTPSVC</key>
      <name operation="equals">Start</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1584" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Exchange\Setup</key>
      <name>Services Version</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1597" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>krb5-server</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:2606" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Classes\Installer\Assemblies\Global</key>
      <name>Microsoft.SharePoint,version="12.0.0.0000000",processorArchitecture="MSIL",publicKeyToken="71E9BCE111E9429C",fileVersion="12.0.6039.5000",culture="neutral"</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:1840" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:834" var_check="all"/>
      <filename>Mssdmn.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:474" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SSOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB890923 -ie501sp4-20050225.100310</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:487" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">108748</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:485" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">108752</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:291" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">106541</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:484" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">106942</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:483" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">107477</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:482" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">108551</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:481" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">108754</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:480" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">108756</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:479" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">108758</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:478" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">108760</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:477" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">108762</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:476" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">108764</base>
    </patch_object>
    <process_object id="oval:org.mitre.oval:obj:475" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command operation="pattern match" datatype="string">.*rpcbind.*</command>
    </process_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:30443" version="1" comment="the rpm package openssl" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl</name>
    </rpminfo_object>
    <package_object version="1" id="oval:org.mitre.oval:obj:2397" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWbind</pkginst>
    </package_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2175" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119784</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2327" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119783</base>
    </patch_object>
    <package_object id="oval:org.mitre.oval:obj:489" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWsndmu</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:351" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">107684</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:350" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">110615</base>
    </patch_object>
    <process_object id="oval:org.mitre.oval:obj:488" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command operation="pattern match">.*sendmail .*</command>
    </process_object>
    <registry_object id="oval:org.mitre.oval:obj:491" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB834707-ie6-20040929.115007</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:490" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_CURRENT_USER</hive>
      <key operation="equals">Software\Microsoft\Windows\CurrentVersion\Internet Settings</key>
      <name operation="equals">DisableCachingOfSSLPages</name>
    </registry_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2120" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122301</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2717" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">117351</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2057" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">117350</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2037" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">125100</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:1968" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">125101</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2378" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122300</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:1920" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113719</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2409" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113319</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:1802" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">108993</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2521" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">108994</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:47" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:743" var_check="all"/>
      <filename>Msxml5.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:3" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>Msxml3.dll</filename>
    </file_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2194" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120068</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2584" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120069</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:501" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB839643-DirectX82</key>
      <name>Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:500" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB839643-DirectX9</key>
      <name>Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:498" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB839643</key>
      <name>Installed</name>
    </registry_object>
    <isainfo_object id="oval:org.mitre.oval:obj:2704" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris"/>
    <patch_object id="oval:org.mitre.oval:obj:2090" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118844</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:1347" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SYSTEM\CurrentControlSet\Services\Tcpip\Parameters</key>
      <name>EnablePMTUDiscovery</name>
    </registry_object>
    <package_object id="oval:org.mitre.oval:obj:502" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst>SUNWsndmr</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:399" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113575</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2103" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109025</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:1833" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118844</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:1971" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">117350</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2227" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">117351</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2665" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118822</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2542" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109026</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2346" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122301</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2088" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122300</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:1888" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127738</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2323" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127737</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2595" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">117472</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2723" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109454</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:1998" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109455</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2294" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">117471</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:1531" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>itircl.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1600" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB825119</key>
      <name>Installed</name>
    </registry_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2755" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118997</base>
    </patch_object>
    <package_object id="oval:org.mitre.oval:obj:507" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUWNsmbar</pkginst>
    </package_object>
    <inetd_object id="oval:org.mitre.oval:obj:505" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <protocol operation="pattern match">.*</protocol>
      <service_name operation="pattern match">^.*smbd.*</service_name>
    </inetd_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2596" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114265</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:1935" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112837</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2513" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109327</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2325" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109326</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2790" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120037</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2707" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">126374</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2502" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112960</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2224" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120036</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2023" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">126373</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2286" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114242</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:1571" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>msgsvc.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1448" version="2" comment="Object holds wkssvc.dll file location" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>wkssvc.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1602" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB828035</key>
      <name>Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1601" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SYSTEM\CurrentControlSet\Services\Messenger</key>
      <name>Start</name>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:1837" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119999</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2441" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119998</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:279" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>gdi32.dll</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:2081" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <patch_name>PHNE_32606</patch_name>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2490" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114344</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:1989" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119435</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2061" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119075</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:1836" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119076</base>
    </patch_object>
    <textfilecontent_object version="1" id="oval:org.mitre.oval:obj:2173" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc</path>
      <filename>system</filename>
      <line operation="pattern match">^\s*set\s+c2audit.*=\s*1</line>
    </textfilecontent_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2557" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127112</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2696" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127111</base>
    </patch_object>
    <package_object id="oval:org.mitre.oval:obj:1497" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWinamd</pkginst>
    </package_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1798" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>suse-release</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1903" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sled-release</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2240" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sles-release</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2211" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mono-extras</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2334" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mono-data</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2553" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mono-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1917" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mono-core</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:168" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ibm-data-db2</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2537" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mono-jscript</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1992" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mono-winforms</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2670" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mono-core-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2666" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mono-locale-extras</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2673" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mono-data-oracle</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2546" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mono-data-postgresql</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2117" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mono-data-sqlite</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2285" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mono-web</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2429" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mono-data-sybase</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1793" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mono-basic</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2478" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mono-data-firebird</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2166" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mono-nunit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:58" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>bytefx-data-mysql</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:29074" version="1" comment="Object holds the file Microsoft.AspNet.SignalR.Core.dll" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1526" var_check="at least one"/>
      <filename>Microsoft.AspNet.SignalR.Core.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:28866" version="1" comment="Object holds if Visual Studio TFS is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\TeamFoundationServer\12.0</key>
      <name>InstallPath</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:30360" version="1" comment="Object holds the details of Msoserver.Dll (Office Web Apps 2013)" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1064" var_check="at least one"/>
      <filename>Msoserver.Dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:30150" version="1" comment="Object holds the Path to install location of Microsoft Office Web Apps Server 2013" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Office15.WacServer</key>
      <name>InstallLocation</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:28661" version="1" comment="Object holds the file ascalc.dll in SharePoint Server 2010" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1138" var_check="at least one"/>
      <filename>ascalc.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:29038" version="1" comment="Object holds the details of ascalc.dll in Microsoft Office 2013" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1658" var_check="at least one"/>
      <filename>ascalc.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:26037" version="1" comment="Object that holds the install location of SharePoint Server 2013" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Office15.OSERVER</key>
      <name>InstallLocation</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:30227" version="1" comment="Object holds the path to Msoserver.Dll (web apps 2013)" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1402" var_check="at least one"/>
      <filename>Msoserver.Dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:23503" version="1" comment="Object holds Web apps 2010 InstallLocation" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Office14.WCSERVER</key>
      <name>InstallLocation</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:509" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB834707-ie501sp3-20040929.121357</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1603" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB867801</key>
      <name>Installed</name>
    </registry_object>
    <textfilecontent_object id="oval:org.mitre.oval:obj:511" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path operation="equals">/etc</path>
      <filename>pam.conf</filename>
      <line operation="pattern match">[^#]*pam_krb5.*debug</line>
    </textfilecontent_object>
    <textfilecontent_object id="oval:org.mitre.oval:obj:510" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path operation="equals">/etc</path>
      <filename>syslog.conf</filename>
      <line operation="pattern match">^[^#]*(\*|daemon)\.debug</line>
    </textfilecontent_object>
    <file_object id="oval:org.mitre.oval:obj:5503" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:583" var_check="all"/>
      <filename>devenv.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:5692" version="1" comment="Registry key specifying where Microsoft Visual Studio 2002 is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>Software\Microsoft\VisualStudio\7.0</key>
      <name>InstallDir</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:10" version="1" comment="Registry key that is set when Service Pack 1 for Microsoft Visual Studio .NET 2002" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Updates\Visual Studio\7.0\S895309</key>
      <name>Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:5602" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:129" var_check="all"/>
      <filename>devenv.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:5581" version="1" comment="Registry key specifying where Microsoft Visual Studio 2005 is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>Software\Microsoft\VisualStudio\8.0</key>
      <name>InstallDir</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:5682" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:130" var_check="all"/>
      <filename>devenv.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:5745" version="1" comment="Registry key specifying where Microsoft Visual Studio 2003 is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>Software\Microsoft\VisualStudio\7.1</key>
      <name>InstallDir</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:2628" comment="crpe32.dll in the system 32 directory." version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>crpe32.dll</filename>
    </file_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2330" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">124998</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2473" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">124997</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2261" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">123368</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:1813" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">111505</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2201" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">111504</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2459" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">123369</base>
    </patch_object>
    <textfilecontent_object id="oval:org.mitre.oval:obj:2304" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/usr/share/gnome/gnome-about</path>
      <filename>gnome-version.xml</filename>
      <line operation="pattern match">\s*&lt;minor>0&lt;/minor>\s*</line>
    </textfilecontent_object>
    <patch_object id="oval:org.mitre.oval:obj:2027" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">115159</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2290" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">115298</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2662" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">115158</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2432" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">115299</base>
    </patch_object>
    <textfilecontent_object id="oval:org.mitre.oval:obj:2413" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/usr/share/gnome/gnome-about</path>
      <filename>gnome-version.xml</filename>
      <line operation="pattern match">\s*&lt;platform>2&lt;/platform>\s*</line>
    </textfilecontent_object>
    <patch_object id="oval:org.mitre.oval:obj:1803" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">121288</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2579" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">121289</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:515" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">112300</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:514" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">112085</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2317" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">115553</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2476" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">115554</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2132" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">125124</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2540" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">125123</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2386" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109896</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:518" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>cdo.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:517" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Updates\Exchange Server 5.5\SP5\842436a</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:516" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SYSTEM\CurrentControlSet\Services\MSExchangeweb</key>
      <name xsi:nil="true"/>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:2307" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113241</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2270" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">125279</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:1891" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">125280</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2462" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109354</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2745" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109355</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2518" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113240</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:313" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">106938</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:312" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">109326</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:311" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">112970</base>
    </patch_object>
    <package_object id="oval:org.mitre.oval:obj:519" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="pattern match" datatype="string">SUNWcsx?u</pkginst>
    </package_object>
    <process_object id="oval:org.mitre.oval:obj:1496" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command>/usr/sbin/in.named</command>
    </process_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2185" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119254</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2126" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119255</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:521" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/etc/krb5</path>
      <filename>krb5.conf</filename>
    </file_object>
    <textfilecontent_object id="oval:org.mitre.oval:obj:520" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path operation="equals">/etc/krb5</path>
      <filename>krb5.conf</filename>
      <line operation="pattern match">^[^#]auth_to_local.*</line>
    </textfilecontent_object>
    <registry_object id="oval:org.mitre.oval:obj:1666" version="2" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Active Setup\Installed Components\{4f645220-306d-11d2-995d-00c04f98bbc9}</key>
      <name>Version</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1791" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>balsa</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1790" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>balsa</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1612" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SYSTEM\CurrentControlSet\Control\Terminal Server</key>
      <name operation="equals">ProductVersion</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:220" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:201" var_check="all"/>
      <filename>rdpwd.sys</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1611" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q324380</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1610" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SYSTEM\CurrentControlSet\Services\RDPWD</key>
      <name operation="equals">Start</name>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:2394" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127751</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2231" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114154</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2093" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">117419</base>
    </patch_object>
    <package_object id="oval:org.mitre.oval:obj:525" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst>SUNWapchu</pkginst>
    </package_object>
    <registry_object id="oval:org.mitre.oval:obj:1629" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB823182</key>
      <name>Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1628" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\[0-4]$</key>
      <name>1001</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1627" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_CURRENT_USER</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\[0-4]$</key>
      <name>1001</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:1613" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>cryptui.dll</filename>
    </file_object>
    <package_object id="oval:org.mitre.oval:obj:530" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWftpu</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:529" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">114564</base>
    </patch_object>
    <inetd_object id="oval:org.mitre.oval:obj:528" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <protocol operation="pattern match">.*</protocol>
      <service_name operation="equals">ftp</service_name>
    </inetd_object>
    <registry_object id="oval:org.mitre.oval:obj:1710" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\SP2SRP1</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:1616" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>idq.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1615" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q300972</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:2127" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114435</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2191" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113451</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:2772" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/etc/inet/ike</path>
      <filename>config</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:2408" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116960</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2433" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113318</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2005" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">117468</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:1955" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116959</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2095" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">124259</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2351" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">124258</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:533" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\kb823353</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:532" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_USERS</hive>
      <key operation="pattern match">^S-[-0-9]+\\Identities\\\{[-0-9A-Z]+\}\\Software\\Microsoft\\Outlook\ Express\\5\.0\\Mail$</key>
      <name operation="equals">ShowHybridView</name>
    </registry_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2497" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127034</base>
    </patch_object>
    <textfilecontent_object id="oval:org.mitre.oval:obj:2360" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc</path>
      <filename>user_attr</filename>
      <line operation="pattern match">type=role</line>
    </textfilecontent_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:1921" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127033</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2147" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127112</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:1946" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">127111</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1619" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdebase</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1618" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>kdm</filename>
    </file_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:1985" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109329</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2714" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122078</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2786" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">123186</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2232" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114342</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2376" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113579</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2169" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109328</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2069" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">123870</base>
    </patch_object>
    <package_object version="1" id="oval:org.mitre.oval:obj:1852" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst>SUNWsrspx</pkginst>
    </package_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2460" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">125713</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:26394" version="1" comment="The registry holds if SharePoint Foundation 2013 is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90150000-1014-0000-1000-0000000FF1CE}</key>
      <name>DisplayName</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:26888" version="2" comment="Object holds the file info of Onetutil.dll" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1390" var_check="at least one"/>
      <filename>Onetutil.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:26607" version="1" comment="Object holds the path to Microsoft.office.server.native.dll (sharepoint 2013)" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1682" var_check="at least one"/>
      <filename>Microsoft.office.server.native.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:26495" version="1" comment="The registry holds the install location of sharepoint server 2010" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Office15.OSERVER</key>
      <name>InstallLocation</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:26571" version="1" comment="Object holds the file xlsrv.dll in SharePoint Server 2010" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1138" var_check="at least one"/>
      <filename>xlsrv.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:26407" version="2" comment="Object holds the path to Onfda.dll (SharePoint Server 2013)" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1569" var_check="at least one"/>
      <filename>Onfda.dll</filename>
    </file_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2610" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">124922</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:1839" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113986</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2077" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112963</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2049" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109147</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2328" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109148</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2254" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">124923</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:538" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">107702</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:537" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">109354</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:536" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">114497</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:1622" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>xenroll.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1621" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q323172</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:26572" version="3" comment="Object that holds the Microsoft Web Apps 2010 SP 2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\\{90140000\-1141\-0407\-1000\-0000000FF1CE\}_Office14\.WCSERVER_\{[\w\-]+\}$</key>
      <name>DisplayName</name>
    </registry_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:1960" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">126449</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:1827" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">126448</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:1625" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>xactsrv.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1624" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q326830</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1623" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SYSTEM\CurrentControlSet\Services\lanmanserver</key>
      <name operation="equals">Start</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:23425" version="1" comment="The registry holds if Microsoft Web Apps is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Office14.WCSERVER</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:24131" version="3" comment="Object holds the string Microsoft Office Web Apps Service Pack 1 (SP1)" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\\{90140000\-112D\-0000\-1000\-0000000FF1CE\}_Office14\.WCSERVER_\{[\w\-]+\}$</key>
      <name>DisplayName</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:23683" version="1" comment="Object holds the details of Msoserver.Dll(Web Apps)" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1263"/>
      <filename>Msoserver.Dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:23950" version="1" comment="Object holds the installation path for web apps 2010" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Office14.WCSERVER</key>
      <name>InstallLocation</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:26369" version="1" comment="Object holds the path to WdsrvWorker.dll" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1614" var_check="at least one"/>
      <filename>WdsrvWorker.dll</filename>
    </file_object>
    <package_object id="oval:org.mitre.oval:obj:543" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWdtdmn</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:542" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">108221</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:302" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>vdmdbg.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1349" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB840987</key>
      <name>Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:590" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>wjgdw400.dll</filename>
    </file_object>
    <package_object id="oval:org.mitre.oval:obj:547" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWnisu</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:486" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">108750</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:546" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">110322</base>
    </patch_object>
    <process_object id="oval:org.mitre.oval:obj:545" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command operation="pattern match" datatype="string">^.*ypbind.*</command>
    </process_object>
    <patch_object id="oval:org.mitre.oval:obj:275" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">108993</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:552" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">115677</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:551" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">121321</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:550" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">108994</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:549" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">115678</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:548" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">121322</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2302" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120095</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2236" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120094</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2183" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">107475</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2608" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">110061</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:1943" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">107476</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2401" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">110669</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:1963" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">110057</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2573" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">110668</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:1892" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">110060</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2464" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">110058</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:1631" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:203" var_check="all"/>
      <filename>ism.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1630" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q321599</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:1884" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119213</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:1899" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119214</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:26779" version="1" comment="Object holds if Exchange Server 2013 is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Exchange v15</key>
      <name>DisplayName</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:26548" version="1" comment="Object holds the details of ExSetup.exe (2013)" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1738"/>
      <filename>ExSetup.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:26763" version="1" comment="Object holds the install path for Microsoft Exchange Server 2013" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\ExchangeServer\v15\Setup</key>
      <name>MsiInstallPath</name>
    </registry_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2303" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119813</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:1812" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119812</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2306" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116106</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2503" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">124421</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2467" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">124420</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2075" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116105</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:522" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>Ipnathlp.dll</filename>
    </file_object>
    <metabase_object id="oval:org.mitre.oval:obj:556" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <key>LM/W3SVC</key>
      <id datatype="int">6032</id>
    </metabase_object>
    <file_object id="oval:org.mitre.oval:obj:2219" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:201" var_check="all"/>
      <filename>rdpwd.sys</filename>
    </file_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2337" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112785</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2775" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112786</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2590" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119067</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2121" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119059</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2016" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119068</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2313" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119060</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:326" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:201" var_check="all"/>
      <filename>mrxsmb.sys</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1696" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/openwin/bin</path>
      <filename>lbxproxy</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:1632" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">107654</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:1725" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Active Setup\Installed Components\{F9C174E3-3E87-40bc-AA94-B8974F2B9222}</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:1969" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">125794</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2736" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">121132</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2291" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114717</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:1950" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114669</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114716</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2699" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114670</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2035" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">110671</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2564" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">110670</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:301" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">107893</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:568" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <patch_name>PHNE_34544</patch_name>
    </patch_object>
    <swlist_object id="oval:org.mitre.oval:obj:567" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <swlist>WUFTP-26.INETSVCS-FTP</swlist>
    </swlist_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2167" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">111845</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:1902" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">124830</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2310" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">124457</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2651" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">124831</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2427" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">124458</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2710" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">111844</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:1973" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <patch_name>PHNE_33395</patch_name>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:631" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>jgdw400.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1533" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Shared Tools\Web Server Extensions\5.0\Setup Packages</key>
      <name>Microsoft FrontPage Server Extensions 2002</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:573" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:227" var_check="all"/>
      <filename>fpadmdll.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:574" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Shared Tools</key>
      <name>SharedFilesDir</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24586" version="1" comment="fail2ban package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>fail2ban</name>
    </rpminfo_object>
    <package_object id="oval:org.mitre.oval:obj:575" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWpcu</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:300" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">107115</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:315" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109320</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:314" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113329</base>
    </patch_object>
    <package_object id="oval:org.mitre.oval:obj:2485" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst>SUNWkr5ma</pkginst>
    </package_object>
    <process_object id="oval:org.mitre.oval:obj:1988" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command operation="pattern match">.*kadmind</command>
    </process_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24374" version="1" comment="openconnect-doc package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openconnect-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24455" version="1" comment="openconnect-debuginfo package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openconnect-debuginfo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24152" version="1" comment="openconnect package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openconnect</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24548" version="1" comment="openconnect-debugsource package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openconnect-debugsource</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24112" version="1" comment="openconnect-lang package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openconnect-lang</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24504" version="1" comment="openconnect-devel package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openconnect-devel</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:578" comment="Registry set when Microsoft Visual Studio .NET 2003 is installed" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>Software\Microsoft\VisualStudio\7.1</key>
      <name xsi:nil="true"/>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:6109" version="6" comment="Path to Gdiplus.dll" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path operation="pattern match" var_ref="oval:org.mitre.oval:var:1887" var_check="all"/>
      <filename>Gdiplus.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:535" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>rasmans.dll</filename>
    </file_object>
    <package_object id="oval:org.mitre.oval:obj:580" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst>SUNWstm</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:579" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">117367</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:280" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:206" var_check="all"/>
      <filename>wdhtmled.ocx</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:2288" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112669</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:1949" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112668</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2548" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116341</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2010" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116340</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2637" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120720</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2345" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120719</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:581" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118966</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:583" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB890923\Filelist</key>
      <name xsi:nil="true"/>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24589" version="1" comment="openstack-nova-cert package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openstack-nova-cert</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24231" version="1" comment="python-greenlet-devel package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python-greenlet-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24584" version="1" comment="python-greenlet-debugsource package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python-greenlet-debugsource</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24391" version="1" comment="openstack-nova package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openstack-nova</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24447" version="1" comment="openstack-nova-vncproxy package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openstack-nova-vncproxy</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24292" version="1" comment="openstack-nova-scheduler package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openstack-nova-scheduler</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24243" version="1" comment="python-nova package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python-nova</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24445" version="1" comment="openstack-nova-volume package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openstack-nova-volume</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24450" version="1" comment="openstack-nova-objectstore package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openstack-nova-objectstore</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24258" version="1" comment="openstack-nova-api package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openstack-nova-api</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24505" version="1" comment="openstack-nova-test package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openstack-nova-test</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24530" version="1" comment="openstack-nova-novncproxy package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openstack-nova-novncproxy</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24535" version="1" comment="openstack-nova-doc package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openstack-nova-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24312" version="1" comment="openstack-nova-network package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openstack-nova-network</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24529" version="1" comment="openstack-nova-compute package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openstack-nova-compute</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24472" version="1" comment="python-greenlet-debuginfo package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python-greenlet-debuginfo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:23729" version="1" comment="python-greenlet package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python-greenlet</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24605" version="1" comment="python-keystoneclient-doc package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python-keystoneclient-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24190" version="1" comment="python-keystoneclient package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python-keystoneclient</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24414" version="1" comment="python-keystoneclient-test package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python-keystoneclient-test</name>
    </rpminfo_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2096" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112785</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2793" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112786</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2533" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119067</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2071" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119059</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:1868" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119060</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2148" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119068</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:23724" version="1" comment="Version of Oracle GoldenGate Director is 11.1.1.1.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\[\d]*-[\d]*-[\d]*-[\d]*$</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:24195" version="1" comment="Version of Oracle GoldenGate Veridata is 3.0.0.11.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Oracle GoldenGate Veridata 3.0.0.11.0</key>
      <name>DisplayName</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1634" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>httpd</name>
    </rpminfo_object>
    <inetlisteningservers_object id="oval:org.mitre.oval:obj:1633" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <protocol operation="pattern match">.*</protocol>
      <local_address operation="pattern match">.*</local_address>
      <local_port datatype="int" operation="greater than or equal">0</local_port>
    </inetlisteningservers_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:587" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sendmail</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24451" version="1" comment="xdm-debugsource package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xdm-debugsource</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24370" version="1" comment="xdm package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xdm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24350" version="1" comment="xdm-debuginfo package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xdm-debuginfo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2455" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openSUSE-release</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24399" version="1" comment="dbus-1-devel package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dbus-1-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24429" version="1" comment="dbus-1-32bit package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dbus-1-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24090" version="1" comment="libdbus-1-3-debuginfo package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libdbus-1-3-debuginfo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24506" version="1" comment="dbus-1-x11 package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dbus-1-x11</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24541" version="1" comment="dbus-1-x11-debugsource package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dbus-1-x11-debugsource</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24593" version="1" comment="dbus-1-x11-debuginfo package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dbus-1-x11-debuginfo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24279" version="1" comment="libdbus-1-3-32bit package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libdbus-1-3-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24369" version="1" comment="dbus-1-devel-32bit package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ldbus-1-devel-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24355" version="1" comment="dbus-1-debuginfo-32bit package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dbus-1-debuginfo-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24514" version="1" comment="dbus-1-debuginfo package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dbus-1-debuginfo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24427" version="1" comment="dbus-1-debugsource package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dbus-1-debugsource</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24421" version="1" comment="dbus-1-devel-doc package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dbus-1-devel-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24539" version="1" comment="dbus-1 package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dbus-1</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24425" version="1" comment="libdbus-1-3-debuginfo-32bit package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libdbus-1-3-debuginfo-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24412" version="1" comment="libdbus-1-3 package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libdbus-1-3</name>
    </rpminfo_object>
    <patch_object id="oval:org.mitre.oval:obj:290" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">108528</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:289" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">112233</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:589" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>Software\Microsoft\Updates\Windows Server 2003\SP1\KB914798</key>
      <name xsi:nil="true"/>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:2567" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">125101</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:1849" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">125100</base>
    </patch_object>
    <package_object id="oval:org.mitre.oval:obj:597" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWgzip</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:596" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">112668</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:591" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>Imekr61.ime</filename>
    </file_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2354" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118372</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2235" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114435</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2520" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113451</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:1820" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118371</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1639" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl-perl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1638" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1637" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1636" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl096b</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1420" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/tmp</path>
      <filename xsi:nil="true"/>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:605" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109764</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:604" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116047</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:603" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119596</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:602" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109765</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:601" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">121995</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:600" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118813</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2133" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">121316</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2131" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">123703</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2644" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">117350</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2012" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116960</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2726" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">117125</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2642" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120884</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2050" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118558</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2445" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120662</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2357" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">123704</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2411" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">121317</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:1986" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118559</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:1926" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119439</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2715" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113278</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2636" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116959</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:1984" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">117351</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2428" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118822</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2186" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120661</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2086" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118844</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:23758" version="1" comment="The registry holds the display version of Windows Essentials" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinLiveSuite</key>
      <name>DisplayVersion</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:24148" version="1" comment="The registry holds if Windows Essentials is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinLiveSuite</key>
      <name>DisplayName</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:23851" version="1" comment="Object holds the path to Windowslivewriter.exe" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1592"/>
      <filename>WindowsLiveWriter.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:24228" version="1" comment="The registry holds the install location of Windows Essentials" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinLiveSuite</key>
      <name>InstallLocation</name>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:611" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">117350</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:610" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118558</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:608" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">117351</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:607" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118559</base>
    </patch_object>
    <textfilecontent_object id="oval:org.mitre.oval:obj:621" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/usr/share/gnome/gnome-about</path>
      <filename>gnome-version.xml</filename>
      <line operation="pattern match">\s*&lt;description>2\.0\.0.*&lt;/description>\s*</line>
    </textfilecontent_object>
    <patch_object id="oval:org.mitre.oval:obj:620" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114644</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:619" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114645</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:618" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114686</base>
    </patch_object>
    <textfilecontent_object id="oval:org.mitre.oval:obj:617" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/usr/share/gnome/gnome-about</path>
      <filename>gnome-version.xml</filename>
      <line operation="pattern match">\s*&lt;description>2\.0\.2.*&lt;/description>\s*</line>
    </textfilecontent_object>
    <patch_object id="oval:org.mitre.oval:obj:616" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">115738</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:615" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114687</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:614" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">115739</base>
    </patch_object>
    <textfilecontent_object id="oval:org.mitre.oval:obj:613" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/usr/share/gnome-about</path>
      <filename>gnome-version.xml</filename>
      <line operation="pattern match">\s*&lt;distributor-version>Sun Java Desktop System, Release 2&lt;/distributor-version>\s*</line>
    </textfilecontent_object>
    <patch_object id="oval:org.mitre.oval:obj:612" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">121092</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:24185" version="1" comment="Object holds the file vseshr.dll" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1381"/>
      <filename>vseshr.dll</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:609" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118822</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:606" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118844</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:623" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <patch_name>PHNE_33159</patch_name>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:283" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>hypertrm.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:627" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB873339\Filelist</key>
      <name xsi:nil="true"/>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:626" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_CLASSES_ROOT</hive>
      <key>htfile</key>
      <name xsi:nil="true"/>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:625" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_CLASSES_ROOT</hive>
      <key>telnet\shell\open\command</key>
      <name/>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:123" version="1" comment="Registry key that hold the current windows os version" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key>
      <name>CurrentVersion</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:2048" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>umpnpmgr.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:630" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\MediaPlayer\10.0\Registration</key>
      <name>UDBVersion</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:592" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>Wmp.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:24092" version="1" comment="Object holds the details of ExSetup.exe (2010)" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1376"/>
      <filename>ExSetup.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:24068" version="1" comment="Object holds the install path for Microsoft Exchange Server 2010" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\ExchangeServer\v14\Setup</key>
      <name>MsiInstallPath</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:24081" version="1" comment="Object holds the details of ExSetup.exe (2007)" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1555"/>
      <filename>ExSetup.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:23474" version="1" comment="Object holds the install path for Microsoft Exchange Server 2007" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Exchange\Setup</key>
      <name>MsiInstallPath</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:633" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>Ntkrnlpa.exe</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:638" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120329</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:637" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120330</base>
    </patch_object>
    <textfilecontent_object id="oval:org.mitre.oval:obj:636" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc</path>
      <filename>pam.conf</filename>
      <line operation="pattern match">^other.*krb5.*</line>
    </textfilecontent_object>
    <registry_object id="oval:org.mitre.oval:obj:24036" version="1" comment="Object holds DisplayName of System Center Configuration Manager 2007 R2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{006CCC4E-4FEB-4ED1-8587-037656905DC8}</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:24054" version="1" comment="Object holds DisplayName of System Center Configuration Manager 2007 R3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5CF55004-EEC4-406F-AF05-2291F1395388}</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:23878" version="1" comment="Object holds UI Version of System Center Configuration Manager 2007" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\ConfigMgr\Setup</key>
      <name>Full UI Version</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:23424" version="1" comment="Object holds DisplayName of Systems Management Servers" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\SMS .*$</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:23937" version="1" comment="Object holds version of Systems Management Server 2003" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\SMS\Setup</key>
      <name>Full Version</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:23970" version="1" comment="Object holds file path for Reportinginstall.exe" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1340" var_check="all"/>
      <filename>reportinginstall.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:23949" version="1" comment="Object holds Install Directory path for SMS/SCCM" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\SMS\Setup</key>
      <name>Installation Directory</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:23676" version="1" comment="Object holds the install location of Visual Studio Team Foundation Server 2010" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\TeamFoundationServer\10.0</key>
      <name>InstallPath</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:23859" version="1" comment="Object holds if Visual Studio Team Foundation Server 2010 SP1 is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Updates\Microsoft Team Foundation Server 2010 - ENU\SP1\KB2182621</key>
      <name xsi:nil="true"/>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:23829" version="2" comment="Object holds the details of Microsoft.TeamFoundation.WebAccess.dl" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1065" operation="pattern match"/>
      <filename>Microsoft.TeamFoundation.WebAccess.dll</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:640" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <patch_name>PHCO_29249</patch_name>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:23673" version="1" comment="Object holds the version of System Center Operations Manager 2007" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>Software\Microsoft\Microsoft Operations Manager\3.0\Setup</key>
      <name>ServerVersion</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:24053" version="1" comment="Object holds if System Center Operations Manager 2007 is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Microsoft Operations Manager\3.0\Setup</key>
      <name>Product</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:24080" version="1" comment="Object holds the version of AuditingMessages.dll" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1687"/>
      <filename>AuditingMessages.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:23919" version="1" comment="Object holds the installation path of System Operation Center Manager" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>Software\Microsoft\Microsoft Operations Manager\3.0\Setup</key>
      <name>InstallDirectory</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:23891" version="1" comment="The registry holds if SharePoint Server 2013 is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Office15.OSERVER</key>
      <name>DisplayName</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:24129" version="1" comment="Object holds the path to Microsoft.office.server.dll" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1086" var_check="all"/>
      <filename>Microsoft.office.server.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:465" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Updates\Windows Media Player 9\KB885492</key>
      <name>PackageVersion</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:646" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Active Setup\Installed Components\{ 3e7bb08a-a7a3-4692-8eac-ac5e7895755b}</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1495" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB885835</key>
      <name>Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:24020" version="2" comment="Object holds if Microsoft SharePoint Foundation 2010 Service Pack 1 is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{90140000-1014-0000-1000-0000000FF1CE}_Office14\.WSS_\{[\w\-]+}$</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:24062" version="3" comment="Object holds if Microsoft SharePoint Server 2010 is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Office14.OSERVER</key>
      <name>DisplayVersion</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:24032" version="1" comment="Object holds the path to Microsoft.office.server.native.dll" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1138" var_check="all"/>
      <filename>Microsoft.office.server.native.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:23943" version="1" comment="The registry holds the install location of sharepoint server 2010" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Office14.OSERVER</key>
      <name>InstallLocation</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:23783" version="2" comment="Object holds the path to Onfda.dll" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1390" var_check="all"/>
      <filename>Onfda.dll</filename>
    </file_object>
    <swlist_object id="oval:org.mitre.oval:obj:984" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <swlist>Networking.NET2-KRN</swlist>
    </swlist_object>
    <file_object id="oval:org.mitre.oval:obj:628" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>webclnt.dll</filename>
    </file_object>
    <swlist_object id="oval:org.mitre.oval:obj:653" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <swlist>Secure_Shell.SECURE_SHELL</swlist>
    </swlist_object>
    <file_object id="oval:org.mitre.oval:obj:652" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>nwwks.dll</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:656" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">111571</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:654" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">115880</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:322" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">110943</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2465" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113072</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2355" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114423</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2268" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">108975</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2592" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">108976</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:659" version="1" comment="Path to xlview.exe in Excel Viewer install directory" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:230" var_check="all"/>
      <filename>xlview.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:660" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90840409-6000-11D3-8CFE-0150048383C9}</key>
      <name>InstallLocation</name>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:1642" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">108117</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1644" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>httpd</name>
    </rpminfo_object>
    <inetlisteningservers_object id="oval:org.mitre.oval:obj:1643" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <protocol operation="pattern match">.*</protocol>
      <local_address operation="pattern match">.*</local_address>
      <local_port datatype="int" operation="greater than or equal">0</local_port>
    </inetlisteningservers_object>
    <patch_object id="oval:org.mitre.oval:obj:1620" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">110286</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:1762" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/dt/bin</path>
      <filename>rpc.ttdbserverd</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1386" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla \(.*\)$</key>
      <name>DisplayName</name>
    </registry_object>
    <swlist_object id="oval:org.mitre.oval:obj:666" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <swlist>HP_Webproxy.HPWEB-PX-CORE</swlist>
    </swlist_object>
    <patch_object id="oval:org.mitre.oval:obj:665" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <patch_name>PHSS_34163</patch_name>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2243" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">111400</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2632" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114637</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2690" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">111401</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114636</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:1648" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path operation="equals">/usr/openwin/lib</path>
      <filename>fs.auto</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:1647" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">109862</base>
    </patch_object>
    <inetd_object id="oval:org.mitre.oval:obj:1646" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <protocol operation="pattern match">.*</protocol>
      <service_name operation="equals">fs</service_name>
    </inetd_object>
    <file_object id="oval:org.mitre.oval:obj:1645" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/openwin/bin</path>
      <filename>xfs</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:23068" version="1" comment="Object holds Microsoft Communicator 2007 R2/Microsoft Lync 2010" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Communicator</key>
      <name/>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:24023" version="1" comment="Object holds path for Attendantconsole.exe" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1095"/>
      <filename>Attendantconsole.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:23492" version="1" comment="Object holds Microsoft Lync 2010 Attendant" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AttendantConsole.exe</key>
      <name>path</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:23751" version="1" comment="Object holds path for Communicator.exe" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1463"/>
      <filename>Communicator.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:23858" version="1" comment="Object holds filelocation for Commmunicator.exe" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Communicator</key>
      <name>InstallationDirectory</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:24024" version="2" comment="Object holds path for Ogl.dll (Lync 2010 Attendee for user)" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1779" var_check="all"/>
      <filename>ogl.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:23843" version="2" comment="Object holds Microsoft Lync 2010 Attendee (user level install)" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_USERS</hive>
      <key operation="pattern match">^S-.*\\Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\AttendeeCommunicator\.exe$</key>
      <name>path</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:24009" version="1" comment="Object holds path for Ogl.dll (Lync 2010 attendee for admin)" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1822" var_check="all"/>
      <filename>ogl.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:23972" version="1" comment="Object holds Microsoft Lync 2010 Attendee (admin level install)" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AttendeeCommunicator.exe</key>
      <name>path</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:24140" version="1" comment="Object holds if FAST Search Server 2010 for SharePoint is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\FAST Search Server\Setup</key>
      <name>Version</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:23564" version="1" comment="The registry key that holds the MsiProductMinor" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\ExchangeServer\v14\Setup</key>
      <name>MsiProductMinor</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:23591" version="1" comment="The registry key that holds the MsiProductMajor" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\ExchangeServer\v14\Setup</key>
      <name>MsiProductMajor</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:23395" version="1" comment="Object holds the details of transcodingservice.exe (2007)" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1320"/>
      <filename>transcodingservice.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:23606" version="1" comment="Object holds the install path for Microsoft Exchange Server 2007" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Exchange\Setup</key>
      <name>MsiInstallPath</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:23754" version="1" comment="Object holds the details of Microsoft.sharepoint.search.extended.administration.dll" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1381"/>
      <filename>Microsoft.sharepoint.search.extended.administration.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:24125" version="1" comment="Object holds the path for FAST Search Server 2010 for SharePoint" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\FAST Search Server\Setup</key>
      <name>Path</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:24069" version="1" comment="Object holds the details of transcodingservice.exe (2010)" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1542"/>
      <filename>transcodingservice.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:23243" version="1" comment="Object holds the install path for Microsoft Exchange Server 2010" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\ExchangeServer\v14\Setup</key>
      <name>MsiInstallPath</name>
    </registry_object>
    <package_object id="oval:org.mitre.oval:obj:674" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWwbmc</pkginst>
    </package_object>
    <process_object id="oval:org.mitre.oval:obj:671" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command operation="pattern match" datatype="string">.*smcboot</command>
    </process_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1650" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gtkhtml</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1649" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>evolution</filename>
    </file_object>
    <package_object id="oval:org.mitre.oval:obj:675" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWnsb</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:683" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109023</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:682" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120240</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:681" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109024</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:680" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">120239</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:1756" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q313829</key>
      <name>Installed</name>
    </registry_object>
    <package_object id="oval:org.mitre.oval:obj:685" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWsmbau</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:506" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">114684</base>
    </patch_object>
    <process_object id="oval:org.mitre.oval:obj:684" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command operation="pattern match" datatype="string">^.*smbd.*</command>
    </process_object>
    <patch_object id="oval:org.mitre.oval:obj:686" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <patch_name>PHSS_34102</patch_name>
    </patch_object>
    <swlist_object id="oval:org.mitre.oval:obj:690" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <swlist>CIFS-Server.CIFS-RUN</swlist>
    </swlist_object>
    <swlist_object id="oval:org.mitre.oval:obj:689" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <swlist>CIFS-Server.CIFS-UTIL</swlist>
    </swlist_object>
    <swlist_object id="oval:org.mitre.oval:obj:688" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <swlist>CIFS-Server.CIFS-ADMIN</swlist>
    </swlist_object>
    <swlist_object id="oval:org.mitre.oval:obj:687" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <swlist>CIFS-Server.CIFS-LIB</swlist>
    </swlist_object>
    <patch_object id="oval:org.mitre.oval:obj:693" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <patch_name>PHCO_30402</patch_name>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:673" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">111313</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:697" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">111314</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:672" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116807</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:696" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116808</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:695" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">121308</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:694" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">121309</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:1695" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q314147</key>
      <name>Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1694" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SYSTEM\CurrentControlSet\Services\SNMP</key>
      <name>Start</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:973" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>snmp.exe</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:703" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/dt/bin</path>
      <filename>dtlogin</filename>
    </file_object>
    <process_object id="oval:org.mitre.oval:obj:702" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command operation="pattern match">^.*dtlogin.*</command>
    </process_object>
    <patch_object id="oval:org.mitre.oval:obj:701" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">108919</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:700" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112807</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:699" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">107180</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:1436" version="3" comment="Registry key for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\.*!DisplayName" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\.*$</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:15025" version="1" comment="Object holds if IBM DB2 UDB is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\IBM\DB2</key>
      <name>DB2 Path Name</name>
    </registry_object>
    <package_object id="oval:org.mitre.oval:obj:713" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst>SUNWlzas</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:712" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">121332</base>
    </patch_object>
    <swlist_object id="oval:org.mitre.oval:obj:716" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <swlist>IPSec.IPSEC2-KRN</swlist>
    </swlist_object>
    <swlist_object id="oval:org.mitre.oval:obj:715" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <swlist>IPSec.IPSEC2-KRN</swlist>
    </swlist_object>
    <swlist_object id="oval:org.mitre.oval:obj:714" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <swlist>TOUR_PRODUCT.T-NET2-KRN</swlist>
    </swlist_object>
    <patch_object id="oval:org.mitre.oval:obj:983" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <patch_name>PHNE_32606</patch_name>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:1764" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/openwin/bin</path>
      <filename>Xsun</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:23183" version="1" comment="Objects holds registry key for Forefront Security for SharePoint" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{22F1877A-DC27-4E3F-A109-55BDB1EEF2DF}</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:23399" version="1" comment="Object holds registry key for Antigen for Exchange" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1DDAFF1B-4059-4C8C-BFB6-B79F6F9B88B0}</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:23054" version="1" comment="Objects holds registry key for Forefront Security for Exchange Server" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{22F1877A-DC27-4E3F-A109-55BDB1EEF2DF}</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:22631" version="1" comment="Objects holds registry key for Windows Defender" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\ControlPanel\NameSpace\{D8559EB9-20C0-410E-BEDA-7ED416AECC2A}</key>
      <name/>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:23128" version="1" comment="Object holds registry key for Antigen for SMTP Gateway" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1DDAFF1B-4059-4C8C-BFB6-B79F6F9B88B0}</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:23334" version="1" comment="Objects holds registry key for Windows Live OneCare" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5660022E-F3F2-4126-8CC5-9726C47150EB}</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:22702" version="1" comment="Object holds registry key for Antigen for Exchange EngineVersion" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Sybari Software\Antigen for Exchange\Scan Engines\Microsoft</key>
      <name>Engine Version</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:23403" version="1" comment="Object holds registry key for Windows Defender EngineVersion" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows Defender\Signature Updates</key>
      <name>EngineVersion</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:23386" version="1" comment="Object holds registry key for Live OneCare EngineVersion" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\OneCare Protection\Signature Updates</key>
      <name>EngineVersion</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:23298" version="1" comment="Object holds registry key for Forefront Security for Exchange Server EngineVersion" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Forefront Server Security\Exchange Server\Scan Engines\Microsoft</key>
      <name>Engine Version</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:23297" version="1" comment="Object holds registry key for Forefront Security for SharePoint EngineVersion" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Forefront Server Security\Sharepoint\Scan Engines\Microsoft</key>
      <name>Engine Version</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:23374" version="1" comment="Object holds registry key for Antigen for SMTP EngineVersion" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Sybari Software\Antigen for SMTP\Scan Engines\Microsoft</key>
      <name>Engine Version</name>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:2635" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">108529</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2074" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">108528</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2498" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">106541</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2137" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112234</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2483" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112233</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2170" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">105181</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2773" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">106542</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2072" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">105182</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1663" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gtkhtml</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:44121" version="1" comment="Lotus Notes installation directory" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1258" var_check="at least one"/>
      <filename>notes.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:15861" version="1" comment="Object holds if IBM Lotus Notes is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Lotus\Notes</key>
      <name>Path</name>
    </registry_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:1965" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118305</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2463" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">117470</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2205" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116966</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2171" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116965</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:732" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Exchange\Setup</key>
      <name>ServicePackBuild</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:1446" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>msjava.dll</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1665" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gnupg</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1664" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>gnupg</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:720" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB890175</key>
      <name>Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:531" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>hhctrl.ocx</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:722" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>FreeRADIUS</name>
    </rpminfo_object>
    <inetlisteningservers_object id="oval:org.mitre.oval:obj:721" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <protocol operation="equals">udp</protocol>
      <local_address operation="pattern match">.*</local_address>
      <local_port datatype="int" operation="equals">1812</local_port>
    </inetlisteningservers_object>
    <swlist_object id="oval:org.mitre.oval:obj:1365" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <swlist>hpuxwsAPACHE</swlist>
    </swlist_object>
    <swlist_object id="oval:org.mitre.oval:obj:1364" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <swlist>hpuxwsAPACHE</swlist>
    </swlist_object>
    <patch_object id="oval:org.mitre.oval:obj:1850" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114193</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2751" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112945</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2272" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">121308</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2631" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">111313</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2387" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">111314</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2336" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">121309</base>
    </patch_object>
    <package_object id="oval:org.mitre.oval:obj:2477" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst>SUNWwbmc</pkginst>
    </package_object>
    <registry_object id="oval:org.mitre.oval:obj:724" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Hotfix\\[Kk][Bb]834707[-a-zA-Z0-9.]*$</key>
      <name>Installed</name>
    </registry_object>
    <swlist_object id="oval:org.mitre.oval:obj:727" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <swlist>InternetSrvcs.INETSVCS-RUN</swlist>
    </swlist_object>
    <patch_object id="oval:org.mitre.oval:obj:726" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <patch_name>PHNE_34543</patch_name>
    </patch_object>
    <swlist_object id="oval:org.mitre.oval:obj:725" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <swlist>WUFTP-26.INETSVCS-FTP</swlist>
    </swlist_object>
    <file_object id="oval:org.mitre.oval:obj:728" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>cryptdlg.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:278" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:203" var_check="all"/>
      <filename>httpext.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:729" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB824151</key>
      <name>Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1691" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SYSTEM\CurrentControlSet\Services\W3SVC\Parameters</key>
      <name>DisableWebDAV</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1668" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ghostscript</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1667" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>gs</filename>
    </file_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2019" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">125720</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:1925" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112785</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2398" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119059</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2015" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112786</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2737" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">124833</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2067" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119060</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2036" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119068</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2152" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119067</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:358" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:212" var_check="all"/>
      <filename>msadco.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1761" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SYSTEM\CurrentControlSet\Control\ProductOptions</key>
      <name>ProductSuite</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:730" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:235" var_check="all"/>
      <filename>Mdbmsg.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:329" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Exchange\Setup</key>
      <name>Services</name>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:1460" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">108376</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:737" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Classes\.wvx</key>
      <name xsi:nil="true"/>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:736" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Classes\.wpl</key>
      <name xsi:nil="true"/>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:735" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Classes\.wmx</key>
      <name xsi:nil="true"/>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:734" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Classes\.wms</key>
      <name xsi:nil="true"/>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:733" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Classes\.wmz</key>
      <name xsi:nil="true"/>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:593" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\MediaPlayer\9.0\Registration</key>
      <name>UDBVersion</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:527" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>wmp.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:740" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Updates\Windows Media Player 9\SP0\KB885492</key>
      <name>PackageVersion</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:739" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Classes\.asx</key>
      <name xsi:nil="true"/>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:738" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Classes\.wax</key>
      <name xsi:nil="true"/>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1760" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q319733</key>
      <name>Installed</name>
    </registry_object>
    <metabase_object id="oval:org.mitre.oval:obj:1552" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <key>LM/W3SVC</key>
      <id datatype="int">6014</id>
    </metabase_object>
    <file_object id="oval:org.mitre.oval:obj:28309" version="1" comment="The directory of VirtualBox.exe in VirtualBox of versions before 3.0.6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1882" var_check="all"/>
      <filename>VirtualBox.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:28435" version="1" comment="Object holds the Oracle VM VirtualBox directory of versions before 3.0.6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Sun\xVM VirtualBox</key>
      <name>InstallDir</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:28362" version="1" comment="The directory of VirtualBox.exe in VirtualBox of versions 3.0.6 through 3.1.8" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1659" var_check="all"/>
      <filename>VirtualBox.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:28138" version="1" comment="Object holds the Sun VirtualBox directory of versions 3.0.6 through 3.1.8" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Sun\VirtualBox</key>
      <name>InstallDir</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:742" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Active Setup\Installed Components\{839117ee-2132-4bae-a56a-42b50204c9b9}</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:741" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB889293</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:6633" version="4" comment="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Host Integration Server\6.0!ProductName registry key" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Host Integration Server\6.0</key>
      <name>ProductName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:16103" version="2" comment="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Host Integration Server\6.0!ProductVersion registry key" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Host Integration Server\6.0</key>
      <name>ProductVersion</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:6684" version="2" comment="Host integration 7.0 registry key" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Host Integration Server\7.0</key>
      <name>ProductName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:15393" version="1" comment="Host integration 8.0 registry key" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Host Integration Server\8.0</key>
      <name>ProductName</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:15716" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1798" var_check="all"/>
      <filename>Snadmod.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:16279" version="1" comment="The registry key that holds the InstallPath for Microsoft Host Integration Server 2006" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Host Integration Server\7.0</key>
      <name>InstallPath</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:16295" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1256" var_check="all"/>
      <filename>Snadmod.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:16393" version="1" comment="The registry key that holds the InstallPath for Microsoft Host Integration Server 2004" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Host Integration Server\6.0</key>
      <name>InstallPath</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:16346" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1461" var_check="all"/>
      <filename>Snadmod.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:16376" version="1" comment="The registry key that holds the InstallPath for Microsoft Host Integration Server 2010" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Host Integration Server\8.0</key>
      <name>InstallPath</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1348" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB893066</key>
      <name>Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:588" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:201" var_check="all"/>
      <filename>tcpip.sys</filename>
    </file_object>
    <swlist_object id="oval:org.mitre.oval:obj:744" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <swlist>Mozilla.MOZ-COM</swlist>
    </swlist_object>
    <swlist_object id="oval:org.mitre.oval:obj:743" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <swlist>Mozilla.MOZ-COM</swlist>
    </swlist_object>
    <file_object id="oval:org.mitre.oval:obj:12206" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:834" var_check="all"/>
      <filename>Onetutil.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:12311" version="2" comment="Registry that holds the DisplayName of the SharePoint Services 3.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\\{90120000-1014-0000-[01]000-0000000FF1CE\}$</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:629" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion</key>
      <name>Version</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:16204" version="2" comment="Object holds DisplayName of SharePoint Server 2010" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Office14.OSERVER</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:16233" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-1110-0000-1000-0000000FF1CE}</key>
      <name>DisplayName</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:16268" version="1" comment="Eawfap.dll file" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1050" var_check="all"/>
      <filename>Eawfap.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:15985" version="1" comment="SharePoint Server 2010 - Microsoft.office.policy.dll file" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1050" var_check="all"/>
      <filename>Microsoft.office.policy.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:16246" version="1" comment="OWSSVR.DLL file" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1050" var_check="all"/>
      <filename>OWSSVR.DLL</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:15529" version="1" comment="Microsoft.SharePoint.Taxonomy.dll file" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1050" var_check="all"/>
      <filename>Microsoft.SharePoint.Taxonomy.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:16213" version="1" comment="SharePoint Server 2010 - Microsoft.SharePoint.Client.dll file" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1050" var_check="all"/>
      <filename>Microsoft.SharePoint.Client.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:15305" version="1" comment="Microsoft.office.server.dll file" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1050" var_check="all"/>
      <filename>Microsoft.office.server.dll</filename>
    </file_object>
    <package_object id="oval:org.mitre.oval:obj:752" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWadmfw</pkginst>
    </package_object>
    <inetd_object id="oval:org.mitre.oval:obj:751" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <protocol operation="pattern match">.*</protocol>
      <service_name>100232/10</service_name>
    </inetd_object>
    <patch_object id="oval:org.mitre.oval:obj:750" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">116457</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:749" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">116442</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:748" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">116454</base>
    </patch_object>
    <inetd_object id="oval:org.mitre.oval:obj:747" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <protocol operation="pattern match">.*</protocol>
      <service_name operation="equals">100232/10</service_name>
    </inetd_object>
    <registry_object id="oval:org.mitre.oval:obj:1572" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB890859</key>
      <name>Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:335" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>Ntoskrnl.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1669" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Ole</key>
      <name>EnableDCOM</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:753" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mozilla Firefox 1.0.7</key>
      <name>DisplayName</name>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:754" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <patch_name>PHNE_34306</patch_name>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:15824" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1534" var_check="all"/>
      <filename>Fwcmgmt.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:15320" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Firewall Client 2004</key>
      <name>InstallRoot</name>
    </registry_object>
    <swlist_object id="oval:org.mitre.oval:obj:756" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <swlist>Secure_Shell.SECURE_SHELL</swlist>
    </swlist_object>
    <swlist_object id="oval:org.mitre.oval:obj:755" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <swlist>Secure_Shell.SECURE_SHELL</swlist>
    </swlist_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1413" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:16340" version="1" comment="Object holds if Sun VirtualBox is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Sun\VirtualBox</key>
      <name xsi:nil="true"/>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:15730" version="1" comment="Object holds if Sun xVM VirtualBox is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Sun\xVM VirtualBox</key>
      <name xsi:nil="true"/>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:28098" version="1" comment="The directory of VirtualBox.exe in VirtualBox of versions 3.2.0 and greater" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:1088" var_check="all"/>
      <filename>VirtualBox.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:28316" version="1" comment="Object holds the Oracle VM VirtualBox directory of versions 3.2.0 and greater" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Oracle\VirtualBox</key>
      <name>InstallDir</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:15297" version="2" comment="Object holds if Oracle VM VirtualBox is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Oracle\VirtualBox</key>
      <name xsi:nil="true"/>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:757" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\MediaPlayer\8.0\Registration</key>
      <name>UDBVersion</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:639" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>Wmpui.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:709" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>rpcss.dll</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:2053" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">121211</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2675" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">121212</base>
    </patch_object>
    <textfilecontent_object id="oval:org.mitre.oval:obj:6531" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/usr/share/webconsole</path>
      <filename>version.txt</filename>
      <line operation="pattern match">2\.2\.[2345]</line>
    </textfilecontent_object>
    <file_object id="oval:org.mitre.oval:obj:658" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>netman.dll</filename>
    </file_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2190" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118833</base>
    </patch_object>
    <patch_object version="1" id="oval:org.mitre.oval:obj:2735" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118855</base>
    </patch_object>
    <swlist_object id="oval:org.mitre.oval:obj:759" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <swlist>VaultWS.WS-CORE</swlist>
    </swlist_object>
    <patch_object id="oval:org.mitre.oval:obj:758" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <patch_name>PHSS_34123</patch_name>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:761" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gedit</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:760" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>gedit</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:224" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>umpnpmgr.dll</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:764" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sudo</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:763" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path operation="equals">/etc</path>
      <filename>sudoers</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:762" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>sudo</filename>
    </file_object>
    <inetd_object id="oval:org.mitre.oval:obj:1744" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <protocol operation="pattern match">.*</protocol>
      <service_name operation="equals">100235/1</service_name>
    </inetd_object>
    <file_object id="oval:org.mitre.oval:obj:1743" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/lib/fs/cachefs</path>
      <filename>cachefsd</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:1731" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">108800</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:15348" version="1" comment="Object holds if Apache Tomcat is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Apache Tomcat .*$</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:15812" version="1" comment="The registry holds the version of Apache Tomcat" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Apache Software Foundation\\Tomcat\\[0-9].*$</key>
      <name>Version</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:780" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\MediaPlayer\7.1\Registration</key>
      <name>UDBVersion</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:558" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>wmpui.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1670" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Classes\MIME\Database\Content Type\application/hta</key>
      <name>Extension</name>
    </registry_object>
    <package_object id="oval:org.mitre.oval:obj:784" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWmoznav</pkginst>
    </package_object>
    <package_object id="oval:org.mitre.oval:obj:783" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWmozmail</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:782" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">117765</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:781" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">117767</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:787" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_CLASSES_ROOT</hive>
      <key operation="equals">MITrain.Document\shell\open\command</key>
      <name xsi:nil="true"/>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:786" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:237" var_check="all"/>
      <filename>Orun32.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:785" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Updates\Step by Step Interactive Training\SP2\KB898458\Filelist</key>
      <name xsi:nil="true"/>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:534" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>Msdtctm.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:846" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB893756</key>
      <name>Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:845" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SYSTEM\CurrentControlSet\Services\TapiSrv</key>
      <name>Start</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:221" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>tapisrv.dll</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:788" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <patch_name>PHNE_24395</patch_name>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:15628" version="1" comment="Object holds full file path to NFRAgent" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_check="all" var_ref="oval:org.mitre.oval:var:1277"/>
      <filename>NFRAgent.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:15643" version="1" comment="The registry holds the install path of Novell File Reporter" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\NOVELL\File Reporter\Agent</key>
      <name>InstallPath</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:5992" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Exchange\Setup</key>
      <name>MsiProductMajor</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:6032" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Exchange\Setup</key>
      <name>MsiProductMinor</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:513" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:222" var_check="all"/>
      <filename>cdoex.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:15645" version="1" comment="The registry holds the version of PHP installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\PHP</key>
      <name>Version</name>
    </registry_object>
    <inetd_object id="oval:org.mitre.oval:obj:1673" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <protocol operation="pattern match">.*</protocol>
      <service_name>100221/1</service_name>
    </inetd_object>
    <file_object id="oval:org.mitre.oval:obj:1672" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/openwin/bin</path>
      <filename>kcms_server</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1776" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Active Setup\Installed Components\{E81659DF-28E1-4C60-B4B9-00A4BC5FA76D}</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1775" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Active Setup\Installed Components\{2D5974C5-5185-4f5b-80B6-28015ACDD74C}</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:790" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB890923 -ie501sp3-20050225.100153</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:792" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libgd</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:791" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libgd-devel</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:1339" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^Software\\Microsoft\\Office\\10\.0\\Registration\\.*$</key>
      <name>ProductID</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:467" version="2" comment="MSO.DLL for Office 10 in its installation directory" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:713" var_check="all"/>
      <filename>MSO.DLL</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:15805" version="1" comment="The registry holds if lower versions of PHP is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\PHP.*$</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:15719" version="1" comment="The registry holds if PHP is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\PHP</key>
      <name xsi:nil="true"/>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:15679" version="1" comment="The registry holds the version of PHP installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\PHP</key>
      <name>Version</name>
    </registry_object>
    <patch_object id="oval:org.mitre.oval:obj:2198" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113273</base>
    </patch_object>
    <textfilecontent_object id="oval:org.mitre.oval:obj:1952" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc/ssh</path>
      <filename>sshd_config</filename>
      <line operation="pattern match">^\s*Protocol\s+</line>
    </textfilecontent_object>
    <patch_object id="oval:org.mitre.oval:obj:2085" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">123324</base>
    </patch_object>
    <textfilecontent_object id="oval:org.mitre.oval:obj:2471" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc/ssh</path>
      <filename>sshd_config</filename>
      <line operation="pattern match">^\s*Protocol\s+.*1</line>
    </textfilecontent_object>
    <patch_object id="oval:org.mitre.oval:obj:2076" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114858</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2576" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">123325</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:966" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>itss.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:965" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB840315</key>
      <name>Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:964" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Classes\ITSProtocol</key>
      <name xsi:nil="true"/>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:384" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:201" var_check="all"/>
      <filename>srv.sys</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1674" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB817606</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14609" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gnomemeeting</name>
    </rpminfo_object>
    <patch_object id="oval:org.mitre.oval:obj:2756" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <patch_name>PHNE_33159</patch_name>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:2686" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Office\\12\.0\\Registration\\\{90120000-110D-0000-[01]000-0000000FF1CE\}$</key>
      <name>ProductName</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:15616" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:11" var_check="all"/>
      <filename>microsoft.office.server.conversions.launcher.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:12125" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90120000-10F5-0000-1000-0000000FF1CE}</key>
      <name>InstallLocation</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:800" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libxml</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:799" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libxml-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15061" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>neon-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14799" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>neon</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15201" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>automake14</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15221" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>automake</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15166" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>automake15</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15372" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>automake17</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15334" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>automake16</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:1676" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft ISA Server</key>
      <name>VersionMajor</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1675" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Fpc\Hotfixes\SP1\277</key>
      <name>Kbs</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14220" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>acroread-libs-pango</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14490" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>acroread-libs-glib2</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14645" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>acroread-libs-gtk2</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14402" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>acroread-libs-atk</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14819" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>acroread-libs-gtk2-engines</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1528" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>gzip</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:1527" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>gunzip</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14146" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gcc-ppc32</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14629" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libgcj4-src</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15230" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gcc-objc++</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15128" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gcc4-java</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15134" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libgfortran</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14780" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libobjc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15228" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libmudflap-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14788" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libtool-ltdl-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15285" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libtool-ltdl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15010" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libgcj4</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15264" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gcc4-c++</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14377" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libgcj4-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14644" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cpp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14610" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libstdc++-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14563" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libgcj-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14920" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gcc-gnat</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15194" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libgcj-src</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14648" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gcc4-gfortran</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14964" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libgomp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14323" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gcc4</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14094" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libgnat</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14877" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gcc-java</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15152" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gcc-gfortran</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14727" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gcc-objc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15029" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libtool-libs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14175" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gcc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14613" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libf2c</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15211" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libtool</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14776" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gcc-c++</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14487" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libstdc++</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14428" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gcc-g77</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14668" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gcc-c++-ppc32</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14254" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libgcc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14905" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libmudflap</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14800" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libgcj</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:1378" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Wordpad</key>
      <name>EnableLegacyConverters</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:802" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB885836</key>
      <name>Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:801" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:239" var_check="all"/>
      <filename>mswrd632.wpc</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14379" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cyrus-sasl-plain</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14137" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cyrus-sasl-gssapi</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14081" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cyrus-sasl-md5</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14038" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cyrus-sasl-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14473" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cyrus-sasl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15210" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>perl-Archive-Tar</name>
    </rpminfo_object>
    <patch_object id="oval:org.mitre.oval:obj:1890" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118844</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14675" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>nspluginwrapper</name>
    </rpminfo_object>
    <patch_object id="oval:org.mitre.oval:obj:5744" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122092</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:5670" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122091</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2245" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119450</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2729" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119449</base>
    </patch_object>
    <registry_object id="oval:org.mitre.oval:obj:1008" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB873333</key>
      <name>Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:406" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>ole32.dll</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14647" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>rdesktop</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:806" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:241" var_check="all"/>
      <filename>CrystalDecisions.Web.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:805" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SYSTEM\CurrentControlSet\Services\w3svc</key>
      <name>Start</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:1362" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>bzip2</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:704" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>Quartz.dll</filename>
    </file_object>
    <swlist_object id="oval:org.mitre.oval:obj:811" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <swlist>WUFTP-26.INETSVCS-FTP</swlist>
    </swlist_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14470" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>subversion-perl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15180" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>subversion-javahl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15192" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>subversion-ruby</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14514" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mod_dav_svn</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15298" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>subversion</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14983" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>subversion-devel</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:708" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>msieftp.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1487" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft ISA Server SP</key>
      <name>DisplayName</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:1485" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:251" var_check="all"/>
      <filename>w3proxy.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1486" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall</key>
      <name>Microsoft ISA Server</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1484" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\FPC\Hotfixes\SP1\430</key>
      <name>kbs</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15212" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>systemtap-client</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14298" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>systemtap-testsuite</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15362" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>systemtap-initscript</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15026" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>systemtap</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15292" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>systemtap-runtime</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14954" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>systemtap-server</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14608" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>systemtap-sdt-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14552" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>coolkey</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14771" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>coolkey-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14870" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>rgmanager</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15064" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gfs2-utils</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14435" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>zlib-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14630" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>zlib</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14782" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>glib2</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15038" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>glib2-devel</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:813" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB896727</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15308" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>brlapi-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14702" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>brlapi</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14899" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>brltty</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15085" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>opal-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14960" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>opal</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15293" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gfs-kmod</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15088" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kmod-gfs-xen</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15284" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kmod-gfs-PAE</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15291" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kmod-gfs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:815" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>telnet</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:814" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>telnet</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:1896" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">123325</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2022" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114357</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2647" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">123324</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2697" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114356</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14191" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>telnet</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14237" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>telnet-server</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:1604" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Active Setup\Installed Components\{2298d453-bcae-4519-bf33-1cbf3faf1524}</key>
      <name>IsInstalled</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14441" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xchat</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:661" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>cdosys.dll</filename>
    </file_object>
    <package_object id="oval:org.mitre.oval:obj:818" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWbnuu</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:817" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">106952</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:657" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">111570</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:655" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113322</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:668" version="1" comment="Fontsub.dll in the Windows System32 directory." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>Fontsub.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:667" version="1" comment="T2embed.dll in the Windows System32 directory." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>T2embed.dll</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14464" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>nasm-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14203" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>nasm-rdoff</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14689" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>nasm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14303" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>unzip</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15049" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cairo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15056" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cairo-devel</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:1545" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB901214</key>
      <name>IsInstalled</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:745" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>mscms.dll</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15332" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>scsi-target-utils</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:819" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>fetchmail</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14519" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>lynx</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1677" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gdm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14411" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>initscripts</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:1755" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB824146</key>
      <name>Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:254" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>rpcrt4.dll</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14536" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openldap-servers-overlays</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:822" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:821" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-hugemem</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:820" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-smp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15050" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>qt-devel-docs</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:1577" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\CLASSES\PNGFilter.CoPNGFilter</key>
      <name xsi:nil="true"/>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:377" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:206" var_check="all"/>
      <filename>dhtmled.ocx</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:281" version="1" comment="The registry key that identifies the location of the common files directory." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion</key>
      <name>CommonFilesDir</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:823" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB891781</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14283" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>s390utils</name>
    </rpminfo_object>
    <patch_object id="oval:org.mitre.oval:obj:2678" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <patch_name>PHNE_33427</patch_name>
    </patch_object>
    <package_object id="oval:org.mitre.oval:obj:828" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWkr5sv</pkginst>
    </package_object>
    <package_object id="oval:org.mitre.oval:obj:827" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWkr5sl</pkginst>
    </package_object>
    <package_object id="oval:org.mitre.oval:obj:826" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWkrgdo</pkginst>
    </package_object>
    <package_object id="oval:org.mitre.oval:obj:825" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWkrggl</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:296" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">112536</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:442" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112908</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:447" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">112237</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:446" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">112390</base>
    </patch_object>
    <textfilecontent_object id="oval:org.mitre.oval:obj:824" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc/krb5</path>
      <filename>krb5.conf</filename>
      <line operation="pattern match">^[^#_]*default_realm[^=]*=[^_]*$</line>
    </textfilecontent_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14591" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>wget</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14692" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>star</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14672" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sharutils</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14811" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-ure</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1529" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gzip</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:829" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>zgrep</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1576" version="1" comment="This registry key identifies the architecture on the system" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SYSTEM\CurrentControlSet\Control\Session Manager\Environment</key>
      <name>PROCESSOR_ARCHITECTURE</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:336" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>sxs.dll</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14141" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>slocate</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13951" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>less</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15219" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>4Suite</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15205" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>PyXML</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1778" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path operation="equals">/usr/lib/snmp</path>
      <filename>snmpdx</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15258" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>giflib</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15115" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>giflib-utils</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15149" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>giflib-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14615" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libungif-progs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14114" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libungif</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14669" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libungif-devel</name>
    </rpminfo_object>
    <process_object id="oval:org.mitre.oval:obj:1782" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command operation="pattern match">^.*inetd.*</command>
    </process_object>
    <inetd_object id="oval:org.mitre.oval:obj:1763" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <protocol operation="pattern match">.*</protocol>
      <service_name operation="equals">100083/1</service_name>
    </inetd_object>
    <package_object id="oval:org.mitre.oval:obj:831" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="pattern match" datatype="string">SUNWtltkx?</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:830" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">112808</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14026" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mod_perl-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14816" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mod_perl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14429" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dbus-python</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14393" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dbus-glib</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:994" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">Software\Microsoft\Active Setup\Installed Components\{754D29C1-0C97-405F-98D0-21B212CA7FF1}</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:832" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q819696</key>
      <name>Installed</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14503" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ekiga</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1002" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>schannel.dll</filename>
    </file_object>
    <metabase_object id="oval:org.mitre.oval:obj:1014" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <key operation="pattern match">^LM/W3SVC/.*$</key>
      <id datatype="int">5506</id>
    </metabase_object>
    <registry_object id="oval:org.mitre.oval:obj:1011" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\PCT 1.0\Server</key>
      <name>Enabled</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14906" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>pwlib-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14494" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libvolume_id</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15260" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libvolume_id-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15087" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>pam_krb5</name>
    </rpminfo_object>
    <patch_object id="oval:org.mitre.oval:obj:1994" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">125100</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2712" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">125101</base>
    </patch_object>
    <process_object id="oval:org.mitre.oval:obj:2706" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command operation="pattern match">.*nfsd</command>
    </process_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14282" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>iproute</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:834" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\OC Manager\Subcomponents</key>
      <name>ieHardenadmin</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:833" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\OC Manager\Subcomponents</key>
      <name>ieHardenuser</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:1679" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>ntdll.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1678" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q815021</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14308" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>oprofile-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14306" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>oprofile</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:1445" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla (\([0-1]\.[0-7]\)|\([0-1]\.[0-7]\.[0-9]\)|\(1\.7\.10\))$</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1444" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla Firefox (\(0\.[0-9].*\)|\(1\.0\)|\(1\.0\.[0-6]\))$</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1635" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB897715</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13963" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>htdig-web</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15021" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>yum-rhn-plugin</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14739" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libwpd</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14773" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libwpd-tools</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14480" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libwpd-devel</name>
    </rpminfo_object>
    <process_object id="oval:org.mitre.oval:obj:1383" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command operation="pattern match" datatype="string">\bpostmaster\b</command>
    </process_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:836" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>rh-postgresql-contrib</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:835" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path operation="equals">/usr/lib/pgsql</path>
      <filename>tsearch.so</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14607" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>udev</name>
    </rpminfo_object>
    <patch_object id="oval:org.mitre.oval:obj:1913" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122300</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:2682" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122301</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14343" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libexif</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14518" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libexif-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15150" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libxslt-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15147" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libxslt</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14955" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libxslt-python</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:837" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>Mapi32.dll</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14431" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gnome-screensaver</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1363" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>bzip2</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:838" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>bzgrep</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13969" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>shadow-utils</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13476" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>lftp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14770" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-xfs-utils</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14802" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cman-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14620" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cman</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13792" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>imlib-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14150" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>imlib</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:841" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:243" var_check="all"/>
      <filename>ssnetlib.dll</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13764" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gnome-vfs2</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15130" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gnome-vfs2-smb</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14144" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gnome-vfs2-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14374" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>glibc-common</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14346" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>glibc-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14095" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>nptl-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14243" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>glibc-profile</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14059" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>glibc-utils</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13936" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>glibc-headers</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14142" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>glibc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14360" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>nscd</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15132" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dhcp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15055" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dhcp-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15218" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dhclient</name>
    </rpminfo_object>
    <patch_object id="oval:org.mitre.oval:obj:848" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119985</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:847" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">122082</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14125" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sysstat</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1519" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1030" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>mozilla</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14753" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>nss_db</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14277" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libgtop2-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15106" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libgtop2</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14574" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>enscript</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1680" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>evolution</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14412" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>redhat-config-nfs</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:998" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>Msw3prt.dll</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15110" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ed</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:564" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>jscript.dll</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14618" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>file</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14897" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>iscsi-initiator-utils</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:857" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:856" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>oocalc</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:855" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>oodraw</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:854" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ooffice</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:853" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>ooimpress</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:852" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>oowriter</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13777" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>lvm</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:858" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>mf3216.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:622" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>gdi32.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:849" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>comsvcs.dll</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14999" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>expat</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15283" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>expat-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13888" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mod_auth_pgsql</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14638" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>perl-Net-DNS</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14261" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xloadimage</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14823" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>info</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14791" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>texinfo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14246" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sudo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14274" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>rsync</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:861" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>crypt32.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:860" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q329115</key>
      <name>Installed</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14820" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>acpid</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15037" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>RealPlayer</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15058" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>realplayer</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14568" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>perl-DBI</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14378" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mutt</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15031" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>NetworkManager-gnome</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14736" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>NetworkManager-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15012" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>NetworkManager-glib-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15163" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>NetworkManager</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14206" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>NetworkManager-glib</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14690" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dnsmasq</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14633" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>fetchmail</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14251" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>htdig</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:865" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Rockliffe\MailSite</key>
      <name operation="equals">Version</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15270" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postgresql84-python</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15176" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postgresql84-test</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14440" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postgresql84-tcl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15092" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postgresql84-pltcl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15356" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postgresql84-plpython</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15160" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postgresql84</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15349" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postgresql84-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14866" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postgresql84-plperl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15020" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postgresql84-server</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15371" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postgresql84-docs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15091" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postgresql84-libs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15329" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postgresql84-contrib</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:1728" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q293826</key>
      <name>Installed</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14735" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libicu</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14949" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>icu</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14890" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libicu-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14587" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libicu-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13883" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gdk-pixbuf-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14410" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gdk-pixbuf-gnome</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14361" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gdk-pixbuf</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14883" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>jakarta-commons-modeler</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14944" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>jakarta-commons-modeler-javadoc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13930" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdepim</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14134" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdepim-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1007" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1006" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1005" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl-perl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1004" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl096</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1003" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl096b</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14474" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>imap-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14565" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>imap</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14484" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>imap-utils</name>
    </rpminfo_object>
    <process_object id="oval:org.mitre.oval:obj:1777" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command operation="pattern match" datatype="string">^.*snmpdx.*</command>
    </process_object>
    <package_object id="oval:org.mitre.oval:obj:869" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst operation="equals" datatype="string">SUNWsasnm</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:868" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">107709</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:867" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">108869</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14333" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>nfs-utils</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13437" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gdb</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:870" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>umandlg.dll</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14296" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>setroubleshoot-server</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15093" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>setroubleshoot-plugins</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15036" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>setroubleshoot</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:223" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>spoolsv.exe</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:871" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB896423</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:924" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/X11/bin</path>
      <filename>Xorg</filename>
    </file_object>
    <patch_object id="oval:org.mitre.oval:obj:875" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119059</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:874" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">108653</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:873" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119060</base>
    </patch_object>
    <process_object id="oval:org.mitre.oval:obj:872" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command operation="pattern match">.*Xsun\b.*</command>
    </process_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15075" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xmms-flac</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15053" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>flac</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14740" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>flac-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14838" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xterm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:877" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cvs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14324" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openmotif-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14483" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openmotif21</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14408" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openmotif</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14498" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>fonts-xorg-ISO8859-9-100dpi</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14468" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>fonts-xorg-ISO8859-2-100dpi</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14179" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>fonts-xorg-100dpi</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14528" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>fonts-xorg-75dpi</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14313" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>fonts-xorg-truetype</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14485" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>fonts-xorg-ISO8859-15-100dpi</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14582" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>fonts-xorg-ISO8859-14-100dpi</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14404" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>fonts-xorg-ISO8859-14-75dpi</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14439" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>fonts-xorg-ISO8859-2-75dpi</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14510" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>fonts-xorg</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14465" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>fonts-xorg-base</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14621" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>fonts-xorg-syriac</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14602" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>fonts-xorg-cyrillic</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14443" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>fonts-xorg-ISO8859-15-75dpi</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14327" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>fonts-xorg-ISO8859-9-75dpi</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14382" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>lha</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14505" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>pcre</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14619" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>pcre-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14319" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>perl-CGI</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13815" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>perl-suidperl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14438" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>perl-DB_File</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14460" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>perl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14597" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>perl-CPAN</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:191" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>Msxml4.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:190" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>Msxml6.dll</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15065" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>e2fsprogs-libs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14726" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>e2fsprogs-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15117" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>e2fsprogs</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:962" version="1" deprecated="true" comment="DEPRECATED: Unused;" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Updates\DataAccess\Q823718</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:878" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>odbcbcp.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:359" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\DataAccess</key>
      <name>FullInstallVer</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:880" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>fetchmail</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:879" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>fetchmail</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14550" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dovecot</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14699" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>nss_ldap</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:1385" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\SeaMonkey \(1\.0[ab]\)$</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:794" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\mozilla.org\SeaMonkey</key>
      <name>CurrentVersion</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:883" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla Firefox (\(0\.[0-9].*\)|\(1\.0\)|\(1\.0\.[0-7]\))$</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:882" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla Thunderbird (\(0\.[0-9]\)|\(1\.0\)|\(1\.0\.[0-7]\))$</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:881" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla (\([0-1]\.[0-7]\)|\([0-1]\.[0-7]\.[0-9]\)|\(1\.7\.1[0-2]\))$</key>
      <name>DisplayName</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14682" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dia</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:885" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>Software\VERITAS\Backup Exec\Server</key>
      <name>CurrentVersion</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:884" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SYSTEM\CurrentControlSet\Control\LSA</key>
      <name>RestrictAnonymous</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14245" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>alsa-lib</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14304" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>alsa-lib-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14952" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mcstrans</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14396" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gd-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14414" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gd</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14462" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gd-progs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14578" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>exim</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14594" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>exim-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14247" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>exim-sa</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14228" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>exim-mon</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14419" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdebase-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14264" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdebase</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14325" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>evolution-help</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14947" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>evolution28-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15104" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>evolution28</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14861" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libsmi-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14945" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libsmi</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14350" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gtk2-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14106" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gtk2</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:1001" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_CLASSES_ROOT</hive>
      <key>HCP</key>
      <name xsi:nil="true"/>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:917" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB840374</key>
      <name>Installed</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:886" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>helpctr.exe</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15234" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dbus-libs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15182" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gstreamer-plugins-good</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14946" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gstreamer-plugins-good-devel</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:1010" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB828741</key>
      <name>Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:955" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Ole</key>
      <name>EnableDCOMHTTP</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:887" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>rpcproxy.dll</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14390" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>net-snmp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14287" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>net-snmp-utils</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14316" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>net-snmp-libs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14516" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>net-snmp-perl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14339" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>net-snmp-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15071" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tog-pegasus-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14784" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tog-pegasus-test</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14965" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tog-pegasus</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14299" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdenetwork-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14652" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdenetwork-nowlistening</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14300" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdenetwork</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:892" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB837009</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15042" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.5.0-bea</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14358" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.6.0-bea-missioncontrol</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14751" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.6.0-bea-jdbc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14942" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.4.2-bea-missioncontrol</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15133" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.6.0-bea-src</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15140" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.5.0-bea-src</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14805" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.4.2-bea-src</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15068" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.4.2-bea-jdbc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14803" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.4.2-bea-demo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14427" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.5.0-bea-jdbc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14919" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.6.0-bea-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14993" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.6.0-bea-demo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14643" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.5.0-ibm-accessibility</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14721" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.5.0-bea-demo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14852" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.6.0-bea</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14488" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.4.2-bea</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14356" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.5.0-bea-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14859" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.5.0-bea-missioncontrol</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15119" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.4.2-bea-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14170" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tar</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14426" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cpio</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14992" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>apr-util</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15199" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>apr-util-docs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15236" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>apr-util-devel</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:897" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB839643</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:896" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB839643-DirectX8</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:895" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB839643-DirectX81</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:894" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB839643-DirectX82</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:499" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\DirectX</key>
      <name>Version</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:450" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>dplayx.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:893" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB839643-DirectX9</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14833" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libwmf-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14677" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libwmf</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:1578" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\HotFix\KB883939</key>
      <name>Installed</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13988" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mod_python</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14583" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sendmail-cf</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14631" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sendmail-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14016" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sendmail</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14230" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sendmail-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14425" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dbus-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14132" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dbus-x11</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14213" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dbus</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:1470" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\MSSQLServer\MSSQLServer\CurrentVersion</key>
      <name>CurrentVersion</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:843" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:243" var_check="all"/>
      <filename>sqlservr.exe</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:903" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:243" var_check="all"/>
      <filename>odsole70.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:902" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:243" var_check="all"/>
      <filename>xpqueue.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:901" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:243" var_check="all"/>
      <filename>xprepl.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:900" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:243" var_check="all"/>
      <filename>xplog70.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:899" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:243" var_check="all"/>
      <filename>xpweb70.dll</filename>
    </file_object>
    <file_object id="oval:org.mitre.oval:obj:898" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:243" var_check="all"/>
      <filename>xpstar.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:842" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\sqlservr.exe</key>
      <name>Path</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14513" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>vim-minimal</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13610" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>vim</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14549" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>vim-X11</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14345" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>vim-common</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14043" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>vim-enhanced</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15138" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdelibs-apidocs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14967" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.6.0-sun-demo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14769" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.6.0-sun-jdbc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15162" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.6.0-sun-plugin</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14936" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.6.0-sun</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14923" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.6.0-sun-src</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14712" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.6.0-sun-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14074" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>qt-designer</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13884" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>qt-ODBC</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14145" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>qt-config</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14278" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>qt-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14384" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>qt-MySQL</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14674" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>qt-PostgreSQL</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14421" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>qt</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14953" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>aide</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13978" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>vixie-cron</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14752" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>flash-plugin</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14559" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>bluez-utils-cups</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14881" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>bluez-utils</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14258" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl096b</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:1721" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path operation="equals">/usr/lib/netsvc</path>
      <filename>rpc.yppasswdd</filename>
    </file_object>
    <process_object id="oval:org.mitre.oval:obj:1719" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command operation="pattern match" datatype="string">^.*rpc\.yppasswdd.*</command>
    </process_object>
    <patch_object id="oval:org.mitre.oval:obj:1684" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int" operation="equals">111590</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14463" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mikmod-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14302" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mikmod</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14930" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>compiz</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15154" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>compiz-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14701" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>caching-nameserver</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14143" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>bind</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14242" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>bind-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14363" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>bind-chroot</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14729" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>bind-libbind-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14433" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>bind-sdb</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14348" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>bind-libs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14263" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>bind-utils</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15241" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xmlsec1-gnutls-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15222" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xmlsec1-nss-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15043" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xmlsec1-gnutls</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15214" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xmlsec1</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15290" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xmlsec1-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15197" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xmlsec1-openssl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15175" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xmlsec1-openssl-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14874" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xmlsec1-nss</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14564" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>rsh-server</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13972" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>rsh</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14387" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openldap-servers-sql</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14705" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>compat-openldap</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14676" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openldap-servers</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14650" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openldap</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14680" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openldap-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13745" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openldap-clients</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:1739" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q295534</key>
      <name operation="equals">Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1738" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q301625</key>
      <name>Installed</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14434" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssh-askpass-gnome</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14409" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssh-clients</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14577" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssh-askpass</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14581" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssh</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14544" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssh-server</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13933" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdelibs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14126" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdelibs-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14493" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mod_auth_mysql</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14208" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python-tools</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14166" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14092" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tkinter</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14556" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14500" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python-docs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:915" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-unsupported</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14340" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>quagga-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14268" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>quagga</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14111" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>quagga-contrib</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15336" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gnome-python2-gtkhtml2</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15296" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>totem</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15358" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gnome-python2-gtkmozembed</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15161" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gnome-python2-libegg</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15311" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>totem-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15001" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>totem-mozplugin</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15252" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gnome-python2-extras</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15102" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gnome-python2-gtkspell</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15321" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>esc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14915" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.6.0-ibm-plugin</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14233" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.6.0-ibm-javacomm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14715" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.6.0-ibm-src</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15027" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.6.0-ibm-accessibility</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14927" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.6.0-ibm-demo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14479" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.5.0-sun-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15033" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.6.0-ibm-jdbc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14988" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.5.0-sun</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15019" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.6.0-ibm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14584" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.6.0-ibm-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14809" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.5.0-sun-plugin</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14507" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.5.0-sun-jdbc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14499" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.5.0-sun-demo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15113" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.5.0-sun-src</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:1550" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SYSTEM\CurrentControlSet\Control\ProductOptions</key>
      <name>ProductType</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:512" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>lsasrv.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:1015" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB835732</key>
      <name>Installed</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14116" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>arpwatch</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14318" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tcpdump</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13587" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libpcap</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14848" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>autofs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15008" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>autofs5</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14475" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>freeradius-postgresql</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14691" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>freeradius-mysql</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13705" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>freeradius-unixODBC</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15016" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>hsqldb</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15142" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>hsqldb-demo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15139" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>hsqldb-manual</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14924" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>hsqldb-javadoc</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:253" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>shell32.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:916" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\[1-3]$</key>
      <name>1802</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14713" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>freetype-demos</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14561" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>freetype-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14720" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>freetype-utils</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14103" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>freetype</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14341" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libtiff</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14174" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libtiff-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14632" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>HelixPlayer</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14444" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gzip</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:1774" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Active Setup\Installed Components\{D7B44F3E-77D3-44C5-8E03-4222D9A18B7B}</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1773" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Active Setup\Installed Components\{61E6EAE5-7821-4AC1-9BBD-AED032A8E273}</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1772" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Active Setup\Installed Components\{FF4DD9CD-F25E-425a-8B5C-A2D062781FBB}</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1771" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Active Setup\Installed Components\{2757B1D6-0367-4663-877C-93ECC5C01BF6}</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1770" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Active Setup\Installed Components\{C34F4917-ED43-439f-9023-97B0024A2B3B}</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1769" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Active Setup\Installed Components\{F9C174E3-3E87-40bc-AA94-B8974F2B9222}</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1768" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Active Setup\Installed Components\{f5de1b93-9d38-416b-b09e-aa85a8e84309}</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1767" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Active Setup\Installed Components\{377483c2-e4b4-4ee8-b577-9aed264c8735}</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1766" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Active Setup\Installed Components\{96543d59-497a-4801-a1f3-5936aacaf7b1}</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1765" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Active Setup\Installed Components\{057997dd-71e4-43cc-b161-3f8180691a9e}</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1469" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Active Setup\Installed Components\{eddbec60-89cb-44ef-8291-0850fd28ff6a}</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:993" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">Software\Microsoft\Active Setup\Installed Components\{716E024F-7F74-47F3-B93B-9FF7F3CBF94C}</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:992" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">Software\Microsoft\Active Setup\Installed Components\{E81659DF-28E1-4C60-B4B9-00A4BC5FA76D}</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:991" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">Software\Microsoft\Active Setup\Installed Components\{2D5974C5-5185-4f5b-80B6-28015ACDD74C}</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:989" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\[0-4]$</key>
      <name>1803</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15183" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kvm-qemu-img</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15240" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kmod-kvm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15123" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kvm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15126" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kvm-tools</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14284" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>vsftpd</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15030" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>evolution28-pango-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15094" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>evolution28-pango</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15280" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>pango-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15101" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>pango</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14793" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>hplip</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14491" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libsane-hpaio</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14471" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>hpijs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14185" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>netpbm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13960" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>netpbm-progs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14399" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>netpbm-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14679" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.5.0-ibm-plugin</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14898" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.5.0-ibm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14824" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.5.0-ibm-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14918" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.5.0-ibm-demo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14829" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.4.2-ibm-src</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14781" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.4.2-ibm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14703" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.4.2-ibm-demo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14312" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.4.2-ibm-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14795" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.5.0-ibm-jdbc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14163" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.4.2-ibm-plugin</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14755" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.4.2-ibm-jdbc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14789" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.5.0-ibm-src</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14837" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.4.2-ibm-javacomm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14760" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.5.0-ibm-javacomm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14724" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>pidgin-docs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:930" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14454" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libxml</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14286" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libxml-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15191" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libvirt-python</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14880" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libvirt-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15209" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libvirt</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14684" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>elinks</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13679" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>utempter</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14469" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>curl-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14575" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>curl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14667" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-server-Xvnc-source</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:866" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>msw3prt.dll</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15083" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-server-randr-source</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14418" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-server</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14794" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-server-Xnest</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14873" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-server-sdk</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14653" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-server-Xorg</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14709" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-server-Xvfb</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14842" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-server-Xephyr</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14353" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-server-Xdmx</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14331" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>squirrelmail</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14400" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mysql-bench</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14941" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mysql-test</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14481" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mysql-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14342" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mysql-server</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14355" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mysql</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14840" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libvorbis-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14657" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libvorbis</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14663" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>wireshark-gnome</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14711" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>wireshark</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14579" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>losetup</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14598" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mount</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14723" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>util-linux</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:1016" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="equals">SOFTWARE\Microsoft\Active Setup\Installed Components\{2cc9d512-6db6-4f1c-8979-9a41fae88de0}</key>
      <name operation="equals">IsInstalled</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:566" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Outlook Express\Version Info</key>
      <name>Current</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:385" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>inetcomm.dll</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1706" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ethereal</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:1705" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ethereal-gnome</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14156" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tk-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14962" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tcl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14860" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tix</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15013" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>expect-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14757" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tcltk</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15002" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tcl-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15099" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>itcl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14225" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tk</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14921" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tclx</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14272" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>expect</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14733" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xscreensaver</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14698" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gdm</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:1759" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q327696</key>
      <name>Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1758" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q811114</key>
      <name>Installed</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1754" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\INetStp</key>
      <name>MajorVersion</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:938" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\INetStp</key>
      <name>MinorVersion</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:496" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:203" var_check="all"/>
      <filename>w3svc.dll</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13920" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14558" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gnutls-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15003" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gnutls-utils</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14386" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gnutls</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13882" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14181" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl097a</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14122" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl-perl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14194" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libpng</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14370" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libpng10</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14221" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libpng-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13985" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libpng10-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14774" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cyrus-imapd-perl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14271" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cyrus-imapd-nntp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14555" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cyrus-imapd-utils</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14532" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>perl-Cyrus</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14534" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cyrus-imapd</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14695" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cyrus-imapd-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14681" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cyrus-imapd-murder</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14847" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>evolution-data-server-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14477" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>evolution</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15151" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>evolution28-evolution-data-server</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14267" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>evolution28-evolution-data-server-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14585" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>evolution-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14939" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>evolution-data-server</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15054" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>evolution-data-server-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15278" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openswan-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14994" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openswan</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14662" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tomcat5-servlet-2.4-api-javadoc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14210" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tomcat5-jasper</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14332" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tomcat5-webapps</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14509" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tomcat5-server-lib</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14622" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tomcat5-jsp-2.0-api-javadoc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14808" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tomcat5-admin-webapps</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14815" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tomcat5-common-lib</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14612" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tomcat5</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14685" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tomcat5-servlet-2.4-api</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14750" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tomcat5-jsp-2.0-api</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14686" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tomcat5-jasper-javadoc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14403" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>squid</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14275" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cvs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14970" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cscope</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14666" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>bzip2-libs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14253" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>bzip2-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14678" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>bzip2</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13847" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gnupg</name>
    </rpminfo_object>
    <inetlisteningservers_object id="oval:org.mitre.oval:obj:1101" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <protocol operation="equals">TCP</protocol>
      <local_address operation="pattern match">.*</local_address>
      <local_port datatype="int" operation="greater than or equal">0</local_port>
    </inetlisteningservers_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:920" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>squirrelmail</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:919" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:918" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path operation="equals">/etc/httpd/modules</path>
      <filename>libphp4.so</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14248" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>pwlib</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14747" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gimp-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14077" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gimp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14862" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gimp-perl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14790" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gimp-libs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14416" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mod_auth_kerb</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14365" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postgresql-docs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14586" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postgresql</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14466" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>rh-postgresql-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14546" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postgresql-python</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14367" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postgresql-test</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14293" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postgresql-contrib</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13927" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>rh-postgresql-contrib</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13876" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>rh-postgresql-docs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13874" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>rh-postgresql-tcl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14328" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>rh-postgresql-python</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14290" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postgresql-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14347" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>rh-postgresql-test</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14486" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postgresql-tcl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14547" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postgresql-jdbc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14436" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>rh-postgresql-libs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14537" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postgresql-pl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14320" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>rh-postgresql</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14295" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>rh-postgresql-jdbc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14453" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>rh-postgresql-pl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14158" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postgresql-server</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14152" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>rh-postgresql-server</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14383" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postgresql-libs</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:990" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings</key>
      <name>Security_HKLM_only</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:247" version="2" comment="This registry key identifies the version of internet Explorer" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Internet Explorer</key>
      <name>Version</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1671" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_CURRENT_USER</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\[0-4]$</key>
      <name>1200</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:988" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\[0-4]$</key>
      <name>1200</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1609" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_CURRENT_USER</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\[0-4]$</key>
      <name>1400</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:1608" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\[0-4]$</key>
      <name>1400</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:222" version="1" comment="The path to the mshtml.dll file in the system root" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>mshtml.dll</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14858" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>acroread</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14489" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>acroread-plugin</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13430" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>redhat-release</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14521" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mailman</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14337" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gpdf</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14394" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>poppler</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14199" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cups</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14966" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>poppler-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14502" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tetex-fonts</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14596" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdegraphics-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14195" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cups-libs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14389" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tetex-afm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14241" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdegraphics</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14398" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xpdf</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14688" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cups-lpd</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14329" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tetex</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14207" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tetex-dvips</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14640" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>poppler-utils</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13878" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tetex-latex</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14076" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cups-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14554" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tetex-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14182" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tetex-xdvi</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14371" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ntp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14461" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ruby-ri</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13649" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>irb</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14446" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ruby-docs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14305" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ruby</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14777" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ruby-irb</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14380" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ruby-mode</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14244" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ruby-rdoc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14273" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ruby-tcltk</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14187" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ruby-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14388" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ruby-libs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14593" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postfix-pflogsumm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14124" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postfix</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14424" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>coreutils</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14216" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ipsec-tools</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14957" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-debug</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14301" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-xenU</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14060" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-xenU-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15023" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-debug-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15080" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>speex-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15028" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>speex</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14212" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libxml2-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14133" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libxml2</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13780" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libxml2-python</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14420" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>freeradius</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14925" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.6.0-openjdk</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14958" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python-lcms</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15274" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.6.0-openjdk-src</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15079" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>lcms</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14904" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>lcms-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14531" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.6.0-openjdk-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14889" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.6.0-openjdk-javadoc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15114" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1.6.0-openjdk-demo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14664" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-sdk</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14864" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-headless</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14165" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-sdk-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14572" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-twm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14031" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-deprecated-libs-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14097" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-Xvfb</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14595" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14311" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86-xfs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14406" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14226" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86-ISO8859-14-100dpi-fonts</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14580" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-xdm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14364" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86-75dpi-fonts</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13643" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-Xdmx</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14288" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86-ISO8859-9-100dpi-fonts</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14168" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-Xnest</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14053" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86-Xnest</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13693" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86-tools</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14385" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86-font-utils</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14515" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-Mesa-libGLU</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14478" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-libs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14281" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86-ISO8859-14-75dpi-fonts</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14259" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86-libs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14045" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86-cyrillic-fonts</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14082" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86-Mesa-libGL</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14107" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86-sdk</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14129" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-tools</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14291" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-sdk</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14260" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86-ISO8859-2-75dpi-fonts</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14538" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libXfont-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14262" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-deprecated-libs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14067" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86-100dpi-fonts</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14592" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14354" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86-truetype-fonts</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14255" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14352" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86-xauth</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14407" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86-base-fonts</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14553" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14121" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86-ISO8859-15-75dpi-fonts</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14351" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86-ISO8859-15-100dpi-fonts</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14127" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86-Mesa-libGLU</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13667" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86-twm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13712" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86-ISO8859-9-75dpi-fonts</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14198" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86-syriac-fonts</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14624" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-font-utils</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14397" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13644" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86-Xvfb</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14326" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86-libs-data</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14504" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libXfont</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14315" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86-ISO8859-2-100dpi-fonts</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14089" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-xfs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14169" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-xauth</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14184" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-Mesa-libGL</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13658" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>XFree86-xdm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13931" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13707" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba-swat</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14032" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba-common</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13861" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba-client</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14541" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ghostscript</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14524" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ghostscript-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14614" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ghostscript-gtk</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14376" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>spamassassin</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14611" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>httpd-suexec</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14422" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mod_ssl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14256" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>httpd-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14457" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>httpd-manual</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14173" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>httpd</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14710" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-xen</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14821" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-xen-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14853" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-debuginfo-common</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14761" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-kdump-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14863" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-PAE-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14641" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-PAE</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14801" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-kdump</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14830" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-headers</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14395" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>krb5-libs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14279" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>krb5-workstation</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14100" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>krb5-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14452" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>krb5-server</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14120" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>krb5</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14764" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>yelp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14497" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>devhelp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14520" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>devhelp-devel</name>
    </rpminfo_object>
    <package_object id="oval:org.mitre.oval:obj:539" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst>SUNWdtwm</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:209" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118953</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:208" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">118954</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:207" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109931</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:206" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">109932</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:205" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114219</base>
    </patch_object>
    <package_object id="oval:org.mitre.oval:obj:204" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst>SUNWTiff</pkginst>
    </package_object>
    <package_object id="oval:org.mitre.oval:obj:203" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <pkginst>SUNWTiffx</pkginst>
    </package_object>
    <patch_object id="oval:org.mitre.oval:obj:202" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114220</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:201" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119900</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:200" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">119901</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:213" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">111844</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:212" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">111845</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:211" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112785</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:210" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">112786</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14734" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>pam-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13849" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cdrecord</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13769" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mkisofs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14730" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>pam</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14153" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cdrecord-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14205" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cdrtools</name>
    </rpminfo_object>
    <process_object id="oval:org.mitre.oval:obj:526" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command operation="pattern match">.*httpd</command>
    </process_object>
    <patch_object id="oval:org.mitre.oval:obj:217" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116973</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:216" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">116974</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:215" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">113146</base>
    </patch_object>
    <patch_object id="oval:org.mitre.oval:obj:214" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">114145</base>
    </patch_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14415" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-nss-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14160" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-nspr</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14196" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-chat</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13716" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-nspr-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13776" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-dom-inspector</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14405" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14423" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-mail</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14069" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-nss</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13991" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-js-debugger</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14231" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-devel</name>
    </rpminfo_object>
    <file_object id="oval:org.mitre.oval:obj:953" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/bin</path>
      <filename>cvs</filename>
    </file_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:933" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cvs</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:419" version="1" comment="This registry key holds the version of the installed operating system." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key>
      <name>CurrentVersion</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:717" version="3" comment="This registry key holds the service pack installed on the host if one is present." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key>
      <name>CSDVersion</name>
    </registry_object>
    <file_object id="oval:org.mitre.oval:obj:218" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <path var_ref="oval:org.mitre.oval:var:200" var_check="all"/>
      <filename>kerberos.dll</filename>
    </file_object>
    <registry_object id="oval:org.mitre.oval:obj:219" version="1" comment="This registry key identifies the system root." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Microsoft\Windows NT\CurrentVersion</key>
      <name>SystemRoot</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14876" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>firefox-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14159" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gaim</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14030" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ethereal</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14338" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ethereal-gnome</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14186" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-source</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14218" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-smp-unsupported</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14372" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-hugemem-unsupported</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14229" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-unsupported</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14219" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-BOOT</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14109" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-smp-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13719" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-hugemem-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14362" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-hugemem</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14285" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13732" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14265" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-smp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14138" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-largesmp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13422" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14209" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-largesmp-devel</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:227" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla Firefox \(0\.9.*\)$</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:225" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla Thunderbird \(0\.[6-8]\)$</key>
      <name>DisplayName</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14508" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php-snmp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14496" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php-domxml</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14512" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php-dba</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14639" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php-bcmath</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14841" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php-common</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14922" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php-cli</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14154" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php-pdo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13746" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php-mbstring</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14148" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php-pgsql</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14375" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php-ldap</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14080" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php-mysql</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14560" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php-xml</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14366" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php-soap</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14227" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php-ncurses</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14130" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php-pear</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14445" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php-xmlrpc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14335" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php-gd</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13492" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14250" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php-imap</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14294" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14183" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php-odbc</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:229" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla (\([0-1]\.[0-7]\)|\([0-1]\.[0-7]\.[0-4]\))$</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:231" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla Thunderbird \(0\.[0-8]\)$</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:233" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla Thunderbird \(0\.[6-9]\)$</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:232" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla (\(1\.7\)|\(1\.[0-7]\.[0-3]\))$</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:234" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla Firefox \(0\.[0-9].*\)$</key>
      <name>DisplayName</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15144" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libpurple-perl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14642" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>pidgin-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14238" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libpurple-tcl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14700" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libpurple</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14202" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>pidgin-perl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15157" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>pidgin</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15156" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>finch</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15074" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>finch-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15112" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libpurple-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13475" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ImageMagick-c++</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14240" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ImageMagick-c++-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13484" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ImageMagick-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14270" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ImageMagick-perl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13854" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ImageMagick</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:235" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla Firefox (\(0\.[0-9].*\)|\(1\.0\))$</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:237" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla Thunderbird (\(0\.[0-9]\)|\(1\.0\))$</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:236" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla (\([0-1]\.[0-7]\)|\([0-1]\.[0-7]\.[0-5]\))$</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:238" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla Firefox (\(0\.[0-9].*\)|\(1\.0\)|\(1\.0\.[0-1]\))$</key>
      <name>DisplayName</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14392" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-zh_TW</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14728" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-ss_ZA</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14787" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-ms_MY</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14056" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-ts_ZA</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14822" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-pt_BR</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14855" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-mr_IN</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14748" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-da_DK</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14671" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-ur</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14813" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-eu_ES</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14694" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-hu_HU</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14746" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-pa_IN</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14336" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-hr_HR</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14839" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-zh_CN</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14706" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-bn</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13974" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-nso_ZA</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14766" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-ru</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14562" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-zu_ZA</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14548" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-base</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14529" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-sv</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14772" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-fr</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14280" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-et_EE</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14806" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-pyuno</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14909" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-nl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14321" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-sr_CS</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14732" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-th_TH</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14604" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-es</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14571" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-pt_PT</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14717" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-hi_IN</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14767" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-pl_PL</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14472" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-ru</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14501" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-cy_GB</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14892" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-nn_NO</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14599" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-ko_KR</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14792" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-gl_ES</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14135" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-testtools</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14506" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-af_ZA</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14832" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-te_IN</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14155" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-ja_JP</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14716" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-it</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14588" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-or_IN</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14539" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-de</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14637" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-ta_IN</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14812" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-it</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14576" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-as_IN</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14190" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-ko_KR</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14257" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-ml_IN</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14807" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-nb_NO</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14882" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-sl_SI</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15000" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-pt_PT</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14322" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-hr_HR</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14849" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-core</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14635" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-ga_IE</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14696" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-testtools</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14708" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-et_EE</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14903" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-fi_FI</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14189" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-sr_CS</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15018" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-he_IL</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14432" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-tn_ZA</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14744" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-ta_IN</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14623" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-calc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14557" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-math</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14090" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-af_ZA</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14990" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-zh_CN</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14984" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-pt_BR</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14814" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-zu_ZA</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14606" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-ms_MY</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15006" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-pa_IN</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14768" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-hi_IN</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14401" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-el_GR</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14828" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-draw</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14765" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-writer</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14937" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-base</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14971" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-lt_LT</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14269" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-gu_IN</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14359" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-el_GR</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14869" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-sl_SI</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14569" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-impress</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14369" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-draw</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14737" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-de</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14759" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-math</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13921" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-lt_LT</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13698" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-kde</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14450" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-core</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14193" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-cy_GB</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15005" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-eu_ES</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14872" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-ar</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14778" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-ca_ES</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14900" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-ve_ZA</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14851" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-st_ZA</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14600" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-hu_HU</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14617" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-bg_BG</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14738" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-xh_ZA</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14986" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-fr</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14956" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-gl_ES</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14885" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-sk_SK</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14875" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-sv</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14976" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-bn</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14969" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-xsltfilter</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14894" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-calc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14651" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-nr_ZA</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14526" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-graphicfilter</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14762" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-cs_CZ</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14266" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-sk_SK</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14995" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-ca_ES</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14649" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-zh_TW</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14987" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-graphicfilter</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14437" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14886" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-tr_TR</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14522" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-emailmerge</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14707" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-impress</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14901" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-nb_NO</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14714" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-kn_IN</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14963" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-ar</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14834" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-ga_IE</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14997" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-th_TH</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14980" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-pyuno</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14865" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-cs_CZ</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14215" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-i18n</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14530" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-xsltfilter</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14845" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-ja_JP</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14455" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-libs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13461" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14907" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-es</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14754" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-emailmerge</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14442" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-he_IL</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14476" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-pl_PL</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14758" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-writer</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14456" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-da_DK</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14779" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-nn_NO</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14625" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-fi_FI</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14660" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-javafilter</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14589" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-langpack-bg_BG</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14831" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-tr_TR</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14566" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org-javafilter</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14763" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-nl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14826" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openoffice.org2-langpack-gu_IN</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:239" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla (\([0-1]\.[0-7]\)|\([0-1]\.[0-7]\.[0-6]\))$</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:241" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla Firefox (\(0\.[0-9].*\)|\(1\.0\)|\(1\.0\.[0-3]\))</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:240" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla (\([0-1]\.[0-7]\)|\([0-1]\.[0-7]\.[0-7]\))</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:226" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Mozilla\Mozilla Thunderbird</key>
      <name>CurrentVersion</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:242" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla Thunderbird (\(0\.[0-9]\)|\(1\.0\)|\(1\.0\.[0-2]\))$</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:243" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla Firefox (\(0\.[0-9].*\)|\(1\.0\)|\(1\.0\.[0-2]\))$</key>
      <name>DisplayName</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:30416" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>enterprise-release</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13864" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>seamonkey-nspr</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15057" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xulrunner</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13805" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>firefox</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14224" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>seamonkey-nss</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14171" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>nss-pkcs11-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13924" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>seamonkey-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15100" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xulrunner-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14131" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>seamonkey-nss-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14292" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>seamonkey-js-debugger</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13848" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>seamonkey-mail</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14917" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>nss</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13938" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>seamonkey</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14525" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>seamonkey-chat</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13838" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>seamonkey-nspr-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15048" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xulrunner-devel-unstable</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14745" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>nspr</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15145" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>nspr-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:15090" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>nss-tools</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:13953" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>seamonkey-dom-inspector</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14449" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>thunderbird</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14656" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>nss-devel</name>
    </rpminfo_object>
    <registry_object id="oval:org.mitre.oval:obj:245" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla Firefox (\(0\.[0-9].*\)|\(1\.0\)|\(1\.0\.[0-4]\))$</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:244" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key operation="pattern match">^SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla (\([0-1]\.[0-7]\)|\([0-1]\.[0-7]\.[0-8]\))$</key>
      <name>DisplayName</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:228" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\Mozilla\Mozilla Firefox</key>
      <name>CurrentVersion</name>
    </registry_object>
    <registry_object id="oval:org.mitre.oval:obj:230" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <hive>HKEY_LOCAL_MACHINE</hive>
      <key>SOFTWARE\mozilla.org\Mozilla</key>
      <name>CurrentVersion</name>
    </registry_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24078" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>centos-release</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:23691" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>oraclelinux-release</name>
    </rpminfo_object>
    <family_object id="oval:org.mitre.oval:obj:99" version="1" comment="This is the default family object. Only one family object should exist." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent"/>
    <rpminfo_object id="oval:org.mitre.oval:obj:1414" version="1" comment="the redhat-release rpm" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>redhat-release</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14646" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xen</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14810" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xen-libs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:14567" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xen-devel</name>
    </rpminfo_object>
    <uname_object id="oval:org.mitre.oval:obj:2759" version="1" comment="The single uname object." xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix"/>
    <patch_object id="oval:org.mitre.oval:obj:876" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <base datatype="int">108652</base>
    </patch_object>
    <file_object id="oval:org.mitre.oval:obj:1779" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path>/usr/openwin/bin</path>
      <filename>xlock</filename>
    </file_object>
  </objects>
  <states>
    <rpminfo_state id="oval:org.mitre.oval:ste:11308" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.5.4-21.el5_5.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11441" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.3.1-13.el4_8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11263" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-0.39.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11371" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-44.el4_8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9917" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.8.7-2.40.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10379" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.8-4.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9497" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.8-4.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11086" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.6.16-1.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10036" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.8-9.EL3.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9770" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.8.1-7.EL4.6</evr>
    </rpminfo_state>
    <patch_state id="oval:org.mitre.oval:ste:1199" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:1198" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">09</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10740" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.7-2.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10716" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.10-3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10673" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.7-1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10884" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.10-2.4</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1203" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oread operation="equals" datatype="boolean">true</oread>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1202" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1201" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1200" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10778" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.17-13.3.56</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10478" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.5-10.6.0.2.EL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10543" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.2-40.2.0.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10468" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.4-5.4.17.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10552" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.4-5.7.0.2.0</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10142" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.9p1-8.RHEL4.12</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1206" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.10.2001.0</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1205" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11385" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.7-11.el5_3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11303" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.4-24.9.el4_8.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11276" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.7-7.el5_3.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11343" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.4-22.el4_8.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11130" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.4-7.el5_3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10293" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.2-4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11238" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.3-2.el4_7.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10222" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.22-12.EL.8</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1208" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6904</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9674" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.13.25-14.RHEL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11264" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.9-1.3E.16</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9534" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.0-78.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11065" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.8.5-1.EL.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9904" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.17-13.3.29</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10183" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.20-3.2.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9807" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-8.1.8.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10033" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.8.2-1.EL.13.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9793" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.0.7.1-6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9366" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.14-4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9802" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.17-5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11215" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.3-1.5.el5_4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1213" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.7-24</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10461" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.48-2.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10817" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-67.0.7.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10615" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10-0.8.1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10792" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-0.22.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10868" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-16.4.el4_6</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:1485" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^6[,\.]0[,\.](2[6-9]00|3790)[,\.]\d+$</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1214" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2739.300</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10067" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.6.1p2-33.30.9</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1216" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2800.1506</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10865" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.6.0-19</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9912" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:7.0.109-3.el5.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10501" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10.0-6.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9646" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-15.0.3.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11197" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3p2-36.el5_4.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10139" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.1.15-15</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9910" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.1.19-14</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11047" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.0.9-2.30E.25</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10989" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.1.2-13.el4_7.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11058" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:5.3.1-24.el5_2.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11410" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.9-1.3E.17</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10774" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.33-0.19.el4_8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11474" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.3.8-0.52.el5_5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11422" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.33-3.29.el5_5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9934" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2002e-14</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9764" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2002d-12</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9763" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.3.3-6.rhel4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10152" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.2.5-0.7.rhel3.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9380" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.5-2E.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9604" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.3-16.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9465" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.8.1-4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9841" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.2.2-4.rhel3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10160" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.3.1-5.12</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10486" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:3.5.4-5.el5_1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10692" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.7-67.11</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11246" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.12a-24.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1221" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10.3-0.30E.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1220" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10.3-0.30E.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10562" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5.10-11</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11080" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.26-2.1.2.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10209" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.16-12.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9629" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.3-6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9308" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.3.4-14.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10001" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.12.1-6.rhel4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9786" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.10.6-7.rhel3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9768" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.10.2-0.30E</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9950" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.10.2-0.40E</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9271" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">37:1.4.3-3.0.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9351" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">8:2.01.0.a32-0.EL3.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9694" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.0.9-2.30E.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9732" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:12.17.4-4.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1223" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:2.5.STABLE3-6.3E</evr>
    </rpminfo_state>
    <inetlisteningservers_state id="oval:org.mitre.oval:ste:1222" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <program_name operation="pattern match">^.*squid</program_name>
    </inetlisteningservers_state>
    <file_state id="oval:org.mitre.oval:ste:2760" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2719.2200</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2759" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals">gopher://</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10322" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.1-48.13.0.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11236" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.6b-16.50</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11389" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.6b-22.46.el4_8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1228" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.5.5-1.3EL.0</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1227" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <sgid operation="equals" datatype="boolean">true</sgid>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1226" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1225" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1224" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10091" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.3.0-6.5.1.el5_2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10438" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.4-5.7.0.5.0</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10733" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.17-2.el5_1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10840" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.33-6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10916" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.11-1.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9974" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5-4.RHEL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9288" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5-8.RHEL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10400" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.2.0-3.el3.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9921" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.3.6-1.0.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10225" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.2-35.0.2.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10506" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.2.5-6.0.1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10380" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.5-20.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9963" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.8.0-15.0.3.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10099" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.6b-16.42</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9710" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.6b-22.42</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10439" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.3-8.0.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10394" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.1-4.0.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10106" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.22-0.rc1.9.8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1232" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.14i-10.2</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1231" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1230" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1229" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10290" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.23c-2.el5.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9779" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.9-1.3E.12</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10226" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.10-1.4E.11</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10239" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">3:2.1.5.1-34.rhel4.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10600" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-55.0.9.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10610" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-52.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10661" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-8.1.14.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10859" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.50-36.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1236" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">14:3.7.2-7.E3.2</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1235" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1234" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1233" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10015" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.9p1-8.RHEL4.9</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11299" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.0.9-2.30E.28</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9693" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.02-9.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9907" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.8.5-11.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9742" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.8.5-18.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:8965" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:0.22.0-16.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9836" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:0.22.0-12.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9923" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.4-15</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9855" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.13-14</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1240" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:1.2.2-21</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1239" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:1.2.2-21</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1238" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.13-12</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1237" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.13-12</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1244" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.11.2-22</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10925" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10.20-3.0.1.el5_3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10337" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:3.3.6-21.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10228" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:3.1.2-16.RHEL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10602" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:3.3.3-11.RHEL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10488" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.12a-16.EL4.25</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9552" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.11.2-27</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9944" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.11.17-7.RHEL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9575" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.46-32.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9642" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.46-32.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11508" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.6.2-2.el4_8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9725" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.6-7.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1251" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5.7-4.3E</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9929" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.2.0.a.20040617-4.EL4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11392" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.51.6-10.el4_8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11372" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.51.5-2.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11135" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.52.2-12.el5_4.1</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1252" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.1.0.3861</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10473" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.4.0-10.1.RHEL4.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11352" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.14-15</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9801" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:0.17-31.EL4.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:8928" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:0.17-26.EL3.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9775" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.7-42</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9140" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.3.4-12</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10808" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.4-31.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10455" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1-13a.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10803" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.1-31.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10767" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.1-13a.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10903" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.4-13a.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10742" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.8-13a.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10513" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.3.3-31.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10801" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.4-31.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10672" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.4-13a.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10763" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.6-31.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10624" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.3-13a.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10819" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.4-31.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10895" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.3.8-31.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10947" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.13-13a.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10495" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.4-13a.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10649" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.2.3-31.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10858" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.14-31.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10131" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.12-31.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10519" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.5-31.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10447" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.1.1-13a.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10482" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.3.7-13a.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10261" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1-31.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10914" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.11-13a.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10872" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.7.9-13a.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10920" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.5.2-31.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10931" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.1.2-31.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10736" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.7.11-31.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10934" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.9-31.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10371" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.3.7-8.el5_3.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11066" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.45-1.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10883" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.17.30-2.150.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10812" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">20:9.2.4-22.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10921" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">30:9.3.4-6.0.2.P1.el5_2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10502" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">20:9.2.4-28.0.1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10345" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.6-137.1.el5_2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10860" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.4-11.14.el5_1.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9256" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">20:9.2.4-16.EL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9654" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">20:9.2.4-14_EL3</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:1256" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^2\.6.*</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1255" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.746.0</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10374" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.1.30-7.4E</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10463" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.27-23</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10119" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.13-7.4E</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10217" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.2.3-59</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10452" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.4.6-8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9785" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.5-14</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9955" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.0-95.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9961" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.8.2-1.EL.13.16</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1258" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">3.70.11.40</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10065" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.6-1.4.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10082" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">37:1.7.10-1.1.3.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9966" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">37:1.7.10-1.4.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11297" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:75-5.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1259" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.5.6-15</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2767" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2715.400</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2765" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="not equal" datatype="int">3</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2764" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="not equal" datatype="int">3</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2763" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="not equal" datatype="int">3</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2762" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="not equal" datatype="int">3</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11127" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.1-4.el4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11157" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.98-2.el5_3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10944" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.98-5.el4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9623" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:3.1.3-1.8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9734" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.3a-7.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11274" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.16.0-56.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9662" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">14:0.7.2-7.E3.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9199" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">14:3.7.2-7.E3.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9878" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.1-3.RHEL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10019" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.1-1.1.RHEL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:8932" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:6.3.046-0.30E.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9084" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.9-3.8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9718" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.2-25.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10259" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-42.0.10.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10618" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.3-32.1.13</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9896" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.05-32.1.13</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10581" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:8.15.2-9.1.el5_1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10879" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.07-33.2.el4_6.1</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1266" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6906</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11451" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.3.1-17.el4_8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11171" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.5.4-25.el5_4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1285" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.1.3-6.4</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1284" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1283" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1282" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1281" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1280" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1279" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1278" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1277" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1276" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1275" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1274" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1273" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1272" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1271" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1270" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1269" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1268" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1267" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9582" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.7-3.RHEL3.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9900" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.7-13.el4.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10516" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.64-1.0.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9750" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.3.2-95.30</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9977" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.3.7.2-6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9843" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.3.15-2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10428" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">14:2.1a13-12.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10414" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">14:0.8.3-12.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10417" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">14:2.1a13-18.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10069" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">14:0.9.4-11.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10526" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">14:3.9.4-11.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10522" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">14:3.8.2-12.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9290" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.3.4-33</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9914" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.0.5-0.EL4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10951" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.2-3.el5_3.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11175" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.0-3.el4_8.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11315" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.0-11.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9217" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.1.12-3.RHEL4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10093" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.13-18</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9957" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.4-19</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11112" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.49-2.el5_3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9522" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5.7-4.3E</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11275" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.1-36.el5_5.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10927" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.1.3-6.13</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10274" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.00.rc1-7.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9686" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">3:2.1.5.1-25.rhel3.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9856" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">3:2.1.5.1-34.rhel4.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11188" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.3-94.el5_4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9618" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.46-26.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9396" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.46-26.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10185" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">3:5.8.5-36.RHEL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1289" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.2.5-0.4</evr>
    </rpminfo_state>
    <inetlisteningservers_state id="oval:org.mitre.oval:ste:1288" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <program_name operation="pattern match">^.*racoon</program_name>
    </inetlisteningservers_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9890" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.3.1-3.11</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10747" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:2.7.0-2.el5_2.1</evr>
    </rpminfo_state>
    <patch_state id="oval:org.mitre.oval:ste:3193" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">50</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3924" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">05</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:3519" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <suid datatype="boolean">true</suid>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:3222" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <suid datatype="boolean">true</suid>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:3142" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">05</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3016" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">39</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3420" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">93</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3126" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">82</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:3943" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec datatype="boolean">true</oexec>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11518" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.14.9-8.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11022" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.0-16.el4_8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11501" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.14.9-13.el4_8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10899" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.5-10</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:8948" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5.7-1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11199" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.3-2.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11443" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.3-2.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9920" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.10.1-2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10307" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.0-7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9422" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.3.7.2-9</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9584" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.3.15-5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1290" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:2.5.STABLE3-5.3E</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9574" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:21.4.13-8.ent.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9661" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:21.3-19.EL.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9893" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:21.4.15-10.EL.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9527" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:21.3-4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9660" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:6.3.046-0.40E.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9114" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:6.3.046-0.30E.3</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1292" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1291" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <suid operation="equals" datatype="boolean">true</suid>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9954" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.3-5.RHEL3.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10059" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.1.30-9.RHEL3.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10026" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.3-10.RHEL4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9755" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.1.30-11.RHEL4.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:8901" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.6.1-8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9591" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.5.7-22.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1295" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-9.0.3.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1294" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-9.0.3.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1293" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-9.0.3.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10232" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.3.1-5.13</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11465" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.7.2p1-6.el5_5</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1296" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.1.0.3932</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10355" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.8-7.2.z2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10701" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.6-8.z1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10174" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.2.4-39.rhel3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9996" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.2.4-43.rhel4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10789" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.0-12.el4_7.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11020" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.1.2-14.el5_3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10165" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.0-0.beta4.1.8</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1299" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.1.0.3931</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1298" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1297" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11302" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.7.1-7jpp.2.el5_4.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10772" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.0-6.3.el5_1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10311" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.5.12-5.1.0.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10484" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.6.13-4.0.2.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10312" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.5.4-13.6.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10338" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.1.3-5.16</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10170" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.3.1-5.19.rhel4</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1302" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6672</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1301" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10638" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-89.0.16.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10666" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.1.9-8.el4.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10848" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.1.4-10.el3</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1304" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.0.1381.279</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1303" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10893" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:179-11.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11012" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:215-5.el5_2.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10206" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:192-8.el4_7.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10112" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.14-9.RHEL4</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1306" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.2.780.1</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1307" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.50.4927.2100</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10077" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.8.5-18.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9636" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.8.5-11.1</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1309" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2713.1100</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1308" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="not equal" datatype="int">3</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11168" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.46-75.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11323" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.3-22.el5_3.2</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1310" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.139</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9162" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.20-3.2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11092" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.4.20-33.el5_5.2</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1311" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2716.2200</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11014" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.4.5-31.el4_7.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10353" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.4.7-23.el5_3.2</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1321" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.50.4613.1700</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1320" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:4365" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9519" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.2.5-0.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10633" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.6b-16.49</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11023" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7a-43.17.el4_7.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10677" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.6b-22.46.el4_7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10844" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.8b-10.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10150" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7a-9.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11072" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7a-33.25</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9830" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.5-6.6.0.EL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10277" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.2-35.2.0.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1326" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">37:1.4.2-3.0.2</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1328" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.0.1381.164</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1327" version="2" comment="Regex that matches Service Pack 6 or later" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^[Ss][Ee][Rr][Vv][Ii][Cc][Ee] [Pp][Aa][Cc][Kk] ([6-9]|([1-9][0-9]+))$</value>
    </registry_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:4645" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">15</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:4563" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">25</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:4004" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">26</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:1329" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.3649</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9439" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">37:1.7.3-19.EL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9647" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.2-24.2.0.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9447" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.2-24.6.0.EL4</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1332" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.2.769.1</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9844" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.94.1-2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9782" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.97.1-3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10027" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.14.90.0.4-39</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9704" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.15.92.0.2-15</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1333" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6901</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9736" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.11.2-22</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1335" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.125</version>
    </file_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:4330" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">10</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11331" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.6.6-3.el5_4.1</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1355" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6904</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1356" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.1.2195.6899</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10871" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.7-68</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1357" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.131.2195.6824</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2772" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.5080</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2771" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1360" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10.3-0.30E.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1359" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10.3-0.30E.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10877" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.5-12.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9677" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.9.13-13.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9164" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.2.5-6.el4.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9942" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.2.0-3.el3.2</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1367" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.50.4939.300</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:1374" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">09</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:1373" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:1372" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:1371" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">09</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:1370" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:1369" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1385" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10.3-0.90.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1384" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10.3-0.90.1</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1383" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1382" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1381" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1380" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1379" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1378" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1377" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1376" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1375" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1387" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:2.5STABLE1-3.9</evr>
    </rpminfo_state>
    <inetlisteningservers_state id="oval:org.mitre.oval:ste:1386" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <program_name operation="pattern match">^.*squid.*</program_name>
    </inetlisteningservers_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10847" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.22-0.rc1.9.20.2.el4_6.8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10885" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.17-13.3.53</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10392" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.4-11.18.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1388" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.46-32.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1392" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">37:1.4.2-0.9.0</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1391" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1390" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1389" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1393" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">37:1.4.2-0.9.0</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1397" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7a-33.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1396" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7a-33.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1395" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7a-33.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1394" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.6b-16</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1399" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.0.9-2.30E.1</evr>
    </rpminfo_state>
    <inetlisteningservers_state id="oval:org.mitre.oval:ste:1398" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <program_name operation="pattern match">^.*snmpd.*</program_name>
    </inetlisteningservers_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1400" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-9.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1404" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-4.0.2.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1403" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-4.0.2.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1402" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-4.0.2.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1405" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.11.2-14</evr>
    </rpminfo_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:4506" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="less than or equal" datatype="int">36</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:4462" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">15</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:4853" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">10</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:4537" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">17</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1406" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.1.3-3.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1407" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.46-26.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1408" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.40-21.9</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1409" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.0.7-4.EL3.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1411" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.6-7.EL</evr>
    </rpminfo_state>
    <inetlisteningservers_state id="oval:org.mitre.oval:ste:1410" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <program_name operation="pattern match">^.*rpc\.mountd</program_name>
    </inetlisteningservers_state>
    <patch_state id="oval:org.mitre.oval:ste:2778" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">51</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1414" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.20-28.9</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1413" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.20-28.9</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1412" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.20-28.9</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1418" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.1-6</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1417" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uread operation="equals" datatype="boolean">true</uread>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1416" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1415" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1429" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10.0a-0.90.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1428" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10.0a-0.90.1</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1427" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1426" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1425" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1424" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1423" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1422" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1421" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1420" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1419" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1431" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.11.2-13</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1430" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <owrite operation="equals" datatype="boolean">true</owrite>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1432" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">14:3.7.2-7.E3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1433" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.0.7-4.rhl9.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1437" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">14:3.7.2-7.9.1</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1436" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1435" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1434" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec datatype="boolean">true</oexec>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1440" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:0.22.0-6.1.0</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1439" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:0.22.0-6.1.0</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1438" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:0.22.0-6.1.0</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1443" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:0.22.0-6.0.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1442" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:0.22.0-6.0.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1441" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:0.22.0-6.0.3</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:1454" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>4.1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1453" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.1.0.3934</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1452" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.1.0.3934</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1451" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1450" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int" operation="not equal">4</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1449" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int" operation="not equal">4</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:6260" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">10.0.6858.0</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1455" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">5:1.4.1-3.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1458" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.20-30.9</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1457" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.20-30.9</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1456" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.20-30.9</evr>
    </rpminfo_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:4431" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">27</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:4480" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">51</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:4702" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">28</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:4515" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">08</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:4610" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">62</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1461" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5.10-6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1460" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5.10-6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1459" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5.10-6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1462" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.0-55.EL</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2779" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.428.0</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:4826" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <arch operation="pattern match">(^i586$)|(^ppc$)</arch>
      <epoch>(none)</epoch>
      <signature_keyid>a84edae89c800aca</signature_keyid>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:3769" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <arch operation="pattern match">i586</arch>
      <epoch>(none)</epoch>
      <version>9</version>
      <signature_keyid>a84edae89c800aca</signature_keyid>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:3186" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <arch operation="pattern match">i586</arch>
      <epoch>(none)</epoch>
      <version>9.3</version>
      <signature_keyid>a84edae89c800aca</signature_keyid>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:3307" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <arch operation="pattern match">(^i586$)|(^x86_64$)|(^ppc$)</arch>
      <epoch>(none)</epoch>
      <version>10.0</version>
      <signature_keyid>a84edae89c800aca</signature_keyid>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:3516" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <arch operation="pattern match">i586</arch>
      <epoch>(none)</epoch>
      <version>1.0</version>
      <signature_keyid>a84edae89c800aca</signature_keyid>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:4328" operator="AND" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="less than">4.7</release>
      <version datatype="version" operation="less than or equal">1.1.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:4157" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <arch>i586</arch>
      <epoch>(none)</epoch>
      <signature_keyid>a84edae89c800aca</signature_keyid>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:4726" operator="AND" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="less than">27.15</release>
      <version datatype="version" operation="less than or equal">2.0.2</version>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:4297" operator="AND" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="less than">1.6</release>
      <version datatype="version" operation="less than or equal">2.0.0</version>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1464" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.1-4</evr>
    </rpminfo_state>
    <inetlisteningservers_state id="oval:org.mitre.oval:ste:1463" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <program_name operation="pattern match">^.*httpd</program_name>
    </inetlisteningservers_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:4379" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:4570" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1465" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.2-6.3E</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1466" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.7-7.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1469" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-9.0.1.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1468" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-9.0.1.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1467" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-9.0.1.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1470" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.1-13</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1474" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:4.6.0-7.9</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1473" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1472" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1471" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1477" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.7-2</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1476" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <sgid operation="equals" datatype="boolean">true</sgid>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1475" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2782" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.213.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2781" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.213.0</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1481" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:0.75-0.9.0</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1480" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1479" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1478" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1483" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">3:2.1.1-5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1486" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">5:1.4.1-3.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1489" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:9.24-11.30.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1488" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:9.24-11.30.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1487" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:9.24-11.30.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1493" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.0-2.90.55</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1492" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <suid operation="equals" datatype="boolean">true</suid>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1491" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1490" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2171" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:9.24-10.90.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2170" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:9.24-10.90.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2169" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:9.24-10.90.1</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2168" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2167" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2166" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2165" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2164" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2163" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2162" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2161" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2160" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2159" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2158" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2157" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2156" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2155" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2154" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2153" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2152" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2151" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2150" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2149" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2148" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2147" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2146" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2145" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2144" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2143" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2142" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2141" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2140" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2139" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2138" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2137" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2136" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2135" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2134" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2133" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2132" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2131" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2130" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2129" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2128" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2127" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2126" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2125" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2124" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2123" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2122" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2121" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2120" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2119" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2118" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2117" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2116" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2115" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2114" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2113" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2112" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2111" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2110" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2109" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2108" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2107" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2106" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2105" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2104" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2103" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2102" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2101" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2100" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2099" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2098" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2097" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2096" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2095" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2094" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2093" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2092" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2091" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2090" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2089" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2088" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2087" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2086" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2085" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2084" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2083" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2082" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2081" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2080" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2079" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2078" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2077" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2076" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2075" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2074" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2073" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2072" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2071" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2070" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2069" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2068" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2067" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2066" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2065" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2064" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2063" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2062" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2061" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2060" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2059" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2058" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2057" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2056" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2055" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2054" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2053" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2052" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2051" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2050" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2049" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2048" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2047" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2046" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2045" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2044" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2043" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2042" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2041" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2040" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2039" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2038" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2037" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2036" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2035" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2034" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2033" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2032" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2031" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2030" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2029" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2028" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2027" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2026" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2025" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2024" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2023" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2022" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2021" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2020" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2019" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2018" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2017" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2016" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2015" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2014" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2013" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2012" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2011" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2010" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2009" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2008" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2007" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2006" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2005" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2004" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2003" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2002" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2001" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2000" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1999" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1998" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1997" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1996" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1995" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1994" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1993" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1992" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1991" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1990" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1989" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1988" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1987" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1986" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1985" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1984" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1983" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1982" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1981" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1980" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1979" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1978" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1977" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1976" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1975" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1974" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1973" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1972" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1971" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1970" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1969" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1968" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1967" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1966" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1965" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1964" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1963" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1962" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1961" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1960" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1959" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1958" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1957" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1956" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1955" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1954" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1953" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1952" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1951" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1950" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1949" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1948" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1947" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1946" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1945" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1944" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1943" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1942" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1941" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1940" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1939" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1938" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1937" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1936" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1935" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1934" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1933" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1932" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1931" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1930" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1929" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1928" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1927" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1926" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1925" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1924" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1923" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1922" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1921" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1920" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1919" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1918" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1917" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1916" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1915" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1914" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1913" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1912" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1911" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1910" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1909" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1908" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1907" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1906" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1905" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1904" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1903" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1902" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1901" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1900" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1899" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1898" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1897" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1896" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1895" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1894" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1893" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1892" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1891" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1890" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1889" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1888" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1887" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1886" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1885" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1884" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1883" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1882" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1881" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1880" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1879" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1878" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1877" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1876" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1875" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1874" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1873" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1872" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1871" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1870" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1869" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1868" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1867" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1866" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1865" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1864" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1863" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1862" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1861" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1860" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1859" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1858" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1857" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1856" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1855" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1854" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1853" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1852" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1851" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1850" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1849" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1848" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1847" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1846" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1845" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1844" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1843" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1842" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1841" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1840" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1839" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1838" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1837" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1836" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1835" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1834" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1833" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1832" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1831" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1830" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1829" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1828" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1827" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1826" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1825" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1824" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1823" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1822" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1821" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1820" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1819" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1818" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1817" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1816" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1815" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1814" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1813" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1812" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1811" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1810" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1809" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1808" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1807" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1806" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1805" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1804" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1803" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1802" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1801" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1800" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1799" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1798" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1797" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1796" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1795" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1794" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1793" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1792" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1791" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1790" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1789" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1788" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1787" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1786" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1785" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1784" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1783" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1782" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1781" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1780" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1779" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1778" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1777" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1776" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1775" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1774" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1773" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1772" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1771" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1770" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1769" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1768" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1767" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1766" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1765" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1764" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1763" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1762" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1761" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1760" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1759" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1758" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1757" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1756" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1755" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1754" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1753" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1752" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1751" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1750" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1749" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1748" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1747" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1746" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1745" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1744" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1743" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1742" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1741" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1740" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1739" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1738" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1737" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1736" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1735" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1734" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1733" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1732" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1731" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1730" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1729" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1728" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1727" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1726" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1725" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1724" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1723" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1722" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1721" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1720" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1719" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1718" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1717" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1716" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1715" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1714" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1713" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1712" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1711" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1710" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1709" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1708" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1707" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1706" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1705" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1704" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1703" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1702" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1701" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1700" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1699" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1698" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1697" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1696" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1695" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1694" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1693" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1692" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1691" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1690" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1689" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1688" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1687" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1686" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1685" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1684" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1683" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1682" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1681" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1680" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1679" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1678" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1677" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1676" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1675" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1674" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1673" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1672" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1671" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1670" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1669" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1668" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1667" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1666" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1665" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1664" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1663" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1662" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1661" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1660" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1659" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1658" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1657" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1656" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1655" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1654" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1653" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1652" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1651" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1650" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1649" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1648" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1647" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1646" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1645" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1644" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1643" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1642" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1641" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1640" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1639" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1638" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1637" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1636" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1635" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1634" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1633" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1632" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1631" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1630" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1629" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1628" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1627" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1626" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1625" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1624" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1623" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1622" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1621" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1620" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1619" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1618" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1617" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1616" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1615" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1614" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1613" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1612" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1611" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1610" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1609" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1608" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1607" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1606" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1605" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1604" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1603" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1602" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1601" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1600" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1599" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1598" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1597" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1596" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1595" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1594" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1593" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1592" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1591" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1590" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1589" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1588" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1587" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1586" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1585" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1584" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1583" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1582" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1581" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1580" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1579" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1578" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1577" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1576" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1575" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1574" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1573" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1572" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1571" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1570" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1569" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1568" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1567" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1566" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1565" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1564" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1563" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1562" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1561" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1560" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1559" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1558" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1557" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1556" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1555" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1554" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1553" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1552" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1551" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1550" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1549" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1548" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1547" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1546" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1545" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1544" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1543" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1542" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1541" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1540" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1539" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1538" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1537" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1536" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1535" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1534" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1533" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1532" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1531" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1530" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1529" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1528" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1527" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1526" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1525" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1524" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1523" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1522" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1521" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1520" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1519" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1518" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1517" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1516" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1515" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1514" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1513" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1512" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1511" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1510" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1509" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1508" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1507" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1506" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1505" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1504" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1503" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1502" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1501" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1500" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1499" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1498" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1497" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1496" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1495" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1494" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2173" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.7-4.1</evr>
    </rpminfo_state>
    <inetlisteningservers_state id="oval:org.mitre.oval:ste:2172" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <program_name operation="pattern match">.*</program_name>
    </inetlisteningservers_state>
    <file_state id="oval:org.mitre.oval:ste:2174" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.99</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:2783" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">19</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2177" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.88</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2718" version="2" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>5,5,0,8513</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2719" version="2" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>5,1,0,8513</value>
    </registry_state>
    <patch_state id="oval:org.mitre.oval:ste:2784" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">1</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2201" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.3000.2073.13</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2200" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>2.2</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2199" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>3.0</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2198" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">7.0.1701.44</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2197" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>3.5</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2196" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">8.0.1969.33</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:3122" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.360</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2785" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.3407</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2205" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.1.2600.160</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2207" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6987</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2228" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Installed</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2787" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.5695</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2786" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <patch_state id="oval:org.mitre.oval:ste:3553" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2233" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.81.9002.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2232" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.81.9002.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2230" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.81.9042.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2229" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.81.9042.0</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:267" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version">6.00.2900.2180</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:266" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2900.2523</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:265" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2900.2524</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:264" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <patch_state id="oval:org.mitre.oval:ste:2788" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">4</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2237" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">7.0.8002.0</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:3131" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">05</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3692" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">10</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3372" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">15</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3437" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">05</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3614" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">09</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3009" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">05</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3847" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">08</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2964" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">11</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2242" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.14-4</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2241" version="1" operator="OR" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
      <gexec operation="equals" datatype="boolean">true</gexec>
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2245" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.7071</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2244" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.7073</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2249" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.5.6-14</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2790" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.296.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2255" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6870</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2254" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <patch_state id="oval:org.mitre.oval:ste:2261" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version datatype="int">11</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2260" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version datatype="int">12</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2259" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">16</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2258" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">19</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2796" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">7</version>
    </patch_state>
    <inetd_state id="oval:org.mitre.oval:ste:2795" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <server_program operation="equals" datatype="string">/usr/dt/bin/dtspcd</server_program>
    </inetd_state>
    <file_state id="oval:org.mitre.oval:ste:2794" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2793" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2792" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:16" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.4.99.72</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2272" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2.0.0.3423</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2271" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <patch_state id="oval:org.mitre.oval:ste:2799" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">2</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2279" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.3.10-1</evr>
    </rpminfo_state>
    <patch_state id="oval:org.mitre.oval:ste:2800" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">1</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2296" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.8-0.9E</evr>
    </rpminfo_state>
    <inetlisteningservers_state id="oval:org.mitre.oval:ste:2295" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <program_name operation="pattern match">^.*ypserv.*</program_name>
    </inetlisteningservers_state>
    <file_state id="oval:org.mitre.oval:ste:7351" version="1" comment="State matches if the version of kavfm.sys is less than or equal to 2010.7.30.201" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than or equal">2010.7.30.201</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2300" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.1-11</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2299" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2298" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2297" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:2308" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">17</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2306" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">17</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2305" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">16</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2304" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">17</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2302" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2301" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2311" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:2.3.11-1.9.0</evr>
    </rpminfo_state>
    <inetlisteningservers_state id="oval:org.mitre.oval:ste:2310" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <program_name operation="pattern match">^.*xinetd.*</program_name>
    </inetlisteningservers_state>
    <file_state id="oval:org.mitre.oval:ste:2313" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6823</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2312" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2940" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2939" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <suid operation="equals" datatype="boolean">true</suid>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2938" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <sgid operation="equals" datatype="boolean">true</sgid>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:2802" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">2</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2318" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.1.6-22.EL3</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2317" version="1" operator="OR" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
      <gexec operation="equals" datatype="boolean">true</gexec>
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:4964" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">10.0.6856.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2804" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.893.1105</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:4884" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">09</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4674" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2330" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.3-8</evr>
    </rpminfo_state>
    <inetlisteningservers_state id="oval:org.mitre.oval:ste:2329" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <program_name operation="pattern match">^.*vsftpd.*</program_name>
    </inetlisteningservers_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2331" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.1.23.1-5</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2810" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>RASPHONE.PBK</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2808" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2807" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="not equal" datatype="int">4</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2805" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.4983</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:5081" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">40</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2332" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.5.2658.34</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2335" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.3.7.2-6</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2334" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <owrite operation="equals" datatype="boolean">true</owrite>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:4940" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">07</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:5396" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">09</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:5014" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">23</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4637" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">22</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4677" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2339" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.50-33</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2338" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2337" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2336" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:4291" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:3928" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.1.2600.1698</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:4752" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">42</version>
    </patch_state>
    <registry_state id="oval:org.mitre.oval:ste:4381" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft Virtual Server 2005 R2 SP1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:4607" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft Virtual PC 2007 SP1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:5051" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft Virtual PC 2007</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:3102" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft Virtual PC 2004</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:3369" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft Virtual Server 2005</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:4914" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">1.1.465.15</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:13462" version="1" comment="state holds if the version is less than 1.1.465.16" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">1.1.465.16</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:5157" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">1.1.656.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:5102" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">1.1.598.0</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:5215" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">08</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4349" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">41</version>
    </patch_state>
    <swlist_state id="oval:org.mitre.oval:ste:3359" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <version operation="pattern match">B\.11\.11\.(00.*|01\.00[0-5])</version>
    </swlist_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2340" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.11-1</evr>
    </rpminfo_state>
    <patch_state id="oval:org.mitre.oval:ste:5021" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">08</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4475" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">07</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4306" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">14</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4119" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">15</version>
    </patch_state>
    <uname_state id="oval:org.mitre.oval:ste:3450" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <os_release>B.10.10</os_release>
    </uname_state>
    <uname_state id="oval:org.mitre.oval:ste:3946" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <os_release>B.10.20</os_release>
    </uname_state>
    <uname_state id="oval:org.mitre.oval:ste:3134" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <os_release>B.10.01</os_release>
    </uname_state>
    <uname_state id="oval:org.mitre.oval:ste:3213" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <os_release>B.10.30</os_release>
    </uname_state>
    <file_state id="oval:org.mitre.oval:ste:2967" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.348</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:4716" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">38</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4498" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">26</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4188" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">13</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4323" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">14</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4292" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4695" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">07</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4694" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">06</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3980" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4524" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">33</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4673" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">34</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4357" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">37</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4474" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4559" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">25</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:5702" version="1" comment="Check for Avast! version less than 4.8.1356.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.8.1356.0</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:4653" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">65</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4535" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">46</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4139" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">11</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4426" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">45</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4279" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">54</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2943" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.17-13.3</evr>
    </rpminfo_state>
    <inetlisteningservers_state id="oval:org.mitre.oval:ste:2942" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <program_name operation="pattern match">^.*cupsd.*</program_name>
    </inetlisteningservers_state>
    <patch_state id="oval:org.mitre.oval:ste:4814" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4110" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4549" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">34</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3785" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">09</version>
    </patch_state>
    <process_state id="oval:org.mitre.oval:ste:4490" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <command operation="pattern match">automountd</command>
    </process_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2357" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:8.12.8-6.90</evr>
    </rpminfo_state>
    <inetlisteningservers_state id="oval:org.mitre.oval:ste:2356" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <program_name operation="pattern match">^.*sendmail.*</program_name>
    </inetlisteningservers_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2358" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:8.12.8-9.90</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2359" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^6\.2\.020[5-9]</value>
    </registry_state>
    <version_state id="oval:org.mitre.oval:ste:3386" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0\(7\)W5\(15c\)|12\.0\(8\)DA5|12\.0\(9\)ST1|11\.2\(23\)|12\.1\(1\)XA3|12\.1\(2\.1\)|12\.0\(10\)S1|12\.0\(5\.4\)WC1|12\.0\(5\)W5\(13d\)|11\.1\(34\)CA|11\.1\(34\)CC|11\.2\(22\.2\)|12\.0\(9\)W5\(17a\)|12\.0\(11\)SC|12\.0\(10\.6\)S|12\.0\(11a\)|12\.1\(2\)E|12\.1\(2\)EC|11\.1\(33\.2\)CA|11\.2\(22a\)P|12\.0\(10\.6\)SC|11\.1\(33\)CC1|12\.1\(2\.0\.1\)T2|12\.1\(2\)AA|12\.1\(2\)T|11\.1\(33\.1\)CC|12\.0\(11\.1\)|12\.0\(7\)W5\(15d\)|12\.1\(3\)|12\.1\(1\)AA2|12\.1\(1b\)|12\.1\(1\)DA|12\.0\(12\)|12\.1\(1\)DC|11\.2\(22\.1\)BC|11\.3\(1\)DA9|11\.2\(23\)P|11\.2\(22\.2\)P|12\.1\(1\)E2|12\.0\(11\)S|12\.0\(10\)SL|12\.0\(9\)SL1|12\.1\(1\)XE|12\.1\(1\)XD|12\.1\(1\)DB|12\.0\(10\)ST|11\.2\(22a\)|11\.2\(22a\)BC</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4062" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">11\.1(\(\d+\))?CA\d*|11\.1(\(\d+\))?CC\d*|11\.2(\(\d+\))?\d*|11\.2(\(\d+\))?BC\d*|11\.2(\(\d+\))?P\d*|11\.3(\(\d+\))?DA\d*|12\.0(\(\d+\))?\d*|12\.0(\(\d+\))?DA\d*|12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?SC\d*|12\.0(\(\d+\))?SL\d*|12\.0(\(\d+\))?ST\d*|12\.0(\(\d+\))?W5\d*|12\.0(\(\d+\))?WC\d*|12\.1(\(\d+\))?\d*|12\.1(\(\d+\))?AA\d*|12\.1(\(\d+\))?DA\d*|12\.1(\(\d+\))?DB\d*|12\.1(\(\d+\))?DC\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XZ\d*|12\.1(\(\d+\))?XD\d*|12\.1(\(\d+\))?XE\d*</major_release>
    </version_state>
    <file_state id="oval:org.mitre.oval:ste:272" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6972</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:271" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <patch_state id="oval:org.mitre.oval:ste:2363" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2362" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2361" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <version_state id="oval:org.mitre.oval:ste:4073" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">11\.2(\(\d+\))?SA\d*|12\.0(\(\d+\))?T\d*|12\.0(\(\d+\))?W5\d*|12\.0(\(\d+\))?XA\d*|12\.0(\(\d+\))?XE\d*|12\.0(\(\d+\))?XH\d*|12\.0(\(\d+\))?XJ\d*|12\.1(\(\d+\))?\d*|12\.1(\(\d+\))?AA\d*|12\.1(\(\d+\))?DA\d*|12\.1(\(\d+\))?DB\d*|12\.1(\(\d+\))?DC\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XA\d*|12\.1(\(\d+\))?XB\d*|12\.1(\(\d+\))?XC\d*|12\.1(\(\d+\))?XD\d*|12\.1(\(\d+\))?XE\d*|12\.1(\(\d+\))?XF\d*|12\.1(\(\d+\))?XG\d*|12\.1(\(\d+\))?XH\d*|12\.1(\(\d+\))?XI\d*|12\.1(\(\d+\))?XJ\d*|12\.1(\(\d+\))?XL\d*|12\.1(\(\d+\))?XP\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4014" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.01\(03a\)EC1|12\.1\(3a\)E4|12\.0\(13\)W5\(19\)|12\.1\(5\)T|12\.01\(04\)DA|12\.1\(3\)XG2|12\.1\(2\)XF2|12\.1\(3\)XP2|12\.0\(10\)W5\(18e\)|12\.01\(4\)DC|12\.01\(4\)DB|12\.0\(4\)XH4|12\.1\(5\)|12\.0\(5\)XJ6|12\.1\(5\)AA|12\.1\(05\)</major_release>
    </version_state>
    <patch_state id="oval:org.mitre.oval:ste:5323" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">14</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4912" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">15</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:5346" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">23</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4396" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">06</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4464" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4006" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">18</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4488" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2813" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6106</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2812" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <line_state id="oval:org.mitre.oval:ste:4174" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">ip inspect</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:3896" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">11\.2(\(\d+\))?P\d*|11\.3(\(\d+\))?T\d*|12\.0(\(\d+\))?\d*|12\.0(\(\d+\))?T\d*|12\.0(\(\d+\))?XA\d*|12\.0(\(\d+\))?XB\d*|12\.0(\(\d+\))?XC\d*|12\.0(\(\d+\))?XD\d*|12\.0(\(\d+\))?XE\d*|12\.0(\(\d+\))?XG\d*|12\.0(\(\d+\))?XI\d*|12\.0(\(\d+\))?XK\d*|12\.0(\(\d+\))?XM\d*|12\.0(\(\d+\))?XQ\d*|12\.0(\(\d+\))?XR\d*|12\.0(\(\d+\))?XV\d*|12\.1(\(\d+\))?\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XB\d*|12\.1(\(\d+\))?XC\d*|12\.1(\(\d+\))?XF\d*|12\.1(\(\d+\))?XG\d*|12\.1(\(\d+\))?XH\d*|12\.1(\(\d+\))?XI\d*|12\.1(\(\d+\))?XJ\d*|12\.1(\(\d+\))?XK\d*|12\.1(\(\d+\))?XL\d*|12\.1(\(\d+\))?XM\d*|12\.1(\(\d+\))?XP\d*|12\.1(\(\d+\))?XT\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YC\d*|12\.1(\(\d+\))?YE\d*|12\.1(\(\d+\))?YF\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?DD\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XE\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XI\d*|12\.2(\(\d+\))?XJ\d*|12\.2(\(\d+\))?XK\d*|12\.2(\(\d+\))?XQ\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3161" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.1\(8a\)E5|12\.2\(2\)XJ1|12\.2\(8\)T|12\.2\(5\.7\)|12\.1\(5\)YB|12\.2\(2\)XH2|12\.1\(3\)XG6|12\.2\(2\)XQ2|12\.1\(5\)XM6|12\.2\(2\)XD3|12\.0\(21\)|12\.1\(5\)YE4|12\.0\(20\.3\)|12\.1\(10\)E|12\.2\(6\)|12\.1\(5\)YC2|12\.1\(9\.6\)E|12\.1\(11\.1\)|12\.1\(11a\)|12\.2\(2\)XK5|12\.2\(1\)XE2|12\.2\(2\)XI1|12\.1\(2\)XF5|12\.2\(4\)B|12\.1\(12\)|12\.2\(5\.7\)T|12\.1\(5\)YF3|12\.1\(5\)YB1|12\.1\(5\)YB5</major_release>
    </version_state>
    <patch_state id="oval:org.mitre.oval:ste:4257" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4016" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4395" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">06</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4499" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">08</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4819" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4327" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">15</version>
    </patch_state>
    <version_state id="oval:org.mitre.oval:ste:3454" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0\(1\)W5\(5a\)|12\.0\(2\.3\)S|11\.3\(7\.2\)AA|12\.0\(1a\)W5\(5b\)|12\.0\(1\)W5\(5\.15\)|11\.3\(7\)AA2|12\.0\(2\)XE|12\.0\(2\)DB|12\.0-based|12\.0\(2a\)T1|12\.0\(1\)XB1|12\.0\(3\)T|12\.0\(2\)XD1|12\.0\(2\.4\)T|12\.0\(1\)W5\(7\)\)|12\.0\(2a\)T1|12\.0\(2\.4\)|11\.3\(7\)DB2|12\.0\(2a\)|12\.0\(1\)W5|11\.3\(8\)AA|12\.0\(3\)|12\.0\(1\)W5\(6\)|12\.0\(2\)S|12\.0\(2\)XC1</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3964" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">11\.3(\(\d+\))?AA\d*|11\.3(\(\d+\))?DB\d*|12\.0(\(\d+\))?\d*|12\.0(\(\d+\))?T\d*|12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?DB\d*|12\.0(1)W\d*|12\.0(0\.6)W5\d*|12\.0(1)XA3\d*|12\.0(1)XB\d*|12\.0(2)XC\d*|12\.0(2)XD\d*|12\.0(1)XE\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3704" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2\(17d\)SXB5|12\.2\(18\)SXD3|12\.2\(18\)SXF5</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4105" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2(\(\d+\))?SXA\d*|12\.2(\(\d+\))?SXB\d*|12\.2(\(\d+\))?SXD\d*|12\.2(\(\d+\))?SXF4</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4103" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">11\.0(\(\d+\))?\w*\d*|11\.1(\(\d+\))?\w*\d*|11\.2(\(\d+\))?\w*\d*|11\.3(\(\d+\))?\w*\d*|12\.0(\(\d+\))?\w*\d*|12\.1(\(\d+\))?\w*\d*|12\.2(\(\d+\))?\w*\d*|12\.3(\(\d+\))?\w*\d*|12\.4(\(\d+\))?\w*\d*</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:4208" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">no login</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:3561" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2\(31\)SB|12\.2\(31\)SG|12\.2\(37\)EY|12\.2\(35\)SE|12\.2\(35\)EX|12\.2\(18\)SXE4</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3423" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2(\(\d+\))?EW\d*|12\.2(\(\d+\))?EWA\d*|12\.2(\(\d+\))?EU\d*|12\.2(\(\d+\))?EX\d*|12\.2(\(\d+\))?EY\d*|12\.2(\(\d+\))?FX\d*|12\.2(\(\d+\))?FY\d*|12\.2(\(\d+\))?FZ\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?SB\d*|12\.2(\(\d+\))?SBC\d*|12\.2(\(\d+\))?SE\d*|12\.2(\(\d+\))?SEA\d*|12\.2(\(\d+\))?SEB\d*|12\.2(\(\d+\))?SEC\d*|12\.2(\(\d+\))?SED\d*|12\.2(\(\d+\))?SEE\d*|12\.2(\(\d+\))?SEF\d*|12\.2(\(\d+\))?SEG\d*|12\.2(\(\d+\))?SG\d*|12\.2(\(\d+\))?SV\d*|12\.2(\(\d+\))?SW\d*|12\.2(\(\d+\))?SXD\d*|12\.2(\(\d+\))?SXE\d*|12\.2(\(\d+\))?SZ\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4060" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0\(16\)S2|12\.0\(17\.5\)S|12\.0\(17\)S|12\.0\(16\.6\)ST1|12\.0\(17\.5\)ST|12\.0\(17\)ST</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4025" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?ST\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4091" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?SY\d*|12\.0(\(\d+\))?SZ\d*|12\.1(\(\d+\))?XU\d*|12\.1(\(\d+\))?XV\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YC\d*|12\.1(\(\d+\))?YD\d*|12\.1(\(\d+\))?YE\d*|12\.1(\(\d+\))?YF\d*|12\.1(\(\d+\))?YH\d*|12\.1(\(\d+\))?YI\d*|12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BC\d*|12\.2(\(\d+\))?BW\d*|12\.2(\(\d+\))?BY\d*|12\.2(\(\d+\))?BZ\d*|12\.2(\(\d+\))?CX\d*|12\.2(\(\d+\))?CY\d*|12\.2(\(\d+\))?CZ\d*|12\.2(\(\d+\))?DD\d*|12\.2(\(\d+\))?DX\d*|12\.2(\(\d+\))?EU\d*|12\.2(\(\d+\))?EW\d*|12\.2(\(\d+\))?EWA\d*|12\.2(\(\d+\))?EX\d*|12\.2(\(\d+\))?EY\d*|12\.2(\(\d+\))?EZ\d*|12\.2(\(\d+\))?FX\d*|12\.2(\(\d+\))?FY\d*|12\.2(\(\d+\))?FZ\d*|12\.2(\(\d+\))?IXA\d*|12\.2(\(\d+\))?IXB\d*|12\.2(\(\d+\))?IXC\d*|12\.2(\(\d+\))?IXD\d*|12\.2(\(\d+\))?JA\d*|12\.2(\(\d+\))?JK\d*|12\.2(\(\d+\))?MB\d*|12\.2(\(\d+\))?MC\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?SB\d*|12\.2(\(\d+\))?SBC\d*|12\.2(\(\d+\))?SE\d*|12\.2(\(\d+\))?SEA\d*|12\.2(\(\d+\))?SEB\d*|12\.2(\(\d+\))?SEC\d*|12\.2(\(\d+\))?SED\d*|12\.2(\(\d+\))?SEE\d*|12\.2(\(\d+\))?SEF\d*|12\.2(\(\d+\))?SEG\d*|12\.2(\(\d+\))?SG\d*|12\.2(\(\d+\))?SGA\d*|12\.2(\(\d+\))?SM\d*|12\.2(\(\d+\))?SO\d*|12\.2(\(\d+\))?SRA\d*|12\.2(\(\d+\))?SRB\d*|12\.2(\(\d+\))?SU\d*|12\.2(\(\d+\))?SV\d*|12\.2(\(\d+\))?SW\d*|12\.2(\(\d+\))?SX\d*|12\.2(\(\d+\))?SXA\d*|12\.2(\(\d+\))?SXB\d*|12\.2(\(\d+\))?SXD\d*|12\.2(\(\d+\))?SXE\d*|12\.2(\(\d+\))?SXF\d*|12\.2(\(\d+\))?SY\d*|12\.2(\(\d+\))?SZ\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?TPC\d*|12\.2(\(\d+\))?UZ\d*|12\.2(\(\d+\))?XA\d*|12\.2(\(\d+\))?XB\d*|12\.2(\(\d+\))?XC\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XE\d*|12\.2(\(\d+\))?XF\d*|12\.2(\(\d+\))?XG\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XI\d*|12\.2(\(\d+\))?XJ\d*|12\.2(\(\d+\))?XK\d*|12\.2(\(\d+\))?XL\d*|12\.2(\(\d+\))?XM\d*|12\.2(\(\d+\))?XN\d*|12\.2(\(\d+\))?XQ\d*|12\.2(\(\d+\))?XR\d*|12\.2(\(\d+\))?XT\d*|12\.2(\(\d+\))?XU\d*|12\.2(\(\d+\))?XV\d*|12\.2(\(\d+\))?XW\d*|12\.2(\(\d+\))?YA\d*|12\.2(\(\d+\))?YB\d*|12\.2(\(\d+\))?YC\d*|12\.2(\(\d+\))?YD\d*|12\.2(\(\d+\))?YE\d*|12\.2(\(\d+\))?YF\d*|12\.2(\(\d+\))?YG\d*|12\.2(\(\d+\))?YH\d*|12\.2(\(\d+\))?YJ\d*|12\.2(\(\d+\))?YK\d*|12\.2(\(\d+\))?YL\d*|12\.2(\(\d+\))?YM\d*|12\.2(\(\d+\))?YN\d*|12\.2(\(\d+\))?YO\d*|12\.2(\(\d+\))?YP\d*|12\.2(\(\d+\))?YQ\d*|12\.2(\(\d+\))?YR\d*|12\.2(\(\d+\))?YT\d*|12\.2(\(\d+\))?YU\d*|12\.2(\(\d+\))?YV\d*|12\.2(\(\d+\))?YW\d*|12\.2(\(\d+\))?YX\d*|12\.2(\(\d+\))?YY\d*|12\.2(\(\d+\))?YZ\d*|12\.2(\(\d+\))?ZA\d*|12\.2(\(\d+\))?ZB\d*|12\.2(\(\d+\))?ZC\d*|12\.2(\(\d+\))?ZD\d*|12\.2(\(\d+\))?ZE\d*|12\.2(\(\d+\))?ZF\d*|12\.2(\(\d+\))?ZG\d*|12\.2(\(\d+\))?ZH\d*|12\.2(\(\d+\))?ZJ\d*|12\.2(\(\d+\))?ZL\d*|12\.2(\(\d+\))?ZP\d*|12\.2(\(\d+\))?ZU\d*|12\.3(\(\d+\))?\d*|12\.3(\(\d+\))?B\d*|12\.3(\(\d+\))?BC\d*|12\.3(\(\d+\))?BW\d*|12\.3(\(\d+\))?JA\d*|12\.3(\(\d+\))?JEA\d*|12\.3(\(\d+\))?JEB\d*|12\.3(\(\d+\))?JK\d*|12\.3(\(\d+\))?JL\d*|12\.3(\(\d+\))?JX\d*|12\.3(\(\d+\))?T\d*|12\.3(\(\d+\))?TPC\d*|12\.3(\(\d+\))?VA\d*|12\.3(\(\d+\))?XA\d*|12\.3(\(\d+\))?XB\d*|12\.3(\(\d+\))?XC\d*|12\.3(\(\d+\))?XD\d*|12\.3(\(\d+\))?XE\d*|12\.3(\(\d+\))?XF\d*|12\.3(\(\d+\))?XG\d*|12\.3(\(\d+\))?XH\d*|12\.3(\(\d+\))?XI\d*|12\.3(\(\d+\))?XJ\d*|12\.3(\(\d+\))?XK\d*|12\.3(\(\d+\))?XQ\d*|12\.3(\(\d+\))?XR\d*|12\.3(\(\d+\))?XS\d*|12\.3(\(\d+\))?XU\d*|12\.3(\(\d+\))?XW\d*|12\.3(\(\d+\))?XY\d*|12\.3(\(\d+\))?YA\d*|12\.3(\(\d+\))?YD\d*|12\.3(\(\d+\))?YF\d*|12\.3(\(\d+\))?YG\d*|12\.3(\(\d+\))?YH\d*|12\.3(\(\d+\))?YI\d*|12\.3(\(\d+\))?YJ\d*|12\.3(\(\d+\))?YK\d*|12\.3(\(\d+\))?YM\d*|12\.3(\(\d+\))?YQ\d*|12\.3(\(\d+\))?YS\d*|12\.3(\(\d+\))?YT\d*|12\.3(\(\d+\))?YU\d*|12\.3(\(\d+\))?YX\d*|12\.3(\(\d+\))?YZ\d*|12\.4(\(\d+\))?\d*|12\.4(\(\d+\))?MR\d*|12\.4(\(\d+\))?SW\d*|12\.4(\(\d+\))?T\d*|12\.4(\(\d+\))?XA\d*|12\.4(\(\d+\))?XB\d*|12\.4(\(\d+\))?XC\d*|12\.4(\(\d+\))?XD\d*|12\.4(\(\d+\))?XE\d*|12\.4(\(\d+\))?XF\d*|12\.4(\(\d+\))?XG\d*|12\.4(\(\d+\))?XJ\d*|12\.4(\(\d+\))?XK\d*|12\.4(\(\d+\))?XL\d*|12\.4(\(\d+\))?XM\d*|12\.4(\(\d+\))?XN\d*|12\.4(\(\d+\))?XT\d*|12\.4(\(\d+\))?XV\d*|12\.4(\(\d+\))?XW\d*|12\.4(\(\d+\))?XY\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3627" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.3\(4\)TPC11b|12\.4\(6\)XT2|12\.3\(7\)JX10|12\.2\(13\)ZH9|12\.4\(15\)T|12\.3\(11\)YZ2|12\.2\(18\)SXF9|12\.3\(18a\)|12\.2\(25\)SEG4|12\.2\(4\)YA13|12\.2\(33\)XN1|12\.2\(25\)SEG3|12\.4\(4\)XC7|12\.3\(2\)XA6|12\.3\(2\)XA7|12\.2\(31\)SG3|12\.2\(18\)SXF13|12\.2\(18\)SXF12a|12\.2\(25\)EWA10|12\.2\(25\)EWA11|12\.2\(25\)EWA13|12\.2\(25\)SEF3|12\.2\(31\)SB11|12\.3\(17b\)BC8|12\.3\(11\)YK3|12\.3\(7\)JX9|12\.4\(4\)XD7|12\.2\(14\)S18|12\.4\(6\)T8|12\.2\(15\)MC2h|12\.3\(14\)YM10|12\.2\(15\)MC2k|12\.3\(8\)JEB2|12\.3\(8\)JEB1|12\.3\(19a\)|12\.4\(15\)SW|12\.2\(44\)SG|12\.3\(7\)JA5|12\.2\(25\)SEE4|12\.2\(29\)SVD|12\.3\(11\)YS3|12\.3\(14\)YM12|12\.4\(11\)SW3|12\.4\(5c\)|12\.2\(20\)S14|12\.4\(11\)XJ4|12\.2\(33\)SXH2|12\.2\(18\)S13|12\.4\(16\)MR2|12\.4\(7e\)|12\.4\(9\)T3|12\.4\(2\)XB6|12\.4\(12\)MR|12\.4\(9\)XG2|12\.3\(14\)YX11|12\.3\(23\)BC1|12\.2\(31\)SB5|12\.2\(37\)EY|12\.2\(37\)EX|12\.3\(8\)JK1|12\.2\(33\)SB|12\.2\(33\)SRB3|12\.2\(33\)SRB1|12\.3\(2\)XE6|12\.4\(10c\)|12\.4\(11\)T2|12\.3\(23\)|12\.4\(6\)XT1|12\.4\(15\)T4|12\.4\(6\)XE2|12\.3\(2\)JK3|12\.3\(8\)JEA4|12\.3\(8\)JEA2|12\.2\(33\)SRC|12\.3\(7\)XR7|12\.2\(33\)SRA7|12\.2\(33\)SRA4|12\.3\(17c\)|12\.3\(7\)XR8|12\.3\(11\)JA4|12\.4\(8d\)|12\.2\(35\)SE4|12\.4\(2\)T6|12\.2\(44\)SE1|12\.3\(8\)YG6|12\.2\(25\)SG3|12\.3\(21a\)BC2|12\.4\(3h\)|12\.2\(31\)SGA5|12\.2\(8\)TPC10b|12\.3\(14\)YX8|12\.2\(31\)SGA6|12\.2\(31\)SGA3|12\.2\(31\)SGA2|12\.3\(23\)BC|12\.4\(18a\)|12\.4\(4\)XD10|12\.2\(35\)EX1|12\.3\(8\)JK|12\.1\(5\)YE6|12\.3\(2\)XC5|12\.2\(18\)SXF10a|12\.2\(37\)SE|12\.4\(12\)|12\.2\(37\)SG|12\.2\(29b\)SV|12\.3\(7\)XI10|12\.2\(13\)ZH11|12\.2\(25\)S13|12\.2\(25\)S15|12\.2\(28\)SB7|12\.4\(4\)T8|12\.3\(2\)JL4|12\.3\(26\)|12\.3\(2\)JL2|12\.2\(40\)EX1</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3997" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EZ\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XM\d*|12\.1(\(\d+\))?XV\d*|12\.1(\(\d+\))?YA\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YC\d*|12\.1(\(\d+\))?YD\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?XA\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XE\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XQ\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4023" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.1\(5\)YC1|12\.2\(1\)XD1|12\.2\(2\)XA|12\.2\(1\)XE|12\.1\(7a\)E1|12\.2\(3\)|12\.1\(5\)YD2|12\.2\(1\)XQ|12\.1\(6\)EZ2|12\.2\(4\)T|12\.2\(1\)XH|12\.2\(1\.1\)|12\.1\(5\)XM4|12\.1\(9\)E|12\.1\(5\)XV3|12\.1\(8a\)E|12\.1\(5\)YB4|12\.2\(2\)XB</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:6956" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">^\s*ip\s*ips.*</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:3628" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?ST\d*|12\.0(\(\d+\))?SX\d*|12\.0(\(\d+\))?SY\d*|12\.0(\(\d+\))?SZ\d*|12\.1(\(\d+\))?XU\d*|12\.1(\(\d+\))?XV\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YC\d*|12\.1(\(\d+\))?YD\d*|12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BC\d*|12\.2(\(\d+\))?BW\d*|12\.2(\(\d+\))?BY\d*|12\.2(\(\d+\))?CX\d*|12\.2(\(\d+\))?DD\d*|12\.2(\(\d+\))?DX\d*|12\.2(\(\d+\))?EU\d*|12\.2(\(\d+\))?EW\d*|12\.2(\(\d+\))?EWA\d*|12\.2(\(\d+\))?EZ\d*|12\.2(\(\d+\))?IXA\d*|12\.2(\(\d+\))?MC\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?SB\d*|12\.2(\(\d+\))?SBC\d*|12\.2(\(\d+\))?SEA\d*|12\.2(\(\d+\))?SEB\d*|12\.2(\(\d+\))?SEC\d*|12\.2(\(\d+\))?SED\d*|12\.2(\(\d+\))?SEE\d*|12\.2(\(\d+\))?SEF\d*|12\.2(\(\d+\))?SG\d*|12\.2(\(\d+\))?SU\d*|12\.2(\(\d+\))?SV\d*|12\.2(\(\d+\))?SW\d*|12\.2(\(\d+\))?SX\d*|12\.2(\(\d+\))?SXA\d*|12\.2(\(\d+\))?SXB\d*|12\.2(\(\d+\))?SXD\d*|12\.2(\(\d+\))?SXE\d*|12\.2(\(\d+\))?SXF\d*|12\.2(\(\d+\))?SY\d*|12\.2(\(\d+\))?SZ\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?TPC\d*|12\.2(\(\d+\))?XA\d*|12\.2(\(\d+\))?XB\d*|12\.2(\(\d+\))?XC\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XF\d*|12\.2(\(\d+\))?XG\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XI\d*|12\.2(\(\d+\))?XJ\d*|12\.2(\(\d+\))?XK\d*|12\.2(\(\d+\))?XL\d*|12\.2(\(\d+\))?XM\d*|12\.2(\(\d+\))?XN\d*|12\.2(\(\d+\))?XQ\d*|12\.2(\(\d+\))?XS\d*|12\.2(\(\d+\))?XT\d*|12\.2(\(\d+\))?XU\d*|12\.2(\(\d+\))?XV\d*|12\.2(\(\d+\))?XW\d*|12\.2(\(\d+\))?YA\d*|12\.2(\(\d+\))?YB\d*|12\.2(\(\d+\))?YD\d*|12\.2(\(\d+\))?YE\d*|12\.2(\(\d+\))?YF\d*|12\.2(\(\d+\))?YH\d*|12\.2(\(\d+\))?YJ\d*|12\.2(\(\d+\))?YL\d*|12\.2(\(\d+\))?YM\d*|12\.2(\(\d+\))?YN\d*|12\.2(\(\d+\))?YQ\d*|12\.2(\(\d+\))?YR\d*|12\.2(\(\d+\))?YS\d*|12\.2(\(\d+\))?YT\d*|12\.2(\(\d+\))?YU\d*|12\.2(\(\d+\))?YV\d*|12\.2(\(\d+\))?YW\d*|12\.2(\(\d+\))?YX\d*|12\.2(\(\d+\))?YY\d*|12\.2(\(\d+\))?YZ\d*|12\.2(\(\d+\))?ZA\d*|12\.2(\(\d+\))?ZB\d*|12\.2(\(\d+\))?ZD\d*|12\.2(\(\d+\))?ZE\d*|12\.2(\(\d+\))?ZF\d*|12\.2(\(\d+\))?ZH\d*|12\.2(\(\d+\))?ZJ\d*|12\.2(\(\d+\))?ZL\d*|12\.2(\(\d+\))?ZN\d*|12\.3(\(\d+\))?\d*|12\.3(\(\d+\))?B\d*|12\.3(\(\d+\))?BC\d*|12\.3(\(\d+\))?BW\d*|12\.3(\(\d+\))?T\d*|12\.3(\(\d+\))?XA\d*|12\.3(\(\d+\))?XB\d*|12\.3(\(\d+\))?XC\d*|12\.3(\(\d+\))?XD\d*|12\.3(\(\d+\))?XE\d*|12\.3(\(\d+\))?XF\d*|12\.3(\(\d+\))?XG\d*|12\.3(\(\d+\))?XH\d*|12\.3(\(\d+\))?XI\d*|12\.3(\(\d+\))?XJ\d*|12\.3(\(\d+\))?XK\d*|12\.3(\(\d+\))?XQ\d*|12\.3(\(\d+\))?XR\d*|12\.3(\(\d+\))?XS\d*|12\.3(\(\d+\))?XU\d*|12\.3(\(\d+\))?XW\d*|12\.3(\(\d+\))?XX\d*|12\.3(\(\d+\))?YA\d*|12\.3(\(\d+\))?YD\d*|12\.3(\(\d+\))?YF\d*|12\.3(\(\d+\))?YG\d*|12\.3(\(\d+\))?YH\d*|12\.3(\(\d+\))?YI\d*|12\.3(\(\d+\))?YJ\d*|12\.3(\(\d+\))?YK\d*|12\.3(\(\d+\))?YM\d*|12\.3(\(\d+\))?YQ\d*|12\.3(\(\d+\))?YS\d*|12\.3(\(\d+\))?YT\d*|12\.3(\(\d+\))?YU\d*|12\.3(\(\d+\))?YX\d*|12\.3(\(\d+\))?YZ\d*|12\.4(\(\d+\))?\d*|12\.4(\(\d+\))?T\d*|12\.4(\(\d+\))?XA\d*|12\.4(\(\d+\))?XB\d*|12\.4(\(\d+\))?XC\d*|12\.4(\(\d+\))?XD\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3979" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.4\(2\)T4|12\.2\(30\)S|12\.2\(15\)MC2h|12\.4\(6\)T1|12\.2\(25\)SG1|12\.3\(11\)YZ1|12\.4\(3d\)|12\.3\(14\)YX2|12\.3\(14\)T7|12\.0\(32\)S3|12\.3\(4\)T13|12\.3\(17b\)|12\.2\(18\)IXB|12\.2\(25\)EWA6|12\.2\(25\)SEE1|12\.2\(18\)SXF5|12\.2\(31\)SB|12\.2\(25\)SV3|12\.2\(31\)SG|12\.4\(7a\)|12\.3\(7\)XI9|12\.4\(4\)XC5|12\.4\(9\)T|12\.2\(31\)XN|12\.3\(7\)XI8a|12\.2\(27\)SBC4|12\.4\(8\)|12\.2\(25\)S11|12\.2\(28\)SB2|12\.3\(14\)YM8|12\.2\(18\)SXE6|12\.4\(4\)T2|12\.0\(30\)SX|12\.2\(25\)SEF1|12\.2\(25\)SW7|12\.3\(17b\)BC3|12\.3\(11\)T10|12\.4\(2\)XB2|12\.2\(18\)SXD7a|12\.4\(5b\)|12\.2\(26\)SV|12\.4\(4\)XD2|12\.3\(18\)|12\.0\(32\)SY</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4184" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?SV\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EA\d*|12\.1(\(\d+\))?EB\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?EO\d*|12\.1(\(\d+\))?EU\d*|12\.1(\(\d+\))?EW\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?SW\d*|12\.3(\(\d+\))?\d*|12\.3B(\(\d+\))?\d*|12\.3T(\(\d+\))?\d*|12\.3XC(\(\d+\))?\d*|12\.3XD(\(\d+\))?\d*|12\.3XE(\(\d+\))?\d*|12\.3XF(\(\d+\))?\d*|12\.3XG(\(\d+\))?\d*|12\.3XH(\(\d+\))?\d*|12\.3XK(\(\d+\))?\d*|12\.3XQ(\(\d+\))?\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3884" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0\(23\)S6|12\.0\(24\)S6|12\.0\(26\)S2|12\.0\(27\)S1|12\.0\(27\)SV2|12\.1\(20\)E3|12\.1\(22\)E1|12\.1\(20\)EA1a|12\.1\(22\)EB|12\.1\(20\)EC2|12\.1\(20\)EO1|12\.1\(20\)EU1|12\.1\(20\)EW2|12\.2\(12i\)|12\.2\(21b\)|12\.2\(23\.6\)|12\.2\(24\)|12\.2\(23a\)|12\.2\(20\)S2|12\.2\(22\)S|12\.2\(23\)SW|12\.3\(5c\)|12\.3\(6a\)|12\.3\(7\.7\)|12\.3\(9\)|12\.3\(5\)B1|12\.3\(4\)T4|12\.3\(7\)T|12\.3\(8\)T|12\.3\(4\)XD2|12\.3\(4\)XG1|12\.3\(4\)XH|12\.3\(4\)XK|12\.3\(4\)XQ</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3266" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2\(13\)ZH9|12\.2\(29a\)SV|12\.3\(11\)YZ2|12\.3\(16\)|12\.3\(18a\)|12\.3\(22a\)|12\.2\(25\)SEG3|12\.2\(31\)SG|12\.2\(37\)SG1|12\.4\(1\)|12\.3\(2\)XA6|12\.2\(31\)SG1|12\.2\(31\)SG2|12\.2\(18\)SXF10|12\.2\(25\)EWA10|12\.3\(15\)|12\.4\(2\)T|12\.3\(17b\)BC8|12\.3\(11\)YK3|12\.2\(14\)S18|12\.2\(14\)S19|12\.4\(6\)T8|12\.2\(30\)S|12\.2\(15\)MC2h|12\.2\(15\)MC2j|12\.2\(27\)SV3|12\.2\(27\)SV2|12\.2\(27\)SV1|12\.3\(19a\)|12\.2\(37\)SE1|12\.2\(25\)SEE4|12\.3\(17a\)BC|12\.4\(16\)|12\.4\(5c\)|12\.3\(21b\)|12\.2\(29\)SV4|12\.3\(11\)T12|12\.2\(18\)S13|12\.3\(7\)XR7|12\.3\(22\)|12\.4\(9\)T5|12\.3\(17a\)|12\.2\(40\)SG|12\.2\(40\)SE|12\.3\(21\)BC|12\.2\(25\)SW11|12\.2\(28\)SV1|12\.3\(2\)XE5|12\.4\(7f\)|12\.4\(10c\)|12\.4\(11\)T3|12\.3\(23\)|12\.3\(7\)XI10a|12\.4\(15\)T1|12\.3\(8\)YG6|12\.3\(7\)XR7|12\.4\(4\)T8|12\.3\(17c\)|12\.3\(20a\)|12\.4\(8d\)|12\.3\(20\)|12\.2\(29\)SV|12\.2\(35\)SE5|12\.4\(2\)T6|12\.3\(8\)YG6|12\.2\(25\)SG2|12\.3\(21a\)BC3|12\.2\(8\)TPC10c|12\.4\(3h\)|12\.0\(32\)SY4|12\.3\(14\)YX9|12\.0\(32\)S8|12\.4\(12c\)|12\.2\(31\)SGA3|12\.3\(14\)YQ|12\.3\(14\)YX|12\.3\(2\)XC5|12\.3\(21\)|12\.3\(19\)|12\.2\(37\)SG|12\.2\(29b\)SV|12\.2\(35\)SE|12\.4\(13d\)|12\.2\(25\)S13|12\.2\(20\)S14|12\.2\(18\)SXE|12\.3\(14\)T|12\.3\(18\)</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:4055" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">ipv6 address</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:3507" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?ST\d*|12\.0(\(\d+\))?SX\d*|12\.0(\(\d+\))?SY\d*|12\.0(\(\d+\))?SZ\d*|12\.1(\(\d+\))?XU\d*|12\.1(\(\d+\))?XV\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YC\d*|12\.1(\(\d+\))?YD\d*|12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BC\d*|12\.2(\(\d+\))?BW\d*|12\.2(\(\d+\))?BY\d*|12\.2(\(\d+\))?CX\d*|12\.2(\(\d+\))?DD\d*|12\.2(\(\d+\))?DX\d*|12\.2(\(\d+\))?EU\d*|12\.2(\(\d+\))?EW\d*|12\.2(\(\d+\))?EWA\d*|12\.2(\(\d+\))?EZ\d*|12\.2(\(\d+\))?FZ\d*|12\.2(\(\d+\))?MC\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?SEA\d*|12\.2(\(\d+\))?SEB\d*|12\.2(\(\d+\))?SEC\d*|12\.2(\(\d+\))?SED\d*|12\.2(\(\d+\))?SEE\d*|12\.2(\(\d+\))?SEG\d*|12\.2(\(\d+\))?SG\d*|12\.2(\(\d+\))?SU\d*|12\.2(\(\d+\))?SV\d*|12\.2(\(\d+\))?SW\d*|12\.2(\(\d+\))?SX\d*|12\.2(\(\d+\))?SXA\d*|12\.2(\(\d+\))?SXB\d*|12\.2(\(\d+\))?SXD\d*|12\.2(\(\d+\))?SY\d*|12\.2(\(\d+\))?SZ\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?TPC\d*|12\.2(\(\d+\))?XA\d*|12\.2(\(\d+\))?XB\d*|12\.2(\(\d+\))?XC\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XF\d*|12\.2(\(\d+\))?XG\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XI\d*|12\.2(\(\d+\))?XJ\d*|12\.2(\(\d+\))?XK\d*|12\.2(\(\d+\))?XL\d*|12\.2(\(\d+\))?XM\d*|12\.2(\(\d+\))?XN\d*|12\.2(\(\d+\))?XQ\d*|12\.2(\(\d+\))?XT\d*|12\.2(\(\d+\))?XU\d*|12\.2(\(\d+\))?XV\d*|12\.2(\(\d+\))?XW\d*|12\.2(\(\d+\))?YA\d*|12\.2(\(\d+\))?YB\d*|12\.2(\(\d+\))?YD\d*|12\.2(\(\d+\))?YE\d*|12\.2(\(\d+\))?YF\d*|12\.2(\(\d+\))?YH\d*|12\.2(\(\d+\))?YJ\d*|12\.2(\(\d+\))?YL\d*|12\.2(\(\d+\))?YM\d*|12\.2(\(\d+\))?YN\d*|12\.2(\(\d+\))?YQ\d*|12\.2(\(\d+\))?YR\d*|12\.2(\(\d+\))?YT\d*|12\.2(\(\d+\))?YU\d*|12\.2(\(\d+\))?YV\d*|12\.2(\(\d+\))?YW\d*|12\.2(\(\d+\))?YX\d*|12\.2(\(\d+\))?YY\d*|12\.2(\(\d+\))?YZ\d*|12\.2(\(\d+\))?ZA\d*|12\.2(\(\d+\))?ZB\d*|12\.2(\(\d+\))?ZD\d*|12\.2(\(\d+\))?ZE\d*|12\.2(\(\d+\))?ZF\d*|12\.2(\(\d+\))?ZH\d*|12\.2(\(\d+\))?ZJ\d*|12\.2(\(\d+\))?ZL\d*|12\.2(\(\d+\))?ZR\d*|12\.3(\(\d+\))?\d*|12\.3(\(\d+\))?B\d*|12\.3(\(\d+\))?BC\d*|12\.3(\(\d+\))?BW\d*|12\.3(\(\d+\))?T\d*|12\.3(\(\d+\))?XA\d*|12\.3(\(\d+\))?XB\d*|12\.3(\(\d+\))?XC\d*|12\.3(\(\d+\))?XD\d*|12\.3(\(\d+\))?XE\d*|12\.3(\(\d+\))?XF\d*|12\.3(\(\d+\))?XG\d*|12\.3(\(\d+\))?XH\d*|12\.3(\(\d+\))?XI\d*|12\.3(\(\d+\))?XJ\d*|12\.3(\(\d+\))?XK\d*|12\.3(\(\d+\))?XQ\d*|12\.3(\(\d+\))?XR\d*|12\.3(\(\d+\))?XS\d*|12\.3(\(\d+\))?XU\d*|12\.3(\(\d+\))?XW\d*|12\.3(\(\d+\))?YA\d*|12\.3(\(\d+\))?YD\d*|12\.3(\(\d+\))?YF\d*|12\.3(\(\d+\))?YG\d*|12\.3(\(\d+\))?YH\d*|12\.3(\(\d+\))?YI\d*|12\.3(\(\d+\))?YJ\d*|12\.3(\(\d+\))?YK\d*|12\.3(\(\d+\))?YZ\d*</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:3918" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">ipv6 enabled</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:4069" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.1\(05\)DC01</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3160" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">11\.1(\(\d+\))?\w*\d*|11\.2(\(\d+\))?\w*\d*|11\.3(\(\d+\))?\w*\d*|12\.0(\(\d+\))?\w*\d*</major_release>
    </version_state>
    <patch_state id="oval:org.mitre.oval:ste:5262" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">23</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:5271" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">11</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4953" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <version_state id="oval:org.mitre.oval:ste:4154" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">10\.3\(16\)|10\.3\(19a\)|11\.0\(12\)|11\.0\(12a\)BT|11\.0\(17\)|11\.0\(17\)BT|11\.1\(7\)|11\.1\(7\)AA|11\.1\(7\)CA|11\.1\(9\)IA|11\.1\(15\)|11\.1\(15\)AA|11\.1\(15\)CA|11\.1\(15\)IA|11\.2\(4\)|11\.2\(4\)F|11\.2\(10\)|11\.2\(9\)P|11\.2\(4\)F1|10\.3\(19a\)</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4238" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">10\.3(\(\d+\))?\d*|11\.0(\(\d+\))?\d*|11\.1(\(\d+\))?\d*|11\.2(\(\d+\))?\d*</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:4089" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">^\s*ip http server</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:4183" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">^\s*no ip http server</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:4252" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2\(4\)JA|12\.2\(4\)JA1|12\.2\(8\)JA|12\.2\(11\)JA</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4097" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.3(7)T\d*|12\.4(3b)|12\.3(4)T\d*|12\.3(14)YX3|12\.3(2)T\d*|12\.3(11)YZ|12\.4(2)T3|12\.3(14)YM5|12\.4(2)XA2|12\.3(11)YF|12\.4(4)T|12\.4(11)T1|12\.4(6)MR1|12\.4(5)|12\.4(12)|12\.3(14)YQ8|12\.4(1c)|12\.3(11)T10|12\.4(7e)|12\.4(10b)|12\.3(14)T7|12\.4(9)T3|12\.4(6)T|12\.4(2)XB3</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3417" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.3(\(\d+\))?T\d*|12\.3(8)T\d*|12\.3(\(\d+\))?XQ\d*|12\.3(\(\d+\))?XR\d*|12\.3(\(\d+\))?XS\d*|12\.3(\(\d+\))?XW\d*|12\.3(\(\d+\))?XX\d*|12\.3(\(\d+\))?XY\d*|12\.3(\(\d+\))?YA\d*|12\.3(\(\d+\))?YD\d*|12\.3(\(\d+\))?YG\d*|12\.3(\(\d+\))?YH\d*|12\.3(\(\d+\))?YI\d*|12\.3(\(\d+\))?YJ\d*|12\.3(\(\d+\))?YK\d*|12\.3(\(\d+\))?YM\d*|12\.3(\(\d+\))?YQ\d*|12\.3(\(\d+\))?YS\d*|12\.3(\(\d+\))?YT\d*|12\.3(\(\d+\))?YX\d*|12\.3(\(\d+\))?YZ\d*|12\.4(\(\d+\))?\d*|12\.4(8)\d*|12\.4(\(\d+\))?MR\d*|12\.4(\(\d+\))?T\d*|12\.4(\(\d+\))?XA\d*|12\.4(\(\d+\))?XB\d*|12\.4(\(\d+\))?XE\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4061" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2(\(\d+\))?T\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3563" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2\(11\)T3|12\.2\(13\)T1</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4248" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.1\(8b\)E15|12\.1\(13\.5\)E|12\.1\(13\.5\)E|12\.1\(11b\)E14|12\.1\(13\)E1|12\.2\(14\)SY|12\.2\(14\)ZA</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4133" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.1(\(\d+\))?E\d*|12\.2(\(\d+\))?SY\d*|12\.2(\(\d+\))?ZA\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3467" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">11\.1\(14\)CA|11\.1\(14\)IA|11\.1\(14\)|10\.3\(19a\)|11\.2\(4\)F1|11\.0\(17\)BT|11\.2\(8\)P|11\.2\(4\)F1|11\.2\(8\)|11\.2\(4\)F\)|11\.1\(13\)CA|11\.1\(13\)IA|11\.1\(13\)AA|11\.0\(17\)|11\.1\(13\)|11\.1\(14\)AA|11\.2\(9\)</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4070" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">10\.3(\(\d+\))?\w*\d*|11\.0(\(\d+\))?\w*\d*|11\.1(\(\d+\))?\w*\d*|11\.2(\(\d+\))?\w*\d*</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:4166" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">enable secret</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:3187" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">^\s*ip http authentication</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:3551" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">^\s*ip http</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:3698" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">enable password</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:4071" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">aaa new-model</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:3370" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">11\.0(\(\d+\))?\w*\d*|11\.1(\(\d+\))?\w*\d*|11\.2(\(\d+\))?\w*\d*|11\.3(\(\d+\))?\w*\d*|12\.0(\(\d+\))?\w*\d*|12\.1(\(\d+\))?\w*\d*|12\.2(\(\d+\))?\w*\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3867" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0\(24\.2\)S|12\.0\(24\)S1|12\.2\(15\)ZN|12\.2\(14\.5\)|12\.2\(16\)B|12\.2\(16\.1\)B|12\.2\(15\.1\)S|12\.2\(14\.5\)T|12\.2\(11\)JA1</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:3401" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">no cdp enable</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:3600" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">^\s*no cdp run</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:3648" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2\(3\.6\)B|12\.2\(4\.1\)S|12\.2\(3\.6\)PB|12\.2\(3\.6\)T|12\.1\(10\.1\)|12\.2\(3\.6\)</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:3227" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">cdp enable</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:4024" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">11\.0(\(\d+\))?\w*\d*|11\.1(\(\d+\))?\w*\d*|11\.2(\(\d+\))?\w*\d*|11\.3(\(\d+\))?\w*\d*|12\.0(\(\d+\))?\w*\d*|12\.1(\(\d+\))?\w*\d*</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:4172" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">^\s*cdp run</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:4148" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">dlsw local-peer</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:4087" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0\(8\)DA3|12\.2\(13\)ZH6|12\.4\(6\)XT2|12\.4\(6\)XE2|12\.0\(3c\)W5\(8\)|12\.0\(4\)XJ5|12\.2\(18\)SXF12a|12\.2\(15\)MC2k|12\.3\(11\)YZ3|12\.4\(9\)T7|12\.2\(44\)SG|12\.3\(8\)YG7|12\.2\(18\)IXF|12\.4\(15\)SW|12\.4\(3h\)|12\.1\(4\)DC2|12\.3\(7\)XR8|12\.2\(29b\)SV|12\.4\(17\)|12\.2\(33\)XN1|12\.2\(8\)TPC10d|12\.4\(10c\)|12\.2\(18\)ZY2|12\.4\(4\)XD10|12\.1\(5\)YE1|12\.3\(14\)YM12|12\.0\(7\)DC|12\.2\(8\)YJ1|12\.3\(2\)XC5|12\.1\(22\)AY1|12\.2\(28\)SB10|12\.4\(6\)T10|12\.4\(15\)T2|12\.2\(4\)YA8|12\.2\(11\)YV1|12\.1\(27b\)E4|12\.1\(5\)XV1|12\.2\(18\)SXF12|12\.2\(18\)SXF13|12\.1\(22\)EA11|12\.3\(2\)XA7|12\.3\(2\)XE6|12\.0\(2\)XC2|12\.3\(7\)XI11|12\.3\(14\)YX11|12\.0\(7\)DB|12\.2\(20\)EX|12\.3\(11\)YS3|12\.4\(9\)XG2|12\.2\(15\)MC2h|12\.0\(4\)XI2|12\.0\(17\)S5|12\.2\(33\)SRA6|12\.2\(33\)SRA7|12\.2\(33\)SXH1|12\.4\(11\)XW6|12\.2\(25\)S15|12\.3\(8\)JK1|12\.1\(4\)DB1|12\.4\(15\)XL2|12\.4\(15\)T4|12\.2\(33\)SRB3|12\.2\(33\)SB|12\.2\(13\)ZH11|12\.2\(33\)SRC|12\.3\(24\)|12\.4\(13e\)|12\.2\(33\)SXH2|12\.4\(11\)XV|12\.4\(2\)XB6|12\.2\(31\)SB11|12\.4\(8d\)|12\.4\(18a\)|12\.2\(29a\)SV1|12\.2\(31\)SB9|12\.3\(26\)|12\.4\(16b\)|12\.3\(23\)BC1|12\.2\(25\)SW10|12\.2\(40\)EX1|12\.1\(3\)XT2|12\.1\(11\)EA1</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3322" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?\d*|12\.0(\(\d+\))?DA\d*|12\.0(\(\d+\))?DB\d*|12\.0(\(\d+\))?DC\d*|12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?T\d*|12\.0(\(\d+\))?W\d*|12\.0(\(\d+\))?WC\d*|12\.0(\(\d+\))?XA\d*|12\.0(\(\d+\))?XC\d*|12\.0(\(\d+\))?XD\d*|12\.0(\(\d+\))?XE\d*|12\.0(\(\d+\))?XG\d*|12\.0(\(\d+\))?XH\d*|12\.0(\(\d+\))?XI\d*|12\.0(\(\d+\))?XJ\d*|12\.0(\(\d+\))?XK\d*|12\.0(\(\d+\))?XN\d*|12\.0(\(\d+\))?XQ\d*|12\.0(\(\d+\))?XR\d*|12\.1(\(\d+\))?\d*|12\.1(\(\d+\))?AA\d*|12\.1(\(\d+\))?AY\d*|12\.1(\(\d+\))?DB\d*|12\.1(\(\d+\))?DC\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EA\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?EX\d*|12\.1(\(\d+\))?EZ\d*|12\.1(\(\d+\))?GA\d*|12\.1(\(\d+\))?GB\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XA\d*|12\.1(\(\d+\))?XC\d*|12\.1(\(\d+\))?XD\d*|12\.1(\(\d+\))?XG\d*|12\.1(\(\d+\))?XH\d*|12\.1(\(\d+\))?XI\d*|12\.1(\(\d+\))?XJ\d*|12\.1(\(\d+\))?XM\d*|12\.1(\(\d+\))?XP\d*|12\.1(\(\d+\))?XQ\d*|12\.1(\(\d+\))?XS\d*|12\.1(\(\d+\))?XT\d*|12\.1(\(\d+\))?XV\d*|12\.1(\(\d+\))?XW\d*|12\.1(\(\d+\))?XX\d*|12\.1(\(\d+\))?XY\d*|12\.1(\(\d+\))?XZ\d*|12\.1(\(\d+\))?YA\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YC\d*|12\.1(\(\d+\))?YD\d*|12\.1(\(\d+\))?YE\d*|12\.1(\(\d+\))?YI\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BW\d*|12\.2(\(\d+\))?BY\d*|12\.2(\(\d+\))?DD\d*|12\.2(\(\d+\))?DX\d*|12\.2(\(\d+\))?EX\d*|12\.2(\(\d+\))?IXA\d*|12\.2(\(\d+\))?IXB\d*|12\.2(\(\d+\))?IXC\d*|12\.2(\(\d+\))?IXD\d*|12\.2(\(\d+\))?IXE\d*|12\.2(\(\d+\))?MC\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?SB\d*|12\.2(\(\d+\))?SBC\d*|12\.2(\(\d+\))?SG\d*|12\.2(\(\d+\))?SRA\d*|12\.2(\(\d+\))?SRB\d*|12\.2(\(\d+\))?SU\d*|12\.2(\(\d+\))?SV\d*|12\.2(\(\d+\))?SW\d*|12\.2(\(\d+\))?SX\d*|12\.2(\(\d+\))?SXA\d*|12\.2(\(\d+\))?SXB\d*|12\.2(\(\d+\))?SXD\d*|12\.2(\(\d+\))?SXE\d*|12\.2(\(\d+\))?SXF\d*|12\.2(\(\d+\))?SXH\d*|12\.2(\(\d+\))?SY\d*|12\.2(\(\d+\))?SZ\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?TPC\d*|12\.2(\(\d+\))?XA\d*|12\.2(\(\d+\))?XB\d*|12\.2(\(\d+\))?XC\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XG\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XJ\d*|12\.2(\(\d+\))?XK\d*|12\.2(\(\d+\))?XL\d*|12\.2(\(\d+\))?XM\d*|12\.2(\(\d+\))?XN\d*|12\.2(\(\d+\))?XQ\d*|12\.2(\(\d+\))?XT\d*|12\.2(\(\d+\))?XU\d*|12\.2(\(\d+\))?XV\d*|12\.2(\(\d+\))?XW\d*|12\.2(\(\d+\))?YA\d*|12\.2(\(\d+\))?YB\d*|12\.2(\(\d+\))?YC\d*|12\.2(\(\d+\))?YD\d*|12\.2(\(\d+\))?YE\d*|12\.2(\(\d+\))?YF\d*|12\.2(\(\d+\))?YH\d*|12\.2(\(\d+\))?YJ\d*|12\.2(\(\d+\))?YL\d*|12\.2(\(\d+\))?YM\d*|12\.2(\(\d+\))?YN\d*|12\.2(\(\d+\))?YO\d*|12\.2(\(\d+\))?YT\d*|12\.2(\(\d+\))?YU\d*|12\.2(\(\d+\))?YV\d*|12\.2(\(\d+\))?YW\d*|12\.2(\(\d+\))?YX\d*|12\.2(\(\d+\))?YY\d*|12\.2(\(\d+\))?YZ\d*|12\.2(\(\d+\))?ZA\d*|12\.2(\(\d+\))?ZB\d*|12\.2(\(\d+\))?ZD\d*|12\.2(\(\d+\))?ZE\d*|12\.2(\(\d+\))?ZF\d*|12\.2(\(\d+\))?ZH\d*|12\.2(\(\d+\))?ZJ\d*|12\.2(\(\d+\))?ZL\d*|12\.2(\(\d+\))?ZU\d*|12\.2(\(\d+\))?ZY\d*|12\.3(\(\d+\))?\d*|12\.3(\(\d+\))?B\d*|12\.3(\(\d+\))?BC\d*|12\.3(\(\d+\))?BW\d*|12\.3(\(\d+\))?JK\d*|12\.3(\(\d+\))?T\d*|12\.3(\(\d+\))?VA\d*|12\.3(\(\d+\))?XA\d*|12\.3(\(\d+\))?XB\d*|12\.3(\(\d+\))?XC\d*|12\.3(\(\d+\))?XD\d*|12\.3(\(\d+\))?XE\d*|12\.3(\(\d+\))?XF\d*|12\.3(\(\d+\))?XG\d*|12\.3(\(\d+\))?XH\d*|12\.3(\(\d+\))?XI\d*|12\.3(\(\d+\))?XJ\d*|12\.3(\(\d+\))?XK\d*|12\.3(\(\d+\))?XR\d*|12\.3(\(\d+\))?XU\d*|12\.3(\(\d+\))?XW\d*|12\.3(\(\d+\))?YF\d*|12\.3(\(\d+\))?YG\d*|12\.3(\(\d+\))?YH\d*|12\.3(\(\d+\))?YI\d*|12\.3(\(\d+\))?YJ\d*|12\.3(\(\d+\))?YK\d*|12\.3(\(\d+\))?YM\d*|12\.3(\(\d+\))?YQ\d*|12\.3(\(\d+\))?YS\d*|12\.3(\(\d+\))?YT\d*|12\.3(\(\d+\))?YU\d*|12\.3(\(\d+\))?YX\d*|12\.3(\(\d+\))?YZ\d*|12\.4(\(\d+\))?\d*|12\.4(\(\d+\))?SW\d*|12\.4(\(\d+\))?T\d*|12\.4(\(\d+\))?XA\d*|12\.4(\(\d+\))?XB\d*|12\.4(\(\d+\))?XC\d*|12\.4(\(\d+\))?XD\d*|12\.4(\(\d+\))?XE\d*|12\.4(\(\d+\))?XG\d*|12\.4(\(\d+\))?XJ\d*|12\.4(\(\d+\))?XK\d*|12\.4(\(\d+\))?XL\d*|12\.4(\(\d+\))?XT\d*|12\.4(\(\d+\))?XV\d*|12\.4(\(\d+\))?XW\d*</major_release>
    </version_state>
    <file_state id="oval:org.mitre.oval:ste:2371" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3809.0</version>
    </file_state>
    <version_state id="oval:org.mitre.oval:ste:4078" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.1(\(\d+\))?DB\d*|12\.1(\(\d+\))?DC\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XB\d*|12\.1(\(\d+\))?XC\d*|12\.1(\(\d+\))?XE\d*|12\.1(\(\d+\))?XF\d*|12\.1(\(\d+\))?XG\d*|12\.1(\(\d+\))?XH\d*|12\.1(\(\d+\))?XI\d*|12\.1(\(\d+\))?XJ\d*|12\.1(\(\d+\))?XK\d*|12\.1(\(\d+\))?XL\d*|12\.1(\(\d+\))?XP\d*|12\.1(\(\d+\))?XQ\d*|12\.1(\(\d+\))?XS\d*|12\.1(\(\d+\))?XT\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4015" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.1\(5\)T|12\.1\(4\)DB|12\.1\(4\)DC|12\.2T|12\.2\(1\)|12\.1\(5\)XS|12\.1\(4\.3\)T</major_release>
    </version_state>
    <patch_state id="oval:org.mitre.oval:ste:4628" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">16</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4521" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">21</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4528" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">15</version>
    </patch_state>
    <version_state id="oval:org.mitre.oval:ste:3962" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?SX\d*|12\.0(\(\d+\))?SZ\d*|12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BC\d*|12\.2(\(\d+\))?BX\d*|12\.2(\(\d+\))?BZ\d*|12\.2(\(\d+\))?EW\d*|12\.2(\(\d+\))?EWA\d*|12\.2(\(\d+\))?JK\d*|12\.2(\(\d+\))?MC\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?SE\d*|12\.2(\(\d+\))?SU\d*|12\.2(\(\d+\))?SV\d*|12\.2(\(\d+\))?SW\d*|12\.2(\(\d+\))?SX\d*|12\.2(\(\d+\))?SXA\d*|12\.2(\(\d+\))?SXB\d*|12\.2(\(\d+\))?SXD\d*|12\.2(\(\d+\))?SY\d*|12\.2(\(\d+\))?SZ\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?YT\d*|12\.2(\(\d+\))?YU\d*|12\.2(\(\d+\))?YV\d*|12\.2(\(\d+\))?YZ\d*|12\.2(\(\d+\))?ZC\d*|12\.2(\(\d+\))?ZD\d*|12\.2(\(\d+\))?ZE\d*|12\.2(\(\d+\))?ZF\d*|12\.2(\(\d+\))?ZG\d*|12\.2(\(\d+\))?ZH\d*|12\.2(\(\d+\))?ZI\d*|12\.2(\(\d+\))?ZJ\d*|12\.2(\(\d+\))?ZL\d*|12\.2(\(\d+\))?ZN\d*|12\.2(\(\d+\))?ZO\d*|12\.2(\(\d+\))?ZP\d*|12\.3(\(\d+\))?\d*|12\.3(\(\d+\))?BC\d*|12\.3(\(\d+\))?B\d*|12\.3(\(\d+\))?BW\d*|12\.3(\(\d+\))?JA\d*|12\.3(\(\d+\))?T\d*|12\.3(\(\d+\))?XA\d*|12\.3(\(\d+\))?XB\d*|12\.3(\(\d+\))?XC\d*|12\.3(\(\d+\))?XD\d*|12\.3(\(\d+\))?XE\d*|12\.3(\(\d+\))?XF\d*|12\.3(\(\d+\))?XG\d*|12\.3(\(\d+\))?XH\d*|12\.3(\(\d+\))?XI\d*|12\.3(\(\d+\))?XJ\d*|12\.3(\(\d+\))?XK\d*|12\.3(\(\d+\))?XL\d*|12\.3(\(\d+\))?XM\d*|12\.3(\(\d+\))?XN\d*|12\.3(\(\d+\))?XQ\d*|12\.3(\(\d+\))?XR\d*|12\.3(\(\d+\))?XS\d*|12\.3(\(\d+\))?XT\d*|12\.3(\(\d+\))?XU\d*|12\.3(\(\d+\))?XX\d*|12\.3(\(\d+\))?XW\d*|12\.3(\(\d+\))?XY\d*|12\.3(\(\d+\))?XZ\d*|12\.3(\(\d+\))?YA\d*|12\.3(\(\d+\))?YD\d*|12\.3(\(\d+\))?YE\d*|12\.3(\(\d+\))?YF\d*|12\.3(\(\d+\))?YG\d*|12\.3(\(\d+\))?YH\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4041" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.3\(2\)JA|12\.2\(18\)SXD|12\.3\(7\)T|12\.2\(17d\)SXB1|12\.2\(17d\)SXB2|12\.3\(5c\)|12\.2\(20\)S3|12\.2\(20\)EWA|12\.2\(20\)S4|12\.0\(28\)S|12\.3\(4\)XD4|12\.2\(18\)S|12\.3\(2\)XE1|12\.2\(15\)JK2|12\.0\(27\)S1|12\.3\(11\)T|12\.0\(23\)S|12\.3\(7\)XL|12\.3\(7\)XI1|12\.2\(18\)EW1|12\.3\(11\)YF|12\.3\(8\)YH|12\.3\(2\)T6|12\.3\(6a\)|12\.2\(23\)SV|12\.2\(23\)SW|12\.3\(8\)YG|12\.3\(2\)XT|12\.3\(8\)YD|12\.3\(8\)T|12\.2\(13\)T14|12\.3\(7\)XI|12\.3\(4\)XQ|12\.0\(24\)S6|12\.3\(3f\)|12\.3\(2\)XZ|12\.3\(7\)XJ|12\.3\(7\)XM|12\.3\(4\)XK1|12\.2\(25\)SE|12\.3\(9a\)BC|12\.3\(4\)XG2|12\.2\(25\)S|12\.3\(4\)YE|12\.2\(14\)S9|12\.0\(26\)S2|12\.3\(7\)XS|12\.3\(7\)XR|12\.3\(8\)YA|12\.3\(9\)|12\.3\(8\)XW|12\.2\(14\)SU1|12\.3\(4\)T6|12\.2\(18\)S5|12\.3\(14\)T|12\.2\(15\)T13|12\.0\(27\)SZ|12\.3\(5a\)B2|12\.3\(8\)XX|12\.3\(8\)XY|12\.3\(2\)XC3|12\.3\(8\)XU|12\.0\(25\)S3|12\.2\(15\)T12|12\.0\(25\)SX8|12\.2\(22\)S1</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4114" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?SP\d*|12\.0(\(\d+\))?ST\d*|12\.0(\(\d+\))?XB\d*|12\.0(\(\d+\))?XM\d*|12\.0(\(\d+\))?XV\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?(1)EX\d*|12\.1(\(\d+\))?(5c)EX\d*|12\.1(\(\d+\))?(8a)EX\d*|12\.1(\(\d+\))?(9)EX\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XB\d*|12\.1(\(\d+\))?XC\d*|12\.1(\(\d+\))?XF\d*|12\.1(\(\d+\))?XG\d*|12\.1(\(\d+\))?XH\d*|12\.1(\(\d+\))?XI\d*|12\.1(\(\d+\))?XJ\d*|12\.1(\(\d+\))?XL\d*|12\.1(\(\d+\))?XM\d*|12\.1(\(\d+\))?XP\d*|12\.1(\(\d+\))?XQ\d*|12\.1(\(\d+\))?XT\d*|12\.1(\(\d+\))?XU\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YC\d*|12\.1(\(\d+\))?YD\d*|12\.1(\(\d+\))?YE\d*|12\.1(\(\d+\))?YF\d*|12\.1(\(\d+\))?YI\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BC\d*|12\.2(\(\d+\))?DA\d*|12\.2(\(\d+\))?DD\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?XA\d*|12\.2(\(\d+\))?XB\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XE\d*|12\.2(\(\d+\))?XF\d*|12\.2(\(\d+\))?XG\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XI\d*|12\.2(\(\d+\))?XJ\d*|12\.2(\(\d+\))?XK\d*|12\.2(\(\d+\))?XL\d*|12\.2(\(\d+\))?XM\d*|12\.2(\(\d+\))?XN\d*|12\.2(\(\d+\))?XQ\d*|12\.2(\(\d+\))?XR\d*|12\.2(\(\d+\))?XS\d*|12\.2(\(\d+\))?XT\d*|12\.2(\(\d+\))?XW\d*|12\.2(\(\d+\))?YA\d*|12\.2(\(\d+\))?YB\d*|12\.2(\(\d+\))?YC\d*|12\.2(\(\d+\))?YD\d*|12\.2(\(\d+\))?YF\d*|12\.2(\(\d+\))?YG\d*|12\.2(\(\d+\))?YH\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3304" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.1\(5\)YI|12\.1\(5\)T|12\.2\(8\)T|12\.1\(5\)YB|12\.0\(17\)ST5|12\.0\(20\.3\)ST2|12\.1\(3\)XG7|12\.1\(1\)T|12\.2|12\.1\(6\)EX|12\.2\(4\)YA2|12\.2\(7\.4\)S|12\.2\(4\)XM4|12\.1\(5\)XM7|12\.2\(2\)XB4|12\.2\(12\)T|12\.2\(1\)XD4|12\.2\(4\)XR|12\.0\(20\.4\)S|12\.2\(4\)BC1|12\.2\(7\.4\)T|12\.2T|12\.1\(10\)EX|12\.2\(13\)T|12\.2\(2\)XN|12\.2\(7\.4\)|12\.2\(4\)XL5|12\.1\(3\)T|12\.2\(6\)|12\.1\(5\)YC3|12\.1\(11\)E|12\.0\(20\)SP2|12\.2\(2\)XB|12\.2\(2\)XI2|12\.2\(1\)T|12\.2\(2\)XK3|12\.2\(1\)XE3|12\.1\(2\)XF6|12\.0\(17\)S4|12\.2\(2\)T|12\.2\(7\)DA|12\.1\(10\.5\)E|12\.2\(8\)BC1|12\.1\(10\.5\)EC|12\.2\(7\.6\)B|12\.2\(6b\)|12\.2\(6\.8a\)DA|12\.1\(2\)T|12\.2\(4\)YH|12\.0\(20\.4\)SP|12\.2\(4\)B1|12\.2\(4\)YG|12\.2\(4\)YB|12\.1\(11b\)E|12\.2\(4\)T|12\.0\(21\)S|12\.2\(2\)XH3|12\.1\(8b\)E8|12\.2\(7\)|12\.2\(8\)B|12\.1\(12c\)EC|12\.2\(2\)YC|12\.2\(4\)B3|12\.1\(5\)YB6</major_release>
    </version_state>
    <patch_state id="oval:org.mitre.oval:ste:4568" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">18</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4247" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">33</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4599" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">19</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4411" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <version_state id="oval:org.mitre.oval:ste:3326" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?DB\d*|12\.0(\(\d+\))?DC\d*|12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?SC\d*|12\.0(\(\d+\))?SL\d*|12\.0(\(\d+\))?SP\d*|12\.0(\(\d+\))?ST\d*|12\.0(\(\d+\))?SX\d*|12\.0(\(\d+\))?SY\d*|12\.0(\(\d+\))?SZ\d*|12\.0(\(\d+\))?T\d*|12\.0(\(\d+\))?WC\d*|12\.0(\(\d+\))?XE\d*|12\.0(\(\d+\))?XF\d*|12\.0(\(\d+\))?XG\d*|12\.0(\(\d+\))?XH\d*|12\.0(\(\d+\))?XI\d*|12\.0(\(\d+\))?XJ\d*|12\.0(\(\d+\))?XK\d*|12\.0(\(\d+\))?XL\d*|12\.0(\(\d+\))?XM\d*|12\.0(\(\d+\))?XN\d*|12\.0(\(\d+\))?XQ\d*|12\.0(\(\d+\))?XR\d*|12\.0(\(\d+\))?XS\d*|12\.0(\(\d+\))?XV\d*|12\.1(\(\d+\))?\d*|12\.1(\(\d+\))?AA\d*|12\.1(\(\d+\))?AX\d*|12\.1(\(\d+\))?AY\d*|12\.1(\(\d+\))?AZ\d*|12\.1(\(\d+\))?CX\d*|12\.1(\(\d+\))?DA\d*|12\.1(\(\d+\))?DB\d*|12\.1(\(\d+\))?DC\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EA\d*|12\.1(\(\d+\))?EB\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?EO\d*|12\.1(\(\d+\))?EU\d*|12\.1(\(\d+\))?EV\d*|12\.1(\(\d+\))?EW\d*|12\.1(\(\d+\))?EX\d*|12\.1(\(\d+\))?EY\d*|12\.1(\(\d+\))?EZ\d*|12\.1(\(\d+\))?GA\d*|12\.1(\(\d+\))?GB\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XA\d*|12\.1(\(\d+\))?XB\d*|12\.1(\(\d+\))?XC\d*|12\.1(\(\d+\))?XD\d*|12\.1(\(\d+\))?XE\d*|12\.1(\(\d+\))?XF\d*|12\.1(\(\d+\))?XG\d*|12\.1(\(\d+\))?XH\d*|12\.1(\(\d+\))?XI\d*|12\.1(\(\d+\))?XJ\d*|12\.1(\(\d+\))?XL\d*|12\.1(\(\d+\))?XM\d*|12\.1(\(\d+\))?XP\d*|12\.1(\(\d+\))?XQ\d*|12\.1(\(\d+\))?XR\d*|12\.1(\(\d+\))?XS\d*|12\.1(\(\d+\))?XT\d*|12\.1(\(\d+\))?XU\d*|12\.1(\(\d+\))?XV\d*|12\.1(\(\d+\))?XW\d*|12\.1(\(\d+\))?XX\d*|12\.1(\(\d+\))?XY\d*|12\.1(\(\d+\))?XZ\d*|12\.1(\(\d+\))?YA\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YC\d*|12\.1(\(\d+\))?YD\d*|12\.1(\(\d+\))?YE\d*|12\.1(\(\d+\))?YF\d*|12\.1(\(\d+\))?YH\d*|12\.1(\(\d+\))?YI\d*|12\.1(\(\d+\))?YJ\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BC\d*|12\.2(\(\d+\))?BW\d*|12\.2(\(\d+\))?BY\d*|12\.2(\(\d+\))?BZ\d*|12\.2(\(\d+\))?CX\d*|12\.2(\(\d+\))?CY\d*|12\.2(\(\d+\))?DA\d*|12\.2(\(\d+\))?DD\d*|12\.2(\(\d+\))?DX\d*|12\.2(\(\d+\))?EU\d*|12\.2(\(\d+\))?EW\d*|12\.2(\(\d+\))?EWA\d*|12\.2(\(\d+\))?EX\d*|12\.2(\(\d+\))?EY\d*|12\.2(\(\d+\))?EZ\d*|12\.2(\(\d+\))?FX\d*|12\.2(\(\d+\))?FY\d*|12\.2(\(\d+\))?FZ\d*|12\.2(\(\d+\))?IXA\d*|12\.2(\(\d+\))?JA\d*|12\.2(\(\d+\))?JK\d*|12\.2(\(\d+\))?MB\d*|12\.2(\(\d+\))?MC\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?SB\d*|12\.2(\(\d+\))?SBC\d*|12\.2(\(\d+\))?SE\d*|12\.2(\(\d+\))?SEA\d*|12\.2(\(\d+\))?SEB\d*|12\.2(\(\d+\))?SEC\d*|12\.2(\(\d+\))?SED\d*|12\.2(\(\d+\))?SEE\d*|12\.2(\(\d+\))?SEF\d*|12\.2(\(\d+\))?SEG\d*|12\.2(\(\d+\))?SG\d*|12\.2(\(\d+\))?SM\d*|12\.2(\(\d+\))?SO\d*|12\.2(\(\d+\))?SRA\d*|12\.2(\(\d+\))?SV\d*|12\.2(\(\d+\))?SW\d*|12\.2(\(\d+\))?SX\d*|12\.2(\(\d+\))?SXA\d*|12\.2(\(\d+\))?SXB\d*|12\.2(\(\d+\))?SXD\d*|12\.2(\(\d+\))?SXE\d*|12\.2(\(\d+\))?SXF\d*|12\.2(\(\d+\))?SZ\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?TPC\d*|12\.2(\(\d+\))?UZ\d*|12\.2(\(\d+\))?XA\d*|12\.2(\(\d+\))?XB\d*|12\.2(\(\d+\))?XC\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XE\d*|12\.2(\(\d+\))?XF\d*|12\.2(\(\d+\))?XG\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XI\d*|12\.2(\(\d+\))?XJ\d*|12\.2(\(\d+\))?XK\d*|12\.2(\(\d+\))?XL\d*|12\.2(\(\d+\))?XM\d*|12\.2(\(\d+\))?XN\d*|12\.2(\(\d+\))?XQ\d*|12\.2(\(\d+\))?XR\d*|12\.2(\(\d+\))?XS\d*|12\.2(\(\d+\))?XT\d*|12\.2(\(\d+\))?XU\d*|12\.2(\(\d+\))?XV\d*|12\.2(\(\d+\))?XW\d*|12\.2(\(\d+\))?YA\d*|12\.2(\(\d+\))?YB\d*|12\.2(\(\d+\))?YC\d*|12\.2(\(\d+\))?YD\d*|12\.2(\(\d+\))?YF\d*|12\.2(\(\d+\))?YG\d*|12\.2(\(\d+\))?YH\d*|12\.2(\(\d+\))?YJ\d*|12\.2(\(\d+\))?YK\d*|12\.2(\(\d+\))?YL\d*|12\.2(\(\d+\))?YM\d*|12\.2(\(\d+\))?YN\d*|12\.2(\(\d+\))?YO\d*|12\.2(\(\d+\))?YP\d*|12\.2(\(\d+\))?YQ\d*|12\.2(\(\d+\))?YR\d*|12\.2(\(\d+\))?YS\d*|12\.2(\(\d+\))?YT\d*|12\.2(\(\d+\))?YU\d*|12\.2(\(\d+\))?YV\d*|12\.2(\(\d+\))?YW\d*|12\.2(\(\d+\))?YY\d*|12\.2(\(\d+\))?YZ\d*|12\.2(\(\d+\))?ZA\d*|12\.2(\(\d+\))?ZB\d*|12\.2(\(\d+\))?ZC\d*|12\.2(\(\d+\))?ZD\d*|12\.2(\(\d+\))?ZE\d*|12\.2(\(\d+\))?ZF\d*|12\.2(\(\d+\))?ZG\d*|12\.2(\(\d+\))?ZH\d*|12\.2(\(\d+\))?ZJ\d*|12\.2(\(\d+\))?ZL\d*|12\.2(\(\d+\))?ZP\d*|12\.2(\(\d+\))?ZU\d*|12\.3(\(\d+\))?\d*|12\.3(\(\d+\))?B\d*|12\.3(\(\d+\))?BC\d*|12\.3(\(\d+\))?BW\d*|12\.3(\(\d+\))?JA\d*|12\.3(\(\d+\))?JK\d*|12\.3(\(\d+\))?JL\d*|12\.3(\(\d+\))?JX\d*|12\.3(\(\d+\))?T\d*|12\.3(\(\d+\))?TPC\d*|12\.3(\(\d+\))?VA\d*|12\.3(\(\d+\))?XA\d*|12\.3(\(\d+\))?XB\d*|12\.3(\(\d+\))?XC\d*|12\.3(\(\d+\))?XD\d*|12\.3(\(\d+\))?XE\d*|12\.3(\(\d+\))?XF\d*|12\.3(\(\d+\))?XG\d*|12\.3(\(\d+\))?XH\d*|12\.3(\(\d+\))?XI\d*|12\.3(\(\d+\))?XJ\d*|12\.3(\(\d+\))?XK\d*|12\.3(\(\d+\))?XQ\d*|12\.3(\(\d+\))?XR\d*|12\.3(\(\d+\))?XS\d*|12\.3(\(\d+\))?XU\d*|12\.3(\(\d+\))?XW\d*|12\.3(\(\d+\))?XY\d*|12\.3(\(\d+\))?YA\d*|12\.3(\(\d+\))?YD\d*|12\.3(\(\d+\))?YF\d*|12\.3(\(\d+\))?YG\d*|12\.3(\(\d+\))?YH\d*|12\.3(\(\d+\))?YI\d*|12\.3(\(\d+\))?YJ\d*|12\.3(\(\d+\))?YK\d*|12\.3(\(\d+\))?YM\d*|12\.3(\(\d+\))?YQ\d*|12\.3(\(\d+\))?YS\d*|12\.3(\(\d+\))?YT\d*|12\.3(\(\d+\))?YU\d*|12\.3(\(\d+\))?YX\d*|12\.3(\(\d+\))?YZ\d*|12\.4(\(\d+\))?\d*|12\.4(\(\d+\))?MR\d*|12\.4(\(\d+\))?T\d*|12\.4(\(\d+\))?XA\d*|12\.4(\(\d+\))?XB\d*|12\.4(\(\d+\))?XC\d*|12\.4(\(\d+\))?XD\d*|12\.4(\(\d+\))?XE\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3318" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.4\(10\)|12\.3\(4\)TPC11b|12\.2\(18\)SXF12a|12\.3\(7\)JX11|12\.2\(13\)ZH9|12\.3\(11\)YZ2|12\.3\(18a\)|12\.3\(2\)XC5|12\.2\(18\)SXF6|12\.2\(25\)SEG2|12\.3\(21\)|12\.3\(8\)JA3|12\.2\(18\)EW7|12\.3\(2\)XA6|12\.3\(2\)XA7|12\.2\(31\)SG1|12\.2\(31\)SG2|12\.2\(28d\)|12\.2\(18\)SXF15|12\.2\(25\)EWA14|12\.2\(29\)SVD1|12\.2\(25\)EWA11|12\.3\(14\)YM12|12\.3\(14\)YM8|12\.2\(29\)SM2|12\.2\(29\)SM3|12\.2\(25\)SEF2|12\.1\(1\)E2|12\.3\(17b\)BC3|12\.2\(10\)DA4|12\.2\(20\)EWA3|12\.2\(31\)SB12|12\.3\(11\)YK3|12\.1\(22\)EA10|12\.4\(4\)XD4|12\.2\(14\)S18|12\.2\(29b\)|12\.2\(15\)MC2h|12\.4\(6\)XE2|12\.2\(27\)SV5|12\.3\(7\)XR7|12\.4\(6\)T4|12\.3\(19a\)|12\.2\(25\)EWA8|12\.2\(44\)SG|12\.2\(25\)SEE3|12\.3\(7\)JA5|12\.2\(29\)SVD1|12\.0\(2\)XF|12\.2\(31\)SB3x|12\.4\(4\)XC5|12\.2\(18\)SXF15|12\.4\(7c\)|12\.4\(5c\)|12\.2\(33\)XN1|12\.0\(33\)S|12\.2\(20\)S13|12\.2\(33\)SXH3|12\.2\(18\)SXE6a|12\.2\(29\)SV3|12\.2\(18\)S13|12\.2\(33\)SRC1|12\.3\(11\)T11|12\.4\(8b\)|12\.2\(18\)SXD7a|12\.4\(9\)T1|12\.3\(14\)YX11|12\.3\(21\)BC|12\.3\(8\)JK2|12\.2\(28\)SV1|12\.2\(37\)EY|12\.2\(40\)|12\.3\(8\)JK1|12\.4\(9\)MR|12\.4\(3f\)|12\.3\(2\)XE5|12\.1\(19\)EO6|12\.2\(27c\)|12\.2\(44\)EX|12\.0\(7\)SC|12\.4\(18b\)|12\.3\(11\)JA|12\.4\(15\)T5|12\.3\(2\)JK4|12\.3\(2\)JK2|12\.2\(18\)ZU1|12\.2\(29b\)SV|12\.0\(30\)SZ4|12\.2\(33\)SRA1|12\.3\(17c\)|12\.4\(4\)T5|12\.0\(1\)XE|12\.3\(20a\)|12\.2\(29a\)SV1|12\.3\(8\)YG6|12\.4\(2\)XB3|12\.2\(31\)SB2|12\.4\(2\)T6|12\.2\(44\)SE2|12\.2\(25\)SG1|12\.0\(32\)S5|12\.3\(7\)XI8a|12\.2\(12\)DA11|12\.2\(25\)SW8|12\.3\(14\)YX4|12\.2\(25\)EWA7|12\.0\(28\)S1|12\.2\(31\)SGA7|12\.0\(32\)SY1|12\.2\(18\)SO7|12\.1\(7\)CX|12\.0\(5\)WC16|12\.2\(18\)SXF10a|12\.4\(11\)T|12\.2\(37\)SG|12\.1\(22\)EA11|12\.0\(2\)XF1|12\.2\(35\)SE|12\.0\(4\)XI2|12\.2\(13\)ZH11|12\.2\(25\)S11|12\.2\(28\)SB4|12\.0\(2\)DB|12\.2\(26c\)|12\.0\(1\)T|12\.2\(35\)EX|12\.3\(2\)JL4|12\.3\(2\)JL1|12\.2\(20\)EW4</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:11105" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">^\s*snmp-server\s+.*v3\s+.*$</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:3063" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">11\.1(\(\d+\))?CC\d*|12\.0(\(\d+\))?\d*|12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?ST\d*|12\.0(\(\d+\))?T\d*|12\.0(\(\d+\))?W5\d*|12\.1(\(\d+\))?\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XM\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?T\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3211" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0\(20\.4\)W5\(24\.7\)|11\.1\(36\)CC3|12\.2\(2\.5\)|12\.1\(9\.5\)EC|12\.0\(18\.3\)S|12\.1\(9\.2\)|12\.0\(17\)ST4|12\.2\(3\)|12\.2\(2\.4\)T|12\.0\(19\)ST|12\.0\(18\.3\)ST|12\.0\(19\)S|12\.0\(20\.4\)|12\.1\(10\)|12\.1\(9\.5\)E|12\.1\(7\.5\)EC1|12\.1\(8\.5\)E2|12\.1\(5\)|12\.1\(8a\)E|12\.2\(3\.3\)S|12\.2\(4\)T</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:4259" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">parameter-map type tms</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:3994" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">method tls</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:3579" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">crypto signaling default trustpoint</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:3115" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.4\(10\)|12\.4\(7d\)|12\.4\(6\)T7|12\.2\(18\)SXF8|12\.3\(14\)YX7|12\.2\(25\)EWA9|12\.2\(25\)SEE3|12\.2\(31\)SGA1|12\.3\(8\)XX2d|12\.4\(4\)XC6|12\.4\(11\)T1|12\.4\(11\)SW1|12\.2\(37\)SG|12\.4\(11\)XJ2|12\.2\(33\)SRB|12\.2\(33\)SRA3|12\.3\(17b\)BC6|12\.4\(9\)T3|12\.3\(22\)|12\.2\(31\)SB2|12\.2\(35\)SE2|12\.4\(4\)XD6|12\.3\(21a\)BC1</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3493" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">(^12\.2(\([1-9]\d?[a-z]?\))?(B[CZ]?|C[X-Z]|E(WA|[X-Z])|F[X-Z]|J[AK]|S(B|E[A-G]?|G[A]?|R[AB]|X[D-F])|T|XR|Y([UV])?|Z([D-H]|[JLNUW]))[1-9]?$)|(^12\.3((\([1-9]\d?[a-z]?\))?(B[C]?|J([AKLX]|EA)|T(PC)?|X([A-K]|[QRSUWX])|Y([AD]|[F-I]|[KQ]|[S-U]|[XZ]))[1-9]?)?$)|(^12\.4((\([1-9]\d?[a-z]?\))?(T|SW|X([A-E]|J))[1-9]?)?$)</major_release>
    </version_state>
    <registry_state id="oval:org.mitre.oval:ste:17879" version="1" comment="The registry key has a value of Microsoft Search Server 2008" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft Search Server 2008</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:4572" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">12.0.6318.5000</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:4142" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3520" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">22</version>
    </patch_state>
    <version_state id="oval:org.mitre.oval:ste:4037" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2\(14\)ZA8| 12\.2\(14\)SY4|12\.1\(13\)E14|12\.1\.\(19\)E7|12\.1\(20\)E3|12\.1\(22\)E</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3084" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2(\(\d+\))?ZA\d*|12\.2(\(\d+\))?SY\d*|12\.1(\(\d+\))?E\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4008" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0\(16\)S1|12\.0\(16\.5\)S|12\.0\(17\)S|12\.0\(13\.6\)S2|12\.0\(14\.1\)S|12\.0\(14\.1\)S|12\.0\(16\.6\)S|12\.0\(15\.6\)ST3|12\.0\(16\.5\)ST|12\.0\(16\)ST|12\.0\(14\.3\)ST</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:3707" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">no ip unreachables</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:3090" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?ST\d*</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:4189" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">aaa authentication login \S+ group radius local none</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:4027" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">aaa authentication ppp \S+ group radius local none</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:4215" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">aaa authentication login \S+ group radius none</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:3274" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BC\d*|12\.2(\(\d+\))?BW\d*|12\.2(\(\d+\))?BX\d*|12\.2(\(\d+\))?BY\d*|12\.2(\(\d+\))?BZ\d*|12\.2(\(\d+\))?CX\d*|12\.2(\(\d+\))?CY\d*|12\.2(\(\d+\))?CZ\d*|12\.2(\(\d+\))?EW\d*|12\.2(\(\d+\))?EWA\d*|12\.2(\(\d+\))?EY\d*|12\.2(\(\d+\))?EZ\d*|12\.2(\(\d+\))?JA\d*|12\.2(\(\d+\))?JK\d*|12\.2(\(\d+\))?MB\d*|12\.2(\(\d+\))?MC\d*|12\.2(\(\d+\))?MX\d*|12\.2(\(\d+\))?SE\d*|12\.2(\(\d+\))?SXD\d*|12\.2(\(\d+\))?SXE\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?XB\d*|12\.2(\(\d+\))?XC\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XE\d*|12\.2(\(\d+\))?XF\d*|12\.2(\(\d+\))?XG\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XI\d*|12\.2(\(\d+\))?XJ\d*|12\.2(\(\d+\))?XK\d*|12\.2(\(\d+\))?XL\d*|12\.2(\(\d+\))?XM\d*|12\.2(\(\d+\))?XQ\d*|12\.2(\(\d+\))?XR\d*|12\.2(\(\d+\))?XT\d*|12\.2(\(\d+\))?XW\d*|12\.2(\(\d+\))?YA\d*|12\.2(\(\d+\))?YB\d*|12\.2(\(\d+\))?YC\d*|12\.2(\(\d+\))?YD\d*|12\.2(\(\d+\))?YF\d*|12\.2(\(\d+\))?YG\d*|12\.2(\(\d+\))?YH\d*|12\.2(\(\d+\))?YJ\d*|12\.2(\(\d+\))?YL\d*|12\.2(\(\d+\))?YM\d*|12\.2(\(\d+\))?YN\d*|12\.2(\(\d+\))?YP\d*|12\.2(\(\d+\))?YQ\d*|12\.2(\(\d+\))?YR\d*|12\.2(\(\d+\))?YT\d*|12\.2(\(\d+\))?YU\d*|12\.2(\(\d+\))?YV\d*|12\.2(\(\d+\))?YW\d*|12\.2(\(\d+\))?YY\d*|12\.2(\(\d+\))?ZB\d*|12\.2(\(\d+\))?ZC\d*|12\.2(\(\d+\))?ZD\d*|12\.2(\(\d+\))?ZE\d*|12\.2(\(\d+\))?ZF\d*|12\.2(\(\d+\))?ZG\d*|12\.2(\(\d+\))?ZH\d*|12\.2(\(\d+\))?ZJ\d*|12\.2(\(\d+\))?ZL\d*|12\.2(\(\d+\))?ZN\d*|12\.2(\(\d+\))?ZO\d*|12\.2(\(\d+\))?ZP\d*|12\.3(\(\d+\))?\d*|12\.3(\(\d+\))?B\d*|12\.3(\(\d+\))?BC\d*|12\.3(\(\d+\))?BW\d*|12\.3(\(\d+\))?JA\d*|12\.3(\(\d+\))?T\d*|12\.3(\(\d+\))?XA\d*|12\.3(\(\d+\))?XB\d*|12\.3(\(\d+\))?XC\d*|12\.3(\(\d+\))?XD\d*|12\.3(\(\d+\))?XE\d*|12\.3(\(\d+\))?XF\d*|12\.3(\(\d+\))?XG\d*|12\.3(\(\d+\))?XH\d*|12\.3(\(\d+\))?XI\d*|12\.3(\(\d+\))?XJ\d*|12\.3(\(\d+\))?XK\d*|12\.3(\(\d+\))?XL\d*|12\.3(\(\d+\))?XM\d*|12\.3(\(\d+\))?XN\d*|12\.3(\(\d+\))?XQ\d*|12\.3(\(\d+\))?XR\d*|12\.3(\(\d+\))?XS\d*|12\.3(\(\d+\))?XT\d*|12\.3(\(\d+\))?XU\d*|12\.3(\(\d+\))?XW\d*|12\.3(\(\d+\))?XX\d*|12\.3(\(\d+\))?XY\d*|12\.3(\(\d+\))?YA\d*|12\.3(\(\d+\))?YB\d*|12\.3(\(\d+\))?YD\d*|12\.3(\(\d+\))?YF\d*|12\.3(\(\d+\))?YG\d*|12\.3(\(\d+\))?YH\d*|12\.3(\(\d+\))?YI\d*|12\.3(\(\d+\))?YJ\d*|12\.3(\(\d+\))?YK\d*|12\.3(\(\d+\))?YL\d*|12\.3(\(\d+\))?YN\d*|12\.3(\(\d+\))?YR\d*|12\.3(\(\d+\))?YS\d*|12\.3(\(\d+\))?YQ\d*|12\.4(\(\d+\))?\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3958" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.3\(7\)JA|12\.3\(11\)YF|12\.3\(11\)YJ|12\.3\(11\)YK|12\.3\(8\)T4|12\.3\(11\)YL|12\.3|12\.2\(25\)EWA2|12\.2\(18\)SXE2|12\.2\(18\)SXD5|12\.3\(11\)T|12\.3\(14\)YQ|12\.3\(8\)YI|12\.3\(11\)|12\.4\(1\)|12\.3\(8\)YG|12\.3\(8\)YD|12\.2\(25\)EY2|12\.2\(25\)SEC|12\.3\(8\)XY5|12\.3\(11\)XL|12\.3\(7\)T11|12\.2\(25\)SEB2|12\.3\(8\)YH|12\.2SW|12\.3\(7\)XI6|12\.3\(11\)YR|12\.3\(10\)|12\.3\(11\)YS|12\.3\(14\)T|12\.3\(13\)BC|12\.3\(11\)YN</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:4235" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">aaa authentication ppp \S+ group radius none</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:3526" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?ST\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4019" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0\(16\.6\)S2|12\.0\(17\.3\)S|12\.0\(17\)S|12\.0\(17\.3\)ST|12\.0\(18\)ST</major_release>
    </version_state>
    <registry_state id="oval:org.mitre.oval:ste:2518" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="not equal" datatype="int">4</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2376" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6862</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2375" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <line_state id="oval:org.mitre.oval:ste:4229" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">cns config \S+ \S+ encrypt</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:3109" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?T\d*|12\.0(\(\d+\))?WC\d*|12\.0(\(\d+\))?XE\d*|12\.0(\(\d+\))?XH\d*|12\.0(\(\d+\))?XI\d*|12\.0(\(\d+\))?XK\d*|12\.0(\(\d+\))?XL\d*|12\.0(\(\d+\))?XN\d*|12\.0(\(\d+\))?XQ\d*|12\.0(\(\d+\))?XR\d*|12\.0(\(\d+\))?XV\d*|12\.1(\(\d+\))?\d*|12\.1(\(\d+\))?AY\d*|12\.1(\(\d+\))?CX\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EA\d*|12\.1(\(\d+\))?EB\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?EW\d*|12\.1(\(\d+\))?EX\d*|12\.1(\(\d+\))?EY\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XC\d*|12\.1(\(\d+\))?XD\d*|12\.1(\(\d+\))?XF\d*|12\.1(\(\d+\))?XG\d*|12\.1(\(\d+\))?XH\d*|12\.1(\(\d+\))?XI\d*|12\.1(\(\d+\))?XJ\d*|12\.1(\(\d+\))?XL\d*|12\.1(\(\d+\))?XM\d*|12\.1(\(\d+\))?XP\d*|12\.1(\(\d+\))?XQ\d*|12\.1(\(\d+\))?XT\d*|12\.1(\(\d+\))?XU\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YC\d*|12\.1(\(\d+\))?YD\d*|12\.1(\(\d+\))?YE\d*|12\.1(\(\d+\))?YF\d*|12\.1(\(\d+\))?YI\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BC\d*|12\.2(\(\d+\))?BW\d*|12\.2(\(\d+\))?BY\d*|12\.2(\(\d+\))?BZ\d*|12\.2(\(\d+\))?CX\d*|12\.2(\(\d+\))?CY\d*|12\.2(\(\d+\))?CZ\d*|12\.2(\(\d+\))?DD\d*|12\.2(\(\d+\))?EW\d*|12\.2(\(\d+\))?EWA\d*|12\.2(\(\d+\))?EX\d*|12\.2(\(\d+\))?EY\d*|12\.2(\(\d+\))?EZ\d*|12\.2(\(\d+\))?FX\d*|12\.2(\(\d+\))?FY\d*|12\.2(\(\d+\))?FZ\d*|12\.2(\(\d+\))?JA\d*|12\.2(\(\d+\))?JK\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?SB\d*|12\.2(\(\d+\))?SBC\d*|12\.2(\(\d+\))?SE\d*|12\.2(\(\d+\))?SEA\d*|12\.2(\(\d+\))?SEB\d*|12\.2(\(\d+\))?SEC\d*|12\.2(\(\d+\))?SED\d*|12\.2(\(\d+\))?SEE\d*|12\.2(\(\d+\))?SEF\d*|12\.2(\(\d+\))?SEG\d*|12\.2(\(\d+\))?SG\d*|12\.2(\(\d+\))?SGA\d*|12\.2(\(\d+\))?SRA\d*|12\.2(\(\d+\))?SU\d*|12\.2(\(\d+\))?SV\d*|12\.2(\(\d+\))?SW\d*|12\.2(\(\d+\))?SX\d*|12\.2(\(\d+\))?SXA\d*|12\.2(\(\d+\))?SXB\d*|12\.2(\(\d+\))?SXD\d*|12\.2(\(\d+\))?SXE\d*|12\.2(\(\d+\))?SXF\d*|12\.2(\(\d+\))?SY\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?TPC\d*|12\.2(\(\d+\))?XA\d*|12\.2(\(\d+\))?XB\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XE\d*|12\.2(\(\d+\))?XF\d*|12\.2(\(\d+\))?XG\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XI\d*|12\.2(\(\d+\))?XJ\d*|12\.2(\(\d+\))?XK\d*|12\.2(\(\d+\))?XL\d*|12\.2(\(\d+\))?XM\d*|12\.2(\(\d+\))?XN\d*|12\.2(\(\d+\))?XQ\d*|12\.2(\(\d+\))?XR\d*|12\.2(\(\d+\))?XS\d*|12\.2(\(\d+\))?XT\d*|12\.2(\(\d+\))?XU\d*|12\.2(\(\d+\))?XV\d*|12\.2(\(\d+\))?XW\d*|12\.2(\(\d+\))?YA\d*|12\.2(\(\d+\))?YB\d*|12\.2(\(\d+\))?YC\d*|12\.2(\(\d+\))?YD\d*|12\.2(\(\d+\))?YE\d*|12\.2(\(\d+\))?YF\d*|12\.2(\(\d+\))?YJ\d*|12\.2(\(\d+\))?YL\d*|12\.2(\(\d+\))?YM\d*|12\.2(\(\d+\))?YN\d*|12\.2(\(\d+\))?YQ\d*|12\.2(\(\d+\))?YR\d*|12\.2(\(\d+\))?YU\d*|12\.2(\(\d+\))?YV\d*|12\.2(\(\d+\))?YW\d*|12\.2(\(\d+\))?YX\d*|12\.2(\(\d+\))?YY\d*|12\.2(\(\d+\))?YZ\d*|12\.2(\(\d+\))?ZA\d*|12\.2(\(\d+\))?ZB\d*|12\.2(\(\d+\))?ZD\d*|12\.2(\(\d+\))?ZE\d*|12\.2(\(\d+\))?ZF\d*|12\.2(\(\d+\))?ZH\d*|12\.2(\(\d+\))?ZJ\d*|12\.2(\(\d+\))?ZL\d*|12\.2(\(\d+\))?ZN\d*|12\.2(\(\d+\))?ZU\d*|12\.2(\(\d+\))?ZV\d*|12\.2(\(\d+\))?ZW\d*|12\.2(\(\d+\))?ZX\d*|12\.3(\(\d+\))?\d*|12\.3(\(\d+\))?B\d*|12\.3(\(\d+\))?BC\d*|12\.3(\(\d+\))?JA\d*|12\.3(\(\d+\))?JEA\d*|12\.3(\(\d+\))?JK\d*|12\.3(\(\d+\))?JX\d*|12\.3(\(\d+\))?T\d*|12\.3(\(\d+\))?TPC\d*|12\.3(\(\d+\))?XA\d*|12\.3(\(\d+\))?XB\d*|12\.3(\(\d+\))?XC\d*|12\.3(\(\d+\))?XD\d*|12\.3(\(\d+\))?XE\d*|12\.3(\(\d+\))?XF\d*|12\.3(\(\d+\))?XG\d*|12\.3(\(\d+\))?XH\d*|12\.3(\(\d+\))?XI\d*|12\.3(\(\d+\))?XJ\d*|12\.3(\(\d+\))?XK\d*|12\.3(\(\d+\))?XQ\d*|12\.3(\(\d+\))?XR\d*|12\.3(\(\d+\))?XS\d*|12\.3(\(\d+\))?XU\d*|12\.3(\(\d+\))?XW\d*|12\.3(\(\d+\))?XX\d*|12\.3(\(\d+\))?YA\d*|12\.3(\(\d+\))?YD\d*|12\.3(\(\d+\))?YF\d*|12\.3(\(\d+\))?YG\d*|12\.3(\(\d+\))?YH\d*|12\.3(\(\d+\))?YI\d*|12\.3(\(\d+\))?YK\d*|12\.3(\(\d+\))?YQ\d*|12\.3(\(\d+\))?YS\d*|12\.3(\(\d+\))?YT\d*|12\.3(\(\d+\))?YU\d*|12\.3(\(\d+\))?YX\d*|12\.3(\(\d+\))?YZ\d*|12\.4(\(\d+\))?\d*|12\.4(\(\d+\))?T\d*|12\.4(\(\d+\))?XA\d*|12\.4(\(\d+\))?XB\d*|12\.4(\(\d+\))?XC\d*|12\.4(\(\d+\))?XD\d*|12\.4(\(\d+\))?XE\d*</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:3998" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">^\s*ip http secure-server</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:4018" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.4\(10\)|12\.4\(7d\)|12\.4\(6\)T7|12\.2\(46\)|12\.2\(18\)SXF8|12\.2\(25\)EWA9|12\.2\(25\)SEE3|12\.2\(25\)SEG2|12\.3\(8\)XX2d|11-June-2007|12\.4\(8c\)|12\.3\(11\)JA|12\.4\(4\)XC4|12\.0\(5\)WC17|12\.4\(3h\)|12\.2\(28\)SB4b|12\.3\(21a\)|12\.4\(11\)T|12\.1\(26\)E8|12\.1\(27b\)E2|12\.3\(8\)JEA|12\.2\(18\)S0a|12\.2\(35\)SE|12\.2\(31\)SGA2|12\.2\(40a\)|12\.2\(25\)S12|12\.2\(18\)SXE6a|12\.2\(33\)SRA2|12\.1\(22\)EA9|12\.2\(29\)SV3|12\.4\(4\)T6|12\.3\(17b\)BC5|12\.1\(26\)EB2|12\.3\(22\)|12\.4\(9\)T3|12\.2\(14\)S13a|12\.2\(25\)SW9|12\.2\(8\)TPC10b|12\.2\(20\)S9a|12\.2\(37\)SG|12\.3\(21\)BC|12\.2\(31\)SB2|12\.2\(28\)SV2|12\.4\(4\)XD5</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:3581" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">^\s*no ip http secure-server</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:4021" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">crypto isakmp profile</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:4249" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">crypto map \S+ client authentication list</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:3441" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BC\d*|12\.2(\(\d+\))?BX\d*|12\.2(\(\d+\))?BY\d*|12\.2(\(\d+\))?BZ\d*|12\.2(\(\d+\))?CX\d*|12\.2(\(\d+\))?CY\d*|12\.2(\(\d+\))?CZ\d*|12\.2(\(\d+\))?JK\d*|12\.2(\(\d+\))?SU\d*|12\.2(\(\d+\))?SX\d*|12\.2(\(\d+\))?SXA\d*|12\.2(\(\d+\))?SXB\d*|12\.2(\(\d+\))?SXD\d*|12\.2(\(\d+\))?SY\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?XJ\d*|12\.2(\(\d+\))?XK\d*|12\.2(\(\d+\))?XL\d*|12\.2(\(\d+\))?XM\d*|12\.2(\(\d+\))?XW\d*|12\.2(\(\d+\))?XZ\d*|12\.2(\(\d+\))?YA\d*|12\.2(\(\d+\))?YB\d*|12\.2(\(\d+\))?YD\d*|12\.2(\(\d+\))?YF\d*|12\.2(\(\d+\))?YG\d*|12\.2(\(\d+\))?YH\d*|12\.2(\(\d+\))?YJ\d*|12\.2(\(\d+\))?YL\d*|12\.2(\(\d+\))?YM\d*|12\.2(\(\d+\))?YN\d*|12\.2(\(\d+\))?YP\d*|12\.2(\(\d+\))?YQ\d*|12\.2(\(\d+\))?YR\d*|12\.2(\(\d+\))?YT\d*|12\.2(\(\d+\))?YU\d*|12\.2(\(\d+\))?YV\d*|12\.2(\(\d+\))?YW\d*|12\.2(\(\d+\))?YX\d*|12\.2(\(\d+\))?YY\d*|12\.2(\(\d+\))?ZB\d*|12\.2(\(\d+\))?ZC\d*|12\.2(\(\d+\))?ZD\d*|12\.2(\(\d+\))?ZE\d*|12\.2(\(\d+\))?ZF\d*|12\.2(\(\d+\))?ZG\d*|12\.2(\(\d+\))?ZH\d*|12\.2(\(\d+\))?ZJ\d*|12\.2(\(\d+\))?ZK\d*|12\.2(\(\d+\))?ZL\d*|12\.2(\(\d+\))?ZN\d*|12\.2(\(\d+\))?ZP\d*|12\.3(\(\d+\))?\d*|12\.3(\(\d+\))?B\d*|12\.3(\(\d+\))?BC\d*|12\.3(\(\d+\))?BW\d*|12\.3(\(\d+\))?T\d*|12\.3(\(\d+\))?XA\d*|12\.3(\(\d+\))?XB\d*|12\.3(\(\d+\))?XC\d*|12\.3(\(\d+\))?XD\d*|12\.3(\(\d+\))?XE\d*|12\.3(\(\d+\))?XF\d*|12\.3(\(\d+\))?XG\d*|12\.3(\(\d+\))?XH\d*|12\.3(\(\d+\))?XI\d*|12\.3(\(\d+\))?XJ\d*|12\.3(\(\d+\))?XK\d*|12\.3(\(\d+\))?XL\d*|12\.3(\(\d+\))?XM\d*|12\.3(\(\d+\))?XN\d*|12\.3(\(\d+\))?XQ\d*|12\.3(\(\d+\))?XR\d*|12\.3(\(\d+\))?XS\d*|12\.3(\(\d+\))?XT\d*|12\.3(\(\d+\))?XU\d*|12\.3(\(\d+\))?XW\d*|12\.3(\(\d+\))?XX\d*|12\.3(\(\d+\))?XY\d*|12\.3(\(\d+\))?YA\d*|12\.3(\(\d+\))?YC\d*|12\.3(\(\d+\))?YD\d*|12\.3(\(\d+\))?YF\d*|12\.3(\(\d+\))?YG\d*|12\.3(\(\d+\))?YH\d*|12\.3(\(\d+\))?YI\d*|12\.3(\(\d+\))?YJ\d*|12\.3(\(\d+\))?YK\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4031" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2\(13\)ZH5|12\.2\(17d\)SXB5|12\.2\(15\)JK2|12\.3\(7\)XS2|12\.3\(11\)YJ|12\.3\(11\)YK|12\.3\(8\)XX1|12\.3\(8\)T5|12\.3\(14\)T|12\.3\(6e\)|12\.3\(4\)XD4|12\.3\(8\)YA1|12\.3\(8\)YG1|12\.3\(8\)YC1|12\.3\(2\)XE1|12\.3\(7\)T7|12\.3\(7\)T6|12\.2\(18\)SXD1|12\.3\(12\)|12\.3\(11\)YF|12\.3\(8\)YH|12\.3\(9c\)|12\.3\(2\)T9|12\.3\(2\)XC3|12\.3\(4\)XQ1|12\.2\(15\)BC1f|12\.3\(2\)XA3|12\.2\(4\)YA8|12\.3\(5a\)B3|12\.3\(8\)YI|12\.3\(11\)T2|12\.3\(9a\)BC|12\.3\(8\)YD|12\.3\(4\)XG2|12\.3\(10a\)|12\.3\(11\)XL|12\.3\(7\)XR3|12\.3\(4\)T8|12\.2\(15\)ZL2|12\.2\(15\)BC2e|12\.2\(14\)SU2|12\.3\(8\)XU3|12\.3T|12\.2\(15\)CZ1|12\.3</major_release>
    </version_state>
    <patch_state id="oval:org.mitre.oval:ste:3173" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <line_state id="oval:org.mitre.oval:ste:4047" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">crypto key generate rsa</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:4036" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?ST\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EA\d*|12\.1(\(\d+\))?T\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?T\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3231" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.1\(14\)E1|12\.2\(11\)T3|12\.0\(23\)S2|12\.0\(20\)ST7|12\.2\(14\)S|12\.1\(13\)E3|12\.2\(13\)T1|12\.0\(21\)S6|12\.0\(21\)ST6|12\.0\(22\)S4|12\.2\(12b\)|12\.2\(13a\)|12\.1\(13\)</major_release>
    </version_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2383" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:8.12.8-5.90</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2382" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <suid operation="equals" datatype="boolean">true</suid>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2381" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2380" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2379" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <sgid operation="equals" datatype="boolean">true</sgid>
    </file_state>
    <inetlisteningservers_state id="oval:org.mitre.oval:ste:2378" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <program_name operation="pattern match">^.*sendmail.*</program_name>
    </inetlisteningservers_state>
    <version_state id="oval:org.mitre.oval:ste:4111" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">11\.1(\(\d+\))?CA\d*|11\.1(\(\d+\))?CC\d*|11\.2(\(\d+\))?\d*|11\.2(\(\d+\))?BC\d*|11\.2(\(\d+\))?P\d*|11\.3(\(\d+\))?DA\d*|12\.0(\(\d+\))?\d*|12\.0(\(\d+\))?DA\d*|12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?SC\d*|12\.0(\(\d+\))?SL\d*|12\.0(\(\d+\))?ST\d*|12\.0(\(\d+\))?W5\d*|12\.0(\(\d+\))?WC\d*|12\.1(\(\d+\))?\d*|12\.1(\(\d+\))?AA\d*|12\.1(\(\d+\))?DA\d*|12\.1(\(\d+\))?DB\d*|12\.1(\(\d+\))?DC\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XZ\d*|12\.1(\(\d+\))?XD\d*|12\.1(\(\d+\))?XE\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4043" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0\(7\)W5\(15c\)|12\.0\(8\)DA5|12\.0\(9\)ST1|11\.2\(23\)|12\.1\(1\)XA3|12\.1\(2\.1\)|12\.0\(10\)S1|12\.0\(5\.4\)WC1|12\.0\(5\)W5\(13d\)|11\.1\(34\)CA|11\.1\(34\)CC|11\.2\(22\.2\)|12\.0\(9\)W5\(17a\)|12\.0\(11\)SC|12\.0\(10\.6\)S|12\.0\(11a\)|12\.1\(2\)E|12\.1\(2\)EC|11\.1\(33\.2\)CA|11\.2\(22a\)P|12\.0\(10\.6\)SC|11\.1\(33\)CC1|12\.1\(2\.0\.1\)T2|12\.1\(2\)AA|12\.1\(2\)T|11\.1\(33\.1\)CC|12\.0\(11\.1\)|12\.0\(7\)W5\(15d\)|12\.1\(3\)|12\.1\(1\)AA2|12\.1\(1b\)|12\.1\(1\)DA|12\.0\(12\)|12\.1\(1\)DC|11\.2\(22\.1\)BC|11\.3\(1\)DA9|11\.2\(23\)P|11\.2\(22\.2\)P|12\.1\(1\)E2|12\.0\(11\)S|12\.0\(10\)SL|12\.0\(9\)SL1|12\.1\(1\)XE|12\.1\(1\)XD|12\.1\(1\)DB|12\.0\(10\)ST|11\.2\(22a\)|11\.2\(22a\)BC</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:4221" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">dlsw local-peer</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:3158" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?\d*|12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?SZ\d*|12\.0(\(\d+\))?T\d*|12\.0(\(\d+\))?WC\d*|12\.0(\(\d+\))?XA\d*|12\.0(\(\d+\))?XC\d*|12\.0(\(\d+\))?XD\d*|12\.0(\(\d+\))?XE\d*|12\.0(\(\d+\))?XG\d*|12\.0(\(\d+\))?XH\d*|12\.0(\(\d+\))?XI\d*|12\.0(\(\d+\))?XJ\d*|12\.0(\(\d+\))?XK\d*|12\.0(\(\d+\))?XN\d*|12\.0(\(\d+\))?XQ\d*|12\.0(\(\d+\))?XR\d*|12\.0(\(\d+\))?XT\d*|12\.1(\(\d+\))?\d*|12\.1(\(\d+\))?AA\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?EX\d*|12\.1(\(\d+\))?EZ\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XA\d*|12\.1(\(\d+\))?XC\d*|12\.1(\(\d+\))?XD\d*|12\.1(\(\d+\))?XE\d*|12\.1(\(\d+\))?XG\d*|12\.1(\(\d+\))?XH\d*|12\.1(\(\d+\))?XI\d*|12\.1(\(\d+\))?XJ\d*|12\.1(\(\d+\))?XM\d*|12\.1(\(\d+\))?XP\d*|12\.1(\(\d+\))?XQ\d*|12\.1(\(\d+\))?XS\d*|12\.1(\(\d+\))?XT\d*|12\.1(\(\d+\))?XV\d*|12\.1(\(\d+\))?XW\d*|12\.1(\(\d+\))?XX\d*|12\.1(\(\d+\))?XY\d*|12\.1(\(\d+\))?XZ\d*|12\.1(\(\d+\))?YA\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YD\d*|12\.1(\(\d+\))?YI\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BW\d*|12\.2(\(\d+\))?BY\d*|12\.2(\(\d+\))?DD\d*|12\.2(\(\d+\))?DX\d*|12\.2(\(\d+\))?IXA\d*|12\.2(\(\d+\))?IXB\d*|12\.2(\(\d+\))?MC\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?SB\d*|12\.2(\(\d+\))?SBC\d*|12\.2(\(\d+\))?SRA\d*|12\.2(\(\d+\))?SU\d*|12\.2(\(\d+\))?SV\d*|12\.2(\(\d+\))?SW\d*|12\.2(\(\d+\))?SX\d*|12\.2(\(\d+\))?SXA\d*|12\.2(\(\d+\))?SXB\d*|12\.2(\(\d+\))?SXD\d*|12\.2(\(\d+\))?SXE\d*|12\.2(\(\d+\))?SXF\d*|12\.2(\(\d+\))?SY\d*|12\.2(\(\d+\))?SZ\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?TPC\d*|12\.2(\(\d+\))?XA\d*|12\.2(\(\d+\))?XB\d*|12\.2(\(\d+\))?XC\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XG\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XJ\d*|12\.2(\(\d+\))?XK\d*|12\.2(\(\d+\))?XL\d*|12\.2(\(\d+\))?XM\d*|12\.2(\(\d+\))?XN\d*|12\.2(\(\d+\))?XQ\d*|12\.2(\(\d+\))?XT\d*|12\.2(\(\d+\))?XU\d*|12\.2(\(\d+\))?XV\d*|12\.2(\(\d+\))?XW\d*|12\.2(\(\d+\))?YA\d*|12\.2(\(\d+\))?YB\d*|12\.2(\(\d+\))?YC\d*|12\.2(\(\d+\))?YD\d*|12\.2(\(\d+\))?YE\d*|12\.2(\(\d+\))?YF\d*|12\.2(\(\d+\))?YH\d*|12\.2(\(\d+\))?YJ\d*|12\.2(\(\d+\))?YL\d*|12\.2(\(\d+\))?YM\d*|12\.2(\(\d+\))?YN\d*|12\.2(\(\d+\))?YT\d*|12\.2(\(\d+\))?YU\d*|12\.2(\(\d+\))?YV\d*|12\.2(\(\d+\))?YW\d*|12\.2(\(\d+\))?YX\d*|12\.2(\(\d+\))?YY\d*|12\.2(\(\d+\))?YZ\d*|12\.2(\(\d+\))?ZA\d*|12\.2(\(\d+\))?ZB\d*|12\.2(\(\d+\))?ZD\d*|12\.2(\(\d+\))?ZE\d*|12\.2(\(\d+\))?ZF\d*|12\.2(\(\d+\))?ZH\d*|12\.2(\(\d+\))?ZJ\d*|12\.2(\(\d+\))?ZL\d*|12\.2(\(\d+\))?ZN\d*|12\.2(\(\d+\))?ZP\d*|12\.2(\(\d+\))?ZU\d*|12\.2(\(\d+\))?ZV\d*|12\.2(\(\d+\))?ZW\d*|12\.2(\(\d+\))?ZX\d*|12\.3(\(\d+\))?\d*|12\.3(\(\d+\))?B\d*|12\.3(\(\d+\))?BW\d*|12\.3(\(\d+\))?T\d*|12\.3(\(\d+\))?XA\d*|12\.3(\(\d+\))?XB\d*|12\.3(\(\d+\))?XC\d*|12\.3(\(\d+\))?XD\d*|12\.3(\(\d+\))?XE\d*|12\.3(\(\d+\))?XF\d*|12\.3(\(\d+\))?XG\d*|12\.3(\(\d+\))?XH\d*|12\.3(\(\d+\))?XI\d*|12\.3(\(\d+\))?XJ\d*|12\.3(\(\d+\))?XK\d*|12\.3(\(\d+\))?XQ\d*|12\.3(\(\d+\))?XR\d*|12\.3(\(\d+\))?XU\d*|12\.3(\(\d+\))?XW\d*|12\.3(\(\d+\))?XX\d*|12\.3(\(\d+\))?YF\d*|12\.3(\(\d+\))?YG\d*|12\.3(\(\d+\))?YH\d*|12\.3(\(\d+\))?YI\d*|12\.3(\(\d+\))?YJ\d*|12\.3(\(\d+\))?YK\d*|12\.3(\(\d+\))?YM\d*|12\.3(\(\d+\))?YQ\d*|12\.3(\(\d+\))?YT\d*|12\.3(\(\d+\))?YU\d*|12\.3(\(\d+\))?YX\d*|12\.3(\(\d+\))?YZ\d*|12\.4(\(\d+\))?\d*|12\.4(\(\d+\))?T\d*|12\.4(\(\d+\))?XA\d*|12\.4(\(\d+\))?XB\d*|12\.4(\(\d+\))?XC\d*|12\.4(\(\d+\))?XD\d*|12\.4(\(\d+\))?XE\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4057" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2\(13\)ZH6|12\.4\(4\)XC6|12\.2\(30\)S|12\.0\(4\)XJ5|12\.4\(6\)T6|12\.2\(46\)|12\.3\(8\)XX2|12\.1\(1\)XE1|12\.2\(18\)SXF8|12\.2\(18\)IXC|12\.4\(7d\)|12\.3\(2\)XE2|12\.2\(25\)SW9|12\.0\(23\)S|12\.2\(46\)|12\.4\(8c\)|12\.3\(2\)XA5|12\.4\(11\)T1|12\.2\(4\)YA10|12\.2\(28\)ZX|12\.0\(5\)WC17|12\.3\(21\)|12\.4\(4\)T7|12\.2\(11\)YV1|12\.1\(5\)XV1|12\.1\(26\)E8|12\.4\(12\)|12\.1\(27b\)E2|12\.3\(7\)XI8a|12\.2\(2\)XB17|12\.2\(33\)SRB|12\.2\(28a\)ZV1|12\.2\(18\)SXE6b|12\.2\(33\)SRA2|12\.2\(20\)S7|12\.2\(28\)SB6|12\.3\(8\)YG5|12\.4\(9\)T3|12\.2\(4\)BC1|12\.0\(18\)S|12\.4\(10a\)|12\.2\(8\)YJ1|12\.2\(26\)SV|12\.3\(2\)XC3|12\.2\(31\)SB2|12\.1\(3\)XT2|12\.4\(4\)XD5</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4106" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?\w*\d*|12\.1(\(\d+\))?\w*\d*|12\.2(\(\d+\))?\w*\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4017" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.1(\(\d+\))?\d*|12\.1(\(\d+\))?E\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?T\d*|12\.3(\(\d+\))?\d*|12\.3(\(\d+\))?T\d*|11\.2(\(\d+\))?\d*|11\.2(\(\d+\))?P\d*|11\.2(\(\d+\))?SA\d*|11\.3(\(\d+\))?\d*|12\.0(\(\d+\))?\d*|12\.0(\(\d+\))?DC\d*|12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?SL\d*|12\.0(\(\d+\))?ST\d*|12\.0(\(\d+\))?SX\d*|12\.0(\(\d+\))?SZ\d*|12\.0(\(\d+\))?T\d*|12\.0(\(\d+\))?W5\d*|12\.0(\(\d+\))?WC\d*|12\.0(\(\d+\))?WT\d*|12\.1(\(\d+\))?\d*|12\.1(\(\d+\))?AX\d*|12\.1(\(\d+\))?DA\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EA\d*|12\.1(\(\d+\))?EB\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?EO\d*|12\.1(\(\d+\))?EU\d*|12\.1(\(\d+\))?EW\d*|12\.1(\(\d+\))?EX\d*|12\.1(\(\d+\))?T\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BC\d*|12\.2(\(\d+\))?BX\d*|12\.2(\(\d+\))?DA\d*|12\.2(\(\d+\))?DD\d*|12\.2(\(\d+\))?EW\d*|12\.2(\(\d+\))?JA\d*|12\.2(\(\d+\))?MC\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?SE\d*|12\.2(\(\d+\))?SW\d*|12\.2(\(\d+\))?SX\d*|12\.2(\(\d+\))?SXA\d*|12\.2(\(\d+\))?SXB\d*|12\.2(\(\d+\))?SY\d*|12\.2(\(\d+\))?SZ\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?ZD\d*|12\.2(\(\d+\))?ZJ\d*|12\.2(\(\d+\))?ZP\d*|12\.3(\(\d+\))?\d*|12\.3(\(\d+\))?B\d*|12\.3(\(\d+\))?T\d*|12\.3(\(\d+\))?XB\d*|12\.3(\(\d+\))?XC\d*|12\.3(\(\d+\))?XD\d*|12\.3(\(\d+\))?XG\d*|12\.3(\(\d+\))?XH\d*|12\.3(\(\d+\))?XK\d*|12\.0(1)XB|12\.2(8)YD|12\.1(5)YB|12\.1(5)YC|12\.2(8)YJ|12\.1(5)YA|12\.2(8)YL|12\.2(8)YM|12\.1(5)YD|12\.2(8)YW|12\.2(8)YY|12\.1(13)AY|12\.1(5)XR|12\.3(4)XN|12\.1(10)EY|12\.1(2)XF|12\.2(11)ZI|12\.3(4)XQ|12\.1(2a)XH|12\.3(7)XI|12\.0(7)XR|12\.3(7)XJ|12\.1(5)XM|12\.3(7)XL|12\.0(7)XV|12\.1(3)XT|12\.1(3)XQ|12\.1(3)XP|12\.1(3)XL|12\.0(7)XE|12\.1(3)XG|12\.0(7)XK|12\.1(5)XU|12\.1(5)XV|12\.2(4)YH|12\.2(9)YE|12\.2(4)YF|12\.2(4)YG|12\.2(9)YO|12\.2(4)YA|12\.2(4)YB|12\.1(3a)XI|12\.3(9)XM|12\.3(1a)BW|12\.0(4)XI|12\.0(4)XH|12\.2(8)YN|12\.0(4)XJ|12\.0(4)XM|12\.1(12c)|12\.1(5)YI2|12\.2(2)XU|12\.2(2)XT|12\.2(2)XQ|12\.2(2)XN|12\.2(2)XH|12\.2(2)XK|12\.2(2)XJ|12\.2(2)XG|12\.2(2)XA|12\.2(2)XC|12\.2(2)XB|12\.1(1)XB|12\.2(1)XS|12\.2(1)XD|12\.2(1)XE|12\.0(3)XG|12\.2(1)XF1|12\.2(4)BY|12\.1(5)YH2|12\.2(4)BW|12\.1(5)DB|12\.0(5\.1)XP|12\.0(5)XN|12\.0(5)XU|12\.0(5)XS|12\.0(5)XQ|12\.1(10)AA|12\.3(2)XA|12\.3(2)XF|12\.3(2)XE|12\.2(15)ZN|12\.2(13)ZH|12\.2(15)ZL|12\.2(15)ZK|12\.2(11)CY|12\.2(11)CX|12\.1(11)YJ|12\.2(15)BZ|12\.2(2)XI2|12\.2(2)BY|12\.1(1)XE|12\.1(1)XD|12\.1(1)XA|12\.2(2)YK|12\.1(1)XC|12\.1(5)YF2|12\.2(2)YC|12\.2(1)DX|12\.2(13)ZC|12\.2(8)BY|12\.2(4)XM|12\.2(4)XL|12\.1(5)YE5|12\.0(4)XL|12\.2(4)XW|12\.2(8)ZB|12\.2(11)YS|12\.2(11)YR|12\.2(11)YQ|12\.2(11)YP|12\.2(11)YV|12\.2(11)YU|12\.2(11)YT|12\.2(11)YZ|12\.2(11)YX|12\.2(13)ZE|12\.2(13)ZF|12\.2(13)ZG|12\.2(2)DX|12\.1(3)XJ</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3162" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0\(23\)S6|12\.1\(22c\)|12\.3\(7\)T|12\.2\(20\)S1|12\.2\(20\)S3|12\.2\(11\)T|12\.3|12\.1|12\.1\(20\)E2|12\.2\(8\)YY|12\.2\(RLS3\)S|12\.3\(6\)|12\.3\(4\)XK|12\.0\(16\)S11|12\.2\(13\)T11|12\.2\(16f\)|12\.3\(4\)XG|12\.2DD|12\.2\(12i\)|12\.1\(5\)T17|12\.1\(5\)T18|12\.2\(14\)SY3|12\.0T|12\.0\(13\)WT|12\.1DC|12\.2\(21\)SW|12\.2\(23\)|12\.1\(20\)EB|12\.2\(13\)JA4|12\.1\(20\)EC|12\.0\(27\)S|12\.1\(14\)E|12\.1\(20\)EO|12\.2\(13\)ZP3|12\.1\(20\)EU|12\.1\(22\)E1|12\.1\(4c\)|12\.2\(8\)T|12\.3\(5c\)|12\.2\(15\)BC1C|12\.3\(4\)T|12\.2\(14\)SZ6|12\.2\(13e\)|12\.3\(6a\)|12\.3\(5a\)B|12\.2\(16\)BX3|12\.1\(14\)AX|12\.3\(2\)T4|12\.2\(19b\)|12\.2\(18\)SE|12\.2\(14\)SZ|12\.2\(13\)T|12\.2\(13\)T12|12\.2\(14\)SY|12\.3\(3e\)|12\.2\(15\)B|12\.3\(4\)XH|12\.0SL|11\.2\(8\.12\)SA6|12\.3\(5b\)|12\.1\(20a\)|12\.2\(17d\)|12\.0ST|12\.2\(14\)ZA6|12\.2\(14\)S7|12\.0SZ|12\.2\(RLS4\)S|12\.0\(25\)W5\(27b\)|12\.2\(17d\)SXB|12\.0\(5\)WC|12\.2\(21a\)|12\.0\(25\)S3|12\.2\(15\)T12|12\.3\(3\)B1|12\.2\(15\)T11|12\.2\(17d\)SXB1|12\.2\(13\)ZD1|12\.2\(23a\)|12\.0\(28\)|12\.3\(2\)T|11\.3\(11b\)T4|12\.2\(17b\)SXA2|12\.1\(19\)EO2|12\.3\(7\)T1|12\.1\(11b\)E14|12\.2\(13\)BC1C|12\.3\(1\)T|12\.2\(21b\)|12\.2\(11\)T11|12\.0\(24\)S5|12\.2\(18\)EW|12\.1\(13\)E14|11\.2\(26\)P6|12\.2\(15\)ZJ5|12\.2\(15\)BC|12\.0\(26\)S2|12\.0\(25\)SX4|12\.2\(22\)S|12\.0\(1\)XB|12\.3\(4\)T6|12\.3T|12\.3\(4\)T3|12\.2\(17a\)SX4|12\.2\(4\)B1|12\.2\(2\)YC|12\.2\(17a\)SX2|12\.2\(15\)JA|12\.1\(8b\)E18|12\.3\(2\)XB2|12\.2\(10g\)|12\.1\(20\)EW2|12\.3\(4\)XD1|12\.2\(18\)S|11\.3\(11e\)|12\.1\(19\)EA1b|12\.1\(19\)EA1c|12\.2\(8\)BZ|12\.3\(2\)XC2|11\.2\(26f\)|12\.2\(12\)DA6|12\.1\(14\)E10|12\.2\(15\)T|12\.3\(5a\)B1|12\.0\(5\)WC9a|12\.2\(16\)BX|12\.2\(8\)ZB|12\.1\(19\)E6|12\.1\(19\)E7|12\.0\(21\)S8|12\.2\(11\)JA3|12\.2\(4\)BC1C|12\.0\(28\)W5\(30\)|12\.2\(13\)ZC|12\.2\(18\)S3|12\.2\(15\)MC1B|12\.2\(15\)ZJ4</major_release>
    </version_state>
    <patch_state id="oval:org.mitre.oval:ste:5074" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:5036" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">34</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4115" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4982" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <version_state id="oval:org.mitre.oval:ste:3055" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2\(17b\)SXA|12\.2\(17d\)SXB|12\.2\(14\)SY3</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3197" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2(\(\d+\))?SXA\d*|12\.2(\(\d+\))?SXB\d*|12\.2(\(\d+\))?SX\d*|12\.2(\(\d+\))?SY\d*</major_release>
    </version_state>
    <registry_state id="oval:org.mitre.oval:ste:3018" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:3336" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">8.0.813.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:3564" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">8.1.291.1</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:4812" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4925" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">05</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:5169" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">42</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2391" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.10.1-1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2390" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.10.1-1.1</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2389" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2388" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2387" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2386" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2385" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2384" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <version_state id="oval:org.mitre.oval:ste:3824" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.1\(6\)EA1a|12\.2\(1\)XD3|12\.2\(2\)XQ2|12\.2\(2\)XH2|12\.2\(2\)XJ2|12\.0\(5\)WC3|12\.1\(3\)XG6|12\.0\(16\)W5\(21b\)|12\.2\(2\)DD1|12\.1\(9\)EC|12\.2\(2\)XB2|12\.1\(5\)XM6|11\.2\(13\)|12\.1\(08a\)E05|11\.2\(12\)P|12\.1\(5\)YE4|12\.0\(20\)W5\(24\)|12\.2\(4\.2\)|12\.1\(11\)E|12\.1\(11\)|12\.2DA|12\.1\(5\)YC2|12\.1\(10\)AA|12\.1\(11\)E|12\.2\(2\)XB|12\.0\(19\.6\)|12\.1\(6\)EZ4|12\.2\(2\)XA4|12\.2\(1\)XE2|12\.1\(2\)XF5|12\.2\(2\)XC1|12\.2\(2\)XK5|12\.2\(7\)T|12\.2\(2\)XG1|12\.0\(20\)ST|12\.0\(20\)SP|12\.1\(10\.3\)|12\.2\(2\)B|12\.0\(18\)W5\(22a\)|12\.1\(6\)EA2|12\.0\(21\)S|12\.1\(5\)YF3|11\.3\(3\)|12\.2\(2\)T|12\.1\(8\.5\)EC|12\.1\(5\)YB5|12\.2\(5\)</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3313" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">11\.1(\(\d+\))?\w*\d*|11\.0(\(\d+\))?\w*\d*|11\.2(\(\d+\))?\d*|11\.2(\(\d+\))?P\d*|11\.3(\(\d+\))?\d*|11\.3(\(\d+\))?T\d*|12\.0(\(\d+\))?\d*|12\.0(\(\d+\))?DA\d*|12\.0(\(\d+\))?DB\d*|12\.0(\(\d+\))?DC\d*|12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?SC\d*|12\.0(\(\d+\))?SL\d*|12\.0(\(\d+\))?SP\d*|12\.0(\(\d+\))?ST\d*|12\.0(\(\d+\))?T\d*|12\.0(\(\d+\))?W5\d*|12\.0(\(\d+\))?WC\d*|12\.0(\(\d+\))?XA\d*|12\.0(\(\d+\))?XB\d*|12\.0(\(\d+\))?XC\d*|12\.0(\(\d+\))?XD\d*|12\.0(\(\d+\))?XE\d*|12\.0(\(\d+\))?XF\d*|12\.0(\(\d+\))?XG\d*|12\.0(\(\d+\))?XH\d*|12\.0(\(\d+\))?XI\d*|12\.0(\(\d+\))?XJ\d*|12\.0(\(\d+\))?XK\d*|12\.0(\(\d+\))?XL\d*|12\.0(\(\d+\))?XM\d*|12\.0(\(\d+\))?XN\d*|12\.0(\(\d+\))?XP\d*|12\.0(\(\d+\))?XQ\d*|12\.0(\(\d+\))?XR\d*|12\.0(\(\d+\))?XS\d*|12\.0(\(\d+\))?XU\d*|12\.0(\(\d+\))?XV\d*|12\.1(\(\d+\))?\d*|12\.1(\(\d+\))?AA\d*|12\.1(\(\d+\))?DA\d*|12\.1(\(\d+\))?DB\d*|12\.1(\(\d+\))?DC\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EA\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?EX\d*|12\.1(\(\d+\))?EY\d*|12\.1(\(\d+\))?EZ\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XA\d*|12\.1(\(\d+\))?XB\d*|12\.1(\(\d+\))?XC\d*|12\.1(\(\d+\))?XD\d*|12\.1(\(\d+\))?XE\d*|12\.1(\(\d+\))?XF\d*|12\.1(\(\d+\))?XG\d*|12\.1(\(\d+\))?XH\d*|12\.1(\(\d+\))?XI\d*|12\.1(\(\d+\))?XJ\d*|12\.1(\(\d+\))?XK\d*|12\.1(\(\d+\))?XL\d*|12\.1(\(\d+\))?XM\d*|12\.1(\(\d+\))?XP\d*|12\.1(\(\d+\))?XQ\d*|12\.1(\(\d+\))?XR\d*|12\.1(\(\d+\))?XS\d*|12\.1(\(\d+\))?XT\d*|12\.1(\(\d+\))?XU\d*|12\.1(\(\d+\))?XV\d*|12\.1(\(\d+\))?XW\d*|12\.1(\(\d+\))?XX\d*|12\.1(\(\d+\))?YA\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YC\d*|12\.1(\(\d+\))?YD\d*|12\.1(\(\d+\))?YE\d*|12\.1(\(\d+\))?YF\d*|12\.1(\(\d+\))?YH\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?DD\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?XA\d*|12\.2(\(\d+\))?XB\d*|12\.2(\(\d+\))?XC\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XE\d*|12\.2(\(\d+\))?XG\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XI\d*|12\.2(\(\d+\))?XJ\d*|12\.2(\(\d+\))?XK\d*|12\.2(\(\d+\))?XQ\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4045" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?\w*\d*|12\.1(\(\d+\))?\w*\d*|12\.2(\(\d+\))?\w*\d*|12\.3(\(\d+\))?\w*\d*</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:3309" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">l2-filter block-arp</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:4083" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.3\(7\)JA2</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:3609" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">ip nhrp network-id</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:4093" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.4\(10\)|12\.3\(4\)TPC11b|12\.4\(3b\)|12\.2\(13\)ZH9|12\.4\(15\)T|12\.3\(14\)YX8|12\.3\(11\)YZ2|12\.3\(18a\)|12\.3\(22a\)|12\.4\(4\)MR|12\.4\(9\)MR|12\.3\(7\)XR7|12\.2\(37\)SG1|12\.3\(2\)XA6|12\.2\(31\)SG2|12\.2\(18\)SXF10|12\.4\(9\)T|12\.2\(25\)EWA10|12\.4\(1c\)|12\.4\(8\)|12\.2\(29b\)|12\.2\(20\)S14|12\.2\(29\)SM2|12\.2\(10\)DA8|12\.3\(17b\)BC8|12\.3\(11\)YK3|12\.2\(14\)S19|12\.4\(6\)T8|12\.3\(7\)XI10a|12\.2\(15\)MC2h|12\.2\(15\)MC2j|12\.3\(19a\)|12\.3\(14\)T5|12\.4\(6\)T|12\.3\(14\)YM5|12\.2\(28d\)|12\.4\(7\)|12\.3\(11\)YS2|12\.3\(17a\)BC|12\.4\(16\)|12\.4\(5c\)|12\.3\(21b\)|12\.2\(46a\)|12\.2\(29\)SV4|12\.3\(11\)T12|12\.2\(18\)S13|12\.3\(22\)|12\.4\(2\)XB6|12\.4\(12\)MR|12\.4\(9\)T5|12\.3\(17a\)|12\.2\(40\)SG|12\.3\(21\)BC|12\.2\(25\)SW11|12\.3\(2\)XE5|12\.4\(7f\)|12\.4\(10c\)|12\.4\(4\)T|12\.4\(11\)T3|12\.3\(23\)|12\.4\(15\)T1|12\.3\(8\)YG6|12\.4\(5\)|12\.2\(26c\)|12\.3\(7\)XR7|12\.2\(31\)SGA4|12\.4\(4\)T8|12\.3\(17c\)|12\.4\(11\)MR|12\.4\(6\)MR|12\.3\(20a\)|12\.4\(8d\)|12\.3\(20\)|12\.2\(31\)SB6|12\.4\(2\)T6|12\.4\(2\)T3|12\.2\(12\)DA12|12\.2\(46\)|12\.3\(8\)YG6|12\.2\(25\)SG2|12\.4\(12\)MR2|12\.4\(12\)MR1|12\.3\(21a\)BC3|12\.2\(8\)TPC10c|12\.4\(3h\)|12\.0\(32\)SY4|12\.3\(14\)YX9|12\.0\(32\)S8|12\.4\(12c\)|12\.2\(31\)SGA3|12\.3\(2\)XC5|12\.3\(21\)|12\.2\(27c\)|12\.4\(11\)T|12\.3\(19\)|12\.4\(12\)|12\.1\(27b\)E3|12\.3\(2\)JA3|12\.4\(13d\)|12\.2\(25\)S13|12\.2\(28\)SB9|12\.2\(18\)SXE4|12\.3\(14\)YM11|12\.3\(18\)|12\.4\(13\)</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3099" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?\d*|12\.0(\(\d+\))?DC\d*|12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?SC\d*|12\.0(\(\d+\))?SL\d*|12\.0(\(\d+\))?SP\d*|12\.0(\(\d+\))?ST\d*|12\.0(\(\d+\))?SX\d*|12\.0(\(\d+\))?SY\d*|12\.0(\(\d+\))?SZ\d*|12\.0(\(\d+\))?T\d*|12\.0(\(\d+\))?XA\d*|12\.0(\(\d+\))?XC\d*|12\.0(\(\d+\))?XD\d*|12\.0(\(\d+\))?XE\d*|12\.0(\(\d+\))?XG\d*|12\.0(\(\d+\))?XH\d*|12\.0(\(\d+\))?XI\d*|12\.0(\(\d+\))?XJ\d*|12\.0(\(\d+\))?XK\d*|12\.0(\(\d+\))?XL\d*|12\.0(\(\d+\))?XN\d*|12\.0(\(\d+\))?XQ\d*|12\.0(\(\d+\))?XR\d*|12\.1(\(\d+\))?\d*|12\.1(\(\d+\))?AA\d*|12\.1(\(\d+\))?CX\d*|12\.1(\(\d+\))?DA\d*|12\.1(\(\d+\))?DC\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?EU\d*|12\.1(\(\d+\))?EW\d*|12\.1(\(\d+\))?EX\d*|12\.1(\(\d+\))?EZ\d*|12\.1(\(\d+\))?GA\d*|12\.1(\(\d+\))?GB\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XA\d*|12\.1(\(\d+\))?XC\d*|12\.1(\(\d+\))?XD\d*|12\.1(\(\d+\))?XG\d*|12\.1(\(\d+\))?XH\d*|12\.1(\(\d+\))?XI\d*|12\.1(\(\d+\))?XJ\d*|12\.1(\(\d+\))?XL\d*|12\.1(\(\d+\))?XM\d*|12\.1(\(\d+\))?XP\d*|12\.1(\(\d+\))?XQ\d*|12\.1(\(\d+\))?XR\d*|12\.1(\(\d+\))?XS\d*|12\.1(\(\d+\))?XT\d*|12\.1(\(\d+\))?XV\d*|12\.1(\(\d+\))?XW\d*|12\.1(\(\d+\))?XX\d*|12\.1(\(\d+\))?XY\d*|12\.1(\(\d+\))?XZ\d*|12\.1(\(\d+\))?YA\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YD\d*|12\.1(\(\d+\))?YE\d*|12\.1(\(\d+\))?YF\d*|12\.1(\(\d+\))?YI\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BC\d*|12\.2(\(\d+\))?BW\d*|12\.2(\(\d+\))?BY\d*|12\.2(\(\d+\))?BZ\d*|12\.2(\(\d+\))?CX\d*|12\.2(\(\d+\))?CY\d*|12\.2(\(\d+\))?DA\d*|12\.2(\(\d+\))?DD\d*|12\.2(\(\d+\))?DX\d*|12\.2(\(\d+\))?EU\d*|12\.2(\(\d+\))?EW\d*|12\.2(\(\d+\))?EWA\d*|12\.2(\(\d+\))?MB\d*|12\.2(\(\d+\))?MC\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?SB\d*|12\.2(\(\d+\))?SBC\d*|12\.2(\(\d+\))?SG\d*|12\.2(\(\d+\))?SGA\d*|12\.2(\(\d+\))?SM\d*|12\.2(\(\d+\))?SU\d*|12\.2(\(\d+\))?SV\d*|12\.2(\(\d+\))?SW\d*|12\.2(\(\d+\))?SX\d*|12\.2(\(\d+\))?SXA\d*|12\.2(\(\d+\))?SXB\d*|12\.2(\(\d+\))?SXD\d*|12\.2(\(\d+\))?SXE\d*|12\.2(\(\d+\))?SY\d*|12\.2(\(\d+\))?SZ\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?TPC\d*|12\.2(\(\d+\))?UZ\d*|12\.2(\(\d+\))?VZ\d*|12\.2(\(\d+\))?XA\d*|12\.2(\(\d+\))?XB\d*|12\.2(\(\d+\))?XC\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XF\d*|12\.2(\(\d+\))?XG\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XJ\d*|12\.2(\(\d+\))?XK\d*|12\.2(\(\d+\))?XL\d*|12\.2(\(\d+\))?XM\d*|12\.2(\(\d+\))?XN\d*|12\.2(\(\d+\))?XQ\d*|12\.2(\(\d+\))?XR\d*|12\.2(\(\d+\))?XS\d*|12\.2(\(\d+\))?XT\d*|12\.2(\(\d+\))?XU\d*|12\.2(\(\d+\))?XV\d*|12\.2(\(\d+\))?XW\d*|12\.2(\(\d+\))?YA\d*|12\.2(\(\d+\))?YB\d*|12\.2(\(\d+\))?YC\d*|12\.2(\(\d+\))?YD\d*|12\.2(\(\d+\))?YE\d*|12\.2(\(\d+\))?YF\d*|12\.2(\(\d+\))?YH\d*|12\.2(\(\d+\))?YJ\d*|12\.2(\(\d+\))?YL\d*|12\.2(\(\d+\))?YM\d*|12\.2(\(\d+\))?YN\d*|12\.2(\(\d+\))?YP\d*|12\.2(\(\d+\))?YQ\d*|12\.2(\(\d+\))?YR\d*|12\.2(\(\d+\))?YT\d*|12\.2(\(\d+\))?YU\d*|12\.2(\(\d+\))?YV\d*|12\.2(\(\d+\))?YW\d*|12\.2(\(\d+\))?YX\d*|12\.2(\(\d+\))?YY\d*|12\.2(\(\d+\))?YZ\d*|12\.2(\(\d+\))?ZA\d*|12\.2(\(\d+\))?ZB\d*|12\.2(\(\d+\))?ZD\d*|12\.2(\(\d+\))?ZE\d*|12\.2(\(\d+\))?ZF\d*|12\.2(\(\d+\))?ZG\d*|12\.2(\(\d+\))?ZH\d*|12\.2(\(\d+\))?ZJ\d*|12\.2(\(\d+\))?ZL\d*|12\.2(\(\d+\))?ZR\d*|12\.3(\(\d+\))?\d*|12\.3(\(\d+\))?B\d*|12\.3(\(\d+\))?BC\d*|12\.3(\(\d+\))?BW\d*|12\.3(\(\d+\))?T\d*|12\.3(\(\d+\))?TPC\d*|12\.3(\(\d+\))?XA\d*|12\.3(\(\d+\))?XB\d*|12\.3(\(\d+\))?XC\d*|12\.3(\(\d+\))?XD\d*|12\.3(\(\d+\))?XE\d*|12\.3(\(\d+\))?XF\d*|12\.3(\(\d+\))?XG\d*|12\.3(\(\d+\))?XH\d*|12\.3(\(\d+\))?XI\d*|12\.3(\(\d+\))?XJ\d*|12\.3(\(\d+\))?XK\d*|12\.3(\(\d+\))?XQ\d*|12\.3(\(\d+\))?XR\d*|12\.3(\(\d+\))?XS\d*|12\.3(\(\d+\))?XU\d*|12\.3(\(\d+\))?XW\d*|12\.3(\(\d+\))?YA\d*|12\.3(\(\d+\))?YD\d*|12\.3(\(\d+\))?YF\d*|12\.3(\(\d+\))?YG\d*|12\.3(\(\d+\))?YH\d*|12\.3(\(\d+\))?YI\d*|12\.3(\(\d+\))?YJ\d*|12\.3(\(\d+\))?YK\d*|12\.3(\(\d+\))?YM\d*|12\.3(\(\d+\))?YQ\d*|12\.3(\(\d+\))?YS\d*|12\.3(\(\d+\))?YT\d*|12\.3(\(\d+\))?YU\d*|12\.3(\(\d+\))?YX\d*|12\.3(\(\d+\))?YZ\d*|12\.4(\(\d+\))?\d*|12\.4(\(\d+\))?MR\d*|12\.4(\(\d+\))?T\d*|12\.4(\(\d+\))?XB\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3560" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0\(25\)SX11|12\.3\(4\)TPC11b|12\.2\(26\)SV1|12\.2\(15\)MC2h|12\.0\(30\)SZ|12\.3\(2\)JL|12\.0\(28\)S|12\.3\(14\)T|12\.3\(4\)T13|12\.3\(8\)YG2|12\.0\(27\)S3|12\.2\(25\)EWA5|12\.3\(11\)T|12\.1\(19\)EO6|12\.3\(8\)|12\.2\(18\)EW3|12\.2\(17d\)SXBa|12\.3\(8\)JA|12\.4\(4\)T|12\.3\(7\)XI8|12\.2\(23\)SV|12\.0\(5\)WC15|12\.2\(18\)SO7|12\.0\(30\)SX|12\.3\(2\)XA3|12\.1\(23\)E|12\.2\(28\)SB|12\.2\(37\)|12\.2\(25\)EW|12\.2\(25\)EX|12\.2\(25\)EY|12\.2\(25\)EWA|12\.3\(2\)JK2|12\.2\(37\)or|12\.0\(28\)W5\(32b\)|12\.2\(25\)SE|12\.3\(9a\)BC|12\.2\(34a\)|12\.1\(23\)EB|12\.3\(8\)T|12\.2\(25\)S|12\.1\(22\)EA8|12\.2\(17d\)SXB11a|12\.3\(11\)JX|12\.3\(8\)JK|12\.1\(20\)EO3|12\.3\(8\)T7|12\.2\(10\)DA5|12\.2\(25\)SW1|12\.2\(18\)SXD7a|12\.2\(20\)EWA4|12\.4\(1\)|12\.3\(12\)|12\.0\(27\)SY|12\.3\(8\)XY|12\.3\(7\)JX6|12\.2\(20\)EW4|12\.3\(8\)XW|12\.3\(2\)XA6|12\.2\(12\)DA10</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3966" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?\d*|12\.0(\(\d+\))?DA\d*|12\.0(\(\d+\))?DB\d*|12\.0(\(\d+\))?DC\d*|12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?SC\d*|12\.0(\(\d+\))?SL\d*|12\.0(\(\d+\))?SP\d*|12\.0(\(\d+\))?ST\d*|12\.0(\(\d+\))?SX\d*|12\.0(\(\d+\))?SY\d*|12\.0(\(\d+\))?SZ\d*|12\.0(\(\d+\))?T\d*|12\.0(\(\d+\))?W\d*|12\.0(\(\d+\))?WC\d*|12\.0(\(\d+\))?WT\d*|12\.0(\(\d+\))?XA\d*|12\.0(\(\d+\))?XB\d*|12\.0(\(\d+\))?XC\d*|12\.0(\(\d+\))?XD\d*|12\.0(\(\d+\))?XE\d*|12\.0(\(\d+\))?XG\d*|12\.0(\(\d+\))?XH\d*|12\.0(\(\d+\))?XI\d*|12\.0(\(\d+\))?XJ\d*|12\.0(\(\d+\))?XK\d*|12\.0(\(\d+\))?XL\d*|12\.0(\(\d+\))?XM\d*|12\.0(\(\d+\))?XN\d*|12\.0(\(\d+\))?XQ\d*|12\.0(\(\d+\))?XR\d*|12\.0(\(\d+\))?XS\d*|12\.0(\(\d+\))?XV\d*|12\.0(\(\d+\))?XW\d*|12\.1(\(\d+\))?\d*|12\.1(\(\d+\))?AA\d*|12\.1(\(\d+\))?AX\d*|12\.1(\(\d+\))?AY\d*|12\.1(\(\d+\))?AZ\d*|12\.1(\(\d+\))?CX\d*|12\.1(\(\d+\))?DA\d*|12\.1(\(\d+\))?DB\d*|12\.1(\(\d+\))?DC\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EA\d*|12\.1(\(\d+\))?EB\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?EO\d*|12\.1(\(\d+\))?EU\d*|12\.1(\(\d+\))?EV\d*|12\.1(\(\d+\))?EW\d*|12\.1(\(\d+\))?EX\d*|12\.1(\(\d+\))?EY\d*|12\.1(\(\d+\))?EZ\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XA\d*|12\.1(\(\d+\))?XB\d*|12\.1(\(\d+\))?XC\d*|12\.1(\(\d+\))?XD\d*|12\.1(\(\d+\))?XE\d*|12\.1(\(\d+\))?XF\d*|12\.1(\(\d+\))?XG\d*|12\.1(\(\d+\))?XH\d*|12\.1(\(\d+\))?XI\d*|12\.1(\(\d+\))?XJ\d*|12\.1(\(\d+\))?XL\d*|12\.1(\(\d+\))?XM\d*|12\.1(\(\d+\))?XP\d*|12\.1(\(\d+\))?XQ\d*|12\.1(\(\d+\))?XR\d*|12\.1(\(\d+\))?XS\d*|12\.1(\(\d+\))?XT\d*|12\.1(\(\d+\))?XU\d*|12\.1(\(\d+\))?XV\d*|12\.1(\(\d+\))?XW\d*|12\.1(\(\d+\))?XX\d*|12\.1(\(\d+\))?XY\d*|12\.1(\(\d+\))?XZ\d*|12\.1(\(\d+\))?YA\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YC\d*|12\.1(\(\d+\))?YD\d*|12\.1(\(\d+\))?YE\d*|12\.1(\(\d+\))?YF\d*|12\.1(\(\d+\))?YH\d*|12\.1(\(\d+\))?YI\d*|12\.1(\(\d+\))?YJ\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BC\d*|12\.2(\(\d+\))?BW\d*|12\.2(\(\d+\))?BY\d*|12\.2(\(\d+\))?BZ\d*|12\.2(\(\d+\))?CX\d*|12\.2(\(\d+\))?CY\d*|12\.2(\(\d+\))?CZ\d*|12\.2(\(\d+\))?DA\d*|12\.2(\(\d+\))?DD\d*|12\.2(\(\d+\))?DX\d*|12\.2(\(\d+\))?EU\d*|12\.2(\(\d+\))?EW\d*|12\.2(\(\d+\))?EWA\d*|12\.2(\(\d+\))?EX\d*|12\.2(\(\d+\))?JA\d*|12\.2(\(\d+\))?JK\d*|12\.2(\(\d+\))?MB\d*|12\.2(\(\d+\))?MC\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?SB\d*|12\.2(\(\d+\))?SE\d*|12\.2(\(\d+\))?SO\d*|12\.2(\(\d+\))?SU\d*|12\.2(\(\d+\))?SV\d*|12\.2(\(\d+\))?SW\d*|12\.2(\(\d+\))?SX\d*|12\.2(\(\d+\))?SXA\d*|12\.2(\(\d+\))?SXB\d*|12\.2(\(\d+\))?SXD\d*|12\.2(\(\d+\))?SY\d*|12\.2(\(\d+\))?SZ\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?TPC\d*|12\.2(\(\d+\))?XA\d*|12\.2(\(\d+\))?XB\d*|12\.2(\(\d+\))?XC\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XE\d*|12\.2(\(\d+\))?XF\d*|12\.2(\(\d+\))?XG\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XI\d*|12\.2(\(\d+\))?XJ\d*|12\.2(\(\d+\))?XK\d*|12\.2(\(\d+\))?XL\d*|12\.2(\(\d+\))?XM\d*|12\.2(\(\d+\))?XN\d*|12\.2(\(\d+\))?XQ\d*|12\.2(\(\d+\))?XR\d*|12\.2(\(\d+\))?XS\d*|12\.2(\(\d+\))?XT\d*|12\.2(\(\d+\))?XU\d*|12\.2(\(\d+\))?XV\d*|12\.2(\(\d+\))?XW\d*|12\.2(\(\d+\))?YA\d*|12\.2(\(\d+\))?YB\d*|12\.2(\(\d+\))?YC\d*|12\.2(\(\d+\))?YD\d*|12\.2(\(\d+\))?YE\d*|12\.2(\(\d+\))?YF\d*|12\.2(\(\d+\))?YG\d*|12\.2(\(\d+\))?YH\d*|12\.2(\(\d+\))?YJ\d*|12\.2(\(\d+\))?YK\d*|12\.2(\(\d+\))?YL\d*|12\.2(\(\d+\))?YM\d*|12\.2(\(\d+\))?YN\d*|12\.2(\(\d+\))?YP\d*|12\.2(\(\d+\))?YQ\d*|12\.2(\(\d+\))?YR\d*|12\.2(\(\d+\))?YS\d*|12\.2(\(\d+\))?YT\d*|12\.2(\(\d+\))?YU\d*|12\.2(\(\d+\))?YV\d*|12\.2(\(\d+\))?YW\d*|12\.2(\(\d+\))?YX\d*|12\.2(\(\d+\))?YY\d*|12\.2(\(\d+\))?YZ\d*|12\.2(\(\d+\))?ZA\d*|12\.2(\(\d+\))?ZB\d*|12\.2(\(\d+\))?ZC\d*|12\.2(\(\d+\))?ZD\d*|12\.2(\(\d+\))?ZE\d*|12\.2(\(\d+\))?ZF\d*|12\.2(\(\d+\))?ZG\d*|12\.2(\(\d+\))?ZH\d*|12\.2(\(\d+\))?ZJ\d*|12\.2(\(\d+\))?ZL\d*|12\.2(\(\d+\))?ZN\d*|12\.2(\(\d+\))?ZP\d*|12\.3(\(\d+\))?\d*|12\.3(\(\d+\))?B\d*|12\.3(\(\d+\))?BC\d*|12\.3(\(\d+\))?BW\d*|12\.3(\(\d+\))?JA\d*|12\.3(\(\d+\))?JK\d*|12\.3(\(\d+\))?JL\d*|12\.3(\(\d+\))?JX\d*|12\.3(\(\d+\))?T\d*|12\.3(\(\d+\))?TPC\d*|12\.3(\(\d+\))?XA\d*|12\.3(\(\d+\))?XB\d*|12\.3(\(\d+\))?XC\d*|12\.3(\(\d+\))?XD\d*|12\.3(\(\d+\))?XE\d*|12\.3(\(\d+\))?XF\d*|12\.3(\(\d+\))?XG\d*|12\.3(\(\d+\))?XH\d*|12\.3(\(\d+\))?XI\d*|12\.3(\(\d+\))?XJ\d*|12\.3(\(\d+\))?XK\d*|12\.3(\(\d+\))?XQ\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4009" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.4\(2\)T5|12\.2\(15\)MC2c|12\.3\(7\)T11|12\.4\(4\)T|12\.3\(14\)YX|12\.3\(14\)YG5|12\.4\(1b\)|12\.4\(3\)|12\.3\(14\)YQ8|12\.4\(4\)MR|12\.3\(14\)YM8|12\.3\(11\)T6|12\.3\(4\)T13|12\.4\(2\)XB|12\.3\(8\)T10</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3717" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2(\(\d+\))?MC\d*|12\.2(\(\d+\))?ZJ\d*|12\.3(\(\d+\))?T\d*|12\.3(\(\d+\))?XD\d*|12\.3(\(\d+\))?XX\d*|12\.3(\(\d+\))?XY\d*|12\.3(\(\d+\))?YA\d*|12\.3(\(\d+\))?YD\d*|12\.3(\(\d+\))?YF\d*|12\.3(\(\d+\))?YG\d*|12\.3(\(\d+\))?YH\d*|12\.3(\(\d+\))?YI\d*|12\.3(\(\d+\))?YJ\d*|12\.3(\(\d+\))?YK\d*|12\.3(\(\d+\))?YM\d*|12\.3(\(\d+\))?YQ\d*|12\.3(\(\d+\))?YS\d*|12\.3(\(\d+\))?YT\d*|12\.3(\(\d+\))?YU\d*|12\.4(\(\d+\))?\d*|12\.4(\(\d+\))?MR\d*|12\.4(\(\d+\))?T\d*</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:3798" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">^\s*no ip http server</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:3840" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.1\(5\)XS2|12\.1\(5\)XU1|12\.2\(1\)XD1|12\.1\(3\)XP4|12\.1DC|12\.0\(16\)SC|12\.1\(4\)XM4|12\.1\(6\)EZ|12\.1\(6\)EY|12\.0\(5\.4\)WC1|12\.1\(9\)AA|12\.2\(1b\)|12\.1\(7\)DA2|12\.2\(1c\)|12\.1\(5\)XG5|12\.0\(18\)|12\.1\(5\)XZ4|12\.2DD|12\.0\(18\)W5\(22\)|12\.1\(5\)XV3|12\.2\(2\)XA|12\.2\(2\)XB|12\.0\(4\)XM1|12\.1\(5\)YF2|12\.2\(3\)|12\.2\(1\)XQ|12\.1\(5\)XR2|12\.1\(2\)XF4|12\.1\(3\)XT3|12\.2\(1\)XH|12\.2\(1\.1\)|12\.0W|12\.2\(1\)XE|12\.1\(8a\)E|12\.1\(5\)YC1|12\.0\(18\)ST|12\.1\(5\)YD2|12\.2\(2\.2\)T|12\.0\(18\)S|12\.0\(18\)W5\(22a\)|12\.1\(6\)EZ1|12\.1\(5\)XY6|12\.1\(5\)DB2|12\.1\(9\)|12\.1\(5\)YB4|12\.1\(6\.5\)EC3</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3973" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">11\.1(\(\d+\))?\w*\d*|11\.2(\(\d+\))?\w*\d*|11\.3(\(\d+\))?\d*|11\.3(\(\d+\))?AA\d*|11\.3(\(\d+\))?DA\d*|11\.3(\(\d+\))?DB\d*|11\.3(\(\d+\))?HA\d*|11\.3(\(\d+\))?MA\d*|11\.3(\(\d+\))?NA\d*|11\.3(\(\d+\))?T\d*|11\.3(\(\d+\))?XA\d*|11\.3(\(\d+\))?WA4\d*|12\.0(\(\d+\))?\d*|12\.0(\(\d+\))?DA\d*|12\.0(\(\d+\))?DB\d*|12\.0(\(\d+\))?DC\d*|12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?SC\d*|12\.0(\(\d+\))?ST\d*|12\.0(\(\d+\))?T\d*|12\.0(10)W5(18g)|12\.0(14)W5(20)|12\.0(\(\d+\))?WC\d*|12\.0(\(\d+\))?WT\d*|12\.0(\(\d+\))?XA\d*|12\.0(\(\d+\))?XB\d*|12\.0(\(\d+\))?XC\d*|12\.0(\(\d+\))?XD\d*|12\.0(\(\d+\))?XE\d*|12\.0(\(\d+\))?XF\d*|12\.0(\(\d+\))?XG\d*|12\.0(\(\d+\))?XH\d*|12\.0(\(\d+\))?XI\d*|12\.0(\(\d+\))?XJ\d*|12\.0(\(\d+\))?(5)XK\d*|12\.0(\(\d+\))?(7)XK\d*|12\.0(\(\d+\))?XL\d*|12\.0(\(\d+\))?XM\d*|12\.0(\(\d+\))?XN\d*|12\.0(\(\d+\))?XP\d*|12\.0(\(\d+\))?XQ\d*|12\.0(\(\d+\))?XR\d*|12\.0(\(\d+\))?XS\d*|12\.0(\(\d+\))?XU\d*|12\.0(\(\d+\))?XV\d*|12\.1(\(\d+\))?\d*|12\.1(\(\d+\))?AA\d*|12\.1(\(\d+\))?CX\d*|12\.1(\(\d+\))?DA\d*|12\.1(\(\d+\))?DB\d*|12\.1(\(\d+\))?DC\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?EX\d*|12\.1(\(\d+\))?EY\d*|12\.1(\(\d+\))?EZ\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XA\d*|12\.1(\(\d+\))?XB\d*|12\.1(\(\d+\))?XC\d*|12\.1(\(\d+\))?XD\d*|12\.1(\(\d+\))?XE\d*|12\.1(\(\d+\))?XF\d*|12\.1(\(\d+\))?XG\d*|12\.1(\(\d+\))?XH\d*|12\.1(\(\d+\))?XI\d*|12\.1(\(\d+\))?XJ\d*|12\.1(\(\d+\))?XK\d*|12\.1(\(\d+\))?XL\d*|12\.1(\(\d+\))?XM\d*|12\.1(\(\d+\))?XP\d*|12\.1(\(\d+\))?XQ\d*|12\.1(\(\d+\))?XR\d*|12\.1(\(\d+\))?XS\d*|12\.1(\(\d+\))?XT\d*|12\.1(\(\d+\))?XU\d*|12\.1(\(\d+\))?XV\d*|12\.1(\(\d+\))?XW\d*|12\.1(\(\d+\))?XX\d*|12\.1(\(\d+\))?XY\d*|12\.1(\(\d+\))?XZ\d*|12\.1(\(\d+\))?YA\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YC\d*|12\.1(\(\d+\))?YD\d*|12\.1(\(\d+\))?YF\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?XA\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XE\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XQ\d*</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:4067" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">^\s*ip http server</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:4124" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">mpls traffic-eng tunnels</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:4074" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">tag-switching ip</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:3984" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">mpls ip</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:3996" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.3\(7\)XI|12\.3\(7\)T|12\.2\(10g\)|12\.3\(8\)YG|12\.2\(20\)EWA|12\.2\(20\)S4|12\.3\(8\)XY|12\.2\(15\)CZ|12\.3\(8\)XW|12\.3\(7\)XJ|12\.2\(18\)S|12\.2\(13e\)|12\.3\(2\)XE1|12\.3\(8\)YD|12\.3\(11\)T|12\.2\(19\)SW|12\.3\(7\)XL|12\.3\(7\)XI1|12\.3\(11\)YF|12\.2\(15\)T7|12\.3\(4\)XN|12\.2\(16f\)|12\.3\(2\)XC3|12\.3\(8\)YA|12\.3\(2\)T5|12\.3\(4\)XD|12\.3\(2\)XT|12\.2\(12\)DA6|12\.2\(13\)T14|12\.2\(4\)YA8|12\.3\(4\)XQ|12\.3\(5a\)B4|12\.3\(2\)XF|12\.2\(14\)SU|12\.3\(4\)YE|12\.2\(4\)B8|12\.3\(3f\)|12\.3\(4\)XH|12\.2\(18\)EW|12\.3\(7\)XM|12\.3\(4\)XK1|12\.2\(19b\)|12\.3\(9a\)BC|12\.3\(4\)XG1|12\.2\(2\)XB18|12\.2\(17d\)|12\.2\(15\)XR|12\.3\(8\)YH|12\.3\(2\)T|12\.3\(7\)XS|12\.3\(4\)T|12\.2\(17d\)SXB|12\.3\(7\)XR|12\.2\(23\)|12\.2\(15\)BC2|12\.3\(4\)T7|12\.3T|12\.2\(2\)B|12\.3\(5\)|12\.3\(8\)T|12\.3\(8\)XX|12\.2\(15\)JK|12\.2\(21a\)|12\.3\(8\)XU|12\.2\(4\)B7|12\.3\(5a\)B|12\.2\(15\)JA</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3414" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.1(\(\d+\))?DB\d*|12\.1(\(\d+\))?DC\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XG\d*|12\.1(\(\d+\))?XI\d*|12\.1(\(\d+\))?XJ\d*|12\.1(\(\d+\))?XL\d*|12\.1(\(\d+\))?XM\d*|12\.1(\(\d+\))?XP\d*|12\.1(\(\d+\))?XQ\d*|12\.1(\(\d+\))?XR\d*|12\.1(\(\d+\))?XT\d*|12\.1(\(\d+\))?XU\d*|12\.1(\(\d+\))?XV\d*|12\.1(\(\d+\))?YA\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YC\d*|12\.1(\(\d+\))?YD\d*|12\.1(\(\d+\))?YE\d*|12\.1(\(\d+\))?YF\d*|12\.1(\(\d+\))?YH\d*|12\.1(\(\d+\))?YI\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BC\d*|12\.2(\(\d+\))?BW\d*|12\.2(\(\d+\))?BX\d*|12\.B(\(\d+\))?Y\d*|12\.2(\(\d+\))?BZ\d*|12\.2(\(\d+\))?CX\d*|12\.2(\(\d+\))?CY\d*|12\.2(\(\d+\))?CZ\d*|12\.2(\(\d+\))?DA\d*|12\.2(\(\d+\))?DD\d*|12\.2(\(\d+\))?DX\d*|12\.2(\(\d+\))?EW\d*|12\.2(\(\d+\))?EWA\d*|12\.2(\(\d+\))?JA\d*|12\.2(\(\d+\))?JK\d*|12\.2(\(\d+\))?MB\d*|12\.2(\(\d+\))?MC\d*|12\.2(\(\d+\))?MX\d*|12\.2(\(\d+\))?SU\d*|12\.2(\(\d+\))?SW\d*|12\.2(\(\d+\))?SY\d*|12\.2(\(\d+\))?SZ\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?XA\d*|12\.2(\(\d+\))?XB\d*|12\.2(\(\d+\))?XC\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XE\d*|12\.2(\(\d+\))?XF\d*|12\.2(\(\d+\))?XG\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XI\d*|12\.2(\(\d+\))?XJ\d*|12\.2(\(\d+\))?XK\d*|12\.2(\(\d+\))?XL\d*|12\.2(\(\d+\))?XM\d*|12\.2(\(\d+\))?XN\d*|12\.2(\(\d+\))?XQ\d*|12\.2(\(\d+\))?XR\d*|12\.2(\(\d+\))?XS\d*|12\.2(\(\d+\))?XT\d*|12\.2(\(\d+\))?XU\d*|12\.2(\(\d+\))?XW\d*|12\.2(\(\d+\))?XZ\d*|12\.2(\(\d+\))?YA\d*|12\.2(\(\d+\))?YB\d*|12\.2(\(\d+\))?YC\d*|12\.2(\(\d+\))?YD\d*|12\.2(\(\d+\))?YE\d*|12\.2(\(\d+\))?YF\d*|12\.2(\(\d+\))?YG\d*|12\.2(\(\d+\))?YH\d*|12\.2(\(\d+\))?YJ\d*|12\.2(\(\d+\))?YL\d*|12\.2(\(\d+\))?YM\d*|12\.2(\(\d+\))?YN\d*|12\.2(\(\d+\))?YO\d*|12\.2(\(\d+\))?YQ\d*|12\.2(\(\d+\))?YR\d*|12\.2(\(\d+\))?YS\d*|12\.2(\(\d+\))?YU\d*|12\.2(\(\d+\))?YV\d*|12\.2(\(\d+\))?YW\d*|12\.2(\(\d+\))?YX\d*|12\.2(\(\d+\))?YZ\d*|12\.2(\(\d+\))?ZB\d*|12\.2(\(\d+\))?ZC\d*|12\.2(\(\d+\))?ZD\d*|12\.2(\(\d+\))?ZE\d*|12\.2(\(\d+\))?ZF\d*|12\.2(\(\d+\))?ZG\d*|12\.2(\(\d+\))?ZH\d*|12\.2(\(\d+\))?ZI\d*|12\.2(\(\d+\))?ZJ\d*|12\.2(\(\d+\))?ZL\d*|12\.2(\(\d+\))?ZN\d*|12\.2(\(\d+\))?ZO\d*|12\.3(\(\d+\))?\d*|12\.3(\(\d+\))?B\d*|12\.3(\(\d+\))?BC\d*|12\.3(\(\d+\))?BW\d*|12\.3(\(\d+\))?T\d*|12\.3(\(\d+\))?XA\d*|12\.3(\(\d+\))?XB\d*|12\.3(\(\d+\))?XC\d*|12\.3(\(\d+\))?XD\d*|12\.3(\(\d+\))?XE\d*|12\.3(\(\d+\))?XF\d*|12\.3(\(\d+\))?XG\d*|12\.3(\(\d+\))?XH\d*|12\.3(\(\d+\))?XI\d*|12\.3(\(\d+\))?XJ\d*|12\.3(\(\d+\))?XK\d*|12\.3(\(\d+\))?XL\d*|12\.3(\(\d+\))?XM\d*|12\.3(\(\d+\))?XN\d*|12\.3(\(\d+\))?XQ\d*|12\.3(\(\d+\))?XR\d*|12\.3(\(\d+\))?XS\d*|12\.3(\(\d+\))?XT\d*|12\.3(\(\d+\))?XU\d*|12\.3(\(\d+\))?XW\d*|12\.3(\(\d+\))?XX\d*|12\.3(\(\d+\))?XY\d*|12\.3(\(\d+\))?YA\d*|12\.3(\(\d+\))?YD\d*|12\.3(\(\d+\))?YE\d*|12\.3(\(\d+\))?YF\d*|12\.3(\(\d+\))?YG\d*|12\.3(\(\d+\))?YH\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4130" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">10\.0(\(\d+\))?\w*\d*|10\.2(\(\d+\))?\w*\d*|10\.3(\(\d+\))?\w*\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3087" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?S\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3233" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0\(10\.1\)S|12\.0\(11\)S</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:3624" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">bgp log-neighbor-changes</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:4032" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2\(17d\)SXB5|12\.3\(4\)XQ1|12\.2\(15\)JK2|12\.3\(7\)XS2|12\.0\(29\)S|12\.3\(8\)XX1|12\.3\(8\)T5|12\.2\(20\)S7|12\.2\(15\)ZK6|12\.3\(4\)XD4|12\.3\(8\)YA1|12\.3\(8\)XU4|12\.2\(27\)|12\.3\(2\)XE1|12\.2\(4\)YA8|12\.3\(11\)T|12\.3\(7\)T7|12\.0\(27\)S4|12\.2\(18\)EW2|12\.3\(9c\)|12\.2\(14\)S13|12\.3\(2\)XC3|12\.0\(28\)W5\(31\)|12\.3\(4\)T11|12\.1\(26\)|12\.2\(14\)SU2|12\.2\(18\)SXD2|12\.2\(25\)EW|12\.0\(26\)S2d|12\.1\(23\)E2|12\.3\(5a\)B3|12\.0\(25\)S5|12\.3\(10a\)|12\.3\(7\)XI3|12\.3\(6d\)|12\.0\(26\)S5|12\.1\(26\)E|12\.2\(25\)SW|12\.0\(27\)S2d|12\.2\(20\)SE3|12\.0\(27\)SV4|12\.1\(22\)EA2|12\.0\(28b\)|12\.2\(18\)S8|12\.2\(25\)S|12\.0\(28\)S1|12\.0\(1\)T|12\.3\(12\)|12\.1\(22\)E3|12\.2\(15\)T15|12\.3\(9a\)BC1|12\.2\(2\)YC|12\.1\(14\)AX3</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:3856" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">snmp-server enable traps bgp</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:3558" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?\d*|12\.0(\(\d+\))?DA\d*|12\.0(\(\d+\))?DB\d*|12\.0(\(\d+\))?DC\d*|12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?SC\d*|12\.0(\(\d+\))?SP\d*|12\.0(\(\d+\))?ST\d*|12\.O(\(\d+\))?SV\d*|12\.0(\(\d+\))?SX\d*|12\.0(\(\d+\))?SY\d*|12\.0(\(\d+\))?SZ\d*|12\.0(\(\d+\))?W5\d*|12\.0(\(\d+\))?WC\d*|12\.0(\(\d+\))?WT\d*|12\.0(\(\d+\))?WX\d*|12\.0(\(\d+\))?XA\d*|12\.0(\(\d+\))?XB\d*|12\.0(\(\d+\))?XC\d*|12\.0(\(\d+\))?XD\d*|12\.0(\(\d+\))?XE\d*|12\.0(\(\d+\))?XF\d*|12\.0(\(\d+\))?XG\d*|12\.0(\(\d+\))?XH\d*|12\.0(\(\d+\))?XI\d*|12\.0(\(\d+\))?XJ\d*|12\.0(\(\d+\))?XK\d*|12\.0(\(\d+\))?XL\d*|12\.0(\(\d+\))?XM\d*|12\.0(\(\d+\))?XN\d*|12\.0(\(\d+\))?XP\d*|12\.0(\(\d+\))?XQ\d*|12\.0(\(\d+\))?XR\d*|12\.0(\(\d+\))?XS\d*|12\.0(\(\d+\))?XT\d*|12\.0(\(\d+\))?XU\d*|12\.0(\(\d+\))?XV\d*|12\.1(\(\d+\))?\d*|12\.1(\(\d+\))?AA\d*|12\.1(\(\d+\))?AX\d*|12\.1(\(\d+\))?AY\d*|12\.1(\(\d+\))?AZ\d*|12\.1(\(\d+\))?DA\d*|12\.1(\(\d+\))?DB\d*|12\.1(\(\d+\))?DC\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EA\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?EO\d*|12\.1(\(\d+\))?EV\d*|12\.1(\(\d+\))?EW\d*|12\.1(\(\d+\))?EX\d*|12\.1(\(\d+\))?EY\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XA\d*|12\.1(\(\d+\))?XB\d*|12\.1(\(\d+\))?XC\d*|12\.1(\(\d+\))?XD\d*|12\.1(\(\d+\))?XE\d*|12\.1(\(\d+\))?XF\d*|12\.1(\(\d+\))?XG\d*|12\.1(\(\d+\))?XH\d*|12\.1(\(\d+\))?XI\d*|12\.1(\(\d+\))?XJ\d*|12\.1(\(\d+\))?XL\d*|12\.1(\(\d+\))?XM\d*|12\.1(\(\d+\))?XP\d*|12\.1(\(\d+\))?XQ\d*|12\.1(\(\d+\))?XR\d*|12\.1(\(\d+\))?XT\d*|12\.1(\(\d+\))?XU\d*|12\.1(\(\d+\))?XV\d*|12\.1(\(\d+\))?YA\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YC\d*|12\.1(\(\d+\))?YD\d*|12\.1(\(\d+\))?YE\d*|12\.1(\(\d+\))?YF\d*|12\.1(\(\d+\))?YH\d*|12\.1(\(\d+\))?YI\d*|12\.1(\(\d+\))?YJ\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BC\d*|12\.2(\(\d+\))?BW\d*|12\.2(\(\d+\))?BX\d*|12\.2(\(\d+\))?BY\d*|12\.2(\(\d+\))?BZ\d*|12\.2(\(\d+\))?CZ\d*|12\.2(\(\d+\))?DA\d*|12\.2(\(\d+\))?DD\d*|12\.2(\(\d+\))?DX\d*|12\.2(\(\d+\))?EW\d*|12\.2(\(\d+\))?JK\d*|12\.2(\(\d+\))?MB\d*|12\.2(\(\d+\))?MC\d*|12\.2(\(\d+\))?MX\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?SE\d*|12\.2(\(\d+\))?SU\d*|12\.2(\(\d+\))?SW\d*|12\.2(\(\d+\))?SX\d*|12\.2(\(\d+\))?SXA\d*|12\.2(\(\d+\))?SXB\d*|12\.2(\(\d+\))?SXD\d*|12\.2(\(\d+\))?SY\d*|12\.2(\(\d+\))?SZ\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?XA\d*|12\.2(\(\d+\))?XB\d*|12\.2(\(\d+\))?XC\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XE\d*|12\.2(\(\d+\))?XF\d*|12\.2(\(\d+\))?XG\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XI\d*|12\.2(\(\d+\))?XJ\d*|12\.2(\(\d+\))?XK\d*|12\.2(\(\d+\))?XL\d*|12\.2(\(\d+\))?XM\d*|12\.2(\(\d+\))?XN\d*|12\.2(\(\d+\))?XQ\d*|12\.2(\(\d+\))?XS\d*|12\.2(\(\d+\))?XT\d*|12\.2(\(\d+\))?XU\d*|12\.2(\(\d+\))?XW\d*|12\.2(\(\d+\))?XZ\d*|12\.2(\(\d+\))?YA\d*|12\.2(\(\d+\))?YB\d*|12\.2(\(\d+\))?YC\d*|12\.2(\(\d+\))?YE\d*|12\.2(\(\d+\))?YF\d*|12\.2(\(\d+\))?YG\d*|12\.2(\(\d+\))?YH\d*|12\.2(\(\d+\))?YJ\d*|12\.2(\(\d+\))?YK\d*|12\.2(\(\d+\))?YL\d*|12\.2(\(\d+\))?YM\d*|12\.2(\(\d+\))?YN\d*|12\.2(\(\d+\))?YO\d*|12\.2(\(\d+\))?YP\d*|12\.2(\(\d+\))?YQ\d*|12\.2(\(\d+\))?YR\d*|12\.2(\(\d+\))?YS\d*|12\.2(\(\d+\))?YT\d*|12\.2(\(\d+\))?YU\d*|12\.2(\(\d+\))?YV\d*|12\.2(\(\d+\))?YW\d*|12\.2(\(\d+\))?YX\d*|12\.2(\(\d+\))?YY\d*|12\.2(\(\d+\))?YZ\d*|12\.2(\(\d+\))?ZA\d*|12\.2(\(\d+\))?ZB\d*|12\.2(\(\d+\))?ZC\d*|12\.2(\(\d+\))?ZD\d*|12\.2(\(\d+\))?ZE\d*|12\.2(\(\d+\))?ZF\d*|12\.2(\(\d+\))?ZG\d*|12\.2(\(\d+\))?ZH\d*|12\.2(\(\d+\))?ZI\d*|12\.2(\(\d+\))?ZJ\d*|12\.2(\(\d+\))?ZK\d*|12\.2(\(\d+\))?ZL\d*|12\.2(\(\d+\))?ZN\d*|12\.2(\(\d+\))?ZO\d*|12\.2(\(\d+\))?ZP\d*|12\.3(\(\d+\))?\d*|12\.3(\(\d+\))?B\d*|12\.3(\(\d+\))?BC\d*|12\.3(\(\d+\))?BW\d*|12\.3(\(\d+\))?T\d*|12\.3(\(\d+\))?XA\d*|12\.3(\(\d+\))?XB\d*|12\.3(\(\d+\))?XC\d*|12\.3(\(\d+\))?XD\d*|12\.3(\(\d+\))?XE\d*|12\.3(\(\d+\))?XF\d*|12\.3(\(\d+\))?XG\d*|12\.3(\(\d+\))?XH\d*|12\.3(\(\d+\))?XI\d*|12\.3(\(\d+\))?XJ\d*|12\.3(\(\d+\))?XK\d*|12\.3(\(\d+\))?XL\d*|12\.3(\(\d+\))?XN\d*|12\.3(\(\d+\))?XQ\d*|12\.3(\(\d+\))?XR\d*|12\.3(\(\d+\))?XS\d*|12\.3(\(\d+\))?XU\d*|12\.3(\(\d+\))?XV\d*|12\.3(\(\d+\))?XX\d*|12\.3(\(\d+\))?YA\d*|12\.3(\(\d+\))?YC\d*|12\.3(\(\d+\))?YD\d*|12\.3(\(\d+\))?YE\d*|12\.3(\(\d+\))?YF\d*|12\.3(\(\d+\))?YH\d*|12\.3(\(\d+\))?YJ\d*|12\.3(\(\d+\))?YL\d*</major_release>
    </version_state>
    <file_state id="oval:org.mitre.oval:ste:4688" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.1.98.12</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:4361" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.1.98.12</version>
    </file_state>
    <line_state id="oval:org.mitre.oval:ste:3239" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">mdt default</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:3203" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.3\(4\)TPC11b|12\.4\(6\)XT2|12\.4\(11\)MD1|12\.2\(18\)SXF12a|12\.2\(13\)ZH9|12\.4\(15\)T|12\.3\(11\)YZ2|12\.3\(18a\)|12\.2\(25\)SEG4|12\.3\(22a\)|12\.2\(33\)XN1|12\.2\(25\)SEG3|12\.2\(37\)SG1|12\.4\(4\)XC7|12\.3\(2\)XA6|12\.3\(2\)XA7|12\.2\(31\)SG2|14-APR-08|12\.2\(18\)SXF10|12\.2\(18\)SXF13|12\.2\(25\)EWA10|12\.3\(14\)YM10|12\.3\(14\)YM12|12\.2\(18\)ZY1|12\.2\(18\)ZY2|12\.3\(21b\)|12\.2\(29\)SM2|12\.2\(31\)SB11|12\.3\(17b\)BC8|12\.3\(11\)YK3|12\.4\(4\)XD8|12\.4\(13c\)|12\.2\(14\)S18|12\.4\(6\)T8|12\.3\(7\)XI10a|12\.2\(15\)MC2h|12\.4\(6\)XE2|12\.2\(15\)MC2k|12\.3\(19a\)|12\.4\(15\)SW|12\.2\(44\)SG|12\.2\(25\)SEE4|12\.2\(29\)SVD|12\.3\(11\)YS2|12\.4\(11\)SW3|12\.4\(16\)|12\.4\(5c\)|12\.0\(33\)S|12\.2\(20\)S14|12\.4\(11\)XJ4|12\.2\(25\)EWA11|12\.2\(33\)SXH2|12\.2\(18\)S13|12\.4\(16\)MR2|12\.4\(2\)XB6|12\.4\(9\)T4|12\.2\(40\)SG|12\.3\(14\)YX11|12\.3\(23\)BC1|12\.2\(25\)SW11|12\.2\(31\)SB5|12\.2\(37\)EY|12\.2\(37\)EX|12\.3\(8\)JK1|12\.2\(33\)SRB3|12\.2\(33\)SRB1|12\.3\(2\)XE5|12\.4\(7f\)|12\.4\(10c\)|12\.4\(9\)XG2|12\.4\(11\)T3|12\.3\(23\)|12\.4\(6\)XT1|12\.4\(15\)T4|12\.3\(7\)XR8|12\.2\(33\)SRC|12\.3\(7\)XR7|12\.0\(30\)SZ4|12\.2\(33\)SRA7|12\.2\(33\)SRA4|12\.3\(17c\)|12\.4\(12b\)|12\.2\(33\)SB|12\.3\(20a\)|12\.4\(8d\)|12\.2\(35\)SE4|12\.4\(2\)T6|12\.2\(44\)SE1|12\.3\(8\)YG6|12\.2\(25\)SG2|12\.4\(12\)MR2|12\.3\(21a\)BC2|12\.2\(31\)SGA5|12\.4\(3h\)|12\.0\(32\)SY4|12\.2\(31\)SGA6|12\.0\(32\)S9|12\.2\(31\)SGA3|12\.2\(31\)SGA2|12\.3\(14\)YX9|12\.3\(23\)BC|12\.4\(4\)XD10|12\.2\(25\)EWA13|12\.3\(2\)XC5|12\.2\(18\)SXF10a|12\.2\(37\)SE|12\.2\(29b\)SV|12\.2\(13\)ZH11|12\.2\(25\)S13|12\.2\(25\)S15|12\.2\(28\)SB7|12\.4\(15\)MD|12\.4\(4\)T8|12\.4\(18a\)|12\.2\(18\)IXD1|12\.3\(26\)|12\.2\(40\)EX1</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4077" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?SX\d*|12\.0(\(\d+\))?SY\d*|12\.0(\(\d+\))?SZ\d*|12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BC\d*|12\.2(\(\d+\))?BZ\d*|12\.2(\(\d+\))?CX\d*|12\.2(\(\d+\))?CZ\d*|12\.2(\(\d+\))?EU\d*|12\.2(\(\d+\))?EW\d*|12\.2(\(\d+\))?EWA\d*|12\.2(\(\d+\))?EX\d*|12\.2(\(\d+\))?EY\d*|12\.2(\(\d+\))?EZ\d*|12\.2(\(\d+\))?FZ\d*|12\.2(\(\d+\))?IXA\d*|12\.2(\(\d+\))?IXB\d*|12\.2(\(\d+\))?IXC\d*|12\.2(\(\d+\))?IXD\d*|12\.2(\(\d+\))?MC\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?SB\d*|12\.2(\(\d+\))?SBC\d*|12\.2(\(\d+\))?SE\d*|12\.2(\(\d+\))?SEA\d*|12\.2(\(\d+\))?SEB\d*|12\.2(\(\d+\))?SEC\d*|12\.2(\(\d+\))?SED\d*|12\.2(\(\d+\))?SEE\d*|12\.2(\(\d+\))?SEG\d*|12\.2(\(\d+\))?SG\d*|12\.2(\(\d+\))?SGA\d*|12\.2(\(\d+\))?SM\d*|12\.2(\(\d+\))?SO\d*|12\.2(\(\d+\))?SRA\d*|12\.2(\(\d+\))?SRB\d*|12\.2(\(\d+\))?SU\d*|12\.2(\(\d+\))?SV\d*|12\.2(\(\d+\))?SW\d*|12\.2(\(\d+\))?SX\d*|12\.2(\(\d+\))?SXA\d*|12\.2(\(\d+\))?SXB\d*|12\.2(\(\d+\))?SXD\d*|12\.2(\(\d+\))?SXE\d*|12\.2(\(\d+\))?SXF\d*|12\.2(\(\d+\))?SY\d*|12\.2(\(\d+\))?SZ\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?UZ\d*|12\.2(\(\d+\))?XN\d*|12\.2(\(\d+\))?YH\d*|12\.2(\(\d+\))?YJ\d*|12\.2(\(\d+\))?YL\d*|12\.2(\(\d+\))?YM\d*|12\.2(\(\d+\))?YN\d*|12\.2(\(\d+\))?YQ\d*|12\.2(\(\d+\))?YR\d*|12\.2(\(\d+\))?YT\d*|12\.2(\(\d+\))?YU\d*|12\.2(\(\d+\))?YV\d*|12\.2(\(\d+\))?YX\d*|12\.2(\(\d+\))?YZ\d*|12\.2(\(\d+\))?ZA\d*|12\.2(\(\d+\))?ZC\d*|12\.2(\(\d+\))?ZD\d*|12\.2(\(\d+\))?ZE\d*|12\.2(\(\d+\))?ZF\d*|12\.2(\(\d+\))?ZG\d*|12\.2(\(\d+\))?ZH\d*|12\.2(\(\d+\))?ZJ\d*|12\.2(\(\d+\))?ZL\d*|12\.2(\(\d+\))?ZP\d*|12\.2(\(\d+\))?ZU\d*|12\.2(\(\d+\))?ZY\d*|12\.3(\(\d+\))?\d*|12\.3(\(\d+\))?B\d*|12\.3(\(\d+\))?BC\d*|12\.3(\(\d+\))?BW\d*|12\.3(\(\d+\))?JK\d*|12\.3(\(\d+\))?T\d*|12\.3(\(\d+\))?TPC\d*|12\.3(\(\d+\))?VA\d*|12\.3(\(\d+\))?XA\d*|12\.3(\(\d+\))?XB\d*|12\.3(\(\d+\))?XC\d*|12\.3(\(\d+\))?XD\d*|12\.3(\(\d+\))?XE\d*|12\.3(\(\d+\))?XF\d*|12\.3(\(\d+\))?XG\d*|12\.3(\(\d+\))?XI\d*|12\.3(\(\d+\))?XJ\d*|12\.3(\(\d+\))?XK\d*|12\.3(\(\d+\))?XQ\d*|12\.3(\(\d+\))?XR\d*|12\.3(\(\d+\))?XS\d*|12\.3(\(\d+\))?XU\d*|12\.3(\(\d+\))?XW\d*|12\.3(\(\d+\))?XY\d*|12\.3(\(\d+\))?YA\d*|12\.3(\(\d+\))?YD\d*|12\.3(\(\d+\))?YF\d*|12\.3(\(\d+\))?YG\d*|12\.3(\(\d+\))?YH\d*|12\.3(\(\d+\))?YI\d*|12\.3(\(\d+\))?YJ\d*|12\.3(\(\d+\))?YK\d*|12\.3(\(\d+\))?YM\d*|12\.3(\(\d+\))?YQ\d*|12\.3(\(\d+\))?YS\d*|12\.3(\(\d+\))?YT\d*|12\.3(\(\d+\))?YU\d*|12\.3(\(\d+\))?YX\d*|12\.3(\(\d+\))?YZ\d*|12\.4(\(\d+\))?\d*|12\.4(\(\d+\))?MD\d*|12\.4(\(\d+\))?MR\d*|12\.4(\(\d+\))?SW\d*|12\.4(\(\d+\))?T\d*|12\.4(\(\d+\))?XA\d*|12\.4(\(\d+\))?XB\d*|12\.4(\(\d+\))?XC\d*|12\.4(\(\d+\))?XD\d*|12\.4(\(\d+\))?XE\d*|12\.4(\(\d+\))?XF\d*|12\.4(\(\d+\))?XG\d*|12\.4(\(\d+\))?XJ\d*|12\.4(\(\d+\))?XK\d*|12\.4(\(\d+\))?XT\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3267" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">11\.1\(36\)CC2|12\.0\(16\.06\)S|12\.0\(16\)W5\(21\)|12\.0\(15\)S3|12\.0\(5\)T|12\.0ST|12\.0\(17\)S|12\.0\(10\)W5\(18g\)|12\.1\(8\)|12\.0\(17\)|12\.0\(16\)S1</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3353" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">11\.1(\(\d+\))?CA\d*|11\.1(\(\d+\))?CC\d*|11\.1(\(\d+\))?CT\d*|11\.2(\(\d+\))?\d*|11\.2(\(\d+\))?BC\d*|11\.2(\(\d+\))?F\d*|11\.2(\(\d+\))?GS\d*|11\.2(\(\d+\))?P\d*|11\.2(\(\d+\))?(4)XA\d*|11\.2(\(\d+\))?(9)XA\d*|11\.3(\(\d+\))?\d*|11\.3(\(\d+\))?AA\d*|11\.3(\(\d+\))?DA\d*|11\.3(\(\d+\))?DB\d*|11\.3(\(\d+\))?HA\d*|11\.3(\(\d+\))?MA\d*|11\.3(\(\d+\))?NA\d*|11\.3(\(\d+\))?T\d*|11\.3(\(\d+\))?WA4\d*|11\.3(\(\d+\))?(2)XA\d*|12\.0(\(\d+\))?\d*|12\.0(\(\d+\))?DA\d*|12\.0(\(\d+\))?DB\d*|12\.0(\(\d+\))?DC\d*|12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?T\d*|12\.0(\(\d+\))?W5\d*|12\.0(\(\d+\))?XA\d*|12\.0(\(\d+\))?XB\d*|12\.0(\(\d+\))?XC\d*|12\.0(\(\d+\))?XD\d*|12\.0(\(\d+\))?XF\d*|12\.0(\(\d+\))?XG\d*|12\.0(\(\d+\))?XH\d*|12\.0(\(\d+\))?XI\d*|12\.0(\(\d+\))?XJ\d*</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:4199" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">router bgp</config_line>
    </line_state>
    <patch_state id="oval:org.mitre.oval:ste:4749" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2393" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.7a-8.9.0</evr>
    </rpminfo_state>
    <inetlisteningservers_state id="oval:org.mitre.oval:ste:2392" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <program_name operation="pattern match">^.*smbd.*</program_name>
    </inetlisteningservers_state>
    <patch_state id="oval:org.mitre.oval:ste:5224" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:5229" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">60</version>
    </patch_state>
    <textfilecontent_state id="oval:org.mitre.oval:ste:5132" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression operation="pattern match">\brw\b</subexpression>
    </textfilecontent_state>
    <patch_state id="oval:org.mitre.oval:ste:5183" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">34</version>
    </patch_state>
    <line_state id="oval:org.mitre.oval:ste:4088" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">no service dhcp</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:3044" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2\(18\)EW2|12\.2\(18\)S6|12\.2\(24\)SV|12\.2\(20\)EWA|12\.2\(20\)S4|12\.2\(25\)S|12\.2\(25\)SW|12\.2\(20\)SE3|12\.2\(22\)S2</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3206" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2(\(\d+\))?(18)EW\d*|12\.2(\(\d+\))?(20)EW\d*|12\.2(\(\d+\))?(18)EWA\d*|12\.2(\(\d+\))?(18)S\d*|12\.2(\(\d+\))?(18)SE\d*|12\.2(\(\d+\))?(18)SV\d*|12\.2(\(\d+\))?(18)SW\d*|12\.2(\(\d+\))?(14)SZ\d*</major_release>
    </version_state>
    <patch_state id="oval:org.mitre.oval:ste:4273" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4065" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3288" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <version_state id="oval:org.mitre.oval:ste:3121" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0\(21\.03\)SY|12\.2\(8\)YB|12\.2\(4\)YG|12\.1\(5\)T|12\.2\(8\)T|12\.1\(12\.5\)E|12\.0\(21\.03\)S|12\.2\(12\)DA|12\.2\(8\)YN|12\.1\(1\)T|12\.2|12\.1\(13\)E|12\.0\(21\)ST2|12\.1\(18\)|12\.1\(11b\)EW\(0\.46\)|12\.2\(12\)T|12\.2\(4\)XL5|12\.1\(4\)T|12\.1\(2\)T|12\.2\(13\.3\)B|12\.2\(10\.4\)|12\.0\(20\)SP3|12\.2\(4\)YA3|12\.2\(2\)XK3|12\.2\(4\)YC4|12\.2\(15\)BZ|12\.2\(11\.4\)DA|12\.0\(21\)S3|12\.0\(22\)SY|12\.1\(8\)EA1c|12\.0\(5\)WCa|12\.2\(10\)|12\.1EC|12\.2\(4\)YH|12\.1\(18\.1\)|12\.0\(19\)ST5|12\.0\(20\.04\)SP2|12\.2\(4\)YB|12\.2\(11\.1\)S|12\.1\(11b\)EW|12\.2\(1a\)XC5|12\.1\(12c\)EC|12\.2\(4\)MB5|12\.1\(11b\)EX</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4005" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?SC\d*|12\.0(\(\d+\))?SL\d*|12\.0(\(\d+\))?SP\d*|12\.0(\(\d+\))?ST\d*|12\.0(\(\d+\))?SX\d*|12\.0(\(\d+\))?SY\d*|12\.0(\(\d+\))?WC\d*|12\.0(\(\d+\))?XE\d*|12\.1(\(\d+\))?\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EA\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?EW\d*|12\.1(\(\d+\))?EW\d*|12\.1(\(\d+\))?EX\d*|12\.1(\(\d+\))?XF\d*|12\.1(\(\d+\))?XG\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YC\d*|12\.2(\(\d+\))?\d*|12\.2(4)B\d*|12\.2(\(\d+\))?BC\d*|12\.2(\(\d+\))?BY\d*|12\.2(\(\d+\))?BZ\d*|12\.2(\(\d+\))?DA\d*|12\.2(\(\d+\))?MB\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?XC\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XE\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XI\d*|12\.2(\(\d+\))?XJ\d*|12\.2(\(\d+\))?XK\d*|12\.2(\(\d+\))?XL\d*|12\.2(\(\d+\))?XM\d*|12\.2(\(\d+\))?YA\d*|12\.2(\(\d+\))?YB\d*|12\.2(\(\d+\))?YC\d*|12\.2(\(\d+\))?YF\d*|12\.2(\(\d+\))?YG\d*|12\.2(\(\d+\))?YH\d*</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:4012" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">^\s*rtr responder</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:3523" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">11\.0(\(\d+\))?\w*\d*|11\.1(\(\d+\))?\d*|11\.1(\(\d+\))?AA\d*|11\.1(\(\d+\))?CA\d*|11\.1(\(\d+\))?CC\d*|11\.2(\(\d+\))?\d*|11\.2(\(\d+\))?P\d*|11\.2(\(\d+\))?SA\d*|11\.3(\(\d+\))?\d*|11\.3(\(\d+\))?T\d*|12\.0(\(\d+\))?\d*|12\.0(\(\d+\))?DA\d*|12\.0(\(\d+\))?DB\d*|12\.0(\(\d+\))?DC\d*|12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?SC\d*|12\.0(\(\d+\))?SL\d*|12\.0(\(\d+\))?SP\d*|12\.0(\(\d+\))?ST\d*|12\.0(\(\d+\))?SX\d*|12\.0(\(\d+\))?SY\d*|12\.0(\(\d+\))?SZ\d*|12\.0(\(\d+\))?T\d*|12\.0(\(\d+\))?W5\d*|12\.0(\(\d+\))?WC\d*|12\.0(\(\d+\))?WT\d*|12\.0(\(\d+\))?X\d*|12\.1(\(\d+\))?\d*|12\.1(\(\d+\))?AA\d*|12\.1(\(\d+\))?AX\d*|12\.1(\(\d+\))?AY\d*|12\.1(\(\d+\))?DA\d*|12\.1(\(\d+\))?DB\d*|12\.1(\(\d+\))?DC\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EA\d*|12\.1(\(\d+\))?EB\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?EV\d*|12\.1(\(\d+\))?EW\d*|12\.1(\(\d+\))?EX\d*|12\.1(\(\d+\))?EY\d*|12\.1(\(\d+\))?YJ\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?X\d*|12\.1(\(\d+\))?XA\d*|12\.1(\(\d+\))?XC\d*|12\.1(\(\d+\))?XD\d*|12\.1(\(\d+\))?XH\d*|12\.1(\(\d+\))?XI\d*|12\.1(\(\d+\))?XB\d*|12\.1(\(\d+\))?XF\d*|12\.1(\(\d+\))?XG\d*|12\.1(\(\d+\))?XJ\d*|12\.1(\(\d+\))?XL\d*|12\.1(\(\d+\))?XP\d*|12\.1(\(\d+\))?XR\d*|12\.1(\(\d+\))?XT\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YC\d*|12\.1(\(\d+\))?YD\d*|12\.1(\(\d+\))?YH\d*|12\.1(\(\d+\))?XM\d*|12\.1(\(\d+\))?XQ\d*|12\.1(\(\d+\))?XV\d*|12\.1(\(\d+\))?XU\d*|12\.1(\(\d+\))?YE\d*|12\.1(\(\d+\))?YF\d*|12\.1(\(\d+\))?YI\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BC\d*|12\.2(\(\d+\))?BW\d*|12\.2(\(\d+\))?BX\d*|12\.2(\(\d+\))?BZ\d*|12\.2(\(\d+\))?CX\d*|12\.2(\(\d+\))?CY\d*|12\.2(\(\d+\))?DA\d*|12\.2(\(\d+\))?DD\d*|12\.2(\(\d+\))?DX\d*|12\.2(\(\d+\))?JA\d*|12\.2(\(\d+\))?MB\d*|12\.2(\(\d+\))?MC\d*|12\.2(\(\d+\))?MX\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?SX\d*|12\.2(\(\d+\))?SY\d*|12\.2(\(\d+\))?SZ\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?X\d*|12\.2(\(\d+\))?Y\d*|12\.2(\(\d+\))?XA\d*|12\.2(\(\d+\))?XM\d*|12\.2(\(\d+\))?XS\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XE\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XI\d*|12\.2(\(\d+\))?XJ\d*|12\.2(\(\d+\))?XK\d*|12\.2(\(\d+\))?XL\d*|12\.2(\(\d+\))?XQ\d*|12\.2(\(\d+\))?XU\d*|12\.2(\(\d+\))?XW\d*|12\.2(\(\d+\))?YB\d*|12\.2(\(\d+\))?YC\d*|12\.2(\(\d+\))?YF\d*|12\.2(\(\d+\))?YG\d*|12\.2(\(\d+\))?YH\d*|12\.2(\(\d+\))?YJ\d*|12\.2(\(\d+\))?YT\d*|12\.2(\(\d+\))?YA\d*|12\.2(\(\d+\))?YN\d*|12\.2(\(\d+\))?YO\d*|12\.2(\(\d+\))?XB\d*|12\.2(\(\d+\))?XC\d*|12\.2(\(\d+\))?XF\d*|12\.2(\(\d+\))?XG\d*|12\.2(\(\d+\))?XN\d*|12\.2(\(\d+\))?XT\d*|12\.2(\(\d+\))?YD\d*|12\.2(\(\d+\))?YK\d*|12\.2(\(\d+\))?YL\d*|12\.2(\(\d+\))?YM\d*|12\.2(\(\d+\))?YU\d*|12\.2(\(\d+\))?YV\d*|12\.2(\(\d+\))?YP\d*|12\.2(\(\d+\))?YQ\d*|12\.2(\(\d+\))?YR\d*|12\.2(\(\d+\))?YS\d*|12\.2(\(\d+\))?YW\d*|12\.2(\(\d+\))?YX\d*|12\.2(\(\d+\))?YY\d*|12\.2(\(\d+\))?YZ\d*|12\.2(\(\d+\))?ZA\d*|12\.2(\(\d+\))?ZB\d*|12\.2(\(\d+\))?ZC\d*|12\.2(\(\d+\))?ZD\d*|12\.2(\(\d+\))?ZE\d*|12\.2(\(\d+\))?ZF\d*|12\.2(\(\d+\))?ZG\d*|12\.2(\(\d+\))?ZH\d*|12\.2(\(\d+\))?ZJ\d*|12\.2(\(\d+\))?ZL\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3720" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.1\(9\)EX|12\.2\(8\)YD|12\.0\(23\)S3|12\.2\(13\)ZH2|12\.1\(8b\)EX5|12\.2\(11\)BC3c|11\.2\(8\.11\)SA6|12\.2\(15\)YS|12\.0\(7\)T3|12\.2|12\.2\(14\)SX1|12\.1\(4b\)|12\.2\(8\)YY|12\.1\(13\)AY|12\.1\(20\)|12\.1\(13\)EA1c|12\.2\(8\)T10|12\.0\(16\)S10|12\.1\(6\)E12|12\.0\(25\)W5\(27\)|12\.0\(26\)W5\(28\)|12\.2DA|12\.2\(8\)YY3|12\.0\(5\)WC8|12\.1\(1\)EX|12\.1\(5\)T15|12\.2\(13b\)M2|11\.2\(17\)P1|12\.2\(14\)SY1|12\.2\(15\)T5|12\.1\(19\)|12\.3|12\.2\(8\)T0c|12\.1T|12\.1\(7\)E0a|12\.1\(19\)E|11\.1\(24c\)|12\.2\(4\)YA6|12\.0\(19b\)|12\.0\(21\)ST3a|12\.0\(21\)S5a|12\.1\(5\)T8c|12\.0\(19\)S2a|12\.1\(3a\)XI9|12\.0\(15b\)|12\.2\(13\)ZF1|12\.2\(14\)SZ2|12\.0\(16\)S8a|12\.1\(10\)E6a|12\.2\(13\)T1a|12\.2\(11\)T9|12\.2DA|12\.2\(4\)T6|12\.3\(1a\)|12\.0\(22\)S5|12\.2\(10d\)|12\.1\(14\)EA1|12\.0\(17\)ST8|12\.0\(19\)S4|12\.2\(4\)T6|12\.2\(14\)ZA2|12\.2\(14\)S1|12\.0\(16b\)|12\.0\(8b\)|12\.2\(16\.5\)S|12\.2\(7g\)|12\.2\(16\.5\)T|12\.2\(15\)MC1|12\.0\(12\)S4|12\.0\(25\)S1|12\.1\(5\)DB2|12\.2\(11\)YP1|12\.2\(12\)DA3|12\.0\(14\)S8|12\.0\(18\)S5a|12\.0\(20\)ST6|12\.1\(12c\)EW2|11\.1\(36\)CA4|12\.0\(18\)S7|11\.3\(11b\)T3|12\.1\(13a\)|12\.0\(21\)S4a|12\.2\(15\)BZ1|12\.0\(10\)S8|12\.0\(25\)S|12\.2\(12e\)|12\.0\(13\)S8|12\.0\(21\)SP4|12\.1\(11b\)E12|12\.0\(21\)ST7|12\.2T|12\.2\(1\)XS1a|12\.1\(17a\)|12\.2\(6j\)|12\.1\(18\.4\)|12\.0\(24\)S2|12\.1\(13\)EC4|12\.1\(5\)DC3|12\.2\(15\)ZL|12\.2\(2\)XB11|12\.1\(12c\)E7|12\.2\(15\)ZJ1|11\.2\(15b\)|12\.1\(6b\)|12\.2\(4\)B7a|12\.1\(13\)E8|12\.1\(13\)E7|12\.2\(4\)MB12|11\.1\(20\)AA5|11\.2\(26\)P5|12\.2\(2\)YC|11\.1\(36\)CC7|12\.1\(8b\)E14|12\.0\(10\)S3b|12\.0\(17\)SL9|12\.1\(12c\)EV2|11\.2\(20\)P1|12\.0\(26\)|12\.2\(10\)DA2|12\.1X|12\.2\(17\)|12\.1\(14\)EB|11\.2\(26e\)|12\.1\(19\)EC|12\.0\(19\)ST6|12\.2\(16\)B1|12\.0\(22\)S5|12\.1\(19\)EW|12\.0\(15\)S7|12\.2\(15\)T5|12\.2\(13\)T5|12\.1\(11b\)E0a|12\.1\(7a\)E1a|12\.2\(11\)T9|12\.2\(8\)T10|12\.2\(16\)BX|12\.0\(23\)S3|12\.0\(17\)S7|12\.0\(21\)S7|12\.2\(11\)JA|12\.1\(14\)E4|12\.2\(11\)YX1|11\.3\(11d\)|12\.2\(16a\)|12\.0\(24\)W5\(26c\)|12\.2\(11\)YZ2|12\.2\(8\)YW2|12\.2\(15\)BC1|12\.2\(13\)ZC|12\.1\(13\)EW2|12\.2\(8\)ZB7</major_release>
    </version_state>
    <patch_state id="oval:org.mitre.oval:ste:2815" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">2</version>
    </patch_state>
    <version_state id="oval:org.mitre.oval:ste:3402" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">11\.0(\(\d+\))?\w*\d*|11\.1(\(\d+\))?\w*\d*|11\.2(\(\d+\))?\w*\d*|11\.3(\(\d+\))?\w*\d*|12\.0(\(\d+\))?\d*|12\.0(\(\d+\))?T\d*</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:3537" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">ip nat inside</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:4233" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">ip nat outside</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:4165" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0\(4\)T|12\.0\(5\)S|12\.0\(4\)T|12\.0\(4\)S|12\.0\(4\)T|12\.0\(4\)|12\.0\(2\)XE3|12\.0\(3\)T2|12\.0\(3b\)|12\.0\(3\)T2</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:4134" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">ip access-group \S+ in</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:4120" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?\d*|12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?T\d*|12\.0(\(\d+\))?DB\d*|12\.0(\(\d+\))?(1)W5(x)\d*|12\.0(\(\d+\))?(0\.6)W5\d*|12\.0(\(\d+\))?(1)XA3\d*|12\.0(\(\d+\))?(1)XB\d*|12\.0(\(\d+\))?(2)XC\d*|12\.0(\(\d+\))?(2)XD\d*|12\.0(\(\d+\))?(x)XE\d*|12\.0(\(\d+\))?(2)XF\d*|12\.0(\(\d+\))?(2)XG\d*</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:4210" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">service mgcpapp</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:4050" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">proxy h323</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:4198" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">ip inspect name \S+ h323</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:4064" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">9\.\d(\(\d+\))?\w*\d*|10\.\d(\(\d+\))?\w*\d*|11\.0(\(\d+\))?\w*\d*|11\.1(\(\d+\))?\w*\d*|11\.2(\(\d+\))?\w*\d*|11\.3(\(\d+\))?\w*\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4177" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">11\.3\(1\)|11\.3\(1\)ED|11\.3\(1\)T|11\.2\(10\)|11\.2\(9\)P|11\.2\(9\)XA|11\.2\(10\)BC|11\.2\(8\)SA3|11\.1\(15\)CA|11\.1\(16\)|11\.1\(16\)IA|11\.1\(16\)AA|11\.1\(17\)CC|11\.1\(17\)CT|11\.0\(20\.3\)</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3394" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">11\.1(\(\d+\))?\w*\d*|11\.2(\(\d+\))?\w*\d*|11\.3(\(\d+\))?\w*\d*|12\.0(\(\d+\))?\w*\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3130" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0\(19\)S|12\.0\(19\)ST|12\.1\(1\)|12\.1\(1\)DB|12\.1\(1\)DC|12\.1\(1\)T</major_release>
    </version_state>
    <patch_state id="oval:org.mitre.oval:ste:2395" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">25</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2394" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">30</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3932" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">20</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3818" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">08</version>
    </patch_state>
    <version_state id="oval:org.mitre.oval:ste:3378" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.1\(22\)EA3</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3776" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2\(18\)SXF9|12\.2\(18\)SXF10|12\.2\(18\)IXD1|12\.2\(33\)SXH</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:4209" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">ip scp server enable</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:3346" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2(\(\d+\))?IXA\d*|12\.2(\(\d+\))?IXB\d*|12\.2(\(\d+\))?IXC\d*|12\.2(\(\d+\))?IXD\d*|12\.2(\(\d+\))?SXD\d*|12\.2(\(\d+\))?SXE\d*|12\.2(\(\d+\))?SXF\d*|12\.2(\(\d+\))?ZU\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3379" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0\(19\.3\)S|12\.0\(19\)S|12\.0\(18\.6\)ST1|12\.0\(19\.3\)ST|12\.0\(19\)ST</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3082" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?ST\d*</major_release>
    </version_state>
    <patch_state id="oval:org.mitre.oval:ste:3678" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">05</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3069" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3821" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">08</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3880" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">07</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2397" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.747.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2396" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.747.0</version>
    </file_state>
    <version_state id="oval:org.mitre.oval:ste:4214" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2\(14\)SY3|12\.2\(17a\)SX1|12\.1\(20\)E2|12\.1\(14\)E7</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4272" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2(\(\d+\))?S\d*|12\.1(\(\d+\))?E\d*</major_release>
    </version_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2399" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.7a-7.9.0</evr>
    </rpminfo_state>
    <inetlisteningservers_state id="oval:org.mitre.oval:ste:2398" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <program_name operation="pattern match">^.*smbd.*</program_name>
    </inetlisteningservers_state>
    <patch_state id="oval:org.mitre.oval:ste:3025" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">32</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3532" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">29</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3440" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">27</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3898" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">30</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3541" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">28</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3242" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">20</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3721" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version datatype="int">11</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4680" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <version_state id="oval:org.mitre.oval:ste:3043" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.4\(13f\)|12\.4\(16b\)|12\.4\(17a\)|12\.4\(18\)|12\.4\(16\)MR2|12\.4\(15\)SW1|12\.4\(9\)T6|12\.4\(11\)T4|12\.4\(15\)T2|12\.4\(20\)T|12\.4\(11\)XW6|12\.4\(18b\)|12\.4\(16b\)JA3|12\.4\(16\)MR|12\.4\(15\)T5</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3216" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.4(\(\d+\))?\d*|12\.4(13d)JA|12\.4(13d)JA1|12\.4(\(\d+\))?JK\d*|12\.4(\(\d+\))?JMA\d*|12\.4(\(\d+\))?JMB\d*|12\.4(\(\d+\))?JMC\d*|12\.4(\(\d+\))?JX\d*|12\.4(\(\d+\))?MD\d*|12\.4(\(\d+\))?MR\d*|12\.4(\(\d+\))?SW\d*|12\.4(\(\d+\))?T\d*|12\.4(\(\d+\))?XA\d*|12\.4(\(\d+\))?XB\d*|12\.4(\(\d+\))?XC\d*|12\.4(\(\d+\))?XD\d*|12\.4(\(\d+\))?XE\d*|12\.4(\(\d+\))?XF\d*|12\.4(\(\d+\))?XG\d*|12\.4(\(\d+\))?XJ\d*|12\.4(\(\d+\))?XK\d*|12\.4(\(\d+\))?XL\d*|12\.4(\(\d+\))?XM\d*|12\.4(\(\d+\))?XN\d*|12\.4(\(\d+\))?XQ\d*|12\.4(\(\d+\))?XT\d*|12\.4(\(\d+\))?XV\d*|12\.4(\(\d+\))?XW\d*|12\.4(\(\d+\))?XY\d*|12\.4(\(\d+\))?XZ\d*</major_release>
    </version_state>
    <patch_state id="oval:org.mitre.oval:ste:3024" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">53</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2984" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">08</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3469" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3799" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">29</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3961" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">25</version>
    </patch_state>
    <line_state id="oval:org.mitre.oval:ste:4063" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">ip inspect name \S+ http</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:4107" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">ip ips \S+ in</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:4163" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">ip ips \S+ out</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:3862" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0\(19\.6\)S|12\.0\(19\.6\)ST</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4081" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?ST\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3387" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?SC\d*|12\.0(\(\d+\))?SL\d*|12\.0(\(\d+\))?SP\d*|12\.0(\(\d+\))?ST\d*|12\.0(\(\d+\))?SX\d*|12\.0(\(\d+\))?SY\d*|12\.0(\(\d+\))?SZ\d*|12\.0(\(\d+\))?XK\d*|12\.1(\(\d+\))?AX\d*|12\.1(\(\d+\))?AY\d*|12\.1(\(\d+\))?AZ\d*|12\.1(\(\d+\))?DB\d*|12\.1(\(\d+\))?DC\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EA\d*|12\.1(\(\d+\))?EB\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?EU\d*|12\.1(\(\d+\))?EV\d*|12\.1(\(\d+\))?EW\d*|12\.1(\(\d+\))?EX\d*|12\.1(\(\d+\))?EY\d*|12\.1(\(\d+\))?EZ\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XA\d*|12\.1(\(\d+\))?XB\d*|12\.1(\(\d+\))?XC\d*|12\.1(\(\d+\))?XD\d*|12\.1(\(\d+\))?XE\d*|12\.1(\(\d+\))?XF\d*|12\.1(\(\d+\))?XG\d*|12\.1(\(\d+\))?XH\d*|12\.1(\(\d+\))?XI\d*|12\.1(\(\d+\))?XJ\d*|12\.1(\(\d+\))?XL\d*|12\.1(\(\d+\))?XM\d*|12\.1(\(\d+\))?XP\d*|12\.1(\(\d+\))?XQ\d*|12\.1(\(\d+\))?XR\d*|12\.1(\(\d+\))?XT\d*|12\.1(\(\d+\))?XU\d*|12\.1(\(\d+\))?XV\d*|12\.1(\(\d+\))?YA\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YC\d*|12\.1(\(\d+\))?YD\d*|12\.1(\(\d+\))?YE\d*|12\.1(\(\d+\))?YF\d*|12\.1(\(\d+\))?YH\d*|12\.1(\(\d+\))?YI\d*|12\.1(\(\d+\))?YJ\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BC\d*|12\.2(\(\d+\))?BW\d*|12\.2(\(\d+\))?BY\d*|12\.2(\(\d+\))?BZ\d*|12\.2(\(\d+\))?CX\d*|12\.2(\(\d+\))?CY\d*|12\.2(\(\d+\))?DD\d*|12\.2(\(\d+\))?DX\d*|12\.2(\(\d+\))?EU\d*|12\.2(\(\d+\))?EW\d*|12\.2(\(\d+\))?EWA\d*|12\.2(\(\d+\))?EX\d*|12\.2(\(\d+\))?EY\d*|12\.2(\(\d+\))?EZ\d*|12\.2(\(\d+\))?MB\d*|12\.2(\(\d+\))?MC\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?SE\d*|12\.2(\(\d+\))?SEA\d*|12\.2(\(\d+\))?SEB\d*|12\.2(\(\d+\))?SU\d*|12\.2(\(\d+\))?SV\d*|12\.2(\(\d+\))?SX\d*|12\.2(\(\d+\))?SXA\d*|12\.2(\(\d+\))?SXB\d*|12\.2(\(\d+\))?SXD\d*|12\.2(\(\d+\))?SY\d*|12\.2(\(\d+\))?SZ\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?XA\d*|12\.2(\(\d+\))?XB\d*|12\.2(\(\d+\))?XC\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XE\d*|12\.2(\(\d+\))?XF\d*|12\.2(\(\d+\))?XG\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XI\d*|12\.2(\(\d+\))?XJ\d*|12\.2(\(\d+\))?XK\d*|12\.2(\(\d+\))?XL\d*|12\.2(\(\d+\))?XM\d*|12\.2(\(\d+\))?XN\d*|12\.2(\(\d+\))?XQ\d*|12\.2(\(\d+\))?XR\d*|12\.2(\(\d+\))?XS\d*|12\.2(\(\d+\))?XT\d*|12\.2(\(\d+\))?XU\d*|12\.2(\(\d+\))?XW\d*|12\.2(\(\d+\))?YA\d*|12\.2(\(\d+\))?YB\d*|12\.2(\(\d+\))?YC\d*|12\.2(\(\d+\))?YD\d*|12\.2(\(\d+\))?YE\d*|12\.2(\(\d+\))?YF\d*|12\.2(\(\d+\))?YG\d*|12\.2(\(\d+\))?YH\d*|12\.2(\(\d+\))?YJ\d*|12\.2(\(\d+\))?YK\d*|12\.2(\(\d+\))?YL\d*|12\.2(\(\d+\))?YM\d*|12\.2(\(\d+\))?YN\d*|12\.2(\(\d+\))?YO\d*|12\.2(\(\d+\))?YP\d*|12\.2(\(\d+\))?YQ\d*|12\.2(\(\d+\))?YR\d*|12\.2(\(\d+\))?YW\d*|12\.2(\(\d+\))?YX\d*|12\.2(\(\d+\))?YY\d*|12\.2(\(\d+\))?YZ\d*|12\.2(\(\d+\))?ZA\d*|12\.2(\(\d+\))?ZB\d*|12\.2(\(\d+\))?ZC\d*|12\.3(\(\d+\))?JA\d*|12\.3(\(\d+\))?T\d*|12\.3(\(\d+\))?XD\d*|12\.3(\(\d+\))?XE\d*|12\.3(\(\d+\))?XF\d*|12\.3(\(\d+\))?XG\d*|12\.3(\(\d+\))?XH\d*|12\.3(\(\d+\))?XI\d*|12\.3(\(\d+\))?XJ\d*|12\.3(\(\d+\))?XK\d*|12\.3(\(\d+\))?XL\d*|12\.3(\(\d+\))?XM\d*|12\.3(\(\d+\))?XQ\d*|12\.3(\(\d+\))?XR\d*|12\.3(\(\d+\))?XS\d*|12\.3(\(\d+\))?XU\d*|12\.3(\(\d+\))?XW\d*|12\.3(\(\d+\))?XX\d*|12\.3(\(\d+\))?XY\d*|12\.3(\(\d+\))?YA\d*|12\.3(\(\d+\))?YD\d*|12\.3(\(\d+\))?YF\d*|12\.3(\(\d+\))?YG\d*|12\.3(\(\d+\))?YH\d*|12\.3(\(\d+\))?YJ\d*|12\.3(\(\d+\))?YK\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3198" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.3\(11\)YF|12\.2\(17d\)SXB1|12\.3\(11\)YJ|12\.3\(11\)YK|12\.2\(24\)SV|12\.2\(20\)EWA|12\.2\(20\)S7|12\.0\(28\)S2|12\.3\(4\)JA|12\.3\(4\)T11|12\.3\(7\)T7|12\.3\(8\)YD|12\.3\(11\)T|12\.0\(27\)S4|12\.2\(18\)EW2|12\.3\(8\)YH|12\.3\(8\)YA|12\.3\(4\)XQ1|12\.3\(8\)YG|12\.0\(30\)SX|12\.0\(30\)S|12\.2\(25\)EW|12\.2\(25\)EY|12\.2\(25\)EZ|12\.3\(14\)T|12\.3BC|12\.2\(20\)SE4|12\.2\(14\)S13|12\.3\(7\)XM|12\.3\(11\)T3|12\.2\(25\)SE|12\.1\(23\)E|12\.2\(20\)EU|12\.1\(23\)EB|12\.3\(7\)XI3|12\.3\(11\)XL|12\.0\(26\)S5|12\.2\(25\)S|12\.2SW|12\.2\(26\)|12\.3\(7\)XS|12\.3\(7\)XR|12\.1\(22\)EA1|12\.1\(4\)AY4|12\.2\(18\)S7|12\.2\(18\)SXD|12\.2\(25\)SEA|12\.2\(25\)SEB|12\.3\(8\)T|12\.3\(8\)XX|12\.3\(8\)XY|12\.3\(8\)XU|12\.3\(8\)XW</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:4121" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">router eigrp</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:3155" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">11\.0(\(\d+\))?\w*\d*|11\.1(\(\d+\))?\w*\d*|11\.2(\(\d+\))?\w*\d*|11\.3(\(\d+\))?\w*\d*|11\.4(\(\d+\))?\w*\d*|12\.0(\(\d+\))?\w*\d*|12\.1(\(\d+\))?\w*\d*|12\.2(\(\d+\))?\w*\d*|12\.3(\(\d+\))?\w*\d*|12\.4(\(\d+\))?\w*\d*</major_release>
    </version_state>
    <patch_state id="oval:org.mitre.oval:ste:4309" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">30</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3703" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">05</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4260" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">56</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3482" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <version_state id="oval:org.mitre.oval:ste:3741" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">11\.1(\(\d+\))?\w*\d*|11\.2(\(\d+\))?\w*\d*|11\.3(\(\d+\))?\w*\d*</major_release>
    </version_state>
    <patch_state id="oval:org.mitre.oval:ste:4243" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <version_state id="oval:org.mitre.oval:ste:4068" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.3\(8\)T8|12\.2\(20\)S8|12\.2\(15\)JK4|12\.2\(15\)MC2c|12\.2\(4\)MB13b|12\.3\(11\)YJ|12\.2\(13\)ZD3|12\.3\(2\)JK|12\.2\(14\)S14|12\.3\(6e\)|12\.2\(25\)SEC1|12\.3\(11\)YF3|12\.2\(23\)SV1|12\.3\(14\)T2|12\.3\(8\)YG2|12\.2\(18\)SXD4|12\.3\(14\)YQ1|12\.3\(5e\)|12\.2\(25\)EWA1|12\.3\(13a\)BC|12\.2\(25\)SV2|12\.3\(14\)YU|12\.3\(7\)XI4|12\.2\(25\)SW3a|12\.3\(2\)XA4|12\.3\(2\)XC3|12\.2\(25\)EZ1|12\.3\(4\)XQ1|12\.2\(4\)YA10|12\.3\(7\)XR4|12\.2\(25\)S4|12\.3\(13a\)|12\.3\(5a\)B5|12\.0\(27\)S5|12\.3\(11\)T5|12\.4\(2\)MR|12\.3\(4\)JA|12\.0\(30\)S2|12\.2\(13\)T16|12\.3\(4\)XK3|12\.3\(8\)XY6|12\.2\(17d\)SXB8|12\.3\(4\)XG4|12\.0\(31\)S|12\.2\(15\)T16|12\.0\(26\)S6|12\.3\(2\)XE3|12\.3\(15\)|12\.3\(10d\)|12\.2\(15\)MC1c|12\.3\(8\)YI1|12\.2\(18\)SXE1|12\.3\(14\)YT|12\.3\(9d\)|12\.2\(25\)SEB3|12\.4\(2\)T|12\.3\(9a\)BC6|12\.2\(18\)S9|12\.2\(15\)BC2h|12\.3\(11\)YS|12\.2\(20\)EWA2|12\.0\(28\)S3|12\.3\(8\)YA1|12\.3\(3h\)|12\.4\(1\)|12\.2\(26\)SV|12\.2\(24\)SV1|12\.3\(12b\)|12\.2\(22\)SV1|12\.3\(7\)T9|12\.2\(20\)EU1|12\.2\(18\)SV3|12\.2\(20\)EW2</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4112" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?SL\d*|12\.0(\(\d+\))?ST\d*|12\.0(\(\d+\))?SY\d*|12\.1(\(\d+\))?XU\d*|12\.1(\(\d+\))?XV\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YC\d*|12\.1(\(\d+\))?YD\d*|12\.1(\(\d+\))?YE\d*|12\.1(\(\d+\))?YF\d*|12\.1(\(\d+\))?YH\d*|12\.1(\(\d+\))?YI\d*|12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BC\d*|12\.2(\(\d+\))?BW\d*|12\.2(\(\d+\))?BY\d*|12\.2(\(\d+\))?BX\d*|12\.2(\(\d+\))?BZ\d*|12\.2(\(\d+\))?CX\d*|12\.2(\(\d+\))?CY\d*|12\.2(\(\d+\))?DD\d*|12\.2(\(\d+\))?DX\d*|12\.2(\(\d+\))?EU\d*|12\.2(\(\d+\))?EW\d*|12\.2(\(\d+\))?EWA\d*|12\.2(\(\d+\))?EZ\d*|12\.2(\(\d+\))?JA\d*|12\.2(\(\d+\))?JK\d*|12\.2(\(\d+\))?MB\d*|12\.2(\(\d+\))?MC\d*|12\.2(\(\d+\))?MX\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?SEB\d*|12\.2(\(\d+\))?SEC\d*|12\.2(\(\d+\))?SO\d*|12\.2(\(\d+\))?SU\d*|12\.2(\(\d+\))?SV\d*|12\.2(\(\d+\))?SW\d*|12\.2(\(\d+\))?SX\d*|12\.2(\(\d+\))?SXA\d*|12\.2(\(\d+\))?SXB\d*|12\.2(\(\d+\))?SXD\d*|12\.2(\(\d+\))?SXE\d*|12\.2(\(\d+\))?SY\d*|12\.2(\(\d+\))?SZ\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?XA\d*|12\.2(\(\d+\))?XB\d*|12\.2(\(\d+\))?XC\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XE\d*|12\.2(\(\d+\))?XF\d*|12\.2(\(\d+\))?XG\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XI\d*|12\.2(\(\d+\))?XJ\d*|12\.2(\(\d+\))?XK\d*|12\.2(\(\d+\))?XL\d*|12\.2(\(\d+\))?XM\d*|12\.2(\(\d+\))?XN\d*|12\.2(\(\d+\))?XQ\d*|12\.2(\(\d+\))?XR\d*|12\.2(\(\d+\))?XT\d*|12\.2(\(\d+\))?XU\d*|12\.2(\(\d+\))?XW\d*|12\.2(\(\d+\))?XZ\d*|12\.2(\(\d+\))?YA\d*|12\.2(\(\d+\))?YB\d*|12\.2(\(\d+\))?YC\d*|12\.2(\(\d+\))?YD\d*|12\.2(\(\d+\))?YE\d*|12\.2(\(\d+\))?YF\d*|12\.2(\(\d+\))?YG\d*|12\.2(\(\d+\))?YH\d*|12\.2(\(\d+\))?YJ\d*|12\.2(\(\d+\))?YK\d*|12\.2(\(\d+\))?YL\d*|12\.2(\(\d+\))?YM\d*|12\.2(\(\d+\))?YN\d*|12\.2(\(\d+\))?YO\d*|12\.2(\(\d+\))?YP\d*|12\.2(\(\d+\))?YQ\d*|12\.2(\(\d+\))?YR\d*|12\.2(\(\d+\))?YT\d*|12\.2(\(\d+\))?YU\d*|12\.2(\(\d+\))?YV\d*|12\.2(\(\d+\))?YW\d*|12\.2(\(\d+\))?YX\d*|12\.2(\(\d+\))?YY\d*|12\.2(\(\d+\))?YZ\d*|12\.2(\(\d+\))?ZA\d*|12\.2(\(\d+\))?ZB\d*|12\.2(\(\d+\))?ZC\d*|12\.2(\(\d+\))?ZD\d*|12\.2(\(\d+\))?ZE\d*|12\.2(\(\d+\))?ZF\d*|12\.2(\(\d+\))?ZG\d*|12\.2(\(\d+\))?ZH\d*|12\.2(\(\d+\))?ZJ\d*|12\.2(\(\d+\))?ZL\d*|12\.2(\(\d+\))?ZN\d*|12\.2(\(\d+\))?ZO\d*|12\.2(\(\d+\))?ZP\d*|12\.3(\(\d+\))?\d*|12\.3(\(\d+\))?B\d*|12\.3(\(\d+\))?BC\d*|12\.3(\(\d+\))?BW\d*|12\.3(\(\d+\))?JA\d*|12\.3(\(\d+\))?JK\d*|12\.3(\(\d+\))?T\d*|12\.3(\(\d+\))?XA\d*|12\.3(\(\d+\))?XB\d*|12\.3(\(\d+\))?XC\d*|12\.3(\(\d+\))?XD\d*|12\.3(\(\d+\))?XE\d*|12\.3(\(\d+\))?XF\d*|12\.3(\(\d+\))?XG\d*|12\.3(\(\d+\))?XH\d*|12\.3(\(\d+\))?XI\d*|12\.3(\(\d+\))?XJ\d*|12\.3(\(\d+\))?XK\d*|12\.3(\(\d+\))?XL\d*|12\.3(\(\d+\))?XM\d*|12\.3(\(\d+\))?XQ\d*|12\.3(\(\d+\))?XR\d*|12\.3(\(\d+\))?XS\d*|12\.3(\(\d+\))?XT\d*|12\.3(\(\d+\))?XU\d*|12\.3(\(\d+\))?XW\d*|12\.3(\(\d+\))?XX\d*|12\.3(\(\d+\))?XY\d*|12\.3(\(\d+\))?YA\d*|12\.3(\(\d+\))?YD\d*|12\.3(\(\d+\))?YF\d*|12\.3(\(\d+\))?YG\d*|12\.3(\(\d+\))?YH\d*|12\.3(\(\d+\))?YI\d*|12\.3(\(\d+\))?YJ\d*|12\.3(\(\d+\))?YK\d*|12\.3(\(\d+\))?YQ\d*|12\.3(\(\d+\))?YS\d*|12\.3(\(\d+\))?YT\d*|12\.3(\(\d+\))?YU\d*|12\.4(\(\d+\))?\d*|12\.4(\(\d+\))?MR\d*|12\.4(\(\d+\))?T\d*</major_release>
    </version_state>
    <patch_state id="oval:org.mitre.oval:ste:3139" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">15</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2980" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">05</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4378" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">06</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4802" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">16</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4392" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">19</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4850" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">34</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4763" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">15</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4724" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">13</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4539" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">14</version>
    </patch_state>
    <version_state id="oval:org.mitre.oval:ste:3708" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">10\.3(\(\d+\))?\w*\d*|11\.0(\(\d+\))?\w*\d*|11\.1(\(\d+\))?\d*|11\.1(\(\d+\))?AA\d*|11\.1(\(\d+\))?CA\d*|11\.1(\(\d+\))?CC\d*|11\.1(\(\d+\))?CT\d*|11\.1(\(\d+\))?IA\d*|11\.2(\(\d+\))?\d*|11\.2(\(\d+\))?BC\d*|11\.2(\(\d+\))?F\d*|11\.2(\(\d+\))?GS\d*|11\.2(\(\d+\))?P\d*|11\.2(\(\d+\))?SA\d*|11\.2(\(\d+\))?WA4\d*|11\.2(\(\d+\))?XA\d*|11\.3(\(\d+\))?\d*|11\.3(\(\d+\))?AA\d*|11\.3(\(\d+\))?DA\d*|11\.3(\(\d+\))?DB\d*|11\.3(\(\d+\))?HA\d*|11\.3(\(\d+\))?MA\d*|11\.3(\(\d+\))?NA\d*|11\.3(\(\d+\))?T\d*|11\.3(\(\d+\))?XA\d*|11\.3(\(\d+\))?WA4\d*|12\.0(\(\d+\))?\d*|12\.0(\(\d+\))?DA\d*|12\.0(\(\d+\))?DB\d*|12\.0(\(\d+\))?DC\d*|12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?SC\d*|12\.0(\(\d+\))?SL\d*|12\.0(\(\d+\))?SP\d*|12\.0(\(\d+\))?ST\d*|12\.0(\(\d+\))?SY\d*|12\.0(\(\d+\))?T\d*|12\.0(\(\d+\))?W\d*|12\.0(\(\d+\))?W\d*|12\.0(\(\d+\))?W\d*|12\.0(\(\d+\))?WC\d*|12\.0(\(\d+\))?WT\d*|12\.0(\(\d+\))?XA\d*|12\.0(\(\d+\))?XB\d*|12\.0(\(\d+\))?XC\d*|12\.0(\(\d+\))?XD\d*|12\.0(\(\d+\))?XE\d*|12\.0(\(\d+\))?XF\d*|12\.0(\(\d+\))?XG\d*|12\.0(\(\d+\))?XH\d*|12\.0(\(\d+\))?XI\d*|12\.0(\(\d+\))?XJ\d*|12\.0(\(\d+\))?(5)XK\d*|12\.0(\(\d+\))?(7)XK\d*|12\.0(\(\d+\))?XL\d*|12\.0(\(\d+\))?XM\d*|12\.0(\(\d+\))?XN\d*|12\.0(\(\d+\))?XP\d*|12\.0(\(\d+\))?XQ\d*|12\.0(\(\d+\))?XR\d*|12\.0(\(\d+\))?XS\d*|12\.0(\(\d+\))?XU\d*|12\.0(\(\d+\))?XV\d*|12\.1(\(\d+\))?\d*|12\.1(\(\d+\))?AA\d*|12\.1(\(\d+\))?DA\d*|12\.1(\(\d+\))?DB\d*|12\.1(\(\d+\))?DC\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EA\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?EV\d*|12\.1(\(\d+\))?EW\d*|12\.1(\(\d+\))?(1)EX\d*|12\.1(\(\d+\))?(10)EX\d*|12\.1(\(\d+\))?EY\d*|12\.1(\(\d+\))?EZ\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XA\d*|12\.1(\(\d+\))?XB\d*|12\.1(\(\d+\))?XC\d*|12\.1(\(\d+\))?XD\d*|12\.1(\(\d+\))?XF\d*|12\.1(\(\d+\))?XG\d*|12\.1(\(\d+\))?XH\d*|12\.1(\(\d+\))?XI\d*|12\.1(\(\d+\))?XJ\d*|12\.1(\(\d+\))?XK\d*|12\.1(\(\d+\))?XL\d*|12\.1(\(\d+\))?XM\d*|12\.1(\(\d+\))?XP\d*|12\.1(\(\d+\))?XQ\d*|12\.1(\(\d+\))?XR\d*|12\.1(\(\d+\))?XS\d*|12\.1(\(\d+\))?XT\d*|12\.1(\(\d+\))?XU\d*|12\.1(\(\d+\))?XV\d*|12\.1(\(\d+\))?XW\d*|12\.1(\(\d+\))?XX\d*|12\.1(\(\d+\))?XY\d*|12\.1(\(\d+\))?XZ\d*|12\.1(\(\d+\))?YA\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YC\d*|12\.1(\(\d+\))?YD\d*|12\.1(\(\d+\))?YF\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BX\d*|12\.2(\(\d+\))?BW\d*|12\.2(\(\d+\))?DA\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?XA\d*|12\.2(\(\d+\))?XB\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XE\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XQ\d*|12\.2(\(\d+\))?XZ\d*|12\.2(\(\d+\))?YA\d*|12\.2(\(\d+\))?YC\d*|12\.2(\(\d+\))?ZN\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4153" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0\(21\)SP1|12\.0\(21\.4\)SY|12\.2\(8\)T|12\.0W|12\.2\(4\)YA3|12\.0\(22\.4\)|12\.0\(16\)S9|12\.2\(7\.6\)B|12\.1|12\.2\(7\.4\)S|12\.0\(21\)ST3|12\.2\(4\)XZ5|12\.1\(12c\)E1|12\.0\(23\)S3|12\.1\(15\.3\)|12\.1\(16\)|12\.0\(23\)|12\.1\(12\.5\)E|12\.2\(14\)S|12\.0\(25\)W5\(27\)|12\.2T|12\.0WA|12\.1\(13\)EX|12\.2\(7\.4\)|12\.2B|12\.2\(9\.4\)DA|12\.2\(11\)T|12\.2\(2\)XB7|12\.2\(15\)B|12\.1\(10\)EV1b|12\.1\(13\)EC1|12\.2\(15\)ZN|12\.2\(15\)BW|12\.2\(10\)DA|12\.1\(18\.1\)E|12\.0\(24\)W5\(26\)|12\.1\(12\.5\)EC|12\.2\(15\)BX|12\.0ST|12\.1\(8b\)E14|12\.0\(21\)S3|12\.0\(22\)SY|12\.2\(6g\)|12\.0\(24\)W5\(26a\)|12\.0\(22\)S|12\.2\(2\)YC4|12\.2\(10\)|12\.1\(12c\)EW|12\.0\(5\)WC5a|12\.0\(05\)WC05a|12\.1\(8b\)E14|12\.0\(21\.4\)S|12\.1\(19\)E|12\.3|12\.2\(7\.4\)T|12\.1\(6\)EZ8|12\.0\(22\.3\)S1|12\.1\(10\)EV4|12\.1\(11\)EA1</major_release>
    </version_state>
    <patch_state id="oval:org.mitre.oval:ste:3666" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">06</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2816" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.11-0.90.1</evr>
    </rpminfo_state>
    <version_state id="oval:org.mitre.oval:ste:4150" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?S\d*|12\.1(\(\d+\))?DB\d*|12\.1(\(\d+\))?DC\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?EX\d*|12\.1(\(\d+\))?EY\d*|12\.1(\(\d+\))?EZ\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XA\d*|12\.1(\(\d+\))?XB\d*|12\.1(\(\d+\))?XC\d*|12\.1(\(\d+\))?XD\d*|12\.1(\(\d+\))?XE\d*|12\.1(\(\d+\))?XF\d*|12\.1(\(\d+\))?XG\d*|12\.1(\(\d+\))?XH\d*|12\.1(\(\d+\))?XI\d*|12\.1(\(\d+\))?XJ\d*|12\.1(\(\d+\))?XL\d*|12\.1(\(\d+\))?XM\d*|12\.1(\(\d+\))?XP\d*|12\.1(\(\d+\))?XQ\d*|12\.1(\(\d+\))?XR\d*|12\.1(\(\d+\))?XS\d*|12\.1(\(\d+\))?XT\d*|12\.1(\(\d+\))?XU\d*|12\.1(\(\d+\))?XV\d*|12\.1(\(\d+\))?XY\d*|12\.1(\(\d+\))?YA\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YC\d*|12\.1(\(\d+\))?YD\d*|12\.1(\(\d+\))?YF\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?XA\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XE\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XQ\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3176" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.1\(5\)XS2|12\.1\(5\)XU1|12\.2\(1\)XD1|12\.1\(4\)XM4|12\.1\(6\)EY|12\.2\(1b\)|12\.1\(5\)XV3|12\.2\(2\)XA|12\.2\(2\)XB|12\.1\(5\)YF2|12\.2\(3\)|12\.2\(1\)XQ|12\.1\(5\)XR2|12\.1\(2\)XF4|12\.2\(1\)XH|12\.2\(1\.1\)|12\.2\(1\)XE|12\.1\(8a\)E|12\.1\(5\)YC1|12\.1\(3\)XP4|12\.1\(5\)YD2|12\.2\(2\.2\)T|12\.1\(6\)EZ2|12\.0\(20\)S|12\.1\(5\)XY6|12\.1\(6\.5\)EC3|12\.1\(5\)YB4|12\.1\(3\)XT3</major_release>
    </version_state>
    <patch_state id="oval:org.mitre.oval:ste:3080" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">63</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3050" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">37</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3574" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">07</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3746" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">38</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3415" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">09</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3390" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3085" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">17</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3150" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">52</version>
    </patch_state>
    <line_state id="oval:org.mitre.oval:ste:3723" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">crypto map</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:4051" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">ip pmtu</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:3533" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">tunnel path-mtu-discovery</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:4001" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">tunnel protection</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:3970" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">ip tcp path-mtu-discovery</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:3053" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?\d*|12\.0(\(\d+\))?DA\d*|12\.0(\(\d+\))?DB\d*|12\.0(\(\d+\))?DC\d*|12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?SC\d*|12\.0(\(\d+\))?SL\d*|12\.0(\(\d+\))?SP\d*|12\.0(\(\d+\))?ST\d*|12\.0(\(\d+\))?SX\d*|12\.0(\(\d+\))?SZ\d*|12\.0(\(\d+\))?T\d*|12\.0(\(\d+\))?W5\d*|12\.0(\(\d+\))?WC\d*|12\.0(\(\d+\))?XA\d*|12\.0(\(\d+\))?XB\d*|12\.0(\(\d+\))?XC\d*|12\.0(\(\d+\))?XD\d*|12\.0(\(\d+\))?XE\d*|12\.0(\(\d+\))?XF\d*|12\.0(\(\d+\))?XG\d*|12\.0(\(\d+\))?XH\d*|12\.0(\(\d+\))?XI\d*|12\.0(\(\d+\))?XJ\d*|12\.0(\(\d+\))?XK\d*|12\.0(\(\d+\))?XL\d*|12\.0(\(\d+\))?XM\d*|12\.0(\(\d+\))?XN\d*|12\.0(\(\d+\))?XQ\d*|12\.0(\(\d+\))?XR\d*|12\.0(\(\d+\))?XS\d*|12\.0(\(\d+\))?XV\d*|12\.1(\(\d+\))?\d*|12\.1(\(\d+\))?AA\d*|12\.1(\(\d+\))?AX\d*|12\.1(\(\d+\))?AZ\d*|12\.1(\(\d+\))?DA\d*|12\.1(\(\d+\))?DB\d*|12\.1(\(\d+\))?DC\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EA\d*|12\.1(\(\d+\))?EB\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?EO\d*|12\.1(\(\d+\))?EU\d*|12\.1(\(\d+\))?EV\d*|12\.1(\(\d+\))?EW\d*|12\.1(\(\d+\))?EX\d*|12\.1(\(\d+\))?EY\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XA\d*|12\.1(\(\d+\))?XB\d*|12\.1(\(\d+\))?XC\d*|12\.1(\(\d+\))?XD\d*|12\.1(\(\d+\))?XE\d*|12\.1(\(\d+\))?XF\d*|12\.1(\(\d+\))?XG\d*|12\.1(\(\d+\))?XH\d*|12\.1(\(\d+\))?XI\d*|12\.1(\(\d+\))?XJ\d*|12\.1(\(\d+\))?XL\d*|12\.1(\(\d+\))?XM\d*|12\.1(\(\d+\))?XP\d*|12\.1(\(\d+\))?XQ\d*|12\.1(\(\d+\))?XR\d*|12\.1(\(\d+\))?XT\d*|12\.1(\(\d+\))?XU\d*|12\.1(\(\d+\))?XV\d*|12\.1(\(\d+\))?YA\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YC\d*|12\.1(\(\d+\))?YD\d*|12\.1(\(\d+\))?YE\d*|12\.1(\(\d+\))?YF\d*|12\.1(\(\d+\))?YH\d*|12\.1(\(\d+\))?YI\d*|12\.1(\(\d+\))?YJ\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BC\d*|12\.2(\(\d+\))?BW\d*|12\.2(\(\d+\))?BY\d*|12\.2(\(\d+\))?BZ\d*|12\.2(\(\d+\))?CX\d*|12\.2(\(\d+\))?CY\d*|12\.2(\(\d+\))?CZ\d*|12\.2(\(\d+\))?DA\d*|12\.2(\(\d+\))?DD\d*|12\.2(\(\d+\))?DX\d*|12\.2(\(\d+\))?EU\d*|12\.2(\(\d+\))?EW\d*|12\.2(\(\d+\))?EWA\d*|12\.2(\(\d+\))?EX\d*|12\.2(\(\d+\))?EY\d*|12\.2(\(\d+\))?JA\d*|12\.2(\(\d+\))?JK\d*|12\.2(\(\d+\))?MB\d*|12\.2(\(\d+\))?MC\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?SE\d*|12\.2(\(\d+\))?SO\d*|12\.2(\(\d+\))?SU\d*|12\.2(\(\d+\))?SV\d*|12\.2(\(\d+\))?SW\d*|12\.2(\(\d+\))?SX\d*|12\.2(\(\d+\))?SXA\d*|12\.2(\(\d+\))?SXB\d*|12\.2(\(\d+\))?SXD\d*|12\.2(\(\d+\))?SY\d*|12\.2(\(\d+\))?SZ\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?XA\d*|12\.2(\(\d+\))?XB\d*|12\.2(\(\d+\))?XC\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XE\d*|12\.2(\(\d+\))?XF\d*|12\.2(\(\d+\))?XG\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XI\d*|12\.2(\(\d+\))?XJ\d*|12\.2(\(\d+\))?XK\d*|12\.2(\(\d+\))?XL\d*|12\.2(\(\d+\))?XM\d*|12\.2(\(\d+\))?XN\d*|12\.2(\(\d+\))?XQ\d*|12\.2(\(\d+\))?XR\d*|12\.2(\(\d+\))?XT\d*|12\.2(\(\d+\))?XU\d*|12\.2(\(\d+\))?XW\d*|12\.2(\(\d+\))?YA\d*|12\.2(\(\d+\))?YB\d*|12\.2(\(\d+\))?YC\d*|12\.2(\(\d+\))?YD\d*|12\.2(\(\d+\))?YE\d*|12\.2(\(\d+\))?YF\d*|12\.2(\(\d+\))?YG\d*|12\.2(\(\d+\))?YH\d*|12\.2(\(\d+\))?YJ\d*|12\.2(\(\d+\))?YK\d*|12\.2(\(\d+\))?YL\d*|12\.2(\(\d+\))?YM\d*|12\.2(\(\d+\))?YN\d*|12\.2(\(\d+\))?YO\d*|12\.2(\(\d+\))?YQ\d*|12\.2(\(\d+\))?YR\d*|12\.2(\(\d+\))?YT\d*|12\.2(\(\d+\))?YU\d*|12\.2(\(\d+\))?YV\d*|12\.2(\(\d+\))?YW\d*|12\.2(\(\d+\))?YX\d*|12\.2(\(\d+\))?YY\d*|12\.2(\(\d+\))?YZ\d*|12\.2(\(\d+\))?ZA\d*|12\.2(\(\d+\))?ZB\d*|12\.2(\(\d+\))?ZC\d*|12\.2(\(\d+\))?ZD\d*|12\.2(\(\d+\))?ZE\d*|12\.2(\(\d+\))?ZF\d*|12\.2(\(\d+\))?ZG\d*|12\.2(\(\d+\))?ZH\d*|12\.2(\(\d+\))?ZJ\d*|12\.2(\(\d+\))?ZK\d*|12\.2(\(\d+\))?ZL\d*|12\.2(\(\d+\))?ZN\d*|12\.2(\(\d+\))?ZP\d*|12\.3(\(\d+\))?\d*|12\.3(\(\d+\))?B\d*|12\.3(\(\d+\))?BC\d*|12\.3(\(\d+\))?BW\d*|12\.3(\(\d+\))?JA\d*|12\.3(\(\d+\))?T\d*|12\.3(\(\d+\))?XA\d*|12\.3(\(\d+\))?XB\d*|12\.3(\(\d+\))?XC\d*|12\.3(\(\d+\))?XD\d*|12\.3(\(\d+\))?XE\d*|12\.3(\(\d+\))?XF\d*|12\.3(\(\d+\))?XG\d*|12\.3(\(\d+\))?XH\d*|12\.3(\(\d+\))?XI\d*|12\.3(\(\d+\))?XJ\d*|12\.3(\(\d+\))?XK\d*|12\.3(\(\d+\))?XL\d*|12\.3(\(\d+\))?XM\d*|12\.3(\(\d+\))?XQ\d*|12\.3(\(\d+\))?XR\d*|12\.3(\(\d+\))?XS\d*|12\.3(\(\d+\))?XT\d*|12\.3(\(\d+\))?XU\d*|12\.3(\(\d+\))?XW\d*|12\.3(\(\d+\))?XX\d*|12\.3(\(\d+\))?XY\d*|12\.3(\(\d+\))?YA\d*|12\.3(\(\d+\))?YD\d*|12\.3(\(\d+\))?YF\d*|12\.3(\(\d+\))?YG\d*|12\.3(\(\d+\))?YH\d*|12\.3(\(\d+\))?YI\d*|12\.3(\(\d+\))?YJ\d*|12\.3(\(\d+\))?YK\d*|12\.3(\(\d+\))?YN\d*|12\.3(\(\d+\))?YQ\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3059" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.3\(3h\)|12\.2\(18\)SO1|12\.3\(12b\)|12\.2\(17d\)SXB7|12\.3\(7\)T8|12\.2\(18\)SO|12\.2\(15\)ZL2|12\.2\(14\)S13|12\.3\(11\)YN|12\.2\(20\)S7|12\.3\(14\)T|12\.3\(6e\)|12\.1\(27\)|12\.3\(11\)YF2|12\.3\(8\)YG1|12\.0\(28\)S3|12\.2\(18\)SXD4|12\.3\(7\)T10|12\.3\(12\)|12\.2\(4\)YA9|12\.3\(14\)YQ|12\.2\(12\)DA8|12\.0\(28c\)|12\.2\(18\)EW3|12\.1\(19\)EO4|12\.2\(25\)SEA|12\.0\(27\)S5|12\.2S|12\.0\(25\)W5\(27c\)|12\.3\(7\)XI5|12\.3\(8\)YI|12\.2\(25\)S3|12\.1\(26\)E1|12\.0\(28\)W5\(31a\)|12\.2\(28\)|12\.1\(23\)E3|12\.2\(13\)ZH6|12\.2\(25\)EY|12\.3\(11\)YK|12\.2\(25\)EWA|12\.3\(9d\)|12\.0\(5\)WC12|12\.3\(11\)T4|12\.3\(4\)JA|12\.0\(30\)S1|12\.3\(13a\)|12\.1\(22\)E6|12\.2\(20\)EU|12\.3\(5e\)|12\.3\(7\)XI3|12\.3\(10c\)|12\.3\(2\)XC3|12\.1\(22\)EA4|12\.3\(8\)T7|12\.3\(13\)|12\.2\(18\)S8|12\.2\(15\)BC2f|12\.3\(11\)YF2|12\.0\(31\)S|12\.2\(25\)SEB|12\.3\(8\)XY4|12\.3\(15\)|12\.2\(15\)T15|12\.3\(9a\)BC2</major_release>
    </version_state>
    <patch_state id="oval:org.mitre.oval:ste:3709" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">05</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:3464" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.5.7653.38</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:4959" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4929" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3256" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">06</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3305" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2995" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">08</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3521" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">05</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4289" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">11</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3637" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:4072" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <line_state id="oval:org.mitre.oval:ste:4241" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">ip auth-proxy</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:4096" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.3\(8\)T9|12\.3\(10d\)|12\.3\(14\)YT|12\.3\(2\)JK|12\.3\(11\)XL3|12\.3\(6e\)|12\.3\(11\)YS|12\.3\(11\)YF2|12\.3\(14\)T2|12\.3\(4\)XK4|12\.3\(8\)YG2|12\.3\(2\)XA5|12\.3\(5e\)|12\.3\(14\)YQ|12\.3\(9a\)BC7|12\.3\(4\)XG5|12\.4\(1\)|12\.3\(2\)XC3|12\.2\(13\)ZH8|12\.3\(13a\)|12\.3\(4\)XK4|12\.4\(2\)MR|12\.3\(11\)T6|12\.3\(7\)T10|12\.3\(7\)XR4|12\.3\(15\)|12\.3\(14\)YU|12\.3\(7\)XI4|12\.3\(9d\)|12\.4\(2\)T|12\.3T|12\.3\(3h\)|12\.3\(2\)XE4|12\.3\(11\)YK1|12\.3\(12b\)|12\.3\(8\)YI1|12\.3\(7\)JA|12\.3\(11\)YW</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4076" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2(\(\d+\))?SG\d*|12\.2(\(\d+\))?SEC\d*|12\.2(\(\d+\))?SXF\d*|12\.2(\(\d+\))?SH\d*|12\.2(\(\d+\))?ZF\d*|12\.2(\(\d+\))?ZL\d*|12\.3(\(\d+\))?\d*|12\.3(\(\d+\))?B\d*|12\.3(\(\d+\))?BC\d*|12\.3(\(\d+\))?BW\d*|12\.3(\(\d+\))?JA\d*|12\.3(\(\d+\))?JK\d*|12\.3(\(\d+\))?T\d*|12\.3(\(\d+\))?XA\d*|12\.3(\(\d+\))?XB\d*|12\.3(\(\d+\))?XC\d*|12\.3(\(\d+\))?XD\d*|12\.3(\(\d+\))?XE\d*|12\.3(\(\d+\))?XF\d*|12\.3(\(\d+\))?XG\d*|12\.3(\(\d+\))?XH\d*|12\.3(\(\d+\))?XI\d*|12\.3(\(\d+\))?XJ\d*|12\.3(\(\d+\))?XK\d*|12\.3(\(\d+\))?XL\d*|12\.3(\(\d+\))?XM\d*|12\.3(\(\d+\))?XQ\d*|12\.3(\(\d+\))?XR\d*|12\.3(\(\d+\))?XS\d*|12\.3(\(\d+\))?XU\d*|12\.3(\(\d+\))?XW\d*|12\.3(\(\d+\))?XY\d*|12\.3(\(\d+\))?YA\d*|12\.3(\(\d+\))?YD\d*|12\.3(\(\d+\))?YF\d*|12\.3(\(\d+\))?YG\d*|12\.3(\(\d+\))?YI\d*|12\.3(\(\d+\))?YJ\d*|12\.3(\(\d+\))?YK\d*|12\.3(\(\d+\))?YQ\d*|12\.3(\(\d+\))?YS\d*|12\.3(\(\d+\))?YT\d*|12\.3(\(\d+\))?YU\d*|12\.3(\(\d+\))?YW\d*|12\.4(\(\d+\))?\d*|12\.4(\(\d+\))?MR\d*|12\.4(\(\d+\))?T\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4022" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?\w*\d*|12\.1(\(\d+\))?\w*\d*|12\.2(\(\d+\))?\w*\d*|12\.3(\(\d+\))?\w*\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4101" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.3\(8\)T|12\.2\(18\)SXD1|12\.4\(6\)T|12\.2\(33\)SRA|12\.2\(33\)SXH</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4131" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">10\.3(\(\w+\))?\w*\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3293" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2\(14\)SY3|12\.2\(17a\)SX1|12\.1\(20\)E2|12\.1\(14\)E7</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3899" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2(\(\d+\))?S\d*|12\.1(\(\d+\))?E\d</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:4128" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">authentication open eap</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:4234" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">dot1x pae both</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:4250" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">wlccp authentication-server infrastructure</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:4195" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">dot1x pae authenticator</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:4085" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2\(25\)SG|12\.2\(18\)EW6|12\.1\(26\)EB2|12\.2\(25\)SED|12\.2\(25\)EWA4|12\.2\(18\)S13|12\.2\(33\)SRA4|12\.2\(18\)SXF9|12\.2\(20\)S13|12\.2(18)ZY1|12\.3\(8\)JEC|12\.2\(25\)EX|12\.4\(10b\)JA|12\.1\(22\)EA6|12\.2\(31\)SB6|12\.4.XW5|12\.1\(27b\)E2|12\.2\(25\)FX</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:4161" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">authentication network-eap</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:3397" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">wlccp authentication-server client</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:3971" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.3(\(\d+\))?JA\d*|12\.3(\(\d+\))?JEA\d*|12\.3(\(\d+\))?JEB\d*|12\.3(\(\d+\))?JEC\d*|12\.4(\(\d+\))?JA\d*|12\.4(\(\d+\))?JX\d*|12\.4(\(\d+\))?XW\d*|12\.1(\(\d+\))?\w*\d*|12\.2(\(\d+\))?\w*\d*</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:4206" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">protocol pptp</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:4086" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">protocol any</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:4239" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">vpdn-group</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:3249" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">vpdn enable</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:3894" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?XE\d*|12\.1(\(\d+\))?AY\d*|12\.1(\(\d+\))?DC\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EA\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?EX\d*|12\.1(\(\d+\))?EZ\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XJ\d*|12\.1(\(\d+\))?XL\d*|12\.1(\(\d+\))?XM\d*|12\.1(\(\d+\))?XP\d*|12\.1(\(\d+\))?XQ\d*|12\.1(\(\d+\))?XR\d*|12\.1(\(\d+\))?XS\d*|12\.1(\(\d+\))?XT\d*|12\.1(\(\d+\))?XV\d*|12\.1(\(\d+\))?XY\d*|12\.1(\(\d+\))?YA\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YC\d*|12\.1(\(\d+\))?YD\d*|12\.1(\(\d+\))?YE\d*|12\.1(\(\d+\))?YF\d*|12\.1(\(\d+\))?YI\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BC\d*|12\.2(\(\d+\))?BW\d*|12\.2(\(\d+\))?BY\d*|12\.2(\(\d+\))?DA\d*|12\.2(\(\d+\))?DD\d*|12\.2(\(\d+\))?DX\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?SU\d*|12\.2(\(\d+\))?SX\d*|12\.2(\(\d+\))?SY\d*|12\.2(\(\d+\))?SZ\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?XA\d*|12\.2(\(\d+\))?XB\d*|12\.2(\(\d+\))?XC\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XE\d*|12\.2(\(\d+\))?XF\d*|12\.2(\(\d+\))?XG\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XI\d*|12\.2(\(\d+\))?XJ\d*|12\.2(\(\d+\))?XK\d*|12\.2(\(\d+\))?XQ\d*|12\.2(\(\d+\))?XS\d*|12\.2(\(\d+\))?XT\d*|12\.2(\(\d+\))?XU\d*|12\.2(\(\d+\))?XV\d*|12\.2(\(\d+\))?YC\d*|12\.2(\(\d+\))?YE\d*|12\.2(\(\d+\))?YO\d*|12\.2(\(\d+\))?YX\d*|12\.2(\(\d+\))?YZ\d*|12\.2(\(\d+\))?ZA\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3938" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2\(8\)T|12\.2\(15\)T4e|12\.2\(18\)S|12\.2\(8\)BY|12\.2\(2\)XB5|12\.0\(7\)XE2|12\.2\(15\)BC1e|12\.1\(5\)YE6|12\.1\(22\)AY1|12\.2\(4\)BW1a|12\.2\(18\)SXF13|12\.1\(22\)EA11|12\.2\(4\)BW1|12\.2\(33\)SRC|12\.2\(17a\)SX|12\.2\(25\)S15|12\.2\(8\)BC1|12\.2\(15\)BC2d|12\.2\(31\)SB11|12\.4\(18a\)|12\.3\(26\)|12\.3\(23\)BC1|12\.2\(4\)B5|12\.1\(11\)EA1</major_release>
    </version_state>
    <patch_state id="oval:org.mitre.oval:ste:3572" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="less than or equal" datatype="int">16</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3956" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">09</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3356" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">11</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3257" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">17</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3340" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="less than or equal" datatype="int">13</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2993" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">19</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3871" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">20</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3098" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">11</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2405" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.3790.118</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2404" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <patch_state id="oval:org.mitre.oval:ste:4080" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2408" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">3.70.11.46</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2407" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">3.70.11.46</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2406" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <version_state id="oval:org.mitre.oval:ste:3461" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.4(\(\d+\))?JK\d*|12\.2(\(\d+\))?SXD\d*|12\.3(\(\d+\))?T\d*|12\.4(\(\d+\))?\d*|12\.4(\(\d+\))?T\d*</major_release>
    </version_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2411" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:1.1.12-1</evr>
    </rpminfo_state>
    <inetlisteningservers_state id="oval:org.mitre.oval:ste:2410" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <program_name operation="pattern match">^.*smtpd.*</program_name>
    </inetlisteningservers_state>
    <patch_state id="oval:org.mitre.oval:ste:3095" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3154" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">18</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3975" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3739" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3656" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version datatype="int">02</version>
    </patch_state>
    <version_state id="oval:org.mitre.oval:ste:4079" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?ST\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3744" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0\(16\)S1|12\.0\(17\.1\)S|12\.0\(17\)S|12\.0\(15\.6\)ST3|12\.0\(17\.1\)ST|12\.0\(16\)ST</major_release>
    </version_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2820" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.0-2</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2819" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2818" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2817" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <version_state id="oval:org.mitre.oval:ste:3989" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EX\d*|12\.2(\(\d+\))?EU\d*|12\.2(\(\d+\))?EW\d*|12\.2(\(\d+\))?EWA\d*|12\.2(\(\d+\))?IXA\d*|12\.2(\(\d+\))?IXB\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?SG\d*|12\.2(\(\d+\))?SGA\d*|12\.2(\(\d+\))?SRA\d*|12\.2(\(\d+\))?SX\d*|12\.2(\(\d+\))?SXA\d*|12\.2(\(\d+\))?SXB\d*|12\.2(\(\d+\))?SXD\d*|12\.2(\(\d+\))?SXE\d*|12\.2(\(\d+\))?SXF\d*|12\.2(\(\d+\))?SY\d*|12\.2(\(\d+\))?ZA\d*|12\.2(\(\d+\))?ZU\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3112" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2\(18\)ZU1|12\.1\(13\)EX|12\.1\(12c\)EX|12\.2\(18\)SXD7a|12\.2\(18\)IXB2|12\.2\(18\)S5|12\.2\(33\)SRA2|12\.2\(18\)SXE6a|12\.2\(25\)SG1|12\.2\(14\)S3|12\.2\(20\)S|12\.2\(25\)EWA7|12\.1\(26\)E8|12\.2\(31\)SGA1|12\.1\(27b\)E1|12\.2\(18\)SXF5</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:6884" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show module</show_subcommand>
      <config_line operation="pattern match">.*WS\-X6K\-SUP2\-2GE.*|.*WS\-X6248\-RJ\-45.*|.*WS\-X6408\-GBIC.*|.*WS\-SVC\-NAM\-2.*</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:6893" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">.*WS\-X6K\-SUP2\-2GE.*|.*WS\-X6248\-RJ\-45.*|.*WS\-X6408\-GBIC.*|.*WS\-SVC\-NAM\-2.*</config_line>
    </line_state>
    <patch_state id="oval:org.mitre.oval:ste:3693" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">08</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:277" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:276" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">08</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:275" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <swlist_state id="oval:org.mitre.oval:ste:3929" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <version operation="pattern match">A\.0[12]\..*</version>
    </swlist_state>
    <version_state id="oval:org.mitre.oval:ste:4010" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.4(2)T5|12\.3(3)T\d*|12\.3(7)T\d*|12\.4(7a)|12\.4(6)T1|12\.4(3d)|12\.3(2)T\d*|12\.4(8)|12\.4(5b)|12\.3(1)T\d*|12\.4(9)T|12\.3(6)T\d*|12\.3(4)T\d*|12\.4(4)T3|12\.3(5)T\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4013" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.3(\(\d+\))?T\d*|12\.3(8)T\d*|12\.3(\(\d+\))?XQ\d*|12\.3(\(\d+\))?XR\d*|12\.3(\(\d+\))?XU\d*|12\.3(\(\d+\))?XW\d*|12\.3(\(\d+\))?XX\d*|12\.3(\(\d+\))?XY\d*|12\.3(\(\d+\))?YF\d*|12\.3(\(\d+\))?YG\d*|12\.3(\(\d+\))?YK\d*|12\.3(\(\d+\))?YM\d*|12\.3(\(\d+\))?YQ\d*|12\.3(\(\d+\))?YT\d*|12\.3(\(\d+\))?YU\d*|12\.3(\(\d+\))?YX\d*|12\.3(\(\d+\))?YZ\d*|12\.4(\(\d+\))?\d*|12\.4(\(\d+\))?MR\d*|12\.4(\(\d+\))?SW\d*|12\.4(\(\d+\))?T\d*|12\.4(\(\d+\))?XA\d*|12\.4(\(\d+\))?XB\d*|12\.4(\(\d+\))?XC\d*|12\.4(\(\d+\))?XD\d*|12\.4(\(\d+\))?XE\d*|12\.4(\(\d+\))?XJ\d*|12\.4(\(\d+\))?XP\d*|12\.4(\(\d+\))?XT\d*</major_release>
    </version_state>
    <file_state id="oval:org.mitre.oval:ste:2412" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2800.1400</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:4178" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2413" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2737.800</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2414" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.50.4937.800</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2415" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3813.800</version>
    </file_state>
    <version_state id="oval:org.mitre.oval:ste:4204" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?\d*|12\.0(\(\d+\))?DA\d*|12\.0(\(\d+\))?DB\d*|12\.0(\(\d+\))?DC\d*|12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?SC\d*|12\.0(\(\d+\))?SL\d*|12\.0(\(\d+\))?SP\d*|12\.0(\(\d+\))?ST\d*|12\.0(\(\d+\))?SX\d*|12\.0(\(\d+\))?SY\d*|12\.0(\(\d+\))?SZ\d*|12\.0(\(\d+\))?T\d*|12\.0(\(\d+\))?WC\d*|12\.0(\(\d+\))?XA\d*|12\.0(\(\d+\))?XB\d*|12\.0(\(\d+\))?XC\d*|12\.0(\(\d+\))?XD\d*|12\.0(\(\d+\))?XE\d*|12\.0(\(\d+\))?XF\d*|12\.0(\(\d+\))?XG\d*|12\.0(\(\d+\))?XH\d*|12\.0(\(\d+\))?XI\d*|12\.0(\(\d+\))?XJ\d*|12\.0(\(\d+\))?XK\d*|12\.0(\(\d+\))?XL\d*|12\.0(\(\d+\))?XM\d*|12\.0(\(\d+\))?XN\d*|12\.0(\(\d+\))?XQ\d*|12\.0(\(\d+\))?XR\d*|12\.0(\(\d+\))?XS\d*|12\.0(\(\d+\))?XV\d*|12\.0(\(\d+\))?XW\d*|12\.1(\(\d+\))?\d*|12\.1(\(\d+\))?AA\d*|12\.1(\(\d+\))?AX\d*|12\.1(\(\d+\))?AY\d*|12\.1(\(\d+\))?AZ\d*|12\.1(\(\d+\))?CX\d*|12\.1(\(\d+\))?DA\d*|12\.1(\(\d+\))?DB\d*|12\.1(\(\d+\))?DC\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EA\d*|12\.1(\(\d+\))?EB\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?EO\d*|12\.1(\(\d+\))?EU\d*|12\.1(\(\d+\))?EV\d*|12\.1(\(\d+\))?EW\d*|12\.1(\(\d+\))?EX\d*|12\.1(\(\d+\))?EY\d*|12\.1(\(\d+\))?EZ\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XA\d*|12\.1(\(\d+\))?XB\d*|12\.1(\(\d+\))?XC\d*|12\.1(\(\d+\))?XD\d*|12\.1(\(\d+\))?XE\d*|12\.1(\(\d+\))?XG\d*|12\.1(\(\d+\))?XH\d*|12\.1(\(\d+\))?XI\d*|12\.1(\(\d+\))?XJ\d*|12\.1(\(\d+\))?XL\d*|12\.1(\(\d+\))?XM\d*|12\.1(\(\d+\))?XP\d*|12\.1(\(\d+\))?XQ\d*|12\.1(\(\d+\))?XR\d*|12\.1(\(\d+\))?XS\d*|12\.1(\(\d+\))?XT\d*|12\.1(\(\d+\))?XU\d*|12\.1(\(\d+\))?XV\d*|12\.1(\(\d+\))?XW\d*|12\.1(\(\d+\))?XX\d*|12\.1(\(\d+\))?XY\d*|12\.1(\(\d+\))?XZ\d*|12\.1(\(\d+\))?YA\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YC\d*|12\.1(\(\d+\))?YD\d*|12\.1(\(\d+\))?YE\d*|12\.1(\(\d+\))?YF\d*|12\.1(\(\d+\))?YH\d*|12\.1(\(\d+\))?YI\d*|12\.1(\(\d+\))?YJ\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BC\d*|12\.2(\(\d+\))?BW\d*|12\.2(\(\d+\))?BY\d*|12\.2(\(\d+\))?BZ\d*|12\.2(\(\d+\))?CX\d*|12\.2(\(\d+\))?CY\d*|12\.2(\(\d+\))?CZ\d*|12\.2(\(\d+\))?DA\d*|12\.2(\(\d+\))?DD\d*|12\.2(\(\d+\))?DX\d*|12\.2(\(\d+\))?EU\d*|12\.2(\(\d+\))?EW\d*|12\.2(\(\d+\))?EWA\d*|12\.2(\(\d+\))?EX\d*|12\.2(\(\d+\))?EY\d*|12\.2(\(\d+\))?EZ\d*|12\.2(\(\d+\))?FX\d*|12\.2(\(\d+\))?FY\d*|12\.2(\(\d+\))?IXA\d*|12\.2(\(\d+\))?IXB\d*|12\.2(\(\d+\))?IXC\d*|12\.2(\(\d+\))?JA\d*|12\.2(\(\d+\))?JK\d*|12\.2(\(\d+\))?MB\d*|12\.2(\(\d+\))?MC\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?SB\d*|12\.2(\(\d+\))?SBC\d*|12\.2(\(\d+\))?SE\d*|12\.2(\(\d+\))?SEA\d*|12\.2(\(\d+\))?SEB\d*|12\.2(\(\d+\))?SEC\d*|12\.2(\(\d+\))?SED\d*|12\.2(\(\d+\))?SEE\d*|12\.2(\(\d+\))?SEF\d*|12\.2(\(\d+\))?SG\d*|12\.2(\(\d+\))?SO\d*|12\.2(\(\d+\))?SRA\d*|12\.2(\(\d+\))?SRB\d*|12\.2(\(\d+\))?SU\d*|12\.2(\(\d+\))?SV\d*|12\.2(\(\d+\))?SW\d*|12\.2(\(\d+\))?SX\d*|12\.2(\(\d+\))?SXA\d*|12\.2(\(\d+\))?SXB\d*|12\.2(\(\d+\))?SXD\d*|12\.2(\(\d+\))?SXE\d*|12\.2(\(\d+\))?SXF\d*|12\.2(\(\d+\))?SY\d*|12\.2(\(\d+\))?SZ\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?TPC\d*|12\.2(\(\d+\))?XA\d*|12\.2(\(\d+\))?XB\d*|12\.2(\(\d+\))?XC\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XE\d*|12\.2(\(\d+\))?XG\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XI\d*|12\.2(\(\d+\))?XJ\d*|12\.2(\(\d+\))?XK\d*|12\.2(\(\d+\))?XL\d*|12\.2(\(\d+\))?XM\d*|12\.2(\(\d+\))?XN\d*|12\.2(\(\d+\))?XQ\d*|12\.2(\(\d+\))?XR\d*|12\.2(\(\d+\))?XS\d*|12\.2(\(\d+\))?XT\d*|12\.2(\(\d+\))?XU\d*|12\.2(\(\d+\))?XV\d*|12\.2(\(\d+\))?YA\d*|12\.2(\(\d+\))?YB\d*|12\.2(\(\d+\))?YC\d*|12\.2(\(\d+\))?YD\d*|12\.2(\(\d+\))?YE\d*|12\.2(\(\d+\))?YF\d*|12\.2(\(\d+\))?YG\d*|12\.2(\(\d+\))?YH\d*|12\.2(\(\d+\))?YJ\d*|12\.2(\(\d+\))?YK\d*|12\.2(\(\d+\))?YL\d*|12\.2(\(\d+\))?YM\d*|12\.2(\(\d+\))?YN\d*|12\.2(\(\d+\))?YP\d*|12\.2(\(\d+\))?YQ\d*|12\.2(\(\d+\))?YR\d*|12\.2(\(\d+\))?YS\d*|12\.2(\(\d+\))?YT\d*|12\.2(\(\d+\))?YU\d*|12\.2(\(\d+\))?YV\d*|12\.2(\(\d+\))?YW\d*|12\.2(\(\d+\))?YX\d*|12\.2(\(\d+\))?YY\d*|12\.2(\(\d+\))?YZ\d*|12\.2(\(\d+\))?ZA\d*|12\.2(\(\d+\))?ZB\d*|12\.2(\(\d+\))?ZC\d*|12\.2(\(\d+\))?ZD\d*|12\.2(\(\d+\))?ZE\d*|12\.2(\(\d+\))?ZF\d*|12\.2(\(\d+\))?ZG\d*|12\.2(\(\d+\))?ZH\d*|12\.2(\(\d+\))?ZJ\d*|12\.2(\(\d+\))?ZL\d*|12\.2(\(\d+\))?ZN\d*|12\.2(\(\d+\))?ZP\d*|12\.3(\(\d+\))?\d*|12\.3(\(\d+\))?B\d*|12\.3(\(\d+\))?BC\d*|12\.3(\(\d+\))?BW\d*|12\.3(\(\d+\))?JA\d*|12\.3(\(\d+\))?JK\d*|12\.3(\(\d+\))?JX\d*|12\.3(\(\d+\))?T\d*|12\.3(\(\d+\))?TPC\d*|12\.3(\(\d+\))?XA\d*|12\.3(\(\d+\))?XB\d*|12\.3(\(\d+\))?XC\d*|12\.3(\(\d+\))?XD\d*|12\.3(\(\d+\))?XE\d*|12\.3(\(\d+\))?XF\d*|12\.3(\(\d+\))?XG\d*\|12\.3(\(\d+\))?XH\d*|12\.3(\(\d+\))?XI\d*|12\.3(\(\d+\))?XJ\d|12\.3(\(\d+\))?XK\d*|12\.3(\(\d+\))?XQ\d*|12\.3(\(\d+\))?XR\d*|12\.3(\(\d+\))?XS\d*|12\.3(\(\d+\))?XU\d*|12\.3(\(\d+\))?XW\d*|12\.3(\(\d+\))?XX\d*|12\.3(\(\d+\))?XY\d*|12\.3(\(\d+\))?YA\d*|12\.3(\(\d+\))?YD\d*|12\.3(\(\d+\))?YF\d*|12\.3(\(\d+\))?YG\d*|12\.3(\(\d+\))?YH\d*|12\.3(\(\d+\))?YI\d*|12\.3(\(\d+\))?YJ\d*|12\.3(\(\d+\))?YK\d*|12\.3(\(\d+\))?YM\d*|12\.3(\(\d+\))?YQ\d*|12\.3(\(\d+\))?YS\d*|12\.3(\(\d+\))?YT\d*|12\.3(\(\d+\))?YU\d*|12\.3(\(\d+\))?YX\d*|12\.3(\(\d+\))?YZ\d*|12\.4(\(\d+\))?\d*|12\.4(\(\d+\))?MR\d*|12\.4(\(\d+\))?T\d*|12\.4(\(\d+\))?XA\d*|12\.4(\(\d+\))?XB\d*|12\.4(\(\d+\))?XC\d*|12\.4(\(\d+\))?XD\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4264" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2\(37\)|12\.2\(10\)DA5|12\.3\(4\)T13|12\.0\(31\)S6|12\.0\(32\)S4|12\.3\(13a\)BC6|12\.0\(31\)S6|12\.0\(25\)SX11|12\.0\(32\)SY|12\.2\(37\)|12\.0\(5\)WC15|12\.2\(37\)|12\.1\(26\)E7|12\.2\(37\)|12\.2\(25\)EY4|12\.1\(22\)EA8|12\.3\(4\)T13|12\.1\(26\)E7|12\.1\(27b\)E1|12\.1\(22\)EA8|12\.3\(13a\)BC6|12\.1EO|12\.1\(19\)EO6|12\.1\(20\)EO3|12\.2\(25\)EWA6|12\.2\(27\)SV4|12\.2\(25\)EWA6|12\.1\(26\)E7|12\.3\(19\)|12\.3\(4\)T13|12\.3\(7\)XI8|12\.3\(13a\)BC6|12\.2\(10\)DA5|12\.2\(12\)DA10|12\.2\(25\)EWA6|12\.2\(25\)EX1|12\.2\(25\)EY4|12\.2\(25\)SEE1|12\.2\(18\)IXD|12\.3\(8\)JA2|12\.4\(4\)T4|12\.2\(25\)SW8|12\.3\(11\)T11|12\.2\(25\)S12|12\.2\(28\)SB2|12\.2\(31\)SB|12\.2\(27\)SBC5|12\.2\(35\)SE|12\.2\(25\)SEE1|12\.2\(37\)SG|12\.2\(18\)SO7|12\.4\(8\)|12\.2\(27\)SV4|12\.2\(28\)SV1|12\.2\(29\)SV1|12\.2\(25\)SW8|12\.2\(18\)SXD7a|12\.2\(18\)SXD7a|12\.2\(18\)SXE6|12\.2\(18\)SXF5|12\.2\(18\)SXD7a|12\.2\(25\)S12|12\.3\(19\)|12\.3\(13a\)BC6|12\.3\(11\)T11|12\.2\(25\)S12|12\.4\(8\)|12\.3\(4\)T13|12\.2\(25\)S12|12\.2\(18\)SXD7a|12\.3\(19\)|12\.3\(4\)T13|12\.4\(8\)|12\.3\(10f\)|12\.3\(19\)|12\.3\(11\)T11|12\.3\(13a\)BC6|12\.3\(17a\)BC2|12\.3\(8\)JA2|12\.3\(2\)JK2|12\.3\(7\)JX4|12\.3\(11\)JX|12\.3\(4\)T13|12\.3\(11\)T11|12\.3\(11\)T11|12\.3\(7\)XI8|12\.3\(14\)YX2|12\.4\(8\)|12\.4\(2\)T5|12\.3\(14\)YX2|12\.4\(8\)|12\.4\(2\)T5|12\.3\(14\)YM8|12\.3\(14\)YQ8|12\.4\(4\)T4|12\.3\(14\)YX2|12\.3\(11\)YZ1|12\.4\(3e\)|12\.4\(7b\)|12\.4\(8\)|12\.4\(6\)MR1|12\.4\(2\)T5|12\.4\(6\)T3|12\.4\(9\)T|12\.4\(6\)T3|12\.4\(4\)XC3|12\.4\(4\)XD4</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4026" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?\d*|12\.0(\(\d+\))?T\d*|12\.0(\(\d+\))?WC\d*|12\.0(\(\d+\))?XA\d*|12\.0(\(\d+\))?XC\d*|12\.0(\(\d+\))?XD\d*|12\.0(\(\d+\))?XF\d*|12\.0(\(\d+\))?XG\d*|12\.0(\(\d+\))?XH\d*|12\.0(\(\d+\))?XI\d*|12\.0(\(\d+\))?XK\d*|12\.0(\(\d+\))?XL\d*|12\.0(\(\d+\))?XM\d*|12\.0(\(\d+\))?XN\d*|12\.0(\(\d+\))?XQ\d*|12\.0(\(\d+\))?XR\d*|12\.0(\(\d+\))?XV\d*|12\.1(\(\d+\))?\d*|12\.1(\(\d+\))?AA\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EA\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?EX\d*|12\.1(\(\d+\))?EY\d*|12\.1(\(\d+\))?EZ\d*|12\.1(\(\d+\))?GA\d*|12\.1(\(\d+\))?GB\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XA\d*|12\.1(\(\d+\))?XB\d*|12\.1(\(\d+\))?XC\d*|12\.1(\(\d+\))?XD\d*|12\.1(\(\d+\))?XE\d*|12\.1(\(\d+\))?XF\d*|12\.1(\(\d+\))?XG\d*|12\.1(\(\d+\))?XH\d*|12\.1(\(\d+\))?XI\d*|12\.1(\(\d+\))?XJ\d*|12\.1(\(\d+\))?XL\d*|12\.1(\(\d+\))?XM\d*|12\.1(\(\d+\))?XP\d*|12\.1(\(\d+\))?XQ\d*|12\.1(\(\d+\))?XR\d*|12\.1(\(\d+\))?XS\d*|12\.1(\(\d+\))?XT\d*|12\.1(\(\d+\))?XU\d*|12\.1(\(\d+\))?XV\d*|12\.1(\(\d+\))?XW\d*|12\.1(\(\d+\))?XY\d*|12\.1(\(\d+\))?XZ\d*|12\.1(\(\d+\))?YA\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YC\d*|12\.1(\(\d+\))?YD\d*|12\.1(\(\d+\))?YE\d*|12\.1(\(\d+\))?YF\d*|12\.1(\(\d+\))?YH\d*|12\.1(\(\d+\))?YI\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BW\d*|12\.2(\(\d+\))?BY\d*|12\.2(\(\d+\))?CZ\d*|12\.2(\(\d+\))?DD\d*|12\.2(\(\d+\))?DX\d*|12\.2(\(\d+\))?IXA\d*|12\.2(\(\d+\))?IXB\d*|12\.2(\(\d+\))?IXC\d*|12\.2(\(\d+\))?IXD\d*|12\.2(\(\d+\))?MC\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?SB\d*|12\.2(\(\d+\))?SBC\d*|12\.2(\(\d+\))?SRA\d*|12\.2(\(\d+\))?SRB\d*|12\.2(\(\d+\))?SU\d*|12\.2(\(\d+\))?SV\d*|12\.2(\(\d+\))?SVC\d*|12\.2(\(\d+\))?SW\d*|12\.2(\(\d+\))?SX\d*|12\.2(\(\d+\))?SXA\d*|12\.2(\(\d+\))?SXB\d*|12\.2(\(\d+\))?SXD\d*|12\.2(\(\d+\))?SXE\d*|12\.2(\(\d+\))?SXF\d*|12\.2(\(\d+\))?SZ\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?TPC\d*|12\.2(\(\d+\))?VZ\d*|12\.2(\(\d+\))?XA\d*|12\.2(\(\d+\))?XB\d*|12\.2(\(\d+\))?XC\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XE\d*|12\.2(\(\d+\))?XG\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XI\d*|12\.2(\(\d+\))?XJ\d*|12\.2(\(\d+\))?XK\d*|12\.2(\(\d+\))?XL\d*|12\.2(\(\d+\))?XM\d*|12\.2(\(\d+\))?XN\d*|12\.2(\(\d+\))?XQ\d*|12\.2(\(\d+\))?XS\d*|12\.2(\(\d+\))?XT\d*|12\.2(\(\d+\))?XU\d*|12\.2(\(\d+\))?XV\d*|12\.2(\(\d+\))?XW\d*|12\.2(\(\d+\))?YA\d*|12\.2(\(\d+\))?YB\d*|12\.2(\(\d+\))?YC\d*|12\.2(\(\d+\))?YD\d*|12\.2(\(\d+\))?YE\d*|12\.2(\(\d+\))?YF\d*|12\.2(\(\d+\))?YG\d*|12\.2(\(\d+\))?YH\d*|12\.2(\(\d+\))?YJ\d*|12\.2(\(\d+\))?YK\d*|12\.2(\(\d+\))?YL\d*|12\.2(\(\d+\))?YM\d*|12\.2(\(\d+\))?YN\d*|12\.2(\(\d+\))?YP\d*|12\.2(\(\d+\))?YQ\d*|12\.2(\(\d+\))?YR\d*|12\.2(\(\d+\))?YS\d*|12\.2(\(\d+\))?YT\d*|12\.2(\(\d+\))?YU\d*|12\.2(\(\d+\))?YV\d*|12\.2(\(\d+\))?YW\d*|12\.2(\(\d+\))?YX\d*|12\.2(\(\d+\))?YY\d*|12\.2(\(\d+\))?YZ\d*|12\.2(\(\d+\))?ZB\d*|12\.2(\(\d+\))?ZC\d*|12\.2(\(\d+\))?ZD\d*|12\.2(\(\d+\))?ZE\d*|12\.2(\(\d+\))?ZF\d*|12\.2(\(\d+\))?ZG\d*|12\.2(\(\d+\))?ZH\d*|12\.2(\(\d+\))?ZJ\d*|12\.2(\(\d+\))?ZL\d*|12\.2(\(\d+\))?ZP\d*|12\.2(\(\d+\))?ZR\d*|12\.2(\(\d+\))?ZU\d*|12\.2(\(\d+\))?ZW\d*|12\.2(\(\d+\))?ZY\d*|12\.3(\(\d+\))?\d*|12\.3(\(\d+\))?B\d*|12\.3(\(\d+\))?T\d*|12\.3(\(\d+\))?TPC\d*|12\.3(\(\d+\))?XA\d*|12\.3(\(\d+\))?XB\d*|12\.3(\(\d+\))?XC\d*|12\.3(\(\d+\))?XD\d*|12\.3(\(\d+\))?XE\d*|12\.3(\(\d+\))?XF\d*|12\.3(\(\d+\))?XG\d*|12\.3(\(\d+\))?XH\d*|12\.3(\(\d+\))?XI\d*|12\.3(\(\d+\))?XJ\d*|12\.3(\(\d+\))?XK\d*|12\.3(\(\d+\))?XQ\d*|12\.3(\(\d+\))?XR\d*|12\.3(\(\d+\))?XS\d*|12\.3(\(\d+\))?XU\d*|12\.3(\(\d+\))?XW\d*|12\.3(\(\d+\))?XY\d*|12\.3(\(\d+\))?YA\d*|12\.3(\(\d+\))?YD\d*|12\.3(\(\d+\))?YF\d*|12\.3(\(\d+\))?YG\d*|12\.3(\(\d+\))?YH\d*|12\.3(\(\d+\))?YI\d*|12\.3(\(\d+\))?YK\d*|12\.3(\(\d+\))?YM\d*|12\.3(\(\d+\))?YQ\d*|12\.3(\(\d+\))?YS\d*|12\.3(\(\d+\))?YT\d*|12\.3(\(\d+\))?YU\d*|12\.3(\(\d+\))?YX\d*|12\.3(\(\d+\))?YZ\d*|12\.4(\(\d+\))?\d*|12\.4(\(\d+\))?MR\d*|12\.4(\(\d+\))?T\d*|12\.4(\(\d+\))?XA\d*|12\.4(\(\d+\))?XB\d*|12\.4(\(\d+\))?XC\d*|12\.4(\(\d+\))?XD\d*|12\.4(\(\d+\))?XE\d*|12\.4(\(\d+\))?XF\d*|12\.4(\(\d+\))?XG\d*|12\.4(\(\d+\))?XJ\d*|12\.4(\(\d+\))?XK\d*|12\.4(\(\d+\))?XT\d*|12\.4(\(\d+\))?XV\d*|12\.4(\(\d+\))?XW\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3100" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.3\(4\)TPC11b|12\.2\(13\)ZH9|12\.2\(29a\)SV|12\.3\(11\)YZ2|12\.3\(18a\)|12\.3\(22a\)|12\.4\(6\)XT1|12\.4\(4\)XC7|12\.3\(2\)XA6|12\.2\(18\)SXF10|12\.2\(28d\)|12\.3\(7\)XI8a|12\.3\(14\)YM11|12\.2\(18\)ZY1|12\.2\(18\)ZY2|12\.2\(21\)SW|12\.2\(20\)SW|12\.3\(11\)YK3|12\.4\(4\)XD8|12\.1\(22\)EA10|12\.2\(23\)SV|12\.2\(15\)MC2a|12\.2\(29b\)|12\.4\(6\)T8|12\.2\(30\)S|12\.4\(6\)XE3|12\.2\(15\)MC2i|12\.2\(15\)MC2j|12\.2\(27\)SV3|12\.2\(27\)SV2|12\.3\(19a\)|12\.3\(17b\)BC8|12\.3\(11\)YS2|12\.2\(15\)MC1|12\.4\(16\)|12\.4\(5c\)|12\.3\(21b\)|12\.4\(7f\)|12\.2\(20\)S13|12\.4\(11\)XJ4|12\.2\(46a\)|12\.2\(29\)SV4|12\.3\(11\)T12|12\.2\(18\)S13|12\.2\(22\)SV|12\.2\(28\)SB1|12\.4\(13d\)|12\.2\(8\)MC1|12\.2\(8\)MC2|12\.4\(2\)XB6|12\.2\(4\)BC1|12\.4\(9\)T5|12\.2\(25\)SW10|12\.2\(25\)SW11|12\.2\(28\)SV1|12\.4\(11\)XW3|12\.2\(14\)S19|12\.2\(24\)SV|12\.3\(2\)XC5|12\.2\(33\)SRB2|12\.3\(2\)XE5|12\.2\(27c\)|12\.4\(10c\)|12\.4\(11\)T3|12\.3\(23\)|12\.3\(7\)XI10a|12\.3\(2\)XE5|12\.4\(15\)T1|12\.3\(7\)XR7|12\.4\(4\)T8|12\.2\(33\)SRA5|12\.2\(25\)SV|12\.3\(17c\)|12\.3\(8\)XU|12\.3\(20a\)|12\.4\(8d\)|12\.2\(29\)SV|12\.2\(31\)SB6|12\.4\(12\)MR2|12\.4\(8d\)|12\.4\(2\)T6|12\.2\(21\)SW1|12\.3\(7\)XI1b|12\.3\(8\)YG6|12\.2\(33\)SXH|12\.3\(21a\)BC3|12\.2\(8\)TPC10c|12\.4\(3h\)|12\.3\(14\)YX9|12\.4\(11\)XV1|12\.4\(12c\)|12\.2\(4\)YA12|12\.0\(5\)WC16|12\.3\(19a|12\.1\(27b\)E2|12\.3\(17c\)|12\.2\(8\)ZB|12\.4\(11\)XW2|12\.3\(7\)XI2a|12\.2\(25\)S13|12\.3\(19a\)|12\.2\(28\)SB9|12\.2\(26c\)|12\.2\(18\)IXD1|12\.1\(22\)EA10b|12\.1\(22\)EA10a</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:6767" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show ip sockets</show_subcommand>
      <config_line operation="pattern match">\s+5060\s+</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:6946" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">\s+5060($|\s+)</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:6090" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show tcp brief all</show_subcommand>
      <config_line operation="pattern match">\s+\*\.5060\s+</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:3281" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">^\s*ftp-server enable</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:3407" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.3\(8\)XX2d|12\.4\(10b\)|12\.4\(6\)XE2|12\.4\(8c\)|12\.4\(9\)T2|12\.4\(4\)XC6|12\.3\(21\)|12\.2\(46\)|12\.4\(6\)T6|12\.3\(21\)|12\.4\(3g\)|12\.0\(5\)WC17|12\.4\(7d\)|12\.2\(40a\)|12\.4\(11\)T|12\.4\(12\)|12\.4\(4\)XD4|12\.4\(4\)T6</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3111" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?\d*|12\.0(\(\d+\))?T\d*|12\.0(\(\d+\))?XC\d*|12\.0(\(\d+\))?XK\d*|12\.0(\(\d+\))?WC\d*|12\.1(\(\d+\))?\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XH\d*|12\.1(\(\d+\))?XM\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?XA\d*|12\.2(\(\d+\))?XG\d*|12\.2(\(\d+\))?XT\d*|12\.2(\(\d+\))?ZF\d*|12\.2(\(\d+\))?ZH\d*|12\.2(\(\d+\))?ZJ\d*|12\.2(\(\d+\))?ZL\d*|12\.2(\(\d+\))?ZN\d*|12\.3(\(\d+\))?\d*|12\.3(\(\d+\))?B\d*|12\.3(\(\d+\))?T\d*|12\.3(\(\d+\))?TPC\d*|12\.3(\(\d+\))?XA\d*|12\.3(\(\d+\))?XC\d*|12\.3(\(\d+\))?XD\d*|12\.3(\(\d+\))?XE\d*|12\.3(\(\d+\))?XF\d*|12\.3(\(\d+\))?XG\d*|12\.3(\(\d+\))?XH\d*|12\.3(\(\d+\))?XK\d*|12\.3(\(\d+\))?XQ\d*|12\.3(\(\d+\))?XR\d*|12\.3(\(\d+\))?XS\d*|12\.3(\(\d+\))?XX\d*|12\.3(\(\d+\))?YA\d*|12\.3(\(\d+\))?YD\d*|12\.3(\(\d+\))?YG\d*|12\.3(\(\d+\))?YH\d*|12\.3(\(\d+\))?YI\d*|12\.3(\(\d+\))?YK\d*|12\.3(\(\d+\))?YM\d*|12\.3(\(\d+\))?YS\d*|12\.3(\(\d+\))?YT\d*|12\.3(\(\d+\))?YZ\d*|12\.4(\(\d+\))?\d*|12\.4(\(\d+\))?SW\d*|12\.4(\(\d+\))?T\d*|12\.4(\(\d+\))?XA\d*|12\.4(\(\d+\))?XC\d*|12\.4(\(\d+\))?XD\d*|12\.4(\(\d+\))?XE\d*</major_release>
    </version_state>
    <file_state id="oval:org.mitre.oval:ste:2821" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3502.4856</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2420" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.44-19.90.0</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2419" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2418" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2417" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:318" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:282" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.0.799</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:288" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:287" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">1.0.3705.556</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:286" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>1,0,3705,2</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:285" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>1,0,3705,3</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:284" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">1.0.3705.6021</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:283" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <patch_state id="oval:org.mitre.oval:ste:3052" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">10</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2985" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">23</version>
    </patch_state>
    <line_state id="oval:org.mitre.oval:ste:4162" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">router bgp</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:4205" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">11\.1(\(\d+\))?\d*|11\.1(\(\d+\))?AA\d*|11\.1(\(\d+\))?CA\d*|11\.1(\(\d+\))?CC\d*|11\.2(\(\d+\))?\d*|11\.2(\(\d+\))?P\d*|11\.2(\(\d+\))?SA\d*|11\.3(\(\d+\))?\d*|11\.3(\(\d+\))?T\d*|12\.0(\(\d+\))?\d*|12\.0(\(\d+\))?DA\d*|12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?SL\d*|12\.0(\(\d+\))?ST\d*|12\.0(\(\d+\))?SV\d*|12\.0(\(\d+\))?SX\d*|12\.0(\(\d+\))?SZ\d*|12\.0(\(\d+\))?T\d*|12\.0(\(\d+\))?W5\d*|12\.0(\(\d+\))?WC\d*|12\.0(\(\d+\))?WX\d*|12\.0(\(\d+\))?XA\d*|12\.0(\(\d+\))?XC\d*|12\.0(\(\d+\))?XD\d*|12\.0(\(\d+\))?XE\d*|12\.0(\(\d+\))?XG\d*|12\.0(\(\d+\))?XH\d*|12\.0(\(\d+\))?XI\d*|12\.0(\(\d+\))?XJ\d*|12\.0(\(\d+\))?XK\d*|12\.0(\(\d+\))?XL\d*|12\.0(\(\d+\))?XN\d*|12\.0(\(\d+\))?XP\d*|12\.0(\(\d+\))?XR\d*|12\.0(\(\d+\))?XS\d*|12\.0(\(\d+\))?XU\d*|12\.1(\(\d+\))?\d*|12\.1(\(\d+\))?AA\d*|12\.1(\(\d+\))?AX\d*|12\.1(\(\d+\))?AZ\d*|12\.1(\(\d+\))?DA\d*|12\.1(\(\d+\))?DB\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EA\d*|12\.1(\(\d+\))?EB\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?EO\d*|12\.1(\(\d+\))?EV\d*|12\.1(\(\d+\))?EW\d*|12\.1(\(\d+\))?EX\d*|12\.1(\(\d+\))?EY\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XA\d*|12\.1(\(\d+\))?XB\d*|12\.1(\(\d+\))?XC\d*|12\.1(\(\d+\))?XD\d*|12\.1(\(\d+\))?XE\d*|12\.1(\(\d+\))?XF\d*|12\.1(\(\d+\))?XG\d*|12\.1(\(\d+\))?XH\d*|12\.1(\(\d+\))?XI\d*|12\.1(\(\d+\))?XJ\d*|12\.1(\(\d+\))?XL\d*|12\.1(\(\d+\))?XM\d*|12\.1(\(\d+\))?XP\d*|12\.1(\(\d+\))?XQ\d*|12\.1(\(\d+\))?XR\d*|12\.1(\(\d+\))?XT\d*|12\.1(\(\d+\))?XU\d*|12\.1(\(\d+\))?XV\d*|12\.1(\(\d+\))?XY\d*|12\.1(\(\d+\))?YA\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YC\d*|12\.1(\(\d+\))?YD\d*|12\.1(\(\d+\))?YH\d*|12\.1(\(\d+\))?YJ\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BC\d*|12\.2(\(\d+\))?BW\d*|12\.2(\(\d+\))?BX\d*|12\.2(\(\d+\))?BY\d*|12\.2(\(\d+\))?BZ\d*|12\.2(\(\d+\))?CX\d*|12\.2(\(\d+\))?DA\d*|12\.2(\(\d+\))?DD\d*|12\.2(\(\d+\))?DX\d*|12\.2(\(\d+\))?EW\d*|12\.2(\(\d+\))?JA\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?SE\d*|12\.2(\(\d+\))?SU\d*|12\.2(\(\d+\))?SV\d*|12\.2(\(\d+\))?SW\d*|12\.2(\(\d+\))?SX\d*|12\.2(\(\d+\))?SXA\d*|12\.2(\(\d+\))?SXB\d*|12\.2(\(\d+\))?SY\d*|12\.2(\(\d+\))?SZ\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?XA\d*|12\.2(\(\d+\))?XB\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XE\d*|12\.2(\(\d+\))?XG\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XI\d*|12\.2(\(\d+\))?XJ\d*|12\.2(\(\d+\))?XK\d*|12\.2(\(\d+\))?XL\d*|12\.2(\(\d+\))?XM\d*|12\.2(\(\d+\))?XN\d*|12\.2(\(\d+\))?XQ\d*|12\.2(\(\d+\))?XS\d*|12\.2(\(\d+\))?XT\d*|12\.2(\(\d+\))?XU\d*|12\.2(\(\d+\))?XW\d*|12\.2(\(\d+\))?YA\d*|12\.2(\(\d+\))?YB\d*|12\.2(\(\d+\))?YC\d*|12\.2(\(\d+\))?YD\d*|12\.2(\(\d+\))?YE\d*|12\.2(\(\d+\))?YF\d*|12\.2(\(\d+\))?YG\d*|12\.2(\(\d+\))?YH\d*|12\.2(\(\d+\))?YJ\d*|12\.2(\(\d+\))?YL\d*|12\.2(\(\d+\))?YM\d*|12\.2(\(\d+\))?YN\d*|12\.2(\(\d+\))?YO\d*|12\.2(\(\d+\))?YP\d*|12\.2(\(\d+\))?YQ\d*|12\.2(\(\d+\))?YR\d*|12\.2(\(\d+\))?YS\d*|12\.2(\(\d+\))?YT\d*|12\.2(\(\d+\))?YU\d*|12\.2(\(\d+\))?YV\d*|12\.2(\(\d+\))?YW\d*|12\.2(\(\d+\))?YX\d*|12\.2(\(\d+\))?YY\d*|12\.2(\(\d+\))?YZ\d*|12\.2(\(\d+\))?ZA\d*|12\.2(\(\d+\))?ZB\d*|12\.2(\(\d+\))?ZC\d*|12\.2(\(\d+\))?ZE\d*|12\.2(\(\d+\))?ZF\d*|12\.2(\(\d+\))?ZG\d*|12\.2(\(\d+\))?ZH\d*|12\.2(\(\d+\))?ZI\d*|12\.2(\(\d+\))?ZK\d*|12\.2(\(\d+\))?ZL\d*|12\.2(\(\d+\))?ZN\d*|12\.2(\(\d+\))?ZO\d*|12\.2(\(\d+\))?ZP\d*|12\.3(\(\d+\))?\d*|12\.3(\(\d+\))?T\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4258" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">11\.2\(26g\)|11\.2\(26\)P7|11\.3\(11f\)|11\.3\(11b\)T5|12\.0\(27\)|12\.0\(21\)S7|12\.0\(22\)S2e|12\.0\(22\)S3c|12\.0\(22\)S4a|12\.0\(22\)S5|12\.0\(23\)S3|12\.0\(24\)S2|12\.0\(25\)S1|12\.0\(26\)S|12\.0\(17\)ST10|12\.0\(21\)ST7|12\.0\(26\)S2|12\.0\(27\)SV|12\.0\(25\)SX|12\.0\(23\)SZ3|12\.0\(26\)SZ|12\.0\(16\)W5\(21c\)|12\.0\(25\)W5\(27b\)|12\.0\(26\)W5\(28a\)|12\.0\(27\)W5\(29\)|12\.1\(20\)|12\.1AY|12\.1\(14\)AZ|12\.1\(6\)E|12\.1\(8b\)E14|12\.1\(11b\)E|12\.1\(12c\)E7|12\.1\(13\)E6|12\.1\(14\)E4|12\.1\(19\)E|12\.1\(20\)E|12\.1\(14\)EA1|12\.1\(14\)EB1|12\.1\(19\)EC|12\.1\(19\)EO|12\.1\(12c\)EV2|12\.1\(19\)EW|12\.1\(14\)E4|12\.1\(5\)T1|12\.1\(5\)T19|12\.2\(4\)T6|12\.2\(8\)T10|12\.2\(4\)T6|12\.2\(8\)T10|12\.2\(13\)T5|12\.2\(10d\)|12\.2\(12e\)|12\.2\(12h\)M1|12\.2\(13c\)|12\.2\(16a\)|12\.2\(17\)|12\.2\(15\)B1|12\.2\(15\)BC1|12\.2\(15\)T12|12\.2\(16\)BX|12\.2\(15\)CX|12\.2\(12\)DA6|12\.2\(18\)EW|12\.2\(13\)JA|12\.2\(14\)S2|12\.2\(18\)S|12\.2\(18\)SE|12\.2\(14\)SU|12\.2\(18\)SV|12\.2\(18\)SW|12\.2\(14\)SX2|12\.2\(17b\)SXA|12\.2\(17d\)SXB|12\.2\(14\)SY|12\.2\(14\)SZ2|12\.2\(4\)T6|12\.2\(8\)T10|12\.2\(13\)T5|12\.2\(15\)T4|12\.2\(11\)T9|12\.2\(2\)XB16|12\.2\(8\)T10|12\.2\(15\)T12|12\.2\(11\)T11|12\.2\(8\)YY|12\.2\(13\)T5|12\.3\(2\)T|12\.2\(11\)YP1|12\.3\(4\)T|12\.2\(14\)SU|12\.2\(8\)YY3|12\.2\(14\)SZ|12\.2\(14\)ZA2|12\.2\(18\)S|12\.2\(15\)ZK|12\.2\(15\)ZL|12\.2\(15\)ZO|12\.2\(13\)ZP</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4122" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">11\.2(\(\d+\))?\w*\d*|11\.3(\(\d+\))?\w*\d*|12\.0(\(\d+\))?\w*\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4038" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">11\.2\(19\)GS0\.2|12\.0\(8\.0\.2\)S|12\.0\(7\)S1|12\.0\(7\.4\)S|12\.0\(8\.3\)SC|12\.0\(7\)SC</major_release>
    </version_state>
    <registry_state id="oval:org.mitre.oval:ste:290" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>6.2.0208</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2360" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>MSN Messenger 6.2</value>
    </registry_state>
    <version_state id="oval:org.mitre.oval:ste:4175" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">11\.0(\(\d+\))?\w*\d*|11\.1(\(\d+\))?\d*|11\.1(\(\d+\))?AA\d*|11\.1(\(\d+\))?CA\d*|11\.1(\(\d+\))?CC\d*|11\.1(\(\d+\))?CT\d*|11\.1(\(\d+\))?IA\d*|11\.2(\(\d+\))?\d*|11\.2(\(\d+\))?BC\d*|11\.2(\(\d+\))?F\d*|11\.2(\(\d+\))?GS\d*|11\.2(\(\d+\))?P\d*|11\.2(\(\d+\))?SA\d*|11\.2(\(\d+\))?WA3\d*|11\.2(4)XA\d*|11\.2(9)XA\d*|11\.3(\(\d+\))?\d*|11\.3(\(\d+\))?AA\d*|11\.3(\(\d+\))?DA\d*|11\.3(\(\d+\))?DB\d*|11\.3(\(\d+\))?HA\d*|11\.3(\(\d+\))?MA\d*|11\.3(\(\d+\))?NA\d*|11\.3(\(\d+\))?T\d*|11\.3(\(\d+\))?WA4\d*|11\.3(2)XA\d*|12\.0(\(\d+\))?\d*|12\.0(\(\d+\))?DA\d*|12\.0(\(\d+\))?DB\d*|12\.0(\(\d+\))?DC\d*|12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?SC\d*|12\.0(\(\d+\))?SL\d*|12\.0(\(\d+\))?ST\d*|12\.0(\(\d+\))?SX\d*|12\.0(\(\d+\))?T\d*|12\.0(\(\d+\))?W5\d*|12\.0(\(\d+\))?WT\d*|12\.0(\(\d+\))?XA\d*|12\.0(\(\d+\))?XB\d*|12\.0(\(\d+\))?XC\d*|12\.0(\(\d+\))?XD\d*|12\.0(\(\d+\))?XE\d*|12\.0(\(\d+\))?XF\d*|12\.0(\(\d+\))?XG\d*|12\.0(\(\d+\))?XH\d*|12\.0(\(\d+\))?XI\d*|12\.0(\(\d+\))?XJ\d*|12\.0(\(\d+\))?XK\d*|12\.0(\(\d+\))?XL\d*|12\.0(\(\d+\))?XM\d*|12\.0(\(\d+\))?XN\d*|12\.0(\(\d+\))?XP\d*|12\.0(\(\d+\))?XQ\d*|12\.0(\(\d+\))?XR\d*|12\.0(\(\d+\))?XS\d*|12\.0(\(\d+\))?XU\d*|12\.0(\(\d+\))?XV\d*|12\.1(\(\d+\))?\d*|12\.1(\(\d+\))?AA\d*|12\.1(\(\d+\))?DA\d*|12\.1(\(\d+\))?CX\d*|12\.1(\(\d+\))?DB\d*|12\.1(\(\d+\))?DC\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?EX\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XA\d*|12\.1(\(\d+\))?XB\d*|12\.1(\(\d+\))?XC\d*|12\.1(\(\d+\))?XD\d*|12\.1(\(\d+\))?XE\d*|12\.1(\(\d+\))?XF\d*|12\.1(\(\d+\))?XG\d*|12\.1(\(\d+\))?XH\d*|12\.1(\(\d+\))?XI\d*|12\.1(\(\d+\))?XJ\d*|12\.1(\(\d+\))?XK\d*|12\.1(\(\d+\))?XL\d*|12\.1(\(\d+\))?XM\d*|12\.1(\(\d+\))?XP\d*|12\.1(\(\d+\))?XQ\d*|12\.1(\(\d+\))?XR\d*|12\.1(\(\d+\))?XS\d*|12\.1(\(\d+\))?XT\d*|12\.1(\(\d+\))?XU\d*|12\.1(\(\d+\))?XV\d*|12\.1(\(\d+\))?XW\d*|12\.1(\(\d+\))?XX\d*|12\.1(\(\d+\))?XY\d*|12\.1(\(\d+\))?XZ\d*|12\.1(\(\d+\))?YA\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YC\d*|12\.1(\(\d+\))?YD\d*</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:4136" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.1\(4\.5\)EC|12\.1\(5\)YB|11\.1\(36\)CC1|12\.1\(5\)XU1|12\.0\(5c\)E8|12\.1\(6\)EC|11\.1\(36\)CA1|12\.1\(3\)XG3|12\.0\(14\)S1|11\.2\(25\)|12\.0\(4\)XH5|12\.1\(4\)DC2|11\.3\(11b\)T1|12\.0\(13\)W5\(19c\)|12\.1\(5\)XY4|11\.3\(11a\)AA|11\.3\(1\)MA8|12\.1\(3a\)XI6|12\.1\(5\)XM1|12\.1\(5\)DC|12\.1WC|12\.1\(4\)CX|12\.0\(14\.6\)S|12\.1\(4\)DC2|12\.1\(5c\)|12\.1\(6\)DA|12\.1\(5c\)EX|11\.3\(11b\)|12\.1\(5\)YC1|12\.1\(2\)XF3|12\.0WC|12\.0\(13W5\(19b\)|12\.1\(6\)E|12\.1\(5\)XZ2|12\.0\(13\)WT6\(1\)|12\.1\(5\)DB|12\.0\(14\)W5\(20\)|12\.0\(15\)S1|12\.1\(3\)XL1|12\.1\(3\)XP3|12\.0\(10\)W\(18b\)|12\.1\(5\)EC1|12\.0\(7\)XK4|11\.2\(25a\)|11\.2\(25\)P|12\.1\(5\)DA1|12\.0\(11\)ST2|12\.1\(7\)AA|12\.1\(4\)DB1|11\.2\(25a\)P|12\.0\(14\)SL1|12\.1\(5\)T5|12\.1\(5\)XV1|12\.1\(4\)DB1|12\.1\(5\)XS|12\.1\(5\)YD|12\.0\(5\)XM1|12\.1\(5\)T5|12\.1\(2\)XH5|12\.1\(5\)XW2|12\.0\(15\)|12\.1\(5\)XR1|12\.1\(5\.6\)E|11\.1\(22a\)|12\.1\(5\)XX3|12\.1\(5\)YA1|12\.1\(5\)E8|11\.1\(28a\)IA1|12\.1\(3\)XT1|12\.1\(5\)DA1|12\.0\(15\)SC1|12\.1\(7\)|12\.1\(3\)XQ3|12\.1\(7\)|11\.1\(24a\)|12\.1\(5c\)E8</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3732" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2\(20\)S9|12\.2\(15\)JK5|12\.3\(4\)TPC11a|12\.4\(1b\)|12\.3\(16\)|12\.0\(28d\)|12\.2\(12m\)|12\.1\(22\)EA5a|12\.1\(22\)EA5a|12\.2\(18\)EW5|12\.3\(2\)XA5|12\.3\(4\)XE4|12\.2\(26b\)|12\.2\(30\)S1|12\.2\(25\)EX|12\.3\(7\)T12|12\.2\(4\)YA11|12\.1\(22\)EA4a|12\.0\(28\)W5-32a|12\.2\(10\)DA4|12\.2\(20\)EWA3|12\.0\(25\)W5-27d|12\.3\(11\)YK2|12\.2\(25\)FY|12\.2\(25\)FX|12\.2\(15\)CZ3|12\.2\(28c\)|12\.2\(29a\)|12\.3\(10e\)|12\.2\(15\)MC2e|12\.2\(14\)S15|12\.3\(14\)T4|12\.2\(31\)|12\.2\(25\)EWA3|12\.3\(7\)JA1|12\.3\(7\)XI7|12\.2\(8\)TPC10a|12\.1\(22\)EA4a|12\.3\(11\)YS1|12\.3\(12e\)|12\.2\(2\)XR|12\.3\(14\)YU1|12\.1\(26\)E3|12\.3\(8\)T11|12\.1\(23\)E4|12\.3\(4\)XK4|12\.0\(30\)S4|12\.3\(6f\)|12\.3\(4\)XG5|12\.1\(8b\)E20|12\.2\(18\)S10|12\.2\(20\)EU2|12\.2\(27b\)|12\.3\(9a\)BC7|12\.1\(26\)EB1|12\.2\(17d\)SXB10|12\.3\(7\)JX|12\.2\(27\)SV1|12\.2\(25\)SEB4|12\.3\(2\)XC4|12\.2\(15\)T17|12\.4\(2\)XA|12\.2\(4\)MB13c|12\.2\(13\)ZD4|12\.3\(2\)XA5|12\.2\(25\)SEC2|12\.3\(11\)YF4|12\.3\(15b\)|12\.3\(7\)XI7|12\.4\(4\)T|12\.2\(27\)SBC|12\.2\(25\)S6|12\.4\(5\)|12\.3\(2\)JK1|12\.2\(25\)SG|12\.3\(14\)YQ3|12\.3\(7\)XR6|12\.2\(23f\)|12\.1\(19\)EW3|12\.2\(17f\)|12\.2\(25\)SEB4|12\.1\(22\)EA6|12\.2\(25\)EY3|12\.3\(4\)JA1|12\.2\(25\)SED|12\.0\(31\)S1|12\.3\(8\)YI3|12\.2\(15\)YS|12\.3\(13b\)|12\.2\(22\)EA6|12\.3\(13a\)BC1|12\.4\(2\)T1|12\.2\(26\)SV1|12\.1\(20\)EW4|12\.3\(8\)YG3|12\.2\(18\)SXD6|12\.4\(2\)MR1|12\.2\(12\)DA9|12\.0\(5\)WC13|12\.3\(3i\)|12\.2\(18\)SO4|12\.1\(27b\)|12\.2\(13\)ZH8|12\.2\(4\)XR|12\.4\(3a\)|12\.3\(14\)YT1|12\.3\(11\)T8|12\.1\(20\)EO3|12\.1\(12c\)EW4|12\.2\(15\)XR|12\.3\(5f\)|12\.4\(2\)XB|12\.2\(18\)SXE3|12\.3\(9e\)|12\.2\(25\)SW4|12\.0\(28\)W5-30b|12\.2\(15\)BC2i|12\.2\(18\)SXF|12\.0\(28\)S5|12\.3\(2\)JA5|12\.1\(13\)E17|12\.1\(13\)EW4|12\.2\(20\)EW3</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3339" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?\d*|12\.0(\(\d+\))?DA\d*|12\.0(\(\d+\))?DB\d*|12\.0(\(\d+\))?DC\d*|12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?SC\d*|12\.0(\(\d+\))?SL\d*|12\.0(\(\d+\))?SP\d*|12\.0(\(\d+\))?ST\d*|12\.0(\(\d+\))?SX\d*|12\.0(\(\d+\))?SZ\d*|12\.0(\(\d+\))?T\d*|12\.0(\(\d+\))?W5\d*|12\.0(\(\d+\))?WC\d*|12\.0(\(\d+\))?XA\d*|12\.0(\(\d+\))?XB\d*|12\.0(\(\d+\))?XC\d*|12\.0(\(\d+\))?XD\d*|12\.0(\(\d+\))?XE\d*|12\.0(\(\d+\))?XF\d*|12\.0(\(\d+\))?XG\d*|12\.0(\(\d+\))?XH\d*|12\.0(\(\d+\))?XI\d*|12\.0(\(\d+\))?XJ\d*|12\.0(\(\d+\))?XK\d*|12\.0(\(\d+\))?XL\d*|12\.0(\(\d+\))?XM\d*|12\.0(\(\d+\))?XN\d*|12\.0(\(\d+\))?XQ\d*|12\.0(\(\d+\))?XR\d*|12\.0(\(\d+\))?XS\d*|12\.0(\(\d+\))?XV\d*|12\.1(\(\d+\))?\d*|12\.1(\(\d+\))?AA\d*|12\.1(\(\d+\))?AX\d*|12\.1(\(\d+\))?AY\d*|12\.1(\(\d+\))?AZ\d*|12\.1(\(\d+\))?CX\d*|12\.1(\(\d+\))?DA\d*|12\.1(\(\d+\))?DB\d*|12\.1(\(\d+\))?DC\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EA\d*|12\.1(\(\d+\))?EB\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?EO\d*|12\.1(\(\d+\))?EU\d*|12\.1(\(\d+\))?EV\d*|12\.1(\(\d+\))?EW\d*|12\.1(\(\d+\))?EX\d*|12\.1(\(\d+\))?EY\d*|12\.1(\(\d+\))?EZ\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XA\d*|12\.1(\(\d+\))?XB\d*|12\.1(\(\d+\))?XC\d*|12\.1(\(\d+\))?XD\d*|12\.1(\(\d+\))?XE\d*|12\.1(\(\d+\))?XF\d*|12\.1(\(\d+\))?XG\d*|12\.1(\(\d+\))?XH\d*|12\.1(\(\d+\))?XI\d*|12\.1(\(\d+\))?XJ\d*|12\.1(\(\d+\))?XL\d*|12\.1(\(\d+\))?XM\d*|12\.1(\(\d+\))?XP\d*|12\.1(\(\d+\))?XQ\d*|12\.1(\(\d+\))?XR\d*|12\.1(\(\d+\))?XS\d*|12\.1(\(\d+\))?XT\d*|12\.1(\(\d+\))?XU\d*|12\.1(\(\d+\))?XV\d*|12\.1(\(\d+\))?XW\d*|12\.1(\(\d+\))?XX\d*|12\.1(\(\d+\))?XY\d*|12\.1(\(\d+\))?YA\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YC\d*|12\.1(\(\d+\))?YD\d*|12\.1(\(\d+\))?YE\d*|12\.1(\(\d+\))?YF\d*|12\.1(\(\d+\))?YH\d*|12\.1(\(\d+\))?YI\d*|12\.1(\(\d+\))?YJ\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BC\d*|12\.2(\(\d+\))?BX\d*|12\.2(\(\d+\))?BY\d*|12\.2(\(\d+\))?BZ\d*|12\.2(\(\d+\))?CX\d*|12\.2(\(\d+\))?CY\d*|12\.2(\(\d+\))?CZ\d*|12\.2(\(\d+\))?DA\d*|12\.2(\(\d+\))?DD\d*|12\.2(\(\d+\))?DX\d*|12\.2(\(\d+\))?EU\d*|12\.2(\(\d+\))?EW\d*|12\.2(\(\d+\))?EWA\d*|12\.2(\(\d+\))?EX\d*|12\.2(\(\d+\))?EY\d*|12\.2(\(\d+\))?EZ\d*|12\.2(\(\d+\))?FX\d*|12\.2(\(\d+\))?FY\d*|12\.2(\(\d+\))?JA\d*|12\.2(\(\d+\))?JK\d*|12\.2(\(\d+\))?MB\d*|12\.2(\(\d+\))?MC\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?SBC\d*|12\.2(\(\d+\))?SE\d*|12\.2(\(\d+\))?SG\d*|12\.2(\(\d+\))?SO\d*|12\.2(\(\d+\))?SU\d*|12\.2(\(\d+\))?SV\d*|12\.2(\(\d+\))?SW\d*|12\.2(\(\d+\))?SX\d*|12\.2(\(\d+\))?SXA\d*|12\.2(\(\d+\))?SXB\d*|12\.2(\(\d+\))?SXD\d*|12\.2(\(\d+\))?SXE\d*|12\.2(\(\d+\))?SXF\d*|12\.2(\(\d+\))?SY\d*|12\.2(\(\d+\))?SZ\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?TPC\d*|12\.2(\(\d+\))?XA\d*|12\.2(\(\d+\))?XB\d*|12\.2(\(\d+\))?XC\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XE\d*|12\.2(\(\d+\))?XF\d*|12\.2(\(\d+\))?XG\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XI\d*|12\.2(\(\d+\))?XJ\d*|12\.2(\(\d+\))?XK\d*|12\.2(\(\d+\))?XL\d*|12\.2(\(\d+\))?XM\d*|12\.2(\(\d+\))?XN\d*|12\.2(\(\d+\))?XQ\d*|12\.2(\(\d+\))?XR\d*|12\.2(\(\d+\))?XS\d*|12\.2(\(\d+\))?XT\d*|12\.2(\(\d+\))?XU\d*|12\.2(\(\d+\))?XV\d*|12\.2(\(\d+\))?XW\d*|12\.2(\(\d+\))?YA\d*|12\.2(\(\d+\))?YB\d*|12\.2(\(\d+\))?YC\d*|12\.2(\(\d+\))?YD\d*|12\.2(\(\d+\))?YE\d*|12\.2(\(\d+\))?YF\d*|12\.2(\(\d+\))?YG\d*|12\.2(\(\d+\))?YH\d*|12\.2(\(\d+\))?YJ\d*|12\.2(\(\d+\))?YK\d*|12\.2(\(\d+\))?YL\d*|12\.2(\(\d+\))?YM\d*|12\.2(\(\d+\))?YN\d*|12\.2(\(\d+\))?YO\d*|12\.2(\(\d+\))?YP\d*|12\.2(\(\d+\))?YQ\d*|12\.2(\(\d+\))?YR\d*|12\.2(\(\d+\))?YS\d*|12\.2(\(\d+\))?YT\d*|12\.2(\(\d+\))?YU\d*|12\.2(\(\d+\))?YV\d*|12\.2(\(\d+\))?YW\d*|12\.2(\(\d+\))?YX\d*|12\.2(\(\d+\))?YY\d*|12\.2(\(\d+\))?YZ\d*|12\.2(\(\d+\))?ZA\d*|12\.2(\(\d+\))?ZB\d*|12\.2(\(\d+\))?ZC\d*|12\.2(\(\d+\))?ZD\d*|12\.2(\(\d+\))?ZE\d*|12\.2(\(\d+\))?ZF\d*|12\.2(\(\d+\))?ZG\d*|12\.2(\(\d+\))?ZH\d*|12\.2(\(\d+\))?ZJ\d*|12\.2(\(\d+\))?ZL\d*|12\.2(\(\d+\))?ZN\d*|12\.2(\(\d+\))?ZP\d*|12\.3(\(\d+\))?\d*|12\.3(\(\d+\))?B\d*|12\.3(\(\d+\))?BC\d*|12\.3(\(\d+\))?BW\d*|12\.3(\(\d+\))?JA\d*|12\.3(\(\d+\))?JK\d*|12\.3(\(\d+\))?JX\d*|12\.3(\(\d+\))?T\d*|12\.3(\(\d+\))?TPC\d*|12\.3(\(\d+\))?XA\d*|12\.3(\(\d+\))?XB\d*|12\.3(\(\d+\))?XC\d*|12\.3(\(\d+\))?XD\d*|12\.3(\(\d+\))?XE\d*|12\.3(\(\d+\))?XF\d*|12\.3(\(\d+\))?XG\d*|12\.3(\(\d+\))?XH\d*|12\.3(\(\d+\))?XI\d*|12\.3(\(\d+\))?XJ\d*|12\.3(\(\d+\))?XK\d*|12\.3(\(\d+\))?XM\d*|12\.3(\(\d+\))?XQ\d*|12\.3(\(\d+\))?XR\d*|12\.3(\(\d+\))?XS\d*|12\.3(\(\d+\))?XU\d*|12\.3(\(\d+\))?XW\d*|12\.3(\(\d+\))?XX\d*|12\.3(\(\d+\))?XY\d*|12\.3(\(\d+\))?YA\d*|12\.3(\(\d+\))?YD\d*|12\.3(\(\d+\))?YF\d*|12\.3(\(\d+\))?YG\d*|12\.3(\(\d+\))?YH\d*|12\.3(\(\d+\))?YI\d*|12\.3(\(\d+\))?YJ\d*|12\.3(\(\d+\))?YK\d*|12\.3(\(\d+\))?YQ\d*|12\.3(\(\d+\))?YS\d*|12\.3(\(\d+\))?YT\d*|12\.3(\(\d+\))?YU\d*|12\.4(\(\d+\))?\d*|12\.4(\(\d+\))?MR\d*|12\.4(\(\d+\))?T\d*|12\.4(\(\d+\))?XA\d*|12\.4(\(\d+\))?XB\d*</major_release>
    </version_state>
    <line_state id="oval:org.mitre.oval:ste:4044" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">aaa authorization commands .*tacacs\+</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:4000" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.4\(2\)T4|12\.2\(30\)S|12\.2\(17d\)SXB9|12\.2\(14\)S16|12\.3\(14\)T7|12\.3\(16\)|12\.2\(18\)SXF4|12\.2\(18\)SXD6|12\.3\(14\)YM6|12\.4\(7\)|12\.3\(7\)XI7|12\.2\(25\)S6|12\.1\(26\)E5|12\.3BC|12\.4\(3d\)|12\.2\(32\)|12\.2\(18\)S11|12\.4\(4\)T2|12\.2\(18\)SXE3|12\.2\(25\)SW5|12\.3\(11\)T10|12\.4\(6\)T</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3580" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.0(\(\d+\))?T\d*|12\.0(\(\d+\))?XH\d*|12\.0(\(\d+\))?XK\d*|12\.0(\(\d+\))?XL\d*|12\.0(\(\d+\))?XN\d*|12\.0(\(\d+\))?XR\d*|12\.1(\(\d+\))?\d*|12\.1(\(\d+\))?AA\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?EZ\d*|12\.1(\(\d+\))?GA\d*|12\.1(\(\d+\))?GB\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?XA\d*|12\.1(\(\d+\))?XE\d*|12\.1(\(\d+\))?XH\d*|12\.1(\(\d+\))?XI\d*|12\.1(\(\d+\))?XJ\d*|12\.1(\(\d+\))?XL\d*|12\.1(\(\d+\))?XM\d*|12\.1(\(\d+\))?XP\d*|12\.1(\(\d+\))?XQ\d*|12\.1(\(\d+\))?XS\d*|12\.1(\(\d+\))?XT\d*|12\.1(\(\d+\))?XU\d*|12\.1(\(\d+\))?XV\d*|12\.1(\(\d+\))?XW\d*|12\.1(\(\d+\))?XY\d*|12\.1(\(\d+\))?XZ\d*|12\.1(\(\d+\))?YA\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YD\d*|12\.1(\(\d+\))?YE\d*|12\.1(\(\d+\))?YF\d*|12\.1(\(\d+\))?YH\d*|12\.1(\(\d+\))?YI\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BW\d*|12\.2(\(\d+\))?BY\d*|12\.2(\(\d+\))?DD\d*|12\.2(\(\d+\))?DX\d*|12\.2(\(\d+\))?MX\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?SU\d*|12\.2(\(\d+\))?SW\d*|12\.2(\(\d+\))?SXB\d*|12\.2(\(\d+\))?SXD\d*|12\.2(\(\d+\))?SXE\d*|12\.2(\(\d+\))?SXF\d*|12\.2(\(\d+\))?SZ\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?XA\d*|12\.2(\(\d+\))?XB\d*|12\.2(\(\d+\))?XC\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XG\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XJ\d*|12\.2(\(\d+\))?XK\d*|12\.2(\(\d+\))?XL\d*|12\.2(\(\d+\))?XM\d*|12\.2(\(\d+\))?XN\d*|12\.2(\(\d+\))?XQ\d*|12\.2(\(\d+\))?XS\d*|12\.2(\(\d+\))?XT\d*|12\.2(\(\d+\))?XU\d*|12\.2(\(\d+\))?XV\d*|12\.2(\(\d+\))?XW\d*|12\.2(\(\d+\))?YB\d*|12\.2(\(\d+\))?YC\d*|12\.2(\(\d+\))?YD\d*|12\.2(\(\d+\))?YE\d*|12\.2(\(\d+\))?YH\d*|12\.2(\(\d+\))?YK\d*|12\.2(\(\d+\))?YL\d*|12\.2(\(\d+\))?YM\d*|12\.2(\(\d+\))?YN\d*|12\.2(\(\d+\))?YT\d*|12\.2(\(\d+\))?YU\d*|12\.2(\(\d+\))?YW\d*|12\.2(\(\d+\))?YX\d*|12\.2(\(\d+\))?YY\d*|12\.2(\(\d+\))?YZ\d*|12\.2(\(\d+\))?ZB\d*|12\.2(\(\d+\))?ZC\d*|12\.2(\(\d+\))?ZD\d*|12\.2(\(\d+\))?ZE\d*|12\.2(\(\d+\))?ZF\d*|12\.2(\(\d+\))?ZH\d*|12\.2(\(\d+\))?ZJ\d*|12\.2(\(\d+\))?ZL\d*|12\.2(\(\d+\))?ZN\d*|12\.2(\(\d+\))?ZP\d*|12\.3(\(\d+\))?\d*|12\.3(\(\d+\))?B\d*|12\.3(\(\d+\))?T\d*|12\.3(\(\d+\))?XA\d*|12\.3(\(\d+\))?XB\d*|12\.3(\(\d+\))?XD\d*|12\.3(\(\d+\))?XE\d*|12\.3(\(\d+\))?XF\d*|12\.3(\(\d+\))?XG\d*|12\.3(\(\d+\))?XH\d*|12\.3(\(\d+\))?XI\d*|12\.3(\(\d+\))?XJ\d*|12\.3(\(\d+\))?XK\d*|12\.3(\(\d+\))?XM\d*|12\.3(\(\d+\))?XQ\d*|12\.3(\(\d+\))?XR\d*|12\.3(\(\d+\))?XW\d*|12\.3(\(\d+\))?XY\d*|12\.3(\(\d+\))?YA\d*|12\.3(\(\d+\))?YF\d*|12\.3(\(\d+\))?YG\d*|12\.3(\(\d+\))?YH\d*|12\.3(\(\d+\))?YI\d*|12\.3(\(\d+\))?YJ\d*|12\.3(\(\d+\))?YK\d*|12\.3(\(\d+\))?YM\d*|12\.3(\(\d+\))?YQ\d*|12\.3(\(\d+\))?YS\d*|12\.3(\(\d+\))?YT\d*|12\.3(\(\d+\))?YU\d*|12\.3(\(\d+\))?YX\d*|12\.4(\(\d+\))?\d*|12\.4(\(\d+\))?MR\d*|12\.4(\(\d+\))?T\d*|12\.4(\(\d+\))?XA\d*|12\.4(\(\d+\))?XB\d*</major_release>
    </version_state>
    <file_state id="oval:org.mitre.oval:ste:2422" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3526.800</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2823" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3513.900</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2423" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^2\.70.*$</value>
    </registry_state>
    <version_state id="oval:org.mitre.oval:ste:3060" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2\(8\)T10|12\.2\(8\)T10|12\.0\(23\)S3|12\.2\(13\)ZH3|12\.1\(14\)E10|12\.2\(S\)|12\.2\(18\)S3|12\.2\(17a\)SXA|12\.2\(11\)T9|12\.3\(4\)T|12\.2\(4\)YA7|12\.0\(28\)|12\.2\(18\)S|12\.1\(20\)E2|12\.0\(27\)|12\.3\(3e\)|12\.2\(4\)YA8|12\.2\(16f\)|12\.2\(17\)|12\.2\(10g\)|12\.2\(11\)T9|12\.2\(19b\)|12\.3\(2\)T3|12\.2\(4\)T6|12\.1\(19\)E6|12\.2\(13\)T5|12\.1\(11b\)E14|12\.2\(8\)YW3|12\.1\(13\)E13|12\.2\(13\)T3|12\.2\(19\)b|12\.2\(15\)ZJ3|12\.0\(25\)S1|12\.2\(14\)SU|12\.2\(11\)T8|12\.1\(5\)T17|12\.2\(2\)XB14|12\.2\(2\)XB15|12\.2\(14\)S3|12\.2\(21a\)|12\.2\(13c\)|12\.2\(4\)T6|12\.1\(19\)E6|12\.2\(14\)SY3|12\.2\(13e\)|12\.1\(14\)E9|12\.2\(15\)T5|12\.2\(15\)ZJ2|12\.2\(17d\)|12\.2\(14\)S7|12\.2\(15\)T2|12\.2\(4\)T8|12\.2\(15\)ZL1|12\.1\(22\)|12\.2\(13\)ZC|12\.0\(26\)S|12\.3\(4\)T1|16-Jan-2004|12\.2\(15\)SL1|12\.1\(8b\)E16|12\.1\(13\)E12|12\.1\(8b\)E18|12\.2\(16a\)|12\.0\(24\)S2</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3963" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">11\.3\(3\)T\d*|12\.0(\(\d+\))?\d*|12\.0(\(\d+\))?S\d*|12\.0(\(\d+\))?ST\d*|12\.0(\(\d+\))?T\d*|12\.0(\(\d+\))?XC\d*|12\.0(\(\d+\))?XD\d*|12\.0(\(\d+\))?XG\d*|12\.0(\(\d+\))?XH\d*|12\.0(\(\d+\))?XI\d*|12\.0(\(\d+\))?XJ\d*|12\.0(\(\d+\))?XK\d*|12\.0(\(\d+\))?XL\d*|12\.0(\(\d+\))?XN\d*|12\.0(\(\d+\))?XQ\d*|12\.0(\(\d+\))?XR\d*|12\.1(\(\d+\))?\d*|12\.1(\(\d+\))?AA\d*|12\.1(\(\d+\))?E\d*|12\.1(\(\d+\))?EC\d*|12\.1(\(\d+\))?EZ\d*|12\.1(\(\d+\))?T\d*|12\.1(\(\d+\))?X\d*|12\.1(\(\d+\))?XA\d*|12\.1(\(\d+\))?XB\d*|12\.1(\(\d+\))?XC\d*|12\.1(\(\d+\))?XD\d*|12\.1(\(\d+\))?XG\d*|12\.1(\(\d+\))?XH\d*|12\.1(\(\d+\))?XI\d*|12\.1(\(\d+\))?XJ\d*|12\.1(\(\d+\))?XL\d*|12\.1(\(\d+\))?XM\d*|12\.1(\(\d+\))?XP\d*|12\.1(\(\d+\))?XQ\d*|12\.1(\(\d+\))?XR\d*|12\.1(\(\d+\))?XT\d*|12\.1(\(\d+\))?XU\d*|12\.1(\(\d+\))?XV\d*|12\.1(\(\d+\))?XW\d*|12\.1(\(\d+\))?YB\d*|12\.1(\(\d+\))?YC\d*|12\.1(\(\d+\))?YD\d*|12\.1(\(\d+\))?YE\d*|12\.1(\(\d+\))?YF\d*|12\.1(\(\d+\))?YH\d*|12\.1(\(\d+\))?YI\d*|12\.2(\(\d+\))?\d*|12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BW\d*|12\.2(\(\d+\))?DD\d*|12\.2(\(\d+\))?DX\d*|12\.2(\(\d+\))?MC\d*|12\.2(\(\d+\))?MX\d*|12\.2(\(\d+\))?S\d*|12\.2(\(\d+\))?SX\d*|12\.2(\(\d+\))?SY\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?XA\d*|12\.2(\(\d+\))?XB\d*|12\.2(\(\d+\))?XC\d*|12\.2(\(\d+\))?XD\d*|12\.2(\(\d+\))?XG\d*|12\.2(\(\d+\))?XH\d*|12\.2(\(\d+\))?XI\d*|12\.2(\(\d+\))?XJ\d*|12\.2(\(\d+\))?XK\d*|12\.2(\(\d+\))?XL\d*|12\.2(\(\d+\))?XM\d*|12\.2(\(\d+\))?XN\d*|12\.2(\(\d+\))?XQ\d*|12\.2(\(\d+\))?XS\d*|12\.2(\(\d+\))?XT\d*|12\.2(\(\d+\))?XU\d*|12\.2(\(\d+\))?XW\d*|12\.2(\(\d+\))?YA\d*|12\.2(\(\d+\))?YB\d*|12\.2(\(\d+\))?YC\d*|12\.2(\(\d+\))?YD\d*|12\.2(\(\d+\))?YE\d*|12\.2(\(\d+\))?YF\d*|12\.2(\(\d+\))?YH\d*|12\.2(\(\d+\))?YJ\d*|12\.2(\(\d+\))?YK\d*|12\.2(\(\d+\))?YL\d*|12\.2(\(\d+\))?YM\d*|12\.2(\(\d+\))?YN\d*|12\.2(\(\d+\))?YT\d*|12\.2(\(\d+\))?YU\d*|12\.2(\(\d+\))?YV\d*|12\.2(\(\d+\))?YW\d*|12\.2(\(\d+\))?YX\d*|12\.2(\(\d+\))?YY\d*|12\.2(\(\d+\))?YZ\d*|12\.2(\(\d+\))?ZB\d*|12\.2(\(\d+\))?ZC\d*|12\.2(\(\d+\))?ZD\d*|12\.2(\(\d+\))?ZE\d*|12\.2(\(\d+\))?ZF\d*|12\.2(\(\d+\))?ZG\d*|12\.2(\(\d+\))?ZH\d*|12\.2(\(\d+\))?ZJ\d*|12\.2(\(\d+\))?ZL\d*|12\.3(\(\d+\))?T\d*</major_release>
    </version_state>
    <file_state id="oval:org.mitre.oval:ste:292" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2.0.390.16</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:291" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2425" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.2.2-17.2</evr>
    </rpminfo_state>
    <line_state id="oval:org.mitre.oval:ste:3189" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">^\s*call-manager-fallback</config_line>
    </line_state>
    <line_state id="oval:org.mitre.oval:ste:3343" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <show_subcommand>show running-config</show_subcommand>
      <config_line operation="pattern match">^\s*telephony-service</config_line>
    </line_state>
    <version_state id="oval:org.mitre.oval:ste:3636" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.2\(15\)JK2|12\.3\(6c\)|12\.3\(4\)XD3|12\.3\(2\)XE1|12\.3\(9\)BC|12\.3\(11\)T|12\.2\(4\)YA8|12\.3\(4\)XK1|12\.3\(2\)T7|12\.3\(4\)XQ1|12\.2\(13\)T14|12\.3\(4\)XN2|12\.3\(7\)XI|12\.3\(7\)XL|12\.3\(4\)XG2|12\.3\(7\)T1|12\.3\(5d\)|12\.3\(9\)|12\.3\(7\)XJ2|12\.3\(4\)T6|12\.3\(8\)T|12\.2\(15\)CZ1|12\.2\(15\)T13</major_release>
    </version_state>
    <version_state id="oval:org.mitre.oval:ste:3508" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#ios">
      <major_release operation="pattern match">12\.1(\(\d+\))?YD\d*|12\.1(\(\d+\))?YE\d*|12\.1(\(\d+\))?YI\d*|12\.2(\(\d+\))?B\d*|12\.2(\(\d+\))?BC\d*|12\.2(\(\d+\))?CZ\d*|12\.2(\(\d+\))?JK\d*|12\.2(\(\d+\))?T\d*|12\.2(\(\d+\))?XB\d*|12\.2(\(\d+\))?XG\d*|12\.2(\(\d+\))?XM\d*|12\.2(\(\d+\))?XT\d*|12\.2(\(\d+\))?XU\d*|12\.2(\(\d+\))?XW\d*|12\.2(\(\d+\))?XZ\d*|12\.2(\(\d+\))?YA\d*|12\.2(\(\d+\))?YB\d*|12\.2(\(\d+\))?YC\d*|12\.2(\(\d+\))?YD\d*|12\.2(\(\d+\))?YF\d*|12\.2(\(\d+\))?YG\d*|12\.2(\(\d+\))?YH\d*|12\.2(\(\d+\))?YJ\d*|12\.2(\(\d+\))?YL\d*|12\.2(\(\d+\))?YM\d*|12\.2(\(\d+\))?YN\d*|12\.2(\(\d+\))?YQ\d*|12\.2(\(\d+\))?YR\d*|12\.2(\(\d+\))?YS\d*|12\.2(\(\d+\))?ZJ\d*|12\.2(\(\d+\))?ZK\d*|12\.2(\(\d+\))?ZO\d*|12\.2(\(\d+\))?ZP\d*|12\.3(\(\d+\))?\d*|12\.3(\(\d+\))?T\d*|12\.3(\(\d+\))?XA\d*|12\.3(\(\d+\))?XB\d*|12\.3(\(\d+\))?XC\d*|12\.3(\(\d+\))?XD\d*|12\.3(\(\d+\))?XE\d*|12\.3(\(\d+\))?XF\d*|12\.3(\(\d+\))?XG\d*|12\.3(\(\d+\))?XH\d*|12\.3(\(\d+\))?XI\d*|12\.3(\(\d+\))?XJ\d*|12\.3(\(\d+\))?XK\d*|12\.3(\(\d+\))?XL\d*|12\.3(\(\d+\))?XN\d*|12\.3(\(\d+\))?XQ\d*</major_release>
    </version_state>
    <patch_state id="oval:org.mitre.oval:ste:3822" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">32</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3795" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">22</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3347" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">11</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3481" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">31</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3408" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">34</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2427" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.309.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2426" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.760.0</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:294" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">38</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:293" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">17</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2428" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6624</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:3571" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2825" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <suid operation="equals" datatype="boolean">true</suid>
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2432" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">3.0.1200.291</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2431" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2430" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2429" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int" operation="not equal">4</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2434" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.5.6980.57</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2433" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">0</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:297" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.3790.212</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:298" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.0.1381.33566</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:300" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.7000</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:3872" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.7057</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:2937" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">30</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2936" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">6</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:303" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">06</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:302" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:301" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3762" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3428" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">26</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3017" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">27</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:305" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3900.7032</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2435" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3510.1100</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2436" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:2.81-88.3</evr>
    </rpminfo_state>
    <patch_state id="oval:org.mitre.oval:ste:2826" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">1</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2437" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.6-9.9</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2564" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2441" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.7044</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:3582" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">07</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3290" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">18</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3665" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">19</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2997" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">27</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3089" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">28</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3192" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">08</version>
    </patch_state>
    <registry_state id="oval:org.mitre.oval:ste:2492" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2442" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.309</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2447" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7a-5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2446" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7a-5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2445" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7a-5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2444" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.6-17</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2443" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.6b-6</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:307" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.173</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:306" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.184</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:310" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">25</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:309" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">19</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:308" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">05</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2450" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6713</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2449" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">1.0.0.3</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2448" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2454" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.5p1-11</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2456" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.5p1-6.9</evr>
    </rpminfo_state>
    <inetlisteningservers_state id="oval:org.mitre.oval:ste:2455" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <program_name operation="pattern match">^.*sshd.*</program_name>
    </inetlisteningservers_state>
    <patch_state id="oval:org.mitre.oval:ste:316" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:315" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">07</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:314" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:313" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2458" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.1-3.9</evr>
    </rpminfo_state>
    <inetlisteningservers_state id="oval:org.mitre.oval:ste:2457" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <program_name operation="pattern match">^.*rpc\.mountd.*</program_name>
    </inetlisteningservers_state>
    <registry_state id="oval:org.mitre.oval:ste:317" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <patch_state id="oval:org.mitre.oval:ste:320" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">12</version>
    </patch_state>
    <swlist_state id="oval:org.mitre.oval:ste:3077" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <version operation="pattern match">B\.11\.00\.(00.*|01\.00[0-4])</version>
    </swlist_state>
    <patch_state id="oval:org.mitre.oval:ste:321" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">05</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2461" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.23.56-1.9</evr>
    </rpminfo_state>
    <inetlisteningservers_state id="oval:org.mitre.oval:ste:2460" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <program_name operation="pattern match">^.*mysqld.*</program_name>
    </inetlisteningservers_state>
    <file_state id="oval:org.mitre.oval:ste:322" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3900.6970</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2465" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">5:1.4.1-1</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2464" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2463" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2462" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec datatype="boolean">true</oexec>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:2761" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:323" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6946</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2466" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.49.4-9.9.1</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:327" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">3.0.1200.408</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:326" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>KB888258</value>
    </registry_state>
    <patch_state id="oval:org.mitre.oval:ste:3072" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3955" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">13</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:328" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.205</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2470" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.33668.1</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2469" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="binary">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2468" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="not equal" datatype="int">4</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2473" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.8.19-3.1</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2472" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <inetlisteningservers_state id="oval:org.mitre.oval:ste:2471" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <program_name operation="pattern match">^.*lpd.*</program_name>
    </inetlisteningservers_state>
    <file_state id="oval:org.mitre.oval:ste:329" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2800.1411</version>
    </file_state>
    <inetd_state id="oval:org.mitre.oval:ste:2935" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <server_program operation="equals" datatype="string">/usr/dt/bin/rpc.cmsd</server_program>
    </inetd_state>
    <file_state id="oval:org.mitre.oval:ste:2933" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2932" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2931" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:2834" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">22</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2833" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">6</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:332" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">06</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:331" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">09</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:330" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:98" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2.0.50727.101</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2481" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.1-12</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2480" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2479" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2478" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:2839" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">1</version>
    </patch_state>
    <inetd_state id="oval:org.mitre.oval:ste:2838" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <server_program operation="equals" datatype="string">/usr/lib/netsvc/rwall/rpc.rwalld</server_program>
    </inetd_state>
    <file_state id="oval:org.mitre.oval:ste:2837" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2836" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2835" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:335" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">13</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:334" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">07</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:333" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3495" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">11</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3445" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">12</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3388" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">07</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2968" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3671" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2962" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2963" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">31</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2482" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.3790.280</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2486" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">3.0.1200.257</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2485" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">3.0.1200.257</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2484" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">331066</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2483" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">2</value>
    </registry_state>
    <patch_state id="oval:org.mitre.oval:ste:341" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:340" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:339" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:338" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:337" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:336" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <registry_state id="oval:org.mitre.oval:ste:739" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:342" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.7023</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:343" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.5.6981.3</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:345" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">07</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:344" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">06</version>
    </patch_state>
    <registry_state id="oval:org.mitre.oval:ste:1446" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>10.0.6626.0</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:348" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.1.2600.1363</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:2974" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">12</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3522" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">11</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3074" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">08</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3846" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">13</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3272" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2988" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">10</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2965" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">06</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3688" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3041" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">20</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3585" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">06</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:350" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">16</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2487" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2734.1600</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:352" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.3790.198</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1108" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1107" version="2" comment="Value matches a string containing zipfldr.dll" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^.*zipfldr\.dll.*$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:353" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>10.0.4330.0</value>
    </registry_state>
    <patch_state id="oval:org.mitre.oval:ste:355" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:354" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <registry_state id="oval:org.mitre.oval:ste:358" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>11.0.5614.0</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2841" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.4980</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2840" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <patch_state id="oval:org.mitre.oval:ste:359" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:360" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.50.4945.2800</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:33" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2.0.50727.210</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2189" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2800.1498</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2188" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2800.1499</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2500" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3669.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2499" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3644.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2498" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3644.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2497" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3644.0</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2496" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2801" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6672</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2846" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.2.764.1</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2843" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:777" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.239</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2502" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">10.0.4205.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2501" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">10.0.4205.0</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:364" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:1.2.2-24</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:363" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:1.2.2-24</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:362" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.13-14</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:361" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.13-14</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2504" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.0.2.7523</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2503" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.0.2.7523</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:366" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">18</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:365" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:368" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">11</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:367" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">11</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:372" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">14</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:371" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">07</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:370" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">09</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3473" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <package_state id="oval:org.mitre.oval:ste:3088" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="pattern match">7\.0,.*</version>
      <description operation="pattern match">7\.0,.*</description>
    </package_state>
    <file_state id="oval:org.mitre.oval:ste:374" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3900.7036</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:373" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="not equal" datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:375" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.242</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2506" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5-4.RHEL3</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2505" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:377" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^2\.1.*$</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:376" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2.12.5118.0</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:379" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="equals" datatype="int">08</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:378" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">10</version>
    </patch_state>
    <registry_state id="oval:org.mitre.oval:ste:11982" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:384" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:383" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">1.1.4322.2037</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:382" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:381" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">1.1.4322.1085</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:380" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:386" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2600.151</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:387" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">05</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2508" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.3790.94</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2507" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <patch_state id="oval:org.mitre.oval:ste:393" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">13</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:394" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.1.0.9232</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:3006" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.2465</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2509" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.2-24.ent</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2510" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2800.1276</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2511" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.50.4934.1600</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:646" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="binary">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:396" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.71.2195.6920</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2512" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3810.1700</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:399" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:398" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:397" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <registry_state id="oval:org.mitre.oval:ste:2628" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2626" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="not equal" datatype="int">4</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2513" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6799</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:2849" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">1</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2848" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <suid datatype="boolean">true</suid>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2847" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:402" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3900.6922</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:403" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2742.200</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1215" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals">6,0,2600,0000</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2515" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3523.1700</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2517" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.3881</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2516" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:404" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.3264.0</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:2850" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">38</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3730" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3204" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3883" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:412" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.7017</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2627" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:414" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.225</version>
      <development_class operation="not equal">srv03_qfe</development_class>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:413" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.227</version>
      <development_class>srv03_qfe</development_class>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:3957" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3589" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">32</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2983" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">18</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2526" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.650.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:415" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6159</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:416" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.233</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:611" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:418" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6952</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:417" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6922</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:2858" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">2</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2856" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2529" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.0.2.7523</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2528" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2527" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <patch_state id="oval:org.mitre.oval:ste:423" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2530" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.20-19.9</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:427" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">10.0.6714.0</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:3879" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">50</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3128" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3554" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">13</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2861" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.4905</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2860" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2534" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.818.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2533" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.765.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2532" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.765.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2531" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.765.0</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:430" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">10</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:429" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">10</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:428" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">05</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:432" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:431" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3374" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3922" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:503" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.1.2600.109</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2811" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2535" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6753</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2250" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2900.2604</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2538" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^2\.6.*$</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2537" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2.62.9119.1</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2789" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">2</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2539" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.650.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2864" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.5671</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2863" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:38672" version="1" comment="State holds if the version is less than 15.0.4719.1002" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">15.0.4719.1002</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:38541" version="1" comment="State holds if the version is less than 14.0.7149.5000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.0.7149.5000</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:38210" version="1" comment="State holds if the version is less than 12.0.6721.5000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">12.0.6721.5000</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:93" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">8.0.50727.236</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2548" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals">8.0.0.4477</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2547" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.4.9.1121</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2541" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.4.9.1121</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2540" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:38813" version="1" comment="State holds the value Microsoft Exchange Server 2013 Cumulative Update 8" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft Exchange Server 2013 Cumulative Update 8</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:39001" version="1" comment="State holds if the version is less than 15.0.847.41" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">15.0.847.41</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:38872" version="1" comment="State holds if the version is less than 15.0.1076.011" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">15.0.1076.011</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:38396" version="1" comment="State holds if the version is less than 15.0.4711.1000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">15.0.4711.1000</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:37587" version="1" comment="State holds if the version is less than 14.03.0224.001" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.03.0224.001</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:37084" version="1" comment="State holds if the version is less than 8.03.0389.002" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">8.03.0389.002</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2542" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.20-18.9</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:37662" version="1" comment="State holds the value Microsoft Exchange Server 2013 Cumulative Update 6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft Exchange Server 2013 Cumulative Update 6</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:37067" version="1" comment="State holds if the version is less than 15.00.0847.035" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">15.00.0847.035</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:36871" version="1" comment="State holds if the version is less than 15.00.0995.034" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">15.00.0995.034</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:440" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-15.0.2.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:439" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-15.0.2.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:438" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-15.0.2.EL</evr>
    </rpminfo_state>
    <patch_state id="oval:org.mitre.oval:ste:441" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2866" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:11.6.0-11.90</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2865" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:11.6.0-11.90</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:38334" version="1" comment="State holds the value Microsoft Exchange Server 2013 Cumulative Update 7" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft Exchange Server 2013 Cumulative Update 7</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:38372" version="1" comment="State holds if the version is less than 15.0.847.38" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">15.0.847.38</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:38464" version="1" comment="State holds if the version is less than 15.0.1044.29" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">15.0.1044.29</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:37582" version="1" comment="State holds if the version is less than 15.0.4697.1000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">15.0.4697.1000</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:38477" version="1" comment="State holds if the version is less than 15.0.4631.1000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">15.0.4631.1000</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:38439" version="1" comment="State holds if the version is less than 14.0.7145.5000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.0.7145.5000</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:38421" version="1" comment="State holds if the version is less than 15.0.4699.1000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">15.0.4699.1000</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:38093" version="1" comment="State holds if the version is less than 15.0.4701.1000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">15.0.4701.1000</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:37438" version="1" comment="State holds if the version is less than 14.0.7137.5000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.0.7137.5000</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2551" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6110</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2550" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2549" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:665" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:442" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6966</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:444" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>10.2.5110</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:443" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:445" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.0.1381.33618</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:446" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2.53.6202.0</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2536" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2409" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^2\.5.*$</value>
    </registry_state>
    <patch_state id="oval:org.mitre.oval:ste:447" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2553" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.578.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2552" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.561.0</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2875" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version">5.00.2919.800</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2874" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version">5.00.2919.3800</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2873" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version">5.00.2919.6307</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2872" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version">5.00.2920.0000</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2871" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version">5.00.3103.1000</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2870" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version">5.00.3105.0106</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2869" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="version">5.00.3314.2101</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2867" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3504.2500</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1101" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.1558.6072</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:3066" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>5.1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:3812" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.1.2600.1711</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:3485" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>ia64</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:31615" version="1" comment="State holds if the version is less than 5.0.8308.420" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.8308.420</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:33946" version="1" comment="State matches if the version is less than 4.0.7577.276" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.0.7577.276</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:456" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:455" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:454" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:458" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.3790.181</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:457" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.3790.185</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:34174" version="1" comment="State matches if Lync Server 2010 is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Microsoft Lync Server 2010.*$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:20728" version="1" comment="State matches if Lync Server 2013 is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Microsoft Lync Server 2013.*$</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:33474" version="1" comment="State matches if the version is less than 4.0.7577.230" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.0.7577.230</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:33391" version="1" comment="State matches if the version is less than 5.0.8308.803" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.8308.803</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:33464" version="1" comment="State holds if the version is less than 15.0.4641.1000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">15.0.4641.1000</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2561" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.3.1-0.el3</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2560" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
      <gexec operation="equals" datatype="boolean">true</gexec>
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:459" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <registry_state id="oval:org.mitre.oval:ste:12091" version="2" comment="The registry key has a value that matches 9.*" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^9\.0\..*$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:33632" version="1" comment="State matches if version is equals to 10.0.8250.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version">10.0.8250.0</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2701" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2562" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6011</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2563" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.20-13.9</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2877" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.5974</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2876" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <patch_state id="oval:org.mitre.oval:ste:462" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:461" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:460" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:466" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:465" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:464" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:463" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2247" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.227</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2246" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:468" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.7021</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2321" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2319" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="not equal" datatype="int">4</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:12029" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">8.0.7600.16722</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:12180" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">8.0.7600.20861</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:6624" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">8.0.7600.20000</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2208" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.7035</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:469" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.3790.279</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:3777" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version datatype="int">12</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3539" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3535" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">13</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3220" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version datatype="int">03</version>
    </patch_state>
    <registry_state id="oval:org.mitre.oval:ste:776" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="binary">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:471" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.7005</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2256" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^.*ServerNT.*$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2253" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="not equal" datatype="int">4</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2574" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release operation="equals">6</release>
      <version operation="equals">2.4.20</version>
    </rpminfo_state>
    <uname_state id="oval:org.mitre.oval:ste:2573" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <os_release>2.4.20-6</os_release>
    </uname_state>
    <file_state id="oval:org.mitre.oval:ste:473" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3534.2800</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:472" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <patch_state id="oval:org.mitre.oval:ste:479" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">09</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:478" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">08</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:477" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:476" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:475" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:474" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">10</version>
    </patch_state>
    <registry_state id="oval:org.mitre.oval:ste:2575" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:31674" version="1" comment="State holds if the version is less than 2.1.40512.2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2.1.40512.2</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:480" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.163</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:485" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6928</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:484" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">1.0.0.5</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:483" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2577" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.7-14</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2576" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.7-14</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:31098" version="1" comment="State matches if the version is less than 14.0.7123.5000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.0.7123.5000</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:30563" version="1" comment="State matches if Sun VM VirtualBox version is less than or equals to 4.1.30" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than or equal">4.1.30</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:30854" version="1" comment="State matches if Oracle VM VirtualBox version is less than  or equal 4.3.8" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than or equal">4.3.8</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:30534" version="1" comment="State matches if Sun VM VirtualBox version is less than or equals to 4.2.22" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than or equal">4.2.22</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2580" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.3790.206</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2579" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2578" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="not equal" datatype="int">4</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:31306" version="1" comment="State matches if Web Apps Server 2013 SP1 is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Service Pack 1 for Microsoft Office Web Apps Server .*$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:31017" version="1" comment="State matches if sharepoint server 2013 SP1 is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Service Pack 1 for Microsoft SharePoint Server 2013 .*$</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:24235" version="1" comment="State matches if the version is less than 15.0.4514.1000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">15.0.4514.1000</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:31289" version="1" comment="State holds if the version is less than 15.0.4561.1000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">15.0.4561.1000</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:31109" version="1" comment="State matches if the version is less than 15.0.4609.1000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">15.0.4609.1000</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:31346" version="1" comment="State holds if the version is less than 15.0.4615.1000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">15.0.4615.1000</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:487" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.3790.219</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:486" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <patch_state id="oval:org.mitre.oval:ste:491" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">33</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:490" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">18</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:489" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">12</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:494" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">24</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:493" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:492" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:495" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.163</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:29920" version="1" comment="State matches if Sun VM VirtualBox version is less than or equals to 4.2.20" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than or equal">4.2.20</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:30241" version="1" comment="State matches if Oracle VM VirtualBox version is less than  or equal 4.3.6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than or equal">4.3.6</version>
    </file_state>
    <metabase_state id="oval:org.mitre.oval:ste:2879" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <data operation="not equal">4</data>
    </metabase_state>
    <file_state id="oval:org.mitre.oval:ste:498" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.3790.168</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1187" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.1.2600.1515</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:499" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>1.1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2585" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">1.0.1.2125</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2584" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2601" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.818.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2600" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.818.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2599" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.811.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2598" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.765.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2597" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.818.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2596" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.818.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2595" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.818.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2594" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.818.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2593" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.816.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2592" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.800.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2591" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.778.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2590" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.765.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2589" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.798.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2588" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.765.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2587" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.765.0</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:502" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>10.0.8326.0</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:501" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">10.0.6735.0</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:500" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version">10.0.8326.0</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2780" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">2000.80.384.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2605" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.223.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2604" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.223.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2603" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.223.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2602" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.223.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:505" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.3790.211</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:504" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2859" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="not equal" datatype="int">4</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2581" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">65</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2606" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.7-14</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2880" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.50.4725.2100</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2960" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version operation="less than" datatype="version">12.0.6028.5000</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:3953" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version operation="less than" datatype="version">12.0.6031.5000</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:514" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3826.2400</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:513" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2607" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.50.4922.900</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:527" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:526" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:525" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:524" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">14</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:523" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">09</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:522" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:521" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:520" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:519" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:518" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:517" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:516" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:515" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:27720" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version operation="pattern match">1.0.1[a-e].*</version>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:27934" version="1" comment="State matches if Sun VM VirtualBox version is less than or equals to 4.2.20" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than or equal">4.2.20</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:27995" version="1" comment="State matches if Oracle VM VirtualBox version is less than  or equal 4.3.4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than or equal">4.3.4</version>
    </file_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3329" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">05</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:531" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">08</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:530" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">08</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:529" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:534" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2745.2800</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:533" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:532" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int" operation="not equal">1</value>
    </registry_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3690" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">48</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3048" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3912" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">10</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3341" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">65</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:199" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.10.2930.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:60" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.20.9839.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:28" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">8.70.1113.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:150" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.3888.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:549" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3677.144</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:548" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^4\.08\.02.*$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:547" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:546" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.3.0.903</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:545" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^4\.09.*$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:544" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:543" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.1.2600.148</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:542" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^4\.08\.01.*$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:541" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:540" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.1.2600.1517</version>
    </file_state>
    <uname_state id="oval:org.mitre.oval:ste:3839" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <os_release>5.10</os_release>
    </uname_state>
    <isainfo_state id="oval:org.mitre.oval:ste:3528" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <bits datatype="int">64</bits>
    </isainfo_state>
    <uname_state id="oval:org.mitre.oval:ste:3040" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <processor_type operation="pattern match">^i.*86</processor_type>
    </uname_state>
    <patch_state id="oval:org.mitre.oval:ste:3384" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">14</version>
    </patch_state>
    <registry_state id="oval:org.mitre.oval:ste:2202" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">0</value>
    </registry_state>
    <patch_state id="oval:org.mitre.oval:ste:551" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3219" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">07</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3076" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">49</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3701" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">24</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3726" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">08</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3301" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">11</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3900" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">06</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3745" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2612" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.80</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2611" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3140" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">18</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:556" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <inetd_state id="oval:org.mitre.oval:ste:555" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <server_program operation="pattern match" datatype="string">^.*smbd.*</server_program>
    </inetd_state>
    <file_state id="oval:org.mitre.oval:ste:2613" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3819.300</version>
    </file_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:2969" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">13</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3033" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">14</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3321" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">20</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:28017" version="1" comment="State matches if Sun VM VirtualBox version is less than or equals to 4.2.18" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than or equal">4.2.18</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:27873" version="1" comment="State matches if Sun VM VirtualBox version is less than or equals to 4.1.28" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than or equal">4.1.28</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:27904" version="1" comment="State matches if Sun VM VirtualBox version is greater than or equals to 4.2.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">4.2.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:27476" version="1" comment="State matches if Oracle VM VirtualBox version is less than  or equal 4.3.2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than or equal">4.3.2</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:27456" version="1" comment="State matches if Oracle VM VirtualBox version is greater than or equals 4.3.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">4.3.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:27928" version="1" comment="State matches if Oracle VM VirtualBox version is less than or equals to 3.2.18" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than or equal">3.2.18</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:27016" version="1" comment="State matches if Oracle VM VirtualBox version is less than or equals to 4.0.20" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than or equal">4.0.20</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:557" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">15</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:558" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.50.4942.400</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2618" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6861</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2617" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6861</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2616" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2615" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="not equal" datatype="int">4</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:560" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6945</version>
    </file_state>
    <uname_state id="oval:org.mitre.oval:ste:3324" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <os_release>B.11.23</os_release>
    </uname_state>
    <file_state id="oval:org.mitre.oval:ste:2583" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.50.4943.400</version>
    </file_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3458" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">21</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3774" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">20</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3350" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">13</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3010" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:563" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">07</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:562" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">10</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2453" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:3286" version="2" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <arch operation="pattern match">(^i586$)|(^x86_64$)|(^ppc$)</arch>
      <epoch>(none)</epoch>
      <version datatype="version">10.1</version>
      <signature_keyid>a84edae89c800aca</signature_keyid>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:3857" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <arch operation="pattern match">^(i586$)|(x86_64$)$</arch>
      <epoch>(none)</epoch>
      <version datatype="version">10</version>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:3836" version="2" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <arch operation="pattern match">(^i586$)|(^x86_64$)|(^ppc$)</arch>
      <epoch>(none)</epoch>
      <version datatype="version">10.2</version>
      <signature_keyid>a84edae89c800aca</signature_keyid>
    </rpminfo_state>
    <uname_state id="oval:org.mitre.oval:ste:4167" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <machine_class>ppc</machine_class>
    </uname_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:4668" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <arch operation="pattern match">(^i586$)|(^x86_64$)|(^ppc$)|(^noarch$)</arch>
      <epoch>(none)</epoch>
      <signature_keyid>a84edae89c800aca</signature_keyid>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2953" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <arch>x86_64</arch>
      <epoch>(none)</epoch>
      <signature_keyid>a84edae89c800aca</signature_keyid>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:3584" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.18.1-12.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:3622" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.18-9.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:3682" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.13.8-2.15</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:4566" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <arch operation="pattern match">(^i586$)|(^x86_64$)|(^ppc$)</arch>
      <epoch>(none)</epoch>
      <signature_keyid>a84edae89c800aca</signature_keyid>
    </rpminfo_state>
    <uname_state id="oval:org.mitre.oval:ste:1401" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <machine_class>x86_64</machine_class>
    </uname_state>
    <file_state id="oval:org.mitre.oval:ste:25547" version="1" comment="State holds if the version is less than 1.1.21022.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">1.1.21022.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:25427" version="1" comment="State matches if the version is less than 14.0.7011.1000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.0.7011.1000</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:25327" version="1" comment="State matches if the version is less than 15.0.4545.1000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">15.0.4545.1000</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:27906" version="1" comment="State matches if the version is less than 15.0.4551.1007" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">15.0.4551.1007</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:565" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3821.2800</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:564" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2620" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.3790.191</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2619" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <patch_state id="oval:org.mitre.oval:ste:568" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">13</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:567" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="equals" datatype="int">12</version>
    </patch_state>
    <registry_state id="oval:org.mitre.oval:ste:2868" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version">5.00.3315.1000</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2623" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3532.300</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:3827" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2972" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version operation="less than" datatype="version">9.1.2.1871</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:3261" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version operation="less than" datatype="version">10.2.0.1222</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:570" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3900.7009</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:3348" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3323" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:571" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.5.7233.69</version>
    </file_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3156" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">53</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3221" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3184" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:573" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:572" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3310" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">28</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3831" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">24</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3510" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3718" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">35</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:575" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.5.2558.10</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:574" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">2</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2333" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">2653</value>
    </registry_state>
    <patch_state id="oval:org.mitre.oval:ste:3607" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3167" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">26</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3273" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">25</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3480" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">13</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:578" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">08</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:577" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">13</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:576" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">06</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3629" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">26</version>
    </patch_state>
    <registry_state id="oval:org.mitre.oval:ste:25628" version="1" comment="State holds the value Microsoft Exchange Server 2013 Cumulative Update 3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft Exchange Server 2013 Cumulative Update 3</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:25503" version="1" comment="State holds if the version is less than 15.0.775.41" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">15.0.775.41</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:24953" version="1" comment="State holds if the version is less than 15.0.712.31" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">15.0.712.31</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:25434" version="1" comment="State holds if the version is less than 8.3.342.4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">8.3.342.4</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:25649" version="1" comment="State holds if the version is less than 14.3.174.1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.3.174.1</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:25043" version="1" comment="State holds if the version is less than 14.2.390.3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.2.390.3</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:582" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">16</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:581" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">05</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:580" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">11</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:579" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">09</version>
    </patch_state>
    <registry_state id="oval:org.mitre.oval:ste:2720" version="2" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>5,6,0,8513</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2888" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6810</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2947" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.6-2</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2946" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2945" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2944" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:585" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.5.7650.29</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2636" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version">5.0</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2635" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.5880</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2634" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2633" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="not equal" datatype="int">4</value>
    </registry_state>
    <patch_state id="oval:org.mitre.oval:ste:3658" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3070" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3105" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:588" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:587" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">05</version>
    </patch_state>
    <registry_state id="oval:org.mitre.oval:ste:2660" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2659" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="not equal" datatype="int">3</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2658" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="not equal" datatype="int">3</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2637" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.131.2195.6758</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:592" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <inetd_state id="oval:org.mitre.oval:ste:591" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <server_program operation="equals" datatype="string">/usr/sbin/in.ftpd</server_program>
    </inetd_state>
    <registry_state id="oval:org.mitre.oval:ste:2803" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="binary">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2640" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.3645</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2639" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <metabase_state id="oval:org.mitre.oval:ste:2638" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <data operation="pattern match">^.*idq\.dll.*$</data>
    </metabase_state>
    <patch_state id="oval:org.mitre.oval:ste:3157" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">12</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3383" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">13</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:595" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.1280</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:3253" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">29</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3421" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">15</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3457" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">16</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:600" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2800.1441</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:599" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:598" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">0</value>
    </registry_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3592" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3780" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2646" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.1-15</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2645" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2644" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2643" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3258" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">09</version>
    </patch_state>
    <package_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3449" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="pattern match">3\.2\.3,.*</version>
      <description operation="pattern match">3\.2\.3,.*</description>
    </package_state>
    <package_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3317" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="pattern match">3\.2\.4,.*</version>
      <description operation="pattern match">3\.2\.4,.*</description>
    </package_state>
    <patch_state id="oval:org.mitre.oval:ste:2647" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">10</version>
    </patch_state>
    <registry_state id="oval:org.mitre.oval:ste:24179" version="1" comment="State matches if SharePoint Foundation 2013 is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Microsoft SharePoint Foundation 2013 .*$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:24309" version="1" comment="State matches if Microsoft SharePoint Foundation 2010 SP2 is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Service Pack 2 for Microsoft SharePoint Foundation 2010 .*$</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:23634" version="1" comment="State holds if the version is less than 14.0.7105.5000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.0.7105.5000</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:24352" version="1" comment="State matches if the version is less than 14.0.7005.1000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.0.7005.1000</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:23691" version="1" comment="State matches if the version is less than 14.0.7104.5000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.0.7104.5000</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:24141" version="1" comment="State matches if the version is less than 15.0.4535.1000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">15.0.4535.1000</version>
    </file_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3484" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">22</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3668" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">27</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3514" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">42</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3094" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">41</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:605" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">12</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:604" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">19</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:603" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2651" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.131.3659.0</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2650" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2649" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">0</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2891" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2716.2200</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:23381" version="1" comment="State holds the string Microsoft Office Web Apps Service Pack 2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Service Pack 2 for Microsoft Office Web Apps.*$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:23979" version="2" comment="State matches if the version is equal to 14.0.7015.1000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version">14.0.7015.1000</value>
    </registry_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3926" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">23</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3287" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2654" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.5971</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2653" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2652" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="not equal" datatype="int">2</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:19893" version="1" comment="State matches if Microsoft Web Apps is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Microsoft.* Office Web Apps$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:19818" version="1" comment="State holds the string Microsoft Office Web Apps Service Pack1 (SP1)" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft Office Web Apps Service Pack 1 (SP1)</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:24088" version="1" comment="State matches if the version is less than 14.0.7106.5000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.0.7106.5000</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:24114" version="1" comment="State matches if the version is less than 14.0.6112.5000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.0.6112.5000</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:609" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:610" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.1.2600.1560</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2206" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:701" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">106.0.0.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:614" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.7097</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:617" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:616" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:627" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version datatype="int">14</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:626" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version datatype="int">51</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:625" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:624" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:623" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version datatype="int">14</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:622" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version datatype="int">51</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:621" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:620" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3868" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">11</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3410" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3569" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">10</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3062" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:633" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">9.0.0.3349</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2665" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.2.776.1</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2664" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:634" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.6618.4</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:23384" version="1" comment="State holds the value Microsoft Exchange Server 2013 Cumulative Update 1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft Exchange Server 2013 Cumulative Update 1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:23477" version="1" comment="State holds the value Microsoft Exchange Server 2013" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Microsoft Exchange Server 2013.*$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:23682" version="1" comment="State holds the value Microsoft Exchange Server 2013 Cumulative Update 2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft Exchange Server 2013 Cumulative Update 2</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:23870" version="1" comment="State holds if the version is less than 15.0.620.34" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">15.0.620.34</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:23895" version="1" comment="State holds if the version is less than 15.0.712.28" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">15.0.712.28</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:22603" version="1" comment="State holds if the version is less than 14.2.375.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.2.375.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:22653" version="1" comment="State holds if the version is less than 8.3.327.1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">8.3.327.1</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:23067" version="1" comment="State holds if the version is less than 14.3.158.1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.3.158.1</version>
    </file_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3808" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3540" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">06</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:636" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6902</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:637" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">8.0.0.4496</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:3781" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.7055</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:3492" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>5.0</value>
    </registry_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3787" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">56</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3328" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">45</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2416" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2743.600</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:640" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.529</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2777" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <sgid operation="equals" datatype="boolean">true</sgid>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2776" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:2666" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">10</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:644" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.7087</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:649" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^5,50,.*</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:648" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.50.4963.1700</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2883" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals">5.50.4134.0100</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2882" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals">5.50.4134.0600</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2881" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals">5.50.4522.1800</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2822" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2667" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.50.4923.2500</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:655" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^2\.53.*$</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:654" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2.53.6306.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:653" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2.71.9053.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:652" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2.80.1062.0</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:651" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^2\.81.*$</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:650" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2.81.1124.0</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2231" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^2\.71.*$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2213" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^2\.8.*$</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:656" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.537</version>
    </file_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3315" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3596" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3092" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">05</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3942" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2668" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">20</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:659" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.3790.503</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:660" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.7085</version>
    </file_state>
    <swlist_state id="oval:org.mitre.oval:ste:661" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <version operation="pattern match">B\.11\.11\.(00.*|01\.00[0-7])</version>
    </swlist_state>
    <uname_state id="oval:org.mitre.oval:ste:3813" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <os_release>B.11.00</os_release>
    </uname_state>
    <file_state id="oval:org.mitre.oval:ste:748" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">106.0.0.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:670" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">10.0.6790.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:673" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.7093</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:675" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3528.700</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:21043" version="1" comment="version is equal to 11.4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version">11.4</version>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:20779" version="1" comment="version is earlier than 0.8.6-2.9.1 and arch matches noarch" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <arch>noarch</arch>
      <evr datatype="evr_string" operation="less than">0:0.8.6-2.9.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:20648" version="1" comment="version is earlier than 0.8.4-22.1 and arch matches noarch" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <arch>noarch</arch>
      <evr datatype="evr_string" operation="less than">0:0.8.4-22.1</evr>
    </rpminfo_state>
    <patch_state id="oval:org.mitre.oval:ste:678" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">14</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:677" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">09</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:676" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">05</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:20258" version="1" comment="version is equal to 12.2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version">12.2</version>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:21165" version="1" comment="version is earlier than 0.8.8-2.8.1 and arch matches noarch" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <arch>noarch</arch>
      <evr datatype="evr_string" operation="less than">0:0.8.8-2.8.1</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:680" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.1.3102.1355</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:681" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.529</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:683" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.0.1381.7265</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:682" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.0.1381.33563</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:685" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:686" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.1.0.9232</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:3850" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3228" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3562" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3405" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3667" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3869" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2896" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2713.1100</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:688" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">14</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:687" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">17</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:689" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2900.2627</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:20811" version="1" comment="version is earlier than 0.4.0-3.3.1 and arch matches noarch" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <arch>noarch</arch>
      <evr datatype="evr_string" operation="less than">0:0.4.0-3.3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:21014" version="1" comment="version is earlier than 2012.2.4+git.1363297910.9561484-2.10.1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <arch>noarch</arch>
      <evr datatype="evr_string" operation="less than">0:2012.2.4+git.1363297910.9561484-2.10.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:20582" version="1" comment="version is earlier than 0.4.0-3.3.1 and arch matches i586 or x86_64" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <arch operation="pattern match">^(i586)|(x86_64)$</arch>
      <evr datatype="evr_string" operation="less than">0:0.4.0-3.3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:21062" version="1" comment="version is earlier than 0.8.4-22.1 and arch matches noarch" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <arch>noarch</arch>
      <evr datatype="evr_string" operation="less than">0:0.2.1.3.gd37a3fb+git.1357543650.d37a3fb-2.8.1</evr>
    </rpminfo_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3368" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">62</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3849" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">51</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3096" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">26</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3278" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">25</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3603" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">08</version>
    </patch_state>
    <registry_state id="oval:org.mitre.oval:ste:20749" version="1" comment="Version of Oracle GoldenGate Director Server is 11.1.1.1.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Oracle GoldenGate Director Server 11.1.1.1.0[_\d]*$</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2670" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.40-21.5</evr>
    </rpminfo_state>
    <inetlisteningservers_state id="oval:org.mitre.oval:ste:2669" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <program_name operation="pattern match">^.*httpd\.worker.*</program_name>
    </inetlisteningservers_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:3042" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:8.12.11-4.RHEL3.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:694" version="3" comment="Version before 8.12" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version operation="pattern match">^(?:([0-7]\..*)|(8\.([0-9]|1[01])))$</version>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:693" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version operation="pattern match">8\.12\.([0-9]|10)</version>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:692" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version operation="pattern match">8\.13\.[0-5]</version>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:3851" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:8.13.1-3.RHEL4.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:21110" version="1" comment="version is earlier than 1.1.10-14.10.1 and arch matches i586 or x86_64" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <arch operation="pattern match">^(i586)|(x86_64)$</arch>
      <evr datatype="evr_string" operation="less than">0:1.1.10-14.10.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:20860" version="1" comment="version is equal to 12.3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version">12.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:21072" version="1" comment="version is earlier than 1.6.8-2.6.1 and arch matches noarch" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <arch>noarch</arch>
      <evr datatype="evr_string" operation="less than">0:1.6.8-2.6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:20901" version="1" comment="version is earlier than 1.6.8-2.6.1 and arch matches x86_64" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <arch operation="pattern match">^x86_64$</arch>
      <evr datatype="evr_string" operation="less than">0:1.6.8-2.6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:20610" version="1" comment="version is earlier than 1.6.8-2.6.1 and arch matches i586 or x86_64" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <arch operation="pattern match">^(i586)|(x86_64)$</arch>
      <evr datatype="evr_string" operation="less than">0:1.6.8-2.6.1</evr>
    </rpminfo_state>
    <patch_state id="oval:org.mitre.oval:ste:698" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">27</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:697" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">12</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3196" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3022" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">06</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2672" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.3790.326</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:705" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^9\.0+\..*$</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:704" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">9.0.0.3344</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:708" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:709" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.1.3790.1</version>
    </file_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3282" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">11</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:19698" version="1" comment="State matches if the version is less than 14.0.6134.5000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.0.6134.5000</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2678" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7a-33.15</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2677" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7a-33.15</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2676" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7a-33.15</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2675" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.6b-16.22.3</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2674" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:711" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3837.1200</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:719" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">06</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:718" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:717" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:716" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">06</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:715" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:714" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:2958" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3439" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3669" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">30</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3925" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">14</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3065" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">15</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3568" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">40</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3807" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3172" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">19</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:27989" version="1" comment="State matches if Sun VM VirtualBox version is less than 4.2.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.2.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:24690" version="1" comment="State matches if Sun VM VirtualBox version is greater than or equals to 4.1.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">4.1.0</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:20712" version="1" comment="State matches if Windows Essentials 2012 is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^16\..*$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:20651" version="1" comment="State matches if Windows Essentials 2011 is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^15\..*$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:20601" version="1" comment="State matches if Windows Essentials is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Windows Live Essentials</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:20477" version="1" comment="16.4.3508.205" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">16.4.3508.205</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:20432" version="1" comment="State matches if the version is less than 8.3.298.3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">8.3.298.3</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:20072" version="1" comment="State matches if the version is less than 14.2.342.2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.2.342.2</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:726" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">33</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:725" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">22</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:724" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">29</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:723" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">33</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:722" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">22</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:721" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">29</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:733" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:732" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:731" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:730" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:729" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:728" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:727" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:24709" version="1" comment="State matches if Sun xVM VirtualBox version is greater than or equals 2.2.0" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">2.2.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:24192" version="1" comment="State matches if Sun xVM VirtualBox version is less than or equals to 3.0.2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than or equal">3.0.2</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:734" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.462</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:20405" version="1" comment="State holds if the version is less than 8.3.7.207" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">8.3.7.207</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:737" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">24</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2257" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">24</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:742" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.1.2600.1609</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:741" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^[Hh][Yy][Pp][Ee][Rr][Tt][Rr][Mm]\.[Ee][Xx][Ee]$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:744" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals">Windows ME</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:3591" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>5.2</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:3916" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.2477</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:3833" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Service Pack 1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:746" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^10\.0+\..*$</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:745" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">10.0.0.4019</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:20061" version="1" comment="State matches if version is less than 14.1.438.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.1.438.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:20194" version="1" comment="State matches if version is less than 14.2.328.10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.2.328.10</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:19800" version="1" comment="State matches if version is less than 8.3.297.2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">8.3.297.2</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:752" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.7071</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:757" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:756" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <registry_state id="oval:org.mitre.oval:ste:19625" version="1" comment="State matches the string System Center Configuration Manager 2007 R2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft System Center Configuration Manager 2007 R2</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:19960" version="1" comment="tate matches the string System Center Configuration Manager 2007 R3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft System Center Configuration Manager 2007 R3</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:19054" version="1" comment="State matches the string System Center Configuration Manager 2007" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Microsoft System Center Configuration Manager 2007.*$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:19796" version="1" comment="State matches if version is greater than or equal to 4.00.6487.2000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version" operation="greater than or equal">4.00.6487.2000</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:19789" version="1" comment="State matches the string Systems Management Server 2003" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^.*Microsoft Systems Management Server 2003.*$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:20055" version="1" comment="State matches if version is greater than or equal to 2.50.4253.3000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="greater than or equal" datatype="version">2.50.4253.3000</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:19846" version="2" comment="State matches if version is less than 4.0.6487.2216" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.0.6487.2216</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:19066" version="1" comment="State matches if version is less than 2.50.4253.3129" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows"/>
    <file_state id="oval:org.mitre.oval:ste:758" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">7.10.0.3077</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:19971" version="1" comment="State holds if the version is less than 10.0.40219.417" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">10.0.40219.417</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:27240" version="1" comment="State matches if Sun VM VirtualBox version is less than 4.3.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.3.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:24051" version="1" comment="State matches if Oracle VM VirtualBox version is less than or equals to 4.0.6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than or equal">4.0.6</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:24064" version="1" comment="State matches if Oracle VM VirtualBox version is greater than or equals 4.0.8" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">4.0.8</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:20030" version="1" comment="State holds the string System Center Operations Manager 2007" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>System Center Operations Manager 2007</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:20330" version="1" comment="State holds if the value is greater than or equal to 6.0.6278.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="greater than or equal" datatype="version">6.0.6278.0</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:19376" version="1" comment="State holds the string System Center Operations Manager 2007 R2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>System Center Operations Manager 2007 R2</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:19787" version="1" comment="State holds if the version is less than or equal to 6.0.6278.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than or equal">6.0.6278.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:20336" version="1" comment="State holds if the version is less than 6.1.7221.110" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.1.7221.110</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:20292" version="1" comment="State matches if Microsoft SharePoint Server 2013 is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft SharePoint Server 2013</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:20425" version="1" comment="State matches if the version is less than 15.0.4481.1507" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">15.0.4481.1507</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:765" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>1.1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:768" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2800.1476</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:767" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:769" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6992</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2451" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:19815" version="1" comment="State holds if Microsoft SharePoint Foundation 2010 Service Pack 1 is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft SharePoint Foundation 2010 Service Pack 1 (SP1)</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:19908" version="2" comment="State matches if the version is equal to 14.0.6029.1000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version">14.0.6029.1000</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:19858" version="1" comment="State matches if the version is less than 14.0.6108.5000" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.0.6108.5000</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:12737" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.0.6106.5000</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:778" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.453</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:779" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.386</version>
    </file_state>
    <swlist_state id="oval:org.mitre.oval:ste:780" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <version operation="pattern match">A(\.0[0-3]\..*|\.04\.[0-1].*|\.04\.20\.00[0-3])</version>
    </swlist_state>
    <file_state id="oval:org.mitre.oval:ste:783" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.3790.413</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:784" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.7065</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:785" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3833.200</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:789" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:788" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:787" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:786" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:791" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:2990" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">08</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:792" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">11.0.8012.0</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:2682" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">6</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2684" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.40-21.1</evr>
    </rpminfo_state>
    <inetlisteningservers_state id="oval:org.mitre.oval:ste:2683" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <program_name operation="pattern match">^.*httpd.*</program_name>
    </inetlisteningservers_state>
    <patch_state id="oval:org.mitre.oval:ste:2909" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">9</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2907" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2906" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2905" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2285" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Mozilla \(.*\)</value>
    </registry_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3676" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:2689" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">3</version>
    </patch_state>
    <inetd_state id="oval:org.mitre.oval:ste:2688" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <server_program operation="equals" datatype="string">/usr/openwin/lib/fs.auto</server_program>
    </inetd_state>
    <file_state id="oval:org.mitre.oval:ste:2687" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2686" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2685" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:802" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3835.2200</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:19769" version="1" comment="State holds the string Microsoft Lync 2010" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft Lync 2010</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:19700" version="1" comment="State macthes if version is less than 4.0.7577.4098" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.0.7577.4098</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:18185" version="2" comment="State matching version less than or equal to 9.7" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version" operation="less than or equal">9.7</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:18088" version="2" comment="State matching version greater than or equal to 9.1" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version" operation="greater than or equal">9.1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:19463" version="1" comment="State holds the value 14.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version">14.0</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:5469" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">3</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:18812" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:18859" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">2</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:18889" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">14</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:19804" version="2" comment="State holds if the version is less than 14.1.421.2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.1.421.2</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:19614" version="2" comment="State holds if the version is less than 8.3.279.4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">8.3.279.4</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:19994" version="1" comment="State holds if the version is less than 14.0.334.11" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.0.334.11</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:19493" version="2" comment="State holds if the version is less than 14.2.318.4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.2.318.4</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:807" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:806" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2693" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.9-0.9.1</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2692" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2691" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2690" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:808" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2001.12.4720.480</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:38823" version="1" comment="State matching version greater than or equal to 8.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">8.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:38764" version="1" comment="State matching version equal to 7.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version">7.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:38821" version="1" comment="State matching version less than or equal to 8.5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than or equal">8.5</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:18414" version="2" comment="State matching version less than or equal to 9.7.0.4" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version" operation="less than or equal">9.7.0.4</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:18325" version="2" comment="State matching version greater than or equal to 9.7.0.1" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version" operation="greater than or equal">9.7.0.1</value>
    </registry_state>
    <patch_state id="oval:org.mitre.oval:ste:816" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version datatype="int">05</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:815" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:814" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version datatype="int">05</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:813" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version datatype="int">01</version>
    </patch_state>
    <registry_state id="oval:org.mitre.oval:ste:2892" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2694" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3502.4718</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:818" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <swlist_state id="oval:org.mitre.oval:ste:824" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <version operation="pattern match">A\.01\.(0.*|10.*|11[^\.]|11\.0[0-3])</version>
    </swlist_state>
    <swlist_state id="oval:org.mitre.oval:ste:823" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <version operation="pattern match">A\.01\.(0.*|10.*|11[^\.]|11\.0[0-3])</version>
    </swlist_state>
    <swlist_state id="oval:org.mitre.oval:ste:822" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <version operation="pattern match">A\.01\.(0.*|10.*|11[^\.]|11\.0[0-3])</version>
    </swlist_state>
    <swlist_state id="oval:org.mitre.oval:ste:821" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <version operation="pattern match">A\.01\.(0.*|10.*|11[^\.]|11\.0[0-3])</version>
    </swlist_state>
    <file_state id="oval:org.mitre.oval:ste:827" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.3790.418</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:18040" version="2" comment="State matching version less than or equal to 9.5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version" operation="less than or equal">9.5</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:38545" version="1" comment="State matching version equal to 8.5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version">8.5</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:831" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^5\.0+\..*</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:830" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3839.2200</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:837" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:836" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:835" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:834" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:833" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:832" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3251" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">09</version>
    </patch_state>
    <registry_state id="oval:org.mitre.oval:ste:2774" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2773" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="not equal" datatype="int">4</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2699" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.4919</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:18595" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.0.6113.5000</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:18732" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.0.6114.5001</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:841" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">21</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:840" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">09</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:839" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">31</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:38156" version="1" comment="State matching version greater than or equal to 8.0.1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">8.0.1</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:38726" version="1" comment="State matching version less than or equal to 8.5.1.4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than or equal">8.5.1.4</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:18471" version="1" comment="The registry key value matches with Microsoft AntiXSS v3.x or 4.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Microsoft AntiXSS v(3\.\d|4\.0).*$</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:845" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.7073</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2700" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2722.900</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:18065" version="2" comment="State matching version equal to 9.7.0.1" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version">9.7.0.1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:853" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">6.4.3790.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:852" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.4.3790.399</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:854" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.3790.536</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:855" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.1.3940.42</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:859" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3841.1900</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:861" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.374</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:860" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.374</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:863" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <swlist_state id="oval:org.mitre.oval:ste:865" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <version operation="pattern match">A\.([01].*|2\.00\.00)</version>
    </swlist_state>
    <swlist_state id="oval:org.mitre.oval:ste:864" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <version operation="pattern match">A\.0[12]\..*</version>
    </swlist_state>
    <file_state id="oval:org.mitre.oval:ste:4347" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than">2000.80.2000.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:18112" version="1" comment="State matches if version is less than 2000.80.2273.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.2273.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:18145" version="1" comment="State matches if version is less than 2000.80.2050.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.2050.0</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:868" version="2" comment="Regex that matches Service Pack 1 or later" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^[Ss][Ee][Rr][Vv][Ii][Cc][Ee] [Pp][Aa][Cc][Kk] [1-9][0-9]*$</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:867" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.346</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:2912" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">52</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2911" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <sgid operation="equals" datatype="boolean">true</sgid>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2910" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:17733" version="1" comment="State matches the registry key value Microsoft Forefront Security for SharePoint" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft Forefront Security for SharePoint</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:18034" version="1" comment="State matches the registry key value Microsoft Antigen for Exchange" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft Antigen for Exchange</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:18376" version="1" comment="State matches the registry key value Microsoft Forefront Security for Exchange Server" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft Forefront Security for Exchange Server</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:18235" version="1" comment="State matches the registry key value Microsoft Antigen for SMTP Gateway" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft Antigen for SMTP</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:18173" version="1" comment="State matches the registry key value Microsoft Windows Live OneCare" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Microsoft Windows Live OneCare.*$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:17784" version="1" comment="State matches if version is less than 1.1.3520.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version" operation="less than">1.1.3520.0</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:18354" version="1" comment="State matches if Version is less than 0.1.13.192" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version" operation="less than">0.1.13.192</value>
    </registry_state>
    <uname_state id="oval:org.mitre.oval:ste:3679" version="1" comment="os release is 5.7" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <os_release>5.7</os_release>
    </uname_state>
    <uname_state id="oval:org.mitre.oval:ste:3351" version="1" comment="os release is 5.6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <os_release>5.6</os_release>
    </uname_state>
    <patch_state id="oval:org.mitre.oval:ste:3046" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">27</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3391" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">11</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3923" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">29</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3308" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">37</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2713" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.9-0.9</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:38665" version="1" comment="State matching version less than or equal to 8.5.2.2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than or equal">8.5.2.2</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:38473" version="1" comment="State matching version less than or equal to 5.2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than or equal">5.2</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:38658" version="1" comment="State matching version greater than or equal to 7.0.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">7.0.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:38770" version="1" comment="State matching version greater than or equal to 6.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">6.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:38668" version="1" comment="State matching version less than or equal to 6.5.6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than or equal">6.5.6</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:38859" version="1" comment="State matching version greater than or equal to 5:0a" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">5:0a</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:38438" version="1" comment="State matching version less than or equal to 4.6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than or equal">4.6</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:38836" version="1" comment="State matching version greater than or equal to 4.2.1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">4.2.1</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:38483" version="1" comment="State matching version less than or equal to 7.0.4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than or equal">7.0.4</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:38858" version="1" comment="State matching version greater than or equal to 3.0.0.1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">3.0.0.1</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:38806" version="1" comment="State matching version greater than or equal to 8.0.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">8.0.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:38882" version="1" comment="State matching version less than or equal to 3.0.0.2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than or equal">3.0.0.2</version>
    </file_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3141" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">10</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3223" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">07</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3615" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">06</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3663" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">16</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3037" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">17</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3029" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">12</version>
    </patch_state>
    <registry_state id="oval:org.mitre.oval:ste:1075" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">7638</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:890" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">6249</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:990" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">7226</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:3489" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">0</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:3424" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">8.0.709.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:3460" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.6619.12</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:3775" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.5.7235.2</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:3544" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.5.7652.24</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2714" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3810.0</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2717" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.1-4</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2716" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2715" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:871" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:870" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.233</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:873" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.1-1</evr>
    </rpminfo_state>
    <inetlisteningservers_state id="oval:org.mitre.oval:ste:872" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <program_name operation="pattern match">.*/radiusd</program_name>
    </inetlisteningservers_state>
    <swlist_state id="oval:org.mitre.oval:ste:2236" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <version operation="pattern match">(((A|B)\.2\.0\.55\.\d+)|((A|B)\.[3-9]\..*)|((A|B)\.[1-9]\d+\..*)|((A|B)\.2\.[1-9]\d*\..*)|((A|B)\.2\.\d+\.[6-9]\d+\..*)|((A|B)\.2\.\d+\.5[6-9]\d*\..*)|((A|B)\.2\.\d+\.\d{3,}\..*))</version>
    </swlist_state>
    <patch_state id="oval:org.mitre.oval:ste:3144" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">35</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3594" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">45</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3217" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">05</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3844" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">09</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:645" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">5.6.0.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:12089" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">5.5.0.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2723" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.1.0.8513</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2722" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.5.0.8513</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2721" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.6.0.8513</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:5393" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">5.1.0.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:877" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.3790.259</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:876" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2621" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version">6.00.3790.0000</value>
    </registry_state>
    <swlist_state id="oval:org.mitre.oval:ste:878" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <version operation="pattern match">B\.11\.11\.(00.*|01\.00[0-5])</version>
    </swlist_state>
    <file_state id="oval:org.mitre.oval:ste:880" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.1558.6608</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:883" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6958</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:882" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2768" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2727" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.05-32.1</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2726" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2725" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2724" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2488" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3831.1800</version>
    </file_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3874" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3524" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">61</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3205" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">25</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3681" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">50</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3619" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3432" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">24</version>
    </patch_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3735" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">07</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:885" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2.80.1062.0</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2902" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Terminal Server</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2901" version="2" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.2.775.1</version>
    </file_state>
    <metabase_state id="oval:org.mitre.oval:ste:2897" version="2" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <data operation="pattern match">^.*asp\.dll.*$</data>
    </metabase_state>
    <file_state id="oval:org.mitre.oval:ste:888" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">5.0.1460.9</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:887" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.1462.22</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:24096" version="1" comment="State matches if Oracle VM VirtualBox version is greater than or equals to 4.0.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">4.0.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:891" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.468</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:2728" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">30</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:892" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3825.700</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:895" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version">9.00.00.2980</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:894" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">9.0.0.3250</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:893" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>1.1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2900" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2885" version="2" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.5269</version>
    </file_state>
    <metabase_state id="oval:org.mitre.oval:ste:2862" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <data operation="pattern match">^.*ism\.dll.*$</data>
    </metabase_state>
    <file_state id="oval:org.mitre.oval:ste:24439" version="1" comment="State matches if Sun xVM VirtualBox version is less than or equals to 3.0.4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than or equal">3.0.4</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:24702" version="1" comment="State matches if Oracle VM VirtualBox version is greater than or equals to 3.2.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">3.2.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:24728" version="1" comment="State matches if Sun xVM VirtualBox version is greater than or equals to 3.0.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">3.0.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:24567" version="1" comment="State matches if Sun VM VirtualBox version is greater than or equals to 3.0.6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">3.0.6</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:24310" version="1" comment="State matches if Sun VM VirtualBox version is less than or equals to 3.1.8" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than or equal">3.1.8</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:27978" version="1" comment="State matches if Sun VM VirtualBox version is less than 4.1.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.1.0</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:901" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:900" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:4180" version="1" comment="The registry key matches with Microsoft Host Integration Server 2004" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft Host Integration Server 2004</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:12720" version="1" comment="The registry key equals 6.0.2403.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version">6.0.2403.0</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:4446" version="1" comment="The registry key matches with Microsoft Host Integration Server 2006" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft Host Integration Server 2006</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:13366" version="1" comment="The registry key matches with Microsoft Host Integration Server 2009" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft Host Integration Server 2009</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:12694" version="1" comment="The registry key matches with Microsoft Host Integration Server 2010" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft Host Integration Server 2010</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:13119" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">7.0.4220.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:13331" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">8.0.3870.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:12777" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">8.5.4317.1</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:13329" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">8.5.4369.2</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:13397" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">8.0.3850.1</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:13132" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2445.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:13133" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">8.0.3872.2</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:13383" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">8.5.4360.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:902" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.7061</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2203" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:903" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.7035</version>
    </file_state>
    <uname_state id="oval:org.mitre.oval:ste:2352" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <os_release>B.11.00</os_release>
    </uname_state>
    <uname_state id="oval:org.mitre.oval:ste:905" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <os_release>B.11.22</os_release>
    </uname_state>
    <swlist_state id="oval:org.mitre.oval:ste:904" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <version operation="pattern match">((1\.7\.12\..*)|(1\.(([8-9])|(\d{2,}))\..*)|(1\.7\.((1[3-9])|([2-9]\d+))\..*))</version>
    </swlist_state>
    <file_state id="oval:org.mitre.oval:ste:13076" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">12.0.6565.5001</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:7274" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Microsoft Windows SharePoint Services 3\.0.*$</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:906" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.3790.383</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:907" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.7054</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1207" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals">Windows 98</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:12994" version="1" comment="The registry key has a value of Microsoft SharePoint Server 2010" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft SharePoint Server 2010</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:12950" version="1" comment="The registry key has a value of Microsoft SharePoint Foundation 2010" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft SharePoint Foundation 2010</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:13043" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.0.6106.5001</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:12754" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.0.6106.5001</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:13090" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.0.6106.5008</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:13021" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.0.6106.5001</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:12982" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.0.6106.5001</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:12699" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">14.0.6106.5001</version>
    </file_state>
    <inetd_state id="oval:org.mitre.oval:ste:913" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <server_program>/usr/sbin/sadmind</server_program>
    </inetd_state>
    <patch_state id="oval:org.mitre.oval:ste:912" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:911" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:910" version="2" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <inetd_state id="oval:org.mitre.oval:ste:909" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <server_program operation="equals" datatype="string">/usr/sbin/sadmind</server_program>
    </inetd_state>
    <registry_state id="oval:org.mitre.oval:ste:2558" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:914" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.280</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:12438" version="1" comment="Matches if version is equal to 7.0.11" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version">7.0.11</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2884" version="2" comment="Regex that matches Service Pack 3 or later" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^[Ss][Ee][Rr][Vv][Ii][Cc][Ee] [Pp][Aa][Cc][Kk] ([3-9]|([1-9][0-9]+))$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2729" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Y</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2878" version="3" comment="Regex that matches Service pack is 4 or later" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^[Ss][Ee][Rr][Vv][Ii][Cc][Ee] [Pp][Aa][Cc][Kk] ([4-9]|([1-9][0-9]+))$</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:916" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">6.1.9.726</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:915" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.1.9.732</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:918" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Mozilla Firefox (1.0.7)</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:917" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^1\.0\.7 .*</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:12636" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">7.0.7734.182</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2281" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.419</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:11777" version="1" comment="State matches if the version is equal to 5.3.2 or equal to 5.3.2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^(5\.3\.[23])$</value>
    </registry_state>
    <swlist_state id="oval:org.mitre.oval:ste:921" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <version operation="pattern match">A(\.0[0-3]\..*|\.04\.[0-1].*|\.04\.20\.00[0-4])</version>
    </swlist_state>
    <file_state id="oval:org.mitre.oval:ste:2814" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2723.2500</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2326" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">37:1.7.10-1.1.3.1</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:24189" version="1" comment="State matches if Oracle VM VirtualBox version is equal to 4.0.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version">4.0.0</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:923" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^8\.0+\..*$</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:922" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">8.0.0.4495</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2401" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.7059</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2400" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.7059</version>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:3804" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:926" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.396</version>
    </file_state>
    <patch_state operator="AND" version="1" id="oval:org.mitre.oval:ste:3618" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">28</version>
    </patch_state>
    <registry_state id="oval:org.mitre.oval:ste:12101" version="1" comment="State matches if the version is 5.2 before 5.2.15 or 5.3 before 5.3.4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^(5(\.2(\.([0-9]|1[0-4]))?|\.3(\.[0-3])?))$</value>
    </registry_state>
    <uname_state id="oval:org.mitre.oval:ste:1145" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <os_release>B.11.04</os_release>
    </uname_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:929" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.2.2-4.rhel3</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:928" version="1" operator="OR" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
      <gexec operation="equals" datatype="boolean">true</gexec>
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:930" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.7069</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:932" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.7p5-1.1</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:931" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <inetd_state id="oval:org.mitre.oval:ste:2855" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <server_program operation="equals" datatype="string">/usr/lib/fs/cachefs/cachefsd</server_program>
    </inetd_state>
    <file_state id="oval:org.mitre.oval:ste:2854" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2853" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2852" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <patch_state id="oval:org.mitre.oval:ste:2832" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <registry_state id="oval:org.mitre.oval:ste:12420" version="1" comment="State matches if the version is less than 5.3.4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version" operation="less than">5.3.4</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2614" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version">5.00.3700.1000</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2209" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3828.2700</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:11759" version="1" comment="State matches if Apache Tomcat is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Apache Tomcat .*$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:12384" version="1" comment="Matches if version is in range 7.0 through 7.0.11" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^7\.0\.([0-9]|1[01])$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:115" version="2" comment="The registry key has a value that matches ^7\.[0-9.]*$" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^7\.[0-9.]*$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2185" version="3" comment="The registry key has a value that matches 6.*" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^6\..*$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:952" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^7\.1.*$</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:951" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">7.10.0.3076</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2734" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2800.1264</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2731" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>.hta</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:12022" version="1" comment="State matches if the version is less than 5.3.4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version" operation="less than">5.3.4</value>
    </registry_state>
    <patch_state id="oval:org.mitre.oval:ste:954" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:953" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:955" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">3.5.0.117</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:956" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.2.3535.0</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1065" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1064" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="not equal" datatype="int">4</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:957" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.7057</version>
    </file_state>
    <uname_state id="oval:org.mitre.oval:ste:959" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <os_release>B.10.24</os_release>
    </uname_state>
    <registry_state id="oval:org.mitre.oval:ste:2791" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>8.00.194</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2742" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.608.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2741" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.606.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2740" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.606.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2739" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.606.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2738" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.606.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2737" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.606.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2736" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.628.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2215" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2800.1505</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2214" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2800.1506</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:12537" version="1" comment="State matches if the version is less than 1.0.4.2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">1.0.4.2</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:3119" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">8</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:12105" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">2</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:11513" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">8.2.301.0</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:12157" version="1" comment="State matches if the version is less than 5.2.15" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version" operation="less than">5.2.15</value>
    </registry_state>
    <inetd_state id="oval:org.mitre.oval:ste:2746" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <server_program>/usr/openwin/bin/kcms_server</server_program>
    </inetd_state>
    <file_state id="oval:org.mitre.oval:ste:2745" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2744" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2743" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2925" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.50.4913.1100</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2924" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2923" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:965" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3539.2400</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:964" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:967" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.8.4-12.3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:966" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.8.4-12.3.1</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:4586" version="2" comment="Regex that matches a string containing numbers separated by a hyphen" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^.[0-9]+-.[0-9]+-.[0-9]+-.[0-9]+$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2179" version="3" comment="Regex that matches a string containing -OEM-" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^.*-OEM-.*$</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:11291" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">10.0.6867.0</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:12451" version="1" comment="State matches if lower versions of PHP is installed" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^PHP.*$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:11536" version="1" comment="State matches if the version is less than 5.2.15 or 5.3.x  before 5.3.4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^([0-4](\..*)?|5(\.[0-1](\..*)?|\.2(\.([0-9]|1[0-4]))?|\.3(\.[0-3])?)?)$</value>
    </registry_state>
    <patch_state id="oval:org.mitre.oval:ste:3610" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">15</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3859" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">12</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3578" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:968" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3900.7071</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9586" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.3.4-10</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:969" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3900.7078</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1265" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.185</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1264" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="binary">1</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9160" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.3.1-3.14</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9639" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.9p1-8.RHEL4.17.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10149" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.6.1p2-33.30.13</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:4421" version="1" comment="The registry key has a value that matches 8.*" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^8\..*$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:12178" version="2" comment="State matches if Microsoft Internet Explorer version is equal to 8.0.7600.16385" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version" entity_check="all">8.0.7600.16385</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2748" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6699</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2747" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9243" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.1.30-9.RHEL3.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9776" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.3-4.RHEL3.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9506" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.0.1-1.RHEL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9546" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.17-13.3.24</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9361" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.02-9.5</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:982" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.3790.507</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10219" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.2-9</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10422" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.96.0-5</evr>
    </rpminfo_state>
    <uname_state id="oval:org.mitre.oval:ste:3389" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <os_release>B.11.11</os_release>
    </uname_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11003" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.16-12.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10962" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5.10-13</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10279" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.26-2.1.2.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9284" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.6b-16</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:8759" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7a-33.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11063" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">30:9.3.6-4.P1.el5_4.2</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:3235" version="2" comment="The registry key has a value of Microsoft Office SharePoint Server 2007" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft Office SharePoint Server 2007</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:12084" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">12.0.6547.5000</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9772" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.17-13.3.13</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:984" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.8.17-9.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:983" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.8.17-9.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9709" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.8.0-15.0.4.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10446" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.5-21.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10479" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.2-35.0.4.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11167" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.25.5-10.el5_4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11079" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.24.7-4.el4_8.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10938" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4p6-13.el5.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10824" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.9.6-2.3.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11353" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5-16.el5.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11174" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.7.9-7.el5.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11374" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.3-8.el5.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9707" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:3.1.3-3.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9557" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:1.2.2-21</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9738" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.13-12</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2750" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">3</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2749" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">816456</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9927" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.0-1.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10366" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.7-1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9862" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.13-1.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10369" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.0.9-1.1.1.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10316" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.8.0-1.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9438" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.0.9-1.2.0.EL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10283" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.0-1.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10958" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.1-2.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10993" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.3.1-2.el5_2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10604" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.1-2.el3</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2490" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
      <gexec operation="equals" datatype="boolean">true</gexec>
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2489" version="1" operator="OR" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
      <gexec operation="equals" datatype="boolean">true</gexec>
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10889" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.22-7.el5_4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11400" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.6-5.el4_8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11052" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.3-7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11423" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.4.6-11.el4_8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11106" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.1.2-46.el5_4.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10878" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.1.2-44.EL4_8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11300" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.2.3-60</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9455" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.10.1-2.4E.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10085" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.10.1-1.30E.1</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2268" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:986" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:985" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2004.10.25.0</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9418" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.1.15-10</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9246" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.6-7.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9978" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.6-7.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9874" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.0.7.1-12</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10052" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.5.6-15</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9700" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.1.2-11.EL4.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9358" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.0.9-2.30E.19</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11456" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.39.1-1.el5_5.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11306" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.39.1-1.el4_8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10066" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.6b-16.43</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10296" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7a-33.18</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10147" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.6b-22.43</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10257" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7a-43.11</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10693" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.1-3.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9344" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.16-0.30E.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10012" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:10.25-2.EL4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9788" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:9.24-11.30.2</evr>
    </rpminfo_state>
    <patch_state id="oval:org.mitre.oval:ste:3645" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">14</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9476" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5.10-6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10561" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.91.5-22.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10081" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.9.0.1-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10948" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.1-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10475" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.12-18.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11026" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.16.0-20.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11040" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-0.21.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11089" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.7.2-3.el5_3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10881" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.6.2-2.el4_7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11182" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.3.4-62.el4_8.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11163" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.1-36.el5_5.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11484" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.7-72</evr>
    </rpminfo_state>
    <uname_state id="oval:org.mitre.oval:ste:3700" version="1" comment="os release is 5.8" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <os_release>5.8</os_release>
    </uname_state>
    <patch_state id="oval:org.mitre.oval:ste:3724" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3291" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10780" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.16-10.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10800" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.26-2.1.2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10625" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5.10-8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10861" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-60.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11333" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-89.0.9.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10657" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-128.7.1.el5</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:1342" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:991" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.7021</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10282" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.52-32.3.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10471" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.46-68.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10357" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.46-68.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10472" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.52-32.3.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9789" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:2.5.STABLE6-3.4E.12</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9834" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:2.5.STABLE3-6.3E.16</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10587" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.9-1.3E.14.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10399" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.25b-1.el4_6.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10298" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.25b-1.el5_1.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10161" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.3.1-9</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10935" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.0-3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10645" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.1-6</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:994" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">9.1.9800.9</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:993" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="not equal" datatype="int">4</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11194" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.17-13.3.58</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11486" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.0.9-42.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10020" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.6.1p2-33.30.6</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2234" version="1" operator="OR" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
      <gexec operation="equals" datatype="boolean">true</gexec>
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10270" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.8-2.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10334" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.8-2.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11515" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">3:5.8.5-53.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11559" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:5.8.0-101.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10002" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">20:9.2.4-24.EL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10242" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">30:9.3.3-8.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9832" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">20:9.2.4-20.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9859" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.3-6.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9232" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.5-3.2.RHEL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9939" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.3.4-14.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9370" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.9-10.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9330" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.43-1.RHEL4.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10702" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">3:3.2.0b6-9.0.1.el5_1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10663" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">3:3.2.0b6-4.el4_6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9948" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.1.2-1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10370" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:8.13.1-3.2.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10405" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:9.0.48.0-1.el3.with.oss</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10175" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:9.0.48.0-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10444" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:9.0.48.0-1.el4</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1004" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">6.5.3790.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1003" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.5.3790.2519</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1002" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.3.1.889</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1001" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^4\.[0]*9\..*$</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10910" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.6.1-12.el4_7.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10684" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.5.7-31.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10965" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.8.2-7.el5_2.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11527" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.6-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11243" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.6-1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9667" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.11.2-14</evr>
    </rpminfo_state>
    <uname_state id="oval:org.mitre.oval:ste:2354" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <os_release>B.11.11</os_release>
    </uname_state>
    <swlist_state id="oval:org.mitre.oval:ste:1005" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux">
      <version operation="pattern match">B\.11\.00\.(00.*|01\.00[0-3])</version>
    </swlist_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11337" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.2-4.el5_3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11282" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.4-3.el4_8.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10469" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">4:4.1-70.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9777" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.1-19.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10440" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">4:4.1-47.EL4</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2402" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Service Pack 4</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1006" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.50.4956.500</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10500" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:4.18-5.rhel4.14</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10193" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:4.10-21.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10718" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:5.0.1-0.rc2.55.el5.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10537" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:5.0.1-0.rc2.55.el4_6.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9751" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7a-33.17</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9774" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.6b-22.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9946" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.6b-16.22.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9982" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7a-43.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9612" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.46-46.2.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10011" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.52-12.1.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9876" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.52-12.1.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9599" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.46-46.2.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11087" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.8.1-7.el4_8.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11364" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.8.5-5.el5_3.7</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2440" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Microsoft ISA Server 2000 Updates</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2439" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">3.0.1200.430</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2438" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>KB899753</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10256" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.8-4.0.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10435" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.8-4.0.1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9696" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.8-6.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10105" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:3.3.1-3.9</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10280" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.3.18-1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10018" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.4.16-1.RHEL4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10043" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.4-5.4.17.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10594" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7-5.el5_4.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11417" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-89.0.26.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10284" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.0-5.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9594" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-32.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9892" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.0.69-1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10179" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.0.69-1.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11326" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.52-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10717" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.1.62-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9870" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.1.2-1.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11039" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.12.3-4.el5_3.1</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2266" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2800.1515</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2265" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2800.1516</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1010" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <patch_state id="oval:org.mitre.oval:ste:2806" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">19</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:20118" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.4.1-4.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10634" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.7.2-4.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10682" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.2-1.1.0.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11557" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.1.34-12.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10976" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-194.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1012" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:0.17-20.EL3.3</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1011" version="1" operator="OR" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
      <gexec operation="equals" datatype="boolean">true</gexec>
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9680" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.46-40.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9486" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.46-40.ent</evr>
    </rpminfo_state>
    <patch_state id="oval:org.mitre.oval:ste:3838" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">11</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3860" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:3725" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">12</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11206" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.1-6.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9172" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.2-1.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10655" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5.STABLE3-9.3E</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10696" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5.STABLE14-1.4E.el4_6.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10906" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.STABLE6-5.el5_1.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9735" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:0.17-31.EL4.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9849" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:0.17-26.EL3.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10000" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:0.22.0-17.el4.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9932" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:0.22.0-13.el3.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10622" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.7-3.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10205" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-0.36.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10220" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-40.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11111" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.9.0.7-3.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11222" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.6-5.11.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10568" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.2-42.2.0.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10806" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.5-10.6.0.5.EL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9706" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.3.8-2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10626" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-53.1.13.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10177" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.10-1.4E.6.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10126" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.9-1.3E.10</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9542" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:2.5.STABLE3-5.3E</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9558" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.1-17</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10151" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.6-6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10960" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.3.0-6.5.2.el5_2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9949" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.7p5-30.1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9265" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.7p5-1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9177" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:2.1.5-4.2.RHEL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9500" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.3.2-95.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10120" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-34.0.2.EL</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2622" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2586" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2800.1458</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10987" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:83-105.el5_4.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10340" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.1-19.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11062" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.52-41.ent.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11006" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.46-71.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10570" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.3-11.el5_2.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9525" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.4-4.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9744" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2002d-11</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9702" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:6.3.046-0.40E.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9933" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:6.3.046-0.30E.4</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1017" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.5.6749.0</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9969" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.2-24.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9579" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.9-3.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9926" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.2.1-4.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9913" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.2.1-4.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9678" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.1.3-6.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9572" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.1.3-5.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11259" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3p2-36.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11401" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.3.4-62.el4_8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11452" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.7-71</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11413" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.1-36.el5_4.1</evr>
    </rpminfo_state>
    <patch_state id="oval:org.mitre.oval:ste:1020" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:1019" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:1018" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10264" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.1.4-6.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10391" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.1.9-5.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10030" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.1-17.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9524" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:2.5.STABLE3-6.3E.8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9815" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:2.5.STABLE6-3.4E.5</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1022" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.426</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1021" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.426</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10178" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.5-6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10245" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:5.3.1-19.el5_1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10660" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.0.9-2.30E.23</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9952" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.1.2-11.el4_6.11.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9794" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.98.38-3.EL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9796" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.98.35-3.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10210" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:8.13.1-3.RHEL4.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10061" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:8.12.11-4.RHEL3.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10424" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.51-9.EL4.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9263" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.50-35.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10051" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.4-3.el5_1</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2519" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1023" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.359</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11495" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.0-6.20091205snap.el5_5.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1024" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.2.5-6.el4.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11123" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.2.2p1-9.el5_3.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11108" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.2.0.a.20040617-8.el4_7.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9825" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.6-8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10109" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.1-19</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10609" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.8.2-7.7.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10913" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.5.4-4.4.el5_1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10515" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:3.00-16.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10770" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.3.1-9.el4_6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11077" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.1.2-6.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11202" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.2.0.a.20040617-8.el4_8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11242" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.2.2p1-9.el5_4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9716" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:0.94-5.7.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9681" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.2.5-0.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11059" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.3.7-11.el5_4.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10314" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.2-3.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10956" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.07-33.2.el4_7.8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10886" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.05-32.1.20</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9809" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.0.4-1.1.EL4.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10088" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.8.5-18.2.el4_7.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10734" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.8.5-28.1.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10721" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.8.5-11.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2751" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.4.1.3-5.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11455" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.28-5.4E.el4_8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11024" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.33-9.4.el5_4.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9941" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.31.30.EL-1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10049" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.93.24.EL-1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9739" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-34.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11004" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.3-64.el5_2.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10828" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.1-20.el5_2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11011" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-78.0.22.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11424" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.3.7-11.el5_4.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9323" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.3-5</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2887" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2730" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6802</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2610" version="2" comment="Regex that matches Service Pack 5 or later" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^[Ss][Ee][Rr][Vv][Ii][Cc][Ee] [Pp][Aa][Cc][Kk] ([5-9]|([1-9][0-9]+))$</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11551" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.3.43-12.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9860" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.28-4.4E.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9158" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.8.4-12.3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9561" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.5.7-20.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11334" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-0.41.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1028" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-32.0.1.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1027" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-32.0.1.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1026" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-32.0.1.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9829" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:9.24-11.30.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10260" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:3.1.2-17.RHEL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9643" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:3.3.3-13.RHEL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9670" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:3.3.6-23.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10467" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.1-2.RHEL3.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10055" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.3-1.2.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10521" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.1-3.RHEL4.5</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2570" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>CoPNGFilter Class</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1030" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2900.2668</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10195" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.02-10.RHEL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10518" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.8.2-7.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10459" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.2.4-11.5.3.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10235" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:3.5.4-2.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10546" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:3.00-12.RHEL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10138" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.17-13.3.45</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10496" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.22-0.rc1.9.20.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9691" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.7-67.10</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10571" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:3.3.1-4.RHEL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10347" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0-33.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10318" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.2-22.0.1.EL4.8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10145" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.5.4-4.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10005" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">14:2.1a13-10.RHEL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9979" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">14:0.8.3-10.RHEL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10029" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">14:3.8.2-10.RHEL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10898" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-92.1.22.el5</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2569" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>x86</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1032" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.1.0.9231</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1031" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9728" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:1.2.4-3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9695" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-9.0.1.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11232" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:83-164.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9726" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.0.7.1-16</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9521" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.5.6-20</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9471" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.8-9.EL3.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9585" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.46-38.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9657" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.46-38.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9960" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.5-3.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9990" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.77-66.23</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10308" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.99.6.2-3.26.el5</evr>
    </rpminfo_state>
    <uname_state id="oval:org.mitre.oval:ste:3073" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <machine_class operation="pattern match">\d+/8\d+</machine_class>
    </uname_state>
    <uname_state id="oval:org.mitre.oval:ste:3773" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <machine_class operation="pattern match">\d+/7\d+</machine_class>
    </uname_state>
    <uname_state id="oval:org.mitre.oval:ste:3271" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <os_release>B.11.04</os_release>
    </uname_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9570" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">3:2.1.5-33.rhel4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9773" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">3:2.1.5-25.rhel3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9897" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.17-13.3.27</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9184" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.02-9.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10134" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.1-10.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9886" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">4:4.1-36.EL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9873" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.8.1-7.EL4.3</evr>
    </rpminfo_state>
    <patch_state id="oval:org.mitre.oval:ste:1036" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:1035" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:1034" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">07</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:1033" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">07</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11488" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.10.2-0.30E.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11469" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.10.2-1.el4_8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11494" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.11.4-2.el5_4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10591" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5a08-5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9972" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5a75-2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10458" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5a25-8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10943" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.3-22.el5_3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9600" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.2.1-16.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9139" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.2.1-22.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11280" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.4-5.7.0.6.1.el4_8.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11355" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:3.1.1-19.5.el5_5.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10957" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:83-105.el5_4.13</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10101" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.2-34.6.0.EL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10058" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.2-34.2.0.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9964" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.3.1-3.10</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10777" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-43.el4_8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11161" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-0.38.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11281" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.14-1.el5_3.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11462" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">4:5.8.8-32.el5_5.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9981" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:8.13.1-3.RHEL4.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9995" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:8.12.11-4.RHEL3.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10354" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.5.0.4-1jpp.3.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10084" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.2.8-1jpp.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10377" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.2.8-1jpp.1.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10263" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.5.0.4-1jpp.3.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10431" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.2.8-1jpp.1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9655" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.3.0.0-1.63</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9666" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.3.0.0-1.62</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11478" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.2-2.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11131" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.2-2.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2491" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.3.3-12.rhel3</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1037" version="1" operator="OR" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
      <gexec operation="equals" datatype="boolean">true</gexec>
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9928" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:9.0.124.0-1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10901" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:9.0.124.0-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10869" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:9.0.124.0-1.el3.with.oss</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10547" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.0.22-2.1.0.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9638" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.1.20-2.RHEL4.1.0.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9495" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.1.3-5.8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:8953" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.1.3-6.9</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10344" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.12.1-11.1.el4_7.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11124" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.15.5-2.1.el5_3.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10773" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.10.6-9.rhel3</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2565" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>x64</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1039" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.121</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9469" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.1-3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10346" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.96.2-12.3E</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10343" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.98.6-2.1.0.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10249" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.98.3-2.4.0.1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9743" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.14i-10.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10494" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.4-11.5.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10278" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.22-0.rc1.9.18</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9760" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.17-13.3.42</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11292" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.5.4-4.4.el5_4.11</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10964" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.3.7-11.el5_4.3</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:1041" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^4\.[0]*9\.[0]+\.[0]*900</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1040" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^4\.[0]*9\.[0]+\.[0]*901</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10849" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-67.0.22.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:8734" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.7-3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10769" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.5.12-5.1.0.2.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10398" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.6.13-4.0.2.el5_1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9813" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:378-12</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9445" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10.3-0.30E.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11483" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.8.3-6.el4_8.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11384" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.11.1-15</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11317" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0-3.el4_8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11229" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.8.4-4.el5_4.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10039" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.0.6-0.EL4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10474" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-7.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9814" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-7.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10730" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-0.7.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10758" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-7.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10514" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-0.8.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10128" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.10-3.0.2.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10247" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.17-9.0.1.el5</evr>
    </rpminfo_state>
    <patch_state id="oval:org.mitre.oval:ste:2927" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">16</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10977" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.8.2-7.7.2.el4_8.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11387" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:3.00-23.el4_8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11516" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:3.3.1-17.el4_8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10939" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.1.3-7.1.el5_3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9879" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.1.0-15.el3.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9847" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.1.3-1.el4.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11354" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.0-3.el4_8.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10820" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.0-12.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11097" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.2-3.el5_4.4</evr>
    </rpminfo_state>
    <process_state id="oval:org.mitre.oval:ste:2934" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <user_id datatype="int">0</user_id>
    </process_state>
    <inetd_state id="oval:org.mitre.oval:ste:2908" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <server_program operation="equals" datatype="string">/usr/dt/bin/rpc.ttdbserverd</server_program>
    </inetd_state>
    <patch_state id="oval:org.mitre.oval:ste:1043" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10092" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.2-6.3.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10007" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.99_09-12.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10460" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.99_16-4.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9405" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.1-10</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10919" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-11.el5_1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10539" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-14.el5_1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10870" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-10.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10753" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-0.14.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10795" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-15.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10739" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-0.16.el3</evr>
    </rpminfo_state>
    <uname_state id="oval:org.mitre.oval:ste:2355" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <machine_class operation="pattern match">\d+/7\d+</machine_class>
    </uname_state>
    <uname_state id="oval:org.mitre.oval:ste:2353" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <machine_class operation="pattern match">\d+/8\d+</machine_class>
    </uname_state>
    <uname_state id="oval:org.mitre.oval:ste:2351" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <os_release>B.11.23</os_release>
    </uname_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9697" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:9.24-11.30.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10781" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:10.25-2.EL4.6.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10477" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:9.24-11.30.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10582" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-92.1.10.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9845" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.22-12.EL.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10305" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.14-12.RHEL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10204" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.13.25-15.RHEL3</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:1324" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals">5.50.4134.0100</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1323" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals">5.50.4134.0600</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1322" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals">5.50.4522.1800</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1319" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1045" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.50.4616.200</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1044" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.50.4701.2400</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11267" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.2.8.3-5.8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11155" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.2.8.4-10.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11210" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:83-105.el5_4.22</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:1047" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^4\.[0]*8\..*$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1046" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10234" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.2-7.0.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10708" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.12.1.1-3.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10560" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.12-20.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10628" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.16.0-22.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10157" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.12.1.1-3.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10762" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.9.0.4-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11035" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.4-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11359" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.0.77-4.el5_4.2</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2926" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>5.50.4807.2300</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1312" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.50.4926.2500</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9587" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.7-1.3E.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10549" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.20-4.el4_6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10658" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.1-3.el5_1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:8777" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:2.5.STABLE3-6.3E.2</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1363" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.132</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1358" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="binary">1</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10662" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.10.1-7.0.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9417" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.0.3-1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10276" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:095-14.20.el5_3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11078" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.14-1.el5_2.1</evr>
    </rpminfo_state>
    <uname_state id="oval:org.mitre.oval:ste:3597" version="1" comment="os release is 5.10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <os_release>5.10</os_release>
    </uname_state>
    <patch_state id="oval:org.mitre.oval:ste:3275" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:8775" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-15.0.4.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9224" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.3-1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10218" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:2.5.STABLE14-1.4E.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10321" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:2.6.STABLE6-5.el5_1.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10423" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:2.5.STABLE3-8.3E</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9395" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.0-15.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9153" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.7-11.30E.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9614" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-9.EL</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:1051" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^6\..*</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1050" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.3790.449</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1049" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1048" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10639" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7a-43.17.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10080" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7a-33.24</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9810" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.4-1.el4</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2753" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6685</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2752" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9672" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.1-34.RHEL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9540" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.1-34.RHEL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11013" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:6.3.046-0.30E.11</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10759" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:6.3.046-1.el4_7.5z</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10281" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.5-0.1.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9877" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.5-0.1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10252" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10-0.4.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9317" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.8.1-23</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2370" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Mozilla (\([0-1]\.[0-7]\)|\([0-1]\.[0-7]\.[0-9]\)|\(1\.7\.10\))</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2369" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">([0-1]\.[0-7]($|\s).*|[0-1]\.[0-7]\.[0-8]($|\s).*|1\.7\.10($|\s).*)</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2368" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">(0\.[0-9].*|1\.0($|\s).*|1\.0\.[1-6]($|\s).*)</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2367" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Mozilla Firefox (\(0\.[0-9].*\)|\(1\.0\)|\(1\.0\.[0-6]\))</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9875" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5-7.EL4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9057" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5-3e.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10569" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.16.0-31.0.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9891" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.2-16.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9783" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.5-16</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2671" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1368" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>5,50,4807,1700</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1052" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.50.4952.2800</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10771" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">20:9.2.4-30.el4_7.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11050" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">20:9.2.4-23.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11116" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">30:9.3.4-6.0.3.P1.el5_2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9462" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">3:3.2.0b6-3.40.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11068" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.5.3-12.el5_2.9</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10328" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.8.7-3.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10155" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.5-10.6.0.EL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9458" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.2-38.2.0.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1053" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.3.10-1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10748" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-128.1.10.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10955" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-89.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10695" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.17-13.3.51</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10686" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.22-0.rc1.9.20.2.el4_6.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11042" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.9p17-3.el5_3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10096" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.12.1-8.rhel4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10024" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:039-10.10.EL4.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10121" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:3.3.1-3.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10038" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:3.00-11.12</evr>
    </rpminfo_state>
    <uname_state id="oval:org.mitre.oval:ste:3443" version="1" comment="processor type is ix86" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <processor_type operation="pattern match">^i.*86</processor_type>
    </uname_state>
    <patch_state id="oval:org.mitre.oval:ste:3949" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">06</version>
    </patch_state>
    <uname_state id="oval:org.mitre.oval:ste:3478" version="1" comment="processor type is SPARC" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <processor_type operation="pattern match">[Ss][Pp][Aa][Rr][Cc]</processor_type>
    </uname_state>
    <uname_state id="oval:org.mitre.oval:ste:3891" version="1" comment="os release is 5.9" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <os_release>5.9</os_release>
    </uname_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10579" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.5.6-28</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9868" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.0.7.1-17.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10599" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.2.8.0-4.el5_1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10534" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.9-3.22.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9634" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">37:1.4.2-3.0.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9989" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.11.2-28</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9541" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.11.17-8.RHEL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11396" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-54.el4_8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11475" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-0.52.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9840" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.5.12-5.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9385" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.7-67.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9300" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:3.3.1-3.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9730" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.02-9.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9778" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.8.2-4.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9400" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.2-22.EL4.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9831" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:3.00-11.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11122" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:0.7.0-4.el5_3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11118" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.3.1-5.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11081" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.17-2.el5_2.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10761" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.11-1.el4_7.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10237" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">5:1.4.1-3.5.rhel3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10211" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">5:1.4.1-11.rhel4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10926" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.6-5.11.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11312" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">30:9.3.6-4.P1.el5_4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10703" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:5.3.1-24.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10845" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.0.9-2.30E.24</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10827" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.1.2-11.el4_6.11.3</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1055" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">6.0.6603.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1054" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.6617.47</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9837" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.8.1-7.EL4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9342" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.11.2-18</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11432" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.9p17-6.el5_4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10664" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.16.1-8.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10697" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.5-4.el4_6.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9756" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.6-2.el5_1.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2235" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.2-11.EL3.4</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1056" version="1" operator="OR" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
      <gexec operation="equals" datatype="boolean">true</gexec>
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11046" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.9p1-11.el4_7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10741" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3p2-26.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9676" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.1-28.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9214" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.1-24.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10203" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:4.0.3-29.RHEL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10236" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:4.0.3-61.RHEL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10485" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.7.11-4.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10413" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.3-6.8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10529" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.3.4-14.4.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10456" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.0.2-4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10013" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.8.2-1.EL.19</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10251" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.2.9-1jpp.1.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10028" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.2.9-1jpp.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10415" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.2.9-1jpp.1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11228" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.115-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10388" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10.9-1.el5_3.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10829" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-78.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10223" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.3-6.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9713" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.3.4-14.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10784" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-53.1.14.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11031" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.5-10.6.0.7.EL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10674" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.2-43.2.0.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11041" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.4-5.7.0.6.0</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10700" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.3.0-6.5.4.el5_2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10123" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:1.2.7-1.el4.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10445" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.20-4.el4_8.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11335" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.1-3.el5_3.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11470" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-52.el4_8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11310" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-0.50.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:8839" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.9.13-13.4</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1062" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.636.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1061" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.636.0</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10836" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.5-2E.3.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11141" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.8.2-8.7.el4_7.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11437" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.8e-12.el5_4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9637" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.3.2-95.33</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11524" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.10.6-11.rhel3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11357" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.15.5-9.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11449" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.12.1-11.1.el4_8.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11239" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:3.0.1-10.2_EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11146" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:3.0.1-65.el4_8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10911" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-12.el5_1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10724" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-0.15.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10896" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-11.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10681" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-15.el5_1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10453" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-16.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10851" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-0.17.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11322" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.7.4-1.el5_3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11324" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.7.4-1.el4_8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10876" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.12.3.99.3-1.el5_3.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10945" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.12.3.99.3-1.el4_8.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10757" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.0.18-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10882" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-17.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10651" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-28.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10706" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-0.25.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10752" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.1.30-8.el4_6.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10182" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.3.27_2.2.29-8.el5_1.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10688" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.13-8.el4_6.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10566" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.3.27-8.el5_1.3</evr>
    </rpminfo_state>
    <patch_state id="oval:org.mitre.oval:ste:1070" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:1069" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9940" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.8.5-5.el5_1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9731" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.0.7-4.EL3.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9652" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-9.0.3.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2476" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">37:1.7.10-1.4.1</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:2475" version="1" operator="OR" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
      <gexec operation="equals" datatype="boolean">true</gexec>
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10288" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.1.20-2.RHEL4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11564" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2-35.4.el5_5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11103" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.5-10.6.0.7.EL4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11330" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.4-5.7.0.6.0.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10915" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.2-44.2.0.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11033" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.3.0-6.11.el5_4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9945" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.2.1-6.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9712" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.2.1-6.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10127" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.12a-16.EL4.12</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10125" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.11y-31.11</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9703" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:2.5.STABLE3-6.3E</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10922" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-58.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10623" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-92.1.6.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10743" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-67.0.20.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10451" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.8.0-1.0.2</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1071" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2001.12.4414.53</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10654" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-53.1.6.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10670" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-67.0.4.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10592" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.4-4.1.1.el5_2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10846" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.1-33.el4_7.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10969" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.1-24.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10333" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.1.6-12.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9722" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.17-13.3.16</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9824" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:207-17</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10006" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.27-20</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10821" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.8.0-40.el5_1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10412" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.2-35.0.4.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10782" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.8.0-53.el4_6.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10016" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.2-11.EL3.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9959" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.2-13.EL4.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2754" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.2-5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10996" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-19.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10319" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.0.21-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10527" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-35.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10961" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-0.32.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11481" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.18-1.el5_4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11289" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.18-1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11088" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.9.0.18-1.el5_4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9514" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.13-6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10652" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.7-70</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11181" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.3.4-60.el4_7.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9720" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.7-4.1.el5_0.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10691" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.3.7-2.el5_3.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11100" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.12-10.el4_8.1</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1077" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.2956</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10815" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.2-39.el5_2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10904" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.2-33.30E.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10890" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.2-36.el4_7.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9727" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.2-6.3E</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9866" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.12-3.RHEL4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10230" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.1.4-4.0.rhel3.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10287" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.0-111.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9787" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.1.9-1.rhel4.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10190" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.8.2-1.EL.13.37</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9821" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-32.0.1.EL</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:710" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.1.0.12512</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:12296" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="greater than or equal">5.5.0.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1078" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.6.0.8831</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9880" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:1.806-97.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10631" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">3:5.8.5-36.el4_5.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10614" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:2.89-97.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10646" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:1.61-97.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10567" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">4:5.8.8-10.el5_0.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10637" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:5.8.0-97.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11373" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.8-16.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11468" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.8-5.el4_8.8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11096" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.8-5.el5_4.10</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10620" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.99.6-EL4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10619" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.99.6-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10647" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.3.27_2.2.29-8.el5_2.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10523" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.13-8.el4_6.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9999" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.1.30-8.el4_6.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10419" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.3.27-8.el5_2.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10299" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10-0.6.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10240" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.9-0.1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10336" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.7-0.1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9994" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.7-0.1.el3</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1079" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2001.12.4720.130</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10698" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.99.7-EL3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10642" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.4.5-3.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10115" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.17-9.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10116" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.10-3.EL4.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9611" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">3:2.1.5-31.rhel4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9684" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">3:2.1.5-24.rhel3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10324" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.2.0.742-0.6.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9902" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.96.2-11.3E</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10031" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.98.3-2.4E</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1095" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.0-15.EL</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1094" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1093" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1092" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1091" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1090" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1089" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1088" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1087" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1086" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1085" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1084" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1083" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1082" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1081" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec operation="equals" datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1080" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9363" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">5:1.4.1-3.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11241" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.8-1.el4_8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11277" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.8-1.el5_3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11268" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.8-EL3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10060" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:3.1.3-3.10</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10113" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.6.1-12</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10047" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.5.7-25.el3.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10583" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.6-93.EL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10807" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.0.9-35z.el5_2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11485" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-89.0.11.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9313" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.8-5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10231" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.3.4-49</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10317" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5-26</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10437" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.7-66</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1260" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6898</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1099" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.7069</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10814" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.3-64.el5_2.9</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10306" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:253-12.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10632" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:253-5.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10023" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.6b-22.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9056" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7a-43.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10008" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7a-33.15</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9454" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.6b-16.22.3</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1100" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.2.3511.0</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9545" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.2-11.1.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10207" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.3.15-2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9669" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.4.13-2.RHEL4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9863" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.1.3-5.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9838" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.3-5.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9903" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10.14-1.EL3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10068" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10.14-1.EL4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10040" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.13-18</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10517" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:1.2.2-28</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10238" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:1.2.10-7.1.el5_0.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10339" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:1.2.7-3.el4_5.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10613" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.16-3.el4_5.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11204" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.95.7-4.el4_8.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11253" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.95.8-8.3.el5_4.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11093" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.95.5-6.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9864" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.5.6-24</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10097" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.0.7.1-16.0.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10787" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.6-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10988" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.12.2.0-3.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10173" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.6-1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11120" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.9.0.6-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11160" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.12.2.0-4.el5</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2251" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>6.0.2900.2180</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2183" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2900.2722</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11533" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-89.0.19.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11406" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-164.10.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9434" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.46-32.ent.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9394" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.46-32.ent.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10396" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.2.4-11.14.el5_1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10300" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.17-13.3.46</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9484" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.1-7.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9780" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.1-4.ent.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9675" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">14:0.7.2-7.E3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9566" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">14:3.7.2-7.E3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10076" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">3:5.8.5-24.RHEL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10004" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-67.0.1.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10102" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-53.1.4.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10406" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.59-3.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10291" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.31-4.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10503" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-8.1.6.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9617" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.5.7-25.el3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9819" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.6.1-10</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11398" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:2.6.STABLE21-6.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11534" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.1.22-2.el4_8.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9589" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.1-36.RHEL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9389" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.1-36.RHEL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10315" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.5-3.el3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10169" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.7-5.el4.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10621" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.2.4-11.18.el5_2.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11265" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.6.5-13.el5_3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11270" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.7.2p1-7.el5_5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10544" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.8.8-10.el5_2.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10917" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:2.89-98.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10449" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:1.806-98.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10822" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">3:5.8.5-36.el4_6.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10531" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:1.61-98.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10675" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:5.8.0-98.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10363" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.5.23-0jpp.1.0.4.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10653" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.5.23-0jpp.7.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9871" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-22.0.1.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9588" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:0.22.0-6.1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10520" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.0-8.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10462" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.0-2.el4.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9947" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.2-3.el5.0</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9508" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.3a-9.EL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9835" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.3a-9.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10373" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.2.5-6.el4.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10383" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.2.0-3.el3.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9909" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.8.1-7.EL4.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10056" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.8-9.EL3.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9765" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.9-10.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10577" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.6-2.el5_0.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9737" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.5-4.el4_5.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9157" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5.7-5.3E</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2656" version="2" comment="Regex that matches Service Pack 2 or later" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^[Ss][Ee][Rr][Vv][Ii][Cc][Ee] [Pp][Aa][Cc][Kk] ([2-9]|([1-9][0-9]+))$</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1104" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.131.2600.1123</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1103" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="binary">1</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9426" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.23.58-2.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11029" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.4-9.el5_4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10434" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:10.0.9-3.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10551" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:10.0.9-2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10003" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:10.0.9-0.rhel3.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10267" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.0.6-0.EL4.2.0.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9663" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">3:2.1.5.1-34.rhel4.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9956" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">3:2.1.5.1-25.rhel3.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9753" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.32-9</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9885" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.40-8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10894" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.8-8.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11138" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.8-5.el4_7.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11145" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.8-5.el5_2.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11223" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.3.5-11.el5_4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11482" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.3.3-15.rhel3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11379" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.3.3-18.el4_8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10726" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.07-33.2.el4_7.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11166" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:8.15.2-9.4.el5_3.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11129" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.05-32.1.17</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10466" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">5:1.4.1-5.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10402" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">5:1.4.1-12.0.3.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10427" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">5:1.4.2.2-3.0.2.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9827" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.20-3.2.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11403" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:0.7.0-9.el5_4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11258" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.45-1.1.el5_3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10048" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.2-26.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9528" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.9-3.9</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10241" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.1.3-5.11</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11212" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.02-17.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11394" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.8.2-7.7.2.el4_8.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11278" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:3.3.1-15.el4_8.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11450" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:3.5.4-15.el5_4.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11329" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:3.00-22.el4_8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11234" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.22-0.rc1.9.32.el4_8.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10530" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.17-13.3.62</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9937" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.2-16</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11121" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.15-1.2.2.el5_2.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10586" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.8.1-7.EL4.8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11438" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.3.6-1.1.el5_3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11439" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.2.5-6.0.1.el4_8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11224" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.2.0-3.el3.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:8698" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:3.1.6-7.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9983" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.2.3-11.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10107" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.52-38.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10194" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.3-11.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10143" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.52-38.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10542" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.8-12.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10933" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.8.5-5.el5_2.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10952" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.8.1-7.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10492" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.2-1.0.2.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10420" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.0-120.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10208" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.8.2-1.EL.13.37.7</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:1111" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^([1-5]\.[0-9].*|6\.(0.*|1|1\.([0-9]($|\..*)|[0-1][0-9]($|\..*)|20($|\..*)|21($|\..*))))$</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9762" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.2-19.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9341" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.9-3.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11520" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:8.4.4-1.el5_5.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11249" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.4.29-1.el4_8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11552" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:8.1.21-1.el5_5.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11594" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.3.21-3</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2828" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1112" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.3649</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9971" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.1.20-3.RHEL4.1.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10401" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.0.22-2.2.el5_1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10705" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.6-5.11.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9169" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:0.22.0-11.3.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9294" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.4-8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9754" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.8.17-9.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9419" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5.10-7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10153" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.6.5-8.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10443" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-51.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9781" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.3a-11.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9967" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.3a-12.EL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10295" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1-8jpp.1.0.2.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10368" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.5.23-0jpp.1.0.3.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9520" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.1.3-3.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9823" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.7-38</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10393" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.1-20</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9988" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.6-9</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10213" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.5-13</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10124" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-40.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10905" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-53.1.21.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10229" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.99.2-EL3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9894" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.99.2-EL4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10141" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.8.2-1.EL.13.37.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9898" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.0-115.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1341" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7a-20.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1340" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7a-20.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1339" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7a-20.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1338" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.6-25.9</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1337" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.6b-15</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9633" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:2.5.STABLE3-6.3E.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10327" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.7-0.1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10133" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.3-25.0.3.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11144" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2002d-15</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9152" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10.9-1.EL3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9749" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10.9-1.EL4.1</evr>
    </rpminfo_state>
    <patch_state id="oval:org.mitre.oval:ste:1114" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">18</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:1113" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">15</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11248" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.1-3.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11225" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5.5-2.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10835" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5.5-3.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9791" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:2.89-90.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9901" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:1.806-90.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10140" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:5.8.0-90.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9931" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:1.61-90.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9842" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">3:5.8.5-16.RHEL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9679" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.5.6-7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10719" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.5-22.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10776" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.2-35.0.4.el4_6.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10912" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-128.1.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10273" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.99.5-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10436" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.99.5-EL3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10382" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.99.5-EL4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9717" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.6-33EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10470" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.3.0.0-1.138.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10313" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.3.0.0-1.143.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10202" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.9p1-8.RHEL4.17</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10168" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.6.1p2-33.30.12</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9490" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.4-6.3E</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11090" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.19-1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11547" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.19-1.el5_5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11179" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.9.0.19-1.el5_5</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1115" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">1.0.0.4</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10407" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.7-2.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9922" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.3.1-0.el3.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9986" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.3.1-0.el4.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10788" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.4-2.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10750" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.5-3.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10425" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5-13.RHEL4</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:1118" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Service Pack [0-4]$</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1117" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.7059</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1116" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10188" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.3.3-7.el4_7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11044" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.6.5-9.el5_2.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10981" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.2.5-0.7.rhel3.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10830" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.10-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11159" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.10-1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11269" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.9.0.10-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11285" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.8-5.el4_8.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10979" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.8-13.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10813" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.8-5.el5_3.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10825" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.15-3.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11405" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.9.0.15-3.el5_4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11344" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.15-3.el5_4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10498" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.7.6-1.el5_4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11313" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.7.6-1.el4_8</evr>
    </rpminfo_state>
    <patch_state id="oval:org.mitre.oval:ste:1124" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">94</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:1123" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">52</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:1122" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">08</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:1121" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">83</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:1120" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">41</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:1119" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">08</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9692" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-27.0.1.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10556" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.2-28.el5_0.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10359" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.0-7.el4_5.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11296" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.33-3.15.el5_4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11350" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.33-0.18.el4_8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9673" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.1.3-6.10</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9792" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.3.1-3.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10575" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.8.2-1.EL.31</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9626" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:192-8.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10450" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:1.15.1-23.0.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10335" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.14-12.5.1.RHEL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1125" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.11.2-18</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9178" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.6-5.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9826" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.6-5.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10196" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:226-17</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10676" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.5.23-0jpp.3.0.3.el5_1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11382" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">20:9.2.4-25.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10941" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">30:9.3.4-10.P1.el5_3.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11140" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">20:9.2.4-30.el4_8.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9624" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.55-3.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9865" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.1.30-9.RHEL3.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9752" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.3-9.RHEL4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9906" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.1.30-11.RHEL4.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9388" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.3-5.RHEL3.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9916" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.0-81.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9685" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.8.1.1-1.EL.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9895" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.8.2-1.EL.13.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10104" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-22.0.2.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9747" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.14i-10.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10593" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.6-2.el5_1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10595" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.5-4.el4_5.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9729" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.0-55.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9858" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:2.81-89.10</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9531" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">3:5.8.5-12.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9861" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">3:5.8.5-12.1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9032" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:1.804-89.10</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9701" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:5.8.0-89.10</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9869" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:1.61-89.10</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:117" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.20.9841.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:48" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.3890.0</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10409" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.32-15.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10429" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.39-10.el5_1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10804" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.35-12.11.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9406" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.22-0.rc1.9.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:8893" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.17-13.3.22</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11186" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-164.2.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11304" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-164.9.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11286" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-89.0.15.EL</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:1257" version="1" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="binary">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1130" version="1" deprecated="true" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.81.9001.40</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1129" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.81.9041.40</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1128" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^2\.7.*</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9554" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-47.0.1.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10573" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-1jpp.2.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9564" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.46-44.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:8994" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.46-44.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10768" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-92.1.18.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2327" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version operation="pattern match">^.*3.S</version>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1132" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.2.0-3.el3.1</evr>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1131" version="1" operator="OR" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec operation="equals" datatype="boolean">true</uexec>
      <gexec operation="equals" datatype="boolean">true</gexec>
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9376" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">37:1.4.3-3.0.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10266" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.2-39.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10187" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.9-3.22.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10062" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.1.6-7.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11139" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.7-7.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10751" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.1-48.26.el5_1.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10046" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.1.30-4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9919" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:226-10</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9767" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.13-4</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2284" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^SeaMonkey \(1\.0[ab]\)</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2283" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^1\.0[ab].*</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1138" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Mozilla Firefox (\(0\.[0-9].*\)|\(1\.0\)|\(1\.0\.[0-7]\))</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1137" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">(0\.[0-9].*|1\.0($|\s).*|1\.0\.[1-7]($|\s).*)</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1136" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Mozilla Thunderbird (\(0\.[0-9]\)|\(1\.0\)|\(1\.0\.[0-7]\))</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1135" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^[0-1]\.0($|\s).*|^[0-1]\.0\.[0-7]($|\s).*</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1134" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">([0-1]\.[0-7]($|\s).*|[0-1]\.[0-7]\.[0-8]($|\s).*|1\.7\.1[0-2]($|\s).*)</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1133" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Mozilla (\([0-1]\.[0-7]\)|\([0-1]\.[0-7]\.[0-9]\)|\(1\.7\.1[0-2]\))</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9784" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.3.1-0.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9887" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.3.1-0.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9766" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.2-2.4.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9759" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">37:1.7.12-1.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9918" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">37:1.7.12-1.1.3.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9322" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.7-1.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10980" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.22-0.rc1.9.32.el4_8.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11419" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.3.7-18.el5_5.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11467" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.17-13.3.65</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10171" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.2-43.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9682" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.1.6-15.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10597" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.9-3.22.9</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9820" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0-1.1.EL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10073" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:0.94-5.4</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:1140" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>8.5</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1139" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">0</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11510" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.3-31.el5_4.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11055" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.52-41.ent.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10320" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10-0.5.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10176" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.8-0.1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9797" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.6-0.1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10329" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.6-0.1.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10907" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.17-13.3.52</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10715" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.22-0.rc1.9.20.2.el4_6.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9817" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.6-5.RHEL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9803" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.1.9-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10310" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.1.9-1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10110" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.5.6-18</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10009" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.0.7.1-14</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10199" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.52-28.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10103" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.46-61.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10248" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.46-61.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10117" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.52-28.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9998" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.2.6-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11214" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.14-1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11191" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.7.5-1.el5_4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11336" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.14-1.el5_4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10576" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.7.5-1.el4_8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11386" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.9.0.14-1.el5_4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11466" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-48.el4_8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10490" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-0.45.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10350" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.33-9.4.el5_1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10794" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.28-5.4E.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9291" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.43-1.RHEL4.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9708" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.5.4-15.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10360" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.3.1-6.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9653" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.7-1.3E</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10358" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-8.1.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11434" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-164.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10785" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.14-1jpp.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10775" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.14-1jpp.1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10714" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.5.0.6-1jpp.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10557" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.13-1jpp.1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10365" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.13-1jpp.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10584" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.5.0.6-1jpp.2.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9795" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.2-2.4.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9503" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">37:1.7.7-1.4.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10930" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.12.3-8.el5_2.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10897" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.8.0-53.el4_6.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10694" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.2-3.3.5.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10635" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.11.1-5.1.0.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10680" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.3.21-1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11502" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.5-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11540" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.5-1.el4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10791" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.99.7-1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10608" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.4.5-2.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10607" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.99.7-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10192" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.4.5-2.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9719" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:3.1.2-13.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9580" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.13-22</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10050" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.99.0-EL3.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10057" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.99.0-EL4.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10796" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-89.0.7.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9198" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-27.0.4.EL</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:1186" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1141" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.161</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11119" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.1-4.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11378" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5.9-1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10867" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5.9-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10100" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-47.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10992" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.7-1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11057" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.13-20</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10760" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.7-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10332" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:1.2.7-3.el4_7.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11117" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:1.2.10-7.1.el5_3.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10448" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.16-3.el4_7.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10994" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:1.2.2-29</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11109" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-38.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11134" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-0.34.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11156" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.9.0.7-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10432" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.3-25.0.4.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10866" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-128.1.14.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10937" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-89.0.3.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9812" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.1.20-1.RHEL4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9758" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-42.0.3.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11506" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.2-12.el5_4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9535" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.9-3.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9854" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.2-23.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11114" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10.9-1.el5_3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10233" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.8.2-1.EL.13.37.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9468" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.0-113.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9258" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.0.7.1-10</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9857" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.5.6-13</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2525" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>WinNT</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1354" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1245" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>Y</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1143" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.137</version>
      <development_class operation="not equal">srv03_qfe</development_class>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1142" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.141</version>
      <development_class>srv03_qfe</development_class>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9595" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-5.0.3.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10826" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.3.4-54.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10545" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.1-17.el5_1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9688" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.7-24</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9689" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.0-16.14.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9915" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">20:9.2.4-27.0.1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10565" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">30:9.3.3-9.0.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10201" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">20:9.2.4-21.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10356" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:2.6.STABLE6-4.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10563" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.2.16-1jpp.1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9850" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.2.10-1jpp.2.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10650" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.2.16-1jpp.1.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10683" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.2.10-1jpp.2.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9833" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.2.10-1jpp.2.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10541" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.2.16-1jpp.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9985" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.11-1jpp.2.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10302" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.5.0.5-1jpp.2.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10648" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.11-1jpp.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10323" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.5.0.5-1jpp.0.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10553" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.0.9-2.30E.27</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10325" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.8b-8.3.el5_0.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9724" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.8.2-7.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9965" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.22-0.rc1.9.9</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10078" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.17-13.3.34</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10184" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.9-3.22.15</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10671" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.1.6-23.2.el5_3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10737" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.2-51.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9428" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-15.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9446" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.3-32.1.10</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9761" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.05-32.1.10</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11305" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-63.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11101" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-78.0.13.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10491" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-128.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10144" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:2.5.1-5.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10745" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:2.6.1-2.el5_1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9930" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:3.3.1-2.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9818" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.8.2-4.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9905" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:3.00-11.8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9968" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:3.3.1-3.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9872" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.17-13.3.31</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10017" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.22-0.rc1.9.7</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2673" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals">6,0,3790,0</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1150" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.3790.137</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1149" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9690" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.3-1.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10667" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.2.16-1jpp.2.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10862" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.2.16-1jpp.2.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10559" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.14-1jpp.2.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10832" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.6.0.03-1jpp.2.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10823" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.7-1jpp.2.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10765" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.14-1jpp.2.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10707" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.7-1jpp.2.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10818" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.2.16-1jpp.4.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11037" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6-23.el5_4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11019" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.14-13.el4_8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10580" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.13.25-16.RHEL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11489" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5-6.RHEL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11498" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:1.15.1-23.0.1.el5_4.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11165" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5-16.el4_8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9976" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:2.5.STABLE3-6.3E.14</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9127" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:2.5.STABLE6-3.4E.11</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9991" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-37.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9664" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.3-0.e3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9354" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.12.1-5.rhel4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9846" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.10.6-6.rhel3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10601" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.52-38.ent.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10558" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.46-70.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11383" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-0.47.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10842" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-50.el4_8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10887" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.46-73.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10949" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.7-7.el5_3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11098" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.4-22.el4_8.1</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:1165" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^4\.07.*</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1164" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6927</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1163" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1162" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^4\.08\.00.*</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1161" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2258.410</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1160" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1159" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^4\.08\.01.*</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1158" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.1.2600.891</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1157" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1156" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^4\.08\.02.*</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1155" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3677.144</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1154" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1153" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^4\.09\.00.*</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1152" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.3.0.903</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1151" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9601" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.8-9.EL3.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11053" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.22-0.rc1.9.27.el4_7.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10512" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.17-13.3.54</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10588" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.2.4-11.18.el5_2.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10172" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.2.8.3-5.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10554" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.5.4-22.el5_3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11069" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.3.1-14.el4</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2824" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version">5.00.3502.1000</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:2572" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.3541.2700</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:2571" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9364" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.3-3.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11601" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.0.77-4.el5_5.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11444" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:8.13.8-8.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10793" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.0-7.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9393" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10.5-0.30E.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11056" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.8.5-5.el5_2.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10538" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.8.1-7.el4_7.2</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2424" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals">8.00.194</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1172" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.650.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1171" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.606.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1170" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.606.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1169" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.606.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1168" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.606.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1167" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.606.0</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1166" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">2000.80.628.0</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10564" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.2-41.2.0.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10641" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.5-10.6.0.3.EL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10303" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.4-5.4.26</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10416" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.4-5.7.0.4.0</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11581" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-89.0.23.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10212" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.2-0.1.0.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10167" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:7.0.109-4.el5_2.4z</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10122" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.3.1-9.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10351" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.5.4-13.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9651" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.3.3-15.rhel4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9746" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.3.3-12.rhel3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10216" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.9-3.22</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10132" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.2-37.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10533" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5-29</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11230" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.11-4.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10297" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.11-2.el5_3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11255" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.9.0.11-3.el5_3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9369" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.9-1.3E.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10678" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.4.19-1.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10154" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:8.1.11-1.el5_1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9852" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:2.5.STABLE6-3.4E.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9193" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:2.5.STABLE3-6.3E.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11321" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.5.23-0jpp.7.el5_3.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10540" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.25b-1.el4_6.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10640" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.9-1.3E.14.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9851" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.25b-1.el5_1.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9619" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-27.0.2.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10729" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.6-2.el5_3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10902" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.6-EL3.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11132" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.6-2.el4_7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9517" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:0.75-3.2.0</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10612" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.16-1jpp.2.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10550" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.16-1jpp.2.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10095" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.6.0.7-1jpp.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10156" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.3.1-6.RHEL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10159" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:3.1.2-14.RHEL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10271" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.1.3-6.12</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10053" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:3.3.3-10.RHEL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10372" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.13.1-2.0.4.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10045" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">4:4.1-44.EL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9798" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.4-1.EL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9800" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.4-1.EL3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9360" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.2-2.4.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9733" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.2-14</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9714" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">37:1.4.4-1.3.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9889" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">37:1.7.6-1.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10727" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:9.0.115.0-1.el3.with.oss</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9888" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:9.0.115.0-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10732" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:9.0.115.0-1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11262" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-164.6.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11319" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-89.0.18.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9984" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.10-2.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9883" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7a-43.14</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10200" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.6b-22.46</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9656" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.6b-16.46</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10255" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7a-33.21</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10991" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-16.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10114" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.16.0-21.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11070" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.9.0.2-5.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11074" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10-0.10.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10974" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.12-19.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10493" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.0.17-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10735" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.2-3.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10929" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.2-3.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11045" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-26.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10148" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-0.24.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11015" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.12.1.1-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10421" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.9p1-8.RHEL4.20</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9993" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.8.2-7.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9505" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.22-0.rc1.9.10</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10042" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:3.00-11.10</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10071" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.2-22.EL4.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9147" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:3.3.1-3.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9848" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.7-67.9</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9839" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.17-13.3.36</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10087" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.02-9.8</evr>
    </rpminfo_state>
    <patch_state id="oval:org.mitre.oval:ste:2758" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">2</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10074" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.99.4-EL3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10098" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.99.4-EL4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11339" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.8e-12.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11463" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-25.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11021" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.0.24-2.el5_4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11219" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-0.40.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11018" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-45.el4_8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10574" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-0.7.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10590" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-0.5.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10387" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-6.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10244" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-5.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10348" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-0.5.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9881" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-6.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9460" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.1.6-22.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10025" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.1.6-32.EL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9658" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.77-66.13</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10756" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.0.13-0.37.20060817git.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11325" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.6.0.0-1.7.b09.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10841" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:9.3.4-6.P1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9425" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-4.0.2.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10630" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.3-3.el4_7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10710" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.3-EL3.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11399" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.6-3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11418" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.9-8.1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10253" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.8.1-7.EL4.8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9671" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.8-9.EL3.8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9687" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.17-25.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9207" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.17-17.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9553" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.3.4-17</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10021" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.7-47</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9799" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.6.1p2-33.30.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10713" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.1.30-8.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10528" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.3.27_2.2.29-8.el5_1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10511" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.13-8.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9811" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.3.27-8.el5_1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10481" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.3-11.el5_1.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9226" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.23.58-15.RHEL3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9459" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.1.10a-1.RHEL4.1</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2904" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">4</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2845" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2844" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1180" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">4.2.764.1</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9610" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.2-40.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10064" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.1.6-11.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10408" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.9-3.22.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10532" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3p2-24.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10258" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.9p1-8.RHEL4.24</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10286" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-55.0.6.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:8977" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">6:3.3.1-3.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10999" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:3.0.0-3.2.el5_3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11328" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.3-24.el5_3.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11177" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.3.4-14.7.el4_8.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11251" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.3-6.11</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1181" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-15.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9630" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.96.2-8.3E</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10932" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.16.0-26.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11505" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.6.4-8.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11504" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.16.7-7.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11593" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.12-21.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11568" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.6.4-8.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11598" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.14.2-7.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11397" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.0-12.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11185" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.9.2.4-10.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11490" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-58.el4_8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11208" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-0.55.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10738" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.0.1-1jpp.2.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10853" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.15-1jpp.2.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10499" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.15-1jpp.2.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11218" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.3.21-2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11284" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:8.1.18-2.el5_4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11479" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.4.26-1.el4_8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10180" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-78.0.17.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11136" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-128.1.6.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10744" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:3.5.4-13.el5_3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9316" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.0-69.EL</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2842" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^.*LanmanNT.*$</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1365" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.6902</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1364" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9532" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">14:2.1a13-9.RHEL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9808" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">14:3.7.2-7.E3.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9973" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">14:3.8.2-9.RHEL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9938" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">14:0.7.2-7.E3.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9958" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">14:0.8.3-9.RHEL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10457" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:5.0.1-0.rc2.55.el5.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10364" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:5.0.1-0.rc2.55.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10130" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.1-3.RHEL4.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10010" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.1-2.RHEL3.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9560" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-15.0.2.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10292" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.3-7.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9745" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.46-67.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10411" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.52-32.2.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10294" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.2.3-7.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10189" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.46-67.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10389" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.52-32.2.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10487" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.8.0.4-3jpp.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10480" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.4-5.7.0.3.0</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10309" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.4-5.4.25</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2657" version="1" comment="Registry key has a value of 5.1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>5.1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1184" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Service Pack [0-2]$</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1183" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2900.2578</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1182" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">3</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11233" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.1-21.el5_3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11071" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.1.9-10.el4.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10699" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.1.4-12.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:8906" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.4.7-2.RHEL4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9805" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.3.9-2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11201" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.6.1-12.el4_8.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10971" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.5.7-33.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11025" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.8.2-7.el5_3.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11187" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.0.6-1.el4_8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9705" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-22.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11137" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:10.25-2.1.el4_7.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10875" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:10.35-6.1.el5_3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10191" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.3.3-16.rhel4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10041" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.3.3-13.rhel3</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2922" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2921" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2920" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2919" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2918" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2917" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2916" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2915" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2914" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2913" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2895" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^6\.0+\.2600\.0+$</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2421" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1318" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2712.300</version>
    </file_state>
    <registry_state id="oval:org.mitre.oval:ste:1317" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1316" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1315" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1314" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1313" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="not equal" datatype="int">3</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11496" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:83-105.el5_4.27</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10863" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.1-3E.16</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10880" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.1-6.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11283" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.5-8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10755" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.14.9-11.el4_7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10616" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.14.9-5.el5_3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11158" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.0-14.4_7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11005" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.7-4.1.el5_2.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10079" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:10.25-2.EL4.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10262" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.2.7-1jpp.4.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10304" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.2.7-1jpp.4.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10224" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.5.0.3-1jpp.3.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11411" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.0.77-3.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11027" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.1.22-2.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9970" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.6-1.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9771" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.2-2.4.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9924" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">37:1.7.10-1.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9569" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">37:1.7.10-1.1.3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10764" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5.2-6.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11034" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5.2-6.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10186" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-8.1.4.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9607" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-55.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1204" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-15.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11147" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5.10-15</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10838" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.16-12.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11340" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.26-2.1.2.8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11245" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.8.17-9.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10975" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.3.3-14.el5_3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11477" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.11.1-6.el5_4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11361" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.2-4.el4_8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10054" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.99.3-EL4.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9340" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.99.3-EL3.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9721" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-20.0.1.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9502" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:8.1.8-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10129" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.2-36.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10341" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.9-3.18</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10376" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-53.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9711" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-8.1.15.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10629" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-55.0.12.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10163" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.2-33.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9769" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.9-3.15</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10410" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-8.1.10.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10375" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-55.0.2.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9031" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.5.5-1.3EL.0</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11360" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.12.1-11.1.el4_8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11054" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.10.6-10.rhel3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11126" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.15.5-2.1.el5_3.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10135" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.5-0.el4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10215" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10-0.2.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9980" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.3-0.el4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10243" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.3-0.el3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11390" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.1-48.76.el5_5.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11227" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.0.22-2.el5_3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10972" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-23.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10970" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-41.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11154" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-0.37.el3</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2903" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">0</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1305" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.5807</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10746" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.0-128.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10766" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.1-48.41.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10728" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.8.2-1.EL.33.0.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10589" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.8-5.el5_2.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10966" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.8-5.el4_7.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11064" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.8-9.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10918" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.9-1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11133" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.9-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11107" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.9.0.9-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10852" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.0.45-7.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10265" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.0-10.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10891" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.2-3.el5_1.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10749" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.0-3.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11235" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.11-1.el5_5.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11231" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.11-1.el4_8.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11008" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.11-EL3.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10454" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.12a-17.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10483" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.11y-31.24</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10668" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.13-0.45.el5_1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10083" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.8.0-33.0.1.el5</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:1366" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="equals" datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1217" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>6,0,2800,1106</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1185" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2800.1409</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2949" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version operation="equals">9</version>
    </rpminfo_state>
    <uname_state id="oval:org.mitre.oval:ste:2948" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <machine_class operation="pattern match">^i[3-6]86$</machine_class>
    </uname_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2798" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.13-1.90.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2797" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.13-1.90.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10272" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.5-7.0.7.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10361" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.13-2.0.7.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10367" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.3-20.9.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10783" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:8.4.7-3.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10834" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:8.1.4-92.8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10418" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:8.3.5-92.8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10548" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.2-92.8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10802" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:8.4.13-5.el5_1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10596" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:8.3-92.8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10611" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.38.0-92.8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9650" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10.0a-0.30E.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10063" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:4.10-20</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:8986" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-5.0.5.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10510" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:1.2.2-27</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10070" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.13-17</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10489" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.16-3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10430" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:1.2.7-3.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10403" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:1.2.10-7.0.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11556" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-194.8.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10035" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.6.0.5-7.rhel4.15</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11543" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-89.0.20.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11375" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-164.11.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9537" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.4.17-1.RHEL4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10535" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:8.1.9-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10349" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.3.19-1</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2899" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2898" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2886" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">5</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:1219" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1218" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.1.2600.1125</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10214" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.1-16</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10181" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.6-5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11429" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.8.4-1.1.el4_8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11295" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.12.6-1.el4_8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11051" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.1-3.el5_4.8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11211" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7a-33.26</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11560" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.20-4.el4_8.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10873" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.8e-12.el5_4.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11554" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7a-9.el5_4.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10963" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.12.6-1.el5_4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11430" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.7a-43.17.el4_8.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11217" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.8.4-1.el5_4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11195" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.46-77.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11348" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.3-31.el5_4.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10644" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.52-41.ent.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10685" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.0.16-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10908" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.16.0-19.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10269" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-0.19.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10950" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.12-17.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11067" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-14.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10704" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0-2.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10940" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-0.20.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10509" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.9-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10946" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-16.3.el4_6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9925" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.2.4-11.14.el5_1.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9381" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:1.2.2-25</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9374" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.13-15</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11084" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.3.7-7.el5_4.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11250" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.2.12-10.el4_8.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11180" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.2-14.el4_7.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11151" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.5-25.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10850" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.8.0-37.el4_7.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10504" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.2-41.el4_7.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10797" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.12.3-10.el5_3.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10888" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.9-3.22.12</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10864" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.1.6-20.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10636" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.2-48.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11148" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.14-1.el5_3.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10086" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.5.23-0jpp.3.0.2.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10998" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:3.00-20.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10725" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.5.4-4.4.el5_3.9</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10942" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.8.2-7.7.2.el4_7.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11207" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.02-14.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11260" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:3.5.4-12.el5_3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11192" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.22-0.rc1.9.27.el4_7.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11142" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:3.3.1-13.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11099" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.3.7-8.el5_3.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10227" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-8.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10810" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-0.10.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10198" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-0.9.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10659" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-8.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10605" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-9.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10809" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-9.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10094" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10.13-1.EL4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10034" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10.13-1.EL3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10397" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.6.0.0-1.2.b09.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11043" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-128.4.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9088" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:2.5.STABLE6-3.4E.9</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9804" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:2.5.STABLE3-6.3E.13</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9757" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.11.2-24</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11220" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:15.5-16.RHEL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11261" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:15.5-15.1.el5_3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11085" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:15.5-10.RHEL4.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11431" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0-33.8.el5_5.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10874" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.2-14.el4_7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10362" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.2-12.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10497" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.3-4.el5_2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9665" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-0.1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10442" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.12-11.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10301" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10044" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-2.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10536" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-0.1.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10032" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10-0.8.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10390" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.16.0-15.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10799" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-57.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9953" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-67.0.15.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10855" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-53.1.19.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10146" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.2-30.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10072" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.9-3.12</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9496" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.1-15</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9975" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.6-3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10476" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.10-1.4E.12.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10378" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.9-1.3E.13.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10275" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.23c-2.el5.2.0.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11545" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-164.15.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10158" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-42.0.2.EL</evr>
    </rpminfo_state>
    <inetlisteningservers_state id="oval:org.mitre.oval:ste:1482" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <program_name operation="pattern match">^.*httpd.*</program_name>
    </inetlisteningservers_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1191" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.3-0.e3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10816" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.1.17-13.3.55</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11190" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.6.0.0-1.11.b16.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9464" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.4.7-7.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10137" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.2-2.4.8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10108" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">37:1.7.13-1.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9911" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">37:1.7.13-1.1.3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10404" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.5-6.2.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10089" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.2.3-20.3.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10525" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:2.2.13-2.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11073" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-78.0.8.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10722" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-92.1.13.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10606" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.7-67.19</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11115" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.2-22.0.1.EL4.16</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10268" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.0-1.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9203" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.3.10-1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9748" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:7.4.8-1.RHEL4.1</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2766" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="int">1</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2735" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value datatype="version">6.00.2800.1106</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2733" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="not equal" datatype="int">3</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2732" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="not equal" datatype="int">3</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2632" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="not equal" datatype="int">3</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2631" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="not equal" datatype="int">3</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:1193" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2800.1491</version>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1192" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">6.0.2800.1492</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9951" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10.11-1.EL4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9421" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10.11-1.EL3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9899" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10.10-1.EL4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9828" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10.10-1.EL3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10723" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.16-1.el5_4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10555" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-51.el4_8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11458" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.9.0.16-2.el5_4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11252" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.16-4.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11162" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-0.48.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10326" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5-23</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10197" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.3.4-46</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9962" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.7-61</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9035" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.9.2-2.4.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9698" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.4-1.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9741" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">37:1.7.8-1.1.3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9251" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">37:1.7.8-1.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11110" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.1-31.el5_3.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9790" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.46-56.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9628" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.52-22.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9822" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.46-56.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9992" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.52-22.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10505" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:8.1.2-1.el4.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10585" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:8.1.2-1.el3.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10831" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:8.1.2-1.el5.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10246" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version operation="pattern match">^5[^[:digit:]]</version>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:8849" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version operation="pattern match">^3[^[:digit:]]</version>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9429" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version operation="pattern match">^4[^[:digit:]]</version>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9230" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-34.0.1.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10022" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-37.0.1.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9884" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-42.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9997" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">3:2.1.5.1-25.rhel3.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10090" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">3:2.1.5.1-34.rhel4.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9816" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-11.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10709" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.02-11.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10111" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.8.2-7.7.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10285" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">7:3.3.1-6.el4_5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10598" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:3.00-14.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10381" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.4-11.14.el5_1.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10731" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.5.4-4.3.el5_1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10656" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.2-22.0.1.EL4.10</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10643" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.22-0.rc1.9.20.2.el4_5.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10572" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0-33.2.el5_1.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11030" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.2.0.a.20040617-8.el4_7.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10162" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.2.2p1-9.el5_3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11017" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.8.5-5.el5_2.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10995" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.8.1-7.el4_7.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10997" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.6.8-13.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11082" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:2.2.10-1.2.1.el4_7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10973" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:2.0.16-14.1.RHEL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11061" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">2:2.3.3-2.1.el5_2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9280" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">37:1.4.3-3.0.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11370" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.12-1.el5_3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11076" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.12-1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11149" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.9.0.12-1.el5_3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10617" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.2.1-31.8.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9715" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.3.3-6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9197" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.2.5-0.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11257" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-89.0.25.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11574" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-194.3.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10754" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.4-4.el4_6.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10839" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.5-4.el5_1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11016" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.16-12.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10984" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5.10-14</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11075" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.26-2.1.2.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:8783" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.1-1.RHEL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10508" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.18-0.1.beta1.el5_3.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11032" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:1.6.0.0-0.30.b09.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11279" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.5-10.6.0.7.EL4.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11555" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.2-46.2.0.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10953" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.4-5.7.0.6.1.el4_8.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11471" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.3.0-6.11.el5_4.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10578" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.2-1.0.3.el5_1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10507" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.8.2-1.EL.33.0.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10384" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.0-126.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10805" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.25b-1.el4_6.5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10386" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.9-1.3E.15</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10689" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.28-1.el5_2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10779" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:8.15.2-9.4.el5_3.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10426" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.1.8-2.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9943" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.1.8-2.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9882" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.52-12.2.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9908" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.46-46.3.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10037" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.52-12.2.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10014" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.46-46.3.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9853" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.7-1.4.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10164" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.8-1.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10136" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">37:1.7.12-1.1.3.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9740" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">37:1.7.12-1.4.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10441" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.18-8.1.3.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9635" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.2.7-28</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9510" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10.3-0.30E.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9699" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.16.0-14.0.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9935" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.10-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10464" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.10-2.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10352" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.12-10.0.1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10254" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.8-0.2.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10289" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.8-0.2.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10433" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.10-0.1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10331" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10-0.7.el4</evr>
    </rpminfo_state>
    <uname_state id="oval:org.mitre.oval:ste:2303" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <os_release>5.10</os_release>
    </uname_state>
    <patch_state id="oval:org.mitre.oval:ste:207" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:206" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:205" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">10</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:204" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">10</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:203" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">11</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:202" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">11</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:201" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:200" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">01</version>
    </patch_state>
    <uname_state id="oval:org.mitre.oval:ste:2851" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <os_release>5.7</os_release>
    </uname_state>
    <patch_state id="oval:org.mitre.oval:ste:211" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:210" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">03</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:209" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">38</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:208" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">27</version>
    </patch_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10465" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.75-72</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10330" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">8:2.01.0.a32-0.EL3.6</evr>
    </rpminfo_state>
    <uname_state id="oval:org.mitre.oval:ste:2857" version="1" comment="os release that matches Solaris 9" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <os_release>5.9</os_release>
    </uname_state>
    <uname_state id="oval:org.mitre.oval:ste:2309" version="1" comment="processor_type is sparc" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <processor_type>sparc</processor_type>
    </uname_state>
    <uname_state id="oval:org.mitre.oval:ste:2307" version="1" comment="ix86 architecture" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <processor_type operation="pattern match">^i.*86</processor_type>
    </uname_state>
    <patch_state id="oval:org.mitre.oval:ste:215" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:214" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">02</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:213" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">05</version>
    </patch_state>
    <patch_state id="oval:org.mitre.oval:ste:212" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">04</version>
    </patch_state>
    <registry_state id="oval:org.mitre.oval:ste:2582" version="1" comment="The registry key has a value of 5.2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>5.2</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:216" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.2.3790.347</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9240" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">37:1.7.7-1.1.3.4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9208" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.1-1.4.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:2679" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version operation="pattern match">^3.S</version>
    </rpminfo_state>
    <file_state id="oval:org.mitre.oval:ste:1243" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <uexec datatype="boolean">true</uexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1242" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <gexec datatype="boolean">true</gexec>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:1241" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec datatype="boolean">true</oexec>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:1209" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.11.2-24</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:2890" version="1" comment="Registry key has a value of 5.0" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value>5.0</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:2889" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Service Pack ([4-9]|\d{2,})$</value>
    </registry_state>
    <file_state id="oval:org.mitre.oval:ste:220" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <version datatype="version" operation="less than">5.0.2195.7053</version>
    </file_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10524" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-0.3.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9987" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-3.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10250" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-4.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10221" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-0.3.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9563" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:0.82.1-0.RHEL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9083" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10.12-1.EL4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9936" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:0.10.12-1.EL3.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9867" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.4.21-50.EL</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9348" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.6.9-42.0.8.EL</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:231" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^0\.9($|\s).*</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:230" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Mozilla Firefox \(0\.9.*\)</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:229" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^0\.[6-8]($|\s).*</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:228" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Mozilla Thunderbird \(0\.[6-8]\)</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10843" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.2-54.ent</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11362" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.3.9-3.29</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11221" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.1.6-24.el5_4.5</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:233" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^[0-1]\.[0-7]($|\s).*|^[0-1]\.[0-7]\.[0-4]($|\s).*</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:232" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Mozilla (\([0-1]\.[0-7]\)|\([0-1]\.[0-7]\.[0-4]\))</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:235" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^0\.[0-8]($|\s).*</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:234" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Mozilla Thunderbird \(0\.[0-8]\)</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:239" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^0\.[6-9]($|\s).*</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:238" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Mozilla Thunderbird \(0\.[6-9]\)</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:237" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^1\.7($|\s).*|^1\.7\.[0-3]($|\s).*</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:236" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Mozilla (\(1\.7\)|\(1\.[0-7]\.[0-3]\))</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:241" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^0\.[0-9]($|\s).*</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:240" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Mozilla Firefox \(0\.[0-9].*\)</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11038" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5.8-1.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10837" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.5.8-1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9723" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:6.0.7.1-11</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9507" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:5.5.6-14</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:243" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^[0-1]\.0($|\s).*</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:242" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Mozilla Firefox (\(0\.[0-9].*\)|\(1\.0\))</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:247" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^[0-1]\.0($|\s).*</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:246" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Mozilla Thunderbird (\(0\.[0-9]\)|\(1\.0\))</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:245" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^[0-1]\.[0-7]($|\s).*|^[0-1]\.[0-7]\.[0-5]($|\s).*</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:244" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Mozilla (\([0-1]\.[0-7]\)|\([0-1]\.[0-7]\.[0-5]\))</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:249" comment="Firefox version 1.0.1 or earlier is installed" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^[0-1]\.0($|\s).*|^[0-1]\.0\.[0-1]($|\s).*</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:248" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Mozilla Firefox (\(0\.[0-9].*\)|\(1\.0\)|\(1\.0\.[0-1]\))</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10385" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.5-10.6.0.1.EL4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10075" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.1.2-39.2.0.EL3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10342" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.4-5.4.17.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:9683" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">1:2.0.4-5.7.0.1.0</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:251" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^[0-1]\.[0-7]($|\s).*|^[0-1]\.[0-7]\.[0-6]($|\s).*</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:250" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Mozilla (\([0-1]\.[0-7]\)|\([0-1]\.[0-7]\.[0-6]\))</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:253" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Mozilla Firefox (\(0\.[0-9].*\)|\(1\.0\)|\(1\.0\.[0-3]\))</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:252" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Mozilla (\([0-1]\.[0-7]\)|\([0-1]\.[0-7]\.[0-7]\))</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:255" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^[0-1]\.0($|\s).*|^[0-1]\.0\.[0-2]($|\s).*</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:254" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Mozilla Thunderbird (\(0\.[0-9]\)|\(1\.0\)|\(1\.0\.[0-2]\))</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:257" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^[0-1]\.0($|\s).*|^[0-1]\.0\.[0-2]($|\s).*</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:256" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Mozilla Firefox (\(0\.[0-9].*\)|\(1\.0\)|\(1\.0\.[0-2]\))</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:19938" version="1" comment="version matches regex ^3.*$" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version operation="pattern match">^3.*$</version>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:20410" version="1" comment="version matches regex ^4.*$" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version operation="pattern match">^4.*$</version>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11366" version="3" comment="version matches ^4\D.+$" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version operation="pattern match">^4\D.+$</version>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11298" version="3" comment="version matches ^3\D.+$" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version operation="pattern match">^3\D.+$</version>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11060" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.5-1.el5_2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10669" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.5-1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10936" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:2.0.0.19-1.el5_2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11009" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-0.29.el3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10924" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.9.0.5-1.el5_2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10118" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.7.3-1.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10603" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:4.7.3-2.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10978" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.12.2.0-2.el5</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10909" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.0.9-32.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11010" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:1.5.0.12-18.el4</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10990" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.12.2.0-1.el4</evr>
    </rpminfo_state>
    <registry_state id="oval:org.mitre.oval:ste:261" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^[0-1]\.0($|\s).*|^[0-1]\.0\.[0-4]($|\s).*</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:260" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Mozilla Firefox (\(0\.[0-9].*\)|\(1\.0\)|\(1\.0\.[0-4]\))</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:259" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^[0-1]\.[0-7]($|\s).*|^[0-1]\.[0-7]\.[0-8]($|\s).*</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:258" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^Mozilla (\([0-1]\.[0-7]\)|\([0-1]\.[0-7]\.[0-8]\))</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:263" comment="Firefox version 1.0.3 or earlier is installed" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^[0-1]\.0($|\s).*|^[0-1]\.0\.[0-3]($|\s).*</value>
    </registry_state>
    <registry_state id="oval:org.mitre.oval:ste:262" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows">
      <value operation="pattern match">^[0-1]\.[0-7]($|\s).*|^[0-1]\.[0-7]\.[0-7]($|\s).*</value>
    </registry_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:20137" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version operation="pattern match">^5.*$</version>
    </rpminfo_state>
    <family_state id="oval:org.mitre.oval:ste:3907" version="1" comment="Unix family" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <family>unix</family>
    </family_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:11314" version="3" comment="version matches ^5\D.+$" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version operation="pattern match">^5\D.+$</version>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:10923" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="less than">0:3.0.3-41.el5_1.5</evr>
    </rpminfo_state>
    <uname_state id="oval:org.mitre.oval:ste:2941" version="1" comment="os release that matches Solaris 8" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <os_release>5.8</os_release>
    </uname_state>
    <patch_state id="oval:org.mitre.oval:ste:2930" version="1" operator="AND" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris">
      <version operation="greater than or equal" datatype="int">38</version>
    </patch_state>
    <file_state id="oval:org.mitre.oval:ste:2929" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <suid operation="equals" datatype="boolean">true</suid>
    </file_state>
    <file_state id="oval:org.mitre.oval:ste:2928" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <oexec operation="equals" datatype="boolean">true</oexec>
    </file_state>
  </states>
  <variables>
    <local_variable id="oval:org.mitre.oval:var:248" version="1" comment="Windows system 32 directory" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:219"/>
        <literal_component>\system32\Windows Media\Server</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:363" version="2" comment="Microsft shared Visual Basic directory" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:281"/>
        <literal_component>\Microsoft Shared\VBA\VBA6</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:759" version="1" comment="Microsoft Agent directory" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:219"/>
        <literal_component>\msagent</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:817" version="1" comment="Full file path to kavfm.sys" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:7697" item_field="value"/>
        <literal_component>security\kxede</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:592" version="2" comment="Avast! directory" datatype="string">
      <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:7262"/>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1060" version="1" comment="Microsoft Office Servers\12.0\Bin - for Search Server" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:23273" item_field="value"/>
        <literal_component>12.0\BIN</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1468" version="1" comment="Microsft shared Visual Basic directory" datatype="string">
      <object_component object_ref="oval:org.mitre.oval:obj:23624" item_field="value"/>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:425" version="1" comment="..." datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:5478"/>
        <literal_component>\bin</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1041" version="1" comment=".NET 1.0 Framework directory" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:219"/>
        <literal_component>\Microsoft.NET\Framework\v1.0.3705</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:205" datatype="string" comment="Windows system 32 directory" version="1">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:219"/>
        <literal_component>InetPub\scripts\proxy</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:249" datatype="string" comment="Windows system 32 directory" version="1">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:219"/>
        <literal_component>\System\Ole DB folder</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:250" datatype="string" comment="Microsoft ISA Server-related install directory" version="1">
      <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:39"/>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:244" version="1" comment="Windows %SYSTEMROOT% directory" datatype="string">
      <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:219"/>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:208" version="2" comment="Microsoft ISA Server directory" datatype="string">
      <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:39"/>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:209" version="2" comment="Base path to vgx.dll, part of Vector Markup Language (VML) implementation." datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:281"/>
        <literal_component>\Microsoft Shared\VGX</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:253" version="1" comment="Windows system 32 directory" datatype="string">
      <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:1525"/>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:210" version="1" comment="Windows system 32 directory" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:329"/>
        <literal_component>\bin</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1061" version="1" comment=".NET 2.0 Framework directory" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:219"/>
        <literal_component>\Microsoft.NET\Framework\v2.0.50727</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:254" version="1" comment="Windows system 32 directory" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:281"/>
        <literal_component>\Microsoft Shared\web server extensions\50\bin</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:255" version="1" comment="Windows system 32 directory" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:281"/>
        <literal_component>\Microsoft Shared\web server extensions\40\bin</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1051" version="1" comment=".NET 1.1 Framework directory" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:219"/>
        <literal_component>\Microsoft.NET\Framework\v1.1.4322</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:256" version="1" comment="Windows system 32 directory" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:281"/>
        <literal_component>\Microsoft Shared\web server extensions\40\isapi</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:214" version="1" comment="Install directory of MSO.DLL for Office 11" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:281"/>
        <literal_component>\Microsoft Shared\OFFICE11</literal_component>
      </concat>
    </local_variable>
    <local_variable comment="The shared WMI directory." datatype="string" id="oval:org.mitre.oval:var:443" version="1">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:281"/>
        <literal_component>\Microsoft Shared\WMI</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1431" version="1" comment="Variable holds the path to ConversionServer (Sharepoint 2013)" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:26495" item_field="value"/>
        <literal_component>\15.0\WebServices\ConversionServices\1033</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1672" version="1" comment="Full path to WordServer\Core" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:26495" item_field="value"/>
        <literal_component>\15.0\WebServices\ConversionServices</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1902" version="1" comment="Variable holds the path to VisioGraphicsServer\bin" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:26037" item_field="value"/>
        <literal_component>\15.0\WebServices\Shared\VisioGraphicsServer\Bin</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1921" version="1" comment="Variable holds the path to Word Server folder of Microsoft Sharepoint Server 2010" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:23943" item_field="value"/>
        <literal_component>\14.0\WebServices\WordServer\Core</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1870" version="1" comment="Variable holds the path to BIN folder(Sharepoint 2013)" datatype="string">
      <object_component object_ref="oval:org.mitre.oval:obj:44137" item_field="value"/>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1930" version="1" comment="Full path to Microsoft Lync Server's Deployment folder" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:42038" item_field="value"/>
        <literal_component>\Deployment\de-DE</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1370" version="1" comment="Full path to Microsoft Lync Server's Response Group folder" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:42038" item_field="value"/>
        <literal_component>\Application Host\Applications\Response Group</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1410" version="1" comment="Full path to Microsoft Lync Server's Core folder" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:42038" item_field="value"/>
        <literal_component>\Server\Core</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:953" version="1" comment="Variable holds the install path of Microsoft Service Bus 1.1" datatype="string">
      <object_component object_ref="oval:org.mitre.oval:obj:39035" item_field="value"/>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1938" version="1" comment="Full path to WordServer\Core" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:39236" item_field="value"/>
        <literal_component>\14.0\WebServices\ConversionService\Bin\Converter</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1227" version="1" comment="Full path to foundation 2013 Server Setup Controller WSS.en-us folder" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:281" item_field="value"/>
        <literal_component>\Microsoft Shared\SERVER15\Server Setup Controller\WSS.en-us</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1886" version="1" comment="Full path to foundation 2013 Server Setup Controller folder" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:281" item_field="value"/>
        <literal_component>\Microsoft Shared\SERVER15\Server Setup Controller</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:202" version="2" comment="SysWOW64 directory under the %SystemRoot% directory" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:219"/>
        <literal_component>\syswow64</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:257" datatype="string" comment="Microsoft SQL Server 2000 (8.0) SharedCode directory" version="1">
      <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:1558"/>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:743" version="1" comment="Microsft OFFICE11 directory" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:281"/>
        <literal_component>\Microsoft Shared\OFFICE11</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1526" version="1" comment="Variable holds the path to TFS Bin Directory (2013)" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:28866" item_field="value"/>
        <literal_component>Application Tier\Web Services\bin</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1064" version="1" comment="Variable holds the path to Msoserver.Dll" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:30150" item_field="value"/>
        <literal_component>\PPTConversionService\bin\Converter</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1658" version="1" comment="Variable holds the bin directory of Excel Services in SharePoint Server 2013" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:26037" item_field="value"/>
        <literal_component>\15.0\bin</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1402" version="1" comment="Path to Converter Directory in Web Apps 2013" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:23503" item_field="value"/>
        <literal_component>\15.0\WebServices\ConversionService\Bin\Converter</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:583" version="1" comment="The Microsoft Visual Studio 2002 install directory" datatype="string">
      <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:5692"/>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:129" version="1" comment="The Microsoft Visual Studio 2005 install directory" datatype="string">
      <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:5581"/>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:130" version="1" comment="The Microsoft Visual Studio 2003 install directory" datatype="string">
      <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:5745"/>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1682" version="1" comment="sharepoint server 2013" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:26495" item_field="value"/>
        <literal_component>\15.0\bin</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1569" version="2" comment="Default comment, please change" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:281" item_field="value"/>
        <literal_component>\Microsoft Shared\web server extensions\15\BIN</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1263" version="1" comment="Variable holds the path to Converter Directory in Web Apps 2010" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:23950" item_field="value"/>
        <literal_component>\14.0\WebServices\ConversionService\Bin\Converter</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1614" version="1" comment="Full path to WordServer\Core" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:23943" item_field="value"/>
        <literal_component>\14.0\WebServices\WordServer\Core</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1738" version="1" comment="Var holds the path to Exchange Server\V15\Bin directory" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:26763" item_field="value"/>
        <literal_component>\Bin</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:227" comment="..." version="1" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:574"/>
        <literal_component>\web server extensions\50\isapi\_vti_adm</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1887" version="2" comment="Common pattern for GDI+ directory" datatype="string">
      <concat>
        <literal_component>^</literal_component>
        <escape_regex>
          <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:219"/>
        </escape_regex>
        <literal_component>\\winsxs\\(x86|amd64)_microsoft\.windows\.gdiplus_6595b64144ccf1df_.+$|\\WinSxS\\(x86|amd64)_Microsoft\.Windows\.GdiPlus_6595b64144ccf1df_.+$</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1592" version="1" comment="Full path to Windowslivewriter.exe" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:24228" item_field="value"/>
        <literal_component>Writer</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1376" version="1" comment="Var holds the path to Exchange Server\V14\Bin directory" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:24068" item_field="value"/>
        <literal_component>\Bin</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1555" version="1" comment="Var holds the path to Exchange Server\Bin directory" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:23474" item_field="value"/>
        <literal_component>\Bin</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1340" version="1" comment="Var holds path for SMS/SCCM bin directory" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:23949" item_field="value"/>
        <literal_component>\bin\i386</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1065" version="2" comment="Variable holds the path to Visual Studio Team Foundation Server 2010" datatype="string">
      <concat>
        <literal_component>^</literal_component>
        <escape_regex>
          <object_component object_ref="oval:org.mitre.oval:obj:219" item_field="value"/>
        </escape_regex>
        <literal_component>\\assembly\\GAC_MSIL\\Microsoft\.TeamFoundation\.WebAccess\\10\.0\.0\.0__\w+$</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1687" version="1" comment="Variable holds the path to SOCM Installation directory" datatype="string">
      <object_component object_ref="oval:org.mitre.oval:obj:23919" item_field="value"/>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1086" version="1" comment="Full file path to Microsoft.office.server.dll" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:281" item_field="value"/>
        <literal_component>\Microsoft Shared\web server extensions\15\ISAPI</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1138" version="1" comment="Full file path to Microsoft.office.server.native.dll" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:23943" item_field="value"/>
        <literal_component>\14.0\bin</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1390" version="2" comment="Full file path to Onfda.dll" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:281" item_field="value"/>
        <literal_component>\Microsoft Shared\web server extensions\14\BIN</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:230" version="1" comment="Excel Viewer install location" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:660"/>
        <literal_component>OFFICE11</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1095" version="1" comment="Var holds file location for Attendantconsole.exe" datatype="string">
      <object_component object_ref="oval:org.mitre.oval:obj:23492" item_field="value"/>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1463" version="1" comment="Var holds file location for communicator.exe" datatype="string">
      <object_component object_ref="oval:org.mitre.oval:obj:23858" item_field="value"/>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1779" version="2" comment="Var holds file location for Ogl.dll (Lync 2010 Attendee for user)" datatype="string">
      <object_component object_ref="oval:org.mitre.oval:obj:23843" item_field="value"/>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1822" version="1" comment="Var holds file location for Ogl.dll (for Lync 2010 attendee-admin)" datatype="string">
      <object_component object_ref="oval:org.mitre.oval:obj:23972" item_field="value"/>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1320" version="1" comment="Object holds the path to Exchange Server 2007" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:23606" item_field="value"/>
        <literal_component>ClientAccess\Owa\Bin\DocumentViewing</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1381" version="1" comment="Variable holds the installation path to bin folder of Search server" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:24125" item_field="value"/>
        <literal_component>bin</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1542" version="1" comment="Variable holds the path to exchange server directory" datatype="string">
      <concat>
        <object_component object_ref="oval:org.mitre.oval:obj:23243" item_field="value"/>
        <literal_component>ClientAccess\Owa\Bin\DocumentViewing</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1258" version="1" comment="Lotus Notes installation directory" datatype="string">
      <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:15861"/>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:212" version="2" comment="The path to the msadc directory under the the program files directory." datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:281"/>
        <literal_component>\System\msadc</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:235" comment="..." version="1" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:329"/>
        <literal_component>\RES</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1882" version="1" comment="The VirtualBox directory of versions before 3.0.6" datatype="string">
      <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:28435"/>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1659" version="1" comment="The VirtualBox directory of versions 3.0.6 through 3.1.8" datatype="string">
      <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:28138"/>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1798" version="1" comment="Microsoft Host Integration Server 2006\system folder in Program Files" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:16279"/>
        <literal_component>system</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1256" version="1" comment="Microsoft Host Integration Server 2004\system folder" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:16393"/>
        <literal_component>system</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1461" version="1" comment="Microsoft Host Integration Server 2010\system folder" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:16376"/>
        <literal_component>system</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:834" version="1" comment="The SharePoint BIN directory" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:281"/>
        <literal_component>\Microsoft Shared\web server extensions\12\BIN</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1050" version="1" comment="Microsoft Shared\Web Server Extensions\14\ISAPI directory" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:281"/>
        <literal_component>\Microsoft Shared\Web Server Extensions\14\ISAPI</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1534" version="1" comment="Microsoft Forefront Threat Management Gateway Client InstallRoot" datatype="string">
      <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:15320"/>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1088" version="1" comment="The VirtualBox directory of versions 3.2.0 and greater" datatype="string">
      <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:28316"/>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:237" datatype="string" comment="..." version="1">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:219"/>
        <literal_component>\Help\SBSI\Training</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:1277" version="1" comment="File path to Novell File Reporter" datatype="string">
      <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:15643"/>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:222" version="2" comment="..." datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:281"/>
        <literal_component>\Microsoft Shared\CDO</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:713" version="1" comment="The shared Office XP directory" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:281"/>
        <literal_component>\Microsoft Shared\OFFICE10</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:201" version="1" comment="Windows system 32 drivers directory" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:219"/>
        <literal_component>\System32\drivers</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:11" version="1" comment="Microsoft Office Servers\12.0\Bin" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:12125"/>
        <literal_component>12.0\Bin</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:239" version="2" comment="Windows system 32 directory" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:281"/>
        <literal_component>\Microsoft Shared\TextConv</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:241" version="1" comment="Windows system 32 directory" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:281"/>
        <literal_component>\Crystal Decisions\1.1\Managed</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:251" version="1" comment="Windows system 32 directory" datatype="string">
      <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:1486"/>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:206" version="2" comment="Windows common files\microsoft shared\triedit  directory" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:281"/>
        <literal_component>\microsoft shared\triedit</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:243" version="1" comment="Windows system 32 directory" datatype="string">
      <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:842"/>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:203" version="1" comment="inetsrv directory in the Windows system 32 directory" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:219"/>
        <literal_component>\system32\inetsrv</literal_component>
      </concat>
    </local_variable>
    <local_variable id="oval:org.mitre.oval:var:200" version="1" comment="Windows System32 directory" datatype="string">
      <concat>
        <object_component item_field="value" object_ref="oval:org.mitre.oval:obj:219"/>
        <literal_component>\System32</literal_component>
      </concat>
    </local_variable>
  </variables>
</oval_definitions>